@rapidrest/auth 1.0.0-beta.1

package/dist/lib/auth/PasskeyStrategy.js

@@ -0,0 +1,185 @@
+import { generatePasskeyChallenge, isPasskeyResponse, verifyPasskeyChallenge } from "./shared.js";
+/**
+ * Describes the configuration options that can be used to initialize PasskeyStrategy.
+ *
+ * @author Jean-Philippe Steinmetz
+ */
+export class PasskeyStrategyOptions {
+    constructor(config) {
+        this.config = config;
+    }
+    /**
+     * Retrieves a previously-registered credential by its ID. Returns `undefined` if no credential
+     * with that ID is known.
+     * NOTE: You must override this function when using this strategy.
+     */
+    async getCredentialById(credentialId) {
+        throw new Error("Did you forget to override PasskeyStrategyOptions.getCredentialById?");
+    }
+    /**
+     * Retrieves all credentials registered for the given user. Used to build the `allowCredentials`
+     * list when a login ceremony is started with a known user hint.
+     * NOTE: You must override this function when using this strategy.
+     * @param id The unique identifier of the user or alias.
+     */
+    async getCredentials(id) {
+        throw new Error("Did you forget to override PasskeyStrategyOptions.getCredentials?");
+    }
+    /**
+     * Persists the updated signature counter for the given credential after a successful
+     * authentication. Must be called on every successful login to guard against cloned authenticators.
+     * NOTE: You must override this function when using this strategy.
+     */
+    async updateCredentialCounter(credentialId, newCounter) {
+        throw new Error("Did you forget to override PasskeyStrategyOptions.updateCredentialCounter?");
+    }
+    /**
+     * Retrieves the user data for the given unique identifier after authentication has completed successfully.
+     * NOTE: You must override this function when using this strategy.
+     * @param id The unique identifier of the user that has been successfully authenticated.
+     */
+    getUser(uid) {
+        throw new Error("Did you forget to override PasskeyStrategyOptions.getUser?");
+    }
+}
+/**
+ * Implements an authentication strategy for performing WebAuthn/Passkey (FIDO2) login.
+ *
+ * The login flow has two phases:
+ *
+ * 1. Challenge - The client requests a challenge. A random challenge is generated and stored in the
+ * session, and the resulting options are returned for use with
+ * `navigator.credentials.get()`.
+ * 2. Verify - The client submits the signed assertion response. The response is verified against the
+ * stored challenge and the credential's public key, the credential's signature counter is updated,
+ * and the associated user is resolved via `verify()`.
+ *
+ * NOTE: Requires session support!
+ *
+ * @author Jean-Philippe Steinmetz <rapidrests@gmail.com>
+ */
+export class PasskeyStrategy {
+    constructor(options) {
+        this.name = "passkey";
+        this.options = options;
+    }
+    async authenticate(req, res, required) {
+        if (req.body?.id || req.body?.response) {
+            return await this.verify(req, required);
+        }
+        else {
+            return await this.challenge(req, res);
+        }
+    }
+    authenticateSync(req, res, required) {
+        throw new Error("Not supported. This auth strategy must be used asynchronously.");
+    }
+    /**
+     * Begins a login ceremony: generates a challenge, stores it in the session, and writes the
+     * resulting options directly to the response for the client to pass to `navigator.credentials.get()`.
+     *
+     * @param req The source HTTP request. May optionally carry a `uid` query parameter to scope the
+     * allowed credentials to a known user; omitted entirely for a discoverable/"usernameless" flow.
+     * @param res The response to write the generated options to.
+     */
+    async challenge(req, res) {
+        if (!req.session) {
+            throw new Error("PasskeyStrategy requires session support. Configure the `session` config block so the " +
+                "session middleware is registered.");
+        }
+        if (!res) {
+            throw new Error("PasskeyStrategy requires a response object to begin a ceremony.");
+        }
+        // If a uid hint is given, scope allowCredentials to that user's registered credentials. If
+        // the hint resolves to zero credentials, allowCredentials is left undefined (same as the
+        // no-hint case) rather than sent as an empty list. Otherwise the response shape would leak
+        // whether a given uid has any passkeys registered, a user-enumeration side channel.
+        // NOTE: scoping allowCredentials to a uid hint necessarily discloses to an unauthenticated
+        // caller whether the given uid has any registered passkeys (and their credential IDs/
