@owox/idp-owox 0.0.0

package/dist/client/dto/introspectionDto.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.IntrospectionResponseSchema = void 0;
+const zod_1 = require("zod");
+const idpOwoxPayloadDto_1 = require("./idpOwoxPayloadDto");
+const ActiveSchema = idpOwoxPayloadDto_1.IdpOwoxPayloadSchema.extend({
+    isActive: zod_1.z.literal(true),
+});
+const inactiveShape = Object.fromEntries(Object.keys(idpOwoxPayloadDto_1.IdpOwoxPayloadSchema.shape).map(k => [k, zod_1.z.null()]));
+const InactiveSchema = zod_1.z
+    .object(inactiveShape)
+    .strict()
+    .extend({ isActive: zod_1.z.literal(false) });
+exports.IntrospectionResponseSchema = zod_1.z.discriminatedUnion('isActive', [
+    ActiveSchema,
+    InactiveSchema,
+]);

package/dist/client/dto/jwksDto.d.ts

@@ -0,0 +1,100 @@
+import { z } from 'zod';
+import { JWK } from 'jose';
+export declare const JsonWebKeySchema: z.ZodObject<{
+    kty: z.ZodString;
+    use: z.ZodString;
+    alg: z.ZodString;
+    kid: z.ZodString;
+    n: z.ZodString;
+    e: z.ZodString;
+}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+    kty: z.ZodString;
+    use: z.ZodString;
+    alg: z.ZodString;
+    kid: z.ZodString;
+    n: z.ZodString;
+    e: z.ZodString;
+}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+    kty: z.ZodString;
+    use: z.ZodString;
+    alg: z.ZodString;
+    kid: z.ZodString;
+    n: z.ZodString;
+    e: z.ZodString;
+}, z.ZodTypeAny, "passthrough">>;
+export declare const JwksResponseSchema: z.ZodEffects<z.ZodObject<{
+    keys: z.ZodArray<z.ZodObject<{
+        kty: z.ZodString;
+        use: z.ZodString;
+        alg: z.ZodString;
+        kid: z.ZodString;
+        n: z.ZodString;
+        e: z.ZodString;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        kty: z.ZodString;
+        use: z.ZodString;
+        alg: z.ZodString;
+        kid: z.ZodString;
+        n: z.ZodString;
+        e: z.ZodString;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        kty: z.ZodString;
+        use: z.ZodString;
+        alg: z.ZodString;
+        kid: z.ZodString;
+        n: z.ZodString;
+        e: z.ZodString;
+    }, z.ZodTypeAny, "passthrough">>, "atleastone">;
+}, "strip", z.ZodTypeAny, {
+    keys: [z.objectOutputType<{
+        kty: z.ZodString;
+        use: z.ZodString;
+        alg: z.ZodString;
+        kid: z.ZodString;
+        n: z.ZodString;
+        e: z.ZodString;
+    }, z.ZodTypeAny, "passthrough">, ...z.objectOutputType<{
+        kty: z.ZodString;
+        use: z.ZodString;
+        alg: z.ZodString;
+        kid: z.ZodString;
+        n: z.ZodString;
+        e: z.ZodString;
+    }, z.ZodTypeAny, "passthrough">[]];
+}, {
+    keys: [z.objectInputType<{
+        kty: z.ZodString;
+        use: z.ZodString;
+        alg: z.ZodString;
+        kid: z.ZodString;
+        n: z.ZodString;
+        e: z.ZodString;
+    }, z.ZodTypeAny, "passthrough">, ...z.objectInputType<{
+        kty: z.ZodString;
+        use: z.ZodString;
+        alg: z.ZodString;
+        kid: z.ZodString;
+        n: z.ZodString;
+        e: z.ZodString;
+    }, z.ZodTypeAny, "passthrough">[]];
+}>, {
+    keys: JWK[];
+}, {
+    keys: [z.objectInputType<{
+        kty: z.ZodString;
+        use: z.ZodString;
+        alg: z.ZodString;
+        kid: z.ZodString;
+        n: z.ZodString;
+        e: z.ZodString;
+    }, z.ZodTypeAny, "passthrough">, ...z.objectInputType<{
+        kty: z.ZodString;
+        use: z.ZodString;
+        alg: z.ZodString;
+        kid: z.ZodString;
+        n: z.ZodString;
+        e: z.ZodString;
+    }, z.ZodTypeAny, "passthrough">[]];
+}>;
+export type JwksResponse = z.infer<typeof JwksResponseSchema>;
+//# sourceMappingURL=jwksDto.d.ts.map

package/dist/client/dto/jwksDto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwksDto.d.ts","sourceRoot":"","sources":["../../../src/client/dto/jwksDto.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,GAAG,EAAE,MAAM,MAAM,CAAC;AAE3B,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;gCASb,CAAC;AAEjB,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;UAIiB,GAAG,EAAE;;;;;;;;;;;;;;;;;EAAI,CAAC;AAE1D,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC"}

package/dist/client/dto/jwksDto.js

@@ -0,0 +1,19 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.JwksResponseSchema = exports.JsonWebKeySchema = void 0;
+const zod_1 = require("zod");
+exports.JsonWebKeySchema = zod_1.z
+    .object({
+    kty: zod_1.z.string(),
+    use: zod_1.z.string(),
+    alg: zod_1.z.string(),
+    kid: zod_1.z.string(),
+    n: zod_1.z.string(),
+    e: zod_1.z.string(),
+})
+    .passthrough();
+exports.JwksResponseSchema = zod_1.z
+    .object({
+    keys: zod_1.z.array(exports.JsonWebKeySchema).nonempty(),
+})
+    .transform(v => ({ keys: v.keys }));

package/dist/client/dto/revocationDto.d.ts

@@ -0,0 +1,9 @@
+import { TokenType } from './tokenType';
+export interface RevocationRequest {
+    token: string;
+    tokenType?: TokenType;
+}
+export interface RevocationResponse {
+    success: boolean;
+}
+//# sourceMappingURL=revocationDto.d.ts.map

package/dist/client/dto/revocationDto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"revocationDto.d.ts","sourceRoot":"","sources":["../../../src/client/dto/revocationDto.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAExC,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,SAAS,CAAC;CACvB;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,OAAO,CAAC;CAClB"}

package/dist/client/dto/revocationDto.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/client/dto/tokenDto.d.ts

