@rekog/mcp-nest 1.7.0-alpha.0 → 1.7.0-alpha.2

package/dist/authz/stores/sqlite/sqlite-store.service.js

@@ -0,0 +1,206 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SQLiteStore = void 0;
+const common_1 = require("@nestjs/common");
+const better_sqlite3_1 = __importDefault(require("better-sqlite3"));
+const crypto_1 = require("crypto");
+let SQLiteStore = class SQLiteStore {
+    constructor(databasePath = './oauth-sqlite.db') {
+        this.sqlite = new better_sqlite3_1.default(databasePath);
+        this.initializeTables();
+    }
+    initializeTables() {
+        this.sqlite.pragma('foreign_keys = ON');
+        this.sqlite.exec(`
+      CREATE TABLE IF NOT EXISTS oauth_clients (
+        client_id TEXT PRIMARY KEY,
+        client_name TEXT NOT NULL,
+        client_description TEXT,
+        logo_uri TEXT,
+        client_uri TEXT,
+        developer_name TEXT,
+        developer_email TEXT,
+        redirect_uris TEXT NOT NULL,
+        grant_types TEXT NOT NULL,
+        response_types TEXT NOT NULL,
+        token_endpoint_auth_method TEXT NOT NULL,
+        created_at INTEGER NOT NULL,
+        updated_at INTEGER NOT NULL
+      )
+    `);
+        this.sqlite.exec(`
+      CREATE TABLE IF NOT EXISTS authorization_codes (
+        code TEXT PRIMARY KEY,
+        user_id TEXT NOT NULL,
+        client_id TEXT NOT NULL,
+        redirect_uri TEXT NOT NULL,
+        code_challenge TEXT NOT NULL,
+        code_challenge_method TEXT NOT NULL,
+        expires_at INTEGER NOT NULL,
+        used_at INTEGER,
+        github_access_token TEXT NOT NULL
+      )
+    `);
+        this.sqlite.exec(`
+      CREATE TABLE IF NOT EXISTS oauth_sessions (
+        session_id TEXT PRIMARY KEY,
+        client_id TEXT NOT NULL,
+        redirect_uri TEXT NOT NULL,
+        code_challenge TEXT NOT NULL,
+        code_challenge_method TEXT NOT NULL,
+        state TEXT,
+        resource TEXT,
+        expires_at INTEGER NOT NULL
+      )
+    `);
+    }
+    async storeClient(client) {
+        const stmt = this.sqlite.prepare(`
+      INSERT INTO oauth_clients (
+        client_id, client_name, client_description, logo_uri, client_uri,
+        developer_name, developer_email, redirect_uris, grant_types,
+        response_types, token_endpoint_auth_method, created_at, updated_at
+      ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+    `);
+        stmt.run(client.client_id, client.client_name, client.client_description || null, client.logo_uri || null, client.client_uri || null, client.developer_name || null, client.developer_email || null, JSON.stringify(client.redirect_uris), JSON.stringify(client.grant_types), JSON.stringify(client.response_types), client.token_endpoint_auth_method, client.created_at.getTime(), client.updated_at.getTime());
+        return client;
+    }
+    async getClient(client_id) {
+        const stmt = this.sqlite.prepare('SELECT * FROM oauth_clients WHERE client_id = ?');
+        const result = stmt.get(client_id);
+        if (!result) {
+            return undefined;
+        }
+        return {
+            client_id: result.client_id,
+            client_name: result.client_name,
+            client_description: result.client_description || undefined,
+            logo_uri: result.logo_uri || undefined,
+            client_uri: result.client_uri || undefined,
+            developer_name: result.developer_name || undefined,
+            developer_email: result.developer_email || undefined,
+            redirect_uris: JSON.parse(result.redirect_uris),
+            grant_types: JSON.parse(result.grant_types),
+            response_types: JSON.parse(result.response_types),
+            token_endpoint_auth_method: result.token_endpoint_auth_method,
+            created_at: new Date(result.created_at),
+            updated_at: new Date(result.updated_at),
+        };
+    }
+    async findClient(client_name) {
+        const stmt = this.sqlite.prepare('SELECT * FROM oauth_clients WHERE client_name = ?');
+        const result = stmt.get(client_name);
+        if (!result) {
+            return undefined;
+        }
+        return {
+            client_id: result.client_id,
+            client_name: result.client_name,
+            client_description: result.client_description || undefined,
+            logo_uri: result.logo_uri || undefined,
+            client_uri: result.client_uri || undefined,
+            developer_name: result.developer_name || undefined,
+            developer_email: result.developer_email || undefined,
+            redirect_uris: JSON.parse(result.redirect_uris),
+            grant_types: JSON.parse(result.grant_types),
+            response_types: JSON.parse(result.response_types),
+            token_endpoint_auth_method: result.token_endpoint_auth_method,
+            created_at: new Date(result.created_at),
+            updated_at: new Date(result.updated_at),
+        };
+    }
+    async storeAuthCode(code) {
+        const stmt = this.sqlite.prepare(`
+      INSERT INTO authorization_codes (
+        code, user_id, client_id, redirect_uri, code_challenge,
+        code_challenge_method, expires_at, used_at, github_access_token
+      ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)
+    `);
+        stmt.run(code.code, code.user_id, code.client_id, code.redirect_uri, code.code_challenge, code.code_challenge_method, code.expires_at, code.used_at ? code.used_at.getTime() : null, code.github_access_token);
+    }
+    async getAuthCode(code) {
+        const stmt = this.sqlite.prepare('SELECT * FROM authorization_codes WHERE code = ?');
+        const result = stmt.get(code);
+        if (!result) {
+            return undefined;
+        }
+        if (result.expires_at < Date.now()) {
+            await this.removeAuthCode(code);
+            return undefined;
+        }
+        return {
+            code: result.code,
+            user_id: result.user_id,
+            client_id: result.client_id,
+            redirect_uri: result.redirect_uri,
+            code_challenge: result.code_challenge,
+            code_challenge_method: result.code_challenge_method,
+            expires_at: result.expires_at,
+            used_at: result.used_at ? new Date(result.used_at) : undefined,
+            github_access_token: result.github_access_token,
+        };
+    }
+    async removeAuthCode(code) {
+        const stmt = this.sqlite.prepare('DELETE FROM authorization_codes WHERE code = ?');
+        stmt.run(code);
+    }
+    async storeOAuthSession(sessionId, session) {
+        const stmt = this.sqlite.prepare(`
+      INSERT INTO oauth_sessions (
+        session_id, client_id, redirect_uri, code_challenge,
+        code_challenge_method, state, resource, expires_at
+      ) VALUES (?, ?, ?, ?, ?, ?, ?, ?)
+    `);
+        stmt.run(sessionId, session.clientId, session.redirectUri, session.codeChallenge, session.codeChallengeMethod, session.state || null, session.resource || null, session.expiresAt);
+    }
+    async getOAuthSession(sessionId) {
+        const stmt = this.sqlite.prepare('SELECT * FROM oauth_sessions WHERE session_id = ?');
+        const result = stmt.get(sessionId);
+        if (!result) {
+            return undefined;
+        }
+        if (result.expires_at < Date.now()) {
+            await this.removeOAuthSession(sessionId);
+            return undefined;
+        }
+        return {
+            sessionId: result.session_id,
+            clientId: result.client_id,
+            redirectUri: result.redirect_uri,
+            codeChallenge: result.code_challenge,
+            codeChallengeMethod: result.code_challenge_method,
+            state: result.state || undefined,
+            resource: result.resource || undefined,
+            expiresAt: result.expires_at,
+        };
+    }
+    async removeOAuthSession(sessionId) {
+        const stmt = this.sqlite.prepare('DELETE FROM oauth_sessions WHERE session_id = ?');
+        stmt.run(sessionId);
+    }
+    generateClientId(client) {
+        const normalizedName = client.client_name
+            .toLowerCase()
+            .replace(/[^a-z0-9]/g, '');
+        const salt = (0, crypto_1.randomBytes)(4).toString('hex');
+        return `${normalizedName}_${salt}`;
+    }
+};
+exports.SQLiteStore = SQLiteStore;
+exports.SQLiteStore = SQLiteStore = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [String])
+], SQLiteStore);
+//# sourceMappingURL=sqlite-store.service.js.map