+        // transports). The same trade-off inherent to any "enter your username first" login flow.
+        // Only the zero-credential case is equalized with the no-hint case below (both leave
+        // allowCredentials undefined), so a nonexistent/passkey-less account can't be trivially
+        // distinguished from one with zero credentials; an account that DOES have credentials
+        // remains distinguishable from one that doesn't by design. Callers that need to avoid this
+        // entirely (e.g. a public-facing login form) should not wire a client-suppliable uid hint
+        // through to this endpoint at all — rely purely on the discoverable/"usernameless" flow by
+        // omitting the hint, and consider rate-limiting this endpoint regardless.
+        const uidHint = req.query?.uid;
+        let allowCredentials = undefined;
+        if (uidHint) {
+            const credentials = await this.options.getCredentials(uidHint);
+            if (credentials.length > 0) {
+                allowCredentials = credentials.map((c) => ({ id: c.id, transports: c.transports }));
+            }
+        }
+        const result = await generatePasskeyChallenge(this.options.config, req, allowCredentials);
+        res.status(200);
+        res.json(result);
+        return undefined;
+    }
+    /**
+     * Finishes a login ceremony: verifies the client-submitted assertion response against the
+     * stored challenge and credential, updates the credential's signature counter, and resolves the
+     * associated user.
+     *
+     * @param req The source HTTP request, carrying the assertion response in its body.
+     * @param required Set to `true` if authentication is required to pass, otherwise set to `false`.
+     */
+    async verify(req, required) {
+        if (!req.session) {
+            throw new Error("PasskeyStrategy requires session support. Configure the `session` config block so the " +
+                "session middleware is registered.");
+        }
+        if (!req.session.challenge) {
+            throw new Error("No passkey ceremony in progress for this session.");
+        }
+        // The challenge is single-use regardless of outcome — cleared as soon as it's read, before
+        // verification is even attempted, rather than only on the success path.
+        const expectedChallenge = req.session.challenge;
+        delete req.session.challenge;
+        // Strict shape validation before touching storage or SimpleWebAuthn — a malformed finish
+        // attempt should fail with a clean, actionable error rather than crashing deep inside the
+        // verification library with a confusing low-level error. This alone doesn't reveal whether
+        // any particular account/credential exists, so it's kept distinct from the generic failure
+        // message below.
+        if (!isPasskeyResponse(req.body)) {
+            throw new Error("Malformed passkey authentication response.");
+        }
+        // Every failure from here on is reported with the same generic message, regardless of
+        // whether the credential ID is unknown, the signature failed to verify, the counter
+        // regressed, or the resolved user was rejected by verify() — distinguishing between these
+        // would let a caller enumerate which credential IDs/accounts are registered on this server.
+        const genericFailure = () => new Error("Passkey authentication failed.");
+        const credential = await this.options.getCredentialById(req.body.id);
+        if (!credential) {
+            throw genericFailure();
+        }
+        const result = await verifyPasskeyChallenge(credential, this.options.config, expectedChallenge, req.body);
+        if (!result.verified) {
+            throw genericFailure();
+        }
+        // Counter regression check. SimpleWebAuthn deliberately does not enforce counter monotonicity
+        // itself (many multi-device/backed-up passkeys always report 0 and would otherwise be
+        // permanently locked out) — a non-zero counter that fails to exceed the stored value is the
+        // signal of a cloned authenticator per the WebAuthn spec's guidance.
+        const newCounter = result.authenticationInfo.newCounter;
+        if (newCounter !== 0 && newCounter <= credential.counter) {
+            throw genericFailure();
+        }
+        await this.options.updateCredentialCounter(credential.id, newCounter);
+        const user = await this.options.getUser(credential.uid);
+        if (user) {
+            return {
+                data: req.body,
+                method: this.name,
+                payload: result.authenticationInfo,
+                user,
+            };
+        }
+        if (required) {
+            throw genericFailure();
+        }
+        return undefined;
+    }
+}
+//# sourceMappingURL=PasskeyStrategy.js.map

