@n24q02m/mcp-core 1.0.0-beta.3 → 1.0.0

package/build/auth/delegated-oauth-app.d.ts

@@ -0,0 +1,53 @@
+/**
+ * Delegated OAuth 2.1 Authorization Server as an HTTP request handler.
+ *
+ * Unified abstraction for upstream OAuth providers. Fronts two upstream
+ * flows behind a single local OAuth 2.1 PKCE facade for the MCP client:
+ *
+ * - ``redirect`` flow -- classic authorization_code redirect (Notion,
+ *   Grafana, GitHub, ...). The local server proxies ``/authorize`` to the
+ *   upstream authorize endpoint, handles the callback, exchanges the
+ *   upstream code for upstream tokens via ``upstream.tokenUrl``, forwards
+ *   the tokens to the consumer via ``onTokenReceived``, then finishes the
+ *   local PKCE exchange so the MCP client receives a local JWT.
+ * - ``device_code`` flow (RFC 8628) -- used by GDrive, Outlook, etc. The
+ *   local server initiates the upstream device authorization, renders a
+ *   page showing ``user_code`` + ``verification_url``, runs a background
+ *   polling task on ``upstream.tokenUrl`` until the upstream grants a
+ *   token, invokes ``onTokenReceived``, and signals completion via the
+ *   setup-status endpoint.
+ *
+ * This is a TypeScript port of core-py's ``delegated_oauth_app.py``.
+ * Behavior, protocol, and TTL constants are kept identical for parity.
+ */
+import { JWTIssuer } from '../oauth/jwt-issuer.js';
+import { type RequestHandler } from './router.js';
+export type FlowType = 'device_code' | 'redirect';
+export interface UpstreamOAuthConfig {
+    tokenUrl: string;
+    clientId: string;
+    clientSecret?: string;
+    scopes?: string[];
+    authorizeUrl?: string;
+    callbackPath?: string;
+    deviceAuthUrl?: string;
+    pollIntervalMs?: number;
+}
+export type OAuthTokens = Record<string, unknown>;
+export type TokenCallback = (tokens: OAuthTokens) => void | Promise<void>;
+export interface DelegatedOAuthAppOptions {
+    serverName: string;
+    flow: FlowType;
+    upstream: UpstreamOAuthConfig;
+    onTokenReceived: TokenCallback;
+    jwtIssuer?: JWTIssuer;
+}
+export interface DelegatedOAuthAppResult {
+    handler: RequestHandler;
+    jwtIssuer: JWTIssuer;
+    markSetupComplete: (key?: string) => void;
+    /** Shut down background polling tasks (device_code flow). */
+    shutdown: () => Promise<void>;
+}
+export declare function createDelegatedOAuthApp(options: DelegatedOAuthAppOptions): Promise<DelegatedOAuthAppResult>;
+//# sourceMappingURL=delegated-oauth-app.d.ts.map

package/build/auth/delegated-oauth-app.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delegated-oauth-app.d.ts","sourceRoot":"","sources":["../../src/auth/delegated-oauth-app.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAIH,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAA;AAClD,OAAO,EAA2D,KAAK,cAAc,EAAE,MAAM,aAAa,CAAA;AAG1G,MAAM,MAAM,QAAQ,GAAG,aAAa,GAAG,UAAU,CAAA;AAEjD,MAAM,WAAW,mBAAmB;IAElC,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,MAAM,CAAA;IAChB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;IAEjB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,YAAY,CAAC,EAAE,MAAM,CAAA;IAErB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,cAAc,CAAC,EAAE,MAAM,CAAA;CACxB;AAED,MAAM,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;AAEjD,MAAM,MAAM,aAAa,GAAG,CAAC,MAAM,EAAE,WAAW,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;AAEzE,MAAM,WAAW,wBAAwB;IACvC,UAAU,EAAE,MAAM,CAAA;IAClB,IAAI,EAAE,QAAQ,CAAA;IACd,QAAQ,EAAE,mBAAmB,CAAA;IAC7B,eAAe,EAAE,aAAa,CAAA;IAC9B,SAAS,CAAC,EAAE,SAAS,CAAA;CACtB;AAED,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,cAAc,CAAA;IACvB,SAAS,EAAE,SAAS,CAAA;IACpB,iBAAiB,EAAE,CAAC,GAAG,CAAC,EAAE,MAAM,KAAK,IAAI,CAAA;IACzC,6DAA6D;IAC7D,QAAQ,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAC9B;AAiHD,wBAAsB,uBAAuB,CAAC,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAmdjH"}

package/build/auth/delegated-oauth-app.js

@@ -0,0 +1,531 @@
+/**
+ * Delegated OAuth 2.1 Authorization Server as an HTTP request handler.
+ *
+ * Unified abstraction for upstream OAuth providers. Fronts two upstream
+ * flows behind a single local OAuth 2.1 PKCE facade for the MCP client:
+ *
+ * - ``redirect`` flow -- classic authorization_code redirect (Notion,
+ *   Grafana, GitHub, ...). The local server proxies ``/authorize`` to the
+ *   upstream authorize endpoint, handles the callback, exchanges the
+ *   upstream code for upstream tokens via ``upstream.tokenUrl``, forwards
+ *   the tokens to the consumer via ``onTokenReceived``, then finishes the
+ *   local PKCE exchange so the MCP client receives a local JWT.
+ * - ``device_code`` flow (RFC 8628) -- used by GDrive, Outlook, etc. The
+ *   local server initiates the upstream device authorization, renders a
+ *   page showing ``user_code`` + ``verification_url``, runs a background
+ *   polling task on ``upstream.tokenUrl`` until the upstream grants a
+ *   token, invokes ``onTokenReceived``, and signals completion via the
+ *   setup-status endpoint.
+ *
+ * This is a TypeScript port of core-py's ``delegated_oauth_app.py``.
+ * Behavior, protocol, and TTL constants are kept identical for parity.
