@owlmeans/server-oidc-rp 0.1.0

package/build/model/gate.js

@@ -0,0 +1,98 @@
+import { AuthForbidden, AuthManagerError, AuthManagerUnsupported, AuthUnknown } from '@owlmeans/auth';
+import { authService, DEFAULT_ALIAS } from '../consts.js';
+import { cache, managedId } from '../utils/cache.js';
+import { ResponseMode } from './consts.js';
+export const createGateModel = (ctx) => {
+    const model = {
+        getClient: async (user) => {
+            const oidc = ctx.service(DEFAULT_ALIAS);
+            try {
+                return await oidc.getClient({
+                    entityId: user.entityId,
+                    clientId: oidc.entityToClientId({ entityId: user.entityId })
+                });
+            }
+            catch (e) {
+                if (e instanceof AuthManagerError) {
+                    const [providers] = await ctx.module(authService.provider.list).call({
+                        params: { service: ctx.cfg.alias ?? ctx.cfg.service },
+                        query: { entityId: user.entityId }
+                    });
+                    if (providers.length < 1) {
+                        throw new AuthUnknown();
+                    }
+                    oidc.registerTemporaryProvider(providers[0]);
+                    return model.getClient(user);
+                }
+                throw e;
+            }
+        },
+        loadPermissions: async (user, permissions) => {
+            const record = await cache(ctx).get(managedId(user.token));
+            if (record.payload == null) {
+                throw new AuthForbidden('record');
+            }
+            const client = await model.getClient(user);
+            const metadata = client.getMetadata();
+            const tokenEndpoint = metadata.token_endpoint;
+            if (tokenEndpoint == null) {
+                throw new AuthManagerUnsupported('token-url');
+            }
+            const request = await model.makeRequest(model.fixPermissions(permissions, user), client);
+            request.subject_token = record.payload.access_token;
+            const response = await fetch(tokenEndpoint, await model.prepareRequest(client, request));
+            if (!response.ok) {
+                console.warn(await response.text());
+                return [];
+            }
+            const proofs = await response.json();
+            return permissions.filter(permission => {
+                const [fixed] = model.fixPermissions([permission], user);
+                const [resource, scope] = fixed.split(':');
+                const proof = proofs.find(p => p.rsid === resource || p.rsname === resource);
+                return proof != null
+                    && (scope == null || (proof.scopes?.includes(scope) ?? false));
+            });
+        },
+        fixPermissions: (permissions, user) => permissions.map(perm => perm.replaceAll('{entity}', user.entityId ?? '-')),
+        prepareRequest: async (client, request) => {
+            let { permission, ..._request } = request;
+            const params = new URLSearchParams(_request);
+            permission = Array.isArray(permission) ? permission : [permission];
+            permission.forEach(perm => params.append('permission', perm));
+            const body = params.toString();
+            const cfg = client.getConfig();
+            const headers = {
+                'Content-Type': 'application/x-www-form-urlencoded',
+                'Authorization': `Basic ${Buffer.from(`${client.getClientId()}:${cfg.secret}`).toString('base64')}`,
+                'Content-Length': `${body.length}`,
+            };
+            return { body, headers, method: 'POST' };
+        },
+        makeRequest: async (permissions, client) => {
+            const cfg = client.getConfig();
+            const clientId = client.getClientId();
+            const permission = {
+                grant_type: 'urn:ietf:params:oauth:grant-type:uma-ticket',
+                audience: clientId,
+                client_id: clientId,
+                secret: cfg.secret,
+                permission: permissions.reduce((output, permission) => {
+                    const [resource, scope] = permission.split(':');
+                    const idx = output.findIndex(perm => perm.startsWith(resource));
+                    if (idx > -1) {
+                        output[idx] += `, ${scope}`;
+                    }
+                    else {
+                        output.push(`${resource}${scope ? `#${scope}` : ''}`);
+                    }
+                    return output;
+                }, []),
+                response_mode: ResponseMode.Permissions,
+            };
+            return permission;
+        }
+    };
+    return model;
+};
+//# sourceMappingURL=gate.js.map

package/build/model/gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate.js","sourceRoot":"","sources":["../../src/model/gate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAA;AACrG,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAEzD,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAA;AAEpD,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAI1C,MAAM,CAAC,MAAM,eAAe,GAAG,CAAyC,GAAM,EAAa,EAAE;IAC3F,MAAM,KAAK,GAAc;QACvB,SAAS,EAAE,KAAK,EAAC,IAAI,EAAC,EAAE;YACtB,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAoB,aAAa,CAAC,CAAA;YAC1D,IAAI,CAAC;gBACH,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC;oBAC1B,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,QAAQ,EAAE,IAAI,CAAC,gBAAgB,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;iBAC7D,CAAC,CAAA;YACJ,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,IAAI,CAAC,YAAY,gBAAgB,EAAE,CAAC;oBAClC,MAAM,CAAC,SAAS,CAAC,GAAG,MAAM,GAAG,CAAC,MAAM,CAClC,WAAW,CAAC,QAAQ,CAAC,IAAI,CAC1B,CAAC,IAAI,CAAC;wBACL,MAAM,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE;wBACrD,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE;qBACnC,CAAC,CAAA;oBACF,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBACzB,MAAM,IAAI,WAAW,EAAE,CAAA;oBACzB,CAAC;oBACD,IAAI,CAAC,yBAAyB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAA;oBAE5C,OAAO,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;gBAC9B,CAAC;gBACD,MAAM,CAAC,CAAA;YACT,CAAC;QACH,CAAC;QAED,eAAe,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE;YAC3C,MAAM,MAAM,GAAG,MAAM,KAAK,CAAO,GAAG,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;YAChE,IAAI,MAAM,CAAC,OAAO,IAAI,IAAI,EAAE,CAAC;gBAC3B,MAAM,IAAI,aAAa,CAAC,QAAQ,CAAC,CAAA;YACnC,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;YAE1C,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,EAAE,CAAA;YACrC,MAAM,aAAa,GAAG,QAAQ,CAAC,cAAc,CAAA;YAE7C,IAAI,aAAa,IAAI,IAAI,EAAE,CAAC;gBAC1B,MAAM,IAAI,sBAAsB,CAAC,WAAW,CAAC,CAAA;YAC/C,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,WAAW,CACrC,KAAK,CAAC,cAAc,CAAC,WAAW,EAAE,IAAI,CAAC,EACvC,MAAM,CACP,CAAA;YAED,OAAO,CAAC,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC,YAAY,CAAA;YAEnD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAC1B,aAAa,EACb,MAAM,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,CAC5C,CAAA;YAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,OAAO,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAA;gBACnC,OAAO,EAAE,CAAA;YACX,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAA0B,CAAA;YAE5D,OAAO,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE;gBACrC,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,cAAc,CAAC,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,CAAA;gBACxD,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;gBAC1C,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAA;gBAC5E,OAAO,KAAK,IAAI,IAAI;uBACf,CAAC,KAAK,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAA;YAClE,CAAC,CAAC,CAAA;QACJ,CAAC;QAED,cAAc,EAAE,CAAC,WAAW,EAAE,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,CACpD,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,IAAI,CAAC,QAAQ,IAAI,GAAG,CAAC,CAC1D;QAED,cAAc,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE;YACxC,IAAI,EAAE,UAAU,EAAE,GAAG,QAAQ,EAAE,GAAG,OAAO,CAAA;YACzC,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,QAAQ,CAAC,CAAA;YAC5C,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAA;YAClE,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC,CAAA;YAC7D,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAA;YAE9B,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,EAAE,CAAA;YAE9B,MAAM,OAAO,GAAG;gBACd,cAAc,EAAE,mCAAmC;gBACnD,eAAe,EAAE,SAAS,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,WAAW,EAAE,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE;gBACnG,gBAAgB,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE;aACnC,CAAA;YAED,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAA;QAC1C,CAAC;QAED,WAAW,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE;YACzC,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,EAAE,CAAA;YAC9B,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,EAAE,CAAA;YACrC,MAAM,UAAU,GAAG;gBACjB,UAAU,EAAE,6CAA6C;gBACzD,QAAQ,EAAE,QAAQ;gBAClB,SAAS,EAAE,QAAQ;gBACnB,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,UAAU,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,EAAE;oBACpD,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;oBAC/C,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAA;oBAC/D,IAAI,GAAG,GAAG,CAAC,CAAC,EAAE,CAAC;wBACb,MAAM,CAAC,GAAG,CAAC,IAAI,KAAK,KAAK,EAAE,CAAA;oBAC7B,CAAC;yBAAM,CAAC;wBACN,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;oBACvD,CAAC;oBACD,OAAO,MAAM,CAAA;gBACf,CAAC,EAAE,EAAc,CAAC;gBAClB,aAAa,EAAE,YAAY,CAAC,WAAW;aACZ,CAAA;YAE7B,OAAO,UAAU,CAAA;QACnB,CAAC;KACF,CAAA;IAED,OAAO,KAAK,CAAA;AACd,CAAC,CAAA"}

