@modelcontextprotocol/sdk 1.15.1 → 1.17.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (80) hide show
  1. package/README.md +43 -7
  2. package/dist/cjs/client/auth.d.ts +69 -12
  3. package/dist/cjs/client/auth.d.ts.map +1 -1
  4. package/dist/cjs/client/auth.js +216 -39
  5. package/dist/cjs/client/auth.js.map +1 -1
  6. package/dist/cjs/client/index.d.ts +63 -63
  7. package/dist/cjs/client/sse.js +3 -3
  8. package/dist/cjs/client/sse.js.map +1 -1
  9. package/dist/cjs/client/streamableHttp.d.ts.map +1 -1
  10. package/dist/cjs/client/streamableHttp.js +18 -18
  11. package/dist/cjs/client/streamableHttp.js.map +1 -1
  12. package/dist/cjs/server/auth/clients.d.ts +1 -1
  13. package/dist/cjs/server/auth/clients.d.ts.map +1 -1
  14. package/dist/cjs/server/auth/errors.d.ts +33 -18
  15. package/dist/cjs/server/auth/errors.d.ts.map +1 -1
  16. package/dist/cjs/server/auth/errors.js +55 -51
  17. package/dist/cjs/server/auth/errors.js.map +1 -1
  18. package/dist/cjs/server/auth/handlers/register.d.ts +7 -1
  19. package/dist/cjs/server/auth/handlers/register.d.ts.map +1 -1
  20. package/dist/cjs/server/auth/handlers/register.js +5 -4
  21. package/dist/cjs/server/auth/handlers/register.js.map +1 -1
  22. package/dist/cjs/server/auth/providers/proxyProvider.d.ts +6 -0
  23. package/dist/cjs/server/auth/providers/proxyProvider.d.ts.map +1 -1
  24. package/dist/cjs/server/auth/providers/proxyProvider.js +9 -4
  25. package/dist/cjs/server/auth/providers/proxyProvider.js.map +1 -1
  26. package/dist/cjs/server/auth/router.js +1 -1
  27. package/dist/cjs/server/auth/router.js.map +1 -1
  28. package/dist/cjs/server/index.d.ts +6 -6
  29. package/dist/cjs/shared/auth.d.ts +290 -0
  30. package/dist/cjs/shared/auth.d.ts.map +1 -1
  31. package/dist/cjs/shared/auth.js +59 -1
  32. package/dist/cjs/shared/auth.js.map +1 -1
  33. package/dist/cjs/shared/protocol.d.ts +8 -0
  34. package/dist/cjs/shared/protocol.d.ts.map +1 -1
  35. package/dist/cjs/shared/protocol.js +37 -0
  36. package/dist/cjs/shared/protocol.js.map +1 -1
  37. package/dist/cjs/types.d.ts +687 -687
  38. package/dist/cjs/types.d.ts.map +1 -1
  39. package/dist/cjs/types.js +19 -3
  40. package/dist/cjs/types.js.map +1 -1
  41. package/dist/esm/client/auth.d.ts +69 -12
  42. package/dist/esm/client/auth.d.ts.map +1 -1
  43. package/dist/esm/client/auth.js +208 -34
  44. package/dist/esm/client/auth.js.map +1 -1
  45. package/dist/esm/client/index.d.ts +63 -63
  46. package/dist/esm/client/sse.js +3 -3
  47. package/dist/esm/client/sse.js.map +1 -1
  48. package/dist/esm/client/streamableHttp.d.ts.map +1 -1
  49. package/dist/esm/client/streamableHttp.js +18 -18
  50. package/dist/esm/client/streamableHttp.js.map +1 -1
  51. package/dist/esm/server/auth/clients.d.ts +1 -1
  52. package/dist/esm/server/auth/clients.d.ts.map +1 -1
  53. package/dist/esm/server/auth/errors.d.ts +33 -18
  54. package/dist/esm/server/auth/errors.d.ts.map +1 -1
  55. package/dist/esm/server/auth/errors.js +52 -49
  56. package/dist/esm/server/auth/errors.js.map +1 -1
  57. package/dist/esm/server/auth/handlers/register.d.ts +7 -1
  58. package/dist/esm/server/auth/handlers/register.d.ts.map +1 -1
  59. package/dist/esm/server/auth/handlers/register.js +5 -4
  60. package/dist/esm/server/auth/handlers/register.js.map +1 -1
  61. package/dist/esm/server/auth/providers/proxyProvider.d.ts +6 -0
  62. package/dist/esm/server/auth/providers/proxyProvider.d.ts.map +1 -1
  63. package/dist/esm/server/auth/providers/proxyProvider.js +9 -4
  64. package/dist/esm/server/auth/providers/proxyProvider.js.map +1 -1
  65. package/dist/esm/server/auth/router.js +1 -1
  66. package/dist/esm/server/auth/router.js.map +1 -1
  67. package/dist/esm/server/index.d.ts +6 -6
  68. package/dist/esm/shared/auth.d.ts +290 -0
  69. package/dist/esm/shared/auth.d.ts.map +1 -1
  70. package/dist/esm/shared/auth.js +58 -0
  71. package/dist/esm/shared/auth.js.map +1 -1
  72. package/dist/esm/shared/protocol.d.ts +8 -0
  73. package/dist/esm/shared/protocol.d.ts.map +1 -1
  74. package/dist/esm/shared/protocol.js +37 -0
  75. package/dist/esm/shared/protocol.js.map +1 -1
  76. package/dist/esm/types.d.ts +687 -687
  77. package/dist/esm/types.d.ts.map +1 -1
  78. package/dist/esm/types.js +19 -3
  79. package/dist/esm/types.js.map +1 -1
  80. package/package.json +3 -2
package/dist/esm/server/auth/providers/proxyProvider.d.ts CHANGED
@@ -3,6 +3,7 @@ import { OAuthRegisteredClientsStore } from "../clients.js";
3
3
  import { OAuthClientInformationFull, OAuthTokenRevocationRequest, OAuthTokens } from "../../../shared/auth.js";
4
4
  import { AuthInfo } from "../types.js";
5
5
  import { AuthorizationParams, OAuthServerProvider } from "../provider.js";
6
+ import { FetchLike } from "../../../shared/transport.js";
6
7
  export type ProxyEndpoints = {
7
8
  authorizationUrl: string;
8
9
  tokenUrl: string;
@@ -22,6 +23,10 @@ export type ProxyOptions = {
22
23
  * Function to fetch client information from the upstream server
23
24
  */
24
25
  getClient: (clientId: string) => Promise<OAuthClientInformationFull | undefined>;
26
+ /**
27
+ * Custom fetch implementation used for all network requests.
28
+ */
29
+ fetch?: FetchLike;
25
30
  };
26
31
  /**
27
32
  * Implements an OAuth server that proxies requests to another OAuth server.
