@owlmeans/oidc 0.1.1 → 0.1.3

package/LICENSE

@@ -1,6 +1,6 @@
 MIT License
 
-Copyright (c) 2024 OwlMeans Common — Fullstack typescript framework
+Copyright (c) 2026 OwlMeans Common — Fullstack typescript framework
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

package/README.md

@@ -1,525 +1,85 @@
 # @owlmeans/oidc
 
-OpenID Connect (OIDC) integration library for OwlMeans Common applications. This package provides shared OIDC functionality, including provider configuration, authentication flows, and standardized modules for implementing OIDC relying party and provider services.
+Shared OIDC protocol abstractions — guard/gate aliases, models, and module declarations used by both server and browser OIDC packages.
 
 ## Overview
 
-The `@owlmeans/oidc` package serves as the foundation for OIDC authentication in the OwlMeans ecosystem, providing:
-
-- **OIDC Provider Configuration**: Standardized configuration for OIDC identity providers
-- **Authentication Modules**: Pre-built modules for OIDC authentication flows
-- **Guard Services**: OIDC-based authentication guards for API protection
-- **Client Integration**: Support for OIDC relying party implementations
-- **Provider Support**: Foundation for OIDC identity provider services
-- **Flow Management**: Integration with OwlMeans flow system for authentication workflows
-- **Multi-Provider Support**: Configuration and management of multiple OIDC providers
+- `OIDC_GATE` — gate alias to compose with `gate(...)` inside `guard(...)` declarations
+- `OIDC_GUARD`, `WRAPPED_OIDC`, `OIDC_FLOW`, `OIDC_AUTHEN_MODULE`, `OIDC_WRAPPED_TOKEN` — shared aliases
+- `OidcGuard`, `WithSharedConfig`, `OidcProviderConfig` — shared types
+- Module declarations for the OIDC dispatcher (`/authenticate/oidc/init`, `/authenticate/oidc/process`)
 
 ## Installation
 
 ```bash
-npm install @owlmeans/oidc
+bun add @owlmeans/oidc
 ```
 
-## Core Concepts
-
-### OIDC Provider Configuration
-
-The package defines standardized configuration structures for OIDC identity providers, supporting both public and private providers with flexible client configurations.
-
-### Authentication Modules
-
-Pre-built modules handle OIDC authentication flows, including initialization, callback processing, and token management.
-
-### Guard Services
-
-OIDC guards provide authentication and authorization for API endpoints using OIDC tokens.
-
-### Multi-Tenant Support
+## Usage
 
-Support for multiple OIDC providers with entity-specific bindings and restriction capabilities.
-
-## API Reference
-
-### Types
-
-#### `OidcSharedConfig`
-Main configuration interface for OIDC functionality.
+Compose `OIDC_GATE` into a guard on a module:
 
 ```typescript
-interface OidcSharedConfig {
-  clientCookie?: {
-    interaction?: {
-      name?: string     // Cookie name for interactions
-      ttl?: number      // Time-to-live for interaction cookies
-    }
-  }
-  providers?: OidcProviderConfig[]              // OIDC provider configurations
-  restrictedProviders?: boolean | string[]      // Provider access restrictions
-}
-```
-
-#### `OidcProviderConfig`
-Configuration for individual OIDC providers.
+import { module, guard, gate } from '@owlmeans/module'
+import { route } from '@owlmeans/route'
+import { DEFAULT_GUARD } from '@owlmeans/auth-common'
+import { OIDC_GATE } from '@owlmeans/oidc'
 
-```typescript
-interface OidcProviderConfig extends OidcProviderDescriptor {
-  internal?: boolean        // Internal use only flag
-  apiClientId?: string     // Administrative client ID
-}
-```
-
-#### `OidcProviderDescriptor`
-Core provider configuration.
-
-```typescript
-interface OidcProviderDescriptor {
-  entityId?: string         // Entity binding
-  service?: string          // Service identifier
-  discoveryUrl?: string     // OIDC discovery endpoint
-  basePath?: string         // Base path for OIDC endpoints
-  clientId: string          // OAuth2 client ID
-  secret?: string           // Client secret
-  extraScopes?: string      // Additional OAuth2 scopes
-  idOverride?: string       // Provider ID override
-  def?: boolean            // Default provider flag (client-side)
-}
-```
-
-#### `WithSharedConfig`
-Interface for configurations that include OIDC settings.
-
-```typescript
-interface WithSharedConfig {
-  oidc: OidcSharedConfig
-}
-```
-
-### Constants
-
-#### Module Identifiers
-```typescript
-const OIDC_AUTHEN_MODULE = 'iam-oidc-authen'        // OIDC authentication module
-const PROVIDER_INTERACTION = 'oidc-server:interaction'  // Provider interaction module
-const OIDC_CLIENT_AUTH = 'oidc-client'               // Client authentication module
-```
-
-#### Flow and Guard Constants
-```typescript
-const OIDC_FLOW = 'oidc'                  // OIDC authentication flow
-const OIDC_GUARD = 'guard:oidc'           // OIDC guard service
-const OIDC_GUARD_CACHE = 'resource:oidc-guard:cache'  // Guard cache resource
-const OIDC_GATE = 'oidc-gate'             // OIDC gate service
-```
-
-#### Dispatcher Constants
-```typescript
-const DISPATCHER_OIDC_INIT = 'dispatcher:oidc:init'         // OIDC initialization
-const DISPATCHER_OIDC = 'dispatcher:oidc:authenticate'      // OIDC authentication
-```
-
-#### Path and Parameter Constants
-```typescript
-const DEFAULT_PATH = 'oidc'                    // Default OIDC base path
-const DEFAULT_FRONT = 'oidc-client'            // Default frontend identifier
-const INTERACTION_PATH = '/interaction/:uid'   // Interaction endpoint path
-const OIDC_CODE_QUERY = 'code'                // Authorization code query parameter
-```
-
-### Pre-built Modules
-
-The package exports pre-configured modules for OIDC authentication:
-
-#### OIDC Initialization Module
-Handles OIDC authentication initialization requests.
-
-```typescript
-// Route: POST /authenticate/oidc/init
-// Validates: OIDCAuthInitParamsSchema
-```
-
-#### OIDC Processing Module  
-Handles OIDC authentication callback processing.
-
-```typescript
-// Route: POST /authenticate/oidc/process
-// Validates: OIDCClientAuthPayloadSchema
-```
-
-## Usage Examples
-
-### Basic OIDC Configuration
-
-```typescript
-import { OidcSharedConfig } from '@owlmeans/oidc'
-
-const oidcConfig: OidcSharedConfig = {
-  clientCookie: {
-    interaction: {
-      name: 'oidc_interaction',
-      ttl: 3600  // 1 hour
-    }
-  },
-  providers: [
-    {
-      clientId: 'my-app-client',
-      secret: 'client-secret',
-      discoveryUrl: 'https://auth.example.com/.well-known/openid_configuration',
-      extraScopes: 'profile email',
-      def: true  // Default provider
-    }
-  ]
-}
-```
-
-### Multi-Provider Configuration
-
-```typescript
-const multiProviderConfig: OidcSharedConfig = {
-  providers: [
-    {
-      clientId: 'google-client-id',
-      discoveryUrl: 'https://accounts.google.com/.well-known/openid_configuration',
-      service: 'google',
-      extraScopes: 'profile email'
-    },
-    {
-      clientId: 'microsoft-client-id', 
-      discoveryUrl: 'https://login.microsoftonline.com/common/v2.0/.well-known/openid_configuration',
-      service: 'microsoft',
-      extraScopes: 'profile email'
-    },
-    {
-      clientId: 'internal-client-id',
-      secret: 'internal-secret',
-      discoveryUrl: 'https://internal-auth.company.com/.well-known/openid_configuration',
-      service: 'internal',
-      internal: true,  // Internal use only
-      entityId: 'company-employees'
-    }
-  ],
-  restrictedProviders: ['internal']  // Restrict access to internal provider
-}
-```
-
-### Entity-Specific Provider Configuration
-
-```typescript
-const entitySpecificConfig: OidcSharedConfig = {
-  providers: [
-    {
-      clientId: 'org-a-client',
-      secret: 'org-a-secret',
-      discoveryUrl: 'https://auth-org-a.example.com/.well-known/openid_configuration',
-      entityId: 'organization-a',
-      service: 'org-a'
-    },
-    {
-      clientId: 'org-b-client',
-      secret: 'org-b-secret', 
-      discoveryUrl: 'https://auth-org-b.example.com/.well-known/openid_configuration',
-      entityId: 'organization-b',
-      service: 'org-b'
-    }
-  ]
-}
-```
-
-### OIDC Module Integration
-
-```typescript
-import { modules } from '@owlmeans/oidc'
-import { createBasicContext } from '@owlmeans/context'
-
-// Create context with OIDC modules
-const context = createBasicContext({
-  oidc: oidcConfig
-})
-
-// Register OIDC modules
-modules.forEach(module => {
-  context.registerModule(module)
-})
-
-// Initialize context
-await context.init()
-```
-
-### Custom OIDC Module
-
-```typescript
-import { module, body, filter } from '@owlmeans/module'
-import { route, RouteMethod, backend } from '@owlmeans/route'
-
-const customOidcModule = module(
-  route('custom-oidc-login', '/auth/custom/login', backend(null, RouteMethod.POST)),
-  filter(body(CustomOIDCSchema)),
-  // Custom handler implementation
-  async (request, reply) => {
-    const { provider, redirectUri } = request.body
-    
-    // Custom OIDC initialization logic
-    const authUrl = await generateOIDCAuthUrl(provider, redirectUri)
-    
-    reply.resolve({ authUrl }, ModuleOutcome.Ok)
-  }
-)
-```
-
-### OIDC Guard Usage
-
-```typescript
-import { OIDC_GUARD } from '@owlmeans/oidc'
-
-// Protect API endpoint with OIDC guard
-const protectedModule = module(
-  route('protected-api', '/api/protected', backend()),
-  // Guard will validate OIDC tokens
-  { guards: [OIDC_GUARD] },
-  async (request, reply) => {
-    // Access authenticated user from OIDC token
-    const user = request.auth?.user
-    
-    const data = await getProtectedData(user.id)
-    reply.resolve(data)
-  }
+module(
+  route(manager.back.account.base, '/account'),
+  guard(DEFAULT_GUARD, gate(OIDC_GATE, [`my-service-account-{entity}`]))
 )
 ```
 
