@mcp-abap-adt/auth-providers 1.0.2 → 1.0.4

package/CHANGELOG.md

@@ -7,6 +7,21 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [1.0.4] - 2026-02-11
+
+### Changed
+- Remove Cloud Foundry passcode provider and related docs/tests.
+
+### Fixed
+- Always send Basic auth header for OIDC password grant, even with empty client secret.
+
+
+## [1.0.3] - 2026-02-11
+
+### Fixed
+- Always send Basic auth header for OIDC password grant, even with empty client secret.
+
+
 ## [1.0.2] - 2026-02-11
 
 ### Added

package/README.md

@@ -108,7 +108,6 @@ Available providers:
 - `OidcDeviceFlowProvider`
 - `OidcPasswordProvider`
 - `OidcTokenExchangeProvider`
-- `CfPasscodeProvider` (Cloud Foundry SSO passcode)
 - `Saml2BearerProvider` (SAML assertion exchange)
 - `Saml2PureProvider` (returns SAMLResponse as token)
 
@@ -147,18 +146,6 @@ const provider = new OidcBrowserProvider({
 });
 ```
 
-Cloud Foundry passcode example:
-
-```typescript
-import { CfPasscodeProvider } from '@mcp-abap-adt/auth-providers';
-
-const provider = new CfPasscodeProvider({
-  uaaUrl: 'https://uaa.cf.example.com',
-  clientId: 'cf',
-  passcode: '<paste-passcode-here>',
-});
-```
-
 SAML bearer example (manual flow):
 
 ```typescript

package/dist/auth/browserAuth.js

@@ -51,7 +51,7 @@ const BROWSER_MAP = {
     edge: 'msedge',
     firefox: 'firefox',
     system: undefined, // system default
-    auto: undefined, // try to open browser, fallback to showing URL (like cf login)
+    auto: undefined, // try to open browser, fallback to showing URL
     headless: null, // no browser, log URL and wait for callback (SSH/remote)
     none: null, // no browser, log URL and wait for callback (same as headless)
 };
@@ -481,7 +481,7 @@ async function startBrowserAuth(authConfig, browser = 'system', logger, port = 3
                 // Don't open browser, don't reject - just wait for the callback
                 return;
             }
-            // Handle 'auto' mode - try to open browser, fallback to showing URL (like cf login)
+            // Handle 'auto' mode - try to open browser, fallback to showing URL
             if (browser === 'auto') {
                 log?.info('🌐 Attempting to open browser for authentication...');
                 try {
@@ -492,7 +492,7 @@ async function startBrowserAuth(authConfig, browser = 'system', logger, port = 3
                     return;
                 }
                 catch (error) {
-                    // If browser cannot be opened, show URL and wait (like cf login)
+                    // If browser cannot be opened, show URL and wait
                     const errorMessage = error instanceof Error ? error.message : String(error);
                     log?.warn(`⚠️  Could not open browser automatically: ${errorMessage}`);
                     log?.info(`🔗 Please open this URL in your browser to authenticate:`);