@@ -0,0 +1,30 @@
+import { z } from 'zod';
+export type GrantType = 'authorization_code' | 'refresh_token';
+export interface TokenRequest {
+    grantType: GrantType;
+    clientId: string;
+    authCode?: string;
+    refreshToken?: string;
+    codeVerifier?: string;
+}
+export declare const TokenResponseSchema: z.ZodObject<{
+    accessToken: z.ZodString;
+    refreshToken: z.ZodString;
+    tokenType: z.ZodString;
+    accessTokenExpiresIn: z.ZodNumber;
+    refreshTokenExpiresIn: z.ZodNumber;
+}, "strip", z.ZodTypeAny, {
+    accessToken: string;
+    refreshToken: string;
+    tokenType: string;
+    accessTokenExpiresIn: number;
+    refreshTokenExpiresIn: number;
+}, {
+    accessToken: string;
+    refreshToken: string;
+    tokenType: string;
+    accessTokenExpiresIn: number;
+    refreshTokenExpiresIn: number;
+}>;
+export type TokenResponse = z.infer<typeof TokenResponseSchema>;
+//# sourceMappingURL=tokenDto.d.ts.map

package/dist/client/dto/tokenDto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokenDto.d.ts","sourceRoot":"","sources":["../../../src/client/dto/tokenDto.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,MAAM,SAAS,GAAG,oBAAoB,GAAG,eAAe,CAAC;AAE/D,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,SAAS,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;EAM9B,CAAC;AAEH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC"}

package/dist/client/dto/tokenDto.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TokenResponseSchema = void 0;
+const zod_1 = require("zod");
+exports.TokenResponseSchema = zod_1.z.object({
+    accessToken: zod_1.z.string().min(10),
+    refreshToken: zod_1.z.string().min(10),
+    tokenType: zod_1.z.string(),
+    accessTokenExpiresIn: zod_1.z.number().positive(),
+    refreshTokenExpiresIn: zod_1.z.number().positive(),
+});

package/dist/client/dto/tokenType.d.ts

@@ -0,0 +1,2 @@
+export type TokenType = 'access_token' | 'refresh_token';
+//# sourceMappingURL=tokenType.d.ts.map

package/dist/client/dto/tokenType.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokenType.d.ts","sourceRoot":"","sources":["../../../src/client/dto/tokenType.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,SAAS,GAAG,cAAc,GAAG,eAAe,CAAC"}

package/dist/client/dto/tokenType.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/client/index.d.ts

@@ -0,0 +1,3 @@
+export * from './IdentityOwoxClient';
+export * from './dto';
+//# sourceMappingURL=index.d.ts.map

package/dist/client/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/client/index.ts"],"names":[],"mappings":"AAAA,cAAc,sBAAsB,CAAC;AACrC,cAAc,OAAO,CAAC"}

package/dist/client/index.js

@@ -0,0 +1,18 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./IdentityOwoxClient"), exports);
+__exportStar(require("./dto"), exports);