package/dist/authz/stores/sqlite/sqlite-store.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sqlite-store.service.js","sourceRoot":"","sources":["../../../../src/authz/stores/sqlite/sqlite-store.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAA4C;AAC5C,oEAAsC;AACtC,mCAAqC;AAS9B,IAAM,WAAW,GAAjB,MAAM,WAAW;IAGtB,YAAY,eAAuB,mBAAmB;QACpD,IAAI,CAAC,MAAM,GAAG,IAAI,wBAAQ,CAAC,YAAY,CAAC,CAAC;QACzC,IAAI,CAAC,gBAAgB,EAAE,CAAC;IAC1B,CAAC;IAEO,gBAAgB;QAEtB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;QAGxC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;;;;;;;;;;;;;;;;KAgBhB,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;;;;;;;;;;;;KAYhB,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;;;;;;;;;;;KAWhB,CAAC,CAAC;IACL,CAAC;IAGD,KAAK,CAAC,WAAW,CAAC,MAAmB;QACnC,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;;;;;;KAMhC,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,CACN,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,WAAW,EAClB,MAAM,CAAC,kBAAkB,IAAI,IAAI,EACjC,MAAM,CAAC,QAAQ,IAAI,IAAI,EACvB,MAAM,CAAC,UAAU,IAAI,IAAI,EACzB,MAAM,CAAC,cAAc,IAAI,IAAI,EAC7B,MAAM,CAAC,eAAe,IAAI,IAAI,EAC9B,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,aAAa,CAAC,EACpC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,EAClC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,cAAc,CAAC,EACrC,MAAM,CAAC,0BAA0B,EACjC,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,EAC3B,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,CAC5B,CAAC;QAEF,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,SAAiB;QAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAC9B,iDAAiD,CAClD,CAAC;QACF,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAQ,CAAC;QAE1C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO;YACL,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,kBAAkB,EAAE,MAAM,CAAC,kBAAkB,IAAI,SAAS;YAC1D,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,SAAS;YACtC,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,SAAS;YAC1C,cAAc,EAAE,MAAM,CAAC,cAAc,IAAI,SAAS;YAClD,eAAe,EAAE,MAAM,CAAC,eAAe,IAAI,SAAS;YACpD,aAAa,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC;YAC/C,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC;YAC3C,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,cAAc,CAAC;YACjD,0BAA0B,EAAE,MAAM,CAAC,0BAA0B;YAC7D,UAAU,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC;YACvC,UAAU,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC;SACxC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,WAAmB;QAClC,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAC9B,mDAAmD,CACpD,CAAC;QACF,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,CAAQ,CAAC;QAE5C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO;YACL,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,kBAAkB,EAAE,MAAM,CAAC,kBAAkB,IAAI,SAAS;YAC1D,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,SAAS;YACtC,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,SAAS;YAC1C,cAAc,EAAE,MAAM,CAAC,cAAc,IAAI,SAAS;YAClD,eAAe,EAAE,MAAM,CAAC,eAAe,IAAI,SAAS;YACpD,aAAa,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC;YAC/C,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC;YAC3C,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,cAAc,CAAC;YACjD,0BAA0B,EAAE,MAAM,CAAC,0BAA0B;YAC7D,UAAU,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC;YACvC,UAAU,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC;SACxC,CAAC;IACJ,CAAC;IAGD,KAAK,CAAC,aAAa,CAAC,IAAuB;QACzC,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;;;;;KAKhC,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,CACN,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,YAAY,EACjB,IAAI,CAAC,cAAc,EACnB,IAAI,CAAC,qBAAqB,EAC1B,IAAI,CAAC,UAAU,EACf,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,EAC5C,IAAI,CAAC,mBAAmB,CACzB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,IAAY;QAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAC9B,kDAAkD,CACnD,CAAC;QACF,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAQ,CAAC;QAErC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,SAAS,CAAC;QACnB,CAAC;QAGD,IAAI,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YACnC,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;YAChC,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO;YACL,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,qBAAqB,EAAE,MAAM,CAAC,qBAAqB;YACnD,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;YAC9D,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;SAChD,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,IAAY;QAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAC9B,gDAAgD,CACjD,CAAC;QACF,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACjB,CAAC;IAGD,KAAK,CAAC,iBAAiB,CACrB,SAAiB,EACjB,OAAqB;QAErB,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;;;;;KAKhC,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,CACN,SAAS,EACT,OAAO,CAAC,QAAQ,EAChB,OAAO,CAAC,WAAW,EACnB,OAAO,CAAC,aAAa,EACrB,OAAO,CAAC,mBAAmB,EAC3B,OAAO,CAAC,KAAK,IAAI,IAAI,EACrB,OAAO,CAAC,QAAQ,IAAI,IAAI,EACxB,OAAO,CAAC,SAAS,CAClB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