@owlmeans/server-oidc-provider 0.1.4 → 0.1.6

package/build/iam.d.ts

@@ -0,0 +1,31 @@
+import type { ClientMetadata } from 'oidc-provider';
+/** A registered OIDC client stored in the provider's Client adapter. */
+export interface OidcRegisteredClient {
+    clientId: string;
+    secret: string;
+    /** The entity (realm) this client belongs to — used for identity scoping. */
+    entityId?: string;
+    /** Application display name */
+    name?: string;
+    redirectUris?: string[];
+    grantTypes?: string[];
+    responseTypes?: string[];
+    scope?: string;
+}
+/** Full oidc-provider ClientMetadata with our entity extension. */
+export type OidcClientMetadata = ClientMetadata & {
+    entityId?: string;
+    owlEntityId?: string;
+};
+/** Convert an OidcRegisteredClient to the oidc-provider ClientMetadata shape. */
+export declare const toClientMetadata: (client: OidcRegisteredClient) => OidcClientMetadata;
+/** Extension seam for IAM integration into the OIDC provider — Phase 2 fills this */
+export interface OidcProviderIamExtension {
+    /** Convert a stored client record to oidc-provider ClientMetadata */
+    toClientMetadata: typeof toClientMetadata;
+    /** Type of a stored client record */
+    OidcRegisteredClient: OidcRegisteredClient;
+    /** Extended metadata type */
+    OidcClientMetadata: OidcClientMetadata;
+}
+//# sourceMappingURL=iam.d.ts.map

package/build/iam.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"iam.d.ts","sourceRoot":"","sources":["../src/iam.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAgB,MAAM,eAAe,CAAA;AAEjE,wEAAwE;AACxE,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,MAAM,CAAA;IACd,6EAA6E;IAC7E,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,+BAA+B;IAC/B,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,YAAY,CAAC,EAAE,MAAM,EAAE,CAAA;IACvB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAA;IACrB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;IACxB,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED,mEAAmE;AACnE,MAAM,MAAM,kBAAkB,GAAG,cAAc,GAAG;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,CAAA;AAE7F,iFAAiF;AACjF,eAAO,MAAM,gBAAgB,GAAI,QAAQ,oBAAoB,KAAG,kBAS9D,CAAA;AAEF,qFAAqF;AACrF,MAAM,WAAW,wBAAwB;IACvC,qEAAqE;IACrE,gBAAgB,EAAE,OAAO,gBAAgB,CAAA;IACzC,qCAAqC;IACrC,oBAAoB,EAAE,oBAAoB,CAAA;IAC1C,6BAA6B;IAC7B,kBAAkB,EAAE,kBAAkB,CAAA;CACvC"}

package/build/iam.js

@@ -0,0 +1,12 @@
+/** Convert an OidcRegisteredClient to the oidc-provider ClientMetadata shape. */
+export const toClientMetadata = (client) => ({
+    client_id: client.clientId,
+    client_secret: client.secret,
+    redirect_uris: client.redirectUris ?? [],
+    grant_types: client.grantTypes ?? ['authorization_code', 'refresh_token'],
+    response_types: (client.responseTypes ?? ['code']),
+    token_endpoint_auth_method: 'client_secret_basic',
+    scope: client.scope ?? 'openid profile offline_access',
+    owlEntityId: client.entityId,
+});
+//# sourceMappingURL=iam.js.map

package/build/iam.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"iam.js","sourceRoot":"","sources":["../src/iam.ts"],"names":[],"mappings":"AAmBA,iFAAiF;AACjF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,MAA4B,EAAsB,EAAE,CAAC,CAAC;IACrF,SAAS,EAAE,MAAM,CAAC,QAAQ;IAC1B,aAAa,EAAE,MAAM,CAAC,MAAM;IAC5B,aAAa,EAAE,MAAM,CAAC,YAAY,IAAI,EAAE;IACxC,WAAW,EAAE,MAAM,CAAC,UAAU,IAAI,CAAC,oBAAoB,EAAE,eAAe,CAAC;IACzE,cAAc,EAAE,CAAC,MAAM,CAAC,aAAa,IAAI,CAAC,MAAM,CAAC,CAAmB;IACpE,0BAA0B,EAAE,qBAAqB;IACjD,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,+BAA+B;IACtD,WAAW,EAAE,MAAM,CAAC,QAAQ;CAC7B,CAAC,CAAA"}

package/build/index.d.ts

@@ -2,4 +2,5 @@ export type * from './types.js';
 export * from './service.js';
 export * from './consts.js';
 export * from './middleware.js';
+export * from './iam.js';
 //# sourceMappingURL=index.d.ts.map

