@inrupt/solid-client-authn-browser 3.1.1 → 4.0.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@inrupt/solid-client-authn-browser",
-  "version": "3.1.1",
+  "version": "4.0.0",
   "license": "MIT",
   "types": "dist/index.d.ts",
   "browser": "dist/index.js",
@@ -26,12 +26,12 @@
     "build-docs-preview-site": "npm run build-api-docs; cd docs/api; make html"
   },
   "devDependencies": {
-    "@types/node": "^24.9.1",
+    "@types/node": "^25.5.0",
     "@types/uuid": "^10.0.0"
   },
   "dependencies": {
-    "@inrupt/oidc-client-ext": "^3.1.1",
-    "@inrupt/solid-client-authn-core": "^3.1.1",
+    "@inrupt/oidc-client-ext": "^4.0.0",
+    "@inrupt/solid-client-authn-core": "^4.0.0",
     "events": "^3.3.0",
     "jose": "^5.1.3",
     "uuid": "^11.1.0"

package/rollup.config.mjs

@@ -1,4 +1,3 @@
-//
 // Copyright Inrupt Inc.
 //
 // Permission is hereby granted, free of charge, to any person obtaining a copy
@@ -23,7 +22,6 @@ import { nodeResolve } from "@rollup/plugin-node-resolve";
 import commonjs from "@rollup/plugin-commonjs";
 import terser from "@rollup/plugin-terser";
 import createConfig, { createSharedConfig } from "@inrupt/base-rollup-config";
-// eslint-disable-next-line import/extensions
 import pkg from "./package.json" with { type: "json" };
 
 export default [

package/src/ClientAuthentication.spec.ts

@@ -1,4 +1,3 @@
-//
 // Copyright Inrupt Inc.
 //
 // Permission is hereby granted, free of charge, to any person obtaining a copy
@@ -35,6 +34,7 @@ import {
   mockIncomingRedirectHandler,
   mockHandleIncomingRedirect,
   mockLogoutHandler,
+  // eslint-disable-next-line import/no-unresolved
 } from "@inrupt/solid-client-authn-core/mocks";
 
