@oneunit/auth 2.0.0

package/dist/errors.js

@@ -0,0 +1,65 @@
+export class AuthError extends Error {
+    name;
+    code;
+    status;
+    cause;
+    constructor(message, { code = "AUTH_ERROR", status = 401, cause } = {}) {
+        super(message);
+        this.name = this.constructor.name;
+        this.code = code;
+        this.status = status;
+        if (cause !== undefined) {
+            this.cause = cause;
+        }
+        Error.captureStackTrace?.(this, this.constructor);
+    }
+    toJSON() {
+        return {
+            name: this.name,
+            message: this.message,
+            code: this.code,
+            status: this.status,
+        };
+    }
+}
+export class InvalidTokenError extends AuthError {
+    constructor(message = "Invalid or expired token", options = {}) {
+        super(message, { code: "INVALID_TOKEN", status: 401, ...options });
+    }
+}
+export class TokenExpiredError extends AuthError {
+    constructor(message = "Token has expired", options = {}) {
+        super(message, { code: "TOKEN_EXPIRED", status: 401, ...options });
+    }
+}
+export class UnauthorizedError extends AuthError {
+    constructor(message = "Unauthorized", options = {}) {
+        super(message, { code: "UNAUTHORIZED", status: 401, ...options });
+    }
+}
+export class ForbiddenError extends AuthError {
+    constructor(message = "Forbidden", options = {}) {
+        super(message, { code: "FORBIDDEN", status: 403, ...options });
+    }
+}
+export class ConfigurationError extends AuthError {
+    constructor(message = "Invalid authentication configuration", options = {}) {
+        super(message, { code: "CONFIGURATION_ERROR", status: 500, ...options });
+    }
+}
+export class OAuthError extends AuthError {
+    constructor(message = "OAuth authentication failed", options = {}) {
+        super(message, { code: "OAUTH_ERROR", status: 401, ...options });
+    }
+}
+export class ProviderError extends AuthError {
+    constructor(message = "Identity provider error", options = {}) {
+        super(message, { code: "PROVIDER_ERROR", status: 502, ...options });
+    }
+}
+export class ValidationError extends AuthError {
+    constructor(message = "Validation failed", options = {}) {
+        super(message, { code: "VALIDATION_ERROR", status: 400, ...options });
+    }
+}
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAEA,MAAM,OAAO,SAAU,SAAQ,KAAK;IAChB,IAAI,CAAS;IACtB,IAAI,CAAS;IACb,MAAM,CAAS;IACN,KAAK,CAAW;IAElC,YAAY,OAAe,EAAE,EAAE,IAAI,GAAG,YAAY,EAAE,MAAM,GAAG,GAAG,EAAE,KAAK,KAAuB,EAAE;QAC9F,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;QAClC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACrB,CAAC;QACD,KAAK,CAAC,iBAAiB,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;IACpD,CAAC;IAED,MAAM;QACJ,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC;IACJ,CAAC;CACF;AAED,MAAM,OAAO,iBAAkB,SAAQ,SAAS;IAC9C,YAAY,OAAO,GAAG,0BAA0B,EAAE,UAA4B,EAAE;QAC9E,KAAK,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;IACrE,CAAC;CACF;AAED,MAAM,OAAO,iBAAkB,SAAQ,SAAS;IAC9C,YAAY,OAAO,GAAG,mBAAmB,EAAE,UAA4B,EAAE;QACvE,KAAK,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;IACrE,CAAC;CACF;AAED,MAAM,OAAO,iBAAkB,SAAQ,SAAS;IAC9C,YAAY,OAAO,GAAG,cAAc,EAAE,UAA4B,EAAE;QAClE,KAAK,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;IACpE,CAAC;CACF;AAED,MAAM,OAAO,cAAe,SAAQ,SAAS;IAC3C,YAAY,OAAO,GAAG,WAAW,EAAE,UAA4B,EAAE;QAC/D,KAAK,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;IACjE,CAAC;CACF;AAED,MAAM,OAAO,kBAAmB,SAAQ,SAAS;IAC/C,YAAY,OAAO,GAAG,sCAAsC,EAAE,UAA4B,EAAE;QAC1F,KAAK,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,qBAAqB,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;IAC3E,CAAC;CACF;AAED,MAAM,OAAO,UAAW,SAAQ,SAAS;IACvC,YAAY,OAAO,GAAG,6BAA6B,EAAE,UAA4B,EAAE;QACjF,KAAK,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;IACnE,CAAC;CACF;AAED,MAAM,OAAO,aAAc,SAAQ,SAAS;IAC1C,YAAY,OAAO,GAAG,yBAAyB,EAAE,UAA4B,EAAE;QAC7E,KAAK,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;IACtE,CAAC;CACF;AAED,MAAM,OAAO,eAAgB,SAAQ,SAAS;IAC5C,YAAY,OAAO,GAAG,mBAAmB,EAAE,UAA4B,EAAE;QACvE,KAAK,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;IACxE,CAAC;CACF"}

