@rekog/mcp-nest 1.7.0-alpha.0 → 1.7.0-alpha.2

package/dist/authz/services/oauth-strategy.service.d.ts

@@ -0,0 +1,11 @@
+import { OnModuleInit } from '@nestjs/common';
+import { OAuthModuleOptions } from '../providers/oauth-provider.interface';
+export declare const STRATEGY_NAME = "oauth-provider";
+export declare class OAuthStrategyService implements OnModuleInit {
+    private options;
+    constructor(options: OAuthModuleOptions);
+    onModuleInit(): void;
+    private registerStrategy;
+    getStrategyName(): string;
+}
+//# sourceMappingURL=oauth-strategy.service.d.ts.map

package/dist/authz/services/oauth-strategy.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-strategy.service.d.ts","sourceRoot":"","sources":["../../../src/authz/services/oauth-strategy.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAc,YAAY,EAAU,MAAM,gBAAgB,CAAC;AAElE,OAAO,EAAE,kBAAkB,EAAE,MAAM,uCAAuC,CAAC;AAE3E,eAAO,MAAM,aAAa,mBAAmB,CAAC;AAE9C,qBACa,oBAAqB,YAAW,YAAY;IAErB,OAAO,CAAC,OAAO;gBAAP,OAAO,EAAE,kBAAkB;IAGrE,YAAY;IAIZ,OAAO,CAAC,gBAAgB;IAmCxB,eAAe,IAAI,MAAM;CAG1B"}

package/dist/authz/services/oauth-strategy.service.js

@@ -0,0 +1,64 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OAuthStrategyService = exports.STRATEGY_NAME = void 0;
+const common_1 = require("@nestjs/common");
+const passport_1 = __importDefault(require("passport"));
+exports.STRATEGY_NAME = 'oauth-provider';
+let OAuthStrategyService = class OAuthStrategyService {
+    constructor(options) {
+        this.options = options;
+    }
+    onModuleInit() {
+        this.registerStrategy();
+    }
+    registerStrategy() {
+        const provider = this.options.provider;
+        const clientId = this.options.clientId;
+        const clientSecret = this.options.clientSecret;
+        const serverUrl = this.options.serverUrl;
+        const strategyOptions = provider.strategyOptions({
+            serverUrl,
+            clientId,
+            clientSecret,
+        });
+        const strategy = new provider.strategy(strategyOptions, (accessToken, refreshToken, profile, done) => {
+            try {
+                const mappedProfile = provider.profileMapper(profile);
+                return done(null, {
+                    profile: mappedProfile,
+                    accessToken,
+                    provider: provider.name,
+                });
+            }
+            catch (error) {
+                return done(error, null);
+            }
+        });
+        passport_1.default.use(exports.STRATEGY_NAME, strategy);
+    }
+    getStrategyName() {
+        return exports.STRATEGY_NAME;
+    }
+};
+exports.OAuthStrategyService = OAuthStrategyService;
+exports.OAuthStrategyService = OAuthStrategyService = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, common_1.Inject)('OAUTH_MODULE_OPTIONS')),
+    __metadata("design:paramtypes", [Object])
+], OAuthStrategyService);
+//# sourceMappingURL=oauth-strategy.service.js.map

package/dist/authz/services/oauth-strategy.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-strategy.service.js","sourceRoot":"","sources":["../../../src/authz/services/oauth-strategy.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAAA,2CAAkE;AAClE,wDAAgC;AAGnB,QAAA,aAAa,GAAG,gBAAgB,CAAC;AAGvC,IAAM,oBAAoB,GAA1B,MAAM,oBAAoB;IAC/B,YAC0C,OAA2B;QAA3B,YAAO,GAAP,OAAO,CAAoB;IAClE,CAAC;IAEJ,YAAY;QACV,IAAI,CAAC,gBAAgB,EAAE,CAAC;IAC1B,CAAC;IAEO,gBAAgB;QACtB,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;QAGvC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;QACvC,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC;QAG/C,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;QAEzC,MAAM,eAAe,GAAG,QAAQ,CAAC,eAAe,CAAC;YAC/C,SAAS;YACT,QAAQ;YACR,YAAY;SACb,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC,QAAQ,CACpC,eAAe,EACf,CAAC,WAAmB,EAAE,YAAoB,EAAE,OAAY,EAAE,IAAS,EAAE,EAAE;YACrE,IAAI,CAAC;gBACH,MAAM,aAAa,GAAG,QAAQ,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;gBACtD,OAAO,IAAI,CAAC,IAAI,EAAE;oBAChB,OAAO,EAAE,aAAa;oBACtB,WAAW;oBACX,QAAQ,EAAE,QAAQ,CAAC,IAAI;iBACxB,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YAC3B,CAAC;QACH,CAAC,CACF,CAAC;QAEF,kBAAQ,CAAC,GAAG,CAAC,qBAAa,EAAE,QAAQ,CAAC,CAAC;IACxC,CAAC;IAED,eAAe;QACb,OAAO,qBAAa,CAAC;IACvB,CAAC;CACF,CAAA;AA/CY,oDAAoB;+BAApB,oBAAoB;IADhC,IAAA,mBAAU,GAAE;IAGR,WAAA,IAAA,eAAM,EAAC,sBAAsB,CAAC,CAAA;;GAFtB,oBAAoB,CA+ChC","sourcesContent":["import { Injectable, OnModuleInit, Inject } from '@nestjs/common';\nimport passport from 'passport';\nimport { OAuthModuleOptions } from '../providers/oauth-provider.interface';\n\nexport const STRATEGY_NAME = 'oauth-provider';\n\n@Injectable()\nexport class OAuthStrategyService implements OnModuleInit {\n  constructor(\n    @Inject('OAUTH_MODULE_OPTIONS') private options: OAuthModuleOptions,\n  ) {}\n\n  onModuleInit() {\n    this.registerStrategy();\n  }\n\n  private registerStrategy() {\n    const provider = this.options.provider;\n\n    // Use client credentials from resolved options\n    const clientId = this.options.clientId;\n    const clientSecret = this.options.clientSecret;\n\n    // Use resolved serverUrl (no fallbacks needed)\n    const serverUrl = this.options.serverUrl;\n\n    const strategyOptions = provider.strategyOptions({\n      serverUrl,\n      clientId,\n      clientSecret,\n    });\n\n    const strategy = new provider.strategy(\n      strategyOptions,\n      (accessToken: string, refreshToken: string, profile: any, done: any) => {\n        try {\n          const mappedProfile = provider.profileMapper(profile);\n          return done(null, {\n            profile: mappedProfile,\n            accessToken,\n            provider: provider.name,\n          });\n        } catch (error) {\n          return done(error, null);\n        }\n      },\n    );\n\n    passport.use(STRATEGY_NAME, strategy);\n  }\n\n  getStrategyName(): string {\n    return STRATEGY_NAME;\n  }\n}\n"]}

