@nathapp/nestjs-oauth-prisma 1.0.0

package/dist/oauth-prisma.types.js

@@ -0,0 +1,43 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.asJsonObject = asJsonObject;
+exports.getOAuthPrismaDelegate = getOAuthPrismaDelegate;
+class CheckedOAuthPrismaDelegate {
+    constructor(delegate, modelName) {
+        this.delegate = delegate;
+        this.modelName = modelName;
+    }
+    invoke(methodName, args) {
+        const method = this.delegate[methodName];
+        if (typeof method !== 'function') {
+            throw new TypeError(`OAuth Prisma model "${this.modelName}" does not implement ${methodName}()`);
+        }
+        return method.call(this.delegate, args);
+    }
+    findUnique(args) { return this.invoke('findUnique', args); }
+    findFirst(args) { return this.invoke('findFirst', args); }
+    findMany(args) { return this.invoke('findMany', args); }
+    count(args) { return this.invoke('count', args); }
+    create(args) { return this.invoke('create', args); }
+    update(args) { return this.invoke('update', args); }
+    delete(args) { return this.invoke('delete', args); }
+    updateMany(args) { return this.invoke('updateMany', args); }
+    deleteMany(args) { return this.invoke('deleteMany', args); }
+    createMany(args) { return this.invoke('createMany', args); }
+}
+function isRecord(value) {
+    return typeof value === 'object' && value !== null;
+}
+function asJsonObject(value) {
+    return isRecord(value) && !Array.isArray(value) ? value : undefined;
+}
+function getOAuthPrismaDelegate(client, modelName) {
+    if (!isRecord(client))
+        throw new TypeError('OAuth Prisma client must be an object');
+    const candidate = client[modelName];
+    if (!isRecord(candidate)) {
+        throw new TypeError(`OAuth Prisma client is missing model delegate "${modelName}"`);
+    }
+    return new CheckedOAuthPrismaDelegate(candidate, modelName);
+}
+//# sourceMappingURL=oauth-prisma.types.js.map

package/dist/oauth-prisma.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-prisma.types.js","sourceRoot":"","sources":["../lib/oauth-prisma.types.ts"],"names":[],"mappings":";;AAsHA,oCAEC;AAGD,wDAYC;AA/CD,MAAM,0BAA0B;IAC9B,YACmB,QAAiC,EACjC,SAAiB;QADjB,aAAQ,GAAR,QAAQ,CAAyB;QACjC,cAAS,GAAT,SAAS,CAAQ;IACjC,CAAC;IAEI,MAAM,CAAS,UAAkB,EAAE,IAAgB;QACzD,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QACzC,IAAI,OAAO,MAAM,KAAK,UAAU,EAAE,CAAC;YACjC,MAAM,IAAI,SAAS,CAAC,uBAAuB,IAAI,CAAC,SAAS,wBAAwB,UAAU,IAAI,CAAC,CAAC;QACnG,CAAC;QACD,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAoB,CAAC;IAC7D,CAAC;IAED,UAAU,CAAC,IAAgB,IAAyB,OAAO,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IAC7F,SAAS,CAAC,IAAgB,IAAyB,OAAO,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IAC3F,QAAQ,CAA8B,IAAgB,IAAuB,OAAO,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IACpH,KAAK,CAAC,IAAgB,IAAqB,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IAC/E,MAAM,CAAC,IAAgB,IAAkB,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IAC9E,MAAM,CAAC,IAAgB,IAAkB,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IAC9E,MAAM,CAAC,IAAgB,IAAkB,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IAC9E,UAAU,CAAC,IAAgB,IAAgC,OAAO,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IACpG,UAAU,CAAC,IAAgB,IAAgC,OAAO,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IACpG,UAAU,CAAC,IAAgB,IAAgC,OAAO,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;CACrG;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC;AACrD,CAAC;AAED,SAAgB,YAAY,CAAC,KAAc;IACzC,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACtE,CAAC;AAGD,SAAgB,sBAAsB,CACpC,MAAwB,EACxB,SAAiB;IAEjB,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,uCAAuC,CAAC,CAAC;IACpF,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;IACpC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,SAAS,CAAC,kDAAkD,SAAS,GAAG,CAAC,CAAC;IACtF,CAAC;IAGD,OAAO,IAAI,0BAA0B,CAAM,SAAS,EAAE,SAAS,CAAC,CAAC;AACnE,CAAC"}

