@o3co/auth-provider-foundation 0.4.0 → 0.5.0

package/README.ja.md

@@ -1,6 +1,8 @@
 # @o3co/auth-provider-foundation
 
-auth.provider 向けの組み込みリポジトリ実装パッケージ。HTTP ベースのユーザー認証と、Redis を使った認可コードのストレージを提供する。
+auth.provider 向けの本番用 HTTP ユーザー認証アダプターパッケージ。`"http"` アダプター型を `UserRepository` ファクトリーに登録し、`authenticate` / `authenticateByToken` を上流 HTTP サービスへ委譲する。
+
+このパッケージのスコープは v0.5.0 モジュールシステムにおける **本番用の非データベース / 外部サービスアダプター** であり、v0.5.0 時点では `HttpUserRepository` のみを提供する。以前同梱されていた Redis `CodeRepository` アダプターは Phase 10 で [`@o3co/auth-provider-redis`](../redis/README.ja.md) に移管された。
 
 ## インストール
 
@@ -8,27 +10,27 @@ auth.provider 向けの組み込みリポジトリ実装パッケージ。HTTP
 npm install @o3co/auth-provider-foundation
 # peer dependency（必須）:
 npm install @o3co/auth-provider-core
-# peer dependency（任意 — RedisCodeRepository を使う場合のみ必要）:
-npm install redis
 ```
 
 ## パブリック API
 
 ### `registerBuiltinAdapters`
 
-組み込みアダプターのファクトリーを、指定されたファクトリーインスタンスに登録する。
-
-- `"http"` を `userFactory` に登録 → `HttpUserRepository` を生成
-- `"redis"` を `codeFactory` に登録 → `RedisCodeRepository` を生成
+`"http"` アダプター型を、指定された `userFactory` に登録する。
 
 ```typescript
 function registerBuiltinAdapters(factories: {
   userFactory: AdapterFactory<UserRepository>;
-  codeFactory: AdapterFactory<CodeRepository>;
-  pathResolver?: PathResolver; // 任意 — "redis" モジュールのパス解決に使用
 }): void;
 ```
 
+Redis を使った認可コードストレージが必要な場合は、`@o3co/auth-provider-redis` の builder を直接登録する:
+
+```typescript
+import { redisCodeRepositoryBuilder } from "@o3co/auth-provider-redis";
+codeFactory.register("redis", redisCodeRepositoryBuilder);
+```
+
 ### `HttpUserRepository`
 
 上流の HTTP サービスに認証処理を委譲する `UserRepository` 実装。
@@ -52,45 +54,15 @@ class HttpUserRepository implements UserRepository {
 - HTTP 401 または 403 の場合は `null` を返す。
 - その他の非 OK ステータスの場合はエラーをスローする。
 
-### `RedisCodeRepository`
-
-Redis に認可コードを保存する `CodeRepository` 実装。キーは `oauth:code:<base64url-code>` 形式で保存され、TTL を設定できる。
-
-```typescript
-class RedisCodeRepository implements CodeRepository {
-  constructor(redis: RedisClient, defaultExpiresIn?: number); // defaultExpiresIn のデフォルトは 600 秒
-
-  // ファクトリーメソッド — config から Redis クライアントを生成して接続する
-  static create(
-    config: Record<string, unknown>,
-    pathResolver?: PathResolver,
-  ): Promise<RedisCodeRepository>;
-  // config のキー:
-  //   endpointUri      (string, 必須) — Redis 接続 URI
-  //   password         (string, 任意) — Redis パスワード
-  //   defaultExpiresIn (number, 任意) — TTL（秒）、デフォルト 600
-
-  initialize(): Promise<void>;   // Redis クライアントを接続する
-  createCode(params: {
-    code_challenge?: string;
-    code_challenge_method?: string;
-    expiresIn?: number;          // このコードだけ defaultExpiresIn を上書きする
-  }): Promise<Code>;
-  getByCode(code: string): Promise<Code | null>;
-  consumeByCode(code: string): Promise<Code | null>; // アトミックな GET + DEL
-  removeByCode(code: string): Promise<void>;
-}
-```
-
 ## 使い方
 
 ```typescript
-import { createDefaultFactories } from "@o3co/auth-provider-core";
+import { createRepositoryFactories } from "@o3co/auth-provider-core";
 import { registerBuiltinAdapters } from "@o3co/auth-provider-foundation";
 
