@nest-boot/auth 7.9.5 → 7.11.0

package/dist/utils/generic-oauth-provider-config.type.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"generic-oauth-provider-config.type.js","sourceRoot":"","sources":["../../src/utils/generic-oauth-provider-config.type.ts"],"names":[],"mappings":""}

package/dist/utils/has-oidc-env-config.d.ts

@@ -0,0 +1 @@
+export declare function hasOidcEnvConfig(): boolean;

package/dist/utils/has-oidc-env-config.js

@@ -0,0 +1,8 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.hasOidcEnvConfig = hasOidcEnvConfig;
+const oidc_constants_1 = require("./oidc.constants");
+function hasOidcEnvConfig() {
+    return oidc_constants_1.OIDC_ENV_NAMES.some((name) => process.env[name] !== undefined);
+}
+//# sourceMappingURL=has-oidc-env-config.js.map

package/dist/utils/has-oidc-env-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"has-oidc-env-config.js","sourceRoot":"","sources":["../../src/utils/has-oidc-env-config.ts"],"names":[],"mappings":";;AAEA,4CAEC;AAJD,qDAAkD;AAElD,SAAgB,gBAAgB;IAC9B,OAAO,+BAAc,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,SAAS,CAAC,CAAC;AACxE,CAAC"}

package/dist/utils/has-oidc-env-config.spec.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/utils/has-oidc-env-config.spec.js

@@ -0,0 +1,23 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const has_oidc_env_config_1 = require("./has-oidc-env-config");
+const oidc_constants_1 = require("./oidc.constants");
+describe("hasOidcEnvConfig", () => {
+    beforeEach(() => {
+        delete process.env.AUTH_OIDC_CLIENT_ID;
+        delete process.env.AUTH_OIDC_CLIENT_SECRET;
+        delete process.env.AUTH_OIDC_DISCOVERY_URL;
+        delete process.env.AUTH_OIDC_DISABLE_SIGNUP;
+        delete process.env.AUTH_OIDC_ENABLED;
+        delete process.env.AUTH_OIDC_PROMPT;
+        delete process.env.AUTH_OIDC_SCOPES;
+    });
+    it("should return false when OIDC env is not configured", () => {
+        expect((0, has_oidc_env_config_1.hasOidcEnvConfig)()).toBe(false);
+    });
+    it.each(oidc_constants_1.OIDC_ENV_NAMES)("should return true when %s is configured", (name) => {
+        process.env[name] = "";
+        expect((0, has_oidc_env_config_1.hasOidcEnvConfig)()).toBe(true);
+    });
+});
+//# sourceMappingURL=has-oidc-env-config.spec.js.map

package/dist/utils/has-oidc-env-config.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"has-oidc-env-config.spec.js","sourceRoot":"","sources":["../../src/utils/has-oidc-env-config.spec.ts"],"names":[],"mappings":";;AAAA,+DAAyD;AACzD,qDAAkD;AAElD,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,UAAU,CAAC,GAAG,EAAE;QACd,OAAO,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;QACvC,OAAO,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC;QAC3C,OAAO,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC;QAC3C,OAAO,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC;QAC5C,OAAO,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;QACrC,OAAO,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;QACpC,OAAO,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC7D,MAAM,CAAC,IAAA,sCAAgB,GAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC,+BAAc,CAAC,CACrB,0CAA0C,EAC1C,CAAC,IAAI,EAAE,EAAE;QACP,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QAEvB,MAAM,CAAC,IAAA,sCAAgB,GAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxC,CAAC,CACF,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/dist/utils/has-social-provider-credential-env-config.d.ts

@@ -0,0 +1,2 @@
+import { SocialProviderId } from "./social-provider.constants";
+export declare function hasSocialProviderCredentialEnvConfig(provider: SocialProviderId): boolean;

package/dist/utils/has-social-provider-credential-env-config.js

@@ -0,0 +1,10 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.hasSocialProviderCredentialEnvConfig = hasSocialProviderCredentialEnvConfig;
+const social_provider_constants_1 = require("./social-provider.constants");
+function hasSocialProviderCredentialEnvConfig(provider) {
+    const config = social_provider_constants_1.SOCIAL_PROVIDER_ENV_CONFIGS[provider];
+    return (process.env[config.clientId] !== undefined ||
+        process.env[config.clientSecret] !== undefined);
+}
+//# sourceMappingURL=has-social-provider-credential-env-config.js.map

package/dist/utils/has-social-provider-credential-env-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"has-social-provider-credential-env-config.js","sourceRoot":"","sources":["../../src/utils/has-social-provider-credential-env-config.ts"],"names":[],"mappings":";;AAKA,oFASC;AAdD,2EAGqC;AAErC,SAAgB,oCAAoC,CAClD,QAA0B;IAE1B,MAAM,MAAM,GAAG,uDAA2B,CAAC,QAAQ,CAAC,CAAC;IAErD,OAAO,CACL,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,SAAS;QAC1C,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,SAAS,CAC/C,CAAC;AACJ,CAAC"}

package/dist/utils/has-social-provider-credential-env-config.spec.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/utils/has-social-provider-credential-env-config.spec.js