package/dist/authz/stores/memory-store.service.d.ts

@@ -0,0 +1,19 @@
+import { OAuthSession } from '../providers/oauth-provider.interface';
+import { AuthorizationCode, IOAuthStore, OAuthClient } from './oauth-store.interface';
+export declare class MemoryStore implements IOAuthStore {
+    private clients;
+    private authCodes;
+    private oauthSessions;
+    storeClient(client: OAuthClient): Promise<OAuthClient>;
+    getClient(client_id: string): Promise<OAuthClient | undefined>;
+    findClient(client_name: string): Promise<OAuthClient | undefined>;
+    storeAuthCode(code: AuthorizationCode): Promise<void>;
+    getAuthCode(code: string): Promise<AuthorizationCode | undefined>;
+    removeAuthCode(code: string): Promise<void>;
+    storeOAuthSession(sessionId: string, session: OAuthSession): Promise<void>;
+    getOAuthSession(sessionId: string): Promise<OAuthSession | undefined>;
+    removeOAuthSession(sessionId: string): Promise<void>;
+    generateClientId(client: OAuthClient): string;
+    private normalizeClientObject;
+}
+//# sourceMappingURL=memory-store.service.d.ts.map

package/dist/authz/stores/memory-store.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-store.service.d.ts","sourceRoot":"","sources":["../../../src/authz/stores/memory-store.service.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AACrE,OAAO,EACL,iBAAiB,EACjB,WAAW,EACX,WAAW,EACZ,MAAM,yBAAyB,CAAC;AAGjC,qBACa,WAAY,YAAW,WAAW;IAC7C,OAAO,CAAC,OAAO,CAAkC;IACjD,OAAO,CAAC,SAAS,CAAwC;IACzD,OAAO,CAAC,aAAa,CAAmC;IAElD,WAAW,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;IAKtD,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC;IAI9D,UAAU,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC;IASjE,aAAa,CAAC,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;IAIrD,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC;IAIjE,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAK3C,iBAAiB,CACrB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,YAAY,GACpB,OAAO,CAAC,IAAI,CAAC;IAIV,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC;IASrE,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI1D,gBAAgB,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM;IAa7C,OAAO,CAAC,qBAAqB;CAmB9B"}

package/dist/authz/stores/memory-store.service.js

@@ -0,0 +1,84 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MemoryStore = void 0;
+const common_1 = require("@nestjs/common");
+const crypto_1 = require("crypto");
+let MemoryStore = class MemoryStore {
+    constructor() {
+        this.clients = new Map();
+        this.authCodes = new Map();
+        this.oauthSessions = new Map();
+    }
+    async storeClient(client) {
+        this.clients.set(client.client_id, client);
+        return client;
+    }
+    async getClient(client_id) {
+        return this.clients.get(client_id);
+    }
+    async findClient(client_name) {
+        for (const client of this.clients.values()) {
+            if (client.client_name === client_name) {
+                return client;
+            }
+        }
+        return undefined;
+    }
+    async storeAuthCode(code) {
+        this.authCodes.set(code.code, code);
+    }
+    async getAuthCode(code) {
+        return this.authCodes.get(code);
+    }
+    async removeAuthCode(code) {
+        this.authCodes.delete(code);
+    }
+    async storeOAuthSession(sessionId, session) {
+        this.oauthSessions.set(sessionId, session);
+    }
+    async getOAuthSession(sessionId) {
+        const session = this.oauthSessions.get(sessionId);
+        if (session && session.expiresAt < Date.now()) {
+            this.oauthSessions.delete(sessionId);
+            return undefined;
+        }
+        return session;
+    }
+    async removeOAuthSession(sessionId) {
+        this.oauthSessions.delete(sessionId);
+    }
+    generateClientId(client) {
+        const normalizedClient = this.normalizeClientObject(client);
+        const clientString = JSON.stringify(normalizedClient);
+        const hash = (0, crypto_1.createHash)('sha256').update(clientString).digest('hex');
+        const normalizedName = client.client_name
+            .toLowerCase()
+            .replace(/[^a-z0-9]/g, '');
+        return `${normalizedName}_${hash.substring(0, 16)}`;
+    }
+    normalizeClientObject(client) {
+        const normalized = {};
+        const sortedKeys = Object.keys(client).sort();
+        for (const key of sortedKeys) {
+            const value = client[key];
+            if (Array.isArray(value)) {
+                normalized[key] = [...value].sort();
+            }
+            else {
+                normalized[key] = value;
+            }
+        }
+        return normalized;
+    }
+};
+exports.MemoryStore = MemoryStore;
+exports.MemoryStore = MemoryStore = __decorate([
+    (0, common_1.Injectable)()
+], MemoryStore);
+//# sourceMappingURL=memory-store.service.js.map

