@memberjunction/actions 2.113.1 → 2.114.0

package/dist/generic/OAuth2Manager.d.ts

@@ -0,0 +1,209 @@
+/**
+ * Configuration options for OAuth2Manager
+ */
+export interface OAuth2Config {
+    /**
+     * OAuth2 client ID
+     */
+    clientId: string;
+    /**
+     * OAuth2 client secret
+     */
+    clientSecret: string;
+    /**
+     * Token endpoint URL (e.g., 'https://api.example.com/oauth/token')
+     */
+    tokenEndpoint: string;
+    /**
+     * Authorization endpoint URL (e.g., 'https://api.example.com/oauth/authorize')
+     * Only needed for authorization_code flow
+     */
+    authorizationEndpoint?: string;
+    /**
+     * Redirect URI for authorization_code flow
+     */
+    redirectUri?: string;
+    /**
+     * OAuth2 scopes to request
+     */
+    scopes?: string[];
+    /**
+     * Initial access token (if already obtained)
+     */
+    accessToken?: string;
+    /**
+     * Initial refresh token (if available)
+     */
+    refreshToken?: string;
+    /**
+     * Initial token expiration timestamp (milliseconds since epoch)
+     */
+    tokenExpiresAt?: number;
+    /**
+     * Buffer time in milliseconds before token expiration to trigger refresh (default: 60000 = 1 minute)
+     */
+    refreshBufferMs?: number;
+    /**
+     * Custom transformation for token response (for non-standard OAuth2 implementations)
+     */
+    tokenResponseTransform?: (response: any) => OAuth2TokenResponse;
+    /**
+     * Custom transformation for token request body (for provider-specific requirements)
+     */
+    tokenRequestTransform?: (params: Record<string, string>) => Record<string, string>;
+    /**
+     * Additional headers to include in token requests
+     */
+    additionalHeaders?: Record<string, string>;
+    /**
+     * Callback invoked when tokens are updated (for persistence)
+     */
+    onTokenUpdate?: (tokens: OAuth2TokenData) => void | Promise<void>;
+}
+/**
+ * Standard OAuth2 token response
+ */
+export interface OAuth2TokenResponse {
+    access_token: string;
+    refresh_token?: string;
+    expires_in?: number;
+    token_type?: string;
+    scope?: string;
+}
+/**
+ * OAuth2 token data with computed expiration
+ */
+export interface OAuth2TokenData {
+    accessToken: string;
+    refreshToken?: string;
+    expiresAt: number;
+    tokenType?: string;
+    scope?: string;
+}
+/**
+ * Generic OAuth2 token manager supporting multiple grant types and automatic token refresh.
+ *
+ * This class provides a standardized way to handle OAuth2 authentication flows including:
+ * - Authorization code flow (with PKCE support)
+ * - Client credentials flow
+ * - Refresh token flow
+ * - Direct access token usage
+ *
+ * Features:
+ * - Automatic token refresh before expiration
+ * - Thread-safe token refresh (prevents concurrent refresh requests)
+ * - Provider customization hooks for non-standard OAuth2 implementations
+ * - Token persistence callbacks
+ * - Support for multiple grant types
+ *
+ * @example
+ * ```typescript
+ * // Initialize with client credentials
+ * const oauth = new OAuth2Manager({
+ *   clientId: 'your-client-id',
+ *   clientSecret: 'your-client-secret',
+ *   tokenEndpoint: 'https://api.example.com/oauth/token',
+ *   authorizationEndpoint: 'https://api.example.com/oauth/authorize',
+ *   scopes: ['read', 'write']
+ * });
+ *
+ * // Get a valid access token (auto-refreshes if needed)
+ * const token = await oauth.getAccessToken();
+ *
+ * // Use the token in API requests
+ * const response = await fetch('https://api.example.com/data', {
+ *   headers: { 'Authorization': `Bearer ${token}` }
+ * });
+ * ```
+ */
+export declare class OAuth2Manager {
+    private config;
+    private accessToken;
+    private refreshToken;
+    private tokenExpiresAt;
+    private refreshPromise;
+    /**
+     * Creates a new OAuth2Manager instance
+     *
+     * @param config - OAuth2 configuration options
+     */
+    constructor(config: OAuth2Config);
+    /**
+     * Gets the authorization URL for the authorization code flow
+     *
+     * @param state - Optional state parameter for CSRF protection
+     * @param additionalParams - Additional query parameters to include
+     * @returns The authorization URL
+     */
+    getAuthorizationUrl(state?: string, additionalParams?: Record<string, string>): string;
+    /**
+     * Exchanges an authorization code for an access token
+     *
+     * @param code - The authorization code received from the authorization endpoint
+     * @returns The token data
+     */
+    exchangeAuthorizationCode(code: string): Promise<OAuth2TokenData>;
+    /**
+     * Obtains an access token using client credentials flow
+     *
+     * @returns The token data
+     */
+    getClientCredentialsToken(): Promise<OAuth2TokenData>;
+    /**
+     * Refreshes the access token using the refresh token
+     *
+     * @returns The new token data
+     * @throws Error if no refresh token is available
+     */
+    refreshAccessToken(): Promise<OAuth2TokenData>;
+    /**
+     * Gets a valid access token, automatically refreshing if needed
+     *
+     * This is the main method to use when you need an access token for API requests.
