@noresponse/node 2.0.1 → 2.0.2

package/CHANGELOG.md

@@ -1,5 +1,9 @@
 # Changelog
 
+## 2.0.2
+
+API changes since the previous release are not listed: no earlier document was recorded.
+
 All notable changes to `@noresponse/node`. The format follows Keep a Changelog and the package follows Semantic Versioning.
 
 ## 2.0.0

package/dist/commonjs/auth.d.ts

@@ -3,6 +3,13 @@
  *
  * Each adapter maps claims your backend has already verified into the
  * `authContext` of an assessment request. Pass verified claims, not a raw token.
+ *
+ * The mapping is the table in `claim-map.ts`, a copy of
+ * contracts/api/v1/fixtures/assessment-contract/auth-context-claim-map.json,
+ * run by the small interpreter below. Every SDK runs the same table and the
+ * same vectors (tests/fixtures/auth-context-vectors.json). A claim that is
+ * missing, mistyped or out of range maps to absent, never to a stronger
+ * assurance.
  */
 import type { AuthContext } from "./models/auth-context.js";
 export type VerifiedClaims = Record<string, unknown>;

package/dist/commonjs/auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/auth.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAE5D,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AACrD,MAAM,MAAM,oBAAoB,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;AAwExD,yFAAyF;AACzF,wBAAgB,UAAU,CAAC,MAAM,EAAE,cAAc,EAAE,SAAS,GAAE,oBAAyB,GAAG,WAAW,CAQpG;AAED,qFAAqF;AACrF,wBAAgB,SAAS,CAAC,MAAM,EAAE,cAAc,EAAE,SAAS,GAAE,oBAAyB,GAAG,WAAW,CAkBnG;AAED,kHAAkH;AAClH,wBAAgB,SAAS,CAAC,MAAM,EAAE,cAAc,EAAE,SAAS,GAAE,oBAAyB,GAAG,WAAW,CAcnG;AAED,uGAAuG;AACvG,wBAAgB,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,SAAS,GAAE,oBAAyB,GAAG,WAAW,CAGpH"}
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAG5D,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AACrD,MAAM,MAAM,oBAAoB,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;AA0IxD,yFAAyF;AACzF,wBAAgB,UAAU,CAAC,MAAM,EAAE,cAAc,EAAE,SAAS,GAAE,oBAAyB,GAAG,WAAW,CAEpG;AAED,qFAAqF;AACrF,wBAAgB,SAAS,CAAC,MAAM,EAAE,cAAc,EAAE,SAAS,GAAE,oBAAyB,GAAG,WAAW,CAEnG;AAED,kHAAkH;AAClH,wBAAgB,SAAS,CAAC,MAAM,EAAE,cAAc,EAAE,SAAS,GAAE,oBAAyB,GAAG,WAAW,CAEnG;AAED,uGAAuG;AACvG,wBAAgB,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,SAAS,GAAE,oBAAyB,GAAG,WAAW,CAGpH"}

package/dist/commonjs/auth.js

@@ -4,126 +4,151 @@ exports.fromWorkOS = fromWorkOS;
 exports.fromClerk = fromClerk;
 exports.fromAuth0 = fromAuth0;
 exports.fromOIDC = fromOIDC;
-function text(value) {
-    return typeof value === "string" && value.length > 0 ? value : undefined;
+const claim_map_js_1 = require("./claim-map.js");
+const kinds = new Map(Object.entries(claim_map_js_1.CLAIM_MAP.kinds).map(([name, k]) => [name, { re: new RegExp("^(?:" + k.pattern + ")$"), max: k.maxLength }]));
+const slug = new RegExp("^(?:" + claim_map_js_1.CLAIM_MAP.slug + ")$");
+const splitters = { whitespace: /[ \t\r\n\f\v]+/, comma_whitespace: /[ \t\r\n\f\v,]+/ };
+const MAX_TIME = 253402300799;
+function object(value) {
+    return value !== null && typeof value === "object" && !Array.isArray(value) ? value : undefined;
 }
-function iso(value) {
-    if (typeof value === "string")
-        return value;
-    // Whole UTC seconds (the fraction is truncated), as the Go and Python helpers write it.
