@rttnd/gau 0.2.8 → 0.3.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (155) hide show
  1. package/dist/chunk-5CS44VSP.js +1 -0
  2. package/dist/chunk-5CS44VSP.js.map +1 -0
  3. package/dist/chunk-7LEK5L4N.js +1 -0
  4. package/dist/chunk-7LEK5L4N.js.map +1 -0
  5. package/dist/chunk-B4H7UXTD.js +1 -0
  6. package/dist/chunk-B4H7UXTD.js.map +1 -0
  7. package/dist/chunk-HJ4NAE7M.js +1 -0
  8. package/dist/chunk-HJ4NAE7M.js.map +1 -0
  9. package/dist/chunk-SXUBH3CT.js +1 -0
  10. package/dist/chunk-SXUBH3CT.js.map +1 -0
  11. package/dist/src/adapters/drizzle/index.d.ts.map +1 -0
  12. package/dist/src/adapters/drizzle/index.js +1 -0
  13. package/dist/src/adapters/drizzle/mysql.d.ts.map +1 -0
  14. package/dist/src/adapters/drizzle/pg.d.ts.map +1 -0
  15. package/dist/src/adapters/drizzle/sqlite.d.ts.map +1 -0
  16. package/dist/src/adapters/index.d.ts.map +1 -0
  17. package/dist/src/adapters/index.js +1 -0
  18. package/dist/src/adapters/memory/index.d.ts.map +1 -0
  19. package/dist/src/adapters/memory/index.js +1 -0
  20. package/dist/{cli → src/cli}/index.d.ts.map +1 -1
  21. package/dist/src/cli/index.js +1 -0
  22. package/dist/src/cli/index.js.map +1 -0
  23. package/dist/{client → src/client}/solid/index.d.ts +1 -1
  24. package/dist/src/client/solid/index.d.ts.map +1 -0
  25. package/dist/src/client/solid/index.js +1 -0
  26. package/dist/src/client/solid/index.js.map +1 -0
  27. package/dist/src/client/svelte/AuthProvider/index.svelte +17 -0
  28. package/dist/src/client/svelte/index.svelte.d.ts +16 -0
  29. package/dist/src/client/svelte/index.svelte.d.ts.map +1 -0
  30. package/dist/src/client/svelte/index.svelte.js +1 -0
  31. package/dist/src/client/svelte/index.svelte.js.map +1 -0
  32. package/dist/src/core/cookies.d.ts.map +1 -0
  33. package/dist/src/core/createAuth.d.ts.map +1 -0
  34. package/dist/src/core/handler.d.ts.map +1 -0
  35. package/dist/src/core/index.d.ts.map +1 -0
  36. package/dist/src/core/index.js +1 -0
  37. package/dist/src/index.d.ts +3 -0
  38. package/dist/src/index.d.ts.map +1 -0
  39. package/dist/src/index.js +1 -0
  40. package/dist/src/jwt/index.d.ts.map +1 -0
  41. package/dist/src/jwt/index.js +1 -0
  42. package/dist/src/jwt/jwt.d.ts.map +1 -0
  43. package/dist/src/jwt/utils.d.ts.map +1 -0
  44. package/dist/src/oauth/index.d.ts.map +1 -0
  45. package/dist/src/oauth/index.js +1 -0
  46. package/dist/src/oauth/index.js.map +1 -0
  47. package/dist/src/oauth/providers/github.d.ts.map +1 -0
  48. package/dist/src/oauth/providers/google.d.ts.map +1 -0
  49. package/dist/src/oauth/providers/microsoft.d.ts.map +1 -0
  50. package/dist/src/oauth/utils.d.ts.map +1 -0
  51. package/dist/src/runtimes/bun/index.d.ts.map +1 -0
  52. package/dist/src/runtimes/bun/index.js +1 -0
  53. package/dist/src/runtimes/index.d.ts.map +1 -0
  54. package/dist/src/runtimes/index.js +1 -0
  55. package/dist/src/runtimes/tauri/index.d.ts.map +1 -0
  56. package/dist/src/runtimes/tauri/index.js +1 -0
  57. package/dist/src/solidstart/index.d.ts.map +1 -0
  58. package/dist/src/solidstart/index.js +1 -0
  59. package/dist/src/solidstart/index.js.map +1 -0
  60. package/dist/src/sveltekit/index.d.ts.map +1 -0
  61. package/dist/src/sveltekit/index.js +1 -0
  62. package/dist/src/sveltekit/index.js.map +1 -0
  63. package/package.json +31 -27
  64. package/dist/adapters/drizzle/index.d.ts.map +0 -1
  65. package/dist/adapters/drizzle/index.js +0 -2
  66. package/dist/adapters/drizzle/mysql.d.ts.map +0 -1
  67. package/dist/adapters/drizzle/pg.d.ts.map +0 -1
  68. package/dist/adapters/drizzle/sqlite.d.ts.map +0 -1
  69. package/dist/adapters/index.d.ts.map +0 -1
  70. package/dist/adapters/index.js +0 -2
  71. package/dist/adapters/memory/index.d.ts.map +0 -1
  72. package/dist/adapters/memory/index.js +0 -2
  73. package/dist/chunk-2I7P37NO.js +0 -50
  74. package/dist/chunk-2I7P37NO.js.map +0 -1
  75. package/dist/chunk-4SBVHUU4.js +0 -2
  76. package/dist/chunk-4SBVHUU4.js.map +0 -1
  77. package/dist/chunk-LWBWVQD2.js +0 -2
  78. package/dist/chunk-LWBWVQD2.js.map +0 -1
  79. package/dist/chunk-RMHERF4D.js +0 -2
  80. package/dist/chunk-RMHERF4D.js.map +0 -1
  81. package/dist/chunk-XKNIVWN6.js +0 -2
  82. package/dist/chunk-XKNIVWN6.js.map +0 -1
  83. package/dist/cli/index.js +0 -4
  84. package/dist/cli/index.js.map +0 -1
  85. package/dist/client/solid/index.d.ts.map +0 -1
  86. package/dist/client/solid/index.js +0 -2
  87. package/dist/client/solid/index.js.map +0 -1
  88. package/dist/client/svelte/index.svelte.d.ts +0 -13
  89. package/dist/client/svelte/index.svelte.d.ts.map +0 -1
  90. package/dist/client/svelte/index.svelte.js +0 -2
  91. package/dist/client/svelte/index.svelte.js.map +0 -1
  92. package/dist/core/cookies.d.ts.map +0 -1
  93. package/dist/core/createAuth.d.ts.map +0 -1
  94. package/dist/core/handler.d.ts.map +0 -1
  95. package/dist/core/index.d.ts.map +0 -1
  96. package/dist/core/index.js +0 -2
  97. package/dist/index.d.ts +0 -3
  98. package/dist/index.d.ts.map +0 -1
  99. package/dist/index.js +0 -2
  100. package/dist/jwt/index.d.ts.map +0 -1
  101. package/dist/jwt/index.js +0 -2
  102. package/dist/jwt/jwt.d.ts.map +0 -1
  103. package/dist/jwt/utils.d.ts.map +0 -1
  104. package/dist/oauth/index.d.ts.map +0 -1
  105. package/dist/oauth/index.js +0 -2
  106. package/dist/oauth/index.js.map +0 -1
  107. package/dist/oauth/providers/github.d.ts.map +0 -1
  108. package/dist/oauth/providers/google.d.ts.map +0 -1
  109. package/dist/oauth/providers/microsoft.d.ts.map +0 -1
  110. package/dist/oauth/utils.d.ts.map +0 -1
  111. package/dist/runtimes/bun/index.d.ts.map +0 -1
  112. package/dist/runtimes/bun/index.js +0 -2
  113. package/dist/runtimes/index.d.ts.map +0 -1
  114. package/dist/runtimes/index.js +0 -2
  115. package/dist/runtimes/tauri/index.d.ts.map +0 -1
  116. package/dist/runtimes/tauri/index.js +0 -2
  117. package/dist/solidstart/index.d.ts.map +0 -1
  118. package/dist/solidstart/index.js +0 -2
  119. package/dist/solidstart/index.js.map +0 -1
  120. package/dist/sveltekit/index.d.ts.map +0 -1
  121. package/dist/sveltekit/index.js +0 -2
  122. package/dist/sveltekit/index.js.map +0 -1
  123. /package/dist/{adapters → src/adapters}/drizzle/index.d.ts +0 -0
  124. /package/dist/{adapters → src/adapters}/drizzle/index.js.map +0 -0
  125. /package/dist/{adapters → src/adapters}/drizzle/mysql.d.ts +0 -0
  126. /package/dist/{adapters → src/adapters}/drizzle/pg.d.ts +0 -0
  127. /package/dist/{adapters → src/adapters}/drizzle/sqlite.d.ts +0 -0
  128. /package/dist/{adapters → src/adapters}/index.d.ts +0 -0
  129. /package/dist/{adapters → src/adapters}/index.js.map +0 -0
  130. /package/dist/{adapters → src/adapters}/memory/index.d.ts +0 -0
  131. /package/dist/{adapters → src/adapters}/memory/index.js.map +0 -0
  132. /package/dist/{cli → src/cli}/index.d.ts +0 -0
  133. /package/dist/{core → src/core}/cookies.d.ts +0 -0
  134. /package/dist/{core → src/core}/createAuth.d.ts +0 -0
  135. /package/dist/{core → src/core}/handler.d.ts +0 -0
  136. /package/dist/{core → src/core}/index.d.ts +0 -0
  137. /package/dist/{core → src/core}/index.js.map +0 -0
  138. /package/dist/{index.js.map → src/index.js.map} +0 -0
  139. /package/dist/{jwt → src/jwt}/index.d.ts +0 -0
  140. /package/dist/{jwt → src/jwt}/index.js.map +0 -0
  141. /package/dist/{jwt → src/jwt}/jwt.d.ts +0 -0
  142. /package/dist/{jwt → src/jwt}/utils.d.ts +0 -0
  143. /package/dist/{oauth → src/oauth}/index.d.ts +0 -0
  144. /package/dist/{oauth → src/oauth}/providers/github.d.ts +0 -0
  145. /package/dist/{oauth → src/oauth}/providers/google.d.ts +0 -0
  146. /package/dist/{oauth → src/oauth}/providers/microsoft.d.ts +0 -0
  147. /package/dist/{oauth → src/oauth}/utils.d.ts +0 -0
  148. /package/dist/{runtimes → src/runtimes}/bun/index.d.ts +0 -0
  149. /package/dist/{runtimes → src/runtimes}/bun/index.js.map +0 -0
  150. /package/dist/{runtimes → src/runtimes}/index.d.ts +0 -0
  151. /package/dist/{runtimes → src/runtimes}/index.js.map +0 -0
  152. /package/dist/{runtimes → src/runtimes}/tauri/index.d.ts +0 -0
  153. /package/dist/{runtimes → src/runtimes}/tauri/index.js.map +0 -0
  154. /package/dist/{solidstart → src/solidstart}/index.d.ts +0 -0
  155. /package/dist/{sveltekit → src/sveltekit}/index.d.ts +0 -0
@@ -0,0 +1 @@
1
+ import{is as e}from"drizzle-orm";import{MySqlDatabase as r}from"drizzle-orm/mysql-core";import{PgDatabase as t}from"drizzle-orm/pg-core";import{BaseSQLiteDatabase as i}from"drizzle-orm/sqlite-core";import{and as a,eq as n}from"drizzle-orm";function o(o,m,d){if(e(o,i))return function(e,r,t){const i=e=>e?{...e}:null;return{async getUser(t){const a=await e.select().from(r).where(n(r.id,t)).get();return i(a)},async getUserByEmail(t){const a=await e.select().from(r).where(n(r.email,t)).get();return i(a)},async getUserByAccount(o,m){const d=await e.select().from(t).where(a(n(t.provider,o),n(t.providerAccountId,m))).get();if(!d)return null;const l=await e.select().from(r).where(n(r.id,d.userId)).get();return i(l)},async createUser(t){const a=t.id??crypto.randomUUID();return await e.transaction(async e=>{await e.insert(r).values({id:a,name:t.name??null,email:t.email??null,image:t.image??null,emailVerified:t.emailVerified??null,createdAt:new Date,updatedAt:new Date}).run();const o=await e.select().from(r).where(n(r.id,a)).get();return i(o)})},async linkAccount(r){await e.insert(t).values({type:"oauth",...r}).run()},async updateUser(t){await e.update(r).set({name:t.name??void 0,email:t.email??void 0,image:t.image??void 0,emailVerified:t.emailVerified??void 0,updatedAt:new Date}).where(n(r.id,t.id)).run();const a=await e.select().from(r).where(n(r.id,t.id)).get();return i(a)}}}(o,m,d);if(e(o,r))return function(){throw new Error("MySQL adapter is not yet implemented.")}();if(e(o,t))return function(){throw new Error("PostgreSQL adapter is not yet implemented.")}();throw new Error(`Unsupported database type (${typeof o}) in gau Drizzle adapter.`)}export{o as DrizzleAdapter};//# sourceMappingURL=chunk-5CS44VSP.