-### Provider Restriction Implementation
-
-```typescript
-// Configuration with provider restrictions
-const restrictedConfig: OidcSharedConfig = {
-  providers: [
-    { clientId: 'public-provider', service: 'public' },
-    { clientId: 'internal-provider', service: 'internal', internal: true },
-    { clientId: 'partner-provider', service: 'partner' }
-  ],
-  // Only allow internal and partner providers
-  restrictedProviders: ['internal', 'partner']
-}
-
-// Check if provider is allowed
-const isProviderAllowed = (providerId: string, config: OidcSharedConfig) => {
-  const { restrictedProviders } = config
-  
-  if (restrictedProviders === false) {
-    return false  // No providers allowed
-  }
-  
-  if (restrictedProviders === true) {
-    // Only default provider allowed
-    const defaultProvider = config.providers?.find(p => p.def)
-    return defaultProvider?.service === providerId
-  }
-  
-  if (Array.isArray(restrictedProviders)) {
-    return restrictedProviders.includes(providerId)
-  }
-  
-  return true  // All providers allowed
-}
-```
-
-### OIDC Flow Integration
+Extend an app config with shared OIDC config:
 
 ```typescript
-import { OIDC_FLOW } from '@owlmeans/oidc'
-import { makeFlowModel } from '@owlmeans/flow'
+import type { WithSharedConfig, OidcProviderConfig } from '@owlmeans/oidc'
 
-// Create OIDC authentication flow
-const oidcFlow = await makeFlowModel(OIDC_FLOW, flowProvider)
-
-// Start authentication flow
-oidcFlow.target('auth-service')
-oidcFlow.entity('user-123')
-
-// Navigate through flow steps
-const initState = oidcFlow.transit('init', true, 'Starting OIDC auth')
-const authState = oidcFlow.transit('authenticate', true, 'Provider selected')
-const completeState = oidcFlow.transit('complete', true, 'Authentication successful')
-```
-
-### Token Validation
-
-```typescript
-import { OIDC_WRAPPED_TOKEN, WRAPPED_OIDC } from '@owlmeans/oidc'
-
-// Validate OIDC token
-const validateOIDCToken = async (token: string, providerId: string) => {
-  // Extract provider configuration
-  const provider = oidcConfig.providers?.find(p => p.service === providerId)
-  if (!provider) {
-    throw new Error('Provider not found')
-  }
-  
-  // Validate token with provider
-  const tokenInfo = await validateWithProvider(token, provider)
-  
-  // Wrap token for internal use
-  return {
-    type: OIDC_WRAPPED_TOKEN,
-    token: tokenInfo.access_token,
-    user: tokenInfo.userInfo,
-    provider: providerId
-  }
-}
-```
-
-### Custom Provider Discovery
-
-```typescript
-// Dynamic provider discovery
-const discoverOIDCProvider = async (discoveryUrl: string) => {
-  const response = await fetch(discoveryUrl)
-  const discovery = await response.json()
-  
-  return {
-    authorizationEndpoint: discovery.authorization_endpoint,
-    tokenEndpoint: discovery.token_endpoint,
-    userinfoEndpoint: discovery.userinfo_endpoint,
-    jwksUri: discovery.jwks_uri,
-    issuer: discovery.issuer
-  }
-}
-
-// Use discovered endpoints
-const provider: OidcProviderConfig = {
-  clientId: 'dynamic-client',
-  discoveryUrl: 'https://example.com/.well-known/openid_configuration',
-  service: 'dynamic-provider'
-}
-
-const endpoints = await discoverOIDCProvider(provider.discoveryUrl!)
-```
-
-## Advanced Features
-
-### Administrative API Integration
-
-```typescript
-// Provider with administrative capabilities
-const adminProviderConfig: OidcProviderConfig = {
-  clientId: 'public-client-id',
-  secret: 'public-client-secret',
-  discoveryUrl: 'https://auth.example.com/.well-known/openid_configuration',
-  apiClientId: 'admin-client-id',  // For administrative operations
-  service: 'managed-provider'
-}
-
-// Use administrative client for user management
-const manageUsers = async (provider: OidcProviderConfig) => {
-  const adminToken = await getAdminToken(provider.apiClientId!)
-  
-  // Perform administrative operations
-  const users = await listUsers(adminToken)
-  return users
-}
-```
-
-### Cookie Configuration
-
-```typescript
-// Custom cookie configuration for interactions
-const cookieConfig: OidcSharedConfig = {
-  clientCookie: {
-    interaction: {
-      name: 'app_oidc_session',
-      ttl: 7200  // 2 hours
-    }
-  }
-}
-
-// Use in OIDC interaction handling
-const handleInteraction = (req: Request, res: Response) => {
-  const cookieName = cookieConfig.clientCookie?.interaction?.name || 'oidc_interaction'
-  const ttl = cookieConfig.clientCookie?.interaction?.ttl || 3600
-  
-  res.cookie(cookieName, interactionData, {
-    maxAge: ttl * 1000,
-    httpOnly: true,
-    secure: true
-  })
-}
+interface AppConfig extends BasicConfig, WithSharedConfig {}
 ```
 