@@ -0,0 +1,33 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const has_social_provider_credential_env_config_1 = require("./has-social-provider-credential-env-config");
+describe("hasSocialProviderCredentialEnvConfig", () => {
+    beforeEach(() => {
+        delete process.env.AUTH_GITHUB_CLIENT_ID;
+        delete process.env.AUTH_GITHUB_CLIENT_SECRET;
+        delete process.env.AUTH_GITHUB_DISABLE_SIGNUP;
+        delete process.env.AUTH_GITHUB_ENABLED;
+        delete process.env.AUTH_GOOGLE_CLIENT_ID;
+        delete process.env.AUTH_GOOGLE_CLIENT_SECRET;
+        delete process.env.AUTH_GOOGLE_DISABLE_SIGNUP;
+        delete process.env.AUTH_GOOGLE_ENABLED;
+    });
+    it("should return false when only disable signup env is configured", () => {
+        process.env.AUTH_GOOGLE_DISABLE_SIGNUP = "true";
+        expect((0, has_social_provider_credential_env_config_1.hasSocialProviderCredentialEnvConfig)("google")).toBe(false);
+    });
+    it("should return false when only enabled env is configured", () => {
+        process.env.AUTH_GOOGLE_ENABLED = "true";
+        expect((0, has_social_provider_credential_env_config_1.hasSocialProviderCredentialEnvConfig)("google")).toBe(false);
+    });
+    it.each([
+        ["github", "AUTH_GITHUB_CLIENT_ID"],
+        ["github", "AUTH_GITHUB_CLIENT_SECRET"],
+        ["google", "AUTH_GOOGLE_CLIENT_ID"],
+        ["google", "AUTH_GOOGLE_CLIENT_SECRET"],
+    ])("should return true when %s credential env %s is configured", (provider, name) => {
+        process.env[name] = "";
+        expect((0, has_social_provider_credential_env_config_1.hasSocialProviderCredentialEnvConfig)(provider)).toBe(true);
+    });
+});
+//# sourceMappingURL=has-social-provider-credential-env-config.spec.js.map

package/dist/utils/has-social-provider-credential-env-config.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"has-social-provider-credential-env-config.spec.js","sourceRoot":"","sources":["../../src/utils/has-social-provider-credential-env-config.spec.ts"],"names":[],"mappings":";;AAAA,2GAAmG;AAEnG,QAAQ,CAAC,sCAAsC,EAAE,GAAG,EAAE;IACpD,UAAU,CAAC,GAAG,EAAE;QACd,OAAO,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;QACzC,OAAO,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC;QAC7C,OAAO,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC;QAC9C,OAAO,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;QACvC,OAAO,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;QACzC,OAAO,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC;QAC7C,OAAO,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC;QAC9C,OAAO,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE,GAAG,EAAE;QACxE,OAAO,CAAC,GAAG,CAAC,0BAA0B,GAAG,MAAM,CAAC;QAEhD,MAAM,CAAC,IAAA,gFAAoC,EAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,OAAO,CAAC,GAAG,CAAC,mBAAmB,GAAG,MAAM,CAAC;QAEzC,MAAM,CAAC,IAAA,gFAAoC,EAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC;QACN,CAAC,QAAQ,EAAE,uBAAuB,CAAC;QACnC,CAAC,QAAQ,EAAE,2BAA2B,CAAC;QACvC,CAAC,QAAQ,EAAE,uBAAuB,CAAC;QACnC,CAAC,QAAQ,EAAE,2BAA2B,CAAC;KAC/B,CAAC,CACT,4DAA4D,EAC5D,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE;QACjB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QAEvB,MAAM,CAAC,IAAA,gFAAoC,EAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpE,CAAC,CACF,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/dist/utils/has-social-provider-env-config.d.ts

@@ -0,0 +1,2 @@
+import { SocialProviderId } from "./social-provider.constants";
+export declare function hasSocialProviderEnvConfig(provider: SocialProviderId): boolean;

package/dist/utils/has-social-provider-env-config.js

@@ -0,0 +1,8 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.hasSocialProviderEnvConfig = hasSocialProviderEnvConfig;
+const social_provider_constants_1 = require("./social-provider.constants");
+function hasSocialProviderEnvConfig(provider) {
+    return social_provider_constants_1.SOCIAL_PROVIDER_ENV_CONFIGS[provider].envNames.some((name) => process.env[name] !== undefined);
+}
+//# sourceMappingURL=has-social-provider-env-config.js.map

package/dist/utils/has-social-provider-env-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"has-social-provider-env-config.js","sourceRoot":"","sources":["../../src/utils/has-social-provider-env-config.ts"],"names":[],"mappings":";;AAKA,gEAMC;AAXD,2EAGqC;AAErC,SAAgB,0BAA0B,CACxC,QAA0B;IAE1B,OAAO,uDAA2B,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,IAAI,CACxD,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,SAAS,CAC1C,CAAC;AACJ,CAAC"}

package/dist/utils/has-social-provider-env-config.spec.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/utils/has-social-provider-env-config.spec.js

