@kaapi/oauth2-auth-design 0.0.14 → 0.0.15

package/lib/flows/common.js

@@ -1,14 +1,55 @@
 "use strict";
-var _OAuth2WithJWKSAuthDesign_jwksGenerator;
+var _DefaultOAuth2RefreshTokenRoute_generateToken;
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.OAuth2WithJWKSAuthDesign = exports.OAuth2AuthDesign = exports.OAuth2TokenResponse = exports.OAuth2RefreshTokenRoute = void 0;
+exports.OIDCAuthUtil = exports.DefaultJWKSRoute = exports.JWKSRoute = exports.OAuth2AuthDesign = exports.OAuth2TokenResponse = exports.DefaultOAuth2RefreshTokenRoute = exports.OAuth2RefreshTokenRoute = exports.OAuth2TokenRoute = exports.AllOAuth2ErrorCode = exports.DeviceFlowOAuth2ErrorCode = exports.OAuth2TokenErrorCode = exports.OAuth2ErrorCode = exports.ExtendedOAuth2ErrorCode = exports.StandardOAuth2ErrorCode = void 0;
+exports.createMatchOAuth2ErrorCode = createMatchOAuth2ErrorCode;
 const tslib_1 = require("tslib");
 const kaapi_1 = require("@kaapi/kaapi");
-const in_memory_jwks_store_1 = require("../utils/in-memory-jwks-store");
-const jwks_generator_1 = require("../utils/jwks-generator");
+const boom_1 = tslib_1.__importDefault(require("@hapi/boom"));
+const hoek_1 = tslib_1.__importDefault(require("@hapi/hoek"));
+const api_doc_generator_1 = require("@novice1/api-doc-generator");
 const token_types_1 = require("../utils/token-types");
 const client_auth_methods_1 = require("../utils/client-auth-methods");
-class OAuth2RefreshTokenRoute {
+const jwt_authority_1 = require("../utils/jwt-authority");
+const in_memory_key_store_1 = require("../utils/in-memory-key-store");
+exports.StandardOAuth2ErrorCode = Object.freeze({
+    INVALID_REQUEST: 'invalid_request',
+    UNAUTHORIZED_CLIENT: 'unauthorized_client',
+    ACCESS_DENIED: 'access_denied',
+    UNSUPPORTED_RESPONSE_TYPE: 'unsupported_response_type',
+    INVALID_SCOPE: 'invalid_scope',
+    SERVER_ERROR: 'server_error',
+    TEMPORARILY_UNAVAILABLE: 'temporarily_unavailable',
+    INVALID_CLIENT: 'invalid_client',
+    INVALID_GRANT: 'invalid_grant',
+    UNSUPPORTED_GRANT_TYPE: 'unsupported_grant_type',
+});
+exports.ExtendedOAuth2ErrorCode = Object.freeze({
+    LOGIN_REQUIRED: 'login_required',
+    INTERACTION_REQUIRED: 'interaction_required',
+    CONSENT_REQUIRED: 'consent_required',
+    ACCOUNT_LOCKED: 'account_locked',
+    PASSWORD_EXPIRED: 'password_expired',
+});
+exports.OAuth2ErrorCode = Object.freeze(Object.assign(Object.assign({}, exports.StandardOAuth2ErrorCode), exports.ExtendedOAuth2ErrorCode));
+exports.OAuth2TokenErrorCode = Object.freeze({
+    INVALID_TOKEN: 'invalid_token',
+    INSUFFICIENT_SCOPE: 'insufficient_scope',
+});
+exports.DeviceFlowOAuth2ErrorCode = Object.freeze({
+    ACCESS_DENIED: 'access_denied',
+    AUTHORIZATION_PENDING: 'authorization_pending',
+    SLOW_DOWN: 'slow_down',
+    EXPIRED_TOKEN: 'expired_token',
+});
+exports.AllOAuth2ErrorCode = Object.freeze(Object.assign(Object.assign(Object.assign(Object.assign({}, exports.StandardOAuth2ErrorCode), exports.ExtendedOAuth2ErrorCode), exports.OAuth2TokenErrorCode), exports.DeviceFlowOAuth2ErrorCode));
+function createMatchOAuth2ErrorCode(handlers) {
+    return (code) => {
+        const handler = handlers[code];
+        return handler ? handler() : undefined;
+    };
+}
+class OAuth2TokenRoute {
     get path() {
         return this._path;
     }
@@ -20,7 +61,42 @@ class OAuth2RefreshTokenRoute {
         this._handler = handler;
     }
 }
+exports.OAuth2TokenRoute = OAuth2TokenRoute;
+class OAuth2RefreshTokenRoute extends OAuth2TokenRoute {
+    static buildDefault() {
+        return new DefaultOAuth2RefreshTokenRoute();
+    }
+}
 exports.OAuth2RefreshTokenRoute = OAuth2RefreshTokenRoute;
+class DefaultOAuth2RefreshTokenRoute extends OAuth2RefreshTokenRoute {
+    constructor() {
+        super('/oauth2/token', (props, req, h) => tslib_1.__awaiter(this, void 0, void 0, function* () {
+            const r = yield tslib_1.__classPrivateFieldGet(this, _DefaultOAuth2RefreshTokenRoute_generateToken, "f").call(this, props, req);
+            if (!r)
+                return h.continue;
+            if ('error' in r)
+                return h.response(r).code(400);
+            return h.response(r).code(200);
+        }));
+        _DefaultOAuth2RefreshTokenRoute_generateToken.set(this, void 0);
+        tslib_1.__classPrivateFieldSet(this, _DefaultOAuth2RefreshTokenRoute_generateToken, () => null, "f");
+    }
+    generateToken(handler) {
+        tslib_1.__classPrivateFieldSet(this, _DefaultOAuth2RefreshTokenRoute_generateToken, handler, "f");
+        return this;
+    }
+    setPath(path) {
+        if (path)
+            this._path = path;
+        return this;
+    }
+    validate(handler) {
+        this._handler = handler;
+        return this;
+    }
+}
+exports.DefaultOAuth2RefreshTokenRoute = DefaultOAuth2RefreshTokenRoute;
+_DefaultOAuth2RefreshTokenRoute_generateToken = new WeakMap();
 class OAuth2TokenResponse {
     constructor({ access_token, expires_in, refresh_token, scope, id_token }) {
         this.tokenType = 'bearer';
@@ -71,7 +147,7 @@ class OAuth2TokenResponse {
     getScope() {
         return this.scope;
     }
-    setIDToken(value) {
+    setIdToken(value) {
         this.idToken = value;
         return this;
     }
@@ -93,8 +169,6 @@ class OAuth2TokenResponse {
     }
 }
 exports.OAuth2TokenResponse = OAuth2TokenResponse;
-//#endregion OAuth2TokenResponse
-//#region OAuth2AuthDesign
 class OAuth2AuthDesign extends kaapi_1.AuthDesign {
     get tokenType() {
         return this._tokenType.prefix;
@@ -117,7 +191,8 @@ class OAuth2AuthDesign extends kaapi_1.AuthDesign {
         }
         return result;
     }
-    constructor() {
+    constructor(options) {
+        var _a, _b, _c, _d, _e, _f;
         super();
         this._clientAuthMethods = {
             client_secret_basic: undefined,
@@ -127,10 +202,14 @@ class OAuth2AuthDesign extends kaapi_1.AuthDesign {
             none: undefined
         };
         this._tokenType = new token_types_1.BearerToken();
-        /*{
-            prefix: 'Bearer',
-            isValid: () => ({ isValid: true })
-        }*/
+        this.strategyName = (options === null || options === void 0 ? void 0 : options.strategyName) || 'oauth2-auth-design';