package/dist/config.d.ts

@@ -0,0 +1,192 @@
+import { z } from 'zod';
+import ms from 'ms';
+export declare const DbEnvSchema: z.ZodEffects<z.ZodDiscriminatedUnion<"IDP_OWOX_DB_TYPE", [z.ZodObject<{
+    IDP_OWOX_DB_TYPE: z.ZodLiteral<"sqlite">;
+    IDP_OWOX_SQLITE_DB_PATH: z.ZodOptional<z.ZodString>;
+    IDP_OWOX_SQLITE_PRAGMA: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    IDP_OWOX_DB_TYPE: "sqlite";
+    IDP_OWOX_SQLITE_DB_PATH?: string | undefined;
+    IDP_OWOX_SQLITE_PRAGMA?: string | undefined;
+}, {
+    IDP_OWOX_DB_TYPE: "sqlite";
+    IDP_OWOX_SQLITE_DB_PATH?: string | undefined;
+    IDP_OWOX_SQLITE_PRAGMA?: string | undefined;
+}>, z.ZodObject<{
+    IDP_OWOX_DB_TYPE: z.ZodLiteral<"mysql">;
+    IDP_OWOX_MYSQL_HOST: z.ZodString;
+    IDP_OWOX_MYSQL_USER: z.ZodString;
+    IDP_OWOX_MYSQL_PASSWORD: z.ZodString;
+    IDP_OWOX_MYSQL_DB: z.ZodString;
+    IDP_OWOX_MYSQL_PORT: z.ZodOptional<z.ZodString>;
+    IDP_OWOX_MYSQL_CONNECTION_LIMIT: z.ZodOptional<z.ZodString>;
+    IDP_OWOX_MYSQL_SSL: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    IDP_OWOX_DB_TYPE: "mysql";
+    IDP_OWOX_MYSQL_HOST: string;
+    IDP_OWOX_MYSQL_USER: string;
+    IDP_OWOX_MYSQL_PASSWORD: string;
+    IDP_OWOX_MYSQL_DB: string;
+    IDP_OWOX_MYSQL_PORT?: string | undefined;
+    IDP_OWOX_MYSQL_CONNECTION_LIMIT?: string | undefined;
+    IDP_OWOX_MYSQL_SSL?: string | undefined;
+}, {
+    IDP_OWOX_DB_TYPE: "mysql";
+    IDP_OWOX_MYSQL_HOST: string;
+    IDP_OWOX_MYSQL_USER: string;
+    IDP_OWOX_MYSQL_PASSWORD: string;
+    IDP_OWOX_MYSQL_DB: string;
+    IDP_OWOX_MYSQL_PORT?: string | undefined;
+    IDP_OWOX_MYSQL_CONNECTION_LIMIT?: string | undefined;
+    IDP_OWOX_MYSQL_SSL?: string | undefined;
+}>]>, {
+    type: "sqlite";
+    sqlite: {
+        type: "sqlite";
+        dbPath: string;
+        pragma: string[] | undefined;
+    };
+    mysql?: undefined;
+} | {
+    type: "mysql";
+    mysql: {
+        type: "mysql";
+        host: string;
+        port: number | undefined;
+        user: string;
+        password: string;
+        database: string;
+        connectionLimit: number | undefined;
+        ssl: string | import("mysql2/promise").SslOptions | undefined;
+    };
+    sqlite?: undefined;
+}, {
+    IDP_OWOX_DB_TYPE: "sqlite";
+    IDP_OWOX_SQLITE_DB_PATH?: string | undefined;
+    IDP_OWOX_SQLITE_PRAGMA?: string | undefined;
+} | {
+    IDP_OWOX_DB_TYPE: "mysql";
+    IDP_OWOX_MYSQL_HOST: string;
+    IDP_OWOX_MYSQL_USER: string;
+    IDP_OWOX_MYSQL_PASSWORD: string;
+    IDP_OWOX_MYSQL_DB: string;
+    IDP_OWOX_MYSQL_PORT?: string | undefined;
+    IDP_OWOX_MYSQL_CONNECTION_LIMIT?: string | undefined;
+    IDP_OWOX_MYSQL_SSL?: string | undefined;
+}>;
+export declare function loadDbConfigFromEnv(env?: NodeJS.ProcessEnv): {
+    type: "sqlite";
+    sqlite: {
+        type: "sqlite";
+        dbPath: string;
+        pragma: string[] | undefined;
+    };
+    mysql?: undefined;
+} | {
+    type: "mysql";
+    mysql: {
+        type: "mysql";
+        host: string;
+        port: number | undefined;
+        user: string;
+        password: string;
+        database: string;
+        connectionLimit: number | undefined;
+        ssl: string | import("mysql2/promise").SslOptions | undefined;
+    };
+    sqlite?: undefined;
+};
+/** ---------- IdentityOwox client ---------- */
+declare const IdentityOwoxClientEnvSchema: z.ZodEffects<z.ZodObject<{
+    IDP_OWOX_BASE_URL: z.ZodString;
+    IDP_OWOX_DEFAULT_HEADERS: z.ZodOptional<z.ZodString>;
+    IDP_OWOX_TIMEOUT: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, `${number}` | `${number}Years` | `${number}Year` | `${number}Yrs` | `${number}Yr` | `${number}Y` | `${number}Weeks` | `${number}Week` | `${number}W` | `${number}Days` | `${number}Day` | `${number}D` | `${number}Hours` | `${number}Hour` | `${number}Hrs` | `${number}Hr` | `${number}H` | `${number}Minutes` | `${number}Minute` | `${number}Mins` | `${number}Min` | `${number}M` | `${number}Seconds` | `${number}Second` | `${number}Secs` | `${number}Sec` | `${number}s` | `${number}Milliseconds` | `${number}Millisecond` | `${number}Msecs` | `${number}Msec` | `${number}Ms` | `${number}YEARS` | `${number}YEAR` | `${number}YRS` | `${number}YR` | `${number}WEEKS` | `${number}WEEK` | `${number}DAYS` | `${number}DAY` | `${number}HOURS` | `${number}HOUR` | `${number}HRS` | `${number}HR` | `${number}MINUTES` | `${number}MINUTE` | `${number}MINS` | `${number}MIN` | `${number}SECONDS` | `${number}SECOND` | `${number}SECS` | `${number}SEC` | `${number}S` | `${number}MILLISECONDS` | `${number}MILLISECOND` | `${number}MSECS` | `${number}MSEC` | `${number}MS` | `${number}years` | `${number}year` | `${number}yrs` | `${number}yr` | `${number}y` | `${number}weeks` | `${number}week` | `${number}w` | `${number}days` | `${number}day` | `${number}d` | `${number}hours` | `${