@maronn-openid-connect/cli 0.0.1

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 maronnjapan
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,134 @@
+# @maronn-openid-connect/cli
+
+OpenID Connect Provider のコードを生成する CLI ツール。
+Hono / Express / Fastify / Next.js 向けに、Authorization Code Flow（OAuth 2.1 / OIDC Core 1.0 準拠）を実装した OP コード一式を生成する。
+
+生成コードは [`@maronn-openid-connect/core`](../core) のロジックを HTTP に配線したもので、利用者はこのコードを改造しながら「自分の要件がこの仕様で実現できるか」を検証する。
+
+生成されるエンドポイントは、core の機能単位ステップ関数を 1 ステップ = 1 関数呼び出しの形で並べる。まとめ関数（`validateAuthorizationRequest` / `validateTokenRequest` / `authenticateClient` / `generateTokenResponse` / `handleUserInfoRequest` / `handleIntrospectionRequest` / `handleRevocationRequest` / `checkPromptNone`）を 1 回呼ぶのではなく各ステップを並べているため、不要な検証を消したり、ステップの間に独自処理を足したりして仕様の挙動を検証しやすい。
+
+| 生成ファイル | 並べているステップ |
+|---|---|
+| `routes/authorize.ts` | 認可リクエスト検証（`resolveClientForAuthorization` → `validateResponseType` → `validateAuthorizationCodePkce` ほか）と `prompt=none`（`resolvePromptNoneSession` → `validatePromptNoneIdTokenHint` → `validatePromptNoneConsent`） |
+| `routes/token.ts` | クライアント認証（`extractClientCredentials` → `validateClientAuthMethod` → `verifyClientSecret`）、grant 検証（`resolveAuthorizationCode` → `validateAuthorizationCodeExpiration` → `verifyAuthorizationCodePkce` ほか）、レスポンス生成（`buildAccessTokenPayload` → `computeAtHash` → `resolveAcrAmr` → `buildIdTokenPayload` → `generateIdToken`） |
+| `routes/userinfo.ts` | `resolveUserInfoAccessToken` → `validateUserInfoTokenExpiration` → `validateUserInfoScope` → `validateUserInfoAudience` → `resolveUserInfoClaims` → `filterClaimsByScope` → `applyRequestedClaims` |
+| `routes/introspection.ts` | `requireIntrospectionToken` → `requireIntrospectionClient` → `resolveIntrospectionToken` → `isIntrospectionTokenActive` → `buildIntrospectionResponse` |
+| `routes/revocation.ts` | `requireRevocationToken` → `requireRevocationClient` → `resolveRevocationTarget` → `validateRevocationTokenClient` → `revokeResolvedToken` → `revokeGrantAccessTokens` |
+
+ID Token へ独自クレームを足すなら `routes/token.ts` の `buildIdTokenPayload` の戻り値を署名前に書き換える、といった改修が生成コード上で完結する。ただし検証ステップを消した構成は `conformance.test.ts`（契約テスト）が失敗し、Basic OP の想定挙動から外れたことを検知できる。
+
+## インストールと実行
+
+```bash
+# インストールせずに実行
+pnpm dlx @maronn-openid-connect/cli generate hono
+
+# またはプロジェクトに追加してから実行
+pnpm add -D @maronn-openid-connect/cli
+pnpm maronn-oidc generate hono
+```
+
+## 使い方
+
+```bash
+# コード生成
+maronn-oidc generate <framework> [options]
+
+# 生成 + 既存エントリファイルへの組み込み（Next.js 以外）
+maronn-oidc setup <framework> [options]
+```
+
+対応フレームワーク: `hono`, `express`, `fastify`, `nextjs`
+
+`setup` は生成に加えて、エントリファイル内のプレースホルダーコメント（`// <!-- OIDC_IMPORT_PLACEHOLDER -->` と `// <!-- OIDC_SETUP_PLACEHOLDER -->`）を `applyOidc` の import と呼び出しに置換する。Next.js は App Router のファイル規約に従うため `setup` 非対応で、`maronn-oidc generate nextjs --output ./src/app` を使う。
+
+### オプション
+
+| オプション | 説明 |
+|---|---|
+| `--output, -o <dir>` | 出力先ディレクトリ（既定: `./oidc-provider`） |
+| `--entry, -e <file>` | setup 時にパッチするエントリファイル（既定: `./src/index.ts`） |
+| `--enable <features>` | 有効化する機能（カンマ区切り・複数回指定可） |
+| `--disable <features>` | 既定セットから外す機能（カンマ区切り・複数回指定可） |
+| `--help, -h` | ヘルプ表示 |
+
+## 生成されるもの
+
+```
+oidc-provider/
+├── app.ts / apply.ts     # OP 本体と既存アプリへの組み込み関数
