@gw2me/client 0.7.0 → 0.8.0

package/dist/dpop.d.ts

@@ -0,0 +1,11 @@
+declare function generateDPoPKeyPair(): Promise<CryptoKeyPair>;
+interface DPoPOptions {
+    htm: 'GET' | 'POST' | (string & {});
+    htu: string;
+    nonce?: string;
+    accessToken?: string;
+}
+declare function createDPoPJwt({ htm, htu, nonce, accessToken }: DPoPOptions, keyPair: CryptoKeyPair): Promise<string>;
+declare function jwkThumbprint(key: CryptoKey): Promise<string>;
+
+export { createDPoPJwt, generateDPoPKeyPair, jwkThumbprint };

package/dist/dpop.js

@@ -0,0 +1 @@
+"use strict";var u=Object.defineProperty;var d=Object.getOwnPropertyDescriptor;var w=Object.getOwnPropertyNames;var l=Object.prototype.hasOwnProperty;var h=(t,r)=>{for(var e in r)u(t,e,{get:r[e],enumerable:!0})},A=(t,r,e,o)=>{if(r&&typeof r=="object"||typeof r=="function")for(let n of w(r))!l.call(t,n)&&n!==e&&u(t,n,{get:()=>r[n],enumerable:!(o=d(r,n))||o.enumerable});return t};var P=t=>A(u({},"__esModule",{value:!0}),t);var E={};h(E,{createDPoPJwt:()=>m,generateDPoPKeyPair:()=>b,jwkThumbprint:()=>C});module.exports=P(E);function a(t){let r=t instanceof ArrayBuffer?new Uint8Array(t):t;return btoa(String.fromCharCode(...r)).replace(/\+/g,"-").replace(/\//g,"_").replace(/=+$/,"")}function b(){return crypto.subtle.generateKey({name:"ECDSA",namedCurve:"P-256"},!1,["sign"])}async function m({htm:t,htu:r,nonce:e,accessToken:o},n){let c=JSON.stringify({alg:"ES256",typ:"dpop+jwt",jwk:await p(n.publicKey)}),y=JSON.stringify({iat:Math.floor(Date.now()/1e3),jti:a(crypto.getRandomValues(new Uint8Array(32))),htm:t,htu:r,nonce:e,ath:o?a(await crypto.subtle.digest("SHA-256",i(o))):void 0}),s=`${a(i(c))}.${a(i(y))}`,g={name:"ECDSA",hash:"SHA-256"},f=a(await crypto.subtle.sign(g,n.privateKey,i(s)));return`${s}.${f}`}var S=new TextEncoder;function i(t){return S.encode(t)}async function p(t){let{kty:r,e,k:o,n,x:c,y,crv:s}=await crypto.subtle.exportKey("jwk",t);return{e,k:o,crv:s,kty:r,n,x:c,y}}async function C(t){let r=JSON.stringify(await p(t)),e=await crypto.subtle.digest("SHA-256",i(r));return a(e)}0&&(module.exports={createDPoPJwt,generateDPoPKeyPair,jwkThumbprint});

package/dist/index.d.ts

@@ -48,11 +48,14 @@ interface SubtokenResponse {
     subtoken: string;
     expiresAt: string;
 }
+interface ApiOptions extends Options {
+    dpopKeyPair?: CryptoKeyPair;
+}
 declare class Gw2MeApi {
     #private;
     private access_token;
     private options?;
-    constructor(access_token: string, options?: Partial<Options> | undefined);
+    constructor(access_token: string, options?: Partial<ApiOptions> | undefined);
     user(): Promise<UserResponse>;
     saveSettings(settings: unknown): Promise<void>;
     accounts(): Promise<AccountsResponse>;
@@ -83,25 +86,33 @@ interface AuthorizationUrlParams {
     state?: string;
     code_challenge?: string;
     code_challenge_method?: 'S256';
+    dpop_jkt?: string;
     prompt?: 'none' | 'consent';
     include_granted_scopes?: boolean;
     verified_accounts_only?: boolean;
 }
+interface PushedAuthorizationRequestParams extends AuthorizationUrlParams {
+    dpopKeyPair?: CryptoKeyPair;
+}
 interface AuthorizationUrlRequestUriParams {
     request_uri: string;
 }
 interface AuthTokenParams {
     code: string;
+    token_type?: 'Bearer' | 'DPoP';
     redirect_uri: string;
