@osdk/oauth 0.4.0-beta.2 → 0.4.0-beta.3

package/build/esm/createConfidentialOauthClient.js

@@ -0,0 +1,47 @@
+/*
+ * Copyright 2024 Palantir Technologies, Inc. All rights reserved.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import { clientCredentialsGrantRequest, customFetch, processClientCredentialsResponse } from "oauth4webapi";
+import { common, createAuthorizationServer } from "./common.js";
+import { throwIfError } from "./throwIfError.js";
+/**
+ * @param client_id
+ * @param client_secret
+ * @param url the base url of your foundry server
+ * @param scopes
+ * @param fetchFn
+ * @param ctxPath
+ * @returns which can be used as a token provider
+ */
+export function createConfidentialOauthClient(client_id, client_secret, url, scopes = ["api:read-data", "api:write-data"], fetchFn = globalThis.fetch, ctxPath = "/multipass") {
+  const client = {
+    client_id,
+    client_secret
+  };
+  const authServer = createAuthorizationServer(ctxPath, url);
+  const oauthHttpOptions = {
+    [customFetch]: fetchFn
+  };
+  const {
+    getToken,
+    makeTokenAndSaveRefresh
+  } = common(client, authServer, async function () {
+    return makeTokenAndSaveRefresh(throwIfError(await processClientCredentialsResponse(authServer, client, await clientCredentialsGrantRequest(authServer, client, new URLSearchParams({
+      scope: scopes.join(" ")
+    }), oauthHttpOptions))), "signIn");
+  }, oauthHttpOptions, undefined);
+  return getToken;
+}
+//# sourceMappingURL=createConfidentialOauthClient.js.map

package/build/esm/createConfidentialOauthClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"createConfidentialOauthClient.js","names":["clientCredentialsGrantRequest","customFetch","processClientCredentialsResponse","common","createAuthorizationServer","throwIfError","createConfidentialOauthClient","client_id","client_secret","url","scopes","fetchFn","globalThis","fetch","ctxPath","client","authServer","oauthHttpOptions","getToken","makeTokenAndSaveRefresh","URLSearchParams","scope","join","undefined"],"sources":["createConfidentialOauthClient.js"],"sourcesContent":["/*\n * Copyright 2024 Palantir Technologies, Inc. All rights reserved.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nimport { clientCredentialsGrantRequest, customFetch, processClientCredentialsResponse, } from \"oauth4webapi\";\nimport { common, createAuthorizationServer } from \"./common.js\";\nimport { throwIfError } from \"./throwIfError.js\";\n/**\n * @param client_id\n * @param client_secret\n * @param url the base url of your foundry server\n * @param scopes\n * @param fetchFn\n * @param ctxPath\n * @returns which can be used as a token provider\n */\nexport function createConfidentialOauthClient(client_id, client_secret, url, scopes = [\"api:read-data\", \"api:write-data\"], fetchFn = globalThis.fetch, ctxPath = \"/multipass\") {\n    const client = { client_id, client_secret };\n    const authServer = createAuthorizationServer(ctxPath, url);\n    const oauthHttpOptions = { [customFetch]: fetchFn };\n    const { getToken, makeTokenAndSaveRefresh } = common(client, authServer, _signIn, oauthHttpOptions, undefined);\n    async function _signIn() {\n        return makeTokenAndSaveRefresh(throwIfError(await processClientCredentialsResponse(authServer, client, await clientCredentialsGrantRequest(authServer, client, new URLSearchParams({ scope: scopes.join(\" \") }), oauthHttpOptions))), \"signIn\");\n    }\n    return getToken;\n}\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAASA,6BAA6B,EAAEC,WAAW,EAAEC,gCAAgC,QAAS,cAAc;AAC5G,SAASC,MAAM,EAAEC,yBAAyB,QAAQ,aAAa;AAC/D,SAASC,YAAY,QAAQ,mBAAmB;AAChD;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASC,6BAA6BA,CAACC,SAAS,EAAEC,aAAa,EAAEC,GAAG,EAAEC,MAAM,GAAG,CAAC,eAAe,EAAE,gBAAgB,CAAC,EAAEC,OAAO,GAAGC,UAAU,CAACC,KAAK,EAAEC,OAAO,GAAG,YAAY,EAAE;EAC3K,MAAMC,MAAM,GAAG;IAAER,SAAS;IAAEC;EAAc,CAAC;EAC3C,MAAMQ,UAAU,GAAGZ,yBAAyB,CAACU,OAAO,EAAEL,GAAG,CAAC;EAC1D,MAAMQ,gBAAgB,GAAG;IAAE,CAAChB,WAAW,GAAGU;EAAQ,CAAC;EACnD,MAAM;IAAEO,QAAQ;IAAEC;EAAwB,CAAC,GAAGhB,MAAM,CAACY,MAAM,EAAEC,UAAU,EACvE,kBAAyB;IACrB,OAAOG,uBAAuB,CAACd,YAAY,CAAC,MAAMH,gCAAgC,CAACc,UAAU,EAAED,MAAM,EAAE,MAAMf,6BAA6B,CAACgB,UAAU,EAAED,MAAM,EAAE,IAAIK,eAAe,CAAC;MAAEC,KAAK,EAAEX,MAAM,CAACY,IAAI,CAAC,GAAG;IAAE,CAAC,CAAC,EAAEL,gBAAgB,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC;EACnP,CAAC,EAHiFA,gBAAgB,EAAEM,SAAS,CAAC;EAI9G,OAAOL,QAAQ;AACnB","ignoreList":[]}

package/build/esm/createPublicOauthClient.js

@@ -0,0 +1,140 @@
+/*
+ * Copyright 2024 Palantir Technologies, Inc. All rights reserved.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import delay from "delay";
+import { authorizationCodeGrantRequest, calculatePKCECodeChallenge, customFetch, generateRandomCodeVerifier, generateRandomState, processAuthorizationCodeOAuth2Response, refreshTokenGrantRequest, validateAuthResponse } from "oauth4webapi";
+import { common, createAuthorizationServer, readLocal, removeLocal, saveLocal } from "./common.js";
+import { throwIfError } from "./throwIfError.js";
+/**
+ * @param client_id
+ * @param url the base url of your foundry server
+ * @param redirectUrl the url configured for redirect in the oauth configuration on the server
+ * @param useHistory if true, when possible uses `history.replaceState()`, otherwise uses `window.location.assign()`
+ * @param loginPage if you want a custom landing page prior to logging in, set this to that url
+ * @param postLoginPage if you want to customize where you return to after a completed authentication cycle. defaults to the url when the page loaded
+ * @param scopes
+ * @param fetchFn
+ * @param ctxPath
+ * @returns {PublicOauthClient} which can be used as a token provider
+ */
+export function createPublicOauthClient(client_id, url, redirectUrl, useHistory = true, loginPage, postLoginPage = window.location.toString(), scopes = [], fetchFn = globalThis.fetch, ctxPath = "/multipass") {
+  const client = {
+    client_id,
+    token_endpoint_auth_method: "none"
+  };
+  const authServer = createAuthorizationServer(ctxPath, url);
+  const oauthHttpOptions = {
+    [customFetch]: fetchFn
+  };
+  if (scopes.length === 0) {
+    scopes = ["api:read-data", "api:write-data"];
+  }
+  const {
+    makeTokenAndSaveRefresh,
+    getToken
+  } = common(client, authServer, /** Will throw if there is no token! */
+  async function _signIn() {
+    // 1. Check if we have a refresh token in local storage
+    return (await maybeRefresh()
+    // 2. If there is no refresh token we are likely trying to perform the callback
+    ) ?? (await maybeHandleAuthReturn())
+    // 3. If we haven't been able to load the token from one of the two above ways, we need to make the initial auth request