+     * It handles token refresh automatically if the current token is expired or about to expire.
+     *
+     * @returns A valid access token
+     * @throws Error if no token is available and cannot be obtained
+     */
+    getAccessToken(): Promise<string>;
+    /**
+     * Performs the actual token refresh operation
+     *
+     * @private
+     * @returns The new access token
+     */
+    private performTokenRefresh;
+    /**
+     * Makes a token request to the OAuth2 server
+     *
+     * @private
+     * @param params - Token request parameters
+     * @returns The token data
+     */
+    private requestToken;
+    /**
+     * Checks if the current access token is valid (exists and not expired)
+     *
+     * @returns True if the token is valid, false otherwise
+     */
+    isTokenValid(): boolean;
+    /**
+     * Sets the access token directly (for cases where token is obtained externally)
+     *
+     * @param accessToken - The access token
+     * @param refreshToken - Optional refresh token
+     * @param expiresIn - Optional expiration time in seconds
+     */
+    setTokens(accessToken: string, refreshToken?: string, expiresIn?: number): void;
+    /**
+     * Clears all stored tokens
+     */
+    clearTokens(): void;
+    /**
+     * Gets the current token state (for debugging or persistence)
+     *
+     * @returns The current token data or null if no tokens are available
+     */
+    getTokenState(): OAuth2TokenData | null;
+}
+//# sourceMappingURL=OAuth2Manager.d.ts.map

package/dist/generic/OAuth2Manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"OAuth2Manager.d.ts","sourceRoot":"","sources":["../../src/generic/OAuth2Manager.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,WAAW,YAAY;IACzB;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC;IAEjB;;OAEG;IACH,YAAY,EAAE,MAAM,CAAC;IAErB;;OAEG;IACH,aAAa,EAAE,MAAM,CAAC;IAEtB;;;OAGG;IACH,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAE/B;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAElB;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB;;OAEG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IAExB;;OAEG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;IAEzB;;OAEG;IACH,sBAAsB,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,KAAK,mBAAmB,CAAC;IAEhE;;OAEG;IACH,qBAAqB,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAEnF;;OAEG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAE3C;;OAEG;IACH,aAAa,CAAC,EAAE,CAAC,MAAM,EAAE,eAAe,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACrE;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAChC,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC5B,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,qBAAa,aAAa;IACtB,OAAO,CAAC,MAAM,CAA0Y;IAExZ,OAAO,CAAC,WAAW,CAAuB;IAC1C,OAAO,CAAC,YAAY,CAAuB;IAC3C,OAAO,CAAC,cAAc,CAAa;IAEnC,OAAO,CAAC,cAAc,CAAgC;IAEtD;;;;OAIG;gBACS,MAAM,EAAE,YAAY;IA2BhC;;;;;;OAMG;IACI,mBAAmB,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM;IA0B7F;;;;;OAKG;IACU,yBAAyB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IAe9E;;;;OAIG;IACU,yBAAyB,IAAI,OAAO,CAAC,eAAe,CAAC;IAclE;;;;;OAKG;IACU,kBAAkB,IAAI,OAAO,CAAC,eAAe,CAAC;IAe3D;;;;;;;;OAQG;IACU,cAAc,IAAI,OAAO,CAAC,MAAM,CAAC;IAsB9C;;;;;OAKG;YACW,mBAAmB;IAkBjC;;;;;;OAMG;YACW,YAAY;IA+D1B;;;;OAIG;IACI,YAAY,IAAI,OAAO;IAY9B;;;;;;OAMG;IACI,SAAS,CAAC,WAAW,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI;IAqBtF;;OAEG;IACI,WAAW,IAAI,IAAI;IAM1B;;;;OAIG;IACI,aAAa,IAAI,eAAe,GAAG,IAAI;CAWjD"}

package/dist/generic/OAuth2Manager.js

@@ -0,0 +1,328 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OAuth2Manager = void 0;
+/**
+ * Generic OAuth2 token manager supporting multiple grant types and automatic token refresh.