 import { mockLoginHandler } from "./login/__mocks__/LoginHandler";
@@ -472,7 +472,7 @@ describe("ClientAuthentication", () => {
       const url =
         "https://coolapp.com/redirect?state=someState&code=someAuthCode&iss=someIssuer";
       await clientAuthn.handleIncomingRedirect(url, mockEmitter);
-      // eslint-disable-next-line no-restricted-globals
+
       expect(history.replaceState).toHaveBeenCalledWith(
         null,
         "",
@@ -601,4 +601,130 @@ describe("ClientAuthentication", () => {
       );
     });
   });
+
+  describe("validateCurrentSession", () => {
+    it("returns clientExpiresAt when expiresAt is in storage", async () => {
+      const sessionId = "mySession";
+      const expiresAt = Math.floor(Date.now() / 1000) + 10000;
+      const mockedStorage = new StorageUtility(
+        mockStorage({
+          [`${USER_SESSION_PREFIX}:${sessionId}`]: {
+            isLoggedIn: "true",
+            webId: "https://my.pod/profile#me",
+          },
+        }),
+        mockStorage({
+          [`${USER_SESSION_PREFIX}:${sessionId}`]: {
+            clientId: "https://some.app/registration",
+            clientSecret: "some-secret",
+            issuer: "https://some.issuer",
+            expiresAt: String(expiresAt),
+          },
+        }),
+      );
+      const clientAuthn = getClientAuthentication({
+        sessionInfoManager: mockSessionInfoManager(mockedStorage),
+      });
+
+      const result = await clientAuthn.validateCurrentSession(sessionId);
+      expect(result).toStrictEqual(
+        expect.objectContaining({
+          clientExpiresAt: expiresAt,
+        }),
+      );
+    });
+
+    it("returns null when client has expired", async () => {
+      const sessionId = "mySession";
+      const expiredAt = Math.floor(Date.now() / 1000) - 1000;
+      const mockedStorage = new StorageUtility(
+        mockStorage({
+          [`${USER_SESSION_PREFIX}:${sessionId}`]: {
+            isLoggedIn: "true",
+            webId: "https://my.pod/profile#me",
+          },
+        }),
+        mockStorage({
+          [`${USER_SESSION_PREFIX}:${sessionId}`]: {
+            clientId: "https://some.app/registration",
+            clientSecret: "some-secret",
+            issuer: "https://some.issuer",
+            expiresAt: String(expiredAt),
+          },
+        }),
+      );
+      const clientAuthn = getClientAuthentication({
+        sessionInfoManager: mockSessionInfoManager(mockedStorage),
+      });
+
+      await expect(
+        clientAuthn.validateCurrentSession(sessionId),
+      ).resolves.toBeNull();
+    });
+
+    it("returns session when client has not expired", async () => {
+      const sessionId = "mySession";
+      const futureExpiry = Math.floor(Date.now() / 1000) + 10000;
+      const mockedStorage = new StorageUtility(
+        mockStorage({
+          [`${USER_SESSION_PREFIX}:${sessionId}`]: {
+            isLoggedIn: "true",
+            webId: "https://my.pod/profile#me",
+          },
+        }),
+        mockStorage({
+          [`${USER_SESSION_PREFIX}:${sessionId}`]: {
+            clientId: "https://some.app/registration",
+            clientSecret: "some-secret",
+            issuer: "https://some.issuer",
+            expiresAt: String(futureExpiry),
+          },
+        }),
+      );
+      const clientAuthn = getClientAuthentication({
+        sessionInfoManager: mockSessionInfoManager(mockedStorage),
+      });
+
+      const result = await clientAuthn.validateCurrentSession(sessionId);
+      expect(result).not.toBeNull();
+      expect(result).toStrictEqual(
+        expect.objectContaining({
+          clientAppId: "https://some.app/registration",
+          issuer: "https://some.issuer",
+        }),
+      );
+    });
+
+    it("returns session when clientExpiresAt is 0 (never expires per OIDC DCR spec)", async () => {
+      const sessionId = "mySession";
+      const mockedStorage = new StorageUtility(
+        mockStorage({
+          [`${USER_SESSION_PREFIX}:${sessionId}`]: {
+            isLoggedIn: "true",
+            webId: "https://my.pod/profile#me",
+          },
+        }),
+        mockStorage({
+          [`${USER_SESSION_PREFIX}:${sessionId}`]: {
+            clientId: "https://some.app/registration",
+            clientSecret: "some-secret",
+            issuer: "https://some.issuer",
+            expiresAt: "0",
+          },
+        }),
+      );
+      const clientAuthn = getClientAuthentication({
+        sessionInfoManager: mockSessionInfoManager(mockedStorage),
+      });
+
+      const result = await clientAuthn.validateCurrentSession(sessionId);
+      expect(result).not.toBeNull();
+      expect(result).toStrictEqual(
+        expect.objectContaining({
+          clientAppId: "https://some.app/registration",
+          clientExpiresAt: 0,
+        }),
+      );
+    });
+  });
 });

package/src/ClientAuthentication.ts

@@ -1,4 +1,3 @@
-//
 // Copyright Inrupt Inc.
 //
 // Permission is hereby granted, free of charge, to any person obtaining a copy
@@ -38,6 +37,20 @@ import {
 import { normalizeCallbackUrl } from "@inrupt/oidc-client-ext";
 import type { EventEmitter } from "events";
 
+/**
+ * Checks if a client's registration has expired.
+ */
+function isClientExpired(sessionInfo: { clientExpiresAt?: number }): boolean {
+  // clientExpiresAt === 0 means the client never expires (per OIDC DCR spec)
+  if (
+    sessionInfo.clientExpiresAt === undefined ||
+    sessionInfo.clientExpiresAt === 0
+  ) {
+    return false;
+  }
+  return sessionInfo.clientExpiresAt < Math.floor(Date.now() / 1000);
+}
+
 /**
  * @hidden
  */
@@ -78,7 +91,7 @@ export default class ClientAuthentication extends ClientAuthenticationBase {
   };
 