     code_verifier?: string;
+    dpopKeyPair?: CryptoKeyPair;
 }
 interface RefreshTokenParams {
     refresh_token: string;
+    refresh_token_type?: 'Bearer' | 'DPoP';
+    dpopKeyPair?: CryptoKeyPair;
 }
 interface TokenResponse {
     access_token: string;
     issued_token_type: 'urn:ietf:params:oauth:token-type:access_token';
-    token_type: 'Bearer';
+    token_type: 'Bearer' | 'DPoP';
     expires_in: number;
     refresh_token?: string;
     scope: string;
@@ -112,15 +123,30 @@ interface RevokeTokenParams {
 interface IntrospectTokenParams {
     token: string;
 }
-type IntrospectTokenResponse = {
-    active: true;
-    scope: string;
-    client_id: string;
-    token_type: 'Bearer';
-    exp?: number;
-} | {
-    active: false;
-};
+declare namespace IntrospectTokenResponse {
+    interface Inactive {
+        active: false;
+    }
+    namespace Active {
+        interface Common {
+            active: true;
+            scope: string;
+            client_id: string;
+            exp?: number;
+        }
+        interface Bearer extends Common {
+            token_type: 'Bearer';
+        }
+        interface DPoP extends Common {
+            token_type: 'DPoP';
+            cnf: {
+                jkt: string;
+            };
+        }
+    }
+    type Active = Active.Bearer | Active.DPoP;
+}
+type IntrospectTokenResponse = IntrospectTokenResponse.Inactive | IntrospectTokenResponse.Active;
 interface PushedAuthorizationRequestResponse {
     request_uri: string;
     expires_in: number;
@@ -128,11 +154,11 @@ interface PushedAuthorizationRequestResponse {
 declare class Gw2MeClient {
     #private;
     private options?;
-    constructor({ client_id, client_secret }: ClientInfo, options?: Partial<Options> | undefined);
+    constructor(client: ClientInfo, options?: Partial<Options> | undefined);
     getAuthorizationUrl(params: AuthorizationUrlParams | AuthorizationUrlRequestUriParams): string;
-    pushAuthorizationRequest(params: AuthorizationUrlParams): Promise<PushedAuthorizationRequestResponse>;
-    getAccessToken({ code, redirect_uri, code_verifier }: AuthTokenParams): Promise<TokenResponse>;
-    refreshToken({ refresh_token }: RefreshTokenParams): Promise<TokenResponse>;
+    pushAuthorizationRequest(params: PushedAuthorizationRequestParams): Promise<PushedAuthorizationRequestResponse>;
+    getAccessToken({ code, token_type, redirect_uri, code_verifier, dpopKeyPair }: AuthTokenParams): Promise<TokenResponse>;
+    refreshToken({ refresh_token, refresh_token_type, dpopKeyPair }: RefreshTokenParams): Promise<TokenResponse>;
     revokeToken({ token }: RevokeTokenParams): Promise<void>;
     introspectToken({ token }: IntrospectTokenParams): Promise<IntrospectTokenResponse>;
     /**
@@ -145,7 +171,7 @@ declare class Gw2MeClient {
         code: string;
         state: string | undefined;
     };
-    api(access_token: string): Gw2MeApi;
+    api(access_token: string, options?: Partial<Omit<ApiOptions, keyof Options>>): Gw2MeApi;
     get fedCM(): Gw2MeFedCM;
 }
 
@@ -158,4 +184,4 @@ declare class Gw2MeOAuthError extends Gw2MeError {
     constructor(error: string, error_description?: string | undefined, error_uri?: string | undefined);
 }
 
