@memberjunction/server 5.15.0 → 5.16.0

package/dist/auth/BaseAuthProvider.d.ts

@@ -1,41 +0,0 @@
-import { JwtHeader, JwtPayload, SigningKeyCallback } from 'jsonwebtoken';
-import jwksClient from 'jwks-rsa';
-import { AuthProviderConfig, AuthUserInfo } from '@memberjunction/core';
-import { IAuthProvider } from './IAuthProvider.js';
-/**
- * Base implementation of IAuthProvider with common functionality
- * Concrete providers should extend this class and use @RegisterClass decorator
- * with BaseAuthProvider as the base class
- */
-export declare abstract class BaseAuthProvider implements IAuthProvider {
-    name: string;
-    issuer: string;
-    audience: string;
-    jwksUri: string;
-    /** OAuth client ID for this provider (used by OAuth proxy for upstream auth) */
-    clientId?: string;
-    protected config: AuthProviderConfig;
-    protected jwksClient: jwksClient.JwksClient;
-    constructor(config: AuthProviderConfig);
-    /**
-     * Validates that required configuration is present
-     */
-    validateConfig(): boolean;
-    /**
-     * Gets the signing key for token verification with retry logic
-     */
-    getSigningKey(header: JwtHeader, callback: SigningKeyCallback): void;
-    /**
-     * Retrieves signing key with exponential backoff retry logic
-     */
-    private getSigningKeyWithRetry;
-    /**
-     * Checks if a given issuer URL belongs to this provider
-     */
-    matchesIssuer(issuer: string): boolean;
-    /**
-     * Abstract method for extracting user info - must be implemented by each provider
-     */
-    abstract extractUserInfo(payload: JwtPayload): AuthUserInfo;
-}
-//# sourceMappingURL=BaseAuthProvider.d.ts.map

package/dist/auth/BaseAuthProvider.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"BaseAuthProvider.d.ts","sourceRoot":"","sources":["../../src/auth/BaseAuthProvider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AACzE,OAAO,UAAU,MAAM,UAAU,CAAC;AAClC,OAAO,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACxE,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAInD;;;;GAIG;AACH,8BAAsB,gBAAiB,YAAW,aAAa;IAC7D,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,gFAAgF;IAChF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,MAAM,EAAE,kBAAkB,CAAC;IACrC,SAAS,CAAC,UAAU,EAAE,UAAU,CAAC,UAAU,CAAC;gBAEhC,MAAM,EAAE,kBAAkB;IAoCtC;;OAEG;IACH,cAAc,IAAI,OAAO;IAIzB;;OAEG;IACH,aAAa,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,kBAAkB,GAAG,IAAI;IAYpE;;OAEG;YACW,sBAAsB;IAuCpC;;OAEG;IACH,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO;IAOtC;;OAEG;IACH,QAAQ,CAAC,eAAe,CAAC,OAAO,EAAE,UAAU,GAAG,YAAY;CAC5D"}

