@owox/idp-protocol 0.5.0 → 0.6.0-next-20250821085233

package/dist/middleware/protocol-middleware.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"protocol-middleware.d.ts","sourceRoot":"","sources":["../../src/middleware/protocol-middleware.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAmC,MAAM,SAAS,CAAC;AAEnE,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAEnD;;GAEG;AACH,oBAAY,aAAa;IACvB,OAAO,aAAa;IACpB,QAAQ,cAAc;IACtB,YAAY,kBAAkB;IAC9B,IAAI,cAAc;CACnB;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE;QACP,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,IAAI,CAAC,EAAE,MAAM,CAAC;KACf,CAAC;CACH;AAQD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,qBAAa,qBAAqB;IAc9B,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAb3B;;OAEG;IACH,SAAgB,iBAAiB,WAAW;IAC5C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgE;IAEvF;;;;OAIG;gBAEgB,QAAQ,EAAE,WAAW,EACtC,OAAO,GAAE,4BAAiC;IAa5C;;;;OAIG;IACH,OAAO,CAAC,iBAAiB;IAOzB;;OAEG;IACH,OAAO,CAAC,qBAAqB;IAe7B;;;;OAIG;IACH,OAAO,CAAC,kBAAkB;IAU1B;;;;;;;;OAQG;IACH,QAAQ,CAAC,GAAG,EAAE,OAAO,GAAG,IAAI;CA8B7B"}
+{"version":3,"file":"protocol-middleware.d.ts","sourceRoot":"","sources":["../../src/middleware/protocol-middleware.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAmC,MAAM,SAAS,CAAC;AAEnE,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAEnD;;GAEG;AACH,oBAAY,aAAa;IACvB,OAAO,aAAa;IACpB,QAAQ,cAAc;IACtB,YAAY,kBAAkB;IAC9B,IAAI,cAAc;CACnB;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE;QACP,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,IAAI,CAAC,EAAE,MAAM,CAAC;KACf,CAAC;CACH;AAQD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,qBAAa,qBAAqB;IAc9B,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAb3B;;OAEG;IACH,SAAgB,iBAAiB,WAAW;IAC5C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgE;IAEvF;;;;OAIG;gBAEgB,QAAQ,EAAE,WAAW,EACtC,OAAO,GAAE,4BAAiC;IAa5C;;;;OAIG;IACH,OAAO,CAAC,iBAAiB;IAOzB;;OAEG;IACH,OAAO,CAAC,qBAAqB;IAe7B;;;;OAIG;IACH,OAAO,CAAC,kBAAkB;IAU1B;;;;;;;;OAQG;IACH,QAAQ,CAAC,GAAG,EAAE,OAAO,GAAG,IAAI;CAgC7B"}

package/dist/middleware/protocol-middleware.js

@@ -129,5 +129,6 @@ export class IdpProtocolMiddleware {
             const fullPath = `${this.basePath}${path}`;
             app.all(fullPath, this.createRouteHandler(handler));
         });
+        this.provider.registerRoutes(app);
     }
 }

package/dist/providers/null-provider.d.ts

@@ -1,6 +1,6 @@
 import { IdpProvider } from '../types/provider.js';
 import { AuthResult, Payload } from '../types/models.js';
-import { Request, Response, NextFunction } from 'express';
+import { Express, Request, Response, NextFunction } from 'express';
 /**
  * NULL IDP Provider - single user, single project
  * Used for deployments without user management and development
@@ -11,10 +11,11 @@ export declare class NullIdpProvider implements IdpProvider {
     private defaultRefreshToken;
     constructor();
     refreshToken(_refreshToken: string): Promise<AuthResult>;
-    signInMiddleware(_req: Request, res: Response, _next: NextFunction): Promise<void>;
+    signInMiddleware(req: Request, res: Response, _next: NextFunction): Promise<void>;
     signOutMiddleware(_req: Request, res: Response, _next: NextFunction): Promise<void>;
-    accessTokenMiddleware(_req: Request, res: Response, _next: NextFunction): Promise<Response>;
-    userApiMiddleware(_req: Request, res: Response, _next: NextFunction): Promise<Response<Payload>>;
+    accessTokenMiddleware(req: Request, res: Response, _next: NextFunction): Promise<Response>;
+    userApiMiddleware(req: Request, res: Response, _next: NextFunction): Promise<Response<Payload>>;
+    registerRoutes(_app: Express): void;
     initialize(): Promise<void>;
     shutdown(): Promise<void>;
     introspectToken(_token: string): Promise<Payload | null>;

