@mulverse/mulguard-core 1.0.0

package/providers/notion.js

@@ -0,0 +1,110 @@
+/**
+ * <div class="provider" style={{backgroundColor: "#000", display: "flex", justifyContent: "space-between", color: "#fff", padding: 16}}>
+ * <span>Built-in <b>Notion</b> integration.</span>
+ * <a href="https://notion.so">
+ *   <img style={{display: "block"}} src="https://authjs.dev/img/providers/notion.svg" height="48" width="48"/>
+ * </a>
+ * </div>
+ *
+ * @module providers/notion
+ */
+const NOTION_HOST = "https://api.notion.com";
+const NOTION_API_VERSION = "2022-06-28";
+/**
+ * Add Notion login to your page.
+ *
+ * ### Setup
+ *
+ * #### Callback URL
+ * ```
+ * https://example.com/api/auth/callback/notion
+ * ```
+ *
+ * #### Configuration
+ *```ts
+ * import { Auth } from "@auth/core"
+ * import Notion from "@auth/core/providers/notion"
+ *
+ * const request = new Request(origin)
+ * const response = await Auth(request, {
+ *   providers: [
+ *     Notion({
+ *       clientId: NOTION_CLIENT_ID,
+ *       clientSecret: NOTION_CLIENT_SECRET,
+ *       redirectUri: NOTION_CLIENT_REDIRECT_URI,
+ *     }),
+ *   ],
+ * })
+ * ```
+ *
+ * ### Resources
+ * - [Notion Docs](https://developers.notion.com/docs)
+ * - [Notion Authorization Docs](https://developers.notion.com/docs/authorization)
+ * - [Notion Integrations](https://www.notion.so/my-integrations)
+ *
+ * ### Notes
+ * You need to select "Public Integration" on the configuration page to get an `oauth_id` and `oauth_secret`. Private integrations do not provide these details.
+ * You must provide a `clientId` and `clientSecret` to use this provider, as-well as a redirect URI (due to this being required by Notion endpoint to fetch tokens).
+ *
+ * :::tip
+ *
+ * The Notion provider comes with a [default configuration](https://github.com/nextauthjs/next-auth/blob/main/packages/core/src/providers/notion.ts).
+ * To override the defaults for your use case, check out [customizing a built-in OAuth provider](https://authjs.dev/guides/configuring-oauth-providers).
+ *
+ * :::
+ *
+ * :::info **Disclaimer**
+ *
+ * If you think you found a bug in the default configuration, you can [open an issue](https://authjs.dev/new/provider-issue).
+ *
+ * Auth.js strictly adheres to the specification and it cannot take responsibility for any deviation from
+ * the spec by the provider. You can open an issue, but if the problem is non-compliance with the spec,
+ * we might not pursue a resolution. You can ask for more help in [Discussions](https://authjs.dev/new/github-discussions).
+ *
+ * :::
+ */
+export default function NotionProvider(options) {
+    return {
+        id: "notion",
+        name: "Notion",
+        type: "oauth",
+        token: {
+            url: `${NOTION_HOST}/v1/oauth/token`,
+        },
+        userinfo: {
+            url: `${NOTION_HOST}/v1/users`,
+            // The result of this method will be the input to the `profile` callback.
+            // We use a custom request handler, since we need to do things such as pass the "Notion-Version" header
+            // More info: https://authjs.dev/getting-started/providers/notion
+            async request(context) {
+                const profile = await fetch(`${NOTION_HOST}/v1/users/me`, {
+                    headers: {
+                        Authorization: `Bearer ${context.tokens.access_token}`,
+                        "Notion-Version": NOTION_API_VERSION,
+                    },
+                });
+                const { bot: { owner: { user }, }, } = await profile.json();
+                return user;
+            },
+        },
+        authorization: {
+            params: {
+                client_id: options.clientId,
+                response_type: "code",
+                owner: "user",
+                redirect_uri: options.redirectUri,
+            },
+            url: `${NOTION_HOST}/v1/oauth/authorize`,
+        },
+        async profile(profile) {
+            return {
+                id: profile.id,
+                name: profile.name,
+                email: profile.person.email,
+                image: profile.avatar_url,
+            };
+        },
+        style: { bg: "#fff", text: "#000" },
+        options,
+    };
+}