+    ?? (await initiateLoginRedirect());
+  }, oauthHttpOptions, maybeRefresh.bind(globalThis, true));
+  async function go(x) {
+    if (useHistory) return window.history.replaceState({}, "", x);else window.location.assign(x);
+    await delay(1000);
+    throw new Error("Unable to redirect");
+  }
+  async function maybeRefresh(expectRefreshToken) {
+    const {
+      refresh_token
+    } = readLocal(client);
+    if (!refresh_token) {
+      if (expectRefreshToken) throw new Error("No refresh token found");
+      return;
+    }
+    try {
+      // note, we don't use processRefreshTokenResponse because the mp oauth implementation
+      // doesn't do refresh tokens quite right and this lets us skip the id check
+      const result = makeTokenAndSaveRefresh(throwIfError(await processAuthorizationCodeOAuth2Response(authServer, client, await refreshTokenGrantRequest(authServer, client, refresh_token, oauthHttpOptions))), "refresh");
+      if (result && window.location.pathname === new URL(redirectUrl).pathname) {
+        const {
+          oldUrl
+        } = readLocal(client);
+        go(oldUrl ?? "/");
+      }
+      return result;
+    } catch (e) {
+      if (process?.env?.NODE_ENV !== "production") {
+        // eslint-disable-next-line no-console
+        console.warn("Failed to get OAuth2 refresh token. Removing refresh token", e);
+      }
+      removeLocal(client);
+      if (expectRefreshToken) {
+        throw new Error("Could not refresh token");
+      }
+    }
+  }
+  async function maybeHandleAuthReturn() {
+    const {
+      codeVerifier,
+      state,
+      oldUrl
+    } = readLocal(client);
+    if (!codeVerifier) return;
+    try {
+      const ret = makeTokenAndSaveRefresh(throwIfError(await processAuthorizationCodeOAuth2Response(authServer, client, await authorizationCodeGrantRequest(authServer, client, throwIfError(validateAuthResponse(authServer, client, new URL(window.location.href), state)), redirectUrl, codeVerifier, oauthHttpOptions))), "signIn");
+      go(oldUrl);
+      return ret;
+    } catch (e) {
+      if (process?.env?.NODE_ENV !== "production") {
+        // eslint-disable-next-line no-console
+        console.warn("Failed to get OAuth2 token using PKCE, removing PKCE and starting a new auth flow", e);
+      }
+      removeLocal(client);
+    }
+  }
+  async function initiateLoginRedirect() {
+    if (loginPage && window.location.href !== loginPage && window.location.pathname !== loginPage) {
+      saveLocal(client, {
+        oldUrl: postLoginPage
+      });
+      return await go(loginPage);
+    }
+    const state = generateRandomState();
+    const codeVerifier = generateRandomCodeVerifier();
+    const oldUrl = readLocal(client).oldUrl ?? window.location.toString();
+    saveLocal(client, {
+      codeVerifier,
+      state,
+      oldUrl
+    });
+    window.location.assign(`${authServer.authorization_endpoint}?${new URLSearchParams({
+      client_id,
+      response_type: "code",
+      state,
+      redirect_uri: redirectUrl,
+      code_challenge: await calculatePKCECodeChallenge(codeVerifier),
+      code_challenge_method: "S256",
+      scope: ["offline_access", ...scopes].join(" ")
+    })}`);
+    // Give time for redirect to happen
+    await delay(1000);
+    throw new Error("Unable to redirect");
+  }
+  return getToken;
+}
+//# sourceMappingURL=createPublicOauthClient.js.map

package/build/esm/createPublicOauthClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"createPublicOauthClient.js","names":["delay","authorizationCodeGrantRequest","calculatePKCECodeChallenge","customFetch","generateRandomCodeVerifier","generateRandomState","processAuthorizationCodeOAuth2Response","refreshTokenGrantRequest","validateAuthResponse","common","createAuthorizationServer","readLocal","removeLocal","saveLocal","throwIfError","createPublicOauthClient","client_id","url","redirectUrl","useHistory","loginPage","postLoginPage","window","location","toString","scopes","fetchFn","globalThis","fetch","ctxPath","client","token_endpoint_auth_method","authServer","oauthHttpOptions","length","makeTokenAndSaveRefresh","getToken","_signIn","maybeRefresh","maybeHandleAuthReturn","initiateLoginRedirect","bind","go","x","history","replaceState","assign","Error","expectRefreshToken","refresh_token","result","pathname","URL","oldUrl","e","process","env","NODE_ENV","console","warn","codeVerifier","state","ret","href","authorization_endpoint","URLSearchParams","response_type","redirect_uri","code_challenge","code_challenge_method","scope","join"],"sources":["createPublicOauthClient.js"],"sourcesContent":["/*\n * Copyright 2024 Palantir Technologies, Inc. All rights reserved.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nimport delay from \"delay\";\nimport { authorizationCodeGrantRequest, calculatePKCECodeChallenge, customFetch, generateRandomCodeVerifier, generateRandomState, processAuthorizationCodeOAuth2Response, refreshTokenGrantRequest, validateAuthResponse, } from \"oauth4webapi\";\nimport { common, createAuthorizationServer, readLocal, removeLocal, saveLocal, } from \"./common.js\";\nimport { throwIfError } from \"./throwIfError.js\";\n/**\n * @param client_id\n * @param url the base url of your foundry server\n * @param redirectUrl the url configured for redirect in the oauth configuration on the server\n * @param useHistory if true, when possible uses `history.replaceState()`, otherwise uses `window.location.assign()`\n * @param loginPage if you want a custom landing page prior to logging in, set this to that url\n * @param postLoginPage if you want to customize where you return to after a completed authentication cycle. defaults to the url when the page loaded\n * @param scopes\n * @param fetchFn\n * @param ctxPath\n * @returns {PublicOauthClient} which can be used as a token provider\n */\nexport function createPublicOauthClient(client_id, url, redirectUrl, useHistory = true, loginPage, postLoginPage = window.location.toString(), scopes = [], fetchFn = globalThis.fetch, ctxPath = \"/multipass\") {\n    const client = { client_id, token_endpoint_auth_method: \"none\" };\n    const authServer = createAuthorizationServer(ctxPath, url);\n    const oauthHttpOptions = { [customFetch]: fetchFn };\n    if (scopes.length === 0) {\n        scopes = [\"api:read-data\", \"api:write-data\"];\n    }\n    const { makeTokenAndSaveRefresh, getToken } = common(client, authServer, _signIn, oauthHttpOptions, maybeRefresh.bind(globalThis, true));\n    async function go(x) {\n        if (useHistory)\n            return window.history.replaceState({}, \"\", x);\n        else\n            window.location.assign(x);\n        await