package/dist/lib/auth/PasskeyStrategy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PasskeyStrategy.js","sourceRoot":"","sources":["../../../src/auth/PasskeyStrategy.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,wBAAwB,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAElG;;;;GAIG;AACH,MAAM,OAAO,sBAAsB;IAM/B,YAAY,MAAqB;QAC7B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACzB,CAAC;IAED;;;;OAIG;IACI,KAAK,CAAC,iBAAiB,CAAC,YAAoB;QAC/C,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;IAC5F,CAAC;IAED;;;;;OAKG;IACI,KAAK,CAAC,cAAc,CAAC,EAAU;QAClC,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;IACzF,CAAC;IAED;;;;OAIG;IACI,KAAK,CAAC,uBAAuB,CAAC,YAAoB,EAAE,UAAkB;QACzE,MAAM,IAAI,KAAK,CAAC,4EAA4E,CAAC,CAAC;IAClG,CAAC;IAED;;;;OAIG;IACI,OAAO,CAAC,GAAW;QACtB,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAClF,CAAC;CACJ;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,OAAO,eAAe;IAIxB,YAAY,OAA+B;QAH3B,SAAI,GAAW,SAAS,CAAC;QAIrC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IAC3B,CAAC;IAEM,KAAK,CAAC,YAAY,CACrB,GAAgB,EAChB,GAAiB,EACjB,QAAkB;QAElB,IAAI,GAAG,CAAC,IAAI,EAAE,EAAE,IAAI,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC;YACrC,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC5C,CAAC;aAAM,CAAC;YACJ,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC1C,CAAC;IACL,CAAC;IAEM,gBAAgB,CAAC,GAAgB,EAAE,GAAiB,EAAE,QAAkB;QAC3E,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACtF,CAAC;IAED;;;;;;;OAOG;IACO,KAAK,CAAC,SAAS,CAAC,GAAgB,EAAE,GAAiB;QACzD,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CACX,wFAAwF;gBACpF,mCAAmC,CAC1C,CAAC;QACN,CAAC;QACD,IAAI,CAAC,GAAG,EAAE,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;QACvF,CAAC;QAED,2FAA2F;QAC3F,yFAAyF;QACzF,2FAA2F;QAC3F,oFAAoF;QACpF,2FAA2F;QAC3F,sFAAsF;QACtF,0FAA0F;QAC1F,qFAAqF;QACrF,wFAAwF;QACxF,sFAAsF;QACtF,2FAA2F;QAC3F,0FAA0F;QAC1F,2FAA2F;QAC3F,0EAA0E;QAC1E,MAAM,OAAO,GAAuB,GAAG,CAAC,KAAK,EAAE,GAAyB,CAAC;QACzE,IAAI,gBAAgB,GAAkE,SAAS,CAAC;QAChG,IAAI,OAAO,EAAE,CAAC;YACV,MAAM,WAAW,GAA8B,MAAM,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;YAC1F,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACzB,gBAAgB,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;YACxF,CAAC;QACL,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,EAAE,gBAAgB,CAAC,CAAC;QAC1F,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChB,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACjB,OAAO,SAAS,CAAC;IACrB,CAAC;IAED;;;;;;;OAOG;IACO,KAAK,CAAC,MAAM,CAAC,GAAgB,EAAE,QAAkB;QACvD,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CACX,wFAAwF;gBACpF,mCAAmC,CAC1C,CAAC;QACN,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QACzE,CAAC;QAED,2FAA2F;QAC3F,wEAAwE;QACxE,MAAM,iBAAiB,GAAW,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC;QACxD,OAAO,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC;QAE7B,yFAAyF;QACzF,0FAA0F;QAC1F,2FAA2F;QAC3F,2FAA2F;QAC3F,iBAAiB;QACjB,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAClE,CAAC;QAED,sFAAsF;QACtF,oFAAoF;QACpF,0FAA0F;QAC1F,4FAA4F;QAC5F,MAAM,cAAc,GAAG,GAAU,EAAE,CAAC,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QAEhF,MAAM,UAAU,GAAwC,MAAM,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC1G,IAAI,CAAC,UAAU,EAAE,CAAC;YACd,MAAM,cAAc,EAAE,CAAC;QAC3B,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,iBAAiB,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QAC1G,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YACnB,MAAM,cAAc,EAAE,CAAC;QAC3B,CAAC;QAED,8FAA8F;QAC9F,sFAAsF;QACtF,4FAA4F;QAC5F,qEAAqE;QACrE,MAAM,UAAU,GAAW,MAAM,CAAC,kBAAkB,CAAC,UAAU,CAAC;QAChE,IAAI,UAAU,KAAK,CAAC,IAAI,UAAU,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;YACvD,MAAM,cAAc,EAAE,CAAC;QAC3B,CAAC;QACD,MAAM,IAAI,CAAC,OAAO,CAAC,uBAAuB,CAAC,UAAU,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;QAEtE,MAAM,IAAI,GAAwB,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAC7E,IAAI,IAAI,EAAE,CAAC;YACP,OAAO;gBACH,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,MAAM,EAAE,IAAI,CAAC,IAAI;gBACjB,OAAO,EAAE,MAAM,CAAC,kBAAkB;gBAClC,IAAI;aACP,CAAC;QACN,CAAC;QAED,IAAI,QAAQ,EAAE,CAAC;YACX,MAAM,cAAc,EAAE,CAAC;QAC3B,CAAC;QACD,OAAO,SAAS,CAAC;IACrB,CAAC;CACJ"}