   // Collects session information from storage, and returns them. Returns null
-  // if the expected information cannot be found.
+  // if the expected information cannot be found or if the client has expired.
   // Note that the ID token is not stored, which means the session information
   // cannot be validated at this point.
   validateCurrentSession = async (
@@ -88,7 +101,8 @@ export default class ClientAuthentication extends ClientAuthenticationBase {
     if (
       sessionInfo === undefined ||
       sessionInfo.clientAppId === undefined ||
-      sessionInfo.issuer === undefined
+      sessionInfo.issuer === undefined ||
+      isClientExpired(sessionInfo)
     ) {
       return null;
     }
@@ -152,7 +166,7 @@ export default class ClientAuthentication extends ClientAuthenticationBase {
       // 'popstate' event which should be listened to is only sent on active
       // navigation, which we will not have here.
       // See https://developer.mozilla.org/en-US/docs/Web/API/Window/popstate_event#when_popstate_is_sent
-      // eslint-disable-next-line no-await-in-loop
+
       await new Promise<void>((resolve) => {
         setTimeout(() => resolve(), 1);
       });

package/src/Session.spec.ts

@@ -1,4 +1,3 @@
-//
 // Copyright Inrupt Inc.
 //
 // Permission is hereby granted, free of charge, to any person obtaining a copy
@@ -26,6 +25,7 @@ import {
   StorageUtility,
   USER_SESSION_PREFIX,
 } from "@inrupt/solid-client-authn-core";
+// eslint-disable-next-line import/no-unresolved
 import { mockStorage } from "@inrupt/solid-client-authn-core/mocks";
 import { EventEmitter } from "stream";
 import { mockClientAuthentication } from "./__mocks__/ClientAuthentication";
@@ -57,9 +57,9 @@ const mockLocation = (mockedLocation: string) => {
 
   // (window as any) is used to override the window type definition and
   // allow location to be written.
-  // eslint-disable-next-line @typescript-eslint/no-explicit-any
+
   delete (window as any).location;
-  // eslint-disable-next-line @typescript-eslint/no-explicit-any
+
   delete (window as any).history.replaceState;
 
   // Set our window's location to our test value.
@@ -119,11 +119,10 @@ describe("Session", () => {
       // Let's make TypeScript and eslint angry! We'll set our window mock to
       // undefined so that any references to its properties or methods explode.
       // @ts-ignore-start
-      // eslint-disable-next-line no-global-assign
+
       window = undefined;
       // @ts-ignore-end
       expect(() => {
-        // eslint-disable-next-line no-new
         new Session({});
       }).not.toThrow();
     });
@@ -136,7 +135,7 @@ describe("Session", () => {
       const mySession = new Session({ clientAuthentication });
       // login never resolves if there are no errors,
       // because a login redirects the user away from the page:
-      // eslint-disable-next-line no-void
+
       void mySession.login({});
       expect(clientAuthnLogin).toHaveBeenCalled();
     });
@@ -147,7 +146,7 @@ describe("Session", () => {
       const mySession = new Session({ clientAuthentication });
       // login never resolves if there are no errors,
       // because a login redirects the user away from the page:
-      // eslint-disable-next-line no-void
+
       void mySession.login({
         tokenType: "Bearer",
       });
@@ -168,7 +167,7 @@ describe("Session", () => {
       };
       // login never resolves if there are no errors,
       // because a login redirects the user away from the page:
-      // eslint-disable-next-line no-void
+
       void objectWithLogin.login({});
       expect(clientAuthnLogin).toHaveBeenCalled();
     });
@@ -380,6 +379,7 @@ describe("Session", () => {
         "https://my.app/?code=someCode&state=arizona",
       );
       // We know that it has been set by the call to `blockingRequest`.
+      // FIXME: This can be fixed when we drop support for Node 20 by using Promise.withResolvers.
       // eslint-disable-next-line @typescript-eslint/no-non-null-assertion
       continueAfterSecondRequest!();
       const tokenRequests = await Promise.all([
@@ -425,7 +425,7 @@ describe("Session", () => {
           incomingRedirectPromise,
         ) as typeof clientAuthentication.handleIncomingRedirect;
       const mySession = new Session({ clientAuthentication });
-      // eslint-disable-next-line no-void
+
       void mySession.handleIncomingRedirect({
         url: "https://some.redirect/url",
         restorePreviousSession: true,
@@ -458,9 +458,12 @@ describe("Session", () => {
         .mockReturnValueOnce(
           incomingRedirectPromise,
         ) as typeof clientAuthentication.handleIncomingRedirect;
-      const validateCurrentSessionPromise = Promise.resolve(
-        "https://some.issuer/",
-      );
+      const validateCurrentSessionPromise = Promise.resolve({
+        issuer: "https://some.issuer/",
+        clientAppId: "some client ID",
+        redirectUrl: "https://some.redirect/url",
+        tokenType: "DPoP",
+      });
       clientAuthentication.validateCurrentSession = jest
         .fn()
         .mockReturnValue(
@@ -468,7 +471,7 @@ describe("Session", () => {
         ) as typeof clientAuthentication.validateCurrentSession;
 