package/dist/auth/BaseAuthProvider.js

@@ -1,102 +0,0 @@
-import jwksClient from 'jwks-rsa';
-import https from 'https';
-import http from 'http';
-/**
- * Base implementation of IAuthProvider with common functionality
- * Concrete providers should extend this class and use @RegisterClass decorator
- * with BaseAuthProvider as the base class
- */
-export class BaseAuthProvider {
-    constructor(config) {
-        this.config = config;
-        this.name = config.name;
-        this.issuer = config.issuer;
-        this.audience = config.audience;
-        this.jwksUri = config.jwksUri;
-        this.clientId = config.clientId;
-        // Create HTTP agent with keep-alive to prevent socket hangups
-        const agent = this.jwksUri.startsWith('https')
-            ? new https.Agent({
-                keepAlive: true,
-                keepAliveMsecs: 30000,
-                maxSockets: 50,
-                maxFreeSockets: 10,
-                timeout: 60000
-            })
-            : new http.Agent({
-                keepAlive: true,
-                keepAliveMsecs: 30000,
-                maxSockets: 50,
-                maxFreeSockets: 10,
-                timeout: 60000
-            });
-        // Initialize JWKS client with connection pooling and extended timeout
-        this.jwksClient = jwksClient({
-            jwksUri: this.jwksUri,
-            cache: true,
-            cacheMaxEntries: 5,
-            cacheMaxAge: 600000, // 10 minutes
-            timeout: 60000, // 60 seconds (increased from default 30s)
-            requestAgent: agent
-        });
-    }
-    /**
-     * Validates that required configuration is present
-     */
-    validateConfig() {
-        return !!(this.name && this.issuer && this.audience && this.jwksUri);
-    }
-    /**
-     * Gets the signing key for token verification with retry logic
-     */
-    getSigningKey(header, callback) {
-        this.getSigningKeyWithRetry(header, 3, 1000)
-            .then((key) => {
-            const signingKey = 'publicKey' in key ? key.publicKey : key.rsaPublicKey;
-            callback(null, signingKey);
-        })
-            .catch((err) => {
-            console.error(`Error getting signing key for provider ${this.name} after retries:`, err);
-            callback(err);
-        });
-    }
-    /**
-     * Retrieves signing key with exponential backoff retry logic
-     */
-    async getSigningKeyWithRetry(header, maxRetries, initialDelayMs) {
-        let lastError;
-        for (let attempt = 0; attempt <= maxRetries; attempt++) {
-            try {
-                return await this.jwksClient.getSigningKey(header.kid);
-            }
-            catch (err) {
-                lastError = err instanceof Error ? err : new Error(String(err));
-                // Check if this is a connection error that's worth retrying
-                const isRetryableError = lastError.message.includes('socket hang up') ||
-                    lastError.message.includes('ECONNRESET') ||
-                    lastError.message.includes('ETIMEDOUT') ||
-                    lastError.message.includes('ENOTFOUND') ||
-                    lastError.message.includes('EAI_AGAIN');
-                if (!isRetryableError || attempt === maxRetries) {
-                    throw lastError;
-                }
-                // Exponential backoff: wait longer between each retry
-                const delayMs = initialDelayMs * Math.pow(2, attempt);
-                console.warn(`Attempt ${attempt + 1}/${maxRetries + 1} failed for provider ${this.name}. ` +
-                    `Retrying in ${delayMs}ms... Error: ${lastError.message}`);
-                await new Promise(resolve => setTimeout(resolve, delayMs));
-            }
-        }
-        throw lastError || new Error('Failed to retrieve signing key');
-    }
-    /**
-     * Checks if a given issuer URL belongs to this provider
-     */
-    matchesIssuer(issuer) {
-        // Handle trailing slashes and case sensitivity
-        const normalizedIssuer = issuer.toLowerCase().replace(/\/$/, '');
-        const normalizedProviderIssuer = this.issuer.toLowerCase().replace(/\/$/, '');
-        return normalizedIssuer === normalizedProviderIssuer;
-    }
-}
-//# sourceMappingURL=BaseAuthProvider.js.map

package/dist/auth/BaseAuthProvider.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"BaseAuthProvider.js","sourceRoot":"","sources":["../../src/auth/BaseAuthProvider.ts"],"names":[],"mappings":"AACA,OAAO,UAAU,MAAM,UAAU,CAAC;AAGlC,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,IAAI,MAAM,MAAM,CAAC;AAExB;;;;GAIG;AACH,MAAM,OAAgB,gBAAgB;IAUpC,YAAY,MAA0B;QACpC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QACxB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QAC5B,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QAChC,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QAC9B,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QAEhC,8DAA8D;QAC9D,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC;YAC5C,CAAC,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC;gBACd,SAAS,EAAE,IAAI;gBACf,cAAc,EAAE,KAAK;gBACrB,UAAU,EAAE,EAAE;gBACd,cAAc,EAAE,EAAE;gBAClB,OAAO,EAAE,KAAK;aACf,CAAC;YACJ,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC;gBACb,SAAS,EAAE,IAAI;gBACf,cAAc,EAAE,KAAK;gBACrB,UAAU,EAAE,EAAE;gBACd,cAAc,EAAE,EAAE;gBAClB,OAAO,EAAE,KAAK;aACf,CAAC,CAAC;QAEP,sEAAsE;QACtE,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;YAC3B,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,KAAK,EAAE,IAAI;YACX,eAAe,EAAE,CAAC;YAClB,WAAW,EAAE,MAAM,EAAE,aAAa;YAClC,OAAO,EAAE,KAAK,EAAE,0CAA0C;YAC1D,YAAY,EAAE,KAAK;SACpB,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,cAAc;QACZ,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC;IACvE,CAAC;IAED;;OAEG;IACH,aAAa,CAAC,MAAiB,EAAE,QAA4B;QAC3D,IAAI,CAAC,sBAAsB,CAAC,MAAM,EAAE,CAAC,EAAE,IAAI,CAAC;aACzC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE;YACZ,MAAM,UAAU,GAAG,WAAW,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC;YACzE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC7B,CAAC,CAAC;aACD,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACb,OAAO,CAAC,KAAK,CAAC,0CAA0C,IAAI,CAAC,IAAI,iBAAiB,EAAE,GAAG,CAAC,CAAC;YACzF,QAAQ,CAAC,GAAG,CAAC,CAAC;QAChB,CAAC,CAAC,CAAC;IACP,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,sBAAsB,CAClC,MAAiB,EACjB,UAAkB,EAClB,cAAsB;QAEtB,IAAI,SAA4B,CAAC;QAEjC,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,UAAU,EAAE,OAAO,EAAE,EAAE,CAAC;YACvD,IAAI,CAAC;gBACH,OAAO,MAAM,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACzD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,SAAS,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;gBAEhE,4DAA4D;gBAC5D,MAAM,gBAAgB,GACpB,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC;oBAC5C,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC;oBACxC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC;oBACvC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC;oBACvC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;gBAE1C,IAAI,CAAC,gBAAgB,IAAI,OAAO,KAAK,UAAU,EAAE,CAAC;oBAChD,MAAM,SAAS,CAAC;gBAClB,CAAC;gBAED,sDAAsD;gBACtD,MAAM,OAAO,GAAG,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;gBACtD,OAAO,CAAC,IAAI,CACV,WAAW,OAAO,GAAG,CAAC,IAAI,UAAU,GAAG,CAAC,wBAAwB,IAAI,CAAC,IAAI,IAAI;oBAC7E,eAAe,OAAO,gBAAgB,SAAS,CAAC,OAAO,EAAE,CAC1D,CAAC;gBAEF,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC;QAED,MAAM,SAAS,IAAI,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACjE,CAAC;IAED;;OAEG;IACH,aAAa,CAAC,MAAc;QAC1B,+CAA+C;QAC/C,MAAM,gBAAgB,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACjE,MAAM,wBAAwB,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC9E,OAAO,gBAAgB,KAAK,wBAAwB,CAAC;IACvD,CAAC;CAMF"}

