@mongodb-js/oidc-plugin 0.1.0-alpha.0 → 0.1.0-alpha.2

package/dist/.esm-wrapper.mjs

@@ -2,3 +2,4 @@ import mod from "./index.js";
 
 export default mod;
 export const createMongoDBOIDCPlugin = mod.createMongoDBOIDCPlugin;
+export const hookLoggerToMongoLogWriter = mod.hookLoggerToMongoLogWriter;

package/dist/api.d.ts

@@ -1,6 +1,7 @@
 /// <reference types="node" />
 /// <reference types="node" />
 import type { IncomingMessage as HttpIncomingMessage, ServerResponse as HttpServerResponse } from 'http';
+import { MongoDBOIDCPluginImpl } from './plugin';
 import type { MongoDBOIDCLogEventsMap, OIDCAbortSignal, OIDCRefreshFunction, OIDCRequestFunction, TypedEventEmitter } from './types';
 /** @public */
 export type AuthFlowType = 'auth-code' | 'device-auth';
@@ -98,6 +99,28 @@ export interface MongoDBOIDCPluginOptions {
      * The default handler serves simple text/plain messages.
      */
     redirectServerRequestHandler?: RedirectServerRequestHandler;
+    /**
+     * A serialized representation of a previous plugin instance's state
+     * as returned by `.serialize()`.
+     *
+     * This option should only be passed if it comes from a trusted source,
+     * since it contains access tokens that will be sent to MongoDB servers.
+     */
+    serializedState?: string;
+    /**
+     * If set to true, creating the plugin will throw an exception when
+     * `serializedState` is provided but cannot be deserialized.
+     * If set to false, invalid serialized state will result in a log
+     * message being emitted but otherwise be ignored.
+     */
+    throwOnIncompatibleSerializedState?: boolean;
+}
+/** @public */
+export interface MongoDBOIDCPluginMongoClientOptions {
+    readonly authMechanismProperties: {
+        readonly REQUEST_TOKEN_CALLBACK: OIDCRequestFunction;
+        readonly REFRESH_TOKEN_CALLBACK: OIDCRefreshFunction;
+    };
 }
 /** @public */
 export interface MongoDBOIDCPlugin {
@@ -107,26 +130,39 @@ export interface MongoDBOIDCPlugin {
      *
      * This object should be deep-merged with other, pre-existing
      * MongoClient driver options.
+     *
+     * @public
      */
-    readonly mongoClientOptions: {
-        readonly authMechanismProperties: {
-            readonly REQUEST_TOKEN_CALLBACK: OIDCRequestFunction;
-            readonly REFRESH_TOKEN_CALLBACK: OIDCRefreshFunction;
-        };
-    };
+    readonly mongoClientOptions: MongoDBOIDCPluginMongoClientOptions;
     /**
      * The logger instance passed in the options, or a default one otherwise.
      */
     readonly logger: TypedEventEmitter<MongoDBOIDCLogEventsMap>;
+    /**
+     * Create a serialized representation of this plugin's state. The result
+     * can be stored and be later passed to new plugin instances to make
+     * that instance behave as a resumed version of this instance.
+     *
+     * Be aware that this string contains OIDC tokens in plaintext! Do not
+     * store it without appropriate security mechanisms in place.
+     */
+    serialize(): Promise<string>;
 }
+/** @internal */
+export declare const publicPluginToInternalPluginMap_DoNotUseOutsideOfTests: WeakMap<MongoDBOIDCPlugin, MongoDBOIDCPluginImpl>;
 /**
  * Create a new OIDC plugin instance that can be passed to the Node.js MongoDB
  * driver's MongoClientOptions struct.
  *
  * This plugin instance can be passed to multiple MongoClient instances.
- * It caches credentials based on cluster ID and username. If no username is
- * provided when connecting to the MongoDB instance, the cache will be shared
- * across all MongoClients that use this plugin instance.
+ * It caches credentials based on cluster OIDC metadata.
+ * Do *not* pass the plugin instance to multiple MongoClient instances when the
+ * MongoDB deployments they are connecting to do not share a trust relationship
+ * since an untrusted server may be able to advertise malicious OIDC metadata
+ * (this restriction may be lifted in a future version of this library).
+ * Do *not* pass the plugin instance to multiple MongoClient instances when they
+ * are being used with different usernames (user principals), in the connection
+ * string or in the MongoClient options.
  *
  * @public
  */