@@ -30,6 +35,7 @@ export declare class ProxyOAuthServerProvider implements OAuthServerProvider {
30
35
  protected readonly _endpoints: ProxyEndpoints;
31
36
  protected readonly _verifyAccessToken: (token: string) => Promise<AuthInfo>;
32
37
  protected readonly _getClient: (clientId: string) => Promise<OAuthClientInformationFull | undefined>;
38
+ protected readonly _fetch?: FetchLike;
33
39
  skipLocalPkceValidation: boolean;
34
40
  revokeToken?: (client: OAuthClientInformationFull, request: OAuthTokenRevocationRequest) => Promise<void>;
35
41
  constructor(options: ProxyOptions);
package/dist/esm/server/auth/providers/proxyProvider.d.ts.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"proxyProvider.d.ts","sourceRoot":"","sources":["../../../../../src/server/auth/providers/proxyProvider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,2BAA2B,EAAE,MAAM,eAAe,CAAC;AAC5D,OAAO,EACL,0BAA0B,EAE1B,2BAA2B,EAC3B,WAAW,EAEZ,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAG1E,MAAM,MAAM,cAAc,GAAG;IAC3B,gBAAgB,EAAE,MAAM,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB;;OAEG;IACH,SAAS,EAAE,cAAc,CAAC;IAE1B;;MAEE;IACF,iBAAiB,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;IAExD;;MAEE;IACF,SAAS,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,0BAA0B,GAAG,SAAS,CAAC,CAAC;CAElF,CAAC;AAEF;;GAEG;AACH,qBAAa,wBAAyB,YAAW,mBAAmB;IAClE,SAAS,CAAC,QAAQ,CAAC,UAAU,EAAE,cAAc,CAAC;IAC9C,SAAS,CAAC,QAAQ,CAAC,kBAAkB,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC5E,SAAS,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,0BAA0B,GAAG,SAAS,CAAC,CAAC;IAErG,uBAAuB,UAAQ;IAE/B,WAAW,CAAC,EAAE,CACZ,MAAM,EAAE,0BAA0B,EAClC,OAAO,EAAE,2BAA2B,KACjC,OAAO,CAAC,IAAI,CAAC,CAAC;gBAEP,OAAO,EAAE,YAAY;IAwCjC,IAAI,YAAY,IAAI,2BAA2B,CAuB9C;IAEK,SAAS,CACb,MAAM,EAAE,0BAA0B,EAClC,MAAM,EAAE,mBAAmB,EAC3B,GAAG,EAAE,QAAQ,GACZ,OAAO,CAAC,IAAI,CAAC;IAoBV,6BAA6B,CACjC,OAAO,EAAE,0BAA0B,EACnC,kBAAkB,EAAE,MAAM,GACzB,OAAO,CAAC,MAAM,CAAC;IAMZ,yBAAyB,CAC7B,MAAM,EAAE,0BAA0B,EAClC,iBAAiB,EAAE,MAAM,EACzB,YAAY,CAAC,EAAE,MAAM,EACrB,WAAW,CAAC,EAAE,MAAM,EACpB,QAAQ,CAAC,EAAE,GAAG,GACb,OAAO,CAAC,WAAW,CAAC;IAwCjB,oBAAoB,CACxB,MAAM,EAAE,0BAA0B,EAClC,YAAY,EAAE,MAAM,EACpB,MAAM,CAAC,EAAE,MAAM,EAAE,EACjB,QAAQ,CAAC,EAAE,GAAG,GACb,OAAO,CAAC,WAAW,CAAC;IAoCjB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;CAG1D"}
1
+ {"version":3,"file":"proxyProvider.d.ts","sourceRoot":"","sources":["../../../../../src/server/auth/providers/proxyProvider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,2BAA2B,EAAE,MAAM,eAAe,CAAC;AAC5D,OAAO,EACL,0BAA0B,EAE1B,2BAA2B,EAC3B,WAAW,EAEZ,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAE1E,OAAO,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAC;AAEzD,MAAM,MAAM,cAAc,GAAG;IAC3B,gBAAgB,EAAE,MAAM,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB;;OAEG;IACH,SAAS,EAAE,cAAc,CAAC;IAE1B;;MAEE;IACF,iBAAiB,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;IAExD;;MAEE;IACF,SAAS,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,0BAA0B,GAAG,SAAS,CAAC,CAAC;IAEjF;;OAEG;IACH,KAAK,CAAC,EAAE,SAAS,CAAC;CACnB,CAAC;AAEF;;GAEG;AACH,qBAAa,wBAAyB,YAAW,mBAAmB;IAClE,SAAS,CAAC,QAAQ,CAAC,UAAU,EAAE,cAAc,CAAC;IAC9C,SAAS,CAAC,QAAQ,CAAC,kBAAkB,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC5E,SAAS,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,0BAA0B,GAAG,SAAS,CAAC,CAAC;IACrG,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,CAAC;IAEtC,uBAAuB,UAAQ;IAE/B,WAAW,CAAC,EAAE,CACZ,MAAM,EAAE,0BAA0B,EAClC,OAAO,EAAE,2BAA2B,KACjC,OAAO,CAAC,IAAI,CAAC,CAAC;gBAEP,OAAO,EAAE,YAAY;IAyCjC,IAAI,YAAY,IAAI,2BAA2B,CAuB9C;IAEK,SAAS,CACb,MAAM,EAAE,0BAA0B,EAClC,MAAM,EAAE,mBAAmB,EAC3B,GAAG,EAAE,QAAQ,GACZ,OAAO,CAAC,IAAI,CAAC;IAoBV,6BAA6B,CACjC,OAAO,EAAE,0BAA0B,EACnC,kBAAkB,EAAE,MAAM,GACzB,OAAO,CAAC,MAAM,CAAC;IAMZ,yBAAyB,CAC7B,MAAM,EAAE,0BAA0B,EAClC,iBAAiB,EAAE,MAAM,EACzB,YAAY,CAAC,EAAE,MAAM,EACrB,WAAW,CAAC,EAAE,MAAM,EACpB,QAAQ,CAAC,EAAE,GAAG,GACb,OAAO,CAAC,WAAW,CAAC;IAwCjB,oBAAoB,CACxB,MAAM,EAAE,0BAA0B,EAClC,YAAY,EAAE,MAAM,EACpB,MAAM,CAAC,EAAE,MAAM,EAAE,EACjB,QAAQ,CAAC,EAAE,GAAG,GACb,OAAO,CAAC,WAAW,CAAC;IAoCjB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;CAG1D"}
package/dist/esm/server/auth/providers/proxyProvider.js CHANGED
@@ -10,8 +10,10 @@ export class ProxyOAuthServerProvider {
10
10
  this._endpoints = options.endpoints;
11
11
  this._verifyAccessToken = options.verifyAccessToken;
12
12
  this._getClient = options.getClient;
13
+ this._fetch = options.fetch;
13
14
  if ((_a = options.endpoints) === null || _a === void 0 ? void 0 : _a.revocationUrl) {
14
15
  this.revokeToken = async (client, request) => {
16
+ var _a;
15
17
  const revocationUrl = this._endpoints.revocationUrl;
16
18
  if (!revocationUrl) {
17
19
  throw new Error("No revocation endpoint configured");
@@ -25,7 +27,7 @@ export class ProxyOAuthServerProvider {
25
27
  if (request.token_type_hint) {
26
28
  params.set("token_type_hint", request.token_type_hint);
27
29
  }
28
- const response = await fetch(revocationUrl, {
30
+ const response = await ((_a = this._fetch) !== null && _a !== void 0 ? _a : fetch)(revocationUrl, {
29
31
  method: "POST",
30
32
  headers: {
31
33
  "Content-Type": "application/x-www-form-urlencoded",
@@ -44,7 +46,8 @@ export class ProxyOAuthServerProvider {
44
46
  getClient: this._getClient,
45
47
  ...(registrationUrl && {
46
48
  registerClient: async (client) => {
47
- const response = await fetch(registrationUrl, {
49
+ var _a;
50
+ const response = await ((_a = this._fetch) !== null && _a !== void 0 ? _a : fetch)(registrationUrl, {
48
51
  method: "POST",
49
52
  headers: {
50
53
  "Content-Type": "application/json",
@@ -87,6 +90,7 @@ export class ProxyOAuthServerProvider {
87
90
  return "";
88
91
  }
89
92
  async exchangeAuthorizationCode(client, authorizationCode, codeVerifier, redirectUri, resource) {
93
+ var _a;
90
94
  const params = new URLSearchParams({
91
95
  grant_type: "authorization_code",
92
96
  client_id: client.client_id,
@@ -104,7 +108,7 @@ export class ProxyOAuthServerProvider {
104
108
  if (resource) {
105
109
  params.append("resource", resource.href);
106
110
  }
107
- const response = await fetch(this._endpoints.tokenUrl, {
111
+ const response = await ((_a = this._fetch) !== null && _a !== void 0 ? _a : fetch)(this._endpoints.tokenUrl, {
108
112
  method: "POST",
109
113
  headers: {
110
114
  "Content-Type": "application/x-www-form-urlencoded",
@@ -118,6 +122,7 @@ export class ProxyOAuthServerProvider {
118
122
  return OAuthTokensSchema.parse(data);
119
123
  }
120
124
  async exchangeRefreshToken(client, refreshToken, scopes, resource) {
125
+ var _a;
121
126
  const params = new URLSearchParams({
122
127
  grant_type: "refresh_token",
123
128
  client_id: client.client_id,
@@ -132,7 +137,7 @@ export class ProxyOAuthServerProvider {
132
137
  if (resource) {
133
138
  params.set("resource", resource.href);
134
139
  }
135
- const response = await fetch(this._endpoints.tokenUrl, {
140
+ const response = await ((_a = this._fetch) !== null && _a !== void 0 ? _a : fetch)(this._endpoints.tokenUrl, {
136
141
  method: "POST",
137
142
  headers: {
138
143
  "Content-Type": "application/x-www-form-urlencoded",
package/dist/esm/server/auth/providers/proxyProvider.js.