@nebius/js-sdk 0.1.0

package/dist/cjs/runtime/token/exchangeable.js

@@ -0,0 +1,151 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ExchangeableBearer = exports.UnsupportedTokenTypeError = exports.UnsupportedResponseError = void 0;
+const util_1 = require("util");
+const grpc_js_1 = require("@grpc/grpc-js");
+const index_1 = require("../../api/nebius/iam/v1/index");
+const token_1 = require("../token");
+const token_sanitizer_1 = require("../token_sanitizer");
+const logging_1 = require("../util/logging");
+class UnsupportedResponseError extends Error {
+    constructor(expected, got) {
+        super(`Unsupported response received: expected ${expected}, received ${typeof got}`);
+        this.name = 'UnsupportedResponseError';
+    }
+}
+exports.UnsupportedResponseError = UnsupportedResponseError;
+class UnsupportedTokenTypeError extends Error {
+    constructor(tokenType) {
+        super(`Unsupported token received: expected Bearer, received ${tokenType}`);
+        this.name = 'UnsupportedTokenTypeError';
+    }
+}
+exports.UnsupportedTokenTypeError = UnsupportedTokenTypeError;
+class ExchangeableReceiver extends token_1.Receiver {
+    requester;
+    svcOrPromise;
+    defaultMaxRetries;
+    logger;
+    $type = 'nebius.sdk.ExchangeableReceiver';
+    trial = 0;
+    constructor(requester, svcOrPromise, defaultMaxRetries = 2, logger) {
+        super();
+        this.requester = requester;
+        this.svcOrPromise = svcOrPromise;
+        this.defaultMaxRetries = defaultMaxRetries;
+        this.logger = logger;
+        this.logger =
+            this.logger?.withFields({ trial: this.trial, defaultMaxRetries: this.defaultMaxRetries }) ??
+                undefined;
+    }
+    [logging_1.custom]() {
+        return `${this.$type}(requester=${(0, util_1.inspect)(this.requester)}, trial=${this.trial})`;
+    }
+    [logging_1.customJson]() {
+        return {
+            type: this.$type,
+            trial: this.trial,
+            requester: (0, logging_1.inspectJson)(this.requester),
+            defaultMaxRetries: this.defaultMaxRetries,
+        };
+    }
+    async getSvc() {
+        return await this.svcOrPromise;
+    }
+    async _fetch(timeoutMs, _options) {
+        this.trial += 1;
+        const req = this.requester.getExchangeTokenRequest();
+        const now = Date.now();
+        this.logger = this.logger?.withFields({ trial: this.trial, start: now }) ?? undefined;
+        const md = new grpc_js_1.Metadata();
+        // Disable SDK-side authorization for this call
+        const options = {
+            authorizationDisable: true,
+        };
+        if (typeof timeoutMs === 'number' && Number.isFinite(timeoutMs)) {
+            this.logger = this.logger?.withFields({ timeoutMs }) ?? undefined;
+            this.logger?.trace('setting deadline for exchange call');
+            options.deadline = new Date(now + Math.max(0, timeoutMs));
+        }
+        this.logger?.trace('fetching service client');
+        const svc = await this.getSvc();
+        this.logger?.trace('making exchange call');
+        const res = await svc.exchange(req, md, options).result;
+        if (!res || typeof res !== 'object') {
+            throw new UnsupportedResponseError('CreateTokenResponse', res);
+        }
+        if (res.tokenType !== 'Bearer') {
+            throw new UnsupportedTokenTypeError(res.tokenType ?? String(res.tokenType));
+        }
+        const expSec = typeof res.expiresIn === 'object' &&
+            res.expiresIn !== null &&
+            typeof res.expiresIn.toString === 'function'
+            ? Number(res.expiresIn.toString())
+            : Number(res.expiresIn ?? 0);
+        this.logger?.debug('token fetched', {
+            expires_in: res.expiresIn,
+            expiresInSec: expSec,
+            access_token: token_sanitizer_1.TokenSanitizer.accessTokenSanitizer().sanitize(res.accessToken),
+        });
+        const expiration = isFinite(expSec) && expSec > 0 ? new Date(now + expSec * 1000) : undefined;
+        return new token_1.Token(res.accessToken, expiration);
+    }
+    canRetry(_err, options) {
+        this.logger?.trace('canRetry check', { options });
+        const maxRetries = options?.maxRetries ?? this.defaultMaxRetries;
+        if (this.trial >= maxRetries) {
+            this.logger?.debug('canRetry -> false (max retries reached)', { maxRetries });
+            return false;
+        }
+        this.logger?.debug('canRetry -> true', { trial: this.trial, maxRetries });
+        return true;
+    }
+}
+class ExchangeableBearer extends token_1.Bearer {
+    requester;
+    maxRetries;
+    logger;
+    $type = 'nebius.sdk.ExchangeableBearer';
+    svc = null;
+    constructor(requester, sdk, maxRetries = 2, logger) {
+        super();
+        this.requester = requester;
+        this.maxRetries = maxRetries;
+        this.logger = logger;
+        this.setSDK(sdk);
+    }
+    [logging_1.custom]() {
+        return `${this.$type}(requester=${(0, util_1.inspect)(this.requester)})`;
+    }
+    [logging_1.customJson]() {
+        return {
+            type: this.$type,
+            requester: (0, logging_1.inspectJson)(this.requester),
+            maxRetries: this.maxRetries,
+        };
+    }
+    setSDK(sdk) {
+        if (!sdk) {
+            this.svc = null;
+            return;
+        }
+        if (typeof sdk === 'object' &&
+            sdk !== null &&
+            'then' in sdk &&
+            typeof sdk.then === 'function') {
+            this.logger?.debug('SDK is a promise, waiting for it to resolve');
+            this.svc = (async () => new index_1.TokenExchangeService(await sdk))();
+        }
+        else {
+            this.logger?.debug('SDK is provided directly');
+            this.svc = new index_1.TokenExchangeService(sdk);
+        }
+    }
+    receiver() {
+        if (!this.svc)
+            throw new Error('SDK is not set for the bearer.');
+        return new ExchangeableReceiver(this.requester, this.svc, this.maxRetries, this.logger);
+    }
+}
+exports.ExchangeableBearer = ExchangeableBearer;
+//# sourceMappingURL=exchangeable.js.map