-### Error Handling
+Type a websocket auth payload:
 
 ```typescript
-import { OIDCError } from '@owlmeans/oidc'
-
-try {
-  const result = await authenticateWithOIDC(provider, token)
-  return result
-} catch (error) {
-  if (error instanceof OIDCError) {
-    console.error('OIDC authentication failed:', error.message)
-    
-    // Handle specific OIDC errors
-    switch (error.code) {
-      case 'invalid_token':
-        // Handle invalid token
-        break
-      case 'provider_unavailable':
-        // Handle provider unavailability
-        break
-      default:
-        // Handle generic OIDC error
-    }
-  }
-  
-  throw error
-}
+import type { OidcGuard } from '@owlmeans/oidc'
+import { OIDC_GUARD } from '@owlmeans/oidc'
 ```
 
-## Integration with OwlMeans Ecosystem
+## API
 
-The `@owlmeans/oidc` package integrates with:
+### Constants
 
-- **@owlmeans/auth**: Core authentication types and interfaces
-- **@owlmeans/auth-common**: Common authentication utilities and guards
-- **@owlmeans/module**: Module system for OIDC endpoints
-- **@owlmeans/route**: Routing system for OIDC flows
-- **@owlmeans/flow**: Flow management for authentication workflows
-- **@owlmeans/context**: Configuration and service management
-- **@owlmeans/server-oidc-provider**: Server-side OIDC provider implementation
-- **@owlmeans/server-oidc-rp**: Server-side relying party implementation
-- **@owlmeans/web-oidc-rp**: Web-based relying party implementation
+- `OIDC_GATE` — `'oidc-gate'`
+- `OIDC_GUARD` — `'guard:oidc'`
+- `OIDC_FLOW` — `'oidc'`
+- `WRAPPED_OIDC` — `'wrapped-oidc-authz'`
+- `OIDC_AUTHEN_MODULE` — `'iam-oidc-authen'`
+- `OIDC_WRAPPED_TOKEN` — `'oidc-wrapped-token'`
+- `DISPATCHER_OIDC`, `DISPATCHER_OIDC_INIT` — auth dispatcher module aliases
+- `INTERACTION`, `INTERACTION_PATH` — interaction route aliases
+- `OIDC_GUARD_CACHE` — guard cache resource alias
 
-## Security Considerations
+### Types
 
-- Always use HTTPS for OIDC endpoints and redirects
-- Validate all tokens received from OIDC providers
-- Implement proper CSRF protection for authentication flows
-- Use secure cookies for session management
-- Validate provider discovery documents
-- Implement proper token storage and cleanup
-- Use appropriate scopes and minimize requested permissions
+- `OidcGuard` — guard payload shape (used in WS auth helpers)
+- `WithSharedConfig` — config mixin adding the OIDC fields
+- `OidcProviderConfig` — provider configuration shape
 
-## Best Practices
+## Product-Viable Integration Notes
 
-### Configuration Management
-- Store client secrets securely using environment variables
-- Use discovery URLs when possible for dynamic configuration
-- Implement proper provider validation and filtering
-- Regular review and rotation of client credentials
+- Provider configuration belongs in `cfg.oidc.providers`; viable registers an internal admin provider and a Google provider there.
+- `GOOGLE_SERVICE` is the stable provider service key (`'google'`) and must match browser plugin, backend provider lookup, and identity-linking derivation.
+- `GOOGLE_CLIENT_AUTH` identifies the browser Google auth plugin registered by `@owlmeans/web-oidc-rp/auth/plugins`.
+- `OIDC_GATE` is for OIDC-backed authorization. Apps that only use Google/OIDC for login and authorize against local identity records should define their own product gate alias.
 
-### Multi-Provider Setup
-- Use meaningful service identifiers for providers
-- Implement proper provider selection UI/UX
-- Handle provider-specific error scenarios
-- Implement fallback authentication methods
+### `modules`
 
-### Security
-- Validate all OIDC tokens before trusting claims
-- Implement proper session timeout and cleanup
-- Use appropriate redirect URI validation
-- Monitor for suspicious authentication patterns
+Array of dispatcher module declarations: `POST /authenticate/oidc/init` and `POST /authenticate/oidc/process`.
 
-### Performance
-- Cache provider discovery documents appropriately
-- Implement efficient token validation
-- Use connection pooling for provider communication
-- Monitor and optimize authentication flow performance
+## Related Packages
 
-Fixes #32.
+- [`@owlmeans/server-oidc-rp`](../server-oidc-rp) — server-side relying party that consumes these constants
+- [`@owlmeans/web-oidc-rp`](../web-oidc-rp) — browser-side relying party
+- [`@owlmeans/server-oidc-provider`](../server-oidc-provider) — embedded OIDC identity provider
+- [`@owlmeans/auth-common`](../auth-common) — `DEFAULT_GUARD` typically composed alongside `OIDC_GATE`

package/build/consts.d.ts

@@ -6,6 +6,8 @@ export declare const OIDC_FLOW = "oidc";
 export declare const OIDC_AUTHEN_MODULE = "iam-oidc-authen";
 export declare const PROVIDER_INTERACTION = "oidc-server:interaction";
 export declare const OIDC_CLIENT_AUTH = "oidc-client";
+export declare const GOOGLE_CLIENT_AUTH = "google-oauth";
+export declare const GOOGLE_SERVICE = "google";
 export declare const OIDC_GUARD = "guard:oidc";
 export declare const OIDC_GUARD_CACHE = "resource:oidc-guard:cache";
 export declare const DISPATCHER_OIDC_INIT = "dispatcher:oidc:init";