package/dist/index.d.ts

@@ -0,0 +1,11 @@
+export { AuthError, InvalidTokenError, TokenExpiredError, UnauthorizedError, ForbiddenError, ConfigurationError, OAuthError, ProviderError, ValidationError, } from "./errors.js";
+export { encode, decode, decodeUnsafe, encodeAccessToken, encodeRefreshToken, } from "./jwt.js";
+export { RBAC, createRBAC, defineRoles, matchPermission, } from "./rbac.js";
+export { hashPassword, verifyPassword, needsRehash, } from "./password.js";
+export { OAuth, createOAuth, createMemoryStateStore, } from "./oauth.js";
+export { createProvider, getProvider, builtinProviders, pkceVerifier, pkceChallenge, google, github, instagram, facebook, twitter, discord, apple, linkedin, microsoft, reddit, twitch, slack, spotify, tiktok, } from "./providers.js";
+export { Auth, auth, createAuth, createMemoryRefreshStore, } from "./auth.js";
+export { expressAdapter, fastifyAdapter, koaAdapter, uwsAdapter, snapshotUwsRequest, createAdapters, } from "./adapters.js";
+export { parseExpiresIn, isValidExpiresIn, randomToken, randomState, extractBearerToken, } from "./utils.js";
+export type { AuthErrorOptions, JwtSignOptions, JwtVerifyOptions, JwtPayload, Secret, RoleDefinition, RBACOptions, AuthSubject, PasswordOptions, OAuthProfile, OAuthTokens, OAuthProviderConfig, OAuthProvider, ProviderDefinition, StateStore, OAuthOptions, OAuthAuthorizeOptions, UserRecord, UserStore, RefreshRecord, RefreshStore, LoginOptions, LoginResult, AuthOptions, RequestLike, ExtractTokenOptions, UwsHttpResponse, UwsHttpRequest, UwsRequestSnapshot, UwsHandler, ExpressRequestLike, ExpressResponseLike, ExpressNext, KoaContextLike, FastifyLike, FastifyRequestLike, FastifyReplyLike, } from "./types.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,SAAS,EACT,iBAAiB,EACjB,iBAAiB,EACjB,iBAAiB,EACjB,cAAc,EACd,kBAAkB,EAClB,UAAU,EACV,aAAa,EACb,eAAe,GAChB,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,MAAM,EACN,MAAM,EACN,YAAY,EACZ,iBAAiB,EACjB,kBAAkB,GACnB,MAAM,UAAU,CAAC;AAElB,OAAO,EACL,IAAI,EACJ,UAAU,EACV,WAAW,EACX,eAAe,GAChB,MAAM,WAAW,CAAC;AAEnB,OAAO,EACL,YAAY,EACZ,cAAc,EACd,WAAW,GACZ,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,KAAK,EACL,WAAW,EACX,sBAAsB,GACvB,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,cAAc,EACd,WAAW,EACX,gBAAgB,EAChB,YAAY,EACZ,aAAa,EACb,MAAM,EACN,MAAM,EACN,SAAS,EACT,QAAQ,EACR,OAAO,EACP,OAAO,EACP,KAAK,EACL,QAAQ,EACR,SAAS,EACT,MAAM,EACN,MAAM,EACN,KAAK,EACL,OAAO,EACP,MAAM,GACP,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,IAAI,EACJ,IAAI,EACJ,UAAU,EACV,wBAAwB,GACzB,MAAM,WAAW,CAAC;AAEnB,OAAO,EACL,cAAc,EACd,cAAc,EACd,UAAU,EACV,UAAU,EACV,kBAAkB,EAClB,cAAc,GACf,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,WAAW,EACX,WAAW,EACX,kBAAkB,GACnB,MAAM,YAAY,CAAC;AAEpB,YAAY,EACV,gBAAgB,EAChB,cAAc,EACd,gBAAgB,EAChB,UAAU,EACV,MAAM,EACN,cAAc,EACd,WAAW,EACX,WAAW,EACX,eAAe,EACf,YAAY,EACZ,WAAW,EACX,mBAAmB,EACnB,aAAa,EACb,kBAAkB,EAClB,UAAU,EACV,YAAY,EACZ,qBAAqB,EACrB,UAAU,EACV,SAAS,EACT,aAAa,EACb,YAAY,EACZ,YAAY,EACZ,WAAW,EACX,WAAW,EACX,WAAW,EACX,mBAAmB,EACnB,eAAe,EACf,cAAc,EACd,kBAAkB,EAClB,UAAU,EACV,kBAAkB,EAClB,mBAAmB,EACnB,WAAW,EACX,cAAc,EACd,WAAW,EACX,kBAAkB,EAClB,gBAAgB,GACjB,MAAM,YAAY,CAAC"}

package/dist/index.js

@@ -0,0 +1,10 @@
+export { AuthError, InvalidTokenError, TokenExpiredError, UnauthorizedError, ForbiddenError, ConfigurationError, OAuthError, ProviderError, ValidationError, } from "./errors.js";
+export { encode, decode, decodeUnsafe, encodeAccessToken, encodeRefreshToken, } from "./jwt.js";
+export { RBAC, createRBAC, defineRoles, matchPermission, } from "./rbac.js";
+export { hashPassword, verifyPassword, needsRehash, } from "./password.js";
+export { OAuth, createOAuth, createMemoryStateStore, } from "./oauth.js";
+export { createProvider, getProvider, builtinProviders, pkceVerifier, pkceChallenge, google, github, instagram, facebook, twitter, discord, apple, linkedin, microsoft, reddit, twitch, slack, spotify, tiktok, } from "./providers.js";
+export { Auth, auth, createAuth, createMemoryRefreshStore, } from "./auth.js";
+export { expressAdapter, fastifyAdapter, koaAdapter, uwsAdapter, snapshotUwsRequest, createAdapters, } from "./adapters.js";
+export { parseExpiresIn, isValidExpiresIn, randomToken, randomState, extractBearerToken, } from "./utils.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,SAAS,EACT,iBAAiB,EACjB,iBAAiB,EACjB,iBAAiB,EACjB,cAAc,EACd,kBAAkB,EAClB,UAAU,EACV,aAAa,EACb,eAAe,GAChB,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,MAAM,EACN,MAAM,EACN,YAAY,EACZ,iBAAiB,EACjB,kBAAkB,GACnB,MAAM,UAAU,CAAC;AAElB,OAAO,EACL,IAAI,EACJ,UAAU,EACV,WAAW,EACX,eAAe,GAChB,MAAM,WAAW,CAAC;AAEnB,OAAO,EACL,YAAY,EACZ,cAAc,EACd,WAAW,GACZ,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,KAAK,EACL,WAAW,EACX,sBAAsB,GACvB,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,cAAc,EACd,WAAW,EACX,gBAAgB,EAChB,YAAY,EACZ,aAAa,EACb,MAAM,EACN,MAAM,EACN,SAAS,EACT,QAAQ,EACR,OAAO,EACP,OAAO,EACP,KAAK,EACL,QAAQ,EACR,SAAS,EACT,MAAM,EACN,MAAM,EACN,KAAK,EACL,OAAO,EACP,MAAM,GACP,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,IAAI,EACJ,IAAI,EACJ,UAAU,EACV,wBAAwB,GACzB,MAAM,WAAW,CAAC;AAEnB,OAAO,EACL,cAAc,EACd,cAAc,EACd,UAAU,EACV,UAAU,EACV,kBAAkB,EAClB,cAAc,GACf,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,WAAW,EACX,WAAW,EACX,kBAAkB,GACnB,MAAM,YAAY,CAAC"}