package/dist/api.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../src/api.ts"],"names":[],"mappings":";;AAAA,OAAO,KAAK,EACV,eAAe,IAAI,mBAAmB,EACtC,cAAc,IAAI,kBAAkB,EACrC,MAAM,MAAM,CAAC;AAEd,OAAO,KAAK,EACV,uBAAuB,EACvB,eAAe,EACf,mBAAmB,EACnB,mBAAmB,EACnB,iBAAiB,EAClB,MAAM,SAAS,CAAC;AAEjB,cAAc;AACd,MAAM,MAAM,YAAY,GAAG,WAAW,GAAG,aAAa,CAAC;AAEvD;;;;;GAKG;AACH,MAAM,WAAW,qBAAqB;IACpC,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,cAAc;AACd,MAAM,MAAM,qBAAqB,GAC7B,IAAI,GACJ,SAAS,GACT,iBAAiB,CAAC;IAChB,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,KAAK,CAAC,GAAG,EAAE,OAAO,GAAG,IAAI,CAAC;CAC3B,CAAC,CAAC;AAEP,cAAc;AACd,MAAM,WAAW,kBAAkB;IACjC;;OAEG;IACH,GAAG,EAAE,MAAM,CAAC;IAEZ;;;OAGG;IACH,MAAM,EAAE,WAAW,CAAC;CACrB;AAED,cAAc;AACd,MAAM,WAAW,wBAAwB;IACvC;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;;;;;;;;;;;;;OAcG;IACH,WAAW,CAAC,EACR,SAAS,GACT,KAAK,GACL;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,OAAO,CAAA;KAAE,GACxC,CAAC,CAAC,OAAO,EAAE,kBAAkB,KAAK,OAAO,CAAC,qBAAqB,CAAC,CAAC,CAAC;IAEtE;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAE5B;;;OAGG;IACH,gBAAgB,CAAC,EAAE,CACjB,WAAW,EAAE,qBAAqB,KAC/B,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAE1B;;OAEG;IACH,YAAY,CAAC,EAAE,YAAY,EAAE,CAAC;IAE9B;;OAEG;IACH,MAAM,CAAC,EAAE,iBAAiB,CAAC,uBAAuB,CAAC,CAAC;IAEpD;;;;;;;;;;OAUG;IACH,MAAM,CAAC,EAAE,eAAe,CAAC;IAEzB;;;;;OAKG;IACH,4BAA4B,CAAC,EAAE,4BAA4B,CAAC;CAC7D;AAED,cAAc;AACd,MAAM,WAAW,iBAAiB;IAChC;;;;;;OAMG;IACH,QAAQ,CAAC,kBAAkB,EAAE;QAC3B,QAAQ,CAAC,uBAAuB,EAAE;YAChC,QAAQ,CAAC,sBAAsB,EAAE,mBAAmB,CAAC;YACrD,QAAQ,CAAC,sBAAsB,EAAE,mBAAmB,CAAC;SACtD,CAAC;KACH,CAAC;IAEF;;OAEG;IACH,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC,uBAAuB,CAAC,CAAC;CAC7D;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,QAAQ,CAAC,wBAAwB,CAAC,GAC1C,iBAAiB,CAMnB;AAED,gBAAgB;AAChB,eAAO,MAAM,0BAA0B,QAAS,CAAC;AAEjD,cAAc;AACd,MAAM,MAAM,yBAAyB,GAAG;IACtC,iCAAiC;IACjC,GAAG,EAAE,mBAAmB,CAAC;IACzB,kCAAkC;IAClC,GAAG,EAAE,kBAAkB,CAAC;IACxB,oEAAoE;IACpE,MAAM,EAAE,MAAM,CAAC;CAChB,GAAG,CACA;IACE,MAAM,EAAE,UAAU,CAAC;IACnB,kFAAkF;IAClF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,kFAAkF;IAClF,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,kFAAkF;IAClF,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,GACD;IACE,MAAM,EAAE,UAAU,CAAC;CACpB,GACD;IACE,MAAM,EAAE,aAAa,CAAC;CACvB,CACJ,CAAC;AAEF,cAAc;AACd,MAAM,MAAM,4BAA4B,GAAG,CACzC,IAAI,EAAE,yBAAyB,KAC5B,IAAI,CAAC"}