package/build/consts.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"consts.d.ts","sourceRoot":"","sources":["../src/consts.ts"],"names":[],"mappings":"AACA,eAAO,MAAM,YAAY,SAAS,CAAA;AAElC,eAAO,MAAM,aAAa,gBAAgB,CAAA;AAE1C,eAAO,MAAM,gBAAgB,sBAAsB,CAAA;AAEnD,eAAO,MAAM,WAAW,qBAAqB,CAAA;AAE7C,eAAO,MAAM,SAAS,SAAS,CAAA;AAE/B,eAAO,MAAM,kBAAkB,oBAAoB,CAAA;AAEnD,eAAO,MAAM,oBAAoB,4BAA4B,CAAA;AAE7D,eAAO,MAAM,gBAAgB,gBAAgB,CAAA;AAE7C,eAAO,MAAM,UAAU,eAAe,CAAA;AAEtC,eAAO,MAAM,gBAAgB,8BAA8B,CAAA;AAE3D,eAAO,MAAM,oBAAoB,yBAAyB,CAAA;AAE1D,eAAO,MAAM,eAAe,iCAAiC,CAAA;AAE7D,eAAO,MAAM,eAAe,SAAS,CAAA;AAErC,eAAO,MAAM,kBAAkB,uBAAuB,CAAA;AAEtD,eAAO,MAAM,YAAY,uBAAuB,CAAA;AAEhD,eAAO,MAAM,SAAS,cAAc,CAAA"}
+{"version":3,"file":"consts.d.ts","sourceRoot":"","sources":["../src/consts.ts"],"names":[],"mappings":"AACA,eAAO,MAAM,YAAY,SAAS,CAAA;AAElC,eAAO,MAAM,aAAa,gBAAgB,CAAA;AAE1C,eAAO,MAAM,gBAAgB,sBAAsB,CAAA;AAEnD,eAAO,MAAM,WAAW,qBAAqB,CAAA;AAE7C,eAAO,MAAM,SAAS,SAAS,CAAA;AAE/B,eAAO,MAAM,kBAAkB,oBAAoB,CAAA;AAEnD,eAAO,MAAM,oBAAoB,4BAA4B,CAAA;AAE7D,eAAO,MAAM,gBAAgB,gBAAgB,CAAA;AAE7C,eAAO,MAAM,kBAAkB,iBAAiB,CAAA;AAGhD,eAAO,MAAM,cAAc,WAAW,CAAA;AAEtC,eAAO,MAAM,UAAU,eAAe,CAAA;AAEtC,eAAO,MAAM,gBAAgB,8BAA8B,CAAA;AAE3D,eAAO,MAAM,oBAAoB,yBAAyB,CAAA;AAE1D,eAAO,MAAM,eAAe,iCAAiC,CAAA;AAE7D,eAAO,MAAM,eAAe,SAAS,CAAA;AAErC,eAAO,MAAM,kBAAkB,uBAAuB,CAAA;AAEtD,eAAO,MAAM,YAAY,uBAAuB,CAAA;AAEhD,eAAO,MAAM,SAAS,cAAc,CAAA"}

package/build/consts.js

@@ -6,6 +6,9 @@ export const OIDC_FLOW = 'oidc';
 export const OIDC_AUTHEN_MODULE = 'iam-oidc-authen';
 export const PROVIDER_INTERACTION = 'oidc-server:interaction';
 export const OIDC_CLIENT_AUTH = 'oidc-client';
+export const GOOGLE_CLIENT_AUTH = 'google-oauth';
+// This constant is the name of oidc identity provider that is called service in the oidc provider config. 
+export const GOOGLE_SERVICE = 'google';
 export const OIDC_GUARD = 'guard:oidc';
 export const OIDC_GUARD_CACHE = 'resource:oidc-guard:cache';
 export const DISPATCHER_OIDC_INIT = 'dispatcher:oidc:init';

package/build/consts.js.map

@@ -1 +1 @@
-{"version":3,"file":"consts.js","sourceRoot":"","sources":["../src/consts.ts"],"names":[],"mappings":"AACA,MAAM,CAAC,MAAM,YAAY,GAAG,MAAM,CAAA;AAElC,MAAM,CAAC,MAAM,aAAa,GAAG,aAAa,CAAA;AAE1C,MAAM,CAAC,MAAM,gBAAgB,GAAG,mBAAmB,CAAA;AAEnD,MAAM,CAAC,MAAM,WAAW,GAAG,kBAAkB,CAAA;AAE7C,MAAM,CAAC,MAAM,SAAS,GAAG,MAAM,CAAA;AAE/B,MAAM,CAAC,MAAM,kBAAkB,GAAG,iBAAiB,CAAA;AAEnD,MAAM,CAAC,MAAM,oBAAoB,GAAG,yBAAyB,CAAA;AAE7D,MAAM,CAAC,MAAM,gBAAgB,GAAG,aAAa,CAAA;AAE7C,MAAM,CAAC,MAAM,UAAU,GAAG,YAAY,CAAA;AAEtC,MAAM,CAAC,MAAM,gBAAgB,GAAG,2BAA2B,CAAA;AAE3D,MAAM,CAAC,MAAM,oBAAoB,GAAG,sBAAsB,CAAA;AAE1D,MAAM,CAAC,MAAM,eAAe,GAAG,8BAA8B,CAAA;AAE7D,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAA;AAErC,MAAM,CAAC,MAAM,kBAAkB,GAAG,oBAAoB,CAAA;AAEtD,MAAM,CAAC,MAAM,YAAY,GAAG,oBAAoB,CAAA;AAEhD,MAAM,CAAC,MAAM,SAAS,GAAG,WAAW,CAAA"}
+{"version":3,"file":"consts.js","sourceRoot":"","sources":["../src/consts.ts"],"names":[],"mappings":"AACA,MAAM,CAAC,MAAM,YAAY,GAAG,MAAM,CAAA;AAElC,MAAM,CAAC,MAAM,aAAa,GAAG,aAAa,CAAA;AAE1C,MAAM,CAAC,MAAM,gBAAgB,GAAG,mBAAmB,CAAA;AAEnD,MAAM,CAAC,MAAM,WAAW,GAAG,kBAAkB,CAAA;AAE7C,MAAM,CAAC,MAAM,SAAS,GAAG,MAAM,CAAA;AAE/B,MAAM,CAAC,MAAM,kBAAkB,GAAG,iBAAiB,CAAA;AAEnD,MAAM,CAAC,MAAM,oBAAoB,GAAG,yBAAyB,CAAA;AAE7D,MAAM,CAAC,MAAM,gBAAgB,GAAG,aAAa,CAAA;AAE7C,MAAM,CAAC,MAAM,kBAAkB,GAAG,cAAc,CAAA;AAEhD,2GAA2G;AAC3G,MAAM,CAAC,MAAM,cAAc,GAAG,QAAQ,CAAA;AAEtC,MAAM,CAAC,MAAM,UAAU,GAAG,YAAY,CAAA;AAEtC,MAAM,CAAC,MAAM,gBAAgB,GAAG,2BAA2B,CAAA;AAE3D,MAAM,CAAC,MAAM,oBAAoB,GAAG,sBAAsB,CAAA;AAE1D,MAAM,CAAC,MAAM,eAAe,GAAG,8BAA8B,CAAA;AAE7D,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAA;AAErC,MAAM,CAAC,MAAM,kBAAkB,GAAG,oBAAoB,CAAA;AAEtD,MAAM,CAAC,MAAM,YAAY,GAAG,oBAAoB,CAAA;AAEhD,MAAM,CAAC,MAAM,SAAS,GAAG,WAAW,CAAA"}