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"sources":["../src/adapters/drizzle/index.ts","../src/adapters/drizzle/mysql.ts","../src/adapters/drizzle/pg.ts","../src/adapters/drizzle/sqlite.ts"],"sourcesContent":["import type { Adapter } from '../../core/index'\nimport type { AccountsTable, UsersTable } from './sqlite'\nimport { is } from 'drizzle-orm'\nimport { MySqlDatabase } from 'drizzle-orm/mysql-core'\nimport { PgDatabase } from 'drizzle-orm/pg-core'\n\nimport { BaseSQLiteDatabase } from 'drizzle-orm/sqlite-core'\nimport { MySqlDrizzleAdapter } from './mysql'\nimport { PostgresDrizzleAdapter } from './pg'\nimport { SQLiteDrizzleAdapter } from './sqlite'\n\nexport function DrizzleAdapter<\n U extends UsersTable,\n A extends AccountsTable,\n>(\n db:\n | BaseSQLiteDatabase<'sync' | 'async', any, any>\n | MySqlDatabase<any, any, any, any>\n | PgDatabase<any, any, any>,\n users: U,\n accounts: A,\n): Adapter {\n if (is(db, BaseSQLiteDatabase))\n return SQLiteDrizzleAdapter(db, users, accounts)\n\n if (is(db, MySqlDatabase))\n // @ts-expect-error Not implemented\n return MySqlDrizzleAdapter(db, users, accounts)\n\n if (is(db, PgDatabase))\n // @ts-expect-error Not implemented\n return PostgresDrizzleAdapter(db, users, accounts)\n\n throw new Error(\n `Unsupported database type (${typeof db}) in gau Drizzle adapter.`,\n )\n}\n","// TODO: Implement MySQL adapter for gau\nexport function MySqlDrizzleAdapter(): never {\n throw new Error('MySQL adapter is not yet implemented.')\n}\n","// TODO: Implement PostgreSQL adapter for gau\nexport function PostgresDrizzleAdapter(): never {\n throw new Error('PostgreSQL adapter is not yet implemented.')\n}\n","import type { AnyColumn, InferInsertModel, InferSelectModel, Table } from 'drizzle-orm'\nimport type { BaseSQLiteDatabase } from 'drizzle-orm/sqlite-core'\nimport type { Adapter, NewAccount, NewUser, User } from '../../core/index'\nimport { and, eq } from 'drizzle-orm'\n\nexport type UsersTable = Table & {\n id: AnyColumn\n name: AnyColumn\n email: AnyColumn\n image: AnyColumn\n emailVerified: AnyColumn\n createdAt: AnyColumn\n updatedAt: AnyColumn\n}\n\nexport type AccountsTable = Table & {\n userId: AnyColumn\n provider: AnyColumn\n providerAccountId: AnyColumn\n}\n\n/**\n * SQLite-specific Drizzle adapter.\n *\n * Pass concrete `users` and `accounts` `Table` objects\n * with the columns we access (`id`, `email`, `userId`, `provider`, `providerAccountId`).\n */\nexport function SQLiteDrizzleAdapter<\n DB extends BaseSQLiteDatabase<'sync' | 'async', any, any>,\n U extends UsersTable,\n A extends AccountsTable,\n>(db: DB, users: U, accounts: A): Adapter {\n type DBUser = InferSelectModel<U>\n type DBAccount = InferSelectModel<A>\n type DBInsertUser = InferInsertModel<U>\n type DBInsertAccount = InferInsertModel<A>\n\n const toUser = (row: DBUser | undefined | null): User | null =>\n row ? ({ ...(row as any) }) : null\n\n return {\n async getUser(id) {\n const user: DBUser | undefined = await db\n .select()\n .from(users)\n .where(eq(users.id, id))\n .get()\n return toUser(user)\n },\n\n async getUserByEmail(email) {\n const user: DBUser | undefined = await db\n .select()\n .from(users)\n .where(eq(users.email, email))\n .get()\n return toUser(user)\n },\n\n async getUserByAccount(provider, providerAccountId) {\n const account: DBAccount | undefined = await db\n .select()\n .from(accounts)\n .where(and(eq(accounts.provider, provider), eq(accounts.providerAccountId, providerAccountId)))\n .get()\n if (!account)\n return null\n const user: DBUser | undefined = await db\n .select()\n .from(users)\n .where(eq(users.id, account.userId))\n .get()\n return toUser(user)\n },\n\n async createUser(data: NewUser) {\n const id = data.id ?? crypto.randomUUID()\n return await db.transaction(async (tx) => {\n await tx\n .insert(users)\n .values({\n id,\n name: data.name ?? null,\n email: data.email ?? null,\n image: data.image ?? null,\n emailVerified: data.emailVerified ?? null,\n createdAt: new Date(),\n updatedAt: new Date(),\n } as DBInsertUser)\n .run()\n\n const result: DBUser | undefined = await tx.select().from(users).where(eq(users.id, id)).get()\n return toUser(result) as User\n })\n },\n\n async linkAccount(data: NewAccount) {\n await db\n .insert(accounts)\n .values({\n type: 'oauth',\n ...data,\n } as DBInsertAccount)\n .run()\n },\n\n async updateUser(partial) {\n await db\n .update(users)\n .set({\n name: partial.name ?? undefined,\n email: partial.email ?? undefined,\n image: partial.image ?? undefined,\n emailVerified: partial.emailVerified ?? undefined,\n updatedAt: new Date(),\n } as Partial<DBInsertUser>)\n .where(eq(users.id, partial.id))\n .run()\n\n const result: DBUser | undefined = await db.select().from(users).where(eq(users.id, partial.id)).get()\n return toUser(result) as User\n },\n }\n}\n"],"mappings":";AAEA,SAAS,UAAU;AACnB,SAAS,qBAAqB;AAC9B,SAAS,kBAAkB;AAE3B,SAAS,0BAA0B;;;ACL5B,SAAS,sBAA6B;AAC3C,QAAM,IAAI,MAAM,uCAAuC;AACzD;;;ACFO,SAAS,yBAAgC;AAC9C,QAAM,IAAI,MAAM,4CAA4C;AAC9D;;;ACAA,SAAS,KAAK,UAAU;AAwBjB,SAAS,qBAId,IAAQ,OAAU,UAAsB;AAMxC,QAAM,SAAS,CAAC,QACd,MAAO,EAAE,GAAI,IAAY,IAAK;AAEhC,SAAO;AAAA,IACL,MAAM,QAAQ,IAAI;AAChB,YAAM,OAA2B,MAAM,GACpC,OAAO,EACP,KAAK,KAAK,EACV,MAAM,GAAG,MAAM,IAAI,EAAE,CAAC,EACtB,IAAI;AACP,aAAO,OAAO,IAAI;AAAA,IACpB;AAAA,IAEA,MAAM,eAAe,OAAO;AAC1B,YAAM,OAA2B,MAAM,GACpC,OAAO,EACP,KAAK,KAAK,EACV,MAAM,GAAG,MAAM,OAAO,KAAK,CAAC,EAC5B,IAAI;AACP,aAAO,OAAO,IAAI;AAAA,IACpB;AAAA,IAEA,MAAM,iBAAiB,UAAU,mBAAmB;AAClD,YAAM,UAAiC,MAAM,GAC1C,OAAO,EACP,KAAK,QAAQ,EACb,MAAM,IAAI,GAAG,SAAS,UAAU,QAAQ,GAAG,GAAG,SAAS,mBAAmB,iBAAiB,CAAC,CAAC,EAC7F,IAAI;AACP,UAAI,CAAC;AACH,eAAO;AACT,YAAM,OAA2B,MAAM,GACpC,OAAO,EACP,KAAK,KAAK,EACV,MAAM,GAAG,MAAM,IAAI,QAAQ,MAAM,CAAC,EAClC,IAAI;AACP,aAAO,OAAO,IAAI;AAAA,IACpB;AAAA,IAEA,MAAM,WAAW,MAAe;AAC9B,YAAM,KAAK,KAAK,MAAM,OAAO,WAAW;AACxC,aAAO,MAAM,GAAG,YAAY,OAAO,OAAO;AACxC,cAAM,GACH,OAAO,KAAK,EACZ,OAAO;AAAA,UACN;AAAA,UACA,MAAM,KAAK,QAAQ;AAAA,UACnB,OAAO,KAAK,SAAS;AAAA,UACrB,OAAO,KAAK,SAAS;AAAA,UACrB,eAAe,KAAK,iBAAiB;AAAA,UACrC,WAAW,oBAAI,KAAK;AAAA,UACpB,WAAW,oBAAI,KAAK;AAAA,QACtB,CAAiB,EAChB,IAAI;AAEP,cAAM,SAA6B,MAAM,GAAG,OAAO,EAAE,KAAK,KAAK,EAAE,MAAM,GAAG,MAAM,IAAI,EAAE,CAAC,EAAE,IAAI;AAC7F,eAAO,OAAO,MAAM;AAAA,MACtB,CAAC;AAAA,IACH;AAAA,IAEA,MAAM,YAAY,MAAkB;AAClC,YAAM,GACH,OAAO,QAAQ,EACf,OAAO;AAAA,QACN,MAAM;AAAA,QACN,GAAG;AAAA,MACL,CAAoB,EACnB,IAAI;AAAA,IACT;AAAA,IAEA,MAAM,WAAW,SAAS;AACxB,YAAM,GACH,OAAO,KAAK,EACZ,IAAI;AAAA,QACH,MAAM,QAAQ,QAAQ;AAAA,QACtB,OAAO,QAAQ,SAAS;AAAA,QACxB,OAAO,QAAQ,SAAS;AAAA,QACxB,eAAe,QAAQ,iBAAiB;AAAA,QACxC,WAAW,oBAAI,KAAK;AAAA,MACtB,CAA0B,EACzB,MAAM,GAAG,MAAM,IAAI,QAAQ,EAAE,CAAC,EAC9B,IAAI;AAEP,YAAM,SAA6B,MAAM,GAAG,OAAO,EAAE,KAAK,KAAK,EAAE,MAAM,GAAG,MAAM,IAAI,QAAQ,EAAE,CAAC,EAAE,IAAI;AACrG,aAAO,OAAO,MAAM;AAAA,IACtB;AAAA,EACF;AACF;;;AHhHO,SAAS,eAId,IAIA,OACA,UACS;AACT,MAAI,GAAG,IAAI,kBAAkB;AAC3B,WAAO,qBAAqB,IAAI,OAAO,QAAQ;AAEjD,MAAI,GAAG,IAAI,aAAa;AAEtB,WAAO,oBAAoB,IAAI,OAAO,QAAQ;AAEhD,MAAI,GAAG,IAAI,UAAU;AAEnB,WAAO,uBAAuB,IAAI,OAAO,QAAQ;AAEnD,QAAM,IAAI;AAAA,IACR,8BAA8B,OAAO,EAAE;AAAA,EACzC;AACF;","names":[]}
@@ -0,0 +1 @@
1
+ import{listen as o}from"@tauri-apps/api/event";import{BROWSER as t}from"esm-env";var n=t&&"__TAURI_INTERNALS__"in window;async function a(o,t,a="gau",e){if(!n)return;const{platform:i}=await import("@tauri-apps/plugin-os"),{open:r}=await import("@tauri-apps/plugin-shell"),c=i();let s;s=e||("android"===c||"ios"===c?new URL(t).origin:`${a}://oauth/callback`);const u=`${t}/${o}?redirectTo=${encodeURIComponent(s)}`;await r(u)}function e(t){n&&o("deep-link",async o=>{await t(o.payload)}).catch(console.error)}function i(o,t,n,a){const e=new URL(o);if(e.protocol!==`${n}:`&&e.origin!==new URL(t).origin)return;const i=new URLSearchParams(e.hash.substring(1)).get("token");i&&a(i)}function r(o){if(t)try{localStorage.setItem("gau-token",o),document.cookie=`__gau-session-token=${o}; path=/; max-age=31536000; samesite=lax`}catch{}}function c(){return t?localStorage.getItem("gau-token"):null}function s(){if(t)try{localStorage.removeItem("gau-token"),document.cookie="__gau-session-token=; path=/; max-age=0"}catch{}}export{n as isTauri,a as signInWithTauri,e as setupTauriListener,i as handleTauriDeepLink,r as storeSessionToken,c as getSessionToken,s as clearSessionToken};//# sourceMappingURL=chunk-7LEK5L4N.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"sources":["../src/runtimes/tauri/index.ts"],"sourcesContent":["import { listen } from '@tauri-apps/api/event'\nimport { BROWSER } from 'esm-env'\n\nexport const isTauri = BROWSER && '__TAURI_INTERNALS__' in window\n\nexport async function signInWithTauri(\n provider: string,\n baseUrl: string,\n scheme: string = 'gau',\n redirectOverride?: string,\n) {\n if (!isTauri)\n return\n\n const { platform } = await import('@tauri-apps/plugin-os')\n const { open } = await import('@tauri-apps/plugin-shell')\n\n const currentPlatform = platform()\n let redirectTo: string\n\n if (redirectOverride)\n redirectTo = redirectOverride\n\n else if (currentPlatform === 'android' || currentPlatform === 'ios')\n redirectTo = new URL(baseUrl).origin\n\n else\n redirectTo = `${scheme}://oauth/callback`\n\n const authUrl = `${baseUrl}/${provider}?redirectTo=${encodeURIComponent(redirectTo)}`\n await open(authUrl)\n}\n\nexport function setupTauriListener(handler: (url: string) => Promise<void>) {\n if (!isTauri)\n return\n\n listen<string>('deep-link', async (event) => {\n await handler(event.payload)\n }).catch(console.error)\n}\n\nexport function handleTauriDeepLink(url: string, baseUrl: string, scheme: string, onToken: (token: string) => void) {\n const parsed = new URL(url)\n if (parsed.protocol !== `${scheme}:` && parsed.origin !