+ *
+ * This class provides a standardized way to handle OAuth2 authentication flows including:
+ * - Authorization code flow (with PKCE support)
+ * - Client credentials flow
+ * - Refresh token flow
+ * - Direct access token usage
+ *
+ * Features:
+ * - Automatic token refresh before expiration
+ * - Thread-safe token refresh (prevents concurrent refresh requests)
+ * - Provider customization hooks for non-standard OAuth2 implementations
+ * - Token persistence callbacks
+ * - Support for multiple grant types
+ *
+ * @example
+ * ```typescript
+ * // Initialize with client credentials
+ * const oauth = new OAuth2Manager({
+ *   clientId: 'your-client-id',
+ *   clientSecret: 'your-client-secret',
+ *   tokenEndpoint: 'https://api.example.com/oauth/token',
+ *   authorizationEndpoint: 'https://api.example.com/oauth/authorize',
+ *   scopes: ['read', 'write']
+ * });
+ *
+ * // Get a valid access token (auto-refreshes if needed)
+ * const token = await oauth.getAccessToken();
+ *
+ * // Use the token in API requests
+ * const response = await fetch('https://api.example.com/data', {
+ *   headers: { 'Authorization': `Bearer ${token}` }
+ * });
+ * ```
+ */
+class OAuth2Manager {
+    /**
+     * Creates a new OAuth2Manager instance
+     *
+     * @param config - OAuth2 configuration options
+     */
+    constructor(config) {
+        this.accessToken = null;
+        this.refreshToken = null;
+        this.tokenExpiresAt = 0;
+        this.refreshPromise = null;
+        this.config = {
+            clientId: config.clientId,
+            clientSecret: config.clientSecret,
+            tokenEndpoint: config.tokenEndpoint,
+            authorizationEndpoint: config.authorizationEndpoint,
+            redirectUri: config.redirectUri,
+            scopes: config.scopes,
+            refreshBufferMs: config.refreshBufferMs ?? 60000, // Default 1 minute buffer
+            tokenResponseTransform: config.tokenResponseTransform,
+            tokenRequestTransform: config.tokenRequestTransform,
+            additionalHeaders: config.additionalHeaders,
+            onTokenUpdate: config.onTokenUpdate
+        };
+        // Initialize with provided tokens if available
+        if (config.accessToken) {
+            this.accessToken = config.accessToken;
+        }
+        if (config.refreshToken) {
+            this.refreshToken = config.refreshToken;
+        }
+        if (config.tokenExpiresAt) {
+            this.tokenExpiresAt = config.tokenExpiresAt;
+        }
+    }
+    /**
+     * Gets the authorization URL for the authorization code flow
+     *
+     * @param state - Optional state parameter for CSRF protection
+     * @param additionalParams - Additional query parameters to include
+     * @returns The authorization URL
+     */
+    getAuthorizationUrl(state, additionalParams) {
+        if (!this.config.authorizationEndpoint) {
+            throw new Error('Authorization endpoint not configured');
+        }
+        const params = new URLSearchParams({
+            client_id: this.config.clientId,
+            response_type: 'code',
+            ...additionalParams
+        });
+        if (this.config.redirectUri) {
+            params.append('redirect_uri', this.config.redirectUri);
+        }
+        if (this.config.scopes && this.config.scopes.length > 0) {
+            params.append('scope', this.config.scopes.join(' '));
+        }
+        if (state) {
+            params.append('state', state);
+        }
+        return `${this.config.authorizationEndpoint}?${params.toString()}`;
+    }
+    /**
+     * Exchanges an authorization code for an access token
+     *
+     * @param code - The authorization code received from the authorization endpoint
+     * @returns The token data
+     */
+    async exchangeAuthorizationCode(code) {
+        const params = {
+            grant_type: 'authorization_code',
+            code,
+            client_id: this.config.clientId,