+ */
+import { createHash, randomBytes, timingSafeEqual } from 'node:crypto';
+import { JWTIssuer } from '../oauth/jwt-issuer.js';
+import { createRouter, htmlResponse, jsonResponse, parseFormBody } from './router.js';
+import { authorizationServerMetadata, protectedResourceMetadata } from './well-known.js';
+const AUTH_CODE_TTL_S = 600;
+const SESSION_TTL_S = 600;
+function s256Verify(codeVerifier, codeChallenge) {
+    const computed = createHash('sha256').update(codeVerifier, 'ascii').digest('base64url');
+    if (computed.length !== codeChallenge.length)
+        return false;
+    try {
+        return timingSafeEqual(Buffer.from(computed, 'ascii'), Buffer.from(codeChallenge, 'ascii'));
+    }
+    catch {
+        return false;
+    }
+}
+function pruneExpired(store, ttlMs) {
+    const now = Date.now();
+    for (const [key, value] of store) {
+        if (now - value.createdAt > ttlMs)
+            store.delete(key);
+    }
+}
+function getBaseUrl(req) {
+    const host = req.headers.host ?? 'localhost';
+    const encrypted = req.socket.encrypted === true;
+    const forwardedProto = req.headers['x-forwarded-proto'];
+    const protocol = typeof forwardedProto === 'string' && forwardedProto.length > 0
+        ? forwardedProto.split(',')[0].trim()
+        : encrypted
+            ? 'https'
+            : 'http';
+    return `${protocol}://${host}`;
+}
+function escapeHtml(value) {
+    return value
+        .replace(/&/g, '&')
+        .replace(/</g, '&lt;')
+        .replace(/>/g, '&gt;')
+        .replace(/"/g, '&quot;')
+        .replace(/'/g, '&#39;');
+}
+function renderDeviceCodePage(opts) {
+    const safeName = escapeHtml(opts.serverName);
+    const safeCode = escapeHtml(opts.userCode);
+    const safeUrl = escapeHtml(opts.verificationUrl);
+    return `<!DOCTYPE html>
+<html lang="en">
+<head>
+<meta charset="utf-8" />
+<title>Authorize ${safeName}</title>
+<style>
+body { font-family: system-ui, sans-serif; background: #0d0d0d; color: #eee;
+       display: flex; align-items: center; justify-content: center;
+       min-height: 100vh; margin: 0; }
+.card { background: #181818; padding: 2rem 3rem; border-radius: 12px;
+        border: 1px solid #333; max-width: 480px; text-align: center; }
+h1 { margin-top: 0; }
+.code { font-size: 2rem; font-family: ui-monospace, monospace;
+         letter-spacing: 0.25em; padding: 1rem 1.5rem; background: #000;
+         border-radius: 8px; border: 1px solid #444; margin: 1.5rem 0; }
+a { color: #4ea1ff; }
+.status { margin-top: 1.5rem; color: #888; font-size: 0.9rem; }
+</style>
+</head>
+<body>
+<div class="card">
+  <h1>Authorize ${safeName}</h1>
+  <p>Visit the URL below and enter this code:</p>
+  <div class="code">${safeCode}</div>
+  <p><a href="${safeUrl}" target="_blank" rel="noopener noreferrer">${safeUrl}</a></p>
+  <p class="status" id="status">Waiting for you to approve...</p>
+</div>
+<script>
+async function poll() {
+  try {
+    const r = await fetch('/setup-status');
+    const j = await r.json();
+    const s = j[Object.keys(j)[0]] || 'idle';
+    if (s === 'complete') {
+      document.getElementById('status').textContent = 'Authorized! You can close this window.';
+      return;
+    }
+    if (s === 'error') {
+      document.getElementById('status').textContent = 'Authorization failed. Please restart.';
+      return;
+    }
+  } catch (e) {}
+  setTimeout(poll, 2000);
+}
+poll();
+</script>
+</body>
+</html>`;
+}
+export async function createDelegatedOAuthApp(options) {
+    if (options.flow === 'redirect' && !options.upstream.authorizeUrl) {
+        throw new Error('authorizeUrl is required for redirect flow');
+    }
+    if (options.flow === 'device_code' && !options.upstream.deviceAuthUrl) {
+        throw new Error('deviceAuthUrl is required for device_code flow');
+    }
+    const jwtIssuer = options.jwtIssuer ?? new JWTIssuer(options.serverName);
+    await jwtIssuer.init();
+    const pendingSessions = new Map();
+    const authCodes = new Map();
+    const setupStatus = { [options.serverName]: 'idle' };
+    // Each entry: AbortController for the background poll loop.