package/dist/cjs/runtime/token/exchangeable.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"exchangeable.js","sourceRoot":"","sources":["../../../../src/runtime/token/exchangeable.ts"],"names":[],"mappings":";;;AAAA,+BAA+B;AAG/B,2CAAyD;AAEzD,yDAGuC;AAGvC,oCAAmD;AACnD,wDAAoD;AACpD,6CAA0E;AAE1E,MAAa,wBAAyB,SAAQ,KAAK;IACjD,YAAY,QAAgB,EAAE,GAAY;QACxC,KAAK,CAAC,2CAA2C,QAAQ,cAAc,OAAO,GAAG,EAAE,CAAC,CAAC;QACrF,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;IACzC,CAAC;CACF;AALD,4DAKC;AAED,MAAa,yBAA0B,SAAQ,KAAK;IAClD,YAAY,SAAiB;QAC3B,KAAK,CAAC,yDAAyD,SAAS,EAAE,CAAC,CAAC;QAC5E,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;IAC1C,CAAC;CACF;AALD,8DAKC;AAED,MAAM,oBAAqB,SAAQ,gBAAQ;IAI/B;IACA;IACA;IACA;IANM,KAAK,GAAG,iCAAiC,CAAC;IAClD,KAAK,GAAG,CAAC,CAAC;IAClB,YACU,SAAyB,EACzB,YAAgD,EAChD,oBAA4B,CAAC,EAC7B,MAAe;QAEvB,KAAK,EAAE,CAAC;QALA,cAAS,GAAT,SAAS,CAAgB;QACzB,iBAAY,GAAZ,YAAY,CAAoC;QAChD,sBAAiB,GAAjB,iBAAiB,CAAY;QAC7B,WAAM,GAAN,MAAM,CAAS;QAGvB,IAAI,CAAC,MAAM;YACT,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,EAAE,CAAC;gBACzF,SAAS,CAAC;IACd,CAAC;IAED,CAAC,gBAAM,CAAC;QACN,OAAO,GAAG,IAAI,CAAC,KAAK,cAAc,IAAA,cAAO,EAAC,IAAI,CAAC,SAAS,CAAC,WAAW,IAAI,CAAC,KAAK,GAAG,CAAC;IACpF,CAAC;IACD,CAAC,oBAAU,CAAC;QACV,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,KAAK;YAChB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,SAAS,EAAE,IAAA,qBAAW,EAAC,IAAI,CAAC,SAAS,CAAC;YACtC,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;SAC1C,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,MAAM;QAClB,OAAO,MAAM,IAAI,CAAC,YAAY,CAAC;IACjC,CAAC;IAES,KAAK,CAAC,MAAM,CACpB,SAAkB,EAClB,QAA2C;QAE3C,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;QAChB,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,uBAAuB,EAAE,CAAC;QACrD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,SAAS,CAAC;QAEtF,MAAM,EAAE,GAAa,IAAI,kBAAY,EAAE,CAAC;QAExC,+CAA+C;QAC/C,MAAM,OAAO,GAA6D;YACxE,oBAAoB,EAAE,IAAI;SAC3B,CAAC;QAEF,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YAChE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,SAAS,EAAE,CAAC,IAAI,SAAS,CAAC;YAClE,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,oCAAoC,CAAC,CAAC;YACzD,OAAO,CAAC,QAAQ,GAAG,IAAI,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;QAC5D,CAAC;QAED,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,yBAAyB,CAAC,CAAC;QAC9C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;QAChC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC3C,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC;QAExD,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YACpC,MAAM,IAAI,wBAAwB,CAAC,qBAAqB,EAAE,GAAG,CAAC,CAAC;QACjE,CAAC;QAED,IAAI,GAAG,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;YAC/B,MAAM,IAAI,yBAAyB,CAAC,GAAG,CAAC,SAAS,IAAI,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;QAC9E,CAAC;QAED,MAAM,MAAM,GACV,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ;YACjC,GAAG,CAAC,SAAS,KAAK,IAAI;YACtB,OAAO,GAAG,CAAC,SAAS,CAAC,QAAQ,KAAK,UAAU;YAC1C,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC;YAClC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC;QAEjC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,eAAe,EAAE;YAClC,UAAU,EAAE,GAAG,CAAC,SAAS;YACzB,YAAY,EAAE,MAAM;YACpB,YAAY,EAAE,gCAAc,CAAC,oBAAoB,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC;SAC9E,CAAC,CAAC;QAEH,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,GAAG,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9F,OAAO,IAAI,aAAK,CAAC,GAAG,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;IAChD,CAAC;IAED,QAAQ,CAAC,IAAa,EAAE,OAA0C;QAChE,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,gBAAgB,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QAClD,MAAM,UAAU,GAAG,OAAO,EAAE,UAAU,IAAI,IAAI,CAAC,iBAAiB,CAAC;QACjE,IAAI,IAAI,CAAC,KAAK,IAAI,UAAU,EAAE,CAAC;YAC7B,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,yCAAyC,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;YAC9E,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,kBAAkB,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;QAC1E,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAED,MAAa,kBAAmB,SAAQ,cAAM;IAKzB;IAEA;IACA;IAPH,KAAK,GAAG,+BAA+B,CAAC;IAChD,GAAG,GAA8C,IAAI,CAAC;IAE9D,YACmB,SAAyB,EAC1C,GAAgD,EAC/B,aAAqB,CAAC,EACtB,MAAe;QAEhC,KAAK,EAAE,CAAC;QALS,cAAS,GAAT,SAAS,CAAgB;QAEzB,eAAU,GAAV,UAAU,CAAY;QACtB,WAAM,GAAN,MAAM,CAAS;QAGhC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACnB,CAAC;IAED,CAAC,gBAAM,CAAC;QACN,OAAO,GAAG,IAAI,CAAC,KAAK,cAAc,IAAA,cAAO,EAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC;IAC/D,CAAC;IACD,CAAC,oBAAU,CAAC;QACV,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,KAAK;YAChB,SAAS,EAAE,IAAA,qBAAW,EAAC,IAAI,CAAC,SAAS,CAAC;YACtC,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,GAAgD;QACrD,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC;YAChB,OAAO;QACT,CAAC;QACD,IACE,OAAO,GAAG,KAAK,QAAQ;YACvB,GAAG,KAAK,IAAI;YACZ,MAAM,IAAI,GAAG;YACb,OAAQ,GAA6B,CAAC,IAAI,KAAK,UAAU,EACzD,CAAC;YACD,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,6CAA6C,CAAC,CAAC;YAClE,IAAI,CAAC,GAAG,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,4BAAW,CAAC,MAAO,GAA6B,CAAC,CAAC,EAAE,CAAC;QACnF,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,0BAA0B,CAAC,CAAC;YAC/C,IAAI,CAAC,GAAG,GAAG,IAAI,4BAAW,CAAC,GAAmB,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IAED,QAAQ;QACN,IAAI,CAAC,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACjE,OAAO,IAAI,oBAAoB,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAC1F,CAAC;CACF;AAhDD,gDAgDC"}