package/build/guard.d.ts

@@ -1,6 +1,6 @@
 import type { Config, Context, OidcGuard, OidcGuardOptions } from './types.js';
-import type { CommonModule } from '@owlmeans/module';
+import type { CommonEntrypoint } from '@owlmeans/entrypoint';
 export declare const makeOidcGuard: (opts?: OidcGuardOptions) => OidcGuard;
 export declare const appendOidcGuard: <C extends Config, T extends Context<C>>(context: T, opts?: OidcGuardOptions) => T;
-export declare const setupOidcGuard: (modules: CommonModule[], coguards?: string | string[]) => void;
+export declare const setupOidcGuard: (modules: CommonEntrypoint[], coguards?: string | string[]) => void;
 //# sourceMappingURL=guard.d.ts.map

package/build/guard.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"guard.d.ts","sourceRoot":"","sources":["../src/guard.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAsB,MAAM,YAAY,CAAA;AAElG,OAAO,KAAK,EAAqC,YAAY,EAAgB,MAAM,kBAAkB,CAAA;AASrG,eAAO,MAAM,aAAa,GAAI,OAAO,gBAAgB,KAAG,SA4FvD,CAAA;AAED,eAAO,MAAM,eAAe,GAAI,CAAC,SAAS,MAAM,EAAE,CAAC,SAAS,OAAO,CAAC,CAAC,CAAC,EACpE,SAAS,CAAC,EAAE,OAAO,gBAAgB,MAKpC,CAAA;AAED,eAAO,MAAM,cAAc,GAAI,SAAS,YAAY,EAAE,EAAE,WAAW,MAAM,GAAG,MAAM,EAAE,SAUnF,CAAA"}
+{"version":3,"file":"guard.d.ts","sourceRoot":"","sources":["../src/guard.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAsB,MAAM,YAAY,CAAA;AAElG,OAAO,KAAK,EAAqC,gBAAgB,EAAgB,MAAM,sBAAsB,CAAA;AAS7G,eAAO,MAAM,aAAa,GAAI,OAAO,gBAAgB,KAAG,SA4FvD,CAAA;AAED,eAAO,MAAM,eAAe,GAAI,CAAC,SAAS,MAAM,EAAE,CAAC,SAAS,OAAO,CAAC,CAAC,CAAC,EACpE,SAAS,CAAC,EAAE,OAAO,gBAAgB,MAKpC,CAAA;AAED,eAAO,MAAM,cAAc,GAAI,SAAS,gBAAgB,EAAE,EAAE,WAAW,MAAM,GAAG,MAAM,EAAE,SAUvF,CAAA"}

