@modelcontextprotocol/sdk 1.17.3 → 1.17.4
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/cjs/client/auth.js +1 -1
- package/dist/cjs/client/auth.js.map +1 -1
- package/dist/cjs/client/middleware.d.ts +169 -0
- package/dist/cjs/client/middleware.d.ts.map +1 -0
- package/dist/cjs/client/middleware.js +256 -0
- package/dist/cjs/client/middleware.js.map +1 -0
- package/dist/cjs/shared/auth.d.ts +89 -85
- package/dist/cjs/shared/auth.d.ts.map +1 -1
- package/dist/cjs/shared/auth.js +36 -19
- package/dist/cjs/shared/auth.js.map +1 -1
- package/dist/esm/client/auth.js +1 -1
- package/dist/esm/client/auth.js.map +1 -1
- package/dist/esm/client/middleware.d.ts +169 -0
- package/dist/esm/client/middleware.d.ts.map +1 -0
- package/dist/esm/client/middleware.js +249 -0
- package/dist/esm/client/middleware.js.map +1 -0
- package/dist/esm/shared/auth.d.ts +89 -85
- package/dist/esm/shared/auth.d.ts.map +1 -1
- package/dist/esm/shared/auth.js +35 -18
- package/dist/esm/shared/auth.js.map +1 -1
- package/package.json +1 -1
|
@@ -1,10 +1,14 @@
|
|
|
1
1
|
import { z } from "zod";
|
|
2
|
+
/**
|
|
3
|
+
* Reusable URL validation that disallows javascript: scheme
|
|
4
|
+
*/
|
|
5
|
+
export declare const SafeUrlSchema: z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>;
|
|
2
6
|
/**
|
|
3
7
|
* RFC 9728 OAuth Protected Resource Metadata
|
|
4
8
|
*/
|
|
5
9
|
export declare const OAuthProtectedResourceMetadataSchema: z.ZodObject<{
|
|
6
10
|
resource: z.ZodString;
|
|
7
|
-
authorization_servers: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
11
|
+
authorization_servers: z.ZodOptional<z.ZodArray<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>, "many">>;
|
|
8
12
|
jwks_uri: z.ZodOptional<z.ZodString>;
|
|
9
13
|
scopes_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
10
14
|
bearer_methods_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
@@ -19,7 +23,7 @@ export declare const OAuthProtectedResourceMetadataSchema: z.ZodObject<{
|
|
|
19
23
|
dpop_bound_access_tokens_required: z.ZodOptional<z.ZodBoolean>;
|
|
20
24
|
}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
|
|
21
25
|
resource: z.ZodString;
|
|
22
|
-
authorization_servers: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
26
|
+
authorization_servers: z.ZodOptional<z.ZodArray<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>, "many">>;
|
|
23
27
|
jwks_uri: z.ZodOptional<z.ZodString>;
|
|
24
28
|
scopes_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
25
29
|
bearer_methods_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
@@ -34,7 +38,7 @@ export declare const OAuthProtectedResourceMetadataSchema: z.ZodObject<{
|
|
|
34
38
|
dpop_bound_access_tokens_required: z.ZodOptional<z.ZodBoolean>;
|
|
35
39
|
}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
|
|
36
40
|
resource: z.ZodString;
|
|
37
|
-
authorization_servers: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
41
|
+
authorization_servers: z.ZodOptional<z.ZodArray<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>, "many">>;
|
|
38
42
|
jwks_uri: z.ZodOptional<z.ZodString>;
|
|
39
43
|
scopes_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
40
44
|
bearer_methods_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
@@ -53,17 +57,17 @@ export declare const OAuthProtectedResourceMetadataSchema: z.ZodObject<{
|
|
|
53
57
|
*/
|
|
54
58
|
export declare const OAuthMetadataSchema: z.ZodObject<{
|
|
55
59
|
issuer: z.ZodString;
|
|
56
|
-
authorization_endpoint: z.ZodString
|
|
57
|
-
token_endpoint: z.ZodString
|
|
58
|
-
registration_endpoint: z.ZodOptional<z.ZodString
|
|
60
|
+
authorization_endpoint: z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>;
|
|
61
|
+
token_endpoint: z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>;
|
|
62
|
+
registration_endpoint: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>>;
|
|
59
63
|
scopes_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
60
64
|
response_types_supported: z.ZodArray<z.ZodString, "many">;
|
|
61
65
|
response_modes_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
62
66
|
grant_types_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
63
67
|
token_endpoint_auth_methods_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
64
68
|
token_endpoint_auth_signing_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
65
|
-
service_documentation: z.ZodOptional<z.ZodString
|
|
66
|
-
revocation_endpoint: z.ZodOptional<z.ZodString
|
|
69
|
+
service_documentation: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>>;
|
|
70
|
+
revocation_endpoint: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>>;
|
|
67
71
|
revocation_endpoint_auth_methods_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
68
72
|
revocation_endpoint_auth_signing_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
69
73
|
introspection_endpoint: z.ZodOptional<z.ZodString>;
|
|
@@ -72,17 +76,17 @@ export declare const OAuthMetadataSchema: z.ZodObject<{
|
|
|
72
76
|
code_challenge_methods_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
73
77
|
}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
|
|
74
78
|
issuer: z.ZodString;
|
|
75
|
-
authorization_endpoint: z.ZodString
|
|
76
|
-
token_endpoint: z.ZodString
|
|
77
|
-
