@mongodb-js/oidc-plugin 0.1.0-alpha.0

package/dist/rfc-8252-http-server.js

@@ -0,0 +1,426 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RFC8252HTTPServer = void 0;
+const http_1 = require("http");
+const dns_1 = require("dns");
+const events_1 = require("events");
+const express_1 = __importDefault(require("express"));
+const util_1 = require("util");
+const crypto_1 = require("crypto");
+const types_1 = require("./types");
+const util_2 = require("./util");
+/** @internal */
+class RFC8252HTTPServer {
+    constructor(options) {
+        this.servers = [];
+        this.redirects = new Map();
+        this._handleSuccess = (req, res, next) => {
+            const { oidcParams } = this;
+            if (!oidcParams) {
+                return next();
+            }
+            this.redirectServerHandler({
+                req,
+                res,
+                result: 'accepted',
+                status: 200,
+            });
+            res.on('finish', () => {
+                this.oidcParamsResolve?.(oidcParams);
+            });
+        };
+        this._handleRedirectToExternal = (req, res, next) => {
+            const entry = this.redirects.get(req.params.id);
+            if (!entry)
+                return next();
+            this.logger.emit('mongodb-oidc-plugin:local-redirect-accessed', {
+                id: req.params.id,
+            });
+            // This can be helpful for figuring out whether a browser was
+            // opened successfully.
+            entry.onAccessed();
+            res.status(307);
+            res.set('Location', entry.targetUrl);
+            res.send();
+        };
+        this._handleOIDCCallback = (req, res) => {
+            const baseUrl = this.listeningRedirectUrl;
+            if (!baseUrl) {
+                throw new types_1.MongoDBOIDCError('Received HTTP request while not listening');
+            }
+            let isAcceptedOIDCResponse = false;
+            const reject = (info) => {
+                this.logger.emit('mongodb-oidc-plugin:oidc-callback-rejected', {
+                    method: req.method,
+                    hasBody,
+                    errorCode: info.error ?? 'unknown_error',
+                    isAcceptedOIDCResponse,
+                });
+                this.redirectServerHandler({
+                    req,
+                    res,
+                    result: 'rejected',
+                    ...info,
+                });
+                if (isAcceptedOIDCResponse) {
+                    this.oidcParamsReject?.(new types_1.MongoDBOIDCError(`${info.error || 'unknown_code'}: ${info.errorDescription || '[no details]'}`));
+                }
+            };
+            const url = new URL(req.url, baseUrl);
+            // eslint-disable-next-line @typescript-eslint/no-unsafe-argument
+            const hasBody = Object.keys(req.body || {}).length > 0;
+            if (req.method === 'POST' && hasBody) {
+                // Convert the POST body to a querystring.
+                // eslint-disable-next-line @typescript-eslint/no-unsafe-argument
+                url.search = new URLSearchParams(Object.entries(req.body)).toString();
+            }
+            else if (req.method !== 'GET') {
+                reject({
+                    status: 405,
+                    error: 'invalid_method',
+                    errorDescription: 'Invalid HTTP Method',
+                });
+                return;
+            }
+            // If `state` does not match the expected value, this might be a CSRF request.
+            // Even if we did progress from here, the OIDC library would reject this
+            // request, but bailing out early here means that after this conditional
+            // we know we are dealing with a genuine response from the auth server and
+            // can reject the `oidcParamsPromise` if there is an error.
+            if (url.searchParams.get('state') !== this.oidcStateParam) {
+                reject({
+                    status: 403,
+                    error: 'state_mismatch',
+                    errorDescription: '',
+                });
+                return;
+            }
+            isAcceptedOIDCResponse = true;
+            const oidcParams = url.toString();
+            if (this.oidcParams !== undefined && this.oidcParams !== oidcParams) {
+                // This should not happen in practice...
+                reject({
+                    status: 409,
+                    error: 'already_received_code',
+                    errorDescription: 'A different authentication code was already received by the application',
+                });
+                return;
+            }
+            this.oidcParams = oidcParams;
+            this.logger.emit('mongodb-oidc-plugin:oidc-callback-accepted', {
+                method: req.method,
+                hasBody,
+                errorCode: url.searchParams.get('error') ?? undefined,
+            });
+            if (url.searchParams.get('error')) {
+                reject({
+                    status: 200,
+                    // Standard params from https://www.rfc-editor.org/rfc/rfc6749.html#section-4.1.2.1
+                    error: ensureNQSChar(url.searchParams.get('error')) ?? 'invalid_error_param',
+                    errorDescription: ensureNQSChar(url.searchParams.get('error_description')),
+                    errorURI: ensureURI(url.searchParams.get('error_uri')),
+                });
+                return;
+            }
+            // https://mailarchive.ietf.org/arch/msg/oauth/RqlUvseG_RnOWrEV_WJACW8oUdU/
+            // > Callback URL pages SHOULD redirect to a trusted page immediately after
+            // > receiving the authorization code in the URL.  This prevents the
+            // > authorization code from remaining in the browser history, or from
+            // > inadvertently leaking in a referer header.
+            void (async () => {
+                // `nonce` does not have any special security properties here, it is only
+                // there to avoid collisions with a redirect_url that happens to start
+                // with `/success`
+                const nonce = (await (0, util_1.promisify)(crypto_1.randomBytes)(16)).toString('hex');
+                res.status(303); // 'See Other', turns a potential POST into GET
+                res.set('Location', `/success/${nonce}`);
+                res.send();
+            })();
+        };
+        this._fallbackHandler = (req, res) => {
+            this.logger.emit('mongodb-oidc-plugin:unknown-url-accessed', {
+                method: req.method,
+                path: req.url,
+            });
+            this.redirectServerHandler({
+                req,
+                res,
+                result: 'unknown-url',
+                status: 404,
+            });
+        };
+        this.redirectUrl = new URL(options.redirectUrl);
+        this.oidcStateParam = options.oidcStateParam;
+        this.redirectServerHandler =
+            options.redirectServerRequestHandler ?? defaultRedirectServerHandler;
+        this.logger = options.logger ?? new events_1.EventEmitter();
+        this.oidcParamsPromise = new Promise((resolve, reject) => ([this.oidcParamsResolve, this.oidcParamsReject] = [resolve, reject]));
+        this.expressApp = (0, express_1.default)();
+        // Identity providers are not strictly required to use the query string to
+        // pass tokens and can also use the body as a form POST, even though the
+        // former is the common mechanism.
