@neuroncloud/ido-core 0.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (105) hide show
  1. package/dist/constants/index.d.ts +4 -0
  2. package/dist/constants/index.d.ts.map +1 -0
  3. package/dist/constants/index.js +4 -0
  4. package/dist/constants/index.js.map +1 -0
  5. package/dist/constants/interaction.d.ts +11 -0
  6. package/dist/constants/interaction.d.ts.map +1 -0
  7. package/dist/constants/interaction.js +11 -0
  8. package/dist/constants/interaction.js.map +1 -0
  9. package/dist/constants/oauth.d.ts +42 -0
  10. package/dist/constants/oauth.d.ts.map +1 -0
  11. package/dist/constants/oauth.js +42 -0
  12. package/dist/constants/oauth.js.map +1 -0
  13. package/dist/constants/oidc.d.ts +11 -0
  14. package/dist/constants/oidc.d.ts.map +1 -0
  15. package/dist/constants/oidc.js +11 -0
  16. package/dist/constants/oidc.js.map +1 -0
  17. package/dist/crypto/id-token.d.ts +15 -0
  18. package/dist/crypto/id-token.d.ts.map +1 -0
  19. package/dist/crypto/id-token.js +99 -0
  20. package/dist/crypto/id-token.js.map +1 -0
  21. package/dist/crypto/jwks.d.ts +18 -0
  22. package/dist/crypto/jwks.d.ts.map +1 -0
  23. package/dist/crypto/jwks.js +98 -0
  24. package/dist/crypto/jwks.js.map +1 -0
  25. package/dist/crypto/jwt.d.ts +12 -0
  26. package/dist/crypto/jwt.d.ts.map +1 -0
  27. package/dist/crypto/jwt.js +52 -0
  28. package/dist/crypto/jwt.js.map +1 -0
  29. package/dist/crypto/random.d.ts +8 -0
  30. package/dist/crypto/random.d.ts.map +1 -0
  31. package/dist/crypto/random.js +22 -0
  32. package/dist/crypto/random.js.map +1 -0
  33. package/dist/errors/index.d.ts +3 -0
  34. package/dist/errors/index.d.ts.map +1 -0
  35. package/dist/errors/index.js +3 -0
  36. package/dist/errors/index.js.map +1 -0
  37. package/dist/errors/protocol-error.d.ts +14 -0
  38. package/dist/errors/protocol-error.d.ts.map +1 -0
  39. package/dist/errors/protocol-error.js +16 -0
  40. package/dist/errors/protocol-error.js.map +1 -0
  41. package/dist/errors/runtime-error.d.ts +8 -0
  42. package/dist/errors/runtime-error.d.ts.map +1 -0
  43. package/dist/errors/runtime-error.js +9 -0
  44. package/dist/errors/runtime-error.js.map +1 -0
  45. package/dist/index.d.ts +29 -0
  46. package/dist/index.d.ts.map +1 -0
  47. package/dist/index.js +18 -0
  48. package/dist/index.js.map +1 -0
  49. package/dist/interaction/remediations.d.ts +7 -0
  50. package/dist/interaction/remediations.d.ts.map +1 -0
  51. package/dist/interaction/remediations.js +39 -0
  52. package/dist/interaction/remediations.js.map +1 -0
  53. package/dist/interaction/response.d.ts +8 -0
  54. package/dist/interaction/response.d.ts.map +1 -0
  55. package/dist/interaction/response.js +18 -0
  56. package/dist/interaction/response.js.map +1 -0
  57. package/dist/interaction/types.d.ts +65 -0
  58. package/dist/interaction/types.d.ts.map +1 -0
  59. package/dist/interaction/types.js +13 -0
  60. package/dist/interaction/types.js.map +1 -0
  61. package/dist/oidc/authorization.d.ts +36 -0
  62. package/dist/oidc/authorization.d.ts.map +1 -0
  63. package/dist/oidc/authorization.js +89 -0
  64. package/dist/oidc/authorization.js.map +1 -0
  65. package/dist/oidc/discovery.d.ts +16 -0
  66. package/dist/oidc/discovery.d.ts.map +1 -0
  67. package/dist/oidc/discovery.js +31 -0
  68. package/dist/oidc/discovery.js.map +1 -0