       const mySession = new Session({ clientAuthentication });
-      // eslint-disable-next-line no-void
+
       void mySession.handleIncomingRedirect({
         url: "https://some.redirect/url",
         restorePreviousSession: true,
@@ -507,7 +510,7 @@ describe("Session", () => {
         undefined,
       ) as typeof clientAuthentication.handleIncomingRedirect;
       const mySession = new Session({ clientAuthentication });
-      // eslint-disable-next-line no-void
+
       void mySession.handleIncomingRedirect({
         url: "https://some.redirect/url",
         restorePreviousSession: true,
@@ -536,6 +539,7 @@ describe("Session", () => {
         issuer: "https://some.issuer",
         clientAppId: "some client ID",
         clientAppSecret: "some client secret",
+        clientExpiresAt: Math.floor(Date.now() / 1000) + 10000,
         redirectUrl: "https://some.redirect/url",
         tokenType: "DPoP",
       });
@@ -553,7 +557,7 @@ describe("Session", () => {
       clientAuthentication.login = jest.fn<typeof clientAuthentication.login>();
 
       const mySession = new Session({ clientAuthentication });
-      // eslint-disable-next-line no-void
+
       void mySession.handleIncomingRedirect({
         url: "https://some.redirect/url",
         restorePreviousSession: true,
@@ -652,7 +656,7 @@ describe("Session", () => {
       clientAuthentication.login = jest.fn<typeof clientAuthentication.login>();
 
       const mySession = new Session({ clientAuthentication });
-      // eslint-disable-next-line no-void
+
       void mySession.handleIncomingRedirect("https://some.redirect/url");
       expect(window.localStorage.getItem(KEY_CURRENT_URL)).toBeNull();
       expect(clientAuthentication.login).not.toHaveBeenCalled();
@@ -689,7 +693,7 @@ describe("Session", () => {
       clientAuthentication.login = jest.fn<typeof clientAuthentication.login>();
 
       const mySession = new Session({ clientAuthentication });
-      // eslint-disable-next-line no-void
+
       void mySession.handleIncomingRedirect({
         url: "https://some.redirect/url",
         restorePreviousSession: false,
@@ -728,7 +732,7 @@ describe("Session", () => {
       clientAuthentication.login = jest.fn<typeof clientAuthentication.login>();
 
       const mySession = new Session({ clientAuthentication });
-      // eslint-disable-next-line no-void
+
       void mySession.handleIncomingRedirect("https://some.redirect/url");
       expect(mySession.info.isLoggedIn).toBe(false);
       // The local storage should have been cleared by the auth error
@@ -761,6 +765,53 @@ describe("Session", () => {
       // The local storage should have been cleared by the auth error
       expect(window.localStorage.getItem(KEY_CURRENT_SESSION)).toBeNull();
     });
+
+    it("does not attempt silent authentication if the stored client has expired", async () => {
+      const sessionId = "mySession";
+      mockLocalStorage({
+        [KEY_CURRENT_SESSION]: sessionId,
+      });
+      mockLocation("https://mock.current/location");
+
+      // Set up storage with an expired client (expiresAt in the past)
+      const expiredAt = Math.floor(Date.now() / 1000) - 1000;
+      const mockedStorage = new StorageUtility(
+        mockStorage({
+          [`${USER_SESSION_PREFIX}:${sessionId}`]: {
+            isLoggedIn: "true",
+            webId: "https://my.pod/profile#me",
+          },
+        }),
+        mockStorage({
+          [`${USER_SESSION_PREFIX}:${sessionId}`]: {
+            clientId: "https://some.app/registration",
+            clientSecret: "some-secret",
+            issuer: "https://some.issuer",
+            expiresAt: String(expiredAt),
+          },
+        }),
+      );
+      const clientAuthentication = mockClientAuthentication({
+        sessionInfoManager: mockSessionInfoManager(mockedStorage),
+      });
+
+      // Mock handleIncomingRedirect to return undefined (no OAuth params in URL)
+      clientAuthentication.handleIncomingRedirect = jest
+        .fn<typeof clientAuthentication.handleIncomingRedirect>()
+        .mockResolvedValue(undefined);
+      clientAuthentication.login = jest.fn<typeof clientAuthentication.login>();
+
+      const mySession = new Session({ clientAuthentication });
+      const result = await mySession.handleIncomingRedirect({
+        url: "https://some.redirect/url",
+        restorePreviousSession: true,
+      });
+
+      // Silent auth should NOT have been attempted because client is expired
+      expect(clientAuthentication.login).not.toHaveBeenCalled();
+      // The function should resolve (not hang)
+      expect(result).toBeUndefined();
+    });
   });
 