package/dist/cjs/runtime/token/federated_credentials.d.ts

@@ -0,0 +1,27 @@
+import type { SDKInterface } from '../../sdk';
+import type { FederatedCredentialsReader } from '../service_account/federated_credentials';
+import { FederatedCredentialsTokenRequester } from '../service_account/federated_credentials';
+import { Bearer, Receiver } from '../token';
+import { custom, customJson, Logger } from '../util/logging';
+export declare class FederatedCredentialsBearer extends Bearer {
+    [custom]: () => string;
+    readonly $type = "nebius.sdk.FederatedCredentialsBearer";
+    private _exchangeable;
+    private _source;
+    constructor(federatedCredentials: FederatedCredentialsTokenRequester | FederatedCredentialsReader | string, opts?: {
+        sdk?: SDKInterface | Promise<SDKInterface> | null;
+        maxRetries?: number;
+        lifetimeSafeFraction?: number;
+        initialRetryTimeoutMs?: number;
+        maxRetryTimeoutMs?: number;
+        retryTimeoutExponent?: number;
+        refreshRequestTimeoutMs?: number;
+        serviceAccountId?: string | null;
+        logger?: Logger;
+    });
+    [customJson](): unknown;
+    setSDK(sdk: SDKInterface | Promise<SDKInterface> | null): void;
+    get wrapped(): Bearer | undefined;
+    receiver(): Receiver;
+}
+//# sourceMappingURL=federated_credentials.d.ts.map

package/dist/cjs/runtime/token/federated_credentials.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"federated_credentials.d.ts","sourceRoot":"","sources":["../../../../src/runtime/token/federated_credentials.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,0CAA0C,CAAC;AAC3F,OAAO,EACL,kCAAkC,EAEnC,MAAM,0CAA0C,CAAC;AAClD,OAAO,EAAE,MAAM,EAAe,QAAQ,EAAE,MAAM,UAAU,CAAC;AACzD,OAAO,EAAE,MAAM,EAAE,UAAU,EAAe,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAK1E,qBAAa,0BAA2B,SAAQ,MAAM;IAwFpD,CAAC,MAAM,CAAC,QAAI,MAAM;IAvFlB,SAAgB,KAAK,2CAA2C;IAChE,OAAO,CAAC,aAAa,CAAqB;IAC1C,OAAO,CAAC,OAAO,CAAS;gBAGtB,oBAAoB,EAAE,kCAAkC,GAAG,0BAA0B,GAAG,MAAM,EAC9F,IAAI,CAAC,EAAE;QACL,GAAG,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC;QAClD,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,oBAAoB,CAAC,EAAE,MAAM,CAAC;QAC9B,qBAAqB,CAAC,EAAE,MAAM,CAAC;QAC/B,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B,oBAAoB,CAAC,EAAE,MAAM,CAAC;QAC9B,uBAAuB,CAAC,EAAE,MAAM,CAAC;QACjC,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACjC,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB;IA0EH,CAAC,UAAU,CAAC,IAAI,OAAO;IAOvB,MAAM,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC,GAAG,IAAI,GAAG,IAAI;IAI9D,IAAI,OAAO,IAAI,MAAM,GAAG,SAAS,CAEhC;IAED,QAAQ,IAAI,QAAQ;CAGrB"}

package/dist/cjs/runtime/token/federated_credentials.js

@@ -0,0 +1,76 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FederatedCredentialsBearer = void 0;
+const util_1 = require("util");
+const federated_credentials_1 = require("../service_account/federated_credentials");
+const token_1 = require("../token");
+const logging_1 = require("../util/logging");
+const exchangeable_1 = require("./exchangeable");
+const renewable_1 = require("./renewable");
+class FederatedCredentialsBearer extends token_1.Bearer {
+    $type = 'nebius.sdk.FederatedCredentialsBearer';
+    _exchangeable;
+    _source;
+    constructor(federatedCredentials, opts) {
+        super();
+        let fc = null;
+        if (typeof federatedCredentials === 'string') {
+            opts?.logger?.debug('creating FileFederatedCredentials from string');
+            federatedCredentials = new federated_credentials_1.FileFederatedCredentials(federatedCredentials);
+        }
+        if (typeof federatedCredentials?.credentials === 'function') {
+            if (typeof opts?.serviceAccountId !== 'string') {
+                throw new TypeError('Service account ID must be provided as a string when federatedCredentials is a reader');
+            }
+            opts?.logger?.debug('creating FederatedCredentialsTokenRequester from reader');
+            fc = new federated_credentials_1.FederatedCredentialsTokenRequester(opts.serviceAccountId, federatedCredentials, opts?.logger?.child('federated_credentials_requester'));
+        }
+        if (!fc && federatedCredentials instanceof federated_credentials_1.FederatedCredentialsTokenRequester) {
+            opts?.logger?.debug('using passed FederatedCredentialsTokenRequester');
+            fc = federatedCredentials;
+        }
+        if (!fc) {
+            throw new TypeError(`federatedCredentials must be FederatedCredentialsTokenRequester, FederatedCredentialsReader or string, got ${typeof federatedCredentials}`);
+        }
+        const maxRetries = opts?.maxRetries ?? 2;
+        this._exchangeable = new exchangeable_1.ExchangeableBearer(fc, opts?.sdk ?? null, maxRetries, opts?.logger?.child('exchangeable'));
+        const renewable = new renewable_1.RenewableBearer(this._exchangeable, {
+            maxRetries,
+            lifetimeSafeFraction: opts?.lifetimeSafeFraction,
+            initialRetryTimeoutMs: opts?.initialRetryTimeoutMs,
+            maxRetryTimeoutMs: opts?.maxRetryTimeoutMs,
+            retryTimeoutExponent: opts?.retryTimeoutExponent,
+            refreshRequestTimeoutMs: opts?.refreshRequestTimeoutMs,
+            logger: opts?.logger?.child('renewable'),
+        });
+        this._source = renewable;
+        if (fc instanceof federated_credentials_1.FederatedCredentialsTokenRequester &&
+            fc.credentials instanceof federated_credentials_1.FileFederatedCredentials) {
+            opts?.logger?.debug('wrapping with NamedBearer as the credentials are file-based', {
+                filePath: fc.credentials.filePath,
+                serviceAccountId: fc.serviceAccountId,
+            });
+            this._source = new token_1.NamedBearer(this._source, `federated-credentials/${fc.serviceAccountId}/${fc.credentials.filePath}`);
+        }
+    }
+    [logging_1.custom]() {
+        return `FederatedCredentialsBearer(source=${(0, util_1.inspect)(this._source)})`;
+    }
+    [logging_1.customJson]() {
+        return {
+            type: 'FederatedCredentialsBearer',
+            source: (0, logging_1.inspectJson)(this._source),
+        };
+    }
+    setSDK(sdk) {
+        this._exchangeable.setSDK(sdk);
+    }
+    get wrapped() {
+        return this._source;
+    }
+    receiver() {
+        return this._source.receiver();
+    }
+}
+exports.FederatedCredentialsBearer = FederatedCredentialsBearer;
+//# sourceMappingURL=federated_credentials.js.map