package/dist/auth/IAuthProvider.d.ts

@@ -1,46 +0,0 @@
-import { JwtHeader, JwtPayload, SigningKeyCallback } from 'jsonwebtoken';
-import { AuthUserInfo } from '@memberjunction/core';
-/**
- * Interface for authentication providers in MemberJunction
- * Enables support for any OAuth 2.0/OIDC compliant provider
- */
-export interface IAuthProvider {
-    /**
-     * Unique name identifier for this provider
-     */
-    name: string;
-    /**
-     * The issuer URL for this provider (must match the 'iss' claim in tokens)
-     */
-    issuer: string;
-    /**
-     * The expected audience for tokens from this provider
-     */
-    audience: string;
-    /**
-     * The JWKS endpoint URL for retrieving signing keys
-     */
-    jwksUri: string;
-    /**
-     * OAuth client ID for this provider (optional, used by OAuth proxy for upstream authentication)
-     */
-    clientId?: string;
-    /**
-     * Validates that the provider configuration is complete and valid
-     */
-    validateConfig(): boolean;
-    /**
-     * Gets the signing key for token verification
-     */
-    getSigningKey(header: JwtHeader, callback: SigningKeyCallback): void;
-    /**
-     * Extracts user information from the JWT payload
-     * Different providers use different claim names
-     */
-    extractUserInfo(payload: JwtPayload): AuthUserInfo;
-    /**
-     * Checks if a given issuer URL belongs to this provider
-     */
-    matchesIssuer(issuer: string): boolean;
-}
-//# sourceMappingURL=IAuthProvider.d.ts.map

package/dist/auth/IAuthProvider.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"IAuthProvider.d.ts","sourceRoot":"","sources":["../../src/auth/IAuthProvider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AACzE,OAAO,EAAsB,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAExE;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;IAEb;;OAEG;IACH,MAAM,EAAE,MAAM,CAAC;IAEf;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC;IAEjB;;OAEG;IACH,OAAO,EAAE,MAAM,CAAC;IAEhB;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB;;OAEG;IACH,cAAc,IAAI,OAAO,CAAC;IAE1B;;OAEG;IACH,aAAa,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,kBAAkB,GAAG,IAAI,CAAC;IAErE;;;OAGG;IACH,eAAe,CAAC,OAAO,EAAE,UAAU,GAAG,YAAY,CAAC;IAEnD;;OAEG;IACH,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;CACxC"}

package/dist/auth/IAuthProvider.js

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=IAuthProvider.js.map

package/dist/auth/IAuthProvider.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"IAuthProvider.js","sourceRoot":"","sources":["../../src/auth/IAuthProvider.ts"],"names":[],"mappings":""}

package/dist/auth/providers/Auth0Provider.d.ts

@@ -1,18 +0,0 @@
-import { JwtPayload } from 'jsonwebtoken';
-import { AuthProviderConfig, AuthUserInfo } from '@memberjunction/core';
-import { BaseAuthProvider } from '../BaseAuthProvider.js';
-/**
- * Auth0 authentication provider implementation
- */
-export declare class Auth0Provider extends BaseAuthProvider {
-    constructor(config: AuthProviderConfig);
-    /**
-     * Extracts user information from Auth0 JWT payload
-     */
-    extractUserInfo(payload: JwtPayload): AuthUserInfo;
-    /**
-     * Validates Auth0-specific configuration
-     */
-    validateConfig(): boolean;
-}
-//# sourceMappingURL=Auth0Provider.d.ts.map