+{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../src/api.ts"],"names":[],"mappings":";;AAAA,OAAO,KAAK,EACV,eAAe,IAAI,mBAAmB,EACtC,cAAc,IAAI,kBAAkB,EACrC,MAAM,MAAM,CAAC;AACd,OAAO,EAAE,qBAAqB,EAAE,MAAM,UAAU,CAAC;AACjD,OAAO,KAAK,EACV,uBAAuB,EACvB,eAAe,EACf,mBAAmB,EACnB,mBAAmB,EACnB,iBAAiB,EAClB,MAAM,SAAS,CAAC;AAEjB,cAAc;AACd,MAAM,MAAM,YAAY,GAAG,WAAW,GAAG,aAAa,CAAC;AAEvD;;;;;GAKG;AACH,MAAM,WAAW,qBAAqB;IACpC,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,cAAc;AACd,MAAM,MAAM,qBAAqB,GAC7B,IAAI,GACJ,SAAS,GACT,iBAAiB,CAAC;IAChB,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,KAAK,CAAC,GAAG,EAAE,OAAO,GAAG,IAAI,CAAC;CAC3B,CAAC,CAAC;AAEP,cAAc;AACd,MAAM,WAAW,kBAAkB;IACjC;;OAEG;IACH,GAAG,EAAE,MAAM,CAAC;IAEZ;;;OAGG;IACH,MAAM,EAAE,WAAW,CAAC;CACrB;AAED,cAAc;AACd,MAAM,WAAW,wBAAwB;IACvC;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;;;;;;;;;;;;;OAcG;IACH,WAAW,CAAC,EACR,SAAS,GACT,KAAK,GACL;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,OAAO,CAAA;KAAE,GACxC,CAAC,CAAC,OAAO,EAAE,kBAAkB,KAAK,OAAO,CAAC,qBAAqB,CAAC,CAAC,CAAC;IAEtE;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAE5B;;;OAGG;IACH,gBAAgB,CAAC,EAAE,CACjB,WAAW,EAAE,qBAAqB,KAC/B,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAE1B;;OAEG;IACH,YAAY,CAAC,EAAE,YAAY,EAAE,CAAC;IAE9B;;OAEG;IACH,MAAM,CAAC,EAAE,iBAAiB,CAAC,uBAAuB,CAAC,CAAC;IAEpD;;;;;;;;;;OAUG;IACH,MAAM,CAAC,EAAE,eAAe,CAAC;IAEzB;;;;;OAKG;IACH,4BAA4B,CAAC,EAAE,4BAA4B,CAAC;IAE5D;;;;;;OAMG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;IAEzB;;;;;OAKG;IACH,kCAAkC,CAAC,EAAE,OAAO,CAAC;CAC9C;AAED,cAAc;AACd,MAAM,WAAW,mCAAmC;IAClD,QAAQ,CAAC,uBAAuB,EAAE;QAChC,QAAQ,CAAC,sBAAsB,EAAE,mBAAmB,CAAC;QACrD,QAAQ,CAAC,sBAAsB,EAAE,mBAAmB,CAAC;KACtD,CAAC;CACH;AAED,cAAc;AACd,MAAM,WAAW,iBAAiB;IAChC;;;;;;;;OAQG;IACH,QAAQ,CAAC,kBAAkB,EAAE,mCAAmC,CAAC;IAEjE;;OAEG;IACH,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC,uBAAuB,CAAC,CAAC;IAE5D;;;;;;;OAOG;IACH,SAAS,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;CAC9B;AAED,gBAAgB;AAChB,eAAO,MAAM,sDAAsD,mDACV,CAAC;AAE1D;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,QAAQ,CAAC,wBAAwB,CAAC,GAC1C,iBAAiB,CAYnB;AAED,gBAAgB;AAChB,eAAO,MAAM,0BAA0B,QAAS,CAAC;AAEjD,cAAc;AACd,MAAM,MAAM,yBAAyB,GAAG;IACtC,iCAAiC;IACjC,GAAG,EAAE,mBAAmB,CAAC;IACzB,kCAAkC;IAClC,GAAG,EAAE,kBAAkB,CAAC;IACxB,oEAAoE;IACpE,MAAM,EAAE,MAAM,CAAC;CAChB,GAAG,CACA;IACE,MAAM,EAAE,UAAU,CAAC;IACnB,kFAAkF;IAClF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,kFAAkF;IAClF,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,kFAAkF;IAClF,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,GACD;IACE,MAAM,EAAE,UAAU,CAAC;CACpB,GACD;IACE,MAAM,EAAE,aAAa,CAAC;CACvB,CACJ,CAAC;AAEF,cAAc;AACd,MAAM,MAAM,4BAA4B,GAAG,CACzC,IAAI,EAAE,yBAAyB,KAC5B,IAAI,CAAC"}

