@monocloud/auth-core 0.1.10 → 0.1.12

package/dist/index.cjs

@@ -1,7 +1,6 @@
-Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
-const require_utils_internal = require('./utils/internal.cjs');
-const require_utils_index = require('./utils/index.cjs');
-
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const require_utils_internal = require("./utils/internal.cjs");
+const require_utils_index = require("./utils/index.cjs");
 //#region src/errors/monocloud-auth-base-error.ts
 /**
 * Base class for all MonoCloud authentication errors.
@@ -11,7 +10,6 @@ const require_utils_index = require('./utils/index.cjs');
 * @category Error Classes
 */
 var MonoCloudAuthBaseError = class extends Error {};
-
 //#endregion
 //#region src/errors/monocloud-op-error.ts
 /**
@@ -28,7 +26,6 @@ var MonoCloudOPError = class extends MonoCloudAuthBaseError {
 		this.errorDescription = errorDescription;
 	}
 };
-
 //#endregion
 //#region src/errors/monocloud-http-error.ts
 /**
@@ -39,7 +36,6 @@ var MonoCloudOPError = class extends MonoCloudAuthBaseError {
 * @category Error Classes
 */
 var MonoCloudHttpError = class extends MonoCloudAuthBaseError {};
-
 //#endregion
 //#region src/errors/monocloud-token-error.ts
 /**
@@ -48,7 +44,6 @@ var MonoCloudHttpError = class extends MonoCloudAuthBaseError {};
 * @category Error Classes
 */
 var MonoCloudTokenError = class extends MonoCloudAuthBaseError {};
-
 //#endregion
 //#region src/errors/monocloud-validation-error.ts
 /**
@@ -57,10 +52,8 @@ var MonoCloudTokenError = class extends MonoCloudAuthBaseError {};
 * @category Error Classes
 */
 var MonoCloudValidationError = class extends MonoCloudAuthBaseError {};
-
 //#endregion
 //#region src/helper.ts
-const JWT_ASSERTION_CLOCK_SKEW = 5;
 function assertMetadataProperty(metadata, property) {
 	if (metadata[property] === void 0 || metadata[property] === null) throw new MonoCloudValidationError(`${property} endpoint is required but not available in the issuer metadata`);
 }
@@ -82,7 +75,6 @@ const deserializeJson = async (res) => {
 		);
 	}
 };
-
 //#endregion
 //#region src/monocloud-oidc-client-base.ts
 /**
@@ -180,7 +172,6 @@ var MonoCloudOidcClientBase = class {
 		}
 	}
 };
-
 //#endregion
 //#region src/client-auth.ts
 const algToSubtle = (alg) => {
@@ -212,6 +203,7 @@ const algToSubtle = (alg) => {
 			name: "ECDSA",
 			namedCurve: "P-521"
 		};
+		/* v8 ignore next */
 		default: throw new Error("unsupported JWS algorithm");
 	}
 };
@@ -220,6 +212,7 @@ const psAlg = (key) => {
 		case "SHA-256": return "PS256";
 		case "SHA-384": return "PS384";
 		case "SHA-512": return "PS512";
+		/* v8 ignore next */
 		default: throw new Error("unsupported RsaHashedKeyAlgorithm hash name");
 	}
 };
@@ -228,6 +221,7 @@ const rsAlg = (key) => {
 		case "SHA-256": return "RS256";
 		case "SHA-384": return "RS384";
 		case "SHA-512": return "RS512";
+		/* v8 ignore next */
 		default: throw new Error("unsupported RsaHashedKeyAlgorithm hash name");
 	}
 };
@@ -236,6 +230,7 @@ const esAlg = (key) => {
 		case "P-256": return "ES256";
 		case "P-384": return "ES384";
 		case "P-521": return "ES512";
+		/* v8 ignore next */
 		default: throw new Error("unsupported EcKeyAlgorithm namedCurve");
 	}
 };
@@ -244,6 +239,7 @@ const hsAlg = (key) => {
 		case "SHA-256": return "HS256";
 		case "SHA-384": return "HS384";
 		case "SHA-512": return "HS512";
+		/* v8 ignore next */
 		default: throw new Error("unsupported HMAC Algorithm hash");
 	}
 };
@@ -253,6 +249,7 @@ const keyToJws = (key) => {
 		case "RSA-PSS": return psAlg(key);
 		case "RSASSA-PKCS1-v1_5": return rsAlg(key);
 		case "ECDSA": return esAlg(key);
+		/* v8 ignore next */
 		default: throw new Error("unsupported CryptoKey algorithm name");
 	}
 };
@@ -267,6 +264,7 @@ const ecdsaHashName = (key) => {
 		case "P-256": return "SHA-256";
 		case "P-384": return "SHA-384";
 		case "P-521": return "SHA-512";
+		/* v8 ignore next */
 		default: throw new Error("unsupported ECDSA namedCurve");
 	}
 };
@@ -286,6 +284,7 @@ const keyToSubtle = (key) => {
 					name: key.algorithm.name,
 					saltLength: parseInt(key.algorithm.hash.name.slice(-3), 10) >> 3
 				};
+				/* v8 ignore next */
 				default: throw new Error("unsupported RSA-PSS hash name");
 			}
 		case "RSASSA-PKCS1-v1_5":