package/dist/auth/providers/Auth0Provider.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"Auth0Provider.d.ts","sourceRoot":"","sources":["../../../src/auth/providers/Auth0Provider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE1C,OAAO,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACxE,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE1D;;GAEG;AACH,qBACa,aAAc,SAAQ,gBAAgB;gBACrC,MAAM,EAAE,kBAAkB;IAItC;;OAEG;IACH,eAAe,CAAC,OAAO,EAAE,UAAU,GAAG,YAAY;IAiBlD;;OAEG;IACH,cAAc,IAAI,OAAO;CAO1B"}

package/dist/auth/providers/Auth0Provider.js

@@ -1,52 +0,0 @@
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var __metadata = (this && this.__metadata) || function (k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-};
-import { RegisterClass } from '@memberjunction/global';
-import { BaseAuthProvider } from '../BaseAuthProvider.js';
-/**
- * Auth0 authentication provider implementation
- */
-let Auth0Provider = class Auth0Provider extends BaseAuthProvider {
-    constructor(config) {
-        super(config);
-    }
-    /**
-     * Extracts user information from Auth0 JWT payload
-     */
-    extractUserInfo(payload) {
-        // Auth0 uses standard OIDC claims
-        const email = payload.email;
-        const fullName = payload.name;
-        const firstName = payload.given_name;
-        const lastName = payload.family_name;
-        const preferredUsername = payload.preferred_username || email;
-        return {
-            email,
-            firstName: firstName || fullName?.split(' ')[0],
-            lastName: lastName || fullName?.split(' ')[1] || fullName?.split(' ')[0],
-            fullName,
-            preferredUsername
-        };
-    }
-    /**
-     * Validates Auth0-specific configuration
-     */
-    validateConfig() {
-        const baseValid = super.validateConfig();
-        const hasClientId = !!this.config.clientId;
-        const hasDomain = !!this.config.domain;
-        return baseValid && hasClientId && hasDomain;
-    }
-};
-Auth0Provider = __decorate([
-    RegisterClass(BaseAuthProvider, 'auth0'),
-    __metadata("design:paramtypes", [Object])
-], Auth0Provider);
-export { Auth0Provider };
-//# sourceMappingURL=Auth0Provider.js.map

package/dist/auth/providers/Auth0Provider.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"Auth0Provider.js","sourceRoot":"","sources":["../../../src/auth/providers/Auth0Provider.ts"],"names":[],"mappings":";;;;;;;;;AACA,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAEvD,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE1D;;GAEG;AAEI,IAAM,aAAa,GAAnB,MAAM,aAAc,SAAQ,gBAAgB;IACjD,YAAY,MAA0B;QACpC,KAAK,CAAC,MAAM,CAAC,CAAC;IAChB,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,OAAmB;QACjC,kCAAkC;QAClC,MAAM,KAAK,GAAG,OAAO,CAAC,KAA2B,CAAC;QAClD,MAAM,QAAQ,GAAG,OAAO,CAAC,IAA0B,CAAC;QACpD,MAAM,SAAS,GAAG,OAAO,CAAC,UAAgC,CAAC;QAC3D,MAAM,QAAQ,GAAG,OAAO,CAAC,WAAiC,CAAC;QAC3D,MAAM,iBAAiB,GAAG,OAAO,CAAC,kBAAwC,IAAI,KAAK,CAAC;QAEpF,OAAO;YACL,KAAK;YACL,SAAS,EAAE,SAAS,IAAI,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAC/C,QAAQ,EAAE,QAAQ,IAAI,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACxE,QAAQ;YACR,iBAAiB;SAClB,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,cAAc;QACZ,MAAM,SAAS,GAAG,KAAK,CAAC,cAAc,EAAE,CAAC;QACzC,MAAM,WAAW,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;QAC3C,MAAM,SAAS,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;QAEvC,OAAO,SAAS,IAAI,WAAW,IAAI,SAAS,CAAC;IAC/C,CAAC;CACF,CAAA;AAnCY,aAAa;IADzB,aAAa,CAAC,gBAAgB,EAAE,OAAO,CAAC;;GAC5B,aAAa,CAmCzB"}

package/dist/auth/providers/CognitoProvider.d.ts

@@ -1,18 +0,0 @@
-import { JwtPayload } from 'jsonwebtoken';
-import { AuthProviderConfig, AuthUserInfo } from '@memberjunction/core';
-import { BaseAuthProvider } from '../BaseAuthProvider.js';
-/**
- * AWS Cognito authentication provider implementation
- */
-export declare class CognitoProvider extends BaseAuthProvider {
-    constructor(config: AuthProviderConfig);
-    /**
-     * Extracts user information from Cognito JWT payload
-     */
-    extractUserInfo(payload: JwtPayload): AuthUserInfo;
-    /**
-     * Validates Cognito-specific configuration
-     */
-    validateConfig(): boolean;
-}
-//# sourceMappingURL=CognitoProvider.d.ts.map