delay(1000);\n        throw new Error(\"Unable to redirect\");\n    }\n    async function maybeRefresh(expectRefreshToken) {\n        const { refresh_token } = readLocal(client);\n        if (!refresh_token) {\n            if (expectRefreshToken)\n                throw new Error(\"No refresh token found\");\n            return;\n        }\n        try {\n            // note, we don't use processRefreshTokenResponse because the mp oauth implementation\n            // doesn't do refresh tokens quite right and this lets us skip the id check\n            const result = makeTokenAndSaveRefresh(throwIfError(await processAuthorizationCodeOAuth2Response(authServer, client, await refreshTokenGrantRequest(authServer, client, refresh_token, oauthHttpOptions))), \"refresh\");\n            if (result && window.location.pathname === new URL(redirectUrl).pathname) {\n                const { oldUrl } = readLocal(client);\n                go(oldUrl ?? \"/\");\n            }\n            return result;\n        }\n        catch (e) {\n            if (process?.env?.NODE_ENV !== \"production\") {\n                // eslint-disable-next-line no-console\n                console.warn(\"Failed to get OAuth2 refresh token. Removing refresh token\", e);\n            }\n            removeLocal(client);\n            if (expectRefreshToken) {\n                throw new Error(\"Could not refresh token\");\n            }\n        }\n    }\n    async function maybeHandleAuthReturn() {\n        const { codeVerifier, state, oldUrl } = readLocal(client);\n        if (!codeVerifier)\n            return;\n        try {\n            const ret = makeTokenAndSaveRefresh(throwIfError(await processAuthorizationCodeOAuth2Response(authServer, client, await authorizationCodeGrantRequest(authServer, client, throwIfError(validateAuthResponse(authServer, client, new URL(window.location.href), state)), redirectUrl, codeVerifier, oauthHttpOptions))), \"signIn\");\n            go(oldUrl);\n            return ret;\n        }\n        catch (e) {\n            if (process?.env?.NODE_ENV !== \"production\") {\n                // eslint-disable-next-line no-console\n                console.warn(\"Failed to get OAuth2 token using PKCE, removing PKCE and starting a new auth flow\", e);\n            }\n            removeLocal(client);\n        }\n    }\n    async function initiateLoginRedirect() {\n        if (loginPage\n            && window.location.href !== loginPage\n            && window.location.pathname !== loginPage) {\n            saveLocal(client, { oldUrl: postLoginPage });\n            return await go(loginPage);\n        }\n        const state = generateRandomState();\n        const codeVerifier = generateRandomCodeVerifier();\n        const oldUrl = readLocal(client).oldUrl ?? window.location.toString();\n        saveLocal(client, { codeVerifier, state, oldUrl });\n        window.location.assign(`${authServer\n            .authorization_endpoint}?${new URLSearchParams({\n            client_id,\n            response_type: \"code\",\n            state,\n            redirect_uri: redirectUrl,\n            code_challenge: await calculatePKCECodeChallenge(codeVerifier),\n            code_challenge_method: \"S256\",\n            scope: [\"offline_access\", ...scopes].join(\" \"),\n        })}`);\n        // Give time for redirect to happen\n        await delay(1000);\n        throw new Error(\"Unable to redirect\");\n    }\n    /** Will throw if there is no token! */\n    async function _signIn() {\n        // 1. Check if we have a refresh token in local storage\n        return await maybeRefresh()\n            // 2. If there is no refresh token we are likely trying to perform the callback\n            ?? await maybeHandleAuthReturn()\n            // 3. If we haven't been able to load the token from one of the two above ways, we need to make the initial auth request\n            ?? await initiateLoginRedirect();\n    }\n    return getToken;\n}\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAOA,KAAK,MAAM,OAAO;AACzB,SAASC,6BAA6B,EAAEC,0BAA0B,EAAEC,WAAW,EAAEC,0BAA0B,EAAEC,mBAAmB,EAAEC,sCAAsC,EAAEC,wBAAwB,EAAEC,oBAAoB,QAAS,cAAc;AAC/O,SAASC,MAAM,EAAEC,yBAAyB,EAAEC,SAAS,EAAEC,WAAW,EAAEC,SAAS,QAAS,aAAa;AACnG,SAASC,YAAY,QAAQ,mBAAmB;AAChD;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASC,uBAAuBA,CAACC,SAAS,EAAEC,GAAG,EAAEC,WAAW,EAAEC,UAAU,GAAG,IAAI,EAAEC,SAAS,EAAEC,aAAa,GAAGC,MAAM,CAACC,QAAQ,CAACC,QAAQ,CAAC,CAAC,EAAEC,MAAM,GAAG,EAAE,EAAEC,OAAO,GAAGC,UAAU,CAACC,KAAK,EAAEC,OAAO,GAAG,YAAY,EAAE;EAC5M,MAAMC,MAAM,GAAG;IAAEd,SAAS;IAAEe,0BAA0B,EAAE;EAAO,CAAC;EAChE,MAAMC,UAAU,GAAGtB,yBAAyB,CAACmB,OAAO,EAAEZ,GAAG,CAAC;EAC1D,MAAMgB,gBAAgB,GAAG;IAAE,CAAC9B,WAAW,GAAGuB;EAAQ,CAAC;EACnD,IAAID,MAAM,CAACS,MAAM,KAAK,CAAC,EAAE;IACrBT,MAAM,GAAG,CAAC,eAAe,EAAE,gBAAgB,CAAC;EAChD;EACA,MAAM;IAAEU,uBAAuB;IAAEC;EAAS,CAAC,GAAG3B,MAAM,CAACqB,MAAM,EAAEE,UAAU,EA+EvE;EACA,eAAeK,OAAOA,CAAA,EAAG;IACrB;IACA,OAAO,OAAMC,YAAY,CAAC;IACtB;IAAA,MACG,MAAMC,qBAAqB,CAAC,CAAC;IAChC;IAAA,IACG,MAAMC,qBAAqB,CAAC,CAAC;EACxC,CAAC,EAvFiFP,gBAAgB,EAAEK,YAAY,CAACG,IAAI,CAACd,UAAU,EAAE,IAAI,CAAC,CAAC;EACxI,eAAee,EAAEA,CAACC,CAAC,EAAE;IACjB,IAAIxB,UAAU,EACV,OAAOG,MAAM,CAACsB,OAAO,CAACC,YAAY,CAAC,CAAC,CAAC,EAAE,EAAE,EAAEF,CAAC,CAAC,CAAC,KAE9CrB,MAAM,CAACC,QAAQ,CAACuB,MAAM,CAACH,CAAC,CAAC;IAC7B,MAAM3C,KAAK,CAAC,IAAI,CAAC;IACjB,MAAM,IAAI+C,KAAK,CAAC,oBAAoB,CAAC;EACzC;EACA,eAAeT,YAAYA,CAACU,kBAAkB,EAAE;IAC5C,MAAM;MAAEC;IAAc,CAAC,GAAGtC,SAAS,CAACmB,MAAM,CAAC;IAC3C,IAAI,CAACmB,aAAa,EAAE;MAChB,IAAID,kBAAkB,EAClB,MAAM,IAAID,KAAK,CAAC,wBAAwB,CAAC;MAC7C;IACJ;IACA,IAAI;MACA;MACA;MACA,MAAMG,MAAM,GAAGf,uBAAuB,CAACrB,YAAY,CAAC,MAAMR,sCAAsC,CAAC0B,UAAU,EAAEF,MAAM,EAAE,MAAMvB,wBAAwB,CAACyB,UAAU,EAAEF,MAAM,EAAEmB,aAAa,EAAEhB,gBAAgB,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC;MACtN,IAAIiB,MAAM,IAAI5B,MAAM,CAACC,QAAQ,CAAC4B,QAAQ,KAAK,IAAIC,GAAG,CAAClC,WAAW,CAAC,CAACiC,QAAQ,EAAE;QACtE,MAAM;UAAEE;QAAO,CAAC,GAAG1C,SAAS,CAACmB,MAAM,CAAC;QACpCY,EAAE,CAACW,MAAM,IAAI,GAAG,CAAC;MACrB;MACA,OAAOH,MAAM;IACjB,CAAC,CACD,OAAOI,CAAC,EAAE;MACN,IAAIC,OAAO,EAAEC,GAAG,EAAEC,QAAQ,KAAK,YAAY,EAAE;QACzC;QACAC,OAAO,CAACC,IAAI,CAAC,4DAA4D,EAAEL,CAAC,CAAC;MACjF;MACA1C,WAAW,CAACkB,MAAM,CAAC;MACnB,IAAIkB,kBAAkB,EAAE;QACpB,MAAM,IAAID,KAAK,CAAC,yBAAyB,CAAC;MAC9C;IACJ;EACJ;EACA,eAAeR,qBAAqBA,CAAA,EAAG;IACnC,MAAM;MAAEqB,YAAY;MAAEC,KAAK;MAAER;IAAO,CAAC,GAAG1C,SAAS,CAACmB,MAAM,CAAC;IACzD,IAAI,CAAC8B,YAAY,EACb;IACJ,IAAI;MACA,MAAME,GAAG,GAAG3B,uBAAuB,CAACrB,YAAY,CAAC,MAAMR,sCAAsC,CAAC0B,UAAU,EAAEF,MAAM,EAAE,MAAM7B,6BAA6B,CAAC+B,UAAU,EAAEF,MAAM,EAAEhB,YAAY,CAACN,oBAAoB,CAACwB,UAAU,EAAEF,MAAM,EAAE,IAAIsB,GAAG,CAAC9B,MAAM,CAACC,QAAQ,CAACwC,IAAI,CAAC,EAAEF,KAAK,CAAC,CAAC,EAAE3C,WAAW,EAAE0C,YAAY,EAAE3B,gBAAgB,