@mulverse/mulguard-core 1.0.0

package/providers/huggingface.d.ts

@@ -0,0 +1,216 @@
+/**
+ * <div class="provider" style={{backgroundColor: "#fff", display: "flex", justifyContent: "space-between", color: "#000", padding: 16}}>
+ * <span>Built-in <b>Hugging Face</b> integration.</span>
+ * <a href="https://huggingface.co">
+ *   <img style={{display: "block"}} src="https://authjs.dev/img/providers/huggingface.svg" height="48" width="48"/>
+ * </a>
+ * </div>
+ *
+ * @module providers/huggingface
+ */
+import type { OIDCConfig, OIDCUserConfig } from "./index.js";
+export interface HuggingfaceProfile {
+    /**
+     * Unique identifier for the user.
+     */
+    sub: string;
+    /**
+     * Full name of the user.
+     *
+     * Needs 'profile' scope
+     */
+    name?: string;
+    /**
+     * Username of the user.
+     *
+     * Need 'profile' scope
+     */
+    preferred_username?: string;
+    /**
+     * URL of the user's avatar.
+     *
+     * Need 'profile' scope
+     */
+    profile?: string;
+    /**
+     * URL of the user's profile picture.
+     *
+     * Need 'profile' scope
+     */
+    picture?: string;
+    /**
+     * Need 'profile' scope
+     *
+     * Website of the user.
+     */
+    website?: string;
+    /**
+     * Need 'email' scope
+     *
+     * Email address of the user.
+     */
+    email?: string;
+    /**
+     * Need 'email' scope
+     *
+     * Whether the user's email address is verified. Should always be true, Hugging Face enforces
+     * email verification for users to grant access to OAuth apps.
+     */
+    email_verified?: boolean;
+    /**
+     * Whether the user has a paid subscription.
+     */
+    isPro: boolean;
+    /**
+     * Whether the user has a payment method set up.
+     *
+     * Needs the `read-billing` scope.
+     */
+    canPay?: boolean;
+    /**
+     * List of the user's organizations.
+     */
+    orgs: Array<{
+        /**
+         * Unique identifier for the organization.
+         */
+        sub: string;
+        /**
+         * Name of the organization.
+         */
+        name: string;
+        /**
+         * URL of the organization's avatar.
+         */
+        picture: string;
+        /**
+         * Username of the organization.
+         */
+        preferred_username: string;
+        /**
+         * Whether the organization has a paid enterprise subscription.
+         */
+        isEnterprise: boolean;
+        /**
+         * Whether the organization has a payment method set up.
+         *
+         * Access to the organization needs to be granted to the oauth app for this field to be present.
+         */
+        canPay?: boolean;
+        /**
+         * The role of the user in the organization.
+         *
+         * Access to the organization needs to be granted to the oauth app for this field to be present.
+         */
+        roleInOrg?: "admin" | "write" | "read" | "contributor";
+        /**
+         * User needs to re-authenticate to access the organization.
+         *
+         * Access to the organization needs to be granted to the oauth app for this field to be present.
+         */
+        pendingSSO?: boolean;
+        /**
+         * User needs to enable MFA to access the organization.
+         *
+         * Access to the organization needs to be granted to the oauth app for this field to be present.
+         */
+        missingMFA?: boolean;
+        /**
+         * Resource groups are a feature of enterprise organizations.
+         *
+         * They allow granular access control to resources within the organization.
+         *
+         * Access to the organization needs to be granted to the oauth app for this field to be present.
+         */
+        resourceGroups?: Array<{
+            /**
+             * Unique identifier for the resource group.
+             */
+            sub: string;
+            name: string;
+            /**
+             * The role of the user in the resource group.
+             */
+            role: "read" | "write" | "admin" | "contributor";
+        }>;
+    }>;
+}
+/**
+ * Add HuggingFace login to your page.
+ *
+ * ### Setup
+ *
+ * #### Callback URL
+ * ```
+ * https://example.com/api/auth/callback/huggingface
+ * ```
+ *
+ * #### Configuration
+ *```ts
+ * import { Auth } from "@auth/core"
+ * import HuggingFace from "@auth/core/providers/huggingface"
+ *
+ * const request = new Request(origin)
+ * const response = await Auth(request, {
+ *   providers: [
+ *     HuggingFace({
+ *       clientId: HUGGINGFACE_CLIENT_ID,
+ *       clientSecret: HUGGINGFACE_CLIENT_SECRET,
+ *       authorization: {
+ *        params: {
+ *          scope: "openid profile email", // specify the scopes you need
+ *          //  orgIds: "unique_org_id" // If your oauth app needs access to a specific organization of the user
+ *        }
+ *       },
+ *     }),
+ *   ],
+ * })
+ * ```
+ *
+ * The following scopes are available:
+ *
+ * - `openid`: Grants access to the user's OpenID Connect profile.
+ * - `profile`: Grants access to the user's profile information.
+ * - `email`: Grants access to the user's email address.
+ * - `read-repos`: Grants read access to the user's repositories.
+ * - `write-repos`: Grants write access to the user's repositories.
+ * - `manage-repos`: Can create/delete repositories on behalf of the user.
+ * - `write-discussions`: Can post on the user's behalf.
+ * - `read-billing`: Know if the user has a payment method set up.
+ * - `inference-api`: Can make calls to Inference providers on behalf of the user.
+ * - `webhooks`: Can manage webhooks on behalf of the user.
+ *
+ * You need to enable them first in your OAuth app settings.
+ *
+ * /!\ By default, the `profile` and `email` scopes are enabled in NextAuth. So you need to enable
+ * the `email` scope in your OAuth app settings or you will get a scope error.
+ *
+ * ### Resources
+ *
+ *  - [Hugging Face OAuth documentation](https://huggingface.co/docs/hub/en/oauth#creating-an-oauth-app)
+ *  - [Create an OAuth application](https://huggingface.co/settings/applications/new)
+ *
+ * ### Notes
+ *
+ * By default, Auth.js assumes that the Hugging Face provider is
+ * based on the [OIDC](https://openid.net/specs/openid-connect-core-1_0.html) specification.
+ *
+ * :::tip
+ *
+ * The HuggingFace provider comes with a [default configuration](https://github.com/nextauthjs/next-auth/blob/main/packages/core/src/providers/huggingface.ts).
+ * To override the defaults for your use case, check out [customizing a built-in OAuth provider](https://authjs.dev/guides/configuring-oauth-providers).
+ *
+ * :::
+ *
+ * :::info **Disclaimer**
+ *
+ * If you think you found a bug in the default configuration, you can [open an issue](https://authjs.dev/new/provider-issue).
+ *
+ * Auth.js strictly adheres to the specification and it cannot take responsibility for any deviation from
+ * the spec by the provider. You can open an issue, but if the problem is non-compliance with the spec,
+ * we might not pursue a resolution. You can ask for more help in [Discussions](https://authjs.dev/new/github-discussions).
+ *
+ * :::
+ */
+export default function Huggingface(options: OIDCUserConfig<HuggingfaceProfile>): OIDCConfig<HuggingfaceProfile>;
+//# sourceMappingURL=huggingface.d.ts.map