package/dist/jwt.d.ts

@@ -0,0 +1,11 @@
+import jwt from "jsonwebtoken";
+import type { JwtPayload, JwtSignOptions, JwtVerifyOptions, Secret } from "./types.js";
+export declare function encode(payload: object | undefined, secret: Secret, options?: JwtSignOptions): string;
+export declare function decode(token: string, secret: Secret, options?: JwtVerifyOptions): JwtPayload;
+export declare function decodeUnsafe(token: string, options?: {
+    complete?: boolean;
+}): unknown;
+export declare function encodeAccessToken(payload: object, secret: Secret, options?: JwtSignOptions): string;
+export declare function encodeRefreshToken(payload: object, secret: Secret, options?: JwtSignOptions): string;
+export { jwt };
+//# sourceMappingURL=jwt.d.ts.map

package/dist/jwt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt.d.ts","sourceRoot":"","sources":["../src/jwt.ts"],"names":[],"mappings":"AAAA,OAAO,GAAG,MAAM,cAAc,CAAC;AAG/B,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAqDvF,wBAAgB,MAAM,CAAC,OAAO,EAAE,MAAM,YAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAE,cAAmB,GAAG,MAAM,CAwBjG;AAED,wBAAgB,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAE,gBAAqB,GAAG,UAAU,CAmChG;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,GAAE;IAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,OAAO,CAKzF;AAkBD,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAE,cAAmB,GAAG,MAAM,CAMvG;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAE,cAAmB,GAAG,MAAM,CAMxG;AAED,OAAO,EAAE,GAAG,EAAE,CAAC"}

package/dist/jwt.js

@@ -0,0 +1,125 @@
+import jwt from "jsonwebtoken";
+import { AuthError, InvalidTokenError, TokenExpiredError, ValidationError } from "./errors.js";
+import { isValidExpiresIn, parseExpiresIn } from "./utils.js";
+const DEFAULT_ALGORITHM = "HS256";
+const DEFAULT_EXPIRES_IN = 60 * 60 * 24;
+function normalizeSecret(secret) {
+    if (typeof secret === "string" && secret.length > 0) {
+        return secret;
+    }
+    if (Buffer.isBuffer(secret) && secret.length > 0) {
+        return secret;
+    }
+    throw new ValidationError("A non-empty secret is required to sign or verify tokens");
+}
+function signOptions({ expiresIn, subject, audience, issuer, jwtid, notBefore, header, algorithm = DEFAULT_ALGORITHM, keyid, } = {}) {
+    const options = { algorithm: algorithm };
+    if (expiresIn !== undefined && expiresIn !== null) {
+        // Resolve the TTL here so an unparsable value fails loudly instead of being
+        // silently defaulted by parseExpiresIn while jsonwebtoken rejects it later.
+        if (!isValidExpiresIn(expiresIn)) {
+            throw new ValidationError(`Invalid expiresIn: ${JSON.stringify(expiresIn)}. Use seconds or a timespan like "15m", "7d".`);
+        }
+        options.expiresIn = (typeof expiresIn === "number"
+            ? parseExpiresIn(expiresIn)
+            : expiresIn);
+    }
+    if (subject !== undefined)
+        options.subject = String(subject);
+    if (audience !== undefined)
+        options.audience = audience;
+    if (issuer !== undefined)
+        options.issuer = issuer;
+    if (jwtid !== undefined)
+        options.jwtid = jwtid;
+    if (notBefore !== undefined)
+        options.notBefore = notBefore;
+    if (keyid !== undefined)
+        options.keyid = keyid;
+    if (header !== undefined)
+        options.header = header;
+    return options;
+}
+export function encode(payload = {}, secret, options = {}) {
+    if (!payload || typeof payload !== "object" || Array.isArray(payload)) {
+        throw new ValidationError("Token payload must be an object");
+    }
+    const { expiresInSeconds, expiresIn = expiresInSeconds ?? DEFAULT_EXPIRES_IN, subject, ...rest } = options;
+    try {
+        const signPayload = { ...payload };
+        if (subject !== undefined && signPayload.sub === undefined) {
+            signPayload.sub = String(subject);
+        }
+        return jwt.sign(signPayload, normalizeSecret(secret), signOptions({ expiresIn, ...rest }));
+    }
+    catch (error) {
+        if (error instanceof AuthError) {
+            throw error;
+        }
+        throw new InvalidTokenError(error instanceof Error ? error.message : "Failed to sign token", { cause: error });
+    }
+}
+export function decode(token, secret, options = {}) {
+    if (!token || typeof token !== "string") {
+        throw new InvalidTokenError("Token is required");
+    }
+    const { algorithms = [DEFAULT_ALGORITHM], audience, issuer, subject, clockTolerance, ignoreExpiration = false, complete = false, } = options;
+    try {
+        const verifyOptions = {
+            algorithms: algorithms,
+            audience: audience,
+            issuer,
+            subject,
+            clockTolerance,
+            ignoreExpiration,
+            complete,
+        };
+        return jwt.verify(token, normalizeSecret(secret), verifyOptions);
+    }
+    catch (error) {
+        if (error instanceof AuthError) {
+            throw error;
+        }
+        if (error instanceof Error && error.name === "TokenExpiredError") {
+            throw new TokenExpiredError("Token has expired", { cause: error });
+        }
+        throw new InvalidTokenError("Invalid or expired token", { cause: error });
+    }
+}
+export function decodeUnsafe(token, options = {}) {
+    if (!token || typeof token !== "string") {
+        return null;
+    }
+    return jwt.decode(token, { complete: options.complete === true }) ?? null;
+}
+function withTyp(payload, typ, options = { secret: "" }) {
+    const next = { ...payload, typ };
+    const subject = options.subject ?? next.sub ?? next.userId;
+    if (subject !== undefined && next.sub === undefined) {
+        next.sub = String(subject);
+    }
+    return encode(next, options.secret, {
+        expiresIn: options.expiresIn,
+        audience: options.audience,
+        issuer: options.issuer,
+        jwtid: options.jwtid,
+        algorithm: options.algorithm,
+        header: options.header,
+    });
+}
+export function encodeAccessToken(payload, secret, options = {}) {
+    return withTyp(payload, "access", {
+        ...options,
+        secret,
+        expiresIn: options.expiresIn ?? "15m",
+    });
+}
+export function encodeRefreshToken(payload, secret, options = {}) {
+    return withTyp(payload, "refresh", {
+        ...options,
+        secret,
+        expiresIn: options.expiresIn ?? "7d",
+    });
+}
+export { jwt };
+//# sourceMappingURL=jwt.js.map