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC;MACjUS,EAAE,CAACW,MAAM,CAAC;MACV,OAAOS,GAAG;IACd,CAAC,CACD,OAAOR,CAAC,EAAE;MACN,IAAIC,OAAO,EAAEC,GAAG,EAAEC,QAAQ,KAAK,YAAY,EAAE;QACzC;QACAC,OAAO,CAACC,IAAI,CAAC,mFAAmF,EAAEL,CAAC,CAAC;MACxG;MACA1C,WAAW,CAACkB,MAAM,CAAC;IACvB;EACJ;EACA,eAAeU,qBAAqBA,CAAA,EAAG;IACnC,IAAIpB,SAAS,IACNE,MAAM,CAACC,QAAQ,CAACwC,IAAI,KAAK3C,SAAS,IAClCE,MAAM,CAACC,QAAQ,CAAC4B,QAAQ,KAAK/B,SAAS,EAAE;MAC3CP,SAAS,CAACiB,MAAM,EAAE;QAAEuB,MAAM,EAAEhC;MAAc,CAAC,CAAC;MAC5C,OAAO,MAAMqB,EAAE,CAACtB,SAAS,CAAC;IAC9B;IACA,MAAMyC,KAAK,GAAGxD,mBAAmB,CAAC,CAAC;IACnC,MAAMuD,YAAY,GAAGxD,0BAA0B,CAAC,CAAC;IACjD,MAAMiD,MAAM,GAAG1C,SAAS,CAACmB,MAAM,CAAC,CAACuB,MAAM,IAAI/B,MAAM,CAACC,QAAQ,CAACC,QAAQ,CAAC,CAAC;IACrEX,SAAS,CAACiB,MAAM,EAAE;MAAE8B,YAAY;MAAEC,KAAK;MAAER;IAAO,CAAC,CAAC;IAClD/B,MAAM,CAACC,QAAQ,CAACuB,MAAM,CAAC,GAAGd,UAAU,CAC/BgC,sBAAsB,IAAI,IAAIC,eAAe,CAAC;MAC/CjD,SAAS;MACTkD,aAAa,EAAE,MAAM;MACrBL,KAAK;MACLM,YAAY,EAAEjD,WAAW;MACzBkD,cAAc,EAAE,MAAMlE,0BAA0B,CAAC0D,YAAY,CAAC;MAC9DS,qBAAqB,EAAE,MAAM;MAC7BC,KAAK,EAAE,CAAC,gBAAgB,EAAE,GAAG7C,MAAM,CAAC,CAAC8C,IAAI,CAAC,GAAG;IACjD,CAAC,CAAC,EAAE,CAAC;IACL;IACA,MAAMvE,KAAK,CAAC,IAAI,CAAC;IACjB,MAAM,IAAI+C,KAAK,CAAC,oBAAoB,CAAC;EACzC;EAUA,OAAOX,QAAQ;AACnB","ignoreList":[]}

package/build/esm/index.js

@@ -1,253 +1,18 @@
-import { processAuthorizationCodeOAuth2Response, refreshTokenGrantRequest, isOAuth2Error, processClientCredentialsResponse, clientCredentialsGrantRequest, customFetch, authorizationCodeGrantRequest, validateAuthResponse, generateRandomState, generateRandomCodeVerifier, calculatePKCECodeChallenge, processRevocationResponse, revocationRequest } from 'oauth4webapi';
-import invariant from 'tiny-invariant';
-import { TypedEventTarget } from 'typescript-event-target';
-import delay from 'delay';
-
-// src/createConfidentialOauthClient.ts
-function throwIfError(result) {
-  if (isOAuth2Error(result)) {
-    throw new Error(`Failed to get token: ${result.error}`);
-  }
-  return result;
-}
-
-// src/common.ts
-var CustomEvent = globalThis.CustomEvent ?? class CustomEvent2 extends Event {
-  #detail;
-  constructor(type, options) {
-    super(type, options);
-    this.#detail = options?.detail ?? null;
-  }
-  get detail() {
-    return this.#detail;
-  }
-};
-var localStorage = globalThis.localStorage;
-function saveLocal(client, x) {
-  localStorage?.setItem(`@osdk/oauth : refresh : ${client.client_id}`, JSON.stringify(x));
-}
-function removeLocal(client) {
-  localStorage?.removeItem(`@osdk/oauth : refresh : ${client.client_id}`);
-}
-function readLocal(client) {
-  return JSON.parse(
-    // MUST `localStorage?` as nodejs does not have localStorage
-    localStorage?.getItem(`@osdk/oauth : refresh : ${client.client_id}`) ?? "{}"
-  );
-}
-function common(client, as, _signIn, oauthHttpOptions, refresh) {
-  let token;
-  const eventTarget = new TypedEventTarget();
-  function makeTokenAndSaveRefresh(resp, type) {
-    const {
-      refresh_token,
-      expires_in,
-      access_token
-    } = resp;
-    !(expires_in != null) ? process.env.NODE_ENV !== "production" ? invariant(false) : invariant(false) : void 0;
-    saveLocal(client, {
-      refresh_token
-    });
-    token = {
-      refresh_token,
-      expires_in,
-      access_token,
-      expires_at: Date.now() + expires_in * 1e3
-    };
-    eventTarget.dispatchTypedEvent(type, new CustomEvent(type, {
-      detail: token
-    }));
-    return token;
-  }
-  let refreshTimeout;
-  function rmTimeout() {
-    if (refreshTimeout) clearTimeout(refreshTimeout);
-  }
-  function restartRefreshTimer(evt) {
-    if (refresh) {
-      rmTimeout();
-      refreshTimeout = setTimeout(refresh, evt.detail.expires_in * 1e3 - 60 * 1e3);
-    }
-  }
-  async function signOut() {
-    !token ? process.env.NODE_ENV !== "production" ? invariant(false, "not signed in") : invariant(false) : void 0;
-    const result = await processRevocationResponse(await revocationRequest(as, client, token.access_token, oauthHttpOptions));
-    rmTimeout();
-    removeLocal(client);
-    token = void 0;
-    throwIfError(result);
-    eventTarget.dispatchTypedEvent("signOut", new Event("signOut"));
-  }
-  let pendingSignIn;
-  async function signIn() {
-    if (pendingSignIn) {
-      return pendingSignIn;
-    }
-    try {
-      pendingSignIn = _signIn();
-      return await pendingSignIn;
-    } finally {
-      pendingSignIn = void 0;
-    }
-  }
-  eventTarget.addEventListener("signIn", restartRefreshTimer);
-  eventTarget.addEventListener("refresh", restartRefreshTimer);
-  function getTokenOrUndefined() {
-    if (!token || Date.now() >= token.expires_at) {
-      return void 0;
-    }
-    return token?.access_token;
-  }
-  const getToken = Object.assign(async function getToken2() {
-    if (!token || Date.now() >= token.expires_at) {
-      token = await signIn();
-    }
-    return token?.access_token;
-  }, {
-    signIn,
-    refresh,
-    signOut,
-    rmTimeout,
-    getTokenOrUndefined,
-    addEventListener: eventTarget.addEventListener.bind(eventTarget),
-    removeEventListener: eventTarget.removeEventListener.bind(eventTarget)
-  });
-  return {
-    getToken,
-    makeTokenAndSaveRefresh
-  };
-}
-function createAuthorizationServer(ctxPath, url) {
-  const issuer = `${new URL(ctxPath, url)}`;
-  return {
-    token_endpoint: `${issuer}/api/oauth2/token`,
-    authorization_endpoint: `${issuer}/api/oauth2/authorize`,
-    revocation_endpoint: `${issuer}/api/oauth2/revoke_token`,
-    issuer
-  };
-}
-
-// src/createConfidentialOauthClient.ts
-function createConfidentialOauthClient(client_id, client_secret, url, scopes = ["api:read-data", "api:write-data"], fetchFn = globalThis.fetch, ctxPath = "/multipass") {
-  const client = {
-    client_id,
-    client_secret
-  };
-  const authServer = createAuthorizationServer(ctxPath, url);
-  const oauthHttpOptions = {
-    [customFetch]: fetchFn
-  };
-  const {
-    getToken,
-    makeTokenAndSaveRefresh
-  } = common(client, authServer, _signIn, oauthHttpOptions, void 0);
-  async function _signIn() {
-    return makeTokenAndSaveRefresh(throwIfError(await processClientCredentialsResponse(authServer, client, await clientCredentialsGrantRequest(authServer, client, new URLSearchParams({
-      scope: scopes.join(" ")
-    }), oauthHttpOptions))), "signIn");
-  }
-  return getToken;
-}
-function createPublicOauthClient(client_id, url, redirectUrl, useHistory = true, loginPage, postLoginPage = window.location.toString(), scopes = [], fetchFn = globalThis.fetch, ctxPath = "/multipass") {
-  const client = {
-    client_id,
-    token_endpoint_auth_method: "none"
-  };
-  const authServer = createAuthorizationServer(ctxPath, url);