+├── config.ts             # ProviderConfig・クライアント登録（既定値はローカル検証専用）
+├── store.ts              # インメモリストア（認可コード・トークン・セッション等）
+├── resolvers.ts          # セッション・同意状態の resolver
+├── views.ts              # ログイン / 同意 / エラー画面のデフォルト UI
+├── routes/               # 各エンドポイントのルート実装
+└── conformance.test.ts   # 生成 OP の想定挙動を固定する契約テスト
+```
+
+生成される OP のエンドポイント:
+
+| パス | 役割 |
+|---|---|
+| `/authorize` | 認可エンドポイント（`response_type=code`、PKCE S256、`prompt` / `max_age` / `claims` / Request Object 対応） |
+| `/token` | トークンエンドポイント（`authorization_code` / `refresh_token` グラント、`client_secret_basic` / `client_secret_post` / public client） |
+| `/userinfo` | UserInfo エンドポイント（Bearer トークン、scope 別クレーム） |
+| `/login`, `/consent` | ログイン・同意画面（差し替え可能なデフォルト UI 付き） |
+| `/.well-known/openid-configuration` | Discovery メタデータ |
+| `/.well-known/jwks.json` | JWKS（公開鍵） |
+| `/introspect` | RFC 7662 Token Introspection（`introspection` 有効時） |
+| `/revoke` | RFC 7009 Token Revocation（`revocation` 有効時） |
+
+## 機能トグル（--enable / --disable）
+
+生成されるOPの機能は、既定の全部入り構成から機能単位で増減できる。
+
+```bash
+# リフレッシュトークンとイントロスペクションを外した OP を生成
+maronn-oidc generate hono --disable refresh-token,introspection
+
+# PKCE を任意化（confidential client の非PKCEフローを許可）
+maronn-oidc generate express --disable pkce
+```
+
+| 機能名 | 既定 | `--disable` 時の挙動 |
+|---|---|---|
+| `pkce` | 有効 | PKCE を任意化する（`allowNonPkceAuthorizationCodeFlow: true`）。明示的な confidential client の完全な非PKCEリクエストのみ許可され、public client や不正な PKCE 値は引き続き拒否される |
+| `refresh-token` | 有効 | `refresh_token` grant を `unsupported_grant_type` で拒否。`offline_access` は付与されず、リフレッシュトークンは発行されない。discovery からも除去される |
+| `introspection` | 有効 | RFC 7662 introspection エンドポイント（`/introspect`）を生成しない |
+| `revocation` | 有効 | RFC 7009 revocation エンドポイント（`/revoke`）を生成しない |
+| `request-object` | 有効 | `request` パラメータ（Request Object by value, OIDC Core 1.0 §6.1）を `request_not_supported` で拒否。discovery は `request_parameter_supported: false` を広告する |
+
+Basic OP に必須の機能（authorize / token / userinfo / discovery / jwks / login / consent）はトグル対象外で、常に生成される。
+未知の機能名や、同じ機能を `--enable` と `--disable` の両方に指定した場合はエラーになる。
+
+### conformance.test.ts との関係
+
+生成物には `conformance.test.ts`（契約テスト）が含まれ、選択した機能構成に合わせた内容で生成される。
+無効化した機能については「無効であること」（404 応答、`unsupported_grant_type` / `request_not_supported` の拒否、discovery メタデータの不在など）をテストで固定する。
+生成コードをカスタマイズした結果このテストが通らなくなった場合、本リポジトリが担保する Basic OP 挙動から外れている可能性がある。
+
+## 生成後のセットアップ
+
+1. ProviderConfig・署名鍵・クライアント resolver を環境変数 / DB / KV から供給する
+2. 生成される `JsonStoreBackend` を実装し、`createJsonProviderStores()` の結果を `storage` に渡す
+3. `config.ts` と未指定時のインメモリストアはローカル検証・契約テスト専用として扱う
+4. 依存をインストールしてサーバーを起動する（例: `pnpm add hono @maronn-openid-connect/core`）
+
+署名鍵は `SigningKeyProvider` として注入する。`createCachedSigningKeyProvider()`（core 提供）でラップすると、TTL 付きキャッシュで鍵ローテーションに追随できる。
+
+```typescript
+import { applyOidc } from './oidc-provider/apply.js';
+import { createJsonProviderStores } from './oidc-provider/store.js';
+
+applyOidc(app, {
+  config: { issuer: 'http://localhost:3000' },
+  signingKeyProvider: yourSigningKeyProvider,
+  storage: createJsonProviderStores(yourJsonStoreBackend),
+});
+```
+
+Honoではリクエストごとのバインディングを受け取るstorage factoryも指定できる。配線済みの実例は本リポジトリの `samples/hono-cloudflare` / `samples/express-flyio` / `samples/fastify-flyio` / `samples/nextjs-vercel` を参照。
+
+## ライセンス
+
+MIT