-export { type AccountsResponse, type AuthTokenParams, type AuthorizationUrlParams, type AuthorizationUrlRequestUriParams, type ClientInfo, type FedCMRequestOptions, Gw2MeApi, Gw2MeClient, Gw2MeError, Gw2MeFedCM, Gw2MeOAuthError, type IntrospectTokenParams, type IntrospectTokenResponse, type Options, type PushedAuthorizationRequestResponse, type RefreshTokenParams, type RevokeTokenParams, Scope, type SubtokenOptions, type SubtokenResponse, type TokenResponse, type UserResponse };
+export { type AccountsResponse, type ApiOptions, type AuthTokenParams, type AuthorizationUrlParams, type AuthorizationUrlRequestUriParams, type ClientInfo, type FedCMRequestOptions, Gw2MeApi, Gw2MeClient, Gw2MeError, Gw2MeFedCM, Gw2MeOAuthError, type IntrospectTokenParams, IntrospectTokenResponse, type Options, type PushedAuthorizationRequestParams, type PushedAuthorizationRequestResponse, type RefreshTokenParams, type RevokeTokenParams, Scope, type SubtokenOptions, type SubtokenResponse, type TokenResponse, type UserResponse };

package/dist/index.js

@@ -1 +1 @@
-"use strict";var U=Object.defineProperty;var B=Object.getOwnPropertyDescriptor;var G=Object.getOwnPropertyNames;var W=Object.prototype.hasOwnProperty;var q=r=>{throw TypeError(r)};var j=(r,e)=>{for(var t in e)U(r,t,{get:e[t],enumerable:!0})},L=(r,e,t,n)=>{if(e&&typeof e=="object"||typeof e=="function")for(let s of G(e))!W.call(r,s)&&s!==t&&U(r,s,{get:()=>e[s],enumerable:!(n=B(e,s))||n.enumerable});return r};var E=r=>L(U({},"__esModule",{value:!0}),r);var z=(r,e,t)=>e.has(r)||q("Cannot "+t);var i=(r,e,t)=>(z(r,e,"read from private field"),t?t.call(r):e.get(r)),g=(r,e,t)=>e.has(r)?q("Cannot add the same private member more than once"):e instanceof WeakSet?e.add(r):e.set(r,t),_=(r,e,t,n)=>(z(r,e,"write to private field"),n?n.call(r,t):e.set(r,t),t),c=(r,e,t)=>(z(r,e,"access private method"),t);var M={};j(M,{Gw2MeApi:()=>P,Gw2MeClient:()=>I,Gw2MeError:()=>p,Gw2MeOAuthError:()=>y,Scope:()=>O});module.exports=E(M);var O=(o=>(o.Identify="identify",o.Email="email",o.Accounts="accounts",o.Accounts_Verified="accounts.verified",o.Accounts_DisplayName="accounts.displayName",o.GW2_Account="gw2:account",o.GW2_Inventories="gw2:inventories",o.GW2_Characters="gw2:characters",o.GW2_Tradingpost="gw2:tradingpost",o.GW2_Wallet="gw2:wallet",o.GW2_Unlocks="gw2:unlocks",o.GW2_Pvp="gw2:pvp",o.GW2_Wvw="gw2:wvw",o.GW2_Builds="gw2:builds",o.GW2_Progression="gw2:progression",o.GW2_Guilds="gw2:guilds",o))(O||{});var p=class extends Error{},y=class extends p{constructor(t,n,s){super(`Received ${t}`+(n?`: ${n}`:"")+(s?` (${s})`:""));this.error=t;this.error_description=n;this.error_uri=s}};async function f(r){if(await C(r),!(r.headers.get("Content-Type")==="application/json"))throw new p("gw2.me did not return a valid JSON response");return r.json()}async function C(r){if(!r.ok){let e;throw r.headers.get("Content-Type")==="application/json"&&(e=(await r.json()).error_description),new p(`gw2.me returned an error: ${e??"Unknown error"}`)}}var k,R,P=class{constructor(e,t){this.access_token=e;this.options=t;g(this,k)}user(){return fetch(c(this,k,R).call(this,"api/user"),{headers:{Authorization:`Bearer ${this.access_token}`},cache:"no-store"}).then(f)}saveSettings(e){return fetch(c(this,k,R).call(this,"api/user/settings"),{method:"POST",headers:{Authorization:`Bearer ${this.access_token}`,"Content-Type":"application/json"},body:JSON.stringify(e)}).then(C)}accounts(){return