+            client_secret: this.config.clientSecret
+        };
+        if (this.config.redirectUri) {
+            params.redirect_uri = this.config.redirectUri;
+        }
+        return this.requestToken(params);
+    }
+    /**
+     * Obtains an access token using client credentials flow
+     *
+     * @returns The token data
+     */
+    async getClientCredentialsToken() {
+        const params = {
+            grant_type: 'client_credentials',
+            client_id: this.config.clientId,
+            client_secret: this.config.clientSecret
+        };
+        if (this.config.scopes && this.config.scopes.length > 0) {
+            params.scope = this.config.scopes.join(' ');
+        }
+        return this.requestToken(params);
+    }
+    /**
+     * Refreshes the access token using the refresh token
+     *
+     * @returns The new token data
+     * @throws Error if no refresh token is available
+     */
+    async refreshAccessToken() {
+        if (!this.refreshToken) {
+            throw new Error('No refresh token available');
+        }
+        const params = {
+            grant_type: 'refresh_token',
+            refresh_token: this.refreshToken,
+            client_id: this.config.clientId,
+            client_secret: this.config.clientSecret
+        };
+        return this.requestToken(params);
+    }
+    /**
+     * Gets a valid access token, automatically refreshing if needed
+     *
+     * This is the main method to use when you need an access token for API requests.
+     * It handles token refresh automatically if the current token is expired or about to expire.
+     *
+     * @returns A valid access token
+     * @throws Error if no token is available and cannot be obtained
+     */
+    async getAccessToken() {
+        // If we have a valid token, return it
+        if (this.accessToken && this.isTokenValid()) {
+            return this.accessToken;
+        }
+        // If a refresh is already in progress, wait for it
+        if (this.refreshPromise) {
+            return this.refreshPromise;
+        }
+        // Start a new refresh operation
+        this.refreshPromise = this.performTokenRefresh();
+        try {
+            const token = await this.refreshPromise;
+            return token;
+        }
+        finally {
+            this.refreshPromise = null;
+        }
+    }
+    /**
+     * Performs the actual token refresh operation
+     *
+     * @private
+     * @returns The new access token
+     */
+    async performTokenRefresh() {
+        try {
+            let tokenData;
+            if (this.refreshToken) {
+                // Use refresh token if available
+                tokenData = await this.refreshAccessToken();
+            }
+            else {
+                // Fall back to client credentials if no refresh token
+                tokenData = await this.getClientCredentialsToken();
+            }
+            return tokenData.accessToken;
+        }
+        catch (error) {
+            throw new Error(`Failed to refresh access token: ${error instanceof Error ? error.message : String(error)}`);
+        }
+    }
+    /**
+     * Makes a token request to the OAuth2 server
+     *
+     * @private
+     * @param params - Token request parameters
+     * @returns The token data
+     */
+    async requestToken(params) {
+        try {
+            // Allow provider-specific transformations
+            const requestParams = this.config.tokenRequestTransform
+                ? this.config.tokenRequestTransform(params)
+                : params;
+            const headers = {
+                'Content-Type': 'application/x-www-form-urlencoded',
+                ...this.config.additionalHeaders
+            };
+            const response = await fetch(this.config.tokenEndpoint, {
+                method: 'POST',
+                headers,
+                body: new URLSearchParams(requestParams)
+            });
+            if (!response.ok) {