package/dist/auth/providers/CognitoProvider.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"CognitoProvider.d.ts","sourceRoot":"","sources":["../../../src/auth/providers/CognitoProvider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE1C,OAAO,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACxE,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAG1D;;GAEG;AACH,qBACa,eAAgB,SAAQ,gBAAgB;gBACvC,MAAM,EAAE,kBAAkB;IAItC;;OAEG;IACH,eAAe,CAAC,OAAO,EAAE,UAAU,GAAG,YAAY;IAoBlD;;OAEG;IACH,cAAc,IAAI,OAAO;CAQ1B"}

package/dist/auth/providers/CognitoProvider.js

@@ -1,56 +0,0 @@
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var __metadata = (this && this.__metadata) || function (k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-};
-import { RegisterClass } from '@memberjunction/global';
-import { BaseAuthProvider } from '../BaseAuthProvider.js';
-/**
- * AWS Cognito authentication provider implementation
- */
-let CognitoProvider = class CognitoProvider extends BaseAuthProvider {
-    constructor(config) {
-        super(config);
-    }
-    /**
-     * Extracts user information from Cognito JWT payload
-     */
-    extractUserInfo(payload) {
-        // Cognito uses custom claims with 'cognito:' prefix for some fields
-        const email = payload.email ||
-            payload['cognito:username'];
-        const fullName = payload.name;
-        const firstName = payload.given_name;
-        const lastName = payload.family_name;
-        const preferredUsername = payload['cognito:username'] ||
-            payload.preferred_username ||
-            email;
-        return {
-            email,
-            firstName: firstName || fullName?.split(' ')[0],
-            lastName: lastName || fullName?.split(' ')[1] || fullName?.split(' ')[0],
-            fullName,
-            preferredUsername
-        };
-    }
-    /**
-     * Validates Cognito-specific configuration
-     */
-    validateConfig() {
-        const baseValid = super.validateConfig();
-        const hasClientId = !!this.config.clientId;
-        const hasRegion = !!this.config.region;
-        const hasUserPoolId = !!this.config.userPoolId;
-        return baseValid && hasClientId && hasRegion && hasUserPoolId;
-    }
-};
-CognitoProvider = __decorate([
-    RegisterClass(BaseAuthProvider, 'cognito'),
-    __metadata("design:paramtypes", [Object])
-], CognitoProvider);
-export { CognitoProvider };
-//# sourceMappingURL=CognitoProvider.js.map

package/dist/auth/providers/CognitoProvider.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"CognitoProvider.js","sourceRoot":"","sources":["../../../src/auth/providers/CognitoProvider.ts"],"names":[],"mappings":";;;;;;;;;AACA,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAEvD,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAG1D;;GAEG;AAEI,IAAM,eAAe,GAArB,MAAM,eAAgB,SAAQ,gBAAgB;IACnD,YAAY,MAA0B;QACpC,KAAK,CAAC,MAAM,CAAC,CAAC;IAChB,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,OAAmB;QACjC,oEAAoE;QACpE,MAAM,KAAK,GAAG,OAAO,CAAC,KAA2B;YACnC,OAAO,CAAC,kBAAkB,CAAuB,CAAC;QAChE,MAAM,QAAQ,GAAG,OAAO,CAAC,IAA0B,CAAC;QACpD,MAAM,SAAS,GAAG,OAAO,CAAC,UAAgC,CAAC;QAC3D,MAAM,QAAQ,GAAG,OAAO,CAAC,WAAiC,CAAC;QAC3D,MAAM,iBAAiB,GAAG,OAAO,CAAC,kBAAkB,CAAuB;YAClD,OAAO,CAAC,kBAAwC;YAChD,KAAK,CAAC;QAE/B,OAAO;YACL,KAAK;YACL,SAAS,EAAE,SAAS,IAAI,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAC/C,QAAQ,EAAE,QAAQ,IAAI,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACxE,QAAQ;YACR,iBAAiB;SAClB,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,cAAc;QACZ,MAAM,SAAS,GAAG,KAAK,CAAC,cAAc,EAAE,CAAC;QACzC,MAAM,WAAW,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;QAC3C,MAAM,SAAS,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;QACvC,MAAM,aAAa,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC;QAE/C,OAAO,SAAS,IAAI,WAAW,IAAI,SAAS,IAAI,aAAa,CAAC;IAChE,CAAC;CACF,CAAA;AAvCY,eAAe;IAD3B,aAAa,CAAC,gBAAgB,EAAE,SAAS,CAAC;;GAC9B,eAAe,CAuC3B"}

package/dist/auth/providers/GoogleProvider.d.ts

@@ -1,18 +0,0 @@
-import { JwtPayload } from 'jsonwebtoken';
-import { AuthProviderConfig, AuthUserInfo } from '@memberjunction/core';
-import { BaseAuthProvider } from '../BaseAuthProvider.js';
-/**
- * Google Identity Platform authentication provider implementation
- */
-export declare class GoogleProvider extends BaseAuthProvider {
-    constructor(config: AuthProviderConfig);
-    /**
-     * Extracts user information from Google JWT payload
-     */
-    extractUserInfo(payload: JwtPayload): AuthUserInfo;
-    /**
-     * Validates Google-specific configuration
-     */
-    validateConfig(): boolean;
-}
-//# sourceMappingURL=GoogleProvider.d.ts.map