fetch(c(this,k,R).call(this,"api/accounts"),{headers:{Authorization:`Bearer ${this.access_token}`},cache:"no-store"}).then(f)}subtoken(e,t){let n=c(this,k,R).call(this,`api/accounts/${e}/subtoken`);return t?.permissions&&n.searchParams.set("permissions",t.permissions.join(",")),fetch(n,{headers:{Authorization:`Bearer ${this.access_token}`},cache:"no-store"}).then(f)}};k=new WeakSet,R=function(e){return new URL(e,this.options?.url||"https://gw2.me/")};var x,b,v=class{constructor(e,t){g(this,x);g(this,b);_(this,x,e),_(this,b,t)}isSupported(){return typeof window<"u"&&"IdentityCredential"in window}request({scopes:e,mediation:t,signal:n,mode:s,code_challenge:d,code_challenge_method:m}){if(!this.isSupported())throw new p("FedCM is not supported");return navigator.credentials.get({mediation:t,signal:n,identity:{providers:[{configURL:i(this,x),clientId:i(this,b),fields:[e.includes("identify")&&"name",e.includes("email")&&"email"].filter(Boolean),nonce:`${m}:${d}`,params:{scope:e.join(" "),code_challenge:d,code_challenge_method:m}}],mode:s}})}};x=new WeakMap,b=new WeakMap;var a,u,A,h,l,I=class{constructor({client_id:e,client_secret:t},n){this.options=n;g(this,h);g(this,a);g(this,u);g(this,A);_(this,a,e),_(this,u,t),_(this,A,new v(c(this,h,l).call(this,"/fed-cm/config.json"),i(this,a)))}getAuthorizationUrl(e){let t="request_uri"in e?new URLSearchParams({client_id:i(this,a),response_type:"code",request_uri:e.request_uri}):S(i(this,a),e);return c(this,h,l).call(this,`/oauth2/authorize?${t.toString()}`).toString()}async pushAuthorizationRequest(e){let t=S(i(this,a),e),n={"Content-Type":"application/x-www-form-urlencoded"};return i(this,u)&&(n.Authorization=`Basic ${btoa(`${i(this,a)}:${i(this,u)}`)}`),await fetch(c(this,h,l).call(this,"/oauth2/par"),{method:"POST",headers:n,body:t,cache:"no-store"}).then(f)}async getAccessToken({code:e,redirect_uri:t,code_verifier:n}){let s=new URLSearchParams({grant_type:"authorization_code",code:e,client_id:i(this,a),redirect_uri:t}),d={"Content-Type":"application/x-www-form-urlencoded"};return i(this,u)&&(d.Authorization=`Basic ${btoa(`${i(this,a)}:${i(this,u)}`)}`),n&&s.set("code_verifier",n),await fetch(c(this,h,l).call(this,"/api/token"),{method:"POST",headers:d,body:s,cache:"no-store"}).then(f)}async refreshToken({refresh_token:e}){if(!i(this,u))throw new p("client_secret required");let t=new URLSearchParams({grant_type:"refresh_token",refresh_token:e,client_id:i(this,a)}),n={"Content-Type":"application/x-www-form-urlencoded",Authorization:`Basic ${btoa(`${i(this,a)}:${i(this,u)}`)}`};return await fetch(c(this,h,l).call(this,"/api/token"),{method:"POST",headers:n,body:t,cache:"no-store"}).then(f)}async revokeToken({token:e}){let t=new URLSearchParams({token:e}),n={"Content-Type":"application/x-www-form-urlencoded"};i(this,u)&&(n.Authorization=`Basic ${btoa(`${i(this,a)}:${i(this,u)}`)}`),await fetch(c(this,h,l).call(this,"/api/token/revoke"),{method:"POST",cache:"no-store",headers:n,body:t}).then(f)}async introspectToken({token:e}){let t=new URLSearchParams({token:e}),n={"Content-Type":"application/x-www-form-urlencoded"};return i(this,u)&&(n.Authorization=`Basic ${btoa(`${i(this,a)}:${i(this,u)}`)}`),await fetch(c(this,h,l).call(this,"/api/token/introspect"),{method:"POST",cache:"no-store",headers:n,body:t}).then(f)}parseAuthorizationResponseSearchParams(e){let t=c(this,h,l).call(this,"/").origin,n=e.get("iss");if(!n)throw new p("Issuer Identifier verification failed: parameter `iss` is missing");if(n!