package/dist/jwt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt.js","sourceRoot":"","sources":["../src/jwt.ts"],"names":[],"mappings":"AAAA,OAAO,GAAG,MAAM,cAAc,CAAC;AAE/B,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE/F,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAE9D,MAAM,iBAAiB,GAAc,OAAO,CAAC;AAC7C,MAAM,kBAAkB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;AAExC,SAAS,eAAe,CAAC,MAA0B;IACjD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,MAAM,IAAI,eAAe,CAAC,yDAAyD,CAAC,CAAC;AACvF,CAAC;AAED,SAAS,WAAW,CAAC,EACnB,SAAS,EACT,OAAO,EACP,QAAQ,EACR,MAAM,EACN,KAAK,EACL,SAAS,EACT,MAAM,EACN,SAAS,GAAG,iBAAiB,EAC7B,KAAK,MACa,EAAE;IACpB,MAAM,OAAO,GAAgB,EAAE,SAAS,EAAE,SAAsB,EAAE,CAAC;IAEnE,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QAClD,4EAA4E;QAC5E,4EAA4E;QAC5E,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,eAAe,CACvB,sBAAsB,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,+CAA+C,CAC/F,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,SAAS,GAAG,CAAC,OAAO,SAAS,KAAK,QAAQ;YAChD,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC;YAC3B,CAAC,CAAC,SAAS,CAA6B,CAAC;IAC7C,CAAC;IAED,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IAC7D,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,CAAC,QAAQ,GAAG,QAAQ,CAAC;IACxD,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC;IAClD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC;IAC/C,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,CAAC,SAAS,GAAG,SAAqC,CAAC;IACvF,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC;IAC/C,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,CAAC,MAAM,GAAG,MAA8B,CAAC;IAE1E,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,UAAkB,EAAE,EAAE,MAAc,EAAE,UAA0B,EAAE;IACvF,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,eAAe,CAAC,iCAAiC,CAAC,CAAC;IAC/D,CAAC;IAED,MAAM,EACJ,gBAAgB,EAChB,SAAS,GAAG,gBAAgB,IAAI,kBAAkB,EAClD,OAAO,EACP,GAAG,IAAI,EACR,GAAG,OAAO,CAAC;IAEZ,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,EAAE,GAAI,OAAmC,EAAE,CAAC;QAChE,IAAI,OAAO,KAAK,SAAS,IAAI,WAAW,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;YAC3D,WAAW,CAAC,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;QACpC,CAAC;QACD,OAAO,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,eAAe,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC,EAAE,SAAS,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC;IAC7F,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,SAAS,EAAE,CAAC;YAC/B,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,IAAI,iBAAiB,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,sBAAsB,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IACjH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,KAAa,EAAE,MAAc,EAAE,UAA4B,EAAE;IAClF,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxC,MAAM,IAAI,iBAAiB,CAAC,mBAAmB,CAAC,CAAC;IACnD,CAAC;IAED,MAAM,EACJ,UAAU,GAAG,CAAC,iBAAiB,CAAC,EAChC,QAAQ,EACR,MAAM,EACN,OAAO,EACP,cAAc,EACd,gBAAgB,GAAG,KAAK,EACxB,QAAQ,GAAG,KAAK,GACjB,GAAG,OAAO,CAAC;IAEZ,IAAI,CAAC;QACH,MAAM,aAAa,GAAkB;YACnC,UAAU,EAAE,UAAyB;YACrC,QAAQ,EAAE,QAAqC;YAC/C,MAAM;YACN,OAAO;YACP,cAAc;YACd,gBAAgB;YAChB,QAAQ;SACT,CAAC;QACF,OAAO,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,eAAe,CAAC,MAAM,CAAC,EAAE,aAAa,CAAe,CAAC;IACjF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,SAAS,EAAE,CAAC;YAC/B,MAAM,KAAK,CAAC;QACd,CAAC;QACD,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;YACjE,MAAM,IAAI,iBAAiB,CAAC,mBAAmB,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QACrE,CAAC;QACD,MAAM,IAAI,iBAAiB,CAAC,0BAA0B,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5E,CAAC;AACH,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAa,EAAE,UAAkC,EAAE;IAC9E,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC,IAAI,IAAI,CAAC;AAC5E,CAAC;AAED,SAAS,OAAO,CAAC,OAAe,EAAE,GAAW,EAAE,UAA+C,EAAE,MAAM,EAAE,EAAE,EAAE;IAC1G,MAAM,IAAI,GAA4B,EAAE,GAAI,OAAmC,EAAE,GAAG,EAAE,CAAC;IACvF,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC;IAC3D,IAAI,OAAO,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QACpD,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,EAAE;QAClC,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;KACvB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,OAAe,EAAE,MAAc,EAAE,UAA0B,EAAE;IAC7F,OAAO,OAAO,CAAC,OAAO,EAAE,QAAQ,EAAE;QAChC,GAAG,OAAO;QACV,MAAM;QACN,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,KAAK;KACtC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,OAAe,EAAE,MAAc,EAAE,UAA0B,EAAE;IAC9F,OAAO,OAAO,CAAC,OAAO,EAAE,SAAS,EAAE;QACjC,GAAG,OAAO;QACV,MAAM;QACN,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,IAAI;KACrC,CAAC,CAAC;AACL,CAAC;AAED,OAAO,EAAE,GAAG,EAAE,CAAC"}

package/dist/oauth.d.ts

@@ -0,0 +1,31 @@
+import type { OAuthAuthorizeOptions, OAuthOptions, OAuthProfile, OAuthProvider, OAuthProviderConfig, OAuthStateRecord, OAuthTokens, StateStore } from "./types.js";
+interface ProviderEntry {
+    provider: OAuthProvider;
+    config: OAuthProviderConfig;
+}
+export declare class OAuth {
+    providers: Map<string, ProviderEntry>;
+    defaultRedirectUri: string | null;
+    stateStore: StateStore;
+    constructor(options?: OAuthOptions);
+    use(id: string, config?: OAuthProviderConfig): this;
+    list(): string[];
+    get(id: string): ProviderEntry;
+    authorize(id: string, options?: OAuthAuthorizeOptions): Promise<{
+        url: string;
+        state: string;
+        provider: string;
+        codeVerifier?: string;
+    }>;
+    callback(id: string, params?: string | Record<string, string>): Promise<{
+        provider: string;
+        tokens: OAuthTokens;
+        profile: OAuthProfile;
+        state: OAuthStateRecord | null;
+    }>;
+    verifyState(state: string, expected?: string): Promise<boolean>;
+}
+export declare function createMemoryStateStore(): StateStore;
+export declare function createOAuth(options?: OAuthOptions): OAuth;
+export {};
+//# sourceMappingURL=oauth.d.ts.map

