@osdk/oauth 1.1.0-beta.7 → 1.1.0-beta.9

package/build/cjs/index.cjs

@@ -0,0 +1,320 @@
+'use strict';
+
+var oauth4webapi = require('oauth4webapi');
+var invariant2 = require('tiny-invariant');
+var typescriptEventTarget = require('typescript-event-target');
+var delay = require('delay');
+
+function _interopDefault (e) { return e && e.__esModule ? e : { default: e }; }
+
+var invariant2__default = /*#__PURE__*/_interopDefault(invariant2);
+var delay__default = /*#__PURE__*/_interopDefault(delay);
+
+// src/createConfidentialOauthClient.ts
+function throwIfError(result) {
+  if (oauth4webapi.isOAuth2Error(result)) {
+    throw new Error(`Failed to get token: ${result.error}`);
+  }
+  return result;
+}
+
+// src/common.ts
+var CustomEvent = globalThis.CustomEvent ?? class CustomEvent2 extends Event {
+  #detail;
+  constructor(type, options) {
+    super(type, options);
+    this.#detail = options?.detail ?? null;
+  }
+  get detail() {
+    return this.#detail;
+  }
+};
+function localStorageKey(client) {
+  return `@osdk/oauth : refresh : ${client.client_id}`;
+}
+function saveLocal(client, x) {
+  globalThis.localStorage?.setItem(localStorageKey(client), JSON.stringify(x));
+}
+function removeLocal(client) {
+  globalThis.localStorage?.removeItem(localStorageKey(client));
+}
+function readLocal(client) {
+  return JSON.parse(
+    // MUST `localStorage?` as nodejs does not have localStorage
+    globalThis.localStorage?.getItem(localStorageKey(client)) ?? "{}"
+  );
+}
+function saveSession(client, x) {
+  globalThis.sessionStorage?.setItem(localStorageKey(client), JSON.stringify(x));
+}
+function removeSession(client) {
+  globalThis.sessionStorage?.removeItem(localStorageKey(client));
+}
+function readSession(client) {
+  return JSON.parse(
+    // MUST `sessionStorage?` as nodejs does not have sessionStorage
+    globalThis.sessionStorage?.getItem(localStorageKey(client)) ?? "{}"
+  );
+}
+function common(client, as, _signIn, oauthHttpOptions, refresh, refreshTokenMarker) {
+  let token;
+  const eventTarget = new typescriptEventTarget.TypedEventTarget();
+  function makeTokenAndSaveRefresh(resp, type) {
+    const {
+      refresh_token,
+      expires_in,
+      access_token
+    } = resp;
+    !(expires_in != null) ? process.env.NODE_ENV !== "production" ? invariant2__default.default(false) : invariant2__default.default(false) : void 0;
+    saveLocal(client, {
+      refresh_token,
+      refreshTokenMarker
+    });
+    token = {
+      refresh_token,
+      expires_in,
+      access_token,
+      expires_at: Date.now() + expires_in * 1e3
+    };
+    eventTarget.dispatchTypedEvent(type, new CustomEvent(type, {
+      detail: token
+    }));
+    return token;
+  }
+  let refreshTimeout;
+  function rmTimeout() {
+    if (refreshTimeout) clearTimeout(refreshTimeout);
+  }
+  function restartRefreshTimer(evt) {
+    if (refresh) {
+      rmTimeout();
+      refreshTimeout = setTimeout(refresh, evt.detail.expires_in * 1e3 - 60 * 1e3);
+    }
+  }
+  async function signOut() {
+    !token ? process.env.NODE_ENV !== "production" ? invariant2__default.default(false, "not signed in") : invariant2__default.default(false) : void 0;
+    const result = await oauth4webapi.processRevocationResponse(await oauth4webapi.revocationRequest(as, client, token.access_token, oauthHttpOptions));
+    rmTimeout();
+    removeLocal(client);
+    token = void 0;
+    throwIfError(result);
+    eventTarget.dispatchTypedEvent("signOut", new Event("signOut"));
+  }
+  let pendingSignIn;
+  async function signIn() {
+    if (pendingSignIn) {
+      return pendingSignIn;
+    }
+    try {
+      pendingSignIn = _signIn();
+      return await pendingSignIn;
+    } finally {
+      pendingSignIn = void 0;
+    }
+  }
+  eventTarget.addEventListener("signIn", restartRefreshTimer);
+  eventTarget.addEventListener("refresh", restartRefreshTimer);
+  function getTokenOrUndefined() {
+    if (!token || Date.now() >= token.expires_at) {
+      return void 0;
+    }
+    return token?.access_token;
+  }
+  const getToken = Object.assign(async function getToken2() {
+    if (!token || Date.now() >= token.expires_at) {
+      token = await signIn();
+    }
+    return token?.access_token;
+  }, {
+    signIn,
+    refresh,
+    signOut,
+    rmTimeout,
+    getTokenOrUndefined,
+    addEventListener: eventTarget.addEventListener.bind(eventTarget),
+    removeEventListener: eventTarget.removeEventListener.bind(eventTarget)
+  });
+  return {
+    getToken,
+    makeTokenAndSaveRefresh
+  };
+}
+function createAuthorizationServer(ctxPath, url) {
+  const issuer = `${new URL(ctxPath, url + "/")}`;
+  return {
+    token_endpoint: `${issuer}/api/oauth2/token`,
+    authorization_endpoint: `${issuer}/api/oauth2/authorize`,
+    revocation_endpoint: `${issuer}/api/oauth2/revoke_token`,
+    issuer
+  };
+}
+
+// src/createConfidentialOauthClient.ts
+function createConfidentialOauthClient(client_id, client_secret, url, scopes = ["api:read-data", "api:write-data"], fetchFn = globalThis.fetch, ctxPath = "multipass") {
+  const client = {
+    client_id,
+    client_secret
+  };
+  const authServer = createAuthorizationServer(ctxPath, url);
+  const oauthHttpOptions = {
+    [oauth4webapi.customFetch]: fetchFn
+  };
+  const {
+    getToken,
+    makeTokenAndSaveRefresh
+  } = common(client, authServer, _signIn, oauthHttpOptions, void 0, void 0);
+  async function _signIn() {
+    return makeTokenAndSaveRefresh(throwIfError(await oauth4webapi.processClientCredentialsResponse(authServer, client, await oauth4webapi.clientCredentialsGrantRequest(authServer, client, new URLSearchParams({
+      scope: scopes.join(" ")
+    }), oauthHttpOptions))), "signIn");
+  }
+  return getToken;
+}
+function processOptionsAndAssignDefaults(url, redirect_uri, useHistory, loginPage, postLoginPage, scopes, fetchFn, ctxPath) {
+  let options = {};
+  if (typeof useHistory === "object") {
+    !(!loginPage && !postLoginPage && !scopes && !fetchFn && !ctxPath) ? process.env.NODE_ENV !== "production" ? invariant2__default.default(false, "If useHistory is an object, other options should not be provided") : invariant2__default.default(false) : void 0;
+    options = useHistory;
+  } else {
+    options = {
+      useHistory,
+      loginPage,
+      postLoginPage,
+      scopes,
+      fetchFn,
+      ctxPath
+    };
+  }
+  !url ? process.env.NODE_ENV !== "production" ? invariant2__default.default(false, "url is required") : invariant2__default.default(false) : void 0;
+  !redirect_uri ? process.env.NODE_ENV !== "production" ? invariant2__default.default(false, "redirectUrl is required") : invariant2__default.default(false) : void 0;
+  return {
+    useHistory: options.useHistory ?? true,
+    loginPage: options.loginPage,
+    postLoginPage: options.postLoginPage || window.location.toString(),
+    scopes: options.scopes ?? ["api:read-data", "api:write-data"],
+    fetchFn: options.fetchFn ?? globalThis.fetch,
+    ctxPath: options.ctxPath ?? "multipass",
+    refreshTokenMarker: options.refreshTokenMarker
+  };
+}
+
+// src/createPublicOauthClient.ts
+function createPublicOauthClient(client_id, url, redirect_uri, useHistory, loginPage, postLoginPage, scopes, fetchFn, ctxPath) {
+  let refreshTokenMarker;
+  ({
+    useHistory,
+    loginPage,
+    postLoginPage,
+    scopes,
+    fetchFn,
+    ctxPath,
+    refreshTokenMarker
+  } = processOptionsAndAssignDefaults(url, redirect_uri, useHistory, loginPage, postLoginPage, scopes, fetchFn, ctxPath));
+  const client = {
+    client_id,
+    token_endpoint_auth_method: "none"
+  };
+  const authServer = createAuthorizationServer(ctxPath, url);
+  const oauthHttpOptions = {
+    [oauth4webapi.customFetch]: fetchFn
+  };
+  const {
+    makeTokenAndSaveRefresh,
+    getToken
+  } = common(client, authServer, _signIn, oauthHttpOptions, maybeRefresh.bind(globalThis, true), refreshTokenMarker);
+  const go = async (x) => {
+    if (useHistory) {
+      window.history.replaceState({}, "", x);
+      return;
+    } else window.location.assign(x);
+    await delay__default.default(1e3);
+    throw new Error("Unable to redirect");
+  };
+  async function maybeRefresh(expectRefreshToken) {
+    const {
+      refresh_token,
+      refreshTokenMarker: lastRefreshTokenMarker
+    } = readLocal(client);
+    if (!refresh_token || lastRefreshTokenMarker !== refreshTokenMarker) {
+      if (expectRefreshToken) throw new Error("No refresh token found");
+      return;
+    }
+    try {
+      const result = makeTokenAndSaveRefresh(throwIfError(await oauth4webapi.processAuthorizationCodeOAuth2Response(authServer, client, await oauth4webapi.refreshTokenGrantRequest(authServer, client, refresh_token, oauthHttpOptions))), "refresh");
+      if (result && window.location.pathname === new URL(redirect_uri).pathname) {
+        const {
+          oldUrl
+        } = readSession(client);
+        void go(oldUrl ?? "/");
+      }
+      return result;
+    } catch (e) {
+      if (process.env.NODE_ENV !== "production") {
+        console.warn("Failed to get OAuth2 refresh token. Removing refresh token", e);
+      }
+      removeLocal(client);
+      if (expectRefreshToken) {
+        throw new Error("Could not refresh token");
+      }
+    }
+  }
+  async function maybeHandleAuthReturn() {
+    const {
+      state,
+      oldUrl,
+      codeVerifier
+    } = readSession(client);
+    if (!codeVerifier) return;
+    try {
+      const ret = makeTokenAndSaveRefresh(throwIfError(await oauth4webapi.processAuthorizationCodeOAuth2Response(authServer, client, await oauth4webapi.authorizationCodeGrantRequest(authServer, client, throwIfError(oauth4webapi.validateAuthResponse(authServer, client, new URL(window.location.href), state)), redirect_uri, codeVerifier, oauthHttpOptions))), "signIn");
+      void go(oldUrl);
+      return ret;
+    } catch (e) {
+      if (process.env.NODE_ENV !== "production") {
+        console.warn("Failed to get OAuth2 token using PKCE, removing PKCE and starting a new auth flow", e);
+      }
+      removeLocal(client);
+      removeSession(client);
+      throw e;
+    }
+  }
+  const initiateLoginRedirect = async () => {
+    if (loginPage && window.location.href !== loginPage && window.location.pathname !== loginPage) {
+      saveLocal(client, {});
+      saveSession(client, {
+        oldUrl: postLoginPage
+      });
+      await go(loginPage);
+      return;
+    }
+    const state = oauth4webapi.generateRandomState();
+    const codeVerifier = oauth4webapi.generateRandomCodeVerifier();
+    const oldUrl = readSession(client).oldUrl ?? window.location.toString();
+    saveLocal(client, {});
+    saveSession(client, {
+      codeVerifier,
+      state,
+      oldUrl
+    });
+    window.location.assign(`${authServer.authorization_endpoint}?${new URLSearchParams({
+      client_id,
+      response_type: "code",
+      state,
+      redirect_uri,
+      code_challenge: await oauth4webapi.calculatePKCECodeChallenge(codeVerifier),
+      code_challenge_method: "S256",
+      scope: ["offline_access", ...scopes].join(" ")
+    })}`);
+    await delay__default.default(1e3);
+    throw new Error("Unable to redirect");
+  };
+  async function _signIn() {
+    return await maybeRefresh() ?? await maybeHandleAuthReturn() ?? await initiateLoginRedirect();
+  }
+  return getToken;
+}
+
+exports.createConfidentialOauthClient = createConfidentialOauthClient;
+exports.createPublicOauthClient = createPublicOauthClient;
+//# sourceMappingURL=index.cjs.map
+//# sourceMappingURL=index.cjs.map