package/dist/authz/stores/memory-store.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-store.service.js","sourceRoot":"","sources":["../../../src/authz/stores/memory-store.service.ts"],"names":[],"mappings":";;;;;;;;;AAAA,2CAA4C;AAC5C,mCAAoC;AAU7B,IAAM,WAAW,GAAjB,MAAM,WAAW;IAAjB;QACG,YAAO,GAAG,IAAI,GAAG,EAAuB,CAAC;QACzC,cAAS,GAAG,IAAI,GAAG,EAA6B,CAAC;QACjD,kBAAa,GAAG,IAAI,GAAG,EAAwB,CAAC;IAqF1D,CAAC;IAnFC,KAAK,CAAC,WAAW,CAAC,MAAmB;QACnC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC3C,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,SAAiB;QAC/B,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,WAAmB;QAClC,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YAC3C,IAAI,MAAM,CAAC,WAAW,KAAK,WAAW,EAAE,CAAC;gBACvC,OAAO,MAAM,CAAC;YAChB,CAAC;QACH,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,IAAuB;QACzC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,IAAY;QAC5B,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,IAAY;QAC/B,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IAGD,KAAK,CAAC,iBAAiB,CACrB,SAAiB,EACjB,OAAqB;QAErB,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAC7C,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,SAAiB;QACrC,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAClD,IAAI,OAAO,IAAI,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YAC9C,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACrC,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,SAAiB;QACxC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACvC,CAAC;IAED,gBAAgB,CAAC,MAAmB;QAElC,MAAM,gBAAgB,GAAG,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC;QAC5D,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;QACtD,MAAM,IAAI,GAAG,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAGrE,MAAM,cAAc,GAAG,MAAM,CAAC,WAAW;aACtC,WAAW,EAAE;aACb,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;QAC7B,OAAO,GAAG,cAAc,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;IACtD,CAAC;IAEO,qBAAqB,CAAC,MAAmB;QAE/C,MAAM,UAAU,GAAQ,EAAE,CAAC;QAG3B,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QAE9C,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;YAC7B,MAAM,KAAK,GAAI,MAAc,CAAC,GAAG,CAAC,CAAC;YACnC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBAEzB,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;YACtC,CAAC;iBAAM,CAAC;gBACN,UAAU,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YAC1B,CAAC;QACH,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;CACF,CAAA;AAxFY,kCAAW;sBAAX,WAAW;IADvB,IAAA,mBAAU,GAAE;GACA,WAAW,CAwFvB","sourcesContent":["import { Injectable } from '@nestjs/common';\nimport { createHash } from 'crypto';\nimport { OAuthSession } from '../providers/oauth-provider.interface';\nimport {\n  AuthorizationCode,\n  IOAuthStore,\n  OAuthClient,\n} from './oauth-store.interface';\n\n// In-memory storage (in production, use a database)\n@Injectable()\nexport class MemoryStore implements IOAuthStore {\n  private clients = new Map<string, OAuthClient>();\n  private authCodes = new Map<string, AuthorizationCode>();\n  private oauthSessions = new Map<string, OAuthSession>();\n\n  async storeClient(client: OAuthClient): Promise<OAuthClient> {\n    this.clients.set(client.client_id, client);\n    return client;\n  }\n\n  async getClient(client_id: string): Promise<OAuthClient | undefined> {\n    return this.clients.get(client_id);\n  }\n\n  async findClient(client_name: string): Promise<OAuthClient | undefined> {\n    for (const client of this.clients.values()) {\n      if (client.client_name === client_name) {\n        return client;\n      }\n    }\n    return undefined;\n  }\n\n  async storeAuthCode(code: AuthorizationCode): Promise<void> {\n    this.authCodes.set(code.code, code);\n  }\n\n  async getAuthCode(code: string): Promise<AuthorizationCode | undefined> {\n    return this.authCodes.get(code);\n  }\n\n  async removeAuthCode(code: string): Promise<void> {\n    this.authCodes.delete(code);\n  }\n\n  // New OAuth session methods for provider-agnostic flow\n  async storeOAuthSession(\n    sessionId: string,\n    session: OAuthSession,\n  ): Promise<void> {\n    this.oauthSessions.set(sessionId, session);\n  }\n\n  async getOAuthSession(sessionId: string): Promise<OAuthSession | undefined> {\n    const session = this.oauthSessions.get(sessionId);\n    if (session && session.expiresAt < Date.now()) {\n      this.oauthSessions.delete(sessionId);\n      return undefined;\n    }\n    return session;\n  }\n\n  async removeOAuthSession(sessionId: string): Promise<void> {\n    this.oauthSessions.delete(sessionId);\n  }\n\n  generateClientId(client: OAuthClient): string {\n    // Create deterministic client ID based on entire client object\n    const normalizedClient = this.normalizeClientObject(client);\n    const clientString = JSON.stringify(normalizedClient);\n    const hash = createHash('sha256').update(clientString).digest('hex');\n\n    // Use first 16 characters of hash with client name prefix for readability\n    const normalizedName = client.client_name\n      .toLowerCase()\n      .replace(/[^a-z0-9]/g, '');\n    return `${normalizedName}_${hash.substring(0, 16)}`;\n  }\n\n  private normalizeClientObject(client: OAuthClient): any {\n    // Create a normalized version of the client object for consistent hashing\n    const normalized: any = {};\n\n    // Sort object keys to ensure consistent ordering\n    const sortedKeys = Object.keys(client).sort();\n\n    for (const key of sortedKeys) {\n      const value = (client as any)[key];\n      if (Array.isArray(value)) {\n        // Sort arrays to ensure consistent ordering\n        normalized[key] = [...value].sort();\n      } else {\n        normalized[key] = value;\n      }\n    }\n\n    return normalized;\n  }\n}\n"]}

package/dist/authz/stores/memory-store.service.spec.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=memory-store.service.spec.d.ts.map

package/dist/authz/stores/memory-store.service.spec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-store.service.spec.d.ts","sourceRoot":"","sources":["../../../src/authz/stores/memory-store.service.spec.ts"],"names":[],"mappings":""}