package/dist/features.d.ts

@@ -0,0 +1,19 @@
+export declare const AVAILABLE_FEATURES: readonly ["pkce", "refresh-token", "introspection", "revocation", "request-object"];
+export type FeatureName = (typeof AVAILABLE_FEATURES)[number];
+export declare const EXPERIMENTAL_FEATURES: readonly ["par", "token-exchange"];
+export type ExperimentalFeatureName = (typeof EXPERIMENTAL_FEATURES)[number];
+export interface OidcFeatureConfig {
+    pkce: boolean;
+    refreshToken: boolean;
+    introspection: boolean;
+    revocation: boolean;
+    requestObject: boolean;
+    par: boolean;
+    tokenExchange: boolean;
+}
+export declare const DEFAULT_FEATURES: OidcFeatureConfig;
+export declare function resolveFeatures(options: {
+    enable?: string[];
+    disable?: string[];
+}): OidcFeatureConfig;
+//# sourceMappingURL=features.d.ts.map

package/dist/features.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"features.d.ts","sourceRoot":"","sources":["../src/features.ts"],"names":[],"mappings":"AAeA,eAAO,MAAM,kBAAkB,qFAMrB,CAAC;AAEX,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC;AAa9D,eAAO,MAAM,qBAAqB,oCAAqC,CAAC;AAExE,MAAM,MAAM,uBAAuB,GAAG,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC;AAuB7E,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,OAAO,CAAC;IACd,YAAY,EAAE,OAAO,CAAC;IACtB,aAAa,EAAE,OAAO,CAAC;IACvB,UAAU,EAAE,OAAO,CAAC;IACpB,aAAa,EAAE,OAAO,CAAC;IACvB,GAAG,EAAE,OAAO,CAAC;IACb,aAAa,EAAE,OAAO,CAAC;CACxB;AAqBD,eAAO,MAAM,gBAAgB,EAAE,iBAQ9B,CAAC;AA6BF,wBAAgB,eAAe,CAAC,OAAO,EAAE;IACvC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;CACpB,GAAG,iBAAiB,CA0BpB"}