registration_endpoint: z.ZodOptional<z.ZodString
|
|
79
|
+
authorization_endpoint: z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>;
|
|
80
|
+
token_endpoint: z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>;
|
|
81
|
+
registration_endpoint: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>>;
|
|
78
82
|
scopes_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
79
83
|
response_types_supported: z.ZodArray<z.ZodString, "many">;
|
|
80
84
|
response_modes_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
81
85
|
grant_types_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
82
86
|
token_endpoint_auth_methods_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
83
87
|
token_endpoint_auth_signing_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
84
|
-
service_documentation: z.ZodOptional<z.ZodString
|
|
85
|
-
revocation_endpoint: z.ZodOptional<z.ZodString
|
|
88
|
+
service_documentation: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>>;
|
|
89
|
+
revocation_endpoint: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>>;
|
|
86
90
|
revocation_endpoint_auth_methods_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
87
91
|
revocation_endpoint_auth_signing_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
88
92
|
introspection_endpoint: z.ZodOptional<z.ZodString>;
|
|
@@ -91,17 +95,17 @@ export declare const OAuthMetadataSchema: z.ZodObject<{
|
|
|
91
95
|
code_challenge_methods_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
92
96
|
}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
|
|
93
97
|
issuer: z.ZodString;
|
|
94
|
-
authorization_endpoint: z.ZodString
|
|
95
|
-
token_endpoint: z.ZodString
|
|
96
|
-
registration_endpoint: z.ZodOptional<z.ZodString
|
|
98
|
+
authorization_endpoint: z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>;
|
|
99
|
+
token_endpoint: z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>;
|
|
100
|
+
registration_endpoint: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>>;
|
|
97
101
|
scopes_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
98
102
|
response_types_supported: z.ZodArray<z.ZodString, "many">;
|
|
99
103
|
response_modes_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
100
104
|
grant_types_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
101
105
|
token_endpoint_auth_methods_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
102
106
|
token_endpoint_auth_signing_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
103
|
-
service_documentation: z.ZodOptional<z.ZodString
|
|
104
|
-
revocation_endpoint: z.ZodOptional<z.ZodString
|
|
107
|
+
service_documentation: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>>;
|
|
108
|
+
revocation_endpoint: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>>;
|
|
105
109
|
revocation_endpoint_auth_methods_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
106
110
|
revocation_endpoint_auth_signing_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
107
111
|
introspection_endpoint: z.ZodOptional<z.ZodString>;
|
|
@@ -115,11 +119,11 @@ export declare const OAuthMetadataSchema: z.ZodObject<{
|
|
|
115
119
|
*/
|
|
116
120
|
export declare const OpenIdProviderMetadataSchema: z.ZodObject<{
|
|
117
121
|
issuer: z.ZodString;
|
|
118
|
-
authorization_endpoint: z.ZodString
|
|
119
|
-
token_endpoint: z.ZodString
|
|
120
|
-
userinfo_endpoint: z.ZodOptional<z.ZodString
|
|
121
|
-
jwks_uri: z.ZodString
|
|
122
|
-
registration_endpoint: z.ZodOptional<z.ZodString
|
|
122
|
+
authorization_endpoint: z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>;
|
|
123
|
+
token_endpoint: z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>;
|
|
124
|
+
userinfo_endpoint: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>>;
|
|
125
|
+
jwks_uri: z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>;
|
|
126
|
+
registration_endpoint: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>>;
|
|
123
127
|
scopes_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
124
128
|
response_types_supported: z.ZodArray<z.ZodString, "many">;
|
|
125
129
|
response_modes_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
@@ -147,15 +151,15 @@ export declare const OpenIdProviderMetadataSchema: z.ZodObject<{
|
|
|
147
151
|
request_parameter_supported: z.ZodOptional<z.ZodBoolean>;
|
|
148
152
|
request_uri_parameter_supported: z.ZodOptional<z.ZodBoolean>;
|
|
149
153
|
require_request_uri_registration: z.ZodOptional<z.ZodBoolean>;
|
|
150
|
-
op_policy_uri: z.ZodOptional<z.ZodString
|
|
151
|
-
op_tos_uri: z.ZodOptional<z.ZodString
|
|
154
|
+
op_policy_uri: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>>;
|
|
155
|
+
op_tos_uri: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>>;
|
|
152
156
|
}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
|
|
153
157
|
issuer: z.ZodString;
|
|
154
|
-
authorization_endpoint: z.ZodString
|
|
155
|
-
token_endpoint: z.ZodString
|
|
156
|
-
userinfo_endpoint: z.ZodOptional<z.ZodString
|
|
157
|
-
jwks_uri: z.ZodString
|
|
158
|
-
registration_endpoint: z.ZodOptional<z.ZodString
|
|
158
|
+
authorization_endpoint: z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>;
|
|
159
|
+
token_endpoint: z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>;