==t)throw new p(`Issuer Identifier verification failed: expected "${t}", got "${n}"`);let s=e.get("error");if(s){let T=e.get("error_description")??void 0,$=e.get("error_uri")??void 0;throw new y(s,T,$)}let d=e.get("code");if(!d)throw new p("Parameter `code` is missing");let m=e.get("state")||void 0;return{code:d,state:m}}api(e){return new P(e,this.options)}get fedCM(){return i(this,A)}};a=new WeakMap,u=new WeakMap,A=new WeakMap,h=new WeakSet,l=function(e){return new URL(e,this.options?.url||"https://gw2.me/")};function S(r,{redirect_uri:e,scopes:t,state:n,code_challenge:s,code_challenge_method:d,prompt:m,include_granted_scopes:T,verified_accounts_only:$}){let w=new URLSearchParams({client_id:r,response_type:"code",redirect_uri:e,scope:t.join(" ")});return n&&w.append("state",n),s&&d&&(w.append("code_challenge",s),w.append("code_challenge_method",d)),m&&w.append("prompt",m),T&&w.append("include_granted_scopes","true"),$&&w.append("verified_accounts_only","true"),w}0&&(module.exports={Gw2MeApi,Gw2MeClient,Gw2MeError,Gw2MeOAuthError,Scope});
+"use strict";var z=Object.defineProperty;var J=Object.getOwnPropertyDescriptor;var L=Object.getOwnPropertyNames;var M=Object.prototype.hasOwnProperty;var E=r=>{throw TypeError(r)};var N=(r,e)=>{for(var t in e)z(r,t,{get:e[t],enumerable:!0})},H=(r,e,t,n)=>{if(e&&typeof e=="object"||typeof e=="function")for(let o of L(e))!M.call(r,o)&&o!==t&&z(r,o,{get:()=>e[o],enumerable:!(n=J(e,o))||n.enumerable});return r};var F=r=>H(z({},"__esModule",{value:!0}),r);var D=(r,e,t)=>e.has(r)||E("Cannot "+t);var c=(r,e,t)=>(D(r,e,"read from private field"),t?t.call(r):e.get(r)),m=(r,e,t)=>e.has(r)?E("Cannot add the same private member more than once"):e instanceof WeakSet?e.add(r):e.set(r,t),k=(r,e,t,n)=>(D(r,e,"write to private field"),n?n.call(r,t):e.set(r,t),t),s=(r,e,t)=>(D(r,e,"access private method"),t);var Q={};N(Q,{Gw2MeApi:()=>v,Gw2MeClient:()=>$,Gw2MeError:()=>f,Gw2MeOAuthError:()=>T,Scope:()=>j});module.exports=F(Q);var j=(d=>(d.Identify="identify",d.Email="email",d.Accounts="accounts",d.Accounts_Verified="accounts.verified",d.Accounts_DisplayName="accounts.displayName",d.GW2_Account="gw2:account",d.GW2_Inventories="gw2:inventories",d.GW2_Characters="gw2:characters",d.GW2_Tradingpost="gw2:tradingpost",d.GW2_Wallet="gw2:wallet",d.GW2_Unlocks="gw2:unlocks",d.GW2_Pvp="gw2:pvp",d.GW2_Wvw="gw2:wvw",d.GW2_Builds="gw2:builds",d.GW2_Progression="gw2:progression",d.GW2_Guilds="gw2:guilds",d))(j||{});function _(r){let e=r instanceof ArrayBuffer?new Uint8Array(r):r;return btoa(String.fromCharCode(...e)).replace(/\+/g,"-").replace(/\//g,"_").replace(/=+$/,"")}async function x({htm:r,htu:e,nonce:t,accessToken:n},o){let i=JSON.stringify({alg:"ES256",typ:"dpop+jwt",jwk:await G(o.publicKey)}),a=JSON.stringify({iat:Math.floor(Date.now()/1e3),jti:_(crypto.getRandomValues(new Uint8Array(32))),htm:r,htu:e,nonce:t,ath:n?_(await crypto.subtle.digest("SHA-256",A(n))):void 0}),h=`${_(A(i))}.${_(A(a))}`,y={name:"ECDSA",hash:"SHA-256"},U=_(await crypto.subtle.sign(y,o.privateKey,A(h)));return`${h}.