,SAAiB;QACrC,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAC9B,mDAAmD,CACpD,CAAC;QACF,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAQ,CAAC;QAE1C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,SAAS,CAAC;QACnB,CAAC;QAGD,IAAI,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YACnC,MAAM,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC;YACzC,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO;YACL,SAAS,EAAE,MAAM,CAAC,UAAU;YAC5B,QAAQ,EAAE,MAAM,CAAC,SAAS;YAC1B,WAAW,EAAE,MAAM,CAAC,YAAY;YAChC,aAAa,EAAE,MAAM,CAAC,cAAc;YACpC,mBAAmB,EAAE,MAAM,CAAC,qBAAqB;YACjD,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,SAAS;YAChC,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,SAAS;YACtC,SAAS,EAAE,MAAM,CAAC,UAAU;SAC7B,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,SAAiB;QACxC,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAC9B,iDAAiD,CAClD,CAAC;QACF,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACtB,CAAC;IAED,gBAAgB,CAAC,MAAmB;QAElC,MAAM,cAAc,GAAG,MAAM,CAAC,WAAW;aACtC,WAAW,EAAE;aACb,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;QAC7B,MAAM,IAAI,GAAG,IAAA,oBAAW,EAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC5C,OAAO,GAAG,cAAc,IAAI,IAAI,EAAE,CAAC;IACrC,CAAC;CACF,CAAA;AA3QY,kCAAW;sBAAX,WAAW;IADvB,IAAA,mBAAU,GAAE;;GACA,WAAW,CA2QvB","sourcesContent":["import { Injectable } from '@nestjs/common';\nimport Database from 'better-sqlite3';\nimport { randomBytes } from 'crypto';\nimport { OAuthSession } from '../../providers/oauth-provider.interface';\nimport {\n  AuthorizationCode,\n  IOAuthStore,\n  OAuthClient,\n} from '../oauth-store.interface';\n\n@Injectable()\nexport class SQLiteStore implements IOAuthStore {\n  private sqlite: any;\n\n  constructor(databasePath: string = './oauth-sqlite.db') {\n    this.sqlite = new Database(databasePath);\n    this.initializeTables();\n  }\n\n  private initializeTables() {\n    // Enable foreign keys\n    this.sqlite.pragma('foreign_keys = ON');\n\n    // Create tables if they don't exist\n    this.sqlite.exec(`\n      CREATE TABLE IF NOT EXISTS oauth_clients (\n        client_id TEXT PRIMARY KEY,\n        client_name TEXT NOT NULL,\n        client_description TEXT,\n        logo_uri TEXT,\n        client_uri TEXT,\n        developer_name TEXT,\n        developer_email TEXT,\n        redirect_uris TEXT NOT NULL,\n        grant_types TEXT NOT NULL,\n        response_types TEXT NOT NULL,\n        token_endpoint_auth_method TEXT NOT NULL,\n        created_at INTEGER NOT NULL,\n        updated_at INTEGER NOT NULL\n      )\n    `);\n\n    this.sqlite.exec(`\n      CREATE TABLE IF NOT EXISTS authorization_codes (\n        code TEXT PRIMARY KEY,\n        user_id TEXT NOT NULL,\n        client_id TEXT NOT NULL,\n        redirect_uri TEXT NOT NULL,\n        code_challenge TEXT NOT NULL,\n        code_challenge_method TEXT NOT NULL,\n        expires_at INTEGER NOT NULL,\n        used_at INTEGER,\n        github_access_token TEXT NOT NULL\n      )\n    `);\n\n    this.sqlite.exec(`\n      CREATE TABLE IF NOT EXISTS oauth_sessions (\n        session_id TEXT PRIMARY KEY,\n        client_id TEXT NOT NULL,\n        redirect_uri TEXT NOT NULL,\n        code_challenge TEXT NOT NULL,\n        code_challenge_method TEXT NOT NULL,\n        state TEXT,\n        resource TEXT,\n        expires_at INTEGER NOT NULL\n      )\n    `);\n  }\n\n  // Client management\n  async storeClient(client: OAuthClient): Promise<OAuthClient> {\n    const stmt = this.sqlite.prepare(`\n      INSERT INTO oauth_clients (\n        client_id, client_name, client_description, logo_uri, client_uri,\n        developer_name, developer_email, redirect_uris, grant_types,\n        response_types, token_endpoint_auth_method, created_at, updated_at\n      ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)\n    `);\n\n    stmt.run(\n      client.client_id,\n      client.client_name,\n      client.client_description || null,\n      client.logo_uri || null,\n      client.client_uri || null,\n      client.developer_name || null,\n      client.developer_email || null,\n      JSON.stringify(client.redirect_uris),\n      JSON.stringify(client.grant_types),\n      JSON.stringify(client.response_types),\n      client.token_endpoint_auth_method,\n      client.created_at.getTime(),\n      client.updated_at.getTime(),\n    );\n\n    return client;\n  }\n\n  async getClient(client_id: string): Promise<OAuthClient | undefined> {\n    const stmt = this.sqlite.prepare(\n      'SELECT * FROM oauth_clients WHERE client_id = ?',\n    );\n    const result = stmt.get(client_id) as any;\n\n    if (!result) {\n      return undefined;\n    }\n\n    return {\n      client_id: result.client_id,\n      client_name: result.client_name,\n      client_description: result.client_description || undefined,\n      logo_uri: result.logo_uri || undefined,\n      client_uri: result.client_uri || undefined,\n      developer_name: result.developer_name || undefined,\n      developer_email: result.developer_email || undefined,\n      redirect_uris: JSON.parse(result.redirect_uris),\n      grant_types: JSON.parse(result.grant_types),\n      response_types: JSON.parse(result.response_types),\n      token_endpoint_auth_method: result.token_endpoint_auth_method,\n      created_at: new Date(result.created_at),\n      updated_at: new Date(result.updated_at),\n    };\n  }\n\n  async findClient(client_name: string): Promise<OAuthClient | undefined> {\n    const stmt = this.sqlite.prepare(\n      'SELECT * FROM oauth_clients WHERE client_name = ?',\n    );\n    const result = stmt.get(client_name) as any;\n\n    if (!result) {\n      return undefined;\n    }\n\n    return {\n      client_id: result.client_id,\n      client_name: result.client_name,\n      client_description: result.client_description || undefined,\n      logo_uri: result.logo_uri || undefined,\n      client_uri: result.client_uri || undefined,\n      developer_name: result.developer_name || undefined,\n      developer_email: result.developer_email || undefined,\n      redirect_uris: JSON.parse(result.redirect_uris),\n      grant_types: JSON.parse(result.grant_types),\n      response_types: JSON.parse(result.response_types),\n      token_endpoint_auth_method: result.token_endpoint_auth_method,\n      created_at: new Date(result.created_at),\n      updated_at: new Date(result.updated_at),\n    };\n  }\n\n  // Authorization code management\n  async storeAuthCode(code: AuthorizationCode): Promise<void> {\n    const stmt = this.sqlite.prepare(`\n      INSERT INTO authorization_codes (\n        code, user_id, client_id, redirect_uri, code_challenge,\n        code_challenge_method, expires_at, used_at, github_access_token\n      ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)\n    `);\n\n    stmt.run(\n      code.code,\n      code.user_id,\n      code.client_id,\n      code.redirect_uri,\n      code.code_challenge,\n      code.code_challenge_method,\n      code.expires_at,\n      code.used_at ? code.used_at.getTime() : null,\n      code.github_access_token,\n    );\n  }\n\n  async getAuthCode(code: string): Promise<AuthorizationCode | undefined> {\n    const stmt = this.sqlite.prepare(\n      'SELECT * FROM authorization_codes WHERE code = ?',\n    );\n    const result = stmt.get(code) as any;\n\n    if (!result) {\n      return undefined;\n    }\n\n    // Check if expired\n    if (result.expires_at < Date.now()) {\n      await this.removeAuthCode(code);\n      return undefined;\n    }\n\n    return {\n      code: result.code,\n      user_id: result.user_id,\n      client_id: result.client_id,\n      redirect_uri: result.redirect_uri,\n      code_challenge: result.code_challenge,\n      code_challenge_method: result.code_challenge_method,\n      expires_at: result.expires_at,\n      used_at: result.used_at ? new Date(result.used_at) : undefined,\n      github_access_token: result.github_access_token,\n    };\n  }\n\n  async removeAuthCode(code: string): Promise<void> {\n    const stmt = this.sqlite.prepare(\n      'DELETE FROM authorization_codes WHERE code = ?',\n    );\n    stmt.run(code);\n  }\n\n  // OAuth session management\n  async storeOAuthSession(\n    sessionId: string,\n    session: OAuthSession,\n  ): Promise<void> {\n    const stmt = this.sqlite.prepare(`\n      INSERT INTO oauth_sessions (\n        session_id, client_id, redirect_uri, code_challenge,\n        code_challenge_method, state, resource, expires_at\n      ) VALUES (?, ?, ?, ?, ?, ?, ?, ?)\n    `);\n\n    stmt.run(\n      sessionId,\n      session.clientId,\n      session.redirectUri,\n      session.codeChallenge,\n      session.codeChallengeMethod,\n      session.state || null,\n      session.resource || null,\n      session.expiresAt,\n    );\n  }\n\n  async getOAuthSession(sessionId: string): Promise<OAuthSession | undefined> {\n    const stmt = this.sqlite.prepare(\n      'SELECT * FROM oauth_sessions WHERE session_id = ?',\n    );\n    const result = stmt.get(sessionId) as any;\n\n    if (!result) {\n      return undefined;\n    }\n\n    // Check if expired\n    if (result.expires_at < Date.now()) {\n      await this.removeOAuthSession(sessionId);\n      return undefined;\n    }\n\n    return {\n      sessionId: result.session_id,\n      clientId: result.client_id,\n      redirectUri: result.redirect_uri,\n      codeChallenge: result.code_challenge,\n      codeChallengeMethod: result.code_challenge_method,\n      state: result.state || undefined,\n      resource: result.resource || undefined,\n      expiresAt: result.expires_at,\n    };\n  }\n\n  async removeOAuthSession(sessionId: string): Promise<void> {\n    const stmt = this.sqlite.prepare(\n      'DELETE FROM oauth_sessions WHERE session_id = ?',\n    );\n    stmt.run(sessionId);\n  }\n\n  generateClientId(client: OAuthClient): string {\n    // Create deterministic client ID based on name + random salt\n    const normalizedName = client.client_name\n      .toLowerCase()\n      .replace(/[^a-z0-9]/g, '');\n    const salt = randomBytes(4).toString('hex');\n    return `${normalizedName}_${salt}`;\n  }\n}\n"]}