|
|
160
|
+
userinfo_endpoint: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>>;
|
|
161
|
+
jwks_uri: z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>;
|
|
162
|
+
registration_endpoint: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>>;
|
|
159
163
|
scopes_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
160
164
|
response_types_supported: z.ZodArray<z.ZodString, "many">;
|
|
161
165
|
response_modes_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
@@ -183,15 +187,15 @@ export declare const OpenIdProviderMetadataSchema: z.ZodObject<{
|
|
|
183
187
|
request_parameter_supported: z.ZodOptional<z.ZodBoolean>;
|
|
184
188
|
request_uri_parameter_supported: z.ZodOptional<z.ZodBoolean>;
|
|
185
189
|
require_request_uri_registration: z.ZodOptional<z.ZodBoolean>;
|
|
186
|
-
op_policy_uri: z.ZodOptional<z.ZodString
|
|
187
|
-
op_tos_uri: z.ZodOptional<z.ZodString
|
|
190
|
+
op_policy_uri: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>>;
|
|
191
|
+
op_tos_uri: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>>;
|
|
188
192
|
}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
|
|
189
193
|
issuer: z.ZodString;
|
|
190
|
-
authorization_endpoint: z.ZodString
|
|
191
|
-
token_endpoint: z.ZodString
|
|
192
|
-
userinfo_endpoint: z.ZodOptional<z.ZodString
|
|
193
|
-
jwks_uri: z.ZodString
|
|
194
|
-
registration_endpoint: z.ZodOptional<z.ZodString
|
|
194
|
+
authorization_endpoint: z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>;
|
|
195
|
+
token_endpoint: z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>;
|
|
196
|
+
userinfo_endpoint: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>>;
|
|
197
|
+
jwks_uri: z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>;
|
|
198
|
+
registration_endpoint: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>>;
|
|
195
199
|
scopes_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
196
200
|
response_types_supported: z.ZodArray<z.ZodString, "many">;
|
|
197
201
|
response_modes_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
@@ -219,8 +223,8 @@ export declare const OpenIdProviderMetadataSchema: z.ZodObject<{
|
|
|
219
223
|
request_parameter_supported: z.ZodOptional<z.ZodBoolean>;
|
|
220
224
|
request_uri_parameter_supported: z.ZodOptional<z.ZodBoolean>;
|
|
221
225
|
require_request_uri_registration: z.ZodOptional<z.ZodBoolean>;
|
|
222
|
-
op_policy_uri: z.ZodOptional<z.ZodString
|
|
223
|
-
op_tos_uri: z.ZodOptional<z.ZodString
|
|
226
|
+
op_policy_uri: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>>;
|
|
227
|
+
op_tos_uri: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>>;
|
|
224
228
|
}, z.ZodTypeAny, "passthrough">>;
|
|
225
229
|
/**
|
|
226
230
|
* OpenID Connect Discovery metadata that may include OAuth 2.0 fields
|
|
@@ -229,11 +233,11 @@ export declare const OpenIdProviderMetadataSchema: z.ZodObject<{
|
|
|
229
233
|
*/
|
|
230
234
|
export declare const OpenIdProviderDiscoveryMetadataSchema: z.ZodObject<z.objectUtil.extendShape<{
|
|
231
235
|
issuer: z.ZodString;
|
|
232
|
-
authorization_endpoint: z.ZodString
|
|
233
|
-
token_endpoint: z.ZodString
|
|
234
|
-
userinfo_endpoint: z.ZodOptional<z.ZodString
|
|
235
|
-
jwks_uri: z.ZodString
|
|
236
|
-
registration_endpoint: z.ZodOptional<z.ZodString
|
|
236
|
+
authorization_endpoint: z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>;
|
|
237
|
+
token_endpoint: z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>;
|
|
238
|
+
userinfo_endpoint: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>>;
|
|
239
|
+
jwks_uri: z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>;
|
|
240
|
+
registration_endpoint: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>>;
|
|
237
241
|
scopes_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
238
242
|
response_types_supported: z.ZodArray<z.ZodString, "many">;
|
|
239
243
|
response_modes_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
@@ -261,21 +265,21 @@ export declare const OpenIdProviderDiscoveryMetadataSchema: z.ZodObject<z.object
|
|
|
261
265
|
request_parameter_supported: z.ZodOptional<z.ZodBoolean>;
|
|
262
266
|
request_uri_parameter_supported: z.ZodOptional<z.ZodBoolean>;
|
|
263
267
|
require_request_uri_registration: z.ZodOptional<z.ZodBoolean>;
|
|
264
|
-
op_policy_uri: z.ZodOptional<z.ZodString
|
|
265
|
-
op_tos_uri: z.ZodOptional<z.ZodString
|
|
268
|
+
op_policy_uri: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>>;
|
|
269
|
+
op_tos_uri: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>>;
|
|
266
270
|
}, Pick<{
|
|
267
271
|
issuer: z.ZodString;
|
|
268
|
-
authorization_endpoint: z.ZodString
|
|
269
|
-
token_endpoint: z.ZodString
|
|
270
|
-
registration_endpoint: z.ZodOptional<z.ZodString
|
|
272
|
+
authorization_endpoint: z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>;
|
|
273
|
+
token_endpoint: z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>;
|
|
274
|
+
registration_endpoint: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>>;
|
|
271
275
|
scopes_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
272
276
|
response_types_supported: z.ZodArray<z.ZodString, "many">;
|
|
273
277
|
response_modes_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