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"proxyProvider.js","sourceRoot":"","sources":["../../../../../src/server/auth/providers/proxyProvider.ts"],"names":[],"mappings":"AAEA,OAAO,EAEL,gCAAgC,EAGhC,iBAAiB,GAClB,MAAM,yBAAyB,CAAC;AAGjC,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AA2B3C;;GAEG;AACH,MAAM,OAAO,wBAAwB;IAYnC,YAAY,OAAqB;;QAPjC,4BAAuB,GAAG,IAAI,CAAC;QAQ7B,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC;QACpC,IAAI,CAAC,kBAAkB,GAAG,OAAO,CAAC,iBAAiB,CAAC;QACpD,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC;QACpC,IAAI,MAAA,OAAO,CAAC,SAAS,0CAAE,aAAa,EAAE,CAAC;YACrC,IAAI,CAAC,WAAW,GAAG,KAAK,EACtB,MAAkC,EAClC,OAAoC,EACpC,EAAE;gBACF,MAAM,aAAa,GAAG,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC;gBAEpD,IAAI,CAAC,aAAa,EAAE,CAAC;oBACnB,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;gBACvD,CAAC;gBAED,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;gBACrC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;gBACnC,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;gBAC1C,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;oBACzB,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;gBACpD,CAAC;gBACD,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;oBAC5B,MAAM,CAAC,GAAG,CAAC,iBAAiB,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;gBACzD,CAAC;gBAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,aAAa,EAAE;oBAC1C,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE;wBACP,cAAc,EAAE,mCAAmC;qBACpD;oBACD,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE;iBACxB,CAAC,CAAC;gBAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;oBACjB,MAAM,IAAI,WAAW,CAAC,4BAA4B,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;gBACvE,CAAC;YACH,CAAC,CAAA;QACH,CAAC;IACH,CAAC;IAED,IAAI,YAAY;QACd,MAAM,eAAe,GAAG,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC;QACxD,OAAO;YACL,SAAS,EAAE,IAAI,CAAC,UAAU;YAC1B,GAAG,CAAC,eAAe,IAAI;gBACrB,cAAc,EAAE,KAAK,EAAE,MAAkC,EAAE,EAAE;oBAC3D,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,eAAe,EAAE;wBAC5C,MAAM,EAAE,MAAM;wBACd,OAAO,EAAE;4BACP,cAAc,EAAE,kBAAkB;yBACnC;wBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;qBAC7B,CAAC,CAAC;oBAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;wBACjB,MAAM,IAAI,WAAW,CAAC,+BAA+B,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;oBAC1E,CAAC;oBAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;oBACnC,OAAO,gCAAgC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACtD,CAAC;aACF,CAAC;SACH,CAAA;IACH,CAAC;IAED,KAAK,CAAC,SAAS,CACb,MAAkC,EAClC,MAA2B,EAC3B,GAAa;;QAEb,uCAAuC;QACvC,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC;QAC5D,MAAM,YAAY,GAAG,IAAI,eAAe,CAAC;YACvC,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,aAAa,EAAE,MAAM;YACrB,YAAY,EAAE,MAAM,CAAC,WAAW;YAChC,cAAc,EAAE,MAAM,CAAC,aAAa;YACpC,qBAAqB,EAAE,MAAM;SAC9B,CAAC,CAAC;QAEH,yCAAyC;QACzC,IAAI,MAAM,CAAC,KAAK;YAAE,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QAC1D,IAAI,MAAA,MAAM,CAAC,MAAM,0CAAE,MAAM;YAAE,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9E,IAAI,MAAM,CAAC,QAAQ;YAAE,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAExE,SAAS,CAAC,MAAM,GAAG,YAAY,CAAC,QAAQ,EAAE,CAAC;QAC3C,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,6BAA6B,CACjC,OAAmC,EACnC,kBAA0B;QAE1B,gEAAgE;QAChE,8EAA8E;QAC9E,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,KAAK,CAAC,yBAAyB,CAC7B,MAAkC,EAClC,iBAAyB,EACzB,YAAqB,EACrB,WAAoB,EACpB,QAAc;QAEd,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YACjC,UAAU,EAAE,oBAAoB;YAChC,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,IAAI,EAAE,iBAAiB;SACxB,CAAC,CAAC;QAEH,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;YACzB,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;QACvD,CAAC;QAED,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC;QAC/C,CAAC;QAED,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,CAAC,MAAM,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;QAC7C,CAAC;QAED,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC3C,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE;YACrD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,mCAAmC;aACpD;YACD,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE;SACxB,CAAC,CAAC;QAGH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,WAAW,CAAC,0BAA0B,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QACrE,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,OAAO,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACvC,CAAC;IAED,KAAK,CAAC,oBAAoB,CACxB,MAAkC,EAClC,YAAoB,EACpB,MAAiB,EACjB,QAAc;QAGd,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YACjC,UAAU,EAAE,eAAe;YAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,aAAa,EAAE,YAAY;SAC5B,CAAC,CAAC;QAEH,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;YACzB,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;QACpD,CAAC;QAED,IAAI,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,MAAM,EAAE,CAAC;YACnB,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACxC,CAAC;QAED,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;QACxC,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE;YACrD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,mCAAmC;aACpD;YACD,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE;SACxB,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,WAAW,CAAC,yBAAyB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QACpE,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,OAAO,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACvC,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,KAAa;QACnC,OAAO,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;IACxC,CAAC;CACF"}
1
+ {"version":3,"file":"proxyProvider.js","sourceRoot":"","sources":["../../../../../src/server/auth/providers/proxyProvider.ts"],"names":[],"mappings":"AAEA,OAAO,EAEL,gCAAgC,EAGhC,iBAAiB,GAClB,MAAM,yBAAyB,CAAC;AAGjC,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAgC3C;;GAEG;AACH,MAAM,OAAO,wBAAwB;IAanC,YAAY,OAAqB;;QAPjC,4BAAuB,GAAG,IAAI,CAAC;QAQ7B,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC;QACpC,IAAI,CAAC,kBAAkB,GAAG,OAAO,CAAC,iBAAiB,CAAC;QACpD,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC;QACpC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;QAC5B,IAAI,MAAA,OAAO,CAAC,SAAS,0CAAE,aAAa,EAAE,CAAC;YACrC,IAAI,CAAC,WAAW,GAAG,KAAK,EACtB,MAAkC,EAClC,OAAoC,EACpC,EAAE;;gBACF,MAAM,aAAa,GAAG,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC;gBAEpD,IAAI,CAAC,aAAa,EAAE,CAAC;oBACnB,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;gBACvD,CAAC;gBAED,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;gBACrC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;gBACnC,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;gBAC1C,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;oBACzB,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;gBACpD,CAAC;gBACD,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;oBAC5B,MAAM,CAAC,GAAG,CAAC,iBAAiB,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;gBACzD,CAAC;gBAED,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAA,IAAI,CAAC,MAAM,mCAAI,KAAK,CAAC,CAAC,aAAa,EAAE;oBAC3D,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE;wBACP,cAAc,EAAE,mCAAmC;qBACpD;oBACD,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE;iBACxB,CAAC,CAAC;gBAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;oBACjB,MAAM,IAAI,WAAW,CAAC,4BAA4B,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;gBACvE,CAAC;YACH,CAAC,CAAA;QACH,CAAC;IACH,CAAC;IAED,IAAI,YAAY;QACd,MAAM,eAAe,GAAG,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC;QACxD,OAAO;YACL,SAAS,EAAE,IAAI,CAAC,UAAU;YAC1B,GAAG,CAAC,eAAe,IAAI;gBACrB,cAAc,EAAE,KAAK,EAAE,MAAkC,EAAE,EAAE;;oBAC3D,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAA,IAAI,CAAC,MAAM,mCAAI,KAAK,CAAC,CAAC,eAAe,EAAE;wBAC7D,MAAM,EAAE,MAAM;wBACd,OAAO,EAAE;4BACP,cAAc,EAAE,kBAAkB;yBACnC;wBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;qBAC7B,CAAC,CAAC;oBAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;wBACjB,MAAM,IAAI,WAAW,CAAC,+BAA+B,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;oBAC1E,CAAC;oBAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;oBACnC,OAAO,gCAAgC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACtD,CAAC;aACF,CAAC;SACH,CAAA;IACH,CAAC;IAED,KAAK,CAAC,SAAS,CACb,MAAkC,EAClC,MAA2B,EAC3B,GAAa;;QAEb,uCAAuC;QACvC,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC;QAC5D,MAAM,YAAY,GAAG,IAAI,eAAe,CAAC;YACvC,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,aAAa,EAAE,MAAM;YACrB,YAAY,EAAE,MAAM,CAAC,WAAW;YAChC,cAAc,EAAE,MAAM,CAAC,aAAa;YACpC,qBAAqB,EAAE,MAAM;SAC9B,CAAC,CAAC;QAEH,yCAAyC;QACzC,IAAI,MAAM,CAAC,KAAK;YAAE,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QAC1D,IAAI,MAAA,MAAM,CAAC,MAAM,0CAAE,MAAM;YAAE,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9E,IAAI,MAAM,CAAC,QAAQ;YAAE,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAExE,SAAS,CAAC,MAAM,GAAG,YAAY,CAAC,QAAQ,EAAE,CAAC;QAC3C,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,6BAA6B,CACjC,OAAmC,EACnC,kBAA0B;QAE1B,gEAAgE;QAChE,8EAA8E;QAC9E,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,KAAK,CAAC,yBAAyB,CAC7B,MAAkC,EAClC,iBAAyB,EACzB,YAAqB,EACrB,WAAoB,EACpB,QAAc;;QAEd,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YACjC,UAAU,EAAE,oBAAoB;YAChC,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,IAAI,EAAE,iBAAiB;SACxB,CAAC,CAAC;QAEH,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;YACzB,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;QACvD,CAAC;QAED,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC;QAC/C,CAAC;QAED,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,CAAC,MAAM,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;QAC7C,CAAC;QAED,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC3C,