package/dist/cjs/runtime/token/federated_credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"federated_credentials.js","sourceRoot":"","sources":["../../../../src/runtime/token/federated_credentials.ts"],"names":[],"mappings":";;;AAAA,+BAA+B;AAI/B,oFAGkD;AAClD,oCAAyD;AACzD,6CAA0E;AAE1E,iDAAoD;AACpD,2CAA8C;AAE9C,MAAa,0BAA2B,SAAQ,cAAM;IACpC,KAAK,GAAG,uCAAuC,CAAC;IACxD,aAAa,CAAqB;IAClC,OAAO,CAAS;IAExB,YACE,oBAA8F,EAC9F,IAUC;QAED,KAAK,EAAE,CAAC;QAER,IAAI,EAAE,GAA8C,IAAI,CAAC;QAEzD,IAAI,OAAO,oBAAoB,KAAK,QAAQ,EAAE,CAAC;YAC7C,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,+CAA+C,CAAC,CAAC;YACrE,oBAAoB,GAAG,IAAI,gDAAwB,CAAC,oBAAoB,CAAC,CAAC;QAC5E,CAAC;QAED,IAAI,OAAQ,oBAAmD,EAAE,WAAW,KAAK,UAAU,EAAE,CAAC;YAC5F,IAAI,OAAO,IAAI,EAAE,gBAAgB,KAAK,QAAQ,EAAE,CAAC;gBAC/C,MAAM,IAAI,SAAS,CACjB,uFAAuF,CACxF,CAAC;YACJ,CAAC;YACD,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,yDAAyD,CAAC,CAAC;YAC/E,EAAE,GAAG,IAAI,0DAAkC,CACzC,IAAI,CAAC,gBAAgB,EACrB,oBAAkD,EAClD,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,iCAAiC,CAAC,CACvD,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,EAAE,IAAI,oBAAoB,YAAY,0DAAkC,EAAE,CAAC;YAC9E,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,iDAAiD,CAAC,CAAC;YACvE,EAAE,GAAG,oBAA0D,CAAC;QAClE,CAAC;QAED,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,MAAM,IAAI,SAAS,CACjB,8GAA8G,OAAO,oBAAoB,EAAE,CAC5I,CAAC;QACJ,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,EAAE,UAAU,IAAI,CAAC,CAAC;QAEzC,IAAI,CAAC,aAAa,GAAG,IAAI,iCAAkB,CACzC,EAAE,EACF,IAAI,EAAE,GAAG,IAAI,IAAI,EACjB,UAAU,EACV,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,cAAc,CAAC,CACpC,CAAC;QAEF,MAAM,SAAS,GAAG,IAAI,2BAAe,CAAC,IAAI,CAAC,aAAa,EAAE;YACxD,UAAU;YACV,oBAAoB,EAAE,IAAI,EAAE,oBAAoB;YAChD,qBAAqB,EAAE,IAAI,EAAE,qBAAqB;YAClD,iBAAiB,EAAE,IAAI,EAAE,iBAAiB;YAC1C,oBAAoB,EAAE,IAAI,EAAE,oBAAoB;YAChD,uBAAuB,EAAE,IAAI,EAAE,uBAAuB;YACtD,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,WAAW,CAAC;SACzC,CAAC,CAAC;QAEH,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC;QAEzB,IACE,EAAE,YAAY,0DAAkC;YAChD,EAAE,CAAC,WAAW,YAAY,gDAAwB,EAClD,CAAC;YACD,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,6DAA6D,EAAE;gBACjF,QAAQ,EAAE,EAAE,CAAC,WAAW,CAAC,QAAQ;gBACjC,gBAAgB,EAAE,EAAE,CAAC,gBAAgB;aACtC,CAAC,CAAC;YACH,IAAI,CAAC,OAAO,GAAG,IAAI,mBAAW,CAC5B,IAAI,CAAC,OAAO,EACZ,yBAAyB,EAAE,CAAC,gBAAgB,IAAI,EAAE,CAAC,WAAW,CAAC,QAAQ,EAAE,CAC1E,CAAC;QACJ,CAAC;IACH,CAAC;IACD,CAAC,gBAAM,CAAC;QACN,OAAO,qCAAqC,IAAA,cAAO,EAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC;IACvE,CAAC;IACD,CAAC,oBAAU,CAAC;QACV,OAAO;YACL,IAAI,EAAE,4BAA4B;YAClC,MAAM,EAAE,IAAA,qBAAW,EAAC,IAAI,CAAC,OAAO,CAAC;SAClC,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,GAAgD;QACrD,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACjC,CAAC;IAED,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,QAAQ;QACN,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;IACjC,CAAC;CACF;AA7GD,gEA6GC"}

package/dist/cjs/runtime/token/federation_account.d.ts

@@ -0,0 +1,27 @@
+import { Bearer, Receiver } from '../token';
+import { custom, customJson, Logger } from '../util/logging';
+export declare class FederationAccountBearer extends Bearer {
+    [custom]: () => string;
+    readonly $type = "nebius.sdk.FederationAccountBearer";
+    private _source;
+    constructor(profileName: string, clientId: string, federationEndpoint: string, federationId: string, opts?: {
+        writer?: (s: string) => void;
+        logger?: Logger;
+        noBrowserOpen?: boolean;
+        timeoutMs?: number;
+        maxRetries?: number;
+        initialSafetyMarginMs?: number | null;
+        retrySafetyMarginMs?: number;
+        lifetimeSafeFraction?: number;
+        initialRetryTimeoutMs?: number;
+        maxRetryTimeoutMs?: number;
+        retryTimeoutExponent?: number;
+        fileCacheThrottleMs?: number;
+        cacheFilePath?: string;
+        ca?: Buffer | string | string[];
+    });
+    [customJson](): unknown;
+    get wrapped(): Bearer | undefined;
+    receiver(): Receiver;
+}
+//# sourceMappingURL=federation_account.d.ts.map

