@logto/connector-linkedin 0.0.0

package/LICENSE

@@ -0,0 +1,373 @@
+Mozilla Public License Version 2.0
+==================================
+
+1. Definitions
+--------------
+
+1.1. "Contributor"
+    means each individual or legal entity that creates, contributes to
+    the creation of, or owns Covered Software.
+
+1.2. "Contributor Version"
+    means the combination of the Contributions of others (if any) used
+    by a Contributor and that particular Contributor's Contribution.
+
+1.3. "Contribution"
+    means Covered Software of a particular Contributor.
+
+1.4. "Covered Software"
+    means Source Code Form to which the initial Contributor has attached
+    the notice in Exhibit A, the Executable Form of such Source Code
+    Form, and Modifications of such Source Code Form, in each case
+    including portions thereof.
+
+1.5. "Incompatible With Secondary Licenses"
+    means
+
+    (a) that the initial Contributor has attached the notice described
+        in Exhibit B to the Covered Software; or
+
+    (b) that the Covered Software was made available under the terms of
+        version 1.1 or earlier of the License, but not also under the
+        terms of a Secondary License.
+
+1.6. "Executable Form"
+    means any form of the work other than Source Code Form.
+
+1.7. "Larger Work"
+    means a work that combines Covered Software with other material, in
+    a separate file or files, that is not Covered Software.
+
+1.8. "License"
+    means this document.
+
+1.9. "Licensable"
+    means having the right to grant, to the maximum extent possible,
+    whether at the time of the initial grant or subsequently, any and
+    all of the rights conveyed by this License.
+
+1.10. "Modifications"
+    means any of the following:
+
+    (a) any file in Source Code Form that results from an addition to,
+        deletion from, or modification of the contents of Covered
+        Software; or
+
+    (b) any new file in Source Code Form that contains any Covered
+        Software.
+
+1.11. "Patent Claims" of a Contributor
+    means any patent claim(s), including without limitation, method,
+    process, and apparatus claims, in any patent Licensable by such
+    Contributor that would be infringed, but for the grant of the
+    License, by the making, using, selling, offering for sale, having
+    made, import, or transfer of either its Contributions or its
+    Contributor Version.
+
+1.12. "Secondary License"
+    means either the GNU General Public License, Version 2.0, the GNU
+    Lesser General Public License, Version 2.1, the GNU Affero General
+    Public License, Version 3.0, or any later versions of those
+    licenses.
+
+1.13. "Source Code Form"
+    means the form of the work preferred for making modifications.
+
+1.14. "You" (or "Your")
+    means an individual or a legal entity exercising rights under this
+    License. For legal entities, "You" includes any entity that
+    controls, is controlled by, or is under common control with You. For
+    purposes of this definition, "control" means (a) the power, direct
+    or indirect, to cause the direction or management of such entity,
+    whether by contract or otherwise, or (b) ownership of more than
+    fifty percent (50%) of the outstanding shares or beneficial
+    ownership of such entity.
+
+2. License Grants and Conditions
+--------------------------------
+
+2.1. Grants
+
+Each Contributor hereby grants You a world-wide, royalty-free,
+non-exclusive license:
+
+(a) under intellectual property rights (other than patent or trademark)
+    Licensable by such Contributor to use, reproduce, make available,
+    modify, display, perform, distribute, and otherwise exploit its
+    Contributions, either on an unmodified basis, with Modifications, or
+    as part of a Larger Work; and
+
+(b) under Patent Claims of such Contributor to make, use, sell, offer
+    for sale, have made, import, and otherwise transfer either its
+    Contributions or its Contributor Version.
+
+2.2. Effective Date
+
+The licenses granted in Section 2.1 with respect to any Contribution
+become effective for each Contribution on the date the Contributor first
+distributes such Contribution.
+
+2.3. Limitations on Grant Scope
+
+The licenses granted in this Section 2 are the only rights granted under
+this License. No additional rights or licenses will be implied from the
+distribution or licensing of Covered Software under this License.
+Notwithstanding Section 2.1(b) above, no patent license is granted by a
+Contributor:
+
+(a) for any code that a Contributor has removed from Covered Software;
+    or
+
+(b) for infringements caused by: (i) Your and any other third party's
+    modifications of Covered Software, or (ii) the combination of its
+    Contributions with other software (except as part of its Contributor
+    Version); or
+
+(c) under Patent Claims infringed by Covered Software in the absence of
+    its Contributions.
+
+This License does not grant any rights in the trademarks, service marks,
+or logos of any Contributor (except as may be necessary to comply with
+the notice requirements in Section 3.4).
+
+2.4. Subsequent Licenses
+
+No Contributor makes additional grants as a result of Your choice to
+distribute the Covered Software under a subsequent version of this
+License (see Section 10.2) or under the terms of a Secondary License (if
+permitted under the terms of Section 3.3).
+
+2.5. Representation
+
+Each Contributor represents that the Contributor believes its
+Contributions are its original creation(s) or it has sufficient rights
+to grant the rights to its Contributions conveyed by this License.
+
+2.6. Fair Use
+
+This License is not intended to limit any rights You have under
+applicable copyright doctrines of fair use, fair dealing, or other
+equivalents.
+
+2.7. Conditions
+
+Sections 3.1, 3.2, 3.3, and 3.4 are conditions of the licenses granted
+in Section 2.1.