+        // This makes it a lot more convenient to use a HTTP framework like
+        // express here, which handles cases that require POST body parsing for us.
+        this.expressApp.use(express_1.default.urlencoded({ extended: false }));
+        this.expressApp.use(express_1.default.json());
+        this.expressApp.use((req, res, next) => {
+            // Set some default HTTP security headers. The CSP here is fairly strict,
+            // but specific handlers can override these as necessary.
+            res.setHeader('Content-Security-Policy', "default-src 'self'");
+            res.setHeader('Referrer-Policy', 'no-referrer');
+            next();
+        });
+        // Redirect to external server:
+        this.expressApp.get('/redirect/:id', this._handleRedirectToExternal);
+        // Redirect from external server:
+        this.expressApp.all(this.redirectUrl.pathname, this._handleOIDCCallback);
+        // Success page:
+        this.expressApp.get('/success/:nonce', this._handleSuccess);
+        // Everything else:
+        this.expressApp.all('*', this._fallbackHandler);
+    }
+    /**
+     * Add a redirect from a local URL served on the server to an external URL.
+     */
+    async addRedirect(targetUrl) {
+        const baseUrl = this.listeningRedirectUrl;
+        if (!baseUrl) {
+            throw new Error('Cannot add redirect URL before server is listening');
+        }
+        const hash = (await (0, util_1.promisify)(crypto_1.randomBytes)(16)).toString('hex');
+        const onAccessed = new Promise((resolve) => {
+            this.redirects.set(hash, { targetUrl, onAccessed: resolve });
+        });
+        const localUrl = new URL('/redirect/' + hash, baseUrl).toString();
+        return {
+            localUrl,
+            onAccessed,
+        };
+    }
+    /**
+     * Returns the port that this server is listening on if
+     * listen() was successfully called and undefined otherwise.
+     */
+    get listeningPort() {
+        if (this.servers.length === 0)
+            return undefined;
+        const ports = new Set(this.servers.map((srv) => srv.address()?.port));
+        const port = ports.size === 1 && [...ports][0];
+        if (typeof port !== 'number') {
+            // Should never happen
+            throw new types_1.MongoDBOIDCError(`Server is listening in inconsistent state: ${[...ports].join(',')}`);
+        }
+        return port;
+    }
+    /**
+     * Returns the full redirectURL passed to the constructor, with
+     * a possible unspecified port resolved to the actual port,
+     * or undefined if this server is not listening.
+     */
+    get listeningRedirectUrl() {
+        const port = this.listeningPort;
+        if (!port)
+            return undefined;
+        const url = new URL(this.redirectUrl.toString());
+        url.port = String(port);
+        return url.toString();
+    }
+    /**
+     * Create HTTP servers and listen on them corresponding to the redirect URL
+     * provided to the constructor.
+     */
+    async listen() {
+        if (this.listeningPort !== undefined) {
+            throw new types_1.MongoDBOIDCError(`Already listening on ${this.redirectUrl.toString()}`);
+        }
+        if (this.redirectUrl.protocol !== 'http:') {
+            throw new types_1.MongoDBOIDCError(`Cannot handle listening on non-HTTP URL, got ${this.redirectUrl.protocol}`);
+        }
+        this.logger.emit('mongodb-oidc-plugin:local-listen-started', {
+            url: this.redirectUrl.toString(),
+        });
+        // https://www.rfc-editor.org/rfc/rfc8252#section-7.3 states:
+        // > It is RECOMMENDED that clients attempt to bind to the loopback
+        // > interface using both IPv4 and IPv6 and use whichever is available.
+        // Practically speaking, `hostname` here is almost always going to
+        // be 'localhost'. Doing a dns lookup with ADDRCONFIG is the easiest
+        // way to get IPv4 and IPv6 addresses and whichever else 'localhost'
+        // resolves to while taking into account their respective availability
+        // on the current host. While we could theoretically hardcode 'localhost'
+        // here, there doesn't seem to be any reason to do so, and doing so
+        // would remove the ability to configure IPv4 or IPv6 explicitly
+        // (by specifying 127.0.0.1/::1 as hosts). Finally, we also don't want
+        // to do what Node.js does by default when only a host is provided,
+        // namely listening on all interfaces.
+        let hostname = this.redirectUrl.hostname;
+        if (hostname.startsWith('[') && hostname.endsWith(']'))
+            hostname = hostname.slice(1, -1);
+        const dnsResults = await dns_1.promises.lookup(hostname, {
+            all: true,
+            hints: dns_1.ADDRCONFIG,
+        });
+        if (dnsResults.length === 0) {
+            throw new types_1.MongoDBOIDCError(`DNS query for ${this.redirectUrl.hostname} returned no results`);
+        }
+        try {
+            const urlPort = this.redirectUrl.port === '' ? 80 : +this.redirectUrl.port;
+            // Two scenarios: Either we are listening on an arbitrary port here,
+            // or listening on a specific port. Using an arbitrary port has the
+            // advantage that the OS will allocate a free one for us, while a
+            // specific port may or may not be available.
+            // If we listen on an arbitrary port and the URL hostname resolved
+            // to multiple distinct addresses, we need to listen to the same port
+            // on all of these addresses. This is extremely unlikely to be an issue
+            // in practice, but nevertheless something that should be handled.
+            // (We cannot just listen on one address and let a program that happens
+            // to listen on the same port on another address receive our secret
+            // OIDC tokens...)
+            // We handle that case by first listening one on address, receiving the
+            // port there, and then trying to listen on all other addresses on the
+            // same port. We repeat this as necessary.