package/dist/auth/oidcToken.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"oidcToken.d.ts","sourceRoot":"","sources":["../../src/auth/oidcToken.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,0BAA0B,CAAC;AAGxD,MAAM,WAAW,iBAAiB;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AA6BD,wBAAsB,yBAAyB,CAC7C,aAAa,EAAE,MAAM,EACrB,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,GAAG,SAAS,EAChC,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,MAAM,EACpB,MAAM,CAAC,EAAE,OAAO,GACf,OAAO,CAAC,iBAAiB,CAAC,CAoB5B;AAED,wBAAsB,gBAAgB,CACpC,aAAa,EAAE,MAAM,EACrB,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,GAAG,SAAS,EAChC,YAAY,EAAE,MAAM,EACpB,MAAM,CAAC,EAAE,OAAO,GACf,OAAO,CAAC,iBAAiB,CAAC,CAgB5B;AAED,MAAM,WAAW,0BAA0B;IACzC,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,MAAM,CAAC;IACxB,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,wBAAsB,2BAA2B,CAC/C,cAAc,EAAE,MAAM,EACtB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,GAAG,SAAS,EACzB,MAAM,CAAC,EAAE,OAAO,GACf,OAAO,CAAC,0BAA0B,CAAC,CA0BrC;AAED,wBAAsB,gBAAgB,CACpC,aAAa,EAAE,MAAM,EACrB,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,GAAG,SAAS,EAChC,UAAU,EAAE,MAAM,EAClB,QAAQ,GAAE,MAAU,EACpB,MAAM,CAAC,EAAE,OAAO,GACf,OAAO,CAAC,iBAAiB,CAAC,CA8B5B;AAED,wBAAsB,aAAa,CACjC,aAAa,EAAE,MAAM,EACrB,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,GAAG,SAAS,EAChC,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,GAAG,SAAS,EACzB,MAAM,CAAC,EAAE,OAAO,GACf,OAAO,CAAC,iBAAiB,CAAC,CAoB5B;AAED,wBAAsB,aAAa,CACjC,aAAa,EAAE,MAAM,EACrB,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,GAAG,SAAS,EAChC,YAAY,EAAE,MAAM,EACpB,gBAAgB,EAAE,MAAM,EACxB,KAAK,EAAE,MAAM,GAAG,SAAS,EACzB,QAAQ,EAAE,MAAM,GAAG,SAAS,EAC5B,UAAU,CAAC,EAAE,MAAM,EACnB,cAAc,CAAC,EAAE,MAAM,EACvB,MAAM,CAAC,EAAE,OAAO,GACf,OAAO,CAAC,iBAAiB,CAAC,CAgC5B"}
+{"version":3,"file":"oidcToken.d.ts","sourceRoot":"","sources":["../../src/auth/oidcToken.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,0BAA0B,CAAC;AAGxD,MAAM,WAAW,iBAAiB;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AA6BD,wBAAsB,yBAAyB,CAC7C,aAAa,EAAE,MAAM,EACrB,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,GAAG,SAAS,EAChC,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,MAAM,EACpB,MAAM,CAAC,EAAE,OAAO,GACf,OAAO,CAAC,iBAAiB,CAAC,CAoB5B;AAED,wBAAsB,gBAAgB,CACpC,aAAa,EAAE,MAAM,EACrB,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,GAAG,SAAS,EAChC,YAAY,EAAE,MAAM,EACpB,MAAM,CAAC,EAAE,OAAO,GACf,OAAO,CAAC,iBAAiB,CAAC,CAgB5B;AAED,MAAM,WAAW,0BAA0B;IACzC,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,MAAM,CAAC;IACxB,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,wBAAsB,2BAA2B,CAC/C,cAAc,EAAE,MAAM,EACtB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,GAAG,SAAS,EACzB,MAAM,CAAC,EAAE,OAAO,GACf,OAAO,CAAC,0BAA0B,CAAC,CA0BrC;AAED,wBAAsB,gBAAgB,CACpC,aAAa,EAAE,MAAM,EACrB,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,GAAG,SAAS,EAChC,UAAU,EAAE,MAAM,EAClB,QAAQ,GAAE,MAAU,EACpB,MAAM,CAAC,EAAE,OAAO,GACf,OAAO,CAAC,iBAAiB,CAAC,CA8B5B;AAED,wBAAsB,aAAa,CACjC,aAAa,EAAE,MAAM,EACrB,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,GAAG,SAAS,EAChC,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,GAAG,SAAS,EACzB,MAAM,CAAC,EAAE,OAAO,GACf,OAAO,CAAC,iBAAiB,CAAC,CA6B5B;AAED,wBAAsB,aAAa,CACjC,aAAa,EAAE,MAAM,EACrB,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,GAAG,SAAS,EAChC,YAAY,EAAE,MAAM,EACpB,gBAAgB,EAAE,MAAM,EACxB,KAAK,EAAE,MAAM,GAAG,SAAS,EACzB,QAAQ,EAAE,MAAM,GAAG,SAAS,EAC5B,UAAU,CAAC,EAAE,MAAM,EACnB,cAAc,CAAC,EAAE,MAAM,EACvB,MAAM,CAAC,EAAE,OAAO,GACf,OAAO,CAAC,iBAAiB,CAAC,CAgC5B"}