+
+3. Responsibilities
+-------------------
+
+3.1. Distribution of Source Form
+
+All distribution of Covered Software in Source Code Form, including any
+Modifications that You create or to which You contribute, must be under
+the terms of this License. You must inform recipients that the Source
+Code Form of the Covered Software is governed by the terms of this
+License, and how they can obtain a copy of this License. You may not
+attempt to alter or restrict the recipients' rights in the Source Code
+Form.
+
+3.2. Distribution of Executable Form
+
+If You distribute Covered Software in Executable Form then:
+
+(a) such Covered Software must also be made available in Source Code
+    Form, as described in Section 3.1, and You must inform recipients of
+    the Executable Form how they can obtain a copy of such Source Code
+    Form by reasonable means in a timely manner, at a charge no more
+    than the cost of distribution to the recipient; and
+
+(b) You may distribute such Executable Form under the terms of this
+    License, or sublicense it under different terms, provided that the
+    license for the Executable Form does not attempt to limit or alter
+    the recipients' rights in the Source Code Form under this License.
+
+3.3. Distribution of a Larger Work
+
+You may create and distribute a Larger Work under terms of Your choice,
+provided that You also comply with the requirements of this License for
+the Covered Software. If the Larger Work is a combination of Covered
+Software with a work governed by one or more Secondary Licenses, and the
+Covered Software is not Incompatible With Secondary Licenses, this
+License permits You to additionally distribute such Covered Software
+under the terms of such Secondary License(s), so that the recipient of
+the Larger Work may, at their option, further distribute the Covered
+Software under the terms of either this License or such Secondary
+License(s).
+
+3.4. Notices
+
+You may not remove or alter the substance of any license notices
+(including copyright notices, patent notices, disclaimers of warranty,
+or limitations of liability) contained within the Source Code Form of
+the Covered Software, except that You may alter any license notices to
+the extent required to remedy known factual inaccuracies.
+
+3.5. Application of Additional Terms
+
+You may choose to offer, and to charge a fee for, warranty, support,
+indemnity or liability obligations to one or more recipients of Covered
+Software. However, You may do so only on Your own behalf, and not on
+behalf of any Contributor. You must make it absolutely clear that any
+such warranty, support, indemnity, or liability obligation is offered by
+You alone, and You hereby agree to indemnify every Contributor for any
+liability incurred by such Contributor as a result of warranty, support,
+indemnity or liability terms You offer. You may include additional
+disclaimers of warranty and limitations of liability specific to any
+jurisdiction.
+
+4. Inability to Comply Due to Statute or Regulation
+---------------------------------------------------
+
+If it is impossible for You to comply with any of the terms of this
+License with respect to some or all of the Covered Software due to
+statute, judicial order, or regulation then You must: (a) comply with
+the terms of this License to the maximum extent possible; and (b)
+describe the limitations and the code they affect. Such description must
+be placed in a text file included with all distributions of the Covered
+Software under this License. Except to the extent prohibited by statute
+or regulation, such description must be sufficiently detailed for a
+recipient of ordinary skill to be able to understand it.
+
+5. Termination
+--------------
+
+5.1. The rights granted under this License will terminate automatically
+if You fail to comply with any of its terms. However, if You become
+compliant, then the rights granted under this License from a particular
+Contributor are reinstated (a) provisionally, unless and until such
+Contributor explicitly and finally terminates Your grants, and (b) on an
+ongoing basis, if such Contributor fails to notify You of the
+non-compliance by some reasonable means prior to 60 days after You have
+come back into compliance. Moreover, Your grants from a particular
+Contributor are reinstated on an ongoing basis if such Contributor
+notifies You of the non-compliance by some reasonable means, this is the
+first time You have received notice of non-compliance with this License
+from such Contributor, and You become compliant prior to 30 days after
+Your receipt of the notice.
+
+5.2. If You initiate litigation against any entity by asserting a patent
+infringement claim (excluding declaratory judgment actions,
+counter-claims, and cross-claims) alleging that a Contributor Version
+directly or indirectly infringes any patent, then the rights granted to
+You by any and all Contributors for the Covered Software under Section
+2.1 of this License shall terminate.
+
+5.3. In the event of termination under Sections 5.1 or 5.2 above, all
+end user license agreements (excluding distributors and resellers) which
+have been validly granted by You or Your distributors under this License
+prior to termination shall survive termination.