package/dist/oauth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.d.ts","sourceRoot":"","sources":["../src/oauth.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,qBAAqB,EACrB,YAAY,EACZ,YAAY,EACZ,aAAa,EACb,mBAAmB,EACnB,gBAAgB,EAChB,WAAW,EACX,UAAU,EACX,MAAM,YAAY,CAAC;AAGpB,UAAU,aAAa;IACrB,QAAQ,EAAE,aAAa,CAAC;IACxB,MAAM,EAAE,mBAAmB,CAAC;CAC7B;AAED,qBAAa,KAAK;IAChB,SAAS,6BAAoC;IAC7C,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,UAAU,EAAE,UAAU,CAAC;gBAEX,OAAO,GAAE,YAAiB;IAUtC,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,GAAE,mBAAwB,GAAG,IAAI;IAoCvD,IAAI,IAAI,MAAM,EAAE;IAIhB,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,aAAa;IAQxB,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,GAAE,qBAA0B,GAAG,OAAO,CAAC;QACxE,GAAG,EAAE,MAAM,CAAC;QACZ,KAAK,EAAE,MAAM,CAAC;QACd,QAAQ,EAAE,MAAM,CAAC;QACjB,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,CAAC;IA6BI,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,GAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAM,GAAG,OAAO,CAAC;QAChF,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,EAAE,WAAW,CAAC;QACpB,OAAO,EAAE,YAAY,CAAC;QACtB,KAAK,EAAE,gBAAgB,GAAG,IAAI,CAAC;KAChC,CAAC;IA6CI,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;CAUtE;AAoBD,wBAAgB,sBAAsB,IAAI,UAAU,CAyBnD;AAED,wBAAgB,WAAW,CAAC,OAAO,GAAE,YAAiB,GAAG,KAAK,CAE7D"}

package/dist/oauth.js

@@ -0,0 +1,178 @@
+import { OAuthError, ValidationError } from "./errors.js";
+import { builtinProviders, createProvider, getProvider, pkceVerifier } from "./providers.js";
+import { randomState, timingSafeEqualString } from "./utils.js";
+export class OAuth {
+    providers = new Map();
+    defaultRedirectUri;
+    stateStore;
+    constructor(options = {}) {
+        this.defaultRedirectUri = options.redirectUri ?? null;
+        this.stateStore = options.stateStore ?? createMemoryStateStore();
+        const configured = options.providers ?? {};
+        for (const [id, config] of Object.entries(configured)) {
+            this.use(id, config);
+        }
+    }
+    use(id, config = {}) {
+        const provider = config.provider ??
+            (id in builtinProviders
+                ? getProvider(id)
+                : createProvider({
+                    id,
+                    authorizationUrl: String(config.authorizationUrl ?? ""),
+                    tokenUrl: String(config.tokenUrl ?? ""),
+                    ...config,
+                }));
+        const entry = {
+            provider,
+            config: {
+                clientId: config.clientId,
+                clientSecret: config.clientSecret,
+                redirectUri: config.redirectUri ?? this.defaultRedirectUri ?? undefined,
+                scopes: config.scopes,
+                pkce: config.pkce,
+                extraAuthParams: config.extraAuthParams,
+                extraTokenParams: config.extraTokenParams,
+                userInfoHeaders: config.userInfoHeaders,
+                tokenAuthMethod: config.tokenAuthMethod,
+            },
+        };
+        this.providers.set(id, entry);
+        // Also expose the provider under its own id when registered via an alias,
+        // but never overwrite an entry that was configured explicitly.
+        if (provider.id && provider.id !== id && !this.providers.has(provider.id)) {
+            this.providers.set(provider.id, entry);
+        }
+        return this;
+    }
+    list() {
+        return [...new Set([...this.providers.values()].map((entry) => entry.provider.id))];
+    }
+    get(id) {
+        const entry = this.providers.get(id);
+        if (!entry) {
+            throw new ValidationError(`OAuth provider "${id}" is not configured`);
+        }
+        return entry;
+    }
+    async authorize(id, options = {}) {
+        const { provider, config } = this.get(id);
+        const state = options.state ?? randomState();
+        const redirectUri = options.redirectUri ?? config.redirectUri;
+        const codeVerifier = provider.pkce || config.pkce ? (options.codeVerifier ?? pkceVerifier()) : undefined;
+        const authorization = provider.createAuthorizationUrl(config, {
+            state,
+            redirectUri,
+            codeVerifier,
+            extraParams: options.extraParams,
+        });
+        await this.stateStore.set(state, {
+            provider: id,
+            redirectUri,
+            codeVerifier: authorization.codeVerifier ?? codeVerifier,
+            createdAt: Date.now(),
+            metadata: options.metadata ?? {},
+        }, options.ttlSeconds ?? 600);
+        return {
+            url: authorization.url,
+            state,
+            provider: id,
+            codeVerifier: authorization.codeVerifier ?? codeVerifier,
+        };
+    }
+    async callback(id, params = {}) {
+        const query = normalizeCallbackParams(params);
+        if (query.error) {
+            throw new OAuthError(query.error_description || query.error);
+        }
+        if (!query.code) {
+            throw new ValidationError("OAuth callback is missing authorization code");
+        }
+        const { provider, config } = this.get(id);
+        let stored = null;
+        if (query.state) {
+            stored = (await this.stateStore.get(query.state));
+            if (!stored) {
+                throw new OAuthError("Invalid or expired OAuth state");
+            }
+            if (stored.provider && stored.provider !== id) {
+                throw new OAuthError("OAuth provider mismatch");
+            }
+            await this.stateStore.delete(query.state);
+        }
+        else if (config.pkce || provider.pkce) {
+            throw new OAuthError("OAuth state is required");
+        }
+        const tokens = await provider.exchangeCode(config, {
+            code: query.code,
+            redirectUri: stored?.redirectUri ?? config.redirectUri,
+            codeVerifier: stored?.codeVerifier ?? query.codeVerifier,
+        });
+        const profile = await provider.fetchProfile(config, tokens);
+        return {
+            provider: id,
+            tokens,
+            profile: {
+                ...profile,
+                provider: profile.provider ?? id,
+            },
+            state: stored,
+        };
+    }
+    async verifyState(state, expected) {
+        const stored = await this.stateStore.get(state);
+        if (!stored) {
+            return false;
+        }
+        if (expected && !timingSafeEqualString(stored.provider, expected)) {
+            return false;
+        }
+        return true;
+    }
+}
+function normalizeCallbackParams(params) {
+    if (typeof params === "string") {
+        const trimmed = params.trim();
+        // Accepts a full URL ("https://host/cb?code=..."), a path with a query
+        // ("/cb?code=..." or "cb?code=..."), a leading "?code=...", or a bare query
+        // string ("code=..."). Only the bare form needs special handling: the URL
+        // constructor reads it as a path, and reading it as a query string is the
+        // only way to find the code.
+        const isBareQuery = trimmed !== "" && !trimmed.includes("?") && !trimmed.includes("://") && !trimmed.startsWith("/");
+        if (isBareQuery) {
+            return Object.fromEntries(new URLSearchParams(trimmed));
+        }
+        const url = trimmed.includes("://") ? new URL(trimmed) : new URL(trimmed, "http://localhost");
+        return Object.fromEntries(url.searchParams.entries());
+    }
+    return params ?? {};
+}
+export function createMemoryStateStore() {
+    const store = new Map();
+    return {
+        async set(key, value, ttlSeconds = 600) {
+            store.set(key, {
+                value,
+                expiresAt: Date.now() + ttlSeconds * 1000,
+            });
+        },
+        async get(key) {
+            const entry = store.get(key);
+            if (!entry) {
+                return null;
+            }
+            if (entry.expiresAt <= Date.now()) {
+                store.delete(key);
+                return null;
+            }
+            return entry.value;
+        },
+        async delete(key) {
+            store.delete(key);
+        },
+    };
+}
+export function createOAuth(options = {}) {
+    return new OAuth(options);
+}
+//# sourceMappingURL=oauth.js.map