package/dist/cjs/runtime/token/federation_account.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"federation_account.d.ts","sourceRoot":"","sources":["../../../../src/runtime/token/federation_account.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAC5C,OAAO,EAAE,MAAM,EAAE,UAAU,EAAe,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAK1E,qBAAa,uBAAwB,SAAQ,MAAM;IAuDjD,CAAC,MAAM,CAAC,QAAI,MAAM;IAtDlB,SAAgB,KAAK,wCAAwC;IAC7D,OAAO,CAAC,OAAO,CAAuB;gBAGpC,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,EAChB,kBAAkB,EAAE,MAAM,EAC1B,YAAY,EAAE,MAAM,EACpB,IAAI,CAAC,EAAE;QACL,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;QAC7B,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,aAAa,CAAC,EAAE,OAAO,CAAC;QACxB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,qBAAqB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACtC,mBAAmB,CAAC,EAAE,MAAM,CAAC;QAC7B,oBAAoB,CAAC,EAAE,MAAM,CAAC;QAC9B,qBAAqB,CAAC,EAAE,MAAM,CAAC;QAC/B,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B,oBAAoB,CAAC,EAAE,MAAM,CAAC;QAC9B,mBAAmB,CAAC,EAAE,MAAM,CAAC;QAC7B,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,EAAE,CAAC;KACjC;IAkCH,CAAC,UAAU,CAAC,IAAI,OAAO;IAOvB,IAAI,OAAO,IAAI,MAAM,GAAG,SAAS,CAEhC;IAED,QAAQ,IAAI,QAAQ;CAGrB"}

package/dist/cjs/runtime/token/federation_account.js

@@ -0,0 +1,47 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FederationAccountBearer = void 0;
+const util_1 = require("util");
+const token_1 = require("../token");
+const logging_1 = require("../util/logging");
+const index_1 = require("./federation_bearer/index");
+const async_renewable_bearer_1 = require("./file_cache/async_renewable_bearer");
+class FederationAccountBearer extends token_1.Bearer {
+    $type = 'nebius.sdk.FederationAccountBearer';
+    _source;
+    constructor(profileName, clientId, federationEndpoint, federationId, opts) {
+        super();
+        const auth = new index_1.FederationBearer(profileName, clientId, federationEndpoint, federationId, opts?.writer, opts?.noBrowserOpen ?? false, opts?.ca instanceof Buffer ? opts.ca : undefined, opts?.logger?.child('federation_auth'));
+        const renewable = new async_renewable_bearer_1.AsyncRenewableBearer(auth, {
+            maxRetries: opts?.maxRetries ?? 2,
+            initialSafetyMarginMs: opts?.initialSafetyMarginMs ?? 2 * 60 * 60 * 1000,
+            retrySafetyMarginMs: opts?.retrySafetyMarginMs ?? 2 * 60 * 60 * 1000,
+            lifetimeSafeFraction: opts?.lifetimeSafeFraction ?? 0.9,
+            initialRetryTimeoutMs: opts?.initialRetryTimeoutMs ?? 1_000,
+            maxRetryTimeoutMs: opts?.maxRetryTimeoutMs ?? 60_000,
+            retryTimeoutExponent: opts?.retryTimeoutExponent ?? 1.5,
+            refreshRequestTimeoutMs: opts?.timeoutMs ?? 5 * 60 * 1000,
+            fileCacheThrottleMs: opts?.fileCacheThrottleMs ?? 5 * 60 * 1000,
+            cacheFilePath: opts?.cacheFilePath,
+            logger: opts?.logger?.child('renewable'),
+        });
+        this._source = renewable;
+    }
+    [logging_1.custom]() {
+        return `FederationAccountBearer(source=${(0, util_1.inspect)(this._source)})`;
+    }
+    [logging_1.customJson]() {
+        return {
+            type: 'FederationAccountBearer',
+            source: (0, logging_1.inspectJson)(this._source),
+        };
+    }
+    get wrapped() {
+        return this._source;
+    }
+    receiver() {
+        return this._source.receiver();
+    }
+}
+exports.FederationAccountBearer = FederationAccountBearer;
+//# sourceMappingURL=federation_account.js.map

package/dist/cjs/runtime/token/federation_account.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"federation_account.js","sourceRoot":"","sources":["../../../../src/runtime/token/federation_account.ts"],"names":[],"mappings":";;;AAAA,+BAA+B;AAE/B,oCAA4C;AAC5C,6CAA0E;AAE1E,qDAAqF;AACrF,gFAA2E;AAE3E,MAAa,uBAAwB,SAAQ,cAAM;IACjC,KAAK,GAAG,oCAAoC,CAAC;IACrD,OAAO,CAAuB;IAEtC,YACE,WAAmB,EACnB,QAAgB,EAChB,kBAA0B,EAC1B,YAAoB,EACpB,IAeC;QAED,KAAK,EAAE,CAAC;QAER,MAAM,IAAI,GAAG,IAAI,wBAAoB,CACnC,WAAW,EACX,QAAQ,EACR,kBAAkB,EAClB,YAAY,EACZ,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,aAAa,IAAI,KAAK,EAC5B,IAAI,EAAE,EAAE,YAAY,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,EAChD,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,iBAAiB,CAAC,CACvC,CAAC;QAEF,MAAM,SAAS,GAAG,IAAI,6CAAoB,CAAC,IAAI,EAAE;YAC/C,UAAU,EAAE,IAAI,EAAE,UAAU,IAAI,CAAC;YACjC,qBAAqB,EAAE,IAAI,EAAE,qBAAqB,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;YACxE,mBAAmB,EAAE,IAAI,EAAE,mBAAmB,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;YACpE,oBAAoB,EAAE,IAAI,EAAE,oBAAoB,IAAI,GAAG;YACvD,qBAAqB,EAAE,IAAI,EAAE,qBAAqB,IAAI,KAAK;YAC3D,iBAAiB,EAAE,IAAI,EAAE,iBAAiB,IAAI,MAAM;YACpD,oBAAoB,EAAE,IAAI,EAAE,oBAAoB,IAAI,GAAG;YACvD,uBAAuB,EAAE,IAAI,EAAE,SAAS,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI;YACzD,mBAAmB,EAAE,IAAI,EAAE,mBAAmB,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI;YAC/D,aAAa,EAAE,IAAI,EAAE,aAAa;YAClC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,WAAW,CAAC;SACzC,CAAC,CAAC;QAEH,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC;IAC3B,CAAC;IACD,CAAC,gBAAM,CAAC;QACN,OAAO,kCAAkC,IAAA,cAAO,EAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC;IACpE,CAAC;IACD,CAAC,oBAAU,CAAC;QACV,OAAO;YACL,IAAI,EAAE,yBAAyB;YAC/B,MAAM,EAAE,IAAA,qBAAW,EAAC,IAAI,CAAC,OAAO,CAAC;SAClC,CAAC;IACJ,CAAC;IAED,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,QAAQ;QACN,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;IACjC,CAAC;CACF;AAxED,0DAwEC"}