+                const errorText = await response.text();
+                throw new Error(`Token request failed: ${response.status} ${response.statusText} - ${errorText}`);
+            }
+            const responseData = await response.json();
+            // Allow provider-specific response transformations
+            const tokenResponse = this.config.tokenResponseTransform
+                ? this.config.tokenResponseTransform(responseData)
+                : responseData;
+            // Update internal state
+            this.accessToken = tokenResponse.access_token;
+            if (tokenResponse.refresh_token) {
+                this.refreshToken = tokenResponse.refresh_token;
+            }
+            if (tokenResponse.expires_in) {
+                this.tokenExpiresAt = Date.now() + (tokenResponse.expires_in * 1000);
+            }
+            else {
+                // If no expires_in, assume token is long-lived (1 year)
+                this.tokenExpiresAt = Date.now() + (365 * 24 * 60 * 60 * 1000);
+            }
+            const tokenData = {
+                accessToken: this.accessToken,
+                refreshToken: this.refreshToken || undefined,
+                expiresAt: this.tokenExpiresAt,
+                tokenType: tokenResponse.token_type,
+                scope: tokenResponse.scope
+            };
+            // Invoke token update callback if provided
+            if (this.config.onTokenUpdate) {
+                await this.config.onTokenUpdate(tokenData);
+            }
+            return tokenData;
+        }
+        catch (error) {
+            throw new Error(`OAuth2 token request failed: ${error instanceof Error ? error.message : String(error)}`);
+        }
+    }
+    /**
+     * Checks if the current access token is valid (exists and not expired)
+     *
+     * @returns True if the token is valid, false otherwise
+     */
+    isTokenValid() {
+        if (!this.accessToken) {
+            return false;
+        }
+        // Check if token is expired or about to expire (within buffer time)
+        const now = Date.now();
+        const expiresWithBuffer = this.tokenExpiresAt - this.config.refreshBufferMs;
+        return now < expiresWithBuffer;
+    }
+    /**
+     * Sets the access token directly (for cases where token is obtained externally)
+     *
+     * @param accessToken - The access token
+     * @param refreshToken - Optional refresh token
+     * @param expiresIn - Optional expiration time in seconds
+     */
+    setTokens(accessToken, refreshToken, expiresIn) {
+        this.accessToken = accessToken;
+        if (refreshToken) {
+            this.refreshToken = refreshToken;
+        }
+        if (expiresIn) {
+            this.tokenExpiresAt = Date.now() + (expiresIn * 1000);
+        }
+        // Invoke token update callback if provided
+        if (this.config.onTokenUpdate) {
+            this.config.onTokenUpdate({
+                accessToken: this.accessToken,
+                refreshToken: this.refreshToken || undefined,
+                expiresAt: this.tokenExpiresAt
+            });
+        }
+    }
+    /**
+     * Clears all stored tokens
+     */
+    clearTokens() {
+        this.accessToken = null;
+        this.refreshToken = null;
+        this.tokenExpiresAt = 0;
+    }
+    /**
+     * Gets the current token state (for debugging or persistence)
+     *
+     * @returns The current token data or null if no tokens are available
+     */
+    getTokenState() {
+        if (!this.accessToken) {
+            return null;
+        }
+        return {
+            accessToken: this.accessToken,
+            refreshToken: this.refreshToken || undefined,
+            expiresAt: this.tokenExpiresAt
+        };
+    }
+}
+exports.OAuth2Manager = OAuth2Manager;
+//# sourceMappingURL=OAuth2Manager.js.map