package/dist/prisma-consent-logout-target.resolver.d.ts

@@ -0,0 +1,12 @@
+import { type ILogoutTargetResolver, type IOAuthConsentRepository } from '@nathapp/nestjs-oauth';
+export declare class PrismaConsentLogoutTargetResolver implements ILogoutTargetResolver {
+    protected readonly consentRepo: IOAuthConsentRepository;
+    constructor(consentRepo: IOAuthConsentRepository);
+    resolve(input: {
+        userId: string;
+        sid?: string;
+        tenantId?: string | null;
+    }): Promise<Array<{
+        clientId: string;
+    }>>;
+}

package/dist/prisma-consent-logout-target.resolver.js

@@ -0,0 +1,43 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PrismaConsentLogoutTargetResolver = void 0;
+const common_1 = require("@nestjs/common");
+const nestjs_oauth_1 = require("@nathapp/nestjs-oauth");
+let PrismaConsentLogoutTargetResolver = class PrismaConsentLogoutTargetResolver {
+    constructor(consentRepo) {
+        this.consentRepo = consentRepo;
+    }
+    async resolve(input) {
+        var _a;
+        const tenantId = (_a = input.tenantId) !== null && _a !== void 0 ? _a : null;
+        const publicIds = await this.consentRepo.findActiveClientPublicIds(input.userId, tenantId);
+        const seen = new Set();
+        const deduped = [];
+        for (const clientId of publicIds) {
+            if (seen.has(clientId))
+                continue;
+            seen.add(clientId);
+            deduped.push({ clientId });
+        }
+        return deduped;
+    }
+};
+exports.PrismaConsentLogoutTargetResolver = PrismaConsentLogoutTargetResolver;
+exports.PrismaConsentLogoutTargetResolver = PrismaConsentLogoutTargetResolver = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, common_1.Inject)(nestjs_oauth_1.OAUTH_CONSENT_REPOSITORY)),
+    __metadata("design:paramtypes", [Object])
+], PrismaConsentLogoutTargetResolver);
+//# sourceMappingURL=prisma-consent-logout-target.resolver.js.map

package/dist/prisma-consent-logout-target.resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prisma-consent-logout-target.resolver.js","sourceRoot":"","sources":["../lib/prisma-consent-logout-target.resolver.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAAoD;AACpD,wDAI+B;AAGxB,IAAM,iCAAiC,GAAvC,MAAM,iCAAiC;IAC5C,YAEqB,WAAoC;QAApC,gBAAW,GAAX,WAAW,CAAyB;IACtD,CAAC;IAEJ,KAAK,CAAC,OAAO,CAAC,KAIb;;QACC,MAAM,QAAQ,GAAG,MAAA,KAAK,CAAC,QAAQ,mCAAI,IAAI,CAAC;QACxC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,yBAAyB,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC3F,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,MAAM,OAAO,GAAgC,EAAE,CAAC;QAChD,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjC,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAAE,SAAS;YACjC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACnB,OAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC7B,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;CACF,CAAA;AAtBY,8EAAiC;4CAAjC,iCAAiC;IAD7C,IAAA,mBAAU,GAAE;IAGR,WAAA,IAAA,eAAM,EAAC,uCAAwB,CAAC,CAAA;;GAFxB,iCAAiC,CAsB7C"}

package/dist/prisma-oauth-access-token.repository.d.ts

@@ -0,0 +1,41 @@
+import { AbstractPrismaRepository, type PrismaClientLike } from '@nathapp/nestjs-prisma';
+import { ITransactionManager } from '@nathapp/nestjs-data';
+import { type IOAuthAccessTokenRepository, type IOAuthAccessToken } from '@nathapp/nestjs-oauth';
+import { type OAuthAccessTokenRow, type OAuthPrismaDelegate } from './oauth-prisma.types';
+export declare class PrismaOAuthAccessTokenRepository extends AbstractPrismaRepository<IOAuthAccessToken, OAuthAccessTokenRow, string> implements IOAuthAccessTokenRepository {
+    constructor(tx: ITransactionManager);
+    protected modelDelegate(client: PrismaClientLike): OAuthPrismaDelegate<OAuthAccessTokenRow>;
+    private get oauthModel();
+    protected toDomain(e: OAuthAccessTokenRow): IOAuthAccessToken;
+    protected toPersistenceCreate(d: IOAuthAccessToken): {
+        id: string;
+        tenantId: string | null;
+        tokenHash: string;
+        clientId: string;
+        userId: string | null;
+        refreshTokenId: string | null;
+        tokenType: string;
+        expiresAt: Date;
+        cnfJkt: string | null;
+        cnfX5tS256: string | null;
+        resource: string | null;
+        actorClientId: string | null;
+        scopes: {
+            create: {
+                scope: {
+                    connect: {
+                        code: string;
+                    };
+                };
+            }[];
+        };
+    };
+    protected toPersistenceUpdate(p: Partial<IOAuthAccessToken>): Record<string, unknown>;
+    create(d: IOAuthAccessToken): Promise<IOAuthAccessToken>;
+    findById(id: string): Promise<IOAuthAccessToken | null>;
+    findByTokenHash(tokenHash: string): Promise<IOAuthAccessToken | null>;
+    revoke(id: string, revokedAt: Date): Promise<void>;
+    revokeIfActive(id: string, revokedAt: Date): Promise<boolean>;
+    revokeByRefreshTokenId(refreshTokenId: string, revokedAt: Date): Promise<void>;
+    deleteExpired(now: Date): Promise<number>;
+}