package/providers/oauth.d.ts

@@ -0,0 +1,188 @@
+import type { Client } from "oauth4webapi";
+import type { CommonProviderOptions } from "../providers/index.js";
+import type { Awaitable, Profile, TokenSet, User } from "../types.js";
+import type { AuthConfig } from "../index.js";
+import type { customFetch } from "../lib/symbols.js";
+type AuthorizationParameters = any;
+type CallbackParamsType = any;
+type IssuerMetadata = any;
+type OAuthCallbackChecks = any;
+type OpenIDCallbackChecks = any;
+export type { OAuthProviderId } from "./provider-types.js";
+export type OAuthChecks = OpenIDCallbackChecks | OAuthCallbackChecks;
+type PartialIssuer = Partial<Pick<IssuerMetadata, "jwks_endpoint" | "issuer">>;
+type UrlParams = Record<string, unknown>;
+export type AuthorizationEndpointHandler = EndpointHandler<AuthorizationParameters>;
+export type TokenEndpointHandler = EndpointHandler<UrlParams, {
+    /**
+     * Parameters extracted from the request to the `/api/auth/callback/:providerId` endpoint.
+     * Contains params like `state`.
+     */
+    params: CallbackParamsType;
+    /**
+     * When using this custom flow, make sure to do all the necessary security checks.
+     * This object contains parameters you have to match against the request to make sure it is valid.
+     */
+    checks: OAuthChecks;
+}, {
+    tokens: TokenSet;
+}>;
+export type UserinfoEndpointHandler = EndpointHandler<UrlParams, {
+    tokens: TokenSet;
+}, Profile>;
+export type ProfileCallback<Profile> = (profile: Profile, tokens: TokenSet) => Awaitable<User>;
+export type AccountCallback = (tokens: TokenSet) => TokenSet | undefined | void;
+export interface OAuthProviderButtonStyles {
+    logo?: string;
+    /**
+     * @deprecated
+     */
+    text?: string;
+    /**
+     * @deprecated Please use 'brandColor' instead
+     */
+    bg?: string;
+    brandColor?: string;
+}
+/** TODO: Document */
+export interface OAuth2Config<Profile> extends CommonProviderOptions, PartialIssuer {
+    /**
+     * Identifies the provider when you want to sign in to
+     * a specific provider.
+     *
+     * @example
+     * ```ts
+     * signIn('github') // "github" is the provider ID
+     * ```
+     */
+    id: string;
+    /** The name of the provider. shown on the default sign in page. */
+    name: string;
+    /**
+     * OpenID Connect (OIDC) compliant providers can configure
+     * this instead of `authorize`/`token`/`userinfo` options
+     * without further configuration needed in most cases.
+     * You can still use the `authorize`/`token`/`userinfo`
+     * options for advanced control.
+     *
+     * [Authorization Server Metadata](https://datatracker.ietf.org/doc/html/rfc8414#section-3)
+     */
+    wellKnown?: string;
+    issuer?: string;
+    /**
+     * The login process will be initiated by sending the user to this URL.
+     *
+     * [Authorization endpoint](https://datatracker.ietf.org/doc/html/rfc6749#section-3.1)
+     */
+    authorization?: string | AuthorizationEndpointHandler;
+    token?: string | TokenEndpointHandler;
+    userinfo?: string | UserinfoEndpointHandler;
+    type: "oauth";
+    /**
+     * Receives the full {@link Profile} returned by the OAuth provider, and returns a subset.
+     * It is used to create the user in the database.
+     *
+     * Defaults to: `id`, `email`, `name`, `image`
+     *
+     * @see [Database Adapter: User model](https://authjs.dev/reference/core/adapters#user)
+     */
+    profile?: ProfileCallback<Profile>;
+    /**
+     * Receives the full {@link TokenSet} returned by the OAuth provider, and returns a subset.
+     * It is used to create the account associated with a user in the database.
+     *
+     * :::note
+     * You need to adjust your database's [Account model](https://authjs.dev/reference/core/adapters#account) to match the returned properties.
+     * Check out the documentation of your [database adapter](https://authjs.dev/reference/core/adapters) for more information.
+     * :::
+     *
+     * Defaults to: `access_token`, `id_token`, `refresh_token`, `expires_at`, `scope`, `token_type`, `session_state`