package/build/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,mBAAmB,YAAY,CAAA;AAC/B,cAAc,cAAc,CAAA;AAC5B,cAAc,aAAa,CAAA;AAC3B,cAAc,iBAAiB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,mBAAmB,YAAY,CAAA;AAC/B,cAAc,cAAc,CAAA;AAC5B,cAAc,aAAa,CAAA;AAC3B,cAAc,iBAAiB,CAAA;AAC/B,cAAc,UAAU,CAAA"}

package/build/index.js

@@ -1,4 +1,5 @@
 export * from './service.js';
 export * from './consts.js';
 export * from './middleware.js';
+export * from './iam.js';
 //# sourceMappingURL=index.js.map

package/build/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,cAAc,cAAc,CAAA;AAC5B,cAAc,aAAa,CAAA;AAC3B,cAAc,iBAAiB,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,cAAc,cAAc,CAAA;AAC5B,cAAc,aAAa,CAAA;AAC3B,cAAc,iBAAiB,CAAA;AAC/B,cAAc,UAAU,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@owlmeans/server-oidc-provider",
-  "version": "0.1.4",
+  "version": "0.1.6",
   "license": "MIT",
   "type": "module",
   "scripts": {
@@ -23,7 +23,7 @@
   },
   "devDependencies": {
     "@owlmeans/dep-config": "workspace:*",
-    "@owlmeans/context": "^0.1.4",
+    "@owlmeans/context": "^0.1.6",
     "@types/bun": "^1.3.0",
     "@types/node": "^24.10.1",
     "@types/oidc-provider": "9.5.0",
@@ -36,13 +36,13 @@
   },
   "dependencies": {
     "@noble/hashes": "^1.5.0",
-    "@owlmeans/client-entrypoint": "^0.1.4",
-    "@owlmeans/config": "^0.1.4",
-    "@owlmeans/context": "^0.1.4",
-    "@owlmeans/oidc": "^0.1.4",
-    "@owlmeans/route": "^0.1.4",
-    "@owlmeans/server-api": "^0.1.4",
-    "@owlmeans/server-context": "^0.1.4",
+    "@owlmeans/client-entrypoint": "^0.1.6",
+    "@owlmeans/config": "^0.1.6",
+    "@owlmeans/context": "^0.1.6",
+    "@owlmeans/oidc": "^0.1.6",
+    "@owlmeans/route": "^0.1.6",
+    "@owlmeans/server-api": "^0.1.6",
+    "@owlmeans/server-context": "^0.1.6",
     "@scure/base": "^1.1.9",
     "jose": "6.2.3",
     "oidc-provider": "9.8.4"

package/src/iam.ts

@@ -0,0 +1,40 @@
+import type { ClientMetadata, ResponseType } from 'oidc-provider'
+
+/** A registered OIDC client stored in the provider's Client adapter. */
+export interface OidcRegisteredClient {
+  clientId: string
+  secret: string
+  /** The entity (realm) this client belongs to — used for identity scoping. */
+  entityId?: string
+  /** Application display name */
+  name?: string
+  redirectUris?: string[]
+  grantTypes?: string[]
+  responseTypes?: string[]
+  scope?: string
+}
+
+/** Full oidc-provider ClientMetadata with our entity extension. */
+export type OidcClientMetadata = ClientMetadata & { entityId?: string; owlEntityId?: string }
+
+/** Convert an OidcRegisteredClient to the oidc-provider ClientMetadata shape. */
+export const toClientMetadata = (client: OidcRegisteredClient): OidcClientMetadata => ({
+  client_id: client.clientId,
+  client_secret: client.secret,
+  redirect_uris: client.redirectUris ?? [],
+  grant_types: client.grantTypes ?? ['authorization_code', 'refresh_token'],
+  response_types: (client.responseTypes ?? ['code']) as ResponseType[],
+  token_endpoint_auth_method: 'client_secret_basic',
+  scope: client.scope ?? 'openid profile offline_access',
+  owlEntityId: client.entityId,
+})
+
+/** Extension seam for IAM integration into the OIDC provider — Phase 2 fills this */
+export interface OidcProviderIamExtension {
+  /** Convert a stored client record to oidc-provider ClientMetadata */
+  toClientMetadata: typeof toClientMetadata
+  /** Type of a stored client record */
+  OidcRegisteredClient: OidcRegisteredClient
+  /** Extended metadata type */
+  OidcClientMetadata: OidcClientMetadata
+}

package/src/index.ts

@@ -3,3 +3,4 @@ export type * from './types.js'
 export * from './service.js'
 export * from './consts.js'
 export * from './middleware.js'
+export * from './iam.js'