== new URL(baseUrl).origin)\n return\n\n const params = new URLSearchParams(parsed.hash.substring(1))\n const token = params.get('token')\n if (token)\n onToken(token)\n}\n\nexport function storeSessionToken(token: string) {\n if (!BROWSER)\n return\n try {\n localStorage.setItem('gau-token', token)\n document.cookie = `__gau-session-token=${token}; path=/; max-age=31536000; samesite=lax`\n }\n catch {}\n}\n\nexport function getSessionToken(): string | null {\n if (!BROWSER)\n return null\n return localStorage.getItem('gau-token')\n}\n\nexport function clearSessionToken() {\n if (!BROWSER)\n return\n try {\n localStorage.removeItem('gau-token')\n document.cookie = `__gau-session-token=; path=/; max-age=0`\n }\n catch {}\n}\n"],"mappings":";AAAA,SAAS,cAAc;AACvB,SAAS,eAAe;AAEjB,IAAM,UAAU,WAAW,yBAAyB;AAE3D,eAAsB,gBACpB,UACA,SACA,SAAiB,OACjB,kBACA;AACA,MAAI,CAAC;AACH;AAEF,QAAM,EAAE,SAAS,IAAI,MAAM,OAAO,uBAAuB;AACzD,QAAM,EAAE,KAAK,IAAI,MAAM,OAAO,0BAA0B;AAExD,QAAM,kBAAkB,SAAS;AACjC,MAAI;AAEJ,MAAI;AACF,iBAAa;AAAA,WAEN,oBAAoB,aAAa,oBAAoB;AAC5D,iBAAa,IAAI,IAAI,OAAO,EAAE;AAAA;AAG9B,iBAAa,GAAG,MAAM;AAExB,QAAM,UAAU,GAAG,OAAO,IAAI,QAAQ,eAAe,mBAAmB,UAAU,CAAC;AACnF,QAAM,KAAK,OAAO;AACpB;AAEO,SAAS,mBAAmB,SAAyC;AAC1E,MAAI,CAAC;AACH;AAEF,SAAe,aAAa,OAAO,UAAU;AAC3C,UAAM,QAAQ,MAAM,OAAO;AAAA,EAC7B,CAAC,EAAE,MAAM,QAAQ,KAAK;AACxB;AAEO,SAAS,oBAAoB,KAAa,SAAiB,QAAgB,SAAkC;AAClH,QAAM,SAAS,IAAI,IAAI,GAAG;AAC1B,MAAI,OAAO,aAAa,GAAG,MAAM,OAAO,OAAO,WAAW,IAAI,IAAI,OAAO,EAAE;AACzE;AAEF,QAAM,SAAS,IAAI,gBAAgB,OAAO,KAAK,UAAU,CAAC,CAAC;AAC3D,QAAM,QAAQ,OAAO,IAAI,OAAO;AAChC,MAAI;AACF,YAAQ,KAAK;AACjB;AAEO,SAAS,kBAAkB,OAAe;AAC/C,MAAI,CAAC;AACH;AACF,MAAI;AACF,iBAAa,QAAQ,aAAa,KAAK;AACvC,aAAS,SAAS,uBAAuB,KAAK;AAAA,EAChD,QACM;AAAA,EAAC;AACT;AAEO,SAAS,kBAAiC;AAC/C,MAAI,CAAC;AACH,WAAO;AACT,SAAO,aAAa,QAAQ,WAAW;AACzC;AAEO,SAAS,oBAAoB;AAClC,MAAI,CAAC;AACH;AACF,MAAI;AACF,iBAAa,WAAW,WAAW;AACnC,aAAS,SAAS;AAAA,EACpB,QACM;AAAA,EAAC;AACT;","names":[]}
@@ -0,0 +1 @@
1
+ function e(e){return`${e.provider}:${e.providerAccountId}`}function n(){const n=new Map,t=new Map,r=new Map;return{getUser:async e=>n.get(e)??null,async getUserByEmail(e){const r=t.get(e);return r?n.get(r)??null:null},async getUserByAccount(t,l){const i=r.get(e({provider:t,providerAccountId:l}));return i?n.get(i)??null:null},async createUser(e){const r=e.id??crypto.randomUUID(),l={id:r,name:e.name??null,email:e.email??null,image:e.image??null,emailVerified:null};return n.set(r,l),l.email&&t.set(l.email,r),l},async linkAccount(n){r.set(e(n),n.userId)},async updateUser(e){const r=n.get(e.id);if(!r)throw new Error("User not found");const l={...r,...e};return n.set(l.id,l),l.email&&t.set(l.email,l.id),l}}}export{n as MemoryAdapter};//# sourceMappingURL=chunk-B4H7UXTD.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"sources":["../src/adapters/memory/index.ts"],"sourcesContent":["import type { Adapter, NewAccount, NewUser, User } from '../../core/index'\n\ninterface InternalAccountKey {\n provider: string\n providerAccountId: string\n}\n\nfunction accountKey(k: InternalAccountKey): string {\n return `${k.provider}:${k.providerAccountId}`\n}\n\nexport function MemoryAdapter(): Adapter {\n const users = new Map<string, User>()\n const usersByEmail = new Map<string, string>() // email -> userId\n const accounts = new Map<string, string>() // accountKey -> userId\n\n return {\n async getUser(id) {\n return users.get(id) ?? null\n },\n\n async getUserByEmail(email) {\n const id = usersByEmail.get(email)\n if (!id)\n return null\n return users.get(id) ?? null\n },\n\n async getUserByAccount(provider, providerAccountId) {\n const id = accounts.get(accountKey({ provider, providerAccountId }))\n if (!id)\n return null\n return users.get(id) ?? null\n },\n\n async createUser(data: NewUser) {\n const id = data.id ?? crypto.randomUUID()\n const user: User = {\n id,\n name: data.name ?? null,\n email: data.email ?? null,\n image: data.image ?? null,\n emailVerified: null,\n }\n users.set(id, user)\n if (user.email)\n usersByEmail.set(user.email, id)\n return user\n },\n\n async linkAccount(data: NewAccount) {\n accounts.set(accountKey(data), data.userId)\n },\n\n async updateUser(partial) {\n const existing = users.get(partial.id)\n if (!existing)\n throw new Error('User not found')\n const updated: User = { ...existing, ...partial }\n users.set(updated.id, updated)\n if (updated.email)\n usersByEmail.set(updated.email, updated.id)\n return updated\n },\n }\n}\n"],"mappings":";AAOA,SAAS,WAAW,GAA+B;AACjD,SAAO,GAAG,EAAE,QAAQ,IAAI,EAAE,iBAAiB;AAC7C;AAEO,SAAS,gBAAyB;AACvC,QAAM,QAAQ,oBAAI,IAAkB;AACpC,QAAM,eAAe,oBAAI,IAAoB;AAC7C,QAAM,WAAW,oBAAI,IAAoB;AAEzC,SAAO;AAAA,IACL,MAAM,QAAQ,IAAI;AAChB,aAAO,MAAM,IAAI,EAAE,KAAK;AAAA,IAC1B;AAAA,IAEA,MAAM,eAAe,OAAO;AAC1B,YAAM,KAAK,aAAa,IAAI,KAAK;AACjC,UAAI,CAAC;AACH,eAAO;AACT,aAAO,MAAM,IAAI,EAAE,KAAK;AAAA,IAC1B;AAAA,IAEA,MAAM,iBAAiB,UAAU,mBAAmB;AAClD,YAAM,KAAK,SAAS,IAAI,WAAW,EAAE,UAAU,kBAAkB,CAAC,CAAC;AACnE,UAAI,CAAC;AACH,eAAO;AACT,aAAO,MAAM,IAAI,EAAE,KAAK;AAAA,IAC1B;AAAA,IAEA,MAAM,WAAW,MAAe;AAC9B,YAAM,KAAK,KAAK,MAAM,OAAO,WAAW;AACxC,YAAM,OAAa;AAAA,QACjB;AAAA,QACA,MAAM,KAAK,QAAQ;AAAA,QACnB,OAAO,KAAK,SAAS;AAAA,QACrB,OAAO,KAAK,SAAS;AAAA,QACrB,eAAe;AAAA,MACjB;AACA,YAAM,IAAI,IAAI,IAAI;AAClB,UAAI,KAAK;AACP,qBAAa,IAAI,KAAK,OAAO,EAAE;AACjC,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,YAAY,MAAkB;AAClC,eAAS,IAAI,WAAW,IAAI,GAAG,KAAK,MAAM;AAAA,IAC5C;AAAA,IAEA,MAAM,WAAW,SAAS;AACxB,YAAM,WAAW,MAAM,IAAI,QAAQ,EAAE;AACrC,UAAI,CAAC;AACH,cAAM,IAAI,MAAM,gBAAgB;AAClC,YAAM,UAAgB,EAAE,GAAG,UAAU,GAAG,QAAQ;AAChD,YAAM,IAAI,QAAQ,IAAI,OAAO;AAC7B,UAAI,QAAQ;AACV,qBAAa,IAAI,QAAQ,OAAO,QAAQ,EAAE;AAC5C,aAAO;AAAA,IACT;AAAA,EACF;AACF;","names":[]}
@@ -0,0 +1 @@
1
+ var r=!0;export{r as _bunRuntimePlaceholder};//# sourceMappingURL=chunk-HJ4NAE7M.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"sources":["../src/runtimes/bun/index.ts"],"sourcesContent":["// TODO: Bun runtime helper implementation\nexport const _bunRuntimePlaceholder = true\n"],"mappings":";AACO,IAAM,yBAAyB;","names":[]}
@@ -0,0 +1 @@
1
+ import{createJWTSignatureMessage as e,encodeJWT as t,JWSRegisteredHeaders as r,JWTRegisteredClaims as n,parseJWT as s}from"@oslojs/jwt";import{parse as o,serialize as i}from"cookie";var a={path:"/",sameSite:"lax",secure:!0,httpOnly:!0};function c(e){const t=new Map;if(e){const r=o(e);for(const e in r)t.set(e,r[e])}return t}var l=class{constructor(e,t){this.requestCookies=e,this.defaultOptions=t}#e=[];get(e){return this.requestCookies.get(e)}set(e,t,r){const n={...this.defaultOptions,...r};this.#e.push([e,t,n])}delete(e,t){this.set(e,"",{...t,expires:new Date(0),maxAge:0})}toHeaders(){const e=new Headers;for(const[t,r,n]of this.#e)e.append("Set-Cookie",i(t,r,n));return e}},u="__gau-csrf-token",d="__gau-session-token",h="__gau-pkce-code-verifier",f="__gau-callback-uri",g=600;function w({adapter:e,providers:t,basePath:r="/api/auth",jwt:n={},cookies:s={},trustHosts:o=[],autoLink:i="verifiedEmail"}){const{algorithm:c="ES256",secret:l,iss:u,aud:d,ttl:h=86400}=n,f={...a,...s},g=new Map(t.map(e=>[e.id,e]));async function w(e,t={}){return E(e,function(e={}){const t={ttl:e.ttl,iss:e.iss??u,aud:e.aud??d,sub:e.sub};if("HS256"===c)return{algorithm:c,secret:e.secret??l,...t};{const r=e.secret??l;if(void 0!==r&&"string"!=typeof r)throw new A("For ES256, the secret option must be a string.");return{algorithm:c,privateKey:e.privateKey,secret:r,...t}}}(t))}async function p(e,t={}){try{return await C(e,function(e={}){const t={iss:e.iss??u,aud:e.aud??d};if("HS256"===c)return{algorithm:c,secret:e.secret??l,...t};{const r=e.secret??l;if(void 0!==r&&"string"!=typeof r)throw new A("For ES256, the secret option must be a string.");return{algorithm:c,publicKey:e.publicKey,secret:r,...t}}}(t))}catch{return null}}return{...e,providerMap:g,basePath:r,cookieOptions:f,jwt:{ttl:h},signJWT:w,verifyJWT:p,createSession:async function(e,t={},r=h){return w({sub:e,...t},{ttl:r})},validateSession:async function(t){const r=await p(t);if(!r)return null;const n=await e.getUser(r.sub);return n?{user:n,session:{id:t,...r}}:null},trustHosts:o,autoLink:i}}import{generateCodeVerifier as p,generateState as y}from"arctic";async function m(e,t,r){const n=t.providerMap.get(r);if(!n)return b({error:"Provider not found"},{status:400});const{state:s,codeVerifier:o}={state:y(),codeVerifier:p()},i=new URL(e.url),a=i.searchParams.get("redirectTo");if(a){let r;try{r=new URL(a,i.origin)}catch{return b({error:'Invalid "redirectTo" URL'},{status:400})}const n=r.host,s=n===new URL(e.url).host,o="all"===t.trustHosts||t.trustHosts.includes(n);if(!s&&!o)return b({error:"Untrusted redirect host"},{status:400})}const d=a?`${s}.${btoa(a)}`:s;let w=i.searchParams.get("callbackUri");!w&&n.requiresRedirectUri&&(w=`${i.origin}${t.basePath}/${r}/callback`);const m=await n.getAuthorizationUrl(d,o,{redirectUri:w??void 0}),S=c(e.headers.get("Cookie")),A=new l(S,t.cookieOptions);A.set(u,s,{maxAge:g,sameSite:"none"}),A.set(h,o,{maxAge:g,sameSite:"none"}),w&&A.set(f,w,{maxAge:g,sameSite:"none"});if("false"===i.searchParams.get("redirect")){const e=b({url:m.toString()});return A.toHeaders().forEach((t,r)=>{e.headers.append(r,t)}),e}const k=v(m.toString());return A.toHeaders().forEach((e,t)=>{k.headers.append(t,e)}),k}function S(e){const{providerMap:t,basePath:r}=e;function n(e,t){const r=e.headers.get("Origin")||e.headers.get("origin");return r?(t.headers.set("Access-Control-Allow-Origin",r),t.headers.set("Vary","Origin"),t.headers.set("Access-Control-Allow-Credentials","true"),t.headers.set("Access-Control-Allow-Headers","Content-Type, Authorization, Cookie"),t.headers.set("Access-Control-Allow-Methods","GET, POST, OPTIONS"),t):t}return async function(s){if("OPTIONS"===s.method){const e=s.headers.get("Origin")||s.headers.get("origin")||"*";return new Response(null,{status:204,headers:{"Access-Control-Allow-Origin":e,"Access-Control-Allow-Credentials":"true","Access-Control-Allow-Headers":"Content-Type, Authorization, Cookie","Access-Control-Allow-Methods":"GET, POST, OPTIONS"}})}const o=new URL(s.url);if(!o.pathname.startsWith(r))return n(s,b({error:"Not Found"},{status:404}));if("POST"===s.method&&!function(e,t){if("all"===t)return!0;const r=e.headers.get("origin");if(!r)return!1;let n;try{n=new URL(r).host}catch{return!1}const s=new URL(e.url),o=s.host,i=`${s.protocol}//${o}`;return r===i||t.includes(n)}(s,e.trustHosts))return n(s,b({error:"Forbidden"},{status:403}));const i=o.pathname.substring(r.length).split("/").filter(Boolean),a=i[0];if(!a)return n(s,b({error:"Not Found"},{status:404}));let g;return g="GET"===s.method?t.has(a)?2===i.length&&"callback"===i[1]?await async function(e,t,r){const n=t.providerMap.get(r);if(!n)return b({error:"Provider not found"},{status:400});const s=new URL(e.url),o=s.searchParams.get("code"),i=s.searchParams.get("state");if(!o||!i)return b({error:"Missing code or state"},{status:400});const a=c(e.headers.get("Cookie")),g=new l(a,t.cookieOptions);let w,p="/";if(i.includes(".")){const[e,t]=i.split(".");w=e;try{p=atob(t??"")