package/dist/authz/stores/memory-store.service.spec.js

@@ -0,0 +1,195 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const testing_1 = require("@nestjs/testing");
+const memory_store_service_1 = require("./memory-store.service");
+describe('MemoryStore', () => {
+    let service;
+    beforeEach(async () => {
+        const module = await testing_1.Test.createTestingModule({
+            providers: [memory_store_service_1.MemoryStore],
+        }).compile();
+        service = module.get(memory_store_service_1.MemoryStore);
+    });
+    it('should be defined', () => {
+        expect(service).toBeDefined();
+    });
+    describe('generateClientId', () => {
+        it('should generate consistent client IDs for identical objects', () => {
+            const client1 = {
+                client_name: 'MCP Inspector',
+                client_uri: 'https://github.com/modelcontextprotocol/inspector',
+                redirect_uris: ['http://localhost:6274/oauth/callback'],
+                token_endpoint_auth_method: 'none',
+                grant_types: ['authorization_code', 'refresh_token'],
+                response_types: ['code'],
+            };
+            const client2 = {
+                client_name: 'MCP Inspector',
+                client_uri: 'https://github.com/modelcontextprotocol/inspector',
+                redirect_uris: ['http://localhost:6274/oauth/callback'],
+                token_endpoint_auth_method: 'none',
+                grant_types: ['authorization_code', 'refresh_token'],
+                response_types: ['code'],
+            };
+            const id1 = service.generateClientId(client1);
+            const id2 = service.generateClientId(client2);
+            expect(id1).toBe(id2);
+        });
+        it('should generate consistent client IDs regardless of property order', () => {
+            const clientJson1 = `{
+        "client_name": "MCP Inspector",
+        "client_uri": "https://github.com/modelcontextprotocol/inspector",
+        "redirect_uris": ["http://localhost:6274/oauth/callback"],
+        "token_endpoint_auth_method": "none",
+        "grant_types": ["authorization_code", "refresh_token"],
+        "response_types": ["code"]
+      }`;
+            const clientJson2 = `{
+        "response_types": ["code"],
+        "grant_types": ["authorization_code", "refresh_token"],
+        "token_endpoint_auth_method": "none",
+        "redirect_uris": ["http://localhost:6274/oauth/callback"],
+        "client_uri": "https://github.com/modelcontextprotocol/inspector",
+        "client_name": "MCP Inspector"
+      }`;
+            const client1 = JSON.parse(clientJson1);
+            const client2 = JSON.parse(clientJson2);
+            const id1 = service.generateClientId(client1);
+            const id2 = service.generateClientId(client2);
+            expect(id1).toBe(id2);
+        });
+        it('should generate consistent client IDs regardless of array order', () => {
+            const clientJson1 = `{
+        "client_name": "MCP Inspector",
+        "client_uri": "https://github.com/modelcontextprotocol/inspector",
+        "redirect_uris": [
+          "http://localhost:6274/oauth/callback",
+          "http://localhost:8080/callback",
+          "http://127.0.0.1:3000/auth"
+        ],
+        "token_endpoint_auth_method": "none",
+        "grant_types": [
+          "authorization_code",
+          "refresh_token",
+          "client_credentials"
+        ],
+        "response_types": ["code", "token"]
+      }`;
+            const clientJson2 = `{
+        "client_name": "MCP Inspector",
+        "client_uri": "https://github.com/modelcontextprotocol/inspector",
+        "redirect_uris": [
+          "http://127.0.0.1:3000/auth",
+          "http://localhost:6274/oauth/callback",
+          "http://localhost:8080/callback"
+        ],
+        "token_endpoint_auth_method": "none",
+        "grant_types": ["client_credentials", "authorization_code", "refresh_token"],
+        "response_types": ["token", "code"]
+      }`;
+            const client1 = JSON.parse(clientJson1);
+            const client2 = JSON.parse(clientJson2);
+            const id1 = service.generateClientId(client1);
+            const id2 = service.generateClientId(client2);
+            expect(id1).toBe(id2);
+        });
+        it('should generate consistent client IDs regardless of both property and array order', () => {
+            const clientJson1 = `{
+        "grant_types": ["refresh_token", "authorization_code"],
+        "client_name": "MCP Inspector",
+        "response_types": ["code"],
+        "redirect_uris": [
+          "http://localhost:8080/callback",
+          "http://localhost:6274/oauth/callback"
+        ],
+        "token_endpoint_auth_method": "none",
+        "client_uri": "https://github.com/modelcontextprotocol/inspector"
+      }`;
+            const clientJson2 = `{
+        "client_uri": "https://github.com/modelcontextprotocol/inspector",
+        "token_endpoint_auth_method": "none",
+        "redirect_uris": [
+          "http://localhost:6274/oauth/callback",
+          "http://localhost:8080/callback"
+        ],
+        "response_types": ["code"],
+        "client_name": "MCP Inspector",
+        "grant_types": ["authorization_code", "refresh_token"]
+      }`;
+            const client1 = JSON.parse(clientJson1);
+            const client2 = JSON.parse(clientJson2);
+            const id1 = service.generateClientId(client1);
+            const id2 = service.generateClientId(client2);
+            expect(id1).toBe(id2);
+        });
+        it('should generate different client IDs for different objects', () => {
+            const client1 = {
+                client_name: 'MCP Inspector',
+                client_uri: 'https://github.com/modelcontextprotocol/inspector',
+                redirect_uris: ['http://localhost:6274/oauth/callback'],
+                token_endpoint_auth_method: 'none',
+                grant_types: ['authorization_code', 'refresh_token'],
+                response_types: ['code'],
+            };
+            const client2 = {
+                client_name: 'Different App',
+                client_uri: 'https://github.com/modelcontextprotocol/inspector',
+                redirect_uris: ['http://localhost:6274/oauth/callback'],
+                token_endpoint_auth_method: 'none',
+                grant_types: ['authorization_code', 'refresh_token'],
+                response_types: ['code'],
+            };
+            const id1 = service.generateClientId(client1);
+            const id2 = service.generateClientId(client2);
+            expect(id1).not.toBe(id2);
+        });
+        it('should generate different client IDs when array contents differ', () => {
+            const client1 = {
+                client_name: 'MCP Inspector',
+                client_uri: 'https://github.com/modelcontextprotocol/inspector',
+                redirect_uris: ['http://localhost:6274/oauth/callback'],
+                token_endpoint_auth_method: 'none',
+                grant_types: ['authorization_code', 'refresh_token'],
+                response_types: ['code'],
+            };
+            const client2 = {
+                client_name: 'MCP Inspector',
+                client_uri: 'https://github.com/modelcontextprotocol/inspector',
+                redirect_uris: ['http://localhost:6274/oauth/callback'],
+                token_endpoint_auth_method: 'none',
+                grant_types: ['authorization_code'],
+                response_types: ['code'],
+            };
+            const id1 = service.generateClientId(client1);
+            const id2 = service.generateClientId(client2);
+            expect(id1).not.toBe(id2);
+        });
+        it('should include normalized client name in the generated ID', () => {
+            const client = {
+                client_name: 'MCP Inspector!@#',
+                client_uri: 'https://github.com/modelcontextprotocol/inspector',
+                redirect_uris: ['http://localhost:6274/oauth/callback'],
+                token_endpoint_auth_method: 'none',
+                grant_types: ['authorization_code', 'refresh_token'],
+                response_types: ['code'],
+            };
+            const clientId = service.generateClientId(client);
+            expect(clientId).toMatch(/^mcpinspector_[a-f0-9]{16}$/);
+        });
+        it('should generate IDs with consistent format', () => {
+            const client = {
+                client_name: 'Test App',
+                client_uri: 'https://example.com',
+                redirect_uris: ['http://localhost:3000/callback'],
+                token_endpoint_auth_method: 'none',
+                grant_types: ['authorization_code'],
+                response_types: ['code'],
+            };
+            const clientId = service.generateClientId(client);
+            expect(clientId).toMatch(/^[a-z0-9]+_[a-f0-9]{16}$/);
+            const clientId2 = service.generateClientId(client);
+            expect(clientId).toBe(clientId2);
+        });
+    });
+});
+//# sourceMappingURL=memory-store.service.spec.js.map