package/providers/huggingface.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"huggingface.d.ts","sourceRoot":"","sources":["../src/providers/huggingface.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAE5D,MAAM,WAAW,kBAAkB;IACjC;;OAEG;IACH,GAAG,EAAE,MAAM,CAAA;IACX;;;;OAIG;IACH,IAAI,CAAC,EAAE,MAAM,CAAA;IACb;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB;;;;OAIG;IACH,KAAK,CAAC,EAAE,MAAM,CAAA;IACd;;;;;OAKG;IACH,cAAc,CAAC,EAAE,OAAO,CAAA;IACxB;;OAEG;IACH,KAAK,EAAE,OAAO,CAAA;IACd;;;;OAIG;IACH,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB;;OAEG;IACH,IAAI,EAAE,KAAK,CAAC;QACV;;WAEG;QACH,GAAG,EAAE,MAAM,CAAA;QACX;;WAEG;QACH,IAAI,EAAE,MAAM,CAAA;QACZ;;WAEG;QACH,OAAO,EAAE,MAAM,CAAA;QACf;;WAEG;QACH,kBAAkB,EAAE,MAAM,CAAA;QAC1B;;WAEG;QACH,YAAY,EAAE,OAAO,CAAA;QACrB;;;;WAIG;QACH,MAAM,CAAC,EAAE,OAAO,CAAA;QAChB;;;;WAIG;QACH,SAAS,CAAC,EAAE,OAAO,GAAG,OAAO,GAAG,MAAM,GAAG,aAAa,CAAA;QACtD;;;;WAIG;QACH,UAAU,CAAC,EAAE,OAAO,CAAA;QACpB;;;;WAIG;QACH,UAAU,CAAC,EAAE,OAAO,CAAA;QACpB;;;;;;WAMG;QACH,cAAc,CAAC,EAAE,KAAK,CAAC;YACrB;;eAEG;YACH,GAAG,EAAE,MAAM,CAAA;YACX,IAAI,EAAE,MAAM,CAAA;YACZ;;eAEG;YACH,IAAI,EAAE,MAAM,GAAG,OAAO,GAAG,OAAO,GAAG,aAAa,CAAA;SACjD,CAAC,CAAA;KACH,CAAC,CAAA;CACH;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4EG;AACH,MAAM,CAAC,OAAO,UAAU,WAAW,CACjC,OAAO,EAAE,cAAc,CAAC,kBAAkB,CAAC,GAC1C,UAAU,CAAC,kBAAkB,CAAC,CAchC"}