package/dist/auth/providers/GoogleProvider.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"GoogleProvider.d.ts","sourceRoot":"","sources":["../../../src/auth/providers/GoogleProvider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE1C,OAAO,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACxE,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAG1D;;GAEG;AACH,qBACa,cAAe,SAAQ,gBAAgB;gBACtC,MAAM,EAAE,kBAAkB;IAItC;;OAEG;IACH,eAAe,CAAC,OAAO,EAAE,UAAU,GAAG,YAAY;IAiBlD;;OAEG;IACH,cAAc,IAAI,OAAO;CAM1B"}

package/dist/auth/providers/GoogleProvider.js

@@ -1,51 +0,0 @@
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var __metadata = (this && this.__metadata) || function (k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-};
-import { RegisterClass } from '@memberjunction/global';
-import { BaseAuthProvider } from '../BaseAuthProvider.js';
-/**
- * Google Identity Platform authentication provider implementation
- */
-let GoogleProvider = class GoogleProvider extends BaseAuthProvider {
-    constructor(config) {
-        super(config);
-    }
-    /**
-     * Extracts user information from Google JWT payload
-     */
-    extractUserInfo(payload) {
-        // Google uses standard OIDC claims
-        const email = payload.email;
-        const fullName = payload.name;
-        const firstName = payload.given_name;
-        const lastName = payload.family_name;
-        const preferredUsername = email; // Google typically uses email as username
-        return {
-            email,
-            firstName: firstName || fullName?.split(' ')[0],
-            lastName: lastName || fullName?.split(' ')[1] || fullName?.split(' ')[0],
-            fullName,
-            preferredUsername
-        };
-    }
-    /**
-     * Validates Google-specific configuration
-     */
-    validateConfig() {
-        const baseValid = super.validateConfig();
-        const hasClientId = !!this.config.clientId;
-        return baseValid && hasClientId;
-    }
-};
-GoogleProvider = __decorate([
-    RegisterClass(BaseAuthProvider, 'google'),
-    __metadata("design:paramtypes", [Object])
-], GoogleProvider);
-export { GoogleProvider };
-//# sourceMappingURL=GoogleProvider.js.map

package/dist/auth/providers/GoogleProvider.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"GoogleProvider.js","sourceRoot":"","sources":["../../../src/auth/providers/GoogleProvider.ts"],"names":[],"mappings":";;;;;;;;;AACA,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAEvD,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAG1D;;GAEG;AAEI,IAAM,cAAc,GAApB,MAAM,cAAe,SAAQ,gBAAgB;IAClD,YAAY,MAA0B;QACpC,KAAK,CAAC,MAAM,CAAC,CAAC;IAChB,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,OAAmB;QACjC,mCAAmC;QACnC,MAAM,KAAK,GAAG,OAAO,CAAC,KAA2B,CAAC;QAClD,MAAM,QAAQ,GAAG,OAAO,CAAC,IAA0B,CAAC;QACpD,MAAM,SAAS,GAAG,OAAO,CAAC,UAAgC,CAAC;QAC3D,MAAM,QAAQ,GAAG,OAAO,CAAC,WAAiC,CAAC;QAC3D,MAAM,iBAAiB,GAAG,KAAK,CAAC,CAAC,0CAA0C;QAE3E,OAAO;YACL,KAAK;YACL,SAAS,EAAE,SAAS,IAAI,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAC/C,QAAQ,EAAE,QAAQ,IAAI,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACxE,QAAQ;YACR,iBAAiB;SAClB,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,cAAc;QACZ,MAAM,SAAS,GAAG,KAAK,CAAC,cAAc,EAAE,CAAC;QACzC,MAAM,WAAW,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;QAE3C,OAAO,SAAS,IAAI,WAAW,CAAC;IAClC,CAAC;CACF,CAAA;AAlCY,cAAc;IAD1B,aAAa,CAAC,gBAAgB,EAAE,QAAQ,CAAC;;GAC7B,cAAc,CAkC1B"}

package/dist/auth/providers/MSALProvider.d.ts

@@ -1,18 +0,0 @@
-import { JwtPayload } from 'jsonwebtoken';
-import { AuthProviderConfig, AuthUserInfo } from '@memberjunction/core';
-import { BaseAuthProvider } from '../BaseAuthProvider.js';
-/**
- * Microsoft Authentication Library (MSAL) provider implementation
- */
-export declare class MSALProvider extends BaseAuthProvider {
-    constructor(config: AuthProviderConfig);
-    /**
-     * Extracts user information from MSAL/Azure AD JWT payload
-     */
-    extractUserInfo(payload: JwtPayload): AuthUserInfo;
-    /**
-     * Validates MSAL-specific configuration
-     */
-    validateConfig(): boolean;
-}
-//# sourceMappingURL=MSALProvider.d.ts.map