@@ -0,0 +1,34 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const has_social_provider_env_config_1 = require("./has-social-provider-env-config");
+const socialProviderIds = ["github", "google"];
+const socialProviderEnvCases = [
+    ["github", "AUTH_GITHUB_CLIENT_ID"],
+    ["github", "AUTH_GITHUB_CLIENT_SECRET"],
+    ["github", "AUTH_GITHUB_DISABLE_SIGNUP"],
+    ["github", "AUTH_GITHUB_ENABLED"],
+    ["google", "AUTH_GOOGLE_CLIENT_ID"],
+    ["google", "AUTH_GOOGLE_CLIENT_SECRET"],
+    ["google", "AUTH_GOOGLE_DISABLE_SIGNUP"],
+    ["google", "AUTH_GOOGLE_ENABLED"],
+];
+describe("hasSocialProviderEnvConfig", () => {
+    beforeEach(() => {
+        delete process.env.AUTH_GITHUB_CLIENT_ID;
+        delete process.env.AUTH_GITHUB_CLIENT_SECRET;
+        delete process.env.AUTH_GITHUB_DISABLE_SIGNUP;
+        delete process.env.AUTH_GITHUB_ENABLED;
+        delete process.env.AUTH_GOOGLE_CLIENT_ID;
+        delete process.env.AUTH_GOOGLE_CLIENT_SECRET;
+        delete process.env.AUTH_GOOGLE_DISABLE_SIGNUP;
+        delete process.env.AUTH_GOOGLE_ENABLED;
+    });
+    it.each(socialProviderIds)("should return false when %s env is not configured", (provider) => {
+        expect((0, has_social_provider_env_config_1.hasSocialProviderEnvConfig)(provider)).toBe(false);
+    });
+    it.each(socialProviderEnvCases)("should return true when %s env %s is configured", (provider, name) => {
+        process.env[name] = "";
+        expect((0, has_social_provider_env_config_1.hasSocialProviderEnvConfig)(provider)).toBe(true);
+    });
+});
+//# sourceMappingURL=has-social-provider-env-config.spec.js.map

package/dist/utils/has-social-provider-env-config.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"has-social-provider-env-config.spec.js","sourceRoot":"","sources":["../../src/utils/has-social-provider-env-config.spec.ts"],"names":[],"mappings":";;AAAA,qFAA8E;AAE9E,MAAM,iBAAiB,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAU,CAAC;AACxD,MAAM,sBAAsB,GAAG;IAC7B,CAAC,QAAQ,EAAE,uBAAuB,CAAC;IACnC,CAAC,QAAQ,EAAE,2BAA2B,CAAC;IACvC,CAAC,QAAQ,EAAE,4BAA4B,CAAC;IACxC,CAAC,QAAQ,EAAE,qBAAqB,CAAC;IACjC,CAAC,QAAQ,EAAE,uBAAuB,CAAC;IACnC,CAAC,QAAQ,EAAE,2BAA2B,CAAC;IACvC,CAAC,QAAQ,EAAE,4BAA4B,CAAC;IACxC,CAAC,QAAQ,EAAE,qBAAqB,CAAC;CACzB,CAAC;AAEX,QAAQ,CAAC,4BAA4B,EAAE,GAAG,EAAE;IAC1C,UAAU,CAAC,GAAG,EAAE;QACd,OAAO,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;QACzC,OAAO,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC;QAC7C,OAAO,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC;QAC9C,OAAO,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;QACvC,OAAO,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;QACzC,OAAO,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC;QAC7C,OAAO,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC;QAC9C,OAAO,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,CACxB,mDAAmD,EACnD,CAAC,QAAQ,EAAE,EAAE;QACX,MAAM,CAAC,IAAA,2DAA0B,EAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3D,CAAC,CACF,CAAC;IAEF,EAAE,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAC7B,iDAAiD,EACjD,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE;QACjB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QAEvB,MAAM,CAAC,IAAA,2DAA0B,EAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1D,CAAC,CACF,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/dist/utils/is-env-true.d.ts

@@ -0,0 +1 @@
+export declare function isEnvTrue(name: string): boolean;

package/dist/utils/is-env-true.js

@@ -0,0 +1,7 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isEnvTrue = isEnvTrue;
+function isEnvTrue(name) {
+    return process.env[name] === "true";
+}
+//# sourceMappingURL=is-env-true.js.map

package/dist/utils/is-env-true.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"is-env-true.js","sourceRoot":"","sources":["../../src/utils/is-env-true.ts"],"names":[],"mappings":";;AAAA,8BAEC;AAFD,SAAgB,SAAS,CAAC,IAAY;IACpC,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC;AACtC,CAAC"}

package/dist/utils/is-env-true.spec.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/utils/is-env-true.spec.js

@@ -0,0 +1,20 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const is_env_true_1 = require("./is-env-true");
+describe("isEnvTrue", () => {
+    beforeEach(() => {
+        delete process.env.TEST_ENV_BOOLEAN;
+    });
+    it("should return true only when the env value is true", () => {
+        process.env.TEST_ENV_BOOLEAN = "true";
+        expect((0, is_env_true_1.isEnvTrue)("TEST_ENV_BOOLEAN")).toBe(true);
+    });
+    it.each(["false", "1", "TRUE", ""])("should return false for %s", (value) => {
+        process.env.TEST_ENV_BOOLEAN = value;
+        expect((0, is_env_true_1.isEnvTrue)("TEST_ENV_BOOLEAN")).toBe(false);
+    });
+    it("should return false when the env value is unset", () => {
+        expect((0, is_env_true_1.isEnvTrue)("TEST_ENV_BOOLEAN")).toBe(false);
+    });
+});
+//# sourceMappingURL=is-env-true.spec.js.map