274
278
|
grant_types_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
275
279
|
token_endpoint_auth_methods_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
276
280
|
token_endpoint_auth_signing_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
277
|
-
service_documentation: z.ZodOptional<z.ZodString
|
|
278
|
-
revocation_endpoint: z.ZodOptional<z.ZodString
|
|
281
|
+
service_documentation: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>>;
|
|
282
|
+
revocation_endpoint: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>>;
|
|
279
283
|
revocation_endpoint_auth_methods_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
280
284
|
revocation_endpoint_auth_signing_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
281
285
|
introspection_endpoint: z.ZodOptional<z.ZodString>;
|
|
@@ -284,11 +288,11 @@ export declare const OpenIdProviderDiscoveryMetadataSchema: z.ZodObject<z.object
|
|
|
284
288
|
code_challenge_methods_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
285
289
|
}, "code_challenge_methods_supported">>, "passthrough", z.ZodTypeAny, z.objectOutputType<z.objectUtil.extendShape<{
|
|
286
290
|
issuer: z.ZodString;
|
|
287
|
-
authorization_endpoint: z.ZodString
|
|
288
|
-
token_endpoint: z.ZodString
|
|
289
|
-
userinfo_endpoint: z.ZodOptional<z.ZodString
|
|
290
|
-
jwks_uri: z.ZodString
|
|
291
|
-
registration_endpoint: z.ZodOptional<z.ZodString
|
|
291
|
+
authorization_endpoint: z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>;
|
|
292
|
+
token_endpoint: z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>;
|
|
293
|
+
userinfo_endpoint: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>>;
|
|
294
|
+
jwks_uri: z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>;
|
|
295
|
+
registration_endpoint: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>>;
|
|
292
296
|
scopes_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
293
297
|
response_types_supported: z.ZodArray<z.ZodString, "many">;
|
|
294
298
|
response_modes_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
@@ -316,21 +320,21 @@ export declare const OpenIdProviderDiscoveryMetadataSchema: z.ZodObject<z.object
|
|
|
316
320
|
request_parameter_supported: z.ZodOptional<z.ZodBoolean>;
|
|
317
321
|
request_uri_parameter_supported: z.ZodOptional<z.ZodBoolean>;
|
|
318
322
|
require_request_uri_registration: z.ZodOptional<z.ZodBoolean>;
|
|
319
|
-
op_policy_uri: z.ZodOptional<z.ZodString
|
|
320
|
-
op_tos_uri: z.ZodOptional<z.ZodString
|
|
323
|
+
op_policy_uri: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>>;
|
|
324
|
+
op_tos_uri: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>>;
|
|
321
325
|
}, Pick<{
|
|
322
326
|
issuer: z.ZodString;
|
|
323
|
-
authorization_endpoint: z.ZodString
|
|
324
|
-
token_endpoint: z.ZodString
|
|
325
|
-
registration_endpoint: z.ZodOptional<z.ZodString
|
|
327
|
+
authorization_endpoint: z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>;
|
|
328
|
+
token_endpoint: z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>;
|
|
329
|
+
registration_endpoint: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>>;
|
|
326
330
|
scopes_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
327
331
|
response_types_supported: z.ZodArray<z.ZodString, "many">;
|
|
328
332
|
response_modes_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
329
333
|
grant_types_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
330
334
|
token_endpoint_auth_methods_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
331
335
|
token_endpoint_auth_signing_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
332
|
-
service_documentation: z.ZodOptional<z.ZodString
|
|
333
|
-
revocation_endpoint: z.ZodOptional<z.ZodString
|
|
336
|
+
service_documentation: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>>;
|
|
337
|
+
revocation_endpoint: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>>;
|
|
334
338
|
revocation_endpoint_auth_methods_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
335
339
|
revocation_endpoint_auth_signing_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
336
340
|
introspection_endpoint: z.ZodOptional<z.ZodString>;
|
|
@@ -339,11 +343,11 @@ export declare const OpenIdProviderDiscoveryMetadataSchema: z.ZodObject<z.object
|
|
|
339
343
|
code_challenge_methods_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
340
344
|
}, "code_challenge_methods_supported">>, z.ZodTypeAny, "passthrough">, z.objectInputType<z.objectUtil.extendShape<{
|
|
341
345
|
issuer: z.ZodString;
|
|
342
|
-
authorization_endpoint: z.ZodString
|
|
343
|
-
token_endpoint: z.ZodString
|
|
344
|
-
userinfo_endpoint: z.ZodOptional<z.ZodString
|
|
345
|
-
jwks_uri: z.ZodString
|
|
346
|
-
registration_endpoint: z.ZodOptional<z.ZodString
|
|
346
|
+
authorization_endpoint: z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>;
|
|
347
|
+
token_endpoint: z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>;
|
|
348
|
+
userinfo_endpoint: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>>;
|
|
349
|
+
jwks_uri: z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>;
|
|
350
|
+
registration_endpoint: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>>;
|
|
347
351
|