-    if (typeof value === "number" && Number.isFinite(value)) {
-        return new Date(Math.trunc(value) * 1000).toISOString().replace(".000Z", "Z");
+function lookup(claims, path) {
+    let current = claims;
+    for (const key of path.split(".")) {
+        const record = object(current);
+        if (!record || !Object.hasOwn(record, key))
+            return undefined;
+        current = record[key];
     }
-    return undefined;
+    return current;
 }
-// Defaults are the contract's bounds for roles and scopes (32 items of at
-// most 64 characters); audiences are 8 x 256 and amr 8 x 32. The Go and
-// Python helpers apply the same caps. Over-long values are dropped, not truncated.
-function bounded(values, limit, maxLength) {
-    const kept = values
-        .filter((item) => typeof item === "string" && item.length > 0 && [...item].length <= maxLength)
-        .slice(0, limit);
-    return kept.length ? kept : undefined;
+function matches(kind, value) {
+    const k = kinds.get(kind);
+    return typeof value === "string" && [...value].length <= k.max && k.re.test(value);
 }
-function strings(value, limit = 32, maxLength = 64) {
-    if (typeof value === "string")
-        return bounded(value.split(/\s+/), limit, maxLength);
-    return Array.isArray(value) ? bounded(value, limit, maxLength) : undefined;
+function lower(value) {
+    return value.replace(/[A-Z]/g, (c) => c.toLowerCase());
 }
-function delimitedStrings(value, limit = 32, maxLength = 64) {
-    if (typeof value !== "string")
-        return strings(value, limit, maxLength);
-    return bounded(value.split(/[\s,]+/).map((item) => item.trim()), limit, maxLength);
+function mapTime(claims, rule) {
+    for (const path of rule.claims ?? []) {
+        const value = lookup(claims, path);
+        if (typeof value === "number" && Number.isFinite(value) && value >= 0 && value <= MAX_TIME) {
+            // Whole UTC seconds; the fraction is truncated.
+            return new Date(Math.trunc(value) * 1000).toISOString().replace(".000Z", "Z");
+        }
+        if (matches("time", value))
+            return value;
+    }
+    return undefined;
 }
-function audiences(value) {
-    return strings(value, 8, 256);
+function mapList(claims, rule) {
+    for (const path of rule.claims ?? []) {
+        const value = lookup(claims, path);
+        let items = [];
+        if (typeof value === "string")
+            items = rule.split === "none" ? [value] : value.split(splitters[rule.split ?? "whitespace"]);
+        else if (Array.isArray(value))
+            items = value;
+        const kept = items.filter((item) => matches(rule.kind, item)).slice(0, rule.max);
+        if (kept.length)
+            return kept;
+    }
+    return undefined;
 }
-function object(value) {
-    return value !== null && typeof value === "object" && !Array.isArray(value) ? value : undefined;
+function mapRule(claims, rule) {
+    switch (rule.op) {
+        case "id":
+            for (const path of rule.claims ?? []) {
+                const value = lookup(claims, path);
+                if (matches(rule.kind, value))
+                    return value;
+            }
+            return undefined;
+        case "list":
+            return mapList(claims, rule);
+        case "time":
+            return mapTime(claims, rule);
+        case "bool":
+            for (const path of rule.claims ?? []) {
+                const value = lookup(claims, path);
+                if (typeof value === "boolean")
+                    return value;
+            }
+            return undefined;
+        case "actor": {
+            const value = lookup(claims, rule.claims[0]);
+            const record = object(value);
+            if (record)
+                return [record["sub"], record["email"]].some((item) => typeof item === "string" && item.length > 0);
+            return typeof value === "string" && value.length > 0;
+        }
+        case "mfa_factor_age": {
+            const value = lookup(claims, rule.claim);
+            const age = Array.isArray(value) ? value[rule.index] : undefined;
+            const seconds = typeof age === "number" ? age * rule.unitSeconds : NaN;
+            return seconds >= 0 && seconds <= rule.maxSeconds ? { present: true, age_seconds: Math.trunc(seconds) } : undefined;
+        }
+        case "mfa_methods": {
+            const value = lookup(claims, rule.claim);
+            if (!Array.isArray(value))
+                return undefined;