package/dist/authz/stores/memory-store.service.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-store.service.spec.js","sourceRoot":"","sources":["../../../src/authz/stores/memory-store.service.spec.ts"],"names":[],"mappings":";;AAAA,6CAAsD;AACtD,iEAAqD;AAGrD,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;IAC3B,IAAI,OAAoB,CAAC;IAEzB,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,MAAM,MAAM,GAAkB,MAAM,cAAI,CAAC,mBAAmB,CAAC;YAC3D,SAAS,EAAE,CAAC,kCAAW,CAAC;SACzB,CAAC,CAAC,OAAO,EAAE,CAAC;QAEb,OAAO,GAAG,MAAM,CAAC,GAAG,CAAc,kCAAW,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mBAAmB,EAAE,GAAG,EAAE;QAC3B,MAAM,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;QAChC,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;YACrE,MAAM,OAAO,GAAyB;gBACpC,WAAW,EAAE,eAAe;gBAC5B,UAAU,EAAE,mDAAmD;gBAC/D,aAAa,EAAE,CAAC,sCAAsC,CAAC;gBACvD,0BAA0B,EAAE,MAAM;gBAClC,WAAW,EAAE,CAAC,oBAAoB,EAAE,eAAe,CAAC;gBACpD,cAAc,EAAE,CAAC,MAAM,CAAC;aACzB,CAAC;YAEF,MAAM,OAAO,GAAyB;gBACpC,WAAW,EAAE,eAAe;gBAC5B,UAAU,EAAE,mDAAmD;gBAC/D,aAAa,EAAE,CAAC,sCAAsC,CAAC;gBACvD,0BAA0B,EAAE,MAAM;gBAClC,WAAW,EAAE,CAAC,oBAAoB,EAAE,eAAe,CAAC;gBACpD,cAAc,EAAE,CAAC,MAAM,CAAC;aACzB,CAAC;YAEF,MAAM,GAAG,GAAG,OAAO,CAAC,gBAAgB,CAAC,OAAsB,CAAC,CAAC;YAC7D,MAAM,GAAG,GAAG,OAAO,CAAC,gBAAgB,CAAC,OAAsB,CAAC,CAAC;YAE7D,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACxB,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,oEAAoE,EAAE,GAAG,EAAE;YAE5E,MAAM,WAAW,GAAG;;;;;;;QAOlB,CAAC;YAGH,MAAM,WAAW,GAAG;;;;;;;QAOlB,CAAC;YAEH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAgB,CAAC;YACvD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAgB,CAAC;YAEvD,MAAM,GAAG,GAAG,OAAO,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;YAC9C,MAAM,GAAG,GAAG,OAAO,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;YAE9C,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACxB,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;YAEzE,MAAM,WAAW,GAAG;;;;;;;;;;;;;;;QAelB,CAAC;YAGH,MAAM,WAAW,GAAG;;;;;;;;;;;QAWlB,CAAC;YAEH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAgB,CAAC;YACvD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAgB,CAAC;YAEvD,MAAM,GAAG,GAAG,OAAO,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;YAC9C,MAAM,GAAG,GAAG,OAAO,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;YAE9C,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACxB,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,mFAAmF,EAAE,GAAG,EAAE;YAE3F,MAAM,WAAW,GAAG;;;;;;;;;;QAUlB,CAAC;YAGH,MAAM,WAAW,GAAG;;;;;;;;;;QAUlB,CAAC;YAEH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAgB,CAAC;YACvD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAgB,CAAC;YAEvD,MAAM,GAAG,GAAG,OAAO,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;YAC9C,MAAM,GAAG,GAAG,OAAO,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;YAE9C,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACxB,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;YACpE,MAAM,OAAO,GAAyB;gBACpC,WAAW,EAAE,eAAe;gBAC5B,UAAU,EAAE,mDAAmD;gBAC/D,aAAa,EAAE,CAAC,sCAAsC,CAAC;gBACvD,0BAA0B,EAAE,MAAM;gBAClC,WAAW,EAAE,CAAC,oBAAoB,EAAE,eAAe,CAAC;gBACpD,cAAc,EAAE,CAAC,MAAM,CAAC;aACzB,CAAC;YAEF,MAAM,OAAO,GAAyB;gBACpC,WAAW,EAAE,eAAe;gBAC5B,UAAU,EAAE,mDAAmD;gBAC/D,aAAa,EAAE,CAAC,sCAAsC,CAAC;gBACvD,0BAA0B,EAAE,MAAM;gBAClC,WAAW,EAAE,CAAC,oBAAoB,EAAE,eAAe,CAAC;gBACpD,cAAc,EAAE,CAAC,MAAM,CAAC;aACzB,CAAC;YAEF,MAAM,GAAG,GAAG,OAAO,CAAC,gBAAgB,CAAC,OAAsB,CAAC,CAAC;YAC7D,MAAM,GAAG,GAAG,OAAO,CAAC,gBAAgB,CAAC,OAAsB,CAAC,CAAC;YAE7D,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC5B,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;YACzE,MAAM,OAAO,GAAyB;gBACpC,WAAW,EAAE,eAAe;gBAC5B,UAAU,EAAE,mDAAmD;gBAC/D,aAAa,EAAE,CAAC,sCAAsC,CAAC;gBACvD,0BAA0B,EAAE,MAAM;gBAClC,WAAW,EAAE,CAAC,oBAAoB,EAAE,eAAe,CAAC;gBACpD,cAAc,EAAE,CAAC,MAAM,CAAC;aACzB,CAAC;YAEF,MAAM,OAAO,GAAyB;gBACpC,WAAW,EAAE,eAAe;gBAC5B,UAAU,EAAE,mDAAmD;gBAC/D,aAAa,EAAE,CAAC,sCAAsC,CAAC;gBACvD,0BAA0B,EAAE,MAAM;gBAClC,WAAW,EAAE,CAAC,oBAAoB,CAAC;gBACnC,cAAc,EAAE,CAAC,MAAM,CAAC;aACzB,CAAC;YAEF,MAAM,GAAG,GAAG,OAAO,CAAC,gBAAgB,CAAC,OAAsB,CAAC,CAAC;YAC7D,MAAM,GAAG,GAAG,OAAO,CAAC,gBAAgB,CAAC,OAAsB,CAAC,CAAC;YAE7D,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC5B,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;YACnE,MAAM,MAAM,GAAyB;gBACnC,WAAW,EAAE,kBAAkB;gBAC/B,UAAU,EAAE,mDAAmD;gBAC/D,aAAa,EAAE,CAAC,sCAAsC,CAAC;gBACvD,0BAA0B,EAAE,MAAM;gBAClC,WAAW,EAAE,CAAC,oBAAoB,EAAE,eAAe,CAAC;gBACpD,cAAc,EAAE,CAAC,MAAM,CAAC;aACzB,CAAC;YAEF,MAAM,QAAQ,GAAG,OAAO,CAAC,gBAAgB,CAAC,MAAqB,CAAC,CAAC;YAGjE,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAC;QAC1D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;YACpD,MAAM,MAAM,GAAyB;gBACnC,WAAW,EAAE,UAAU;gBACvB,UAAU,EAAE,qBAAqB;gBACjC,aAAa,EAAE,CAAC,gCAAgC,CAAC;gBACjD,0BAA0B,EAAE,MAAM;gBAClC,WAAW,EAAE,CAAC,oBAAoB,CAAC;gBACnC,cAAc,EAAE,CAAC,MAAM,CAAC;aACzB,CAAC;YAEF,MAAM,QAAQ,GAAG,OAAO,CAAC,gBAAgB,CAAC,MAAqB,CAAC,CAAC;YAGjE,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC;YAGrD,MAAM,SAAS,GAAG,OAAO,CAAC,gBAAgB,CAAC,MAAqB,CAAC,CAAC;YAClE,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC","sourcesContent":["import { Test, TestingModule } from '@nestjs/testing';\nimport { MemoryStore } from './memory-store.service';\nimport { OAuthClient } from './oauth-store.interface';\n\ndescribe('MemoryStore', () => {\n  let service: MemoryStore;\n\n  beforeEach(async () => {\n    const module: TestingModule = await Test.createTestingModule({\n      providers: [MemoryStore],\n    }).compile();\n\n    service = module.get<MemoryStore>(MemoryStore);\n  });\n\n  it('should be defined', () => {\n    expect(service).toBeDefined();\n  });\n\n  describe('generateClientId', () => {\n    it('should generate consistent client IDs for identical objects', () => {\n      const client1: Partial<OAuthClient> = {\n        client_name: 'MCP Inspector',\n        client_uri: 'https://github.com/modelcontextprotocol/inspector',\n        redirect_uris: ['http://localhost:6274/oauth/callback'],\n        token_endpoint_auth_method: 'none',\n        grant_types: ['authorization_code', 'refresh_token'],\n        response_types: ['code'],\n      };\n\n      const client2: Partial<OAuthClient> = {\n        client_name: 'MCP Inspector',\n        client_uri: 'https://github.com/modelcontextprotocol/inspector',\n        redirect_uris: ['http://localhost:6274/oauth/callback'],\n        token_endpoint_auth_method: 'none',\n        grant_types: ['authorization_code', 'refresh_token'],\n        response_types: ['code'],\n      };\n\n      const id1 = service.generateClientId(client1 as OAuthClient);\n      const id2 = service.generateClientId(client2 as OAuthClient);\n\n      expect(id1).toBe(id2);\n    });\n\n    it('should generate consistent client IDs regardless of property order', () => {\n      // First object with properties in one order\n      const clientJson1 = `{\n        \"client_name\": \"MCP Inspector\",\n        \"client_uri\": \"https://github.com/modelcontextprotocol/inspector\",\n        \"redirect_uris\": [\"http://localhost:6274/oauth/callback\"],\n        \"token_endpoint_auth_method\": \"none\",\n        \"grant_types\": [\"authorization_code\", \"refresh_token\"],\n        \"response_types\": [\"code\"]\n      }`;\n\n      // Second object with properties in different