package/dist/authz/stores/typeorm/entities/authorization-code.entity.d.ts

@@ -0,0 +1,13 @@
+export declare class AuthorizationCodeEntity {
+    code: string;
+    user_id: string;
+    client_id: string;
+    redirect_uri: string;
+    code_challenge: string;
+    code_challenge_method: string;
+    expires_at: number;
+    used_at?: Date;
+    github_access_token: string;
+    created_at: Date;
+}
+//# sourceMappingURL=authorization-code.entity.d.ts.map

package/dist/authz/stores/typeorm/entities/authorization-code.entity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorization-code.entity.d.ts","sourceRoot":"","sources":["../../../../../src/authz/stores/typeorm/entities/authorization-code.entity.ts"],"names":[],"mappings":"AAEA,qBACa,uBAAuB;IAElC,IAAI,EAAE,MAAM,CAAC;IAGb,OAAO,EAAE,MAAM,CAAC;IAGhB,SAAS,EAAE,MAAM,CAAC;IAGlB,YAAY,EAAE,MAAM,CAAC;IAGrB,cAAc,EAAE,MAAM,CAAC;IAGvB,qBAAqB,EAAE,MAAM,CAAC;IAG9B,UAAU,EAAE,MAAM,CAAC;IAGnB,OAAO,CAAC,EAAE,IAAI,CAAC;IAGf,mBAAmB,EAAE,MAAM,CAAC;IAG5B,UAAU,EAAE,IAAI,CAAC;CAClB"}

package/dist/authz/stores/typeorm/entities/authorization-code.entity.js

@@ -0,0 +1,60 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthorizationCodeEntity = void 0;
+const typeorm_1 = require("typeorm");
+let AuthorizationCodeEntity = class AuthorizationCodeEntity {
+};
+exports.AuthorizationCodeEntity = AuthorizationCodeEntity;
+__decorate([
+    (0, typeorm_1.PrimaryColumn)(),
+    __metadata("design:type", String)
+], AuthorizationCodeEntity.prototype, "code", void 0);
+__decorate([
+    (0, typeorm_1.Column)(),
+    __metadata("design:type", String)
+], AuthorizationCodeEntity.prototype, "user_id", void 0);
+__decorate([
+    (0, typeorm_1.Column)(),
+    __metadata("design:type", String)
+], AuthorizationCodeEntity.prototype, "client_id", void 0);
+__decorate([
+    (0, typeorm_1.Column)(),
+    __metadata("design:type", String)
+], AuthorizationCodeEntity.prototype, "redirect_uri", void 0);
+__decorate([
+    (0, typeorm_1.Column)(),
+    __metadata("design:type", String)
+], AuthorizationCodeEntity.prototype, "code_challenge", void 0);
+__decorate([
+    (0, typeorm_1.Column)(),
+    __metadata("design:type", String)
+], AuthorizationCodeEntity.prototype, "code_challenge_method", void 0);
+__decorate([
+    (0, typeorm_1.Column)('bigint'),
+    __metadata("design:type", Number)
+], AuthorizationCodeEntity.prototype, "expires_at", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ nullable: true }),
+    __metadata("design:type", Date)
+], AuthorizationCodeEntity.prototype, "used_at", void 0);
+__decorate([
+    (0, typeorm_1.Column)(),
+    __metadata("design:type", String)
+], AuthorizationCodeEntity.prototype, "github_access_token", void 0);
+__decorate([
+    (0, typeorm_1.CreateDateColumn)(),
+    __metadata("design:type", Date)
+], AuthorizationCodeEntity.prototype, "created_at", void 0);
+exports.AuthorizationCodeEntity = AuthorizationCodeEntity = __decorate([
+    (0, typeorm_1.Entity)('authorization_codes')
+], AuthorizationCodeEntity);
+//# sourceMappingURL=authorization-code.entity.js.map

package/dist/authz/stores/typeorm/entities/authorization-code.entity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorization-code.entity.js","sourceRoot":"","sources":["../../../../../src/authz/stores/typeorm/entities/authorization-code.entity.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qCAA0E;AAGnE,IAAM,uBAAuB,GAA7B,MAAM,uBAAuB;CA8BnC,CAAA;AA9BY,0DAAuB;AAElC;IADC,IAAA,uBAAa,GAAE;;qDACH;AAGb;IADC,IAAA,gBAAM,GAAE;;wDACO;AAGhB;IADC,IAAA,gBAAM,GAAE;;0DACS;AAGlB;IADC,IAAA,gBAAM,GAAE;;6DACY;AAGrB;IADC,IAAA,gBAAM,GAAE;;+DACc;AAGvB;IADC,IAAA,gBAAM,GAAE;;sEACqB;AAG9B;IADC,IAAA,gBAAM,EAAC,QAAQ,CAAC;;2DACE;AAGnB;IADC,IAAA,gBAAM,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;8BACjB,IAAI;wDAAC;AAGf;IADC,IAAA,gBAAM,GAAE;;oEACmB;AAG5B;IADC,IAAA,0BAAgB,GAAE;8BACP,IAAI;2DAAC;kCA7BN,uBAAuB;IADnC,IAAA,gBAAM,EAAC,qBAAqB,CAAC;GACjB,uBAAuB,CA8BnC","sourcesContent":["import { Entity, Column, PrimaryColumn, CreateDateColumn } from 'typeorm';\n\n@Entity('authorization_codes')\nexport class AuthorizationCodeEntity {\n  @PrimaryColumn()\n  code: string;\n\n  @Column()\n  user_id: string;\n\n  @Column()\n  client_id: string;\n\n  @Column()\n  redirect_uri: string;\n\n  @Column()\n  code_challenge: string;\n\n  @Column()\n  code_challenge_method: string;\n\n  @Column('bigint')\n  expires_at: number;\n\n  @Column({ nullable: true })\n  used_at?: Date;\n\n  @Column()\n  github_access_token: string;\n\n  @CreateDateColumn()\n  created_at: Date;\n}\n"]}