+            const kept = value.filter((item) => matches(rule.kind, item)).slice(0, rule.max);
+            const methods = kept.filter((item) => !rule.ignore.includes(lower(item)));
+            if (!methods.length)
+                return undefined;
+            return { present: kept.some((item) => lower(item) === rule.mfaValue), methods };
+        }
+        default:
+            throw new Error("unknown claim map op " + rule.op);
+    }
 }
-function actorPresent(value) {
+const camel = (key) => key.replace(/_([a-z])/g, (_, c) => c.toUpperCase());
+const snake = (key) => key.replace(/[A-Z]/g, (c) => "_" + c.toLowerCase());
+function rekey(value, fn) {
     const record = object(value);
-    return Boolean(record ? (text(record["sub"]) ?? text(record["email"])) : text(value));
-}
-function defined(value) {
-    return Object.fromEntries(Object.entries(value).filter(([, v]) => v !== undefined));
+    if (!record)
+        return value;
+    return Object.fromEntries(Object.entries(record).map(([k, v]) => [fn(k), k === "mfa" || k === "methods" ? rekey(v, fn) : v]));
 }
-function base(provider, claims, overrides = {}, options = {}) {
-    const issuer = text(overrides.issuer) ?? text(claims["iss"]);
-    const subject = text(overrides.subject) ?? text(claims["sub"]);
-    if (!issuer || !subject)
+function build(name, claims, overrides, provider) {
+    const spec = claim_map_js_1.CLAIM_MAP.providers[name];
+    const rules = { ...claim_map_js_1.CLAIM_MAP.base, ...spec.fields };
+    for (const field of spec.disable ?? [])
+        delete rules[field];
+    const wire = { provider, ...claim_map_js_1.CLAIM_MAP.constants };
+    for (const [field, rule] of Object.entries(rules)) {
+        const value = mapRule(claims, rule);
+        if (value !== undefined)
+            wire[field] = value;
+    }
+    for (const [field, value] of Object.entries(rekey(overrides, snake))) {
+        if (value !== undefined && value !== null)
+            wire[field] = value;
+    }
+    const audiences = wire["audiences"];
+    if (Array.isArray(audiences) && audiences.length && wire["audience"] === undefined)
+        wire["audience"] = audiences[0];
+    if (typeof wire["issuer"] !== "string" || !wire["issuer"] || typeof wire["subject"] !== "string" || !wire["subject"]) {
         throw new TypeError("NoResponse auth context requires a verified issuer and subject");
-    const mergedAudiences = overrides.audiences ?? audiences(claims["aud"]);
-    const context = { provider, issuer, subject, verified: true, transport: "backend" };
-    if (mergedAudiences?.length) {
-        context.audiences = mergedAudiences;
-        context.audience = overrides.audience ?? mergedAudiences[0];
     }
-    const issuedAt = iso(claims["iat"]);
-    if (options.includeIssuedAt !== false && issuedAt)
-        context.issuedAt = issuedAt;
-    const expiresAt = iso(claims["exp"]);
-    if (expiresAt)
-        context.expiresAt = expiresAt;
-    const authTime = iso(claims["auth_time"]);
-    if (authTime)
-        context.authTime = authTime;
-    const sessionId = text(claims["sid"]);
-    if (sessionId)
-        context.sessionId = sessionId;
-    const tokenId = text(claims["jti"]);
-    if (tokenId)
-        context.tokenId = tokenId;
-    return { ...context, ...defined(overrides) };
+    return rekey(wire, camel);
 }
 /** Map verified WorkOS AuthKit claims plus verified user or session record overrides. */
 function fromWorkOS(claims, overrides = {}) {
-    const defaults = {
-        organizationId: text(claims["org_id"]),
-        roles: strings(claims["roles"] ?? claims["role"]),
-        scopes: strings(claims["permissions"]),
-        impersonated: actorPresent(claims["act"]),
-    };
-    return base("workos", claims, { ...defaults, ...overrides });
+    return build("workos", claims, overrides, "workos");
 }
 /** Map verified Clerk session claims. Pass Session.createdAt as sessionCreatedAt. */
 function fromClerk(claims, overrides = {}) {
-    const org = object(claims["o"]);
-    const secondFactorAgeMinutes = Array.isArray(claims["fva"]) && typeof claims["fva"][1] === "number" && Number.isFinite(claims["fva"][1]) ? claims["fva"][1] : undefined;
-    const mfa = secondFactorAgeMinutes !== undefined && secondFactorAgeMinutes >= 0
-        ? { present: true, ageSeconds: Math.trunc(secondFactorAgeMinutes * 60) }
-        : undefined;
-    const defaults = {
-        organizationId: text(org?.["id"]) ?? text(claims["org_id"]),
-        // Clerk's role claim is one role slug, not a list.