+            const kMaxAttempts = urlPort === 0 ? 10 : 1;
+            for (let attempts = 1;; attempts++) {
+                let port = urlPort;
+                let offset = 0;
+                if (urlPort === 0) {
+                    offset = 1;
+                    // Listen on an arbitrary port on a single interface first...
+                    const firstServer = this.createServerAndListen(dnsResults[0], 0);
+                    this.servers = [firstServer];
+                    await (0, events_1.once)(firstServer, 'listening');
+                    port = firstServer.address()?.port;
+                    if (typeof port !== 'number') {
+                        // Should never happen
+                        throw new types_1.MongoDBOIDCError(`Listening on ${dnsResults[0].address} did not return a port`);
+                    }
+                }
+                try {
+                    // ... and then listen on all remaining interfaces on the same port.
+                    const otherServers = dnsResults
+                        .slice(offset)
+                        .map((dnsResult) => this.createServerAndListen(dnsResult, port));
+                    this.servers.push(...otherServers);
+                    await Promise.all(otherServers.map((server) => (0, events_1.once)(server, 'listening')));
+                    break;
+                }
+                catch (err) {
+                    await this.close();
+                    if (attempts === kMaxAttempts)
+                        throw err;
+                }
+            }
+        }
+        catch (err) {
+            await this.close();
+            this.logger.emit('mongodb-oidc-plugin:local-listen-failed', {
+                url: this.redirectUrl.toString(),
+            });
+            throw err;
+        }
+        this.logger.emit('mongodb-oidc-plugin:local-listen-succeeded', {
+            url: this.listeningRedirectUrl || '',
+            interfaces: dnsResults.map((dnsResult) => dnsResult.address),
+        });
+    }
+    createServerAndListen(dnsResult, port) {
+        const { address: host, family } = dnsResult;
+        const server = (0, http_1.createServer)((req, res) => this.expressApp(req, res));
+        server.listen({
+            host,
+            port,
+            // This code isn't really expected to run inside a Node.js cluster
+            // fork, but if it does, we should not allow external handlers.
+            exclusive: true,
+            // Should not be making a difference in practice since `host` is
+            // almost never the listen-on-all IPv6 address (`::`), but if it is,
+            // this is the correct thing to do.
+            ipv6Only: family === 6 ? true : undefined,
+        });
+        return server;
+    }
+    /**
+     * Returns the OIDC params as the full URL used to access them
+     * (regardless of whether OIDC params were passed as URL params or not)
+     */
+    async waitForOIDCParams() {
+        return await this.oidcParamsPromise;
+    }
+    /**
+     * Close all resources associated with this server.
+     */
+    async close() {
+        this.logger.emit('mongodb-oidc-plugin:local-server-close', {
+            url: this.redirectUrl.toString(),
+        });
+        const servers = this.servers;
+        this.servers = [];
+        await Promise.all(servers.map(async (server) => {
+            server.close();
+            await (0, events_1.once)(server, 'close');
+        }));
+    }
+    /**
+     * Convenience method to wait until a single successful OIDC parameter
+     * request is received or abort early, and close the server in any case.
+     */
+    async waitForOIDCParamsAndClose({ signal, } = {}) {
+        try {
+            return await (0, util_2.withAbortCheck)(signal, async ({ signalPromise }) => {
+                return await Promise.race([this.waitForOIDCParams(), signalPromise]);
+            });
+        }
+        finally {
+            await this.close();
+        }
+    }
+}
+exports.RFC8252HTTPServer = RFC8252HTTPServer;
+function defaultRedirectServerHandler(info) {
+    const { res, result, status } = info;
+    res.statusCode = status;
+    res.setHeader('Content-Type', 'text/plain');
+    switch (result) {
+        case 'accepted':
+            res.end('Authentication successful! You can close this window now.');
+            return;
+        case 'rejected': {
+            const { error, errorDescription, errorURI } = info;
+            let text = 'Authentication failed!\n';
+            if (error)
+                text += `Error: ${error}\n`;
+            if (errorDescription)
+                text += `Details: ${errorDescription}\n`;
+            if (errorURI)
+                text += `More information: ${errorURI}\n`;
+            res.end(text);
+            return;
+        }
+        case 'unknown-url':
+            res.end('Not found');
+            return;
+    }
+}
+// Ensure that `str` confirms to the `NQSCHAR` definition used in RFC6749 (OAuth 2.0)
+// and return `undefined` if it is empty or non-conforming.
+// (This deviates from the spec slightly in that it allows characters outside of ASCII).