||"/"}catch{p="/"}}else w=i;const y=g.get(u);if(!y||y!==w)return b({error:"Invalid CSRF token"},{status:403});const m=g.get(h);if(!m)return b({error:"Missing PKCE code verifier"},{status:400});const S=g.get(f),{user:A,tokens:k}=await n.validateCallback(o,m,S??void 0),E=await t.getUserByAccount(r,A.id);let C=E;if(!C){const e=t.autoLink??"verifiedEmail";if(A.email&&("always"===e||"verifiedEmail"===e&&!0===A.emailVerified)){const e=await t.getUserByEmail(A.email);e&&(C=A.emailVerified&&!e.emailVerified?await t.updateUser({id:e.id,emailVerified:!0}):e)}if(!C)try{C=await t.createUser({name:A.name,email:A.email,image:A.avatar,emailVerified:A.emailVerified})}catch(e){return console.error("Failed to create user:",e),b({error:"Failed to create user"},{status:500})}}if(!E){let e,n,s;try{e=k.refreshToken()}catch{e=null}try{const e=k.accessTokenExpiresAt();e&&(n=Math.floor(e.getTime()/1e3))}catch{}try{s=k.idToken()}catch{s=null}try{await t.linkAccount({userId:C.id,provider:r,providerAccountId:A.id,accessToken:k.accessToken(),refreshToken:e,expiresAt:n,tokenType:k.tokenType?.()??null,scope:k.scopes()?.join(" ")??null,idToken:s})}catch(e){return console.error("Error linking account:",e),b({error:"Failed to link account"},{status:500})}}const T=await t.createSession(C.id),H=new URL(e.url),U=new URL(p,e.url),O="gau:"===U.protocol,x=H.host!==U.host;if(O||x){const e=new URL(U);e.hash=`token=${T}`;const t=`<!DOCTYPE html>\n<html lang="en">\n<head>\n <meta charset="utf-8" />\n <title>Authentication Complete</title>\n <style>\n body {\n font-family: ui-sans-serif, system-ui, -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Helvetica Neue", Arial, "Noto Sans", sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji";\n background-color: #09090b;\n color: #fafafa;\n display: flex;\n justify-content: center;\n align-items: center;\n height: 100vh;\n margin: 0;\n text-align: center;\n }\n .card {\n background-color: #18181b;\n border: 1px solid #27272a;\n border-radius: 0.75rem;\n padding: 2rem;\n max-width: 320px;\n }\n h1 {\n font-size: 1.25rem;\n font-weight: 600;\n margin: 0 0 0.5rem;\n }\n p {\n margin: 0;\n color: #a1a1aa;\n }\n </style>\n <script>\n window.onload = function() {\n const url = ${JSON.stringify(e.toString())};\n window.location.href = url;\n setTimeout(window.close, 500);\n };\n <\/script>\n</head>\n<body>\n <div class="card">\n <h1>Authentication Successful</h1>\n <p>You can now close this window.</p>\n </div>\n</body>\n</html>`;g.delete(u),g.delete(h),S&&g.delete(f);const r=new Response(t,{status:200,headers:{"Content-Type":"text/html; charset=utf-8"}});return g.toHeaders().forEach((e,t)=>{r.headers.append(t,e)}),r}g.set(d,T,{maxAge:t.jwt.ttl,sameSite:"none",secure:!0}),g.delete(u),g.delete(h),S&&g.delete(f);const M=s.searchParams.get("redirect");let P;return P="false"===M?b({user:C}):v(p),g.toHeaders().forEach((e,t)=>{P.headers.append(t,e)}),P}(s,e,a):1===i.length?await m(s,e,a):b({error:"Not Found"},{status:404}):1===i.length&&"session"===a?await async function(e,t){let r=c(e.headers.get("Cookie")).get(d);if(!r){const t=e.headers.get("Authorization");t?.startsWith("Bearer ")&&(r=t.substring(7))}if(!r)return b({user:null,session:null});try{const e=await t.validateSession(r);return e?b(e):b({user:null,session:null},{status:401})}catch(e){return console.error("Error validating session:",e),b({error:"Failed to validate session"},{status:500})}}(s,e):b({error:"Not Found"},{status:404}):"POST"===s.method?1===i.length&&"signout"===a?await async function(e,t){const r=c(e.headers.get("Cookie")),n=new l(r,t.cookieOptions);n.delete(d,{sameSite:"none",secure:!0});const s=b({message:"Signed out"});return n.toHeaders().forEach((e,t)=>{s.headers.append(t,e)}),s}(s,e):b({error:"Not Found"},{status:404}):b({error:"Method Not Allowed"},{status:405}),n(s,g)}}var A=class extends Error{cause;constructor(e,t){super(e),this.name="AuthError",this.cause=t}};function b(e,t={}){const r=new Headers(t.headers);return r.has("Content-Type")||r.set("Content-Type","application/json; charset=utf-8"),new Response(JSON.stringify(e),{...t,headers:r})}function v(e,t=302){return new Response(null,{status:t,headers:{Location:e}})}async function k(e){try{const t=function(e){const t=e.replace(/-/g,"+").replace(/_/g,"/"),r=(4-t.length%4)%4,n=t.padEnd(t.length+r,"="),s=atob(n),o=s.length,i=new Uint8Array(o);for(let e=0;e<o;e++)i[e]=s.charCodeAt(e);return i}(e),r=await crypto.subtle.importKey("pkcs8",t.slice(),{name:"ECDSA",namedCurve:"P-256"},!0,["sign"]),n=await crypto.subtle.exportKey("jwk",r);delete n.d,n.key_ops=["verify"];return{privateKey:r,publicKey:await crypto.subtle.importKey("jwk",n,{name:"ECDSA",namedCurve:"P-256"},!0,["verify"])}}catch(e){throw new A("Invalid secret. Must be a base64url-encoded PKCS#8 private key for ES256. Use `bunx gau secret` to generate one.",e)}}async function E(r,n={}){let{algorithm:s="ES256",ttl:o,iss:i,aud:a,sub:c,privateKey:l,secret:u}=n;if("ES256"===s){if(!l){if("string"!=typeof u)throw new A("Missing secret for ES256 signing. It must be a base64url-encoded string.");({privateKey:l}=await k(u))}}else if("HS256"===s&&!u)throw new A("Missing secret for HS256 signing");const d=Math.floor(Date.now()/1e3),h={iat:d,iss:i,aud:a,sub:c,...r};null!=o&&o>0&&(h.exp=d+o);const f="HS256"===s,g=f?"HS256":"ES256",w=JSON.stringify({alg:g,typ:"JWT"}),p=JSON.stringify(h),y=e(w,p);let m;if(f){const e="string"==typeof u?(new TextEncoder).encode(u):u,t=await crypto.subtle.importKey("raw",e,{name:"HMAC",hash:"SHA-256"},!1,["sign"]);m=new Uint8Array(await crypto.subtle.sign("HMAC",t,y))}else m=new Uint8Array(await crypto.subtle.sign({name:"ECDSA",hash:"SHA-256"},l,y));return t(w,p,m)}async function C(e,t){let{algorithm:o="ES256",publicKey:i,secret:a,iss:c,aud:l}=t;if("ES256"===o&&!i){if("string"!=typeof a)throw new A("Missing secret for ES256 verification. Must be a base64url-encoded string.");({publicKey:i}=await k(a))}if("HS256"===o&&!a)throw new A("Missing secret for HS256 verification");const[u,d,h,f]=s(e),g=new r(u).algorithm();let w=!1;if("HS256"===o){if("HS256"!==g)throw new Error(`JWT algorithm is "${g}", but verifier was configured for "HS256"`);const e="string"==typeof a?(new TextEncoder).encode(a):a,t=await crypto.subtle.importKey("raw",e,{name:"HMAC",hash:"SHA-256"},!1,["sign"]);w=function(e,t){let r=e.length^t.length;const n=Math.max(e.length,t.length);for(let s=0;s<n;s++)r|=(e[s]??0)^(t[s]??0);return 0===r}(new Uint8Array(await crypto.subtle.sign("HMAC",t,f)),new Uint8Array(h))}else{if("ES256"!==g)throw new A(`JWT algorithm is "${g}", but verifier was configured for "ES256"`);const e=new Uint8Array(h);if(w=await crypto.subtle.verify({name:"ECDSA",hash:"SHA-256"},i,e,f),!w){const t=function(e){if(64!==e.length)throw new Error("Invalid raw signature length");let t=e.slice(0,32),r=e.slice(32),n=0;for(;n<t.length-1&&0===t[n];)n++;t=t.slice(n);let s=0;for(;s<r.length-1&&0===r[s];)s++;if(r=r.slice(s),t.length>0&&128&t[0]){const e=new Uint8Array(t.length+1);e[0]=0,e.set(t,1),t=e}if(r.length>0&&128&r[0]){const e=new Uint8Array(r.length+1);e[0]=0,e.set(r,1),r=e}const o=t.length,i=r.length,a=2+o+2+i,c=new Uint8Array(2+a);return c[0]=48,c[1]=a,c[2]=2,c[3]=o,c.set(t,4),c[4+o]=2,c[5+o]=i,c.set(r,6+o),c}(e);w=await crypto.subtle.verify({name:"ECDSA",hash:"SHA-256"},i,t,f)}}if(!w)throw new A("Invalid JWT signature");const p=new n(d);if(p.hasExpiration()&&!p.verifyExpiration())throw new A("JWT expired");if(p.hasNotBefore()&&!p.verifyNotBefore())throw new A("JWT not yet valid");if(c&&d.iss!==c)throw new A("Invalid JWT issuer");if(l){const e=Array.isArray(l)?l:[l],t=d.aud?Array.isArray(d.aud)?d.aud:[d.aud]:[];if(!e.some(e=>t.includes(e)))throw new A("Invalid JWT audience")}return d}export{a as DEFAULT_COOKIE_SERIALIZE_OPTIONS,c as parseCookies,l as Cookies,u as CSRF_COOKIE_NAME,d as SESSION_COOKIE_NAME,h as PKCE_COOKIE_NAME,f as CALLBACK_URI_COOKIE_NAME,g as CSRF_MAX_AGE,E as sign,C as verify,w as createAuth,S as createHandler,A as AuthError,b as json,v as redirect};//# sourceMappingURL=chunk-SXUBH3CT.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"sources":["../src/jwt/jwt.ts","../src/core/cookies.ts","../src/core/createAuth.ts","../src/oauth/utils.ts","../src/core/handler.ts","../src/core/index.ts","../src/jwt/utils.ts"],"sourcesContent":["/// <reference types=\"node\" />\nimport {\n createJWTSignatureMessage,\n encodeJWT,\n JWSRegisteredHeaders,\n JWTRegisteredClaims,\n parseJWT,\n} from '@oslojs/jwt'\nimport { AuthError } from '../core/index'\nimport { constantTimeEqual, deriveKeysFromSecret, rawToDer } from './utils'\n\nexport type SupportedAlgorithm = 'ES256' | 'HS256'\n\ninterface CommonSignOptions {\n /** Time-to-live in seconds (exp claim). If omitted the token will not expire. */\n ttl?: number\n}\n\nexport type SignOptions\n = | ({ algorithm?: 'ES256', privateKey?: CryptoKey, secret?: string }\n & CommonSignOptions & { iss?: string, aud?: string | string[], sub?: string })\n | ({ algorithm: 'HS256', secret?: string | Uint8Array, privateKey?: never }\n & CommonSignOptions & { iss?: string, aud?: string | string[], sub?: string })\n\n/**\n * Create a signed JWT.\n * Defaults to ES256 when a privateKey is supplied. Falls back to HS256 when a secret is supplied.\n */\nexport async function sign<T extends Record<string, unknown>>(payload: T, options: SignOptions = {}): Promise<string> {\n let { algorithm = 'ES256', ttl, iss, aud, sub, privateKey, secret } = options\n\n if (algorithm === 'ES256') {\n if (!privateKey) {\n if (typeof secret !