+
+************************************************************************
+*                                                                      *
+*  6. Disclaimer of Warranty                                           *
+*  -------------------------                                           *
+*                                                                      *
+*  Covered Software is provided under this License on an "as is"       *
+*  basis, without warranty of any kind, either expressed, implied, or  *
+*  statutory, including, without limitation, warranties that the       *
+*  Covered Software is free of defects, merchantable, fit for a        *
+*  particular purpose or non-infringing. The entire risk as to the     *
+*  quality and performance of the Covered Software is with You.        *
+*  Should any Covered Software prove defective in any respect, You     *
+*  (not any Contributor) assume the cost of any necessary servicing,   *
+*  repair, or correction. This disclaimer of warranty constitutes an   *
+*  essential part of this License. No use of any Covered Software is   *
+*  authorized under this License except under this disclaimer.         *
+*                                                                      *
+************************************************************************
+
+************************************************************************
+*                                                                      *
+*  7. Limitation of Liability                                          *
+*  --------------------------                                          *
+*                                                                      *
+*  Under no circumstances and under no legal theory, whether tort      *
+*  (including negligence), contract, or otherwise, shall any           *
+*  Contributor, or anyone who distributes Covered Software as          *
+*  permitted above, be liable to You for any direct, indirect,         *
+*  special, incidental, or consequential damages of any character      *
+*  including, without limitation, damages for lost profits, loss of    *
+*  goodwill, work stoppage, computer failure or malfunction, or any    *
+*  and all other commercial damages or losses, even if such party      *
+*  shall have been informed of the possibility of such damages. This   *
+*  limitation of liability shall not apply to liability for death or   *
+*  personal injury resulting from such party's negligence to the       *
+*  extent applicable law prohibits such limitation. Some               *
+*  jurisdictions do not allow the exclusion or limitation of           *
+*  incidental or consequential damages, so this exclusion and          *
+*  limitation may not apply to You.                                    *
+*                                                                      *
+************************************************************************
+
+8. Litigation
+-------------
+
+Any litigation relating to this License may be brought only in the
+courts of a jurisdiction where the defendant maintains its principal
+place of business and such litigation shall be governed by laws of that
+jurisdiction, without reference to its conflict-of-law provisions.
+Nothing in this Section shall prevent a party's ability to bring
+cross-claims or counter-claims.
+
+9. Miscellaneous
+----------------
+
+This License represents the complete agreement concerning the subject
+matter hereof. If any provision of this License is held to be
+unenforceable, such provision shall be reformed only to the extent
+necessary to make it enforceable. Any law or regulation which provides
+that the language of a contract shall be construed against the drafter
+shall not be used to construe this License against a Contributor.
+
+10. Versions of the License
+---------------------------
+
+10.1. New Versions
+
+Mozilla Foundation is the license steward. Except as provided in Section
+10.3, no one other than the license steward has the right to modify or
+publish new versions of this License. Each version will be given a
+distinguishing version number.
+
+10.2. Effect of New Versions
+
+You may distribute the Covered Software under the terms of the version
+of the License under which You originally received the Covered Software,
+or under the terms of any subsequent version published by the license
+steward.
+
+10.3. Modified Versions
+
+If you create software not governed by this License, and you want to
+create a new license for such software, you may create and use a
+modified version of this License if you rename the license and remove
+any references to the name of the license steward (except to note that
+such modified license differs from this License).
+
+10.4. Distributing Source Code Form that is Incompatible With Secondary
+Licenses
+
+If You choose to distribute Source Code Form that is Incompatible With
+Secondary Licenses under the terms of this version of the License, the
+notice described in Exhibit B of this License must be attached.
+
+Exhibit A - Source Code Form License Notice
+-------------------------------------------
+
+  This Source Code Form is subject to the terms of the Mozilla Public
+  License, v. 2.0. If a copy of the MPL was not distributed with this
+  file, You can obtain one at http://mozilla.org/MPL/2.0/.
+
+If it is not possible or desirable to put the notice in a particular
+file, then You may include the notice in a location (such as a LICENSE
+file in a relevant directory) where a recipient would be likely to look
+for such a notice.
+
+You may add additional accurate notices of copyright ownership.
+
+Exhibit B - "Incompatible With Secondary Licenses" Notice
+---------------------------------------------------------
+
+  This Source Code Form is "Incompatible With Secondary Licenses", as
+  defined by the Mozilla Public License, v. 2.0.

package/README.md

@@ -0,0 +1,61 @@
+# LinkedIn connector
+
+The official Logto connector for LinkedIn social sign-in.
+
+**Table of contents**
+- [LinkedIn connector](#linkedin-connector)
+  - [Get started](#get-started)
+  - [Setup a LinkedIn app](#setup-a-linkedin-app)
+  - [Configure your connector](#configure-your-connector)
+    - [Config types](#config-types)
+  - [Test LinkedIn connector](#test-linkedin-connector)
+  - [Reference](#reference)
+
+## Get started
+
+The LinkedIn connector enables end-users to sign in to your application using their own LinkedIn accounts via the LinkedIn OAuth 2.0 authentication protocol.
+
+## Setup a LinkedIn app
+
+Go to the [LinkedIn Developers](https://www.linkedin.com/developers) and sign in with your LinkedIn account. If you don’t have an account, you can register for one.
+
+Then, create an app.
+
+**Step 1:** Fill in the App Details.
+
+Complete the form and create the app.
+
+**Step 2:** Setup callback URLs.
+
+Go to App details page and find "Auth" tab, "OAuth 2.0" section and find the field "Authorized redirect URLs for your app".
+
+In our case, this will be `${your_logto_endpoint}/callback/${connector_id}`. e.g. `https://foo.logto.app/callback/${connector_id}`. The `connector_id` can be found on the top bar of the Logto Admin Console connector details page.
+
+**Step 3:** Add the product.
+
+Go to "Products" tab and add the product "Sign In with LinkedIn using OpenID Connect".
+
+## Configure your connector
+
+In your Logto connector configuration, fill out the following fields with the values obtained from your App's "Auth" tab, "Application credentials" section:
+
+- **clientId:** Your App's Client ID.
+- **clientSecret:** Your App's Primary Client Secret.
+
+`scope` is a space-delimited list of OIDC scopes. If not provided, the default scope is `openid profile email`.