-  const oauthHttpOptions = {
-    [customFetch]: fetchFn
-  };
-  if (scopes.length === 0) {
-    scopes = ["api:read-data", "api:write-data"];
-  }
-  const {
-    makeTokenAndSaveRefresh,
-    getToken
-  } = common(client, authServer, _signIn, oauthHttpOptions, maybeRefresh.bind(globalThis, true));
-  async function go(x) {
-    if (useHistory) return window.history.replaceState({}, "", x);
-    else window.location.assign(x);
-    await delay(1e3);
-    throw new Error("Unable to redirect");
-  }
-  async function maybeRefresh(expectRefreshToken) {
-    const {
-      refresh_token
-    } = readLocal(client);
-    if (!refresh_token) {
-      if (expectRefreshToken) throw new Error("No refresh token found");
-      return;
-    }
-    try {
-      const result = makeTokenAndSaveRefresh(throwIfError(await processAuthorizationCodeOAuth2Response(authServer, client, await refreshTokenGrantRequest(authServer, client, refresh_token, oauthHttpOptions))), "refresh");
-      if (result && window.location.pathname === new URL(redirectUrl).pathname) {
-        const {
-          oldUrl
-        } = readLocal(client);
-        go(oldUrl ?? "/");
-      }
-      return result;
-    } catch (e) {
-      if (process?.env?.NODE_ENV !== "production") {
-        console.warn("Failed to get OAuth2 refresh token. Removing refresh token", e);
-      }
-      removeLocal(client);
-      if (expectRefreshToken) {
-        throw new Error("Could not refresh token");
-      }
-    }
-  }
-  async function maybeHandleAuthReturn() {
-    const {
-      codeVerifier,
-      state,
-      oldUrl
-    } = readLocal(client);
-    if (!codeVerifier) return;
-    try {
-      const ret = makeTokenAndSaveRefresh(throwIfError(await processAuthorizationCodeOAuth2Response(authServer, client, await authorizationCodeGrantRequest(authServer, client, throwIfError(validateAuthResponse(authServer, client, new URL(window.location.href), state)), redirectUrl, codeVerifier, oauthHttpOptions))), "signIn");
-      go(oldUrl);
-      return ret;
-    } catch (e) {
-      if (process?.env?.NODE_ENV !== "production") {
-        console.warn("Failed to get OAuth2 token using PKCE, removing PKCE and starting a new auth flow", e);
-      }
-      removeLocal(client);
-    }
-  }
-  async function initiateLoginRedirect() {
-    if (loginPage && window.location.href !== loginPage && window.location.pathname !== loginPage) {
-      saveLocal(client, {
-        oldUrl: postLoginPage
-      });
-      return await go(loginPage);
-    }
-    const state = generateRandomState();
-    const codeVerifier = generateRandomCodeVerifier();
-    const oldUrl = readLocal(client).oldUrl ?? window.location.toString();
-    saveLocal(client, {
-      codeVerifier,
-      state,
-      oldUrl
-    });
-    window.location.assign(`${authServer.authorization_endpoint}?${new URLSearchParams({
-      client_id,
-      response_type: "code",
-      state,
-      redirect_uri: redirectUrl,
-      code_challenge: await calculatePKCECodeChallenge(codeVerifier),
-      code_challenge_method: "S256",
-      scope: ["offline_access", ...scopes].join(" ")
-    })}`);
-    await delay(1e3);
-    throw new Error("Unable to redirect");
-  }
-  async function _signIn() {
-    return await maybeRefresh() ?? await maybeHandleAuthReturn() ?? await initiateLoginRedirect();
-  }
-  return getToken;
-}
-
-export { createConfidentialOauthClient, createPublicOauthClient };
-//# sourceMappingURL=index.js.map
+/*
+ * Copyright 2024 Palantir Technologies, Inc. All rights reserved.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+export { createConfidentialOauthClient } from "./createConfidentialOauthClient.js";
+export { createPublicOauthClient } from "./createPublicOauthClient.js";
 //# sourceMappingURL=index.js.map

package/build/esm/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/throwIfError.ts","../../src/common.ts","../../src/createConfidentialOauthClient.ts","../../src/createPublicOauthClient.ts"],"names":["CustomEvent","getToken","customFetch"],"mappings":";;;;;;AAiBO,SAAS,aAAa,MAAQ,EAAA;AACnC,EAAI,IAAA,aAAA,CAAc,MAAM,CAAG,EAAA;AACzB,IAAA,MAAM,IAAI,KAAA,CAAM,CAAwB,qBAAA,EAAA,MAAA,CAAO,KAAK,CAAE,CAAA,CAAA,CAAA;AAAA,GACxD;AACA,EAAO,OAAA,MAAA,CAAA;AACT,CAAA;;;ACAA,IAAM,WAAA,GAA0E,WAAW,WAAe,IAAA,MAAMA,qBAAoB,KAAM,CAAA;AAAA,EACxI,OAAA,CAAA;AAAA,EACA,WAAA,CAAY,MAAM,OAAS,EAAA;AACzB,IAAA,KAAA,CAAM,MAAM,OAAO,CAAA,CAAA;AACnB,IAAK,IAAA,CAAA,OAAA,GAAU,SAAS,MAAU,IAAA,IAAA,CAAA;AAAA,GACpC;AAAA,EACA,IAAI,MAAS,GAAA;AACX,IAAA,OAAO,IAAK,CAAA,OAAA,CAAA;AAAA,GACd;AACF,CAAA,CAAA;AACA,IAAM,eAAe,UAAW,CAAA,YAAA,CAAA;AACzB,SAAS,SAAA,CAAU,QAAQ,CAAG,EAAA;AAEnC,EAAc,YAAA,EAAA,OAAA,CAAQ,2BAA2B,MAAO,CAAA,SAAS,IAAI,IAAK,CAAA,SAAA,CAAU,CAAC,CAAC,CAAA,CAAA;AACxF,CAAA;AACO,SAAS,YAAY,MAAQ,EAAA;AAElC,EAAA,YAAA,EAAc,UAAW,CAAA,CAAA,wBAAA,EAA2B,MAAO,CAAA,SAAS,CAAE,CAAA,CAAA,CAAA;AACxE,CAAA;AACO,SAAS,UAAU,MAAQ,EAAA;AAChC,EAAA,OAAO,IAAK,CAAA,KAAA;AAAA;AAAA,IAEZ,cAAc,OAAQ,CAAA,CAAA,wBAAA,EAA2B,MAAO,CAAA,SAAS,EAAE,CAAK,IAAA,IAAA;AAAA,GAAI,CAAA;AAC9E,CAAA;AACO,SAAS,MAAO,CAAA,MAAA,EAAQ,EAAI,EAAA,OAAA,EAAS,kBAAkB,OAAS,EAAA;AACrE,EAAI,IAAA,KAAA,CAAA;AACJ,EAAM,MAAA,WAAA,GAAc,IAAI,gBAAiB,EAAA,CAAA;AACzC,EAAS,SAAA,uBAAA,CAAwB,MAAM,IAAM,EAAA;AAC3C,IAAM,MAAA;AAAA,MACJ,aAAA;AAAA,MACA,UAAA;AAAA,MACA,YAAA;AAAA,KACE,GAAA,IAAA,CAAA;AACJ,IAAE,EAAA,UAAA,IAAc,IAAQ,CAAA,GAAA,OAAA,CAAQ,GAAI,CAAA,QAAA,KAAa,YAAe,GAAA,SAAA,CAAU,KAAK,CAAA,GAAI,SAAU,CAAA,KAAK,CAAI,GAAA,KAAA,CAAA,CAAA;AACtG,IAAA,SAAA,CAAU,MAAQ,EAAA;AAAA,MAChB,aAAA;AAAA,KACD,CAAA,CAAA;AACD,IAAQ,KAAA,GAAA;AAAA,MACN,aAAA;AAAA,MACA,UAAA;AAAA,MACA,YAAA;AAAA,MACA,UAAY,EAAA,IAAA,CAAK,GAAI,EAAA,GAAI,UAAa,GAAA,GAAA;AAAA,KACxC,CAAA;AACA,IAAA,WAAA,CAAY,kBAAmB,CAAA,IAAA,EAAM,IAAI,WAAA,CAAY,IAAM,EAAA;AAAA,MACzD,MAAQ,EAAA,KAAA;AAAA,KACT,CAAC,CAAA,CAAA;AACF,IAAO,OAAA,KAAA,CAAA;AAAA,GACT;AACA,EAAI,IAAA,cAAA,CAAA;AACJ,EAAA,SAAS,SAAY,GAAA;AACnB,IAAI,IAAA,cAAA,eAA6B,cAAc,CAAA,CAAA;AAAA,GACjD;AACA,EAAA,SAAS,oBAAoB,GAAK,EAAA;AAChC,IAAA,IAAI,OAAS,EAAA;AACX,MAAU,SAAA,EAAA,CAAA;AACV,MAAA,cAAA,GAAiB,WAAW,OAAS,EAAA,GAAA,CAAI,OAAO,UAAa,GAAA,GAAA,GAAO,KAAK,GAAI,CAAA,CAAA;AAAA,KAC/E;AAAA,GACF;AACA,EAAA,eAAe,OAAU,GAAA;AACvB,IAAC,CAAA,KAAA,GAAQ,OAAQ,CAAA,GAAA,CAAI,QAAa,KAAA,YAAA,GAAe,SAAU,CAAA,KAAA,EAAO,eAAe,CAAA,GAAI,SAAU,CAAA,KAAK,CAAI,GAAA,KAAA,CAAA,CAAA;AACxG,IAAM,MAAA,MAAA,GAAS,MAAM,yBAAA,CAA0B,MAAM,iBAAA,CAAkB,IAAI,MAAQ,EAAA,KAAA,CAAM,YAAc,EAAA,gBAAgB,CAAC,CAAA,CAAA;AACxH,IAAU,SAAA,EAAA,CAAA;AAGV,IAAA,WAAA,CAAY,MAAM,CAAA,CAAA;AAClB,IAAQ,KAAA,GAAA,KAAA,CAAA,CAAA;AACR,IAAA,YAAA,CAAa,MAAM,CAAA,CAAA;AACnB,IAAA,WAAA,CAAY,kBAAmB,CAAA,SAAA,EAAW,IAAI,KAAA,CAAM,SAAS,CAAC,CAAA,CAAA;AAAA,GAChE;AACA,EAAI,IAAA,aAAA,CAAA;AACJ,EAAA,eAAe,MAAS,GAAA;AACtB,IAAA,IAAI,aAAe,EAAA;AACjB,MAAO,OAAA,aAAA,CAAA;AAAA,KACT;AACA,IAAI,IAAA;AACF,MAAA,aAAA,GAAgB,OAAQ,EAAA,CAAA;AACxB,MAAA,OAAO,MAAM,aAAA,CAAA;AAAA,KACb,SAAA;AACA,MAAgB,aAAA,GAAA,KAAA,CAAA,CAAA;AAAA,KAClB;AAAA,GACF;AACA,EAAY,WAAA,CAAA,gBAAA,CAAiB,UAAU,mBAAmB,CAAA,CAAA;AAC1D,EAAY,WAAA,CAAA,gBAAA,CAAiB,WAAW,mBAAmB,CAAA,CAAA;AAC3D,EAAA,SAAS,mBAAsB,GAAA;AAC7B,IAAA,IAAI,CAAC,KAAS,IAAA,IAAA,CAAK,GAAI,EAAA,IAAK,MAAM,UAAY,EAAA;AAC5C,MAAO,OAAA,KAAA,CAAA,CAAA;AAAA,KACT;AACA,IAAA,OAAO,KAAO,EAAA,YAAA,CAAA;AAAA,GAChB;AACA,EAAA,MAAM,QAAW,GAAA,MAAA,CAAO,MAAO,CAAA,eAAeC,SAAW,GAAA;AACvD,IAAA,IAAI,CAAC,KAAS,IAAA,IAAA,CAAK,GAAI,EAAA,IAAK,MAAM,UAAY,EAAA;AAC5C,MAAA,KAAA,GAAQ,MAAM,MAAO,EAAA,CAAA;AAAA,KACvB;AACA,IAAA,OAAO,KAAO,EAAA,YAAA,CAAA;AAAA,GACb,EAAA;AAAA,IACD,MAAA;AAAA,IACA,OAAA;AAAA,IACA,OAAA;AAAA,IACA,SAAA;AAAA,IACA,mBAAA;AAAA,IACA,gBAAkB,EAAA,WAAA,CAAY,gBAAiB,CAAA,IAAA,CAAK,WAAW,CAAA;AAAA,IAC/D,mBAAqB,EAAA,WAAA,CAAY,mBAAoB,CAAA,IAAA,CAAK,WAAW,CAAA;AAAA,GACtE,CAAA,CAAA;AACD,EAAO,OAAA;AAAA,IACL,QAAA;AAAA,IACA,uBAAA;AAAA,GACF,CAAA;AACF,CAAA;AACO,SAAS,yBAAA,CAA0B,SAAS,GAAK,EAAA;AACtD,EAAA,MAAM,SAAS,CAAG,EAAA,IAAI,GAAI,CAAA,OAAA,EAAS,GAAG,CAAC,CAAA,CAAA,CAAA;AACvC,EAAO,OAAA;AAAA,IACL,cAAA,EAAgB,GAAG,MAAM,CAAA,iBAAA,CAAA;AAAA,IACzB,sBAAA,EAAwB,GAAG,MAAM,CAAA,qBAAA,CAAA;AAAA,IACjC,mBAAA,EAAqB,GAAG,MAAM,CAAA,wBAAA,CAAA;AAAA,IAC9B,MAAA;AAAA,GACF,CAAA;AACF,CAAA;;;AC7GO,SAAS,6BAA8B,CAAA,SAAA,EAAW,aAAe,EAAA,GAAA,EAAK,MAAS,GAAA,CAAC,eAAiB,EAAA,gBAAgB,CAAG,EAAA,OAAA,GAAU,UAAW,CAAA,KAAA,EAAO,UAAU,YAAc,EAAA;AAC7K,EAAA,MAAM,MAAS,GAAA;AAAA,IACb,SAAA;AAAA,IACA,aAAA;AAAA,GACF,CAAA;AACA,EAAM,MAAA,UAAA,GAAa,yBAA0B,CAAA,OAAA,EAAS,GAAG,CAAA,CAAA;AACzD,EAAA,MAAM,gBAAmB,GAAA;AAAA,IACvB,CAAC,WAAW,GAAG,OAAA;AAAA,GACjB,CAAA;AACA,EAAM,MAAA;AAAA,IACJ,QAAA;AAAA,IACA,uBAAA;AAAA,MACE,MAAO,CAAA,MAAA,EAAQ,UAAY,EAAA,OAAA,EAAS,kBAAkB,KAAS,CAAA,CAAA,CAAA;AACnE,EAAA,eAAe,OAAU,GAAA;AACvB,IAAO,OAAA,uBAAA,CAAwB,YAAa,CAAA,MAAM,gCAAiC,CAAA,UAAA,EAAY,MAAQ,EAAA,MAAM,6BAA8B,CAAA,UAAA,EAAY,MAAQ,EAAA,IAAI,eAAgB,CAAA;AAAA,MACjL,KAAA,EAAO,MAAO,CAAA,IAAA,CAAK,GAAG,CAAA;AAAA,KACvB,CAAG,EAAA,gBAAgB,CAAC,CAAC,GAAG,QAAQ,CAAA,CAAA;AAAA,GACnC;AACA,EAAO,OAAA,QAAA,CAAA;AACT,CAAA;AChBO,SAAS,wBAAwB,SAAW,EAAA,GAAA,EAAK,aAAa,UAAa,GAAA,IAAA,EAAM,WAAW,aAAgB,GAAA,MAAA,CAAO,SAAS,QAAS,EAAA,EAAG,SAAS,EAAC,EAAG,UAAU,UAAW,CAAA,KAAA,EAAO,UAAU,YAAc,EAAA;AAC9M,EAAA,MAAM,MAAS,GAAA;AAAA,IACb,SAAA;AAAA,IACA,0BAA4B,EAAA,MAAA;AAAA,GAC9B,CAAA;AACA,EAAM,MAAA,UAAA,GAAa,yBAA0B,CAAA,OAAA,EAAS,GAAG,CAAA,CAAA;AACzD,EAAA,MAAM,gBAAmB,GAAA;AAAA,IACvB,CAACC,WAAW,GAAG,OAAA;AAAA,GACjB,CAAA;AACA,EAAI,IAAA,MAAA,CAAO,WAAW,CAAG,EAAA;AACvB,IAAS,MAAA,GAAA,CAAC,iBAAiB,gBAAgB,CAAA,CAAA;AAAA,GAC7C;AACA,EAAM,MAAA;AAAA,IACJ,uBAAA;AAAA,IACA,QAAA;AAAA,GACF,GAAI,MAAO,CAAA,MAAA,EAAQ,UAAY,EAAA,OAAA,EAAS,kBAAkB,YAAa,CAAA,IAAA,CAAK,UAAY,EAAA,IAAI,CAAC,CAAA,CAAA;AAC7F,EAAA,eAAe,GAAG,CAAG,EAAA;AACnB,IAAI,IAAA,UAAA,SAAmB,MAAO,CAAA,OAAA,CAAQ,aAAa,EAAC,EAAG,IAAI,CAAC,CAAA,CAAA;AAAA,SAAO,MAAA,CAAO,QAAS,CAAA,MAAA,CAAO,CAAC,CAAA,CAAA;AAC3F,IAAA,MAAM,MAAM,GAAI,CAAA,CAAA;AAChB,IAAM,MAAA,IAAI,MAAM,oBAAoB,CAAA,CAAA;AAAA,GACtC;AACA,EAAA,eAAe,aAAa,kBAAoB,EAAA;AAC9C,IAAM,MAAA;AAAA,MACJ,aAAA;AAAA,KACF,GAAI,UAAU,MAAM,CAAA,CAAA;AACpB,IAAA,IAAI,CAAC,aAAe,EAAA;AAClB,MAAA,IAAI,kBAAoB,EAAA,MAAM,IAAI,KAAA,CAAM,wBAAwB,CAAA,CAAA;AAChE,MAAA,OAAA;AAAA,KACF;AACA,IAAI,IAAA;AAGF,MAAA,MAAM,SAAS,uBAAwB,CAAA,YAAA,CAAa,MAAM,sCAAA,CAAuC,YAAY,MAAQ,EAAA,MAAM,wBAAyB,CAAA,UAAA,EAAY,QAAQ,aAAe,EAAA,gBAAgB,CAAC,CAAC,GAAG,SAAS,CAAA,CAAA;AACrN,MAAI,IAAA,MAAA,IAAU,OAAO,QAAS,CAAA,QAAA,KAAa,IAAI,GAAI,CAAA,WAAW,EAAE,QAAU,EAAA;AACxE,QAAM,MAAA;AAAA,UACJ,MAAA;AAAA,SACF,GAAI,UAAU,MAAM,CAAA,CAAA;AACpB,QAAA,EAAA,CAAG,UAAU,GAAG,CAAA,CAAA;AAAA,OAClB;AACA,MAAO,OAAA,MAAA,CAAA;AAAA,aACA,CAAG,EAAA;AACV,MAAI,IAAA,OAAA,EAAS,GAAK,EAAA,QAAA,KAAa,YAAc,EAAA;AAE3C,QAAQ,OAAA,CAAA,IAAA,CAAK,8DAA8D,CAAC,CAAA,CAAA;AAAA,OAC9E;AACA,MAAA,WAAA,CAAY,MAAM,CAAA,CAAA;AAClB,MAAA,IAAI,kBAAoB,EAAA;AACtB,QAAM,MAAA,IAAI,MAAM,yBAAyB,CAAA,CAAA;AAAA,OAC3C;AAAA,KACF;AAAA,GACF;AACA,EAAA,eAAe,qBAAwB,GAAA;AACrC,IAAM,MAAA;AAAA,MACJ,YAAA;AAAA,MACA,KAAA;AAAA,MACA,MAAA;AAAA,KACF,GAAI,UAAU,MAAM,CAAA,CAAA;AACpB,IAAA,IAAI,CAAC,YAAc,EAAA,OAAA;AACnB,IAAI,IAAA;AACF,MAAA,MAAM,GAAM,GAAA,uBAAA,CAAwB,YAAa,CAAA,MAAM,sCAAuC,CAAA,UAAA,EAAY,MAAQ,EAAA,MAAM,6BAA8B,CAAA,UAAA,EAAY,MAAQ,EAAA,YAAA,CAAa,qBAAqB,UAAY,EAAA,MAAA,EAAQ,IAAI,GAAA,CAAI,MAAO,CAAA,QAAA,CAAS,IAAI,CAAA,EAAG,KAAK,CAAC,CAAG,EAAA,WAAA,EAAa,YAAc,EAAA,gBAAgB,CAAC,CAAC,GAAG,QAAQ,CAAA,CAAA;AAChU,MAAA,EAAA,CAAG,MAAM,CAAA,CAAA;AACT,MAAO,OAAA,GAAA,CAAA;AAAA,aACA,CAAG,EAAA;AACV,MAAI,IAAA,OAAA,EAAS,GAAK,EAAA,QAAA,KAAa,YAAc,EAAA;AAE3C,QAAQ,OAAA,CAAA,IAAA,CAAK,qFAAqF,CAAC,CAAA,CAAA;AAAA,OACrG;AACA,MAAA,WAAA,CAAY,MAAM,CAAA,CAAA;AAAA,KACpB;AAAA,GACF;AACA,EAAA,eAAe,qBAAwB,GAAA;AACrC,IAAI,IAAA,SAAA,IAAa,OAAO,QAAS,CAAA,IAAA,KAAS,aAAa,MAAO,CAAA,QAAA,CAAS,aAAa,SAAW,EAAA;AAC7F,MAAA,SAAA,CAAU,MAAQ,EAAA;AAAA,QAChB,MAAQ,EAAA,aAAA;AAAA,OACT,CAAA,CAAA;AACD,MAAO,OAAA,MAAM,GAAG,SAAS,CAAA,CAAA;AAAA,KAC3B;AACA,IAAA,MAAM,QAAQ,mBAAoB,EAAA,CAAA;AAClC,IAAA,MAAM,eAAe,0BAA2B,EAAA,CAAA;AAChD,IAAA,MAAM,SAAS,SAAU,CAAA,MAAM,EAAE,MAAU,IAAA,MAAA,CAAO,SAAS,QAAS,EAAA,CAAA;AACpE,IAAA,SAAA,CAAU,MAAQ,EAAA;AAAA,MAChB,YAAA;AAAA,MACA,KAAA;AAAA,MACA,MAAA;AAAA,KACD,CAAA,CAAA;AACD,IAAA,MAAA,CAAO,SAAS,MAAO,CAAA,CAAA,EAAG,WAAW,sBAAsB,CAAA,CAAA,EAAI,IAAI,eAAgB,CAAA;AAAA,MACjF,SAAA;AAAA,MACA,aAAe,EAAA,MAAA;AAAA,MACf,KAAA;AAAA,MACA,YAAc,EAAA,WAAA;AAAA,MACd,cAAA,EAAgB,MAAM,0BAAA,CAA2B,YAAY,CAAA;AAAA,MAC7D,qBAAuB,EAAA,MAAA;AAAA,MACvB,OAAO,CAAC,gBAAA,EAAkB,GAAG,MAAM,CAAA,CAAE,KAAK,GAAG,CAAA;AAAA,KAC9C,CAAC,CAAE,CAAA,CAAA,CAAA;AAGJ,IAAA,MAAM,MAAM,GAAI,CAAA,CAAA;AAChB,IAAM,MAAA,IAAI,MAAM,oBAAoB,CAAA,CAAA;AAAA,GACtC;AAGA,EAAA,eAAe,OAAU,GAAA;AAEvB,IAAA,OAAQ,MAAM,YAAa,EAAA,IAErB,MAAM,qBAAsB,EAAA,IAE9B,MAAM,qBAAsB,EAAA,CAAA;AAAA,GAClC;AACA,EAAO,OAAA,QAAA,CAAA;AACT","file":"index.js","sourcesContent":["/*\n * Copyright 2024 Palantir Technologies, Inc. All rights reserved.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { isOAuth2Error } from \"oauth4webapi\";\nexport function throwIfError(result) {\n  if (isOAuth2Error(result)) {\n    throw new Error(`Failed to get token: ${result.error}`);\n  }\n  return result;\n}","/*\n * Copyright 2024 Palantir Technologies, Inc. All rights reserved.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { processRevocationResponse, revocationRequest } from \"oauth4webapi\";\nimport invariant from \"tiny-invariant\";\nimport { TypedEventTarget } from \"typescript-event-target\";\nimport { throwIfError } from \"./throwIfError.js\";\n// Node 18 is supposed to have a `CustomEvent` but it is not exposed on `globalThis`\n// which creates a problem for making a single codebase for node and browser. This polyfill works around it\nconst CustomEvent = process.env.TARGET === \"browser\" ? globalThis.CustomEvent : globalThis.CustomEvent ?? class CustomEvent extends Event {\n  #detail;\n  constructor(type, options) {\n    super(type, options);\n    this.