package/dist/oauth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.js","sourceRoot":"","sources":["../src/oauth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAW7F,OAAO,EAAE,WAAW,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAOhE,MAAM,OAAO,KAAK;IAChB,SAAS,GAAG,IAAI,GAAG,EAAyB,CAAC;IAC7C,kBAAkB,CAAgB;IAClC,UAAU,CAAa;IAEvB,YAAY,UAAwB,EAAE;QACpC,IAAI,CAAC,kBAAkB,GAAG,OAAO,CAAC,WAAW,IAAI,IAAI,CAAC;QACtD,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,sBAAsB,EAAE,CAAC;QAEjE,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC;QAC3C,KAAK,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YACtD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IAED,GAAG,CAAC,EAAU,EAAE,SAA8B,EAAE;QAC9C,MAAM,QAAQ,GAAmB,MAAM,CAAC,QAAsC;YAC5E,CAAC,EAAE,IAAI,gBAAgB;gBACrB,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC;gBACjB,CAAC,CAAC,cAAc,CAAC;oBACf,EAAE;oBACF,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,gBAAgB,IAAI,EAAE,CAAC;oBACvD,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC;oBACvC,GAAG,MAAM;iBACV,CAAC,CAAC,CAAC;QAER,MAAM,KAAK,GAAkB;YAC3B,QAAQ;YACR,MAAM,EAAE;gBACN,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,IAAI,CAAC,kBAAkB,IAAI,SAAS;gBACvE,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,eAAe,EAAE,MAAM,CAAC,eAAe;gBACvC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;gBACzC,eAAe,EAAE,MAAM,CAAC,eAAe;gBACvC,eAAe,EAAE,MAAM,CAAC,eAAe;aACxC;SACF,CAAC;QAEF,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QAC9B,0EAA0E;QAC1E,+DAA+D;QAC/D,IAAI,QAAQ,CAAC,EAAE,IAAI,QAAQ,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;YAC1E,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QACzC,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI;QACF,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACtF,CAAC;IAED,GAAG,CAAC,EAAU;QACZ,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACrC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,qBAAqB,CAAC,CAAC;QACxE,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,EAAU,EAAE,UAAiC,EAAE;QAM7D,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,WAAW,EAAE,CAAC;QAC7C,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,MAAM,CAAC,WAAW,CAAC;QAC9D,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,IAAI,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAEzG,MAAM,aAAa,GAAG,QAAQ,CAAC,sBAAsB,CAAC,MAAM,EAAE;YAC5D,KAAK;YACL,WAAW;YACX,YAAY;YACZ,WAAW,EAAE,OAAO,CAAC,WAAW;SACjC,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE;YAC/B,QAAQ,EAAE,EAAE;YACZ,WAAW;YACX,YAAY,EAAE,aAAa,CAAC,YAAY,IAAI,YAAY;YACxD,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,EAAE;SACN,EAAE,OAAO,CAAC,UAAU,IAAI,GAAG,CAAC,CAAC;QAEzD,OAAO;YACL,GAAG,EAAE,aAAa,CAAC,GAAG;YACtB,KAAK;YACL,QAAQ,EAAE,EAAE;YACZ,YAAY,EAAE,aAAa,CAAC,YAAY,IAAI,YAAY;SACzD,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,EAAU,EAAE,SAA0C,EAAE;QAMrE,MAAM,KAAK,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC;QAC9C,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YAChB,MAAM,IAAI,UAAU,CAAC,KAAK,CAAC,iBAAiB,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC;QAC/D,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YAChB,MAAM,IAAI,eAAe,CAAC,8CAA8C,CAAC,CAAC;QAC5E,CAAC;QAED,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC1C,IAAI,MAAM,GAA4B,IAAI,CAAC;QAE3C,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YAChB,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAA4B,CAAC;YAC7E,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,IAAI,UAAU,CAAC,gCAAgC,CAAC,CAAC;YACzD,CAAC;YACD,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,KAAK,EAAE,EAAE,CAAC;gBAC9C,MAAM,IAAI,UAAU,CAAC,yBAAyB,CAAC,CAAC;YAClD,CAAC;YACD,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC5C,CAAC;aAAM,IAAI,MAAM,CAAC,IAAI,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC;YACxC,MAAM,IAAI,UAAU,CAAC,yBAAyB,CAAC,CAAC;QAClD,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,MAAM,EAAE;YACjD,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,WAAW,EAAE,MAAM,EAAE,WAAW,IAAI,MAAM,CAAC,WAAW;YACtD,YAAY,EAAE,MAAM,EAAE,YAAY,IAAI,KAAK,CAAC,YAAY;SACzD,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAE5D,OAAO;YACL,QAAQ,EAAE,EAAE;YACZ,MAAM;YACN,OAAO,EAAE;gBACP,GAAG,OAAO;gBACV,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,EAAE;aACjC;YACD,KAAK,EAAE,MAAM;SACd,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,KAAa,EAAE,QAAiB;QAChD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAA4B,CAAC;QAC3E,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,QAAQ,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC;YAClE,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAED,SAAS,uBAAuB,CAAC,MAAuC;IACtE,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;QAC9B,uEAAuE;QACvE,4EAA4E;QAC5E,0EAA0E;QAC1E,0EAA0E;QAC1E,6BAA6B;QAC7B,MAAM,WAAW,GAAG,OAAO,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QACrH,IAAI,WAAW,EAAE,CAAC;YAChB,OAAO,MAAM,CAAC,WAAW,CAAC,IAAI,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC;QAC1D,CAAC;QACD,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;QAC9F,OAAO,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,MAAM,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,sBAAsB;IACpC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAiD,CAAC;IAEvE,OAAO;QACL,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,UAAU,GAAG,GAAG;YACpC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE;gBACb,KAAK;gBACL,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,GAAG,IAAI;aAC1C,CAAC,CAAC;QACL,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,GAAG;YACX,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC7B,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,OAAO,IAAI,CAAC;YACd,CAAC;YACD,IAAI,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;gBAClC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAClB,OAAO,IAAI,CAAC;YACd,CAAC;YACD,OAAO,KAAK,CAAC,KAAK,CAAC;QACrB,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,GAAG;YACd,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACpB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,UAAwB,EAAE;IACpD,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;AAC5B,CAAC"}