package/build/guard.js.map

@@ -1 +1 @@
-{"version":3,"file":"guard.js","sourceRoot":"","sources":["../src/guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AAEjD,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAE1E,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAA;AACnE,OAAO,EAAE,WAAW,EAAwB,kBAAkB,EAAE,MAAM,gBAAgB,CAAA;AACtF,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAA;AAC1E,OAAO,EAAE,KAAK,EAAE,MAAM,6BAA6B,CAAA;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAA;AAC1C,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAA;AAC9D,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,cAAc,CAAA;AAErD,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,IAAuB,EAAa,EAAE;IAClE,2FAA2F;IAC3F,kFAAkF;IAClF,WAAW;IAEX,MAAM,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,QAAQ,IAAI,aAAa,CAAC,CAAA;IAEnG,MAAM,KAAK,GAAc,aAAa,CAAY,UAAU,EAAE;QAC5D,cAAc;QAEd,gBAAgB;QAChB,mDAAmD;QACnD,oCAAoC;QACpC,uBAAuB;QACvB,MAAM;QAEN,0DAA0D;QAC1D,6DAA6D;QAC7D,6BAA6B;QAC7B,oDAAoD;QACpD,sBAAsB;QACtB,KAAK;QAEL,aAAa,EAAE,KAAK,EAAC,GAAG,EAAC,EAAE;YACzB,MAAM,GAAG,GAAG,KAAK,CAAC,SAAS,EAAE,CAAA;YAC7B,qDAAqD;YACrD,yEAAyE;YACzE,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAe,IAAI,EAAE,YAAY,IAAI,OAAO,CAAC,CAAA;YACrE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAA;YAC3C,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;gBAClB,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;gBAC/B,IAAI,IAAI,KAAK,kBAAkB,CAAC,WAAW,EAAE,EAAE,CAAC;oBAC9C,OAAO,KAAK,CAAA;gBACd,CAAC;YACH,CAAC;YAED,OAAO,IAAI,CAAA;QACb,CAAC;QAED,cAAc;QACd,KAAK,EAAE,KAAK,EAAC,GAAG,EAAC,EAAE,CAAC,gBAAgB,CAAC,GAAG,EAAE,kBAAkB,CAAC,IAAI,IAAI;QAErE,MAAM,EAAE,KAAK,EAAK,GAAoB,EAAE,GAA2B,EAAE,EAAE;YACrE,MAAM,aAAa,GAAG,gBAAgB,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAA;YAC/D,IAAI,aAAa,IAAI,IAAI,EAAE,CAAC;gBAC1B,OAAO,KAAU,CAAA;YACnB,CAAC;YAED,MAAM,GAAG,GAAG,KAAK,CAAC,SAAS,EAAE,CAAA;YAC7B,MAAM,QAAQ,GAAG,iBAAiB,CAAO,aAAa,EAAE,YAAY,CAAC,KAAK,CAAC,CAAA;YAC3E,MAAM,OAAO,GAAG,MAAM,KAAK,CAAkB,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;YAE5F,IAAI,CAAC,MAAM,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;gBACxC,OAAO,KAAU,CAAA;YACnB,CAAC;YAED,MAAM,KAAK,GAAG,gBAAgB,CAAC,GAAG,EAAE,kBAAkB,EAAE,KAAK,CAAE,CAAA;YAE/D,IAAI,OAAO,GAAqB,IAAI,CAAA;YAEpC,IAAI,CAAC;gBACH,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,CAAC,CAAA;YACtD,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,IAAI,CAAC,YAAY,kBAAkB,EAAE,CAAC;oBACpC,GAAG,CAAC,gBAAgB,CAAC,MAAM,CAAC,YAAY,EAAE,EAAE,CAAC,CAAA;oBAC7C,GAAG,CAAC,OAAO,GAAG,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,EAAE,CAAA;gBACrD,CAAC;gBAED,MAAM,CAAC,CAAA;YACT,CAAC;YAED,IAAI,OAAO,IAAI,IAAI,EAAE,CAAC;gBACpB,OAAO,KAAU,CAAA;YACnB,CAAC;YAED,IAAI,OAAO,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;gBAC5B,MAAM,CAAC,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;gBAC5C,MAAM,QAAQ,GAAG,iBAAiB,CAAO,OAAO,EAAE,YAAY,CAAC,KAAK,CAAC,CAAA;gBAErE,GAAG,CAAC,gBAAgB,CAAC,MAAM,CAAC,YAAY,EAAE,OAAO,CAAC,KAAK,CAAC,CAAA;gBACxD,GAAG,CAAC,OAAO,GAAG,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC,KAAK,EAAE,CAAA;gBAE9D,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAA;YACjC,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAA;YACjC,CAAC;YAED,OAAO,IAAS,CAAA;QAClB,CAAC;KACF,CAAC,CAAA;IAEF,OAAO,KAAK,CAAA;AACd,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,eAAe,GAAG,CAC7B,OAAU,EAAE,IAAuB,EACnC,EAAE;IACF,OAAO,CAAC,eAAe,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAA;IAE5C,OAAO,OAAO,CAAA;AAChB,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,OAAuB,EAAE,QAA4B,EAAE,EAAE;IACtF,OAAO,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,CAAA;IAC5B,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,aAAa,CAAC,CAAA;IAE3E,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE;QACvB,IAAI,MAAM,CAAC,MAAM,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC;eAC3D,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YAC3D,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;QACnC,CAAC;IACH,CAAC,CAAC,CAAA;AACJ,CAAC,CAAA;AAED,MAAM,OAAO,GAAG,CAAC,OAAgB,EAAsB,EAAE,CACvD,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC;IAC9B,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC;IAC/B,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAC,KAAK,EAAC,EAAE,CAAC,KAAK,EAAwB,CAAA"}
+{"version":3,"file":"guard.js","sourceRoot":"","sources":["../src/guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AAEjD,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAE1E,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAA;AACnE,OAAO,EAAE,WAAW,EAAwB,kBAAkB,EAAE,MAAM,gBAAgB,CAAA;AACtF,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAA;AAC1E,OAAO,EAAE,KAAK,EAAE,MAAM,6BAA6B,CAAA;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAA;AAC1C,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAA;AAC9D,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,cAAc,CAAA;AAErD,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,IAAuB,EAAa,EAAE;IAClE,2FAA2F;IAC3F,kFAAkF;IAClF,WAAW;IAEX,MAAM,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,QAAQ,IAAI,aAAa,CAAC,CAAA;IAEnG,MAAM,KAAK,GAAc,aAAa,CAAY,UAAU,EAAE;QAC5D,cAAc;QAEd,gBAAgB;QAChB,mDAAmD;QACnD,oCAAoC;QACpC,uBAAuB;QACvB,MAAM;QAEN,0DAA0D;QAC1D,6DAA6D;QAC7D,6BAA6B;QAC7B,oDAAoD;QACpD,sBAAsB;QACtB,KAAK;QAEL,aAAa,EAAE,KAAK,EAAC,GAAG,EAAC,EAAE;YACzB,MAAM,GAAG,GAAG,KAAK,CAAC,SAAS,EAAE,CAAA;YAC7B,qDAAqD;YACrD,yEAAyE;YACzE,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAe,IAAI,EAAE,YAAY,IAAI,OAAO,CAAC,CAAA;YACrE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAA;YAC3C,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;gBAClB,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;gBAC/B,IAAI,IAAI,KAAK,kBAAkB,CAAC,WAAW,EAAE,EAAE,CAAC;oBAC9C,OAAO,KAAK,CAAA;gBACd,CAAC;YACH,CAAC;YAED,OAAO,IAAI,CAAA;QACb,CAAC;QAED,cAAc;QACd,KAAK,EAAE,KAAK,EAAC,GAAG,EAAC,EAAE,CAAC,gBAAgB,CAAC,GAAG,EAAE,kBAAkB,CAAC,IAAI,IAAI;QAErE,MAAM,EAAE,KAAK,EAAK,GAAoB,EAAE,GAA2B,EAAE,EAAE;YACrE,MAAM,aAAa,GAAG,gBAAgB,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAA;YAC/D,IAAI,aAAa,IAAI,IAAI,EAAE,CAAC;gBAC1B,OAAO,KAAU,CAAA;YACnB,CAAC;YAED,MAAM,GAAG,GAAG,KAAK,CAAC,SAAS,EAAE,CAAA;YAC7B,MAAM,QAAQ,GAAG,iBAAiB,CAAO,aAAa,EAAE,YAAY,CAAC,KAAK,CAAC,CAAA;YAC3E,MAAM,OAAO,GAAG,MAAM,KAAK,CAAkB,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;YAE5F,IAAI,CAAC,MAAM,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;gBACxC,OAAO,KAAU,CAAA;YACnB,CAAC;YAED,MAAM,KAAK,GAAG,gBAAgB,CAAC,GAAG,EAAE,kBAAkB,EAAE,KAAK,CAAE,CAAA;YAE/D,IAAI,OAAO,GAAqB,IAAI,CAAA;YAEpC,IAAI,CAAC;gBACH,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,CAAC,CAAA;YACtD,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,IAAI,CAAC,YAAY,kBAAkB,EAAE,CAAC;oBACpC,GAAG,CAAC,gBAAgB,CAAC,MAAM,CAAC,YAAY,EAAE,EAAE,CAAC,CAAA;oBAC7C,GAAG,CAAC,OAAO,GAAG,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,EAAE,CAAA;gBACrD,CAAC;gBAED,MAAM,CAAC,CAAA;YACT,CAAC;YAED,IAAI,OAAO,IAAI,IAAI,EAAE,CAAC;gBACpB,OAAO,KAAU,CAAA;YACnB,CAAC;YAED,IAAI,OAAO,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;gBAC5B,MAAM,CAAC,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;gBAC5C,MAAM,QAAQ,GAAG,iBAAiB,CAAO,OAAO,EAAE,YAAY,CAAC,KAAK,CAAC,CAAA;gBAErE,GAAG,CAAC,gBAAgB,CAAC,MAAM,CAAC,YAAY,EAAE,OAAO,CAAC,KAAK,CAAC,CAAA;gBACxD,GAAG,CAAC,OAAO,GAAG,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC,KAAK,EAAE,CAAA;gBAE9D,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAA;YACjC,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAA;YACjC,CAAC;YAED,OAAO,IAAS,CAAA;QAClB,CAAC;KACF,CAAC,CAAA;IAEF,OAAO,KAAK,CAAA;AACd,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,eAAe,GAAG,CAC7B,OAAU,EAAE,IAAuB,EACnC,EAAE;IACF,OAAO,CAAC,eAAe,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAA;IAE5C,OAAO,OAAO,CAAA;AAChB,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,OAA2B,EAAE,QAA4B,EAAE,EAAE;IAC1F,OAAO,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,CAAA;IAC5B,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,aAAa,CAAC,CAAA;IAE3E,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE;QACvB,IAAI,MAAM,CAAC,MAAM,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC;eAC3D,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YAC3D,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;QACnC,CAAC;IACH,CAAC,CAAC,CAAA;AACJ,CAAC,CAAA;AAED,MAAM,OAAO,GAAG,CAAC,OAAgB,EAAsB,EAAE,CACvD,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC;IAC9B,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC;IAC/B,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAC,KAAK,EAAC,EAAE,CAAC,KAAK,EAAwB,CAAA"}

package/build/modules.d.ts

@@ -1,2 +1,2 @@
-export declare const modules: import("@owlmeans/module").CommonModule[];
+export declare const modules: import("@owlmeans/entrypoint").CommonEntrypoint[];
 //# sourceMappingURL=modules.d.ts.map

package/build/modules.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"modules.d.ts","sourceRoot":"","sources":["../src/modules.ts"],"names":[],"mappings":"AAKA,eAAO,MAAM,OAAO,2CAUnB,CAAA"}
+{"version":3,"file":"modules.d.ts","sourceRoot":"","sources":["../src/modules.ts"],"names":[],"mappings":"AAKA,eAAO,MAAM,OAAO,mDAUnB,CAAA"}