+    const pollControllers = new Set();
+    const callbackPath = options.upstream.callbackPath ?? '/callback';
+    function markSetupComplete(key) {
+        setupStatus[key ?? options.serverName] = 'complete';
+    }
+    function markSetupError(key) {
+        setupStatus[key ?? options.serverName] = 'error';
+    }
+    async function invokeTokenCallback(tokens) {
+        await options.onTokenReceived(tokens);
+    }
+    // ------------------------------------------------------------------
+    // Redirect flow
+    // ------------------------------------------------------------------
+    async function authorizeRedirect(req, res) {
+        const url = new URL(req.url ?? '/', `http://${req.headers.host ?? 'localhost'}`);
+        const p = url.searchParams;
+        const clientId = p.get('client_id');
+        const redirectUri = p.get('redirect_uri');
+        const state = p.get('state');
+        const codeChallenge = p.get('code_challenge');
+        const codeChallengeMethod = p.get('code_challenge_method') ?? 'S256';
+        if (!clientId || !redirectUri || !state || !codeChallenge) {
+            jsonResponse(res, 400, {
+                error: 'invalid_request',
+                error_description: 'Missing required parameters'
+            });
+            return;
+        }
+        const nonce = randomBytes(32).toString('base64url');
+        pendingSessions.set(nonce, {
+            clientId,
+            redirectUri,
+            state,
+            codeChallenge,
+            codeChallengeMethod,
+            createdAt: Date.now()
+        });
+        pruneExpired(pendingSessions, SESSION_TTL_S * 1000);
+        const base = getBaseUrl(req);
+        const qs = new URLSearchParams({
+            client_id: options.upstream.clientId,
+            redirect_uri: `${base}${callbackPath}`,
+            response_type: 'code',
+            state: nonce
+        });
+        if (options.upstream.scopes && options.upstream.scopes.length > 0) {
+            qs.set('scope', options.upstream.scopes.join(' '));
+        }
+        const authorizeUrl = options.upstream.authorizeUrl;
+        const separator = authorizeUrl.includes('?') ? '&' : '?';
+        const target = `${authorizeUrl}${separator}${qs.toString()}`;
+        res.writeHead(302, { Location: target });
+        res.end();
+    }
+    async function callback(req, res) {
+        const url = new URL(req.url ?? '/', `http://${req.headers.host ?? 'localhost'}`);
+        const code = url.searchParams.get('code');
+        const state = url.searchParams.get('state');
+        if (!code || !state) {
+            jsonResponse(res, 400, {
+                error: 'invalid_request',
+                error_description: 'Missing code or state'
+            });
+            return;
+        }
+        const session = pendingSessions.get(state);
+        if (session === undefined) {
+            jsonResponse(res, 400, { error: 'invalid_request', error_description: 'Invalid state' });
+            return;
+        }
+        pendingSessions.delete(state);
+        if (Date.now() - session.createdAt > SESSION_TTL_S * 1000) {
+            jsonResponse(res, 400, { error: 'invalid_request', error_description: 'Session expired' });
+            return;
+        }
+        const base = getBaseUrl(req);
+        const form = new URLSearchParams({
+            grant_type: 'authorization_code',
+            code,
+            client_id: options.upstream.clientId,
+            redirect_uri: `${base}${callbackPath}`
+        });
+        if (options.upstream.clientSecret) {
+            form.set('client_secret', options.upstream.clientSecret);
+        }
+        let upstreamResp;
+        try {
+            upstreamResp = await fetch(options.upstream.tokenUrl, {
+                method: 'POST',
+                headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
+                body: form.toString()
+            });
+        }
+        catch {
+            jsonResponse(res, 502, {
+                error: 'server_error',
+                error_description: 'Upstream token exchange failed'
+            });
+            return;
+        }
+        if (!upstreamResp.ok) {
+            const text = await upstreamResp.text().catch(() => '');
+            jsonResponse(res, 400, {
+                error: 'invalid_grant',
+                error_description: `Upstream rejected token exchange: ${text}`
+            });
+            return;
+        }
+        let tokens;
+        try {
+            tokens = (await upstreamResp.json());
+        }
+        catch {
+            jsonResponse(res, 502, {
+                error: 'server_error',
+                error_description: 'Upstream returned invalid JSON'
+            });
+            return;
+        }
+        try {
+            await invokeTokenCallback(tokens);
+        }
+        catch {
+            jsonResponse(res, 500, {
+                error: 'server_error',
+                error_description: 'Failed to persist tokens'
+            });
+            return;
+        }
+        const authCode = randomBytes(32).toString('base64url');
+        authCodes.set(authCode, {
+            codeChallenge: session.codeChallenge,
+            codeChallengeMethod: session.codeChallengeMethod,
+            createdAt: Date.now()
+        });
+        pruneExpired(authCodes, AUTH_CODE_TTL_S * 1000);
+        const separator = session.redirectUri.includes('?') ? '&' : '?';
+        const redirectUrl = `${session.redirectUri}${separator}code=${authCode}&state=${session.state}`;
+        res.writeHead(302, { Location: redirectUrl });
+        res.end();
+    }
+    // ------------------------------------------------------------------
+    // Device code flow
+    // ------------------------------------------------------------------
+    async function pollDeviceToken(deviceCode, initialIntervalMs, controller) {
+        let intervalMs = Math.max(initialIntervalMs, 0);
+        const body = new URLSearchParams({
+            grant_type: 'urn:ietf:params:oauth:grant-type:device_code',
+            device_code: deviceCode,
+            client_id: options.upstream.clientId
+        });
+        if (options.upstream.clientSecret) {
+            body.set('client_secret', options.upstream.clientSecret);
+        }
+        while (!controller.signal.aborted) {
+            await new Promise((resolve) => {
+                const t = setTimeout(resolve, intervalMs);
+                controller.signal.addEventListener('abort', () => {
+                    clearTimeout(t);
+                    resolve();
+                }, { once: true });
+            });
+            if (controller.signal.aborted)
+                return;
+            let resp;
+            try {
+                resp = await fetch(options.upstream.tokenUrl, {
+                    method: 'POST',
+                    headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
+                    body: body.toString(),
+                    signal: controller.signal
+                });
+            }
+            catch {
+                if (controller.signal.aborted)
+                    return;
+                markSetupError();
+                return;
+            }
+            if (resp.ok) {
+                let tokens;
+                try {
+                    tokens = (await resp.json());
+                }
+                catch {
+                    markSetupError();
+                    return;
+                }
+                try {
+                    await invokeTokenCallback(tokens);
+                }
+                catch {
+                    markSetupError();
+                    return;
+                }
+                markSetupComplete();
+                return;
+            }
+            let errBody;
+            try {
+                errBody = (await resp.json());
+            }
+            catch {
+                markSetupError();
+                return;
+            }
+            const err = errBody.error;
+            if (err === 'authorization_pending')
+                continue;
+            if (err === 'slow_down') {
+                intervalMs += 5000;
+                continue;
+            }
+            markSetupError();
+            return;
+        }
+    }
+    async function authorizeDeviceCode(req, res) {
+        const url = new URL(req.url ?? '/', `http://${req.headers.host ?? 'localhost'}`);
+        const p = url.searchParams;
+        const clientId = p.get('client_id');
+        const redirectUri = p.get('redirect_uri');
+        const state = p.get('state');
+        const codeChallenge = p.get('code_challenge');
+        const codeChallengeMethod = p.get('code_challenge_method') ?? 'S256';
+        if (!clientId || !redirectUri || !state || !codeChallenge) {
+            jsonResponse(res, 400, {
+                error: 'invalid_request',
+                error_description: 'Missing required parameters'
+            });
+            return;
+        }
+        // Initiate upstream device authorization.