package/providers/huggingface.js

@@ -0,0 +1,101 @@
+/**
+ * <div class="provider" style={{backgroundColor: "#fff", display: "flex", justifyContent: "space-between", color: "#000", padding: 16}}>
+ * <span>Built-in <b>Hugging Face</b> integration.</span>
+ * <a href="https://huggingface.co">
+ *   <img style={{display: "block"}} src="https://authjs.dev/img/providers/huggingface.svg" height="48" width="48"/>
+ * </a>
+ * </div>
+ *
+ * @module providers/huggingface
+ */
+/**
+ * Add HuggingFace login to your page.
+ *
+ * ### Setup
+ *
+ * #### Callback URL
+ * ```
+ * https://example.com/api/auth/callback/huggingface
+ * ```
+ *
+ * #### Configuration
+ *```ts
+ * import { Auth } from "@auth/core"
+ * import HuggingFace from "@auth/core/providers/huggingface"
+ *
+ * const request = new Request(origin)
+ * const response = await Auth(request, {
+ *   providers: [
+ *     HuggingFace({
+ *       clientId: HUGGINGFACE_CLIENT_ID,
+ *       clientSecret: HUGGINGFACE_CLIENT_SECRET,
+ *       authorization: {
+ *        params: {
+ *          scope: "openid profile email", // specify the scopes you need
+ *          //  orgIds: "unique_org_id" // If your oauth app needs access to a specific organization of the user
+ *        }
+ *       },
+ *     }),
+ *   ],
+ * })
+ * ```
+ *
+ * The following scopes are available:
+ *
+ * - `openid`: Grants access to the user's OpenID Connect profile.
+ * - `profile`: Grants access to the user's profile information.
+ * - `email`: Grants access to the user's email address.
+ * - `read-repos`: Grants read access to the user's repositories.
+ * - `write-repos`: Grants write access to the user's repositories.
+ * - `manage-repos`: Can create/delete repositories on behalf of the user.
+ * - `write-discussions`: Can post on the user's behalf.
+ * - `read-billing`: Know if the user has a payment method set up.
+ * - `inference-api`: Can make calls to Inference providers on behalf of the user.
+ * - `webhooks`: Can manage webhooks on behalf of the user.
+ *
+ * You need to enable them first in your OAuth app settings.
+ *
+ * /!\ By default, the `profile` and `email` scopes are enabled in NextAuth. So you need to enable
+ * the `email` scope in your OAuth app settings or you will get a scope error.
+ *
+ * ### Resources
+ *
+ *  - [Hugging Face OAuth documentation](https://huggingface.co/docs/hub/en/oauth#creating-an-oauth-app)
+ *  - [Create an OAuth application](https://huggingface.co/settings/applications/new)
+ *
+ * ### Notes
+ *
+ * By default, Auth.js assumes that the Hugging Face provider is
+ * based on the [OIDC](https://openid.net/specs/openid-connect-core-1_0.html) specification.
+ *
+ * :::tip
+ *
+ * The HuggingFace provider comes with a [default configuration](https://github.com/nextauthjs/next-auth/blob/main/packages/core/src/providers/huggingface.ts).
+ * To override the defaults for your use case, check out [customizing a built-in OAuth provider](https://authjs.dev/guides/configuring-oauth-providers).
+ *
+ * :::
+ *
+ * :::info **Disclaimer**
+ *
+ * If you think you found a bug in the default configuration, you can [open an issue](https://authjs.dev/new/provider-issue).
+ *
+ * Auth.js strictly adheres to the specification and it cannot take responsibility for any deviation from
+ * the spec by the provider. You can open an issue, but if the problem is non-compliance with the spec,
+ * we might not pursue a resolution. You can ask for more help in [Discussions](https://authjs.dev/new/github-discussions).
+ *
+ * :::
+ */
+export default function Huggingface(options) {
+    return {
+        id: "huggingface",
+        name: "Hugging Face",
+        type: "oidc",
+        issuer: "https://huggingface.co",
+        checks: ["state", "pkce"],
+        style: {
+            bg: "#FFD21E",
+            text: "#000",
+        },
+        options,
+    };
+}