package/build/cjs/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/throwIfError.ts","../../src/common.ts","../../src/createConfidentialOauthClient.ts","../../src/utils.ts","../../src/createPublicOauthClient.ts"],"names":["isOAuth2Error","CustomEvent","TypedEventTarget","invariant","processRevocationResponse","revocationRequest","getToken","customFetch","processClientCredentialsResponse","clientCredentialsGrantRequest","delay","processAuthorizationCodeOAuth2Response","refreshTokenGrantRequest","authorizationCodeGrantRequest","validateAuthResponse","generateRandomState","generateRandomCodeVerifier","calculatePKCECodeChallenge"],"mappings":";;;;;;;;;;;;;AAiBO,SAAS,aAAa,MAAQ,EAAA;AACnC,EAAI,IAAAA,0BAAA,CAAc,MAAM,CAAG,EAAA;AACzB,IAAA,MAAM,IAAI,KAAA,CAAM,CAAwB,qBAAA,EAAA,MAAA,CAAO,KAAK,CAAE,CAAA,CAAA,CAAA;AAAA,GACxD;AACA,EAAO,OAAA,MAAA,CAAA;AACT,CAAA;;;ACAA,IAAM,WAAA,GAA0E,WAAW,WAAe,IAAA,MAAMC,qBAAoB,KAAM,CAAA;AAAA,EACxI,OAAA,CAAA;AAAA,EACA,WAAA,CAAY,MAAM,OAAS,EAAA;AACzB,IAAA,KAAA,CAAM,MAAM,OAAO,CAAA,CAAA;AACnB,IAAK,IAAA,CAAA,OAAA,GAAU,SAAS,MAAU,IAAA,IAAA,CAAA;AAAA,GACpC;AAAA,EACA,IAAI,MAAS,GAAA;AACX,IAAA,OAAO,IAAK,CAAA,OAAA,CAAA;AAAA,GACd;AACF,CAAA,CAAA;AACA,SAAS,gBAAgB,MAAQ,EAAA;AAC/B,EAAO,OAAA,CAAA,wBAAA,EAA2B,OAAO,SAAS,CAAA,CAAA,CAAA;AACpD,CAAA;AACO,SAAS,SAAA,CAAU,QAAQ,CAAG,EAAA;AAEnC,EAAW,UAAA,CAAA,YAAA,EAAc,QAAQ,eAAgB,CAAA,MAAM,GAAG,IAAK,CAAA,SAAA,CAAU,CAAC,CAAC,CAAA,CAAA;AAC7E,CAAA;AACO,SAAS,YAAY,MAAQ,EAAA;AAElC,EAAA,UAAA,CAAW,YAAc,EAAA,UAAA,CAAW,eAAgB,CAAA,MAAM,CAAC,CAAA,CAAA;AAC7D,CAAA;AACO,SAAS,UAAU,MAAQ,EAAA;AAChC,EAAA,OAAO,IAAK,CAAA,KAAA;AAAA;AAAA,IAEZ,WAAW,YAAc,EAAA,OAAA,CAAQ,eAAgB,CAAA,MAAM,CAAC,CAAK,IAAA,IAAA;AAAA,GAAI,CAAA;AACnE,CAAA;AACO,SAAS,WAAA,CAAY,QAAQ,CAAG,EAAA;AAErC,EAAW,UAAA,CAAA,cAAA,EAAgB,QAAQ,eAAgB,CAAA,MAAM,GAAG,IAAK,CAAA,SAAA,CAAU,CAAC,CAAC,CAAA,CAAA;AAC/E,CAAA;AACO,SAAS,cAAc,MAAQ,EAAA;AAEpC,EAAA,UAAA,CAAW,cAAgB,EAAA,UAAA,CAAW,eAAgB,CAAA,MAAM,CAAC,CAAA,CAAA;AAC/D,CAAA;AACO,SAAS,YAAY,MAAQ,EAAA;AAClC,EAAA,OAAO,IAAK,CAAA,KAAA;AAAA;AAAA,IAEZ,WAAW,cAAgB,EAAA,OAAA,CAAQ,eAAgB,CAAA,MAAM,CAAC,CAAK,IAAA,IAAA;AAAA,GAAI,CAAA;AACrE,CAAA;AACO,SAAS,OAAO,MAAQ,EAAA,EAAA,EAAI,OAAS,EAAA,gBAAA,EAAkB,SAAS,kBAAoB,EAAA;AACzF,EAAI,IAAA,KAAA,CAAA;AACJ,EAAM,MAAA,WAAA,GAAc,IAAIC,sCAAiB,EAAA,CAAA;AACzC,EAAS,SAAA,uBAAA,CAAwB,MAAM,IAAM,EAAA;AAC3C,IAAM,MAAA;AAAA,MACJ,aAAA;AAAA,MACA,UAAA;AAAA,MACA,YAAA;AAAA,KACE,GAAA,IAAA,CAAA;AACJ,IAAE,EAAA,UAAA,IAAc,IAAQ,CAAA,GAAA,OAAA,CAAQ,GAAI,CAAA,QAAA,KAAa,YAAe,GAAAC,2BAAA,CAAU,KAAK,CAAA,GAAIA,2BAAU,CAAA,KAAK,CAAI,GAAA,KAAA,CAAA,CAAA;AACtG,IAAA,SAAA,CAAU,MAAQ,EAAA;AAAA,MAChB,aAAA;AAAA,MACA,kBAAA;AAAA,KACD,CAAA,CAAA;AACD,IAAQ,KAAA,GAAA;AAAA,MACN,aAAA;AAAA,MACA,UAAA;AAAA,MACA,YAAA;AAAA,MACA,UAAY,EAAA,IAAA,CAAK,GAAI,EAAA,GAAI,UAAa,GAAA,GAAA;AAAA,KACxC,CAAA;AACA,IAAA,WAAA,CAAY,kBAAmB,CAAA,IAAA,EAAM,IAAI,WAAA,CAAY,IAAM,EAAA;AAAA,MACzD,MAAQ,EAAA,KAAA;AAAA,KACT,CAAC,CAAA,CAAA;AACF,IAAO,OAAA,KAAA,CAAA;AAAA,GACT;AACA,EAAI,IAAA,cAAA,CAAA;AACJ,EAAA,SAAS,SAAY,GAAA;AACnB,IAAI,IAAA,cAAA,eAA6B,cAAc,CAAA,CAAA;AAAA,GACjD;AACA,EAAA,SAAS,oBAAoB,GAAK,EAAA;AAChC,IAAA,IAAI,OAAS,EAAA;AACX,MAAU,SAAA,EAAA,CAAA;AACV,MAAA,cAAA,GAAiB,WAAW,OAAS,EAAA,GAAA,CAAI,OAAO,UAAa,GAAA,GAAA,GAAO,KAAK,GAAI,CAAA,CAAA;AAAA,KAC/E;AAAA,GACF;AACA,EAAA,eAAe,OAAU,GAAA;AACvB,IAAC,CAAA,KAAA,GAAQ,OAAQ,CAAA,GAAA,CAAI,QAAa,KAAA,YAAA,GAAeA,2BAAU,CAAA,KAAA,EAAO,eAAe,CAAA,GAAIA,2BAAU,CAAA,KAAK,CAAI,GAAA,KAAA,CAAA,CAAA;AACxG,IAAM,MAAA,MAAA,GAAS,MAAMC,sCAAA,CAA0B,MAAMC,8BAAA,CAAkB,IAAI,MAAQ,EAAA,KAAA,CAAM,YAAc,EAAA,gBAAgB,CAAC,CAAA,CAAA;AACxH,IAAU,SAAA,EAAA,CAAA;AAGV,IAAA,WAAA,CAAY,MAAM,CAAA,CAAA;AAClB,IAAQ,KAAA,GAAA,KAAA,CAAA,CAAA;AACR,IAAA,YAAA,CAAa,MAAM,CAAA,CAAA;AACnB,IAAA,WAAA,CAAY,kBAAmB,CAAA,SAAA,EAAW,IAAI,KAAA,CAAM,SAAS,CAAC,CAAA,CAAA;AAAA,GAChE;AACA,EAAI,IAAA,aAAA,CAAA;AACJ,EAAA,eAAe,MAAS,GAAA;AACtB,IAAA,IAAI,aAAe,EAAA;AACjB,MAAO,OAAA,aAAA,CAAA;AAAA,KACT;AACA,IAAI,IAAA;AACF,MAAA,aAAA,GAAgB,OAAQ,EAAA,CAAA;AACxB,MAAA,OAAO,MAAM,aAAA,CAAA;AAAA,KACb,SAAA;AACA,MAAgB,aAAA,GAAA,KAAA,CAAA,CAAA;AAAA,KAClB;AAAA,GACF;AACA,EAAY,WAAA,CAAA,gBAAA,CAAiB,UAAU,mBAAmB,CAAA,CAAA;AAC1D,EAAY,WAAA,CAAA,gBAAA,CAAiB,WAAW,mBAAmB,CAAA,CAAA;AAC3D,EAAA,SAAS,mBAAsB,GAAA;AAC7B,IAAA,IAAI,CAAC,KAAS,IAAA,IAAA,CAAK,GAAI,EAAA,IAAK,MAAM,UAAY,EAAA;AAC5C,MAAO,OAAA,KAAA,CAAA,CAAA;AAAA,KACT;AACA,IAAA,OAAO,KAAO,EAAA,YAAA,CAAA;AAAA,GAChB;AACA,EAAA,MAAM,QAAW,GAAA,MAAA,CAAO,MAAO,CAAA,eAAeC,SAAW,GAAA;AACvD,IAAA,IAAI,CAAC,KAAS,IAAA,IAAA,CAAK,GAAI,EAAA,IAAK,MAAM,UAAY,EAAA;AAC5C,MAAA,KAAA,GAAQ,MAAM,MAAO,EAAA,CAAA;AAAA,KACvB;AACA,IAAA,OAAO,KAAO,EAAA,YAAA,CAAA;AAAA,GACb,EAAA;AAAA,IACD,MAAA;AAAA,IACA,OAAA;AAAA,IACA,OAAA;AAAA,IACA,SAAA;AAAA,IACA,mBAAA;AAAA,IACA,gBAAkB,EAAA,WAAA,CAAY,gBAAiB,CAAA,IAAA,CAAK,WAAW,CAAA;AAAA,IAC/D,mBAAqB,EAAA,WAAA,CAAY,mBAAoB,CAAA,IAAA,CAAK,WAAW,CAAA;AAAA,GACtE,CAAA,CAAA;AACD,EAAO,OAAA;AAAA,IACL,QAAA;AAAA,IACA,uBAAA;AAAA,GACF,CAAA;AACF,CAAA;AACO,SAAS,yBAAA,CAA0B,SAAS,GAAK,EAAA;AACtD,EAAA,MAAM,SAAS,CAAG,EAAA,IAAI,IAAI,OAAS,EAAA,GAAA,GAAM,GAAG,CAAC,CAAA,CAAA,CAAA;AAC7C,EAAO,OAAA;AAAA,IACL,cAAA,EAAgB,GAAG,MAAM,CAAA,iBAAA,CAAA;AAAA,IACzB,sBAAA,EAAwB,GAAG,MAAM,CAAA,qBAAA,CAAA;AAAA,IACjC,mBAAA,EAAqB,GAAG,MAAM,CAAA,wBAAA,CAAA;AAAA,IAC9B,MAAA;AAAA,GACF,CAAA;AACF,CAAA;;;AC7HO,SAAS,6BAA8B,CAAA,SAAA,EAAW,aAAe,EAAA,GAAA,EAAK,MAAS,GAAA,CAAC,eAAiB,EAAA,gBAAgB,CAAG,EAAA,OAAA,GAAU,UAAW,CAAA,KAAA,EAAO,UAAU,WAAa,EAAA;AAC5K,EAAA,MAAM,MAAS,GAAA;AAAA,IACb,SAAA;AAAA,IACA,aAAA;AAAA,GACF,CAAA;AACA,EAAM,MAAA,UAAA,GAAa,yBAA0B,CAAA,OAAA,EAAS,GAAG,CAAA,CAAA;AACzD,EAAA,MAAM,gBAAmB,GAAA;AAAA,IACvB,CAACC,wBAAW,GAAG,OAAA;AAAA,GACjB,CAAA;AACA,EAAM,MAAA;AAAA,IACJ,QAAA;AAAA,IACA,uBAAA;AAAA,MACE,MAAO,CAAA,MAAA,EAAQ,YAAY,OAAS,EAAA,gBAAA,EAAkB,QAAW,KAAS,CAAA,CAAA,CAAA;AAC9E,EAAA,eAAe,OAAU,GAAA;AACvB,IAAO,OAAA,uBAAA,CAAwB,YAAa,CAAA,MAAMC,6CAAiC,CAAA,UAAA,EAAY,MAAQ,EAAA,MAAMC,0CAA8B,CAAA,UAAA,EAAY,MAAQ,EAAA,IAAI,eAAgB,CAAA;AAAA,MACjL,KAAA,EAAO,MAAO,CAAA,IAAA,CAAK,GAAG,CAAA;AAAA,KACvB,CAAG,EAAA,gBAAgB,CAAC,CAAC,GAAG,QAAQ,CAAA,CAAA;AAAA,GACnC;AACA,EAAO,OAAA,QAAA,CAAA;AACT,CAAA;AC/BO,SAAS,+BAAA,CAAgC,KAAK,YAAc,EAAA,UAAA,EAAY,WAAW,aAAe,EAAA,MAAA,EAAQ,SAAS,OAAS,EAAA;AACjI,EAAA,IAAI,UAAU,EAAC,CAAA;AACf,EAAI,IAAA,OAAO,eAAe,QAAU,EAAA;AAClC,IAAE,EAAA,CAAC,aAAa,CAAC,aAAA,IAAiB,CAAC,MAAU,IAAA,CAAC,WAAW,CAAC,OAAA,CAAA,GAAW,QAAQ,GAAI,CAAA,QAAA,KAAa,eAAeN,2BAAU,CAAA,KAAA,EAAO,kEAAkE,CAAIA,GAAAA,2BAAAA,CAAU,KAAK,CAAI,GAAA,KAAA,CAAA,CAAA;AACvN,IAAU,OAAA,GAAA,UAAA,CAAA;AAAA,GACL,MAAA;AACL,IAAU,OAAA,GAAA;AAAA,MACR,UAAA;AAAA,MACA,SAAA;AAAA,MACA,aAAA;AAAA,MACA,MAAA;AAAA,MACA,OAAA;AAAA,MACA,OAAA;AAAA,KACF,CAAA;AAAA,GACF;AACA,EAAC,CAAA,GAAA,GAAM,OAAQ,CAAA,GAAA,CAAI,QAAa,KAAA,YAAA,GAAeA,2BAAU,CAAA,KAAA,EAAO,iBAAiB,CAAA,GAAIA,2BAAU,CAAA,KAAK,CAAI,GAAA,KAAA,CAAA,CAAA;AACxG,EAAC,CAAA,YAAA,GAAe,OAAQ,CAAA,GAAA,CAAI,QAAa,KAAA,YAAA,GAAeA,2BAAU,CAAA,KAAA,EAAO,yBAAyB,CAAA,GAAIA,2BAAU,CAAA,KAAK,CAAI,GAAA,KAAA,CAAA,CAAA;AAGzH,EAAO,OAAA;AAAA,IACL,UAAA,EAAY,QAAQ,UAAc,IAAA,IAAA;AAAA,IAClC,WAAW,OAAQ,CAAA,SAAA;AAAA,IACnB,aAAe,EAAA,OAAA,CAAQ,aAAiB,IAAA,MAAA,CAAO,SAAS,QAAS,EAAA;AAAA,IACjE,MAAQ,EAAA,OAAA,CAAQ,MAAU,IAAA,CAAC,iBAAiB,gBAAgB,CAAA;AAAA,IAC5D,OAAA,EAAS,OAAQ,CAAA,OAAA,IAAW,UAAW,CAAA,KAAA;AAAA,IACvC,OAAA,EAAS,QAAQ,OAAW,IAAA,WAAA;AAAA,IAC5B,oBAAoB,OAAQ,CAAA,kBAAA;AAAA,GAC9B,CAAA;AACF,CAAA;;;ACEO,SAAS,uBAAA,CAAwB,WAAW,GAAK,EAAA,YAAA,EAAc,YAAY,SAAW,EAAA,aAAA,EAAe,MAAQ,EAAA,OAAA,EAAS,OAAS,EAAA;AACpI,EAAI,IAAA,kBAAA,CAAA;AACJ,EAAC,CAAA;AAAA,IACC,UAAA;AAAA,IACA,SAAA;AAAA,IACA,aAAA;AAAA,IACA,MAAA;AAAA,IACA,OAAA;AAAA,IACA,OAAA;AAAA,IACA,kBAAA;AAAA,GACF,GAAI,gCAAgC,GAAK,EAAA,YAAA,EAAc,YAAY,SAAW,EAAA,aAAA,EAAe,MAAQ,EAAA,OAAA,EAAS,OAAO,CAAA,EAAA;AACrH,EAAA,MAAM,MAAS,GAAA;AAAA,IACb,SAAA;AAAA,IACA,0BAA4B,EAAA,MAAA;AAAA,GAC9B,CAAA;AACA,EAAM,MAAA,UAAA,GAAa,yBAA0B,CAAA,OAAA,EAAS,GAAG,CAAA,CAAA;AACzD,EAAA,MAAM,gBAAmB,GAAA;AAAA,IACvB,CAACI,wBAAW,GAAG,OAAA;AAAA,GACjB,CAAA;AACA,EAAM,MAAA;AAAA,IACJ,uBAAA;AAAA,IACA,QAAA;AAAA,GACF,GAAI,MAAO,CAAA,MAAA,EAAQ,UAAY,EAAA,OAAA,EAAS,gBAAkB,EAAA,YAAA,CAAa,IAAK,CAAA,UAAA,EAAY,IAAI,CAAA,EAAG,kBAAkB,CAAA,CAAA;AAGjH,EAAM,MAAA,EAAA,GAAK,OAAM,CAAK,KAAA;AACpB,IAAA,IAAI,UAAY,EAAA;AACd,MAAA,MAAA,CAAO,OAAQ,CAAA,YAAA,CAAa,EAAC,EAAG,IAAI,CAAC,CAAA,CAAA;AACrC,MAAA,OAAA;AAAA,KACK,MAAA,MAAA,CAAO,QAAS,CAAA,MAAA,CAAO,CAAC,CAAA,CAAA;AAC/B,IAAA,MAAMG,uBAAM,GAAI,CAAA,CAAA;AAChB,IAAM,MAAA,IAAI,MAAM,oBAAoB,CAAA,CAAA;AAAA,GACtC,CAAA;AACA,EAAA,eAAe,aAAa,kBAAoB,EAAA;AAC9C,IAAM,MAAA;AAAA,MACJ,aAAA;AAAA,MACA,kBAAoB,EAAA,sBAAA;AAAA,KACtB,GAAI,UAAU,MAAM,CAAA,CAAA;AACpB,IAAI,IAAA,CAAC,aAAiB,IAAA,sBAAA,KAA2B,kBAAoB,EAAA;AACnE,MAAA,IAAI,kBAAoB,EAAA,MAAM,IAAI,KAAA,CAAM,wBAAwB,CAAA,CAAA;AAChE,MAAA,OAAA;AAAA,KACF;AACA,IAAI,IAAA;AAGF,MAAA,MAAM,SAAS,uBAAwB,CAAA,YAAA,CAAa,MAAMC,mDAAA,CAAuC,YAAY,MAAQ,EAAA,MAAMC,qCAAyB,CAAA,UAAA,EAAY,QAAQ,aAAe,EAAA,gBAAgB,CAAC,CAAC,GAAG,SAAS,CAAA,CAAA;AACrN,MAAI,IAAA,MAAA,IAAU,OAAO,QAAS,CAAA,QAAA,KAAa,IAAI,GAAI,CAAA,YAAY,EAAE,QAAU,EAAA;AACzE,QAAM,MAAA;AAAA,UACJ,MAAA;AAAA,SACF,GAAI,YAAY,MAAM,CAAA,CAAA;AAEtB,QAAK,KAAA,EAAA,CAAG,UAAU,GAAG,CAAA,CAAA;AAAA,OACvB;AACA,MAAO,OAAA,MAAA,CAAA;AAAA,aACA,CAAG,EAAA;AACV,MAAI,IAAA,OAAA,CAAQ,GAAI,CAAA,QAAA,KAAa,YAAc,EAAA;AAEzC,QAAQ,OAAA,CAAA,IAAA,CAAK,8DAA8D,CAAC,CAAA,CAAA;AAAA,OAC9E;AACA,MAAA,WAAA,CAAY,MAAM,CAAA,CAAA;AAClB,MAAA,IAAI,kBAAoB,EAAA;AACtB,QAAM,MAAA,IAAI,MAAM,yBAAyB,CAAA,CAAA;AAAA,OAC3C;AAAA,KACF;AAAA,GACF;AACA,EAAA,eAAe,qBAAwB,GAAA;AACrC,IAAM,MAAA;AAAA,MACJ,KAAA;AAAA,MACA,MAAA;AAAA,MACA,YAAA;AAAA,KACF,GAAI,YAAY,MAAM,CAAA,CAAA;AACtB,IAAA,IAAI,CAAC,YAAc,EAAA,OAAA;AACnB,IAAI,IAAA;AACF,MAAA,MAAM,GAAM,GAAA,uBAAA,CAAwB,YAAa,CAAA,MAAMD,mDAAuC,CAAA,UAAA,EAAY,MAAQ,EAAA,MAAME,0CAA8B,CAAA,UAAA,EAAY,MAAQ,EAAA,YAAA,CAAaC,kCAAqB,UAAY,EAAA,MAAA,EAAQ,IAAI,GAAA,CAAI,MAAO,CAAA,QAAA,CAAS,IAAI,CAAA,EAAG,KAAK,CAAC,CAAG,EAAA,YAAA,EAAc,YAAc,EAAA,gBAAgB,CAAC,CAAC,GAAG,QAAQ,CAAA,CAAA;AACjU,MAAA,KAAK,GAAG,MAAM,CAAA,CAAA;AACd,MAAO,OAAA,GAAA,CAAA;AAAA,aACA,CAAG,EAAA;AACV,MAAI,IAAA,OAAA,CAAQ,GAAI,CAAA,QAAA,KAAa,YAAc,EAAA;AAEzC,QAAQ,OAAA,CAAA,IAAA,CAAK,qFAAqF,CAAC,CAAA,CAAA;AAAA,OACrG;AACA,MAAA,WAAA,CAAY,MAAM,CAAA,CAAA;AAClB,MAAA,aAAA,CAAc,MAAM,CAAA,CAAA;AACpB,MAAM,MAAA,CAAA,CAAA;AAAA,KACR;AAAA,GACF;AAGA,EAAA,MAAM,wBAAwB,YAAY;AACxC,IAAI,IAAA,SAAA,IAAa,OAAO,QAAS,CAAA,IAAA,KAAS,aAAa,MAAO,CAAA,QAAA,CAAS,aAAa,SAAW,EAAA;AAC7F,MAAU,SAAA,CAAA,MAAA,EAAQ,EAAE,CAAA,CAAA;AACpB,MAAA,WAAA,CAAY,MAAQ,EAAA;AAAA,QAClB,MAAQ,EAAA,aAAA;AAAA,OACT,CAAA,CAAA;AACD,MAAA,MAAM,GAAG,SAAS,CAAA,CAAA;AAClB,MAAA,OAAA;AAAA,KACF;AACA,IAAA,MAAM,QAAQC,gCAAoB,EAAA,CAAA;AAClC,IAAA,MAAM,eAAeC,uCAA2B,EAAA,CAAA;AAChD,IAAA,MAAM,SAAS,WAAY,CAAA,MAAM,EAAE,MAAU,IAAA,MAAA,CAAO,SAAS,QAAS,EAAA,CAAA;AACtE,IAAU,SAAA,CAAA,MAAA,EAAQ,EAAE,CAAA,CAAA;AACpB,IAAA,WAAA,CAAY,MAAQ,EAAA;AAAA,MAClB,YAAA;AAAA,MACA,KAAA;AAAA,MACA,MAAA;AAAA,KACD,CAAA,CAAA;AACD,IAAA,MAAA,CAAO,SAAS,MAAO,CAAA,CAAA,EAAG,WAAW,sBAAsB,CAAA,CAAA,EAAI,IAAI,eAAgB,CAAA;AAAA,MACjF,SAAA;AAAA,MACA,aAAe,EAAA,MAAA;AAAA,MACf,KAAA;AAAA,MACA,YAAA;AAAA,MACA,cAAA,EAAgB,MAAMC,uCAAA,CAA2B,YAAY,CAAA;AAAA,MAC7D,qBAAuB,EAAA,MAAA;AAAA,MACvB,OAAO,CAAC,gBAAA,EAAkB,GAAG,MAAM,CAAA,CAAE,KAAK,GAAG,CAAA;AAAA,KAC9C,CAAC,CAAE,CAAA,CAAA,CAAA;AAGJ,IAAA,MAAMP,uBAAM,GAAI,CAAA,CAAA;AAChB,IAAM,MAAA,IAAI,MAAM,oBAAoB,CAAA,CAAA;AAAA,GACtC,CAAA;AAGA,EAAA,eAAe,OAAU,GAAA;AAEvB,IAAA,OAAQ,MAAM,YAAa,EAAA,IAErB,MAAM,qBAAsB,EAAA,IAE9B,MAAM,qBAAsB,EAAA,CAAA;AAAA,GAClC;AACA,EAAO,OAAA,QAAA,CAAA;AACT","file":"index.cjs","sourcesContent":["/*\n * Copyright 2024 Palantir Technologies, Inc. All rights reserved.