-const { userFactory, codeFactory } = createDefaultFactories();
+const { userFactory } = createRepositoryFactories();
 
-registerBuiltinAdapters({ userFactory, codeFactory });
+registerBuiltinAdapters({ userFactory });
 
 // ファクトリー経由で HTTP ユーザーリポジトリを生成
 const userRepo = await userFactory.create({
@@ -99,16 +71,10 @@ const userRepo = await userFactory.create({
   authenticateByTokenUrl: "https://users.example.com/authenticate-by-token",
   timeout: 5000,
 });
-
-// ファクトリー経由で Redis コードリポジトリを生成
-const codeRepo = await codeFactory.create({
-  type: "redis",
-  endpointUri: "redis://localhost:6379",
-  defaultExpiresIn: 300,
-});
 ```
 
 ## 関連
 
-- [`@o3co/auth-provider-core`](../core/README.md) — コアインターフェース（`UserRepository`、`CodeRepository`、`AdapterFactory`、`createAdapterFactory`、`BuilderContext`、`PathResolver`）
+- [`@o3co/auth-provider-core`](../core/README.ja.md) — コアインターフェース（`UserRepository`、`CodeRepository`、`AdapterFactory`、`createAdapterFactory`、`BuilderContext`、`PathResolver`）
+- [`@o3co/auth-provider-redis`](../redis/README.ja.md) — Redis バックエンドのアダプター群（challenges、replay-seen-set、refresh-token-family、user-sessions、federation-tokens、**code-repository**、rate-limiter）
 - [auth.provider](../../README.md) — リポジトリ全体のドキュメント

package/README.md

@@ -1,6 +1,8 @@
 # @o3co/auth-provider-foundation
 
-Built-in repository implementations for auth.provider. Provides HTTP-based user authentication and Redis-backed authorization code storage.
+Production HTTP user-authentication adapter for auth.provider. Registers the `"http"` adapter type into a `UserRepository` factory, which delegates `authenticate` / `authenticateByToken` to an upstream HTTP service.
+
+This package's scope is **production non-database / external-service adapters** for the v0.5.0 module system. As of v0.5.0 it ships exactly one such adapter (`HttpUserRepository`); the previous Redis `CodeRepository` adapter was relocated to [`@o3co/auth-provider-redis`](../redis/README.md) in Phase 10.
 
 ## Install
 
@@ -8,27 +10,27 @@ Built-in repository implementations for auth.provider. Provides HTTP-based user
 npm install @o3co/auth-provider-foundation
 # Peer dependency (required):
 npm install @o3co/auth-provider-core
-# Peer dependency (optional — required only when using RedisCodeRepository):
-npm install redis
 ```
 
 ## Public API
 
 ### `registerBuiltinAdapters`
 
-Registers the built-in adapter factories into the provided factory instances.
-
-- Registers `"http"` into `userFactory` → creates `HttpUserRepository`
-- Registers `"redis"` into `codeFactory` → creates `RedisCodeRepository`
+Registers the `"http"` adapter type into the provided `userFactory`.
 
 ```typescript
 function registerBuiltinAdapters(factories: {
   userFactory: AdapterFactory<UserRepository>;
-  codeFactory: AdapterFactory<CodeRepository>;
-  pathResolver?: PathResolver; // optional — used to resolve the "redis" module path
 }): void;
 ```
 
+For Redis-backed code storage, register the builder from `@o3co/auth-provider-redis` directly:
+
+```typescript
+import { redisCodeRepositoryBuilder } from "@o3co/auth-provider-redis";
+codeFactory.register("redis", redisCodeRepositoryBuilder);
+```
+
 ### `HttpUserRepository`
 
 A `UserRepository` implementation that delegates authentication to an upstream HTTP service.
@@ -52,45 +54,15 @@ class HttpUserRepository implements UserRepository {
 - Returns `null` on HTTP 401 or 403.
 - Throws an error on any other non-OK HTTP status.
 