+
+### Config types
+
+| Name         | Type   |
+| ------------ | ------ |
+| clientId     | string |
+| clientSecret | string |
+| scope        | string |
+
+## Test LinkedIn connector
+
+That's it! The LinkedIn connector should now be available for end-users to sign in with their LinkedIn accounts. Don't forget to [Enable the connector in the sign-in experience](https://docs.logto.io/docs/recipes/configure-connectors/social-connector/enable-social-sign-in/).
+
+## Reference
+
+- [Sign in with LinkedIn](https://learn.microsoft.com/en-us/linkedin/consumer/integrations/self-serve/sign-in-with-linkedin)

package/lib/index.js

@@ -0,0 +1,170 @@
+// src/index.ts
+import { conditional } from "@silverhand/essentials";
+import {
+  ConnectorError,
+  ConnectorErrorCodes,
+  validateConfig,
+  ConnectorType,
+  jsonGuard
+} from "@logto/connector-kit";
+import ky, { HTTPError } from "ky";
+
+// src/constant.ts
+import { ConnectorPlatform, ConnectorConfigFormItemType } from "@logto/connector-kit";
+var authorizationEndpoint = "https://www.linkedin.com/oauth/v2/authorization";
+var defaultScope = "openid profile email";
+var accessTokenEndpoint = "https://www.linkedin.com/oauth/v2/accessToken";
+var userInfoEndpoint = "https://api.linkedin.com/v2/userinfo";
+var defaultMetadata = {
+  id: "linkedin-universal",
+  target: "linkedin",
+  platform: ConnectorPlatform.Universal,
+  name: {
+    en: "LinkedIn",
+    "zh-CN": "LinkedIn",
+    "tr-TR": "LinkedIn",
+    ko: "LinkedIn"
+  },
+  logo: "./logo.svg",
+  logoDark: null,
+  description: {
+    en: "LinkedIn is a social media platform for professional networking and information sharing.",
+    "zh-CN": "LinkedIn\u662F\u4E00\u4E2A\u804C\u4E1A\u793E\u4EA4\u548C\u4FE1\u606F\u5206\u4EAB\u7684\u793E\u4EA4\u5A92\u4F53\u5E73\u53F0\u3002",
+    "tr-TR": "LinkedIn, profesyonel a\u011F olu\u015Fturma ve bilgi payla\u015Fma i\xE7in bir sosyal medya platformudur.",
+    ko: "LinkedIn\uC740 \uC804\uBB38 \uB124\uD2B8\uC6CC\uD0B9\uACFC \uC815\uBCF4 \uACF5\uC720\uB97C \uC704\uD55C \uC18C\uC15C \uBBF8\uB514\uC5B4 \uD50C\uB7AB\uD3FC\uC785\uB2C8\uB2E4."
+  },
+  readme: "./README.md",
+  formItems: [
+    {
+      key: "clientId",
+      type: ConnectorConfigFormItemType.Text,
+      label: "Client ID",
+      required: true
+    },
+    {
+      key: "clientSecret",
+      type: ConnectorConfigFormItemType.Text,
+      label: "Client Secret",
+      required: true
+    },
+    {
+      key: "scope",
+      type: ConnectorConfigFormItemType.Text,
+      label: "Scope",
+      required: false,
+      description: "The `scope` determines permissions granted by the user's authorization. If you are not sure what to enter, do not worry, just leave it blank."
+    }
+  ]
+};
+var defaultTimeout = 5e3;
+
+// src/types.ts
+import { z } from "zod";
+var linkedInConfigGuard = z.object({
+  clientId: z.string(),
+  clientSecret: z.string(),
+  scope: z.string().optional()
+});
+var userInfoResponseGuard = z.object({
+  sub: z.string(),
+  name: z.string().nullish(),
+  email: z.string().nullish(),
+  picture: z.string().nullish()
+});
+var authResponseGuard = z.object({
+  code: z.string()
+});
+var accessTokenResponseGuard = z.object({
+  access_token: z.string()
+});
+
+// src/index.ts
+var getAuthorizationUri = (getConfig) => async ({ state, redirectUri }, setSession) => {
+  const config = await getConfig(defaultMetadata.id);
+  validateConfig(config, linkedInConfigGuard);
+  await setSession({ redirectUri });
+  const queryParams = new URLSearchParams({
+    response_type: "code",
+    client_id: config.clientId,
+    redirect_uri: redirectUri,
+    scope: config.scope ?? defaultScope,
+    state
+  });
+  return `${authorizationEndpoint}?${queryParams.toString()}`;
+};
+var getAccessToken = async (config, code, redirectUri) => {
+  const response = await ky.post(accessTokenEndpoint, {
+    headers: {
+      "Content-Type": "application/x-www-form-urlencoded"
+    },
+    body: new URLSearchParams({
+      grant_type: "authorization_code",
+      code,
+      redirect_uri: redirectUri,
+      client_id: config.clientId,
+      client_secret: config.clientSecret
+    }).toString(),
+    timeout: defaultTimeout
+  }).json();
+  return accessTokenResponseGuard.parse(response);
+};
+var getUserInfo = (getConfig) => async (data, getSession) => {
+  const config = await getConfig(defaultMetadata.id);
+  validateConfig(config, linkedInConfigGuard);
+  const authResponseResult = authResponseGuard.safeParse(data);
+  if (!authResponseResult.success) {
+    throw new ConnectorError(ConnectorErrorCodes.General, JSON.stringify(data));
+  }
+  const { code } = authResponseResult.data;
+  const { redirectUri } = await getSession();
+  if (!redirectUri) {
+    throw new ConnectorError(ConnectorErrorCodes.General, {
+      message: "Cannot find `redirectUri` from connector session."