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { isOAuth2Error } from \"oauth4webapi\";\nexport function throwIfError(result) {\n  if (isOAuth2Error(result)) {\n    throw new Error(`Failed to get token: ${result.error}`);\n  }\n  return result;\n}","/*\n * Copyright 2024 Palantir Technologies, Inc. All rights reserved.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { processRevocationResponse, revocationRequest } from \"oauth4webapi\";\nimport invariant from \"tiny-invariant\";\nimport { TypedEventTarget } from \"typescript-event-target\";\nimport { throwIfError } from \"./throwIfError.js\";\n// Node 18 is supposed to have a `CustomEvent` but it is not exposed on `globalThis`\n// which creates a problem for making a single codebase for node and browser. This polyfill works around it\nconst CustomEvent = process.env.TARGET === \"browser\" ? globalThis.CustomEvent : globalThis.CustomEvent ?? class CustomEvent extends Event {\n  #detail;\n  constructor(type, options) {\n    super(type, options);\n    this.#detail = options?.detail ?? null;\n  }\n  get detail() {\n    return this.#detail;\n  }\n};\nfunction localStorageKey(client) {\n  return `@osdk/oauth : refresh : ${client.client_id}`;\n}\nexport function saveLocal(client, x) {\n  // MUST `localStorage?` as nodejs does not have localStorage\n  globalThis.localStorage?.setItem(localStorageKey(client), JSON.stringify(x));\n}\nexport function removeLocal(client) {\n  // MUST `localStorage?` as nodejs does not have localStorage\n  globalThis.localStorage?.removeItem(localStorageKey(client));\n}\nexport function readLocal(client) {\n  return JSON.parse(\n  // MUST `localStorage?` as nodejs does not have localStorage\n  globalThis.localStorage?.getItem(localStorageKey(client)) ?? \"{}\");\n}\nexport function saveSession(client, x) {\n  // MUST `sessionStorage?` as nodejs does not have sessionStorage\n  globalThis.sessionStorage?.setItem(localStorageKey(client), JSON.stringify(x));\n}\nexport function removeSession(client) {\n  // MUST `sessionStorage?` as nodejs does not have sessionStorage\n  globalThis.sessionStorage?.removeItem(localStorageKey(client));\n}\nexport function readSession(client) {\n  return JSON.parse(\n  // MUST `sessionStorage?` as nodejs does not have sessionStorage\n  globalThis.sessionStorage?.getItem(localStorageKey(client)) ?? \"{}\");\n}\nexport function common(client, as, _signIn, oauthHttpOptions, refresh, refreshTokenMarker) {\n  let token;\n  const eventTarget = new TypedEventTarget();\n  function makeTokenAndSaveRefresh(resp, type) {\n    const {\n      refresh_token,\n      expires_in,\n      access_token\n    } = resp;\n    !(expires_in != null) ? process.env.NODE_ENV !== \"production\" ? invariant(false) : invariant(false) : void 0;\n    saveLocal(client, {\n      refresh_token,\n      refreshTokenMarker\n    });\n    token = {\n      refresh_token,\n      expires_in,\n      access_token,\n      expires_at: Date.now() + expires_in * 1000\n    };\n    eventTarget.dispatchTypedEvent(type, new CustomEvent(type, {\n      detail: token\n    }));\n    return token;\n  }\n  let refreshTimeout;\n  function rmTimeout() {\n    if (refreshTimeout) clearTimeout(refreshTimeout);\n  }\n  function restartRefreshTimer(evt) {\n    if (refresh) {\n      rmTimeout();\n      refreshTimeout = setTimeout(refresh, evt.detail.expires_in * 1000 - 60 * 1000);\n    }\n  }\n  async function signOut() {\n    !token ? process.env.NODE_ENV !== \"production\" ? invariant(false, \"not signed in\") : invariant(false) : void 0;\n    const result = await processRevocationResponse(await revocationRequest(as, client, token.access_token, oauthHttpOptions));\n    rmTimeout();\n\n    // Clean up\n    removeLocal(client);\n    token = undefined;\n    throwIfError(result);\n    eventTarget.dispatchTypedEvent(\"signOut\", new Event(\"signOut\"));\n  }\n  let pendingSignIn;\n  async function signIn() {\n    if (pendingSignIn) {\n      return pendingSignIn;\n    }\n    try {\n      pendingSignIn = _signIn();\n      return await pendingSignIn;\n    } finally {\n      pendingSignIn = undefined;\n    }\n  }\n  eventTarget.addEventListener(\"signIn\", restartRefreshTimer);\n  eventTarget.addEventListener(\"refresh\", restartRefreshTimer);\n  function getTokenOrUndefined() {\n    if (!token || Date.now() >= token.expires_at) {\n      return undefined;\n    }\n    return token?.access_token;\n  }\n  const getToken = Object.assign(async function getToken() {\n    if (!token || Date.now() >= token.expires_at) {\n      token = await signIn();\n    }\n    return token?.access_token;\n  }, {\n    signIn,\n    refresh,\n    signOut,\n    rmTimeout,\n    getTokenOrUndefined,\n    addEventListener: eventTarget.addEventListener.bind(eventTarget),\n    removeEventListener: eventTarget.removeEventListener.bind(eventTarget)\n  });\n  return {\n    getToken,\n    makeTokenAndSaveRefresh\n  };\n}\nexport function createAuthorizationServer(ctxPath, url) {\n  const issuer = `${new URL(ctxPath, url + \"/\")}`;\n  return {\n    token_endpoint: `${issuer}/api/oauth2/token`,\n    authorization_endpoint: `${issuer}/api/oauth2/authorize`,\n    revocation_endpoint: `${issuer}/api/oauth2/revoke_token`,\n    issuer\n  };\n}","/*\n * Copyright 2024 Palantir Technologies, Inc. All rights reserved.