-### `RedisCodeRepository`
-
-A `CodeRepository` implementation that stores authorization codes in Redis. Keys are stored as `oauth:code:<base64url-code>` with a configurable TTL.
-
-```typescript
-class RedisCodeRepository implements CodeRepository {
-  constructor(redis: RedisClient, defaultExpiresIn?: number); // defaultExpiresIn defaults to 600 seconds
-
-  // Factory method — creates and connects a Redis client from config
-  static create(
-    config: Record<string, unknown>,
-    pathResolver?: PathResolver,
-  ): Promise<RedisCodeRepository>;
-  // config keys:
-  //   endpointUri (string, required) — Redis connection URI
-  //   password    (string, optional) — Redis password
-  //   defaultExpiresIn (number, optional) — TTL in seconds, default 600
-
-  initialize(): Promise<void>;   // connects the Redis client
-  createCode(params: {
-    code_challenge?: string;
-    code_challenge_method?: string;
-    expiresIn?: number;          // overrides defaultExpiresIn for this code
-  }): Promise<Code>;
-  getByCode(code: string): Promise<Code | null>;
-  consumeByCode(code: string): Promise<Code | null>; // atomic GET + DEL
-  removeByCode(code: string): Promise<void>;
-}
-```
-
 ## Usage Example
 
 ```typescript
-import { createDefaultFactories } from "@o3co/auth-provider-core";
+import { createRepositoryFactories } from "@o3co/auth-provider-core";
 import { registerBuiltinAdapters } from "@o3co/auth-provider-foundation";
 
-const { userFactory, codeFactory } = createDefaultFactories();
+const { userFactory } = createRepositoryFactories();
 
-registerBuiltinAdapters({ userFactory, codeFactory });
+registerBuiltinAdapters({ userFactory });
 
 // Create an HTTP user repository via the factory
 const userRepo = await userFactory.create({
@@ -99,16 +71,10 @@ const userRepo = await userFactory.create({
   authenticateByTokenUrl: "https://users.example.com/authenticate-by-token",
   timeout: 5000,
 });
-
-// Create a Redis code repository via the factory
-const codeRepo = await codeFactory.create({
-  type: "redis",
-  endpointUri: "redis://localhost:6379",
-  defaultExpiresIn: 300,
-});
 ```
 
 ## See Also
 
 - [`@o3co/auth-provider-core`](../core/README.md) — Core interfaces (`UserRepository`, `CodeRepository`, `AdapterFactory`, `createAdapterFactory`, `BuilderContext`, `PathResolver`)
+- [`@o3co/auth-provider-redis`](../redis/README.md) — Redis-backed adapters (challenges, replay-seen-set, refresh-token-family, user-sessions, federation-tokens, **code-repository**, rate-limiter)
 - [auth.provider](../../README.md) — Top-level repository documentation

package/dist/index.d.mts

@@ -1,9 +1,6 @@
-import type { AdapterFactory, CodeRepository, PathResolver, UserRepository } from "@o3co/auth-provider-core";
+import type { AdapterFactory, UserRepository } from "@o3co/auth-provider-core";
 export declare const registerBuiltinAdapters: (factories: {
     userFactory: AdapterFactory<UserRepository>;
-    codeFactory: AdapterFactory<CodeRepository>;
-    pathResolver?: PathResolver;
 }) => void;
 export { HttpUserRepository } from "./repositories/HttpUserRepository.mjs";
-export { RedisCodeRepository } from "./repositories/RedisCodeRepository.mjs";
 //# sourceMappingURL=index.d.mts.map

package/dist/index.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.mts","sourceRoot":"","sources":["../src/index.mts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EACX,cAAc,EACd,cAAc,EACd,YAAY,EACZ,cAAc,EACd,MAAM,0BAA0B,CAAC;AAIlC,eAAO,MAAM,uBAAuB,GAAI,WAAW;IAClD,WAAW,EAAE,cAAc,CAAC,cAAc,CAAC,CAAC;IAC5C,WAAW,EAAE,cAAc,CAAC,cAAc,CAAC,CAAC;IAC5C,YAAY,CAAC,EAAE,YAAY,CAAC;CAC5B,KAAG,IAiCH,CAAC;AAEF,OAAO,EAAE,kBAAkB,EAAE,MAAM,uCAAuC,CAAC;AAC3E,OAAO,EAAE,mBAAmB,EAAE,MAAM,wCAAwC,CAAC"}
+{"version":3,"file":"index.d.mts","sourceRoot":"","sources":["../src/index.mts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAG/E,eAAO,MAAM,uBAAuB,GAAI,WAAW;IAClD,WAAW,EAAE,cAAc,CAAC,cAAc,CAAC,CAAC;CAC5C,KAAG,IAyBH,CAAC;AAEF,OAAO,EAAE,kBAAkB,EAAE,MAAM,uCAAuC,CAAC"}