+function ensureNQSChar(str) {
+    // eslint-disable-next-line no-control-regex
+    if (!str || /[\x00-\x1f\x22\x5c\x7f]/.test(str))
+        return undefined;
+    return str;
+}
+function ensureURI(str) {
+    if (!str)
+        return undefined;
+    try {
+        new URL(str);
+        return str;
+    }
+    catch {
+        return undefined;
+    }
+}
+//# sourceMappingURL=rfc-8252-http-server.js.map

package/dist/rfc-8252-http-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rfc-8252-http-server.js","sourceRoot":"","sources":["../src/rfc-8252-http-server.ts"],"names":[],"mappings":";;;;;;AAAA,+BAAwD;AAGxD,6BAAkD;AAClD,mCAA4C;AAE5C,sDAA8B;AAC9B,+BAAiC;AACjC,mCAAqC;AAMrC,mCAA2C;AAC3C,iCAAwC;AAgBxC,gBAAgB;AAChB,MAAa,iBAAiB;IAqB5B,YAAY,OAAiC;QAhBrC,YAAO,GAAiB,EAAE,CAAC;QAElB,cAAS,GAAG,IAAI,GAAG,EAGjC,CAAC;QAgDI,mBAAc,GAAmB,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YAC1D,MAAM,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;YAC5B,IAAI,CAAC,UAAU,EAAE;gBACf,OAAO,IAAI,EAAE,CAAC;aACf;YACD,IAAI,CAAC,qBAAqB,CAAC;gBACzB,GAAG;gBACH,GAAG;gBACH,MAAM,EAAE,UAAU;gBAClB,MAAM,EAAE,GAAG;aACZ,CAAC,CAAC;YACH,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;gBACpB,IAAI,CAAC,iBAAiB,EAAE,CAAC,UAAU,CAAC,CAAC;YACvC,CAAC,CAAC,CAAC;QACL,CAAC,CAAC;QAEM,8BAAyB,GAAmC,CAClE,GAAG,EACH,GAAG,EACH,IAAI,EACJ,EAAE;YACF,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAChD,IAAI,CAAC,KAAK;gBAAE,OAAO,IAAI,EAAE,CAAC;YAE1B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,6CAA6C,EAAE;gBAC9D,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE;aAClB,CAAC,CAAC;YACH,6DAA6D;YAC7D,uBAAuB;YACvB,KAAK,CAAC,UAAU,EAAE,CAAC;YACnB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAChB,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;YACrC,GAAG,CAAC,IAAI,EAAE,CAAC;QACb,CAAC,CAAC;QAEM,wBAAmB,GAAmB,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YACzD,MAAM,OAAO,GAAG,IAAI,CAAC,oBAAoB,CAAC;YAC1C,IAAI,CAAC,OAAO,EAAE;gBACZ,MAAM,IAAI,wBAAgB,CAAC,2CAA2C,CAAC,CAAC;aACzE;YAED,IAAI,sBAAsB,GAAG,KAAK,CAAC;YACnC,MAAM,MAAM,GAAG,CACb,IAGC,EACD,EAAE;gBACF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,4CAA4C,EAAE;oBAC7D,MAAM,EAAE,GAAG,CAAC,MAAM;oBAClB,OAAO;oBACP,SAAS,EAAE,IAAI,CAAC,KAAK,IAAI,eAAe;oBACxC,sBAAsB;iBACvB,CAAC,CAAC;gBAEH,IAAI,CAAC,qBAAqB,CAAC;oBACzB,GAAG;oBACH,GAAG;oBACH,MAAM,EAAE,UAAU;oBAClB,GAAG,IAAI;iBACR,CAAC,CAAC;gBAEH,IAAI,sBAAsB,EAAE;oBAC1B,IAAI,CAAC,gBAAgB,EAAE,CACrB,IAAI,wBAAgB,CAClB,GAAG,IAAI,CAAC,KAAK,IAAI,cAAc,KAC7B,IAAI,CAAC,gBAAgB,IAAI,cAC3B,EAAE,CACH,CACF,CAAC;iBACH;YACH,CAAC,CAAC;YAEF,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YACtC,iEAAiE;YACjE,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;YACvD,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,OAAO,EAAE;gBACpC,0CAA0C;gBAC1C,iEAAiE;gBACjE,GAAG,CAAC,MAAM,GAAG,IAAI,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;aACvE;iBAAM,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE;gBAC/B,MAAM,CAAC;oBACL,MAAM,EAAE,GAAG;oBACX,KAAK,EAAE,gBAAgB;oBACvB,gBAAgB,EAAE,qBAAqB;iBACxC,CAAC,CAAC;gBACH,OAAO;aACR;YAED,8EAA8E;YAC9E,wEAAwE;YACxE,wEAAwE;YACxE,0EAA0E;YAC1E,2DAA2D;YAC3D,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,cAAc,EAAE;gBACzD,MAAM,CAAC;oBACL,MAAM,EAAE,GAAG;oBACX,KAAK,EAAE,gBAAgB;oBACvB,gBAAgB,EAAE,EAAE;iBACrB,CAAC,CAAC;gBACH,OAAO;aACR;YACD,sBAAsB,GAAG,IAAI,CAAC;YAE9B,MAAM,UAAU,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAC;YAClC,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,IAAI,IAAI,CAAC,UAAU,KAAK,UAAU,EAAE;gBACnE,wCAAwC;gBACxC,MAAM,CAAC;oBACL,MAAM,EAAE,GAAG;oBACX,KAAK,EAAE,uBAAuB;oBAC9B,gBAAgB,EACd,yEAAyE;iBAC5E,CAAC,CAAC;gBACH,OAAO;aACR;YACD,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;YAC7B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,4CAA4C,EAAE;gBAC7D,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,OAAO;gBACP,SAAS,EAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,SAAS;aACtD,CAAC,CAAC;YAEH,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE;gBACjC,MAAM,CAAC;oBACL,MAAM,EAAE,GAAG;oBACX,mFAAmF;oBACnF,KAAK,EACH,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,qBAAqB;oBACvE,gBAAgB,EAAE,aAAa,CAC7B,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAC1C;oBACD,QAAQ,EAAE,SAAS,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;iBACvD,CAAC,CAAC;gBACH,OAAO;aACR;YAED,2EAA2E;YAC3E,2EAA2E;YAC3E,oEAAoE;YACpE,sEAAsE;YACtE,+CAA+C;YAC/C,KAAK,CAAC,KAAK,IAAI,EAAE;gBACf,yEAAyE;gBACzE,sEAAsE;gBACtE,kBAAkB;gBAClB,MAAM,KAAK,GAAG,CAAC,MAAM,IAAA,gBAAS,EAAC,oBAAW,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;gBACjE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,+CAA+C;gBAChE,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,YAAY,KAAK,EAAE,CAAC,CAAC;gBACzC,GAAG,CAAC,IAAI,EAAE,CAAC;YACb,CAAC,CAAC,EAAE,CAAC;QACP,CAAC,CAAC;QAEM,qBAAgB,GAAmB,