package/build/model/types.d.ts

@@ -0,0 +1,25 @@
+import type { Auth } from '@owlmeans/auth';
+import type { OidcClientAdapter } from '../types.js';
+import type { ResponseMode } from './consts.js';
+export interface GateModel {
+    getClient: (user: Auth) => Promise<OidcClientAdapter>;
+    loadPermissions: (user: Auth, permissions: string[]) => Promise<string[]>;
+    fixPermissions: (permissions: string[], user: Auth) => string[];
+    prepareRequest: (client: OidcClientAdapter, request: PermissionRequest) => Promise<RequestInit>;
+    makeRequest: (permissions: string[], client: OidcClientAdapter) => Promise<PermissionRequest>;
+}
+export interface PermissionRequest {
+    grant_type: string;
+    audience: string;
+    client_id?: string;
+    secret?: string;
+    subject_token?: string;
+    permission: string | string[];
+    response_mode: ResponseMode;
+}
+export interface PermissionResponse {
+    rsid: string;
+    rsname: string;
+    scopes?: string[];
+}
+//# sourceMappingURL=types.d.ts.map

package/build/model/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/model/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAA;AAC1C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAA;AACpD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAE/C,MAAM,WAAW,SAAS;IACxB,SAAS,EAAE,CAAC,IAAI,EAAE,IAAI,KAAK,OAAO,CAAC,iBAAiB,CAAC,CAAA;IAErD,eAAe,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;IAEzE,cAAc,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,KAAK,MAAM,EAAE,CAAA;IAE/D,cAAc,EAAE,CAAC,MAAM,EAAE,iBAAiB,EAAE,OAAO,EAAE,iBAAiB,KAAK,OAAO,CAAC,WAAW,CAAC,CAAA;IAE/F,WAAW,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,iBAAiB,KAAK,OAAO,CAAC,iBAAiB,CAAC,CAAA;CAC9F;AAED,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,MAAM,CAAA;IAClB,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,UAAU,EAAE,MAAM,GAAG,MAAM,EAAE,CAAA;IAC7B,aAAa,EAAE,YAAY,CAAA;CAC5B;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;CAClB"}

package/build/model/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/build/model/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/model/types.ts"],"names":[],"mappings":""}

package/build/models.d.ts

@@ -0,0 +1 @@
+//# sourceMappingURL=models.d.ts.map

package/build/models.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"models.d.ts","sourceRoot":"","sources":["../src/models.ts"],"names":[],"mappings":""}

package/build/models.js

@@ -0,0 +1,2 @@
+"use strict";
+//# sourceMappingURL=models.js.map

package/build/models.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"models.js","sourceRoot":"","sources":["../src/models.ts"],"names":[],"mappings":""}

package/build/modules.d.ts

@@ -0,0 +1,3 @@
+import type { CommonModule } from '@owlmeans/module';
+export declare const setupAuthServiceModules: (modules: CommonModule[], serviceAlias: string, prefix?: string) => void;
+//# sourceMappingURL=modules.d.ts.map

package/build/modules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"modules.d.ts","sourceRoot":"","sources":["../src/modules.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAA;AAQpD,eAAO,MAAM,uBAAuB,YACzB,YAAY,EAAE,gBACT,MAAM,WACZ,MAAM,SAkBf,CAAA"}

package/build/modules.js

@@ -0,0 +1,12 @@
+import { module, guard, filter, body } from '@owlmeans/module';
+import { backend, route, RouteMethod, service } from '@owlmeans/route';
+import { authService } from './consts.js';
+import { elevate } from '@owlmeans/client-module';
+import { GUARD_ED25519 } from '@owlmeans/auth-common';
+import { OIDCTokenUpdateSchema } from '@owlmeans/oidc';
+export const setupAuthServiceModules = (modules, serviceAlias, prefix = 'oidc-api') => {
+    modules.push(module(route(authService.provider.list, `/${prefix}/provider/:service`, service(serviceAlias)), guard(GUARD_ED25519)), module(route(authService.auth.update, `/${prefix}/auth/update`, backend(service(serviceAlias), RouteMethod.POST)), filter(body(OIDCTokenUpdateSchema), guard(GUARD_ED25519))));
+    elevate(modules, authService.provider.list);
+    elevate(modules, authService.auth.update);
+};
+//# sourceMappingURL=modules.js.map