package/dist/features.js

@@ -0,0 +1,64 @@
+export const AVAILABLE_FEATURES = [
+    'pkce',
+    'refresh-token',
+    'introspection',
+    'revocation',
+    'request-object',
+];
+export const EXPERIMENTAL_FEATURES = ['par', 'token-exchange'];
+const FEATURE_KEYS = {
+    pkce: 'pkce',
+    'refresh-token': 'refreshToken',
+    introspection: 'introspection',
+    revocation: 'revocation',
+    'request-object': 'requestObject',
+};
+const EXPERIMENTAL_FEATURE_KEYS = {
+    par: 'par',
+    'token-exchange': 'tokenExchange',
+};
+export const DEFAULT_FEATURES = {
+    pkce: true,
+    refreshToken: true,
+    introspection: true,
+    revocation: true,
+    requestObject: true,
+    par: false,
+    tokenExchange: false,
+};
+function isExperimentalFeature(name) {
+    return EXPERIMENTAL_FEATURES.includes(name);
+}
+function assertKnownFeature(name) {
+    if (!AVAILABLE_FEATURES.includes(name) &&
+        !isExperimentalFeature(name)) {
+        throw new Error(`Unknown feature: "${name}". Available features: ${AVAILABLE_FEATURES.join(', ')}. ` +
+            `Experimental features (disabled by default): ${EXPERIMENTAL_FEATURES.join(', ')}`);
+    }
+}
+function featureKey(name) {
+    return isExperimentalFeature(name) ? EXPERIMENTAL_FEATURE_KEYS[name] : FEATURE_KEYS[name];
+}
+export function resolveFeatures(options) {
+    const enable = options.enable ?? [];
+    const disable = options.disable ?? [];
+    for (const name of [...enable, ...disable]) {
+        assertKnownFeature(name);
+    }
+    for (const name of enable) {
+        if (disable.includes(name)) {
+            throw new Error(`Feature "${name}" cannot be both enabled and disabled`);
+        }
+    }
+    const features = { ...DEFAULT_FEATURES };
+    for (const name of enable) {
+        assertKnownFeature(name);
+        features[featureKey(name)] = true;
+    }
+    for (const name of disable) {
+        assertKnownFeature(name);
+        features[featureKey(name)] = false;
+    }
+    return features;
+}
+//# sourceMappingURL=features.js.map

package/dist/features.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features.js","sourceRoot":"","sources":["../src/features.ts"],"names":[],"mappings":"AAeA,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,MAAM;IACN,eAAe;IACf,eAAe;IACf,YAAY;IACZ,gBAAgB;CACR,CAAC;AAeX,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,KAAK,EAAE,gBAAgB,CAAU,CAAC;AAoCxE,MAAM,YAAY,GAAiD;IACjE,IAAI,EAAE,MAAM;IACZ,eAAe,EAAE,cAAc;IAC/B,aAAa,EAAE,eAAe;IAC9B,UAAU,EAAE,YAAY;IACxB,gBAAgB,EAAE,eAAe;CAClC,CAAC;AAGF,MAAM,yBAAyB,GAA6D;IAC1F,GAAG,EAAE,KAAK;IACV,gBAAgB,EAAE,eAAe;CAClC,CAAC;AAMF,MAAM,CAAC,MAAM,gBAAgB,GAAsB;IACjD,IAAI,EAAE,IAAI;IACV,YAAY,EAAE,IAAI;IAClB,aAAa,EAAE,IAAI;IACnB,UAAU,EAAE,IAAI;IAChB,aAAa,EAAE,IAAI;IACnB,GAAG,EAAE,KAAK;IACV,aAAa,EAAE,KAAK;CACrB,CAAC;AAEF,SAAS,qBAAqB,CAAC,IAAY;IACzC,OAAQ,qBAA2C,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAY;IACtC,IACE,CAAE,kBAAwC,CAAC,QAAQ,CAAC,IAAI,CAAC;QACzD,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAC5B,CAAC;QACD,MAAM,IAAI,KAAK,CACb,qBAAqB,IAAI,0BAA0B,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;YAClF,gDAAgD,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACrF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,IAA2C;IAC7D,OAAO,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,yBAAyB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;AAC5F,CAAC;AASD,MAAM,UAAU,eAAe,CAAC,OAG/B;IACC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;IACpC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC;IAEtC,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,MAAM,EAAE,GAAG,OAAO,CAAC,EAAE,CAAC;QAC3C,kBAAkB,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;QAC1B,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,YAAY,IAAI,uCAAuC,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAsB,EAAE,GAAG,gBAAgB,EAAE,CAAC;IAC5D,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;QAC1B,kBAAkB,CAAC,IAAI,CAAC,CAAC;QACzB,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC;IACpC,CAAC;IAGD,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,kBAAkB,CAAC,IAAI,CAAC,CAAC;QACzB,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC;IACrC,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/frameworks/express/index.d.ts