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAA,IAAI,CAAC,MAAM,mCAAI,KAAK,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE;YACtE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,mCAAmC;aACpD;YACD,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE;SACxB,CAAC,CAAC;QAGH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,WAAW,CAAC,0BAA0B,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QACrE,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,OAAO,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACvC,CAAC;IAED,KAAK,CAAC,oBAAoB,CACxB,MAAkC,EAClC,YAAoB,EACpB,MAAiB,EACjB,QAAc;;QAGd,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YACjC,UAAU,EAAE,eAAe;YAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,aAAa,EAAE,YAAY;SAC5B,CAAC,CAAC;QAEH,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;YACzB,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;QACpD,CAAC;QAED,IAAI,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,MAAM,EAAE,CAAC;YACnB,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACxC,CAAC;QAED,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;QACxC,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAA,IAAI,CAAC,MAAM,mCAAI,KAAK,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE;YACtE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,mCAAmC;aACpD;YACD,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE;SACxB,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,WAAW,CAAC,yBAAyB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QACpE,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,OAAO,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACvC,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,KAAa;QACnC,OAAO,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;IACxC,CAAC;CACF"}
package/dist/esm/server/auth/router.js CHANGED
@@ -69,7 +69,7 @@ export function mcpAuthRouter(options) {
69
69
  if (oauthMetadata.registration_endpoint) {
70
70
  router.use(new URL(oauthMetadata.registration_endpoint).pathname, clientRegistrationHandler({
71
71
  clientsStore: options.provider.clientsStore,
72
- ...options,
72
+ ...options.clientRegistrationOptions,
73
73
  }));
74
74
  }
75
75
  if (oauthMetadata.revocation_endpoint) {
package/dist/esm/server/auth/router.js.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"router.js","sourceRoot":"","sources":["../../../../src/server/auth/router.ts"],"names":[],"mappings":"AAAA,OAAO,OAA2B,MAAM,SAAS,CAAC;AAClD,OAAO,EAAE,yBAAyB,EAAoC,MAAM,wBAAwB,CAAC;AACrG,OAAO,EAAE,YAAY,EAAuB,MAAM,qBAAqB,CAAC;AACxE,OAAO,EAAE,oBAAoB,EAA+B,MAAM,yBAAyB,CAAC;AAC5F,OAAO,EAAE,iBAAiB,EAA4B,MAAM,sBAAsB,CAAC;AACnF,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AA6CzD,MAAM,cAAc,GAAG,CAAC,MAAW,EAAQ,EAAE;IAC3C,mHAAmH;IACnH,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,KAAK,WAAW,IAAI,MAAM,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;QACvG,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC9C,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,wCAAwC,MAAM,EAAE,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,4CAA4C,MAAM,EAAE,CAAC,CAAC;IACxE,CAAC;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,OAMnC,EAAiB,EAAE;;IAClB,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IACjC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAEhC,cAAc,CAAC,MAAM,CAAC,CAAC;IAEvB,MAAM,sBAAsB,GAAG,YAAY,CAAC;IAC5C,MAAM,cAAc,GAAG,QAAQ,CAAC;IAChC,MAAM,qBAAqB,GAAG,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;IACrG,MAAM,mBAAmB,GAAG,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;IAEjF,MAAM,QAAQ,GAAkB;QAC9B,MAAM,EAAE,MAAM,CAAC,IAAI;QACnB,qBAAqB,EAAE,MAAA,OAAO,CAAC,uBAAuB,0CAAE,IAAI;QAE5D,sBAAsB,EAAE,IAAI,GAAG,CAAC,sBAAsB,EAAE,OAAO,IAAI,MAAM,CAAC,CAAC,IAAI;QAC/E,wBAAwB,EAAE,CAAC,MAAM,CAAC;QAClC,gCAAgC,EAAE,CAAC,MAAM,CAAC;QAE1C,cAAc,EAAE,IAAI,GAAG,CAAC,cAAc,EAAE,OAAO,IAAI,MAAM,CAAC,CAAC,IAAI;QAC/D,qCAAqC,EAAE,CAAC,oBAAoB,CAAC;QAC7D,qBAAqB,EAAE,CAAC,oBAAoB,EAAE,eAAe,CAAC;QAE9D,gBAAgB,EAAE,OAAO,CAAC,eAAe;QAEzC,mBAAmB,EAAE,mBAAmB,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,mBAAmB,EAAE,OAAO,IAAI,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;QAC3G,0CAA0C,EAAE,mBAAmB,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,SAAS;QAEpG,qBAAqB,EAAE,qBAAqB,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,qBAAqB,EAAE,OAAO,IAAI,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;KAClH,CAAC;IAEF,OAAO,QAAQ,CAAA;AACjB,CAAC,CAAA;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,aAAa,CAAC,OAA0B;IACtD,MAAM,aAAa,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAEnD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAEhC,MAAM,CAAC,GAAG,CACR,IAAI,GAAG,CAAC,aAAa,CAAC,sBAAsB,CAAC,CAAC,QAAQ,EACtD,oBAAoB,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC,CACtF,CAAC;IAEF,MAAM,CAAC,GAAG,CACR,IAAI,GAAG,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC,QAAQ,EAC9C,YAAY,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CACtE,CAAC;IAEF,MAAM,CAAC,GAAG,CAAC,qBAAqB,CAAC;QAC/B,aAAa;QACb,mFAAmF;QACnF,iBAAiB,EAAE,IAAI,GAAG,CAAC,aAAa,CAAC,MAAM,CAAC;QAChD,uBAAuB,EAAE,OAAO,CAAC,uBAAuB;QACxD,eAAe,EAAE,OAAO,CAAC,eAAe;QACxC,YAAY,EAAE,OAAO,CAAC,YAAY;KACnC,CAAC,CAAC,CAAC;IAEJ,IAAI,aAAa,CAAC,qBAAqB,EAAE,CAAC;QACxC,MAAM,CAAC,GAAG,CACR,IAAI,GAAG,CAAC,aAAa,CAAC,qBAAqB,CAAC,CAAC,QAAQ,EACrD,yBAAyB,CAAC;YACxB,YAAY,EAAE,OAAO,CAAC,QAAQ,CAAC,YAAY;YAC3C,GAAG,OAAO;SACX,CAAC,CACH,CAAC;IACJ,CAAC;IAED,IAAI,aAAa,CAAC,mBAAmB,EAAE,CAAC;QACtC,MAAM,CAAC,GAAG,CACR,IAAI,GAAG,CAAC,aAAa,CAAC,mBAAmB,CAAC,CAAC,QAAQ,EACnD,iBAAiB,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAChF,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AA8BD,MAAM,UAAU,qBAAqB,CAAC,OAA4B;;IAChE,cAAc,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;IAEtD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAEhC,MAAM,yBAAyB,GAAmC;QAChE,QAAQ,EAAE,OAAO,CAAC,iBAAiB,CAAC,IAAI;QAExC,qBAAqB,EAAE;YACrB,OAAO,CAAC,aAAa,CAAC,MAAM;SAC7B;QAED,gBAAgB,EAAE,OAAO,CAAC,eAAe;QACzC,aAAa,EAAE,OAAO,CAAC,YAAY;QACnC,sBAAsB,EAAE,MAAA,OAAO,CAAC,uBAAuB,0CAAE,IAAI;KAC9D,CAAC;IAEF,MAAM,CAAC,GAAG,CAAC,uCAAuC,EAAE,eAAe,CAAC,yBAAyB,CAAC,CAAC,CAAC;IAEhG,8CAA8C;IAC9C,MAAM,CAAC,GAAG,CAAC,yCAAyC,EAAE,eAAe,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC;IAE9F,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,oCAAoC,CAAC,SAAc;IACjE,OAAO,IAAI,GAAG,CAAC,uCAAuC,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC;AAC1E,CAAC"}
1
+ {"version":3,"file":"router.js","sourceRoot":"","sources":["../../../../src/server/auth/router.ts"],"names":[],"mappings":"AAAA,OAAO,OAA2B,MAAM,SAAS,CAAC;AAClD,OAAO,EAAE,yBAAyB,EAAoC,MAAM,wBAAwB,CAAC;AACrG,OAAO,EAAE,YAAY,EAAuB,MAAM,qBAAqB,CAAC;AACxE,OAAO,EAAE,oBAAoB,EAA+B,MAAM,yBAAyB,CAAC;AAC5F,OAAO,EAAE,iBAAiB,EAA4B,MAAM,sBAAsB,CAAC;AACnF,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AA6CzD,MAAM,cAAc,GAAG,CAAC,MAAW,EAAQ,EAAE;IAC3C,mHAAmH;IACnH,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,KAAK,WAAW,IAAI,MAAM,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;QACvG,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC9C,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,wCAAwC,MAAM,EAAE,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,4CAA4C,MAAM,EAAE,CAAC,CAAC;IACxE,CAAC;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,OAMnC,EAAiB,EAAE;;IAClB,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IACjC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAEhC,cAAc,CAAC,MAAM,CAAC,CAAC;IAEvB,MAAM,sBAAsB,GAAG,YAAY,CAAC;IAC5C,MAAM,cAAc,GAAG,QAAQ,CAAC;IAChC,MAAM,qBAAqB,GAAG,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;IACrG,MAAM,mBAAmB,GAAG,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;IAEjF,MAAM,QAAQ,GAAkB;QAC9B,MAAM,EAAE,MAAM,CAAC,IAAI;QACnB,qBAAqB,EAAE,MAAA,OAAO,CAAC,uBAAuB,0CAAE,IAAI;QAE5D,sBAAsB,EAAE,IAAI,GAAG,CAAC,sBAAsB,EAAE,OAAO,IAAI,MAAM,CAAC,CAAC,IAAI;QAC/E,wBAAwB,EAAE,CAAC,MAAM,CAAC;QAClC,gCAAgC,EAAE,CAAC,MAAM,CAAC;QAE1C,cAAc,EAAE,IAAI,GAAG,CAAC,cAAc,EAAE,OAAO,IAAI,MAAM,CAAC,CAAC,IAAI;QAC/D,qCAAqC,EAAE,CAAC,oBAAoB,CAAC;QAC7D,qBAAqB,EAAE,CAAC,oBAAoB,EAAE,eAAe,CAAC;QAE9D,gBAAgB,EAAE,OAAO,CAAC,eAAe;QAEzC,mBAAmB,EAAE,mBAAmB,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,mBAAmB,EAAE,OAAO,IAAI,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;QAC3G,0CAA0C,EAAE,mBAAmB,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,SAAS;QAEpG,qBAAqB,EAAE,qBAAqB,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,qBAAqB,EAAE,OAAO,IAAI,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;KAClH,CAAC;IAEF,OAAO,QAAQ,CAAA;AACjB,CAAC,CAAA;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,aAAa,CAAC,OAA0B;IACtD,MAAM,aAAa,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAEnD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAEhC,MAAM,CAAC,GAAG,CACR,IAAI,GAAG,CAAC,aAAa,CAAC,sBAAsB,CAAC,CAAC,QAAQ,EACtD,oBAAoB,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC,CACtF,CAAC;IAEF,MAAM,CAAC,GAAG,CACR,IAAI,GAAG,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC,QAAQ,EAC9C,YAAY,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CACtE,CAAC;IAEF,MAAM,CAAC,GAAG,CAAC,qBAAqB,CAAC;QAC/B,aAAa;QACb,mFAAmF;QACnF,iBAAiB,EAAE,IAAI,GAAG,CAAC,aAAa,CAAC,MAAM,CAAC;QAChD,uBAAuB,EAAE,OAAO,CAAC,uBAAuB;QACxD,eAAe,EAAE,OAAO,CAAC,eAAe;QACxC,YAAY,EAAE,OAAO,CAAC,YAAY;KACnC,CAAC,CAAC,CAAC;IAEJ,IAAI,aAAa,CAAC,qBAAqB,EAAE,CAAC;QACxC,MAAM,CAAC,GAAG,CACR,IAAI,GAAG,CAAC,aAAa,CAAC,qBAAqB,CAAC,CAAC,QAAQ,EACrD,yBAAyB,CAAC;YACxB,YAAY,EAAE,OAAO,CAAC,QAAQ,CAAC,YAAY;YAC3C,GAAG,OAAO,CAAC,yBAAyB;SACrC,CAAC,CACH,CAAC;IACJ,CAAC;IAED,IAAI,aAAa,CAAC,mBAAmB,EAAE,CAAC;QACtC,MAAM,CAAC,GAAG,CACR,IAAI,GAAG,CAAC,aAAa,CAAC,mBAAmB,CAAC,CAAC,QAAQ,EACnD,iBAAiB,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAChF,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AA8BD,MAAM,UAAU,qBAAqB,CAAC,OAA4B;;IAChE,cAAc,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;IAEtD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAEhC,MAAM,yBAAyB,GAAmC;QAChE,QAAQ,EAAE,OAAO,CAAC,iBAAiB,CAAC,IAAI;QAExC,qBAAqB,EAAE;YACrB,OAAO,CAAC,aAAa,CAAC,MAAM;SAC7B;QAED,gBAAgB,EAAE,OAAO,CAAC,eAAe;QACzC,aAAa,EAAE,OAAO,CAAC,YAAY;QACnC,sBAAsB,EAAE,MAAA,OAAO,CAAC,uBAAuB,0CAAE,IAAI;KAC9D,CAAC;IAEF,MAAM,CAAC,GAAG,CAAC,uCAAuC,EAAE,eAAe,CAAC,yBAAyB,CAAC,CAAC,CAAC;IAEhG,8CAA8C;IAC9C,MAAM,CAAC,GAAG,CAAC,yCAAyC,EAAE,eAAe,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC;IAE9F,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,oCAAoC,CAAC,SAAc;IACjE,OAAO,IAAI,GAAG,CAAC,uCAAuC,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC;AAC1E,CAAC"}
package/dist/esm/server/index.d.ts CHANGED
@@ -91,32 +91,32 @@ export declare class Server<RequestT extends Request = Request, NotificationT ex
91
91
  _meta: import("zod").ZodOptional<import("zod").ZodObject<{}, "passthrough", import("zod").ZodTypeAny, import("zod").objectOutputType<{}, import("zod").ZodTypeAny, "passthrough">, import("zod").objectInputType<{}, import("zod").ZodTypeAny, "passthrough">>>;
92
92
  }, import("zod").ZodTypeAny, "passthrough">>, import("zod").ZodObject<{
93
93
  type: import("zod").ZodLiteral<"image">;
94
- data: import("zod").ZodString;
94
+ data: import("zod").ZodEffects<import("zod").ZodString, string, string>;
95
95
  mimeType: import("zod").ZodString;
96
96
  _meta: import("zod").ZodOptional<import("zod").ZodObject<{}, "passthrough", import("zod").ZodTypeAny, import("zod").objectOutputType<{}, import("zod").ZodTypeAny, "passthrough">, import("zod").objectInputType<{}, import("zod").ZodTypeAny, "passthrough">>>;
97
97
  }, "passthrough", import("zod").ZodTypeAny, import("zod").objectOutputType<{
98
98
  type: import("zod").ZodLiteral<"image">;
99
- data: import("zod").ZodString;
99
+ data: import("zod").ZodEffects<import("zod").ZodString, string, string>;
100
100
  mimeType: import("zod").ZodString;
101
101
  _meta: import("zod").ZodOptional<import("zod").ZodObject<{}, "passthrough", import("zod").ZodTypeAny, import("zod").objectOutputType<{}, import("zod").ZodTypeAny, "passthrough">, import("zod").objectInputType<{}, import("zod").ZodTypeAny, "passthrough">>>;
102
102
  }, import("zod").ZodTypeAny, "passthrough">, import("zod").objectInputType<{
103
103
  type: import("zod").ZodLiteral<"image">;
104
- data: import("zod").ZodString;
104
+ data: import("zod").ZodEffects<import("zod").ZodString, string, string>;
105
105
  mimeType: import("zod").ZodString;
106
106
  _meta: import("zod").ZodOptional<import("zod").ZodObject<{}, "passthrough", import("zod").ZodTypeAny, import("zod").objectOutputType<{}, import("zod").ZodTypeAny, "passthrough">, import("zod").objectInputType<{}, import("zod").ZodTypeAny, "passthrough">>>;
107
107
  }, import("zod").ZodTypeAny, "passthrough">>, import("zod").ZodObject<{
108
108
  type: import("zod").ZodLiteral<"audio">;
109
- data: import("zod").ZodString;
109
+ data: import("zod").ZodEffects<import("zod").ZodString, string, string>;
110
110
  mimeType: import("zod").ZodString;
111
111
  _meta: import("zod").ZodOptional<import("zod").ZodObject<{}, "passthrough", import("zod").ZodTypeAny, import("zod").objectOutputType<{}, import("zod").ZodTypeAny, "passthrough">, import("zod").objectInputType<{}, import("zod").ZodTypeAny, "passthrough">>>;
112
112
  }, "passthrough", import("zod").ZodTypeAny, import("zod").objectOutputType<{
113
113
  type: import("zod").ZodLiteral<"audio">;
114
- data: import("zod").ZodString;
114
+ data: import("zod").ZodEffects<import("zod").ZodString, string, string>;
115
115
  mimeType: import("zod").ZodString;
116
116
  _meta: import("zod").ZodOptional<import("zod").ZodObject<{}, "passthrough", import("zod").ZodTypeAny, import("zod").objectOutputType<{}, import("zod").ZodTypeAny, "passthrough">, import("zod").objectInputType<{}, import("zod").ZodTypeAny, "passthrough">>>;
117
117
  }, import("zod").ZodTypeAny, "passthrough">, import("zod").objectInputType<{
118
118
  type: import("zod").ZodLiteral<"audio">;
119
- data: import("zod").ZodString;
119
+ data: import("zod").ZodEffects<import("zod").ZodString, string, string>;
120
120
  mimeType: import("zod").ZodString;
121
121
  _meta: import("zod").ZodOptional<import("zod").ZodObject<{}, "passthrough", import("zod").ZodTypeAny, import("zod").objectOutputType<{}, import("zod").ZodTypeAny, "passthrough">, import("zod").objectInputType<{}, import("zod").ZodTypeAny, "passthrough">>>;
122
122
  }, import("zod").ZodTypeAny, "passthrough">>]>;
package/dist/esm/shared/auth.d.ts CHANGED
@@ -109,11 +109,296 @@ export declare const OAuthMetadataSchema: z.ZodObject<{
109
109
  introspection_endpoint_auth_signing_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
110
110
  code_challenge_methods_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
111
111
  }, z.ZodTypeAny, "passthrough">>;
112
+ /**
113
+ * OpenID Connect Discovery 1.0 Provider Metadata
114
+ * see: https://openid.net/specs/openid-connect-discovery-1_0.html#ProviderMetadata
115
+ */
116
+ export declare const OpenIdProviderMetadataSchema: z.ZodObject<{
117
+ issuer: z.ZodString;
118
+ authorization_endpoint: z.ZodString;
119
+ token_endpoint: z.ZodString;
120
+ userinfo_endpoint: z.ZodOptional<z.ZodString>;
121
+ jwks_uri: z.ZodString;
122
+ registration_endpoint: z.ZodOptional<z.ZodString>;
123
+ scopes_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
124
+ response_types_supported: z.ZodArray<z.ZodString, "many">;
125
+ response_modes_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
126
+ grant_types_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
127
+ acr_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
128
+ subject_types_supported: z.ZodArray<z.ZodString, "many">;
129
+ id_token_signing_alg_values_supported: z.ZodArray<z.ZodString, "many">;
130
+ id_token_encryption_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
131
+ id_token_encryption_enc_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
132
+ userinfo_signing_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
133
+ userinfo_encryption_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
134
+ userinfo_encryption_enc_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
135
+ request_object_signing_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
136
+ request_object_encryption_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
137
+ request_object_encryption_enc_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
138
+ token_endpoint_auth_methods_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
139
+ token_endpoint_auth_signing_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
140
+ display_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
141
+ claim_types_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
142
+ claims_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
143
+ service_documentation: z.ZodOptional<z.ZodString>;
144
+ claims_locales_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
145
+ ui_locales_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
146
+ claims_parameter_supported: z.ZodOptional<z.ZodBoolean>;