   describe("events.on", () => {

package/src/Session.ts

@@ -1,4 +1,3 @@
-//
 // Copyright Inrupt Inc.
 //
 // Permission is hereby granted, free of charge, to any person obtaining a copy

package/src/__mocks__/ClientAuthentication.ts

@@ -1,4 +1,3 @@
-//
 // Copyright Inrupt Inc.
 //
 // Permission is hereby granted, free of charge, to any person obtaining a copy
@@ -31,6 +30,7 @@ import {
   mockStorageUtility,
   mockIncomingRedirectHandler,
   mockLogoutHandler,
+  // eslint-disable-next-line import/no-unresolved
 } from "@inrupt/solid-client-authn-core/mocks";
 
 import ClientAuthentication from "../ClientAuthentication";

package/src/constant.ts

@@ -1,4 +1,3 @@
-//
 // Copyright Inrupt Inc.
 //
 // Permission is hereby granted, free of charge, to any person obtaining a copy

package/src/defaultSession.spec.ts

@@ -1,4 +1,3 @@
-//
 // Copyright Inrupt Inc.
 //
 // Permission is hereby granted, free of charge, to any person obtaining a copy

package/src/defaultSession.ts

@@ -1,4 +1,3 @@
-//
 // Copyright Inrupt Inc.
 //
 // Permission is hereby granted, free of charge, to any person obtaining a copy
@@ -48,7 +47,7 @@ export function getDefaultSession(): Session {
  * @see {@link https://developer.mozilla.org/en-US/docs/Web/API/WindowOrWorkerGlobalScope/fetch}
  * @since 1.3.0
  */
-/* eslint-disable-next-line no-shadow */
+
 export function fetch(
   ...args: Parameters<Session["fetch"]>
 ): ReturnType<Session["fetch"]> {

package/src/dependencies.node.spec.ts

@@ -1,4 +1,3 @@
-//
 // Copyright Inrupt Inc.
 //
 // Permission is hereby granted, free of charge, to any person obtaining a copy

package/src/dependencies.spec.ts

@@ -1,4 +1,3 @@
-//
 // Copyright Inrupt Inc.
 //
 // Permission is hereby granted, free of charge, to any person obtaining a copy

package/src/dependencies.ts

@@ -1,4 +1,3 @@
-//
 // Copyright Inrupt Inc.
 //
 // Permission is hereby granted, free of charge, to any person obtaining a copy

package/src/index.browser.spec.ts

@@ -1,4 +1,3 @@
-//
 // Copyright Inrupt Inc.
 //
 // Permission is hereby granted, free of charge, to any person obtaining a copy

package/src/index.browser.ts

@@ -1,4 +1,3 @@
-//
 // Copyright Inrupt Inc.
 //
 // Permission is hereby granted, free of charge, to any person obtaining a copy

package/src/index.spec.ts

@@ -1,4 +1,3 @@
-//
 // Copyright Inrupt Inc.
 //
 // Permission is hereby granted, free of charge, to any person obtaining a copy

package/src/index.ts

@@ -1,4 +1,3 @@
-//
 // Copyright Inrupt Inc.
 //
 // Permission is hereby granted, free of charge, to any person obtaining a copy

package/src/login/__mocks__/LoginHandler.ts

@@ -1,4 +1,3 @@
-//
 // Copyright Inrupt Inc.
 //
 // Permission is hereby granted, free of charge, to any person obtaining a copy

package/src/login/oidc/AggregateOidcHandler.spec.ts

@@ -1,4 +1,3 @@
-//
 // Copyright Inrupt Inc.
 //
 // Permission is hereby granted, free of charge, to any person obtaining a copy
@@ -29,7 +28,7 @@ jest.mock("@inrupt/solid-client-authn-core");
 describe("AggregateOidcHandler", () => {
   it("should pass injected handlers to its superclass", () => {
     // We just test if the parent is called.
-    // eslint-disable-next-line no-new
+
     new AggregateOidcHandler(["Some handler"] as unknown as IOidcHandler[]);
 