package/dist/api.js

@@ -1,24 +1,34 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.kDefaultOpenBrowserTimeout = exports.createMongoDBOIDCPlugin = void 0;
+exports.kDefaultOpenBrowserTimeout = exports.createMongoDBOIDCPlugin = exports.publicPluginToInternalPluginMap_DoNotUseOutsideOfTests = void 0;
 const plugin_1 = require("./plugin");
+/** @internal */
+exports.publicPluginToInternalPluginMap_DoNotUseOutsideOfTests = new WeakMap();
 /**
  * Create a new OIDC plugin instance that can be passed to the Node.js MongoDB
  * driver's MongoClientOptions struct.
  *
  * This plugin instance can be passed to multiple MongoClient instances.
- * It caches credentials based on cluster ID and username. If no username is
- * provided when connecting to the MongoDB instance, the cache will be shared
- * across all MongoClients that use this plugin instance.
+ * It caches credentials based on cluster OIDC metadata.
+ * Do *not* pass the plugin instance to multiple MongoClient instances when the
+ * MongoDB deployments they are connecting to do not share a trust relationship
+ * since an untrusted server may be able to advertise malicious OIDC metadata
+ * (this restriction may be lifted in a future version of this library).
+ * Do *not* pass the plugin instance to multiple MongoClient instances when they
+ * are being used with different usernames (user principals), in the connection
+ * string or in the MongoClient options.
  *
  * @public
  */
 function createMongoDBOIDCPlugin(options) {
     const plugin = new plugin_1.MongoDBOIDCPluginImpl({ ...options });
-    return {
+    const publicPlugin = {
         mongoClientOptions: plugin.mongoClientOptions,
         logger: plugin.logger,
+        serialize: plugin.serialize.bind(plugin),
     };
+    exports.publicPluginToInternalPluginMap_DoNotUseOutsideOfTests.set(publicPlugin, plugin);
+    return publicPlugin;
 }
 exports.createMongoDBOIDCPlugin = createMongoDBOIDCPlugin;
 /** @internal */