package/providers/identity-server4.d.ts

@@ -0,0 +1,69 @@
+/**
+ * <div class="provider" style={{backgroundColor: "#000", display: "flex", justifyContent: "space-between", color: "#fff", padding: 16}}>
+ * <span>Built-in <b>IdentityServer4</b> integration.</span>
+ * <a href="https://identityserver4.readthedocs.io">
+ *   <img style={{display: "block"}} src="https://authjs.dev/img/providers/identity-server4.svg" height="48" width="48"/>
+ * </a>
+ * </div>
+ *
+ * @module providers/identity-server4
+ */
+import type { OAuthConfig, OAuthUserConfig } from "./index.js";
+/**
+ * Add IdentityServer4 login to your page.
+ *
+ * ### Setup
+ *
+ * #### Callback URL
+ * ```
+ * https://example.com/api/auth/callback/identity-server4
+ * ```
+ *
+ * #### Configuration
+ *```ts
+ * import { Auth } from "@auth/core"
+ * import IdentityServer4 from "@auth/core/providers/identity-server4"
+ *
+ * const request = new Request(origin)
+ * const response = await Auth(request, {
+ *   providers: [
+ *     IdentityServer4({
+ *       clientId: IDENTITY_SERVER4_CLIENT_ID,
+ *       clientSecret: IDENTITY_SERVER4_CLIENT_SECRET,
+ *       issuer: IDENTITY_SERVER4_ISSUER,
+ *     }),
+ *   ],
+ * })
+ * ```
+ *
+ * ### Resources
+ *
+ *  - [IdentityServer4 OAuth documentation](https://identityserver4.readthedocs.io/en/latest/)
+ *
+ * ### Notes
+ *
+ * By default, Auth.js assumes that the IdentityServer4 provider is
+ * based on the [Open ID Connect](https://openid.net/specs/openid-connect-core-1_0.html) specification.
+ *
+ * :::warning
+ * IdentityServer4 is discontinued and only releases security updates until November 2022. You should consider an alternative provider.
+ * :::
+ * :::tip
+ *
+ * The IdentityServer4 provider comes with a [default configuration](https://github.com/nextauthjs/next-auth/blob/main/packages/core/src/providers/identity-server4.ts).
+ * To override the defaults for your use case, check out [customizing a built-in OAuth provider](https://authjs.dev/guides/configuring-oauth-providers).
+ *
+ * :::
+ *
+ * :::info **Disclaimer**
+ *
+ * If you think you found a bug in the default configuration, you can [open an issue](https://authjs.dev/new/provider-issue).
+ *
+ * Auth.js strictly adheres to the specification and it cannot take responsibility for any deviation from
+ * the spec by the provider. You can open an issue, but if the problem is non-compliance with the spec,
+ * we might not pursue a resolution. You can ask for more help in [Discussions](https://authjs.dev/new/github-discussions).
+ *
+ * :::
+ */
+export default function IdentityServer4(options: OAuthUserConfig<Record<string, any>>): OAuthConfig<Record<string, any>>;
+//# sourceMappingURL=identity-server4.d.ts.map

package/providers/identity-server4.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity-server4.d.ts","sourceRoot":"","sources":["../src/providers/identity-server4.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,KAAK,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAE9D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuDG;AACH,MAAM,CAAC,OAAO,UAAU,eAAe,CACrC,OAAO,EAAE,eAAe,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,GAC5C,WAAW,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAOlC"}