== 'string')\n throw new AuthError('Missing secret for ES256 signing. It must be a base64url-encoded string.');\n\n ({ privateKey } = await deriveKeysFromSecret(secret))\n }\n }\n else if (algorithm === 'HS256' && !secret) {\n throw new AuthError('Missing secret for HS256 signing')\n }\n\n const now = Math.floor(Date.now() / 1000)\n\n const jwtPayload: Record<string, unknown> = { iat: now, iss, aud, sub, ...payload }\n\n if (ttl != null && ttl > 0)\n jwtPayload.exp = now + ttl\n\n const isHS256 = algorithm === 'HS256'\n const alg: SupportedAlgorithm = isHS256 ? 'HS256' : 'ES256'\n\n const headerJSON = JSON.stringify({ alg, typ: 'JWT' })\n const payloadJSON = JSON.stringify(jwtPayload)\n\n const signatureMessage = createJWTSignatureMessage(headerJSON, payloadJSON)\n\n let signature: Uint8Array\n\n if (isHS256) {\n // HS256 (HMAC-SHA256)\n const secretBytes = typeof secret === 'string'\n ? new TextEncoder().encode(secret)\n : secret\n\n const cryptoKey = await crypto.subtle.importKey(\n 'raw',\n secretBytes as BufferSource,\n { name: 'HMAC', hash: 'SHA-256' },\n false,\n ['sign'],\n )\n\n signature = new Uint8Array(await crypto.subtle.sign('HMAC', cryptoKey, signatureMessage as BufferSource))\n }\n else {\n // ES256 (ECDSA-SHA256)\n // Runtimes like Bun's return the raw (r||s) signature directly, not DER-encoded.\n signature = new Uint8Array(\n await crypto.subtle.sign(\n { name: 'ECDSA', hash: 'SHA-256' },\n privateKey!,\n signatureMessage as BufferSource,\n ),\n )\n }\n\n return encodeJWT(headerJSON, payloadJSON, signature)\n}\n\nexport type VerifyOptions\n = | { algorithm?: 'ES256', publicKey?: CryptoKey, secret?: string, iss?: string, aud?: string | string[] }\n | { algorithm: 'HS256', secret?: string | Uint8Array, publicKey?: never, iss?: string, aud?: string | string[] }\n\n/**\n * Verify a JWT and return its payload when the signature is valid.\n * The algorithm is inferred from options – ES256 by default.\n * Throws when verification fails or the token is expired.\n */\nexport async function verify<T = Record<string, unknown>>(token: string, options: VerifyOptions): Promise<T> {\n let { algorithm = 'ES256', publicKey, secret, iss, aud } = options\n\n if (algorithm === 'ES256') {\n if (!publicKey) {\n if (typeof secret !== 'string')\n throw new AuthError('Missing secret for ES256 verification. Must be a base64url-encoded string.');\n\n ({ publicKey } = await deriveKeysFromSecret(secret))\n }\n }\n\n if (algorithm === 'HS256' && !secret)\n throw new AuthError('Missing secret for HS256 verification')\n\n const [header, payload, signature, signatureMessage] = parseJWT(token)\n\n const headerParams = new JWSRegisteredHeaders(header)\n const headerAlg = headerParams.algorithm()\n\n let validSignature = false\n\n // HS256 verification path\n if (algorithm === 'HS256') {\n if (headerAlg !== 'HS256')\n throw new Error(`JWT algorithm is \"${headerAlg}\", but verifier was configured for \"HS256\"`)\n\n const secretBytes = typeof secret === 'string'\n ? new TextEncoder().encode(secret)\n : secret\n\n const cryptoKey = await crypto.subtle.importKey(\n 'raw',\n secretBytes as BufferSource,\n { name: 'HMAC', hash: 'SHA-256' },\n false,\n ['sign'],\n )\n\n const expectedSig = new Uint8Array(await crypto.subtle.sign('HMAC', cryptoKey, signatureMessage as BufferSource))\n validSignature = constantTimeEqual(expectedSig, new Uint8Array(signature))\n }\n // ES256 verification path (default)\n else {\n if (headerAlg !== 'ES256')\n throw new AuthError(`JWT algorithm is \"${headerAlg}\", but verifier was configured for \"ES256\"`)\n\n const rawSignature = new Uint8Array(signature)\n\n // Try verification with raw signature first (some runtimes accept it directly)\n validSignature = await crypto.subtle.verify(\n { name: 'ECDSA', hash: 'SHA-256' },\n publicKey!,\n rawSignature as BufferSource,\n signatureMessage as BufferSource,\n )\n\n if (!validSignature) {\n // Fall back to DER-encoded signature if raw form was rejected\n const derSig = rawToDer(rawSignature)\n validSignature = await crypto.subtle.verify(\n { name: 'ECDSA', hash: 'SHA-256' },\n publicKey!,\n derSig as BufferSource,\n signatureMessage as BufferSource,\n )\n }\n }\n\n if (!validSignature)\n throw new AuthError('Invalid JWT signature')\n\n const claims = new JWTRegisteredClaims(payload)\n if (claims.hasExpiration() && !claims.verifyExpiration())\n throw new AuthError('JWT expired')\n if (claims.hasNotBefore() && !claims.verifyNotBefore())\n throw new AuthError('JWT not yet valid')\n if (iss && (payload as any).iss !== iss)\n throw new AuthError('Invalid JWT issuer')\n\n if (aud) {\n const expectedAudience = Array.isArray(aud) ? aud : [aud]\n const tokenAudience = (payload as any).aud\n ? (Array.isArray((payload as any).aud) ? (payload as any).aud : [(payload as any).aud])\n : []\n\n if (!expectedAudience.some(audValue => tokenAudience.includes(audValue)))\n throw new AuthError('Invalid JWT audience')\n }\n\n return payload as T\n}\n","import type { SerializeOptions } from 'cookie'\nimport { parse, serialize } from 'cookie'\n\nexport const DEFAULT_COOKIE_SERIALIZE_OPTIONS: SerializeOptions = {\n path: '/',\n sameSite: 'lax',\n secure: true,\n httpOnly: true,\n}\n\nexport type Cookie = [string, string, SerializeOptions]\n\nexport function parseCookies(cookieHeader: string | null | undefined): Map<string, string> {\n const cookies = new Map<string, string>()\n if (cookieHeader) {\n const parsed = parse(cookieHeader)\n for (const name in parsed)\n cookies.set(name, parsed[name]!)\n }\n return cookies\n}\n\nexport class Cookies {\n #new: Cookie[] = []\n\n constructor(\n private readonly requestCookies: Map<string, string>,\n private readonly defaultOptions: SerializeOptions,\n ) {}\n\n get(name: string): string | undefined {\n return this.requestCookies.get(name)\n }\n\n set(name: string, value: string, options?: SerializeOptions): void {\n const combinedOptions = { ...this.defaultOptions, ...options }\n this.#new.push([name, value, combinedOptions])\n }\n\n delete(name: string, options?: Omit<SerializeOptions, 'expires' | 'maxAge'>): void {\n this.set(name, '', { ...options, expires: new Date(0), maxAge: 0 })\n }\n\n toHeaders(): Headers {\n const headers = new Headers()\n for (const [name, value, options] of this.#new)\n headers.append('Set-Cookie', serialize(name, value, options))\n\n return headers\n }\n}\n\nexport const CSRF_COOKIE_NAME = '__gau-csrf-token'\nexport const SESSION_COOKIE_NAME = '__gau-session-token'\nexport const PKCE_COOKIE_NAME = '__gau-pkce-code-verifier'\nexport const CALLBACK_URI_COOKIE_NAME = '__gau-callback-uri'\n\nexport const CSRF_MAX_AGE = 60 * 10 // 10 minutes\n","import type { SerializeOptions } from 'cookie'\nimport type { SignOptions, VerifyOptions } from '../jwt'\nimport type { OAuthProvider } from '../oauth'\nimport type { Adapter, Session, User } from './index'\nimport { sign, verify } from '../jwt'\nimport { DEFAULT_COOKIE_SERIALIZE_OPTIONS } from './cookies'\nimport { AuthError } from './index'\n\ntype ProviderId<P> = P extends OAuthProvider<infer T> ? T : never\nexport type ProviderIds<T> = T extends { providerMap: Map<infer K, any> } ? K : string\n\nexport interface CreateAuthOptions<TProviders extends OAuthProvider[]> {\n /** The database adapter to use for storing users and accounts. */\n adapter: Adapter\n /** Array of OAuth providers to support. */\n providers: TProviders\n /** Base path for authentication routes (defaults to '/api/auth'). */\n basePath?: string\n /** Configuration for JWT signing and verification. */\n jwt?: {\n /** Signing algorithm: 'ES256' (default) or 'HS256'. */\n algorithm?: 'ES256' | 'HS256'\n /** Secret for HS256 or base64url-encoded private key for ES256 (overrides AUTH_SECRET). */\n secret?: string\n /** Issuer claim (iss) for JWTs. */\n iss?: string\n /** Audience claim (aud) for JWTs. */\n aud?: string\n /** Default time-to-live in seconds for JWTs (defaults to 1 day). */\n ttl?: number\n }\n /** Custom options for session cookies. */\n cookies?: Partial<SerializeOptions>\n /** Trusted hosts for CSRF protection: 'all' or array of hostnames (defaults to []). */\n trustHosts?: 'all' | string[]\n /** Account linking behavior: 'verifiedEmail' (default), 'always', or false. */\n autoLink?: 'verifiedEmail' | 'always' | false\n}\n\nexport type Auth<TProviders extends OAuthProvider[] = any> = Adapter & {\n providerMap: Map<ProviderId<TProviders[number]>, TProviders[number]>\n basePath: string\n cookieOptions: SerializeOptions\n jwt: {\n ttl: number\n }\n signJWT: <U extends Record<string, unknown>>(payload: U, customOptions?: Partial<SignOptions>) => Promise<string>\n verifyJWT: <U = Record<string, unknown>>(token: string, customOptions?: Partial<VerifyOptions>) => Promise<U | null>\n createSession: (userId: string, data?: Record<string, unknown>, ttl?: number) => Promise<string>\n validateSession: (token: string) => Promise<{\n user: User\n session: Session\n } | null>\n trustHosts: 'all' | string[]\n autoLink: 'verifiedEmail' | 'always' | false\n}\n\nexport function createAuth<const TProviders extends OAuthProvider[]>({\n adapter,\n providers,\n basePath = '/api/auth',\n jwt: jwtConfig = {},\n cookies: cookieConfig = {},\n trustHosts = [],\n autoLink = 'verifiedEmail',\n}: CreateAuthOptions<TProviders>): Auth<TProviders> {\n const { algorithm = 'ES256', secret, iss, aud, ttl: defaultTTL = 3600 * 24 } = jwtConfig\n const cookieOptions = { ...DEFAULT_COOKIE_SERIALIZE_OPTIONS, ...cookieConfig }\n\n const providerMap = new Map(providers.map(p => [p.id, p]))\n\n function buildSignOptions(custom: Partial<SignOptions> = {}): SignOptions {\n const base = { ttl: custom.ttl, iss: custom.iss ?? iss, aud: custom.aud ?? aud, sub: custom.sub }\n if (algorithm === 'HS256') {\n return { algorithm, secret: custom.secret ?? secret, ...base }\n }\n else {\n const esSecret = custom.secret ?? secret\n if (esSecret !== undefined && typeof esSecret !== 'string')\n throw new AuthError('For ES256, the secret option must be a string.')