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YACtD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,0CAA0C,EAAE;gBAC3D,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,IAAI,EAAE,GAAG,CAAC,GAAG;aACd,CAAC,CAAC;YAEH,IAAI,CAAC,qBAAqB,CAAC;gBACzB,GAAG;gBACH,GAAG;gBACH,MAAM,EAAE,aAAa;gBACrB,MAAM,EAAE,GAAG;aACZ,CAAC,CAAC;QACL,CAAC,CAAC;QAxMA,IAAI,CAAC,WAAW,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAChD,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC;QAC7C,IAAI,CAAC,qBAAqB;YACxB,OAAO,CAAC,4BAA4B,IAAI,4BAA4B,CAAC;QACvE,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,IAAI,qBAAY,EAAE,CAAC;QACnD,IAAI,CAAC,iBAAiB,GAAG,IAAI,OAAO,CAClC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAClB,CAAC,CAAC,IAAI,CAAC,iBAAiB,EAAE,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CACxE,CAAC;QAEF,IAAI,CAAC,UAAU,GAAG,IAAA,iBAAO,GAAE,CAAC;QAC5B,0EAA0E;QAC1E,wEAAwE;QACxE,kCAAkC;QAClC,mEAAmE;QACnE,2EAA2E;QAC3E,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,iBAAO,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QAC7D,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,iBAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QACpC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YACrC,yEAAyE;YACzE,yDAAyD;YACzD,GAAG,CAAC,SAAS,CAAC,yBAAyB,EAAE,oBAAoB,CAAC,CAAC;YAC/D,GAAG,CAAC,SAAS,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC;YAChD,IAAI,EAAE,CAAC;QACT,CAAC,CAAC,CAAC;QAEH,+BAA+B;QAC/B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,CAAC,yBAAyB,CAAC,CAAC;QACrE,iCAAiC;QACjC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC;QACzE,gBAAgB;QAChB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,iBAAiB,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;QAC5D,mBAAmB;QACnB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAClD,CAAC;IAwKD;;OAEG;IACI,KAAK,CAAC,WAAW,CAAC,SAAiB;QAIxC,MAAM,OAAO,GAAG,IAAI,CAAC,oBAAoB,CAAC;QAC1C,IAAI,CAAC,OAAO,EAAE;YACZ,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;SACvE;QACD,MAAM,IAAI,GAAG,CAAC,MAAM,IAAA,gBAAS,EAAC,oBAAW,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAChE,MAAM,UAAU,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YAC/C,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;QAC/D,CAAC,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,YAAY,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;QAClE,OAAO;YACL,QAAQ;YACR,UAAU;SACX,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,IAAW,aAAa;QACtB,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QAChD,MAAM,KAAK,GAAG,IAAI,GAAG,CACnB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAE,GAAG,CAAC,OAAO,EAAkB,EAAE,IAAI,CAAC,CAChE,CAAC;QACF,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/C,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE;YAC5B,sBAAsB;YACtB,MAAM,IAAI,wBAAgB,CACxB,8CAA8C,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CACrE,CAAC;SACH;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;OAIG;IACH,IAAW,oBAAoB;QAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,CAAC;QAChC,IAAI,CAAC,IAAI;YAAE,OAAO,SAAS,CAAC;QAC5B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC,CAAC;QACjD,GAAG,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QACxB,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;IACxB,CAAC;IAED;;;OAGG;IACI,KAAK,CAAC,MAAM;QACjB,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS,EAAE;YACpC,MAAM,IAAI,wBAAgB,CACxB,wBAAwB,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,EAAE,CACtD,CAAC;SACH;QAED,IAAI,IAAI,CAAC,WAAW,CAAC,QAAQ,KAAK,OAAO,EAAE;YACzC,MAAM,IAAI,wBAAgB,CACxB,gDAAgD,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,CAC5E,CAAC;SACH;QAED,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,0CAA0C,EAAE;YAC3D,GAAG,EAAE,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE;SACjC,CAAC,CAAC;QAEH,6DAA6D;QAC7D,mEAAmE;QACnE,uEAAuE;QACvE,kEAAkE;QAClE,oEAAoE;QACpE,oEAAoE;QACpE,sEAAsE;QACtE,yEAAyE;QACzE,mEAAmE;QACnE,gEAAgE;QAChE,sEAAsE;QACtE,mEAAmE;QACnE,sCAAsC;QACtC,IAAI,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC;QACzC,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC;YACpD,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACnC,MAAM,UAAU,GAAG,MAAM,cAAG,CAAC,MAAM,CAAC,QAAQ,EAAE;YAC5C,GAAG,EAAE,IAAI;YACT,KAAK,EAAE,gBAAU;SAClB,CAAC,CAAC;QAEH,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE;YAC3B,MAAM,IAAI,wBAAgB,CACxB,iBAAiB,IAAI,CAAC,WAAW,CAAC,QAAQ,sBAAsB,CACjE,CAAC;SACH;QAED,IAAI;YACF,MAAM,OAAO,GACX,IAAI,CAAC,WAAW,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;YAE7D,oEAAoE;YACpE,mEAAmE;YACnE,iEAAiE;YACjE,6CAA6C;YAC7C,kEAAkE;YAClE,qEAAqE;YACrE,uEAAuE;YACvE,kEAAkE;YAClE,uEAAuE;YACvE,mEAAmE;YACnE,kBAAkB;YAClB,uEAAuE;YACvE,sEAAsE;YACtE,0CAA0C;YAC1C,MAAM,YAAY,GAAG,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5C,KAAK,IAAI,QAAQ,GAAG,CAAC,GAAI,QAAQ,EAAE,EAAE;gBACnC,IAAI,IAAI,GAAG,OAAO,CAAC;gBACnB,IAAI,MAAM,GAAG,CAAC,CAAC;gBACf,IAAI,OAAO,KAAK,CAAC,EAAE;oBACjB,MAAM,GAAG,CAAC,CAAC;oBACX,6DAA6D;oBAC7D,MAAM,WAAW,GAAG,IAAI,CAAC,qBAAqB,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;oBACjE,IAAI,CAAC,OAAO,GAAG,CAAC,WAAW,CAAC,CAAC;oBAC7B,MAAM,IAAA,aAAI,EAAC,WAAW,EAAE,WAAW,CAAC,CAAC;oBACrC,IAAI,GAAI,WAAW,CAAC,OAAO,EAAkB,EAAE,IAAI,CAAC;oBACpD,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE;wBAC5B,sBAAsB;wBACtB,MAAM,IAAI,wBAAgB,CACxB,gBAAgB,UAAU,CAAC,CAAC,CAAC,CAAC,OAAO,wBAAwB,CAC9D,CAAC;qBACH;iBACF;gBACD,IAAI;oBACF,oEAAoE;oBACpE,MAAM,YAAY,GAAG,UAAU;yBAC5B,KAAK,CAAC,MAAM,CAAC;yBACb,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,qBAAqB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC;oBACnE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,CAAC;oBACnC,MAAM,OAAO,CAAC,GAAG,CACf,YAAY,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAA,aAAI,EAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CACxD,CAAC;oBACF,MAAM;iBACP;gBAAC,OAAO,GAAY,EAAE;oBACrB,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;oBACnB,IAAI,QAAQ,KAAK,YAAY;wBAAE,MAAM,GAAG,CAAC;iBAC1C;aACF;SACF;QAAC,OAAO,GAAY,EAAE;YACrB,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;YACnB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,yCAAyC,EAAE;gBAC1D,GAAG,EAAE,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE;aACjC,CAAC,CAAC;YACH,MAAM,GAAG,CAAC;SACX;QAED,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,4CAA4C,EAAE;YAC7D,GAAG,EAAE,IAAI,CAAC,oBAAoB,IAAI,EAAE;YACpC,UAAU,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC;SAC7D,CAAC,CAAC;IACL,CAAC;IAEO,qBAAqB,CAC3B,SAAwB,EACxB,IAAY;QAEZ,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;QAC5C,MAAM,MAAM,GAAG,IAAA,mBAAgB,EAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;QACzE,MAAM,CAAC,MAAM,CAAC;YACZ,IAAI;YACJ,IAAI;YACJ,kEAAkE;YAClE,+DAA+D;YAC/D,SAAS,EAAE,IAAI;YACf,gEAAgE;YAChE,oEAAoE;YACpE,mCAAmC;YACnC,QAAQ,EAAE,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;SAC1C,CAAC,CAAC;QACH,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;OAGG;IACI,KAAK,CAAC,iBAAiB;QAC5B,OAAO,MAAM,IAAI,CAAC,iBAAiB,CAAC;IACtC,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,KAAK;QAChB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wCAAwC,EAAE;YACzD,GAAG,EAAE,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE;SACjC,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC7B,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC;QAClB,MAAM,OAAO,CAAC,GAAG,CACf,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;YAC3B,MAAM,CAAC,KAAK,EAAE,CAAC;YACf,MAAM,IAAA,aAAI,EAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC9B,CAAC,CAAC,CACH,CAAC;IACJ,CAAC;IAED;;;OAGG;IACI,KAAK,CAAC,yBAAyB,CAAC,EACrC,MAAM,MAGJ,EAAE;QACJ,IAAI;YACF,OAAO,MAAM,IAAA,qBAAc,EAAC,MAAM,EAAE,KAAK,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE;gBAC9D,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,aAAa,CAAC,CAAC,CAAC;YACvE,CAAC,CAAC,CAAC;SACJ;gBAAS;YACR,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;SACpB;IACH,CAAC;CACF;AArcD,8CAqcC;AAED,SAAS,4BAA4B,CAAC,IAA+B;IACnE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IACrC,GAAG,CAAC,UAAU,GAAG,MAAM,CAAC;IACxB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC;IAC5C,QAAQ,MAAM,EAAE;QACd,KAAK,UAAU;YACb,GAAG,CAAC,GAAG,CAAC,2DAA2D,CAAC,CAAC;YACrE,OAAO;QACT,KAAK,UAAU,CAAC,CAAC;YACf,MAAM,EAAE,KAAK,EAAE,gBAAgB,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC;YACnD,IAAI,IAAI,GAAG,0BAA0B,CAAC;YACtC,IAAI,KAAK;gBAAE,IAAI,IAAI,UAAU,KAAK,IAAI,CAAC;YACvC,IAAI,gBAAgB;gBAAE,IAAI,IAAI,YAAY,gBAAgB,IAAI,CAAC;YAC/D,IAAI,QAAQ;gBAAE,IAAI,IAAI,qBAAqB,QAAQ,IAAI,CAAC;YACxD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACd,OAAO;SACR;QACD,KAAK,aAAa;YAChB,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACrB,OAAO;KACV;AACH,CAAC;AAED,qFAAqF;AACrF,2DAA2D;AAC3D,wFAAwF;AACxF,SAAS,aAAa,CAAC,GAA8B;IACnD,4CAA4C;IAC5C,IAAI,CAAC,GAAG,IAAI,yBAAyB,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAClE,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,SAAS,CAAC,GAA8B;IAC/C,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,IAAI;QACF,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QACb,OAAO,GAAG,CAAC;KACZ;IAAC,MAAM;QACN,OAAO,SAAS,CAAC;KAClB;AACH,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,115 @@
+/** @public */
+export interface MongoDBOIDCLogEventsMap {
+    'mongodb-oidc-plugin:local-redirect-accessed': (event: {
+        id: string;
+    }) => void;
+    'mongodb-oidc-plugin:oidc-callback-accepted': (event: {
+        method: string;
+        hasBody: boolean;
+        errorCode?: string;
+    }) => void;
+    'mongodb-oidc-plugin:oidc-callback-rejected': (event: {
+        method: string;
+        hasBody: boolean;
+        errorCode: string;
+        isAcceptedOIDCResponse: boolean;
+    }) => void;