package/dist/auth/oidcToken.js

@@ -17,7 +17,7 @@ function toBasicAuth(clientId, clientSecret) {
     return Buffer.from(`${clientId}:${clientSecret}`).toString('base64');
 }
 function buildAuthHeaders(clientId, clientSecret) {
-    if (clientSecret) {
+    if (clientSecret !== undefined) {
         return { Authorization: `Basic ${toBasicAuth(clientId, clientSecret)}` };
     }
     return {};
@@ -128,13 +128,22 @@ async function passwordGrant(tokenEndpoint, clientId, clientSecret, username, pa
         params.append('scope', scope);
     }
     logger?.info('[OIDC] Performing password grant', { tokenEndpoint });
-    const response = await axios_1.default.post(tokenEndpoint, params.toString(), {
-        headers: {
-            'Content-Type': 'application/x-www-form-urlencoded',
-            ...buildAuthHeaders(clientId, clientSecret),
-        },
-    });
-    return mapTokenResponse(response.data);
+    try {
+        const response = await axios_1.default.post(tokenEndpoint, params.toString(), {
+            headers: {
+                'Content-Type': 'application/x-www-form-urlencoded',
+                ...buildAuthHeaders(clientId, clientSecret),
+            },
+        });
+        return mapTokenResponse(response.data);
+    }
+    catch (error) {
+        const status = error?.response?.status;
+        const data = error?.response?.data;
+        const errorCode = data?.error;
+        const errorDesc = data?.error_description;
+        throw new Error(`OIDC password grant failed (${status || 'unknown'}): ${errorCode || 'unknown'}${errorDesc ? ` - ${errorDesc}` : ''}`);
+    }
 }
 async function tokenExchange(tokenEndpoint, clientId, clientSecret, subjectToken, subjectTokenType, scope, audience, actorToken, actorTokenType, logger) {
     const params = new URLSearchParams();

package/dist/index.d.ts

@@ -5,8 +5,8 @@
  * Provides token providers
  */
 export { BrowserAuthError, RefreshError, ServiceKeyError, SessionDataError, TokenProviderError, ValidationError, } from './errors/TokenProviderErrors';
-export type { AuthorizationCodeProviderConfig, CfPasscodeProviderConfig, ClientCredentialsProviderConfig, DeviceFlowProviderConfig, OidcBrowserProviderConfig, OidcDeviceFlowProviderConfig, OidcPasswordProviderConfig, OidcTokenExchangeProviderConfig, Saml2BearerProviderConfig, Saml2PureProviderConfig, } from './providers';
-export { AuthorizationCodeProvider, BaseTokenProvider, CfPasscodeProvider, ClientCredentialsProvider, DeviceFlowProvider, OidcBrowserProvider, OidcDeviceFlowProvider, OidcPasswordProvider, OidcTokenExchangeProvider, Saml2BearerProvider, Saml2PureProvider, } from './providers';
+export type { AuthorizationCodeProviderConfig, ClientCredentialsProviderConfig, DeviceFlowProviderConfig, OidcBrowserProviderConfig, OidcDeviceFlowProviderConfig, OidcPasswordProviderConfig, OidcTokenExchangeProviderConfig, Saml2BearerProviderConfig, Saml2PureProviderConfig, } from './providers';
+export { AuthorizationCodeProvider, BaseTokenProvider, ClientCredentialsProvider, DeviceFlowProvider, OidcBrowserProvider, OidcDeviceFlowProvider, OidcPasswordProvider, OidcTokenExchangeProvider, Saml2BearerProvider, Saml2PureProvider, } from './providers';
 export { SsoProviderFactory } from './sso/SsoProviderFactory';
 export type { SsoProviderConfig, SsoProviderInstance } from './sso/types';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EACL,gBAAgB,EAChB,YAAY,EACZ,eAAe,EACf,gBAAgB,EAChB,kBAAkB,EAClB,eAAe,GAChB,MAAM,8BAA8B,CAAC;AACtC,YAAY,EACV,+BAA+B,EAC/B,wBAAwB,EACxB,+BAA+B,EAC/B,wBAAwB,EACxB,yBAAyB,EACzB,4BAA4B,EAC5B,0BAA0B,EAC1B,+BAA+B,EAC/B,yBAAyB,EACzB,uBAAuB,GACxB,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,yBAAyB,EACzB,iBAAiB,EACjB,kBAAkB,EAClB,yBAAyB,EACzB,kBAAkB,EAClB,mBAAmB,EACnB,sBAAsB,EACtB,oBAAoB,EACpB,yBAAyB,EACzB,mBAAmB,EACnB,iBAAiB,GAClB,MAAM,aAAa,CAAC;AAGrB,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAC9D,YAAY,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EACL,gBAAgB,EAChB,YAAY,EACZ,eAAe,EACf,gBAAgB,EAChB,kBAAkB,EAClB,eAAe,GAChB,MAAM,8BAA8B,CAAC;AACtC,YAAY,EACV,+BAA+B,EAC/B,+BAA+B,EAC/B,wBAAwB,EACxB,yBAAyB,EACzB,4BAA4B,EAC5B,0BAA0B,EAC1B,+BAA+B,EAC/B,yBAAyB,EACzB,uBAAuB,GACxB,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,yBAAyB,EACzB,iBAAiB,EACjB,yBAAyB,EACzB,kBAAkB,EAClB,mBAAmB,EACnB,sBAAsB,EACtB,oBAAoB,EACpB,yBAAyB,EACzB,mBAAmB,EACnB,iBAAiB,GAClB,MAAM,aAAa,CAAC;AAGrB,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAC9D,YAAY,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC"}