\n return { algorithm, privateKey: custom.privateKey, secret: esSecret, ...base }\n }\n }\n\n function buildVerifyOptions(custom: Partial<VerifyOptions> = {}): VerifyOptions {\n const base = { iss: custom.iss ?? iss, aud: custom.aud ?? aud }\n if (algorithm === 'HS256') {\n return { algorithm, secret: custom.secret ?? secret, ...base }\n }\n else {\n const esSecret = custom.secret ?? secret\n if (esSecret !== undefined && typeof esSecret !== 'string')\n throw new AuthError('For ES256, the secret option must be a string.')\n return { algorithm, publicKey: custom.publicKey, secret: esSecret, ...base }\n }\n }\n\n async function signJWT<U extends Record<string, unknown>>(payload: U, customOptions: Partial<SignOptions> = {}): Promise<string> {\n return sign(payload, buildSignOptions(customOptions))\n }\n\n async function verifyJWT<U = Record<string, unknown>>(token: string, customOptions: Partial<VerifyOptions> = {}): Promise<U | null> {\n try {\n return await verify<U>(token, buildVerifyOptions(customOptions))\n }\n catch {\n return null\n }\n }\n\n async function createSession(userId: string, data: Record<string, unknown> = {}, ttl = defaultTTL): Promise<string> {\n const payload = { sub: userId, ...data }\n return signJWT(payload, { ttl })\n }\n\n async function validateSession(token: string): Promise<{ user: User, session: Session } | null> {\n const payload = await verifyJWT<{ sub: string } & Record<string, unknown>>(token)\n if (!payload)\n return null\n const user = await adapter.getUser(payload.sub)\n if (!user)\n return null\n return { user, session: { id: token, ...payload } }\n }\n\n return {\n ...adapter,\n providerMap: providerMap as Map<ProviderId<TProviders[number]>, TProviders[number]>,\n basePath,\n cookieOptions,\n jwt: {\n ttl: defaultTTL,\n },\n signJWT,\n verifyJWT,\n createSession,\n validateSession,\n trustHosts,\n autoLink,\n }\n}\n","import { generateCodeVerifier, generateState } from 'arctic'\n\nexport function createOAuthUris() {\n const state = generateState()\n const codeVerifier = generateCodeVerifier()\n\n return {\n state,\n codeVerifier,\n }\n}\n","import type { Auth } from './createAuth'\nimport type { RequestLike, ResponseLike } from './index'\nimport { createOAuthUris } from '../oauth/utils'\nimport {\n CALLBACK_URI_COOKIE_NAME,\n Cookies,\n CSRF_COOKIE_NAME,\n CSRF_MAX_AGE,\n parseCookies,\n PKCE_COOKIE_NAME,\n SESSION_COOKIE_NAME,\n} from './cookies'\nimport { json, redirect } from './index'\n\nasync function handleSignIn(request: RequestLike, auth: Auth, providerId: string): Promise<ResponseLike> {\n const provider = auth.providerMap.get(providerId)\n if (!provider)\n return json({ error: 'Provider not found' }, { status: 400 })\n\n const { state: originalState, codeVerifier } = createOAuthUris()\n const url = new URL(request.url)\n const redirectTo = url.searchParams.get('redirectTo')\n\n if (redirectTo) {\n let parsedRedirect: URL\n try {\n parsedRedirect = new URL(redirectTo, url.origin)\n }\n catch {\n return json({ error: 'Invalid \"redirectTo\" URL' }, { status: 400 })\n }\n\n const redirectHost = parsedRedirect.host\n const currentHost = new URL(request.url).host\n\n const isSameHost = redirectHost === currentHost\n const isTrusted = auth.trustHosts === 'all' || auth.trustHosts.includes(redirectHost)\n\n if (!isSameHost && !isTrusted)\n return json({ error: 'Untrusted redirect host' }, { status: 400 })\n }\n\n const state = redirectTo ? `${originalState}.${btoa(redirectTo)}` : originalState\n let callbackUri = url.searchParams.get('callbackUri')\n if (!callbackUri && provider.requiresRedirectUri)\n callbackUri = `${url.origin}${auth.basePath}/${providerId}/callback`\n\n const authUrl = await provider.getAuthorizationUrl(state, codeVerifier, {\n redirectUri: callbackUri ?? undefined,\n })\n\n const requestCookies = parseCookies(request.headers.get('Cookie'))\n const cookies = new Cookies(requestCookies, auth.cookieOptions)\n\n cookies.set(CSRF_COOKIE_NAME, originalState, { maxAge: CSRF_MAX_AGE, sameSite: 'none' })\n cookies.set(PKCE_COOKIE_NAME, codeVerifier, { maxAge: CSRF_MAX_AGE, sameSite: 'none' })\n if (callbackUri)\n cookies.set(CALLBACK_URI_COOKIE_NAME, callbackUri, { maxAge: CSRF_MAX_AGE, sameSite: 'none' })\n\n const redirectParam = url.searchParams.get('redirect')\n\n if (redirectParam === 'false') {\n const response = json({ url: authUrl.toString() })\n cookies.toHeaders().forEach((value, key) => {\n response.headers.append(key, value)\n })\n return response\n }\n\n const response = redirect(authUrl.toString())\n cookies.toHeaders().forEach((value, key) => {\n response.headers.append(key, value)\n })\n\n return response\n}\n\nasync function handleCallback(request: RequestLike, auth: Auth, providerId: string): Promise<ResponseLike> {\n const provider = auth.providerMap.get(providerId)\n if (!provider)\n return json({ error: 'Provider not found' }, { status: 400 })\n\n const url = new URL(request.url)\n const code = url.searchParams.get('code')\n const state = url.searchParams.get('state')\n\n if (!code || !state)\n return json({ error: 'Missing code or state' }, { status: 400 })\n\n const requestCookies = parseCookies(request.headers.get('Cookie'))\n const cookies = new Cookies(requestCookies, auth.cookieOptions)\n\n let savedState: string | undefined\n let redirectTo = '/'\n if (state.includes('.')) {\n const [originalSavedState, encodedRedirect] = state.split('.')\n savedState = originalSavedState\n try {\n redirectTo = atob(encodedRedirect ?? '') || '/'\n }\n catch {\n redirectTo = '/'\n }\n }\n else {\n savedState = state\n }\n\n const csrfToken = cookies.get(CSRF_COOKIE_NAME)\n\n if (!csrfToken || csrfToken !== savedState)\n return json({ error: 'Invalid CSRF token' }, { status: 403 })\n\n const codeVerifier = cookies.get(PKCE_COOKIE_NAME)\n if (!codeVerifier)\n return json({ error: 'Missing PKCE code verifier' }, { status: 400 })\n\n const callbackUri = cookies.get(CALLBACK_URI_COOKIE_NAME)\n\n const { user: providerUser, tokens } = await provider.validateCallback(code, codeVerifier, callbackUri ?? undefined)\n\n const userFromAccount = await auth.getUserByAccount(providerId, providerUser.id)\n\n let user = userFromAccount\n\n if (!user) {\n const autoLink = auth.autoLink ?? 'verifiedEmail'\n const shouldLinkByEmail = providerUser.email && (\n (autoLink === 'always')\n || (autoLink === 'verifiedEmail' && providerUser.emailVerified === true)\n )\n if (shouldLinkByEmail) {\n const existingUser = await auth.getUserByEmail(providerUser.email!)\n if (existingUser) {\n // If the email is verified by the new provider, and the existing user's email is not,\n // update the user's email verification status.\n if (providerUser.emailVerified && !existingUser.emailVerified) {\n user = await auth.updateUser({\n id: existingUser.id,\n emailVerified: true,\n })\n }\n else {\n user = existingUser\n }\n }\n }\n if (!user) {\n try {\n user = await auth.createUser({\n name: providerUser.name,\n email: providerUser.email,\n image: providerUser.avatar,\n emailVerified: providerUser.emailVerified,\n })\n }\n catch (error) {\n console.error('Failed to create user:', error)\n return json({ error: 'Failed to create user' }, { status: 500 })\n }\n }\n }\n\n if (!userFromAccount) {\n // GitHub sometimes doesn't return these which causes arctic to throw an error\n let refreshToken: string | null\n try {\n refreshToken = tokens.refreshToken()\n }\n catch {\n refreshToken = null\n }\n\n let expiresAt: number | undefined\n try {\n const expiresAtDate = tokens.accessTokenExpiresAt()\n if (expiresAtDate)\n expiresAt = Math.floor(expiresAtDate.getTime() / 1000)\n }\n catch {\n }\n\n let idToken: string | null\n try {\n idToken = tokens.idToken()\n }\n catch {\n idToken = null\n }\n\n try {\n await auth.linkAccount({\n userId: user.id,\n provider: providerId,\n providerAccountId: providerUser.id,\n accessToken: tokens.accessToken(),\n refreshToken,\n expiresAt,\n tokenType: tokens.tokenType?.() ?? null,\n scope: tokens.scopes()?.join(' ') ?? null,\n idToken,\n })\n }\n catch (error) {\n console.error('Error linking account:', error)\n return json({ error: 'Failed to link account' }, { status: 500 })\n }\n }\n\n const sessionToken = await auth.createSession(user.id)\n\n const requestUrl = new URL(request.url)\n const redirectUrl = new URL(redirectTo, request.url)\n\n const isDesktopRedirect = redirectUrl.protocol === 'gau:'\n const isMobileRedirect = requestUrl.host !== redirectUrl.host\n\n // For Tauri, we can't set a cookie on a custom protocol or a different host,\n // so we pass the token in the URL. Additionally, return a small HTML page\n // that immediately navigates to the deep-link and attempts to close the window,\n // so the external OAuth tab does not stay open.\n if (isDesktopRedirect || isMobileRedirect) {\n const destination = new URL(redirectUrl)\n // Use hash instead of query param for security. The hash is not sent to the server.\n destination.hash = `token=${sessionToken}`\n\n const html = `<!DOCTYPE html>\n<html lang=\"en\">\n<head>\n <meta charset=\"utf-8\" />\n <title>Authentication Complete</title>\n <style>\n body {\n font-family: ui-sans-serif, system-ui, -apple-system, BlinkMacSystemFont, \"Segoe UI\", Roboto, \"Helvetica Neue\", Arial, \"Noto Sans\", sans-serif, \"Apple Color Emoji\", \"Segoe UI Emoji\", \"Segoe UI Symbol\", \"Noto Color Emoji\";\n background-color: #09090b;\n color: #fafafa;\n display: flex;\n justify-content: center;\n align-items: center;\n height: 100vh;\n margin: 0;\n text-align: center;\n }\n .card {\n background-color: #18181b;\n border: 1px solid #27272a;\n border-radius: 0.75rem;\n padding: 2rem;\n max-width: 320px;\n }\n h1 {\n font-size: 1.25rem;\n font-weight: 600;\n margin: 0 0 0.5rem;\n }\n p {\n margin: 0;\n color: #a1a1aa;\n }\n </style>\n <script>\n window.onload = function() {\n const url = ${JSON.stringify(destination.toString())};\n window.location.href = url;\n setTimeout(window.close, 500);\n };\n </script>\n</head>\n<body>\n <div class=\"card\">\n <h1>Authentication Successful</h1>\n <p>You can now close this window.