scopes_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
348
352
|
response_types_supported: z.ZodArray<z.ZodString, "many">;
|
|
349
353
|
response_modes_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
@@ -371,21 +375,21 @@ export declare const OpenIdProviderDiscoveryMetadataSchema: z.ZodObject<z.object
|
|
|
371
375
|
request_parameter_supported: z.ZodOptional<z.ZodBoolean>;
|
|
372
376
|
request_uri_parameter_supported: z.ZodOptional<z.ZodBoolean>;
|
|
373
377
|
require_request_uri_registration: z.ZodOptional<z.ZodBoolean>;
|
|
374
|
-
op_policy_uri: z.ZodOptional<z.ZodString
|
|
375
|
-
op_tos_uri: z.ZodOptional<z.ZodString
|
|
378
|
+
op_policy_uri: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>>;
|
|
379
|
+
op_tos_uri: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>>;
|
|
376
380
|
}, Pick<{
|
|
377
381
|
issuer: z.ZodString;
|
|
378
|
-
authorization_endpoint: z.ZodString
|
|
379
|
-
token_endpoint: z.ZodString
|
|
380
|
-
registration_endpoint: z.ZodOptional<z.ZodString
|
|
382
|
+
authorization_endpoint: z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>;
|
|
383
|
+
token_endpoint: z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>;
|
|
384
|
+
registration_endpoint: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>>;
|
|
381
385
|
scopes_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
382
386
|
response_types_supported: z.ZodArray<z.ZodString, "many">;
|
|
383
387
|
response_modes_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
384
388
|
grant_types_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
385
389
|
token_endpoint_auth_methods_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
386
390
|
token_endpoint_auth_signing_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
387
|
-
service_documentation: z.ZodOptional<z.ZodString
|
|
388
|
-
revocation_endpoint: z.ZodOptional<z.ZodString
|
|
391
|
+
service_documentation: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>>;
|
|
392
|
+
revocation_endpoint: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>>;
|
|
389
393
|
revocation_endpoint_auth_methods_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
390
394
|
revocation_endpoint_auth_signing_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
391
395
|
introspection_endpoint: z.ZodOptional<z.ZodString>;
|
|
@@ -438,18 +442,18 @@ export declare const OAuthErrorResponseSchema: z.ZodObject<{
|
|
|
438
442
|
* RFC 7591 OAuth 2.0 Dynamic Client Registration metadata
|
|
439
443
|
*/
|
|
440
444
|
export declare const OAuthClientMetadataSchema: z.ZodObject<{
|
|
441
|
-
redirect_uris: z.ZodEffects<z.
|
|
445
|
+
redirect_uris: z.ZodArray<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>, "many">;
|
|
442
446
|
token_endpoint_auth_method: z.ZodOptional<z.ZodString>;
|
|
443
447
|
grant_types: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
444
448
|
response_types: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
445
449
|
client_name: z.ZodOptional<z.ZodString>;
|
|
446
|
-
client_uri: z.ZodOptional<z.ZodString
|
|
447
|
-
logo_uri: z.ZodOptional<z.ZodString
|
|
450
|
+
client_uri: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>>;
|
|
451
|
+
logo_uri: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>>;
|
|
448
452
|
scope: z.ZodOptional<z.ZodString>;
|
|
449
453
|
contacts: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
450
|
-
tos_uri: z.ZodOptional<z.ZodString
|
|
454
|
+
tos_uri: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>>;
|
|
451
455
|
policy_uri: z.ZodOptional<z.ZodString>;
|
|
452
|
-
jwks_uri: z.ZodOptional<z.ZodString
|
|
456
|
+
jwks_uri: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>>;
|
|
453
457
|
jwks: z.ZodOptional<z.ZodAny>;
|
|
454
458
|
software_id: z.ZodOptional<z.ZodString>;
|
|
455
459
|
software_version: z.ZodOptional<z.ZodString>;
|
|
@@ -512,18 +516,18 @@ export declare const OAuthClientInformationSchema: z.ZodObject<{
|
|
|
512
516
|
* RFC 7591 OAuth 2.0 Dynamic Client Registration full response (client information plus metadata)
|
|
513
517
|
*/
|
|
514
518
|
export declare const OAuthClientInformationFullSchema: z.ZodObject<z.objectUtil.extendShape<{
|
|
515
|
-
redirect_uris: z.ZodEffects<z.
|
|
519
|
+
redirect_uris: z.ZodArray<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>, "many">;
|
|
516
520
|
token_endpoint_auth_method: z.ZodOptional<z.ZodString>;
|
|
517
521
|
grant_types: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
518
522
|
response_types: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
519
523
|
client_name: z.ZodOptional<z.ZodString>;
|
|
520
|
-
client_uri: z.ZodOptional<z.ZodString
|
|
521
|
-
logo_uri: z.ZodOptional<z.ZodString
|
|
524
|
+
client_uri: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>>;
|
|
525
|
+
logo_uri: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>>;
|
|
522
526
|
scope: z.ZodOptional<z.ZodString>;
|
|
523
527
|
contacts: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
524
|
-
tos_uri: z.ZodOptional<z.ZodString
|
|
528
|
+
tos_uri: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>>;
|
|
525
529
|
policy_uri: z.ZodOptional<z.ZodString>;
|
|
526
|
-
jwks_uri: z.ZodOptional<z.ZodString
|
|
530
|
+
jwks_uri: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>>;