package/dist/index.js

@@ -6,7 +6,7 @@
  * Provides token providers
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.SsoProviderFactory = exports.Saml2PureProvider = exports.Saml2BearerProvider = exports.OidcTokenExchangeProvider = exports.OidcPasswordProvider = exports.OidcDeviceFlowProvider = exports.OidcBrowserProvider = exports.DeviceFlowProvider = exports.ClientCredentialsProvider = exports.CfPasscodeProvider = exports.BaseTokenProvider = exports.AuthorizationCodeProvider = exports.ValidationError = exports.TokenProviderError = exports.SessionDataError = exports.ServiceKeyError = exports.RefreshError = exports.BrowserAuthError = void 0;
+exports.SsoProviderFactory = exports.Saml2PureProvider = exports.Saml2BearerProvider = exports.OidcTokenExchangeProvider = exports.OidcPasswordProvider = exports.OidcDeviceFlowProvider = exports.OidcBrowserProvider = exports.DeviceFlowProvider = exports.ClientCredentialsProvider = exports.BaseTokenProvider = exports.AuthorizationCodeProvider = exports.ValidationError = exports.TokenProviderError = exports.SessionDataError = exports.ServiceKeyError = exports.RefreshError = exports.BrowserAuthError = void 0;
 // Errors
 var TokenProviderErrors_1 = require("./errors/TokenProviderErrors");
 Object.defineProperty(exports, "BrowserAuthError", { enumerable: true, get: function () { return TokenProviderErrors_1.BrowserAuthError; } });
@@ -19,7 +19,6 @@ Object.defineProperty(exports, "ValidationError", { enumerable: true, get: funct
 var providers_1 = require("./providers");
 Object.defineProperty(exports, "AuthorizationCodeProvider", { enumerable: true, get: function () { return providers_1.AuthorizationCodeProvider; } });
 Object.defineProperty(exports, "BaseTokenProvider", { enumerable: true, get: function () { return providers_1.BaseTokenProvider; } });
-Object.defineProperty(exports, "CfPasscodeProvider", { enumerable: true, get: function () { return providers_1.CfPasscodeProvider; } });
 Object.defineProperty(exports, "ClientCredentialsProvider", { enumerable: true, get: function () { return providers_1.ClientCredentialsProvider; } });
 Object.defineProperty(exports, "DeviceFlowProvider", { enumerable: true, get: function () { return providers_1.DeviceFlowProvider; } });
 Object.defineProperty(exports, "OidcBrowserProvider", { enumerable: true, get: function () { return providers_1.OidcBrowserProvider; } });

package/dist/providers/index.d.ts

@@ -7,8 +7,6 @@
 export type { AuthorizationCodeProviderConfig } from './AuthorizationCodeProvider';
 export { AuthorizationCodeProvider } from './AuthorizationCodeProvider';
 export { BaseTokenProvider } from './BaseTokenProvider';
-export type { CfPasscodeProviderConfig } from './CfPasscodeProvider';
-export { CfPasscodeProvider } from './CfPasscodeProvider';
 export type { ClientCredentialsProviderConfig } from './ClientCredentialsProvider';
 export { ClientCredentialsProvider } from './ClientCredentialsProvider';
 export type { DeviceFlowProviderConfig } from './DeviceFlowProvider';