  69. package/dist/oidc/introspection.d.ts +7 -0
  70. package/dist/oidc/introspection.d.ts.map +1 -0
  71. package/dist/oidc/introspection.js +19 -0
  72. package/dist/oidc/introspection.js.map +1 -0
  73. package/dist/oidc/revocation.d.ts +3 -0
  74. package/dist/oidc/revocation.d.ts.map +1 -0
  75. package/dist/oidc/revocation.js +9 -0
  76. package/dist/oidc/revocation.js.map +1 -0
  77. package/dist/oidc/token.d.ts +22 -0
  78. package/dist/oidc/token.d.ts.map +1 -0
  79. package/dist/oidc/token.js +81 -0
  80. package/dist/oidc/token.js.map +1 -0
  81. package/dist/oidc/user-info.d.ts +3 -0
  82. package/dist/oidc/user-info.d.ts.map +1 -0
  83. package/dist/oidc/user-info.js +15 -0
  84. package/dist/oidc/user-info.js.map +1 -0
  85. package/dist/types/configuration.d.ts +36 -0
  86. package/dist/types/configuration.d.ts.map +1 -0
  87. package/dist/types/configuration.js +2 -0
  88. package/dist/types/configuration.js.map +1 -0
  89. package/dist/types/tokens.d.ts +13 -0
  90. package/dist/types/tokens.d.ts.map +1 -0
  91. package/dist/types/tokens.js +2 -0
  92. package/dist/types/tokens.js.map +1 -0
  93. package/dist/types/user.d.ts +12 -0
  94. package/dist/types/user.d.ts.map +1 -0
  95. package/dist/types/user.js +14 -0
  96. package/dist/types/user.js.map +1 -0
  97. package/dist/utils/index.d.ts +2 -0
  98. package/dist/utils/index.d.ts.map +1 -0
  99. package/dist/utils/index.js +2 -0
  100. package/dist/utils/index.js.map +1 -0
  101. package/dist/utils/values.d.ts +6 -0
  102. package/dist/utils/values.d.ts.map +1 -0
  103. package/dist/utils/values.js +60 -0
  104. package/dist/utils/values.js.map +1 -0
  105. package/package.json +24 -0
@@ -0,0 +1,81 @@
1
+ import { GrantTypes, Parameters, Suberrors } from "../constants/oauth.js";
2
+ import { ProtocolError } from "../errors/protocol-error.js";
3
+ import { RuntimeError } from "../errors/runtime-error.js";
4
+ import { decodeJwt } from "../crypto/jwt.js";
5
+ import { asRecord, readNumber, readString, readStringList } from "../utils/values.js";
6
+ export async function exchangeToken(http, configuration, request) {
7
+ const response = await http.postForm(configuration.endpoints.token, {
8
+ [Parameters.GrantType]: request.grantType,
9
+ [Parameters.ClientId]: configuration.clientId,
10
+ [Parameters.Scope]: request.scopes ?? configuration.scopes.join(" "),
11
+ ...request.extra,
12
+ }, true);
13
+ const body = asRecord(response.body);
14
+ if (response.status >= 200 && response.status < 300 && readString(body, "access_token", "accessToken")) {
15
+ return { tokens: parseTokenResponse(response.body) };
16
+ }
17
+ const error = readString(body, "error") ?? "invalid_request";
18
+ const errorDescription = readString(body, "error_description", "errorDescription");
19
+ const suberror = readString(body, "suberror");
20
+ const continuationToken = readString(body, "continuation_token", "continuationToken");
21
+ if (suberror === Suberrors.MfaRequired && continuationToken) {
22
+ return {
23
+ mfa: {
24
+ continuationToken,
25
+ description: errorDescription,
26
+ availableMethods: readStringList(body, "available_methods", "availableMethods"),
27
+ method: readString(body, "method"),
28
+ },
29
+ };
30
+ }
31
+ const protocolError = new ProtocolError(error, {
32
+ errorDescription: errorDescription ??