${U}`}var V=new TextEncoder;function A(r){return V.encode(r)}async function G(r){let{kty:e,e:t,k:n,n:o,x:i,y:a,crv:h}=await crypto.subtle.exportKey("jwk",r);return{e:t,k:n,crv:h,kty:e,n:o,x:i,y:a}}async function W(r){let e=JSON.stringify(await G(r)),t=await crypto.subtle.digest("SHA-256",A(e));return _(t)}var f=class extends Error{},T=class extends f{constructor(t,n,o){super(`Received ${t}`+(n?`: ${n}`:"")+(o?` (${o})`:""));this.error=t;this.error_description=n;this.error_uri=o}};async function g(r){if(await q(r),!(r.headers.get("Content-Type")==="application/json"))throw new f("gw2.me did not return a valid JSON response");return r.json()}async function q(r){if(!r.ok){let e;throw r.headers.get("Content-Type")==="application/json"&&(e=(await r.json()).error_description),new f(`gw2.me returned an error: ${e??"Unknown error"}`)}}var l,K,b,v=class{constructor(e,t){this.access_token=e;this.options=t;m(this,l)}user(){return s(this,l,b).call(this,"api/user").then(e=>fetch(e)).then(g)}saveSettings(e){return s(this,l,b).call(this,"api/user/settings",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(e)}).then(t=>fetch(t)).then(q)}accounts(){return s(this,l,b).call(this,"api/accounts").then(e=>fetch(e)).then(g)}subtoken(e,t){let n=s(this,l,K).call(this,`api/accounts/${e}/subtoken`);return t?.permissions&&n.searchParams.set("permissions",t.permissions.join(",")),s(this,l,b).call(this,n).then(o=>fetch(o)).then(g)}};l=new WeakSet,K=function(e){return new URL(e,this.options?.url||"https://gw2.me/")},b=async function(e,t){let n=e instanceof URL?e:s(this,l,K).call(this,e),o=this.options?.dpopKeyPair,i=new Headers(t?.headers);if(i.set("Authorization",`${o?"DPoP":"Bearer"} ${this.access_token}`),o){let a=await x({htm:t?.method??"GET",htu:n.toString(),accessToken:this.access_token},o);i.set("DPoP",a)}return new Request(n,{cache:"no-cache",...t,headers:i})};var O,C,I=class{constructor(e,t){m(this,O);m(this,C);k(this,O,e),k(this,C,t)}isSupported(){return typeof window<"u"&&"IdentityCredential"in window}request({scopes:e,mediation:t,signal:n,mode:o,code_challenge:i,code_challenge_method:a}){if(!this.isSupported())throw new f("FedCM is not supported");return navigator.credentials.get({mediation:t,signal:n,identity:{providers:[{configURL:c(this,O),clientId:c(this,C),fields:[e.includes("identify")&&"name",e.includes("email")&&"email"].filter(Boolean),nonce:`${a}:${i}`,params:{scope:e.join(" "),code_challenge:i,code_challenge_method:a}}],mode:o}})}};O=new WeakMap,C=new WeakMap;var p,S,u,P,R,$=class{constructor(e,t){this.options=t;m(this,u);m(this,p);m(this,S);k(this,p,e),k(this,S,new I(s(this,u,P).call(this,"/fed-cm/config.json"),e.client_id))}getAuthorizationUrl(e){let t="request_uri"in e?new URLSearchParams({client_id:c(this,p).client_id,response_type:"code",request_uri:e.request_uri}):B(c(this,p).client_id,e);return s(this,u,P).call(this,`/oauth2/authorize?