package/providers/identity-server4.js

@@ -0,0 +1,64 @@
+/**
+ * Add IdentityServer4 login to your page.
+ *
+ * ### Setup
+ *
+ * #### Callback URL
+ * ```
+ * https://example.com/api/auth/callback/identity-server4
+ * ```
+ *
+ * #### Configuration
+ *```ts
+ * import { Auth } from "@auth/core"
+ * import IdentityServer4 from "@auth/core/providers/identity-server4"
+ *
+ * const request = new Request(origin)
+ * const response = await Auth(request, {
+ *   providers: [
+ *     IdentityServer4({
+ *       clientId: IDENTITY_SERVER4_CLIENT_ID,
+ *       clientSecret: IDENTITY_SERVER4_CLIENT_SECRET,
+ *       issuer: IDENTITY_SERVER4_ISSUER,
+ *     }),
+ *   ],
+ * })
+ * ```
+ *
+ * ### Resources
+ *
+ *  - [IdentityServer4 OAuth documentation](https://identityserver4.readthedocs.io/en/latest/)
+ *
+ * ### Notes
+ *
+ * By default, Auth.js assumes that the IdentityServer4 provider is
+ * based on the [Open ID Connect](https://openid.net/specs/openid-connect-core-1_0.html) specification.
+ *
+ * :::warning
+ * IdentityServer4 is discontinued and only releases security updates until November 2022. You should consider an alternative provider.
+ * :::
+ * :::tip
+ *
+ * The IdentityServer4 provider comes with a [default configuration](https://github.com/nextauthjs/next-auth/blob/main/packages/core/src/providers/identity-server4.ts).
+ * To override the defaults for your use case, check out [customizing a built-in OAuth provider](https://authjs.dev/guides/configuring-oauth-providers).
+ *
+ * :::
+ *
+ * :::info **Disclaimer**
+ *
+ * If you think you found a bug in the default configuration, you can [open an issue](https://authjs.dev/new/provider-issue).
+ *
+ * Auth.js strictly adheres to the specification and it cannot take responsibility for any deviation from
+ * the spec by the provider. You can open an issue, but if the problem is non-compliance with the spec,
+ * we might not pursue a resolution. You can ask for more help in [Discussions](https://authjs.dev/new/github-discussions).
+ *
+ * :::
+ */
+export default function IdentityServer4(options) {
+    return {
+        id: "identity-server4",
+        name: "IdentityServer4",
+        type: "oidc",
+        options,
+    };
+}

package/providers/index.d.ts

@@ -0,0 +1,61 @@
+import type { Profile } from "../types.js";
+import CredentialsProvider from "./credentials.js";
+import type { CredentialsConfig, CredentialsProviderId } from "./credentials.js";
+import type EmailProvider from "./email.js";
+import type { EmailConfig, EmailProviderId } from "./email.js";
+import type { OAuth2Config, OAuthConfig, OAuthProviderId, OIDCConfig } from "./oauth.js";
+import type { WebAuthnConfig, WebAuthnProviderType } from "./webauthn.js";
+export * from "./credentials.js";
+export * from "./email.js";
+export * from "./oauth.js";
+/**
+ * Providers passed to Auth.js must define one of these types.
+ *
+ * @see [RFC 6749 - The OAuth 2.0 Authorization Framework](https://www.rfc-editor.org/rfc/rfc6749.html#section-2.3)
+ * @see [OpenID Connect Core 1.0](https://openid.net/specs/openid-connect-core-1_0.html#ClientAuthentication)
+ * @see [Email or Passwordless Authentication](https://authjs.dev/concepts/oauth)
+ * @see [Credentials-based Authentication](https://authjs.dev/getting-started/providers/credentials)
+ */
+export type ProviderType = "oidc" | "oauth" | "email" | "credentials" | WebAuthnProviderType;
+/** Shared across all {@link ProviderType} */
+export interface CommonProviderOptions {
+    /**
+     * Uniquely identifies the provider in {@link AuthConfig.providers}
+     * It's also part of the URL
+     */
+    id: string;
+    /**
+     * The provider name used on the default sign-in page's sign-in button.
+     * For example if it's "Google", the corresponding button will say:
+     * "Sign in with Google"
+     */
+    name: string;
+    /** See {@link ProviderType} */
+    type: ProviderType;
+}
+interface InternalProviderOptions {
+    /** Used to deep merge user-provided config with the default config
+     */
+    options?: Record<string, unknown>;
+}
+/**
+ * Must be a supported authentication provider config:
+ * - {@link OAuthConfig}
+ * - {@link EmailConfigInternal}
+ * - {@link CredentialsConfigInternal}
+ *
+ * For more information, see the guides:
+ *
+ * @see [OAuth/OIDC guide](https://authjs.dev/guides/providers/custom-provider)
+ * @see [Email (Passwordless) guide](https://authjs.dev/guides/providers/email)
+ * @see [Credentials guide](https://authjs.dev/getting-started/providers/credentials)
+ */
+export type Provider<P extends Profile = any> = (((OIDCConfig<P> | OAuth2Config<P> | EmailConfig | CredentialsConfig | WebAuthnConfig) & InternalProviderOptions) | ((...args: any) => (OAuth2Config<P> | OIDCConfig<P> | EmailConfig | CredentialsConfig | WebAuthnConfig) & InternalProviderOptions)) & InternalProviderOptions;
+export type BuiltInProviders = Record<OAuthProviderId, (config: Partial<OAuthConfig<any>>) => OAuthConfig<any>> & Record<CredentialsProviderId, typeof CredentialsProvider> & Record<EmailProviderId, typeof EmailProvider> & Record<WebAuthnProviderType, (config: Partial<WebAuthnConfig>) => WebAuthnConfig>;
+export type AppProviders = Array<Provider | ReturnType<BuiltInProviders[keyof BuiltInProviders]>>;
+export interface AppProvider extends CommonProviderOptions {
+    signinUrl: string;
+    callbackUrl: string;
+}
+export type ProviderId = CredentialsProviderId | EmailProviderId | OAuthProviderId | WebAuthnProviderType | (string & {});
+//# sourceMappingURL=index.d.ts.map