package/dist/providers/null-provider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"null-provider.d.ts","sourceRoot":"","sources":["../../src/providers/null-provider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAE1D;;;GAGG;AACH,qBAAa,eAAgB,YAAW,WAAW;IACjD,OAAO,CAAC,cAAc,CAAU;IAChC,OAAO,CAAC,kBAAkB,CAAS;IACnC,OAAO,CAAC,mBAAmB,CAAS;;IAc9B,YAAY,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAM9D,gBAAgB,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC;IAYlF,iBAAiB,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC;IAKnF,qBAAqB,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC;IAO3F,iBAAiB,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAO1F,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAI3B,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAIzB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;IAIxD,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;IAInD,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAGjD"}
+{"version":3,"file":"null-provider.d.ts","sourceRoot":"","sources":["../../src/providers/null-provider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEnE;;;GAGG;AACH,qBAAa,eAAgB,YAAW,WAAW;IACjD,OAAO,CAAC,cAAc,CAAU;IAChC,OAAO,CAAC,kBAAkB,CAAS;IACnC,OAAO,CAAC,mBAAmB,CAAS;;IAc9B,YAAY,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAM9D,gBAAgB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC;IAYjF,iBAAiB,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC;IAKnF,qBAAqB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC;IAO1F,iBAAiB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAO/F,cAAc,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI;IAI7B,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAI3B,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAIzB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;IAIxD,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;IAInD,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAGjD"}

package/dist/providers/null-provider.js

@@ -22,8 +22,8 @@ export class NullIdpProvider {
             accessToken: this.defaultAccessToken,
         };
     }
-    signInMiddleware(_req, res, _next) {
-        const isLocalhost = _req.hostname === 'localhost' || _req.hostname === '127.0.0.1';
+    signInMiddleware(req, res, _next) {
+        const isLocalhost = req.hostname === 'localhost' || req.hostname === '127.0.0.1';
         res.cookie('refreshToken', this.defaultRefreshToken, {
             httpOnly: true,
             secure: !isLocalhost,
@@ -36,18 +36,21 @@ export class NullIdpProvider {
         res.clearCookie('refreshToken');
         return Promise.resolve(res.redirect('/'));
     }
-    accessTokenMiddleware(_req, res, _next) {
-        if (!_req.cookies.refreshToken) {
+    accessTokenMiddleware(req, res, _next) {
+        if (!req.cookies.refreshToken) {
             return Promise.resolve(res.status(401).json({ message: 'Unauthorized' }));
         }
         return Promise.resolve(res.json({ accessToken: this.defaultAccessToken }));
     }
-    userApiMiddleware(_req, res, _next) {
-        if (!_req.cookies.refreshToken) {
+    userApiMiddleware(req, res, _next) {
+        if (!req.cookies.refreshToken) {
             return Promise.resolve(res.status(401).json({ message: 'Unauthorized' }));
         }
         return Promise.resolve(res.json(this.defaultPayload));
     }
+    registerRoutes(_app) {
+        // Nothing to register
+    }
     async initialize() {
         // Nothing to initialize
     }

package/dist/types/provider.d.ts

@@ -1,5 +1,5 @@
 import { Payload, AuthResult } from './models.js';
-import { NextFunction, Request, Response } from 'express';
+import { Express, NextFunction, Request, Response } from 'express';
 /**
  * Simplified IDP Provider interface.
  */
@@ -28,6 +28,12 @@ export interface IdpProvider {
      * If the IDP implementation does not support user, this method should call the `next()` function.
      */
     userApiMiddleware(req: Request, res: Response, next: NextFunction): Promise<Response<Payload>>;
+    /**
+     * Register routes with the express app.
+     * @param app - The express app to register the routes with.
+     * @param basePath - The base path to register the routes with.
+     */
+    registerRoutes(app: Express): void;
     /**
      * Introspect a token
      * @param token - The token to introspect