package/dist/index.mjs

@@ -14,9 +14,7 @@
  * limitations under the License.
  */
 import { HttpUserRepository } from "./repositories/HttpUserRepository.mjs";
-import { RedisCodeRepository } from "./repositories/RedisCodeRepository.mjs";
 export const registerBuiltinAdapters = (factories) => {
-    const { pathResolver } = factories;
     factories.userFactory.register("http", (config) => {
         if (typeof config.authenticateUrl !== "string") {
             throw new Error('HttpUserRepository requires "authenticateUrl" in config');
@@ -41,12 +39,5 @@ export const registerBuiltinAdapters = (factories) => {
             })(),
         });
     });
-    factories.codeFactory.register("redis", (config) => {
-        if (typeof config.endpointUri !== "string") {
-            throw new Error('RedisCodeRepository requires "endpointUri" in config');
-        }
-        return RedisCodeRepository.create(config, pathResolver);
-    });
 };
 export { HttpUserRepository } from "./repositories/HttpUserRepository.mjs";
-export { RedisCodeRepository } from "./repositories/RedisCodeRepository.mjs";

package/dist/repositories/__tests__/registerBuiltinAdapters.test.mjs

@@ -39,8 +39,7 @@ afterAll(() => server.close());
 describe("registerBuiltinAdapters", () => {
     it("registers 'http' type in userFactory", async () => {
         const userFactory = createAdapterFactory("UserRepository");
-        const codeFactory = createAdapterFactory("CodeRepository");
-        registerBuiltinAdapters({ userFactory, codeFactory });
+        registerBuiltinAdapters({ userFactory });
         try {
             await userFactory.create({ type: "unknown" });
             throw new Error("should have thrown");
@@ -53,26 +52,9 @@ describe("registerBuiltinAdapters", () => {
             expect(e.registered).toContain("http");
         }
     });
-    it("registers 'redis' type in codeFactory", async () => {
-        const userFactory = createAdapterFactory("UserRepository");
-        const codeFactory = createAdapterFactory("CodeRepository");
-        registerBuiltinAdapters({ userFactory, codeFactory });
-        try {
-            await codeFactory.create({ type: "unknown" });
-            throw new Error("should have thrown");
-        }
-        catch (err) {
-            expect(err).toBeInstanceOf(AdapterFactoryError);
-            const e = err;
-            expect(e.reason).toBe("unknown");
-            expect(e.kind).toBe("CodeRepository");
-            expect(e.registered).toContain("redis");
-        }
-    });
     it("http builder creates a working HttpUserRepository", async () => {
         const userFactory = createAdapterFactory("UserRepository");
-        const codeFactory = createAdapterFactory("CodeRepository");
-        registerBuiltinAdapters({ userFactory, codeFactory });
+        registerBuiltinAdapters({ userFactory });
         const repo = await userFactory.create({
             type: "http",
             authenticateUrl: `${BASE_URL}/auth`,
@@ -89,8 +71,7 @@ describe("registerBuiltinAdapters", () => {
     });
     it("http builder coerces string timeout to number (env-override path)", async () => {
         const userFactory = createAdapterFactory("UserRepository");
-        const codeFactory = createAdapterFactory("CodeRepository");
-        registerBuiltinAdapters({ userFactory, codeFactory });
+        registerBuiltinAdapters({ userFactory });
         const repo = await userFactory.create({
             type: "http",
             authenticateUrl: `${BASE_URL}/auth`,
@@ -105,14 +86,7 @@ describe("registerBuiltinAdapters", () => {
     });
     it("http builder throws when authenticateUrl is missing", async () => {
         const userFactory = createAdapterFactory("UserRepository");
-        const codeFactory = createAdapterFactory("CodeRepository");
-        registerBuiltinAdapters({ userFactory, codeFactory });
+        registerBuiltinAdapters({ userFactory });
         await expect(userFactory.create({ type: "http", timeout: 5000 })).rejects.toThrow(/authenticateUrl/);
     });
-    it("redis builder throws when endpointUri is missing", async () => {
-        const userFactory = createAdapterFactory("UserRepository");
-        const codeFactory = createAdapterFactory("CodeRepository");
-        registerBuiltinAdapters({ userFactory, codeFactory });
-        await expect(codeFactory.create({ type: "redis" })).rejects.toThrow(/endpointUri/);
-    });
 });