@@ -0,0 +1,7 @@
+import type { FrameworkGenerator, GeneratedFile, GeneratorOptions } from '../types.js';
+export declare class ExpressGenerator implements FrameworkGenerator {
+    readonly name = "express";
+    readonly displayName = "Express";
+    generate(options: GeneratorOptions): GeneratedFile[];
+}
+//# sourceMappingURL=index.d.ts.map

package/dist/frameworks/express/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/frameworks/express/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAGvF,qBAAa,gBAAiB,YAAW,kBAAkB;IACzD,QAAQ,CAAC,IAAI,aAAa;IAC1B,QAAQ,CAAC,WAAW,aAAa;IAEjC,QAAQ,CAAC,OAAO,EAAE,gBAAgB,GAAG,aAAa,EAAE;CAOrD"}

package/dist/frameworks/express/index.js

@@ -0,0 +1,9 @@
+import { expressApplyTemplate, webGeneratedFiles } from '../web-standard/templates.js';
+export class ExpressGenerator {
+    name = 'express';
+    displayName = 'Express';
+    generate(options) {
+        return webGeneratedFiles(options.corePackageName, expressApplyTemplate(options.features), options.features);
+    }
+}
+//# sourceMappingURL=index.js.map

package/dist/frameworks/express/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/frameworks/express/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AAEvF,MAAM,OAAO,gBAAgB;IAClB,IAAI,GAAG,SAAS,CAAC;IACjB,WAAW,GAAG,SAAS,CAAC;IAEjC,QAAQ,CAAC,OAAyB;QAChC,OAAO,iBAAiB,CACtB,OAAO,CAAC,eAAe,EACvB,oBAAoB,CAAC,OAAO,CAAC,QAAQ,CAAC,EACtC,OAAO,CAAC,QAAQ,CACjB,CAAC;IACJ,CAAC;CACF"}

package/dist/frameworks/fastify/index.d.ts

@@ -0,0 +1,7 @@
+import type { FrameworkGenerator, GeneratedFile, GeneratorOptions } from '../types.js';
+export declare class FastifyGenerator implements FrameworkGenerator {
+    readonly name = "fastify";
+    readonly displayName = "Fastify";
+    generate(options: GeneratorOptions): GeneratedFile[];
+}
+//# sourceMappingURL=index.d.ts.map

package/dist/frameworks/fastify/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/frameworks/fastify/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAGvF,qBAAa,gBAAiB,YAAW,kBAAkB;IACzD,QAAQ,CAAC,IAAI,aAAa;IAC1B,QAAQ,CAAC,WAAW,aAAa;IAEjC,QAAQ,CAAC,OAAO,EAAE,gBAAgB,GAAG,aAAa,EAAE;CAOrD"}

package/dist/frameworks/fastify/index.js

@@ -0,0 +1,9 @@
+import { fastifyApplyTemplate, webGeneratedFiles } from '../web-standard/templates.js';
+export class FastifyGenerator {
+    name = 'fastify';
+    displayName = 'Fastify';
+    generate(options) {
+        return webGeneratedFiles(options.corePackageName, fastifyApplyTemplate(options.features), options.features);
+    }
+}
+//# sourceMappingURL=index.js.map

package/dist/frameworks/fastify/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/frameworks/fastify/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AAEvF,MAAM,OAAO,gBAAgB;IAClB,IAAI,GAAG,SAAS,CAAC;IACjB,WAAW,GAAG,SAAS,CAAC;IAEjC,QAAQ,CAAC,OAAyB;QAChC,OAAO,iBAAiB,CACtB,OAAO,CAAC,eAAe,EACvB,oBAAoB,CAAC,OAAO,CAAC,QAAQ,CAAC,EACtC,OAAO,CAAC,QAAQ,CACjB,CAAC;IACJ,CAAC;CACF"}

package/dist/frameworks/hono/index.d.ts

@@ -0,0 +1,7 @@
+import type { FrameworkGenerator, GeneratedFile, GeneratorOptions } from '../types.js';
+export declare class HonoGenerator implements FrameworkGenerator {
+    readonly name = "hono";
+    readonly displayName = "Hono";
+    generate(options: GeneratorOptions): GeneratedFile[];
+}
+//# sourceMappingURL=index.d.ts.map