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { clientCredentialsGrantRequest, customFetch, processClientCredentialsResponse } from \"oauth4webapi\";\nimport { common, createAuthorizationServer } from \"./common.js\";\nimport { throwIfError } from \"./throwIfError.js\";\n\n/**\n * @param client_id\n * @param client_secret\n * @param url the base url of your foundry server\n * @param scopes\n * @param fetchFn\n * @param ctxPath\n * @returns which can be used as a token provider\n */\nexport function createConfidentialOauthClient(client_id, client_secret, url, scopes = [\"api:read-data\", \"api:write-data\"], fetchFn = globalThis.fetch, ctxPath = \"multipass\") {\n  const client = {\n    client_id,\n    client_secret\n  };\n  const authServer = createAuthorizationServer(ctxPath, url);\n  const oauthHttpOptions = {\n    [customFetch]: fetchFn\n  };\n  const {\n    getToken,\n    makeTokenAndSaveRefresh\n  } = common(client, authServer, _signIn, oauthHttpOptions, undefined, undefined);\n  async function _signIn() {\n    return makeTokenAndSaveRefresh(throwIfError(await processClientCredentialsResponse(authServer, client, await clientCredentialsGrantRequest(authServer, client, new URLSearchParams({\n      scope: scopes.join(\" \")\n    }), oauthHttpOptions))), \"signIn\");\n  }\n  return getToken;\n}","/*\n * Copyright 2024 Palantir Technologies, Inc. All rights reserved.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport invariant from \"tiny-invariant\";\nexport function processOptionsAndAssignDefaults(url, redirect_uri, useHistory, loginPage, postLoginPage, scopes, fetchFn, ctxPath) {\n  let options = {};\n  if (typeof useHistory === \"object\") {\n    !(!loginPage && !postLoginPage && !scopes && !fetchFn && !ctxPath) ? process.env.NODE_ENV !== \"production\" ? invariant(false, \"If useHistory is an object, other options should not be provided\") : invariant(false) : void 0;\n    options = useHistory;\n  } else {\n    options = {\n      useHistory,\n      loginPage,\n      postLoginPage,\n      scopes,\n      fetchFn,\n      ctxPath\n    };\n  }\n  !url ? process.env.NODE_ENV !== \"production\" ? invariant(false, \"url is required\") : invariant(false) : void 0;\n  !redirect_uri ? process.env.NODE_ENV !== \"production\" ? invariant(false, \"redirectUrl is required\") : invariant(false) : void 0;\n\n  // Assign defaults\n  return {\n    useHistory: options.useHistory ?? true,\n    loginPage: options.loginPage,\n    postLoginPage: options.postLoginPage || window.location.toString(),\n    scopes: options.scopes ?? [\"api:read-data\", \"api:write-data\"],\n    fetchFn: options.fetchFn ?? globalThis.fetch,\n    ctxPath: options.ctxPath ?? \"multipass\",\n    refreshTokenMarker: options.refreshTokenMarker\n  };\n}","/*\n * Copyright 2024 Palantir Technologies, Inc. All rights reserved.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport delay from \"delay\";\nimport { authorizationCodeGrantRequest, calculatePKCECodeChallenge, customFetch, generateRandomCodeVerifier, generateRandomState, processAuthorizationCodeOAuth2Response, refreshTokenGrantRequest, validateAuthResponse } from \"oauth4webapi\";\nimport { common, createAuthorizationServer, readLocal, readSession, removeLocal, removeSession, saveLocal, saveSession } from \"./common.js\";\nimport { throwIfError } from \"./throwIfError.js\";\nimport { processOptionsAndAssignDefaults } from \"./utils.js\";\n\n/**\n * Creates a PublicOauthClient for authentication.\n *\n * @param {string} clientId - The client_id from the OAuth configuration on the server\n * @param {string} url - The base URL of your Foundry server\n * @param {string} redirectUrl - The URL configured for redirect in the OAuth configuration on the server\n * @param {PublicOauthClientOptions} options - Additional options for the client\n * @returns {PublicOauthClient} A client that can be used as a token provider\n */\n\n/**\n * Creates a PublicOauthClient for authentication.