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@o3co/auth-provider-foundation",
-  "description": "Production adapters for auth.provider",
-  "version": "0.4.0",
+  "description": "Production HTTP user-authentication adapter for auth.provider",
+  "version": "0.5.0",
   "license": "Apache-2.0",
   "type": "module",
   "main": "./dist/index.mjs",
@@ -29,25 +29,20 @@
     }
   },
   "peerDependencies": {
-    "@o3co/auth-provider-core": "^0.0.0",
-    "redis": "^5.10.0"
-  },
-  "peerDependenciesMeta": {
-    "redis": {
-      "optional": true
-    }
+    "@o3co/auth-provider-core": "^0.0.0"
   },
   "devDependencies": {
     "@types/node": "^25.1.0",
     "msw": "^2.12.14",
-    "redis": "^5.10.0",
     "pino": "^10.3.1",
     "vitest": "^4.1.2",
-    "@o3co/auth-provider-core": "0.4.0"
+    "@vitest/coverage-v8": "^4.1.2",
+    "@o3co/auth-provider-core": "0.5.0"
   },
   "scripts": {
     "prebuild": "rimraf dist",
     "build": "tsc",
-    "test": "vitest run"
+    "test": "vitest run",
+    "test:coverage": "vitest run --coverage"
   }
 }

package/dist/repositories/RedisCodeRepository.d.mts

@@ -1,28 +0,0 @@
-import type { Code, CodeRepository, PathResolver } from "@o3co/auth-provider-core";
-interface RedisClient {
-    connect(): Promise<void>;
-    get(key: string): Promise<string | null>;
-    set(key: string, value: string, options?: {
-        EX?: number;
-    }): Promise<unknown>;
-    getDel(key: string): Promise<string | null>;
-    del(key: string): Promise<number>;
-}
-export declare class RedisCodeRepository implements CodeRepository {
-    private redis;
-    private defaultExpiresIn;
-    constructor(redis: RedisClient, defaultExpiresIn?: number);
-    static create(config: Record<string, unknown>, pathResolver?: PathResolver): Promise<RedisCodeRepository>;
-    initialize(): Promise<void>;
-    createCode({ code_challenge, code_challenge_method, expiresIn, }: {
-        code_challenge?: string;
-        code_challenge_method?: string;
-        expiresIn?: number;
-    }): Promise<Code>;
-    getByCode(code: string): Promise<Code | null>;
-    consumeByCode(code: string): Promise<Code | null>;
-    removeByCode(code: string): Promise<void>;
-    private parseCodeValue;
-}
-export {};
-//# sourceMappingURL=RedisCodeRepository.d.mts.map

package/dist/repositories/RedisCodeRepository.d.mts.map

@@ -1 +0,0 @@
-{"version":3,"file":"RedisCodeRepository.d.mts","sourceRoot":"","sources":["../../src/repositories/RedisCodeRepository.mts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAMnF,UAAU,WAAW;IACpB,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACzB,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACzC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,EAAE,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC7E,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC5C,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CAClC;AAED,qBAAa,mBAAoB,YAAW,cAAc;IACzD,OAAO,CAAC,KAAK,CAAc;IAC3B,OAAO,CAAC,gBAAgB,CAAS;gBAErB,KAAK,EAAE,WAAW,EAAE,gBAAgB,SAAM;WAKzC,MAAM,CAClB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,YAAY,CAAC,EAAE,YAAY,GACzB,OAAO,CAAC,mBAAmB,CAAC;IA2BzB,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAI3B,UAAU,CAAC,EAChB,cAAc,EACd,qBAAqB,EACrB,SAAiC,GACjC,EAAE;QACF,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,qBAAqB,CAAC,EAAE,MAAM,CAAC;QAC/B,SAAS,CAAC,EAAE,MAAM,CAAC;KACnB,GAAG,OAAO,CAAC,IAAI,CAAC;IAYX,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IAK7C,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IAKjD,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI/C,OAAO,CAAC,cAAc;CAUtB"}