+        this.options = (options === null || options === void 0 ? void 0 : options.options) ? Object.assign({}, (options.options)) : {};
+        //
+        this.jwksRoute = options === null || options === void 0 ? void 0 : options.jwksRoute;
+        this.jwksKeyStore = (_a = options === null || options === void 0 ? void 0 : options.jwksOptions) === null || _a === void 0 ? void 0 : _a.keyStore;
+        this.jwksPublicKeyTtl = (_b = options === null || options === void 0 ? void 0 : options.jwksOptions) === null || _b === void 0 ? void 0 : _b.ttl;
+        this.jwksRotationIntervalMs = (_d = (_c = options === null || options === void 0 ? void 0 : options.jwksOptions) === null || _c === void 0 ? void 0 : _c.rotation) === null || _d === void 0 ? void 0 : _d.intervalMs;
+        this.jwksRotationTimestampStore = (_f = (_e = options === null || options === void 0 ? void 0 : options.jwksOptions) === null || _e === void 0 ? void 0 : _e.rotation) === null || _f === void 0 ? void 0 : _f.timestampStore;
     }
     _extractClientParams(req, authMethodsInstances, checkOrder) {
         return tslib_1.__awaiter(this, void 0, void 0, function* () {
@@ -148,11 +227,11 @@ class OAuth2AuthDesign extends kaapi_1.AuthDesign {
                         clientId = v.clientId;
                         clientSecret = v.clientSecret;
                         if (!v.clientId) {
-                            error = 'invalid_request';
+                            error = exports.OAuth2ErrorCode.INVALID_REQUEST;
                             errorDescription = `Error ${amInstance.method}: Missing client_id`;
                         }
                         else if (!amInstance.secretIsOptional && !v.clientSecret) {
-                            error = 'invalid_request';
+                            error = exports.OAuth2ErrorCode.INVALID_REQUEST;
                             errorDescription = `Error ${amInstance.method}: Missing client_secret`;
                         }
                         break;
@@ -170,6 +249,66 @@ class OAuth2AuthDesign extends kaapi_1.AuthDesign {
             };
         });
     }
+    getJwtAuthority() {
+        if (this.jwtAuthority)
+            return this.jwtAuthority;
+        if (this.jwksRoute || this.jwksKeyStore || this.options.useAccessTokenJwks) {
+            this.jwtAuthority = new jwt_authority_1.JwtAuthority(this.jwksKeyStore || new in_memory_key_store_1.InMemoryKeyStore(), this.jwksPublicKeyTtl);
+        }
+        return this.jwtAuthority;
+    }
+    getJwksRotator() {
+        if (this.jwksRotator)
+            return this.jwksRotator;
+        const jwtAuthority = this.getJwtAuthority();
+        if (jwtAuthority && this.jwksRotationIntervalMs) {
+            this.jwksRotator = new jwt_authority_1.JwksRotator({
+                keyGenerator: jwtAuthority,
+                rotationIntervalMs: this.jwksRotationIntervalMs,
+                rotatorKeyStore: this.jwksRotationTimestampStore || new in_memory_key_store_1.InMemoryKeyStore(),
+                logger: this.logger
+            });
+        }
+        return this.jwksRotator;
+    }
+    createJwksEndpoint(t) {
+        const jwtAuthority = this.getJwtAuthority();
+        if (this.jwksRoute && jwtAuthority) {
+            t.route({
+                path: this.jwksRoute.path,
+                method: 'GET',
+                options: {
+                    plugins: {
+                        kaapi: {
+                            docs: false
+                        }
+                    }
+                },
+                handler: (req, h) => tslib_1.__awaiter(this, void 0, void 0, function* () {
+                    var _a;
+                    const jwks = yield jwtAuthority.getJwksEndpointResponse();
+                    if ((_a = this.jwksRoute) === null || _a === void 0 ? void 0 : _a.handler) {
+                        return this.jwksRoute.handler({
+                            jwks
+                        }, req, h);
+                    }
+                    return jwks;
+                })
+            });
+        }
+    }
+    checkAndRotateKeys() {
+        return tslib_1.__awaiter(this, void 0, void 0, function* () {
+            var _a;
+            return (_a = this.getJwksRotator()) === null || _a === void 0 ? void 0 : _a.checkAndRotateKeys();
+        });
+    }
+    generateKeyPair() {
+        return tslib_1.__awaiter(this, void 0, void 0, function* () {
+            var _a;
+            return (_a = this.getJwtAuthority()) === null || _a === void 0 ? void 0 : _a.generateKeyPair();
+        });
+    }
     setTokenType(value) {
         this._tokenType = value;
         return this;
@@ -210,26 +349,151 @@ class OAuth2AuthDesign extends kaapi_1.AuthDesign {
         }
         return this;
     }
+    //
+    setTokenTTL(ttlSeconds) {
+        this.tokenTTL = ttlSeconds;
+        return this;
+    }
+    getTokenTTL() {
+        return this.tokenTTL;
+    }
+    setDescription(description) {
+        this.description = description;
+        return this;
+    }
+    /**
+     *
+     * @param scopes The scopes of the access request.
+     * A map between the scope name and a short description for it. The map MAY be empty.
+     * @returns
+     */
+    setScopes(scopes) {
+        this.scopes = scopes;
+        return this;
+    }
+    getScopes() {
+        return this.scopes;
+    }
+    getStrategyName() {
+        return this.strategyName;
+    }
+    getDescription() {
+        return this.description;
+    }
+    /**
+     * Where authentication schemes and strategies are registered.
+     */
+    integrateStrategy(t) {
+        const tokenTypePrefix = this.tokenType;
+        const tokenTypeInstance = this._tokenType;
+        const getJwtAuthority = () => this.getJwtAuthority();
+        t.scheme(this.strategyName, (_server, options) => {
+            return {
+                authenticate(request, h) {
+                    return tslib_1.__awaiter(this, void 0, void 0, function* () {
+                        var _a;
+                        const settings = hoek_1.default.applyToDefaults({}, options || {});
+                        const authorization = request.raw.req.headers.authorization;