package/dist/types/provider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"provider.d.ts","sourceRoot":"","sources":["../../src/types/provider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAE1D;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B;;;;OAIG;IACH,gBAAgB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,GAAG,QAAQ,CAAC,CAAC;IAE5F;;;;OAIG;IACH,iBAAiB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,GAAG,QAAQ,CAAC,CAAC;IAE7F;;;;OAIG;IACH,qBAAqB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,GAAG,QAAQ,CAAC,CAAC;IAEjG;;;;OAIG;IACH,iBAAiB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IAE/F;;;;OAIG;IACH,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IAExD;;;;OAIG;IACH,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IAEnD;;;;OAIG;IACH,YAAY,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAExD;;;OAGG;IACH,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE1C;;OAEG;IACH,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAE5B;;OAEG;IACH,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3B"}
+{"version":3,"file":"provider.d.ts","sourceRoot":"","sources":["../../src/types/provider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAEnE;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B;;;;OAIG;IACH,gBAAgB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,GAAG,QAAQ,CAAC,CAAC;IAE5F;;;;OAIG;IACH,iBAAiB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,GAAG,QAAQ,CAAC,CAAC;IAE7F;;;;OAIG;IACH,qBAAqB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,GAAG,QAAQ,CAAC,CAAC;IAEjG;;;;OAIG;IACH,iBAAiB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IAE/F;;;;OAIG;IACH,cAAc,CAAC,GAAG,EAAE,OAAO,GAAG,IAAI,CAAC;IAEnC;;;;OAIG;IACH,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IAExD;;;;OAIG;IACH,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IAEnD;;;;OAIG;IACH,YAAY,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAExD;;;OAGG;IACH,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE1C;;OAEG;IACH,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAE5B;;OAEG;IACH,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3B"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@owox/idp-protocol",
-  "version": "0.5.0",
+  "version": "0.6.0-next-20250821085233",
   "type": "module",
   "author": "OWOX",
   "license": "ELv2",
@@ -41,8 +41,7 @@
     "typescript": "^5.7.3"
   },
   "files": [
-    "dist",
-    "src"
+    "dist"
   ],
   "exports": {
     ".": {

package/src/index.ts

@@ -1,8 +0,0 @@
-// Core types and interfaces
-export * from './types/index.js';
-
-// Provider implementations (only NULL provider)
-export * from './providers/index.js';
-
-// Middleware
-export * from './middleware/index.js';

package/src/middleware/index.ts

@@ -1 +0,0 @@
-export * from './protocol-middleware.js';