package/dist/api.js.map

@@ -1 +1 @@
-{"version":3,"file":"api.js","sourceRoot":"","sources":["../src/api.ts"],"names":[],"mappings":";;;AAIA,qCAAiD;AAmJjD;;;;;;;;;;GAUG;AACH,SAAgB,uBAAuB,CACrC,OAA2C;IAE3C,MAAM,MAAM,GAAG,IAAI,8BAAqB,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;IACzD,OAAO;QACL,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;QAC7C,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC;AACJ,CAAC;AARD,0DAQC;AAED,gBAAgB;AACH,QAAA,0BAA0B,GAAG,KAAM,CAAC"}
+{"version":3,"file":"api.js","sourceRoot":"","sources":["../src/api.ts"],"names":[],"mappings":";;;AAIA,qCAAiD;AAmLjD,gBAAgB;AACH,QAAA,sDAAsD,GACjE,IAAI,OAAO,EAA4C,CAAC;AAE1D;;;;;;;;;;;;;;;GAeG;AACH,SAAgB,uBAAuB,CACrC,OAA2C;IAE3C,MAAM,MAAM,GAAG,IAAI,8BAAqB,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;IACzD,MAAM,YAAY,GAAsB;QACtC,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;QAC7C,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC;KACzC,CAAC;IACF,8DAAsD,CAAC,GAAG,CACxD,YAAY,EACZ,MAAM,CACP,CAAC;IACF,OAAO,YAAY,CAAC;AACtB,CAAC;AAdD,0DAcC;AAED,gBAAgB;AACH,QAAA,0BAA0B,GAAG,KAAM,CAAC"}

package/dist/index.d.ts

@@ -1,4 +1,5 @@
 export { createMongoDBOIDCPlugin } from './api';
-export type { MongoDBOIDCPlugin, MongoDBOIDCPluginOptions, AuthFlowType, DeviceFlowInformation, OpenBrowserOptions, OpenBrowserReturnType, RedirectServerRequestHandler, RedirectServerRequestInfo, } from './api';
-export type { TypedEventEmitter, OIDCRefreshFunction, OIDCRequestFunction, OIDCMechanismServerStep1, OIDCRequestTokenResult, OIDCAbortSignal, MongoDBOIDCError, MongoDBOIDCLogEventsMap, } from './types';
+export type { MongoDBOIDCPlugin, MongoDBOIDCPluginOptions, AuthFlowType, DeviceFlowInformation, OpenBrowserOptions, OpenBrowserReturnType, RedirectServerRequestHandler, RedirectServerRequestInfo, MongoDBOIDCPluginMongoClientOptions, } from './api';
+export type { TypedEventEmitter, OIDCCallbackContext, OIDCRefreshFunction, OIDCRequestFunction, IdPServerInfo, IdPServerResponse, OIDCAbortSignal, MongoDBOIDCError, MongoDBOIDCLogEventsMap, } from './types';
+export { hookLoggerToMongoLogWriter, MongoLogWriter } from './log-hook';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,OAAO,CAAC;AAChD,YAAY,EACV,iBAAiB,EACjB,wBAAwB,EACxB,YAAY,EACZ,qBAAqB,EACrB,kBAAkB,EAClB,qBAAqB,EACrB,4BAA4B,EAC5B,yBAAyB,GAC1B,MAAM,OAAO,CAAC;AAEf,YAAY,EACV,iBAAiB,EACjB,mBAAmB,EACnB,mBAAmB,EACnB,wBAAwB,EACxB,sBAAsB,EACtB,eAAe,EACf,gBAAgB,EAChB,uBAAuB,GACxB,MAAM,SAAS,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,OAAO,CAAC;AAChD,YAAY,EACV,iBAAiB,EACjB,wBAAwB,EACxB,YAAY,EACZ,qBAAqB,EACrB,kBAAkB,EAClB,qBAAqB,EACrB,4BAA4B,EAC5B,yBAAyB,EACzB,mCAAmC,GACpC,MAAM,OAAO,CAAC;AAEf,YAAY,EACV,iBAAiB,EACjB,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,EACnB,aAAa,EACb,iBAAiB,EACjB,eAAe,EACf,gBAAgB,EAChB,uBAAuB,GACxB,MAAM,SAAS,CAAC;AAEjB,OAAO,EAAE,0BAA0B,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC"}

package/dist/index.js

@@ -1,6 +1,8 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.createMongoDBOIDCPlugin = void 0;
+exports.hookLoggerToMongoLogWriter = exports.createMongoDBOIDCPlugin = void 0;
 var api_1 = require("./api");
 Object.defineProperty(exports, "createMongoDBOIDCPlugin", { enumerable: true, get: function () { return api_1.createMongoDBOIDCPlugin; } });
+var log_hook_1 = require("./log-hook");
+Object.defineProperty(exports, "hookLoggerToMongoLogWriter", { enumerable: true, get: function () { return log_hook_1.hookLoggerToMongoLogWriter; } });
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AAAA,6BAAgD;AAAvC,8GAAA,uBAAuB,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AAAA,6BAAgD;AAAvC,8GAAA,uBAAuB,OAAA;AAyBhC,uCAAwE;AAA/D,sHAAA,0BAA0B,OAAA"}

package/dist/log-hook.d.ts

@@ -0,0 +1,17 @@
+import type { MongoDBOIDCLogEventsMap, TypedEventEmitter } from './types';
+/** @public */
+export interface MongoLogWriter {
+    info(c: string, id: unknown, ctx: string, msg: string, attr?: unknown): void;
+    warn(c: string, id: unknown, ctx: string, msg: string, attr?: unknown): void;
+    error(c: string, id: unknown, ctx: string, msg: string, attr?: unknown): void;
+    mongoLogId(this: void, id: number): unknown;
+}
+/**
+ * Connect a log event emitter instance such as the one attached to a
+ * `MongoDBOIDCPlugin` instance to a log writer that follows the format
+ * provided by the `mongodb-log-writer` npm package.
+ *
+ * @public
+ */
+export declare function hookLoggerToMongoLogWriter(emitter: TypedEventEmitter<MongoDBOIDCLogEventsMap>, log: MongoLogWriter, contextPrefix: string): void;
+//# sourceMappingURL=log-hook.d.ts.map