</p>\n </div>\n</body>\n</html>`\n\n // Clear temporary cookies (CSRF/PKCE/Callback URI) so they don't linger\n cookies.delete(CSRF_COOKIE_NAME)\n cookies.delete(PKCE_COOKIE_NAME)\n if (callbackUri)\n cookies.delete(CALLBACK_URI_COOKIE_NAME)\n\n const response = new Response(html, {\n status: 200,\n headers: { 'Content-Type': 'text/html; charset=utf-8' },\n })\n cookies.toHeaders().forEach((value, key) => {\n response.headers.append(key, value)\n })\n return response\n }\n\n cookies.set(SESSION_COOKIE_NAME, sessionToken, { maxAge: auth.jwt.ttl, sameSite: 'none', secure: true })\n cookies.delete(CSRF_COOKIE_NAME)\n cookies.delete(PKCE_COOKIE_NAME)\n if (callbackUri)\n cookies.delete(CALLBACK_URI_COOKIE_NAME)\n\n const redirectParam = url.searchParams.get('redirect')\n\n let response: Response\n if (redirectParam === 'false')\n response = json({ user })\n else\n response = redirect(redirectTo)\n\n cookies.toHeaders().forEach((value, key) => {\n response.headers.append(key, value)\n })\n\n return response\n}\n\nasync function handleSession(request: RequestLike, auth: Auth): Promise<ResponseLike> {\n const rawCookieHeader = request.headers.get('Cookie')\n const requestCookies = parseCookies(rawCookieHeader)\n let sessionToken = requestCookies.get(SESSION_COOKIE_NAME)\n\n if (!sessionToken) {\n const authHeader = request.headers.get('Authorization')\n if (authHeader?.startsWith('Bearer '))\n sessionToken = authHeader.substring(7)\n }\n\n if (!sessionToken)\n return json({ user: null, session: null })\n\n try {\n const sessionData = await auth.validateSession(sessionToken)\n\n if (!sessionData)\n return json({ user: null, session: null }, { status: 401 })\n\n return json(sessionData)\n }\n catch (error) {\n console.error('Error validating session:', error)\n return json({ error: 'Failed to validate session' }, { status: 500 })\n }\n}\n\nasync function handleSignOut(request: RequestLike, auth: Auth): Promise<ResponseLike> {\n const requestCookies = parseCookies(request.headers.get('Cookie'))\n const cookies = new Cookies(requestCookies, auth.cookieOptions)\n cookies.delete(SESSION_COOKIE_NAME, { sameSite: 'none', secure: true })\n\n const response = json({ message: 'Signed out' })\n cookies.toHeaders().forEach((value, key) => {\n response.headers.append(key, value)\n })\n\n return response\n}\n\nexport function createHandler(auth: Auth): (request: RequestLike) => Promise<ResponseLike> {\n const { providerMap, basePath } = auth\n\n function applyCors(request: RequestLike, response: Response): Response {\n const origin = request.headers.get('Origin') || request.headers.get('origin')\n if (!origin)\n return response\n response.headers.set('Access-Control-Allow-Origin', origin)\n response.headers.set('Vary', 'Origin')\n response.headers.set('Access-Control-Allow-Credentials', 'true')\n response.headers.set('Access-Control-Allow-Headers', 'Content-Type, Authorization, Cookie')\n response.headers.set('Access-Control-Allow-Methods', 'GET, POST, OPTIONS')\n return response\n }\n\n return async function (request: RequestLike): Promise<ResponseLike> {\n // Handle preflight requests early\n if (request.method === 'OPTIONS') {\n const origin = request.headers.get('Origin') || request.headers.get('origin') || '*'\n const res = new Response(null, {\n status: 204,\n headers: {\n 'Access-Control-Allow-Origin': origin,\n 'Access-Control-Allow-Credentials': 'true',\n 'Access-Control-Allow-Headers': 'Content-Type, Authorization, Cookie',\n 'Access-Control-Allow-Methods': 'GET, POST, OPTIONS',\n },\n })\n return res\n }\n\n const url = new URL(request.url)\n if (!url.pathname.startsWith(basePath))\n return applyCors(request, json({ error: 'Not Found' }, { status: 404 }))\n\n if (request.method === 'POST' && !verifyRequestOrigin(request, auth.trustHosts))\n return applyCors(request, json({ error: 'Forbidden' }, { status: 403 }))\n\n const path = url.pathname.substring(basePath.length)\n const parts = path.split('/').filter(Boolean)\n const action = parts[0]\n\n if (!action)\n return applyCors(request, json({ error: 'Not Found' }, { status: 404 }))\n\n let response: ResponseLike\n\n if (request.method === 'GET') {\n if (providerMap.has(action)) {\n if (parts.length === 2 && parts[1] === 'callback')\n response = await handleCallback(request, auth, action)\n else if (parts.length === 1)\n response = await handleSignIn(request, auth, action)\n else\n response = json({ error: 'Not Found' }, { status: 404 })\n }\n else if (parts.length === 1 && action === 'session') {\n response = await handleSession(request, auth)\n }\n else {\n response = json({ error: 'Not Found' }, { status: 404 })\n }\n }\n else if (request.method === 'POST') {\n if (parts.length === 1 && action === 'signout')\n response = await handleSignOut(request, auth)\n else\n response = json({ error: 'Not Found' }, { status: 404 })\n }\n else {\n response = json({ error: 'Method Not Allowed' }, { status: 405 })\n }\n\n return applyCors(request, response as Response)\n }\n}\n\nfunction verifyRequestOrigin(request: RequestLike, trustHosts: 'all' | string[]): boolean {\n if (trustHosts === 'all')\n return true\n\n const origin = request.headers.get('origin')\n\n if (!origin)\n return false\n\n let originHost: string\n try {\n originHost = new URL(origin).host\n }\n catch {\n return false\n }\n\n const requestUrl = new URL(request.url)\n const requestHost = requestUrl.host\n const requestOrigin = `${requestUrl.protocol}//${requestHost}`\n\n if (origin === requestOrigin)\n return true\n\n return trustHosts.includes(originHost)\n}\n","export interface RequestLike {\n /** Absolute or relative URL */\n readonly url: string\n /** Upper-case HTTP method (e.g. `GET`) */\n readonly method: string\n /** All HTTP headers – mutable so adapters can append */\n readonly headers: Headers\n /** Lazily parse the body as JSON */\n json: <T = unknown>() => Promise<T>\n /** Raw text body */\n text: () => Promise<string>\n /** FormData helper (for `application/x-www-form-urlencoded` or `multipart/form-data`) */\n formData: () => Promise<FormData>\n}\n\nexport interface ResponseLike {\n readonly status: number\n readonly headers: Headers\n readonly body?: BodyInit | null\n}\n\nexport interface User {\n id: string\n name?: string | null\n email?: string | null\n emailVerified?: boolean | null\n image?: string | null\n}\n\nexport interface Session {\n id: string\n sub: string\n [key: string]: unknown\n}\n\nexport interface GauSession {\n user: User | null\n session: Session | null\n}\n\nexport interface NewUser extends Omit<User, 'id'> {\n id?: string\n}\n\nexport interface Account {\n userId: string\n provider: string\n providerAccountId: string\n type?: string // e.g. \"oauth\"\n accessToken?: string | null\n refreshToken?: string | null\n expiresAt?: number | null // epoch seconds\n idToken?: string | null\n scope?: string | null\n tokenType?: string | null\n sessionState?: string | null\n}\n\nexport interface NewAccount extends Account {}\n\nexport interface Adapter {\n getUser: (id: string) => Promise<User | null>\n getUserByEmail: (email: string) => Promise<User | null>\n getUserByAccount: (provider: string, providerAccountId: string) => Promise<User | null>\n createUser: (data: NewUser) => Promise<User>\n linkAccount: (data: NewAccount) => Promise<void>\n updateUser: (data: Partial<User> & { id: string }) => Promise<User>\n}\n\nexport class AuthError extends Error {\n override readonly cause?: unknown\n constructor(message: string, cause?: unknown) {\n super(message)\n this.name = 'AuthError'\n this.cause = cause\n }\n}\n\nexport function json<T>(data: T, init: ResponseInit = {}): Response {\n const headers = new Headers(init.headers)\n if (!headers.has('Content-Type'))\n headers.set('Content-Type', 'application/json; charset=utf-8')\n return new Response(JSON.stringify(data), { ...init, headers })\n}\n\nexport function redirect(url: string, status: 302 | 303 = 302): Response {\n return new Response(null, {\n status,\n headers: {\n Location: url,\n },\n })\n}\n\nexport * from './cookies'\nexport * from './createAuth'\nexport * from './handler'\n","import { AuthError } from '../core/index'\n\nexport function constantTimeEqual(a: Uint8Array, b: Uint8Array): boolean {\n let diff = a.length ^ b.length\n const len = Math.max(a.length, b.length)\n for (let i = 0; i < len; i++)\n diff |= (a[i] ?? 0) ^ (b[i] ?? 0)\n\n return diff === 0\n}\n\nfunction base64UrlToArray(base64Url: string): Uint8Array {\n const base64 = base64Url.replace(/-/g, '+').replace(/_/g, '/')\n const padLength = (4 - (base64.length % 4)) % 4\n const padded = base64.padEnd(base64.length + padLength, '=')\n const binary_string = atob(padded)\n const len = binary_string.length\n const bytes = new Uint8Array(len)\n for (let i = 0; i < len; i++)\n bytes[i] = binary_string.charCodeAt(i)\n\n return bytes\n}\n\nexport async function deriveKeysFromSecret(secret: string): Promise<{ privateKey: CryptoKey, publicKey: CryptoKey }> {\n try {\n const secretBytes = base64UrlToArray(secret)\n const privateKey = await crypto.subtle.importKey(\n 'pkcs8',\n secretBytes.slice(),\n { name: 'ECDSA', namedCurve: 'P-256' },\n true,\n ['sign'],\n )\n\n const jwk = await crypto.subtle.exportKey('jwk', privateKey)\n delete jwk.d\n jwk.key_ops = ['verify']\n\n const publicKey = await crypto.subtle.importKey(\n 'jwk',\n jwk,\n { name: 'ECDSA', namedCurve: 'P-256' },\n true,\n ['verify'],\n )\n return { privateKey, publicKey }\n }\n catch (error) {\n throw new AuthError('Invalid secret. Must be a base64url-encoded PKCS#8 private key for ES256. Use `bunx gau secret` to generate one.', error)\n }\n}\n\n/**\n * Convert JWS raw signature (r || s) to DER-encoded format for WebCrypto.\n */\nexport function rawToDer(raw: Uint8Array): Uint8Array {\n if (raw.length !