package/dist/repositories/RedisCodeRepository.mjs

@@ -1,79 +0,0 @@
-/*
- * Copyright 2026 1o1 Co. Ltd.
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- *     http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */
-import crypto from "node:crypto";
-const KEY_PREFIX = "oauth:code:";
-export class RedisCodeRepository {
-    redis;
-    defaultExpiresIn;
-    constructor(redis, defaultExpiresIn = 600) {
-        this.redis = redis;
-        this.defaultExpiresIn = defaultExpiresIn;
-    }
-    static async create(config, pathResolver) {
-        if (typeof config.endpointUri !== "string") {
-            throw new Error('RedisCodeRepository requires "endpointUri" in config');
-        }
-        const { createClient } = pathResolver
-            ? (await import(pathResolver("redis")))
-            : await import("redis");
-        const redis = createClient({
-            url: config.endpointUri,
-            password: typeof config.password === "string" ? config.password : undefined,
-            socket: {
-                reconnectStrategy: (retries) => {
-                    const jitter = Math.floor(Math.random() * 200);
-                    const delay = Math.min(2 ** retries * 50, 2000);
-                    return delay + jitter;
-                },
-            },
-        });
-        const defaultExpiresIn = typeof config.defaultExpiresIn === "number" ? config.defaultExpiresIn : undefined;
-        const repo = new RedisCodeRepository(redis, defaultExpiresIn);
-        await repo.initialize();
-        return repo;
-    }
-    async initialize() {
-        await this.redis.connect();
-    }
-    async createCode({ code_challenge, code_challenge_method, expiresIn = this.defaultExpiresIn, }) {
-        const code = crypto.randomBytes(32).toString("base64url");
-        await this.redis.set(KEY_PREFIX + code, JSON.stringify({ code_challenge, code_challenge_method }), { EX: expiresIn });
-        return { code, code_challenge, code_challenge_method, expiresIn };
-    }
-    async getByCode(code) {
-        const value = await this.redis.get(KEY_PREFIX + code);
-        return this.parseCodeValue(code, value);
-    }
-    async consumeByCode(code) {
-        const value = await this.redis.getDel(KEY_PREFIX + code);
-        return this.parseCodeValue(code, value);
-    }
-    async removeByCode(code) {
-        await this.redis.del(KEY_PREFIX + code);
-    }
-    parseCodeValue(code, value) {
-        if (!value)
-            return null;
-        try {
-            return { ...JSON.parse(value), code };
-        }
-        catch (err) {
-            const codeHash = crypto.createHash("sha256").update(code).digest("hex").slice(0, 16);
-            console.error(`RedisCodeRepository: corrupted data for code (hash=${codeHash})`, err);
-            return null;
-        }
-    }
-}

package/dist/repositories/__tests__/RedisCodeRepository.test.d.mts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=RedisCodeRepository.test.d.mts.map

package/dist/repositories/__tests__/RedisCodeRepository.test.d.mts.map

@@ -1 +0,0 @@
-{"version":3,"file":"RedisCodeRepository.test.d.mts","sourceRoot":"","sources":["../../../src/repositories/__tests__/RedisCodeRepository.test.mts"],"names":[],"mappings":""}