package/dist/log-hook.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"log-hook.d.ts","sourceRoot":"","sources":["../src/log-hook.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAE1E,cAAc;AACd,MAAM,WAAW,cAAc;IAC7B,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IAC7E,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IAC7E,KAAK,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IAC9E,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC;CAC7C;AAED;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,iBAAiB,CAAC,uBAAuB,CAAC,EACnD,GAAG,EAAE,cAAc,EACnB,aAAa,EAAE,MAAM,GACpB,IAAI,CAwON"}

package/dist/log-hook.js

@@ -0,0 +1,109 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.hookLoggerToMongoLogWriter = void 0;
+/**
+ * Connect a log event emitter instance such as the one attached to a
+ * `MongoDBOIDCPlugin` instance to a log writer that follows the format
+ * provided by the `mongodb-log-writer` npm package.
+ *
+ * @public
+ */
+function hookLoggerToMongoLogWriter(emitter, log, contextPrefix) {
+    const { mongoLogId } = log;
+    emitter.on('mongodb-oidc-plugin:local-redirect-accessed', (ev) => {
+        log.info('OIDC-PLUGIN', mongoLogId(1002000001), `${contextPrefix}-oidc`, 'Local redirect accessed', {
+            ...ev,
+        });
+    });
+    emitter.on('mongodb-oidc-plugin:oidc-callback-accepted', (ev) => {
+        log.info('OIDC-PLUGIN', mongoLogId(1002000002), `${contextPrefix}-oidc`, 'OIDC callback accepted', {
+            ...ev,
+        });
+    });
+    emitter.on('mongodb-oidc-plugin:oidc-callback-rejected', (ev) => {
+        log.warn('OIDC-PLUGIN', mongoLogId(1002000003), `${contextPrefix}-oidc`, 'OIDC callback rejected', {
+            ...ev,
+        });
+    });
+    emitter.on('mongodb-oidc-plugin:unknown-url-accessed', (ev) => {
+        log.info('OIDC-PLUGIN', mongoLogId(1002000004), `${contextPrefix}-oidc`, 'Unknown URL accessed', {
+            ...ev,
+            // strip away any query/search string (after ?) in the URL
+            path: new URL(ev.path, 'http://dummy/').pathname,
+        });
+    });
+    emitter.on('mongodb-oidc-plugin:local-listen-started', (ev) => {
+        log.info('OIDC-PLUGIN', mongoLogId(1002000005), `${contextPrefix}-oidc`, 'Started listening on local server', {
+            ...ev,
+        });
+    });
+    emitter.on('mongodb-oidc-plugin:local-listen-failed', (ev) => {
+        log.error('OIDC-PLUGIN', mongoLogId(1002000006), `${contextPrefix}-oidc`, 'Failed to listen on local server', {
+            ...ev,
+        });
+    });
+    emitter.on('mongodb-oidc-plugin:local-listen-succeeded', (ev) => {
+        log.info('OIDC-PLUGIN', mongoLogId(1002000007), `${contextPrefix}-oidc`, 'Successfully listening on local server', {
+            ...ev,
+        });
+    });
+    emitter.on('mongodb-oidc-plugin:local-server-close', (ev) => {
+        log.info('OIDC-PLUGIN', mongoLogId(1002000008), `${contextPrefix}-oidc`, 'Local server closed', {
+            ...ev,
+        });
+    });
+    emitter.on('mongodb-oidc-plugin:open-browser', (ev) => {
+        log.info('OIDC-PLUGIN', mongoLogId(1002000009), `${contextPrefix}-oidc`, 'Opening browser', {
+            ...ev,
+        });
+    });
+    emitter.on('mongodb-oidc-plugin:notify-device-flow', () => {
+        log.info('OIDC-PLUGIN', mongoLogId(1002000010), `${contextPrefix}-oidc`, 'Notifying user about device flow authentication');
+    });
+    emitter.on('mongodb-oidc-plugin:auth-attempt-started', (ev) => {
+        log.info('OIDC-PLUGIN', mongoLogId(1002000011), `${contextPrefix}-oidc`, 'Authentication attempt started', {
+            ...ev,
+        });
+    });
+    emitter.on('mongodb-oidc-plugin:auth-attempt-failed', (ev) => {
+        log.warn('OIDC-PLUGIN', mongoLogId(1002000012), `${contextPrefix}-oidc`, 'Authentication attempt failed', {
+            ...ev,
+        });
+    });
+    emitter.on('mongodb-oidc-plugin:auth-attempt-succeeded', () => {
+        log.info('OIDC-PLUGIN', mongoLogId(1002000013), `${contextPrefix}-oidc`, 'Authentication attempt succeeded');
+    });
+    emitter.on('mongodb-oidc-plugin:refresh-failed', (ev) => {
+        log.warn('OIDC-PLUGIN', mongoLogId(1002000014), `${contextPrefix}-oidc`, 'Token refresh failed', {
+            ...ev,
+        });
+    });
+    emitter.on('mongodb-oidc-plugin:skip-auth-attempt', (ev) => {
+        log.info('OIDC-PLUGIN', mongoLogId(1002000015), `${contextPrefix}-oidc`, 'Skipping explicit authentication attempt', {
+            ...ev,
+        });
+    });
+    emitter.on('mongodb-oidc-plugin:auth-failed', (ev) => {
+        log.warn('OIDC-PLUGIN', mongoLogId(1002000016), `${contextPrefix}-oidc`, 'Authentication failed', {
+            ...ev,
+        });
+    });
+    emitter.on('mongodb-oidc-plugin:auth-succeeded', (ev) => {
+        log.info('OIDC-PLUGIN', mongoLogId(1002000017), `${contextPrefix}-oidc`, 'Authentication succeeded', {
+            ...ev,
+        });
+    });
+    emitter.on('mongodb-oidc-plugin:refresh-started', () => {
+        log.info('OIDC-PLUGIN', mongoLogId(1002000018), `${contextPrefix}-oidc`, 'Token refresh attempt started');
+    });
+    emitter.on('mongodb-oidc-plugin:refresh-succeeded', () => {
+        log.info('OIDC-PLUGIN', mongoLogId(1002000019), `${contextPrefix}-oidc`, 'Token refresh attempt succeeded');
+    });
+    emitter.on('mongodb-oidc-plugin:deserialization-failed', (ev) => {
+        log.error('OIDC-PLUGIN', mongoLogId(1002000020), `${contextPrefix}-oidc`, 'State deserialization failed', {
+            ...ev,
+        });
+    });
+}
+exports.hookLoggerToMongoLogWriter = hookLoggerToMongoLogWriter;
+//# sourceMappingURL=log-hook.js.map