\n *\n * @param {string} clientId - The client_id from the OAuth configuration on the server\n * @param {string} url - The base URL of your Foundry server\n * @param {string} redirectUrl - The URL configured for redirect in the OAuth configuration on the server\n * @param {boolean} useHistory - If true, uses `history.replaceState()`, otherwise uses `window.location.assign()` (defaults to true)\n * @param {string} loginPage - Custom landing page URL prior to logging in\n * @param {string} postLoginPage - URL to return to after completed authentication cycle (defaults to `window.location.toString()`)\n * @param {string[]} scopes - OAuth scopes to request. If not provided, defaults to `[\"api:read-data\", \"api:write-data\"]`\n * @param {typeof globalThis.fetch} fetchFn - Custom fetch function to use for requests (defaults to `globalThis.fetch`)\n * @param {string} ctxPath - Context path for the authorization server (defaults to \"multipass\")\n * @returns {PublicOauthClient} A client that can be used as a token provider\n */\n\nexport function createPublicOauthClient(client_id, url, redirect_uri, useHistory, loginPage, postLoginPage, scopes, fetchFn, ctxPath) {\n  let refreshTokenMarker;\n  ({\n    useHistory,\n    loginPage,\n    postLoginPage,\n    scopes,\n    fetchFn,\n    ctxPath,\n    refreshTokenMarker\n  } = processOptionsAndAssignDefaults(url, redirect_uri, useHistory, loginPage, postLoginPage, scopes, fetchFn, ctxPath));\n  const client = {\n    client_id,\n    token_endpoint_auth_method: \"none\"\n  };\n  const authServer = createAuthorizationServer(ctxPath, url);\n  const oauthHttpOptions = {\n    [customFetch]: fetchFn\n  };\n  const {\n    makeTokenAndSaveRefresh,\n    getToken\n  } = common(client, authServer, _signIn, oauthHttpOptions, maybeRefresh.bind(globalThis, true), refreshTokenMarker);\n\n  // as an arrow function, `useHistory` is known to be a boolean\n  const go = async x => {\n    if (useHistory) {\n      window.history.replaceState({}, \"\", x);\n      return;\n    } else window.location.assign(x);\n    await delay(1000);\n    throw new Error(\"Unable to redirect\");\n  };\n  async function maybeRefresh(expectRefreshToken) {\n    const {\n      refresh_token,\n      refreshTokenMarker: lastRefreshTokenMarker\n    } = readLocal(client);\n    if (!refresh_token || lastRefreshTokenMarker !== refreshTokenMarker) {\n      if (expectRefreshToken) throw new Error(\"No refresh token found\");\n      return;\n    }\n    try {\n      // note, we don't use processRefreshTokenResponse because the mp oauth implementation\n      // doesn't do refresh tokens quite right and this lets us skip the id check\n      const result = makeTokenAndSaveRefresh(throwIfError(await processAuthorizationCodeOAuth2Response(authServer, client, await refreshTokenGrantRequest(authServer, client, refresh_token, oauthHttpOptions))), \"refresh\");\n      if (result && window.location.pathname === new URL(redirect_uri).pathname) {\n        const {\n          oldUrl\n        } = readSession(client);\n        // don't block on the redirect\n        void go(oldUrl ?? \"/\");\n      }\n      return result;\n    } catch (e) {\n      if (process.env.NODE_ENV !== \"production\") {\n        // eslint-disable-next-line no-console\n        console.warn(\"Failed to get OAuth2 refresh token. Removing refresh token\", e);\n      }\n      removeLocal(client);\n      if (expectRefreshToken) {\n        throw new Error(\"Could not refresh token\");\n      }\n    }\n  }\n  async function maybeHandleAuthReturn() {\n    const {\n      state,\n      oldUrl,\n      codeVerifier\n    } = readSession(client);\n    if (!codeVerifier) return;\n    try {\n      const ret = makeTokenAndSaveRefresh(throwIfError(await processAuthorizationCodeOAuth2Response(authServer, client, await authorizationCodeGrantRequest(authServer, client, throwIfError(validateAuthResponse(authServer, client, new URL(window.location.href), state)), redirect_uri, codeVerifier, oauthHttpOptions))), \"signIn\");\n      void go(oldUrl);\n      return ret;\n    } catch (e) {\n      if (process.env.NODE_ENV !== \"production\") {\n        // eslint-disable-next-line no-console\n        console.warn(\"Failed to get OAuth2 token using PKCE, removing PKCE and starting a new auth flow\", e);\n      }\n      removeLocal(client);\n      removeSession(client);\n      throw e;\n    }\n  }\n\n  // As an arrow function, `scopes` and `postLoginPage` are known at compile time\n  const initiateLoginRedirect = async () => {\n    if (loginPage && window.location.href !== loginPage && window.location.pathname !== loginPage) {\n      saveLocal(client, {});\n      saveSession(client, {\n        oldUrl: postLoginPage\n      });\n      await go(loginPage);\n      return;\n    }\n    const state = generateRandomState();\n    const codeVerifier = generateRandomCodeVerifier();\n    const oldUrl = readSession(client).oldUrl ?? window.location.toString();\n    saveLocal(client, {});\n    saveSession(client, {\n      codeVerifier,\n      state,\n      oldUrl\n    });\n    window.location.assign(`${authServer.authorization_endpoint}?${new URLSearchParams({\n      client_id,\n      response_type: \"code\",\n      state,\n      redirect_uri,\n      code_challenge: await calculatePKCECodeChallenge(codeVerifier),\n      code_challenge_method: \"S256\",\n      scope: [\"offline_access\", ...scopes].join(\" \")\n    })}`);\n\n    // Give time for redirect to happen\n    await delay(1000);\n    throw new Error(\"Unable to redirect\");\n  };\n\n  /** Will throw if there is no token! */\n  async function _signIn() {\n    // 1. Check if we have a refresh token in local storage\n    return (await maybeRefresh()\n    // 2. If there is no refresh token we are likely trying to perform the callback\n    ) ?? (await maybeHandleAuthReturn())\n    // 3. If we haven't been able to load the token from one of the two above ways, we need to make the initial auth request\n    ?? (await initiateLoginRedirect());\n  }\n  return getToken;\n}"]}