+     *
+     * @example
+     * ```ts
+     * import GitHub from "@auth/core/providers/github"
+     * // ...
+     * GitHub({
+     *   account(account) {
+     *     // https://docs.github.com/en/apps/creating-github-apps/authenticating-with-a-github-app/refreshing-user-access-tokens#refreshing-a-user-access-token-with-a-refresh-token
+     *     const refresh_token_expires_at =
+     *       Math.floor(Date.now() / 1000) + Number(account.refresh_token_expires_in)
+     *     return {
+     *       access_token: account.access_token,
+     *       expires_at: account.expires_at,
+     *       refresh_token: account.refresh_token,
+     *       refresh_token_expires_at
+     *     }
+     *   }
+     * })
+     * ```
+     *
+     * @see [Database Adapter: Account model](https://authjs.dev/reference/core/adapters#account)
+     * @see https://openid.net/specs/openid-connect-core-1_0.html#TokenResponse
+     * @see https://www.ietf.org/rfc/rfc6749.html#section-5.1
+     */
+    account?: AccountCallback;
+    /**
+     * The CSRF protection performed on the callback endpoint.
+     * @default ["pkce"]
+     *
+     * @note When `redirectProxyUrl` or {@link AuthConfig.redirectProxyUrl} is set,
+     * `"state"` will be added to checks automatically.
+     *
+     * [RFC 7636 - Proof Key for Code Exchange by OAuth Public Clients (PKCE)](https://www.rfc-editor.org/rfc/rfc7636.html#section-4) |
+     * [RFC 6749 - The OAuth 2.0 Authorization Framework](https://www.rfc-editor.org/rfc/rfc6749.html#section-4.1.1) |
+     * [OpenID Connect Core 1.0](https://openid.net/specs/openid-connect-core-1_0.html#IDToken) |
+     */
+    checks?: Array<"pkce" | "state" | "none">;
+    clientId?: string;
+    clientSecret?: string;
+    /**
+     * Pass overrides to the underlying OAuth library.
+     * See [`oauth4webapi` client](https://github.com/panva/oauth4webapi/blob/main/docs/interfaces/Client.md) for details.
+     */
+    client?: Partial<Client & {
+        token_endpoint_auth_method: string;
+    }>;
+    style?: OAuthProviderButtonStyles;
+    /**
+     * Normally, when you sign in with an OAuth provider and another account
+     * with the same email address already exists,
+     * the accounts are not linked automatically.
+     *
+     * Automatic account linking on sign in is not secure
+     * between arbitrary providers and is disabled by default.
+     * Learn more in our [Security FAQ](https://authjs.dev/concepts#security).
+     *
+     * However, it may be desirable to allow automatic account linking if you trust that the provider involved has securely verified the email address
+     * associated with the account. Set `allowDangerousEmailAccountLinking: true`
+     * to enable automatic account linking.
+     */
+    allowDangerousEmailAccountLinking?: boolean;
+    redirectProxyUrl?: AuthConfig["redirectProxyUrl"];
+    /** @see {customFetch} */
+    [customFetch]?: typeof fetch;
+    options?: OAuthUserConfig<Profile>;
+}
+/**
+ * Extension of the {@link OAuth2Config}.
+ *
+ * @see https://openid.net/specs/openid-connect-core-1_0.html
+ */
+export interface OIDCConfig<Profile> extends Omit<OAuth2Config<Profile>, "type" | "checks"> {
+    type: "oidc";
+    checks?: Array<NonNullable<OAuth2Config<Profile>["checks"]>[number] | "nonce">;
+    /**
+     * If set to `false`, the `userinfo_endpoint` will be fetched for the user data.
+     * @note An `id_token` is still required to be returned during the authorization flow.
+     */
+    idToken?: boolean;
+}
+export type OAuthConfig<Profile> = OIDCConfig<Profile> | OAuth2Config<Profile>;
+export type OAuthEndpointType = "authorization" | "token" | "userinfo";
+export type OIDCConfigInternal<Profile> = OAuthConfigInternal<Profile> & {
+    checks: OIDCConfig<Profile>["checks"];
+    idToken: OIDCConfig<Profile>["idToken"];
+};
+export type OAuthUserConfig<Profile> = Omit<Partial<OAuthConfig<Profile>>, "options" | "type">;
+export type OIDCUserConfig<Profile> = Omit<Partial<OIDCConfig<Profile>>, "options" | "type">;
+//# sourceMappingURL=oauth.d.ts.map