order\n      const clientJson2 = `{\n        \"response_types\": [\"code\"],\n        \"grant_types\": [\"authorization_code\", \"refresh_token\"],\n        \"token_endpoint_auth_method\": \"none\",\n        \"redirect_uris\": [\"http://localhost:6274/oauth/callback\"],\n        \"client_uri\": \"https://github.com/modelcontextprotocol/inspector\",\n        \"client_name\": \"MCP Inspector\"\n      }`;\n\n      const client1 = JSON.parse(clientJson1) as OAuthClient;\n      const client2 = JSON.parse(clientJson2) as OAuthClient;\n\n      const id1 = service.generateClientId(client1);\n      const id2 = service.generateClientId(client2);\n\n      expect(id1).toBe(id2);\n    });\n\n    it('should generate consistent client IDs regardless of array order', () => {\n      // First object with arrays in one order\n      const clientJson1 = `{\n        \"client_name\": \"MCP Inspector\",\n        \"client_uri\": \"https://github.com/modelcontextprotocol/inspector\",\n        \"redirect_uris\": [\n          \"http://localhost:6274/oauth/callback\",\n          \"http://localhost:8080/callback\",\n          \"http://127.0.0.1:3000/auth\"\n        ],\n        \"token_endpoint_auth_method\": \"none\",\n        \"grant_types\": [\n          \"authorization_code\",\n          \"refresh_token\",\n          \"client_credentials\"\n        ],\n        \"response_types\": [\"code\", \"token\"]\n      }`;\n\n      // Second object with arrays in different order\n      const clientJson2 = `{\n        \"client_name\": \"MCP Inspector\",\n        \"client_uri\": \"https://github.com/modelcontextprotocol/inspector\",\n        \"redirect_uris\": [\n          \"http://127.0.0.1:3000/auth\",\n          \"http://localhost:6274/oauth/callback\",\n          \"http://localhost:8080/callback\"\n        ],\n        \"token_endpoint_auth_method\": \"none\",\n        \"grant_types\": [\"client_credentials\", \"authorization_code\", \"refresh_token\"],\n        \"response_types\": [\"token\", \"code\"]\n      }`;\n\n      const client1 = JSON.parse(clientJson1) as OAuthClient;\n      const client2 = JSON.parse(clientJson2) as OAuthClient;\n\n      const id1 = service.generateClientId(client1);\n      const id2 = service.generateClientId(client2);\n\n      expect(id1).toBe(id2);\n    });\n\n    it('should generate consistent client IDs regardless of both property and array order', () => {\n      // First object with mixed ordering\n      const clientJson1 = `{\n        \"grant_types\": [\"refresh_token\", \"authorization_code\"],\n        \"client_name\": \"MCP Inspector\",\n        \"response_types\": [\"code\"],\n        \"redirect_uris\": [\n          \"http://localhost:8080/callback\",\n          \"http://localhost:6274/oauth/callback\"\n        ],\n        \"token_endpoint_auth_method\": \"none\",\n        \"client_uri\": \"https://github.com/modelcontextprotocol/inspector\"\n      }`;\n\n      // Second object with different mixed ordering\n      const clientJson2 = `{\n        \"client_uri\": \"https://github.com/modelcontextprotocol/inspector\",\n        \"token_endpoint_auth_method\": \"none\",\n        \"redirect_uris\": [\n          \"http://localhost:6274/oauth/callback\",\n          \"http://localhost:8080/callback\"\n        ],\n        \"response_types\": [\"code\"],\n        \"client_name\": \"MCP Inspector\",\n        \"grant_types\": [\"authorization_code\", \"refresh_token\"]\n      }`;\n\n      const client1 = JSON.parse(clientJson1) as OAuthClient;\n      const client2 = JSON.parse(clientJson2) as OAuthClient;\n\n      const id1 = service.generateClientId(client1);\n      const id2 = service.generateClientId(client2);\n\n      expect(id1).toBe(id2);\n    });\n\n    it('should generate different client IDs for different objects', () => {\n      const client1: Partial<OAuthClient> = {\n        client_name: 'MCP Inspector',\n        client_uri: 'https://github.com/modelcontextprotocol/inspector',\n        redirect_uris: ['http://localhost:6274/oauth/callback'],\n        token_endpoint_auth_method: 'none',\n        grant_types: ['authorization_code', 'refresh_token'],\n        response_types: ['code'],\n      };\n\n      const client2: Partial<OAuthClient> = {\n        client_name: 'Different App', // Changed client name\n        client_uri: 'https://github.com/modelcontextprotocol/inspector',\n        redirect_uris: ['http://localhost:6274/oauth/callback'],\n        token_endpoint_auth_method: 'none',\n        grant_types: ['authorization_code', 'refresh_token'],\n        response_types: ['code'],\n      };\n\n      const id1 = service.generateClientId(client1 as OAuthClient);\n      const id2 = service.generateClientId(client2 as OAuthClient);\n\n      expect(id1).not.toBe(id2);\n    });\n\n    it('should generate different client IDs when array contents differ', () => {\n      const client1: Partial<OAuthClient> = {\n        client_name: 'MCP Inspector',\n        client_uri: 'https://github.com/modelcontextprotocol/inspector',\n        redirect_uris: ['http://localhost:6274/oauth/callback'],\n        token_endpoint_auth_method: 'none',\n        grant_types: ['authorization_code', 'refresh_token'],\n        response_types: ['code'],\n      };\n\n      const client2: Partial<OAuthClient> = {\n        client_name: 'MCP Inspector',\n        client_uri: 'https://github.com/modelcontextprotocol/inspector',\n        redirect_uris: ['http://localhost:6274/oauth/callback'],\n        token_endpoint_auth_method: 'none',\n        grant_types: ['authorization_code'], // Removed 'refresh_token'\n        response_types: ['code'],\n      };\n\n      const id1 = service.generateClientId(client1 as OAuthClient);\n      const id2 = service.generateClientId(client2 as OAuthClient);\n\n      expect(id1).not.toBe(id2);\n    });\n\n    it('should include normalized client name in the generated ID', () => {\n      const client: Partial<OAuthClient> = {\n        client_name: 'MCP Inspector!@#', // Special characters\n        client_uri: 'https://github.com/modelcontextprotocol/inspector',\n        redirect_uris: ['http://localhost:6274/oauth/callback'],\n        token_endpoint_auth_method: 'none',\n        grant_types: ['authorization_code', 'refresh_token'],\n        response_types: ['code'],\n      };\n\n      const clientId = service.generateClientId(client as OAuthClient);\n\n      // Should start with normalized name (lowercase, alphanumeric only)\n      expect(clientId).toMatch(/^mcpinspector_[a-f0-9]{16}$/);\n    });\n\n    it('should generate IDs with consistent format', () => {\n      const client: Partial<OAuthClient> = {\n        client_name: 'Test App',\n        client_uri: 'https://example.com',\n        redirect_uris: ['http://localhost:3000/callback'],\n        token_endpoint_auth_method: 'none',\n        grant_types: ['authorization_code'],\n        response_types: ['code'],\n      };\n\n      const clientId = service.generateClientId(client as OAuthClient);\n\n      // Should match pattern: normalizedname_16hexchars\n      expect(clientId).toMatch(/^[a-z0-9]+_[a-f0-9]{16}$/);\n\n      // Should be consistent across multiple calls\n      const clientId2 = service.generateClientId(client as OAuthClient);\n      expect(clientId).toBe(clientId2);\n    });\n  });\n});\n"]}