${t.toString()}`).toString()}async pushAuthorizationRequest(e){let t=s(this,u,P).call(this,"/oauth2/par"),n={"Content-Type":"application/x-www-form-urlencoded"};e.dpopKeyPair&&(n.DPoP=await x({htm:"POST",htu:t.toString()},e.dpopKeyPair),e.dpop_jkt=await W(e.dpopKeyPair.publicKey));let o=B(c(this,p).client_id,e);return c(this,p).client_secret&&(n.Authorization=s(this,u,R).call(this)),await fetch(t,{method:"POST",headers:n,body:o,cache:"no-store"}).then(g)}async getAccessToken({code:e,token_type:t,redirect_uri:n,code_verifier:o,dpopKeyPair:i}){let a=new URLSearchParams({grant_type:"authorization_code",code:e,client_id:c(this,p).client_id,redirect_uri:n}),h={"Content-Type":"application/x-www-form-urlencoded"};c(this,p).client_secret&&(h.Authorization=s(this,u,R).call(this)),o&&a.set("code_verifier",o);let y=s(this,u,P).call(this,"/api/token");return i&&(h.DPoP=await x({htm:"POST",htu:y.toString(),accessToken:t==="DPoP"?e:void 0},i)),await fetch(y,{method:"POST",headers:h,body:a,cache:"no-store"}).then(g)}async refreshToken({refresh_token:e,refresh_token_type:t,dpopKeyPair:n}){let o=new URLSearchParams({grant_type:"refresh_token",refresh_token:e,client_id:c(this,p).client_id}),i={"Content-Type":"application/x-www-form-urlencoded"};c(this,p).client_secret&&(i.Authorization=s(this,u,R).call(this));let a=s(this,u,P).call(this,"/api/token");return n&&(i.DPoP=await x({htm:"POST",htu:a.toString(),accessToken:t==="DPoP"?e:void 0},n)),await fetch(a,{method:"POST",headers:i,body:o,cache:"no-store"}).then(g)}async revokeToken({token:e}){let t=new URLSearchParams({token:e}),n={"Content-Type":"application/x-www-form-urlencoded"};c(this,p).client_secret&&(n.Authorization=s(this,u,R).call(this)),await fetch(s(this,u,P).call(this,"/api/token/revoke"),{method:"POST",cache:"no-store",headers:n,body:t}).then(g)}async introspectToken({token:e}){let t=new URLSearchParams({token:e}),n={"Content-Type":"application/x-www-form-urlencoded"};return c(this,p).client_secret&&(n.Authorization=s(this,u,R).call(this)),await fetch(s(this,u,P).call(this,"/api/token/introspect"),{method:"POST",cache:"no-store",headers:n,body:t}).then(g)}parseAuthorizationResponseSearchParams(e){let t=s(this,u,P).call(this,"/").origin,n=e.get("iss");if(!n)throw new f("Issuer Identifier verification failed: parameter `iss` is missing");if(n!==t)throw new f(`Issuer Identifier verification failed: expected "${t}", got "${n}"`);let o=e.get("error");if(o){let h=e.get("error_description")??void 0,y=e.get("error_uri")??void 0;throw new T(o,h,y)}let i=e.get("code");if(!i)throw new f("Parameter `code` is missing");let a=e.get("state")||void 0;return{code:i,state:a}}api(e,t){return new v(e,{...this.options,...t})}get fedCM(){return c(this,S)}};p=new WeakMap,S=new WeakMap,u=new WeakSet,P=function(e){return new URL(e,this.options?.url||"https://gw2.me/")},R=function(){if(!c(this,p).client_secret)throw new f("client_secret is required");return`Basic ${btoa(`${c(this,p).client_id}:${c(this,p).client_secret}`)}`};function B(r,{redirect_uri:e,scopes:t,state:n,code_challenge:o,code_challenge_method:i,dpop_jkt:a,prompt:h,include_granted_scopes:y,verified_accounts_only:U}){let w=new URLSearchParams({client_id:r,response_type:"code",redirect_uri:e,scope:t.join(" ")});return n&&w.append("state",n),o&&i&&(w.append("code_challenge",o),w.append("code_challenge_method",i)),a&&w.append("dpop_jkt",a),h&&w.append("prompt",h),y&&w.append("include_granted_scopes","true"),U&&w.append("verified_accounts_only","true"),w}0&&(module.exports={Gw2MeApi,Gw2MeClient,Gw2MeError,Gw2MeOAuthError,Scope});

package/dist/pkce.js

@@ -1 +1 @@