number}hour` | `${number}hrs` | `${number}hr` | `${number}h` | `${number}minutes` | `${number}minute` | `${number}mins` | `${number}min` | `${number}m` | `${number}seconds` | `${number}second` | `${number}secs` | `${number}sec` | `${number}milliseconds` | `${number}millisecond` | `${number}msecs` | `${number}msec` | `${number}ms` | `${number} Years` | `${number} Year` | `${number} Yrs` | `${number} Yr` | `${number} Y` | `${number} Weeks` | `${number} Week` | `${number} W` | `${number} Days` | `${number} Day` | `${number} D` | `${number} Hours` | `${number} Hour` | `${number} Hrs` | `${number} Hr` | `${number} H` | `${number} Minutes` | `${number} Minute` | `${number} Mins` | `${number} Min` | `${number} M` | `${number} Seconds` | `${number} Second` | `${number} Secs` | `${number} Sec` | `${number} s` | `${number} Milliseconds` | `${number} Millisecond` | `${number} Msecs` | `${number} Msec` | `${number} Ms` | `${number} YEARS` | `${number} YEAR` | `${number} YRS` | `${number} YR` | `${number} WEEKS` | `${number} WEEK` | `${number} DAYS` | `${number} DAY` | `${number} HOURS` | `${number} HOUR` | `${number} HRS` | `${number} HR` | `${number} MINUTES` | `${number} MINUTE` | `${number} MINS` | `${number} MIN` | `${number} SECONDS` | `${number} SECOND` | `${number} SECS` | `${number} SEC` | `${number} S` | `${number} MILLISECONDS` | `${number} MILLISECOND` | `${number} MSECS` | `${number} MSEC` | `${number} MS` | `${number} years` | `${number} year` | `${number} yrs` | `${number} yr` | `${number} y` | `${number} weeks` | `${number} week` | `${number} w` | `${number} days` | `${number} day` | `${number} d` | `${number} hours` | `${number} hour` | `${number} hrs` | `${number} hr` | `${number} h` | `${number} minutes` | `${number} minute` | `${number} mins` | `${number} min` | `${number} m` | `${number} seconds` | `${number} second` | `${number} secs` | `${number} sec` | `${number} milliseconds` | `${number} millisecond` | `${number} msecs` | `${number} msec` | `${number} ms`, string>>;
+}, "strip", z.ZodTypeAny, {
+    IDP_OWOX_BASE_URL: string;
+    IDP_OWOX_DEFAULT_HEADERS?: string | undefined;
+    IDP_OWOX_TIMEOUT?: `${number}` | `${number}Years` | `${number}Year` | `${number}Yrs` | `${number}Yr` | `${number}Y` | `${number}Weeks` | `${number}Week` | `${number}W` | `${number}Days` | `${number}Day` | `${number}D` | `${number}Hours` | `${number}Hour` | `${number}Hrs` | `${number}Hr` | `${number}H` | `${number}Minutes` | `${number}Minute` | `${number}Mins` | `${number}Min` | `${number}M` | `${number}Seconds` | `${number}Second` | `${number}Secs` | `${number}Sec` | `${number}s` | `${number}Milliseconds` | `${number}Millisecond` | `${number}Msecs` | `${number}Msec` | `${number}Ms` | `${number}YEARS` | `${number}YEAR` | `${number}YRS` | `${number}YR` | `${number}WEEKS` | `${number}WEEK` | `${number}DAYS` | `${number}DAY` | `${number}HOURS` | `${number}HOUR` | `${number}HRS` | `${number}HR` | `${number}MINUTES` | `${number}MINUTE` | `${number}MINS` | `${number}MIN` | `${number}SECONDS` | `${number}SECOND` | `${number}SECS` | `${number}SEC` | `${number}S` | `${number}MILLISECONDS` | `${number}MILLISECOND` | `${number}MSECS` | `${number}MSEC` | `${number}MS` | `${number}years` | `${number}year` | `${number}yrs` | `${number}yr` | `${number}y` | `${number}weeks` | `${number}week` | `${number}w` | `${number}days` | `${number}day` | `${number}d` | `${number}hours` | `${number}hour` | `${number}hrs` | `${number}hr` | `${number}h` | `${number}minutes` | `${number}minute` | `${number}mins` | `${number}min` | `${number}m` | `${number}seconds` | `${number}second` | `${number}secs` | `${number}sec` | `${number}milliseconds` | `${number}millisecond` | `${number}msecs` | `${number}msec` | `${number}ms` | `${number} Years` | `${number} Year` | `${number} Yrs` | `${number} Yr` | `${number} Y` | `${number} Weeks` | `${number} Week` | `${number} W` | `${number} Days` | `${number} Day` | `${number} D` | `${number} Hours` | `${number} Hour` | `${number} Hrs` | `${number} Hr` | `${number} H` | `${number} Minutes` | `${number} Minute` | `${number} Mins` | `${number} Min` | `${number} M` | `${number} Seconds` | `${number} Second` | `${number} Secs` | `${number} Sec` | `${number} s` | `${number} Milliseconds` | `${number} Millisecond` | `${number} Msecs` | `${number} Msec` | `${number} Ms` | `${number} YEARS` | `${number} YEAR` | `${number} YRS` | `${number} YR` | `${number} WEEKS` | `${number} WEEK` | `${number} DAYS` | `${number} DAY` | `${number} HOURS` | `${number} HOUR` | `${number} HRS` | `${number} HR` | `${number} MINUTES` | `${number} MINUTE` | `${number} MINS` | `${number} MIN` | `${number} SECONDS` | `${number} SECOND` | `${number} SECS` | `${number} SEC` | `${number} S` | `${number} MILLISECONDS` | `${number} MILLISECOND` | `${number} MSECS` | `${number} MSEC` | `${number} MS` | `${number} years` | `${number} year` | `${number} yrs` | `${number} yr` | `${number} y` | `${number} weeks` | `${number} week` | `${number} w` | `${number} days` | `${number} day` | `${number} d` | `${number} hours` | `${number} hour` | `${number} hrs` | `${number} hr` | `${number} h` | `${number} minutes` | `${number} minute` | `${number} mins` | `${number} min` | `${number} m` | `${number} seconds` | `${number} second` | `${number} secs` | `${number} sec` | `${number} milliseconds` | `${number} millisecond` | `${number} msecs` | `${number} msec` | `${number} ms` | undefined;