package/build/modules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"modules.js","sourceRoot":"","sources":["../src/modules.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAA;AAC9D,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAA;AACtE,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAA;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAA;AACrD,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAA;AAEtD,MAAM,CAAC,MAAM,uBAAuB,GAAG,CACrC,OAAuB,EACvB,YAAoB,EACpB,SAAiB,UAAU,EAC3B,EAAE;IACF,OAAO,CAAC,IAAI,CACV,MAAM,CACJ,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,MAAM,oBAAoB,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC,EACvF,KAAK,CAAC,aAAa,CAAC,CACrB,EACD,MAAM,CACJ,KAAK,CACH,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,MAAM,cAAc,EACjD,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,WAAW,CAAC,IAAI,CAAC,CACjD,EACD,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC,CAC1D,CACF,CAAA;IAED,OAAO,CAAC,OAAO,EAAE,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;IAC3C,OAAO,CAAC,OAAO,EAAE,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;AAC3C,CAAC,CAAA"}

package/build/service.d.ts

@@ -0,0 +1,3 @@
+import type { OidcClientService } from './types.js';
+export declare const makeOidcClientService: (alias?: string) => OidcClientService;
+//# sourceMappingURL=service.d.ts.map

package/build/service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../src/service.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAA0C,iBAAiB,EAAyC,MAAM,YAAY,CAAA;AAQlI,eAAO,MAAM,qBAAqB,WAAW,MAAM,KAAmB,iBAuOrE,CAAA"}

package/build/service.js

@@ -0,0 +1,186 @@
+import { DEF_OIDC_ACCOUNT_LINKING, DEF_OIDC_PROVIDER_API, DEFAULT_ALIAS } from './consts.js';
+import { assertContext, createService } from '@owlmeans/context';
+import { AuthManagerError } from '@owlmeans/auth';
+import { makeSecurityHelper } from '@owlmeans/config';
+import * as client from 'openid-client';
+import { Configuration } from 'openid-client';
+// import { URL as SrvURL } from 'node:url'
+export const makeOidcClientService = (alias = DEFAULT_ALIAS) => {
+    const service = createService(alias, {
+        getConfiguration: async (clientId) => {
+            const context = assertContext(service.ctx, alias);
+            let cfg = await service.getConfig(clientId);
+            if (cfg?.basePath == null) {
+                throw new AuthManagerError('oidc.client.basepath');
+            }
+            if (cfg.service == null) {
+                throw new AuthManagerError('oidc.client.service');
+            }
+            if (typeof clientId === 'object' && clientId.clientId == null) {
+                throw new AuthManagerError('oidc.client.client-id');
+            }
+            // @TODO Add support for any domain (not just registered services)
+            const security = makeSecurityHelper(context);
+            const url = cfg.discoveryUrl
+                ?? security.makeUrl(context.cfg.services[cfg.service], cfg.basePath);
+            return await client.discovery(new URL(url), cfg.idOverride ?? (typeof clientId === 'string' ? clientId : clientId.clientId), cfg.secret, undefined, {
+                execute: [
+                    // @TODO Properly handle it with the config
+                    client.allowInsecureRequests
+                ]
+            });
+        },
+        getClient: async (clientId) => {
+            let params;
+            let descriptor = null;
+            let _clientId;
+            if (clientId instanceof Configuration) {
+                descriptor = clientId;
+                _clientId = params = clientId.serverMetadata().issuer;
+            }
+            else if (typeof clientId === 'string') {
+                _clientId = params = clientId;
+            }
+            else {
+                params = clientId;
+                _clientId = params.clientId;
+            }
+            let metadata = await descriptor?.serverMetadata();
+            // @TODO Do not forget to delete it
+            if (_clientId == null) {
+                throw new AuthManagerError('oidc.client.client-id');
+            }
+            descriptor ??= await service.getConfiguration(params);
+            const cfg = await service.getConfig(params);
+            if (cfg?.secret == null) {
+                throw new AuthManagerError('oidc.client.secert');
+            }
+            metadata ??= await descriptor.serverMetadata();
+            // return new issuer.Client({ client_id: _clientId, client_secret: cfg?.secret })
+            return {
+                getMetadata: () => metadata,
+                getClientId: () => cfg.idOverride ?? _clientId,
+                getConfig: () => cfg,
+                makeAuthUrl: params => client.buildAuthorizationUrl(descriptor, params).toString(),
+                // grantWithCredentials: async () => client.clientCredentialsGrant(descriptor, { grant_type: 'client_credentials' }),
+                grantWithCredentials: async () => client.clientCredentialsGrant(descriptor),
+                grantWithCode: async (url, checks, params) => {
+                    const urlObj = new URL(url);
+                    Object.entries(params).forEach(([key, value]) => {
+                        if (key === 'flow') {
+                            return;
+                        }
+                        urlObj.searchParams.set(key, value);
+                    });
+                    checks.idTokenExpected ??= true;
+                    return await client.authorizationCodeGrant(descriptor, urlObj, checks);
+                },
+                refresh: async (tokenSet) => {
+                    const refreshToken = typeof tokenSet === 'string' ? tokenSet : tokenSet.refresh_token;
+                    if (refreshToken == null) {
+                        throw new AuthManagerError('refresh-token');
+                    }
+                    return await client.refreshTokenGrant(descriptor, refreshToken);
+                },
+                introspect: async (tokenSet, type = 'access_token') => await client.tokenIntrospection(descriptor, tokenSet[type]),
+            };
+        },
+        getConfig: async (clientId) => {
+            const context = assertContext(service.ctx, alias);
+            if (typeof clientId === 'object' && clientId.clientId == null) {
+                throw new AuthManagerError('oidc.client.client-id');
+            }
+            return context.cfg.oidc.providers?.find(consumer => {
+                if (typeof clientId === 'string') {
+                    return consumer.clientId === clientId;
+                }
+                return Object.entries(clientId).every(([key, value]) => consumer[key] === value);
+            });
+        },
+        getDefault: () => {
+            const context = assertContext(service.ctx, alias);
+            return context.cfg.oidc.providers?.find(consumer => consumer.def)?.clientId;
+        },
+        providerApi: () => {
+            const context = assertContext(service.ctx, alias);
+            const cfg = context.cfg.oidc;
+            const providerApiService = cfg.providerApiService ?? DEF_OIDC_PROVIDER_API;
+            if (context.hasService(providerApiService)) {
+                return context.service(providerApiService);
+            }
+            return null;
+        },
+        accountLinking: () => {
+            const context = assertContext(service.ctx, alias);
+            const cfg = context.cfg.oidc;
+            const accountLinkingService = cfg.accountLinkingService ?? DEF_OIDC_ACCOUNT_LINKING;
+            if (context.hasService(accountLinkingService)) {
+                return context.service(accountLinkingService);
+            }
+            return null;
+        },
+        hasProvider: params => {
+            const ctx = service.assertCtx();
+            if (ctx.cfg.oidc.providers == null) {
+                ctx.cfg.oidc.providers = [];
+            }
+            return ctx.cfg.oidc.providers.some(provider => {
+                if (typeof params === 'string') {
+                    return provider.clientId === params;
+                }
+                return Object.entries(params).every(([key, value]) => provider[key] === value);
+            });
+        },
+        registerTemporaryProvider: config => {
+            const ctx = service.assertCtx();
+            if (ctx.cfg.oidc.providers == null) {
+                ctx.cfg.oidc.providers = [];
+            }
+            const providers = ctx.cfg.oidc.providers;
+            let provider = providers.find(provider => matchCriteria.every(key => provider[key] === config[key]));
+            if (provider == null) {
+                provider = { ...config, [_configFlag]: 0 };
+                providers.push(provider);
+            }
+            else {
+                Object.assign(provider, config);
+                provider[_configFlag] ??= 0;
+                provider[_configFlag]++;
+            }
+            return provider;
+        },
+        entityToClientId: params => {
+            const ctx = service.assertCtx();
+            if (ctx.cfg.oidc.providers == null) {
+                ctx.cfg.oidc.providers = [];
+            }
+            const provider = ctx.cfg.oidc.providers.find(provider => Object.entries(params).every(([key, value]) => provider[key] === value));
+            if (provider == null) {
+                throw new AuthManagerError('oidc.client.entity-id');
+            }
+            return provider.clientId;
+        },
+        unregisterTemporaryProvider: params => {
+            const ctx = service.assertCtx();
+            if (ctx.cfg.oidc.providers == null) {
+                ctx.cfg.oidc.providers = [];
+            }
+            const providers = ctx.cfg.oidc.providers;
+            const idx = providers.findIndex(provider => matchCriteria.every(key => !(key in params) ||
+                provider[key] === params[key]));
+            if (idx < 0) {
+                return;
+            }
+            const provider = providers[idx];
+            if (--provider[_configFlag] < 1) {
+                providers.splice(idx, 1);
+            }
+        }
+    });
+    return service;
+};
+const matchCriteria = [
+    'clientId', 'service', 'targetService', 'basePath', 'entityId'
+];
+const _configFlag = Symbol('temporary-oidc-proivder-config');
+//# sourceMappingURL=service.js.map