package/src/middleware/protocol-middleware.ts

@@ -1,181 +0,0 @@
-import cookieParser from 'cookie-parser';
-import { Express, Request, Response, NextFunction } from 'express';
-
-import { IdpProvider } from '../types/provider.js';
-
-/**
- * The routes that are supported by the protocol middleware.
- */
-export enum ProtocolRoute {
-  SIGN_IN = '/sign-in',
-  SIGN_OUT = '/sign-out',
-  ACCESS_TOKEN = '/access-token',
-  USER = '/api/user',
-}
-
-/**
- * The options for the protocol middleware.
- * @property basePath - The base path for the protoc    ol middleware.
- * @property routes - The routes that are supported by the protocol middleware.
- * @example
- * {
- *   basePath: '/',
- *   routes: {
- *     signIn: '/signin', // override the default sign in route
- *     signOut: '/signout', // override the default sign out route
- *     accessToken: '/accesstoken', // override the default access token route
- *     user: '/api/userinfo', // override the default user route
- *   },
- * }
- */
-export interface IdpProtocolMiddlewareOptions {
-  basePath?: string;
-  routes?: {
-    signIn?: string;
-    signOut?: string;
-    accessToken?: string;
-    user?: string;
-  };
-}
-
-type MiddlewareHandler = (
-  req: Request,
-  res: Response,
-  next: NextFunction
-) => Promise<void | Response>;
-
-/**
- * The protocol middleware for the IDP.
- * @param provider - The provider to use for the middleware.
- * @param options - The options for the middleware.
- * @example // Register the middleware with the default routes
- * const idpProtocolMiddleware = new IdpProtocolMiddleware(provider);
- * idpProtocolMiddleware.register(app);
- *
- * @example // Override the default routes
- * const app = express();
- * const middlewareOptions: IdpProtocolMiddlewareOptions = {
- *   basePath: '/',
- *   routes: {
- *     signIn: '/signin',
- *     signOut: '/signout',
- *     accessToken: '/accesstoken',
- *     user: '/api/userinfo',
- *   }
- * };
- * const idpProtocolMiddleware = new IdpProtocolMiddleware(provider, middlewareOptions);
- * idpProtocolMiddleware.register(app);
- */
-export class IdpProtocolMiddleware {
-  /**
-   * The default base path for the protocol middleware.
-   */
-  public readonly DEFAULT_BASE_PATH = '/auth';
-  private readonly basePath: string;
-  private readonly routes: Required<NonNullable<IdpProtocolMiddlewareOptions['routes']>>;
-
-  /**
-   * The constructor for the protocol middleware.
-   * @param provider - The provider to use for the middleware.
-   * @param options - The options for the middleware.
-   */
-  constructor(
-    private readonly provider: IdpProvider,
-    options: IdpProtocolMiddlewareOptions = {}
-  ) {
-    this.basePath = this.normalizeBasePath(options.basePath ?? this.DEFAULT_BASE_PATH);
-    this.routes = {
-      signIn: options.routes?.signIn ?? ProtocolRoute.SIGN_IN,
-      signOut: options.routes?.signOut ?? ProtocolRoute.SIGN_OUT,
-      accessToken: options.routes?.accessToken ?? ProtocolRoute.ACCESS_TOKEN,
-      user: options.routes?.user ?? ProtocolRoute.USER,
-    };
-
-    this.validateConfiguration();
-  }
-
-  /**
-   * Normalize the base path.
-   * @param path - The path to normalize.
-   * @returns The normalized path.
-   */
-  private normalizeBasePath(path: string): string {
-    if (!path.startsWith('/')) {
-      throw new Error(`Base path must start with '/': ${path}`);
-    }
-    return path.endsWith('/') && path !== '/' ? path.slice(0, -1) : path;
-  }
-
-  /**
-   * Validate the configuration.
-   */
-  private validateConfiguration(): void {
-    const routePaths = Object.values(this.routes);
-    const duplicates = routePaths.filter((path, index) => routePaths.indexOf(path) !== index);
-
-    if (duplicates.length > 0) {
-      throw new Error(`Duplicate route paths detected: ${duplicates.join(', ')}`);
-    }
-
-    routePaths.forEach(path => {
-      if (!path.startsWith('/')) {
-        throw new Error(`Route path must start with '/': ${path}`);
-      }
-    });
-  }
-
-  /**
-   * Create a route handler.
-   * @param handler - The handler to create.
-   * @returns The created handler.
-   */
-  private createRouteHandler(handler: MiddlewareHandler): MiddlewareHandler {
-    return async (req: Request, res: Response, next: NextFunction) => {
-      try {
-        await handler(req, res, next);
-      } catch (error) {
-        next(error);
-      }
-    };
-  }
-
-  /**
-   * Register the protocol middleware routes with the express app.
-   * @param app - The express app to register the routes with.
-   * @example
-   * const app = express();
-   * const idpProtocolMiddleware = new IdpProtocolMiddleware(provider);
-   * idpProtocolMiddleware.register(app);
-   * app.listen(3000);
-   */
-  register(app: Express): void {
-    app.use(cookieParser());
-    const routeConfigs = [
-      {
-        path: this.routes.signIn,
-        handler: (req: Request, res: Response, next: NextFunction) =>
-          this.provider.signInMiddleware(req, res, next),
-      },
-      {
-        path: this.routes.signOut,
-        handler: (req: Request, res: Response, next: NextFunction) =>
-          this.provider.signOutMiddleware(req, res, next),
-      },
-      {
-        path: this.routes.accessToken,
-        handler: (req: Request, res: Response, next: NextFunction) =>
-          this.provider.accessTokenMiddleware(req, res, next),
-      },
-      {
-        path: this.routes.user,
-        handler: (req: Request, res: Response, next: NextFunction) =>
-          this.provider.userApiMiddleware(req, res, next),
-      },
-    ];
-
-    routeConfigs.forEach(({ path, handler }) => {
-      const fullPath = `${this.basePath}${path}`;
-      app.all(fullPath, this.createRouteHandler(handler));
-    });
-  }
-}

package/src/providers/index.ts

@@ -1 +0,0 @@
-export { NullIdpProvider } from './null-provider.js';