+        const body = new URLSearchParams({ client_id: options.upstream.clientId });
+        if (options.upstream.scopes && options.upstream.scopes.length > 0) {
+            body.set('scope', options.upstream.scopes.join(' '));
+        }
+        let upstreamResp;
+        try {
+            upstreamResp = await fetch(options.upstream.deviceAuthUrl, {
+                method: 'POST',
+                headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
+                body: body.toString()
+            });
+        }
+        catch {
+            jsonResponse(res, 502, {
+                error: 'server_error',
+                error_description: 'Upstream device auth failed'
+            });
+            return;
+        }
+        if (!upstreamResp.ok) {
+            const text = await upstreamResp.text().catch(() => '');
+            jsonResponse(res, 502, {
+                error: 'server_error',
+                error_description: `Upstream device auth rejected: ${text}`
+            });
+            return;
+        }
+        let device;
+        try {
+            device = (await upstreamResp.json());
+        }
+        catch {
+            jsonResponse(res, 502, {
+                error: 'server_error',
+                error_description: 'Upstream device auth returned invalid JSON'
+            });
+            return;
+        }
+        const deviceCode = typeof device.device_code === 'string' ? device.device_code : undefined;
+        const userCode = typeof device.user_code === 'string' ? device.user_code : undefined;
+        const verificationUrl = typeof device.verification_url === 'string'
+            ? device.verification_url
+            : typeof device.verification_uri === 'string'
+                ? device.verification_uri
+                : undefined;
+        const intervalSecs = typeof device.interval === 'number'
+            ? device.interval
+            : Math.max((options.upstream.pollIntervalMs ?? 5000) / 1000, 1);
+        if (!deviceCode || !userCode || !verificationUrl) {
+            jsonResponse(res, 502, {
+                error: 'server_error',
+                error_description: 'Upstream device auth response missing fields'
+            });
+            return;
+        }
+        // Pre-allocate auth code so /token can complete once polling succeeds.
+        const authCode = randomBytes(32).toString('base64url');
+        authCodes.set(authCode, {
+            codeChallenge,
+            codeChallengeMethod,
+            createdAt: Date.now()
+        });
+        pruneExpired(authCodes, AUTH_CODE_TTL_S * 1000);
+        setupStatus[options.serverName] = 'pending';
+        const controller = new AbortController();
+        pollControllers.add(controller);
+        // Run in background; intentionally not awaited.
+        pollDeviceToken(deviceCode, intervalSecs * 1000, controller).finally(() => {
+            pollControllers.delete(controller);
+        });
+        htmlResponse(res, 200, renderDeviceCodePage({
+            serverName: options.serverName,
+            userCode,
+            verificationUrl
+        }));
+    }
+    // ------------------------------------------------------------------
+    // Shared endpoints
+    // ------------------------------------------------------------------
+    async function authorize(req, res) {
+        if (options.flow === 'redirect') {
+            await authorizeRedirect(req, res);
+            return;
+        }
+        await authorizeDeviceCode(req, res);
+    }
+    async function token(req, res) {
+        let form;
+        try {
+            form = await parseFormBody(req);
+        }
+        catch {
+            jsonResponse(res, 400, { error: 'invalid_request' });
+            return;
+        }
+        if (form.grant_type !== 'authorization_code') {
+            jsonResponse(res, 400, { error: 'unsupported_grant_type' });
+            return;
+        }
+        const code = form.code;
+        const codeVerifier = form.code_verifier;
+        if (!code || !codeVerifier) {
+            jsonResponse(res, 400, {
+                error: 'invalid_request',
+                error_description: 'Missing code or code_verifier'
+            });
+            return;
+        }
+        const entry = authCodes.get(code);
+        if (entry === undefined) {
+            jsonResponse(res, 400, { error: 'invalid_grant' });
+            return;
+        }
+        authCodes.delete(code);
+        if (Date.now() - entry.createdAt > AUTH_CODE_TTL_S * 1000) {
+            jsonResponse(res, 400, { error: 'invalid_grant' });
+            return;
+        }
+        if (entry.codeChallengeMethod !== 'S256') {
+            jsonResponse(res, 400, {
+                error: 'invalid_request',
+                error_description: 'Only S256 is supported'
+            });
+            return;
+        }
+        if (!s256Verify(codeVerifier, entry.codeChallenge)) {
+            jsonResponse(res, 400, { error: 'invalid_grant' });
+            return;
+        }
+        const accessToken = await jwtIssuer.issueAccessToken('local-user');
+        jsonResponse(res, 200, {