33
+ (response.status >= 500 ? `The token endpoint returned HTTP ${response.status}.` : undefined),
34
+ suberror,
35
+ continuationToken,
36
+ });
37
+ if (response.status >= 400 && response.status < 500) {
38
+ return { error: protocolError };
39
+ }
40
+ throw protocolError;
41
+ }
42
+ export async function refreshTokens(http, configuration, refreshToken) {
43
+ const result = await exchangeToken(http, configuration, {
44
+ grantType: GrantTypes.RefreshToken,
45
+ extra: { [Parameters.RefreshToken]: refreshToken },
46
+ });
47
+ if (result.tokens) {
48
+ return result.tokens;
49
+ }
50
+ throw result.error ?? new ProtocolError("invalid_grant", { errorDescription: "The refresh token could not be redeemed." });
51
+ }
52
+ export function parseTokenResponse(body, issuedAt = Math.floor(Date.now() / 1000)) {
53
+ const record = asRecord(body);
54
+ if (!record) {
55
+ throw new RuntimeError("The token response is empty.", { code: "invalid_token_response" });
56
+ }
57
+ const accessToken = readString(record, "access_token", "accessToken");
58
+ const idToken = readString(record, "id_token", "idToken");
59
+ const refreshToken = readString(record, "refresh_token", "refreshToken");
60
+ const expiresIn = readNumber(record, "expires_in", "expiresIn");
61
+ return {
62
+ accessToken: accessToken ? { token: accessToken, expiresAt: expiresAtFrom(accessToken, issuedAt, expiresIn) } : undefined,
63
+ idToken: idToken ? { token: idToken, expiresAt: expiresAtFrom(idToken, issuedAt) } : undefined,
64
+ refreshToken: refreshToken ? { token: refreshToken } : undefined,
65
+ tokenType: readString(record, "token_type", "tokenType"),
66
+ scope: readString(record, "scope"),
67
+ };
68
+ }
69
+ function expiresAtFrom(token, issuedAt, expiresIn) {
70
+ if (expiresIn !== undefined) {
71
+ return issuedAt + expiresIn;
72
+ }
73
+ try {
74
+ const expiration = decodeJwt(token).payload.exp;
75
+ return typeof expiration === "number" ? expiration : undefined;
76
+ }
77
+ catch {
78
+ return undefined;
79
+ }
80
+ }
81
+ //# sourceMappingURL=token.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"token.js","sourceRoot":"","sources":["../../src/oidc/token.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAC1E,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAG7C,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAmBtF,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,IAAwB,EACxB,aAAoC,EACpC,OAAqB;IAErB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAClC,aAAa,CAAC,SAAS,CAAC,KAAK,EAC7B;QACE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,SAAS;QACzC,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,aAAa,CAAC,QAAQ;QAC7C,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,MAAM,IAAI,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;QACpE,GAAG,OAAO,CAAC,KAAK;KACjB,EACD,IAAI,CACL,CAAC;IAEF,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAErC,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,IAAI,EAAE,cAAc,EAAE,aAAa,CAAC,EAAE,CAAC;QACvG,OAAO,EAAE,MAAM,EAAE,kBAAkB,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;IACvD,CAAC;IAED,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,iBAAiB,CAAC;IAC7D,MAAM,gBAAgB,GAAG,UAAU,CAAC,IAAI,EAAE,mBAAmB,EAAE,kBAAkB,CAAC,CAAC;IACnF,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAC9C,MAAM,iBAAiB,GAAG,UAAU,CAAC,IAAI,EAAE,oBAAoB,EAAE,mBAAmB,CAAC,CAAC;IAEtF,IAAI,QAAQ,KAAK,SAAS,CAAC,WAAW,IAAI,iBAAiB,EAAE,CAAC;QAC5D,OAAO;YACL,GAAG,EAAE;gBACH,iBAAiB;gBACjB,WAAW,EAAE,gBAAgB;gBAC7B,gBAAgB,EAAE,cAAc,CAAC,IAAI,EAAE,mBAAmB,EAAE,kBAAkB,CAAC;gBAC/E,MAAM,EAAE,UAAU,CAAC,IAAI,EAAE,QAAQ,CAAC;aACnC;SACF,CAAC;IACJ,CAAC;IAED,MAAM,aAAa,GAAG,IAAI,aAAa,CAAC,KAAK,EAAE;QAC7C,gBAAgB,EACd,gBAAgB;YAChB,CAAC,QAAQ,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,oCAAoC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;QAC/F,QAAQ;QACR,iBAAiB;KAClB,CAAC,CAAC;IAEH,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QACpD,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;IAClC,CAAC;IAED,MAAM,aAAa,CAAC;AACtB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,IAAwB,EACxB,aAAoC,EACpC,YAAoB;IAEpB,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,aAAa,EAAE;QACtD,SAAS,EAAE,UAAU,CAAC,YAAY;QAClC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,YAAY,EAAE;KACnD,CAAC,CAAC;IAEH,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,OAAO,MAAM,CAAC,MAAM,CAAC;IACvB,CAAC;IAED,MAAM,MAAM,CAAC,KAAK,IAAI,IAAI,aAAa,CAAC,eAAe,EAAE,EAAE,gBAAgB,EAAE,0CAA0C,EAAE,CAAC,CAAC;AAC7H,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,IAAa,EAAE,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;IACxF,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAE9B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,YAAY,CAAC,8BAA8B,EAAE,EAAE,IAAI,EAAE,wBAAwB,EAAE,CAAC,CAAC;IAC7F,CAAC;IAED,MAAM,WAAW,GAAG,UAAU,CAAC,MAAM,EAAE,cAAc,EAAE,aAAa,CAAC,CAAC;IACtE,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;IAC1D,MAAM,YAAY,GAAG,UAAU,CAAC,MAAM,EAAE,eAAe,EAAE,cAAc,CAAC,CAAC;IACzE,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;IAEhE,OAAO;QACL,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,aAAa,CAAC,WAAW,EAAE,QAAQ,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS;QACzH,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,aAAa,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS;QAC9F,YAAY,EAAE,YAAY,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,SAAS;QAChE,SAAS,EAAE,UAAU,CAAC,MAAM,EAAE,YAAY,EAAE,WAAW,CAAC;QACxD,KAAK,EAAE,UAAU,CAAC,MAAM,EAAE,OAAO,CAAC;KACnC,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,KAAa,EAAE,QAAgB,EAAE,SAAkB;IACxE,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,OAAO,QAAQ,GAAG,SAAS,CAAC;IAC9B,CAAC;IAED,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;QAChD,OAAO,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC"}
@@ -0,0 +1,3 @@
1
+ import type { ProtocolConfiguration, ProtocolHttpClient } from "../types/configuration.js";
2
+ export declare function getUserInfo(http: ProtocolHttpClient, configuration: ProtocolConfiguration, accessToken: string): Promise<Record<string, unknown>>;
3
+ //# sourceMappingURL=user-info.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"user-info.d.ts","sourceRoot":"","sources":["../../src/oidc/user-info.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAG3F,wBAAsB,WAAW,CAC/B,IAAI,EAAE,kBAAkB,EACxB,aAAa,EAAE,qBAAqB,EACpC,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAalC"}
@@ -0,0 +1,15 @@
1
+ import { ProtocolError } from "../errors/protocol-error.js";
2
+ import { asRecord, readString } from "../utils/values.js";
3
+ export async function getUserInfo(http, configuration, accessToken) {
4
+ const response = await http.get(configuration.endpoints.userinfo, {
5
+ Authorization: `Bearer ${accessToken}`,
6
+ });
7
+ const body = asRecord(response.body);
8
+ if (response.status >= 200 && response.status < 300 && body) {
9
+ return body;
10
+ }
11
+ throw new ProtocolError(readString(body, "error") ?? "invalid_token", {
12
+ errorDescription: readString(body, "error_description", "errorDescription") ?? "The userinfo request failed.",
13
+ });
14
+ }
15
+ //# sourceMappingURL=user-info.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"user-info.js","sourceRoot":"","sources":["../../src/oidc/user-info.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAE5D,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAE1D,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,IAAwB,EACxB,aAAoC,EACpC,WAAmB;IAEnB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,SAAS,CAAC,QAAQ,EAAE;QAChE,aAAa,EAAE,UAAU,WAAW,EAAE;KACvC,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAErC,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QAC5D,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,IAAI,aAAa,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,eAAe,EAAE;QACpE,gBAAgB,EAAE,UAAU,CAAC,IAAI,EAAE,mBAAmB,EAAE,kBAAkB,CAAC,IAAI,8BAA8B;KAC9G,CAAC,CAAC;AACL,CAAC"}
@@ -0,0 +1,36 @@
1
+ export interface ProtocolEndpoints {
2
+ authorize: string;
3
+ token: string;
4
+ userinfo: string;
5
+ revocation: string;
6
+ introspection: string;
7
+ jwks: string;
8
+ logout: string;
9
+ initiate: string;
10
+ challenge: string;
11
+ passkeyInitiate: string;
12
+ passkeyComplete: string;
13
+ }
14
+ export interface ProtocolConfiguration {
15
+ issuer: string;
16
+ clientId: string;
17
+ redirectUri?: string;
18
+ postLogoutRedirectUri?: string;
19
+ scopes: string[];
20
+ endpoints: ProtocolEndpoints;
21
+ }
22
+ export interface ProtocolHttpResponse {
23
+ status: number;
24
+ headers: Record<string, string>;
25
+ body: unknown;
26
+ }
27
+ export interface ProtocolHttpClient {
28
+ get(url: string, headers?: Record<string, string>): Promise<ProtocolHttpResponse>;
29
+ postForm(url: string, body: Record<string, string>, clientAuth?: boolean): Promise<ProtocolHttpResponse>;
30
+ }
31