|
|
527
531
|
jwks: z.ZodOptional<z.ZodAny>;
|
|
528
532
|
software_id: z.ZodOptional<z.ZodString>;
|
|
529
533
|
software_version: z.ZodOptional<z.ZodString>;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../src/shared/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;GAEG;AACH,eAAO,MAAM,oCAAoC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCAiBjC,CAAC;AAEjB;;GAEG;AACH,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCA6BhB,CAAC;AAEjB;;;GAGG;AACH,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCA4CzB,CAAC;AAEjB;;;;GAIG;AACH,eAAO,MAAM,qCAAqC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;sEAK/C,CAAC;AAEJ;;GAEG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;EASpB,CAAC;AAEX;;GAEG;AACH,eAAO,MAAM,wBAAwB;;;;;;;;;;;;EAKjC,CAAC;AAEL;;GAEG;AACH,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAiB5B,CAAC;AAEX;;GAEG;AACH,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;EAK/B,CAAC;AAEX;;GAEG;AACH,eAAO,MAAM,gCAAgC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAAgE,CAAC;AAE9G;;GAEG;AACH,eAAO,MAAM,kCAAkC;;;;;;;;;EAGrC,CAAC;AAEX;;GAEG;AACH,eAAO,MAAM,iCAAiC;;;;;;;;;EAGpC,CAAC;AAEX,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAChE,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAClF,MAAM,MAAM,+BAA+B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qCAAqC,CAAC,CAAC;AAEpG,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAC5D,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAC1E,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAC5E,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAClF,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC;AAC1F,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kCAAkC,CAAC,CAAC;AAC9F,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iCAAiC,CAAC,CAAC;AAC5F,MAAM,MAAM,8BAA8B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oCAAoC,CAAC,CAAC;AAGlG,MAAM,MAAM,2BAA2B,GAAG,aAAa,GAAG,+BAA+B,CAAC"}
|
|
1
|
+
{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../src/shared/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;GAEG;AACH,eAAO,MAAM,aAAa,yEAiBzB,CAAC;AAGF;;GAEG;AACH,eAAO,MAAM,oCAAoC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCAiBjC,CAAC;AAEjB;;GAEG;AACH,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCA6BhB,CAAC;AAEjB;;;GAGG;AACH,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCA4CzB,CAAC;AAEjB;;;;GAIG;AACH,eAAO,MAAM,qCAAqC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;sEAK/C,CAAC;AAEJ;;GAEG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;EASpB,CAAC;AAEX;;GAEG;AACH,eAAO,MAAM,wBAAwB;;;;;;;;;;;;EAKjC,CAAC;AAEL;;GAEG;AACH,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAiB5B,CAAC;AAEX;;GAEG;AACH,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;EAK/B,CAAC;AAEX;;GAEG;AACH,eAAO,MAAM,gCAAgC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAAgE,CAAC;AAE9G;;GAEG;AACH,eAAO,MAAM,kCAAkC;;;;;;;;;EAGrC,CAAC;AAEX;;GAEG;AACH,eAAO,MAAM,iCAAiC;;;;;;;;;EAGpC,CAAC;AAEX,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAChE,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAClF,MAAM,MAAM,+BAA+B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qCAAqC,CAAC,CAAC;AAEpG,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAC5D,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAC1E,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAC5E,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAClF,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC;AAC1F,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kCAAkC,CAAC,CAAC;AAC9F,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iCAAiC,CAAC,CAAC;AAC5F,MAAM,MAAM,8BAA8B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oCAAoC,CAAC,CAAC;AAGlG,MAAM,MAAM,2BAA2B,GAAG,aAAa,GAAG,+BAA+B,CAAC"}
|
package/dist/esm/shared/auth.js
CHANGED
|
@@ -1,11 +1,28 @@
|
|
|
1
1
|
import { z } from "zod";
|
|
2
|
+
/**
|
|
3
|
+
* Reusable URL validation that disallows javascript: scheme
|
|
4
|
+
*/
|
|
5
|
+
export const SafeUrlSchema = z.string().url()
|
|
6
|
+
.superRefine((val, ctx) => {
|
|
7
|
+
if (!URL.canParse(val)) {
|
|
8
|
+
ctx.addIssue({
|
|
9
|
+
code: z.ZodIssueCode.custom,
|
|
10
|
+
message: "URL must be parseable",
|
|
11
|
+
fatal: true,
|
|
12
|
+
});
|
|
13
|
+
return z.NEVER;
|
|
14
|
+
}
|
|
15
|
+
}).refine((url) => {
|
|
16
|
+
const u = new URL(url);
|
|
17
|
+
return u.protocol !== 'javascript:' && u.protocol !== 'data:' && u.protocol !== 'vbscript:';
|
|
18
|
+
}, { message: "URL cannot use javascript:, data:, or vbscript: scheme" });
|
|
2
19
|
/**
|
|
3
20
|
* RFC 9728 OAuth Protected Resource Metadata
|
|
4
21
|
*/
|
|
5
22
|
export const OAuthProtectedResourceMetadataSchema = z
|
|
6
23
|
.object({
|
|
7
24
|
resource: z.string().url(),
|
|
8
|
-
authorization_servers: z.array(
|
|
25
|
+
authorization_servers: z.array(SafeUrlSchema).optional(),
|
|
9
26
|
jwks_uri: z.string().url().optional(),
|
|
10
27
|
scopes_supported: z.array(z.string()).optional(),
|
|
11
28
|
bearer_methods_supported: z.array(z.string()).optional(),
|
|
@@ -26,9 +43,9 @@ export const OAuthProtectedResourceMetadataSchema = z
|
|
|
26
43
|
export const OAuthMetadataSchema = z
|
|
27
44
|
.object({
|
|
28
45
|
issuer: z.string(),
|
|
29
|
-
authorization_endpoint:
|
|