package/dist/generic/OAuth2Manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"OAuth2Manager.js","sourceRoot":"","sources":["../../src/generic/OAuth2Manager.ts"],"names":[],"mappings":";;;AAkGA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,MAAa,aAAa;IAStB;;;;OAIG;IACH,YAAY,MAAoB;QAXxB,gBAAW,GAAkB,IAAI,CAAC;QAClC,iBAAY,GAAkB,IAAI,CAAC;QACnC,mBAAc,GAAW,CAAC,CAAC;QAE3B,mBAAc,GAA2B,IAAI,CAAC;QAQlD,IAAI,CAAC,MAAM,GAAG;YACV,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,qBAAqB,EAAE,MAAM,CAAC,qBAAqB;YACnD,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,eAAe,EAAE,MAAM,CAAC,eAAe,IAAI,KAAK,EAAE,0BAA0B;YAC5E,sBAAsB,EAAE,MAAM,CAAC,sBAAsB;YACrD,qBAAqB,EAAE,MAAM,CAAC,qBAAqB;YACnD,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;YAC3C,aAAa,EAAE,MAAM,CAAC,aAAa;SACtC,CAAC;QAEF,+CAA+C;QAC/C,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;YACrB,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;QAC1C,CAAC;QACD,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;YACtB,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;QAC5C,CAAC;QACD,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC,cAAc,CAAC;QAChD,CAAC;IACL,CAAC;IAED;;;;;;OAMG;IACI,mBAAmB,CAAC,KAAc,EAAE,gBAAyC;QAChF,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,qBAAqB,EAAE,CAAC;YACrC,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC7D,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YAC/B,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC/B,aAAa,EAAE,MAAM;YACrB,GAAG,gBAAgB;SACtB,CAAC,CAAC;QAEH,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YAC1B,MAAM,CAAC,MAAM,CAAC,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAC3D,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtD,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACzD,CAAC;QAED,IAAI,KAAK,EAAE,CAAC;YACR,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAClC,CAAC;QAED,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,qBAAqB,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;IACvE,CAAC;IAED;;;;;OAKG;IACI,KAAK,CAAC,yBAAyB,CAAC,IAAY;QAC/C,MAAM,MAAM,GAA2B;YACnC,UAAU,EAAE,oBAAoB;YAChC,IAAI;YACJ,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC/B,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;SAC1C,CAAC;QAEF,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YAC1B,MAAM,CAAC,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;QAClD,CAAC;QAED,OAAO,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC;IAED;;;;OAIG;IACI,KAAK,CAAC,yBAAyB;QAClC,MAAM,MAAM,GAA2B;YACnC,UAAU,EAAE,oBAAoB;YAChC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC/B,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;SAC1C,CAAC;QAEF,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtD,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChD,CAAC;QAED,OAAO,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC;IAED;;;;;OAKG;IACI,KAAK,CAAC,kBAAkB;QAC3B,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAClD,CAAC;QAED,MAAM,MAAM,GAA2B;YACnC,UAAU,EAAE,eAAe;YAC3B,aAAa,EAAE,IAAI,CAAC,YAAY;YAChC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC/B,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;SAC1C,CAAC;QAEF,OAAO,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC;IAED;;;;;;;;OAQG;IACI,KAAK,CAAC,cAAc;QACvB,sCAAsC;QACtC,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,YAAY,EAAE,EAAE,CAAC;YAC1C,OAAO,IAAI,CAAC,WAAW,CAAC;QAC5B,CAAC;QAED,mDAAmD;QACnD,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACtB,OAAO,IAAI,CAAC,cAAc,CAAC;QAC/B,CAAC;QAED,gCAAgC;QAChC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAEjD,IAAI,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC;YACxC,OAAO,KAAK,CAAC;QACjB,CAAC;gBAAS,CAAC;YACP,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAC/B,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,mBAAmB;QAC7B,IAAI,CAAC;YACD,IAAI,SAA0B,CAAC;YAE/B,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;gBACpB,iCAAiC;gBACjC,SAAS,GAAG,MAAM,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAChD,CAAC;iBAAM,CAAC;gBACJ,sDAAsD;gBACtD,SAAS,GAAG,MAAM,IAAI,CAAC,yBAAyB,EAAE,CAAC;YACvD,CAAC;YAED,OAAO,SAAS,CAAC,WAAW,CAAC;