package/providers/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/providers/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAA;AAC1C,OAAO,mBAAmB,MAAM,kBAAkB,CAAA;AAClD,OAAO,KAAK,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAA;AAChF,OAAO,KAAK,aAAa,MAAM,YAAY,CAAA;AAC3C,OAAO,KAAK,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAC9D,OAAO,KAAK,EACV,YAAY,EACZ,WAAW,EACX,eAAe,EACf,UAAU,EACX,MAAM,YAAY,CAAA;AACnB,OAAO,KAAK,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAA;AAEzE,cAAc,kBAAkB,CAAA;AAChC,cAAc,YAAY,CAAA;AAC1B,cAAc,YAAY,CAAA;AAE1B;;;;;;;GAOG;AACH,MAAM,MAAM,YAAY,GACpB,MAAM,GACN,OAAO,GACP,OAAO,GACP,aAAa,GACb,oBAAoB,CAAA;AAExB,6CAA6C;AAC7C,MAAM,WAAW,qBAAqB;IACpC;;;OAGG;IACH,EAAE,EAAE,MAAM,CAAA;IACV;;;;OAIG;IACH,IAAI,EAAE,MAAM,CAAA;IACZ,+BAA+B;IAC/B,IAAI,EAAE,YAAY,CAAA;CACnB;AAED,UAAU,uBAAuB;IAC/B;OACG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAClC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,QAAQ,CAAC,CAAC,SAAS,OAAO,GAAG,GAAG,IAAI,CAC5C,CAAC,CACG,UAAU,CAAC,CAAC,CAAC,GACb,YAAY,CAAC,CAAC,CAAC,GACf,WAAW,GACX,iBAAiB,GACjB,cAAc,CACjB,GACC,uBAAuB,CAAC,GAC1B,CAAC,CACC,GAAG,IAAI,EAAE,GAAG,KACT,CACD,YAAY,CAAC,CAAC,CAAC,GACf,UAAU,CAAC,CAAC,CAAC,GACb,WAAW,GACX,iBAAiB,GACjB,cAAc,CACjB,GACC,uBAAuB,CAAC,CAC7B,GACC,uBAAuB,CAAA;AAEzB,MAAM,MAAM,gBAAgB,GAAG,MAAM,CACnC,eAAe,EACf,CAAC,MAAM,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,WAAW,CAAC,GAAG,CAAC,CACxD,GACC,MAAM,CAAC,qBAAqB,EAAE,OAAO,mBAAmB,CAAC,GACzD,MAAM,CAAC,eAAe,EAAE,OAAO,aAAa,CAAC,GAC7C,MAAM,CACJ,oBAAoB,EACpB,CAAC,MAAM,EAAE,OAAO,CAAC,cAAc,CAAC,KAAK,cAAc,CACpD,CAAA;AAEH,MAAM,MAAM,YAAY,GAAG,KAAK,CAC9B,QAAQ,GAAG,UAAU,CAAC,gBAAgB,CAAC,MAAM,gBAAgB,CAAC,CAAC,CAChE,CAAA;AAED,MAAM,WAAW,WAAY,SAAQ,qBAAqB;IACxD,SAAS,EAAE,MAAM,CAAA;IACjB,WAAW,EAAE,MAAM,CAAA;CACpB;AAED,MAAM,MAAM,UAAU,GAClB,qBAAqB,GACrB,eAAe,GACf,eAAe,GACf,oBAAoB,GACpB,CAAC,MAAM,GAAG,EAAE,CAAC,CAAA"}