+    'mongodb-oidc-plugin:unknown-url-accessed': (event: {
+        method: string;
+        path: string;
+    }) => void;
+    'mongodb-oidc-plugin:local-listen-started': (event: {
+        url: string;
+    }) => void;
+    'mongodb-oidc-plugin:local-listen-failed': (event: {
+        url: string;
+    }) => void;
+    'mongodb-oidc-plugin:local-listen-succeeded': (event: {
+        url: string;
+        interfaces: string[];
+    }) => void;
+    'mongodb-oidc-plugin:local-server-close': (event: {
+        url: string;
+    }) => void;
+    'mongodb-oidc-plugin:open-browser': (event: {
+        customOpener: boolean;
+    }) => void;
+    'mongodb-oidc-plugin:notify-device-flow': () => void;
+    'mongodb-oidc-plugin:auth-attempt-started': (event: {
+        flow: string;
+    }) => void;
+    'mongodb-oidc-plugin:auth-attempt-succeeded': () => void;
+    'mongodb-oidc-plugin:auth-attempt-failed': (event: {
+        error: string;
+    }) => void;
+    'mongodb-oidc-plugin:refresh-failed': (event: {
+        error: string;
+    }) => void;
+    'mongodb-oidc-plugin:skip-auth-attempt': (event: {
+        reason: string;
+    }) => void;
+    'mongodb-oidc-plugin:auth-failed': (event: {
+        error: string;
+    }) => void;
+    'mongodb-oidc-plugin:auth-succeeded': (event: {
+        hasRefreshToken: boolean;
+        expiresAt: string | null;
+    }) => void;
+}
+/** @public */
+export interface TypedEventEmitter<EventMap extends object> {
+    on<K extends keyof EventMap>(event: K, listener: EventMap[K]): this;
+    once<K extends keyof EventMap>(event: K, listener: EventMap[K]): this;
+    emit<K extends keyof EventMap>(event: K, ...args: EventMap[K] extends (...args: infer P) => any ? P : never): unknown;
+}
+/**
+ * A copy of the Node.js driver's `OIDCMechanismServerStep1`
+ * @public
+ */
+export interface OIDCMechanismServerStep1 {
+    authorizationEndpoint?: string;
+    tokenEndpoint?: string;
+    deviceAuthorizationEndpoint?: string;
+    clientId: string;
+    clientSecret?: string;
+    requestScopes?: string[];
+}
+/**
+ * A copy of the Node.js driver's `OIDCRequestTokenResult`
+ * @public
+ */
+export interface OIDCRequestTokenResult {
+    accessToken: string;
+    expiresInSeconds?: number;
+    refreshToken?: string;
+}
+/**
+ * A copy of the Node.js driver's `OIDCRequestFunction`
+ * @public
+ */
+export type OIDCRequestFunction = (principalName: string | undefined, idl: OIDCMechanismServerStep1, abortSignal?: OIDCAbortSignal | number) => Promise<OIDCRequestTokenResult>;
+/**
+ * A copy of the Node.js driver's `OIDCRefreshFunction`
+ * @public
+ */
+export type OIDCRefreshFunction = (principalName: string | undefined, idl: OIDCMechanismServerStep1, result: OIDCRequestTokenResult, abortSignal?: OIDCAbortSignal | number) => Promise<OIDCRequestTokenResult>;
+/** @public */
+export type OIDCAbortSignal = {
+    aborted: boolean;
+    reason?: unknown;
+    addEventListener(type: 'abort', callback: () => void, options?: {
+        once: boolean;
+    }): void;
+    removeEventListener(type: 'abort', callback: () => void): void;
+};
+/** @internal */
+declare const MongoDBOIDCErrorTag: unique symbol;
+/** @public */
+export declare class MongoDBOIDCError extends Error {
+    /** @internal */
+    private [MongoDBOIDCErrorTag];
+    constructor(message: string);
+    static isMongoDBOIDCError(value: unknown): value is MongoDBOIDCError;
+}
+export {};
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,cAAc;AACd,MAAM,WAAW,uBAAuB;IACtC,6CAA6C,EAAE,CAAC,KAAK,EAAE;QACrD,EAAE,EAAE,MAAM,CAAC;KACZ,KAAK,IAAI,CAAC;IACX,4CAA4C,EAAE,CAAC,KAAK,EAAE;QACpD,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,OAAO,CAAC;QACjB,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,KAAK,IAAI,CAAC;IACX,4CAA4C,EAAE,CAAC,KAAK,EAAE;QACpD,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,OAAO,CAAC;QACjB,SAAS,EAAE,MAAM,CAAC;QAClB,sBAAsB,EAAE,OAAO,CAAC;KACjC,KAAK,IAAI,CAAC;IACX,0CAA0C,EAAE,CAAC,KAAK,EAAE;QAClD,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,EAAE,MAAM,CAAC;KACd,KAAK,IAAI,CAAC;IACX,0CAA0C,EAAE,CAAC,KAAK,EAAE;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;IAC7E,yCAAyC,EAAE,CAAC,KAAK,EAAE;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;IAC5E,4CAA4C,EAAE,CAAC,KAAK,EAAE;QACpD,GAAG,EAAE,MAAM,CAAC;QACZ,UAAU,EAAE,MAAM,EAAE,CAAC;KACtB,KAAK,IAAI,CAAC;IACX,wCAAwC,EAAE,CAAC,KAAK,EAAE;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;IAC3E,kCAAkC,EAAE,CAAC,KAAK,EAAE;QAC1C,YAAY,EAAE,OAAO,CAAC;KACvB,KAAK,IAAI,CAAC;IACX,wCAAwC,EAAE,MAAM,IAAI,CAAC;IACrD,0CAA0C,EAAE,CAAC,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;IAC9E,4CAA4C,EAAE,MAAM,IAAI,CAAC;IACzD,yCAAyC,EAAE,CAAC,KAAK,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;IAC9E,oCAAoC,EAAE,CAAC,KAAK,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