+                        const authSplit = authorization ? authorization.split(/\s+/) : ['', ''];
+                        const tokenType = authSplit[0];
+                        let token = authSplit[1];
+                        let jwtAccessTokenPayload;
+                        if (tokenType.toLowerCase() !== tokenTypePrefix.toLowerCase()) {
+                            token = '';
+                            return boom_1.default.unauthorized(null, tokenTypePrefix);
+                        }
+                        if (!(yield tokenTypeInstance.isValid(request, token)).isValid) {
+                            return boom_1.default.unauthorized(null, tokenTypePrefix);
+                        }
+                        const jwtAuthority = getJwtAuthority();
+                        if (jwtAuthority && settings.useAccessTokenJwks) {
+                            try {
+                                jwtAccessTokenPayload = yield jwtAuthority.verify(token);
+                            }
+                            catch (err) {
+                                t.log.error(err);
+                                return boom_1.default.unauthorized(null, tokenTypePrefix);
+                            }
+                        }
+                        if (settings.validate) {
+                            try {
+                                const result = yield ((_a = settings.validate) === null || _a === void 0 ? void 0 : _a.call(settings, request, { token, jwtAccessTokenPayload }, h));
+                                if (result && 'isAuth' in result) {
+                                    return result;
+                                }
+                                if (result && 'isBoom' in result) {
+                                    return result;
+                                }
+                                if (result) {
+                                    const { isValid, credentials, artifacts, message } = result;
+                                    if (isValid && credentials) {
+                                        return h.authenticated({ credentials, artifacts });
+                                    }
+                                    if (message) {
+                                        return h.unauthenticated(boom_1.default.unauthorized(message, tokenTypePrefix), {
+                                            credentials: credentials || {},
+                                            artifacts
+                                        });
+                                    }
+                                }
+                            }
+                            catch (err) {
+                                return boom_1.default.internal(err instanceof Error ? err : `${err}`);
+                            }
+                        }
+                        return boom_1.default.unauthorized(null, tokenTypePrefix);
+                    });
+                },
+            };
+        });
+        t.strategy(this.strategyName, this.strategyName, this.options);
+    }
 }
 exports.OAuth2AuthDesign = OAuth2AuthDesign;
-class OAuth2WithJWKSAuthDesign extends OAuth2AuthDesign {
-    get jwksGenerator() {
-        return tslib_1.__classPrivateFieldGet(this, _OAuth2WithJWKSAuthDesign_jwksGenerator, "f");
+class JWKSRoute {
+    static buildDefault() {
+        return new DefaultJWKSRoute();
     }
-    constructor(jwksStore, ttlSeconds) {
-        super();
-        _OAuth2WithJWKSAuthDesign_jwksGenerator.set(this, void 0);
-        tslib_1.__classPrivateFieldSet(this, _OAuth2WithJWKSAuthDesign_jwksGenerator, new jwks_generator_1.JWKSGenerator(jwksStore || (0, in_memory_jwks_store_1.getInMemoryJWKSStore)(), ttlSeconds), "f");
+    get path() {
+        return this._path;
     }
-    setTokenTTL(ttlSeconds) {
-        tslib_1.__classPrivateFieldGet(this, _OAuth2WithJWKSAuthDesign_jwksGenerator, "f").ttl = ttlSeconds;
+    get handler() {
+        return this._handler;
+    }
+    constructor(path, handler) {
+        this._path = path;
+        this._handler = handler;
+    }
+}
+exports.JWKSRoute = JWKSRoute;
+class DefaultJWKSRoute extends JWKSRoute {
+    constructor() {
+        super('/oauth2/keys');
+    }
+    setPath(path) {
+        if (path)
+            this._path = path;
         return this;
     }
-    getTokenTTL() {
-        return tslib_1.__classPrivateFieldGet(this, _OAuth2WithJWKSAuthDesign_jwksGenerator, "f").ttl;
+    validate(handler) {
+        this._handler = handler;
+        return this;
+    }
+}
+exports.DefaultJWKSRoute = DefaultJWKSRoute;
+//#endregion OAuth2AuthDesignBuilder
+//#region OIDCAuthUtil
+class OIDCAuthUtil extends api_doc_generator_1.OAuth2Util {
+    toOpenAPI() {
+        const host = this.getHost();
+        return {
+            [this.securitySchemeName]: {
+                type: 'openIdConnect',
+                openIdConnectUrl: `${host || ''}/.well-known/openid-configuration`
+            }
+        };
     }
 }
-exports.OAuth2WithJWKSAuthDesign = OAuth2WithJWKSAuthDesign;
-_OAuth2WithJWKSAuthDesign_jwksGenerator = new WeakMap();
-//#endregion OAuth2AuthDesign
+exports.OIDCAuthUtil = OIDCAuthUtil;
+//#endregion OAuth2SingleAuthFlowBuilder
 //# sourceMappingURL=common.js.map

package/lib/flows/common.js.map

@@ -1 +1 @@