package/dist/prisma-oauth-access-token.repository.js

@@ -0,0 +1,124 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PrismaOAuthAccessTokenRepository = void 0;
+const common_1 = require("@nestjs/common");
+const nestjs_prisma_1 = require("@nathapp/nestjs-prisma");
+const nestjs_data_1 = require("@nathapp/nestjs-data");
+const oauth_prisma_types_1 = require("./oauth-prisma.types");
+let PrismaOAuthAccessTokenRepository = class PrismaOAuthAccessTokenRepository extends nestjs_prisma_1.AbstractPrismaRepository {
+    constructor(tx) { super(tx); }
+    modelDelegate(client) {
+        return (0, oauth_prisma_types_1.getOAuthPrismaDelegate)(client, 'oAuthAccessToken');
+    }
+    get oauthModel() {
+        return this.modelDelegate(this.tx.getClient());
+    }
+    toDomain(e) {
+        var _a, _b, _c, _d, _e, _f, _g;
+        return {
+            id: e.id,
+            tenantId: (_a = e.tenantId) !== null && _a !== void 0 ? _a : undefined,
+            tokenHash: e.tokenHash,
+            clientId: e.clientId,
+            userId: (_b = e.userId) !== null && _b !== void 0 ? _b : undefined,
+            refreshTokenId: (_c = e.refreshTokenId) !== null && _c !== void 0 ? _c : undefined,
+            scopes: ((_d = e.scopes) !== null && _d !== void 0 ? _d : []).map((scope) => scope.scope.code),
+            tokenType: e.tokenType,
+            expiresAt: e.expiresAt,
+            revokedAt: (_e = e.revokedAt) !== null && _e !== void 0 ? _e : undefined,
+            cnf: e.cnfJkt || e.cnfX5tS256 ? {
+                ...(e.cnfJkt ? { jkt: e.cnfJkt } : {}),
+                ...(e.cnfX5tS256 ? { 'x5t#S256': e.cnfX5tS256 } : {}),
+            } : undefined,
+            resource: (_f = e.resource) !== null && _f !== void 0 ? _f : undefined,
+            actorClientId: (_g = e.actorClientId) !== null && _g !== void 0 ? _g : undefined,
+            createdAt: e.createdAt,
+        };
+    }
+    toPersistenceCreate(d) {
+        var _a, _b, _c, _d, _e, _f, _g, _h, _j;
+        return {
+            id: d.id,
+            tenantId: (_a = d.tenantId) !== null && _a !== void 0 ? _a : null,
+            tokenHash: d.tokenHash,
+            clientId: d.clientId,
+            userId: (_b = d.userId) !== null && _b !== void 0 ? _b : null,
+            refreshTokenId: (_c = d.refreshTokenId) !== null && _c !== void 0 ? _c : null,
+            tokenType: d.tokenType,
+            expiresAt: d.expiresAt,
+            cnfJkt: (_e = (_d = d.cnf) === null || _d === void 0 ? void 0 : _d.jkt) !== null && _e !== void 0 ? _e : null,
+            cnfX5tS256: (_g = (_f = d.cnf) === null || _f === void 0 ? void 0 : _f['x5t#S256']) !== null && _g !== void 0 ? _g : null,
+            resource: (_h = d.resource) !== null && _h !== void 0 ? _h : null,
+            actorClientId: (_j = d.actorClientId) !== null && _j !== void 0 ? _j : null,
+            scopes: {
+                create: d.scopes.map((code) => ({ scope: { connect: { code } } })),
+            },
+        };
+    }
+    toPersistenceUpdate(p) {
+        const out = {};
+        if (p.revokedAt !== undefined)
+            out.revokedAt = p.revokedAt;
+        return out;
+    }
+    async create(d) {
+        const e = await this.oauthModel.create({
+            data: this.toPersistenceCreate(d),
+            include: { scopes: { include: { scope: true } } },
+        });
+        return this.toDomain(e);
+    }
+    async findById(id) {
+        const e = await this.oauthModel.findUnique({
+            where: { id },
+            include: { scopes: { include: { scope: true } } },
+        });
+        return e ? this.toDomain(e) : null;
+    }
+    async findByTokenHash(tokenHash) {
+        const e = await this.oauthModel.findUnique({
+            where: { tokenHash },
+            include: { scopes: { include: { scope: true } } },
+        });
+        return e ? this.toDomain(e) : null;
+    }
+    async revoke(id, revokedAt) {
+        await this.model.update({ where: { id }, data: { revokedAt } });
+    }
+    async revokeIfActive(id, revokedAt) {
+        const res = await this.oauthModel.updateMany({
+            where: { id, revokedAt: null },
+            data: { revokedAt },
+        });
+        return res.count === 1;
+    }
+    async revokeByRefreshTokenId(refreshTokenId, revokedAt) {
+        await this.oauthModel.updateMany({
+            where: { refreshTokenId, revokedAt: null },
+            data: { revokedAt },
+        });
+    }
+    async deleteExpired(now) {
+        const res = await this.oauthModel.deleteMany({ where: { expiresAt: { lt: now } } });
+        return res.count;
+    }
+};
+exports.PrismaOAuthAccessTokenRepository = PrismaOAuthAccessTokenRepository;
+exports.PrismaOAuthAccessTokenRepository = PrismaOAuthAccessTokenRepository = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, common_1.Inject)(nestjs_data_1.TRANSACTION_MANAGER)),
+    __metadata("design:paramtypes", [Object])
+], PrismaOAuthAccessTokenRepository);
+//# sourceMappingURL=prisma-oauth-access-token.repository.js.map