package/dist/frameworks/hono/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/frameworks/hono/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAsBvF,qBAAa,aAAc,YAAW,kBAAkB;IACtD,QAAQ,CAAC,IAAI,UAAU;IACvB,QAAQ,CAAC,WAAW,UAAU;IAE9B,QAAQ,CAAC,OAAO,EAAE,gBAAgB,GAAG,aAAa,EAAE;CA+BrD"}

package/dist/frameworks/hono/index.js

@@ -0,0 +1,36 @@
+import { DEFAULT_FEATURES } from '../../features.js';
+import { appTemplate, applyTemplate, configTemplate, storeTemplate, resolversTemplate, viewsTemplate, authorizeRouteTemplate, tokenRouteTemplate, userinfoRouteTemplate, introspectionRouteTemplate, revocationRouteTemplate, jwksRouteTemplate, parRouteTemplate, discoveryRouteTemplate, loginRouteTemplate, consentRouteTemplate, conformanceTestTemplate, } from './templates.js';
+export class HonoGenerator {
+    name = 'hono';
+    displayName = 'Hono';
+    generate(options) {
+        const pkg = options.corePackageName;
+        const features = options.features ?? DEFAULT_FEATURES;
+        return [
+            { path: 'app.ts', content: appTemplate(pkg, features) },
+            { path: 'apply.ts', content: applyTemplate(pkg, features) },
+            { path: 'config.ts', content: configTemplate(pkg, features) },
+            { path: 'store.ts', content: storeTemplate(pkg, features) },
+            { path: 'resolvers.ts', content: resolversTemplate(pkg, features) },
+            { path: 'views.ts', content: viewsTemplate() },
+            { path: 'routes/authorize.ts', content: authorizeRouteTemplate(pkg, features) },
+            { path: 'routes/token.ts', content: tokenRouteTemplate(pkg, features) },
+            { path: 'routes/userinfo.ts', content: userinfoRouteTemplate(pkg) },
+            ...(features.introspection
+                ? [{ path: 'routes/introspection.ts', content: introspectionRouteTemplate(pkg) }]
+                : []),
+            ...(features.revocation
+                ? [{ path: 'routes/revocation.ts', content: revocationRouteTemplate(pkg) }]
+                : []),
+            ...(features.par
+                ? [{ path: 'routes/par.ts', content: parRouteTemplate(pkg) }]
+                : []),
+            { path: 'routes/jwks.ts', content: jwksRouteTemplate(pkg) },
+            { path: 'routes/discovery.ts', content: discoveryRouteTemplate(pkg, features) },
+            { path: 'routes/login.ts', content: loginRouteTemplate(pkg) },
+            { path: 'routes/consent.ts', content: consentRouteTemplate(pkg) },
+            { path: 'conformance.test.ts', content: conformanceTestTemplate(pkg, features) },
+        ];
+    }
+}
+//# sourceMappingURL=index.js.map

package/dist/frameworks/hono/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/frameworks/hono/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EACL,WAAW,EACX,aAAa,EACb,cAAc,EACd,aAAa,EACb,iBAAiB,EACjB,aAAa,EACb,sBAAsB,EACtB,kBAAkB,EAClB,qBAAqB,EACrB,0BAA0B,EAC1B,uBAAuB,EACvB,iBAAiB,EACjB,gBAAgB,EAChB,sBAAsB,EACtB,kBAAkB,EAClB,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,gBAAgB,CAAC;AAExB,MAAM,OAAO,aAAa;IACf,IAAI,GAAG,MAAM,CAAC;IACd,WAAW,GAAG,MAAM,CAAC;IAE9B,QAAQ,CAAC,OAAyB;QAChC,MAAM,GAAG,GAAG,OAAO,CAAC,eAAe,CAAC;QACpC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,gBAAgB,CAAC;QAEtD,OAAO;YACL,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE;YACvD,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,aAAa,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE;YAC3D,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,cAAc,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE;YAC7D,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,aAAa,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE;YAC3D,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,iBAAiB,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE;YACnE,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,aAAa,EAAE,EAAE;YAC9C,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,sBAAsB,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE;YAC/E,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,kBAAkB,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE;YACvE,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,qBAAqB,CAAC,GAAG,CAAC,EAAE;YACnE,GAAG,CAAC,QAAQ,CAAC,aAAa;gBACxB,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,yBAAyB,EAAE,OAAO,EAAE,0BAA0B,CAAC,GAAG,CAAC,EAAE,CAAC;gBACjF,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,QAAQ,CAAC,UAAU;gBACrB,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,OAAO,EAAE,uBAAuB,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC3E,CAAC,CAAC,EAAE,CAAC;YAEP,GAAG,CAAC,QAAQ,CAAC,GAAG;gBACd,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC7D,CAAC,CAAC,EAAE,CAAC;YACP,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,iBAAiB,CAAC,GAAG,CAAC,EAAE;YAC3D,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,sBAAsB,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE;YAC/E,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,kBAAkB,CAAC,GAAG,CAAC,EAAE;YAC7D,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,oBAAoB,CAAC,GAAG,CAAC,EAAE;YACjE,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,uBAAuB,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE;SACjF,CAAC;IACJ,CAAC;CACF"}