     expect((AggregateHandler as jest.Mock).mock.calls).toEqual([

package/src/login/oidc/AggregateOidcHandler.ts

@@ -1,4 +1,3 @@
-//
 // Copyright Inrupt Inc.
 //
 // Permission is hereby granted, free of charge, to any person obtaining a copy

package/src/login/oidc/AggregateRedirectHandler.ts

@@ -1,4 +1,3 @@
-//
 // Copyright Inrupt Inc.
 //
 // Permission is hereby granted, free of charge, to any person obtaining a copy

package/src/login/oidc/ClientRegistrar.spec.ts

@@ -1,4 +1,3 @@
-//
 // Copyright Inrupt Inc.
 //
 // Permission is hereby granted, free of charge, to any person obtaining a copy
@@ -22,6 +21,7 @@
 import {
   StorageUtilityMock,
   mockStorageUtility,
+  // eslint-disable-next-line import/no-unresolved
 } from "@inrupt/solid-client-authn-core/mocks";
 import { jest, it, describe, expect } from "@jest/globals";
 import { randomUUID } from "crypto";

package/src/login/oidc/ClientRegistrar.ts

@@ -1,4 +1,3 @@
-//
 // Copyright Inrupt Inc.
 //
 // Permission is hereby granted, free of charge, to any person obtaining a copy

package/src/login/oidc/IssuerConfigFetcher.spec.ts

@@ -1,4 +1,3 @@
-//
 // Copyright Inrupt Inc.
 //
 // Permission is hereby granted, free of charge, to any person obtaining a copy
@@ -23,6 +22,9 @@ import { jest, it, describe, expect } from "@jest/globals";
 import { mockStorageUtility } from "@inrupt/solid-client-authn-core";
 import IssuerConfigFetcher from "./IssuerConfigFetcher";
 
+// Camelcase identifiers are required in the OIDC specification.
+/* eslint-disable camelcase*/
+
 /**
  * Test for IssuerConfigFetcher
  */
@@ -58,7 +60,7 @@ describe("IssuerConfigFetcher", () => {
       new Response(
         JSON.stringify({
           issuer: "https://example.com",
-          // eslint-disable-next-line camelcase
+
           claim_types_supported: "oidc",
           bleepBloop: "Meep Moop",
           end_session_endpoint: "https://example.com/endSessionEndpoint",
@@ -92,7 +94,7 @@ describe("IssuerConfigFetcher", () => {
       new Response(
         JSON.stringify({
           issuer: "https://example.com",
-          // eslint-disable-next-line camelcase
+
           claim_types_supported: "oidc",
           scopes_supported: ["openid", "offline_access", "webid"],
         }),
@@ -114,7 +116,7 @@ describe("IssuerConfigFetcher", () => {
       new Response(
         JSON.stringify({
           issuer: "https://example.com",
-          // eslint-disable-next-line camelcase
+
           claim_types_supported: "oidc",
         }),
       ),
@@ -136,7 +138,7 @@ describe("IssuerConfigFetcher", () => {
         new Response(
           JSON.stringify({
             issuer: "https://example.com",
-            // eslint-disable-next-line camelcase
+
             claim_types_supported: "oidc",
             scopes_supported: ["openid", "offline_access", "webid"],
           }),

package/src/login/oidc/IssuerConfigFetcher.ts

@@ -1,4 +1,3 @@
-//
 // Copyright Inrupt Inc.
 //
 // Permission is hereby granted, free of charge, to any person obtaining a copy
@@ -34,9 +33,11 @@ import type {
 } from "@inrupt/solid-client-authn-core";
 import { ConfigurationError } from "@inrupt/solid-client-authn-core";
 
+// Camelcase identifiers are required in the OIDC specification.
+/* eslint-disable camelcase*/
+
 export const WELL_KNOWN_OPENID_CONFIG = ".well-known/openid-configuration";
 
-/* eslint-disable camelcase */
 const issuerConfigKeyMap: Record<
   string,
   { toKey: string; convertToUrl?: boolean }
@@ -127,7 +128,6 @@ const issuerConfigKeyMap: Record<
     convertToUrl: true,
   },
 };
-/* eslint-enable camelcase */
 
 function processConfig(
   config: Record<string, string | string[]>,