package/dist/prisma-oauth-access-token.repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prisma-oauth-access-token.repository.js","sourceRoot":"","sources":["../lib/prisma-oauth-access-token.repository.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAAoD;AACpD,0DAAyF;AACzF,sDAAgF;AAKhF,6DAAkH;AAG3G,IAAM,gCAAgC,GAAtC,MAAM,gCACX,SAAQ,wCAAwE;IAGhF,YAAyC,EAAuB,IAAI,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAEtE,aAAa,CAAC,MAAwB;QAC9C,OAAO,IAAA,2CAAsB,EAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;IAC5D,CAAC;IAED,IAAY,UAAU;QACpB,OAAO,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,EAAoB,CAAC,CAAC;IACnE,CAAC;IAES,QAAQ,CAAC,CAAsB;;QACvC,OAAO;YACL,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,QAAQ,EAAE,MAAA,CAAC,CAAC,QAAQ,mCAAI,SAAS;YACjC,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,MAAM,EAAE,MAAA,CAAC,CAAC,MAAM,mCAAI,SAAS;YAC7B,cAAc,EAAE,MAAA,CAAC,CAAC,cAAc,mCAAI,SAAS;YAC7C,MAAM,EAAE,CAAC,MAAA,CAAC,CAAC,MAAM,mCAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC;YACzD,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,SAAS,EAAE,MAAA,CAAC,CAAC,SAAS,mCAAI,SAAS;YACnC,GAAG,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;gBAC9B,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACtD,CAAC,CAAC,CAAC,SAAS;YACb,QAAQ,EAAE,MAAA,CAAC,CAAC,QAAQ,mCAAI,SAAS;YACjC,aAAa,EAAE,MAAA,CAAC,CAAC,aAAa,mCAAI,SAAS;YAC3C,SAAS,EAAE,CAAC,CAAC,SAAS;SACvB,CAAC;IACJ,CAAC;IAES,mBAAmB,CAAC,CAAoB;;QAChD,OAAO;YACL,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,QAAQ,EAAE,MAAA,CAAC,CAAC,QAAQ,mCAAI,IAAI;YAC5B,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,MAAM,EAAE,MAAA,CAAC,CAAC,MAAM,mCAAI,IAAI;YACxB,cAAc,EAAE,MAAA,CAAC,CAAC,cAAc,mCAAI,IAAI;YACxC,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,MAAM,EAAE,MAAA,MAAA,CAAC,CAAC,GAAG,0CAAE,GAAG,mCAAI,IAAI;YAC1B,UAAU,EAAE,MAAA,MAAA,CAAC,CAAC,GAAG,0CAAG,UAAU,CAAC,mCAAI,IAAI;YACvC,QAAQ,EAAE,MAAA,CAAC,CAAC,QAAQ,mCAAI,IAAI;YAC5B,aAAa,EAAE,MAAA,CAAC,CAAC,aAAa,mCAAI,IAAI;YACtC,MAAM,EAAE;gBACN,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;aACnE;SACF,CAAC;IACJ,CAAC;IAES,mBAAmB,CAAC,CAA6B;QACzD,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS;YAAE,GAAG,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC;QAC3D,OAAO,GAAG,CAAC;IACb,CAAC;IAEQ,KAAK,CAAC,MAAM,CAAC,CAAoB;QACxC,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;YACrC,IAAI,EAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC;YACjC,OAAO,EAAE,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE;SAClD,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,EAAU;QACvB,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;YACzC,KAAK,EAAE,EAAE,EAAE,EAAE;YACb,OAAO,EAAE,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE;SAClD,CAAC,CAAC;QACH,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,SAAiB;QACrC,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;YACzC,KAAK,EAAE,EAAE,SAAS,EAAE;YACpB,OAAO,EAAE,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE;SAClD,CAAC,CAAC;QACH,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAU,EAAE,SAAe;QACtC,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;IAClE,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,EAAU,EAAE,SAAe;QAC9C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;YAC3C,KAAK,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE;YAC9B,IAAI,EAAE,EAAE,SAAS,EAAE;SACpB,CAAC,CAAC;QACH,OAAO,GAAG,CAAC,KAAK,KAAK,CAAC,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,sBAAsB,CAAC,cAAsB,EAAE,SAAe;QAClE,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;YAC/B,KAAK,EAAE,EAAE,cAAc,EAAE,SAAS,EAAE,IAAI,EAAE;YAC1C,IAAI,EAAE,EAAE,SAAS,EAAE;SACpB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,GAAS;QAC3B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;QACpF,OAAO,GAAG,CAAC,KAAK,CAAC;IACnB,CAAC;CACF,CAAA;AA7GY,4EAAgC;2CAAhC,gCAAgC;IAD5C,IAAA,mBAAU,GAAE;IAKE,WAAA,IAAA,eAAM,EAAC,iCAAmB,CAAC,CAAA;;GAJ7B,gCAAgC,CA6G5C"}