package/dist/authz/stores/typeorm/entities/index.d.ts

@@ -0,0 +1,4 @@
+export { OAuthClientEntity } from './oauth-client.entity';
+export { AuthorizationCodeEntity } from './authorization-code.entity';
+export { OAuthSessionEntity } from './oauth-session.entity';
+//# sourceMappingURL=index.d.ts.map

package/dist/authz/stores/typeorm/entities/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/authz/stores/typeorm/entities/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AACtE,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC"}

package/dist/authz/stores/typeorm/entities/index.js

@@ -0,0 +1,10 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OAuthSessionEntity = exports.AuthorizationCodeEntity = exports.OAuthClientEntity = void 0;
+var oauth_client_entity_1 = require("./oauth-client.entity");
+Object.defineProperty(exports, "OAuthClientEntity", { enumerable: true, get: function () { return oauth_client_entity_1.OAuthClientEntity; } });
+var authorization_code_entity_1 = require("./authorization-code.entity");
+Object.defineProperty(exports, "AuthorizationCodeEntity", { enumerable: true, get: function () { return authorization_code_entity_1.AuthorizationCodeEntity; } });
+var oauth_session_entity_1 = require("./oauth-session.entity");
+Object.defineProperty(exports, "OAuthSessionEntity", { enumerable: true, get: function () { return oauth_session_entity_1.OAuthSessionEntity; } });
+//# sourceMappingURL=index.js.map

package/dist/authz/stores/typeorm/entities/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/authz/stores/typeorm/entities/index.ts"],"names":[],"mappings":";;;AAAA,6DAA0D;AAAjD,wHAAA,iBAAiB,OAAA;AAC1B,yEAAsE;AAA7D,oIAAA,uBAAuB,OAAA;AAChC,+DAA4D;AAAnD,0HAAA,kBAAkB,OAAA","sourcesContent":["export { OAuthClientEntity } from './oauth-client.entity';\nexport { AuthorizationCodeEntity } from './authorization-code.entity';\nexport { OAuthSessionEntity } from './oauth-session.entity';\n"]}

package/dist/authz/stores/typeorm/entities/oauth-client.entity.d.ts

@@ -0,0 +1,16 @@
+export declare class OAuthClientEntity {
+    client_id: string;
+    client_name: string;
+    client_description?: string;
+    logo_uri?: string;
+    client_uri?: string;
+    developer_name?: string;
+    developer_email?: string;
+    redirect_uris: string[];
+    grant_types: string[];
+    response_types: string[];
+    token_endpoint_auth_method: string;
+    created_at: Date;
+    updated_at: Date;
+}
+//# sourceMappingURL=oauth-client.entity.d.ts.map

package/dist/authz/stores/typeorm/entities/oauth-client.entity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-client.entity.d.ts","sourceRoot":"","sources":["../../../../../src/authz/stores/typeorm/entities/oauth-client.entity.ts"],"names":[],"mappings":"AAQA,qBACa,iBAAiB;IAE5B,SAAS,EAAE,MAAM,CAAC;IAGlB,WAAW,EAAE,MAAM,CAAC;IAGpB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAG5B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAGlB,UAAU,CAAC,EAAE,MAAM,CAAC;IAGpB,cAAc,CAAC,EAAE,MAAM,CAAC;IAGxB,eAAe,CAAC,EAAE,MAAM,CAAC;IAGzB,aAAa,EAAE,MAAM,EAAE,CAAC;IAGxB,WAAW,EAAE,MAAM,EAAE,CAAC;IAGtB,cAAc,EAAE,MAAM,EAAE,CAAC;IAGzB,0BAA0B,EAAE,MAAM,CAAC;IAGnC,UAAU,EAAE,IAAI,CAAC;IAGjB,UAAU,EAAE,IAAI,CAAC;CAClB"}

package/dist/authz/stores/typeorm/entities/oauth-client.entity.js

@@ -0,0 +1,72 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OAuthClientEntity = void 0;
+const typeorm_1 = require("typeorm");
+let OAuthClientEntity = class OAuthClientEntity {
+};
+exports.OAuthClientEntity = OAuthClientEntity;
+__decorate([
+    (0, typeorm_1.PrimaryColumn)(),
+    __metadata("design:type", String)
+], OAuthClientEntity.prototype, "client_id", void 0);
+__decorate([
+    (0, typeorm_1.Column)(),
+    __metadata("design:type", String)
+], OAuthClientEntity.prototype, "client_name", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ nullable: true }),
+    __metadata("design:type", String)
+], OAuthClientEntity.prototype, "client_description", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ nullable: true }),
+    __metadata("design:type", String)
+], OAuthClientEntity.prototype, "logo_uri", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ nullable: true }),
+    __metadata("design:type", String)
+], OAuthClientEntity.prototype, "client_uri", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ nullable: true }),
+    __metadata("design:type", String)
+], OAuthClientEntity.prototype, "developer_name", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ nullable: true }),
+    __metadata("design:type", String)
+], OAuthClientEntity.prototype, "developer_email", void 0);
+__decorate([
+    (0, typeorm_1.Column)('simple-array'),
+    __metadata("design:type", Array)
+], OAuthClientEntity.prototype, "redirect_uris", void 0);
+__decorate([
+    (0, typeorm_1.Column)('simple-array'),
+    __metadata("design:type", Array)
+], OAuthClientEntity.prototype, "grant_types", void 0);
+__decorate([
+    (0, typeorm_1.Column)('simple-array'),
+    __metadata("design:type", Array)
+], OAuthClientEntity.prototype, "response_types", void 0);
+__decorate([
+    (0, typeorm_1.Column)(),
+    __metadata("design:type", String)
+], OAuthClientEntity.prototype, "token_endpoint_auth_method", void 0);
+__decorate([
+    (0, typeorm_1.CreateDateColumn)(),
+    __metadata("design:type", Date)
+], OAuthClientEntity.prototype, "created_at", void 0);
+__decorate([
+    (0, typeorm_1.UpdateDateColumn)(),
+    __metadata("design:type", Date)
+], OAuthClientEntity.prototype, "updated_at", void 0);
+exports.OAuthClientEntity = OAuthClientEntity = __decorate([
+    (0, typeorm_1.Entity)('oauth_clients')
+], OAuthClientEntity);
+//# sourceMappingURL=oauth-client.entity.js.map