package/build/service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.js","sourceRoot":"","sources":["../src/service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,qBAAqB,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC5F,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AAEhE,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AACjD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AACrD,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AAEvC,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AAC7C,2CAA2C;AAE3C,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,QAAgB,aAAa,EAAqB,EAAE;IACxF,MAAM,OAAO,GAAsB,aAAa,CAAoB,KAAK,EAAE;QACzE,gBAAgB,EAAE,KAAK,EAAC,QAAQ,EAAC,EAAE;YACjC,MAAM,OAAO,GAAG,aAAa,CAAkB,OAAO,CAAC,GAAc,EAAE,KAAK,CAAC,CAAA;YAC7E,IAAI,GAAG,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAA;YAE3C,IAAI,GAAG,EAAE,QAAQ,IAAI,IAAI,EAAE,CAAC;gBAC1B,MAAM,IAAI,gBAAgB,CAAC,sBAAsB,CAAC,CAAA;YACpD,CAAC;YAED,IAAI,GAAG,CAAC,OAAO,IAAI,IAAI,EAAE,CAAC;gBACxB,MAAM,IAAI,gBAAgB,CAAC,qBAAqB,CAAC,CAAA;YACnD,CAAC;YAED,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,QAAQ,IAAI,IAAI,EAAE,CAAC;gBAC9D,MAAM,IAAI,gBAAgB,CAAC,uBAAuB,CAAC,CAAA;YACrD,CAAC;YAED,kEAAkE;YAClE,MAAM,QAAQ,GAAG,kBAAkB,CAAkB,OAAO,CAAC,CAAA;YAC7D,MAAM,GAAG,GAAG,GAAG,CAAC,YAAY;mBACvB,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAA;YAEtE,OAAO,MAAM,MAAM,CAAC,SAAS,CAC3B,IAAI,GAAG,CAAC,GAAG,CAAQ,EACnB,GAAG,CAAC,UAAU,IAAI,CAChB,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAS,CAC7D,EACD,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE;gBACvB,OAAO,EAAE;oBACP,2CAA2C;oBAC3C,MAAM,CAAC,qBAAqB;iBAC7B;aACF,CAAC,CAAA;QACJ,CAAC;QAED,SAAS,EAAE,KAAK,EAAC,QAAQ,EAAC,EAAE;YAC1B,IAAI,MAAmC,CAAA;YACvC,IAAI,UAAU,GAAyB,IAAI,CAAA;YAC3C,IAAI,SAAiB,CAAA;YACrB,IAAI,QAAQ,YAAY,aAAa,EAAE,CAAC;gBACtC,UAAU,GAAG,QAAQ,CAAA;gBACrB,SAAS,GAAG,MAAM,GAAG,QAAQ,CAAC,cAAc,EAAE,CAAC,MAAM,CAAA;YACvD,CAAC;iBAAM,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBACxC,SAAS,GAAG,MAAM,GAAG,QAAQ,CAAA;YAC/B,CAAC;iBAAM,CAAC;gBACN,MAAM,GAAG,QAA8B,CAAA;gBACvC,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAA;YAC7B,CAAC;YACD,IAAI,QAAQ,GAAG,MAAM,UAAU,EAAE,cAAc,EAAE,CAAA;YACjD,mCAAmC;YACnC,IAAI,SAAS,IAAI,IAAI,EAAE,CAAC;gBACtB,MAAM,IAAI,gBAAgB,CAAC,uBAAuB,CAAC,CAAA;YACrD,CAAC;YAED,UAAU,KAAK,MAAM,OAAO,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAA;YAErD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;YAC3C,IAAI,GAAG,EAAE,MAAM,IAAI,IAAI,EAAE,CAAC;gBACxB,MAAM,IAAI,gBAAgB,CAAC,oBAAoB,CAAC,CAAA;YAClD,CAAC;YAED,QAAQ,KAAK,MAAM,UAAU,CAAC,cAAc,EAAE,CAAA;YAE9C,iFAAiF;YACjF,OAAO;gBACL,WAAW,EAAE,GAAG,EAAE,CAAC,QAAQ;gBAE3B,WAAW,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,UAAU,IAAI,SAAS;gBAE9C,SAAS,EAAE,GAAG,EAAE,CAAC,GAAG;gBAEpB,WAAW,EAAE,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,qBAAqB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,QAAQ,EAAE;gBAElF,qHAAqH;gBACrH,oBAAoB,EAAE,KAAK,IAAI,EAAE,CAAC,MAAM,CAAC,sBAAsB,CAAC,UAAU,CAAC;gBAE3E,aAAa,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;oBAC3C,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAA;oBAC3B,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE;wBAC9C,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;4BACnB,OAAM;wBACR,CAAC;wBAED,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;oBACrC,CAAC,CAAC,CAAA;oBAEF,MAAM,CAAC,eAAe,KAAK,IAAI,CAAA;oBAE/B,OAAO,MAAM,MAAM,CAAC,sBAAsB,CACxC,UAAU,EAAE,MAAM,EAAE,MAAM,CAC3B,CAAA;gBACH,CAAC;gBAED,OAAO,EAAE,KAAK,EAAC,QAAQ,EAAC,EAAE;oBACxB,MAAM,YAAY,GAAG,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAA;oBACrF,IAAI,YAAY,IAAI,IAAI,EAAE,CAAC;wBACzB,MAAM,IAAI,gBAAgB,CAAC,eAAe,CAAC,CAAA;oBAC7C,CAAC;oBACD,OAAO,MAAM,MAAM,CAAC,iBAAiB,CAAC,UAAU,EAAE,YAAY,CAAC,CAAA;gBACjE,CAAC;gBAED,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,GAAG,cAAc,EAAE,EAAE,CACpD,MAAM,MAAM,CAAC,kBAAkB,CAAC,UAAU,EAAE,QAAQ,CAAC,IAAI,CAAW,CAAC;aAE5C,CAAA;QAC/B,CAAC;QAED,SAAS,EAAE,KAAK,EAAC,QAAQ,EAAC,EAAE;YAC1B,MAAM,OAAO,GAAG,aAAa,CAAkB,OAAO,CAAC,GAAc,EAAE,KAAK,CAAC,CAAA;YAE7E,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,QAAQ,IAAI,IAAI,EAAE,CAAC;gBAC9D,MAAM,IAAI,gBAAgB,CAAC,uBAAuB,CAAC,CAAA;YACrD,CAAC;YAED,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE;gBACjD,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;oBACjC,OAAO,QAAQ,CAAC,QAAQ,KAAK,QAAQ,CAAA;gBACvC,CAAC;gBACD,OAAO,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,KAAK,CACnC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,GAA4B,CAAC,KAAK,KAAK,CACnE,CAAA;YACH,CAAC,CAAC,CAAA;QACJ,CAAC;QAED,UAAU,EAAE,GAAG,EAAE;YACf,MAAM,OAAO,GAAG,aAAa,CAAkB,OAAO,CAAC,GAAc,EAAE,KAAK,CAAC,CAAA;YAE7E,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAA;QAC7E,CAAC;QAED,WAAW,EAAE,GAAG,EAAE;YAChB,MAAM,OAAO,GAAG,aAAa,CAAkB,OAAO,CAAC,GAAc,EAAE,KAAK,CAAC,CAAA;YAC7E,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAA;YAC5B,MAAM,kBAAkB,GAAG,GAAG,CAAC,kBAAkB,IAAI,qBAAqB,CAAA;YAC1E,IAAI,OAAO,CAAC,UAAU,CAAC,kBAAkB,CAAC,EAAE,CAAC;gBAC3C,OAAO,OAAO,CAAC,OAAO,CAAqB,kBAAkB,CAAC,CAAA;YAChE,CAAC;YACD,OAAO,IAAI,CAAA;QACb,CAAC;QAED,cAAc,EAAE,GAAG,EAAE;YACnB,MAAM,OAAO,GAAG,aAAa,CAAkB,OAAO,CAAC,GAAc,EAAE,KAAK,CAAC,CAAA;YAC7E,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAA;YAC5B,MAAM,qBAAqB,GAAG,GAAG,CAAC,qBAAqB,IAAI,wBAAwB,CAAA;YACnF,IAAI,OAAO,CAAC,UAAU,CAAC,qBAAqB,CAAC,EAAE,CAAC;gBAC9C,OAAO,OAAO,CAAC,OAAO,CAAwB,qBAAqB,CAAC,CAAA;YACtE,CAAC;YACD,OAAO,IAAI,CAAA;QACb,CAAC;QAED,WAAW,EAAE,MAAM,CAAC,EAAE;YACpB,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS,EAAmB,CAAA;YAChD,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,EAAE,CAAC;gBACnC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,GAAG,EAAE,CAAA;YAC7B,CAAC;YAED,OAAO,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE;gBAC5C,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;oBAC/B,OAAO,QAAQ,CAAC,QAAQ,KAAK,MAAM,CAAA;gBACrC,CAAC;gBACD,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,CACjC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,GAA4B,CAAC,KAAK,KAAK,CACnE,CAAA;YACH,CAAC,CAAC,CAAA;QACJ,CAAC;QAED,yBAAyB,EAAE,MAAM,CAAC,EAAE;YAClC,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS,EAAmB,CAAA;YAChD,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,EAAE,CAAC;gBACnC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,GAAG,EAAE,CAAA;YAC7B,CAAC;YACD,MAAM,SAAS,GAAG,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAA8B,CAAA;YAC7D,IAAI,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,aAAa,CAAC,KAAK,CAC3D,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC,GAA4B,CAAC,KAAK,MAAM,CAAC,GAA0B,CAAC,CACrF,CAAC,CAAA;YACF,IAAI,QAAQ,IAAI,IAAI,EAAE,CAAC;gBACrB,QAAQ,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,EAAE,CAAA;gBAC1C,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;YAC1B,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;gBAC/B,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAC,CAAA;gBAC3B,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAA;YACzB,CAAC;YAED,OAAO,QAAQ,CAAA;QACjB,CAAC;QAED,gBAAgB,EAAE,MAAM,CAAC,EAAE;YACzB,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS,EAAmB,CAAA;YAChD,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,EAAE,CAAC;gBACnC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,GAAG,EAAE,CAAA;YAC7B,CAAC;YAED,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAC1C,QAAQ,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,CACtC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,GAA4B,CAAC,KAAK,KAAK,CACnE,CACF,CAAA;YACD,IAAI,QAAQ,IAAI,IAAI,EAAE,CAAC;gBACrB,MAAM,IAAI,gBAAgB,CAAC,uBAAuB,CAAC,CAAA;YACrD,CAAC;YAED,OAAO,QAAQ,CAAC,QAAQ,CAAA;QAC1B,CAAC;QAED,2BAA2B,EAAE,MAAM,CAAC,EAAE;YACpC,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS,EAAmB,CAAA;YAChD,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,EAAE,CAAC;gBACnC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,GAAG,EAAE,CAAA;YAC7B,CAAC;YACD,MAAM,SAAS,GAAG,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAA8B,CAAA;YAE7D,MAAM,GAAG,GAAG,SAAS,CAAC,SAAS,CAC7B,QAAQ,CAAC,EAAE,CAAC,aAAa,CAAC,KAAK,CAC7B,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,MAAM,CAAC;gBACrB,QAAQ,CAAC,GAA4B,CAAC,KAAK,MAAM,CAAC,GAA0B,CAAC,CAChF,CACF,CAAA;YACD,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;gBACZ,OAAM;YACR,CAAC;YACD,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,CAAA;YAE/B,IAAI,EAAE,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;gBAChC,SAAS,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA;YAC1B,CAAC;QACH,CAAC;KACF,CAAC,CAAA;IAEF,OAAO,OAAO,CAAA;AAChB,CAAC,CAAA;AAED,MAAM,aAAa,GAAG;IACpB,UAAU,EAAE,SAAS,EAAE,eAAe,EAAE,UAAU,EAAE,UAAU;CAC/D,CAAA;AAED,MAAM,WAAW,GAAG,MAAM,CAAC,gCAAgC,CAAC,CAAA"}