package/dist/cjs/runtime/token/federation_bearer/auth.d.ts

@@ -0,0 +1,42 @@
+import { Logger } from '../../util/logging';
+export interface GetTokenResult {
+    access_token: string;
+    token_type: string;
+    expires_in: number;
+    scope?: string;
+    refresh_token?: string;
+}
+export declare function getCode(params: {
+    clientId: string;
+    authEndpoint: string;
+    federationId: string;
+    writer?: (s: string) => void;
+    noBrowserOpen?: boolean;
+    timeoutMs?: number;
+    logger?: Logger;
+}): Promise<{
+    code: string;
+    state: string;
+    redirectUri: string;
+    verifier: string;
+}>;
+export declare function getToken(params: {
+    clientId: string;
+    tokenEndpoint: string;
+    code: string;
+    redirectUri: string;
+    verifier: string;
+    ca?: Buffer | string | string[];
+    logger?: Logger;
+}): Promise<GetTokenResult>;
+export declare function authorize(params: {
+    clientId: string;
+    federationEndpoint: string;
+    federationId: string;
+    writer?: (s: string) => void;
+    noBrowserOpen?: boolean;
+    timeoutMs?: number;
+    ca?: Buffer | string | string[];
+    logger?: Logger;
+}): Promise<GetTokenResult>;
+//# sourceMappingURL=auth.d.ts.map

package/dist/cjs/runtime/token/federation_bearer/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../../../src/runtime/token/federation_bearer/auth.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAO5C,MAAM,WAAW,cAAc;IAC7B,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AA+FD,wBAAsB,OAAO,CAAC,MAAM,EAAE;IACpC,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7B,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GAAG,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,CAqClF;AAED,wBAAsB,QAAQ,CAAC,MAAM,EAAE;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,EAAE,CAAC;IAChC,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GAAG,OAAO,CAAC,cAAc,CAAC,CAwC1B;AAED,wBAAsB,SAAS,CAAC,MAAM,EAAE;IACtC,QAAQ,EAAE,MAAM,CAAC;IACjB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7B,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,EAAE,CAAC;IAChC,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GAAG,OAAO,CAAC,cAAc,CAAC,CAoC1B"}

package/dist/cjs/runtime/token/federation_bearer/auth.js

@@ -0,0 +1,197 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getCode = getCode;
+exports.getToken = getToken;
+exports.authorize = authorize;
+const child_process_1 = require("child_process");
+const http_1 = require("http");
+const https_1 = require("https");
+const url_1 = require("url");
+const constants_1 = require("./constants");
+const is_wsl_1 = require("./is_wsl");
+const pkce_1 = require("./pkce");
+const server_1 = require("./server");
+function httpsUrl(raw) {
+    if (raw.startsWith('http://') || raw.startsWith('https://'))
+        return raw;
+    return `https://${raw.replace(/^\/+/, '')}`;
+}
+async function openBrowser(url, logger) {
+    const platform = process.platform;
+    if (platform === 'linux') {
+        if ((0, is_wsl_1.isWsl)()) {
+            logger?.trace('detected WSL, using powershell.exe to open browser');
+            (0, child_process_1.spawn)('powershell.exe', ['-NoProfile', '-NonInteractive', 'Start', url], {
+                detached: true,
+                stdio: 'ignore',
+            }).unref();
+            return;
+        }
+        // Probe common browser open providers and pick the first available one.
+        const providers = ['xdg-open', 'x-www-browser', 'www-browser'];
+        for (const provider of providers) {
+            logger?.trace('probing linux browser provider', { provider });
+            try {
+                const res = (0, child_process_1.spawnSync)('which', [provider], { stdio: 'ignore' });
+                logger?.trace('which returned', { provider, status: res.status });
+                if (res.status === 0) {
+                    logger?.trace('using linux browser provider', { provider });
+                    (0, child_process_1.spawn)(provider, [url], { detached: true, stdio: 'ignore' }).unref();
+                    return;
+                }
+            }
+            catch (err) {
+                logger?.debug('failed to probe linux browser provider, will try next', { err, provider });
+            }
+        }
+        // If none found, log and try xdg-open to produce a predictable failure mode.
+        logger?.debug('browser provider not found, choosing xdg-open to fail');
+        (0, child_process_1.spawn)('xdg-open', [url], { detached: true, stdio: 'ignore' }).unref();
+        return;
+    }
+    if (platform === 'darwin') {
+        logger?.trace('detected darwin, using open to open browser');
+        (0, child_process_1.spawn)('open', [url], { detached: true, stdio: 'ignore' }).unref();
+    }
+    else if (platform === 'win32') {
+        logger?.trace('detected win32, using start to open browser');
+        (0, child_process_1.spawn)('cmd', ['/c', 'start', '', url], { detached: true, stdio: 'ignore' }).unref();
+    }
+    else {
+        logger?.trace('unknown platform, using xdg-open to open browser', { platform });
+        (0, child_process_1.spawn)('xdg-open', [url], { detached: true, stdio: 'ignore' }).unref();
+    }