#detail = options?.detail ?? null;\n  }\n  get detail() {\n    return this.#detail;\n  }\n};\nconst localStorage = globalThis.localStorage;\nexport function saveLocal(client, x) {\n  // MUST `localStorage?` as nodejs does not have localStorage\n  localStorage?.setItem(`@osdk/oauth : refresh : ${client.client_id}`, JSON.stringify(x));\n}\nexport function removeLocal(client) {\n  // MUST `localStorage?` as nodejs does not have localStorage\n  localStorage?.removeItem(`@osdk/oauth : refresh : ${client.client_id}`);\n}\nexport function readLocal(client) {\n  return JSON.parse(\n  // MUST `localStorage?` as nodejs does not have localStorage\n  localStorage?.getItem(`@osdk/oauth : refresh : ${client.client_id}`) ?? \"{}\");\n}\nexport function common(client, as, _signIn, oauthHttpOptions, refresh) {\n  let token;\n  const eventTarget = new TypedEventTarget();\n  function makeTokenAndSaveRefresh(resp, type) {\n    const {\n      refresh_token,\n      expires_in,\n      access_token\n    } = resp;\n    !(expires_in != null) ? process.env.NODE_ENV !== \"production\" ? invariant(false) : invariant(false) : void 0;\n    saveLocal(client, {\n      refresh_token\n    });\n    token = {\n      refresh_token,\n      expires_in,\n      access_token,\n      expires_at: Date.now() + expires_in * 1000\n    };\n    eventTarget.dispatchTypedEvent(type, new CustomEvent(type, {\n      detail: token\n    }));\n    return token;\n  }\n  let refreshTimeout;\n  function rmTimeout() {\n    if (refreshTimeout) clearTimeout(refreshTimeout);\n  }\n  function restartRefreshTimer(evt) {\n    if (refresh) {\n      rmTimeout();\n      refreshTimeout = setTimeout(refresh, evt.detail.expires_in * 1000 - 60 * 1000);\n    }\n  }\n  async function signOut() {\n    !token ? process.env.NODE_ENV !== \"production\" ? invariant(false, \"not signed in\") : invariant(false) : void 0;\n    const result = await processRevocationResponse(await revocationRequest(as, client, token.access_token, oauthHttpOptions));\n    rmTimeout();\n\n    // Clean up\n    removeLocal(client);\n    token = undefined;\n    throwIfError(result);\n    eventTarget.dispatchTypedEvent(\"signOut\", new Event(\"signOut\"));\n  }\n  let pendingSignIn;\n  async function signIn() {\n    if (pendingSignIn) {\n      return pendingSignIn;\n    }\n    try {\n      pendingSignIn = _signIn();\n      return await pendingSignIn;\n    } finally {\n      pendingSignIn = undefined;\n    }\n  }\n  eventTarget.addEventListener(\"signIn\", restartRefreshTimer);\n  eventTarget.addEventListener(\"refresh\", restartRefreshTimer);\n  function getTokenOrUndefined() {\n    if (!token || Date.now() >= token.expires_at) {\n      return undefined;\n    }\n    return token?.access_token;\n  }\n  const getToken = Object.assign(async function getToken() {\n    if (!token || Date.now() >= token.expires_at) {\n      token = await signIn();\n    }\n    return token?.access_token;\n  }, {\n    signIn,\n    refresh,\n    signOut,\n    rmTimeout,\n    getTokenOrUndefined,\n    addEventListener: eventTarget.addEventListener.bind(eventTarget),\n    removeEventListener: eventTarget.removeEventListener.bind(eventTarget)\n  });\n  return {\n    getToken,\n    makeTokenAndSaveRefresh\n  };\n}\nexport function createAuthorizationServer(ctxPath, url) {\n  const issuer = `${new URL(ctxPath, url)}`;\n  return {\n    token_endpoint: `${issuer}/api/oauth2/token`,\n    authorization_endpoint: `${issuer}/api/oauth2/authorize`,\n    revocation_endpoint: `${issuer}/api/oauth2/revoke_token`,\n    issuer\n  };\n}","/*\n * Copyright 2024 Palantir Technologies, Inc. All rights reserved.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { clientCredentialsGrantRequest, customFetch, processClientCredentialsResponse } from \"oauth4webapi\";\nimport { common, createAuthorizationServer } from \"./common.js\";\nimport { throwIfError } from \"./throwIfError.js\";\n\n/**\n * @param client_id\n * @param client_secret\n * @param url the base url of your foundry server\n * @param scopes\n * @param fetchFn\n * @param ctxPath\n * @returns which can be used as a token provider\n */\nexport function createConfidentialOauthClient(client_id, client_secret, url, scopes = [\"api:read-data\", \"api:write-data\"], fetchFn = globalThis.fetch, ctxPath = \"/multipass\") {\n  const client = {\n    client_id,\n    client_secret\n  };\n  const authServer = createAuthorizationServer(ctxPath, url);\n  const oauthHttpOptions = {\n    [customFetch]: fetchFn\n  };\n  const {\n    getToken,\n    makeTokenAndSaveRefresh\n  } = common(client, authServer, _signIn, oauthHttpOptions, undefined);\n  async function _signIn() {\n    return makeTokenAndSaveRefresh(throwIfError(await processClientCredentialsResponse(authServer, client, await clientCredentialsGrantRequest(authServer, client, new URLSearchParams({\n      scope: scopes.join(\" \")\n    }), oauthHttpOptions))), \"signIn\");\n  }\n  return getToken;\n}","/*\n * Copyright 2024 Palantir Technologies, Inc. All rights reserved.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport delay from \"delay\";\nimport { authorizationCodeGrantRequest, calculatePKCECodeChallenge, customFetch, generateRandomCodeVerifier, generateRandomState, processAuthorizationCodeOAuth2Response, refreshTokenGrantRequest, validateAuthResponse } from \"oauth4webapi\";\nimport { common, createAuthorizationServer, readLocal, removeLocal, saveLocal } from \"./common.js\";\nimport { throwIfError } from \"./throwIfError.js\";\n/**\n * @param client_id\n * @param url the base url of your foundry server\n * @param redirectUrl the url configured for redirect in the oauth configuration on the server\n * @param useHistory if true, when possible uses `history.replaceState()`, otherwise uses `window.location.assign()`\n * @param loginPage if you want a custom landing page prior to logging in, set this to that url\n * @param postLoginPage if you want to customize where you return to after a completed authentication cycle. defaults to the url when the page loaded\n * @param scopes\n * @param fetchFn\n * @param ctxPath\n * @returns {PublicOauthClient} which can be used as a token provider\n */\nexport function createPublicOauthClient(client_id, url, redirectUrl, useHistory = true, loginPage, postLoginPage = window.location.toString(), scopes = [], fetchFn = globalThis.fetch, ctxPath = \"/multipass\") {\n  const client = {\n    client_id,\n    token_endpoint_auth_method: \"none\"\n  };\n  const authServer = createAuthorizationServer(ctxPath, url);\n  const oauthHttpOptions = {\n    [customFetch]: fetchFn\n  };\n  if (scopes.length === 0) {\n    scopes = [\"api:read-data\", \"api:write-data\"];\n  }\n  const {\n    makeTokenAndSaveRefresh,\n    getToken\n  } = common(client, authServer, _signIn, oauthHttpOptions, maybeRefresh.bind(globalThis, true));\n  async function go(x) {\n    if (useHistory) return window.history.replaceState({}, \"\", x);else window.location.assign(x);\n    await delay(1000);\n    throw new Error(\"Unable to redirect\");\n  }\n  async function maybeRefresh(expectRefreshToken) {\n    const {\n      refresh_token\n    } = readLocal(client);\n    if (!refresh_token) {\n      if (expectRefreshToken) throw new Error(\"No refresh token found\");\n      return;\n    }\n    try {\n      // note, we don't use processRefreshTokenResponse because the mp oauth implementation\n      // doesn't do refresh tokens quite right and this lets us skip the id check\n      const result = makeTokenAndSaveRefresh(throwIfError(await processAuthorizationCodeOAuth2Response(authServer, client, await refreshTokenGrantRequest(authServer, client, refresh_token, oauthHttpOptions))), \"refresh\");\n      if (result && window.location.pathname === new URL(redirectUrl).pathname) {\n        const {\n          oldUrl\n        } = readLocal(client);\n        go(oldUrl ?? \"/\");\n      }\n      return result;\n    } catch (e) {\n      if (process?.env?.NODE_ENV !== \"production\") {\n        // eslint-disable-next-line no-console\n        console.warn(\"Failed to get OAuth2 refresh token. Removing refresh token\", e);\n      }\n      removeLocal(client);\n      if (expectRefreshToken) {\n        throw new Error(\"Could not refresh token\");\n      }\n    }\n  }\n  async function maybeHandleAuthReturn() {\n    const {\n      codeVerifier,\n      state,\n      oldUrl\n    } = readLocal(client);\n    if (!codeVerifier) return;\n    try {\n      const ret = makeTokenAndSaveRefresh(throwIfError(await processAuthorizationCodeOAuth2Response(authServer, client, await authorizationCodeGrantRequest(authServer, client, throwIfError(validateAuthResponse(authServer, client, new URL(window.location.href), state)), redirectUrl, codeVerifier, oauthHttpOptions))), \"signIn\");\n      go(oldUrl);\n      return ret;\n    } catch (e) {\n      if (process?.env?.NODE_ENV !== \"production\") {\n        // eslint-disable-next-line no-console\n        console.warn(\"Failed to get OAuth2 token using PKCE, removing PKCE and starting a new auth flow\", e);\n      }\n      removeLocal(client);\n    }\n  }\n  async function initiateLoginRedirect() {\n    if (loginPage && window.location.href !== loginPage && window.location.pathname !== loginPage) {\n      saveLocal(client, {\n        oldUrl: postLoginPage\n      });\n      return await go(loginPage);\n    }\n    const state = generateRandomState();\n    const codeVerifier = generateRandomCodeVerifier();\n    const oldUrl = readLocal(client).oldUrl ?? window.location.toString();\n    saveLocal(client, {\n      codeVerifier,\n      state,\n      oldUrl\n    });\n    window.location.assign(`${authServer.authorization_endpoint}?${new URLSearchParams({\n      client_id,\n      response_type: \"code\",\n      state,\n      redirect_uri: redirectUrl,\n      code_challenge: await calculatePKCECodeChallenge(codeVerifier),\n      code_challenge_method: \"S256\",\n      scope: [\"offline_access\", ...scopes].join(\" \")\n    })}`);\n\n    // Give time for redirect to happen\n    await delay(1000);\n    throw new Error(\"Unable to redirect\");\n  }\n\n  /** Will throw if there is no token! */\n  async function _signIn() {\n    // 1. Check if we have a refresh token in local storage\n    return (await maybeRefresh()\n    // 2. If there is no refresh token we are likely trying to perform the callback\n    ) ?? (await maybeHandleAuthReturn())\n    // 3. If we haven't been able to load the token from one of the two above ways, we need to make the initial auth request\n    ?? (await initiateLoginRedirect());\n  }\n  return getToken;\n}"]}
+{"version":3,"file":"index.js","names":["createConfidentialOauthClient","createPublicOauthClient"],"sources":["index.js"],"sourcesContent":["/*\n * Copyright 2024 Palantir Technologies, Inc. All rights reserved.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nexport { createConfidentialOauthClient } from \"./createConfidentialOauthClient.js\";\nexport { createPublicOauthClient } from \"./createPublicOauthClient.js\";\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAASA,6BAA6B,QAAQ,oCAAoC;AAClF,SAASC,uBAAuB,QAAQ,8BAA8B","ignoreList":[]}

package/build/esm/throwIfError.js

@@ -0,0 +1,23 @@
+/*
+ * Copyright 2024 Palantir Technologies, Inc. All rights reserved.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import { isOAuth2Error } from "oauth4webapi";
+export function throwIfError(result) {
+  if (isOAuth2Error(result)) {
+    throw new Error(`Failed to get token: ${result.error}`);
+  }
+  return result;
+}
+//# sourceMappingURL=throwIfError.js.map

package/build/esm/throwIfError.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"throwIfError.js","names":["isOAuth2Error","throwIfError","result","Error","error"],"sources":["throwIfError.js"],"sourcesContent":["/*\n * Copyright 2024 Palantir Technologies, Inc. All rights reserved.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nimport { isOAuth2Error } from \"oauth4webapi\";\nexport function throwIfError(result) {\n    if (isOAuth2Error(result)) {\n        throw new Error(`Failed to get token: ${result.error}`);\n    }\n    return result;\n}\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAASA,aAAa,QAAQ,cAAc;AAC5C,OAAO,SAASC,YAAYA,CAACC,MAAM,EAAE;EACjC,IAAIF,aAAa,CAACE,MAAM,CAAC,EAAE;IACvB,MAAM,IAAIC,KAAK,CAAC,wBAAwBD,MAAM,CAACE,KAAK,EAAE,CAAC;EAC3D;EACA,OAAOF,MAAM;AACjB","ignoreList":[]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@osdk/oauth",
-  "version": "0.4.0-beta.2",
+  "version": "0.4.0-beta.3",
   "license": "Apache-2.0",
   "repository": {
     "type": "git",
@@ -26,8 +26,8 @@
     "jest-extended": "^4.0.2",
     "typescript": "^5.5.4",
     "@osdk/monorepo.api-extractor": "~0.0.0",
-    "@osdk/monorepo.tsconfig": "~0.0.0",
-    "@osdk/monorepo.tsup": "~0.0.0"
+    "@osdk/monorepo.tsup": "~0.0.0",
+    "@osdk/monorepo.tsconfig": "~0.0.0"
   },
   "publishConfig": {
     "access": "public"
@@ -50,7 +50,6 @@
     "clean": "rm -rf lib dist types build tsconfig.tsbuildinfo",
     "fix-lint": "eslint . --fix && dprint fmt --config $(find-up dprint.json)",
     "lint": "eslint . && dprint check  --config $(find-up dprint.json)",
-    "transpile": "monorepo.tool.transpile",
-    "typecheck": "monorepo.tool.typecheck esm"
+    "transpile": "monorepo.tool.transpile"
   }
 }