package/dist/lib/auth/TOTPStrategy.js

@@ -0,0 +1,84 @@
+import { getRequestData, verifyTOTP } from "./shared.js";
+/**
+ * Describes the configuration options that can be used to initialize TOTPStrategy.
+ *
+ * @author Jean-Philippe Steinmetz
+ */
+export class TOTPStrategyOptions {
+    constructor() {
+        /** The name of the header to look for when performing header based authentication. Default value is `Authorization`. */
+        this.headerKey = "authorization";
+        /** The authorization scheme type when using header based authentication. Default value is `jwt`. */
+        this.headerScheme = "totp";
+        /** The name of the request query parameter to retrieve the token from when using query based authentication. Default value is `auth_totp`. */
+        this.queryKey = "auth_totp";
+        /**
+         * Set to `true` to allow credentials to be supplied via the `queryKey` URL parameter.
+         * Disabled by default — query parameters appear in server logs, browser history, and
+         * Referer headers, which permanently exposes credentials outside the application.
+         */
+        this.allowQueryParam = false;
+    }
+    /**
+     * Retrieves the stored TOTP secrets for the user with the given unique identifier.
+     * NOTE: You must override this function when using this strategy.
+     * @param id The unique identifier of the user.
+     */
+    getSecrets(uid) {
+        throw new Error("Did you forget to override TOTPStrategyOptions.getSecrets?");
+    }
+    /**
+     * Retrieves the user data for the given unique identifier.
+     * NOTE: You must override this function when using this strategy.
+     * @param id The unique id of the user that has been successfully authenticated.
+     */
+    getUser(id) {
+        throw new Error("Did you forget to override TOTPStrategyOptions.getUser?");
+    }
+}
+/**
+ * Implements an authentication strategy that performs Time-Based One Time Password authentication. This strategy
+ * requires an existing user account to have already registered a TOTP secret that will be validated. The strategy does
+ * not implement how that secret is to be stored.
+ *
+ * @author Jean-Philippe Steinmetz <rapidrests@gmail.com>
+ */
+export class TOTPStrategy {
+    constructor(options = new TOTPStrategyOptions()) {
+        this.name = "totp";
+        this.options = options;
+    }
+    async authenticate(req, res, required) {
+        const { data, payload } = getRequestData(req, this.options.headerKey, this.options.headerScheme);
+        const user = await this.verify(payload);
+        if (user) {
+            return {
+                data,
+                method: this.name,
+                payload,
+                user,
+            };
+        }
+        if (required) {
+            throw new Error("Invalid authentiation request.");
+        }
+        return undefined;
+    }
+    authenticateSync(req, res, required) {
+        throw new Error("Not supported. This auth strategy must be used asynchronously.");
+    }
+    async verify(payload) {
+        const user = await this.options.getUser(payload.id);
+        if (user) {
+            const secret = await this.options.getSecrets(user.uid);
+            if (secret) {
+                let result = await verifyTOTP(payload.token, secret);
+                if (result && result.valid) {
+                    return user;
+                }
+            }
+        }
+        return undefined;
+    }
+}
+//# sourceMappingURL=TOTPStrategy.js.map