+            access_token: accessToken,
+            token_type: 'Bearer',
+            expires_in: 3600
+        });
+    }
+    async function setupStatusHandler(_req, res) {
+        jsonResponse(res, 200, setupStatus);
+    }
+    async function wellKnownAs(req, res) {
+        jsonResponse(res, 200, authorizationServerMetadata(getBaseUrl(req)));
+    }
+    async function wellKnownPr(req, res) {
+        const base = getBaseUrl(req);
+        jsonResponse(res, 200, protectedResourceMetadata(base, [base]));
+    }
+    const routes = [
+        { method: 'GET', path: '/authorize', handler: authorize },
+        { method: 'POST', path: '/token', handler: token },
+        { method: 'GET', path: '/setup-status', handler: setupStatusHandler },
+        { method: 'GET', path: '/.well-known/oauth-authorization-server', handler: wellKnownAs },
+        { method: 'GET', path: '/.well-known/oauth-protected-resource', handler: wellKnownPr }
+    ];
+    if (options.flow === 'redirect') {
+        routes.push({ method: 'GET', path: callbackPath, handler: callback });
+    }
+    const handler = createRouter(routes);
+    async function shutdown() {
+        for (const controller of pollControllers) {
+            controller.abort();
+        }
+        pollControllers.clear();
+    }
+    return { handler, jwtIssuer, markSetupComplete, shutdown };
+}
+//# sourceMappingURL=delegated-oauth-app.js.map

package/build/auth/delegated-oauth-app.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delegated-oauth-app.js","sourceRoot":"","sources":["../../src/auth/delegated-oauth-app.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAEtE,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAA;AAClD,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,YAAY,EAAE,aAAa,EAAuB,MAAM,aAAa,CAAA;AAC1G,OAAO,EAAE,2BAA2B,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAA;AAsCxF,MAAM,eAAe,GAAG,GAAG,CAAA;AAC3B,MAAM,aAAa,GAAG,GAAG,CAAA;AAiBzB,SAAS,UAAU,CAAC,YAAoB,EAAE,aAAqB;IAC7D,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;IACvF,IAAI,QAAQ,CAAC,MAAM,KAAK,aAAa,CAAC,MAAM;QAAE,OAAO,KAAK,CAAA;IAC1D,IAAI,CAAC;QACH,OAAO,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC,CAAA;IAC7F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAkC,KAAqB,EAAE,KAAa;IACzF,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;IACtB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,KAAK,EAAE,CAAC;QACjC,IAAI,GAAG,GAAG,KAAK,CAAC,SAAS,GAAG,KAAK;YAAE,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;IACtD,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,GAAoB;IACtC,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,CAAA;IAC5C,MAAM,SAAS,GAAI,GAAG,CAAC,MAAkC,CAAC,SAAS,KAAK,IAAI,CAAA;IAC5E,MAAM,cAAc,GAAG,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAA;IACvD,MAAM,QAAQ,GACZ,OAAO,cAAc,KAAK,QAAQ,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC;QAC7D,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE;QACrC,CAAC,CAAC,SAAS;YACT,CAAC,CAAC,OAAO;YACT,CAAC,CAAC,MAAM,CAAA;IACd,OAAO,GAAG,QAAQ,MAAM,IAAI,EAAE,CAAA;AAChC,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,KAAK;SACT,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;SACvB,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;AAC3B,CAAC;AAED,SAAS,oBAAoB,CAAC,IAAuE;IACnG,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;IAC5C,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IAC1C,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,eAAe,CAAC,CAAA;IAChD,OAAO;;;;mBAIU,QAAQ;;;;;;;;;;;;;;;;;kBAiBT,QAAQ;;sBAEJ,QAAQ;gBACd,OAAO,+CAA+C,OAAO;;;;;;;;;;;;;;;;;;;;;;;QAuBrE,CAAA;AACR,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,OAAiC;IAC7E,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC;QAClE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAA;IAC/D,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,aAAa,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAA;IACnE,CAAC;IAED,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,IAAI,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;IACxE,MAAM,SAAS,CAAC,IAAI,EAAE,CAAA;IAEtB,MAAM,eAAe,GAAG,IAAI,GAAG,EAA0B,CAAA;IACzD,MAAM,SAAS,GAAG,IAAI,GAAG,EAAyB,CAAA;IAClD,MAAM,WAAW,GAA2B,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAA;IAC5E,4DAA4D;IAC5D,MAAM,eAAe,GAAG,IAAI,GAAG,EAAmB,CAAA;IAClD,MAAM,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,YAAY,IAAI,WAAW,CAAA;IAEjE,SAAS,iBAAiB,CAAC,GAAY;QACrC,WAAW,CAAC,GAAG,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,UAAU,CAAA;IACrD,CAAC;IAED,SAAS,cAAc,CAAC,GAAY;QAClC,WAAW,CAAC,GAAG,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,OAAO,CAAA;IAClD,CAAC;IAED,KAAK,UAAU,mBAAmB,CAAC,MAAmB;QACpD,MAAM,OAAO,CAAC,eAAe,CAAC,MAAM,CAAC,CAAA;IACvC,CAAC;IAED,qEAAqE;IACrE,gBAAgB;IAChB,qEAAqE;IAErE,KAAK,UAAU,iBAAiB,CAAC,GAAoB,EAAE,GAAmB;QACxE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,UAAU,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,EAAE,CAAC,CAAA;QAChF,MAAM,CAAC,GAAG,GAAG,CAAC,YAAY,CAAA;QAC1B,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;QACnC,MAAM,WAAW,GAAG,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,CAAA;QACzC,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QAC5B,MAAM,aAAa,GAAG,