package/dist/authz/stores/oauth-store.interface.d.ts

@@ -0,0 +1,52 @@
+import { OAuthSession } from '../providers/oauth-provider.interface';
+export interface OAuthClient {
+    client_id: string;
+    client_name: string;
+    client_description?: string;
+    logo_uri?: string;
+    client_uri?: string;
+    developer_name?: string;
+    developer_email?: string;
+    redirect_uris: string[];
+    grant_types: string[];
+    response_types: string[];
+    token_endpoint_auth_method: string;
+    created_at: Date;
+    updated_at: Date;
+}
+export interface AuthorizationCode {
+    code: string;
+    user_id: string;
+    client_id: string;
+    redirect_uri: string;
+    code_challenge: string;
+    code_challenge_method: string;
+    expires_at: number;
+    used_at?: Date;
+    github_access_token: string;
+}
+export interface ClientRegistrationDto {
+    client_name: string;
+    client_description?: string;
+    logo_uri?: string;
+    client_uri?: string;
+    developer_name?: string;
+    developer_email?: string;
+    redirect_uris: string[];
+    grant_types?: string[];
+    response_types?: string[];
+    token_endpoint_auth_method?: string;
+}
+export interface IOAuthStore {
+    storeClient(client: OAuthClient): Promise<OAuthClient>;
+    getClient(client_id: string): Promise<OAuthClient | undefined>;
+    findClient(client_name: string): Promise<OAuthClient | undefined>;
+    generateClientId(client: OAuthClient): string;
+    storeAuthCode(code: AuthorizationCode): Promise<void>;
+    getAuthCode(code: string): Promise<AuthorizationCode | undefined>;
+    removeAuthCode(code: string): Promise<void>;
+    storeOAuthSession(sessionId: string, session: OAuthSession): Promise<void>;
+    getOAuthSession(sessionId: string): Promise<OAuthSession | undefined>;
+    removeOAuthSession(sessionId: string): Promise<void>;
+}
+//# sourceMappingURL=oauth-store.interface.d.ts.map

package/dist/authz/stores/oauth-store.interface.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-store.interface.d.ts","sourceRoot":"","sources":["../../../src/authz/stores/oauth-store.interface.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAErE,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,0BAA0B,EAAE,MAAM,CAAC;IACnC,UAAU,EAAE,IAAI,CAAC;IACjB,UAAU,EAAE,IAAI,CAAC;CAClB;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;IACvB,qBAAqB,EAAE,MAAM,CAAC;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,IAAI,CAAC;IACf,mBAAmB,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,qBAAqB;IACpC,WAAW,EAAE,MAAM,CAAC;IACpB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,0BAA0B,CAAC,EAAE,MAAM,CAAC;CACrC;AA+CD,MAAM,WAAW,WAAW;IAE1B,WAAW,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACvD,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC,CAAC;IAC/D,UAAU,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC,CAAC;IAClE,gBAAgB,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,CAAC;IAG9C,aAAa,CAAC,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtD,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC,CAAC;IAClE,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAG5C,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3E,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC,CAAC;IACtE,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACtD"}