-{"version":3,"file":"common.js","sourceRoot":"","sources":["../../src/flows/common.ts"],"names":[],"mappings":";;;;;AAAA,wCASqB;AAGrB,wEAAqE;AACrE,4DAA0E;AAC1E,sDAA8D;AAC9D,sEAA4K;AA0D5K,MAAa,uBAAuB;IAMhC,IAAI,IAAI;QACJ,OAAO,IAAI,CAAC,KAAK,CAAA;IACrB,CAAC;IAED,IAAI,OAAO;QACP,OAAO,IAAI,CAAC,QAAQ,CAAA;IACxB,CAAC;IAED,YACI,IAAY,EACZ,OAAwC;QAExC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;IAC5B,CAAC;CACJ;AArBD,0DAqBC;AAqBD,MAAa,mBAAmB;IAa5B,YAAY,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,KAAK,EAAE,QAAQ,EAA4G;QATxK,cAAS,GAAG,QAAQ,CAAA;QAU1B,IAAI,CAAC,WAAW,GAAG,YAAY,CAAA;QAC/B,IAAI,CAAC,SAAS,GAAG,UAAU,CAAA;QAC3B,IAAI,CAAC,YAAY,GAAG,aAAa,CAAA;QACjC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAA;QAClB,IAAI,CAAC,OAAO,GAAG,QAAQ,CAAA;IAC3B,CAAC;IAED,cAAc,CAAC,KAAa;QACxB,IAAI,CAAC,WAAW,GAAG,KAAK,CAAA;QACxB,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,cAAc;QACV,OAAO,IAAI,CAAC,WAAW,CAAC;IAC5B,CAAC;IAED,YAAY,CAAC,KAAyB;QAClC,IAAI,CAAC,SAAS,GAAG,OAAO,KAAK,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAA;QAChE,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,YAAY;QACR,OAAO,IAAI,CAAC,SAAS,CAAC;IAC1B,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,KAAc;QACvB,IAAI,CAAC,SAAS,GAAG,KAAK,CAAA;QACtB,OAAO,IAAI,CAAC;IAChB,CAAC;IACD;;OAEG;IACH,YAAY;QACR,OAAO,IAAI,CAAC,SAAS,CAAC;IAC1B,CAAC;IAED,eAAe,CAAC,KAAc;QAC1B,IAAI,CAAC,YAAY,GAAG,KAAK,CAAA;QACzB,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,eAAe;QACX,OAAO,IAAI,CAAC,YAAY,CAAC;IAC7B,CAAC;IAED,QAAQ,CAAC,KAAyB;QAC9B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;QAC3D,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,QAAQ;QACJ,OAAO,IAAI,CAAC,KAAK,CAAC;IACtB,CAAC;IAED,UAAU,CAAC,KAAc;QACrB,IAAI,CAAC,OAAO,GAAG,KAAK,CAAA;QACpB,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,UAAU;QACN,OAAO,IAAI,CAAC,OAAO,CAAC;IACxB,CAAC;IAED,QAAQ;QACJ,OAAO;YACH,YAAY,EAAE,IAAI,CAAC,cAAc,EAAE;YACnC,UAAU,EAAE,IAAI,CAAC,YAAY,EAAE;YAC/B,UAAU,EAAE,IAAI,CAAC,YAAY,EAAE;YAC/B,aAAa,EAAE,IAAI,CAAC,eAAe,EAAE;YACrC,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE;YACtB,QAAQ,EAAE,IAAI,CAAC,UAAU,EAAE;SAC9B,CAAA;IACL,CAAC;IAED,MAAM;QACF,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAA;IAC1B,CAAC;CACJ;AAzFD,kDAyFC;AAED,gCAAgC;AAEhC,0BAA0B;AAE1B,MAAsB,gBAAiB,SAAQ,kBAAU;IAcrD,IAAI,SAAS;QACT,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,CAAA;IACjC,CAAC;IAED,IAAc,iBAAiB;QAC3B,MAAM,MAAM,GAAkE;YAC1E,mBAAmB,EAAE,SAAS;YAC9B,kBAAkB,EAAE,SAAS;YAC7B,iBAAiB,EAAE,SAAS;YAC5B,eAAe,EAAE,SAAS;YAC1B,IAAI,EAAE,SAAS;SAClB,CAAA;QAED,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE;YACxD,MAAM,CAAC,GAAG,GAA8B,CAAA;YACxC,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAA;YACtC,OAAO,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAA;QACvD,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAkC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;QAEzD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACf,MAAM,CAAC,mBAAmB,GAAG,IAAI,uCAAiB,EAAE,CAAA;QACxD,CAAC;QAED,OAAO,MAAM,CAAA;IACjB,CAAC;IAED;QACI,KAAK,EAAE,CAAA;QAvCD,uBAAkB,GAAkE;YAC1F,mBAAmB,EAAE,SAAS;YAC9B,kBAAkB,EAAE,SAAS;YAC7B,iBAAiB,EAAE,SAAS;YAC5B,eAAe,EAAE,SAAS;YAC1B,IAAI,EAAE,SAAS;SAClB,CAAA;QAkCG,IAAI,CAAC,UAAU,GAAG,IAAI,yBAAW,EAAE,CAAA;QACnC;;;WAGG;IACP,CAAC;IAEe,oBAAoB,CAChC,GAA4B,EAC5B,oBAAmF,EACnF,UAAqC;;YAErC,IAAI,QAA4B,CAAC;YACjC,IAAI,YAAgC,CAAC;YACrC,IAAI,KAA8B,CAAC;YACnC,IAAI,gBAAoC,CAAC;YAEzC,KAAK,MAAM,EAAE,IAAI,UAAU,EAAE,CAAC;gBAC1B,MAAM,UAAU,GAAG,oBAAoB,CAAC,EAAE,CAAC,CAAA;gBAC3C,IAAI,UAAU,EAAE,CAAC;oBACb,gDAAgD;oBAChD,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,aAAa,CAAC,GAAyC,CAAC,CAAA;oBACnF,IAAI,CAAC,CAAC,aAAa,EAAE,CAAC;wBAClB,iDAAiD;wBACjD,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAA;wBACrB,YAAY,GAAG,CAAC,CAAC,YAAY,CAAA;wBAC7B,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;4BACd,KAAK,GAAG,iBAAiB,CAAA;4BACzB,gBAAgB,GAAG,SAAS,UAAU,CAAC,MAAM,qBAAqB,CAAA;wBACtE,CAAC;6BAAM,IAAI,CAAC,UAAU,CAAC,gBAAgB,IAAI,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC;4BACzD,KAAK,GAAG,iBAAiB,CAAA;4BACzB,gBAAgB,GAAG,SAAS,UAAU,CAAC,MAAM,yBAAyB,CAAA;wBAC1E,CAAC;wBACD,MAAM;oBACV,CAAC;yBAAM,CAAC;wBACJ,gDAAgD;oBACpD,CAAC;gBACL,CAAC;YACL,CAAC;YAED,OAAO;gBACH,KAAK;gBACL,gBAAgB;gBAChB,QAAQ;gBACR,YAAY;aACf,CAAA;QACL,CAAC;KAAA;IAED,YAAY,CAAuC,KAAsB;QACrE,IAAI,CAAC,UAAU,GAAG,KAAK,CAAA;QACvB,OAAO,IAAI,CAAA;IACf,CAAC;IAED,2BAA2B;QACvB,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE;YAC1D,OAAO,IAAI,CAAC,kBAAkB,CAAC,GAA8B,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAA;QACpF,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAkC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;QAEzD,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACjB,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAA;QACtC,CAAC;QAED,OAAO,IAAA,kDAA4B,EAAC,MAAM,CAAC,CAAC;IAChD,CAAC;IAED,qCAAqC;QACjC,IAAI,CAAC,kBAAkB,CAAC,mBAAmB,GAAG,IAAI,uCAAiB,EAAE,CAAA;QACrE,OAAO,IAAI,CAAA;IACf,CAAC;IAED,oCAAoC;QAChC,IAAI,CAAC,kBAAkB,CAAC,kBAAkB,GAAG,IAAI,sCAAgB,EAAE,CAAA;QACnE,OAAO,IAAI,CAAA;IACf,CAAC;IAED,wBAAwB;QACpB,IAAI,CAAC,kBAAkB,CAAC,IAAI,GAAG,IAAI,oCAAc,EAAE,CAAA;QACnD,OAAO,IAAI,CAAA;IACf,CAAC;IAED,6BAA6B,CAAC,KAA+E;QACzG,IAAI,KAAK,IAAI,qBAAqB,EAAE,CAAC;YACjC,IAAI,CAAC,oCAAoC,EAAE,CAAA;QAC/C,CAAC;aAAM,IAAI,KAAK,IAAI,oBAAoB,EAAE,CAAC;YACvC,IAAI,CAAC,qCAAqC,EAAE,CAAA;QAChD,CAAC;aAAM,IAAI,KAAK,IAAI,MAAM,EAAE,CAAC;YACzB,IAAI,CAAC,wBAAwB,EAAE,CAAA;QACnC,CAAC;aAAM,CAAC;YACJ,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,KAAK,CAAA;QACjD,CAAC;QACD,OAAO,IAAI,CAAA;IACf,CAAC;CACJ;AAtID,4CAsIC;AAED,MAAsB,wBAAyB,SAAQ,gBAAgB;IAInE,IAAI,aAAa;QACb,OAAO,+BAAA,IAAI,+CAAe,CAAA;IAC9B,CAAC;IAED,YAAY,SAAqB,EAAE,UAAmB;QAClD,KAAK,EAAE,CAAA;QAPX,0DAA6B;QAQzB,+BAAA,IAAI,2CAAkB,IAAI,8BAAa,CAAC,SAAS,IAAI,IAAA,2CAAoB,GAAE,EAAE,UAAU,CAAC,MAAA,CAAA;IAC5F,CAAC;IAED,WAAW,CAAC,UAAmB;QAC3B,+BAAA,IAAI,+CAAe,CAAC,GAAG,GAAG,UAAU,CAAA;QACpC,OAAO,IAAI,CAAA;IACf,CAAC;IAED,WAAW;QACP,OAAO,+BAAA,IAAI,+CAAe,CAAC,GAAG,CAAA;IAClC,CAAC;CACJ;AArBD,4DAqBC;;AAED,6BAA6B"}
+{"version":3,"file":"common.js","sourceRoot":"","sources":["../../src/flows/common.ts"],"names":[],"mappings":";;;;AAwGA,gEAOC;;AA/GD,wCAWqB;AACrB,8DAAgD;AAChD,8DAA6B;AAE7B,kEAAwD;AAIxD,sDAA8D;AAC9D,sEAOsC;AACtC,0DAA6G;AAC7G,sEAAgE;AASnD,QAAA,uBAAuB,GAAG,MAAM,CAAC,MAAM,CAAC;IACjD,eAAe,EAAE,iBAAiB;IAClC,mBAAmB,EAAE,qBAAqB;IAC1C,aAAa,EAAE,eAAe;IAC9B,yBAAyB,EAAE,2BAA2B;IACtD,aAAa,EAAE,eAAe;IAC9B,YAAY,EAAE,cAAc;IAC5B,uBAAuB,EAAE,yBAAyB;IAClD,cAAc,EAAE,gBAAgB;IAChC,aAAa,EAAE,eAAe;IAC9B,sBAAsB,EAAE,wBAAwB;CAC1C,CAAC,CAAC;AAEC,QAAA,uBAAuB,GAAG,MAAM,CAAC,MAAM,CAAC;IACjD,cAAc,EAAE,gBAAgB;IAChC,oBAAoB,EAAE,sBAAsB;IAC5C,gBAAgB,EAAE,kBAAkB;IACpC,cAAc,EAAE,gBAAgB;IAChC,gBAAgB,EAAE,kBAAkB;CAC9B,CAAC,CAAC;AAEC,QAAA,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC,gCAEtC,+BAAuB,GAEvB,+BAAuB,CACpB,CAAC,CAAC;AAEC,QAAA,oBAAoB,GAAG,MAAM,CAAC,MAAM,CAAC;IAC9C,aAAa,EAAE,eAAe;IAC9B,kBAAkB,EAAE,oBAAoB;CAClC,CAAC,CAAC;AAEC,QAAA,yBAAyB,GAAG,MAAM,CAAC,MAAM,CAAC;IACnD,aAAa,EAAE,eAAe;IAC9B,qBAAqB,EAAE,uBAAuB;IAC9C,SAAS,EAAE,WAAW;IACtB,aAAa,EAAE,eAAe;CACxB,CAAC,CAAC;AAEC,QAAA,kBAAkB,GAAG,MAAM,CAAC,MAAM,CAAC,4DAC3C,+BAAuB,GACvB,+BAAuB,GACvB,4BAAoB,GACpB,iCAAyB,CACpB,CAAC,CAAC;AAqBZ,SAAgB,0BAA0B,CACtC,QAA0D;IAE1D,OAAO,CAAC,IAA4B,EAAiB,EAAE;QACnD,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC/B,OAAO,OAAO,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3C,CAAC,CAAC;AACN,CAAC;AAmFD,MAAsB,gBAAgB;IAQlC,IAAI,IAAI;QACJ,OAAO,IAAI,CAAC,KAAK,CAAA;IACrB,CAAC;IAED,IAAI,OAAO;QACP,OAAO,IAAI,CAAC,QAAQ,CAAA;IACxB,CAAC;IAED,YACI,IAAY,EACZ,OAAoC;QAEpC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;IAC5B,CAAC;CACJ;AAvBD,4CAuBC;AAoCD,MAAa,uBAEX,SAAQ,gBAGT;IACG,MAAM,CAAC,YAAY;QAIf,OAAO,IAAI,8BAA8B,EAAa,CAAA;IAC1D,CAAC;CACJ;AAZD,0DAYC;AAED,MAAa,8BAGX,SAAQ,uBAA6B;IAOnC;QACI,KAAK,CAAC,eAAe,EAAE,CAAO,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE;YAC3C,MAAM,CAAC,GAAG,MAAM,+BAAA,IAAI,qDAAe,MAAnB,IAAI,EAAgB,KAAK,EAAE,GAAG,CAAC,CAAA;YAE/C,IAAI,CAAC,CAAC;gBAAE,OAAO,CAAC,CAAC,QAAQ,CAAA;YAEzB,IAAI,OAAO,IAAI,CAAC;gBAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YAEhD,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAClC,CAAC,CAAA,CAAC,CAAA;QAXN,gEAAmE;QAY/D,+BAAA,IAAI,iDAAkB,GAAG,EAAE,CAAC,IAAI,MAAA,CAAC;IACrC,CAAC;IAED,aAAa,CAAC,OAA4D;QACtE,+BAAA,IAAI,iDAAkB,OAAO,MAAA,CAAC;QAC9B,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,OAAO,CAAC,IAAe;QACnB,IAAI,IAAI;YACJ,IAAI,CAAC,KAAK,GAAG,IAAI,CAAA;QACrB,OAAO,IAAI,CAAA;IACf,CAAC;IAED,QAAQ,CAAC,OAAwC;QAC7C,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAA;QACvB,OAAO,IAAI,CAAA;IACf,CAAC;CACJ;AAtCD,wEAsCC;;AAqBD,MAAa,mBAAmB;IAa5B,YAAY,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,KAAK,EAAE,QAAQ,EAA4G;QATxK,cAAS,GAAG,QAAQ,CAAA;QAU1B,IAAI,CAAC,WAAW,GAAG,YAAY,CAAA;QAC/B,IAAI,CAAC,SAAS,GAAG,UAAU,CAAA;QAC3B,IAAI,CAAC,YAAY,GAAG,aAAa,CAAA;QACjC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAA;QAClB,IAAI,CAAC,OAAO,GAAG,QAAQ,CAAA;IAC3B,CAAC;IAED,cAAc,CAAC,KAAa;QACxB,IAAI,CAAC,WAAW,GAAG,KAAK,CAAA;QACxB,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,cAAc;QACV,OAAO,IAAI,CAAC,WAAW,CAAC;IAC5B,CAAC;IAED,YAAY,CAAC,KAAyB;QAClC,IAAI,CAAC,SAAS,GAAG,OAAO,KAAK,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAA;QAChE,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,YAAY;QACR,OAAO,IAAI,CAAC,SAAS,CAAC;IAC1B,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,KAAc;QACvB,IAAI,CAAC,SAAS,GAAG,KAAK,CAAA;QACtB,OAAO,IAAI,CAAC;IAChB,CAAC;IACD;;OAEG;IACH,YAAY;QACR,OAAO,IAAI,CAAC,SAAS,CAAC;IAC1B,CAAC;IAED,eAAe,CAAC,KAAc;QAC1B,IAAI,CAAC,YAAY,GAAG,KAAK,CAAA;QACzB,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,eAAe;QACX,OAAO,IAAI,CAAC,YAAY,CAAC;IAC7B,CAAC;IAED,QAAQ,CAAC,KAAyB;QAC9B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;QAC3D,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,QAAQ;QACJ,OAAO,IAAI,CAAC,KAAK,CAAC;IACtB,CAAC;IAED,UAAU,CAAC,KAAc;QACrB,IAAI,CAAC,OAAO,GAAG,KAAK,CAAA;QACpB,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,UAAU;QACN,OAAO,IAAI,CAAC,OAAO,CAAC;IACxB,CAAC;IAED,QAAQ;QACJ,OAAO;YACH,YAAY,EAAE,IAAI,CAAC,cAAc,EAAE;YACnC,UAAU,EAAE,IAAI,CAAC,YAAY,EAAE;YAC/B,UAAU,EAAE,IAAI,CAAC,YAAY,EAAE;YAC/B,aAAa,EAAE,IAAI,CAAC,eAAe,EAAE;YACrC,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE;YACtB,QAAQ,EAAE,IAAI,CAAC,UAAU,EAAE;SAC9B,CAAA;IACL,CAAC;IAED,MAAM;QACF,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAA;IAC1B,CAAC;CACJ;AAzFD,kDAyFC;AAgCD,MAAsB,gBAAiB,SAAQ,kBAAU;IAarD,IAAI,SAAS;QACT,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,CAAA;IACjC,CAAC;IAED,IAAc,iBAAiB;QAC3B,MAAM,MAAM,GAAkE;YAC1E,mBAAmB,EAAE,SAAS;YAC9B,kBAAkB,EAAE,SAAS;YAC7B,iBAAiB,EAAE,SAAS;YAC5B,eAAe,EAAE,SAAS;YAC1B,IAAI,EAAE,SAAS;SAClB,CAAA;QAED,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE;YACxD,MAAM,CAAC,GAAG,GAA8B,CAAA;YACxC,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAA;YACtC,OAAO,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAA;QACvD,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAkC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;QAEzD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACf,MAAM,CAAC,mBAAmB,GAAG,IAAI,uCAAiB,EAAE,CAAA;QACxD,CAAC;QAED,OAAO,MAAM,CAAA;IACjB,CAAC;IAoBD,YAAY,OAAiC;;QACzC,KAAK,EAAE,CAAA;QAxDD,uBAAkB,GAAkE;YAC1F,mBAAmB,EAAE,SAAS;YAC9B,kBAAkB,EAAE,SAAS;YAC7B,iBAAiB,EAAE,SAAS;YAC5B,eAAe,EAAE,SAAS;YAC1B,IAAI,EAAE,SAAS;SAClB,CAAA;QAmDG,IAAI,CAAC,UAAU,GAAG,IAAI,yBAAW,EAAE,CAAA;QACnC,IAAI,CAAC,YAAY,GAAG,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,YAAY,KAAI,oBAAoB,CAAA;QACjE,IAAI,CAAC,OAAO,GAAG,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,OAAO,EAAC,CAAC,mBAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAG,CAAC,CAAC,EAAE,CAAA;QAE/D,EAAE;QACF,IAAI,CAAC,SAAS,GAAG,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,SAAS,CAAA;QACnC,IAAI,CAAC,YAAY,GAAG,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,WAAW,0CAAE,QAAQ,CAAA;QAClD,IAAI,CAAC,gBAAgB,GAAG,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,WAAW,0CAAE,GAAG,CAAA;QACjD,IAAI,CAAC,sBAAsB,GAAG,MAAA,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,WAAW,0CAAE,QAAQ,0CAAE,UAAU,CAAA;QACxE,IAAI,CAAC,0BAA0B,GAAG,MAAA,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,WAAW,0CAAE,QAAQ,0CAAE,cAAc,CAAA;IACpF,CAAC;IAEe,oBAAoB,CAChC,GAA4B,EAC5B,oBAAmF,EACnF,UAAqC;;YAErC,IAAI,QAA4B,CAAC;YACjC,IAAI,YAAgC,CAAC;YACrC,IAAI,KAAyC,CAAC;YAC9C,IAAI,gBAAoC,CAAC;YAEzC,KAAK,MAAM,EAAE,IAAI,UAAU,EAAE,CAAC;gBAC1B,MAAM,UAAU,GAAG,oBAAoB,CAAC,EAAE,CAAC,CAAA;gBAC3C,IAAI,UAAU,EAAE,CAAC;oBACb,gDAAgD;oBAChD,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,aAAa,CAAC,GAAyC,CAAC,CAAA;oBACnF,IAAI,CAAC,CAAC,aAAa,EAAE,CAAC;wBAClB,iDAAiD;wBACjD,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAA;wBACrB,YAAY,GAAG,CAAC,CAAC,YAAY,CAAA;wBAC7B,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;4BACd,KAAK,GAAG,uBAAe,CAAC,eAAe,CAAA;4BACvC,gBAAgB,GAAG,SAAS,UAAU,CAAC,MAAM,qBAAqB,CAAA;wBACtE,CAAC;6BAAM,IAAI,CAAC,UAAU,CAAC,gBAAgB,IAAI,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC;4BACzD,KAAK,GAAG,uBAAe,CAAC,eAAe,CAAA;4BACvC,gBAAgB,GAAG,SAAS,UAAU,CAAC,MAAM,yBAAyB,CAAA;wBAC1E,CAAC;wBACD,MAAM;oBACV,CAAC;yBAAM,CAAC;wBACJ,gDAAgD;oBACpD,CAAC;gBACL,CAAC;YACL,CAAC;YAED,OAAO;gBACH,KAAK;gBACL,gBAAgB;gBAChB,QAAQ;gBACR,YAAY;aACf,CAAA;QACL,CAAC;KAAA;IAES,eAAe;QACrB,IAAI,IAAI,CAAC,YAAY;YAAE,OAAO,IAAI,CAAC,YAAY,CAAC;QAChD,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,CAAC;YACzE,IAAI,CAAC,YAAY,GAAG,IAAI,4BAAY,CAAC,IAAI,CAAC,YAAY,IAAI,IAAI,sCAAgB,EAAE,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAA;QAC5G,CAAC;QACD,OAAO,IAAI,CAAC,YAAY,CAAA;IAC5B,CAAC;IAES,cAAc;QACpB,IAAI,IAAI,CAAC,WAAW;YAAE,OAAO,IAAI,CAAC,WAAW,CAAC;QAC9C,MAAM,YAAY,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;QAC5C,IAAI,YAAY,IAAI,IAAI,CAAC,sBAAsB,EAAE,CAAC;YAC9C,IAAI,CAAC,WAAW,GAAG,IAAI,2BAAW,CAAC;gBAC/B,YAAY,EAAE,YAAY;gBAC1B,kBAAkB,EAAE,IAAI,CAAC,sBAAsB;gBAC/C,eAAe,EAAE,IAAI,CAAC,0BAA0B,IAAI,IAAI,sCAAgB,EAAE;gBAC1E,MAAM,EAAE,IAAI,CAAC,MAAM;aACtB,CAAC,CAAA;QACN,CAAC;QACD,OAAO,IAAI,CAAC,WAAW,CAAA;IAC3B,CAAC;IAES,kBAAkB,CAAC,CAAa;QACtC,MAAM,YAAY,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;QAE5C,IAAI,IAAI,CAAC,SAAS,IAAI,YAAY,EAAE,CAAC;YACjC,CAAC,CAAC,KAAK,CAAC;gBACJ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI;gBACzB,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE;oBACL,OAAO,EAAE;wBACL,KAAK,EAAE;4BACH,IAAI,EAAE,KAAK;yBACd;qBACJ;iBACJ;gBACD,OAAO,EAAE,CAAO,GAAG,EAAE,CAAC,EAAE,EAAE;;oBAEtB,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,uBAAuB,EAAE,CAAA;oBAEzD,IAAI,MAAA,IAAI,CAAC,SAAS,0CAAE,OAAO,EAAE,CAAC;wBAC1B,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;4BAC1B,IAAI;yBACP,EAAE,GAAG,EAAE,CAAC,CAAC,CAAA;oBACd,CAAC;oBAED,OAAO,IAAI,CAAA;gBACf,CAAC,CAAA;aACJ,CAAC,CAAA;QACN,CAAC;IACL,CAAC;IAEK,kBAAkB;;;YACpB,OAAO,MAAA,IAAI,CAAC,cAAc,EAAE,0CAAE,kBAAkB,EAAE,CAAA;QACtD,CAAC;KAAA;IAEK,eAAe;;;YACjB,OAAO,MAAA,IAAI,CAAC,eAAe,EAAE,0CAAE,eAAe,EAAE,CAAA;QACpD,CAAC;KAAA;IAED,YAAY,CAAuC,KAAsB;QACrE,IAAI,CAAC,UAAU,GAAG,KAAK,CAAA;QACvB,OAAO,IAAI,CAAA;IACf,CAAC;IAED,2BAA2B;QACvB,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE;YAC1D,OAAO,IAAI,CAAC,kBAAkB,CAAC,GAA8B,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAA;QACpF,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAkC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;QAEzD,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACjB,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAA;QACtC,CAAC;QAED,OAAO,IAAA,kDAA4B,EAAC,MAAM,CAAC,CAAC;IAChD,CAAC;IAED,qCAAqC;QACjC,IAAI,CAAC,kBAAkB,CAAC,mBAAmB,GAAG,IAAI,uCAAiB,EAAE,CAAA;QACrE,OAAO,IAAI,CAAA;IACf,CAAC;IAED,oCAAoC;QAChC,IAAI,CAAC,kBAAkB,CAAC,kBAAkB,GAAG,IAAI,sCAAgB,EAAE,CAAA;QACnE,OAAO,IAAI,CAAA;IACf,CAAC;IAED,wBAAwB;QACpB,IAAI,CAAC,kBAAkB,CAAC,IAAI,GAAG,IAAI,oCAAc,EAAE,CAAA;QACnD,OAAO,IAAI,CAAA;IACf,CAAC;IAED,6BAA6B,CAAC,KAA+E;QACzG,IAAI,KAAK,IAAI,qBAAqB,EAAE,CAAC;YACjC,IAAI,CAAC,oCAAoC,EAAE,CAAA;QAC/C,CAAC;aAAM,IAAI,KAAK,IAAI,oBAAoB,EAAE,CAAC;YACvC,IAAI,CAAC,qCAAqC,EAAE,CAAA;QAChD,CAAC;aAAM,IAAI,KAAK,IAAI,MAAM,EAAE,CAAC;YACzB,IAAI,CAAC,wBAAwB,EAAE,CAAA;QACnC,CAAC;aAAM,CAAC;YACJ,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,KAAK,CAAA;QACjD,CAAC;QACD,OAAO,IAAI,CAAA;IACf,CAAC;IAED,EAAE;IAEF,WAAW,CAAC,UAAmB;QAC3B,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAA;QAC1B,OAAO,IAAI,CAAA;IACf,CAAC;IAED,WAAW;QACP,OAAO,IAAI,CAAC,QAAQ,CAAA;IACxB,CAAC;IAED,cAAc,CAAC,WAAmB;QAC9B,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,OAAO,IAAI,CAAC;IAChB,CAAC;IAED;;;;;OAKG;IACH,SAAS,CAAC,MAA8B;QACpC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,SAAS;QACL,OAAO,IAAI,CAAC,MAAM,CAAA;IACtB,CAAC;IAED,eAAe;QACX,OAAO,IAAI,CAAC,YAAY,CAAC;IAC7B,CAAC;IAED,cAAc;QACV,OAAO,IAAI,CAAC,WAAW,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,iBAAiB,CAAC,CAAa;QAC3B,MAAM,eAAe,GAAG,IAAI,CAAC,SAAS,CAAA;QACtC,MAAM,iBAAiB,GAAG,IAAI,CAAC,UAAU,CAAA;QACzC,MAAM,eAAe,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;QAErD,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE;YAE7C,OAAO;gBACG,YAAY,CAAC,OAAO,EAAE,CAAC;;;wBAEzB,MAAM,QAAQ,GAAsB,cAAI,CAAC,eAAe,CAAC,EAAE,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC;wBAE5E,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC;wBAE5D,MAAM,SAAS,GAAG,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;wBAExE,MAAM,SAAS,GAAG,SAAS,CAAC,CAAC,CAAC,CAAA;wBAC9B,IAAI,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,CAAA;wBACxB,IAAI,qBAA6C,CAAC;wBAElD,IAAI,SAAS,CAAC,WAAW,EAAE,KAAK,eAAe,CAAC,WAAW,EAAE,EAAE,CAAC;4BAC5D,KAAK,GAAG,EAAE,CAAA;4BACV,OAAO,cAAI,CAAC,YAAY,CAAC,IAAI,EAAE,eAAe,CAAC,CAAA;wBACnD,CAAC;wBAED,IAAI,CAAC,CAAC,MAAM,iBAAiB,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;4BAC7D,OAAO,cAAI,CAAC,YAAY,CAAC,IAAI,EAAE,eAAe,CAAC,CAAA;wBACnD,CAAC;wBAED,MAAM,YAAY,GAAG,eAAe,EAAE,CAAA;wBAEtC,IAAI,YAAY,IAAI,QAAQ,CAAC,kBAAkB,EAAE,CAAC;4BAC9C,IAAI,CAAC;gCACD,qBAAqB,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;4BAC5D,CAAC;4BAAC,OAAO,GAAG,EAAE,CAAC;gCACX,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;gCAChB,OAAO,cAAI,CAAC,YAAY,CAAC,IAAI,EAAE,eAAe,CAAC,CAAA;4BACnD,CAAC;wBACL,CAAC;wBAED,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;4BACpB,IAAI,CAAC;gCACD,MAAM,MAAM,GAAG,MAAM,CAAA,MAAA,QAAQ,CAAC,QAAQ,yDAAG,OAAO,EAAE,EAAE,KAAK,EAAE,qBAAqB,EAAE,EAAE,CAAC,CAAC,CAAA,CAAA;gCAEtF,IAAI,MAAM,IAAI,QAAQ,IAAI,MAAM,EAAE,CAAC;oCAC/B,OAAO,MAAM,CAAA;gCACjB,CAAC;gCAED,IAAI,MAAM,IAAI,QAAQ,IAAI,MAAM,EAAE,CAAC;oCAC/B,OAAO,MAAM,CAAA;gCACjB,CAAC;gCAED,IAAI,MAAM,EAAE,CAAC;oCACT,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;oCAE5D,IAAI,OAAO,IAAI,WAAW,EAAE,CAAC;wCACzB,OAAO,CAAC,CAAC,aAAa,CAAC,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,CAAA;oCACtD,CAAC;oCAED,IAAI,OAAO,EAAE,CAAC;wCACV,OAAO,CAAC,CAAC,eAAe,CAAC,cAAI,CAAC,YAAY,CAAC,OAAO,EAAE,eAAe,CAAC,EAAE;4CAClE,WAAW,EAAE,WAAW,IAAI,EAAE;4CAC9B,SAAS;yCACZ,CAAC,CAAA;oCACN,CAAC;gCACL,CAAC;4BACL,CAAC;4BAAC,OAAO,GAAG,EAAE,CAAC;gCACX,OAAO,cAAI,CAAC,QAAQ,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,EAAE,CAAC,CAAA;4BAC/D,CAAC;wBACL,CAAC;wBAED,OAAO,cAAI,CAAC,YAAY,CAAC,IAAI,EAAE,eAAe,CAAC,CAAA;oBACnD,CAAC;iBAAA;aACJ,CAAA;QACL,CAAC,CAAC,CAAA;QACF,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,CAAA;IAClE,CAAC;CACJ;AAhVD,4CAgVC;AAyBD,MAAa,SAAS;IAIlB,MAAM,CAAC,YAAY;QAGf,OAAO,IAAI,gBAAgB,EAAW,CAAA;IAC1C,CAAC;IAKD,IAAI,IAAI;QACJ,OAAO,IAAI,CAAC,KAAK,CAAA;IACrB,CAAC;IAED,IAAI,OAAO;QACP,OAAO,IAAI,CAAC,QAAQ,CAAA;IACxB,CAAC;IAED,YACI,IAAY,EACZ,OAA2B;QAE3B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;IAC5B,CAAC;CACJ;AA5BD,8BA4BC;AAED,MAAa,gBAEX,SAAQ,SAAe;IACrB;QACI,KAAK,CAAC,cAAc,CAAC,CAAA;IACzB,CAAC;IAED,OAAO,CAAC,IAAe;QACnB,IAAI,IAAI;YACJ,IAAI,CAAC,KAAK,GAAG,IAAI,CAAA;QACrB,OAAO,IAAI,CAAA;IACf,CAAC;IAED,QAAQ,CAAC,OAA0B;QAC/B,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAA;QACvB,OAAO,IAAI,CAAA;IACf,CAAC;CACJ;AAjBD,4CAiBC;AAYD,oCAAoC;AAEpC,sBAAsB;AAEtB,MAAa,YAAa,SAAQ,8BAAU;IACxC,SAAS;QACL,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,CAAA;QAC3B,OAAO;YACH,CAAC,IAAI,CAAC,kBAAkB,CAAC,EAAE;gBACvB,IAAI,EAAE,eAAe;gBACrB,gBAAgB,EAAE,GAAG,IAAI,IAAI,EAAE,mCAAmC;aACrE;SACJ,CAAA;IACL,CAAC;CACJ;AAVD,oCAUC;AAyCD,wCAAwC"}