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAA;QAC7C,MAAM,mBAAmB,GAAG,CAAC,CAAC,GAAG,CAAC,uBAAuB,CAAC,IAAI,MAAM,CAAA;QAEpE,IAAI,CAAC,QAAQ,IAAI,CAAC,WAAW,IAAI,CAAC,KAAK,IAAI,CAAC,aAAa,EAAE,CAAC;YAC1D,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE;gBACrB,KAAK,EAAE,iBAAiB;gBACxB,iBAAiB,EAAE,6BAA6B;aACjD,CAAC,CAAA;YACF,OAAM;QACR,CAAC;QAED,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;QACnD,eAAe,CAAC,GAAG,CAAC,KAAK,EAAE;YACzB,QAAQ;YACR,WAAW;YACX,KAAK;YACL,aAAa;YACb,mBAAmB;YACnB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC,CAAA;QACF,YAAY,CAAC,eAAe,EAAE,aAAa,GAAG,IAAI,CAAC,CAAA;QAEnD,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,EAAE,GAAG,IAAI,eAAe,CAAC;YAC7B,SAAS,EAAE,OAAO,CAAC,QAAQ,CAAC,QAAQ;YACpC,YAAY,EAAE,GAAG,IAAI,GAAG,YAAY,EAAE;YACtC,aAAa,EAAE,MAAM;YACrB,KAAK,EAAE,KAAK;SACb,CAAC,CAAA;QACF,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClE,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;QACpD,CAAC;QACD,MAAM,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,YAAsB,CAAA;QAC5D,MAAM,SAAS,GAAG,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAA;QACxD,MAAM,MAAM,GAAG,GAAG,YAAY,GAAG,SAAS,GAAG,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAA;QAC5D,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAA;QACxC,GAAG,CAAC,GAAG,EAAE,CAAA;IACX,CAAC;IAED,KAAK,UAAU,QAAQ,CAAC,GAAoB,EAAE,GAAmB;QAC/D,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,UAAU,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,EAAE,CAAC,CAAA;QAChF,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QACzC,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QAE3C,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACpB,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE;gBACrB,KAAK,EAAE,iBAAiB;gBACxB,iBAAiB,EAAE,uBAAuB;aAC3C,CAAC,CAAA;YACF,OAAM;QACR,CAAC;QAED,MAAM,OAAO,GAAG,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QAC1C,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,eAAe,EAAE,CAAC,CAAA;YACxF,OAAM;QACR,CAAC;QACD,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QAE7B,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,SAAS,GAAG,aAAa,GAAG,IAAI,EAAE,CAAC;YAC1D,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,CAAC,CAAA;YAC1F,OAAM;QACR,CAAC;QAED,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;YAC/B,UAAU,EAAE,oBAAoB;YAChC,IAAI;YACJ,SAAS,EAAE,OAAO,CAAC,QAAQ,CAAC,QAAQ;YACpC,YAAY,EAAE,GAAG,IAAI,GAAG,YAAY,EAAE;SACvC,CAAC,CAAA;QACF,IAAI,OAAO,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC;YAClC,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAA;QAC1D,CAAC;QAED,IAAI,YAAsB,CAAA;QAC1B,IAAI,CAAC;YACH,YAAY,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,EAAE;gBACpD,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;gBAChE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;aACtB,CAAC,CAAA;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE;gBACrB,KAAK,EAAE,cAAc;gBACrB,iBAAiB,EAAE,gCAAgC;aACpD,CAAC,CAAA;YACF,OAAM;QACR,CAAC;QAED,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC;YACrB,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAA;YACtD,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE;gBACrB,KAAK,EAAE,eAAe;gBACtB,iBAAiB,EAAE,qCAAqC,IAAI,EAAE;aAC/D,CAAC,CAAA;YACF,OAAM;QACR,CAAC;QAED,IAAI,MAAmB,CAAA;QACvB,IAAI,CAAC;YACH,MAAM,GAAG,CAAC,MAAM,YAAY,CAAC,IAAI,EAAE,CAAgB,CAAA;QACrD,CAAC;QAAC,MAAM,CAAC;YACP,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE;gBACrB,KAAK,EAAE,cAAc;gBACrB,iBAAiB,EAAE,gCAAgC;aACpD,CAAC,CAAA;YACF,OAAM;QACR,CAAC;QAED,IAAI,CAAC;YACH,MAAM,mBAAmB,CAAC,MAAM,CAAC,CAAA;QACnC,CAAC;QAAC,MAAM,CAAC;YACP,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE;gBACrB,KAAK,EAAE,cAAc;gBACrB,iBAAiB,EAAE,0BAA0B;aAC9C,CAAC,CAAA;YACF,OAAM;QACR,CAAC;QAED,MAAM,QAAQ,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;QACtD,SAAS,CAAC,GAAG,CAAC,QAAQ,EAAE;YACtB,aAAa,EAAE,OAAO,CAAC,aAAa;YACpC,mBAAmB,EAAE,OAAO,CAAC,mBAAmB;YAChD,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC,CAAA;QACF,YAAY,CAAC,SAAS,EAAE,eAAe,GAAG,IAAI,CAAC,CAAA;QAE/C,MAAM,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAA;QAC/D,MAAM,WAAW,GAAG,GAAG,OAAO,CAAC,WAAW,GAAG,SAAS,QAAQ,QAAQ,UAAU,OAAO,CAAC,KAAK,EAAE,CAAA;QAC/F,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAA;QAC7C,GAAG,CAAC,GAAG,EAAE,CAAA;IACX,CAAC;IAED,qEAAqE;IACrE,mBAAmB;IACnB,qEAAqE;IAErE,KAAK,UAAU,eAAe,CAC5B,UAAkB,EAClB,iBAAyB,EACzB,UAA2B;QAE3B,IAAI,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAA;QAC/C,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;YAC/B,UAAU,EAAE,8CAA8C;YAC1D,WAAW,EAAE,UAAU;YACvB,SAAS,EAAE,OAAO,CAAC,QAAQ,CAAC,QAAQ;SACrC,CAAC,CAAA;QACF,IAAI,OAAO,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC;YAClC,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAA;QAC1D,CAAC;QAED,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAClC,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;gBAClC,MAAM,CAAC,GAAG,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,CAAA;gBACzC,UAAU,CAAC,MAAM,CAAC,gBAAgB,CAChC,OAAO,EACP,GAAG,EAAE;oBACH,YAAY,CAAC,CAAC,CAAC,CAAA;oBACf,OAAO,EAAE,CAAA;gBACX,CAAC,EACD,EAAE,IAAI,EAAE,IAAI,EAAE,CACf,CAAA;YACH,CAAC,CAAC,CAAA;YACF,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO;gBAAE,OAAM;YAErC,IAAI,IAAc,CAAA;YAClB,IAAI,CAAC;gBACH,IAAI,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,EAAE;oBAC5C,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;oBAChE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;oBACrB,MAAM,EAAE,UAAU,CAAC,MAAM;iBAC1B,CAAC,CAAA;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO;oBAAE,OAAM;gBACrC,cAAc,EAAE,CAAA;gBAChB,OAAM;YACR,CAAC;YAED,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;gBACZ,IAAI,MAAmB,CAAA;gBACvB,IAAI,CAAC;oBACH,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAgB,CAAA;gBAC7C,CAAC;gBAAC,MAAM,CAAC;oBACP,cAAc,EAAE,CAAA;oBAChB,OAAM;gBACR,CAAC;gBACD,IAAI,CAAC;oBACH,MAAM,mBAAmB,CAAC,MAAM,CAAC,CAAA;gBACnC,CAAC;gBAAC,MAAM,CAAC;oBACP,cAAc,EAAE,CAAA;oBAChB,OAAM;gBACR,CAAC;gBACD,iBAAiB,EAAE,CAAA;gBACnB,OAAM;YACR,CAAC;YAED,IAAI,OAAgC,CAAA;YACpC,IAAI,CAAC;gBACH,OAAO,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAA4B,CAAA;YAC1D,CAAC;YAAC,MAAM,CAAC;gBACP,cAAc,EAAE,CAAA;gBAChB,OAAM;YACR,CAAC;YACD,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAA;YACzB,IAAI,GAAG,KAAK,uBAAuB;gBAAE,SAAQ;YAC7C,IAAI,GAAG,KAAK,WAAW,EAAE,CAAC;gBACxB,UAAU,IAAI,IAAI,CAAA;gBAClB,SAAQ;YACV,CAAC;YACD,cAAc,EAAE,CAAA;YAChB,OAAM;QACR,CAAC;IACH,CAAC;IAED,KAAK,UAAU,mBAAmB,CAAC,GAAoB,EAAE,GAAmB;QAC1E,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,UAAU,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,EAAE,CAAC,CAAA;QAChF,MAAM,CAAC,GAAG,GAAG,CAAC,YAAY,CAAA;QAC1B,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;QACnC,MAAM,WAAW,GAAG,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,CAAA;QACzC,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QAC5B,MAAM,aAAa,GAAG,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAA;QAC7C,MAAM,mBAAmB,GAAG,CAAC,CAAC,GAAG,CAAC,uBAAuB,CAAC,IAAI,MAAM,CAAA;QAEpE,IAAI,CAAC,QAAQ,IAAI,CAAC,WAAW,IAAI,CAAC,KAAK,IAAI,CAAC,aAAa,EAAE,CAAC;YAC1D,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE;gBACrB,KAAK,EAAE,iBAAiB;gBACxB,iBAAiB,EAAE,6BAA6B;aACjD,CAAC,CAAA;YACF,OAAM;QACR,CAAC;QAED,0CAA0C;QAC1C,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAA;QAC1E,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClE,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;QACtD,CAAC;QAED,IAAI,YAAsB,CAAA;QAC1B,IAAI,CAAC;YACH,YAAY,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,aAAuB,EAAE;gBACnE,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;gBAChE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;aACtB,CAAC,CAAA;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE;gBACrB,KAAK,EAAE,cAAc;gBACrB,iBAAiB,EAAE,6BAA6B;aACjD,CAAC,CAAA;YACF,OAAM;QACR,CAAC;QAED,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC;YACrB,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAA;YACtD,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE;gBACrB,KAAK,EAAE,cAAc;gBACrB,iBAAiB,EAAE,kCAAkC,IAAI,EAAE;aAC5D,CAAC,CAAA;YACF,OAAM;QACR,CAAC;QAED,IAAI,MAA+B,CAAA;QACnC,IAAI,CAAC;YACH,MAAM,GAAG,CAAC,MAAM,YAAY,CAAC,IAAI,EAAE,CAA4B,CAAA;QACjE,CAAC;QAAC,MAAM,CAAC;YACP,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE;gBACrB,KAAK,EAAE,cAAc;gBACrB,iBAAiB,EAAE,4CAA4C;aAChE,CAAC,CAAA;YACF,OAAM;QACR,CAAC;QAED,MAAM,UAAU,GAAG,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAA;QAC1F,MAAM,QAAQ,GAAG,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAA;QACpF,MAAM,eAAe,GACnB,OAAO,MAAM,CAAC,gBAAgB,KAAK,QAAQ;YACzC,CAAC,CAAC,MAAM,CAAC,gBAAgB;YACzB,CAAC,CAAC,OAAO,MAAM,CAAC,gBAAgB,KAAK,QAAQ;gBAC3C,CAAC,CAAC,MAAM,CAAC,gBAAgB;gBACzB,CAAC,CAAC,SAAS,CAAA;QACjB,MAAM,YAAY,GAChB,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ;YACjC,CAAC,CAAC,MAAM,CAAC,QAAQ;YACjB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,cAAc,IAAI,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,CAAA;QAEnE,IAAI,CAAC,UAAU,IAAI,CAAC,QAAQ,IAAI,CAAC,eAAe,EAAE,CAAC;YACjD,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE;gBACrB,KAAK,EAAE,cAAc;gBACrB,iBAAiB,EAAE,8CAA8C;aAClE,CAAC,CAAA;YACF,OAAM;QACR,CAAC;QAED,uEAAuE;QACvE,MAAM,QAAQ,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;QACtD,SAAS,CAAC,GAAG,CAAC,QAAQ,EAAE;YACtB,aAAa;YACb,mBAAmB;YACnB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC,CAAA;QACF,YAAY,CAAC,SAAS,EAAE,eAAe,GAAG,IAAI,CAAC,CAAA;QAE/C,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,SAAS,CAAA;QAC3C,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;QACxC,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;QAC/B,gDAAgD;QAChD,eAAe,CAAC,UAAU,EAAE,YAAY,GAAG,IAAI,EAAE,UAAU,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;YACxE,eAAe,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;QACpC,CAAC,CAAC,CAAA;QAEF,YAAY,CACV,GAAG,EACH,GAAG,EACH,oBAAoB,CAAC;YACnB,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,QAAQ;YACR,eAAe;SAChB,CAAC,CACH,CAAA;IACH,CAAC;IAED,qEAAqE;IACrE,mBAAmB;IACnB,qEAAqE;IAErE,KAAK,UAAU,SAAS,CAAC,GAAoB,EAAE,GAAmB;QAChE,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAChC,MAAM,iBAAiB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;YACjC,OAAM;QACR,CAAC;QACD,MAAM,mBAAmB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;IACrC,CAAC;IAED,KAAK,UAAU,KAAK,CAAC,GAAoB,EAAE,GAAmB;QAC5D,IAAI,IAA4B,CAAA;QAChC,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAA;QACjC,CAAC;