package/dist/lib/auth/TOTPStrategy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"TOTPStrategy.js","sourceRoot":"","sources":["../../../src/auth/TOTPStrategy.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzD;;;;GAIG;AACH,MAAM,OAAO,mBAAmB;IAAhC;QACI,wHAAwH;QACjH,cAAS,GAAW,eAAe,CAAC;QAC3C,oGAAoG;QAC7F,iBAAY,GAAW,MAAM,CAAC;QACrC,8IAA8I;QACvI,aAAQ,GAAW,WAAW,CAAC;QACtC;;;;WAIG;QACI,oBAAe,GAAY,KAAK,CAAC;IAiB5C,CAAC;IAhBG;;;;OAIG;IACI,UAAU,CAAC,GAAW;QACzB,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAClF,CAAC;IACD;;;;OAIG;IACI,OAAO,CAAC,EAAU;QACrB,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC/E,CAAC;CACJ;AAED;;;;;;GAMG;AACH,MAAM,OAAO,YAAY;IAIrB,YAAY,UAA+B,IAAI,mBAAmB,EAAE;QAHpD,SAAI,GAAW,MAAM,CAAC;QAIlC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IAC3B,CAAC;IAEM,KAAK,CAAC,YAAY,CACrB,GAAgB,EAChB,GAAiB,EACjB,QAAkB;QAElB,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAEjG,MAAM,IAAI,GAAwB,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC7D,IAAI,IAAI,EAAE,CAAC;YACP,OAAO;gBACH,IAAI;gBACJ,MAAM,EAAE,IAAI,CAAC,IAAI;gBACjB,OAAO;gBACP,IAAI;aACP,CAAC;QACN,CAAC;QAED,IAAI,QAAQ,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACtD,CAAC;QAED,OAAO,SAAS,CAAC;IACrB,CAAC;IAEM,gBAAgB,CAAC,GAAgB,EAAE,GAAiB,EAAE,QAAkB;QAC3E,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACtF,CAAC;IAES,KAAK,CAAC,MAAM,CAAC,OAAY;QAC/B,MAAM,IAAI,GAAwB,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAEzE,IAAI,IAAI,EAAE,CAAC;YACP,MAAM,MAAM,GAAiB,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAErE,IAAI,MAAM,EAAE,CAAC;gBACT,IAAI,MAAM,GAAQ,MAAM,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;gBAC1D,IAAI,MAAM,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;oBACzB,OAAO,IAAI,CAAC;gBAChB,CAAC;YACL,CAAC;QACL,CAAC;QAED,OAAO,SAAS,CAAC;IACrB,CAAC;CACJ"}

package/dist/lib/auth/index.js

@@ -0,0 +1,10 @@
+export * from "./shared.js";
+export * from "./types.js";
+export * from "./BasicStrategy.js";
+export * from "./FIDO2Strategy.js";
+export * from "./MFAStrategy.js";
+export * from "./OIDCStrategy.js";
+export * from "./OTPStrategy.js";
+export * from "./PasskeyStrategy.js";
+export * from "./TOTPStrategy.js";
+//# sourceMappingURL=index.js.map

package/dist/lib/auth/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/auth/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAE3B,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,sBAAsB,CAAC;AACrC,cAAc,mBAAmB,CAAC"}