package/dist/prisma-oauth-authorization-code.repository.d.ts

@@ -0,0 +1,41 @@
+import { AbstractPrismaRepository, type PrismaClientLike } from '@nathapp/nestjs-prisma';
+import { ITransactionManager } from '@nathapp/nestjs-data';
+import { type IOAuthAuthorizationCodeRepository, type IOAuthAuthorizationCode, type CodeChallengeMethod } from '@nathapp/nestjs-oauth';
+import { type OAuthAuthorizationCodeRow, type OAuthPrismaDelegate } from './oauth-prisma.types';
+export declare class PrismaOAuthAuthorizationCodeRepository extends AbstractPrismaRepository<IOAuthAuthorizationCode, OAuthAuthorizationCodeRow, string> implements IOAuthAuthorizationCodeRepository {
+    constructor(tx: ITransactionManager);
+    protected modelDelegate(client: PrismaClientLike): OAuthPrismaDelegate<OAuthAuthorizationCodeRow>;
+    private get oauthModel();
+    protected toDomain(e: OAuthAuthorizationCodeRow): IOAuthAuthorizationCode;
+    protected toPersistenceCreate(d: IOAuthAuthorizationCode): {
+        id: string;
+        tenantId: string | null;
+        code: string;
+        clientId: string;
+        userId: string;
+        codeChallenge: string | null;
+        codeChallengeMethod: CodeChallengeMethod | null;
+        redirectUri: string;
+        state: string | null;
+        nonce: string | null;
+        authTime: Date | null;
+        sid: string | null;
+        resource: string | null;
+        expiresAt: Date;
+        scopes: {
+            create: {
+                scope: {
+                    connect: {
+                        code: string;
+                    };
+                };
+            }[];
+        };
+    };
+    protected toPersistenceUpdate(p: Partial<IOAuthAuthorizationCode>): Record<string, unknown>;
+    create(d: IOAuthAuthorizationCode): Promise<IOAuthAuthorizationCode>;
+    findById(id: string): Promise<IOAuthAuthorizationCode | null>;
+    findByCode(code: string): Promise<IOAuthAuthorizationCode | null>;
+    consume(id: string, usedAt: Date): Promise<boolean>;
+    deleteExpired(now: Date): Promise<number>;
+}