+ export interface KeyValueCache {
32
+ getItem(key: string): string | null;
33
+ setItem(key: string, value: string): void;
34
+ removeItem(key: string): void;
35
+ }
36
+ //# sourceMappingURL=configuration.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"configuration.d.ts","sourceRoot":"","sources":["../../src/types/configuration.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;IACxB,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,SAAS,EAAE,iBAAiB,CAAC;CAC9B;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,IAAI,EAAE,OAAO,CAAC;CACf;AAED,MAAM,WAAW,kBAAkB;IACjC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAClF,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,UAAU,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;CAC1G;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IACpC,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1C,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B"}
@@ -0,0 +1,2 @@
1
+ export {};
2
+ //# sourceMappingURL=configuration.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"configuration.js","sourceRoot":"","sources":["../../src/types/configuration.ts"],"names":[],"mappings":""}
@@ -0,0 +1,13 @@
1
+ export interface Token {
2
+ token: string;
3
+ expiresAt?: number;
4
+ }
5
+ export interface Tokens {
6
+ accessToken?: Token;
7
+ idToken?: Token;
8
+ refreshToken?: Token;
9
+ tokenType?: string;
10
+ scope?: string;
11
+ }
12
+ export type TokenKey = "accessToken" | "idToken" | "refreshToken";
13
+ //# sourceMappingURL=tokens.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"tokens.d.ts","sourceRoot":"","sources":["../../src/types/tokens.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,KAAK;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,MAAM;IACrB,WAAW,CAAC,EAAE,KAAK,CAAC;IACpB,OAAO,CAAC,EAAE,KAAK,CAAC;IAChB,YAAY,CAAC,EAAE,KAAK,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,QAAQ,GAAG,aAAa,GAAG,SAAS,GAAG,cAAc,CAAC"}
@@ -0,0 +1,2 @@
1
+ export {};
2
+ //# sourceMappingURL=tokens.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"tokens.js","sourceRoot":"","sources":["../../src/types/tokens.ts"],"names":[],"mappings":""}
@@ -0,0 +1,12 @@
1
+ export interface UserClaims {
2
+ sub?: string;
3
+ name?: string;
4
+ preferred_username?: string;
5
+ email?: string;
6
+ email_verified?: boolean;
7
+ given_name?: string;
8
+ family_name?: string;
9
+ [claim: string]: unknown;
10
+ }
11
+ export declare function readUserClaims(idToken: string): UserClaims;
12
+ //# sourceMappingURL=user.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"user.d.ts","sourceRoot":"","sources":["../../src/types/user.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,UAAU;IACzB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;CAC1B;AAED,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,UAAU,CAS1D"}
@@ -0,0 +1,14 @@
1
+ import { RuntimeError } from "../errors/index.js";
2
+ import { decodeJwt } from "../crypto/jwt.js";
3
+ export function readUserClaims(idToken) {
4
+ try {
5
+ return decodeJwt(idToken).payload;
6
+ }
7
+ catch (error) {
8
+ throw new RuntimeError("The ID token could not be decoded.", {
9
+ code: "invalid_id_token",
10
+ cause: error,
11
+ });
12
+ }
13
+ }
14
+ //# sourceMappingURL=user.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"user.js","sourceRoot":"","sources":["../../src/types/user.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAa7C,MAAM,UAAU,cAAc,CAAC,OAAe;IAC5C,IAAI,CAAC;QACH,OAAO,SAAS,CAAC,OAAO,CAAC,CAAC,OAAqB,CAAC;IAClD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,YAAY,CAAC,oCAAoC,EAAE;YAC3D,IAAI,EAAE,kBAAkB;YACxB,KAAK,EAAE,KAAK;SACb,CAAC,CAAC;IACL,CAAC;AACH,CAAC"}
@@ -0,0 +1,2 @@
1
+ export * from "./values.js";
2
+ //# sourceMappingURL=index.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/utils/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC"}
@@ -0,0 +1,2 @@
1
+ export * from "./values.js";
2
+ //# sourceMappingURL=index.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/utils/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC"}
@@ -0,0 +1,6 @@
1
+ export declare function asRecord(value: unknown): Record<string, unknown> | undefined;
2
+ export declare function readString(value: Record<string, unknown> | undefined, ...keys: string[]): string | undefined;
3
+ export declare function readNumber(value: Record<string, unknown> | undefined, ...keys: string[]): number | undefined;
4