package/build/types.d.ts

@@ -0,0 +1,55 @@
+import type { InitializedService } from '@owlmeans/context';
+import type { AuthorizationCodeGrantChecks, Configuration, IntrospectionResponse, ServerMetadata, TokenEndpointResponse, TokenEndpointResponseHelpers } from 'openid-client';
+import type { ServerConfig, ServerContext } from '@owlmeans/server-context';
+import type { OidcProviderConfig, OidcSharedConfig, WithSharedConfig, ProviderProfileDetails, OidcUserDetails, OidcProviderSettings } from '@owlmeans/oidc';
+import type { AuthCredentials, AuthPayload, Profile } from '@owlmeans/auth';
+export type OidcClientDescriptor = Configuration;
+export type TokenSet = TokenEndpointResponse & TokenEndpointResponseHelpers;
+export type TokenSetParameters = TokenEndpointResponse;
+export interface OidcClientService extends InitializedService {
+    getConfiguration: (clientId: string | Partial<OidcProviderConfig>) => Promise<OidcClientDescriptor>;
+    getClient: (clientId: string | OidcClientDescriptor | Partial<OidcProviderConfig>) => Promise<OidcClientAdapter>;
+    getConfig: (clientId: string | Partial<OidcProviderConfig>) => Promise<OidcProviderConfig | undefined>;
+    getDefault: () => string | undefined;
+    registerTemporaryProvider: (config: OidcProviderConfig) => OidcProviderConfig;
+    unregisterTemporaryProvider: (params: Partial<OidcProviderConfig>) => void;
+    hasProvider: (params: Partial<OidcProviderConfig>) => boolean;
+    entityToClientId: (params: Partial<OidcProviderConfig>) => string;
+    providerApi: () => ProviderApiService | null;
+    accountLinking: () => AccountLinkingService | null;
+}
+export interface OidcClientAdapter {
+    getMetadata: () => ServerMetadata;
+    getClientId: () => string;
+    getConfig: () => OidcProviderConfig;
+    makeAuthUrl: (params: Record<string, string>) => string;
+    grantWithCredentials: () => Promise<TokenSet>;
+    grantWithCode: (currentUrl: string, checks: AuthorizationCodeGrantChecks, params: Record<string, string>) => Promise<TokenSet>;
+    refresh: (tokenSet: TokenSetParameters | string) => Promise<TokenSetParameters>;
+    introspect: (tokenSet: TokenSetParameters, type?: string) => Promise<IntrospectionResponse>;
+}
+export interface OidcRpConfig extends OidcSharedConfig {
+    accountLinkingService?: string;
+    providerApiService?: string;
+}
+export interface Config extends ServerConfig, WithSharedConfig {
+    oidc: OidcRpConfig;
+}
+export interface Context<C extends Config = Config> extends ServerContext<C> {
+}
+export interface AccountLinkingService extends InitializedService {
+    getLinkedProfile: (details: ProviderProfileDetails) => Promise<AuthPayload | null>;
+    linkProfile: (details: ProviderProfileDetails, meta: AccountMeta) => Promise<AuthPayload>;
+    linkCredentials: (details: ProviderProfileDetails) => Promise<AuthPayload>;
+    getOwnerProfiles: (entityId: string) => Promise<Profile[]>;
+    getOwnerCredentials: (userId: string, entityId?: string, type?: string) => Promise<AuthCredentials | undefined>;
+}
+export interface AccountMeta {
+    username: string;
+    force?: boolean;
+}
+export interface ProviderApiService extends InitializedService {
+    getUserDetails: (token: string, userId: string) => Promise<OidcUserDetails>;
+    getSettings: (token: string, realm: string) => Promise<OidcProviderSettings>;
+}
+//# sourceMappingURL=types.d.ts.map

package/build/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAA;AAC3D,OAAO,KAAK,EAAE,4BAA4B,EAAE,aAAa,EAAE,qBAAqB,EAAE,cAAc,EAAE,qBAAqB,EAAE,4BAA4B,EAAE,MAAM,eAAe,CAAA;AAC5K,OAAO,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAA;AAC3E,OAAO,KAAK,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAA;AAC3J,OAAO,KAAK,EAAE,eAAe,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAA;AAE3E,MAAM,MAAM,oBAAoB,GAAG,aAAa,CAAA;AAChD,MAAM,MAAM,QAAQ,GAAG,qBAAqB,GAAG,4BAA4B,CAAA;AAC3E,MAAM,MAAM,kBAAkB,GAAG,qBAAqB,CAAA;AAEtD,MAAM,WAAW,iBAAkB,SAAQ,kBAAkB;IAC3D,gBAAgB,EAAE,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,KAAK,OAAO,CAAC,oBAAoB,CAAC,CAAA;IACnG,SAAS,EAAE,CAAC,QAAQ,EAAE,MAAM,GAAG,oBAAoB,GAAG,OAAO,CAAC,kBAAkB,CAAC,KAAK,OAAO,CAAC,iBAAiB,CAAC,CAAA;IAChH,SAAS,EAAE,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,KAAK,OAAO,CAAC,kBAAkB,GAAG,SAAS,CAAC,CAAA;IACtG,UAAU,EAAE,MAAM,MAAM,GAAG,SAAS,CAAA;IAEpC,yBAAyB,EAAE,CAAC,MAAM,EAAE,kBAAkB,KAAK,kBAAkB,CAAA;IAC7E,2BAA2B,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,kBAAkB,CAAC,KAAK,IAAI,CAAA;IAC1E,WAAW,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,kBAAkB,CAAC,KAAK,OAAO,CAAA;IAC7D,gBAAgB,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,kBAAkB,CAAC,KAAK,MAAM,CAAA;IAEjE,WAAW,EAAE,MAAM,kBAAkB,GAAG,IAAI,CAAA;IAC5C,cAAc,EAAE,MAAM,qBAAqB,GAAG,IAAI,CAAA;CACnD;AAED,MAAM,WAAW,iBAAiB;IAChC,WAAW,EAAE,MAAM,cAAc,CAAA;IACjC,WAAW,EAAE,MAAM,MAAM,CAAA;IACzB,SAAS,EAAE,MAAM,kBAAkB,CAAA;IACnC,WAAW,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,MAAM,CAAA;IACvD,oBAAoB,EAAE,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC7C,aAAa,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,4BAA4B,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC9H,OAAO,EAAE,CAAC,QAAQ,EAAE,kBAAkB,GAAG,MAAM,KAAK,OAAO,CAAC,kBAAkB,CAAC,CAAA;IAC/E,UAAU,EAAE,CAAC,QAAQ,EAAE,kBAAkB,EAAE,IAAI,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,qBAAqB,CAAC,CAAA;CAC5F;AAED,MAAM,WAAW,YAAa,SAAQ,gBAAgB;IACpD,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B,kBAAkB,CAAC,EAAE,MAAM,CAAA;CAC5B;AAED,MAAM,WAAW,MAAO,SAAQ,YAAY,EAAE,gBAAgB;IAC5D,IAAI,EAAE,YAAY,CAAA;CACnB;AAED,MAAM,WAAW,OAAO,CAAC,CAAC,SAAS,MAAM,GAAG,MAAM,CAAE,SAAQ,aAAa,CAAC,CAAC,CAAC;CAAI;AAEhF,MAAM,WAAW,qBAAsB,SAAQ,kBAAkB;IAC/D,gBAAgB,EAAE,CAAC,OAAO,EAAE,sBAAsB,KAAK,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAA;IAClF,WAAW,EAAE,CAAC,OAAO,EAAE,sBAAsB,EAAE,IAAI,EAAE,WAAW,KAAK,OAAO,CAAC,WAAW,CAAC,CAAA;IACzF,eAAe,EAAE,CAAC,OAAO,EAAE,sBAAsB,KAAK,OAAO,CAAC,WAAW,CAAC,CAAA;IAC1E,gBAAgB,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC,CAAA;IAC1D,mBAAmB,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC,CAAA;CAChH;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAA;IAChB,KAAK,CAAC,EAAE,OAAO,CAAA;CAChB;AAED,MAAM,WAAW,kBAAmB,SAAQ,kBAAkB;IAC5D,cAAc,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,eAAe,CAAC,CAAA;IAC3E,WAAW,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,oBAAoB,CAAC,CAAA;CAC7E"}