package/providers/oauth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.d.ts","sourceRoot":"","sources":["../src/providers/oauth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAc,MAAM,cAAc,CAAA;AACtD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAA;AAClE,OAAO,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,aAAa,CAAA;AACrE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAC7C,OAAO,KAAK,EAAmB,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAGrE,KAAK,uBAAuB,GAAG,GAAG,CAAA;AAClC,KAAK,kBAAkB,GAAG,GAAG,CAAA;AAC7B,KAAK,cAAc,GAAG,GAAG,CAAA;AACzB,KAAK,mBAAmB,GAAG,GAAG,CAAA;AAC9B,KAAK,oBAAoB,GAAG,GAAG,CAAA;AAE/B,YAAY,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA;AAE1D,MAAM,MAAM,WAAW,GAAG,oBAAoB,GAAG,mBAAmB,CAAA;AAEpE,KAAK,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,cAAc,EAAE,eAAe,GAAG,QAAQ,CAAC,CAAC,CAAA;AAE9E,KAAK,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;AA0CxC,MAAM,MAAM,4BAA4B,GACtC,eAAe,CAAC,uBAAuB,CAAC,CAAA;AAE1C,MAAM,MAAM,oBAAoB,GAAG,eAAe,CAChD,SAAS,EACT;IACE;;;OAGG;IACH,MAAM,EAAE,kBAAkB,CAAA;IAC1B;;;OAGG;IACH,MAAM,EAAE,WAAW,CAAA;CACpB,EACD;IACE,MAAM,EAAE,QAAQ,CAAA;CACjB,CACF,CAAA;AAED,MAAM,MAAM,uBAAuB,GAAG,eAAe,CACnD,SAAS,EACT;IAAE,MAAM,EAAE,QAAQ,CAAA;CAAE,EACpB,OAAO,CACR,CAAA;AAED,MAAM,MAAM,eAAe,CAAC,OAAO,IAAI,CACrC,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,QAAQ,KACb,SAAS,CAAC,IAAI,CAAC,CAAA;AAEpB,MAAM,MAAM,eAAe,GAAG,CAAC,MAAM,EAAE,QAAQ,KAAK,QAAQ,GAAG,SAAS,GAAG,IAAI,CAAA;AAE/E,MAAM,WAAW,yBAAyB;IACxC,IAAI,CAAC,EAAE,MAAM,CAAA;IACb;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAA;IACb;;OAEG;IACH,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAED,qBAAqB;AACrB,MAAM,WAAW,YAAY,CAAC,OAAO,CACnC,SAAQ,qBAAqB,EAC3B,aAAa;IACf;;;;;;;;OAQG;IACH,EAAE,EAAE,MAAM,CAAA;IACV,mEAAmE;IACnE,IAAI,EAAE,MAAM,CAAA;IACZ;;;;;;;;OAQG;IACH,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,GAAG,4BAA4B,CAAA;IACrD,KAAK,CAAC,EAAE,MAAM,GAAG,oBAAoB,CAAA;IACrC,QAAQ,CAAC,EAAE,MAAM,GAAG,uBAAuB,CAAA;IAC3C,IAAI,EAAE,OAAO,CAAA;IACb;;;;;;;OAOG;IACH,OAAO,CAAC,EAAE,eAAe,CAAC,OAAO,CAAC,CAAA;IAClC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAiCG;IACH,OAAO,CAAC,EAAE,eAAe,CAAA;IACzB;;;;;;;;;;OAUG;IACH,MAAM,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,OAAO,GAAG,MAAM,CAAC,CAAA;IACzC,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB;;;OAGG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC,MAAM,GAAG;QAAE,0BAA0B,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IACjE,KAAK,CAAC,EAAE,yBAAyB,CAAA;IACjC;;;;;;;;;;;;OAYG;IACH,iCAAiC,CAAC,EAAE,OAAO,CAAA;IAC3C,gBAAgB,CAAC,EAAE,UAAU,CAAC,kBAAkB,CAAC,CAAA;IACjD,yBAAyB;IACzB,CAAC,WAAW,CAAC,CAAC,EAAE,OAAO,KAAK,CAAA;IAU5B,OAAO,CAAC,EAAE,eAAe,CAAC,OAAO,CAAC,CAAA;CACnC;AAED;;;;GAIG;AACH,MAAM,WAAW,UAAU,CAAC,OAAO,CACjC,SAAQ,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,QAAQ,CAAC;IACtD,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,CAAC,EAAE,KAAK,CAAC,WAAW,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,CAAA;IAC9E;;;OAGG;IACH,OAAO,CAAC,EAAE,OAAO,CAAA;CAClB;AAED,MAAM,MAAM,WAAW,CAAC,OAAO,IAAI,UAAU,CAAC,OAAO,CAAC,GAAG,YAAY,CAAC,OAAO,CAAC,CAAA;AAE9E,MAAM,MAAM,iBAAiB,GAAG,eAAe,GAAG,OAAO,GAAG,UAAU,CAAA;AAwCtE,MAAM,MAAM,kBAAkB,CAAC,OAAO,IAAI,mBAAmB,CAAC,OAAO,CAAC,GAAG;IACvE,MAAM,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAA;IACrC,OAAO,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,CAAA;CACxC,CAAA;AAED,MAAM,MAAM,eAAe,CAAC,OAAO,IAAI,IAAI,CACzC,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,EAC7B,SAAS,GAAG,MAAM,CACnB,CAAA;AAED,MAAM,MAAM,cAAc,CAAC,OAAO,IAAI,IAAI,CACxC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,EAC5B,SAAS,GAAG,MAAM,CACnB,CAAA"}