package/dist/utils/is-env-true.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"is-env-true.spec.js","sourceRoot":"","sources":["../../src/utils/is-env-true.spec.ts"],"names":[],"mappings":";;AAAA,+CAA0C;AAE1C,QAAQ,CAAC,WAAW,EAAE,GAAG,EAAE;IACzB,UAAU,CAAC,GAAG,EAAE;QACd,OAAO,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,OAAO,CAAC,GAAG,CAAC,gBAAgB,GAAG,MAAM,CAAC;QAEtC,MAAM,CAAC,IAAA,uBAAS,EAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,4BAA4B,EAAE,CAAC,KAAK,EAAE,EAAE;QAC1E,OAAO,CAAC,GAAG,CAAC,gBAAgB,GAAG,KAAK,CAAC;QAErC,MAAM,CAAC,IAAA,uBAAS,EAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,CAAC,IAAA,uBAAS,EAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/utils/oidc.constants.d.ts

@@ -0,0 +1,5 @@
+import { OidcPrompt } from "./generic-oauth-provider-config.type";
+export declare const OIDC_ENV_NAMES: readonly ["AUTH_OIDC_ENABLED", "AUTH_OIDC_CLIENT_ID", "AUTH_OIDC_CLIENT_SECRET", "AUTH_OIDC_DISCOVERY_URL", "AUTH_OIDC_DISABLE_SIGNUP", "AUTH_OIDC_PROMPT", "AUTH_OIDC_SCOPES"];
+export declare const REQUIRED_OIDC_ENV_NAMES: readonly ["AUTH_OIDC_CLIENT_ID", "AUTH_OIDC_CLIENT_SECRET", "AUTH_OIDC_DISCOVERY_URL"];
+export declare const OIDC_PROMPTS: readonly OidcPrompt[];
+export type RequiredOidcEnvName = (typeof REQUIRED_OIDC_ENV_NAMES)[number];

package/dist/utils/oidc.constants.js

@@ -0,0 +1,27 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OIDC_PROMPTS = exports.REQUIRED_OIDC_ENV_NAMES = exports.OIDC_ENV_NAMES = void 0;
+exports.OIDC_ENV_NAMES = [
+    "AUTH_OIDC_ENABLED",
+    "AUTH_OIDC_CLIENT_ID",
+    "AUTH_OIDC_CLIENT_SECRET",
+    "AUTH_OIDC_DISCOVERY_URL",
+    "AUTH_OIDC_DISABLE_SIGNUP",
+    "AUTH_OIDC_PROMPT",
+    "AUTH_OIDC_SCOPES",
+];
+exports.REQUIRED_OIDC_ENV_NAMES = [
+    "AUTH_OIDC_CLIENT_ID",
+    "AUTH_OIDC_CLIENT_SECRET",
+    "AUTH_OIDC_DISCOVERY_URL",
+];
+exports.OIDC_PROMPTS = [
+    "none",
+    "login",
+    "create",
+    "consent",
+    "select_account",
+    "select_account consent",
+    "login consent",
+];
+//# sourceMappingURL=oidc.constants.js.map

package/dist/utils/oidc.constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oidc.constants.js","sourceRoot":"","sources":["../../src/utils/oidc.constants.ts"],"names":[],"mappings":";;;AAEa,QAAA,cAAc,GAAG;IAC5B,mBAAmB;IACnB,qBAAqB;IACrB,yBAAyB;IACzB,yBAAyB;IACzB,0BAA0B;IAC1B,kBAAkB;IAClB,kBAAkB;CACV,CAAC;AAEE,QAAA,uBAAuB,GAAG;IACrC,qBAAqB;IACrB,yBAAyB;IACzB,yBAAyB;CACjB,CAAC;AAEE,QAAA,YAAY,GAA0B;IACjD,MAAM;IACN,OAAO;IACP,QAAQ;IACR,SAAS;IACT,gBAAgB;IAChB,wBAAwB;IACxB,eAAe;CAChB,CAAC"}

package/dist/utils/resolve-oidc-prompt.d.ts

@@ -0,0 +1,2 @@
+import { GenericOAuthProviderConfig } from "./generic-oauth-provider-config.type";
+export declare function resolveOidcPrompt(): GenericOAuthProviderConfig["prompt"];

package/dist/utils/resolve-oidc-prompt.js

@@ -0,0 +1,16 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveOidcPrompt = resolveOidcPrompt;
+const oidc_constants_1 = require("./oidc.constants");
+function resolveOidcPrompt() {
+    const prompt = process.env.AUTH_OIDC_PROMPT;
+    if (!prompt) {
+        return undefined;
+    }
+    if (!oidc_constants_1.OIDC_PROMPTS.includes(prompt)) {
+        throw new Error("AUTH_OIDC_PROMPT is invalid.\n" +
+            `Set AUTH_OIDC_PROMPT to one of: ${oidc_constants_1.OIDC_PROMPTS.join(", ")}.`);
+    }
+    return prompt;
+}
+//# sourceMappingURL=resolve-oidc-prompt.js.map

package/dist/utils/resolve-oidc-prompt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve-oidc-prompt.js","sourceRoot":"","sources":["../../src/utils/resolve-oidc-prompt.ts"],"names":[],"mappings":";;AAMA,8CAeC;AAjBD,qDAAgD;AAEhD,SAAgB,iBAAiB;IAC/B,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;IAE5C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,CAAC,6BAAY,CAAC,QAAQ,CAAC,MAAoB,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CACb,gCAAgC;YAC9B,mCAAmC,6BAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAChE,CAAC;IACJ,CAAC;IAED,OAAO,MAAoB,CAAC;AAC9B,CAAC"}

package/dist/utils/resolve-oidc-prompt.spec.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/utils/resolve-oidc-prompt.spec.js