package/dist/prisma-oauth-authorization-code.repository.js

@@ -0,0 +1,118 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PrismaOAuthAuthorizationCodeRepository = void 0;
+const common_1 = require("@nestjs/common");
+const nestjs_prisma_1 = require("@nathapp/nestjs-prisma");
+const nestjs_data_1 = require("@nathapp/nestjs-data");
+const oauth_prisma_types_1 = require("./oauth-prisma.types");
+let PrismaOAuthAuthorizationCodeRepository = class PrismaOAuthAuthorizationCodeRepository extends nestjs_prisma_1.AbstractPrismaRepository {
+    constructor(tx) { super(tx); }
+    modelDelegate(client) {
+        return (0, oauth_prisma_types_1.getOAuthPrismaDelegate)(client, 'oAuthAuthorizationCode');
+    }
+    get oauthModel() {
+        return this.modelDelegate(this.tx.getClient());
+    }
+    toDomain(e) {
+        var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k;
+        const domain = {
+            id: e.id,
+            tenantId: (_a = e.tenantId) !== null && _a !== void 0 ? _a : undefined,
+            code: e.code,
+            clientId: e.clientId,
+            userId: e.userId,
+            scopes: ((_b = e.scopes) !== null && _b !== void 0 ? _b : []).map((scope) => scope.scope.code),
+            codeChallenge: (_c = e.codeChallenge) !== null && _c !== void 0 ? _c : undefined,
+            codeChallengeMethod: ((_d = e.codeChallengeMethod) !== null && _d !== void 0 ? _d : undefined),
+            redirectUri: e.redirectUri,
+            state: (_e = e.state) !== null && _e !== void 0 ? _e : undefined,
+            nonce: (_f = e.nonce) !== null && _f !== void 0 ? _f : undefined,
+            expiresAt: e.expiresAt,
+            usedAt: (_g = e.usedAt) !== null && _g !== void 0 ? _g : undefined,
+            authTime: (_h = e.authTime) !== null && _h !== void 0 ? _h : undefined,
+            sid: (_j = e.sid) !== null && _j !== void 0 ? _j : undefined,
+            resource: (_k = e.resource) !== null && _k !== void 0 ? _k : undefined,
+            createdAt: e.createdAt,
+        };
+        return domain;
+    }
+    toPersistenceCreate(d) {
+        var _a, _b, _c, _d, _e, _f, _g, _h;
+        return {
+            id: d.id,
+            tenantId: (_a = d.tenantId) !== null && _a !== void 0 ? _a : null,
+            code: d.code,
+            clientId: d.clientId,
+            userId: d.userId,
+            codeChallenge: (_b = d.codeChallenge) !== null && _b !== void 0 ? _b : null,
+            codeChallengeMethod: (_c = d.codeChallengeMethod) !== null && _c !== void 0 ? _c : null,
+            redirectUri: d.redirectUri,
+            state: (_d = d.state) !== null && _d !== void 0 ? _d : null,
+            nonce: (_e = d.nonce) !== null && _e !== void 0 ? _e : null,
+            authTime: (_f = d.authTime) !== null && _f !== void 0 ? _f : null,
+            sid: (_g = d.sid) !== null && _g !== void 0 ? _g : null,
+            resource: (_h = d.resource) !== null && _h !== void 0 ? _h : null,
+            expiresAt: d.expiresAt,
+            scopes: {
+                create: d.scopes.map((code) => ({ scope: { connect: { code } } })),
+            },
+        };
+    }
+    toPersistenceUpdate(p) {
+        const out = {};
+        if (p.usedAt !== undefined)
+            out.usedAt = p.usedAt;
+        return out;
+    }
+    async create(d) {
+        const e = await this.oauthModel.create({
+            data: this.toPersistenceCreate(d),
+            include: { scopes: { include: { scope: true } } },
+        });
+        return this.toDomain(e);
+    }
+    async findById(id) {
+        const e = await this.oauthModel.findUnique({
+            where: { id },
+            include: { scopes: { include: { scope: true } } },
+        });
+        return e ? this.toDomain(e) : null;
+    }
+    async findByCode(code) {
+        const e = await this.oauthModel.findUnique({
+            where: { code },
+            include: { scopes: { include: { scope: true } } },
+        });
+        return e ? this.toDomain(e) : null;
+    }
+    async consume(id, usedAt) {
+        const res = await this.oauthModel.updateMany({
+            where: { id, usedAt: null },
+            data: { usedAt },
+        });
+        return res.count === 1;
+    }
+    async deleteExpired(now) {
+        const res = await this.oauthModel.deleteMany({ where: { expiresAt: { lt: now } } });
+        return res.count;
+    }
+};
+exports.PrismaOAuthAuthorizationCodeRepository = PrismaOAuthAuthorizationCodeRepository;
+exports.PrismaOAuthAuthorizationCodeRepository = PrismaOAuthAuthorizationCodeRepository = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, common_1.Inject)(nestjs_data_1.TRANSACTION_MANAGER)),
+    __metadata("design:paramtypes", [Object])
+], PrismaOAuthAuthorizationCodeRepository);
+//# sourceMappingURL=prisma-oauth-authorization-code.repository.js.map