package/providers/index.js

@@ -0,0 +1,3 @@
+export * from "./credentials.js";
+export * from "./email.js";
+export * from "./oauth.js";

package/providers/instagram.d.ts

@@ -0,0 +1,74 @@
+/**
+ * <div class="provider" style={{backgroundColor: "#000", display: "flex", justifyContent: "space-between", color: "#fff", padding: 16}}>
+ * <span>Built-in <b>Instagram</b> integration.</span>
+ * <a href="https://www.instagram.com/">
+ *   <img style={{display: "block"}} src="https://authjs.dev/img/providers/instagram.svg" height="48" width="48"/>
+ * </a>
+ * </div>
+ *
+ * @module providers/instagram
+ */
+import type { OAuthConfig, OAuthUserConfig } from "./index.js";
+/**
+ * Add Instagram login to your page.
+ *
+ * ### Setup
+ *
+ * #### Callback URL
+ * ```
+ * https://example.com/api/auth/callback/instagram
+ * ```
+ *
+ * #### Configuration
+ *```ts
+ * import { Auth } from "@auth/core"
+ * import Instagram from "@auth/core/providers/instagram"
+ *
+ * const request = new Request(origin)
+ * const response = await Auth(request, {
+ *   providers: [
+ *     Instagram({
+ *       clientId: INSTAGRAM_CLIENT_ID,
+ *       clientSecret: INSTAGRAM_CLIENT_SECRET,
+ *     }),
+ *   ],
+ * })
+ * ```
+ *
+ * ### Resources
+ *
+ *  - [Instagram OAuth documentation](https://developers.facebook.com/docs/instagram-basic-display-api/getting-started)
+ *  - [Instagram OAuth apps](https://developers.facebook.com/apps/)
+ *
+ * ### Notes
+ *
+ * By default, Auth.js assumes that the Instagram provider is
+ * based on the [OAuth 2](https://www.rfc-editor.org/rfc/rfc6749.html) specification.
+ *
+ *
+ * :::warning
+ * Email address is not returned by the Instagram API.
+ * :::
+ *
+ * :::tip
+ * Instagram display app required callback URL to be configured in your Facebook app and Facebook required you to use **https** even for localhost! In order to do that, you either need to [add an SSL to your localhost](https://www.freecodecamp.org/news/how-to-get-https-working-on-your-local-development-environment-in-5-minutes-7af615770eec/) or use a proxy such as [ngrok](https://ngrok.com/docs).
+ * :::
+ * :::tip
+ *
+ * The Instagram provider comes with a [default configuration](https://github.com/nextauthjs/next-auth/blob/main/packages/core/src/providers/instagram.ts).
+ * To override the defaults for your use case, check out [customizing a built-in OAuth provider](https://authjs.dev/guides/configuring-oauth-providers).
+ *
+ * :::
+ *
+ * :::info **Disclaimer**
+ *
+ * If you think you found a bug in the default configuration, you can [open an issue](https://authjs.dev/new/provider-issue).
+ *
+ * Auth.js strictly adheres to the specification and it cannot take responsibility for any deviation from
+ * the spec by the provider. You can open an issue, but if the problem is non-compliance with the spec,
+ * we might not pursue a resolution. You can ask for more help in [Discussions](https://authjs.dev/new/github-discussions).
+ *
+ * :::
+ */
+export default function Instagram(config: OAuthUserConfig<Record<string, any>>): OAuthConfig<Record<string, any>>;
+//# sourceMappingURL=instagram.d.ts.map

package/providers/instagram.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"instagram.d.ts","sourceRoot":"","sources":["../src/providers/instagram.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,KAAK,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAE9D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4DG;AACH,MAAM,CAAC,OAAO,UAAU,SAAS,CAC/B,MAAM,EAAE,eAAe,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,GAC3C,WAAW,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CA2BlC"}