+}, {
+    IDP_OWOX_BASE_URL: string;
+    IDP_OWOX_DEFAULT_HEADERS?: string | undefined;
+    IDP_OWOX_TIMEOUT?: string | undefined;
+}>, {
+    baseUrl: string;
+    defaultHeaders: Record<string, string> | undefined;
+    clientTimeout: ms.StringValue;
+}, {
+    IDP_OWOX_BASE_URL: string;
+    IDP_OWOX_DEFAULT_HEADERS?: string | undefined;
+    IDP_OWOX_TIMEOUT?: string | undefined;
+}>;
+/** ---------- IDP (frontend/app) config ---------- */
+declare const IdpEnvSchema: z.ZodEffects<z.ZodObject<{
+    IDP_OWOX_CLIENT_ID: z.ZodString;
+    IDP_OWOX_PLATFORM_SIGN_IN_URL: z.ZodString;
+    IDP_OWOX_CALLBACK_URL: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    IDP_OWOX_CLIENT_ID: string;
+    IDP_OWOX_PLATFORM_SIGN_IN_URL: string;
+    IDP_OWOX_CALLBACK_URL: string;
+}, {
+    IDP_OWOX_CLIENT_ID: string;
+    IDP_OWOX_PLATFORM_SIGN_IN_URL: string;
+    IDP_OWOX_CALLBACK_URL: string;
+}>, {
+    clientId: string;
+    platformSignInUrl: string;
+    callbackUrl: string;
+}, {
+    IDP_OWOX_CLIENT_ID: string;
+    IDP_OWOX_PLATFORM_SIGN_IN_URL: string;
+    IDP_OWOX_CALLBACK_URL: string;
+}>;
+/** ---------- JWT config ---------- */
+declare const JwtEnvSchema: z.ZodEffects<z.ZodObject<{
+    IDP_OWOX_JWT_CLOCK_TOLERANCE: z.ZodDefault<z.ZodString>;
+    IDP_OWOX_JWT_ISSUER: z.ZodString;
+    IDP_OWOX_JWT_CACHE_TTL: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, `${number}` | `${number}Years` | `${number}Year` | `${number}Yrs` | `${number}Yr` | `${number}Y` | `${number}Weeks` | `${number}Week` | `${number}W` | `${number}Days` | `${number}Day` | `${number}D` | `${number}Hours` | `${number}Hour` | `${number}Hrs` | `${number}Hr` | `${number}H` | `${number}Minutes` | `${number}Minute` | `${number}Mins` | `${number}Min` | `${number}M` | `${number}Seconds` | `${number}Second` | `${number}Secs` | `${number}Sec` | `${number}s` | `${number}Milliseconds` | `${number}Millisecond` | `${number}Msecs` | `${number}Msec` | `${number}Ms` | `${number}YEARS` | `${number}YEAR` | `${number}YRS` | `${number}YR` | `${number}WEEKS` | `${number}WEEK` | `${number}DAYS` | `${number}DAY` | `${number}HOURS` | `${number}HOUR` | `${number}HRS` | `${number}HR` | `${number}MINUTES` | `${number}MINUTE` | `${number}MINS` | `${number}MIN` | `${number}SECONDS` | `${number}SECOND` | `${number}SECS` | `${number}SEC` | `${number}S` | `${number}MILLISECONDS` | `${number}MILLISECOND` | `${number}MSECS` | `${number}MSEC` | `${number}MS` | `${number}years` | `${number}year` | `${number}yrs` | `${number}yr` | `${number}y` | `${number}weeks` | `${number}week` | `${number}w` | `${number}days` | `${number}day` | `${number}d` | `${number}hours` | `${number}hour` | `${number}hrs` | `${number}hr` | `${number}h` | `${number}minutes` | `${number}minute` | `${number}mins` | `${number}min` | `${number}m` | `${number}seconds` | `${number}second` | `${number}secs` | `${number}sec` | `${number}milliseconds` | `${number}millisecond` | `${number}msecs` | `${number}msec` | `${number}ms` | `${number} Years` | `${number} Year` | `${number} Yrs` | `${number} Yr` | `${number} Y` | `${number} Weeks` | `${number} Week` | `${number} W` | `${number} Days` | `${number} Day` | `${number} D` | `${number} Hours` | `${number} Hour` | `${number} Hrs` | `${number} Hr` | `${number} H` | `${number} Minutes` | `${number} Minute` | `${number} Mins` | `${number} Min` | `${number} M` | `${number} Seconds` | `${number} Second` | `${number} Secs` | `${number} Sec` | `${number} s` | `${number} Milliseconds` | `${number} Millisecond` | `${number} Msecs` | `${number} Msec` | `${number} Ms` | `${number} YEARS` | `${number} YEAR` | `${number} YRS` | `${number} YR` | `${number} WEEKS` | `${number} WEEK` | `${number} DAYS` | `${number} DAY` | `${number} HOURS` | `${number} HOUR` | `${number} HRS` | `${number} HR` | `${number} MINUTES` | `${number} MINUTE` | `${number} MINS` | `${number} MIN` | `${number} SECONDS` | `${number} SECOND` | `${number} SECS` | `${number} SEC` | `${number} S` | `${number} MILLISECONDS` | `${number} MILLISECOND` | `${number} MSECS` | `${number} MSEC` | `${number} MS` | `${number} years` | `${number} year` | `${number} yrs` | `${number} yr` | `${number} y` | `${number} weeks` | `${number} week` | `${number} w` | `${number} days` | `${number} day` | `${number} d` | `${number} hours` | `${number} hour` | `${number} hrs` | `${number} hr` | `${number} h` | `${number} minutes` | `${number} minute` | `${number} mins` | `${number} min` | `${number} m` | `${number} seconds` | `${number} second` | `${number} secs` | `${number} sec` | `${number} milliseconds` | `${number} millisecond` | `${number} msecs` | `${number} msec` | `${number} ms`, string>>;