QAAC,MAAM,CAAC;YACP,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAA;YACpD,OAAM;QACR,CAAC;QAED,IAAI,IAAI,CAAC,UAAU,KAAK,oBAAoB,EAAE,CAAC;YAC7C,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC,CAAA;YAC3D,OAAM;QACR,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAA;QACtB,MAAM,YAAY,GAAG,IAAI,CAAC,aAAa,CAAA;QACvC,IAAI,CAAC,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YAC3B,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE;gBACrB,KAAK,EAAE,iBAAiB;gBACxB,iBAAiB,EAAE,+BAA+B;aACnD,CAAC,CAAA;YACF,OAAM;QACR,CAAC;QAED,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QACjC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAA;YAClD,OAAM;QACR,CAAC;QACD,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QAEtB,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,SAAS,GAAG,eAAe,GAAG,IAAI,EAAE,CAAC;YAC1D,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAA;YAClD,OAAM;QACR,CAAC;QAED,IAAI,KAAK,CAAC,mBAAmB,KAAK,MAAM,EAAE,CAAC;YACzC,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE;gBACrB,KAAK,EAAE,iBAAiB;gBACxB,iBAAiB,EAAE,wBAAwB;aAC5C,CAAC,CAAA;YACF,OAAM;QACR,CAAC;QAED,IAAI,CAAC,UAAU,CAAC,YAAY,EAAE,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC;YACnD,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAA;YAClD,OAAM;QACR,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,SAAS,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAA;QAClE,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE;YACrB,YAAY,EAAE,WAAW;YACzB,UAAU,EAAE,QAAQ;YACpB,UAAU,EAAE,IAAI;SACjB,CAAC,CAAA;IACJ,CAAC;IAED,KAAK,UAAU,kBAAkB,CAAC,IAAqB,EAAE,GAAmB;QAC1E,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC,CAAA;IACrC,CAAC;IAED,KAAK,UAAU,WAAW,CAAC,GAAoB,EAAE,GAAmB;QAClE,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,2BAA2B,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;IACtE,CAAC;IAED,KAAK,UAAU,WAAW,CAAC,GAAoB,EAAE,GAAmB;QAClE,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,CAAA;QAC5B,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,yBAAyB,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjE,CAAC;IAED,MAAM,MAAM,GAAuC;QACjD,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE;QACzD,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE;QAClD,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,kBAAkB,EAAE;QACrE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,yCAAyC,EAAE,OAAO,EAAE,WAAW,EAAE;QACxF,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,uCAAuC,EAAE,OAAO,EAAE,WAAW,EAAE;KACvF,CAAA;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAChC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAA;IACvE,CAAC;IAED,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,CAAA;IAEpC,KAAK,UAAU,QAAQ;QACrB,KAAK,MAAM,UAAU,IAAI,eAAe,EAAE,CAAC;YACzC,UAAU,CAAC,KAAK,EAAE,CAAA;QACpB,CAAC;QACD,eAAe,CAAC,KAAK,EAAE,CAAA;IACzB,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,QAAQ,EAAE,CAAA;AAC5D,CAAC"}

package/build/auth/index.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Public exports for the ``auth`` subpath.
+ *
+ * Intentionally does NOT export ``router`` (internal HTTP glue).
+ */
+export { type CapabilityInfo, type ConfigField, type RelayConfigSchema, type RenderOptions, renderCredentialForm } from './credential-form.js';
+export { createDelegatedOAuthApp, type DelegatedOAuthAppOptions, type DelegatedOAuthAppResult, type FlowType, type OAuthTokens, type TokenCallback, type UpstreamOAuthConfig } from './delegated-oauth-app.js';
+export { type CredentialsCallback, createLocalOAuthApp, type LocalOAuthAppOptions, type LocalOAuthAppResult, type NextStep, type StepCallback } from './local-oauth-app.js';
+export { authorizationServerMetadata, protectedResourceMetadata } from './well-known.js';
+//# sourceMappingURL=index.d.ts.map

package/build/auth/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EACL,KAAK,cAAc,EACnB,KAAK,WAAW,EAChB,KAAK,iBAAiB,EACtB,KAAK,aAAa,EAClB,oBAAoB,EACrB,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EACL,uBAAuB,EACvB,KAAK,wBAAwB,EAC7B,KAAK,uBAAuB,EAC5B,KAAK,QAAQ,EACb,KAAK,WAAW,EAChB,KAAK,aAAa,EAClB,KAAK,mBAAmB,EACzB,MAAM,0BAA0B,CAAA;AACjC,OAAO,EACL,KAAK,mBAAmB,EACxB,mBAAmB,EACnB,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,EACxB,KAAK,QAAQ,EACb,KAAK,YAAY,EAClB,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EAAE,2BAA2B,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAA"}

package/build/auth/index.js

@@ -0,0 +1,10 @@
+/**
+ * Public exports for the ``auth`` subpath.
+ *
+ * Intentionally does NOT export ``router`` (internal HTTP glue).
+ */
+export { renderCredentialForm } from './credential-form.js';
+export { createDelegatedOAuthApp } from './delegated-oauth-app.js';
+export { createLocalOAuthApp } from './local-oauth-app.js';
+export { authorizationServerMetadata, protectedResourceMetadata } from './well-known.js';
+//# sourceMappingURL=index.js.map

package/build/auth/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAKL,oBAAoB,EACrB,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EACL,uBAAuB,EAOxB,MAAM,0BAA0B,CAAA;AACjC,OAAO,EAEL,mBAAmB,EAKpB,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EAAE,2BAA2B,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAA"}