@@ -0,0 +1,28 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const resolve_oidc_prompt_1 = require("./resolve-oidc-prompt");
+describe("resolveOidcPrompt", () => {
+    beforeEach(() => {
+        delete process.env.AUTH_OIDC_PROMPT;
+    });
+    it("should return undefined when AUTH_OIDC_PROMPT is unset", () => {
+        expect((0, resolve_oidc_prompt_1.resolveOidcPrompt)()).toBeUndefined();
+    });
+    it.each([
+        "none",
+        "login",
+        "create",
+        "consent",
+        "select_account",
+        "select_account consent",
+        "login consent",
+    ])("should return supported prompt %s", (prompt) => {
+        process.env.AUTH_OIDC_PROMPT = prompt;
+        expect((0, resolve_oidc_prompt_1.resolveOidcPrompt)()).toBe(prompt);
+    });
+    it("should reject unsupported prompt values", () => {
+        process.env.AUTH_OIDC_PROMPT = "invalid";
+        expect(() => (0, resolve_oidc_prompt_1.resolveOidcPrompt)()).toThrow("AUTH_OIDC_PROMPT");
+    });
+});
+//# sourceMappingURL=resolve-oidc-prompt.spec.js.map

package/dist/utils/resolve-oidc-prompt.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve-oidc-prompt.spec.js","sourceRoot":"","sources":["../../src/utils/resolve-oidc-prompt.spec.ts"],"names":[],"mappings":";;AAAA,+DAA0D;AAE1D,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,UAAU,CAAC,GAAG,EAAE;QACd,OAAO,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,MAAM,CAAC,IAAA,uCAAiB,GAAE,CAAC,CAAC,aAAa,EAAE,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC;QACN,MAAM;QACN,OAAO;QACP,QAAQ;QACR,SAAS;QACT,gBAAgB;QAChB,wBAAwB;QACxB,eAAe;KAChB,CAAC,CAAC,mCAAmC,EAAE,CAAC,MAAM,EAAE,EAAE;QACjD,OAAO,CAAC,GAAG,CAAC,gBAAgB,GAAG,MAAM,CAAC;QAEtC,MAAM,CAAC,IAAA,uCAAiB,GAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,OAAO,CAAC,GAAG,CAAC,gBAAgB,GAAG,SAAS,CAAC;QAEzC,MAAM,CAAC,GAAG,EAAE,CAAC,IAAA,uCAAiB,GAAE,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/utils/resolve-oidc-scopes.d.ts

@@ -0,0 +1 @@
+export declare function resolveOidcScopes(): string[];

package/dist/utils/resolve-oidc-scopes.js

@@ -0,0 +1,10 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveOidcScopes = resolveOidcScopes;
+function resolveOidcScopes() {
+    return (process.env.AUTH_OIDC_SCOPES ?? "openid,profile,email")
+        .split(",")
+        .map((scope) => scope.trim())
+        .filter(Boolean);
+}
+//# sourceMappingURL=resolve-oidc-scopes.js.map

package/dist/utils/resolve-oidc-scopes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve-oidc-scopes.js","sourceRoot":"","sources":["../../src/utils/resolve-oidc-scopes.ts"],"names":[],"mappings":";;AAAA,8CAKC;AALD,SAAgB,iBAAiB;IAC/B,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,sBAAsB,CAAC;SAC5D,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;SAC5B,MAAM,CAAC,OAAO,CAAC,CAAC;AACrB,CAAC"}

package/dist/utils/resolve-oidc-scopes.spec.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/utils/resolve-oidc-scopes.spec.js

@@ -0,0 +1,16 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const resolve_oidc_scopes_1 = require("./resolve-oidc-scopes");
+describe("resolveOidcScopes", () => {
+    beforeEach(() => {
+        delete process.env.AUTH_OIDC_SCOPES;
+    });
+    it("should return default scopes when AUTH_OIDC_SCOPES is unset", () => {
+        expect((0, resolve_oidc_scopes_1.resolveOidcScopes)()).toEqual(["openid", "profile", "email"]);
+    });
+    it("should trim comma-separated scopes and drop blanks", () => {
+        process.env.AUTH_OIDC_SCOPES = "openid, profile, email,";
+        expect((0, resolve_oidc_scopes_1.resolveOidcScopes)()).toEqual(["openid", "profile", "email"]);
+    });
+});
+//# sourceMappingURL=resolve-oidc-scopes.spec.js.map

package/dist/utils/resolve-oidc-scopes.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve-oidc-scopes.spec.js","sourceRoot":"","sources":["../../src/utils/resolve-oidc-scopes.spec.ts"],"names":[],"mappings":";;AAAA,+DAA0D;AAE1D,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,UAAU,CAAC,GAAG,EAAE;QACd,OAAO,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,MAAM,CAAC,IAAA,uCAAiB,GAAE,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,OAAO,CAAC,GAAG,CAAC,gBAAgB,GAAG,yBAAyB,CAAC;QAEzD,MAAM,CAAC,IAAA,uCAAiB,GAAE,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/utils/resolve-required-oidc-env.d.ts