-        roles: bounded([org?.["rol"]], 32, 64) ?? bounded([claims["org_role"]], 32, 64),
-        scopes: delimitedStrings(org?.["per"]) ?? delimitedStrings(claims["org_permissions"]),
-        impersonated: actorPresent(claims["act"]),
-        ...(mfa ? { mfa } : {}),
-    };
-    // iat is a 60-second token refresh clock, so it is not sent as issuedAt; session age is the sessionCreatedAt override.
-    return base("clerk", claims, { ...defaults, ...overrides }, { includeIssuedAt: false });
+    return build("clerk", claims, overrides, "clerk");
 }
 /** Map verified Auth0 ID token, userinfo or normalised session claims. Do not pass an opaque API access token. */
 function fromAuth0(claims, overrides = {}) {
-    const amr = strings(claims["amr"], 8, 32);
-    const mfaMethods = amr?.filter((method) => method.toLowerCase() !== "pwd");
-    const defaults = {
-        organizationId: text(claims["org_id"]),
-        scopes: strings(claims["scope"]) ?? strings(claims["permissions"]),
-        emailVerified: typeof claims["email_verified"] === "boolean" ? claims["email_verified"] : undefined,
-        phoneVerified: typeof claims["phone_number_verified"] === "boolean" ? claims["phone_number_verified"] : undefined,
-        impersonated: actorPresent(claims["act"]),
-        ...(mfaMethods?.length
-            ? { mfa: { present: amr?.some((method) => method.toLowerCase() === "mfa") ?? false, methods: mfaMethods } }
-            : {}),
-    };
-    return base("auth0", claims, { ...defaults, ...overrides });
+    return build("auth0", claims, overrides, "auth0");
 }
 /** Generic OIDC adapter for providers without a first-class helper. `provider` is a lowercase slug. */
 function fromOIDC(provider, claims, overrides = {}) {
-    if (!/^[a-z0-9][a-z0-9._-]{1,31}$/.test(provider))
+    if (typeof provider !== "string" || !slug.test(provider))
         throw new TypeError("provider must be a lowercase provider slug");
-    return base(provider, claims, overrides);
+    return build("oidc", claims, overrides, provider);
 }
 //# sourceMappingURL=auth.js.map

package/dist/commonjs/auth.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/auth.ts"],"names":[],"mappings":";;;;;;AAWA,SAAS,IAAI,CAAC,KAAc,EAAsB;IAChD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAAA,CAC1E;AACD,SAAS,GAAG,CAAC,KAAc,EAAsB;IAC/C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,wFAAwF;IACxF,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACxD,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,SAAS,CAAC;AAAA,CAClB;AACD,0EAA0E;AAC1E,wEAAwE;AACxE,mFAAmF;AACnF,SAAS,OAAO,CAAC,MAAiB,EAAE,KAAa,EAAE,SAAiB,EAAwB;IAC1F,MAAM,IAAI,GAAG,MAAM;SAChB,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,MAAM,IAAI,SAAS,CAAC;SAC9G,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACnB,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AAAA,CACvC;AACD,SAAS,OAAO,CAAC,KAAc,EAAE,KAAK,GAAG,EAAE,EAAE,SAAS,GAAG,EAAE,EAAwB;IACjF,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;IACpF,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAAA,CAC5E;AACD,SAAS,gBAAgB,CAAC,KAAc,EAAE,KAAK,GAAG,EAAE,EAAE,SAAS,GAAG,EAAE,EAAwB;IAC1F,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;IACvE,OAAO,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;AAAA,CACpF;AACD,SAAS,SAAS,CAAC,KAAc,EAAwB;IACvD,OAAO,OAAO,CAAC,KAAK,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;AAAA,CAC/B;AACD,SAAS,MAAM,CAAC,KAAc,EAAuC;IACnE,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAE,KAAiC,CAAC,CAAC,CAAC,SAAS,CAAC;AAAA,CAC9H;AACD,SAAS,YAAY,CAAC,KAAc,EAAW;IAC7C,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;AAAA,CACvF;AACD,SAAS,OAAO,CAAmB,KAAQ,EAAK;IAC9C,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAAM,CAAC;AAAA,CAC1F;AAED,SAAS,IAAI,CACX,QAAgB,EAChB,MAAsB,EACtB,SAAS,GAAyB,EAAE,EACpC,OAAO,GAAkC,EAAE,EAC9B;IACb,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC7D,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC/D,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,SAAS,CAAC,gEAAgE,CAAC,CAAC;IAC/G,MAAM,eAAe,GAAG,SAAS,CAAC,SAAS,IAAI,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACxE,MAAM,OAAO,GAAgB,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;IACjG,IAAI,eAAe,EAAE,MAAM,EAAE,