package/build/{browser/createPublicOauthClient.d.ts → cjs/index.d.cts}

@@ -1,5 +1,43 @@
-import type { PublicOauthClient } from "./PublicOauthClient.js";
-export interface PublicOauthClientOptions {
+interface Token {
+    readonly access_token: string;
+    readonly expires_in: number;
+    readonly refresh_token?: string;
+    readonly expires_at: number;
+}
+
+type Events = {
+    signIn: CustomEvent<Token>;
+    signOut: Event;
+    refresh: CustomEvent<Token>;
+};
+interface BaseOauthClient<K extends keyof Events & string> {
+    (): Promise<string>;
+    getTokenOrUndefined: () => string | undefined;
+    signIn: () => Promise<Token>;
+    signOut: () => Promise<void>;
+    addEventListener: <T extends K>(type: T, listener: ((evt: Events[T]) => void) | null, options?: boolean | AddEventListenerOptions) => void;
+    removeEventListener: <T extends K>(type: T, callback: ((evt: Events[T]) => void) | null, options?: EventListenerOptions | boolean) => void;
+}
+
+interface ConfidentialOauthClient extends BaseOauthClient<"signIn" | "signOut"> {
+}
+
+/**
+ * @param client_id
+ * @param client_secret
+ * @param url the base url of your foundry server
+ * @param scopes
+ * @param fetchFn
+ * @param ctxPath
+ * @returns which can be used as a token provider
+ */
+declare function createConfidentialOauthClient(client_id: string, client_secret: string, url: string, scopes?: string[], fetchFn?: typeof globalThis.fetch, ctxPath?: string): ConfidentialOauthClient;
+
+interface PublicOauthClient extends BaseOauthClient<"signIn" | "signOut" | "refresh"> {
+    refresh: () => Promise<Token | undefined>;
+}
+
+interface PublicOauthClientOptions {
     /**
      * If true, uses `history.replaceState()`, otherwise uses `window.location.assign()` (defaults to true)
      */
@@ -24,6 +62,10 @@ export interface PublicOauthClientOptions {
      * Context path for the authorization server (defaults to "multipass")
      */
     ctxPath?: string;
+    /**
+     * Allows for an additional value to be appended to the local storage key for the refresh token.
+     */
+    refreshTokenMarker?: string;
 }
 /**
  * Creates a PublicOauthClient for authentication.
@@ -34,7 +76,7 @@ export interface PublicOauthClientOptions {
  * @param {PublicOauthClientOptions} options - Additional options for the client
  * @returns {PublicOauthClient} A client that can be used as a token provider
  */
-export declare function createPublicOauthClient(clientId: string, url: string, redirectUrl: string, options?: PublicOauthClientOptions): PublicOauthClient;
+declare function createPublicOauthClient(clientId: string, url: string, redirectUrl: string, options?: PublicOauthClientOptions): PublicOauthClient;
 /**
  * Creates a PublicOauthClient for authentication.
  *
@@ -49,5 +91,6 @@ export declare function createPublicOauthClient(clientId: string, url: string, r
  * @param {string} ctxPath - Context path for the authorization server (defaults to "multipass")
  * @returns {PublicOauthClient} A client that can be used as a token provider
  */
-export declare function createPublicOauthClient(client_id: string, url: string, redirectUrl: string, useHistory?: boolean, loginPage?: string, postLoginPage?: string, scopes?: string[], fetchFn?: typeof globalThis.fetch, ctxPath?: string): PublicOauthClient;
-//# sourceMappingURL=createPublicOauthClient.d.ts.map
+declare function createPublicOauthClient(client_id: string, url: string, redirectUrl: string, useHistory?: boolean, loginPage?: string, postLoginPage?: string, scopes?: string[], fetchFn?: typeof globalThis.fetch, ctxPath?: string): PublicOauthClient;
+
+export { type PublicOauthClient, createConfidentialOauthClient, createPublicOauthClient };

package/build/esm/AuthorizationServer.test.js

@@ -13,6 +13,7 @@
  * See the License for the specific language governing permissions and
  * limitations under the License.
  */
+
 import { describe, expect, it } from "vitest";
 import { createAuthorizationServer } from "./common.js";
 describe("Create authorization server", () => {

package/build/esm/AuthorizationServer.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"AuthorizationServer.test.js","names":["describe","expect","it","createAuthorizationServer","authServer","toEqual","token_endpoint","authorization_endpoint","revocation_endpoint","issuer","authServerCustom"],"sources":["AuthorizationServer.test.js"],"sourcesContent":["/*\n * Copyright 2024 Palantir Technologies, Inc. All rights reserved.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nimport { describe, expect, it } from \"vitest\";\nimport { createAuthorizationServer } from \"./common.js\";\ndescribe(\"Create authorization server\", () => {\n    it(\"works with old multipass ctx path\", () => {\n        const authServer = createAuthorizationServer(\"/multipass\", \"https://stack.palantir.com\");\n        expect(authServer).toEqual({\n            token_endpoint: \"https://stack.palantir.com/multipass/api/oauth2/token\",\n            authorization_endpoint: \"https://stack.palantir.com/multipass/api/oauth2/authorize\",\n            revocation_endpoint: \"https://stack.palantir.com/multipass/api/oauth2/revoke_token\",\n            issuer: \"https://stack.palantir.com/multipass\",\n        });\n    });\n    it(\"works with new multipass ctx path\", () => {\n        const authServer = createAuthorizationServer(\"multipass\", \"https://stack.palantir.com\");\n        expect(authServer).toEqual({\n            token_endpoint: \"https://stack.palantir.com/multipass/api/oauth2/token\",\n            authorization_endpoint: \"https://stack.palantir.com/multipass/api/oauth2/authorize\",\n            revocation_endpoint: \"https://stack.palantir.com/multipass/api/oauth2/revoke_token\",\n            issuer: \"https://stack.palantir.com/multipass\",\n        });\n        const authServerCustom = createAuthorizationServer(\"multipass\", \"https://stack.palantir.com/foo/first/someStuff\");\n        expect(authServerCustom).toEqual({\n            token_endpoint: \"https://stack.palantir.com/foo/first/someStuff/multipass/api/oauth2/token\",\n            authorization_endpoint: \"https://stack.palantir.com/foo/first/someStuff/multipass/api/oauth2/authorize\",\n            revocation_endpoint: \"https://stack.palantir.com/foo/first/someStuff/multipass/api/oauth2/revoke_token\",\n            issuer: \"https://stack.palantir.com/foo/first/someStuff/multipass\",\n        });\n    });\n});\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAASA,QAAQ,EAAEC,MAAM,EAAEC,EAAE,QAAQ,QAAQ;AAC7C,SAASC,yBAAyB,QAAQ,aAAa;AACvDH,QAAQ,CAAC,6BAA6B,EAAE,MAAM;EAC1CE,EAAE,CAAC,mCAAmC,EAAE,MAAM;IAC1C,MAAME,UAAU,GAAGD,yBAAyB,CAAC,YAAY,EAAE,4BAA4B,CAAC;IACxFF,MAAM,CAACG,UAAU,CAAC,CAACC,OAAO,CAAC;MACvBC,cAAc,EAAE,uDAAuD;MACvEC,sBAAsB,EAAE,2DAA2D;MACnFC,mBAAmB,EAAE,8DAA8D;MACnFC,MAAM,EAAE;IACZ,CAAC,CAAC;EACN,CAAC,CAAC;EACFP,EAAE,CAAC,mCAAmC,EAAE,MAAM;IAC1C,MAAME,UAAU,GAAGD,yBAAyB,CAAC,WAAW,EAAE,4BAA4B,CAAC;IACvFF,MAAM,CAACG,UAAU,CAAC,CAACC,OAAO,CAAC;MACvBC,cAAc,EAAE,uDAAuD;MACvEC,sBAAsB,EAAE,2DAA2D;MACnFC,mBAAmB,EAAE,8DAA8D;MACnFC,MAAM,EAAE;IACZ,CAAC,CAAC;IACF,MAAMC,gBAAgB,GAAGP,yBAAyB,CAAC,WAAW,EAAE,gDAAgD,CAAC;IACjHF,MAAM,CAACS,gBAAgB,CAAC,CAACL,OAAO,CAAC;MAC7BC,cAAc,EAAE,2EAA2E;MAC3FC,sBAAsB,EAAE,+EAA+E;MACvGC,mBAAmB,EAAE,kFAAkF;MACvGC,MAAM,EAAE;IACZ,CAAC,CAAC;EACN,CAAC,CAAC;AACN,CAAC,CAAC","ignoreList":[]}
+{"version":3,"file":"AuthorizationServer.test.js","names":["describe","expect","it","createAuthorizationServer","authServer","toEqual","token_endpoint","authorization_endpoint","revocation_endpoint","issuer","authServerCustom"],"sources":["AuthorizationServer.test.ts"],"sourcesContent":["/*\n * Copyright 2024 Palantir Technologies, Inc. All rights reserved.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { describe, expect, it } from \"vitest\";\n\nimport { createAuthorizationServer } from \"./common.js\";\n\ndescribe(\"Create authorization server\", () => {\n  it(\"works with old multipass ctx path\", () => {\n    const authServer = createAuthorizationServer(\n      \"/multipass\",\n      \"https://stack.palantir.com\",\n    );\n    expect(authServer).toEqual({\n      token_endpoint: \"https://stack.palantir.com/multipass/api/oauth2/token\",\n      authorization_endpoint:\n        \"https://stack.palantir.com/multipass/api/oauth2/authorize\",\n      revocation_endpoint:\n        \"https://stack.palantir.com/multipass/api/oauth2/revoke_token\",\n      issuer: \"https://stack.palantir.com/multipass\",\n    });\n  });\n\n  it(\"works with new multipass ctx path\", () => {\n    const authServer = createAuthorizationServer(\n      \"multipass\",\n      \"https://stack.palantir.com\",\n    );\n    expect(authServer).toEqual({\n      token_endpoint: \"https://stack.palantir.com/multipass/api/oauth2/token\",\n      authorization_endpoint:\n        \"https://stack.palantir.com/multipass/api/oauth2/authorize\",\n      revocation_endpoint:\n        \"https://stack.palantir.com/multipass/api/oauth2/revoke_token\",\n      issuer: \"https://stack.palantir.com/multipass\",\n    });\n\n    const authServerCustom = createAuthorizationServer(\n      \"multipass\",\n      \"https://stack.palantir.com/foo/first/someStuff\",\n    );\n    expect(authServerCustom).toEqual({\n      token_endpoint:\n        \"https://stack.palantir.com/foo/first/someStuff/multipass/api/oauth2/token\",\n      authorization_endpoint:\n        \"https://stack.palantir.com/foo/first/someStuff/multipass/api/oauth2/authorize\",\n      revocation_endpoint:\n        \"https://stack.palantir.com/foo/first/someStuff/multipass/api/oauth2/revoke_token\",\n      issuer: \"https://stack.palantir.com/foo/first/someStuff/multipass\",\n    });\n  });\n});\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA,SAASA,QAAQ,EAAEC,MAAM,EAAEC,EAAE,QAAQ,QAAQ;AAE7C,SAASC,yBAAyB,QAAQ,aAAa;AAEvDH,QAAQ,CAAC,6BAA6B,EAAE,MAAM;EAC5CE,EAAE,CAAC,mCAAmC,EAAE,MAAM;IAC5C,MAAME,UAAU,GAAGD,yBAAyB,CAC1C,YAAY,EACZ,4BACF,CAAC;IACDF,MAAM,CAACG,UAAU,CAAC,CAACC,OAAO,CAAC;MACzBC,cAAc,EAAE,uDAAuD;MACvEC,sBAAsB,EACpB,2DAA2D;MAC7DC,mBAAmB,EACjB,8DAA8D;MAChEC,MAAM,EAAE;IACV,CAAC,CAAC;EACJ,CAAC,CAAC;EAEFP,EAAE,CAAC,mCAAmC,EAAE,MAAM;IAC5C,MAAME,UAAU,GAAGD,yBAAyB,CAC1C,WAAW,EACX,4BACF,CAAC;IACDF,MAAM,CAACG,UAAU,CAAC,CAACC,OAAO,CAAC;MACzBC,cAAc,EAAE,uDAAuD;MACvEC,sBAAsB,EACpB,2DAA2D;MAC7DC,mBAAmB,EACjB,8DAA8D;MAChEC,MAAM,EAAE;IACV,CAAC,CAAC;IAEF,MAAMC,gBAAgB,GAAGP,yBAAyB,CAChD,WAAW,EACX,gDACF,CAAC;IACDF,MAAM,CAACS,gBAAgB,CAAC,CAACL,OAAO,CAAC;MAC/BC,cAAc,EACZ,2EAA2E;MAC7EC,sBAAsB,EACpB,+EAA+E;MACjFC,mBAAmB,EACjB,kFAAkF;MACpFC,MAAM,EAAE;IACV,CAAC,CAAC;EACJ,CAAC,CAAC;AACJ,CAAC,CAAC","ignoreList":[]}