package/build/modules.js

@@ -1,9 +1,9 @@
-import { body, filter, module } from '@owlmeans/module';
+import { body, filter, entrypoint } from '@owlmeans/entrypoint';
 import { route, RouteMethod, backend } from '@owlmeans/route';
 import { DISPATCHER_OIDC, DISPATCHER_OIDC_INIT } from './consts.js';
 import { OIDCAuthInitParamsSchema, OIDCClientAuthPayloadSchema } from './models.js';
 export const modules = [
-    module(route(DISPATCHER_OIDC_INIT, '/authenticate/oidc/init', backend(null, RouteMethod.POST)), filter(body(OIDCAuthInitParamsSchema))),
-    module(route(DISPATCHER_OIDC, '/authenticate/oidc/process', backend(null, RouteMethod.POST)), filter(body(OIDCClientAuthPayloadSchema)))
+    entrypoint(route(DISPATCHER_OIDC_INIT, '/authenticate/oidc/init', backend(null, RouteMethod.POST)), filter(body(OIDCAuthInitParamsSchema))),
+    entrypoint(route(DISPATCHER_OIDC, '/authenticate/oidc/process', backend(null, RouteMethod.POST)), filter(body(OIDCClientAuthPayloadSchema)))
 ];
 //# sourceMappingURL=modules.js.map

package/build/modules.js.map

@@ -1 +1 @@
-{"version":3,"file":"modules.js","sourceRoot":"","sources":["../src/modules.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAA;AACvD,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAA;AAC7D,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAA;AACnE,OAAO,EAAE,wBAAwB,EAAE,2BAA2B,EAAE,MAAM,aAAa,CAAA;AAEnF,MAAM,CAAC,MAAM,OAAO,GAAG;IACrB,MAAM,CACJ,KAAK,CAAC,oBAAoB,EAAE,yBAAyB,EAAE,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC,EACvF,MAAM,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,CAEvC;IACD,MAAM,CACJ,KAAK,CAAC,eAAe,EAAE,4BAA4B,EAAE,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC,EACrF,MAAM,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC,CAC1C;CACF,CAAA"}
+{"version":3,"file":"modules.js","sourceRoot":"","sources":["../src/modules.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAA;AAC/D,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAA;AAC7D,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAA;AACnE,OAAO,EAAE,wBAAwB,EAAE,2BAA2B,EAAE,MAAM,aAAa,CAAA;AAEnF,MAAM,CAAC,MAAM,OAAO,GAAG;IACrB,UAAU,CACR,KAAK,CAAC,oBAAoB,EAAE,yBAAyB,EAAE,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC,EACvF,MAAM,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,CAEvC;IACD,UAAU,CACR,KAAK,CAAC,eAAe,EAAE,4BAA4B,EAAE,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC,EACrF,MAAM,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC,CAC1C;CACF,CAAA"}

package/build/types.d.ts

@@ -1,7 +1,7 @@
 import type { AuthToken } from '@owlmeans/auth';
 import type { AuthorizationService } from '@owlmeans/auth-common';
 import type { BasicConfig, BasicContext } from '@owlmeans/context';
-import type { GuardService } from '@owlmeans/module';
+import type { GuardService } from '@owlmeans/entrypoint';
 export interface Config extends BasicConfig {
 }
 export interface Context<C extends Config = Config> extends BasicContext<C> {
@@ -32,7 +32,11 @@ export interface OidcProviderDescriptor {
     basePath?: string;
     clientId: string;
     secret?: string;
+    redirectUri?: string;
     extraScopes?: string;
+    authEndpoint?: string;
+    tokenEndpoint?: string;
+    userinfoEndpoint?: string;
     idOverride?: string;
     def?: boolean;
 }

package/build/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAC/C,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAA;AACjE,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAClE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAA;AAEpD,MAAM,WAAW,MAAO,SAAQ,WAAW;CAAI;AAC/C,MAAM,WAAW,OAAO,CAAC,CAAC,SAAS,MAAM,GAAG,MAAM,CAAE,SAAQ,YAAY,CAAC,CAAC,CAAC;CAAI;AAE/E,MAAM,WAAW,gBAAgB;IAC/B,YAAY,CAAC,EAAE;QACb,WAAW,CAAC,EAAE;YACZ,IAAI,CAAC,EAAE,MAAM,CAAA;YACb,GAAG,CAAC,EAAE,MAAM,CAAA;SACb,CAAA;KACF,CAAC;IACF,SAAS,CAAC,EAAE,kBAAkB,EAAE,CAAA;IAChC;;;;OAIG;IACH,mBAAmB,CAAC,EAAE,OAAO,GAAG,MAAM,EAAE,CAAA;CACzC;AAED,MAAM,WAAW,kBAAmB,SAAQ,sBAAsB;IAEhE,QAAQ,CAAC,EAAE,OAAO,CAAA;IAElB,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AAED,MAAM,WAAW,sBAAsB;IAErC,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,UAAU,CAAC,EAAE,MAAM,CAAA;IAEnB,GAAG,CAAC,EAAE,OAAO,CAAA;CACd;AAGD,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,gBAAgB,CAAA;CACvB;AAED,MAAM,WAAW,SAAU,SAAQ,YAAY;CAC9C;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,GAAG,MAAM,EAAE,CAAA;IAC3B,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAGD,MAAM,WAAW,qBAAsB,SAAQ,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IACnE,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;CAChB;AAED,MAAM,WAAW,kBAAmB,SAAQ,oBAAoB;CAC/D;AAED,MAAM,WAAW,eAAgB,SAAQ,SAAS;IAChD,QAAQ,EAAE,oBAAoB,CAAA;CAC/B;AAED,MAAM,WAAW,oBAAqB,SAAQ,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;IACvF,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,KAAK,CAAC,EAAE,MAAM,CAAA;IAEd,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB;AAGD,MAAM,WAAW,sBAAuB,SAAQ,OAAO,CAAC,eAAe,CAAC;IACtE,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;IACf,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,GAAG,CAAC,EAAE,MAAM,CAAA;IASZ,YAAY,CAAC,EAAE,OAAO,CAAA;CACvB;AAED,MAAM,WAAW,oBAAoB;IACnC,mBAAmB,EAAE,OAAO,CAAA;CAC7B"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAC/C,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAA;AACjE,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAClE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAA;AAExD,MAAM,WAAW,MAAO,SAAQ,WAAW;CAAI;AAC/C,MAAM,WAAW,OAAO,CAAC,CAAC,SAAS,MAAM,GAAG,MAAM,CAAE,SAAQ,YAAY,CAAC,CAAC,CAAC;CAAI;AAE/E,MAAM,WAAW,gBAAgB;IAC/B,YAAY,CAAC,EAAE;QACb,WAAW,CAAC,EAAE;YACZ,IAAI,CAAC,EAAE,MAAM,CAAA;YACb,GAAG,CAAC,EAAE,MAAM,CAAA;SACb,CAAA;KACF,CAAC;IACF,SAAS,CAAC,EAAE,kBAAkB,EAAE,CAAA;IAChC;;;;OAIG;IACH,mBAAmB,CAAC,EAAE,OAAO,GAAG,MAAM,EAAE,CAAA;CACzC;AAED,MAAM,WAAW,kBAAmB,SAAQ,sBAAsB;IAEhE,QAAQ,CAAC,EAAE,OAAO,CAAA;IAElB,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AAED,MAAM,WAAW,sBAAsB;IAErC,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,UAAU,CAAC,EAAE,MAAM,CAAA;IAEnB,GAAG,CAAC,EAAE,OAAO,CAAA;CACd;AAGD,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,gBAAgB,CAAA;CACvB;AAED,MAAM,WAAW,SAAU,SAAQ,YAAY;CAC9C;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,GAAG,MAAM,EAAE,CAAA;IAC3B,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAGD,MAAM,WAAW,qBAAsB,SAAQ,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IACnE,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;CAChB;AAED,MAAM,WAAW,kBAAmB,SAAQ,oBAAoB;CAC/D;AAED,MAAM,WAAW,eAAgB,SAAQ,SAAS;IAChD,QAAQ,EAAE,oBAAoB,CAAA;CAC/B;AAED,MAAM,WAAW,oBAAqB,SAAQ,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;IACvF,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,KAAK,CAAC,EAAE,MAAM,CAAA;IAEd,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB;AAGD,MAAM,WAAW,sBAAuB,SAAQ,OAAO,CAAC,eAAe,CAAC;IACtE,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;IACf,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,GAAG,CAAC,EAAE,MAAM,CAAA;IASZ,YAAY,CAAC,EAAE,OAAO,CAAA;CACvB;AAED,MAAM,WAAW,oBAAoB;IACnC,mBAAmB,EAAE,OAAO,CAAA;CAC7B"}