package/providers/oauth.js

@@ -0,0 +1 @@
+export {};

package/providers/okta.d.ts

@@ -0,0 +1,99 @@
+/**
+ * <div class="provider" style={{backgroundColor: "#000", display: "flex", justifyContent: "space-between", color: "#fff", padding: 16}}>
+ * <span>Built-in <b>Okta</b> integration.</span>
+ * <a href="https://okta.com/">
+ *   <img style={{display: "block"}} src="https://authjs.dev/img/providers/okta.svg" height="48" />
+ * </a>
+ * </div>
+ *
+ * @module providers/okta
+ */
+import type { OAuthConfig, OAuthUserConfig } from "./index.js";
+export interface OktaProfile extends Record<string, any> {
+    iss: string;
+    ver: string;
+    sub: string;
+    aud: string;
+    iat: string;
+    exp: string;
+    jti: string;
+    auth_time: string;
+    amr: string;
+    idp: string;
+    nonce: string;
+    name: string;
+    nickname: string;
+    preferred_username: string;
+    given_name: string;
+    middle_name: string;
+    family_name: string;
+    email: string;
+    email_verified: string;
+    profile: string;
+    zoneinfo: string;
+    locale: string;
+    address: string;
+    phone_number: string;
+    picture: string;
+    website: string;
+    gender: string;
+    birthdate: string;
+    updated_at: string;
+    at_hash: string;
+    c_hash: string;
+}
+/**
+ * Add Okta login to your page.
+ *
+ * ### Setup
+ *
+ * #### Callback URL
+ * ```
+ * https://example.com/api/auth/callback/okta
+ * ```
+ *
+ * #### Configuration
+ *```ts
+ * import { Auth } from "@auth/core"
+ * import Okta from "@auth/core/providers/okta"
+ *
+ * const request = new Request(origin)
+ * const response = await Auth(request, {
+ *   providers: [
+ *     Okta({
+ *       clientId: OKTA_CLIENT_ID,
+ *       clientSecret: OKTA_CLIENT_SECRET,
+ *       issuer: OKTA_ISSUER,
+ *     }),
+ *   ],
+ * })
+ * ```
+ *
+ * ### Resources
+ *
+ *  - [Okta OAuth documentation](https://developer.okta.com/docs/reference/api/oidc)
+ *
+ * ### Notes
+ *
+ * By default, Auth.js assumes that the Okta provider is
+ * based on the [Open ID Connect](https://openid.net/specs/openid-connect-core-1_0.html) specification.
+ *
+ * :::tip
+ *
+ * The Okta provider comes with a [default configuration](https://github.com/nextauthjs/next-auth/blob/main/packages/core/src/providers/okta.ts).
+ * To override the defaults for your use case, check out [customizing a built-in OAuth provider](https://authjs.dev/guides/configuring-oauth-providers).
+ *
+ * :::
+ *
+ * :::info **Disclaimer**
+ *
+ * If you think you found a bug in the default configuration, you can [open an issue](https://authjs.dev/new/provider-issue).
+ *
+ * Auth.js strictly adheres to the specification and it cannot take responsibility for any deviation from
+ * the spec by the provider. You can open an issue, but if the problem is non-compliance with the spec,
+ * we might not pursue a resolution. You can ask for more help in [Discussions](https://authjs.dev/new/github-discussions).
+ *
+ * :::
+ */
+export default function Okta<P extends OktaProfile>(options: OAuthUserConfig<P>): OAuthConfig<P>;
+//# sourceMappingURL=okta.d.ts.map