147
+ request_parameter_supported: z.ZodOptional<z.ZodBoolean>;
148
+ request_uri_parameter_supported: z.ZodOptional<z.ZodBoolean>;
149
+ require_request_uri_registration: z.ZodOptional<z.ZodBoolean>;
150
+ op_policy_uri: z.ZodOptional<z.ZodString>;
151
+ op_tos_uri: z.ZodOptional<z.ZodString>;
152
+ }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
153
+ issuer: z.ZodString;
154
+ authorization_endpoint: z.ZodString;
155
+ token_endpoint: z.ZodString;
156
+ userinfo_endpoint: z.ZodOptional<z.ZodString>;
157
+ jwks_uri: z.ZodString;
158
+ registration_endpoint: z.ZodOptional<z.ZodString>;
159
+ scopes_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
160
+ response_types_supported: z.ZodArray<z.ZodString, "many">;
161
+ response_modes_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
162
+ grant_types_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
163
+ acr_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
164
+ subject_types_supported: z.ZodArray<z.ZodString, "many">;
165
+ id_token_signing_alg_values_supported: z.ZodArray<z.ZodString, "many">;
166
+ id_token_encryption_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
167
+ id_token_encryption_enc_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
168
+ userinfo_signing_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
169
+ userinfo_encryption_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
170
+ userinfo_encryption_enc_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
171
+ request_object_signing_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
172
+ request_object_encryption_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
173
+ request_object_encryption_enc_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
174
+ token_endpoint_auth_methods_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
175
+ token_endpoint_auth_signing_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
176
+ display_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
177
+ claim_types_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
178
+ claims_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
179
+ service_documentation: z.ZodOptional<z.ZodString>;
180
+ claims_locales_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
181
+ ui_locales_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
182
+ claims_parameter_supported: z.ZodOptional<z.ZodBoolean>;
183
+ request_parameter_supported: z.ZodOptional<z.ZodBoolean>;
184
+ request_uri_parameter_supported: z.ZodOptional<z.ZodBoolean>;
185
+ require_request_uri_registration: z.ZodOptional<z.ZodBoolean>;
186
+ op_policy_uri: z.ZodOptional<z.ZodString>;
187
+ op_tos_uri: z.ZodOptional<z.ZodString>;
188
+ }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
189
+ issuer: z.ZodString;
190
+ authorization_endpoint: z.ZodString;
191
+ token_endpoint: z.ZodString;
192
+ userinfo_endpoint: z.ZodOptional<z.ZodString>;
193
+ jwks_uri: z.ZodString;
194
+ registration_endpoint: z.ZodOptional<z.ZodString>;
195
+ scopes_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
196
+ response_types_supported: z.ZodArray<z.ZodString, "many">;
197
+ response_modes_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
198
+ grant_types_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
199
+ acr_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
200
+ subject_types_supported: z.ZodArray<z.ZodString, "many">;
201
+ id_token_signing_alg_values_supported: z.ZodArray<z.ZodString, "many">;
202
+ id_token_encryption_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
203
+ id_token_encryption_enc_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
204
+ userinfo_signing_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
205
+ userinfo_encryption_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
206
+ userinfo_encryption_enc_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
207
+ request_object_signing_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
208
+ request_object_encryption_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
209
+ request_object_encryption_enc_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
210
+ token_endpoint_auth_methods_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
211
+ token_endpoint_auth_signing_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
212
+ display_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
213
+ claim_types_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
214
+ claims_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
215
+ service_documentation: z.ZodOptional<z.ZodString>;
216
+ claims_locales_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
217
+ ui_locales_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
218
+ claims_parameter_supported: z.ZodOptional<z.ZodBoolean>;
219
+ request_parameter_supported: z.ZodOptional<z.ZodBoolean>;
220
+ request_uri_parameter_supported: z.ZodOptional<z.ZodBoolean>;
221
+ require_request_uri_registration: z.ZodOptional<z.ZodBoolean>;
222
+ op_policy_uri: z.ZodOptional<z.ZodString>;
223
+ op_tos_uri: z.ZodOptional<z.ZodString>;
224
+ }, z.ZodTypeAny, "passthrough">>;
225
+ /**
226
+ * OpenID Connect Discovery metadata that may include OAuth 2.0 fields
227
+ * This schema represents the real-world scenario where OIDC providers
228
+ * return a mix of OpenID Connect and OAuth 2.0 metadata fields
229
+ */
230
+ export declare const OpenIdProviderDiscoveryMetadataSchema: z.ZodObject<z.objectUtil.extendShape<{
231
+ issuer: z.ZodString;
232
+ authorization_endpoint: z.ZodString;
233
+ token_endpoint: z.ZodString;
234
+ userinfo_endpoint: z.ZodOptional<z.ZodString>;
235
+ jwks_uri: z.ZodString;
236
+ registration_endpoint: z.ZodOptional<z.ZodString>;
237
+ scopes_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
238
+ response_types_supported: z.ZodArray<z.ZodString, "many">;
239
+ response_modes_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
240
+ grant_types_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
241
+ acr_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
242
+ subject_types_supported: z.ZodArray<z.ZodString, "many">;
243
+ id_token_signing_alg_values_supported: z.ZodArray<z.ZodString, "many">;
244
+ id_token_encryption_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
245
+ id_token_encryption_enc_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
246
+ userinfo_signing_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
247
+ userinfo_encryption_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
248
+ userinfo_encryption_enc_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
249
+ request_object_signing_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
250
+ request_object_encryption_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
251
+ request_object_encryption_enc_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
252
+ token_endpoint_auth_methods_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
253
+ token_endpoint_auth_signing_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
254
+ display_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
255
+ claim_types_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
256
+ claims_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
257
+ service_documentation: z.ZodOptional<z.ZodString>;
258
+ claims_locales_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
259
+ ui_locales_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
260
+ claims_parameter_supported: z.ZodOptional<z.ZodBoolean>;
261
+ request_parameter_supported: z.ZodOptional<z.ZodBoolean>;
262
+ request_uri_parameter_supported: z.ZodOptional<z.ZodBoolean>;
263
+ require_request_uri_registration: z.ZodOptional<z.ZodBoolean>;
264
+ op_policy_uri: z.ZodOptional<z.ZodString>;
265
+ op_tos_uri: z.ZodOptional<z.ZodString>;
266
+ }, Pick<{
267
+ issuer: z.ZodString;
268
+ authorization_endpoint: z.ZodString;
269
+ token_endpoint: z.ZodString;
270
+ registration_endpoint: z.ZodOptional<z.ZodString>;
271
+ scopes_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
272
+ response_types_supported: z.ZodArray<z.ZodString, "many">;
273
+ response_modes_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
274
+ grant_types_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
275
+ token_endpoint_auth_methods_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
276
+ token_endpoint_auth_signing_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