package/dist/providers/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/providers/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,YAAY,EAAE,+BAA+B,EAAE,MAAM,6BAA6B,CAAC;AACnF,OAAO,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAC;AACxE,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,YAAY,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AACrE,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,YAAY,EAAE,+BAA+B,EAAE,MAAM,6BAA6B,CAAC;AACnF,OAAO,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAC;AACxE,YAAY,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AACrE,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,YAAY,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAC;AACvE,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,YAAY,EAAE,4BAA4B,EAAE,MAAM,0BAA0B,CAAC;AAC7E,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAClE,YAAY,EAAE,0BAA0B,EAAE,MAAM,wBAAwB,CAAC;AACzE,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,YAAY,EAAE,+BAA+B,EAAE,MAAM,6BAA6B,CAAC;AACnF,OAAO,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAC;AACxE,YAAY,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAC;AACvE,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,YAAY,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/providers/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,YAAY,EAAE,+BAA+B,EAAE,MAAM,6BAA6B,CAAC;AACnF,OAAO,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAC;AACxE,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,YAAY,EAAE,+BAA+B,EAAE,MAAM,6BAA6B,CAAC;AACnF,OAAO,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAC;AACxE,YAAY,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AACrE,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,YAAY,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAC;AACvE,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,YAAY,EAAE,4BAA4B,EAAE,MAAM,0BAA0B,CAAC;AAC7E,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAClE,YAAY,EAAE,0BAA0B,EAAE,MAAM,wBAAwB,CAAC;AACzE,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,YAAY,EAAE,+BAA+B,EAAE,MAAM,6BAA6B,CAAC;AACnF,OAAO,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAC;AACxE,YAAY,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAC;AACvE,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,YAAY,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC"}

package/dist/providers/index.js

@@ -6,13 +6,11 @@
  * All providers extend BaseTokenProvider and implement ITokenProvider.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.Saml2PureProvider = exports.Saml2BearerProvider = exports.OidcTokenExchangeProvider = exports.OidcPasswordProvider = exports.OidcDeviceFlowProvider = exports.OidcBrowserProvider = exports.DeviceFlowProvider = exports.ClientCredentialsProvider = exports.CfPasscodeProvider = exports.BaseTokenProvider = exports.AuthorizationCodeProvider = void 0;
+exports.Saml2PureProvider = exports.Saml2BearerProvider = exports.OidcTokenExchangeProvider = exports.OidcPasswordProvider = exports.OidcDeviceFlowProvider = exports.OidcBrowserProvider = exports.DeviceFlowProvider = exports.ClientCredentialsProvider = exports.BaseTokenProvider = exports.AuthorizationCodeProvider = void 0;
 var AuthorizationCodeProvider_1 = require("./AuthorizationCodeProvider");
 Object.defineProperty(exports, "AuthorizationCodeProvider", { enumerable: true, get: function () { return AuthorizationCodeProvider_1.AuthorizationCodeProvider; } });
 var BaseTokenProvider_1 = require("./BaseTokenProvider");
 Object.defineProperty(exports, "BaseTokenProvider", { enumerable: true, get: function () { return BaseTokenProvider_1.BaseTokenProvider; } });
-var CfPasscodeProvider_1 = require("./CfPasscodeProvider");
-Object.defineProperty(exports, "CfPasscodeProvider", { enumerable: true, get: function () { return CfPasscodeProvider_1.CfPasscodeProvider; } });
 var ClientCredentialsProvider_1 = require("./ClientCredentialsProvider");
 Object.defineProperty(exports, "ClientCredentialsProvider", { enumerable: true, get: function () { return ClientCredentialsProvider_1.ClientCredentialsProvider; } });
 var DeviceFlowProvider_1 = require("./DeviceFlowProvider");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mcp-abap-adt/auth-providers",
-  "version": "1.0.2",
+  "version": "1.0.4",
   "description": "Token providers for MCP ABAP ADT auth-broker",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

package/dist/providers/CfPasscodeProvider.d.ts

@@ -1,27 +0,0 @@
-/**
- * CF Passcode (SSO) Provider
- */
-import type { ILogger, ITokenResult, OAuth2GrantType } from '@mcp-abap-adt/interfaces';
-import { BaseTokenProvider } from './BaseTokenProvider';
-export interface CfPasscodeProviderConfig {
-    uaaUrl: string;
-    clientId: string;
-    clientSecret?: string;
-    passcode?: string;
-    passcodeProvider?: () => Promise<string>;
-    username?: string;
-    scope?: string;
-    accessToken?: string;
-    refreshToken?: string;
-    logger?: ILogger;
-}
-export declare class CfPasscodeProvider extends BaseTokenProvider {
-    private config;
-    constructor(config: CfPasscodeProviderConfig);
-    protected getAuthType(): OAuth2GrantType;
-    protected performLogin(): Promise<ITokenResult>;
-    protected performRefresh(): Promise<ITokenResult>;
-    private buildTokenEndpoint;
-    private resolvePasscode;
-}
-//# sourceMappingURL=CfPasscodeProvider.d.ts.map