+}
+function doHttpRequest(urlStr, method, headers, body, tls) {
+    return new Promise((resolve, reject) => {
+        const u = new url_1.URL(urlStr);
+        const isHttps = u.protocol === 'https:';
+        const opts = {
+            protocol: u.protocol,
+            hostname: u.hostname,
+            port: u.port || (isHttps ? 443 : 80),
+            path: u.pathname + (u.search || ''),
+            method,
+            headers,
+            // Pass CA bundle when using https
+            ...(isHttps && tls?.ca ? { ca: tls.ca } : {}),
+        };
+        const req = (isHttps ? https_1.request : http_1.request)(opts, (res) => {
+            const chunks = [];
+            res.on('data', (c) => chunks.push(c));
+            res.on('end', () => {
+                const text = Buffer.concat(chunks).toString('utf8');
+                let data;
+                try {
+                    data = JSON.parse(text);
+                }
+                catch {
+                    data = text;
+                }
+                resolve({ status: res.statusCode || 0, data });
+            });
+        });
+        req.on('error', reject);
+        if (body)
+            req.write(body);
+        req.end();
+    });
+}
+async function getCode(params) {
+    const { clientId, authEndpoint, federationId, writer, noBrowserOpen, timeoutMs, logger } = params;
+    const pkce = new pkce_1.PKCE();
+    const cb = new server_1.CallbackHandler(logger?.child('callback'));
+    await cb.listenAndServe();
+    const redirectUri = cb.addr; // e.g. http://127.0.0.1:port
+    logger?.debug(`Callback handler listening`, {
+        redirectUri,
+    });
+    const base = new url_1.URL(constants_1.AUTH_ENDPOINT, httpsUrl(authEndpoint));
+    base.searchParams.set('response_type', 'code');
+    base.searchParams.set('client_id', clientId);
+    base.searchParams.set('scope', 'openid');
+    base.searchParams.set('redirect_uri', redirectUri);
+    base.searchParams.set('code_challenge', pkce.challenge);
+    base.searchParams.set('code_challenge_method', pkce.method);
+    base.searchParams.set('state', cb.state);
+    if (federationId && federationId.length > 0) {
+        base.searchParams.set('federation-id', federationId);
+    }
+    const url = base.toString();
+    const write = writer ?? ((s) => console.log(s));
+    write(`Open this URL to continue authentication: ${url}\n`);
+    logger?.info('open browser', { url, noBrowserOpen });
+    if (!noBrowserOpen)
+        await openBrowser(url, logger);
+    logger?.trace('waiting for authorization code');
+    const code = await cb.waitForCode(timeoutMs);
+    logger?.trace('authorization code received, shutting down callback server', {
+        code: code ? code.slice(0, 3) + '...' : null,
+    });
+    await cb.shutdown();
+    if (!code)
+        throw new Error('Timeout waiting for authorization code');
+    return { code, state: cb.state, redirectUri, verifier: pkce.verifier };
+}
+async function getToken(params) {
+    const { clientId, tokenEndpoint, code, redirectUri, verifier, ca, logger } = params;
+    const url = new url_1.URL(constants_1.TOKEN_ENDPOINT, httpsUrl(tokenEndpoint)).toString();
+    logger?.trace('exchanging code for token', {
+        url,
+        redirectUri,
+        verifier: verifier.slice(0, 3) + '...',
+        code: code.slice(0, 3) + '...',
+    });
+    const body = new URLSearchParams({
+        grant_type: 'authorization_code',
+        client_id: String(clientId),
+        code: String(code),
+        redirect_uri: String(redirectUri),
+        code_verifier: String(verifier),
+    }).toString();
+    const res = await doHttpRequest(url, 'POST', {
+        'content-type': 'application/x-www-form-urlencoded',
+        accept: 'application/json',
+    }, body, { ca });
+    if (res.status < 200 || res.status >= 300) {
+        throw new Error(`token endpoint error: status=${res.status}, body=${typeof res.data === 'string' ? res.data : JSON.stringify(res.data)}`);
+    }
+    const data = res.data;
+    logger?.trace('token endpoint response', {
+        access_token: data.access_token.slice(0, 3) + '...',
+        token_type: data.token_type,
+        scope: data.scope,
+        refresh_token: data.refresh_token ? data.refresh_token.slice(0, 3) + '...' : undefined,
+        expires_in: data.expires_in,
+    });
+    return data;
+}
+async function authorize(params) {
+    const { clientId, federationEndpoint, federationId, writer, noBrowserOpen, timeoutMs, ca, logger, } = params;
+    logger?.trace('authorize: start');
+    const { code, redirectUri, verifier } = await getCode({
+        clientId,
+        authEndpoint: federationEndpoint,
+        federationId,
+        writer,
+        noBrowserOpen,
+        timeoutMs,
+        logger,
+    });
+    logger?.debug('auth code received', {
+        code: code.slice(0, 3) + '...',
+        redirectUri,
+        verifier: verifier.slice(0, 3) + '...',
+    });
+    const res = await getToken({
+        clientId,
+        tokenEndpoint: federationEndpoint,
+        code,
+        redirectUri,
+        verifier,
+        ca,
+        logger,
+    });
+    return res;
+}
+//# sourceMappingURL=auth.js.map