+    IDP_OWOX_JWT_ALGORITHM: z.ZodDefault<z.ZodEnum<["RS256"]>>;
+}, "strip", z.ZodTypeAny, {
+    IDP_OWOX_JWT_CLOCK_TOLERANCE: string;
+    IDP_OWOX_JWT_ISSUER: string;
+    IDP_OWOX_JWT_ALGORITHM: "RS256";
+    IDP_OWOX_JWT_CACHE_TTL?: `${number}` | `${number}Years` | `${number}Year` | `${number}Yrs` | `${number}Yr` | `${number}Y` | `${number}Weeks` | `${number}Week` | `${number}W` | `${number}Days` | `${number}Day` | `${number}D` | `${number}Hours` | `${number}Hour` | `${number}Hrs` | `${number}Hr` | `${number}H` | `${number}Minutes` | `${number}Minute` | `${number}Mins` | `${number}Min` | `${number}M` | `${number}Seconds` | `${number}Second` | `${number}Secs` | `${number}Sec` | `${number}s` | `${number}Milliseconds` | `${number}Millisecond` | `${number}Msecs` | `${number}Msec` | `${number}Ms` | `${number}YEARS` | `${number}YEAR` | `${number}YRS` | `${number}YR` | `${number}WEEKS` | `${number}WEEK` | `${number}DAYS` | `${number}DAY` | `${number}HOURS` | `${number}HOUR` | `${number}HRS` | `${number}HR` | `${number}MINUTES` | `${number}MINUTE` | `${number}MINS` | `${number}MIN` | `${number}SECONDS` | `${number}SECOND` | `${number}SECS` | `${number}SEC` | `${number}S` | `${number}MILLISECONDS` | `${number}MILLISECOND` | `${number}MSECS` | `${number}MSEC` | `${number}MS` | `${number}years` | `${number}year` | `${number}yrs` | `${number}yr` | `${number}y` | `${number}weeks` | `${number}week` | `${number}w` | `${number}days` | `${number}day` | `${number}d` | `${number}hours` | `${number}hour` | `${number}hrs` | `${number}hr` | `${number}h` | `${number}minutes` | `${number}minute` | `${number}mins` | `${number}min` | `${number}m` | `${number}seconds` | `${number}second` | `${number}secs` | `${number}sec` | `${number}milliseconds` | `${number}millisecond` | `${number}msecs` | `${number}msec` | `${number}ms` | `${number} Years` | `${number} Year` | `${number} Yrs` | `${number} Yr` | `${number} Y` | `${number} Weeks` | `${number} Week` | `${number} W` | `${number} Days` | `${number} Day` | `${number} D` | `${number} Hours` | `${number} Hour` | `${number} Hrs` | `${number} Hr` | `${number} H` | `${number} Minutes` | `${number} Minute` | `${number} Mins` | `${number} Min` | `${number} M` | `${number} Seconds` | `${number} Second` | `${number} Secs` | `${number} Sec` | `${number} s` | `${number} Milliseconds` | `${number} Millisecond` | `${number} Msecs` | `${number} Msec` | `${number} Ms` | `${number} YEARS` | `${number} YEAR` | `${number} YRS` | `${number} YR` | `${number} WEEKS` | `${number} WEEK` | `${number} DAYS` | `${number} DAY` | `${number} HOURS` | `${number} HOUR` | `${number} HRS` | `${number} HR` | `${number} MINUTES` | `${number} MINUTE` | `${number} MINS` | `${number} MIN` | `${number} SECONDS` | `${number} SECOND` | `${number} SECS` | `${number} SEC` | `${number} S` | `${number} MILLISECONDS` | `${number} MILLISECOND` | `${number} MSECS` | `${number} MSEC` | `${number} MS` | `${number} years` | `${number} year` | `${number} yrs` | `${number} yr` | `${number} y` | `${number} weeks` | `${number} week` | `${number} w` | `${number} days` | `${number} day` | `${number} d` | `${number} hours` | `${number} hour` | `${number} hrs` | `${number} hr` | `${number} h` | `${number} minutes` | `${number} minute` | `${number} mins` | `${number} min` | `${number} m` | `${number} seconds` | `${number} second` | `${number} secs` | `${number} sec` | `${number} milliseconds` | `${number} millisecond` | `${number} msecs` | `${number} msec` | `${number} ms` | undefined;
+}, {
+    IDP_OWOX_JWT_ISSUER: string;
+    IDP_OWOX_JWT_CLOCK_TOLERANCE?: string | undefined;
+    IDP_OWOX_JWT_CACHE_TTL?: string | undefined;
+    IDP_OWOX_JWT_ALGORITHM?: "RS256" | undefined;
+}>, {
+    clockTolerance: string;
+    issuer: string;