;IACzE,uCAAuC,EAAE,CAAC,KAAK,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;IAC7E,iCAAiC,EAAE,CAAC,KAAK,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;IACtE,oCAAoC,EAAE,CAAC,KAAK,EAAE;QAC5C,eAAe,EAAE,OAAO,CAAC;QACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;KAC1B,KAAK,IAAI,CAAC;CACZ;AAED,cAAc;AACd,MAAM,WAAW,iBAAiB,CAAC,QAAQ,SAAS,MAAM;IAExD,EAAE,CAAC,CAAC,SAAS,MAAM,QAAQ,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;IACpE,IAAI,CAAC,CAAC,SAAS,MAAM,QAAQ,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;IACtE,IAAI,CAAC,CAAC,SAAS,MAAM,QAAQ,EAC3B,KAAK,EAAE,CAAC,EAER,GAAG,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,KAAK,GAAG,GAAG,CAAC,GAAG,KAAK,GACjE,OAAO,CAAC;CACZ;AASD;;;GAGG;AACH,MAAM,WAAW,wBAAwB;IACvC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,2BAA2B,CAAC,EAAE,MAAM,CAAC;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED;;;GAGG;AACH,MAAM,WAAW,sBAAsB;IACrC,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;GAGG;AACH,MAAM,MAAM,mBAAmB,GAAG,CAChC,aAAa,EAAE,MAAM,GAAG,SAAS,EACjC,GAAG,EAAE,wBAAwB,EAC7B,WAAW,CAAC,EAAE,eAAe,GAAG,MAAM,KACnC,OAAO,CAAC,sBAAsB,CAAC,CAAC;AAErC;;;GAGG;AACH,MAAM,MAAM,mBAAmB,GAAG,CAChC,aAAa,EAAE,MAAM,GAAG,SAAS,EACjC,GAAG,EAAE,wBAAwB,EAC7B,MAAM,EAAE,sBAAsB,EAC9B,WAAW,CAAC,EAAE,eAAe,GAAG,MAAM,KACnC,OAAO,CAAC,sBAAsB,CAAC,CAAC;AAErC,cAAc;AACd,MAAM,MAAM,eAAe,GAAG;IAC5B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,gBAAgB,CACd,IAAI,EAAE,OAAO,EACb,QAAQ,EAAE,MAAM,IAAI,EACpB,OAAO,CAAC,EAAE;QAAE,IAAI,EAAE,OAAO,CAAA;KAAE,GAC1B,IAAI,CAAC;IACR,mBAAmB,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,IAAI,GAAG,IAAI,CAAC;CAChE,CAAC;AAEF,gBAAgB;AAChB,QAAA,MAAM,mBAAmB,eAAqD,CAAC;AAC/E,cAAc;AACd,qBAAa,gBAAiB,SAAQ,KAAK;IACzC,gBAAgB;IAChB,OAAO,CAAC,CAAC,mBAAmB,CAAC,CAAQ;gBAEzB,OAAO,EAAE,MAAM;IAI3B,MAAM,CAAC,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,gBAAgB;CAMrE"}

package/dist/types.js

@@ -0,0 +1,22 @@
+"use strict";
+var _a;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MongoDBOIDCError = void 0;
+/** @internal */
+const MongoDBOIDCErrorTag = Symbol.for('@@mdb.oidcplugin.MongoDBOIDCErrorTag');
+/** @public */
+class MongoDBOIDCError extends Error {
+    constructor(message) {
+        super(message);
+        /** @internal */
+        this[_a] = true;
+    }
+    static isMongoDBOIDCError(value) {
+        return (
+        // eslint-disable-next-line @typescript-eslint/no-explicit-any
+        value && typeof value === 'object' && value[MongoDBOIDCErrorTag]);
+    }
+}
+exports.MongoDBOIDCError = MongoDBOIDCError;
+_a = MongoDBOIDCErrorTag;
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":";;;;AAsHA,gBAAgB;AAChB,MAAM,mBAAmB,GAAG,MAAM,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC;AAC/E,cAAc;AACd,MAAa,gBAAiB,SAAQ,KAAK;IAIzC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QAJjB,gBAAgB;QACR,QAAqB,GAAG,IAAI,CAAC;IAIrC,CAAC;IAED,MAAM,CAAC,kBAAkB,CAAC,KAAc;QACtC,OAAO;QACL,8DAA8D;QAC9D,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAK,KAAa,CAAC,mBAAmB,CAAC,CAC1E,CAAC;IACJ,CAAC;CACF;AAdD,4CAcC;KAZU,mBAAmB"}

package/dist/util.d.ts

@@ -0,0 +1,22 @@
+/// <reference types="node" />
+import type { OIDCAbortSignal } from './types';
+export declare function throwIfAborted(signal?: OIDCAbortSignal): void;
+interface AbortCheckArgs {
+    signalCheck: () => void;
+    signalPromise: Promise<never>;
+}
+export declare function withAbortCheck<T extends (abortCheck: AbortCheckArgs) => Promise<any>>(signal: OIDCAbortSignal | undefined, fn: T): Promise<ReturnType<T>>;
+export declare function errorString(err: unknown): string;
+export declare const AbortController: {
+    new (): AbortController;
+    prototype: AbortController;
+};
+export declare const AbortSignal: {
+    new (): AbortSignal;
+    prototype: AbortSignal;
+    abort(reason?: any): AbortSignal;
+    timeout(milliseconds: number): AbortSignal;
+};
+export declare function timeoutSignal(ms: number): AbortSignal;
+export {};
+//# sourceMappingURL=util.d.ts.map

package/dist/util.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"util.d.ts","sourceRoot":"","sources":["../src/util.ts"],"names":[],"mappings":";AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAQ/C,wBAAgB,cAAc,CAAC,MAAM,CAAC,EAAE,eAAe,GAAG,IAAI,CAE7D;AAED,UAAU,cAAc;IACtB,WAAW,EAAE,MAAM,IAAI,CAAC;IACxB,aAAa,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;CAC/B;AACD,wBAAsB,cAAc,CAElC,CAAC,SAAS,CAAC,UAAU,EAAE,cAAc,KAAK,OAAO,CAAC,GAAG,CAAC,EACtD,MAAM,EAAE,eAAe,GAAG,SAAS,EAAE,EAAE,EAAE,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAoBpE;AAED,wBAAgB,WAAW,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAIhD;AAED,eAAO,MAAM,eAAe;;;CAE+C,CAAC;AAC5E,eAAO,MAAM,WAAW;;;;;CAE2C,CAAC;AAGpE,wBAAgB,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,WAAW,CAIrD"}