+    });
+  }
+  try {
+    const { access_token } = await getAccessToken(config, code, redirectUri);
+    const userInfo = await ky.get(userInfoEndpoint, {
+      headers: {
+        Authorization: `Bearer ${access_token}`
+      },
+      timeout: defaultTimeout
+    }).json();
+    const userInfoResult = userInfoResponseGuard.safeParse(userInfo);
+    if (!userInfoResult.success) {
+      throw new ConnectorError(ConnectorErrorCodes.InvalidResponse, userInfoResult.error);
+    }
+    const { sub, name, email, picture } = userInfoResult.data;
+    return {
+      id: sub,
+      name: conditional(name),
+      email: conditional(email),
+      picture: conditional(picture),
+      rawData: jsonGuard.parse(userInfo)
+    };
+  } catch (error) {
+    if (error instanceof HTTPError) {
+      const { status, body: rawBody } = error.response;
+      if (status === 401) {
+        throw new ConnectorError(ConnectorErrorCodes.SocialAccessTokenInvalid);
+      }
+      throw new ConnectorError(ConnectorErrorCodes.General, JSON.stringify(rawBody));
+    }
+    throw error;
+  }
+};
+var createLinkedInConnector = async ({ getConfig }) => {
+  return {
+    metadata: defaultMetadata,
+    type: ConnectorType.Social,
+    configGuard: linkedInConfigGuard,
+    getAuthorizationUri: getAuthorizationUri(getConfig),
+    getUserInfo: getUserInfo(getConfig)
+  };
+};
+var index_default = createLinkedInConnector;
+export {
+  index_default as default,
+  getAccessToken
+};
+//# sourceMappingURL=index.js.map

package/lib/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts","../src/constant.ts","../src/types.ts"],"sourcesContent":["import { conditional } from '@silverhand/essentials';\n\nimport {\n  ConnectorError,\n  ConnectorErrorCodes,\n  validateConfig,\n  ConnectorType,\n  jsonGuard,\n} from '@logto/connector-kit';\nimport type {\n  GetAuthorizationUri,\n  GetUserInfo,\n  SocialConnector,\n  CreateConnector,\n  GetConnectorConfig,\n} from '@logto/connector-kit';\nimport ky, { HTTPError } from 'ky';\n\nimport {\n  authorizationEndpoint,\n  accessTokenEndpoint,\n  defaultMetadata,\n  defaultTimeout,\n  defaultScope,\n  userInfoEndpoint,\n} from './constant.js';\nimport type { LinkedInConfig } from './types.js';\nimport {\n  linkedInConfigGuard,\n  userInfoResponseGuard,\n  authResponseGuard,\n  accessTokenResponseGuard,\n} from './types.js';\n\nconst getAuthorizationUri =\n  (getConfig: GetConnectorConfig): GetAuthorizationUri =>\n  async ({ state, redirectUri }, setSession) => {\n    const config = await getConfig(defaultMetadata.id);\n    validateConfig(config, linkedInConfigGuard);\n\n    await setSession({ redirectUri });\n\n    const queryParams = new URLSearchParams({\n      response_type: 'code',\n      client_id: config.clientId,\n      redirect_uri: redirectUri,\n      scope: config.scope ?? defaultScope,\n      state,\n    });\n\n    return `${authorizationEndpoint}?${queryParams.toString()}`;\n  };\n\nexport const getAccessToken = async (config: LinkedInConfig, code: string, redirectUri: string) => {\n  const response = await ky\n    .post(accessTokenEndpoint, {\n      headers: {\n        'Content-Type': 'application/x-www-form-urlencoded',\n      },\n      body: new URLSearchParams({\n        grant_type: 'authorization_code',\n        code,\n        redirect_uri: redirectUri,\n        client_id: config.clientId,\n        client_secret: config.clientSecret,\n      }).toString(),\n      timeout: defaultTimeout,\n    })\n    .json();\n\n  return accessTokenResponseGuard.parse(response);\n};\n\nconst getUserInfo =\n  (getConfig: GetConnectorConfig): GetUserInfo =>\n  async (data, getSession) => {\n    const config = await getConfig(defaultMetadata.id);\n    validateConfig(config, linkedInConfigGuard);\n\n    const authResponseResult = authResponseGuard.safeParse(data);\n\n    if (!authResponseResult.success) {\n      throw new ConnectorError(ConnectorErrorCodes.General, JSON.stringify(data));\n    }\n\n    const { code } = authResponseResult.data;\n    const { redirectUri } = await getSession();\n\n    if (!redirectUri) {\n      throw new ConnectorError(ConnectorErrorCodes.General, {\n        message: 'Cannot find `redirectUri` from connector session.',\n      });\n    }\n\n    try {\n      const { access_token } = await getAccessToken(config, code, redirectUri);\n\n      const userInfo = await ky\n        .get(userInfoEndpoint, {\n          headers: {\n            Authorization: `Bearer ${access_token}`,\n          },\n          timeout: defaultTimeout,\n        })\n        .json();\n      const userInfoResult = userInfoResponseGuard.safeParse(userInfo);\n\n      if (!userInfoResult.success) {\n        throw new ConnectorError(ConnectorErrorCodes.InvalidResponse, userInfoResult.error);\n      }\n\n      const { sub, name, email, picture } = userInfoResult.data;\n\n      return {\n        id: sub,\n        name: conditional(name),\n        email: conditional(email),\n        picture: conditional(picture),\n        rawData: jsonGuard.parse(userInfo),\n      };\n    } catch (error: unknown) {\n      if (error instanceof HTTPError) {\n        const { status, body: rawBody } = error.response;\n\n        if (status === 401) {\n          throw new ConnectorError(ConnectorErrorCodes.SocialAccessTokenInvalid);\n        }\n\n        throw new ConnectorError(ConnectorErrorCodes.General, JSON.stringify(rawBody));\n      }\n\n      throw error;\n    }\n  };\n\nconst createLinkedInConnector: CreateConnector<SocialConnector> = async ({ getConfig }) => {\n  return {\n    metadata: defaultMetadata,\n    type: ConnectorType.Social,\n    configGuard: linkedInConfigGuard,\n    getAuthorizationUri: getAuthorizationUri(getConfig),\n    getUserInfo: getUserInfo(getConfig),\n  };\n};\n\nexport default createLinkedInConnector;\n","import type { ConnectorMetadata } from '@logto/connector-kit';\nimport { ConnectorPlatform, ConnectorConfigFormItemType } from '@logto/connector-kit';\n\n// See https://learn.microsoft.com/en-us/linkedin/consumer/integrations/self-serve/sign-in-with-linkedin\nexport const authorizationEndpoint = 'https://www.linkedin.com/oauth/v2/authorization';\nexport const defaultScope = 'openid profile email';\nexport const accessTokenEndpoint = 'https://www.linkedin.com/oauth/v2/accessToken';\nexport const userInfoEndpoint = 'https://api.linkedin.com/v2/userinfo';\n\nexport const defaultMetadata: ConnectorMetadata = {\n  id: 'linkedin-universal',\n  target: 'linkedin',\n  platform: ConnectorPlatform.Universal,\n  name: {\n    en: 'LinkedIn',\n    'zh-CN': 'LinkedIn',\n    'tr-TR': 'LinkedIn',\n    ko: 'LinkedIn',\n  },\n  logo: './logo.svg',\n  logoDark: null,\n  description: {\n    en: 'LinkedIn is a social media platform for professional networking and information sharing.',\n    'zh-CN': 'LinkedIn是一个职业社交和信息分享的社交媒体平台。',\n    'tr-TR':\n      'LinkedIn, profesyonel ağ oluşturma ve bilgi paylaşma için bir sosyal medya platformudur.',\n    ko: 'LinkedIn은 전문 네트워킹과 정보 공유를 위한 소셜 미디어 플랫폼입니다.',\n  },\n  readme: './README.md',\n  formItems: [\n    {\n      key: 'clientId',\n      type: ConnectorConfigFormItemType.Text,\n      label: 'Client ID',\n      required: true,\n    },\n    {\n      key: 'clientSecret',\n      type: ConnectorConfigFormItemType.Text,\n      label: 'Client Secret',\n      required: true,\n    },\n    {\n      key: 'scope',\n      type: ConnectorConfigFormItemType.Text,\n      label: 'Scope',\n      required: false,\n      description:\n        \"The `scope` determines permissions granted by the user's authorization. If you are not sure what to enter, do not worry, just leave it blank.