277
+ service_documentation: z.ZodOptional<z.ZodString>;
278
+ revocation_endpoint: z.ZodOptional<z.ZodString>;
279
+ revocation_endpoint_auth_methods_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
280
+ revocation_endpoint_auth_signing_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
281
+ introspection_endpoint: z.ZodOptional<z.ZodString>;
282
+ introspection_endpoint_auth_methods_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
283
+ introspection_endpoint_auth_signing_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
284
+ code_challenge_methods_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
285
+ }, "code_challenge_methods_supported">>, "passthrough", z.ZodTypeAny, z.objectOutputType<z.objectUtil.extendShape<{
286
+ issuer: z.ZodString;
287
+ authorization_endpoint: z.ZodString;
288
+ token_endpoint: z.ZodString;
289
+ userinfo_endpoint: z.ZodOptional<z.ZodString>;
290
+ jwks_uri: z.ZodString;
291
+ registration_endpoint: z.ZodOptional<z.ZodString>;
292
+ scopes_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
293
+ response_types_supported: z.ZodArray<z.ZodString, "many">;
294
+ response_modes_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
295
+ grant_types_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
296
+ acr_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
297
+ subject_types_supported: z.ZodArray<z.ZodString, "many">;
298
+ id_token_signing_alg_values_supported: z.ZodArray<z.ZodString, "many">;
299
+ id_token_encryption_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
300
+ id_token_encryption_enc_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
301
+ userinfo_signing_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
302
+ userinfo_encryption_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
303
+ userinfo_encryption_enc_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
304
+ request_object_signing_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
305
+ request_object_encryption_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
306
+ request_object_encryption_enc_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
307
+ token_endpoint_auth_methods_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
308
+ token_endpoint_auth_signing_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
309
+ display_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
310
+ claim_types_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
311
+ claims_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
312
+ service_documentation: z.ZodOptional<z.ZodString>;
313
+ claims_locales_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
314
+ ui_locales_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
315
+ claims_parameter_supported: z.ZodOptional<z.ZodBoolean>;
316
+ request_parameter_supported: z.ZodOptional<z.ZodBoolean>;
317
+ request_uri_parameter_supported: z.ZodOptional<z.ZodBoolean>;
318
+ require_request_uri_registration: z.ZodOptional<z.ZodBoolean>;
319
+ op_policy_uri: z.ZodOptional<z.ZodString>;
320
+ op_tos_uri: z.ZodOptional<z.ZodString>;
321
+ }, Pick<{
322
+ issuer: z.ZodString;
323
+ authorization_endpoint: z.ZodString;
324
+ token_endpoint: z.ZodString;
325
+ registration_endpoint: z.ZodOptional<z.ZodString>;
326
+ scopes_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
327
+ response_types_supported: z.ZodArray<z.ZodString, "many">;
328
+ response_modes_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
329
+ grant_types_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
330
+ token_endpoint_auth_methods_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
331
+ token_endpoint_auth_signing_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
332
+ service_documentation: z.ZodOptional<z.ZodString>;
333
+ revocation_endpoint: z.ZodOptional<z.ZodString>;
334
+ revocation_endpoint_auth_methods_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
335
+ revocation_endpoint_auth_signing_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
336
+ introspection_endpoint: z.ZodOptional<z.ZodString>;
337
+ introspection_endpoint_auth_methods_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
338
+ introspection_endpoint_auth_signing_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
339
+ code_challenge_methods_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
340
+ }, "code_challenge_methods_supported">>, z.ZodTypeAny, "passthrough">, z.objectInputType<z.objectUtil.extendShape<{
341
+ issuer: z.ZodString;
342
+ authorization_endpoint: z.ZodString;
343
+ token_endpoint: z.ZodString;
344
+ userinfo_endpoint: z.ZodOptional<z.ZodString>;
345
+ jwks_uri: z.ZodString;
346
+ registration_endpoint: z.ZodOptional<z.ZodString>;
347
+ scopes_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
348
+ response_types_supported: z.ZodArray<z.ZodString, "many">;
349
+ response_modes_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
350
+ grant_types_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
351
+ acr_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
352
+ subject_types_supported: z.ZodArray<z.ZodString, "many">;
353
+ id_token_signing_alg_values_supported: z.ZodArray<z.ZodString, "many">;
354
+ id_token_encryption_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
355
+ id_token_encryption_enc_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
356
+ userinfo_signing_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
357
+ userinfo_encryption_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
358
+ userinfo_encryption_enc_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
359
+ request_object_signing_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
360
+ request_object_encryption_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
361
+ request_object_encryption_enc_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
362
+ token_endpoint_auth_methods_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
363
+ token_endpoint_auth_signing_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
364
+ display_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
365
+ claim_types_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
366
+ claims_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
367
+ service_documentation: z.ZodOptional<z.ZodString>;
368
+ claims_locales_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
369
+ ui_locales_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
370
+ claims_parameter_supported: z.ZodOptional<z.ZodBoolean>;
371
+ request_parameter_supported: z.ZodOptional<z.ZodBoolean>;
372
+ request_uri_parameter_supported: z.ZodOptional<z.ZodBoolean>;
373
+ require_request_uri_registration: z.ZodOptional<z.ZodBoolean>;
374
+ op_policy_uri: z.ZodOptional<z.ZodString>;
375
+ op_tos_uri: z.ZodOptional<z.ZodString>;
376
+ }, Pick<{
377
+ issuer: z.ZodString;
378
+ authorization_endpoint: z.ZodString;
379
+ token_endpoint: z.ZodString;
380
+ registration_endpoint: z.ZodOptional<z.ZodString>;
381
+ scopes_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
382
+ response_types_supported: z.ZodArray<z.ZodString, "many">;
383
+ response_modes_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
384
+ grant_types_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
385
+ token_endpoint_auth_methods_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
386
+ token_endpoint_auth_signing_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
387
+ service_documentation: z.ZodOptional<z.ZodString>;
388
+ revocation_endpoint: z.ZodOptional<z.ZodString>;
389
+ revocation_endpoint_auth_methods_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
390
+ revocation_endpoint_auth_signing_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
391
+ introspection_endpoint: z.ZodOptional<z.ZodString>;
392
+ introspection_endpoint_auth_methods_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
393
+ introspection_endpoint_auth_signing_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
394
+ code_challenge_methods_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
395
+ }, "code_challenge_methods_supported">>, z.ZodTypeAny, "passthrough">>;
112
396
  /**
113
397
  * OAuth 2.1 token response
114
398
  */
115
399
  export declare const OAuthTokensSchema: z.ZodObject<{
116
400
  access_token: z.ZodString;
401
+ id_token: z.ZodOptional<z.ZodString>;
117
402
  token_type: z.ZodString;
118
403
  expires_in: z.ZodOptional<z.ZodNumber>;