@@ -345,7 +344,6 @@ const clientAuth = async (clientId, clientSecret, method, issuer, headers, body,
 		default: throw new Error("Invalid Client Authentication Method");
 	}
 };
-
 //#endregion
 //#region src/monocloud-oidc-client.ts
 const FILTER_ID_TOKEN_CLAIMS = [
@@ -463,7 +461,7 @@ var MonoCloudOidcClient = class MonoCloudOidcClient extends MonoCloudOidcClientB
 			"content-type": "application/x-www-form-urlencoded",
 			accept: "application/json"
 		};
-		await clientAuth(this.clientId, this.clientSecret, this.authMethod, this.tenantDomain, headers, body, JWT_ASSERTION_CLOCK_SKEW);
+		await clientAuth(this.clientId, this.clientSecret, this.authMethod, this.tenantDomain, headers, body, 5);
 		const metadata = await this.getMetadata();
 		assertMetadataProperty(metadata, "pushed_authorization_request_endpoint");
 		const response = await innerFetch(metadata.pushed_authorization_request_endpoint, {
@@ -569,7 +567,7 @@ var MonoCloudOidcClient = class MonoCloudOidcClient extends MonoCloudOidcClientB
 			"content-type": "application/x-www-form-urlencoded",
 			accept: "application/json"
 		};
-		await clientAuth(this.clientId, this.clientSecret, this.authMethod, this.tenantDomain, headers, body, JWT_ASSERTION_CLOCK_SKEW);
+		await clientAuth(this.clientId, this.clientSecret, this.authMethod, this.tenantDomain, headers, body, 5);
 		const metadata = await this.getMetadata();
 		assertMetadataProperty(metadata, "token_endpoint");
 		const response = await innerFetch(metadata.token_endpoint, {
@@ -611,7 +609,7 @@ var MonoCloudOidcClient = class MonoCloudOidcClient extends MonoCloudOidcClientB
 			"content-type": "application/x-www-form-urlencoded",
 			accept: "application/json"
 		};
-		await clientAuth(this.clientId, this.clientSecret, this.authMethod, this.tenantDomain, headers, body, JWT_ASSERTION_CLOCK_SKEW);
+		await clientAuth(this.clientId, this.clientSecret, this.authMethod, this.tenantDomain, headers, body, 5);
 		const metadata = await this.getMetadata();
 		assertMetadataProperty(metadata, "token_endpoint");
 		const response = await innerFetch(metadata.token_endpoint, {
@@ -795,7 +793,7 @@ var MonoCloudOidcClient = class MonoCloudOidcClient extends MonoCloudOidcClientB
 		body.set("token", token);
 		if (tokenType) body.set("token_type_hint", tokenType);
 		const headers = { "content-type": "application/x-www-form-urlencoded" };
-		await clientAuth(this.clientId, this.clientSecret, this.authMethod, this.tenantDomain, headers, body, JWT_ASSERTION_CLOCK_SKEW);
+		await clientAuth(this.clientId, this.clientSecret, this.authMethod, this.tenantDomain, headers, body, 5);
 		const metadata = await this.getMetadata();
 		assertMetadataProperty(metadata, "revocation_endpoint");
 		const response = await innerFetch(metadata.revocation_endpoint, {
@@ -871,7 +869,6 @@ var MonoCloudOidcClient = class MonoCloudOidcClient extends MonoCloudOidcClientB
 		return claims;
 	}
 };
-
 //#endregion
 //#region src/monocloud-oidc-backend-client.ts
 /**
@@ -929,7 +926,7 @@ var MonoCloudOidcBackendClient = class extends MonoCloudOidcClientBase {
 			"content-type": "application/x-www-form-urlencoded",
 			accept: "application/json"
 		};
-		await clientAuth(this.clientId, this.clientSecret, this.authMethod, this.tenantDomain, headers, body, JWT_ASSERTION_CLOCK_SKEW);
+		await clientAuth(this.clientId, this.clientSecret, this.authMethod, this.tenantDomain, headers, body, 5);
 		const response = await innerFetch(metadata.introspection_endpoint, {
 			method: "POST",
 			body: body.toString(),
@@ -1056,7 +1053,6 @@ var MonoCloudOidcBackendClient = class extends MonoCloudOidcClientBase {
 		if (certHash !== clientCertHash) throw new MonoCloudTokenError("The certificate hash in the access token does not match the presented client certificate (certificate binding validation failed)");
 	}
 };
-
 //#endregion
 exports.MonoCloudAuthBaseError = MonoCloudAuthBaseError;
 exports.MonoCloudHttpError = MonoCloudHttpError;
@@ -1066,4 +1062,5 @@ exports.MonoCloudOidcClient = MonoCloudOidcClient;
 exports.MonoCloudOidcClientBase = MonoCloudOidcClientBase;
 exports.MonoCloudTokenError = MonoCloudTokenError;
 exports.MonoCloudValidationError = MonoCloudValidationError;
+
 //# sourceMappingURL=index.cjs.map