package/dist/authz/stores/typeorm/entities/oauth-client.entity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-client.entity.js","sourceRoot":"","sources":["../../../../../src/authz/stores/typeorm/entities/oauth-client.entity.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qCAMiB;AAGV,IAAM,iBAAiB,GAAvB,MAAM,iBAAiB;CAuC7B,CAAA;AAvCY,8CAAiB;AAE5B;IADC,IAAA,uBAAa,GAAE;;oDACE;AAGlB;IADC,IAAA,gBAAM,GAAE;;sDACW;AAGpB;IADC,IAAA,gBAAM,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;6DACC;AAG5B;IADC,IAAA,gBAAM,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;mDACT;AAGlB;IADC,IAAA,gBAAM,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;qDACP;AAGpB;IADC,IAAA,gBAAM,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;yDACH;AAGxB;IADC,IAAA,gBAAM,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;0DACF;AAGzB;IADC,IAAA,gBAAM,EAAC,cAAc,CAAC;;wDACC;AAGxB;IADC,IAAA,gBAAM,EAAC,cAAc,CAAC;;sDACD;AAGtB;IADC,IAAA,gBAAM,EAAC,cAAc,CAAC;;yDACE;AAGzB;IADC,IAAA,gBAAM,GAAE;;qEAC0B;AAGnC;IADC,IAAA,0BAAgB,GAAE;8BACP,IAAI;qDAAC;AAGjB;IADC,IAAA,0BAAgB,GAAE;8BACP,IAAI;qDAAC;4BAtCN,iBAAiB;IAD7B,IAAA,gBAAM,EAAC,eAAe,CAAC;GACX,iBAAiB,CAuC7B","sourcesContent":["import {\n  Entity,\n  Column,\n  PrimaryColumn,\n  CreateDateColumn,\n  UpdateDateColumn,\n} from 'typeorm';\n\n@Entity('oauth_clients')\nexport class OAuthClientEntity {\n  @PrimaryColumn()\n  client_id: string;\n\n  @Column()\n  client_name: string;\n\n  @Column({ nullable: true })\n  client_description?: string;\n\n  @Column({ nullable: true })\n  logo_uri?: string;\n\n  @Column({ nullable: true })\n  client_uri?: string;\n\n  @Column({ nullable: true })\n  developer_name?: string;\n\n  @Column({ nullable: true })\n  developer_email?: string;\n\n  @Column('simple-array')\n  redirect_uris: string[];\n\n  @Column('simple-array')\n  grant_types: string[];\n\n  @Column('simple-array')\n  response_types: string[];\n\n  @Column()\n  token_endpoint_auth_method: string;\n\n  @CreateDateColumn()\n  created_at: Date;\n\n  @UpdateDateColumn()\n  updated_at: Date;\n}\n"]}

package/dist/authz/stores/typeorm/entities/oauth-session.entity.d.ts

@@ -0,0 +1,13 @@
+export declare class OAuthSessionEntity {
+    sessionId: string;
+    state: string;
+    clientId?: string;
+    redirectUri?: string;
+    codeChallenge?: string;
+    codeChallengeMethod?: string;
+    oauthState?: string;
+    resource?: string;
+    expiresAt: number;
+    created_at: Date;
+}
+//# sourceMappingURL=oauth-session.entity.d.ts.map

package/dist/authz/stores/typeorm/entities/oauth-session.entity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-session.entity.d.ts","sourceRoot":"","sources":["../../../../../src/authz/stores/typeorm/entities/oauth-session.entity.ts"],"names":[],"mappings":"AAEA,qBACa,kBAAkB;IAE7B,SAAS,EAAE,MAAM,CAAC;IAGlB,KAAK,EAAE,MAAM,CAAC;IAGd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAGlB,WAAW,CAAC,EAAE,MAAM,CAAC;IAGrB,aAAa,CAAC,EAAE,MAAM,CAAC;IAGvB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAG7B,UAAU,CAAC,EAAE,MAAM,CAAC;IAGpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAGlB,SAAS,EAAE,MAAM,CAAC;IAGlB,UAAU,EAAE,IAAI,CAAC;CAClB"}

package/dist/authz/stores/typeorm/entities/oauth-session.entity.js

@@ -0,0 +1,60 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OAuthSessionEntity = void 0;
+const typeorm_1 = require("typeorm");
+let OAuthSessionEntity = class OAuthSessionEntity {
+};
+exports.OAuthSessionEntity = OAuthSessionEntity;
+__decorate([
+    (0, typeorm_1.PrimaryColumn)(),
+    __metadata("design:type", String)
+], OAuthSessionEntity.prototype, "sessionId", void 0);
+__decorate([
+    (0, typeorm_1.Column)(),
+    __metadata("design:type", String)
+], OAuthSessionEntity.prototype, "state", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ nullable: true }),
+    __metadata("design:type", String)
+], OAuthSessionEntity.prototype, "clientId", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ nullable: true }),
+    __metadata("design:type", String)
+], OAuthSessionEntity.prototype, "redirectUri", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ nullable: true }),
+    __metadata("design:type", String)
+], OAuthSessionEntity.prototype, "codeChallenge", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ nullable: true }),
+    __metadata("design:type", String)
+], OAuthSessionEntity.prototype, "codeChallengeMethod", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ nullable: true }),
+    __metadata("design:type", String)
+], OAuthSessionEntity.prototype, "oauthState", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ nullable: true }),
+    __metadata("design:type", String)
+], OAuthSessionEntity.prototype, "resource", void 0);
+__decorate([
+    (0, typeorm_1.Column)('bigint'),
+    __metadata("design:type", Number)
+], OAuthSessionEntity.prototype, "expiresAt", void 0);
+__decorate([
+    (0, typeorm_1.CreateDateColumn)(),
+    __metadata("design:type", Date)
+], OAuthSessionEntity.prototype, "created_at", void 0);
+exports.OAuthSessionEntity = OAuthSessionEntity = __decorate([
+    (0, typeorm_1.Entity)('oauth_sessions')
+], OAuthSessionEntity);
+//# sourceMappingURL=oauth-session.entity.js.map