package/providers/okta.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"okta.d.ts","sourceRoot":"","sources":["../src/providers/okta.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,KAAK,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAE9D,MAAM,WAAW,WAAY,SAAQ,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC;IACtD,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,EAAE,MAAM,CAAA;IACjB,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,MAAM,CAAA;IAChB,kBAAkB,EAAE,MAAM,CAAA;IAC1B,UAAU,EAAE,MAAM,CAAA;IAClB,WAAW,EAAE,MAAM,CAAA;IACnB,WAAW,EAAE,MAAM,CAAA;IACnB,KAAK,EAAE,MAAM,CAAA;IACb,cAAc,EAAE,MAAM,CAAA;IACtB,OAAO,EAAE,MAAM,CAAA;IACf,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE,MAAM,CAAA;IACf,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;IAClB,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,CAAA;CACf;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoDG;AACH,MAAM,CAAC,OAAO,UAAU,IAAI,CAAC,CAAC,SAAS,WAAW,EAChD,OAAO,EAAE,eAAe,CAAC,CAAC,CAAC,GAC1B,WAAW,CAAC,CAAC,CAAC,CAShB"}

package/providers/okta.js

@@ -0,0 +1,63 @@
+/**
+ * Add Okta login to your page.
+ *
+ * ### Setup
+ *
+ * #### Callback URL
+ * ```
+ * https://example.com/api/auth/callback/okta
+ * ```
+ *
+ * #### Configuration
+ *```ts
+ * import { Auth } from "@auth/core"
+ * import Okta from "@auth/core/providers/okta"
+ *
+ * const request = new Request(origin)
+ * const response = await Auth(request, {
+ *   providers: [
+ *     Okta({
+ *       clientId: OKTA_CLIENT_ID,
+ *       clientSecret: OKTA_CLIENT_SECRET,
+ *       issuer: OKTA_ISSUER,
+ *     }),
+ *   ],
+ * })
+ * ```
+ *
+ * ### Resources
+ *
+ *  - [Okta OAuth documentation](https://developer.okta.com/docs/reference/api/oidc)
+ *
+ * ### Notes
+ *
+ * By default, Auth.js assumes that the Okta provider is
+ * based on the [Open ID Connect](https://openid.net/specs/openid-connect-core-1_0.html) specification.
+ *
+ * :::tip
+ *
+ * The Okta provider comes with a [default configuration](https://github.com/nextauthjs/next-auth/blob/main/packages/core/src/providers/okta.ts).
+ * To override the defaults for your use case, check out [customizing a built-in OAuth provider](https://authjs.dev/guides/configuring-oauth-providers).
+ *
+ * :::
+ *
+ * :::info **Disclaimer**
+ *
+ * If you think you found a bug in the default configuration, you can [open an issue](https://authjs.dev/new/provider-issue).
+ *
+ * Auth.js strictly adheres to the specification and it cannot take responsibility for any deviation from
+ * the spec by the provider. You can open an issue, but if the problem is non-compliance with the spec,
+ * we might not pursue a resolution. You can ask for more help in [Discussions](https://authjs.dev/new/github-discussions).
+ *
+ * :::
+ */
+export default function Okta(options) {
+    return {
+        id: "okta",
+        name: "Okta",
+        type: "oidc",
+        style: { bg: "#000", text: "#fff" },
+        checks: ["pkce", "state"],
+        options,
+    };
+}