package/dist/password.d.ts

@@ -0,0 +1,5 @@
+import type { PasswordOptions } from "./types.js";
+export declare function hashPassword(password: string, options?: PasswordOptions): Promise<string>;
+export declare function verifyPassword(password: string, storedHash: string): Promise<boolean>;
+export declare function needsRehash(storedHash: string, options?: PasswordOptions): boolean;
+//# sourceMappingURL=password.d.ts.map

package/dist/password.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"password.d.ts","sourceRoot":"","sources":["../src/password.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AA8BlD,wBAAsB,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,GAAE,eAAoB,GAAG,OAAO,CAAC,MAAM,CAAC,CAsBnG;AAED,wBAAsB,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CA+B3F;AAED,wBAAgB,WAAW,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,GAAE,eAAoB,GAAG,OAAO,CAqBtF"}

package/dist/password.js

@@ -0,0 +1,90 @@
+import { randomBytes, scrypt as scryptCallback, timingSafeEqual } from "node:crypto";
+import { ValidationError } from "./errors.js";
+function scrypt(password, salt, keyLength, options) {
+    return new Promise((resolve, reject) => {
+        scryptCallback(password, salt, keyLength, options, (error, derivedKey) => {
+            if (error) {
+                reject(error);
+                return;
+            }
+            resolve(derivedKey);
+        });
+    });
+}
+const DEFAULT_KEY_LENGTH = 64;
+const DEFAULT_SALT_BYTES = 16;
+const DEFAULT_COST = 16384;
+const DEFAULT_BLOCK_SIZE = 8;
+const DEFAULT_PARALLELISM = 1;
+const PREFIX = "scrypt";
+function toBuffer(value) {
+    return Buffer.isBuffer(value) ? value : Buffer.from(String(value), "utf8");
+}
+export async function hashPassword(password, options = {}) {
+    if (typeof password !== "string" || password.length === 0) {
+        throw new ValidationError("Password must be a non-empty string");
+    }
+    const saltBytes = options.saltBytes ?? DEFAULT_SALT_BYTES;
+    const keyLength = options.keyLength ?? DEFAULT_KEY_LENGTH;
+    const N = options.cost ?? DEFAULT_COST;
+    const r = options.blockSize ?? DEFAULT_BLOCK_SIZE;
+    const p = options.parallelism ?? DEFAULT_PARALLELISM;
+    const salt = options.salt ? toBuffer(options.salt) : randomBytes(saltBytes);
+    const key = await scrypt(password, salt, keyLength, { N, r, p });
+    return [
+        PREFIX,
+        N,
+        r,
+        p,
+        keyLength,
+        salt.toString("base64url"),
+        key.toString("base64url"),
+    ].join("$");
+}
+export async function verifyPassword(password, storedHash) {
+    if (typeof password !== "string" || typeof storedHash !== "string") {
+        return false;
+    }
+    const parts = storedHash.split("$");
+    if (parts.length !== 7 || parts[0] !== PREFIX) {
+        return false;
+    }
+    const [, nRaw, rRaw, pRaw, lengthRaw, saltB64, hashB64] = parts;
+    const N = Number.parseInt(nRaw, 10);
+    const r = Number.parseInt(rRaw, 10);
+    const p = Number.parseInt(pRaw, 10);
+    const keyLength = Number.parseInt(lengthRaw, 10);
+    if (![N, r, p, keyLength].every(Number.isFinite)) {
+        return false;
+    }
+    try {
+        const salt = Buffer.from(saltB64, "base64url");
+        const expected = Buffer.from(hashB64, "base64url");
+        const actual = await scrypt(password, salt, keyLength, { N, r, p });
+        if (actual.length !== expected.length) {
+            return false;
+        }
+        return timingSafeEqual(actual, expected);
+    }
+    catch {
+        return false;
+    }
+}
+export function needsRehash(storedHash, options = {}) {
+    if (typeof storedHash !== "string") {
+        return true;
+    }
+    const parts = storedHash.split("$");
+    if (parts.length !== 7 || parts[0] !== PREFIX) {
+        return true;
+    }
+    const N = Number.parseInt(parts[1], 10);
+    const r = Number.parseInt(parts[2], 10);
+    const p = Number.parseInt(parts[3], 10);
+    const keyLength = Number.parseInt(parts[4], 10);
+    return (N !== (options.cost ?? DEFAULT_COST) ||
+        r !== (options.blockSize ?? DEFAULT_BLOCK_SIZE) ||
+        p !== (options.parallelism ?? DEFAULT_PARALLELISM) ||
+        keyLength !== (options.keyLength ?? DEFAULT_KEY_LENGTH));
+}
+//# sourceMappingURL=password.js.map