package/lib/flows/device-auth/authorization-route.d.ts

@@ -0,0 +1,83 @@
+import { Lifecycle, ReqRef, ReqRefDefaults, Request, ResponseToolkit } from '@kaapi/kaapi';
+import { PathValue } from '../common';
+export interface OAuth2DeviceAuthorizationParams {
+    clientId: string;
+    scope?: string;
+}
+export type OAuth2DeviceAuthorizationHandler<Refs extends ReqRef = ReqRefDefaults, R extends Lifecycle.ReturnValue<any> = Lifecycle.ReturnValue<Refs>> = (params: OAuth2DeviceAuthorizationParams, request: Request<Refs>, h: ResponseToolkit<Refs>) => R;
+export interface IOAuth2DeviceAuthorizationRoute<PostRefs extends ReqRef = ReqRefDefaults> {
+    path: string;
+    handler: OAuth2DeviceAuthorizationHandler<PostRefs>;
+}
+export declare class OAuth2DeviceAuthorizationRoute<PostRefs extends ReqRef = ReqRefDefaults> implements IOAuth2DeviceAuthorizationRoute<PostRefs> {
+    static buildDefault<PostRefs extends ReqRef = ReqRefDefaults>(): DefaultOAuth2DeviceAuthorizationRoute<PostRefs>;
+    protected _path: string;
+    protected _handler: OAuth2DeviceAuthorizationHandler<PostRefs>;
+    get path(): string;
+    get handler(): OAuth2DeviceAuthorizationHandler<PostRefs, Lifecycle.ReturnValue<PostRefs>>;
+    constructor(path: string, handler: OAuth2DeviceAuthorizationHandler<PostRefs>);
+}
+/**
+ *
+ * example:
+ * ```json
+ * {
+       "device_code": "abc123",
+       "user_code": "XYZ-789",
+       "verification_uri": "https://auth.example.com/activate",
+       "verification_uri_complete": "https://auth.example.com/activate?user_code=XYZ-789",
+       "expires_in": 1800,
+       "interval": 5
+ * }
+ * ```
+ */
+export type DeviceCodeResponse = {
+    /**
+     * Used by the device to poll the token endpoint.
+     */
+    device_code: string;
+    /**
+     * Used by the end user to authorize the device.
+     *
+     * Shown to the user to enter on the verification page.
+     */
+    user_code: string;
+    /**
+     * The end-user verification URI on the authorization server. This is where the user goes to authorize the device.
+     *
+     * Where the user should go to enter the code.
+     */
+    verification_uri: string;
+    /**
+     * Optional convenience URI with the code pre-filled.
+     *
+     * The verification URI, including the user code, that is presented to the user. This is a convenience for clients that can display URIs.
+     *
+     * Where the user should go to enter the code (with the code embedded in the link).
+     */
+    verification_uri_complete?: string;
+    /**
+     * The lifetime in seconds of the device_code and user_code.
+     *
+     * The expiration time of the device and user codes.
+     */
+    expires_in: number;
+    /**
+     * The minimum amount of time in seconds that the client MUST wait between polling requests to the token endpoint.
+     *
+     * The minimum interval that the client MUST wait between polling requests to the token endpoint.
+     */
+    interval: number;
+};
+/**
+ * Return null for invalid code
+ */
+export type DeviceCodeGenerator<Refs extends ReqRef = ReqRefDefaults> = (params: OAuth2DeviceAuthorizationParams, req: Request<Refs>) => Promise<DeviceCodeResponse | null> | DeviceCodeResponse | null;
+export declare class DefaultOAuth2DeviceAuthorizationRoute<PostRefs extends ReqRef = ReqRefDefaults> extends OAuth2DeviceAuthorizationRoute<PostRefs> {
+    #private;
+    constructor();
+    setPath(path: PathValue): this;
+    validate(handler: OAuth2DeviceAuthorizationHandler<PostRefs>): this;
+    generateCode(handler: DeviceCodeGenerator<PostRefs>): this;
+    setClientId(value: string | null): this;
+}

package/lib/flows/device-auth/authorization-route.js

@@ -0,0 +1,68 @@
+"use strict";
+var _DefaultOAuth2DeviceAuthorizationRoute_clientId, _DefaultOAuth2DeviceAuthorizationRoute_generateCode;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DefaultOAuth2DeviceAuthorizationRoute = exports.OAuth2DeviceAuthorizationRoute = void 0;
+const tslib_1 = require("tslib");
+class OAuth2DeviceAuthorizationRoute {
+    static buildDefault() {
+        return new DefaultOAuth2DeviceAuthorizationRoute();
+    }
+    get path() {
+        return this._path;
+    }
+    get handler() {
+        return this._handler;
+    }
+    constructor(path, handler) {
+        this._path = path;
+        this._handler = handler;
+    }
+}
+exports.OAuth2DeviceAuthorizationRoute = OAuth2DeviceAuthorizationRoute;
+class DefaultOAuth2DeviceAuthorizationRoute extends OAuth2DeviceAuthorizationRoute {
+    constructor() {
+        super('/oauth2/devicecode', (props, req, h) => tslib_1.__awaiter(this, void 0, void 0, function* () {
+            if (tslib_1.__classPrivateFieldGet(this, _DefaultOAuth2DeviceAuthorizationRoute_clientId, "f") && tslib_1.__classPrivateFieldGet(this, _DefaultOAuth2DeviceAuthorizationRoute_clientId, "f") != props.clientId) {
+                return h.response({
+                    error: 'invalid_client',
+                    errorMessage: 'Bad \'client_id\' parameter'
+                }).code(400);
+            }
+            const code = yield tslib_1.__classPrivateFieldGet(this, _DefaultOAuth2DeviceAuthorizationRoute_generateCode, "f").call(this, props, req);
+            if (code) {
+                return code;
+            }
+            else {
+                return h.response({
+                    error: 'invalid_client',
+                    errorMessage: 'Bad \'client_id\' parameter'
+                }).code(400);
+            }
+        }));
+        _DefaultOAuth2DeviceAuthorizationRoute_clientId.set(this, void 0);
+        _DefaultOAuth2DeviceAuthorizationRoute_generateCode.set(this, void 0);
+        // @TODO: generate id for user, store it in-memory, generate jwt code ?