+ export declare function readStringList(value: Record<string, unknown> | undefined, ...keys: string[]): string[] | undefined;
5
+ export declare function readUnknown(value: Record<string, unknown> | undefined, ...keys: string[]): unknown;
6
+ //# sourceMappingURL=values.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"values.d.ts","sourceRoot":"","sources":["../../src/utils/values.ts"],"names":[],"mappings":"AAAA,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAM5E;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,SAAS,CAc5G;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,SAAS,CAsB5G;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,GAAG,SAAS,CAclH;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAYlG"}
@@ -0,0 +1,60 @@
1
+ export function asRecord(value) {
2
+ if (typeof value !== "object" || value === null || Array.isArray(value)) {
3
+ return undefined;
4
+ }
5
+ return value;
6
+ }
7
+ export function readString(value, ...keys) {
8
+ if (!value) {
9
+ return undefined;
10
+ }
11
+ for (const key of keys) {
12
+ const candidate = value[key];
13
+ if (typeof candidate === "string" && candidate.length > 0) {
14
+ return candidate;
15
+ }
16
+ }
17
+ return undefined;
18
+ }
19
+ export function readNumber(value, ...keys) {
20
+ if (!value) {
21
+ return undefined;
22
+ }
23
+ for (const key of keys) {
24
+ const candidate = value[key];
25
+ if (typeof candidate === "number" && Number.isFinite(candidate)) {
26
+ return candidate;
27
+ }
28
+ if (typeof candidate === "string" && candidate.length > 0) {
29
+ const parsed = Number(candidate);
30
+ if (Number.isFinite(parsed)) {
31
+ return parsed;
32
+ }
33
+ }
34
+ }
35
+ return undefined;
36
+ }
37
+ export function readStringList(value, ...keys) {
38
+ const raw = readUnknown(value, ...keys);
39
+ if (Array.isArray(raw)) {
40
+ const items = raw.filter((item) => typeof item === "string" && item.length > 0);
41
+ return items.length > 0 ? items : undefined;
42
+ }
43
+ if (typeof raw === "string" && raw.trim()) {
44
+ const items = raw.split(/[,\s]+/).filter(Boolean);
45
+ return items.length > 0 ? items : undefined;
46
+ }
47
+ return undefined;
48
+ }
49
+ export function readUnknown(value, ...keys) {
50
+ if (!value) {
51
+ return undefined;
52
+ }
53
+ for (const key of keys) {
54
+ if (key in value) {
55
+ return value[key];
56
+ }
57
+ }
58
+ return undefined;
59
+ }
60
+ //# sourceMappingURL=values.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"values.js","sourceRoot":"","sources":["../../src/utils/values.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,QAAQ,CAAC,KAAc;IACrC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,KAAgC,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAA0C,EAAE,GAAG,IAAc;IACtF,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;QAE7B,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1D,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAA0C,EAAE,GAAG,IAAc;IACtF,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;QAE7B,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YAChE,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1D,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;YAEjC,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC5B,OAAO,MAAM,CAAC;YAChB,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAA0C,EAAE,GAAG,IAAc;IAC1F,MAAM,GAAG,GAAG,WAAW,CAAC,KAAK,EAAE,GAAG,IAAI,CAAC,CAAC;IAExC,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAChG,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9C,CAAC;IAED,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;QAC1C,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAClD,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9C,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAA0C,EAAE,GAAG,IAAc;IACvF,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,GAAG,IAAI,KAAK,EAAE,CAAC;YACjB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC"}
package/package.json ADDED
@@ -0,0 +1,24 @@
1
+ {
2
+ "name": "@neuroncloud/ido-core",
3
+ "version": "0.1.0",
4
+ "type": "module",
5
+ "main": "./dist/index.js",
6
+ "types": "./dist/index.d.ts",
7
+ "exports": {
8
+ ".": {
9
+ "types": "./dist/index.d.ts",
10
+ "import": "./dist/index.js"
11
+ }
12
+ },
13
+ "files": [
14
+ "dist"
15
+ ],
16
+ "sideEffects": false,
17
+ "scripts": {
18
+ "build": "tsc -p tsconfig.json",
19
+ "typecheck": "tsc --noEmit -p tsconfig.json"
20
+ },
21
+ "publishConfig": {
22
+ "access": "public"
23
+ }
24
+ }