@@ -0,0 +1,2 @@
+import { RequiredOidcEnvName } from "./oidc.constants";
+export declare function resolveRequiredOidcEnv(name: RequiredOidcEnvName): string;

package/dist/utils/resolve-required-oidc-env.js

@@ -0,0 +1,12 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveRequiredOidcEnv = resolveRequiredOidcEnv;
+function resolveRequiredOidcEnv(name) {
+    const value = process.env[name];
+    if (!value) {
+        throw new Error(`${name} is required when OIDC auth is configured.\n` +
+            `Set ${name} environment variable, or set AUTH_OIDC_ENABLED=false to disable OIDC auth.`);
+    }
+    return value;
+}
+//# sourceMappingURL=resolve-required-oidc-env.js.map

package/dist/utils/resolve-required-oidc-env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve-required-oidc-env.js","sourceRoot":"","sources":["../../src/utils/resolve-required-oidc-env.ts"],"names":[],"mappings":";;AAEA,wDAWC;AAXD,SAAgB,sBAAsB,CAAC,IAAyB;IAC9D,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAEhC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,8CAA8C;YACnD,OAAO,IAAI,6EAA6E,CAC3F,CAAC;IACJ,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/utils/resolve-required-oidc-env.spec.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/utils/resolve-required-oidc-env.spec.js

@@ -0,0 +1,22 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const resolve_required_oidc_env_1 = require("./resolve-required-oidc-env");
+describe("resolveRequiredOidcEnv", () => {
+    beforeEach(() => {
+        delete process.env.AUTH_OIDC_CLIENT_ID;
+    });
+    it("should return the configured env value", () => {
+        process.env.AUTH_OIDC_CLIENT_ID = "client-id";
+        expect((0, resolve_required_oidc_env_1.resolveRequiredOidcEnv)("AUTH_OIDC_CLIENT_ID")).toBe("client-id");
+    });
+    it.each([undefined, ""])("should reject missing values", (value) => {
+        if (value === undefined) {
+            delete process.env.AUTH_OIDC_CLIENT_ID;
+        }
+        else {
+            process.env.AUTH_OIDC_CLIENT_ID = value;
+        }
+        expect(() => (0, resolve_required_oidc_env_1.resolveRequiredOidcEnv)("AUTH_OIDC_CLIENT_ID")).toThrow("AUTH_OIDC_CLIENT_ID");
+    });
+});
+//# sourceMappingURL=resolve-required-oidc-env.spec.js.map

package/dist/utils/resolve-required-oidc-env.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve-required-oidc-env.spec.js","sourceRoot":"","sources":["../../src/utils/resolve-required-oidc-env.spec.ts"],"names":[],"mappings":";;AAAA,2EAAqE;AAErE,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACtC,UAAU,CAAC,GAAG,EAAE;QACd,OAAO,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,OAAO,CAAC,GAAG,CAAC,mBAAmB,GAAG,WAAW,CAAC;QAE9C,MAAM,CAAC,IAAA,kDAAsB,EAAC,qBAAqB,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,8BAA8B,EAAE,CAAC,KAAK,EAAE,EAAE;QACjE,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;QACzC,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,mBAAmB,GAAG,KAAK,CAAC;QAC1C,CAAC;QAED,MAAM,CAAC,GAAG,EAAE,CAAC,IAAA,kDAAsB,EAAC,qBAAqB,CAAC,CAAC,CAAC,OAAO,CACjE,qBAAqB,CACtB,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/utils/resolve-required-social-provider-env.d.ts

@@ -0,0 +1,2 @@
+import { SocialProviderId, SocialProviderRequiredEnvKey } from "./social-provider.constants";
+export declare function resolveRequiredSocialProviderEnv(provider: SocialProviderId, key: SocialProviderRequiredEnvKey): string;

package/dist/utils/resolve-required-social-provider-env.js

@@ -0,0 +1,15 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveRequiredSocialProviderEnv = resolveRequiredSocialProviderEnv;
+const social_provider_constants_1 = require("./social-provider.constants");
+function resolveRequiredSocialProviderEnv(provider, key) {
+    const config = social_provider_constants_1.SOCIAL_PROVIDER_ENV_CONFIGS[provider];
+    const name = config[key];
+    const value = process.env[name];
+    if (!value) {
+        throw new Error(`${name} is required for ${config.displayName} auth.\n` +
+            `Set ${name} environment variable, or set ${config.enabled}=false to disable ${config.displayName} auth.`);
+    }
+    return value;
+}
+//# sourceMappingURL=resolve-required-social-provider-env.js.map

package/dist/utils/resolve-required-social-provider-env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve-required-social-provider-env.js","sourceRoot":"","sources":["../../src/utils/resolve-required-social-provider-env.ts"],"names":[],"mappings":";;AAMA,4EAgBC;AAtBD,2EAIqC;AAErC,SAAgB,gCAAgC,CAC9C,QAA0B,EAC1B,GAAiC;IAEjC,MAAM,MAAM,GAAG,uDAA2B,CAAC,QAAQ,CAAC,CAAC;IACrD,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACzB,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAEhC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,oBAAoB,MAAM,CAAC,WAAW,UAAU;YACrD,OAAO,IAAI,iCAAiC,MAAM,CAAC,OAAO,qBAAqB,MAAM,CAAC,WAAW,QAAQ,CAC5G,CAAC;IACJ,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/utils/resolve-required-social-provider-env.spec.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/utils/resolve-required-social-provider-env.spec.js