package/dist/auth/providers/MSALProvider.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"MSALProvider.d.ts","sourceRoot":"","sources":["../../../src/auth/providers/MSALProvider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE1C,OAAO,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACxE,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE1D;;GAEG;AACH,qBACa,YAAa,SAAQ,gBAAgB;gBACpC,MAAM,EAAE,kBAAkB;IAItC;;OAEG;IACH,eAAe,CAAC,OAAO,EAAE,UAAU,GAAG,YAAY;IAiBlD;;OAEG;IACH,cAAc,IAAI,OAAO;CAO1B"}

package/dist/auth/providers/MSALProvider.js

@@ -1,52 +0,0 @@
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var __metadata = (this && this.__metadata) || function (k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-};
-import { RegisterClass } from '@memberjunction/global';
-import { BaseAuthProvider } from '../BaseAuthProvider.js';
-/**
- * Microsoft Authentication Library (MSAL) provider implementation
- */
-let MSALProvider = class MSALProvider extends BaseAuthProvider {
-    constructor(config) {
-        super(config);
-    }
-    /**
-     * Extracts user information from MSAL/Azure AD JWT payload
-     */
-    extractUserInfo(payload) {
-        // MSAL/Azure AD uses some custom claims
-        const email = payload.email || payload.preferred_username;
-        const fullName = payload.name;
-        const firstName = payload.given_name;
-        const lastName = payload.family_name;
-        const preferredUsername = payload.preferred_username;
-        return {
-            email,
-            firstName: firstName || fullName?.split(' ')[0],
-            lastName: lastName || fullName?.split(' ')[1] || fullName?.split(' ')[0],
-            fullName,
-            preferredUsername
-        };
-    }
-    /**
-     * Validates MSAL-specific configuration
-     */
-    validateConfig() {
-        const baseValid = super.validateConfig();
-        const hasClientId = !!this.config.clientId;
-        const hasTenantId = !!this.config.tenantId;
-        return baseValid && hasClientId && hasTenantId;
-    }
-};
-MSALProvider = __decorate([
-    RegisterClass(BaseAuthProvider, 'msal'),
-    __metadata("design:paramtypes", [Object])
-], MSALProvider);
-export { MSALProvider };
-//# sourceMappingURL=MSALProvider.js.map

package/dist/auth/providers/MSALProvider.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"MSALProvider.js","sourceRoot":"","sources":["../../../src/auth/providers/MSALProvider.ts"],"names":[],"mappings":";;;;;;;;;AACA,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAEvD,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE1D;;GAEG;AAEI,IAAM,YAAY,GAAlB,MAAM,YAAa,SAAQ,gBAAgB;IAChD,YAAY,MAA0B;QACpC,KAAK,CAAC,MAAM,CAAC,CAAC;IAChB,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,OAAmB;QACjC,wCAAwC;QACxC,MAAM,KAAK,GAAG,OAAO,CAAC,KAA2B,IAAI,OAAO,CAAC,kBAAwC,CAAC;QACtG,MAAM,QAAQ,GAAG,OAAO,CAAC,IAA0B,CAAC;QACpD,MAAM,SAAS,GAAG,OAAO,CAAC,UAAgC,CAAC;QAC3D,MAAM,QAAQ,GAAG,OAAO,CAAC,WAAiC,CAAC;QAC3D,MAAM,iBAAiB,GAAG,OAAO,CAAC,kBAAwC,CAAC;QAE3E,OAAO;YACL,KAAK;YACL,SAAS,EAAE,SAAS,IAAI,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAC/C,QAAQ,EAAE,QAAQ,IAAI,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACxE,QAAQ;YACR,iBAAiB;SAClB,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,cAAc;QACZ,MAAM,SAAS,GAAG,KAAK,CAAC,cAAc,EAAE,CAAC;QACzC,MAAM,WAAW,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;QAC3C,MAAM,WAAW,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;QAE3C,OAAO,SAAS,IAAI,WAAW,IAAI,WAAW,CAAC;IACjD,CAAC;CACF,CAAA;AAnCY,YAAY;IADxB,aAAa,CAAC,gBAAgB,EAAE,MAAM,CAAC;;GAC3B,YAAY,CAmCxB"}

package/dist/auth/providers/OktaProvider.d.ts

@@ -1,18 +0,0 @@
-import { JwtPayload } from 'jsonwebtoken';
-import { AuthProviderConfig, AuthUserInfo } from '@memberjunction/core';
-import { BaseAuthProvider } from '../BaseAuthProvider.js';
-/**
- * Okta authentication provider implementation
- */
-export declare class OktaProvider extends BaseAuthProvider {
-    constructor(config: AuthProviderConfig);
-    /**
-     * Extracts user information from Okta JWT payload
-     */
-    extractUserInfo(payload: JwtPayload): AuthUserInfo;
-    /**
-     * Validates Okta-specific configuration
-     */
-    validateConfig(): boolean;
-}
-//# sourceMappingURL=OktaProvider.d.ts.map