+    jwtKeyCacheTtl: `${number}` | `${number}Years` | `${number}Year` | `${number}Yrs` | `${number}Yr` | `${number}Y` | `${number}Weeks` | `${number}Week` | `${number}W` | `${number}Days` | `${number}Day` | `${number}D` | `${number}Hours` | `${number}Hour` | `${number}Hrs` | `${number}Hr` | `${number}H` | `${number}Minutes` | `${number}Minute` | `${number}Mins` | `${number}Min` | `${number}M` | `${number}Seconds` | `${number}Second` | `${number}Secs` | `${number}Sec` | `${number}s` | `${number}Milliseconds` | `${number}Millisecond` | `${number}Msecs` | `${number}Msec` | `${number}Ms` | `${number}YEARS` | `${number}YEAR` | `${number}YRS` | `${number}YR` | `${number}WEEKS` | `${number}WEEK` | `${number}DAYS` | `${number}DAY` | `${number}HOURS` | `${number}HOUR` | `${number}HRS` | `${number}HR` | `${number}MINUTES` | `${number}MINUTE` | `${number}MINS` | `${number}MIN` | `${number}SECONDS` | `${number}SECOND` | `${number}SECS` | `${number}SEC` | `${number}S` | `${number}MILLISECONDS` | `${number}MILLISECOND` | `${number}MSECS` | `${number}MSEC` | `${number}MS` | `${number}years` | `${number}year` | `${number}yrs` | `${number}yr` | `${number}y` | `${number}weeks` | `${number}week` | `${number}w` | `${number}days` | `${number}day` | `${number}d` | `${number}hours` | `${number}hour` | `${number}hrs` | `${number}hr` | `${number}h` | `${number}minutes` | `${number}minute` | `${number}mins` | `${number}min` | `${number}m` | `${number}seconds` | `${number}second` | `${number}secs` | `${number}sec` | `${number}milliseconds` | `${number}millisecond` | `${number}msecs` | `${number}msec` | `${number}ms` | `${number} Years` | `${number} Year` | `${number} Yrs` | `${number} Yr` | `${number} Y` | `${number} Weeks` | `${number} Week` | `${number} W` | `${number} Days` | `${number} Day` | `${number} D` | `${number} Hours` | `${number} Hour` | `${number} Hrs` | `${number} Hr` | `${number} H` | `${number} Minutes` | `${number} Minute` | `${number} Mins` | `${number} Min` | `${number} M` | `${number} Seconds` | `${number} Second` | `${number} Secs` | `${number} Sec` | `${number} s` | `${number} Milliseconds` | `${number} Millisecond` | `${number} Msecs` | `${number} Msec` | `${number} Ms` | `${number} YEARS` | `${number} YEAR` | `${number} YRS` | `${number} YR` | `${number} WEEKS` | `${number} WEEK` | `${number} DAYS` | `${number} DAY` | `${number} HOURS` | `${number} HOUR` | `${number} HRS` | `${number} HR` | `${number} MINUTES` | `${number} MINUTE` | `${number} MINS` | `${number} MIN` | `${number} SECONDS` | `${number} SECOND` | `${number} SECS` | `${number} SEC` | `${number} S` | `${number} MILLISECONDS` | `${number} MILLISECOND` | `${number} MSECS` | `${number} MSEC` | `${number} MS` | `${number} years` | `${number} year` | `${number} yrs` | `${number} yr` | `${number} y` | `${number} weeks` | `${number} week` | `${number} w` | `${number} days` | `${number} day` | `${number} d` | `${number} hours` | `${number} hour` | `${number} hrs` | `${number} hr` | `${number} h` | `${number} minutes` | `${number} minute` | `${number} mins` | `${number} min` | `${number} m` | `${number} seconds` | `${number} second` | `${number} secs` | `${number} sec` | `${number} milliseconds` | `${number} millisecond` | `${number} msecs` | `${number} msec` | `${number} ms`;
+    algorithm: "RS256";
+}, {
+    IDP_OWOX_JWT_ISSUER: string;
+    IDP_OWOX_JWT_CLOCK_TOLERANCE?: string | undefined;
+    IDP_OWOX_JWT_CACHE_TTL?: string | undefined;
+    IDP_OWOX_JWT_ALGORITHM?: "RS256" | undefined;
+}>;
+export type DbConfig = z.infer<typeof DbEnvSchema>;
+export type SqliteConfig = Extract<DbConfig, {
+    type: 'sqlite';
+}>['sqlite'];
+export type MysqlConfig = Extract<DbConfig, {
+    type: 'mysql';
+}>['mysql'];
+export type IdentityOwoxClientConfig = z.infer<typeof IdentityOwoxClientEnvSchema>;
+export type IdpConfig = z.infer<typeof IdpEnvSchema>;
+export type JwtConfig = z.infer<typeof JwtEnvSchema>;
+export type IdpOwoxConfig = {
+    idpConfig: IdpConfig;
+    identityOwoxClientConfig: IdentityOwoxClientConfig;
+    jwtConfig: JwtConfig;
+    dbConfig: DbConfig;
+};
+/**
+ * Load the full IdpOwoxConfig from process env.
+ * Throws on validation errors; ensures JWT_ALGORITHM is RS256.
+ */
+export declare function loadIdpOwoxConfigFromEnv(env?: NodeJS.ProcessEnv): IdpOwoxConfig;
+export {};
+//# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,MAAM,IAAI,CAAC;AAmEpB,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA6CtB,CAAC;AAEH,wBAAgB,mBAAmB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB;;;;;;;;;;;;;;;;;;;;;EAGvE;AAED,gDAAgD;AAEhD,QAAA,MAAM,2BAA2B;;;;;;;;;;;;;;;mBAaoB,EAAE,CAAC,WAAW;;;;;EAE/D,CAAC;AAEL,sDAAsD;AAEtD,QAAA,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;EAYb,CAAC;AAEN,uCAAuC;AAEvC,QAAA,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;EAYb,CAAC;AAEN,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AACnD,MAAM,MAAM,YAAY,GAAG,OAAO,CAAC,QAAQ,EAAE;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE,CAAC,CAAC,QAAQ,CAAC,CAAC;AAC3E,MAAM,MAAM,WAAW,GAAG,OAAO,CAAC,QAAQ,EAAE;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,CAAC,CAAC,OAAO,CAAC,CAAC;AAExE,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AACnF,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AACrD,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAErD,MAAM,MAAM,aAAa,GAAG;IAC1B,SAAS,EAAE,SAAS,CAAC;IACrB,wBAAwB,EAAE,wBAAwB,CAAC;IACnD,SAAS,EAAE,SAAS,CAAC;IACrB,QAAQ,EAAE,QAAQ,CAAC;CACpB,CAAC;AAEF;;;GAGG;AACH,wBAAgB,wBAAwB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,aAAa,CAgB5F"}