package/dist/log-hook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"log-hook.js","sourceRoot":"","sources":["../src/log-hook.ts"],"names":[],"mappings":";;;AAUA;;;;;;GAMG;AACH,SAAgB,0BAA0B,CACxC,OAAmD,EACnD,GAAmB,EACnB,aAAqB;IAErB,MAAM,EAAE,UAAU,EAAE,GAAG,GAAG,CAAC;IAE3B,OAAO,CAAC,EAAE,CAAC,6CAA6C,EAAE,CAAC,EAAE,EAAE,EAAE;QAC/D,GAAG,CAAC,IAAI,CACN,aAAa,EACb,UAAU,CAAC,UAAa,CAAC,EACzB,GAAG,aAAa,OAAO,EACvB,yBAAyB,EACzB;YACE,GAAG,EAAE;SACN,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,EAAE,CAAC,4CAA4C,EAAE,CAAC,EAAE,EAAE,EAAE;QAC9D,GAAG,CAAC,IAAI,CACN,aAAa,EACb,UAAU,CAAC,UAAa,CAAC,EACzB,GAAG,aAAa,OAAO,EACvB,wBAAwB,EACxB;YACE,GAAG,EAAE;SACN,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,EAAE,CAAC,4CAA4C,EAAE,CAAC,EAAE,EAAE,EAAE;QAC9D,GAAG,CAAC,IAAI,CACN,aAAa,EACb,UAAU,CAAC,UAAa,CAAC,EACzB,GAAG,aAAa,OAAO,EACvB,wBAAwB,EACxB;YACE,GAAG,EAAE;SACN,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,EAAE,CAAC,0CAA0C,EAAE,CAAC,EAAE,EAAE,EAAE;QAC5D,GAAG,CAAC,IAAI,CACN,aAAa,EACb,UAAU,CAAC,UAAa,CAAC,EACzB,GAAG,aAAa,OAAO,EACvB,sBAAsB,EACtB;YACE,GAAG,EAAE;YACL,0DAA0D;YAC1D,IAAI,EAAE,IAAI,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC,QAAQ;SACjD,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,EAAE,CAAC,0CAA0C,EAAE,CAAC,EAAE,EAAE,EAAE;QAC5D,GAAG,CAAC,IAAI,CACN,aAAa,EACb,UAAU,CAAC,UAAa,CAAC,EACzB,GAAG,aAAa,OAAO,EACvB,mCAAmC,EACnC;YACE,GAAG,EAAE;SACN,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,EAAE,CAAC,yCAAyC,EAAE,CAAC,EAAE,EAAE,EAAE;QAC3D,GAAG,CAAC,KAAK,CACP,aAAa,EACb,UAAU,CAAC,UAAa,CAAC,EACzB,GAAG,aAAa,OAAO,EACvB,kCAAkC,EAClC;YACE,GAAG,EAAE;SACN,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,EAAE,CAAC,4CAA4C,EAAE,CAAC,EAAE,EAAE,EAAE;QAC9D,GAAG,CAAC,IAAI,CACN,aAAa,EACb,UAAU,CAAC,UAAa,CAAC,EACzB,GAAG,aAAa,OAAO,EACvB,wCAAwC,EACxC;YACE,GAAG,EAAE;SACN,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,EAAE,CAAC,wCAAwC,EAAE,CAAC,EAAE,EAAE,EAAE;QAC1D,GAAG,CAAC,IAAI,CACN,aAAa,EACb,UAAU,CAAC,UAAa,CAAC,EACzB,GAAG,aAAa,OAAO,EACvB,qBAAqB,EACrB;YACE,GAAG,EAAE;SACN,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,EAAE,CAAC,kCAAkC,EAAE,CAAC,EAAE,EAAE,EAAE;QACpD,GAAG,CAAC,IAAI,CACN,aAAa,EACb,UAAU,CAAC,UAAa,CAAC,EACzB,GAAG,aAAa,OAAO,EACvB,iBAAiB,EACjB;YACE,GAAG,EAAE;SACN,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QACxD,GAAG,CAAC,IAAI,CACN,aAAa,EACb,UAAU,CAAC,UAAa,CAAC,EACzB,GAAG,aAAa,OAAO,EACvB,iDAAiD,CAClD,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,EAAE,CAAC,0CAA0C,EAAE,CAAC,EAAE,EAAE,EAAE;QAC5D,GAAG,CAAC,IAAI,CACN,aAAa,EACb,UAAU,CAAC,UAAa,CAAC,EACzB,GAAG,aAAa,OAAO,EACvB,gCAAgC,EAChC;YACE,GAAG,EAAE;SACN,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,EAAE,CAAC,yCAAyC,EAAE,CAAC,EAAE,EAAE,EAAE;QAC3D,GAAG,CAAC,IAAI,CACN,aAAa,EACb,UAAU,CAAC,UAAa,CAAC,EACzB,GAAG,aAAa,OAAO,EACvB,+BAA+B,EAC/B;YACE,GAAG,EAAE;SACN,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QAC5D,GAAG,CAAC,IAAI,CACN,aAAa,EACb,UAAU,CAAC,UAAa,CAAC,EACzB,GAAG,aAAa,OAAO,EACvB,kCAAkC,CACnC,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,EAAE,CAAC,oCAAoC,EAAE,CAAC,EAAE,EAAE,EAAE;QACtD,GAAG,CAAC,IAAI,CACN,aAAa,EACb,UAAU,CAAC,UAAa,CAAC,EACzB,GAAG,aAAa,OAAO,EACvB,sBAAsB,EACtB;YACE,GAAG,EAAE;SACN,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,EAAE,CAAC,uCAAuC,EAAE,CAAC,EAAE,EAAE,EAAE;QACzD,GAAG,CAAC,IAAI,CACN,aAAa,EACb,UAAU,CAAC,UAAa,CAAC,EACzB,GAAG,aAAa,OAAO,EACvB,0CAA0C,EAC1C;YACE,GAAG,EAAE;SACN,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,EAAE,CAAC,iCAAiC,EAAE,CAAC,EAAE,EAAE,EAAE;QACnD,GAAG,CAAC,IAAI,CACN,aAAa,EACb,UAAU,CAAC,UAAa,CAAC,EACzB,GAAG,aAAa,OAAO,EACvB,uBAAuB,EACvB;YACE,GAAG,EAAE;SACN,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,EAAE,CAAC,oCAAoC,EAAE,CAAC,EAAE,EAAE,EAAE;QACtD,GAAG,CAAC,IAAI,CACN,aAAa,EACb,UAAU,CAAC,UAAa,CAAC,EACzB,GAAG,aAAa,OAAO,EACvB,0BAA0B,EAC1B;YACE,GAAG,EAAE;SACN,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QACrD,GAAG,CAAC,IAAI,CACN,aAAa,EACb,UAAU,CAAC,UAAa,CAAC,EACzB,GAAG,aAAa,OAAO,EACvB,+BAA+B,CAChC,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QACvD,GAAG,CAAC,IAAI,CACN,aAAa,EACb,UAAU,CAAC,UAAa,CAAC,EACzB,GAAG,aAAa,OAAO,EACvB,iCAAiC,CAClC,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,EAAE,CAAC,4CAA4C,EAAE,CAAC,EAAE,EAAE,EAAE;QAC9D,GAAG,CAAC,KAAK,CACP,aAAa,EACb,UAAU,CAAC,UAAa,CAAC,EACzB,GAAG,aAAa,OAAO,EACvB,8BAA8B,EAC9B;YACE,GAAG,EAAE;SACN,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AA5OD,gEA4OC"}