package/dist/cjs/runtime/token/federation_bearer/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../../../src/runtime/token/federation_bearer/auth.ts"],"names":[],"mappings":";;AAkHA,0BA6CC;AAED,4BAgDC;AAED,8BA6CC;AAhQD,iDAAiD;AAEjD,+BAA8C;AAC9C,iCAAgD;AAChD,6BAA0B;AAI1B,2CAA4D;AAC5D,qCAAiC;AACjC,iCAA8B;AAC9B,qCAA2C;AAU3C,SAAS,QAAQ,CAAC,GAAW;IAC3B,IAAI,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,GAAG,CAAC;IACxE,OAAO,WAAW,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC;AAC9C,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,GAAW,EAAE,MAAe;IACrD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IAClC,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,IAAI,IAAA,cAAK,GAAE,EAAE,CAAC;YACZ,MAAM,EAAE,KAAK,CAAC,oDAAoD,CAAC,CAAC;YACpE,IAAA,qBAAK,EAAC,gBAAgB,EAAE,CAAC,YAAY,EAAE,iBAAiB,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE;gBACvE,QAAQ,EAAE,IAAI;gBACd,KAAK,EAAE,QAAQ;aAChB,CAAC,CAAC,KAAK,EAAE,CAAC;YACX,OAAO;QACT,CAAC;QAED,wEAAwE;QACxE,MAAM,SAAS,GAAG,CAAC,UAAU,EAAE,eAAe,EAAE,aAAa,CAAC,CAAC;QAC/D,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjC,MAAM,EAAE,KAAK,CAAC,gCAAgC,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC9D,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,IAAA,yBAAS,EAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;gBAChE,MAAM,EAAE,KAAK,CAAC,gBAAgB,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;gBAClE,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACrB,MAAM,EAAE,KAAK,CAAC,8BAA8B,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;oBAC5D,IAAA,qBAAK,EAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;oBACpE,OAAO;gBACT,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,EAAE,KAAK,CAAC,uDAAuD,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC5F,CAAC;QACH,CAAC;QAED,6EAA6E;QAC7E,MAAM,EAAE,KAAK,CAAC,uDAAuD,CAAC,CAAC;QACvE,IAAA,qBAAK,EAAC,UAAU,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;QACtE,OAAO;IACT,CAAC;IAED,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,MAAM,EAAE,KAAK,CAAC,6CAA6C,CAAC,CAAC;QAC7D,IAAA,qBAAK,EAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;IACpE,CAAC;SAAM,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QAChC,MAAM,EAAE,KAAK,CAAC,6CAA6C,CAAC,CAAC;QAC7D,IAAA,qBAAK,EAAC,KAAK,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;IACtF,CAAC;SAAM,CAAC;QACN,MAAM,EAAE,KAAK,CAAC,kDAAkD,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;QAChF,IAAA,qBAAK,EAAC,UAAU,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;IACxE,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CACpB,MAAc,EACd,MAAc,EACd,OAA+B,EAC/B,IAAa,EACb,GAAyC;IAGzC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,CAAC,GAAG,IAAI,SAAG,CAAC,MAAM,CAAC,CAAC;QAC1B,MAAM,OAAO,GAAG,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC;QACxC,MAAM,IAAI,GAAG;YACX,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACpC,IAAI,EAAE,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC;YACnC,MAAM;YACN,OAAO;YACP,kCAAkC;YAClC,GAAG,CAAC,OAAO,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9C,CAAC;QACF,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,eAAY,CAAC,CAAC,CAAC,cAAW,CAAC,CAAC,IAAI,EAAE,CAAC,GAAoB,EAAE,EAAE;YAChF,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9C,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;gBACjB,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBACpD,IAAI,IAAI,CAAC;gBACT,IAAI,CAAC;oBACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC1B,CAAC;gBAAC,MAAM,CAAC;oBACP,IAAI,GAAG,IAAI,CAAC;gBACd,CAAC;gBACD,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,UAAU,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;YACjD,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACxB,IAAI,IAAI;YAAE,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC1B,GAAG,CAAC,GAAG,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;AACL,CAAC;AAEM,KAAK,UAAU,OAAO,CAAC,MAQ7B;IACC,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;IAClG,MAAM,IAAI,GAAG,IAAI,WAAI,EAAE,CAAC;IACxB,MAAM,EAAE,GAAG,IAAI,wBAAe,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;IAC1D,MAAM,EAAE,CAAC,cAAc,EAAE,CAAC;IAC1B,MAAM,WAAW,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,6BAA6B;IAE1D,MAAM,EAAE,KAAK,CAAC,4BAA4B,EAAE;QAC1C,WAAW;KACZ,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,IAAI,SAAG,CAAC,yBAAa,EAAE,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC;IAC5D,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;IAC/C,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IAC7C,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACzC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;IACnD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,gBAAgB,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IACxD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,uBAAuB,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAC5D,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC;IACzC,IAAI,YAAY,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5C,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC;IACvD,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;IAC5B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACxD,KAAK,CAAC,6CAA6C,GAAG,IAAI,CAAC,CAAC;IAC5D,MAAM,EAAE,IAAI,CAAC,cAAc,EAAE,EAAE,GAAG,EAAE,aAAa,EAAE,CAAC,CAAC;IACrD,IAAI,CAAC,aAAa;QAAE,MAAM,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAEnD,MAAM,EAAE,KAAK,CAAC,gCAAgC,CAAC,CAAC;IAChD,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;IAC7C,MAAM,EAAE,KAAK,CAAC,4DAA4D,EAAE;QAC1E,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI;KAC7C,CAAC,CAAC;IACH,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC;IACpB,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IACrE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;AACzE,CAAC;AAEM,KAAK,UAAU,QAAQ,CAAC,MAQ9B;IACC,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;IACpF,MAAM,GAAG,GAAG,IAAI,SAAG,CAAC,0BAAc,EAAE,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACxE,MAAM,EAAE,KAAK,CAAC,2BAA2B,EAAE;QACzC,GAAG;QACH,WAAW;QACX,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK;QACtC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK;KAC/B,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;QAC/B,UAAU,EAAE,oBAAoB;QAChC,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC;QAC3B,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC;QAClB,YAAY,EAAE,MAAM,CAAC,WAAW,CAAC;QACjC,aAAa,EAAE,MAAM,CAAC,QAAQ,CAAC;KAChC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACd,MAAM,GAAG,GAAG,MAAM,aAAa,CAC7B,GAAG,EACH,MAAM,EACN;QACE,cAAc,EAAE,mCAAmC;QACnD,MAAM,EAAE,kBAAkB;KAC3B,EACD,IAAI,EACJ,EAAE,EAAE,EAAE,CACP,CAAC;IACF,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CACb,gCAAgC,GAAG,CAAC,MAAM,UAAU,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CACzH,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,CAAC,IAAsB,CAAC;IACxC,MAAM,EAAE,KAAK,CAAC,yBAAyB,EAAE;QACvC,YAAY,EAAE,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK;QACnD,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,aAAa,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,SAAS;QACtF,UAAU,EAAE,IAAI,CAAC,UAAU;KAC5B,CAAC,CAAC;IACH,OAAO,IAAI,CAAC;AACd,CAAC;AAEM,KAAK,UAAU,SAAS,CAAC,MAS/B;IACC,MAAM,EACJ,QAAQ,EACR,kBAAkB,EAClB,YAAY,EACZ,MAAM,EACN,aAAa,EACb,SAAS,EACT,EAAE,EACF,MAAM,GACP,GAAG,MAAM,CAAC;IACX,MAAM,EAAE,KAAK,CAAC,kBAAkB,CAAC,CAAC;IAClC,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,GAAG,MAAM,OAAO,CAAC;QACpD,QAAQ;QACR,YAAY,EAAE,kBAAkB;QAChC,YAAY;QACZ,MAAM;QACN,aAAa;QACb,SAAS;QACT,MAAM;KACP,CAAC,CAAC;IACH,MAAM,EAAE,KAAK,CAAC,oBAAoB,EAAE;QAClC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK;QAC9B,WAAW;QACX,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK;KACvC,CAAC,CAAC;IACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC;QACzB,QAAQ;QACR,aAAa,EAAE,kBAAkB;QACjC,IAAI;QACJ,WAAW;QACX,QAAQ;QACR,EAAE;QACF,MAAM;KACP,CAAC,CAAC;IACH,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/cjs/runtime/token/federation_bearer/constants.d.ts

@@ -0,0 +1,3 @@
+export declare const AUTH_ENDPOINT = "/oauth2/authorize";
+export declare const TOKEN_ENDPOINT = "/oauth2/token";
+//# sourceMappingURL=constants.d.ts.map

package/dist/cjs/runtime/token/federation_bearer/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../../../src/runtime/token/federation_bearer/constants.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,aAAa,sBAAsB,CAAC;AACjD,eAAO,MAAM,cAAc,kBAAkB,CAAC"}

package/dist/cjs/runtime/token/federation_bearer/constants.js

@@ -0,0 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TOKEN_ENDPOINT = exports.AUTH_ENDPOINT = void 0;
+exports.AUTH_ENDPOINT = '/oauth2/authorize';
+exports.TOKEN_ENDPOINT = '/oauth2/token';
+//# sourceMappingURL=constants.js.map

package/dist/cjs/runtime/token/federation_bearer/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../../../src/runtime/token/federation_bearer/constants.ts"],"names":[],"mappings":";;;AAAa,QAAA,aAAa,GAAG,mBAAmB,CAAC;AACpC,QAAA,cAAc,GAAG,eAAe,CAAC"}