package/dist/config.js

@@ -0,0 +1,174 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DbEnvSchema = void 0;
+exports.loadDbConfigFromEnv = loadDbConfigFromEnv;
+exports.loadIdpOwoxConfigFromEnv = loadIdpOwoxConfigFromEnv;
+const zod_1 = require("zod");
+const ms_1 = __importDefault(require("ms"));
+const env_paths_1 = __importDefault(require("env-paths"));
+const path_1 = require("path");
+const fs_1 = require("fs");
+const zMsString = zod_1.z
+    .string()
+    .refine((s) => (0, ms_1.default)(s) !== undefined, {
+    message: 'Invalid duration string',
+})
+    .transform(s => s);
+const parseCommaString = zod_1.z.string().transform(s => s
+    .split(',')
+    .map(x => x.trim())
+    .filter(Boolean));
+function normalizeSsl(input) {
+    if (input == null || input === false)
+        return undefined;
+    if (input === true)
+        return {};
+    if (typeof input === 'string')
+        return input;
+    return undefined;
+}
+function getSqliteDefaultDbPath() {
+    const paths = (0, env_paths_1.default)('owox', { suffix: '' });
+    const dbPath = (0, path_1.join)(paths.data, 'sqlite', 'idp-owox.db');
+    const dbDir = (0, path_1.dirname)(dbPath);
+    if (!(0, fs_1.existsSync)(dbDir)) {
+        try {
+            (0, fs_1.mkdirSync)(dbDir, { recursive: true });
+        }
+        catch (error) {
+            throw new Error(`Failed to create SQLite database directory: ${dbDir}. ${error instanceof Error ? error.message : error}`);
+        }
+    }
+    return dbPath;
+}
+/** ---------- DB env (discriminated by IDP_OWOX_DB_TYPE) ---------- */
+const SqliteEnvRaw = zod_1.z.object({
+    IDP_OWOX_DB_TYPE: zod_1.z.literal('sqlite'),
+    IDP_OWOX_SQLITE_DB_PATH: zod_1.z.string().optional(),
+    IDP_OWOX_SQLITE_PRAGMA: zod_1.z.string().optional(),
+});
+const MysqlEnvRaw = zod_1.z.object({
+    IDP_OWOX_DB_TYPE: zod_1.z.literal('mysql'),
+    IDP_OWOX_MYSQL_HOST: zod_1.z.string().min(1, 'IDP_OWOX_MYSQL_HOST is required'),
+    IDP_OWOX_MYSQL_USER: zod_1.z.string().min(1, 'IDP_OWOX_MYSQL_USER is required'),
+    IDP_OWOX_MYSQL_PASSWORD: zod_1.z.string().min(1, 'IDP_OWOX_MYSQL_PASSWORD is required'),
+    IDP_OWOX_MYSQL_DB: zod_1.z.string().min(1, 'IDP_OWOX_MYSQL_DB is required'),
+    IDP_OWOX_MYSQL_PORT: zod_1.z.string().optional(),
+    IDP_OWOX_MYSQL_CONNECTION_LIMIT: zod_1.z.string().optional(),
+    IDP_OWOX_MYSQL_SSL: zod_1.z.string().optional(),
+});
+const DbEnvRaw = zod_1.z.discriminatedUnion('IDP_OWOX_DB_TYPE', [SqliteEnvRaw, MysqlEnvRaw]);
+exports.DbEnvSchema = DbEnvRaw.transform(e => {
+    if (e.IDP_OWOX_DB_TYPE === 'sqlite') {
+        const dbPath = e.IDP_OWOX_SQLITE_DB_PATH ?? getSqliteDefaultDbPath();
+        console.log(`idp-owox SQLite database path: ${dbPath}`);
+        return {
+            type: 'sqlite',
+            sqlite: {
+                type: 'sqlite',
+                dbPath,
+                pragma: e.IDP_OWOX_SQLITE_PRAGMA
+                    ? parseCommaString.parse(e.IDP_OWOX_SQLITE_PRAGMA)
+                    : undefined,
+            },
+        };
+    }
+    // mysql branch
+    const port = e.IDP_OWOX_MYSQL_PORT ? Number(e.IDP_OWOX_MYSQL_PORT) : undefined;
+    const connectionLimit = e.IDP_OWOX_MYSQL_CONNECTION_LIMIT
+        ? Number(e.IDP_OWOX_MYSQL_CONNECTION_LIMIT)
+        : undefined;
+    let sslRaw = undefined;
+    if (e.IDP_OWOX_MYSQL_SSL) {
+        try {
+            sslRaw = JSON.parse(e.IDP_OWOX_MYSQL_SSL);
+        }
+        catch {
+            sslRaw = e.IDP_OWOX_MYSQL_SSL;
+        }
+    }
+    return {
+        type: 'mysql',
+        mysql: {
+            type: 'mysql',
+            host: e.IDP_OWOX_MYSQL_HOST,
+            port,
+            user: e.IDP_OWOX_MYSQL_USER,
+            password: e.IDP_OWOX_MYSQL_PASSWORD,
+            database: e.IDP_OWOX_MYSQL_DB,
+            connectionLimit,
+            ssl: normalizeSsl(sslRaw),
+        },
+    };
+});
+function loadDbConfigFromEnv(env = process.env) {
+    const IDP_OWOX_DB_TYPE = (env.IDP_OWOX_DB_TYPE ?? 'sqlite').toLowerCase();
+    return exports.DbEnvSchema.parse({ ...env, IDP_OWOX_DB_TYPE });
+}
+/** ---------- IdentityOwox client ---------- */
+const IdentityOwoxClientEnvSchema = zod_1.z
+    .object({
+    IDP_OWOX_BASE_URL: zod_1.z.string().url({ message: 'IDP_OWOX_BASE_URL must be a valid URL' }),
+    IDP_OWOX_DEFAULT_HEADERS: zod_1.z.string().optional(),
+    IDP_OWOX_TIMEOUT: zMsString.optional(),
+})
+    .transform(e => {
+    const defaultHeaders = e.IDP_OWOX_DEFAULT_HEADERS
+        ? JSON.parse(e.IDP_OWOX_DEFAULT_HEADERS)
+        : undefined;
+    return {
+        baseUrl: e.IDP_OWOX_BASE_URL,
+        defaultHeaders,
+        clientTimeout: (e.IDP_OWOX_TIMEOUT ?? '3s'),
+    };
+});
+/** ---------- IDP (frontend/app) config ---------- */
+const IdpEnvSchema = zod_1.z
+    .object({
+    IDP_OWOX_CLIENT_ID: zod_1.z.string().min(1, 'IDP_OWOX_CLIENT_ID is required'),
+    IDP_OWOX_PLATFORM_SIGN_IN_URL: zod_1.z
+        .string()
+        .url({ message: 'IDP_OWOX_PLATFORM_SIGN_IN_URL must be a valid URL' }),
+    IDP_OWOX_CALLBACK_URL: zod_1.z.string().min(1, 'IDP_OWOX_CALLBACK_URL is required'),
+})
+    .transform(e => ({
+    clientId: e.IDP_OWOX_CLIENT_ID,
+    platformSignInUrl: e.IDP_OWOX_PLATFORM_SIGN_IN_URL,
+    callbackUrl: e.IDP_OWOX_CALLBACK_URL,
+}));
+/** ---------- JWT config ---------- */
+const JwtEnvSchema = zod_1.z
+    .object({
+    IDP_OWOX_JWT_CLOCK_TOLERANCE: zod_1.z.string().default('5s'),
+    IDP_OWOX_JWT_ISSUER: zod_1.z.string().min(1, 'IDP_OWOX_JWT_ISSUER is required'),
+    IDP_OWOX_JWT_CACHE_TTL: zMsString.optional(),
+    IDP_OWOX_JWT_ALGORITHM: zod_1.z.enum(['RS256']).default('RS256'),
+})
+    .transform(e => ({
+    clockTolerance: e.IDP_OWOX_JWT_CLOCK_TOLERANCE || '5s',
+    issuer: e.IDP_OWOX_JWT_ISSUER,
+    jwtKeyCacheTtl: e.IDP_OWOX_JWT_CACHE_TTL ?? '1h',
+    algorithm: e.IDP_OWOX_JWT_ALGORITHM,
+}));
+/**
+ * Load the full IdpOwoxConfig from process env.
+ * Throws on validation errors; ensures JWT_ALGORITHM is RS256.
+ */
+function loadIdpOwoxConfigFromEnv(env = process.env) {
+    const dbConfig = loadDbConfigFromEnv(env);
+    const identityOwoxClientConfig = IdentityOwoxClientEnvSchema.parse(env);
+    const idpConfig = IdpEnvSchema.parse(env);
+    const jwtConfig = JwtEnvSchema.parse(env);
+    if (jwtConfig.algorithm !== 'RS256') {
+        throw new Error(`Only RS256 is supported, got: ${jwtConfig.algorithm}`);
+    }
+    return {
+        idpConfig,
+        identityOwoxClientConfig,
+        jwtConfig,
+        dbConfig,
+    };
+}

package/dist/index.d.ts

@@ -0,0 +1,3 @@
+export { OwoxIdp } from './owoxIdp';
+export { loadIdpOwoxConfigFromEnv } from './config';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,wBAAwB,EAAE,MAAM,UAAU,CAAC"}