30
|
-
token_endpoint:
|
|
31
|
-
registration_endpoint:
|
|
46
|
+
authorization_endpoint: SafeUrlSchema,
|
|
47
|
+
token_endpoint: SafeUrlSchema,
|
|
48
|
+
registration_endpoint: SafeUrlSchema.optional(),
|
|
32
49
|
scopes_supported: z.array(z.string()).optional(),
|
|
33
50
|
response_types_supported: z.array(z.string()),
|
|
34
51
|
response_modes_supported: z.array(z.string()).optional(),
|
|
@@ -37,8 +54,8 @@ export const OAuthMetadataSchema = z
|
|
|
37
54
|
token_endpoint_auth_signing_alg_values_supported: z
|
|
38
55
|
.array(z.string())
|
|
39
56
|
.optional(),
|
|
40
|
-
service_documentation:
|
|
41
|
-
revocation_endpoint:
|
|
57
|
+
service_documentation: SafeUrlSchema.optional(),
|
|
58
|
+
revocation_endpoint: SafeUrlSchema.optional(),
|
|
42
59
|
revocation_endpoint_auth_methods_supported: z.array(z.string()).optional(),
|
|
43
60
|
revocation_endpoint_auth_signing_alg_values_supported: z
|
|
44
61
|
.array(z.string())
|
|
@@ -60,11 +77,11 @@ export const OAuthMetadataSchema = z
|
|
|
60
77
|
export const OpenIdProviderMetadataSchema = z
|
|
61
78
|
.object({
|
|
62
79
|
issuer: z.string(),
|
|
63
|
-
authorization_endpoint:
|
|
64
|
-
token_endpoint:
|
|
65
|
-
userinfo_endpoint:
|
|
66
|
-
jwks_uri:
|
|
67
|
-
registration_endpoint:
|
|
80
|
+
authorization_endpoint: SafeUrlSchema,
|
|
81
|
+
token_endpoint: SafeUrlSchema,
|
|
82
|
+
userinfo_endpoint: SafeUrlSchema.optional(),
|
|
83
|
+
jwks_uri: SafeUrlSchema,
|
|
84
|
+
registration_endpoint: SafeUrlSchema.optional(),
|
|
68
85
|
scopes_supported: z.array(z.string()).optional(),
|
|
69
86
|
response_types_supported: z.array(z.string()),
|
|
70
87
|
response_modes_supported: z.array(z.string()).optional(),
|
|
@@ -98,8 +115,8 @@ export const OpenIdProviderMetadataSchema = z
|
|
|
98
115
|
request_parameter_supported: z.boolean().optional(),
|
|
99
116
|
request_uri_parameter_supported: z.boolean().optional(),
|
|
100
117
|
require_request_uri_registration: z.boolean().optional(),
|
|
101
|
-
op_policy_uri:
|
|
102
|
-
op_tos_uri:
|
|
118
|
+
op_policy_uri: SafeUrlSchema.optional(),
|
|
119
|
+
op_tos_uri: SafeUrlSchema.optional(),
|
|
103
120
|
})
|
|
104
121
|
.passthrough();
|
|
105
122
|
/**
|
|
@@ -136,18 +153,18 @@ export const OAuthErrorResponseSchema = z
|
|
|
136
153
|
* RFC 7591 OAuth 2.0 Dynamic Client Registration metadata
|
|
137
154
|
*/
|
|
138
155
|
export const OAuthClientMetadataSchema = z.object({
|
|
139
|
-
redirect_uris: z.array(
|
|
156
|
+
redirect_uris: z.array(SafeUrlSchema),
|
|
140
157
|
token_endpoint_auth_method: z.string().optional(),
|
|
141
158
|
grant_types: z.array(z.string()).optional(),
|
|
142
159
|
response_types: z.array(z.string()).optional(),
|
|
143
160
|
client_name: z.string().optional(),
|
|
144
|
-
client_uri:
|
|
145
|
-
logo_uri:
|
|
161
|
+
client_uri: SafeUrlSchema.optional(),
|
|
162
|
+
logo_uri: SafeUrlSchema.optional(),
|
|
146
163
|
scope: z.string().optional(),
|
|
147
164
|
contacts: z.array(z.string()).optional(),
|
|
148
|
-
tos_uri:
|
|
165
|
+
tos_uri: SafeUrlSchema.optional(),
|
|
149
166
|
policy_uri: z.string().optional(),
|
|
150
|
-
jwks_uri:
|
|
167
|
+
jwks_uri: SafeUrlSchema.optional(),
|
|
151
168
|
jwks: z.any().optional(),
|
|
152
169
|
software_id: z.string().optional(),
|
|
153
170
|
software_version: z.string().optional(),
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../src/shared/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;GAEG;AACH,MAAM,CAAC,MAAM,
|
|
1
|
+
{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../src/shared/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;GAEG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;KAC1C,WAAW,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;IACxB,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,OAAO,EAAE,uBAAuB;YAChC,KAAK,EAAE,IAAI;SACZ,CAAC,CAAC;QAEH,OAAO,CAAC,CAAC,KAAK,CAAC;IACjB,CAAC;AACH,CAAC,CAAC,CAAC,MAAM,CACP,CAAC,GAAG,EAAE,EAAE;IACN,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACvB,OAAO,CAAC,CAAC,QAAQ,KAAK,aAAa,IAAI,CAAC,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,CAAC,QAAQ,KAAK,WAAW,CAAC;AAC9F,CAAC,EACD,EAAE,OAAO,EAAE,wDAAwD,EAAE,CACxE,CAAC;AAGF;;GAEG;AACH,MAAM,CAAC,MAAM,oCAAoC,GAAG,CAAC;KAClD,MAAM,CAAC;IACN,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IAC1B,qBAAqB,EAAE,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,QAAQ,EAAE;IACxD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACrC,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAChD,wBAAwB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACxD,qCAAqC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACrE,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACpC,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7C,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAChD,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC7C,0CAA0C,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAClE,qCAAqC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACrE,iCAAiC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACjE,iCAAiC,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAC1D,CAAC;KACD,WAAW,EAAE,CAAC;AAEjB;;GAEG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC;KACjC,MAAM,CAAC;IACN,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