package/build/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/build/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":""}

package/build/utils/auth.d.ts

@@ -0,0 +1,5 @@
+import type { AuthCredentials } from '@owlmeans/auth';
+import type { Config, Context, TokenSet } from '../types.js';
+import type { OidcProviderConfig } from '@owlmeans/oidc';
+export declare const makeOidcAuthentication: <C extends Config, T extends Context<C>>(context: T) => (credential: AuthCredentials) => Promise<[OidcProviderConfig, TokenSet, string]>;
+//# sourceMappingURL=auth.d.ts.map

package/build/utils/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/utils/auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAA;AAErD,OAAO,KAAK,EAAE,MAAM,EAAE,OAAO,EAAqB,QAAQ,EAAE,MAAM,aAAa,CAAA;AAC/E,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAA;AASxD,eAAO,MAAM,sBAAsB,GAAI,CAAC,SAAS,MAAM,EAAE,CAAC,SAAS,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,kBACpE,eAAe,KAAG,OAAO,CAAC,CAAC,kBAAkB,EAAE,QAAQ,EAAE,MAAM,CAAC,CAqDlF,CAAA"}

package/build/utils/auth.js

@@ -0,0 +1,48 @@
+import { AuthenFailed, AuthenPayloadError } from '@owlmeans/auth';
+import Url from 'url';
+import { cache, exchangeId, verifierId } from './cache.js';
+import { DEFAULT_ALIAS } from '../consts.js';
+import { base64 } from '@scure/base';
+import { randomBytes } from '@noble/hashes/utils';
+import { AUTHEN_TIMEFRAME } from '@owlmeans/server-auth';
+export const makeOidcAuthentication = (context) => async (credential) => {
+    console.log('Challenge we got: ', credential.challenge);
+    const challengeParts = credential.challenge.split(':http');
+    // This is ex. source - url we were going to return user to after all it happens
+    const redirectUrl = challengeParts[0];
+    // This is the auth service url with all necessary parameters that
+    // we sent user to for authentication.
+    const challengeUrl = new Url.URL('http' + challengeParts[1]);
+    const challenge = challengeUrl.searchParams.get('code_challenge');
+    if (challenge == null) {
+        throw new AuthenPayloadError('code_challenge');
+    }
+    console.log("\n\nWe are picking verifier by id: ", verifierId(challenge));
+    const verification = await cache(context).pick(verifierId(challenge));
+    console.log("Verification we get: ", verification, "\n\n");
+    if (verification.verifier == null) {
+        throw new AuthenFailed();
+    }
+    if (verification.client == null) {
+        throw new AuthenFailed();
+    }
+    const oidc = context.service(DEFAULT_ALIAS);
+    console.log(">>>>>>>> client we are trying to extract: ", verification);
+    const cfg = await oidc.getConfig({
+        clientId: verification.client,
+        ...(verification.entityId != null ? { entityId: verification.entityId } : {})
+    });
+    if (cfg == null) {
+        throw new AuthenFailed();
+    }
+    const client = await oidc.getClient(cfg);
+    const tokenSet = await client.grantWithCode(redirectUrl, { pkceCodeVerifier: verification.verifier }, {
+        ...Object.fromEntries(new Url.URLSearchParams(credential.credential).entries()),
+    });
+    // const params = client.callbackParams('/?' + credential.credential)
+    // const tokenSet = await client.callback(redirectUrl, params, { code_verifier: verification.verifier })
+    const exchangeToken = base64.encode(randomBytes(32));
+    await cache(context).create({ id: exchangeId(exchangeToken), payload: tokenSet }, { ttl: AUTHEN_TIMEFRAME / 1000 });
+    return [cfg, tokenSet, exchangeToken];
+};
+//# sourceMappingURL=auth.js.map