\",\n    },\n  ],\n};\n\nexport const defaultTimeout = 5000;\n","import { z } from 'zod';\n\nexport const linkedInConfigGuard = z.object({\n  clientId: z.string(),\n  clientSecret: z.string(),\n  scope: z.string().optional(),\n});\n\nexport type LinkedInConfig = z.infer<typeof linkedInConfigGuard>;\n\nexport const userInfoResponseGuard = z.object({\n  sub: z.string(),\n  name: z.string().nullish(),\n  email: z.string().nullish(),\n  picture: z.string().nullish(),\n});\n\nexport type UserInfoResponse = z.infer<typeof userInfoResponseGuard>;\n\nexport const authResponseGuard = z.object({\n  code: z.string(),\n});\n\nexport const accessTokenResponseGuard = z.object({\n  access_token: z.string(),\n});\n"],"mappings":";AAAA,SAAS,mBAAmB;AAE5B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAQP,OAAO,MAAM,iBAAiB;;;ACf9B,SAAS,mBAAmB,mCAAmC;AAGxD,IAAM,wBAAwB;AAC9B,IAAM,eAAe;AACrB,IAAM,sBAAsB;AAC5B,IAAM,mBAAmB;AAEzB,IAAM,kBAAqC;AAAA,EAChD,IAAI;AAAA,EACJ,QAAQ;AAAA,EACR,UAAU,kBAAkB;AAAA,EAC5B,MAAM;AAAA,IACJ,IAAI;AAAA,IACJ,SAAS;AAAA,IACT,SAAS;AAAA,IACT,IAAI;AAAA,EACN;AAAA,EACA,MAAM;AAAA,EACN,UAAU;AAAA,EACV,aAAa;AAAA,IACX,IAAI;AAAA,IACJ,SAAS;AAAA,IACT,SACE;AAAA,IACF,IAAI;AAAA,EACN;AAAA,EACA,QAAQ;AAAA,EACR,WAAW;AAAA,IACT;AAAA,MACE,KAAK;AAAA,MACL,MAAM,4BAA4B;AAAA,MAClC,OAAO;AAAA,MACP,UAAU;AAAA,IACZ;AAAA,IACA;AAAA,MACE,KAAK;AAAA,MACL,MAAM,4BAA4B;AAAA,MAClC,OAAO;AAAA,MACP,UAAU;AAAA,IACZ;AAAA,IACA;AAAA,MACE,KAAK;AAAA,MACL,MAAM,4BAA4B;AAAA,MAClC,OAAO;AAAA,MACP,UAAU;AAAA,MACV,aACE;AAAA,IACJ;AAAA,EACF;AACF;AAEO,IAAM,iBAAiB;;;ACrD9B,SAAS,SAAS;AAEX,IAAM,sBAAsB,EAAE,OAAO;AAAA,EAC1C,UAAU,EAAE,OAAO;AAAA,EACnB,cAAc,EAAE,OAAO;AAAA,EACvB,OAAO,EAAE,OAAO,EAAE,SAAS;AAC7B,CAAC;AAIM,IAAM,wBAAwB,EAAE,OAAO;AAAA,EAC5C,KAAK,EAAE,OAAO;AAAA,EACd,MAAM,EAAE,OAAO,EAAE,QAAQ;AAAA,EACzB,OAAO,EAAE,OAAO,EAAE,QAAQ;AAAA,EAC1B,SAAS,EAAE,OAAO,EAAE,QAAQ;AAC9B,CAAC;AAIM,IAAM,oBAAoB,EAAE,OAAO;AAAA,EACxC,MAAM,EAAE,OAAO;AACjB,CAAC;AAEM,IAAM,2BAA2B,EAAE,OAAO;AAAA,EAC/C,cAAc,EAAE,OAAO;AACzB,CAAC;;;AFSD,IAAM,sBACJ,CAAC,cACD,OAAO,EAAE,OAAO,YAAY,GAAG,eAAe;AAC5C,QAAM,SAAS,MAAM,UAAU,gBAAgB,EAAE;AACjD,iBAAe,QAAQ,mBAAmB;AAE1C,QAAM,WAAW,EAAE,YAAY,CAAC;AAEhC,QAAM,cAAc,IAAI,gBAAgB;AAAA,IACtC,eAAe;AAAA,IACf,WAAW,OAAO;AAAA,IAClB,cAAc;AAAA,IACd,OAAO,OAAO,SAAS;AAAA,IACvB;AAAA,EACF,CAAC;AAED,SAAO,GAAG,qBAAqB,IAAI,YAAY,SAAS,CAAC;AAC3D;AAEK,IAAM,iBAAiB,OAAO,QAAwB,MAAc,gBAAwB;AACjG,QAAM,WAAW,MAAM,GACpB,KAAK,qBAAqB;AAAA,IACzB,SAAS;AAAA,MACP,gBAAgB;AAAA,IAClB;AAAA,IACA,MAAM,IAAI,gBAAgB;AAAA,MACxB,YAAY;AAAA,MACZ;AAAA,MACA,cAAc;AAAA,MACd,WAAW,OAAO;AAAA,MAClB,eAAe,OAAO;AAAA,IACxB,CAAC,EAAE,SAAS;AAAA,IACZ,SAAS;AAAA,EACX,CAAC,EACA,KAAK;AAER,SAAO,yBAAyB,MAAM,QAAQ;AAChD;AAEA,IAAM,cACJ,CAAC,cACD,OAAO,MAAM,eAAe;AAC1B,QAAM,SAAS,MAAM,UAAU,gBAAgB,EAAE;AACjD,iBAAe,QAAQ,mBAAmB;AAE1C,QAAM,qBAAqB,kBAAkB,UAAU,IAAI;AAE3D,MAAI,CAAC,mBAAmB,SAAS;AAC/B,UAAM,IAAI,eAAe,oBAAoB,SAAS,KAAK,UAAU,IAAI,CAAC;AAAA,EAC5E;AAEA,QAAM,EAAE,KAAK,IAAI,mBAAmB;AACpC,QAAM,EAAE,YAAY,IAAI,MAAM,WAAW;AAEzC,MAAI,CAAC,aAAa;AAChB,UAAM,IAAI,eAAe,oBAAoB,SAAS;AAAA,MACpD,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AAEA,MAAI;AACF,UAAM,EAAE,aAAa,IAAI,MAAM,eAAe,QAAQ,MAAM,WAAW;AAEvE,UAAM,WAAW,MAAM,GACpB,IAAI,kBAAkB;AAAA,MACrB,SAAS;AAAA,QACP,eAAe,UAAU,YAAY;AAAA,MACvC;AAAA,MACA,SAAS;AAAA,IACX,CAAC,EACA,KAAK;AACR,UAAM,iBAAiB,sBAAsB,UAAU,QAAQ;AAE/D,QAAI,CAAC,eAAe,SAAS;AAC3B,YAAM,IAAI,eAAe,oBAAoB,iBAAiB,eAAe,KAAK;AAAA,IACpF;AAEA,UAAM,EAAE,KAAK,MAAM,OAAO,QAAQ,IAAI,eAAe;AAErD,WAAO;AAAA,MACL,IAAI;AAAA,MACJ,MAAM,YAAY,IAAI;AAAA,MACtB,OAAO,YAAY,KAAK;AAAA,MACxB,SAAS,YAAY,OAAO;AAAA,MAC5B,SAAS,UAAU,MAAM,QAAQ;AAAA,IACnC;AAAA,EACF,SAAS,OAAgB;AACvB,QAAI,iBAAiB,WAAW;AAC9B,YAAM,EAAE,QAAQ,MAAM,QAAQ,IAAI,MAAM;AAExC,UAAI,WAAW,KAAK;AAClB,cAAM,IAAI,eAAe,oBAAoB,wBAAwB;AAAA,MACvE;AAEA,YAAM,IAAI,eAAe,oBAAoB,SAAS,KAAK,UAAU,OAAO,CAAC;AAAA,IAC/E;AAEA,UAAM;AAAA,EACR;AACF;AAEF,IAAM,0BAA4D,OAAO,EAAE,UAAU,MAAM;AACzF,SAAO;AAAA,IACL,UAAU;AAAA,IACV,MAAM,cAAc;AAAA,IACpB,aAAa;AAAA,IACb,qBAAqB,oBAAoB,SAAS;AAAA,IAClD,aAAa,YAAY,SAAS;AAAA,EACpC;AACF;AAEA,IAAO,gBAAQ;","names":[]}

package/logo.svg

@@ -0,0 +1 @@
+<?xml version="1.0" ?><svg height="72" viewBox="0 0 72 72" width="72" xmlns="http://www.w3.org/2000/svg"><g fill="none" fill-rule="evenodd"><path d="M8,72 L64,72 C68.418278,72 72,68.418278 72,64 L72,8 C72,3.581722 68.418278,-8.11624501e-16 64,0 L8,0 C3.581722,8.11624501e-16 -5.41083001e-16,3.581722 0,8 L0,64 C5.41083001e-16,68.418278 3.581722,72 8,72 Z" fill="#007EBB"/><path d="M62,62 L51.315625,62 L51.315625,43.8021149 C51.315625,38.8127542 49.4197917,36.0245323 45.4707031,36.0245323 C41.1746094,36.0245323 38.9300781,38.9261103 38.9300781,43.8021149 L38.9300781,62 L28.6333333,62 L28.6333333,27.3333333 L38.9300781,27.3333333 L38.9300781,32.0029283 C38.9300781,32.0029283 42.0260417,26.2742151 49.3825521,26.2742151 C56.7356771,26.2742151 62,30.7644705 62,40.051212 L62,62 Z M16.349349,22.7940133 C12.8420573,22.7940133 10,19.9296567 10,16.3970067 C10,12.8643566 12.8420573,10 16.349349,10 C19.8566406,10 22.6970052,12.8643566 22.6970052,16.3970067 C22.6970052,19.9296567 19.8566406,22.7940133 16.349349,22.7940133 Z M11.0325521,62 L21.769401,62 L21.769401,27.3333333 L11.0325521,27.3333333 L11.0325521,62 Z" fill="#FFF"/></g></svg>

package/package.json

@@ -0,0 +1,69 @@
+{
+  "name": "@logto/connector-linkedin",
+  "version": "0.0.0",
+  "description": "LinkedIn web connector implementation.",
+  "author": "Silverhand Inc. <contact@silverhand.io>",
+  "dependencies": {
+    "@logto/connector-kit": "^4.0.0",
+    "@silverhand/essentials": "^2.9.1",
+    "ky": "^1.2.3",
+    "query-string": "^9.0.0",
+    "snakecase-keys": "^8.0.1",
+    "zod": "^3.23.8"
+  },
+  "main": "./lib/index.js",
+  "module": "./lib/index.js",
+  "exports": "./lib/index.js",
+  "license": "MPL-2.0",
+  "type": "module",
+  "files": [
+    "lib",
+    "docs",
+    "logo.svg",
+    "logo-dark.svg"
+  ],
+  "engines": {
+    "node": "^20.9.0"
+  },
+  "eslintConfig": {
+    "extends": "@silverhand",
+    "settings": {
+      "import/core-modules": [
+        "@silverhand/essentials",
+        "got",
+        "nock",
+        "snakecase-keys",
+        "zod"
+      ]
+    }
+  },
+  "prettier": "@silverhand/eslint-config/.prettierrc",
+  "publishConfig": {
+    "access": "public"
+  },
+  "devDependencies": {
+    "@silverhand/eslint-config": "6.0.1",
+    "@silverhand/ts-config": "6.0.0",
+    "@types/node": "^20.11.20",
+    "@types/supertest": "^6.0.2",
+    "@vitest/coverage-v8": "^2.1.8",
+    "eslint": "^8.56.0",
+    "lint-staged": "^15.0.2",
+    "nock": "14.0.0-beta.15",
+    "prettier": "^3.0.0",
+    "supertest": "^7.0.0",
+    "tsup": "^8.3.0",
+    "typescript": "^5.5.3",
+    "vitest": "^2.1.8"
+  },
+  "scripts": {
+    "precommit": "lint-staged",
+    "check": "tsc --noEmit",
+    "build": "tsup",
+    "dev": "tsup --watch",
+    "lint": "eslint --ext .ts src",
+    "lint:report": "pnpm lint --format json --output-file report.json",
+    "test": "vitest src",
+    "test:ci": "pnpm run test --silent --coverage"
+  }
+}