package/dist/repositories/__tests__/RedisCodeRepository.test.mjs

@@ -1,141 +0,0 @@
-/*
- * Copyright 2026 1o1 Co. Ltd.
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- *     http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */
-import { beforeEach, describe, expect, it, vi } from "vitest";
-const KEY_PREFIX = "oauth:code:";
-// In-memory store simulating Redis
-const store = new Map();
-import { RedisCodeRepository } from "../RedisCodeRepository.mjs";
-const createMockRedis = () => ({
-    connect: vi.fn().mockResolvedValue(undefined),
-    set: vi.fn().mockImplementation((key, value) => {
-        store.set(key, value);
-        return Promise.resolve("OK");
-    }),
-    get: vi.fn().mockImplementation((key) => {
-        return Promise.resolve(store.get(key) ?? null);
-    }),
-    getDel: vi.fn().mockImplementation((key) => {
-        const value = store.get(key) ?? null;
-        store.delete(key);
-        return Promise.resolve(value);
-    }),
-    del: vi.fn().mockImplementation((key) => {
-        store.delete(key);
-        return Promise.resolve(1);
-    }),
-});
-describe("RedisCodeRepository", () => {
-    let repo;
-    beforeEach(async () => {
-        store.clear();
-        const redis = createMockRedis();
-        repo = new RedisCodeRepository(redis);
-        await repo.initialize();
-    });
-    describe("createCode", () => {
-        it("generates a code string and stores it", async () => {
-            const result = await repo.createCode({});
-            expect(typeof result.code).toBe("string");
-            expect(result.code.length).toBeGreaterThan(0);
-            // Verify it was stored with namespace prefix
-            expect(store.has(`${KEY_PREFIX}${result.code}`)).toBe(true);
-        });
-        it("returns code with code_challenge and code_challenge_method", async () => {
-            const result = await repo.createCode({
-                code_challenge: "abc123",
-                code_challenge_method: "S256",
-            });
-            expect(result.code_challenge).toBe("abc123");
-            expect(result.code_challenge_method).toBe("S256");
-        });
-        it("stores code_challenge and code_challenge_method in Redis", async () => {
-            const result = await repo.createCode({
-                code_challenge: "challenge-value",
-                code_challenge_method: "S256",
-            });
-            const stored = store.get(`${KEY_PREFIX}${result.code}`);
-            expect(stored).toBeDefined();
-            const parsed = JSON.parse(stored);
-            expect(parsed.code_challenge).toBe("challenge-value");
-            expect(parsed.code_challenge_method).toBe("S256");
-        });
-        it("uses default expiresIn when not provided", async () => {
-            const result = await repo.createCode({});
-            expect(result.expiresIn).toBe(600);
-        });
-        it("uses provided expiresIn", async () => {
-            const result = await repo.createCode({ expiresIn: 300 });
-            expect(result.expiresIn).toBe(300);
-        });
-    });
-    describe("getByCode", () => {
-        it("returns stored code data", async () => {
-            const created = await repo.createCode({
-                code_challenge: "test-challenge",
-                code_challenge_method: "S256",
-            });
-            const found = await repo.getByCode(created.code);
-            expect(found).not.toBeNull();
-            expect(found?.code).toBe(created.code);
-            expect(found?.code_challenge).toBe("test-challenge");
-            expect(found?.code_challenge_method).toBe("S256");
-        });
-        it("returns null for unknown code", async () => {
-            const result = await repo.getByCode("nonexistent-code");
-            expect(result).toBeNull();
-        });
-        it("returns null for corrupted data", async () => {
-            store.set(`${KEY_PREFIX}corrupted`, "not-valid-json{{{");
-            const result = await repo.getByCode("corrupted");
-            expect(result).toBeNull();
-        });
-    });
-    describe("consumeByCode", () => {
-        it("returns code data and removes it atomically", async () => {
-            const created = await repo.createCode({
-                code_challenge: "consume-test",
-                code_challenge_method: "S256",
-            });
-            const consumed = await repo.consumeByCode(created.code);
-            expect(consumed).not.toBeNull();
-            expect(consumed?.code).toBe(created.code);
-            expect(consumed?.code_challenge).toBe("consume-test");
-            // Should be gone from store
-            expect(store.has(`${KEY_PREFIX}${created.code}`)).toBe(false);
-        });
-        it("returns null for unknown code", async () => {
-            expect(await repo.consumeByCode("nonexistent")).toBeNull();
-        });
-        it("second consume returns null (replay prevention)", async () => {
-            const created = await repo.createCode({});
-            const first = await repo.consumeByCode(created.code);
-            expect(first).not.toBeNull();
-            const second = await repo.consumeByCode(created.code);
-            expect(second).toBeNull();
-        });
-    });
-    describe("removeByCode", () => {
-        it("removes a stored code", async () => {
-            const created = await repo.createCode({ code_challenge: "c" });
-            expect(store.has(`${KEY_PREFIX}${created.code}`)).toBe(true);
-            await repo.removeByCode(created.code);
-            expect(store.has(`${KEY_PREFIX}${created.code}`)).toBe(false);
-        });
-        it("does not throw for unknown code", async () => {
-            await expect(repo.removeByCode("nonexistent")).resolves.toBeUndefined();
-        });
-    });
-});