package/dist/authz/stores/typeorm/entities/oauth-session.entity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-session.entity.js","sourceRoot":"","sources":["../../../../../src/authz/stores/typeorm/entities/oauth-session.entity.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qCAA0E;AAGnE,IAAM,kBAAkB,GAAxB,MAAM,kBAAkB;CA8B9B,CAAA;AA9BY,gDAAkB;AAE7B;IADC,IAAA,uBAAa,GAAE;;qDACE;AAGlB;IADC,IAAA,gBAAM,GAAE;;iDACK;AAGd;IADC,IAAA,gBAAM,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;oDACT;AAGlB;IADC,IAAA,gBAAM,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;uDACN;AAGrB;IADC,IAAA,gBAAM,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;yDACJ;AAGvB;IADC,IAAA,gBAAM,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;+DACE;AAG7B;IADC,IAAA,gBAAM,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;sDACP;AAGpB;IADC,IAAA,gBAAM,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;oDACT;AAGlB;IADC,IAAA,gBAAM,EAAC,QAAQ,CAAC;;qDACC;AAGlB;IADC,IAAA,0BAAgB,GAAE;8BACP,IAAI;sDAAC;6BA7BN,kBAAkB;IAD9B,IAAA,gBAAM,EAAC,gBAAgB,CAAC;GACZ,kBAAkB,CA8B9B","sourcesContent":["import { Entity, Column, PrimaryColumn, CreateDateColumn } from 'typeorm';\n\n@Entity('oauth_sessions')\nexport class OAuthSessionEntity {\n  @PrimaryColumn()\n  sessionId: string;\n\n  @Column()\n  state: string;\n\n  @Column({ nullable: true })\n  clientId?: string;\n\n  @Column({ nullable: true })\n  redirectUri?: string;\n\n  @Column({ nullable: true })\n  codeChallenge?: string;\n\n  @Column({ nullable: true })\n  codeChallengeMethod?: string;\n\n  @Column({ nullable: true })\n  oauthState?: string;\n\n  @Column({ nullable: true })\n  resource?: string;\n\n  @Column('bigint')\n  expiresAt: number;\n\n  @CreateDateColumn()\n  created_at: Date;\n}\n"]}

package/dist/authz/stores/typeorm/typeorm-store.service.d.ts

@@ -0,0 +1,21 @@
+import { Repository } from 'typeorm';
+import { OAuthClientEntity, AuthorizationCodeEntity, OAuthSessionEntity } from './entities';
+import { OAuthSession } from '../../providers/oauth-provider.interface';
+import { AuthorizationCode, IOAuthStore, OAuthClient } from '../oauth-store.interface';
+export declare class TypeOrmStore implements IOAuthStore {
+    private readonly clientRepository;
+    private readonly authCodeRepository;
+    private readonly sessionRepository;
+    constructor(clientRepository: Repository<OAuthClientEntity>, authCodeRepository: Repository<AuthorizationCodeEntity>, sessionRepository: Repository<OAuthSessionEntity>);
+    storeClient(client: OAuthClient): Promise<OAuthClient>;
+    getClient(client_id: string): Promise<OAuthClient | undefined>;
+    findClient(client_name: string): Promise<OAuthClient | undefined>;
+    storeAuthCode(code: AuthorizationCode): Promise<void>;
+    getAuthCode(code: string): Promise<AuthorizationCode | undefined>;
+    removeAuthCode(code: string): Promise<void>;
+    storeOAuthSession(sessionId: string, session: OAuthSession): Promise<void>;
+    getOAuthSession(sessionId: string): Promise<OAuthSession | undefined>;
+    removeOAuthSession(sessionId: string): Promise<void>;
+    generateClientId(client: OAuthClient): string;
+}
+//# sourceMappingURL=typeorm-store.service.d.ts.map

package/dist/authz/stores/typeorm/typeorm-store.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"typeorm-store.service.d.ts","sourceRoot":"","sources":["../../../../src/authz/stores/typeorm/typeorm-store.service.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAErC,OAAO,EACL,iBAAiB,EACjB,uBAAuB,EACvB,kBAAkB,EACnB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,YAAY,EAAE,MAAM,0CAA0C,CAAC;AACxE,OAAO,EACL,iBAAiB,EACjB,WAAW,EACX,WAAW,EACZ,MAAM,0BAA0B,CAAC;AAElC,qBACa,YAAa,YAAW,WAAW;IAG5C,OAAO,CAAC,QAAQ,CAAC,gBAAgB;IAEjC,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IAEnC,OAAO,CAAC,QAAQ,CAAC,iBAAiB;gBAJjB,gBAAgB,EAAE,UAAU,CAAC,iBAAiB,CAAC,EAE/C,kBAAkB,EAAE,UAAU,CAAC,uBAAuB,CAAC,EAEvD,iBAAiB,EAAE,UAAU,CAAC,kBAAkB,CAAC;IAI9D,WAAW,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;IAKtD,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC;IAO9D,UAAU,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC;IAQjE,aAAa,CAAC,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;IAIrD,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC;IAUjE,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAK3C,iBAAiB,CACrB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,YAAY,GACpB,OAAO,CAAC,IAAI,CAAC;IAIV,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC;IAWrE,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI1D,gBAAgB,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM;CAQ9C"}