package/build/utils/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/utils/auth.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAA;AAIjE,OAAO,GAAG,MAAM,KAAK,CAAA;AACrB,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACpC,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAA;AACjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AAExD,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAyC,OAAU,EAAE,EAAE,CAC3F,KAAK,EAAE,UAA2B,EAAmD,EAAE;IACrF,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,UAAU,CAAC,SAAS,CAAC,CAAA;IACvD,MAAM,cAAc,GAAG,UAAU,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IAC1D,gFAAgF;IAChF,MAAM,WAAW,GAAG,cAAc,CAAC,CAAC,CAAC,CAAA;IACrC,kEAAkE;IAClE,sCAAsC;IACtC,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC,CAAA;IAC5D,MAAM,SAAS,GAAG,YAAY,CAAC,YAAY,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAA;IACjE,IAAI,SAAS,IAAI,IAAI,EAAE,CAAC;QACtB,MAAM,IAAI,kBAAkB,CAAC,gBAAgB,CAAC,CAAA;IAChD,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,qCAAqC,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC,CAAA;IACzE,MAAM,YAAY,GAAG,MAAM,KAAK,CAAO,OAAO,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAA;IAC3E,OAAO,CAAC,GAAG,CAAC,uBAAuB,EAAE,YAAY,EAAE,MAAM,CAAC,CAAA;IAC1D,IAAI,YAAY,CAAC,QAAQ,IAAI,IAAI,EAAE,CAAC;QAClC,MAAM,IAAI,YAAY,EAAE,CAAA;IAC1B,CAAC;IACD,IAAI,YAAY,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC;QAChC,MAAM,IAAI,YAAY,EAAE,CAAA;IAC1B,CAAC;IAED,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAoB,aAAa,CAAC,CAAA;IAC9D,OAAO,CAAC,GAAG,CAAC,4CAA4C,EAAE,YAAY,CAAC,CAAA;IACvE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC;QAC/B,QAAQ,EAAE,YAAY,CAAC,MAAM;QAC7B,GAAG,CAAC,YAAY,CAAC,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,YAAY,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9E,CAAC,CAAA;IACF,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAChB,MAAM,IAAI,YAAY,EAAE,CAAA;IAC1B,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAA;IACxC,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,aAAa,CACzC,WAAW,EACX,EAAE,gBAAgB,EAAE,YAAY,CAAC,QAAQ,EAAE,EAC3C;QACE,GAAG,MAAM,CAAC,WAAW,CAAC,IAAI,GAAG,CAAC,eAAe,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,CAAC;KAChF,CACF,CAAA;IAED,qEAAqE;IAErE,wGAAwG;IAExG,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAA;IACpD,MAAM,KAAK,CAAO,OAAO,CAAC,CAAC,MAAM,CAC/B,EAAE,EAAE,EAAE,UAAU,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,EACpD,EAAE,GAAG,EAAE,gBAAgB,GAAG,IAAI,EAAE,CACjC,CAAA;IAED,OAAO,CAAC,GAAG,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAA;AACvC,CAAC,CAAA"}

package/build/utils/cache.d.ts

@@ -0,0 +1,8 @@
+import type { Resource } from '@owlmeans/resource';
+import type { OIDCAuthCache } from './types.js';
+import type { Config, Context } from '../types.js';
+export declare const cache: <C extends Config, T extends Context<C>>(context: T) => Resource<OIDCAuthCache>;
+export declare const verifierId: (challenge: string) => string;
+export declare const exchangeId: (exchange: string) => string;
+export declare const managedId: (token: string) => string;
+//# sourceMappingURL=cache.d.ts.map

package/build/utils/cache.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache.d.ts","sourceRoot":"","sources":["../../src/utils/cache.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAA;AAClD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAC/C,OAAO,KAAK,EAAG,MAAM,EAAE,OAAO,EAAE,MAAM,aAAa,CAAA;AAInD,eAAO,MAAM,KAAK,GAAI,CAAC,SAAS,MAAM,EAAE,CAAC,SAAS,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,KAAG,QAAQ,CAAC,aAAa,CAC1C,CAAA;AAEvD,eAAO,MAAM,UAAU,cAAe,MAAM,WAAgD,CAAA;AAC5F,eAAO,MAAM,UAAU,aAAc,MAAM,WAA+C,CAAA;AAC1F,eAAO,MAAM,SAAS,UAAW,MAAM,WAAyC,CAAA"}

package/build/utils/cache.js

@@ -0,0 +1,7 @@
+import { AUTH_CACHE } from '@owlmeans/server-auth';
+import { OIDC_TOKEN_STORE } from '../consts.js';
+export const cache = (context) => context.resource(AUTH_CACHE);
+export const verifierId = (challenge) => `${OIDC_TOKEN_STORE}:verifier:${challenge}`;
+export const exchangeId = (exchange) => `${OIDC_TOKEN_STORE}:exchange:${exchange}`;
+export const managedId = (token) => `${OIDC_TOKEN_STORE}:token:${token}`;
+//# sourceMappingURL=cache.js.map

package/build/utils/cache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache.js","sourceRoot":"","sources":["../../src/utils/cache.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAA;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAA;AAE/C,MAAM,CAAC,MAAM,KAAK,GAAG,CAAyC,OAAU,EAA2B,EAAE,CACnG,OAAO,CAAC,QAAQ,CAA0B,UAAU,CAAC,CAAA;AAEvD,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,SAAiB,EAAE,EAAE,CAAC,GAAG,gBAAgB,aAAa,SAAS,EAAE,CAAA;AAC5F,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,QAAgB,EAAE,EAAE,CAAC,GAAG,gBAAgB,aAAa,QAAQ,EAAE,CAAA;AAC1F,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,GAAG,gBAAgB,UAAU,KAAK,EAAE,CAAA"}

package/build/utils/index.d.ts

@@ -0,0 +1,5 @@
+export * from './cache.js';
+export type * from './types.js';
+export * from './auth.js';
+export * from './wrapped.js';
+//# sourceMappingURL=index.d.ts.map

package/build/utils/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/utils/index.ts"],"names":[],"mappings":"AACA,cAAc,YAAY,CAAA;AAC1B,mBAAmB,YAAY,CAAA;AAC/B,cAAc,WAAW,CAAA;AACzB,cAAc,cAAc,CAAA"}

package/build/utils/index.js

@@ -0,0 +1,4 @@
+export * from './cache.js';
+export * from './auth.js';
+export * from './wrapped.js';
+//# sourceMappingURL=index.js.map

package/build/utils/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/utils/index.ts"],"names":[],"mappings":"AACA,cAAc,YAAY,CAAA;AAE1B,cAAc,WAAW,CAAA;AACzB,cAAc,cAAc,CAAA"}

package/build/utils/types.d.ts

@@ -0,0 +1,10 @@
+import type { AuthSpent } from '@owlmeans/server-auth';
+import type { TokenSetParameters } from '../types.js';
+export interface OIDCAuthCache extends AuthSpent {
+    verifier?: string;
+    payload?: TokenSetParameters;
+    client?: string;
+    validated?: Date;
+    entityId?: string;
+}
+//# sourceMappingURL=types.d.ts.map

package/build/utils/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/utils/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAA;AACtD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA;AAErD,MAAM,WAAW,aAAc,SAAQ,SAAS;IAC9C,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,OAAO,CAAC,EAAE,kBAAkB,CAAA;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,SAAS,CAAC,EAAE,IAAI,CAAA;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB"}

package/build/utils/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/build/utils/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/utils/types.ts"],"names":[],"mappings":""}

package/build/utils/wrapped.d.ts

@@ -0,0 +1,4 @@
+import type { WrappedOIDCService } from '@owlmeans/oidc';
+import type { Context } from '../types.js';
+export declare const wrapper: (context: Context) => WrappedOIDCService;
+//# sourceMappingURL=wrapped.d.ts.map

package/build/utils/wrapped.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wrapped.d.ts","sourceRoot":"","sources":["../../src/utils/wrapped.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAA;AAExD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAA;AAE1C,eAAO,MAAM,OAAO,YAAa,OAAO,KAAG,kBACZ,CAAA"}