package/src/providers/null-provider.ts

@@ -1,82 +0,0 @@
-import { IdpProvider } from '../types/provider.js';
-import { AuthResult, Payload } from '../types/models.js';
-import { Request, Response, NextFunction } from 'express';
-
-/**
- * NULL IDP Provider - single user, single project
- * Used for deployments without user management and development
- */
-export class NullIdpProvider implements IdpProvider {
-  private defaultPayload: Payload;
-  private defaultAccessToken: string;
-  private defaultRefreshToken: string;
-
-  constructor() {
-    this.defaultPayload = {
-      userId: '0',
-      email: 'admin@localhost',
-      roles: ['admin'],
-      fullName: 'Admin',
-      projectId: '0',
-    };
-    this.defaultAccessToken = 'accessToken';
-    this.defaultRefreshToken = 'refreshToken';
-  }
-
-  async refreshToken(_refreshToken: string): Promise<AuthResult> {
-    return {
-      accessToken: this.defaultAccessToken,
-    };
-  }
-
-  signInMiddleware(_req: Request, res: Response, _next: NextFunction): Promise<void> {
-    const isLocalhost = _req.hostname === 'localhost' || _req.hostname === '127.0.0.1';
-
-    res.cookie('refreshToken', this.defaultRefreshToken, {
-      httpOnly: true,
-      secure: !isLocalhost,
-      sameSite: 'lax',
-      maxAge: 3600000,
-    });
-    return Promise.resolve(res.redirect('/'));
-  }
-
-  signOutMiddleware(_req: Request, res: Response, _next: NextFunction): Promise<void> {
-    res.clearCookie('refreshToken');
-    return Promise.resolve(res.redirect('/'));
-  }
-
-  accessTokenMiddleware(_req: Request, res: Response, _next: NextFunction): Promise<Response> {
-    if (!_req.cookies.refreshToken) {
-      return Promise.resolve(res.status(401).json({ message: 'Unauthorized' }));
-    }
-    return Promise.resolve(res.json({ accessToken: this.defaultAccessToken }));
-  }
-
-  userApiMiddleware(_req: Request, res: Response, _next: NextFunction): Promise<Response<Payload>> {
-    if (!_req.cookies.refreshToken) {
-      return Promise.resolve(res.status(401).json({ message: 'Unauthorized' }));
-    }
-    return Promise.resolve(res.json(this.defaultPayload));
-  }
-
-  async initialize(): Promise<void> {
-    // Nothing to initialize
-  }
-
-  async shutdown(): Promise<void> {
-    // Nothing to cleanup
-  }
-
-  async introspectToken(_token: string): Promise<Payload | null> {
-    return this.defaultPayload;
-  }
-
-  async parseToken(_token: string): Promise<Payload | null> {
-    return this.defaultPayload;
-  }
-
-  async revokeToken(_token: string): Promise<void> {
-    // No-op for NULL provider
-  }
-}

package/src/types/cli.ts

@@ -1,30 +0,0 @@
-import { Payload } from './models.js';
-
-/**
- * Commands for adding a user to the IDP by app cli.
- */
-export interface IdpProviderAddUserCommand {
-  addUser(username: string, password?: string): Promise<AddUserCommandResponse>;
-}
-
-/**
- * Commands for listing users from the IDP
- */
-export interface IdpProviderListUsersCommand {
-  listUsers(): Promise<Payload[]>;
-}
-
-/**
- * Commands for removing a user from the IDP
- */
-export interface IdpProviderRemoveUserCommand {
-  removeUser(userId: string): Promise<void>;
-}
-
-/**
- * Response for adding a user to the IDP
- */
-export interface AddUserCommandResponse {
-  username: string;
-  magicLink?: string;
-}

package/src/types/config.ts

@@ -1,14 +0,0 @@
-/**
- * Configuration for the IDP provider
- */
-export interface IdpConfig {
-  /**
-   * Base URL for the IDP provider
-   */
-  baseUrl: string;
-
-  /**
-   * Additional provider-specific configuration
-   */
-  [key: string]: unknown;
-}