package/build/esm/BaseOauthClient.js

@@ -1,17 +1,2 @@
-/*
- * Copyright 2024 Palantir Technologies, Inc. All rights reserved.
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- *     http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */
 export {};
 //# sourceMappingURL=BaseOauthClient.js.map

package/build/esm/BaseOauthClient.js.map

@@ -1 +1 @@
-{"version":3,"file":"BaseOauthClient.js","names":[],"sources":["BaseOauthClient.js"],"sourcesContent":["/*\n * Copyright 2024 Palantir Technologies, Inc. All rights reserved.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nexport {};\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA","ignoreList":[]}
+{"version":3,"file":"BaseOauthClient.js","names":[],"sources":["BaseOauthClient.ts"],"sourcesContent":["/*\n * Copyright 2024 Palantir Technologies, Inc. All rights reserved.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport type { Token } from \"./Token.js\";\n\nexport type Events = {\n  signIn: CustomEvent<Token>;\n  signOut: Event;\n  refresh: CustomEvent<Token>;\n};\n\nexport interface BaseOauthClient<K extends keyof Events & string> {\n  (): Promise<string>;\n\n  getTokenOrUndefined: () => string | undefined;\n  signIn: () => Promise<Token>;\n  signOut: () => Promise<void>;\n\n  addEventListener: <T extends K>(\n    type: T,\n    listener: ((evt: Events[T]) => void) | null,\n    options?: boolean | AddEventListenerOptions,\n  ) => void;\n\n  removeEventListener: <T extends K>(\n    type: T,\n    callback: ((evt: Events[T]) => void) | null,\n    options?: EventListenerOptions | boolean,\n  ) => void;\n}\n"],"mappings":"","ignoreList":[]}

package/build/esm/ConfidentialOauthClient.js

@@ -1,17 +1,2 @@
-/*
- * Copyright 2024 Palantir Technologies, Inc. All rights reserved.
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- *     http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */
 export {};
 //# sourceMappingURL=ConfidentialOauthClient.js.map

package/build/esm/ConfidentialOauthClient.js.map

@@ -1 +1 @@
-{"version":3,"file":"ConfidentialOauthClient.js","names":[],"sources":["ConfidentialOauthClient.js"],"sourcesContent":["/*\n * Copyright 2024 Palantir Technologies, Inc. All rights reserved.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nexport {};\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA","ignoreList":[]}
+{"version":3,"file":"ConfidentialOauthClient.js","names":[],"sources":["ConfidentialOauthClient.ts"],"sourcesContent":["/*\n * Copyright 2024 Palantir Technologies, Inc. All rights reserved.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport type { BaseOauthClient } from \"./BaseOauthClient.js\";\n\nexport interface ConfidentialOauthClient\n  extends BaseOauthClient<\"signIn\" | \"signOut\">\n{\n}\n"],"mappings":"","ignoreList":[]}

package/build/esm/PublicOauthClient.js

@@ -1,17 +1,2 @@
-/*
- * Copyright 2024 Palantir Technologies, Inc. All rights reserved.
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- *     http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */
 export {};
 //# sourceMappingURL=PublicOauthClient.js.map

package/build/esm/PublicOauthClient.js.map

@@ -1 +1 @@
-{"version":3,"file":"PublicOauthClient.js","names":[],"sources":["PublicOauthClient.js"],"sourcesContent":["/*\n * Copyright 2024 Palantir Technologies, Inc. All rights reserved.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nexport {};\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA","ignoreList":[]}
+{"version":3,"file":"PublicOauthClient.js","names":[],"sources":["PublicOauthClient.ts"],"sourcesContent":["/*\n * Copyright 2024 Palantir Technologies, Inc. All rights reserved.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport type { BaseOauthClient } from \"./BaseOauthClient.js\";\nimport type { Token } from \"./Token.js\";\n\nexport interface PublicOauthClient\n  extends BaseOauthClient<\"signIn\" | \"signOut\" | \"refresh\">\n{\n  refresh: () => Promise<Token | undefined>;\n}\n"],"mappings":"","ignoreList":[]}

package/build/esm/Token.js

@@ -1,17 +1,2 @@
-/*
- * Copyright 2024 Palantir Technologies, Inc. All rights reserved.
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- *     http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */
 export {};
 //# sourceMappingURL=Token.js.map

package/build/esm/Token.js.map

@@ -1 +1 @@
-{"version":3,"file":"Token.js","names":[],"sources":["Token.js"],"sourcesContent":["/*\n * Copyright 2024 Palantir Technologies, Inc. All rights reserved.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nexport {};\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA","ignoreList":[]}
+{"version":3,"file":"Token.js","names":[],"sources":["Token.ts"],"sourcesContent":["/*\n * Copyright 2024 Palantir Technologies, Inc. All rights reserved.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nexport interface Token {\n  readonly access_token: string;\n  readonly expires_in: number;\n  readonly refresh_token?: string;\n  readonly expires_at: number;\n}\n"],"mappings":"","ignoreList":[]}

package/build/esm/__tests__/createPublicOauthClient.test.js

@@ -13,6 +13,7 @@
  * See the License for the specific language governing permissions and
  * limitations under the License.
  */
+
 import { createPublicOauthClient } from "@osdk/oauth";
 import * as oauthModule from "@osdk/oauth";
 import { describe, expect, it, vi } from "vitest";
@@ -29,11 +30,13 @@ vi.stubGlobal("window", {
 describe("createPublicOauthClient", () => {
   it("should return the same processed options for both client creation methods", async () => {
     const mockProcessOptionsAndAssignDefaults = vi.fn();
+
     // Mock processOptionsAndAssignDefaults to call the mock function
     vi.spyOn(utilsModule, "processOptionsAndAssignDefaults").mockImplementation((...args) => {
       mockProcessOptionsAndAssignDefaults(...args);
       return utilsModule.processOptionsAndAssignDefaults(...args);
     });
+
     // Mock createPublicOauthClient to call both the mock and the original function
     vi.spyOn(oauthModule, "createPublicOauthClient").mockImplementation((...args) => {
       const [_client_id, ...rest] = args;