package/dist/frameworks/hono/templates.d.ts

@@ -0,0 +1,37 @@
+import type { OidcFeatureConfig } from '../../features.js';
+export declare const EXPERIMENTAL_PACKAGE = "@maronn-openid-connect/experimental";
+export declare function appTemplate(_corePkg: string, features?: OidcFeatureConfig): string;
+export declare function configTemplate(corePkg: string, features?: OidcFeatureConfig): string;
+export declare function storeTemplate(corePkg: string, features?: OidcFeatureConfig): string;
+export declare function resolversTemplate(corePkg: string, features?: OidcFeatureConfig): string;
+export declare function authorizeRouteTemplate(corePkg: string, features?: OidcFeatureConfig): string;
+export declare function parRouteTemplate(corePkg: string): string;
+export declare function tokenRouteTemplate(corePkg: string, features?: OidcFeatureConfig): string;
+export declare function userinfoRouteTemplate(corePkg: string): string;
+export declare function jwksRouteTemplate(corePkg: string): string;
+export declare function discoveryRouteTemplate(corePkg: string, features?: OidcFeatureConfig): string;
+export declare function loginRouteTemplate(corePkg: string): string;
+export declare function consentRouteTemplate(corePkg: string): string;
+export declare function applyTemplate(_corePkg: string, features?: OidcFeatureConfig): string;
+export declare function introspectionRouteTemplate(corePkg: string): string;
+export declare function revocationRouteTemplate(corePkg: string): string;
+export declare function viewsTemplate(): string;
+export declare function requestObjectConformanceModuleSetup(features?: OidcFeatureConfig): string;
+export declare function requestObjectConformanceBeforeAll(features?: OidcFeatureConfig): string;
+export declare function reuseFlowConformanceTestBlock(features?: OidcFeatureConfig): string;
+export declare function customViewConformanceTestBlock(): string;
+export declare function conformanceTestClientsBlock(features: OidcFeatureConfig): string;
+export declare function scopesSupportedConformanceTest(features: OidcFeatureConfig): string;
+export declare function featureDisabledDiscoveryConformanceTests(features: OidcFeatureConfig): string;
+export declare function introspectionConformanceBlock(features: OidcFeatureConfig): string;
+export declare function revocationDisabledConformanceBlock(features: OidcFeatureConfig): string;
+export declare function pkceDisabledConformanceBlock(features: OidcFeatureConfig): string;
+export declare function tokenEndpointAuthMethodsConformanceBlock(): string;
+export declare function endpointBehaviorConformanceBlock(features: OidcFeatureConfig, includeHonoApplyParity?: boolean): string;
+export declare function idTokenHintConformanceBlock(): string;
+export declare function consentWithdrawalConformanceBlock(features: OidcFeatureConfig): string;
+export declare function persistentStorageConformanceBlock(): string;
+export declare function tokenExchangeConformanceBlock(features: OidcFeatureConfig): string;
+export declare function parConformanceBlock(features: OidcFeatureConfig): string;
+export declare function conformanceTestTemplate(corePkg: string, features?: OidcFeatureConfig): string;
+//# sourceMappingURL=templates.d.ts.map