package/package.json

@@ -1,6 +1,7 @@
 {
   "name": "@owlmeans/oidc",
-  "version": "0.1.1",
+  "version": "0.1.3",
+  "license": "MIT",
   "type": "module",
   "scripts": {
     "build": "tsc -b",
@@ -20,22 +21,23 @@
     }
   },
   "dependencies": {
-    "@owlmeans/auth": "^0.1.1",
-    "@owlmeans/auth-common": "^0.1.1",
-    "@owlmeans/basic-envelope": "^0.1.1",
-    "@owlmeans/config": "^0.1.1",
-    "@owlmeans/context": "^0.1.1",
-    "@owlmeans/module": "^0.1.1",
-    "@owlmeans/resource": "^0.1.1",
-    "@owlmeans/route": "^0.1.1"
+    "@owlmeans/auth": "^0.1.3",
+    "@owlmeans/auth-common": "^0.1.3",
+    "@owlmeans/basic-envelope": "^0.1.3",
+    "@owlmeans/config": "^0.1.3",
+    "@owlmeans/context": "^0.1.3",
+    "@owlmeans/entrypoint": "^0.1.3",
+    "@owlmeans/resource": "^0.1.3",
+    "@owlmeans/route": "^0.1.3"
   },
   "peerDependencies": {
     "ajv": "*"
   },
   "devDependencies": {
+    "@owlmeans/dep-config": "workspace:*",
     "nodemon": "^3.1.11",
     "npm-check": "^6.0.1",
-    "typescript": "^5.8.3"
+    "typescript": "^6.0.2"
   },
   "publishConfig": {
     "access": "public"

package/src/consts.ts

@@ -15,6 +15,11 @@ export const PROVIDER_INTERACTION = 'oidc-server:interaction'
 
 export const OIDC_CLIENT_AUTH = 'oidc-client'
 
+export const GOOGLE_CLIENT_AUTH = 'google-oauth'
+
+// This constant is the name of oidc identity provider that is called service in the oidc provider config. 
+export const GOOGLE_SERVICE = 'google'
+
 export const OIDC_GUARD = 'guard:oidc'
 
 export const OIDC_GUARD_CACHE = 'resource:oidc-guard:cache'

package/src/guard.ts

@@ -1,7 +1,7 @@
 import { createService } from '@owlmeans/context'
 import type { Config, Context, OidcGuard, OidcGuardOptions, WrappedOIDCService } from './types.js'
 import { OIDC_GUARD, OIDC_WRAPPED_TOKEN, WRAPPED_OIDC } from './consts.js'
-import type { AbstractRequest, AbstractResponse, CommonModule, GuardService } from '@owlmeans/module'
+import type { AbstractRequest, AbstractResponse, CommonEntrypoint, GuardService } from '@owlmeans/entrypoint'
 import { DEFAULT_GUARD, TOKEN_UPDATE } from '@owlmeans/auth-common'
 import { AUTH_HEADER, type Auth, AuthToken, AuthorizationError } from '@owlmeans/auth'
 import { EnvelopeKind, makeEnvelopeModel } from '@owlmeans/basic-envelope'
@@ -112,7 +112,7 @@ export const appendOidcGuard = <C extends Config, T extends Context<C>>(
   return context
 }
 
-export const setupOidcGuard = (modules: CommonModule[], coguards?: string | string[]) => {
+export const setupOidcGuard = (modules: CommonEntrypoint[], coguards?: string | string[]) => {
   modules.push(...oidcModules)
   coguards = Array.isArray(coguards) ? coguards : [coguards ?? DEFAULT_GUARD]
 

package/src/modules.ts

@@ -1,15 +1,15 @@
-import { body, filter, module } from '@owlmeans/module'
+import { body, filter, entrypoint } from '@owlmeans/entrypoint'
 import { route, RouteMethod, backend } from '@owlmeans/route'
 import { DISPATCHER_OIDC, DISPATCHER_OIDC_INIT } from './consts.js'
 import { OIDCAuthInitParamsSchema, OIDCClientAuthPayloadSchema } from './models.js'
 
 export const modules = [
-  module(
+  entrypoint(
     route(DISPATCHER_OIDC_INIT, '/authenticate/oidc/init', backend(null, RouteMethod.POST)),
     filter(body(OIDCAuthInitParamsSchema))
-    
+
   ),
-  module(
+  entrypoint(
     route(DISPATCHER_OIDC, '/authenticate/oidc/process', backend(null, RouteMethod.POST)),
     filter(body(OIDCClientAuthPayloadSchema))
   )

package/src/types.ts

@@ -1,7 +1,7 @@
 import type { AuthToken } from '@owlmeans/auth'
 import type { AuthorizationService } from '@owlmeans/auth-common'
 import type { BasicConfig, BasicContext } from '@owlmeans/context'
-import type { GuardService } from '@owlmeans/module'
+import type { GuardService } from '@owlmeans/entrypoint'
 
 export interface Config extends BasicConfig { }
 export interface Context<C extends Config = Config> extends BasicContext<C> { }
@@ -37,7 +37,11 @@ export interface OidcProviderDescriptor {
   basePath?: string
   clientId: string
   secret?: string
+  redirectUri?: string
   extraScopes?: string
+  authEndpoint?: string
+  tokenEndpoint?: string
+  userinfoEndpoint?: string
   idOverride?: string
   // This flag works only on client side. It specifies a default relying party
   def?: boolean

package/tsconfig.json

@@ -1,15 +1,15 @@
 {
   "extends": [
-    "../tsconfig.default.json",
+    "@owlmeans/dep-config/tsconfig.base.json",
+    "@owlmeans/dep-config/tsconfig.server.json"
   ],
   "compilerOptions": {
-    "rootDir": "./src/", /* Specify the root folder within your source files. */
-    "outDir": "./build/", /* Specify an output folder for all emitted files. */
-    "moduleResolution": "Bundler",
+    "rootDir": "./src/",
+    "outDir": "./build/"
   },
   "exclude": [
     "./dist/**/*",
     "./build/**/*",
     "./*.ts"
   ]
-}
+}