package/dist/authz/stores/oauth-store.interface.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=oauth-store.interface.js.map

package/dist/authz/stores/oauth-store.interface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-store.interface.js","sourceRoot":"","sources":["../../../src/authz/stores/oauth-store.interface.ts"],"names":[],"mappings":"","sourcesContent":["import { OAuthSession } from '../providers/oauth-provider.interface';\n\nexport interface OAuthClient {\n  client_id: string;\n  client_name: string;\n  client_description?: string;\n  logo_uri?: string;\n  client_uri?: string;\n  developer_name?: string;\n  developer_email?: string;\n  redirect_uris: string[];\n  grant_types: string[];\n  response_types: string[];\n  token_endpoint_auth_method: string;\n  created_at: Date;\n  updated_at: Date;\n}\n\nexport interface AuthorizationCode {\n  code: string;\n  user_id: string;\n  client_id: string;\n  redirect_uri: string;\n  code_challenge: string;\n  code_challenge_method: string;\n  expires_at: number;\n  used_at?: Date;\n  github_access_token: string;\n}\n\nexport interface ClientRegistrationDto {\n  client_name: string;\n  client_description?: string;\n  logo_uri?: string;\n  client_uri?: string;\n  developer_name?: string;\n  developer_email?: string;\n  redirect_uris: string[];\n  grant_types?: string[];\n  response_types?: string[];\n  token_endpoint_auth_method?: string;\n}\n\n/**\n * Interface for OAuth store implementations.\n *\n * Implement this interface to create custom storage solutions (e.g., Redis, Database, etc.).\n * The default implementation is an in-memory store suitable for development.\n *\n * @example\n * ```typescript\n * class RedisOAuthStore implements IOAuthStore {\n *   constructor(private redisClient: RedisClient) {}\n *\n *   async storeClient(client: OAuthClient): Promise<void> {\n *     await this.redisClient.set(`client:${client.client_id}`, JSON.stringify(client));\n *   }\n *\n *   async getClient(client_id: string): Promise<OAuthClient | undefined> {\n *     const data = await this.redisClient.get(`client:${client_id}`);\n *     return data ? JSON.parse(data) : undefined;\n *   }\n *\n *   async findClient(client_name: string): Promise<OAuthClient | undefined> {\n *     const data = await this.redisClient.get(`client_name:${client_name}`);\n *     return data ? JSON.parse(data) : undefined;\n *   }\n *\n *   generateClientId(client: OAuthClient): string {\n *     // Custom client ID generation logic\n *     const normalizedName = client.client_name.toLowerCase().replace(/[^a-z0-9]/g, '');\n *     const timestamp = Date.now().toString(36);\n *     return `${normalizedName}_${timestamp}`;\n *   }\n *\n *   // ... implement other methods\n * }\n *\n * // Usage in module:\n * McpOAuthModule.forRoot({\n *   provider: GoogleOAuthProvider,\n *   clientId: process.env.GOOGLE_CLIENT_ID!,\n *   clientSecret: process.env.GOOGLE_CLIENT_SECRET!,\n *   jwtSecret: process.env.JWT_SECRET!,\n *   memoryStore: new RedisOAuthStore(redisClient), // Custom implementation\n * })\n * ```\n */\nexport interface IOAuthStore {\n  // Client management\n  storeClient(client: OAuthClient): Promise<OAuthClient>;\n  getClient(client_id: string): Promise<OAuthClient | undefined>;\n  findClient(client_name: string): Promise<OAuthClient | undefined>;\n  generateClientId(client: OAuthClient): string;\n\n  // Authorization code management\n  storeAuthCode(code: AuthorizationCode): Promise<void>;\n  getAuthCode(code: string): Promise<AuthorizationCode | undefined>;\n  removeAuthCode(code: string): Promise<void>;\n\n  // OAuth session management\n  storeOAuthSession(sessionId: string, session: OAuthSession): Promise<void>;\n  getOAuthSession(sessionId: string): Promise<OAuthSession | undefined>;\n  removeOAuthSession(sessionId: string): Promise<void>;\n}\n"]}

package/dist/authz/stores/sqlite/sqlite-store.service.d.ts

@@ -0,0 +1,18 @@
+import { OAuthSession } from '../../providers/oauth-provider.interface';
+import { AuthorizationCode, IOAuthStore, OAuthClient } from '../oauth-store.interface';
+export declare class SQLiteStore implements IOAuthStore {
+    private sqlite;
+    constructor(databasePath?: string);
+    private initializeTables;
+    storeClient(client: OAuthClient): Promise<OAuthClient>;
+    getClient(client_id: string): Promise<OAuthClient | undefined>;
+    findClient(client_name: string): Promise<OAuthClient | undefined>;
+    storeAuthCode(code: AuthorizationCode): Promise<void>;
+    getAuthCode(code: string): Promise<AuthorizationCode | undefined>;
+    removeAuthCode(code: string): Promise<void>;
+    storeOAuthSession(sessionId: string, session: OAuthSession): Promise<void>;
+    getOAuthSession(sessionId: string): Promise<OAuthSession | undefined>;
+    removeOAuthSession(sessionId: string): Promise<void>;
+    generateClientId(client: OAuthClient): string;
+}
+//# sourceMappingURL=sqlite-store.service.d.ts.map

package/dist/authz/stores/sqlite/sqlite-store.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sqlite-store.service.d.ts","sourceRoot":"","sources":["../../../../src/authz/stores/sqlite/sqlite-store.service.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,YAAY,EAAE,MAAM,0CAA0C,CAAC;AACxE,OAAO,EACL,iBAAiB,EACjB,WAAW,EACX,WAAW,EACZ,MAAM,0BAA0B,CAAC;AAElC,qBACa,WAAY,YAAW,WAAW;IAC7C,OAAO,CAAC,MAAM,CAAM;gBAER,YAAY,GAAE,MAA4B;IAKtD,OAAO,CAAC,gBAAgB;IAoDlB,WAAW,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;IA4BtD,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC;IA2B9D,UAAU,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC;IA4BjE,aAAa,CAAC,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;IAqBrD,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC;IA6BjE,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ3C,iBAAiB,CACrB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,YAAY,GACpB,OAAO,CAAC,IAAI,CAAC;IAoBV,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC;IA4BrE,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAO1D,gBAAgB,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM;CAQ9C"}