,sBAAsB,EAAE,aAAa;IACrC,cAAc,EAAE,aAAa;IAC7B,qBAAqB,EAAE,aAAa,CAAC,QAAQ,EAAE;IAC/C,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAChD,wBAAwB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC7C,wBAAwB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACxD,qBAAqB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACrD,qCAAqC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACrE,gDAAgD,EAAE,CAAC;SAChD,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjB,QAAQ,EAAE;IACb,qBAAqB,EAAE,aAAa,CAAC,QAAQ,EAAE;IAC/C,mBAAmB,EAAE,aAAa,CAAC,QAAQ,EAAE;IAC7C,0CAA0C,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC1E,qDAAqD,EAAE,CAAC;SACrD,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjB,QAAQ,EAAE;IACb,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7C,6CAA6C,EAAE,CAAC;SAC7C,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjB,QAAQ,EAAE;IACb,wDAAwD,EAAE,CAAC;SACxD,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjB,QAAQ,EAAE;IACb,gCAAgC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;CACjE,CAAC;KACD,WAAW,EAAE,CAAC;AAEjB;;;GAGG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC;KAC1C,MAAM,CAAC;IACN,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,sBAAsB,EAAE,aAAa;IACrC,cAAc,EAAE,aAAa;IAC7B,iBAAiB,EAAE,aAAa,CAAC,QAAQ,EAAE;IAC3C,QAAQ,EAAE,aAAa;IACvB,qBAAqB,EAAE,aAAa,CAAC,QAAQ,EAAE;IAC/C,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAChD,wBAAwB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC7C,wBAAwB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACxD,qBAAqB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACrD,oBAAoB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACpD,uBAAuB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC5C,qCAAqC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC1D,wCAAwC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACxE,wCAAwC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACxE,qCAAqC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACrE,wCAAwC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACxE,wCAAwC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACxE,2CAA2C,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC3E,8CAA8C,EAAE,CAAC;SAC9C,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjB,QAAQ,EAAE;IACb,8CAA8C,EAAE,CAAC;SAC9C,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjB,QAAQ,EAAE;IACb,qCAAqC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACrE,gDAAgD,EAAE,CAAC;SAChD,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjB,QAAQ,EAAE;IACb,wBAAwB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACxD,qBAAqB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACrD,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAChD,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5C,wBAAwB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACxD,oBAAoB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACpD,0BAA0B,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAClD,2BAA2B,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACnD,+BAA+B,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACvD,gCAAgC,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACxD,aAAa,EAAE,aAAa,CAAC,QAAQ,EAAE;IACvC,UAAU,EAAE,aAAa,CAAC,QAAQ,EAAE;CACrC,CAAC;KACD,WAAW,EAAE,CAAC;AAEjB;;;;GAIG;AACH,MAAM,CAAC,MAAM,qCAAqC,GAChD,4BAA4B,CAAC,KAAK,CAChC,mBAAmB,CAAC,IAAI,CAAC;IACvB,gCAAgC,EAAE,IAAI;CACvC,CAAC,CACH,CAAC;AAEJ;;GAEG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC;KAC/B,MAAM,CAAC;IACN,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,0DAA0D;IAC3F,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACrC,CAAC;KACD,KAAK,EAAE,CAAC;AAEX;;GAEG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC;KACtC,MAAM,CAAC;IACN,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACxC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC;AAEL;;GAEG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC;IACrC,0BAA0B,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjD,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC3C,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC9C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,UAAU,EAAE,aAAa,CAAC,QAAQ,EAAE;IACpC,QAAQ,EAAE,aAAa,CAAC,QAAQ,EAAE;IAClC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACxC,OAAO,EAAE,aAAa,CAAC,QAAQ,EAAE;IACjC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,QAAQ,EAAE,aAAa,CAAC,QAAQ,EAAE;IAClC,IAAI,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACxB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACvC,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC1C,CAAC,CAAC,KAAK,EAAE,CAAC;AAEX;;GAEG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACpC,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1C,wBAAwB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAChD,CAAC,CAAC,KAAK,EAAE,CAAC;AAEX;;GAEG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG,yBAAyB,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;AAE9G;;GAEG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,CAAC,MAAM,CAAC;IACzD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACzC,CAAC,CAAC,KAAK,EAAE,CAAC;AAEX;;GAEG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC,CAAC,MAAM,CAAC;IACxD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACvC,CAAC,CAAC,KAAK,EAAE,CAAC"}
|