package/dist/frameworks/hono/templates.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"templates.d.ts","sourceRoot":"","sources":["../../../src/frameworks/hono/templates.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAO3D,eAAO,MAAM,oBAAoB,wCAAwC,CAAC;AAsC1E,wBAAgB,WAAW,CACzB,QAAQ,EAAE,MAAM,EAChB,QAAQ,GAAE,iBAAoC,GAC7C,MAAM,CA0QR;AAED,wBAAgB,cAAc,CAC5B,OAAO,EAAE,MAAM,EACf,QAAQ,GAAE,iBAAoC,GAC7C,MAAM,CAoMR;AAED,wBAAgB,aAAa,CAC3B,OAAO,EAAE,MAAM,EACf,QAAQ,GAAE,iBAAoC,GAC7C,MAAM,CAs3BR;AAED,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,MAAM,EACf,QAAQ,GAAE,iBAAoC,GAC7C,MAAM,CAyNR;AAED,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,MAAM,EACf,QAAQ,GAAE,iBAAoC,GAC7C,MAAM,CAopBR;AAMD,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CA+JxD;AAED,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,MAAM,EACf,QAAQ,GAAE,iBAAoC,GAC7C,MAAM,CA+wBR;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAqO7D;AAED,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CA8FzD;AAED,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,MAAM,EACf,QAAQ,GAAE,iBAAoC,GAC7C,MAAM,CA0MR;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAsH1D;AAED,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAwI5D;AAED,wBAAgB,aAAa,CAC3B,QAAQ,EAAE,MAAM,EAChB,QAAQ,GAAE,iBAAoC,GAC7C,MAAM,CA2TR;AAED,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAmIlE;AAED,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CA2I/D;AAED,wBAAgB,aAAa,IAAI,MAAM,CAkOtC;AA0BD,wBAAgB,mCAAmC,CACjD,QAAQ,GAAE,iBAAoC,GAC7C,MAAM,CAmCR;AAMD,wBAAgB,iCAAiC,CAC/C,QAAQ,GAAE,iBAAoC,GAC7C,MAAM,CA4BR;AAED,wBAAgB,6BAA6B,CAC3C,QAAQ,GAAE,iBAAoC,GAC7C,MAAM,CAKR;AA8lBD,wBAAgB,8BAA8B,IAAI,MAAM,CA6DvD;AA6GD,wBAAgB,2BAA2B,CAAC,QAAQ,EAAE,iBAAiB,GAAG,MAAM,CAwE/E;AAED,wBAAgB,8BAA8B,CAAC,QAAQ,EAAE,iBAAiB,GAAG,MAAM,CAiDlF;AAED,wBAAgB,wCAAwC,CAAC,QAAQ,EAAE,iBAAiB,GAAG,MAAM,CA6B5F;AAED,wBAAgB,6BAA6B,CAAC,QAAQ,EAAE,iBAAiB,GAAG,MAAM,CAuHjF;AAED,wBAAgB,kCAAkC,CAAC,QAAQ,EAAE,iBAAiB,GAAG,MAAM,CAsJtF;AAED,wBAAgB,4BAA4B,CAAC,QAAQ,EAAE,iBAAiB,GAAG,MAAM,CAgFhF;AAED,wBAAgB,wCAAwC,IAAI,MAAM,CAgMjE;AAED,wBAAgB,gCAAgC,CAC9C,QAAQ,EAAE,iBAAiB,EAC3B,sBAAsB,UAAQ,GAC7B,MAAM,CA6JR;AAaD,wBAAgB,2BAA2B,IAAI,MAAM,CA0PpD;AAED,wBAAgB,iCAAiC,CAAC,QAAQ,EAAE,iBAAiB,GAAG,MAAM,CA0IrF;AAED,wBAAgB,iCAAiC,IAAI,MAAM,CAoC1D;AAOD,wBAAgB,6BAA6B,CAAC,QAAQ,EAAE,iBAAiB,GAAG,MAAM,CA4hBjF;AAOD,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,iBAAiB,GAAG,MAAM,CAmZvE;AAED,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,MAAM,EACf,QAAQ,GAAE,iBAAoC,GAC7C,MAAM,CA8fR"}