119
404
  scope: z.ZodOptional<z.ZodString>;
@@ -121,12 +406,14 @@ export declare const OAuthTokensSchema: z.ZodObject<{
121
406
  }, "strip", z.ZodTypeAny, {
122
407
  access_token: string;
123
408
  token_type: string;
409
+ id_token?: string | undefined;
124
410
  expires_in?: number | undefined;
125
411
  scope?: string | undefined;
126
412
  refresh_token?: string | undefined;
127
413
  }, {
128
414
  access_token: string;
129
415
  token_type: string;
416
+ id_token?: string | undefined;
130
417
  expires_in?: number | undefined;
131
418
  scope?: string | undefined;
132
419
  refresh_token?: string | undefined;
@@ -316,6 +603,8 @@ export declare const OAuthTokenRevocationRequestSchema: z.ZodObject<{
316
603
  token_type_hint?: string | undefined;
317
604
  }>;
318
605
  export type OAuthMetadata = z.infer<typeof OAuthMetadataSchema>;
606
+ export type OpenIdProviderMetadata = z.infer<typeof OpenIdProviderMetadataSchema>;
607
+ export type OpenIdProviderDiscoveryMetadata = z.infer<typeof OpenIdProviderDiscoveryMetadataSchema>;
319
608
  export type OAuthTokens = z.infer<typeof OAuthTokensSchema>;
320
609
  export type OAuthErrorResponse = z.infer<typeof OAuthErrorResponseSchema>;
321
610
  export type OAuthClientMetadata = z.infer<typeof OAuthClientMetadataSchema>;
@@ -324,4 +613,5 @@ export type OAuthClientInformationFull = z.infer<typeof OAuthClientInformationFu
324
613
  export type OAuthClientRegistrationError = z.infer<typeof OAuthClientRegistrationErrorSchema>;
325
614
  export type OAuthTokenRevocationRequest = z.infer<typeof OAuthTokenRevocationRequestSchema>;
326
615
  export type OAuthProtectedResourceMetadata = z.infer<typeof OAuthProtectedResourceMetadataSchema>;
616
+ export type AuthorizationServerMetadata = OAuthMetadata | OpenIdProviderDiscoveryMetadata;
327
617
  //# sourceMappingURL=auth.d.ts.map
package/dist/esm/shared/auth.d.ts.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../src/shared/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;GAEG;AACH,eAAO,MAAM,oCAAoC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCAiBjC,CAAC;AAEjB;;GAEG;AACH,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCA6BhB,CAAC;AAEjB;;GAEG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;EAQpB,CAAC;AAEX;;GAEG;AACH,eAAO,MAAM,wBAAwB;;;;;;;;;;;;EAKjC,CAAC;AAEL;;GAEG;AACH,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAiB5B,CAAC;AAEX;;GAEG;AACH,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;EAK/B,CAAC;AAEX;;GAEG;AACH,eAAO,MAAM,gCAAgC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAAgE,CAAC;AAE9G;;GAEG;AACH,eAAO,MAAM,kCAAkC;;;;;;;;;EAGrC,CAAC;AAEX;;GAEG;AACH,eAAO,MAAM,iCAAiC;;;;;;;;;EAGpC,CAAC;AAGX,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAChE,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAC5D,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAC1E,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAC5E,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAClF,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC;AAC1F,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kCAAkC,CAAC,CAAC;AAC9F,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iCAAiC,CAAC,CAAC;AAC5F,MAAM,MAAM,8BAA8B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oCAAoC,CAAC,CAAC"}
1
+ {"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../src/shared/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;GAEG;AACH,eAAO,MAAM,oCAAoC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCAiBjC,CAAC;AAEjB;;GAEG;AACH,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCA6BhB,CAAC;AAEjB;;;GAGG;AACH,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCA4CzB,CAAC;AAEjB;;;;GAIG;AACH,eAAO,MAAM,qCAAqC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;sEAK/C,CAAC;AAEJ;;GAEG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;EASpB,CAAC;AAEX;;GAEG;AACH,eAAO,MAAM,wBAAwB;;;;;;;;;;;;EAKjC,CAAC;AAEL;;GAEG;AACH,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAiB5B,CAAC;AAEX;;GAEG;AACH,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;EAK/B,CAAC;AAEX;;GAEG;AACH,eAAO,MAAM,gCAAgC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAAgE,CAAC;AAE9G;;GAEG;AACH,eAAO,MAAM,kCAAkC;;;;;;;;;EAGrC,CAAC;AAEX;;GAEG;AACH,eAAO,MAAM,iCAAiC;;;;;;;;;EAGpC,CAAC;AAEX,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAChE,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAClF,MAAM,MAAM,+BAA+B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qCAAqC,CAAC,CAAC;AAEpG,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAC5D,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAC1E,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAC5E,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAClF,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC;AAC1F,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kCAAkC,CAAC,CAAC;AAC9F,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iCAAiC,CAAC,CAAC;AAC5F,MAAM,MAAM,8BAA8B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oCAAoC,CAAC,CAAC;AAGlG,MAAM,MAAM,2BAA2B,GAAG,aAAa,GAAG,+BAA+B,CAAC"}
package/dist/esm/shared/auth.js CHANGED
@@ -53,12 +53,70 @@ export const OAuthMetadataSchema = z
53
53
  code_challenge_methods_supported: z.array(z.string()).optional(),
54
54
  })
55
55
  .passthrough();
56
+ /**
57
+ * OpenID Connect Discovery 1.0 Provider Metadata
58
+ * see: https://openid.net/specs/openid-connect-discovery-1_0.html#ProviderMetadata
59
+ */
60
+ export const OpenIdProviderMetadataSchema = z
61
+ .object({
62
+ issuer: z.string(),
63
+ authorization_endpoint: z.string(),
64
+ token_endpoint: z.string(),
65
+ userinfo_endpoint: z.string().optional(),
66
+ jwks_uri: z.string(),
67
+ registration_endpoint: z.string().optional(),
68
+ scopes_supported: z.array(z.string()).optional(),
69
+ response_types_supported: z.array(z.string()),
70
+ response_modes_supported: z.array(z.string()).optional(),
71
+ grant_types_supported: z.array(z.string()).optional(),
72
+ acr_values_supported: z.array(z.string()).optional(),
73
+ subject_types_supported: z.array(z.string()),
74
+ id_token_signing_alg_values_supported: z.array(z.string()),
75
+ id_token_encryption_alg_values_supported: z.array(z.string()).optional(),
76
+ id_token_encryption_enc_values_supported: z.array(z.string()).optional(),
77
+ userinfo_signing_alg_values_supported: z.array(z.string()).optional(),
78
+ userinfo_encryption_alg_values_supported: z.array(z.string()).optional(),
79
+ userinfo_encryption_enc_values_supported: z.array(z.string()).optional(),
80
+ request_object_signing_alg_values_supported: z.array(z.string()).optional(),
81
+ request_object_encryption_alg_values_supported: z
82
+ .array(z.string())
83
+ .optional(),
84
+ request_object_encryption_enc_values_supported: z
85
+ .array(z.string())
86
+ .optional(),
87
+ token_endpoint_auth_methods_supported: z.array(z.string()).optional(),
88
+ token_endpoint_auth_signing_alg_values_supported: z
89
+ .array(z.string())
90
+ .optional(),
91
+ display_values_supported: z.array(z.string()).optional(),
92
+ claim_types_supported: z.array(z.string()).optional(),
93
+ claims_supported: z.array(z.string()).optional(),
94
+ service_documentation: z.string().optional(),
95
+ claims_locales_supported: z.array(z.string()).optional(),
96
+ ui_locales_supported: z.array(z.string()).optional(),
97
+ claims_parameter_supported: z.boolean().optional(),
98
+ request_parameter_supported: z.boolean().optional(),
99
+ request_uri_parameter_supported: z.boolean().optional(),
100
+ require_request_uri_registration: z.boolean().optional(),
101
+ op_policy_uri: z.string().optional(),
102
+ op_tos_uri: z.string().optional(),
103
+ })
104
+ .passthrough();
105
+ /**
106
+ * OpenID Connect Discovery metadata that may include OAuth 2.0 fields
107
+ * This schema represents the real-world scenario where OIDC providers
108
+ * return a mix of OpenID Connect and OAuth 2.0 metadata fields
109
+ */
110
+ export const OpenIdProviderDiscoveryMetadataSchema = OpenIdProviderMetadataSchema.merge(OAuthMetadataSchema.pick({
111
+ code_challenge_methods_supported: true,
112
+ }));
56
113
  /**
57
114
  * OAuth 2.1 token response
58
115
  */
59
116
  export const OAuthTokensSchema = z
60
117
  .object({
61
118
  access_token: z.string(),
119
+ id_token: z.string().optional(), // Optional for OAuth 2.1, but necessary in OpenID Connect
62
120
  token_type: z.string(),
63
121
  expires_in: z.number().optional(),
64
122
  scope: z.string().optional(),