package/dist/prisma-oauth-authorization-code.repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prisma-oauth-authorization-code.repository.js","sourceRoot":"","sources":["../lib/prisma-oauth-authorization-code.repository.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAAoD;AACpD,0DAAyF;AACzF,sDAAgF;AAMhF,6DAAwH;AAGjH,IAAM,sCAAsC,GAA5C,MAAM,sCACX,SAAQ,wCAAoF;IAG5F,YAAyC,EAAuB,IAAI,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAEtE,aAAa,CAAC,MAAwB;QAC9C,OAAO,IAAA,2CAAsB,EAAC,MAAM,EAAE,wBAAwB,CAAC,CAAC;IAClE,CAAC;IAED,IAAY,UAAU;QACpB,OAAO,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,EAAoB,CAAC,CAAC;IACnE,CAAC;IAES,QAAQ,CAAC,CAA4B;;QAC7C,MAAM,MAAM,GAAG;YACb,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,QAAQ,EAAE,MAAA,CAAC,CAAC,QAAQ,mCAAI,SAAS;YACjC,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,MAAM,EAAE,CAAC,MAAA,CAAC,CAAC,MAAM,mCAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC;YACzD,aAAa,EAAE,MAAA,CAAC,CAAC,aAAa,mCAAI,SAAS;YAC3C,mBAAmB,EAAE,CAAC,MAAA,CAAC,CAAC,mBAAmB,mCAAI,SAAS,CAAoC;YAC5F,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,KAAK,EAAE,MAAA,CAAC,CAAC,KAAK,mCAAI,SAAS;YAC3B,KAAK,EAAE,MAAA,CAAC,CAAC,KAAK,mCAAI,SAAS;YAC3B,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,MAAM,EAAE,MAAA,CAAC,CAAC,MAAM,mCAAI,SAAS;YAC7B,QAAQ,EAAE,MAAA,CAAC,CAAC,QAAQ,mCAAI,SAAS;YACjC,GAAG,EAAE,MAAA,CAAC,CAAC,GAAG,mCAAI,SAAS;YACvB,QAAQ,EAAE,MAAA,CAAC,CAAC,QAAQ,mCAAI,SAAS;YACjC,SAAS,EAAE,CAAC,CAAC,SAAS;SACvB,CAAC;QACF,OAAO,MAAM,CAAC;IAChB,CAAC;IAES,mBAAmB,CAAC,CAA0B;;QACtD,OAAO;YACL,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,QAAQ,EAAE,MAAA,CAAC,CAAC,QAAQ,mCAAI,IAAI;YAC5B,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,aAAa,EAAE,MAAA,CAAC,CAAC,aAAa,mCAAI,IAAI;YACtC,mBAAmB,EAAE,MAAA,CAAC,CAAC,mBAAmB,mCAAI,IAAI;YAClD,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,KAAK,EAAE,MAAA,CAAC,CAAC,KAAK,mCAAI,IAAI;YACtB,KAAK,EAAE,MAAA,CAAC,CAAC,KAAK,mCAAI,IAAI;YACtB,QAAQ,EAAE,MAAA,CAAC,CAAC,QAAQ,mCAAI,IAAI;YAC5B,GAAG,EAAE,MAAA,CAAC,CAAC,GAAG,mCAAI,IAAI;YAClB,QAAQ,EAAE,MAAA,CAAC,CAAC,QAAQ,mCAAI,IAAI;YAC5B,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,MAAM,EAAE;gBACN,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;aACnE;SACF,CAAC;IACJ,CAAC;IAES,mBAAmB,CAAC,CAAmC;QAC/D,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS;YAAE,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;QAClD,OAAO,GAAG,CAAC;IACb,CAAC;IAEQ,KAAK,CAAC,MAAM,CAAC,CAA0B;QAC9C,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;YACrC,IAAI,EAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC;YACjC,OAAO,EAAE,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE;SAClD,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,EAAU;QACvB,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;YACzC,KAAK,EAAE,EAAE,EAAE,EAAE;YACb,OAAO,EAAE,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE;SAClD,CAAC,CAAC;QACH,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,IAAY;QAC3B,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;YACzC,KAAK,EAAE,EAAE,IAAI,EAAE;YACf,OAAO,EAAE,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE;SAClD,CAAC,CAAC;QACH,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,EAAU,EAAE,MAAY;QACpC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;YAC3C,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;YAC3B,IAAI,EAAE,EAAE,MAAM,EAAE;SACjB,CAAC,CAAC;QACH,OAAO,GAAG,CAAC,KAAK,KAAK,CAAC,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,GAAS;QAC3B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;QACpF,OAAO,GAAG,CAAC,KAAK,CAAC;IACnB,CAAC;CACF,CAAA;AArGY,wFAAsC;iDAAtC,sCAAsC;IADlD,IAAA,mBAAU,GAAE;IAKE,WAAA,IAAA,eAAM,EAAC,iCAAmB,CAAC,CAAA;;GAJ7B,sCAAsC,CAqGlD"}