package/dist/password.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"password.js","sourceRoot":"","sources":["../src/password.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,IAAI,cAAc,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACrF,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAG9C,SAAS,MAAM,CACb,QAAgB,EAChB,IAAY,EACZ,SAAiB,EACjB,OAA4C;IAE5C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,cAAc,CAAC,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE;YACvE,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,CAAC,KAAK,CAAC,CAAC;gBACd,OAAO;YACT,CAAC;YACD,OAAO,CAAC,UAAU,CAAC,CAAC;QACtB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAC9B,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAC9B,MAAM,YAAY,GAAG,KAAK,CAAC;AAC3B,MAAM,kBAAkB,GAAG,CAAC,CAAC;AAC7B,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAC9B,MAAM,MAAM,GAAG,QAAQ,CAAC;AAExB,SAAS,QAAQ,CAAC,KAAsB;IACtC,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC;AAC7E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,QAAgB,EAAE,UAA2B,EAAE;IAChF,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,eAAe,CAAC,qCAAqC,CAAC,CAAC;IACnE,CAAC;IAED,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,kBAAkB,CAAC;IAC1D,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,kBAAkB,CAAC;IAC1D,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,IAAI,YAAY,CAAC;IACvC,MAAM,CAAC,GAAG,OAAO,CAAC,SAAS,IAAI,kBAAkB,CAAC;IAClD,MAAM,CAAC,GAAG,OAAO,CAAC,WAAW,IAAI,mBAAmB,CAAC;IACrD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;IAC5E,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAEjE,OAAO;QACL,MAAM;QACN,CAAC;QACD,CAAC;QACD,CAAC;QACD,SAAS;QACT,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC;QAC1B,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC;KAC1B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,QAAgB,EAAE,UAAkB;IACvE,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;QACnE,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;QAC9C,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,KAAK,CAAC;IAChE,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACpC,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACpC,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACpC,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IAEjD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QAC/C,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QACnD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QACpE,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC;YACtC,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,eAAe,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,UAAkB,EAAE,UAA2B,EAAE;IAC3E,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;QACnC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;QAC9C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACxC,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACxC,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACxC,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAEhD,OAAO,CACL,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,IAAI,YAAY,CAAC;QACpC,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,IAAI,kBAAkB,CAAC;QAC/C,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,IAAI,mBAAmB,CAAC;QAClD,SAAS,KAAK,CAAC,OAAO,CAAC,SAAS,IAAI,kBAAkB,CAAC,CACxD,CAAC;AACJ,CAAC"}

package/dist/providers.d.ts

@@ -0,0 +1,37 @@
+import type { OAuthProvider, ProviderDefinition } from "./types.js";
+export declare function pkceVerifier(): string;
+export declare function pkceChallenge(verifier: string): string;
+export declare function createProvider(definition: ProviderDefinition): OAuthProvider;
+export declare const google: OAuthProvider;
+export declare const github: OAuthProvider;
+export declare const instagram: OAuthProvider;
+export declare const facebook: OAuthProvider;
+export declare const twitter: OAuthProvider;
+export declare const discord: OAuthProvider;
+export declare const apple: OAuthProvider;
+export declare const linkedin: OAuthProvider;
+export declare const microsoft: OAuthProvider;
+export declare const reddit: OAuthProvider;
+export declare const twitch: OAuthProvider;
+export declare const slack: OAuthProvider;
+export declare const spotify: OAuthProvider;
+export declare const tiktok: OAuthProvider;
+export declare const builtinProviders: Readonly<{
+    google: OAuthProvider;
+    github: OAuthProvider;
+    instagram: OAuthProvider;
+    facebook: OAuthProvider;
+    twitter: OAuthProvider;
+    x: OAuthProvider;
+    discord: OAuthProvider;
+    apple: OAuthProvider;
+    linkedin: OAuthProvider;
+    microsoft: OAuthProvider;
+    reddit: OAuthProvider;
+    twitch: OAuthProvider;
+    slack: OAuthProvider;
+    spotify: OAuthProvider;
+    tiktok: OAuthProvider;
+}>;
+export declare function getProvider(id: string): OAuthProvider;
+//# sourceMappingURL=providers.d.ts.map

package/dist/providers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"providers.d.ts","sourceRoot":"","sources":["../src/providers.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAKV,aAAa,EAIb,kBAAkB,EACnB,MAAM,YAAY,CAAC;AAGpB,wBAAgB,YAAY,IAAI,MAAM,CAErC;AAED,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAEtD;AA2CD,wBAAgB,cAAc,CAAC,UAAU,EAAE,kBAAkB,GAAG,aAAa,CAoJ5E;AAED,eAAO,MAAM,MAAM,eAkBjB,CAAC;AAEH,eAAO,MAAM,MAAM,eAgDjB,CAAC;AAEH,eAAO,MAAM,SAAS,eAapB,CAAC;AAEH,eAAO,MAAM,QAAQ,eAmBnB,CAAC;AAEH,eAAO,MAAM,OAAO,eAgBlB,CAAC;AAEH,eAAO,MAAM,OAAO,eAkBlB,CAAC;AAIH,eAAO,MAAM,KAAK,eA4ChB,CAAC;AAEH,eAAO,MAAM,QAAQ,eAenB,CAAC;AAEH,eAAO,MAAM,SAAS,eAepB,CAAC;AAEH,eAAO,MAAM,MAAM,eAejB,CAAC;AAEH,eAAO,MAAM,MAAM,eAcjB,CAAC;AAEH,eAAO,MAAM,KAAK,eAahB,CAAC;AAEH,eAAO,MAAM,OAAO,eAqBlB,CAAC;AAEH,eAAO,MAAM,MAAM,eAajB,CAAC;AAEH,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;EAgBa,CAAC;AAE3C,wBAAgB,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,aAAa,CAMrD"}