+        tslib_1.__classPrivateFieldSet(this, _DefaultOAuth2DeviceAuthorizationRoute_generateCode, () => tslib_1.__awaiter(this, void 0, void 0, function* () { return null; }), "f");
+    }
+    setPath(path) {
+        if (path)
+            this._path = path;
+        return this;
+    }
+    validate(handler) {
+        this._handler = handler;
+        return this;
+    }
+    generateCode(handler) {
+        tslib_1.__classPrivateFieldSet(this, _DefaultOAuth2DeviceAuthorizationRoute_generateCode, handler, "f");
+        return this;
+    }
+    setClientId(value) {
+        tslib_1.__classPrivateFieldSet(this, _DefaultOAuth2DeviceAuthorizationRoute_clientId, value, "f");
+        return this;
+    }
+}
+exports.DefaultOAuth2DeviceAuthorizationRoute = DefaultOAuth2DeviceAuthorizationRoute;
+_DefaultOAuth2DeviceAuthorizationRoute_clientId = new WeakMap(), _DefaultOAuth2DeviceAuthorizationRoute_generateCode = new WeakMap();
+//#endregion Defaults
+//# sourceMappingURL=authorization-route.js.map

package/lib/flows/device-auth/authorization-route.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorization-route.js","sourceRoot":"","sources":["../../../src/flows/device-auth/authorization-route.ts"],"names":[],"mappings":";;;;;AA6BA,MAAa,8BAA8B;IAIvC,MAAM,CAAC,YAAY;QAGf,OAAO,IAAI,qCAAqC,EAAY,CAAA;IAChE,CAAC;IAKD,IAAI,IAAI;QACJ,OAAO,IAAI,CAAC,KAAK,CAAA;IACrB,CAAC;IAED,IAAI,OAAO;QACP,OAAO,IAAI,CAAC,QAAQ,CAAA;IACxB,CAAC;IAED,YACI,IAAY,EACZ,OAAmD;QAEnD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;IAC5B,CAAC;CACJ;AA5BD,wEA4BC;AAmED,MAAa,qCAEX,SAAQ,8BAAwC;IAK9C;QACI,KAAK,CAAC,oBAAoB,EAAE,CAAO,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE;YAChD,IAAI,+BAAA,IAAI,uDAAU,IAAI,+BAAA,IAAI,uDAAU,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;gBACrD,OAAO,CAAC,CAAC,QAAQ,CAAC;oBACd,KAAK,EAAE,gBAAgB;oBACvB,YAAY,EAAE,6BAA6B;iBAC9C,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YAChB,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,+BAAA,IAAI,2DAAc,MAAlB,IAAI,EAAe,KAAK,EAAE,GAAG,CAAC,CAAA;YACjD,IAAI,IAAI,EAAE,CAAC;gBACP,OAAO,IAAI,CAAA;YACf,CAAC;iBAAM,CAAC;gBACJ,OAAO,CAAC,CAAC,QAAQ,CAAC;oBACd,KAAK,EAAE,gBAAgB;oBACvB,YAAY,EAAE,6BAA6B;iBAC9C,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YAChB,CAAC;QACL,CAAC,CAAA,CAAC,CAAA;QAtBN,kEAAyB;QAEzB,sEAA4C;QAsBxC,uEAAuE;QACvE,+BAAA,IAAI,uDAAiB,GAAS,EAAE,wDAAC,OAAA,IAAI,CAAA,GAAA,MAAA,CAAA;IACzC,CAAC;IAED,OAAO,CAAC,IAAe;QACnB,IAAI,IAAI;YACJ,IAAI,CAAC,KAAK,GAAG,IAAI,CAAA;QACrB,OAAO,IAAI,CAAA;IACf,CAAC;IAED,QAAQ,CAAC,OAAmD;QACxD,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAA;QACvB,OAAO,IAAI,CAAA;IACf,CAAC;IAED,YAAY,CAAC,OAAsC;QAC/C,+BAAA,IAAI,uDAAiB,OAAO,MAAA,CAAA;QAC5B,OAAO,IAAI,CAAA;IACf,CAAC;IAED,WAAW,CAAC,KAAoB;QAC5B,+BAAA,IAAI,mDAAa,KAAK,MAAA,CAAA;QACtB,OAAO,IAAI,CAAA;IACf,CAAC;CACJ;AAnDD,sFAmDC;;AAED,qBAAqB"}

package/lib/flows/device-auth/token-route.d.ts

@@ -0,0 +1,29 @@
+import { Lifecycle, ReqRef, ReqRefDefaults } from '@kaapi/kaapi';
+import { DefaultOAuth2TokenRoute, DeviceFlowOAuth2ErrorCodeType, IOAuth2TokenRoute, OAuth2TokenHandler, OAuth2TokenParams, OAuth2TokenRoute, PathValue, TokenGenerator } from '../common';
+export type OAuth2DeviceCodeTokenErrorBody = {
+    error: DeviceFlowOAuth2ErrorCodeType;
+    error_description?: string;
+    error_uri?: string;
+    [key: string]: unknown;
+};
+export interface OAuth2DeviceAuthTokenParams extends OAuth2TokenParams {
+    deviceCode: string;
+    clientId: string;
+    clientSecret?: string;
+}
+export type OAuth2DeviceAuthTokenHandler<Refs extends ReqRef = ReqRefDefaults, R extends Lifecycle.ReturnValue<any> = Lifecycle.ReturnValue<Refs>> = OAuth2TokenHandler<OAuth2DeviceAuthTokenParams, Refs, R>;
+export type IOAuth2DeviceAuthTokenRoute<Refs extends ReqRef = ReqRefDefaults> = IOAuth2TokenRoute<OAuth2DeviceAuthTokenParams, Refs>;
+export declare class OAuth2DeviceAuthTokenRoute<Refs extends ReqRef = ReqRefDefaults> extends OAuth2TokenRoute<OAuth2DeviceAuthTokenParams, Refs> implements IOAuth2DeviceAuthTokenRoute<Refs> {
+    static buildDefault<Refs extends ReqRef = ReqRefDefaults>(): DefaultOAuth2DeviceAuthTokenRoute<Refs>;
+}
+/**
+ * Return null for invalid request
+ */
+export type DeviceAuthTokenGenerator<Refs extends ReqRef = ReqRefDefaults> = TokenGenerator<OAuth2DeviceAuthTokenParams, Refs, OAuth2DeviceCodeTokenErrorBody>;
+export declare class DefaultOAuth2DeviceAuthTokenRoute<Refs extends ReqRef = ReqRefDefaults> extends OAuth2DeviceAuthTokenRoute<Refs> implements DefaultOAuth2TokenRoute<OAuth2DeviceAuthTokenParams, Refs, OAuth2DeviceCodeTokenErrorBody> {
+    #private;
+    constructor();
+    setPath(path: PathValue): this;
+    validate(handler: OAuth2DeviceAuthTokenHandler<Refs>): this;
+    generateToken(handler: DeviceAuthTokenGenerator<Refs>): this;
+}