CAAC;QAC5B,OAAO,CAAC,SAAS,GAAG,eAAe,CAAC;QACpC,OAAO,CAAC,QAAQ,GAAG,SAAS,CAAC,QAAQ,IAAI,eAAe,CAAC,CAAC,CAAE,CAAC;IAC/D,CAAC;IACD,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACpC,IAAI,OAAO,CAAC,eAAe,KAAK,KAAK,IAAI,QAAQ;QAAE,OAAO,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC/E,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACrC,IAAI,SAAS;QAAE,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7C,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC;IAC1C,IAAI,QAAQ;QAAE,OAAO,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC1C,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACtC,IAAI,SAAS;QAAE,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACpC,IAAI,OAAO;QAAE,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC;IACvC,OAAO,EAAE,GAAG,OAAO,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;AAAA,CAC9C;AAED,yFAAyF;AACzF,oBAA2B,MAAsB,EAAE,SAAS,GAAyB,EAAE,EAAe;IACpG,MAAM,QAAQ,GAAyB;QACrC,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACtC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC;QACjD,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QACtC,YAAY,EAAE,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;KAC1C,CAAC;IACF,OAAO,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,GAAG,QAAQ,EAAE,GAAG,SAAS,EAAE,CAAC,CAAC;AAAA,CAC9D;AAED,qFAAqF;AACrF,mBAA0B,MAAsB,EAAE,SAAS,GAAyB,EAAE,EAAe;IACnG,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IAChC,MAAM,sBAAsB,GAC1B,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3I,MAAM,GAAG,GACP,sBAAsB,KAAK,SAAS,IAAI,sBAAsB,IAAI,CAAC;QACjE,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,sBAAsB,GAAG,EAAE,CAAC,EAAE;QACxE,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,QAAQ,GAAyB;QACrC,cAAc,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC3D,mDAAmD;QACnD,KAAK,EAAE,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC;QAC/E,MAAM,EAAE,gBAAgB,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,gBAAgB,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;QACrF,YAAY,EAAE,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACzC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxB,CAAC;IACF,uHAAuH;IACvH,OAAO,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,GAAG,QAAQ,EAAE,GAAG,SAAS,EAAE,EAAE,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,CAAC;AAAA,CACzF;AAED,kHAAkH;AAClH,mBAA0B,MAAsB,EAAE,SAAS,GAAyB,EAAE,EAAe;IACnG,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;IAC1C,MAAM,UAAU,GAAG,GAAG,EAAE,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,CAAC;IAC3E,MAAM,QAAQ,GAAyB;QACrC,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACtC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QAClE,aAAa,EAAE,OAAO,MAAM,CAAC,gBAAgB,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,SAAS;QACnG,aAAa,EAAE,OAAO,MAAM,CAAC,uBAAuB,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,SAAS;QACjH,YAAY,EAAE,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACzC,GAAG,CAAC,UAAU,EAAE,MAAM;YACpB,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,IAAI,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE;YAC3G,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;IACF,OAAO,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,GAAG,QAAQ,EAAE,GAAG,SAAS,EAAE,CAAC,CAAC;AAAA,CAC7D;AAED,uGAAuG;AACvG,kBAAyB,QAAgB,EAAE,MAAsB,EAAE,SAAS,GAAyB,EAAE,EAAe;IACpH,IAAI,CAAC,6BAA6B,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,4CAA4C,CAAC,CAAC;IACrH,OAAO,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;AAAA,CAC1C"}
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/auth.ts"],"names":[],"mappings":";;;;;;AAcA,iDAA2C;AAqB3C,MAAM,KAAK,GAAG,IAAI,GAAG,CACnB,MAAM,CAAC,OAAO,CAAC,wBAAS,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,OAAO,GAAG,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,SAAS,EAAE,CAAU,CAAC,CACrI,CAAC;AACF,MAAM,IAAI,GAAG,IAAI,MAAM,CAAC,MAAM,GAAG,wBAAS,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;AACxD,MAAM,SAAS,GAA2B,EAAE,UAAU,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,CAAC;AAChH,MAAM,QAAQ,GAAG,YAAY,CAAC;AAE9B,SAAS,MAAM,CAAC,KAAc,EAAoB;IAChD,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAE,KAAc,CAAC,CAAC,CAAC,SAAS,CAAC;AAAA,CAC3G;AACD,SAAS,MAAM,CAAC,MAAY,EAAE,IAAY,EAAW;IACnD,IAAI,OAAO,GAAY,MAAM,CAAC;IAC9B,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;QAC/B,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC;YAAE,OAAO,SAAS,CAAC;QAC7D,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IACD,OAAO,OAAO,CAAC;AAAA,CAChB;AACD,SAAS,OAAO,CAAC,IAAY,EAAE,KAAc,EAAmB;IAC9D,MAAM,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAE,CAAC;IAC3B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAAA,CACpF;AACD,SAAS,KAAK,CAAC,KAAa,EAAU;IACpC,OAAO,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;AAAA,CACxD;AAED,SAAS,OAAO,CAAC,MAAY,EAAE,IAAU,EAAsB;IAC7D,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACnC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,KAAK,IAAI,QAAQ,EAAE,CAAC;YAC3F,gDAAgD;YAChD,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAChF,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;IAC3C,CAAC;IACD,OAAO,SAAS,CAAC;AAAA,CAClB;AACD,SAAS,OAAO,CAAC,MAAY,EAAE,IAAU,EAAwB;IAC/D,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACnC,IAAI,KAAK,GAAc,EAAE,CAAC;QAC1B,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,KAAK,GAAG,IAAI,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,IAAI,YAAY,CAAE,CAAC,CAAC;aACxH,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,KAAK,GAAG,KAAK,CAAC;QAC7C,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAK,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QAClF,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO,IAAgB,CAAC;IAC3C,CAAC;IACD,OAAO,SAAS,CAAC;AAAA,CAClB;AACD,SAAS,OAAO,CAAC,MAAY,EAAE,IAAU,EAAW;IAClD,QAAQ,IAAI,CAAC,EAAE,EAAE,CAAC;QAChB,KAAK,IAAI;YACP,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;gBACrC,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;gBACnC,IAAI,OAAO,CAAC,IAAI,CAAC,IAAK,EAAE,KAAK,CAAC;oBAAE,OAAO,KAAK,CAAC;YAC/C,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,KAAK,MAAM;YACT,OAAO,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC/B,KAAK,MAAM;YACT,OAAO,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC/B,KAAK,MAAM;YACT,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;gBACrC,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;gBACnC,IAAI,OAAO,KAAK,KAAK,SAAS;oBAAE,OAAO,KAAK,CAAC;YAC/C,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,KAAK,OAAO,EAAE,CAAC;YACb,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,MAAO,CAAC,CAAC,CAAE,CAAC,CAAC;YAC/C,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YAC7B,IAAI,MAAM;gBAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YAChH,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;QACvD,CAAC;QACD,KAAK,gBAAgB,EAAE,CAAC;YACtB,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,KAAM,CAAC,CAAC;YAC1C,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,MAAM,OAAO,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,WAAY,CAAC,CAAC,CAAC,GAAG,CAAC;YACxE,OAAO,OAAO,IAAI,CAAC,IAAI,OAAO,IAAI,IAAI,CAAC,UAAW,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QACvH,CAAC;QACD,KAAK,aAAa,EAAE,CAAC;YACnB,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,KAAM,CAAC,CAAC;YAC1C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;gBAAE,OAAO,SAAS,CAAC;YAC5C,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAK,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAa,CAAC;YAC9F,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,MAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC3E,IAAI,CAAC,OAAO,CAAC,MAAM;gBAAE,OAAO,SAAS,CAAC;YACtC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC;QAClF,CAAC;QACD;YACE,MAAM,IAAI,KAAK,CAAC,uBAAuB,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC;IACvD,CAAC;AAAA,CACF;AAED,MAAM,KAAK,GAAG,CAAC,GAAW,EAAU,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;AACnG,MAAM,KAAK,GAAG,CAAC,GAAW,EAAU,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;AAC3F,SAAS,KAAK,CAAC,KAAc,EAAE,EAA2B,EAAW;IACnE,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1B,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAAA,CAC/H;AAED,SAAS,KAAK,CAAC,IAAY,EAAE,MAAsB,EAAE,SAA+B,EAAE,QAAgB,EAAe;IACnH,MAAM,IAAI,GAAG,wBAAS,CAAC,SAAS,CAAC,IAAwC,CAAoE,CAAC;IAC9I,MAAM,KAAK,GAAyB,EAAE,GAAI,wBAAS,CAAC,IAAwC,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;IAC/G,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,IAAI,EAAE;QAAE,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC;IAC5D,MAAM,IAAI,GAAS,EAAE,QAAQ,EAAE,GAAG,wBAAS,CAAC,SAAS,EAAE,CAAC;IACxD,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAClD,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACpC,IAAI,KAAK,KAAK,SAAS;YAAE,IAAI,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC;IAC/C,CAAC;IACD,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAS,CAAC,EAAE,CAAC;QAC7E,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;YAAE,IAAI,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC;IACjE,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC;IACpC,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC,MAAM,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,SAAS;QAAE,IAAI,CAAC,UAAU,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;IACpH,IAAI,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACrH,MAAM,IAAI,SAAS,CAAC,gEAAgE,CAAC,CAAC;IACxF,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,EAAE,KAAK,CAAgB,CAAC;AAAA,CAC1C;AAED,yFAAyF;AACzF,oBAA2B,MAAsB,EAAE,SAAS,GAAyB,EAAE,EAAe;IACpG,OAAO,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;AAAA,CACrD;AAED,qFAAqF;AACrF,mBAA0B,MAAsB,EAAE,SAAS,GAAyB,EAAE,EAAe;IACnG,OAAO,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;AAAA,CACnD;AAED,kHAAkH;AAClH,mBAA0B,MAAsB,EAAE,SAAS,GAAyB,EAAE,EAAe;IACnG,OAAO,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;AAAA,CACnD;AAED,uGAAuG;AACvG,kBAAyB,QAAgB,EAAE,MAAsB,EAAE,SAAS,GAAyB,EAAE,EAAe;IACpH,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,4CAA4C,CAAC,CAAC;IAC5H,OAAO,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;AAAA,CACnD"}

package/dist/commonjs/claim-map.d.ts

@@ -0,0 +1,182 @@
+export declare const CLAIM_MAP: {
+    readonly version: 1;
+    readonly kinds: {
+        readonly id: {
+            readonly pattern: "[A-Za-z0-9._:@/|+=~-]+";
+            readonly maxLength: 256;
+        };
+        readonly audience: {
+            readonly pattern: "[A-Za-z0-9._:/-]+";
+            readonly maxLength: 256;
+        };
+        readonly role: {
+            readonly pattern: "[A-Za-z0-9._:@/-]+";
+            readonly maxLength: 64;
+        };
+        readonly method: {
+            readonly pattern: "[A-Za-z0-9._:-]+";
+            readonly maxLength: 32;
+        };
+        readonly issuer: {
+            readonly pattern: "https://[\\x21-\\x7e]+";
+            readonly maxLength: 256;
+        };
+        readonly time: {
+            readonly pattern: "[0-9]{4}-(0[1-9]|1[0-2])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:([0-5][0-9]|60)(\\.[0-9]+)?(Z|[+-]([01][0-9]|2[0-3]):[0-5][0-9])";
+            readonly maxLength: 64;
+        };
+    };
+    readonly slug: "[a-z0-9][a-z0-9._-]{1,31}";
+    readonly constants: {
+        readonly verified: true;
+        readonly transport: "backend";
+    };
+    readonly base: {
+        readonly issuer: {
+            readonly op: "id";
+            readonly kind: "issuer";
+            readonly claims: readonly ["iss"];
+            readonly required: true;
+        };
+        readonly subject: {
+            readonly op: "id";
+            readonly kind: "id";
+            readonly claims: readonly ["sub"];
+            readonly required: true;
+        };
+        readonly audiences: {
+            readonly op: "list";
+            readonly kind: "audience";
+            readonly claims: readonly ["aud"];
+            readonly split: "whitespace";
+            readonly max: 8;
+        };
+        readonly issued_at: {
+            readonly op: "time";
+            readonly claims: readonly ["iat"];
+        };
+        readonly expires_at: {
+            readonly op: "time";
+            readonly claims: readonly ["exp"];
+        };
+        readonly auth_time: {
+            readonly op: "time";
+            readonly claims: readonly ["auth_time"];
+        };
+        readonly session_id: {
+            readonly op: "id";
+            readonly kind: "id";
+            readonly claims: readonly ["sid"];
+        };
+        readonly token_id: {
+            readonly op: "id";
+            readonly kind: "id";
+            readonly claims: readonly ["jti"];
+        };
+    };
+    readonly providers: {
+        readonly workos: {
+            readonly fields: {