QACjC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,mCAAmC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACjH,CAAC;IACL,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,YAAY,CAAC,MAA8B;QACrD,IAAI,CAAC;YACD,0CAA0C;YAC1C,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,qBAAqB;gBACnD,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC,MAAM,CAAC;gBAC3C,CAAC,CAAC,MAAM,CAAC;YAEb,MAAM,OAAO,GAA2B;gBACpC,cAAc,EAAE,mCAAmC;gBACnD,GAAG,IAAI,CAAC,MAAM,CAAC,iBAAiB;aACnC,CAAC;YAEF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE;gBACpD,MAAM,EAAE,MAAM;gBACd,OAAO;gBACP,IAAI,EAAE,IAAI,eAAe,CAAC,aAAa,CAAC;aAC3C,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACf,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACxC,MAAM,IAAI,KAAK,CAAC,yBAAyB,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,MAAM,SAAS,EAAE,CAAC,CAAC;YACtG,CAAC;YAED,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YAE3C,mDAAmD;YACnD,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,sBAAsB;gBACpD,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,sBAAsB,CAAC,YAAY,CAAC;gBAClD,CAAC,CAAC,YAAmC,CAAC;YAE1C,wBAAwB;YACxB,IAAI,CAAC,WAAW,GAAG,aAAa,CAAC,YAAY,CAAC;YAE9C,IAAI,aAAa,CAAC,aAAa,EAAE,CAAC;gBAC9B,IAAI,CAAC,YAAY,GAAG,aAAa,CAAC,aAAa,CAAC;YACpD,CAAC;YAED,IAAI,aAAa,CAAC,UAAU,EAAE,CAAC;gBAC3B,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,aAAa,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;YACzE,CAAC;iBAAM,CAAC;gBACJ,wDAAwD;gBACxD,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;YACnE,CAAC;YAED,MAAM,SAAS,GAAoB;gBAC/B,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,YAAY,EAAE,IAAI,CAAC,YAAY,IAAI,SAAS;gBAC5C,SAAS,EAAE,IAAI,CAAC,cAAc;gBAC9B,SAAS,EAAE,aAAa,CAAC,UAAU;gBACnC,KAAK,EAAE,aAAa,CAAC,KAAK;aAC7B,CAAC;YAEF,2CAA2C;YAC3C,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;gBAC5B,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;YAC/C,CAAC;YAED,OAAO,SAAS,CAAC;QACrB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,gCAAgC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC9G,CAAC;IACL,CAAC;IAED;;;;OAIG;IACI,YAAY;QACf,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACpB,OAAO,KAAK,CAAC;QACjB,CAAC;QAED,oEAAoE;QACpE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,iBAAiB,GAAG,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC;QAE5E,OAAO,GAAG,GAAG,iBAAiB,CAAC;IACnC,CAAC;IAED;;;;;;OAMG;IACI,SAAS,CAAC,WAAmB,EAAE,YAAqB,EAAE,SAAkB;QAC3E,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAE/B,IAAI,YAAY,EAAE,CAAC;YACf,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;QACrC,CAAC;QAED,IAAI,SAAS,EAAE,CAAC;YACZ,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;QAC1D,CAAC;QAED,2CAA2C;QAC3C,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;YAC5B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC;gBACtB,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,YAAY,EAAE,IAAI,CAAC,YAAY,IAAI,SAAS;gBAC5C,SAAS,EAAE,IAAI,CAAC,cAAc;aACjC,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IAED;;OAEG;IACI,WAAW;QACd,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QACxB,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QACzB,IAAI,CAAC,cAAc,GAAG,CAAC,CAAC;IAC5B,CAAC;IAED;;;;OAIG;IACI,aAAa;QAChB,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACpB,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,OAAO;YACH,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,YAAY,EAAE,IAAI,CAAC,YAAY,IAAI,SAAS;YAC5C,SAAS,EAAE,IAAI,CAAC,cAAc;SACjC,CAAC;IACN,CAAC;CACJ;AA1UD,sCA0UC"}

package/dist/index.d.ts

@@ -2,6 +2,7 @@ export * from './generic/BaseAction';
 export * from './generic/BaseActionFilter';
 export * from './generic/BaseOAuthAction';
 export * from './generic/ActionEngine';
+export * from './generic/OAuth2Manager';
 export * from './entity-actions/EntityActionEngine';