package/dist/prisma-oauth-client.repository.d.ts

@@ -0,0 +1,50 @@
+import { AbstractPrismaRepository, type PrismaClientLike } from '@nathapp/nestjs-prisma';
+import { ITransactionManager } from '@nathapp/nestjs-data';
+import type { IPageResult } from '@nathapp/nestjs-data';
+import { type IOAuthClientRepository, type IOAuthClient, type OAuthClientType, type PkceRequirement, OAuthClientStatus, ListClientsQuery } from '@nathapp/nestjs-oauth';
+import { type OAuthClientRow, type OAuthPrismaDelegate } from './oauth-prisma.types';
+export declare class PrismaOAuthClientRepository extends AbstractPrismaRepository<IOAuthClient, OAuthClientRow, string> implements IOAuthClientRepository {
+    constructor(tx: ITransactionManager);
+    protected modelDelegate(client: PrismaClientLike): OAuthPrismaDelegate<OAuthClientRow>;
+    private get oauthModel();
+    protected toDomain(e: OAuthClientRow): IOAuthClient;
+    protected toPersistenceCreate(d: IOAuthClient): {
+        id: string;
+        tenantId: string | null;
+        clientId: string;
+        clientSecretHash: string | null;
+        name: string;
+        description: string | null;
+        clientType: OAuthClientType;
+        redirectUris: string[];
+        postLogoutRedirectUris: string[];
+        grantTypes: string[];
+        responseTypes: string[];
+        accessTokenTtl: number;
+        refreshTokenTtl: number;
+        authCodeTtl: number;
+        pkceRequired: PkceRequirement;
+        requireConsent: boolean;
+        dpopBoundAccessTokens: boolean;
+        backchannelLogoutUri: string | null;
+        backchannelLogoutSessionRequired: boolean | null;
+        frontchannelLogoutUri: string | null;
+        frontchannelLogoutSessionRequired: boolean | null;
+        tokenEndpointAuthMethod: string | null;
+        jwks: Record<string, unknown> | null;
+        jwksUri: string | null;
+        tlsClientAuthSubjectDn: string | null;
+        tlsClientAuthSanDns: string[] | null;
+        tlsClientAuthSelfSignedThumbprint: string | null;
+        clientSecretHashPrevious: string | null;
+        previousSecretExpiresAt: Date | null;
+        allowedResources: string[];
+        requireResource: boolean;
+        status: OAuthClientStatus;
+    };
+    protected toPersistenceUpdate(p: Partial<IOAuthClient>): Record<string, unknown>;
+    update(idOrClientId: string, patch: Partial<IOAuthClient>): Promise<IOAuthClient>;
+    findByClientId(clientId: string): Promise<IOAuthClient | null>;
+    findByClientIds(clientIds: string[]): Promise<IOAuthClient[]>;
+    findPage(query: ListClientsQuery): Promise<IPageResult<IOAuthClient>>;
+}