@@ -0,0 +1,29 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const resolve_required_social_provider_env_1 = require("./resolve-required-social-provider-env");
+describe("resolveRequiredSocialProviderEnv", () => {
+    beforeEach(() => {
+        delete process.env.AUTH_GITHUB_CLIENT_ID;
+        delete process.env.AUTH_GITHUB_CLIENT_SECRET;
+        delete process.env.AUTH_GITHUB_DISABLE_SIGNUP;
+        delete process.env.AUTH_GITHUB_ENABLED;
+        delete process.env.AUTH_GOOGLE_CLIENT_ID;
+        delete process.env.AUTH_GOOGLE_CLIENT_SECRET;
+        delete process.env.AUTH_GOOGLE_DISABLE_SIGNUP;
+        delete process.env.AUTH_GOOGLE_ENABLED;
+    });
+    it("should return the configured env value", () => {
+        process.env.AUTH_GOOGLE_CLIENT_ID = "google-client-id";
+        expect((0, resolve_required_social_provider_env_1.resolveRequiredSocialProviderEnv)("google", "clientId")).toBe("google-client-id");
+    });
+    it.each([undefined, ""])("should reject missing values", (value) => {
+        if (value === undefined) {
+            delete process.env.AUTH_GITHUB_CLIENT_SECRET;
+        }
+        else {
+            process.env.AUTH_GITHUB_CLIENT_SECRET = value;
+        }
+        expect(() => (0, resolve_required_social_provider_env_1.resolveRequiredSocialProviderEnv)("github", "clientSecret")).toThrow("AUTH_GITHUB_CLIENT_SECRET");
+    });
+});
+//# sourceMappingURL=resolve-required-social-provider-env.spec.js.map

package/dist/utils/resolve-required-social-provider-env.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve-required-social-provider-env.spec.js","sourceRoot":"","sources":["../../src/utils/resolve-required-social-provider-env.spec.ts"],"names":[],"mappings":";;AAAA,iGAA0F;AAE1F,QAAQ,CAAC,kCAAkC,EAAE,GAAG,EAAE;IAChD,UAAU,CAAC,GAAG,EAAE;QACd,OAAO,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;QACzC,OAAO,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC;QAC7C,OAAO,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC;QAC9C,OAAO,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;QACvC,OAAO,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;QACzC,OAAO,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC;QAC7C,OAAO,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC;QAC9C,OAAO,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,OAAO,CAAC,GAAG,CAAC,qBAAqB,GAAG,kBAAkB,CAAC;QAEvD,MAAM,CAAC,IAAA,uEAAgC,EAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CACjE,kBAAkB,CACnB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,8BAA8B,EAAE,CAAC,KAAK,EAAE,EAAE;QACjE,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC;QAC/C,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,yBAAyB,GAAG,KAAK,CAAC;QAChD,CAAC;QAED,MAAM,CAAC,GAAG,EAAE,CACV,IAAA,uEAAgC,EAAC,QAAQ,EAAE,cAAc,CAAC,CAC3D,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/utils/resolve-secret.d.ts

@@ -0,0 +1,2 @@
+import { AuthModuleOptions } from "../auth-module-options.interface";
+export declare function resolveSecret(options: AuthModuleOptions): string;

package/dist/utils/resolve-secret.js

@@ -0,0 +1,27 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveSecret = resolveSecret;
+const estimate_entropy_1 = require("./estimate-entropy");
+function resolveSecret(options) {
+    const secret = options.secret ?? process.env.AUTH_SECRET ?? process.env.APP_SECRET;
+    if (!secret) {
+        throw new Error("Auth secret is required.\n" +
+            "Set AUTH_SECRET or APP_SECRET environment variable, or pass a secret option.\n" +
+            "Generate a secure secret with:\n" +
+            "  node -e \"console.log(require('crypto').randomBytes(32).toString('base64url'))\"");
+    }
+    if (secret.length < 32) {
+        throw new Error("Auth secret must be at least 32 characters long.\n" +
+            "Set AUTH_SECRET or APP_SECRET environment variable, or pass a secret option.\n" +
+            "Generate a secure secret with:\n" +
+            "  node -e \"console.log(require('crypto').randomBytes(32).toString('base64url'))\"");
+    }
+    if ((0, estimate_entropy_1.estimateEntropy)(secret) < 120) {
+        throw new Error("Auth secret appears low-entropy.\n" +
+            "Use a randomly generated secret for production.\n" +
+            "Generate a secure secret with:\n" +
+            "  node -e \"console.log(require('crypto').randomBytes(32).toString('base64url'))\"");
+    }
+    return secret;
+}
+//# sourceMappingURL=resolve-secret.js.map

package/dist/utils/resolve-secret.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve-secret.js","sourceRoot":"","sources":["../../src/utils/resolve-secret.ts"],"names":[],"mappings":";;AAGA,sCAgCC;AAlCD,yDAAqD;AAErD,SAAgB,aAAa,CAAC,OAA0B;IACtD,MAAM,MAAM,GACV,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;IAEtE,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,4BAA4B;YAC1B,gFAAgF;YAChF,kCAAkC;YAClC,oFAAoF,CACvF,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CACb,oDAAoD;YAClD,gFAAgF;YAChF,kCAAkC;YAClC,oFAAoF,CACvF,CAAC;IACJ,CAAC;IAED,IAAI,IAAA,kCAAe,EAAC,MAAM,CAAC,GAAG,GAAG,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CACb,oCAAoC;YAClC,mDAAmD;YACnD,kCAAkC;YAClC,oFAAoF,CACvF,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/utils/resolve-secret.spec.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/utils/resolve-secret.spec.js