package/dist/providers/CfPasscodeProvider.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"CfPasscodeProvider.d.ts","sourceRoot":"","sources":["../../src/providers/CfPasscodeProvider.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EACV,OAAO,EACP,YAAY,EACZ,eAAe,EAChB,MAAM,0BAA0B,CAAC;AAGlC,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAExD,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gBAAgB,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IACzC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,qBAAa,kBAAmB,SAAQ,iBAAiB;IACvD,OAAO,CAAC,MAAM,CAA2B;gBAE7B,MAAM,EAAE,wBAAwB;IAc5C,SAAS,CAAC,WAAW,IAAI,eAAe;cAIxB,YAAY,IAAI,OAAO,CAAC,YAAY,CAAC;cAwBrC,cAAc,IAAI,OAAO,CAAC,YAAY,CAAC;IAuBvD,OAAO,CAAC,kBAAkB;YAKZ,eAAe;CAa9B"}

package/dist/providers/CfPasscodeProvider.js

@@ -1,72 +0,0 @@
-"use strict";
-/**
- * CF Passcode (SSO) Provider
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.CfPasscodeProvider = void 0;
-const interfaces_1 = require("@mcp-abap-adt/interfaces");
-const oidcToken_1 = require("../auth/oidcToken");
-const BaseTokenProvider_1 = require("./BaseTokenProvider");
-class CfPasscodeProvider extends BaseTokenProvider_1.BaseTokenProvider {
-    config;
-    constructor(config) {
-        super();
-        this.config = config;
-        this.logger = config.logger;
-        if (config.accessToken) {
-            this.authorizationToken = config.accessToken;
-            this.expiresAt = this.parseExpirationFromJWT(config.accessToken);
-        }
-        if (config.refreshToken) {
-            this.refreshToken = config.refreshToken;
-        }
-    }
-    getAuthType() {
-        return interfaces_1.AUTH_TYPE_PASSWORD;
-    }
-    async performLogin() {
-        const passcode = await this.resolvePasscode();
-        const tokenEndpoint = this.buildTokenEndpoint();
-        const username = this.config.username || 'passcode';
-        const tokens = await (0, oidcToken_1.passwordGrant)(tokenEndpoint, this.config.clientId, this.config.clientSecret, username, passcode, this.config.scope, this.logger);
-        return {
-            authorizationToken: tokens.accessToken,
-            refreshToken: tokens.refreshToken,
-            authType: interfaces_1.AUTH_TYPE_PASSWORD,
-            expiresIn: tokens.expiresIn,
-            tokenType: 'jwt',
-        };
-    }
-    async performRefresh() {
-        if (!this.refreshToken) {
-            return this.performLogin();
-        }
-        const tokenEndpoint = this.buildTokenEndpoint();
-        const tokens = await (0, oidcToken_1.refreshOidcToken)(tokenEndpoint, this.config.clientId, this.config.clientSecret, this.refreshToken, this.logger);
-        return {
-            authorizationToken: tokens.accessToken,
-            refreshToken: tokens.refreshToken || this.refreshToken,
-            authType: interfaces_1.AUTH_TYPE_PASSWORD,
-            expiresIn: tokens.expiresIn,
-            tokenType: 'jwt',
-        };
-    }
-    buildTokenEndpoint() {
-        const base = this.config.uaaUrl.replace(/\/$/, '');
-        return `${base}/oauth/token`;
-    }
-    async resolvePasscode() {
-        if (this.config.passcode) {
-            return this.config.passcode;
-        }
-        if (this.config.passcodeProvider) {
-            const code = await this.config.passcodeProvider();
-            if (!code) {
-                throw new Error('Passcode provider returned empty value');
-            }
-            return code;
-        }
-        throw new Error('Passcode is required for CF SSO flow');
-    }
-}
-exports.CfPasscodeProvider = CfPasscodeProvider;