-"use strict";var a=Object.defineProperty;var l=Object.getOwnPropertyDescriptor;var i=Object.getOwnPropertyNames;var g=Object.prototype.hasOwnProperty;var d=(e,r)=>{for(var n in r)a(e,n,{get:r[n],enumerable:!0})},h=(e,r,n,t)=>{if(r&&typeof r=="object"||typeof r=="function")for(let c of i(r))!g.call(e,c)&&c!==n&&a(e,c,{get:()=>r[c],enumerable:!(t=l(r,c))||t.enumerable});return e};var s=e=>h(a({},"__esModule",{value:!0}),e);var C={};d(C,{generatePKCEPair:()=>f});module.exports=s(C);async function f(){let e=new Uint8Array(32);crypto.getRandomValues(e);let r=o(e),n=new TextEncoder,t=await crypto.subtle.digest("SHA-256",n.encode(r));return{code_verifier:r,challenge:{code_challenge_method:"S256",code_challenge:o(new Uint8Array(t))}}}function o(e){return btoa(String.fromCharCode(...e)).replace(/\+/g,"-").replace(/\//g,"_").replace(/=+$/,"")}0&&(module.exports={generatePKCEPair});
+"use strict";var o=Object.defineProperty;var l=Object.getOwnPropertyDescriptor;var i=Object.getOwnPropertyNames;var d=Object.prototype.hasOwnProperty;var g=(e,r)=>{for(var n in r)o(e,n,{get:r[n],enumerable:!0})},f=(e,r,n,c)=>{if(r&&typeof r=="object"||typeof r=="function")for(let a of i(r))!d.call(e,a)&&a!==n&&o(e,a,{get:()=>r[a],enumerable:!(c=l(r,a))||c.enumerable});return e};var s=e=>f(o({},"__esModule",{value:!0}),e);var u={};g(u,{generatePKCEPair:()=>h});module.exports=s(u);function t(e){let r=e instanceof ArrayBuffer?new Uint8Array(e):e;return btoa(String.fromCharCode(...r)).replace(/\+/g,"-").replace(/\//g,"_").replace(/=+$/,"")}async function h(){let e=new Uint8Array(32);crypto.getRandomValues(e);let r=t(e),n=new TextEncoder,c=await crypto.subtle.digest("SHA-256",n.encode(r));return{code_verifier:r,challenge:{code_challenge_method:"S256",code_challenge:t(new Uint8Array(c))}}}0&&(module.exports={generatePKCEPair});

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gw2me/client",
-  "version": "0.7.0",
+  "version": "0.8.0",
   "description": "gw2.me client library",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -10,6 +10,10 @@
       "types": "./dist/index.d.ts",
       "default": "./dist/index.js"
     },
+    "./dpop": {
+      "types": "./dist/dpop.d.ts",
+      "default": "./dist/dpop.js"
+    },
     "./pkce": {
       "types": "./dist/pkce.d.ts",
       "default": "./dist/pkce.js"
@@ -36,18 +40,19 @@
   },
   "homepage": "https://github.com/gw2treasures/gw2.me#readme",
   "devDependencies": {
-    "@gw2treasures/eslint-config": "0.0.6",
+    "@gw2treasures/eslint-config": "0.1.0",
     "@gw2treasures/publish-package": "0.1.0-rc.0",
     "@gw2treasures/tsconfig": "0.0.1",
-    "eslint": "8.57.1",
+    "eslint": "9.25.1",
     "tsup": "8.4.0",
-    "typescript": "5.8.2",
-    "undici-types": "7.5.0"
+    "typescript": "5.8.3",
+    "typescript-eslint": "8.31.0",
+    "undici-types": "7.8.0"
   },
   "scripts": {
     "build": "pnpm run clean && if test $CI; then pnpm run build:ci; else pnpm run build:local; fi",
-    "build:local": "tsup src/index.ts src/pkce.ts && tsc --emitDeclarationOnly --declaration --declarationMap",
-    "build:ci": "tsup src/index.ts src/pkce.ts --minify --dts",
+    "build:local": "tsup src/index.ts src/dpop.ts src/pkce.ts && tsc --emitDeclarationOnly --declaration --declarationMap",
+    "build:ci": "tsup src/index.ts src/dpop.ts src/pkce.ts --minify --dts",
     "clean": "rm -rf dist/",
     "lint": "eslint src",
     "publish-package": "gw2treasures-publish-package"