package/providers/onelogin.d.ts

@@ -0,0 +1,65 @@
+/**
+ * <div class="provider" style={{backgroundColor: "#000", display: "flex", justifyContent: "space-between", color: "#fff", padding: 16}}>
+ * <span>Built-in <b>OneLogin</b> integration.</span>
+ * <a href="https://onelogin.com/">
+ *   <img style={{display: "block"}} src="https://authjs.dev/img/providers/onelogin.svg" height="48" />
+ * </a>
+ * </div>
+ *
+ * @module providers/onelogin
+ */
+import type { OAuthConfig, OAuthUserConfig } from "./index.js";
+/**
+ * Add OneLogin login to your page.
+ *
+ * ### Setup
+ *
+ * #### Callback URL
+ * ```
+ * https://example.com/api/auth/callback/onelogin
+ * ```
+ *
+ * #### Configuration
+ *```ts
+ * import { Auth } from "@auth/core"
+ * import OneLogin from "@auth/core/providers/onelogin"
+ *
+ * const request = new Request(origin)
+ * const response = await Auth(request, {
+ *   providers: [
+ *     OneLogin({
+ *       clientId: ONELOGIN_CLIENT_ID,
+ *       clientSecret: ONELOGIN_CLIENT_SECRET,
+ *     }),
+ *   ],
+ * })
+ * ```
+ *
+ * ### Resources
+ *
+ *  - [OneLogin OAuth documentation](https://example.com)
+ *
+ * ### Notes
+ *
+ * By default, Auth.js assumes that the OneLogin provider is
+ * based on the [Open ID Connect](https://openid.net/specs/openid-connect-core-1_0.html) specification.
+ *
+ * :::tip
+ *
+ * The OneLogin provider comes with a [default configuration](https://github.com/nextauthjs/next-auth/blob/main/packages/core/src/providers/onelogin.ts).
+ * To override the defaults for your use case, check out [customizing a built-in OAuth provider](https://authjs.dev/guides/configuring-oauth-providers).
+ *
+ * :::
+ *
+ * :::info **Disclaimer**
+ *
+ * If you think you found a bug in the default configuration, you can [open an issue](https://authjs.dev/new/provider-issue).
+ *
+ * Auth.js strictly adheres to the specification and it cannot take responsibility for any deviation from
+ * the spec by the provider. You can open an issue, but if the problem is non-compliance with the spec,
+ * we might not pursue a resolution. You can ask for more help in [Discussions](https://authjs.dev/new/github-discussions).
+ *
+ * :::
+ */
+export default function OneLogin(config: OAuthUserConfig<Record<string, any>>): OAuthConfig<Record<string, any>>;
+//# sourceMappingURL=onelogin.d.ts.map

package/providers/onelogin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"onelogin.d.ts","sourceRoot":"","sources":["../src/providers/onelogin.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,KAAK,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAE9D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmDG;AACH,MAAM,CAAC,OAAO,UAAU,QAAQ,CAC9B,MAAM,EAAE,eAAe,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,GAC3C,WAAW,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAQlC"}

package/providers/onelogin.js

@@ -0,0 +1,61 @@
+/**
+ * Add OneLogin login to your page.
+ *
+ * ### Setup
+ *
+ * #### Callback URL
+ * ```
+ * https://example.com/api/auth/callback/onelogin
+ * ```
+ *
+ * #### Configuration
+ *```ts
+ * import { Auth } from "@auth/core"
+ * import OneLogin from "@auth/core/providers/onelogin"
+ *
+ * const request = new Request(origin)
+ * const response = await Auth(request, {
+ *   providers: [
+ *     OneLogin({
+ *       clientId: ONELOGIN_CLIENT_ID,
+ *       clientSecret: ONELOGIN_CLIENT_SECRET,
+ *     }),
+ *   ],
+ * })
+ * ```
+ *
+ * ### Resources
+ *
+ *  - [OneLogin OAuth documentation](https://example.com)
+ *
+ * ### Notes
+ *
+ * By default, Auth.js assumes that the OneLogin provider is
+ * based on the [Open ID Connect](https://openid.net/specs/openid-connect-core-1_0.html) specification.
+ *
+ * :::tip
+ *
+ * The OneLogin provider comes with a [default configuration](https://github.com/nextauthjs/next-auth/blob/main/packages/core/src/providers/onelogin.ts).
+ * To override the defaults for your use case, check out [customizing a built-in OAuth provider](https://authjs.dev/guides/configuring-oauth-providers).
+ *
+ * :::
+ *
+ * :::info **Disclaimer**
+ *
+ * If you think you found a bug in the default configuration, you can [open an issue](https://authjs.dev/new/provider-issue).
+ *
+ * Auth.js strictly adheres to the specification and it cannot take responsibility for any deviation from
+ * the spec by the provider. You can open an issue, but if the problem is non-compliance with the spec,
+ * we might not pursue a resolution. You can ask for more help in [Discussions](https://authjs.dev/new/github-discussions).
+ *
+ * :::
+ */
+export default function OneLogin(config) {
+    return {
+        id: "onelogin",
+        name: "OneLogin",
+        type: "oidc",
+        wellKnown: `${config.issuer}/oidc/2/.well-known/openid-configuration`,
+        options: config,
+    };
+}