package/dist/plugin.d.ts

@@ -1,23 +1,30 @@
-import type { MongoDBOIDCLogEventsMap, OIDCAbortSignal, OIDCMechanismServerStep1, OIDCRequestTokenResult, TypedEventEmitter } from './types';
+import type { MongoDBOIDCLogEventsMap, OIDCCallbackContext, IdPServerInfo, IdPServerResponse, TypedEventEmitter } from './types';
+import { TokenSet } from 'openid-client';
 import type { MongoDBOIDCPlugin, MongoDBOIDCPluginOptions } from './api';
+/** @internal Exported for testing only */
+export declare function automaticRefreshTimeoutMS(tokenSet: Pick<TokenSet, 'refresh_token' | 'expires_in'>): number | undefined;
 /** @internal */
 export declare class MongoDBOIDCPluginImpl implements MongoDBOIDCPlugin {
     private readonly options;
     readonly logger: TypedEventEmitter<MongoDBOIDCLogEventsMap>;
-    private readonly mapUserToAuthState;
+    private readonly mapIdpToAuthState;
     readonly mongoClientOptions: MongoDBOIDCPlugin['mongoClientOptions'];
+    private readonly timers;
     constructor(options: Readonly<MongoDBOIDCPluginOptions>);
+    private _deserialize;
+    private _serialize;
+    serialize(): Promise<string>;
     private isFlowAllowed;
     private getAuthState;
     private getRedirectURI;
-    private getInitialOIDCIssuerAndClientParams;
+    private getOIDCClient;
     private openBrowser;
     private notifyDeviceFlow;
-    private storeTokenSet;
+    private updateStateWithTokenSet;
+    private verifyValidUrl;
     private authorizationCodeFlow;
     private deviceAuthorizationFlow;
     private initiateAuthAttempt;
-    requestToken(principalName: string | undefined, serverMetadata: OIDCMechanismServerStep1, driverAbortSignal?: OIDCAbortSignal | number): Promise<OIDCRequestTokenResult>;
-    refreshToken(principalName: string | undefined, serverMetadata: OIDCMechanismServerStep1, previousResult: OIDCRequestTokenResult, driverAbortSignal?: OIDCAbortSignal | number): Promise<OIDCRequestTokenResult>;
+    requestToken(serverMetadata: IdPServerInfo, context: OIDCCallbackContext): Promise<IdPServerResponse>;
 }
 //# sourceMappingURL=plugin.d.ts.map

package/dist/plugin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../src/plugin.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,uBAAuB,EACvB,eAAe,EACf,wBAAwB,EACxB,sBAAsB,EACtB,iBAAiB,EAClB,MAAM,SAAS,CAAC;AAqBjB,OAAO,KAAK,EAGV,iBAAiB,EACjB,wBAAwB,EAGzB,MAAM,OAAO,CAAC;AAgDf,gBAAgB;AAChB,qBAAa,qBAAsB,YAAW,iBAAiB;IAC7D,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAqC;IAC7D,SAAgB,MAAM,EAAE,iBAAiB,CAAC,uBAAuB,CAAC,CAAC;IACnE,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAwC;IAC3E,SAAgB,kBAAkB,EAAE,iBAAiB,CAAC,oBAAoB,CAAC,CAAC;gBAEhE,OAAO,EAAE,QAAQ,CAAC,wBAAwB,CAAC;IAYvD,OAAO,CAAC,aAAa;IAUrB,OAAO,CAAC,YAAY;IA0BpB,OAAO,CAAC,cAAc;IAMtB,OAAO,CAAC,mCAAmC;YAqC7B,WAAW;YAgCX,gBAAgB;IAW9B,OAAO,CAAC,aAAa;YA4BP,qBAAqB;YAgIrB,uBAAuB;YAiCvB,mBAAmB;IA0GpB,YAAY,CACvB,aAAa,EAAE,MAAM,GAAG,SAAS,EACjC,cAAc,EAAE,wBAAwB,EACxC,iBAAiB,CAAC,EAAE,eAAe,GAAG,MAAM,GAC3C,OAAO,CAAC,sBAAsB,CAAC;IAwBrB,YAAY,CACvB,aAAa,EAAE,MAAM,GAAG,SAAS,EACjC,cAAc,EAAE,wBAAwB,EAExC,cAAc,EAAE,sBAAsB,EACtC,iBAAiB,CAAC,EAAE,eAAe,GAAG,MAAM,GAC3C,OAAO,CAAC,sBAAsB,CAAC;CAOnC"}
+{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../src/plugin.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,uBAAuB,EAEvB,mBAAmB,EACnB,aAAa,EACb,iBAAiB,EACjB,iBAAiB,EAClB,MAAM,SAAS,CAAC;AAYjB,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAMzC,OAAO,KAAK,EAGV,iBAAiB,EACjB,wBAAwB,EAGzB,MAAM,OAAO,CAAC;AAsDf,0CAA0C;AAC1C,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,eAAe,GAAG,YAAY,CAAC,GACvD,MAAM,GAAG,SAAS,CAmBpB;AAeD,gBAAgB;AAChB,qBAAa,qBAAsB,YAAW,iBAAiB;IAC7D,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAqC;IAC7D,SAAgB,MAAM,EAAE,iBAAiB,CAAC,uBAAuB,CAAC,CAAC;IACnE,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAwC;IAC1E,SAAgB,kBAAkB,EAAE,iBAAiB,CAAC,oBAAoB,CAAC,CAAC;IAC5E,OAAO,CAAC,QAAQ,CAAC,MAAM,CAIrB;gBAEU,OAAO,EAAE,QAAQ,CAAC,wBAAwB,CAAC;IAevD,OAAO,CAAC,YAAY;IAkDpB,OAAO,CAAC,UAAU;IAsBX,SAAS,IAAI,OAAO,CAAC,MAAM,CAAC;IAUnC,OAAO,CAAC,aAAa;IAUrB,OAAO,CAAC,YAAY;IAuBpB,OAAO,CAAC,cAAc;YAMR,aAAa;YAsCb,WAAW;YAkCX,gBAAgB;IAa9B,OAAO,CAAC,uBAAuB;IAwE/B,OAAO,CAAC,cAAc;YAkBR,qBAAqB;YAwGrB,uBAAuB;YA4BvB,mBAAmB;IA0GpB,YAAY,CACvB,cAAc,EAAE,aAAa,EAC7B,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,iBAAiB,CAAC;CA+B9B"}