+                readonly organization_id: {
+                    readonly op: "id";
+                    readonly kind: "id";
+                    readonly claims: readonly ["org_id"];
+                };
+                readonly roles: {
+                    readonly op: "list";
+                    readonly kind: "role";
+                    readonly claims: readonly ["roles", "role"];
+                    readonly split: "whitespace";
+                    readonly max: 32;
+                };
+                readonly scopes: {
+                    readonly op: "list";
+                    readonly kind: "role";
+                    readonly claims: readonly ["permissions"];
+                    readonly split: "whitespace";
+                    readonly max: 32;
+                };
+                readonly impersonated: {
+                    readonly op: "actor";
+                    readonly claims: readonly ["act"];
+                };
+            };
+        };
+        readonly clerk: {
+            readonly disable: readonly ["issued_at"];
+            readonly fields: {
+                readonly organization_id: {
+                    readonly op: "id";
+                    readonly kind: "id";
+                    readonly claims: readonly ["o.id", "org_id"];
+                };
+                readonly roles: {
+                    readonly op: "list";
+                    readonly kind: "role";
+                    readonly claims: readonly ["o.rol", "org_role"];
+                    readonly split: "none";
+                    readonly max: 32;
+                };
+                readonly scopes: {
+                    readonly op: "list";
+                    readonly kind: "role";
+                    readonly claims: readonly ["o.per", "org_permissions"];
+                    readonly split: "comma_whitespace";
+                    readonly max: 32;
+                };
+                readonly impersonated: {
+                    readonly op: "actor";
+                    readonly claims: readonly ["act"];
+                };
+                readonly mfa: {
+                    readonly op: "mfa_factor_age";
+                    readonly claim: "fva";
+                    readonly index: 1;
+                    readonly unitSeconds: 60;
+                    readonly maxSeconds: 315360000;
+                };
+            };
+        };
+        readonly auth0: {
+            readonly fields: {
+                readonly organization_id: {
+                    readonly op: "id";
+                    readonly kind: "id";
+                    readonly claims: readonly ["org_id"];
+                };
+                readonly scopes: {
+                    readonly op: "list";
+                    readonly kind: "role";
+                    readonly claims: readonly ["scope", "permissions"];
+                    readonly split: "whitespace";
+                    readonly max: 32;
+                };
+                readonly email_verified: {
+                    readonly op: "bool";
+                    readonly claims: readonly ["email_verified"];
+                };
+                readonly phone_verified: {
+                    readonly op: "bool";
+                    readonly claims: readonly ["phone_number_verified"];
+                };
+                readonly impersonated: {
+                    readonly op: "actor";
+                    readonly claims: readonly ["act"];
+                };
+                readonly mfa: {
+                    readonly op: "mfa_methods";
+                    readonly kind: "method";
+                    readonly claim: "amr";
+                    readonly max: 8;
+                    readonly mfaValue: "mfa";
+                    readonly ignore: readonly ["pwd"];
+                };
+            };
+        };
+        readonly oidc: {
+            readonly slugArgument: true;
+            readonly fields: {};
+        };
+    };
+};
+//# sourceMappingURL=claim-map.d.ts.map

package/dist/commonjs/claim-map.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claim-map.d.ts","sourceRoot":"","sources":["../../src/claim-map.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAuOZ,CAAC"}