 export * from './entity-actions/EntityActionInvocationTypes';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,sBAAsB,CAAC;AACrC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,wBAAwB,CAAC;AAEvC,cAAc,qCAAqC,CAAC;AACpD,cAAc,8CAA8C,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,sBAAsB,CAAC;AACrC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,wBAAwB,CAAC;AACvC,cAAc,yBAAyB,CAAC;AAExC,cAAc,qCAAqC,CAAC;AACpD,cAAc,8CAA8C,CAAC"}

package/dist/index.js

@@ -18,6 +18,7 @@ __exportStar(require("./generic/BaseAction"), exports);
 __exportStar(require("./generic/BaseActionFilter"), exports);
 __exportStar(require("./generic/BaseOAuthAction"), exports);
 __exportStar(require("./generic/ActionEngine"), exports);
+__exportStar(require("./generic/OAuth2Manager"), exports);
 __exportStar(require("./entity-actions/EntityActionEngine"), exports);
 __exportStar(require("./entity-actions/EntityActionInvocationTypes"), exports);
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,uDAAqC;AACrC,6DAA2C;AAC3C,4DAA0C;AAC1C,yDAAuC;AAEvC,sEAAoD;AACpD,+EAA6D"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,uDAAqC;AACrC,6DAA2C;AAC3C,4DAA0C;AAC1C,yDAAuC;AACvC,0DAAwC;AAExC,sEAAoD;AACpD,+EAA6D"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@memberjunction/actions",
-  "version": "2.113.1",
+  "version": "2.114.0",
   "description": "Main library for MemberJunction Actions. This library is only intended to be imported on the server side.",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -19,15 +19,15 @@
     "typescript": "^5.4.5"
   },
   "dependencies": {
-    "@memberjunction/global": "2.113.1",
-    "@memberjunction/core": "2.113.1",
-    "@memberjunction/actions-base": "2.113.1",
-    "@memberjunction/core-entities": "2.113.1",
-    "@memberjunction/ai": "2.113.1",
-    "@memberjunction/ai-core-plus": "2.113.1",
-    "@memberjunction/aiengine": "2.113.1",
-    "@memberjunction/ai-prompts": "2.113.1",
-    "@memberjunction/doc-utils": "2.113.1"
+    "@memberjunction/global": "2.114.0",
+    "@memberjunction/core": "2.114.0",
+    "@memberjunction/actions-base": "2.114.0",
+    "@memberjunction/core-entities": "2.114.0",
+    "@memberjunction/ai": "2.114.0",
+    "@memberjunction/ai-core-plus": "2.114.0",
+    "@memberjunction/aiengine": "2.114.0",
+    "@memberjunction/ai-prompts": "2.114.0",
+    "@memberjunction/doc-utils": "2.114.0"
   },
   "repository": {
     "type": "git",

package/readme.md

@@ -437,6 +437,45 @@ This package integrates seamlessly with:
 - **@memberjunction/core-entities**: Provides strongly-typed entity classes
 - **@memberjunction/global**: Manages class registration and instantiation
 
+## OAuth2Manager (Server-Side Only)
+
+The package includes a generic OAuth2 token manager for server-side integrations:
+
+```typescript
+import { OAuth2Manager } from '@memberjunction/actions';
+
+// Initialize OAuth2 manager
+const oauth = new OAuth2Manager({
+    clientId: process.env.OAUTH_CLIENT_ID,
+    clientSecret: process.env.OAUTH_CLIENT_SECRET,
+    tokenEndpoint: 'https://api.example.com/oauth/token',
+    authorizationEndpoint: 'https://api.example.com/oauth/authorize',
+    scopes: ['read', 'write'],
+    onTokenUpdate: async (tokens) => {
+        // Persist updated tokens to database
+        await saveTokens(tokens);
+    }
+});
+
+// Get authorization URL for user to visit
+const authUrl = oauth.getAuthorizationUrl('random-state-string');
+
+// Exchange authorization code for tokens
+const tokens = await oauth.exchangeAuthorizationCode(code);
+
+// Get valid access token (auto-refreshes if needed)
+const accessToken = await oauth.getAccessToken();
+```
+
+**Features:**
+- Multiple grant type support (authorization_code, client_credentials, refresh_token)
+- Automatic token refresh before expiration
+- Thread-safe token refresh (prevents concurrent requests)
+- Token persistence callbacks
+- Provider customization hooks for non-standard OAuth2 implementations
+
+**⚠️ Server-Side Only**: OAuth2Manager requires `process.env` and should only be used in Node.js server environments, not in browser/client code.
+
 ## Advanced Topics
 
 ### Custom Action Engines