package/src/types/errors.ts

@@ -1,49 +0,0 @@
-/**
- * Base error class for the IDP protocol
- */
-export class IdpError extends Error {
-  constructor(
-    message: string,
-    public code: string,
-    public statusCode: number = 400
-  ) {
-    super(message);
-    this.name = 'IdpError';
-  }
-}
-
-/**
- * Authentication error
- */
-export class AuthenticationError extends IdpError {
-  constructor(message: string = 'Authentication failed') {
-    super(message, 'AUTHENTICATION_ERROR', 401);
-  }
-}
-
-/**
- * Authorization error
- */
-export class AuthorizationError extends IdpError {
-  constructor(message: string = 'Insufficient permissions') {
-    super(message, 'AUTHORIZATION_ERROR', 403);
-  }
-}
-
-/**
- * Token expired error
- */
-export class TokenExpiredError extends IdpError {
-  constructor(message: string = 'Token has expired') {
-    super(message, 'TOKEN_EXPIRED', 401);
-  }
-}
-
-/**
- * Invalid token error
- */
-export class InvalidTokenError extends IdpError {
-  constructor(message: string = 'Invalid token') {
-    super(message, 'INVALID_TOKEN', 401);
-  }
-}

package/src/types/index.ts

@@ -1,18 +0,0 @@
-/**
- * Main types export - organized by category
- */
-
-// Core provider interface
-export * from './provider.js';
-
-// Domain models
-export * from './models.js';
-
-// Configuration
-export * from './config.js';
-
-// Error classes
-export * from './errors.js';
-
-// CLI commands
-export * from './cli.js';

package/src/types/models.ts

@@ -1,28 +0,0 @@
-/**
- * The roles that are supported by the IDP.
- */
-export type Role = 'admin' | 'editor' | 'viewer';
-
-/**
- * Standardized token payload that all IDP implementations must return when introspecting their native tokens.
- */
-export interface Payload {
-  userId: string;
-  projectId: string;
-
-  email?: string;
-  fullName?: string;
-  avatar?: string;
-
-  roles?: Role[];
-
-  projectTitle?: string;
-}
-
-/**
- * Authentication result from IDP callback
- */
-export interface AuthResult {
-  accessToken: string;
-  refreshToken?: string;
-}

package/src/types/provider.ts

@@ -1,72 +0,0 @@
-import { Payload, AuthResult } from './models.js';
-import { NextFunction, Request, Response } from 'express';
-
-/**
- * Simplified IDP Provider interface.
- */
-export interface IdpProvider {
-  /**
-   * Sign in middleware. This method is used to handle the sign in request and use response to send the sign in response.
-   * <br/>
-   * If the IDP implementation does not support sign in, this method should call the `next()` function.
-   */
-  signInMiddleware(req: Request, res: Response, next: NextFunction): Promise<void | Response>;
-
-  /**
-   * Sign out middleware. This method is used to handle the sign out request and use response to send the sign out response.
-   * <br/>
-   * If the IDP implementation does not support sign out, this method should call the `next()` function.
-   */
-  signOutMiddleware(req: Request, res: Response, next: NextFunction): Promise<void | Response>;
-
-  /**
-   * Access token middleware. This method is used to handle the access token request and use response to send the access token response.
-   * <br/>
-   * If the IDP implementation does not support access token, this method should call the `next()` function.
-   */
-  accessTokenMiddleware(req: Request, res: Response, next: NextFunction): Promise<void | Response>;
-
-  /**
-   * User api middleware. This method is used to handle the user request and use response to send the user response.
-   * <br/>
-   * If the IDP implementation does not support user, this method should call the `next()` function.
-   */
-  userApiMiddleware(req: Request, res: Response, next: NextFunction): Promise<Response<Payload>>;
-
-  /**
-   * Introspect a token
-   * @param token - The token to introspect
-   * @returns The token payload
-   */
-  introspectToken(token: string): Promise<Payload | null>;
-
-  /**
-   * Parse a token
-   * @param token - The token to parse
-   * @returns The token payload
-   */
-  parseToken(token: string): Promise<Payload | null>;
-
-  /**
-   * Refresh a token
-   * @param refreshToken - The refresh token to use for the refresh
-   * @returns The authentication result
-   */
-  refreshToken(refreshToken: string): Promise<AuthResult>;
-
-  /**
-   * Revoke a token. In different IDP implementations, this may have different token types.
-   * @param token - The token to revoke
-   */
-  revokeToken(token: string): Promise<void>;
-
-  /**
-   * Initialize the IDP. Create resources, connect to databases, etc.
-   */
-  initialize(): Promise<void>;
-
-  /**
-   * Shutdown the IDP, close all connections and release resources
-   */
-  shutdown(): Promise<void>;
-}