package/dist/auth/providers/OktaProvider.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"OktaProvider.d.ts","sourceRoot":"","sources":["../../../src/auth/providers/OktaProvider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE1C,OAAO,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACxE,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAG1D;;GAEG;AACH,qBACa,YAAa,SAAQ,gBAAgB;gBACpC,MAAM,EAAE,kBAAkB;IAItC;;OAEG;IACH,eAAe,CAAC,OAAO,EAAE,UAAU,GAAG,YAAY;IAiBlD;;OAEG;IACH,cAAc,IAAI,OAAO;CAO1B"}

package/dist/auth/providers/OktaProvider.js

@@ -1,52 +0,0 @@
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var __metadata = (this && this.__metadata) || function (k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-};
-import { RegisterClass } from '@memberjunction/global';
-import { BaseAuthProvider } from '../BaseAuthProvider.js';
-/**
- * Okta authentication provider implementation
- */
-let OktaProvider = class OktaProvider extends BaseAuthProvider {
-    constructor(config) {
-        super(config);
-    }
-    /**
-     * Extracts user information from Okta JWT payload
-     */
-    extractUserInfo(payload) {
-        // Okta uses standard OIDC claims plus some custom ones
-        const email = payload.email || payload.preferred_username;
-        const fullName = payload.name;
-        const firstName = payload.given_name;
-        const lastName = payload.family_name;
-        const preferredUsername = payload.preferred_username || email;
-        return {
-            email,
-            firstName: firstName || fullName?.split(' ')[0],
-            lastName: lastName || fullName?.split(' ')[1] || fullName?.split(' ')[0],
-            fullName,
-            preferredUsername
-        };
-    }
-    /**
-     * Validates Okta-specific configuration
-     */
-    validateConfig() {
-        const baseValid = super.validateConfig();
-        const hasClientId = !!this.config.clientId;
-        const hasDomain = !!this.config.domain;
-        return baseValid && hasClientId && hasDomain;
-    }
-};
-OktaProvider = __decorate([
-    RegisterClass(BaseAuthProvider, 'okta'),
-    __metadata("design:paramtypes", [Object])
-], OktaProvider);
-export { OktaProvider };
-//# sourceMappingURL=OktaProvider.js.map

package/dist/auth/providers/OktaProvider.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"OktaProvider.js","sourceRoot":"","sources":["../../../src/auth/providers/OktaProvider.ts"],"names":[],"mappings":";;;;;;;;;AACA,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAEvD,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAG1D;;GAEG;AAEI,IAAM,YAAY,GAAlB,MAAM,YAAa,SAAQ,gBAAgB;IAChD,YAAY,MAA0B;QACpC,KAAK,CAAC,MAAM,CAAC,CAAC;IAChB,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,OAAmB;QACjC,uDAAuD;QACvD,MAAM,KAAK,GAAG,OAAO,CAAC,KAA2B,IAAI,OAAO,CAAC,kBAAwC,CAAC;QACtG,MAAM,QAAQ,GAAG,OAAO,CAAC,IAA0B,CAAC;QACpD,MAAM,SAAS,GAAG,OAAO,CAAC,UAAgC,CAAC;QAC3D,MAAM,QAAQ,GAAG,OAAO,CAAC,WAAiC,CAAC;QAC3D,MAAM,iBAAiB,GAAG,OAAO,CAAC,kBAAwC,IAAI,KAAK,CAAC;QAEpF,OAAO;YACL,KAAK;YACL,SAAS,EAAE,SAAS,IAAI,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAC/C,QAAQ,EAAE,QAAQ,IAAI,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACxE,QAAQ;YACR,iBAAiB;SAClB,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,cAAc;QACZ,MAAM,SAAS,GAAG,KAAK,CAAC,cAAc,EAAE,CAAC;QACzC,MAAM,WAAW,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;QAC3C,MAAM,SAAS,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;QAEvC,OAAO,SAAS,IAAI,WAAW,IAAI,SAAS,CAAC;IAC/C,CAAC;CACF,CAAA;AAnCY,YAAY;IADxB,aAAa,CAAC,gBAAgB,EAAE,MAAM,CAAC;;GAC3B,YAAY,CAmCxB"}

package/dist/auth/tokenExpiredError.d.ts

@@ -1,5 +0,0 @@
-import { GraphQLError } from 'graphql';
-export declare class TokenExpiredError extends GraphQLError {
-    constructor(expiryDate: Date, message?: string);
-}
-//# sourceMappingURL=tokenExpiredError.d.ts.map

package/dist/auth/tokenExpiredError.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"tokenExpiredError.d.ts","sourceRoot":"","sources":["../../src/auth/tokenExpiredError.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEvC,qBAAa,iBAAkB,SAAQ,YAAY;gBACrC,UAAU,EAAE,IAAI,EAAE,OAAO,SAA+D;CAQrG"}