@@ -0,0 +1,34 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const resolve_secret_1 = require("./resolve-secret");
+describe("resolveSecret", () => {
+    const secret = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789-_abcdefghijklmnopqrstuvwxyz";
+    beforeEach(() => {
+        delete process.env.APP_SECRET;
+        delete process.env.AUTH_SECRET;
+    });
+    it("should prefer the explicit module option", () => {
+        process.env.AUTH_SECRET =
+            "AUTHabcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789-_";
+        expect((0, resolve_secret_1.resolveSecret)({
+            secret,
+        })).toBe(secret);
+    });
+    it("should fall back to AUTH_SECRET and APP_SECRET env values", () => {
+        process.env.AUTH_SECRET = secret;
+        expect((0, resolve_secret_1.resolveSecret)({})).toBe(secret);
+        delete process.env.AUTH_SECRET;
+        process.env.APP_SECRET = secret;
+        expect((0, resolve_secret_1.resolveSecret)({})).toBe(secret);
+    });
+    it("should reject missing, short, or low-entropy secrets", () => {
+        expect(() => (0, resolve_secret_1.resolveSecret)({})).toThrow("Auth secret is required");
+        expect(() => (0, resolve_secret_1.resolveSecret)({
+            secret: "short",
+        })).toThrow("Auth secret must be at least 32 characters long");
+        expect(() => (0, resolve_secret_1.resolveSecret)({
+            secret: "a".repeat(32),
+        })).toThrow("Auth secret appears low-entropy");
+    });
+});
+//# sourceMappingURL=resolve-secret.spec.js.map

package/dist/utils/resolve-secret.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve-secret.spec.js","sourceRoot":"","sources":["../../src/utils/resolve-secret.spec.ts"],"names":[],"mappings":";;AACA,qDAAiD;AAEjD,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,MAAM,MAAM,GACV,4FAA4F,CAAC;IAE/F,UAAU,CAAC,GAAG,EAAE;QACd,OAAO,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;QAC9B,OAAO,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,OAAO,CAAC,GAAG,CAAC,WAAW;YACrB,sEAAsE,CAAC;QAEzE,MAAM,CACJ,IAAA,8BAAa,EAAC;YACZ,MAAM;SACc,CAAC,CACxB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACjB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,OAAO,CAAC,GAAG,CAAC,WAAW,GAAG,MAAM,CAAC;QAEjC,MAAM,CAAC,IAAA,8BAAa,EAAC,EAAuB,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAE5D,OAAO,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;QAC/B,OAAO,CAAC,GAAG,CAAC,UAAU,GAAG,MAAM,CAAC;QAEhC,MAAM,CAAC,IAAA,8BAAa,EAAC,EAAuB,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,MAAM,CAAC,GAAG,EAAE,CAAC,IAAA,8BAAa,EAAC,EAAuB,CAAC,CAAC,CAAC,OAAO,CAC1D,yBAAyB,CAC1B,CAAC;QACF,MAAM,CAAC,GAAG,EAAE,CACV,IAAA,8BAAa,EAAC;YACZ,MAAM,EAAE,OAAO;SACK,CAAC,CACxB,CAAC,OAAO,CAAC,iDAAiD,CAAC,CAAC;QAC7D,MAAM,CAAC,GAAG,EAAE,CACV,IAAA,8BAAa,EAAC;YACZ,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;SACF,CAAC,CACxB,CAAC,OAAO,CAAC,iCAAiC,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/utils/resolve-social-provider-enabled.d.ts

@@ -0,0 +1,2 @@
+import { SocialProviderId } from "./social-provider.constants";
+export declare function resolveSocialProviderEnabled(provider: SocialProviderId): boolean;

package/dist/utils/resolve-social-provider-enabled.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveSocialProviderEnabled = resolveSocialProviderEnabled;
+const social_provider_constants_1 = require("./social-provider.constants");
+function resolveSocialProviderEnabled(provider) {
+    const value = process.env[social_provider_constants_1.SOCIAL_PROVIDER_ENV_CONFIGS[provider].enabled];
+    return value === "true";
+}
+//# sourceMappingURL=resolve-social-provider-enabled.js.map

package/dist/utils/resolve-social-provider-enabled.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve-social-provider-enabled.js","sourceRoot":"","sources":["../../src/utils/resolve-social-provider-enabled.ts"],"names":[],"mappings":";;AAKA,oEAMC;AAXD,2EAGqC;AAErC,SAAgB,4BAA4B,CAC1C,QAA0B;IAE1B,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,uDAA2B,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC;IAEzE,OAAO,KAAK,KAAK,MAAM,CAAC;AAC1B,CAAC"}

package/dist/utils/resolve-social-provider-enabled.spec.d.ts

@@ -0,0 +1 @@
+export {};