== 64)\n throw new Error('Invalid raw signature length')\n\n let r = raw.slice(0, 32)\n let s = raw.slice(32)\n\n let rOffset = 0\n while (rOffset < r.length - 1 && r[rOffset] === 0) rOffset++\n r = r.slice(rOffset)\n\n let sOffset = 0\n while (sOffset < s.length - 1 && s[sOffset] === 0) sOffset++\n s = s.slice(sOffset)\n\n if (r.length > 0 && r[0]! & 0x80) {\n const rPadded = new Uint8Array(r.length + 1)\n rPadded[0] = 0\n rPadded.set(r, 1)\n r = rPadded\n }\n if (s.length > 0 && s[0]! & 0x80) {\n const sPadded = new Uint8Array(s.length + 1)\n sPadded[0] = 0\n sPadded.set(s, 1)\n s = sPadded\n }\n\n const rLength = r.length\n const sLength = s.length\n const totalLength = 2 + rLength + 2 + sLength\n\n const der = new Uint8Array(2 + totalLength)\n der[0] = 0x30 // SEQUENCE\n der[1] = totalLength\n der[2] = 0x02 // INTEGER\n der[3] = rLength\n der.set(r, 4)\n der[4 + rLength] = 0x02 // INTEGER\n der[5 + rLength] = sLength\n der.set(s, 6 + rLength)\n\n return der\n}\n"],"mappings":";AACA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;;;ACNP,SAAS,OAAO,iBAAiB;AAE1B,IAAM,mCAAqD;AAAA,EAChE,MAAM;AAAA,EACN,UAAU;AAAA,EACV,QAAQ;AAAA,EACR,UAAU;AACZ;AAIO,SAAS,aAAa,cAA8D;AACzF,QAAM,UAAU,oBAAI,IAAoB;AACxC,MAAI,cAAc;AAChB,UAAM,SAAS,MAAM,YAAY;AACjC,eAAW,QAAQ;AACjB,cAAQ,IAAI,MAAM,OAAO,IAAI,CAAE;AAAA,EACnC;AACA,SAAO;AACT;AAEO,IAAM,UAAN,MAAc;AAAA,EAGnB,YACmB,gBACA,gBACjB;AAFiB;AACA;AAAA,EAChB;AAAA,EALH,OAAiB,CAAC;AAAA,EAOlB,IAAI,MAAkC;AACpC,WAAO,KAAK,eAAe,IAAI,IAAI;AAAA,EACrC;AAAA,EAEA,IAAI,MAAc,OAAe,SAAkC;AACjE,UAAM,kBAAkB,EAAE,GAAG,KAAK,gBAAgB,GAAG,QAAQ;AAC7D,SAAK,KAAK,KAAK,CAAC,MAAM,OAAO,eAAe,CAAC;AAAA,EAC/C;AAAA,EAEA,OAAO,MAAc,SAA8D;AACjF,SAAK,IAAI,MAAM,IAAI,EAAE,GAAG,SAAS,SAAS,oBAAI,KAAK,CAAC,GAAG,QAAQ,EAAE,CAAC;AAAA,EACpE;AAAA,EAEA,YAAqB;AACnB,UAAM,UAAU,IAAI,QAAQ;AAC5B,eAAW,CAAC,MAAM,OAAO,OAAO,KAAK,KAAK;AACxC,cAAQ,OAAO,cAAc,UAAU,MAAM,OAAO,OAAO,CAAC;AAE9D,WAAO;AAAA,EACT;AACF;AAEO,IAAM,mBAAmB;AACzB,IAAM,sBAAsB;AAC5B,IAAM,mBAAmB;AACzB,IAAM,2BAA2B;AAEjC,IAAM,eAAe,KAAK;;;ACA1B,SAAS,WAAqD;AAAA,EACnE;AAAA,EACA;AAAA,EACA,WAAW;AAAA,EACX,KAAK,YAAY,CAAC;AAAA,EAClB,SAAS,eAAe,CAAC;AAAA,EACzB,aAAa,CAAC;AAAA,EACd,WAAW;AACb,GAAoD;AAClD,QAAM,EAAE,YAAY,SAAS,QAAQ,KAAK,KAAK,KAAK,aAAa,OAAO,GAAG,IAAI;AAC/E,QAAM,gBAAgB,EAAE,GAAG,kCAAkC,GAAG,aAAa;AAE7E,QAAM,cAAc,IAAI,IAAI,UAAU,IAAI,OAAK,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;AAEzD,WAAS,iBAAiB,SAA+B,CAAC,GAAgB;AACxE,UAAM,OAAO,EAAE,KAAK,OAAO,KAAK,KAAK,OAAO,OAAO,KAAK,KAAK,OAAO,OAAO,KAAK,KAAK,OAAO,IAAI;AAChG,QAAI,cAAc,SAAS;AACzB,aAAO,EAAE,WAAW,QAAQ,OAAO,UAAU,QAAQ,GAAG,KAAK;AAAA,IAC/D,OACK;AACH,YAAM,WAAW,OAAO,UAAU;AAClC,UAAI,aAAa,UAAa,OAAO,aAAa;AAChD,cAAM,IAAI,UAAU,gDAAgD;AACtE,aAAO,EAAE,WAAW,YAAY,OAAO,YAAY,QAAQ,UAAU,GAAG,KAAK;AAAA,IAC/E;AAAA,EACF;AAEA,WAAS,mBAAmB,SAAiC,CAAC,GAAkB;AAC9E,UAAM,OAAO,EAAE,KAAK,OAAO,OAAO,KAAK,KAAK,OAAO,OAAO,IAAI;AAC9D,QAAI,cAAc,SAAS;AACzB,aAAO,EAAE,WAAW,QAAQ,OAAO,UAAU,QAAQ,GAAG,KAAK;AAAA,IAC/D,OACK;AACH,YAAM,WAAW,OAAO,UAAU;AAClC,UAAI,aAAa,UAAa,OAAO,aAAa;AAChD,cAAM,IAAI,UAAU,gDAAgD;AACtE,aAAO,EAAE,WAAW,WAAW,OAAO,WAAW,QAAQ,UAAU,GAAG,KAAK;AAAA,IAC7E;AAAA,EACF;AAEA,iBAAe,QAA2C,SAAY,gBAAsC,CAAC,GAAoB;AAC/H,WAAO,KAAK,SAAS,iBAAiB,aAAa,CAAC;AAAA,EACtD;AAEA,iBAAe,UAAuC,OAAe,gBAAwC,CAAC,GAAsB;AAClI,QAAI;AACF,aAAO,MAAM,OAAU,OAAO,mBAAmB,aAAa,CAAC;AAAA,IACjE,QACM;AACJ,aAAO;AAAA,IACT;AAAA,EACF;AAEA,iBAAe,cAAc,QAAgB,OAAgC,CAAC,GAAG,MAAM,YAA6B;AAClH,UAAM,UAAU,EAAE,KAAK,QAAQ,GAAG,KAAK;AACvC,WAAO,QAAQ,SAAS,EAAE,IAAI,CAAC;AAAA,EACjC;AAEA,iBAAe,gBAAgB,OAAiE;AAC9F,UAAM,UAAU,MAAM,UAAqD,KAAK;AAChF,QAAI,CAAC;AACH,aAAO;AACT,UAAM,OAAO,MAAM,QAAQ,QAAQ,QAAQ,GAAG;AAC9C,QAAI,CAAC;AACH,aAAO;AACT,WAAO,EAAE,MAAM,SAAS,EAAE,IAAI,OAAO,GAAG,QAAQ,EAAE;AAAA,EACpD;AAEA,SAAO;AAAA,IACL,GAAG;AAAA,IACH;AAAA,IACA;AAAA,IACA;AAAA,IACA,KAAK;AAAA,MACH,KAAK;AAAA,IACP;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;;;AC5IA,SAAS,sBAAsB,qBAAqB;AAE7C,SAAS,kBAAkB;AAChC,QAAM,QAAQ,cAAc;AAC5B,QAAM,eAAe,qBAAqB;AAE1C,SAAO;AAAA,IACL;AAAA,IACA;AAAA,EACF;AACF;;;ACIA,eAAe,aAAa,SAAsB,MAAY,YAA2C;AACvG,QAAM,WAAW,KAAK,YAAY,IAAI,UAAU;AAChD,MAAI,CAAC;AACH,WAAO,KAAK,EAAE,OAAO,qBAAqB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAE9D,QAAM,EAAE,OAAO,eAAe,aAAa,IAAI,gBAAgB;AAC/D,QAAM,MAAM,IAAI,IAAI,QAAQ,GAAG;AAC/B,QAAM,aAAa,IAAI,aAAa,IAAI,YAAY;AAEpD,MAAI,YAAY;AACd,QAAI;AACJ,QAAI;AACF,uBAAiB,IAAI,IAAI,YAAY,IAAI,MAAM;AAAA,IACjD,QACM;AACJ,aAAO,KAAK,EAAE,OAAO,2BAA2B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACpE;AAEA,UAAM,eAAe,eAAe;AACpC,UAAM,cAAc,IAAI,IAAI,QAAQ,GAAG,EAAE;AAEzC,UAAM,aAAa,iBAAiB;AACpC,UAAM,YAAY,KAAK,eAAe,SAAS,KAAK,WAAW,SAAS,YAAY;AAEpF,QAAI,CAAC,cAAc,CAAC;AAClB,aAAO,KAAK,EAAE,OAAO,0BAA0B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,QAAM,QAAQ,aAAa,GAAG,aAAa,IAAI,KAAK,UAAU,CAAC,KAAK;AACpE,MAAI,cAAc,IAAI,aAAa,IAAI,aAAa;AACpD,MAAI,CAAC,eAAe,SAAS;AAC3B,kBAAc,GAAG,IAAI,MAAM,GAAG,KAAK,QAAQ,IAAI,UAAU;AAE3D,QAAM,UAAU,MAAM,SAAS,oBAAoB,OAAO,cAAc;AAAA,IACtE,aAAa,eAAe;AAAA,EAC9B,CAAC;AAED,QAAM,iBAAiB,aAAa,QAAQ,QAAQ,IAAI,QAAQ,CAAC;AACjE,QAAM,UAAU,IAAI,QAAQ,gBAAgB,KAAK,aAAa;AAE9D,UAAQ,IAAI,kBAAkB,eAAe,EAAE,QAAQ,cAAc,UAAU,OAAO,CAAC;AACvF,UAAQ,IAAI,kBAAkB,cAAc,EAAE,QAAQ,cAAc,UAAU,OAAO,CAAC;AACtF,MAAI;AACF,YAAQ,IAAI,0BAA0B,aAAa,EAAE,QAAQ,cAAc,UAAU,OAAO,CAAC;AAE/F,QAAM,gBAAgB,IAAI,aAAa,IAAI,UAAU;AAErD,MAAI,kBAAkB,SAAS;AAC7B,UAAMA,YAAW,KAAK,EAAE,KAAK,QAAQ,SAAS,EAAE,CAAC;AACjD,YAAQ,UAAU,EAAE,QAAQ,CAAC,OAAO,QAAQ;AAC1C,MAAAA,UAAS,QAAQ,OAAO,KAAK,KAAK;AAAA,IACpC,CAAC;AACD,WAAOA;AAAA,EACT;AAEA,QAAM,WAAW,SAAS,QAAQ,SAAS,CAAC;AAC5C,UAAQ,UAAU,EAAE,QAAQ,CAAC,OAAO,QAAQ;AAC1C,aAAS,QAAQ,OAAO,KAAK,KAAK;AAAA,EACpC,CAAC;AAED,SAAO;AACT;AAEA,eAAe,eAAe,SAAsB,MAAY,YAA2C;AACzG,QAAM,WAAW,KAAK,YAAY,IAAI,UAAU;AAChD,MAAI,CAAC;AACH,WAAO,KAAK,EAAE,OAAO,qBAAqB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAE9D,QAAM,MAAM,IAAI,IAAI,QAAQ,GAAG;AAC/B,QAAM,OAAO,IAAI,aAAa,IAAI,MAAM;AACxC,QAAM,QAAQ,IAAI,aAAa,IAAI,OAAO;AAE1C,MAAI,CAAC,QAAQ,CAAC;AACZ,WAAO,KAAK,EAAE,OAAO,wBAAwB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAEjE,QAAM,iBAAiB,aAAa,QAAQ,QAAQ,IAAI,QAAQ,CAAC;AACjE,QAAM,UAAU,IAAI,QAAQ,gBAAgB,KAAK,aAAa;AAE9D,MAAI;AACJ,MAAI,aAAa;AACjB,MAAI,MAAM,SAAS,GAAG,GAAG;AACvB,UAAM,CAAC,oBAAoB,eAAe,IAAI,MAAM,MAAM,GAAG;AAC7D,iBAAa;AACb,QAAI;AACF,mBAAa,KAAK,mBAAmB,EAAE,KAAK;AAAA,IAC9C,QACM;AACJ,mBAAa;AAAA,IACf;AAAA,EACF,OACK;AACH,iBAAa;AAAA,EACf;AAEA,QAAM,YAAY,QAAQ,IAAI,gBAAgB;AAE9C,MAAI,CAAC,aAAa,cAAc;AAC9B,WAAO,KAAK,EAAE,OAAO,qBAAqB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAE9D,QAAM,eAAe,QAAQ,IAAI,gBAAgB;AACjD,MAAI,CAAC;AACH,WAAO,KAAK,EAAE,OAAO,6BAA6B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAEtE,QAAM,cAAc,QAAQ,IAAI,wBAAwB;AAExD,QAAM,EAAE,MAAM,cAAc,OAAO,IAAI,MAAM,SAAS,iBAAiB,MAAM,cAAc,eAAe,MAAS;AAEnH,QAAM,kBAAkB,MAAM,KAAK,iBAAiB,YAAY,aAAa,EAAE;AAE/E,MAAI,OAAO;AAEX,MAAI,CAAC,MAAM;AACT,UAAM,WAAW,KAAK,YAAY;AAClC,UAAM,oBAAoB,aAAa,UACpC,aAAa,YACV,aAAa,mBAAmB,aAAa,kBAAkB;AAErE,QAAI,mBAAmB;AACrB,YAAM,eAAe,MAAM,KAAK,eAAe,aAAa,KAAM;AAClE,UAAI,cAAc;AAGhB,YAAI,aAAa,iBAAiB,CAAC,aAAa,eAAe;AAC7D,iBAAO,MAAM,KAAK,WAAW;AAAA,YAC3B,IAAI,aAAa;AAAA,YACjB,eAAe;AAAA,UACjB,CAAC;AAAA,QACH,OACK;AACH,iBAAO;AAAA,QACT;AAAA,MACF;AAAA,IACF;AACA,QAAI,CAAC,MAAM;AACT,UAAI;AACF,eAAO,MAAM,KAAK,WAAW;AAAA,UAC3B,MAAM,aAAa;AAAA,UACnB,OAAO,aAAa;AAAA,UACpB,OAAO,aAAa;AAAA,UACpB,eAAe,aAAa;AAAA,QAC9B,CAAC;AAAA,MACH,SACO,OAAO;AACZ,gBAAQ,MAAM,0BAA0B,KAAK;AAC7C,eAAO,KAAK,EAAE,OAAO,wBAAwB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,MACjE;AAAA,IACF;AAAA,EACF;AAEA,MAAI,CAAC,iBAAiB;AAEpB,QAAI;AACJ,QAAI;AACF,qBAAe,OAAO,aAAa;AAAA,IACrC,QACM;AACJ,qBAAe;AAAA,IACjB;AAEA,QAAI;AACJ,QAAI;AACF,YAAM,gBAAgB,OAAO,qBAAqB;AAClD,UAAI;AACF,oBAAY,KAAK,MAAM,cAAc,QAAQ,IAAI,GAAI;AAAA,IACzD,QACM;AAAA,IACN;AAEA,QAAI;AACJ,QAAI;AACF,gBAAU,OAAO,QAAQ;AAAA,IAC3B,QACM;AACJ,gBAAU;AAAA,IACZ;AAEA,QAAI;AACF,YAAM,KAAK,YAAY;AAAA,QACrB,QAAQ,KAAK;AAAA,QACb,UAAU;AAAA,QACV,mBAAmB,aAAa;AAAA,QAChC,aAAa,OAAO,YAAY;AAAA,QAChC;AAAA,QACA;AAAA,QACA,WAAW,OAAO,YAAY,KAAK;AAAA,QACnC,OAAO,OAAO,OAAO,GAAG,KAAK,GAAG,KAAK;AAAA,QACrC;AAAA,MACF,CAAC;AAAA,IACH,SACO,OAAO;AACZ,cAAQ,MAAM,0BAA0B,KAAK;AAC7C,aAAO,KAAK,EAAE,OAAO,yBAAyB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAClE;AAAA,EACF;AAEA,QAAM,eAAe,MAAM,KAAK,cAAc,KAAK,EAAE;AAErD,QAAM,aAAa,IAAI,IAAI,QAAQ,GAAG;AACtC,QAAM,cAAc,IAAI,IAAI,YAAY,QAAQ,GAAG;AAEnD,QAAM,oBAAoB,YAAY,aAAa;AACnD,QAAM,mBAAmB,WAAW,SAAS,YAAY;AAMzD,MAAI,qBAAqB,kBAAkB;AACzC,UAAM,cAAc,IAAI,IAAI,WAAW;AAEvC,gBAAY,OAAO,SAAS,YAAY;AAExC,UAAM,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,oBAoCG,KAAK,UAAU,YAAY,SAAS,CAAC,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAetD,YAAQ,OAAO,gBAAgB;AAC/B,YAAQ,OAAO,gBAAgB;AAC/B,QAAI;AACF,cAAQ,OAAO,wBAAwB;AAEzC,UAAMA,YAAW,IAAI,SAAS,MAAM;AAAA,MAClC,QAAQ;AAAA,MACR,SAAS,EAAE,gBAAgB,2BAA2B;AAAA,IACxD,CAAC;AACD,YAAQ,UAAU,EAAE,QAAQ,CAAC,OAAO,QAAQ;AAC1C,MAAAA,UAAS,QAAQ,OAAO,KAAK,KAAK;AAAA,IACpC,CAAC;AACD,WAAOA;AAAA,EACT;AAEA,UAAQ,IAAI,qBAAqB,cAAc,EAAE,QAAQ,KAAK,IAAI,KAAK,UAAU,QAAQ,QAAQ,KAAK,CAAC;AACvG,UAAQ,OAAO,gBAAgB;AAC/B,UAAQ,OAAO,gBAAgB;AAC/B,MAAI;AACF,YAAQ,OAAO,wBAAwB;AAEzC,QAAM,gBAAgB,IAAI,aAAa,IAAI,UAAU;AAErD,MAAI;AACJ,MAAI,kBAAkB;AACpB,eAAW,KAAK,EAAE,KAAK,CAAC;AAAA;AAExB,eAAW,SAAS,UAAU;AAEhC,UAAQ,UAAU,EAAE,QAAQ,CAAC,OAAO,QAAQ;AAC1C,aAAS,QAAQ,OAAO,KAAK,KAAK;AAAA,EACpC,CAAC;AAED,SAAO;AACT;AAEA,eAAe,cAAc,SAAsB,MAAmC;AACpF,QAAM,kBAAkB,QAAQ,QAAQ,IAAI,QAAQ;AACpD,QAAM,iBAAiB,aAAa,eAAe;AACnD,MAAI,eAAe,eAAe,IAAI,mBAAmB;AAEzD,MAAI,CAAC,cAAc;AACjB,UAAM,aAAa,QAAQ,QAAQ,IAAI,eAAe;AACtD,QAAI,YAAY,WAAW,SAAS;AAClC,qBAAe,WAAW,UAAU,CAAC;AAAA,EACzC;AAEA,MAAI,CAAC;AACH,WAAO,KAAK,EAAE,MAAM,MAAM,SAAS,KAAK,CAAC;AAE3C,MAAI;AACF,UAAM,cAAc,MAAM,KAAK,gBAAgB,YAAY;AAE3D,QAAI,CAAC;AACH,aAAO,KAAK,EAAE,MAAM,MAAM,SAAS,KAAK,GAAG,EAAE,QAAQ,IAAI,CAAC;AAE5D,WAAO,KAAK,WAAW;AAAA,EACzB,SACO,OAAO;AACZ,YAAQ,MAAM,6BAA6B,KAAK;AAChD,WAAO,KAAK,EAAE,OAAO,6BAA6B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACtE;AACF;AAEA,eAAe,cAAc,SAAsB,MAAmC;AACpF,QAAM,iBAAiB,aAAa,QAAQ,QAAQ,IAAI,QAAQ,CAAC;AACjE,QAAM,UAAU,IAAI,QAAQ,gBAAgB,KAAK,aAAa;AAC9D,UAAQ,OAAO,qBAAqB,EAAE,UAAU,QAAQ,QAAQ,KAAK,CAAC;AAEtE,QAAM,WAAW,KAAK,EAAE,SAAS,aAAa,CAAC;AAC/C,UAAQ,UAAU,EAAE,QAAQ,CAAC,OAAO,QAAQ;AAC1C,aAAS,QAAQ,OAAO,KAAK,KAAK;AAAA,EACpC,CAAC;AAED,SAAO;AACT;AAEO,SAAS,cAAc,MAA6D;AACzF,QAAM,EAAE,aAAa,SAAS,IAAI;AAElC,WAAS,UAAU,SAAsB,UAA8B;AACrE,UAAM,SAAS,QAAQ,QAAQ,IAAI,QAAQ,KAAK,QAAQ,QAAQ,IAAI,QAAQ;AAC5E,QAAI,CAAC;AACH,aAAO;AACT,aAAS,QAAQ,IAAI,+BAA+B,MAAM;AAC1D,aAAS,QAAQ,IAAI,QAAQ,QAAQ;AACrC,aAAS,QAAQ,IAAI,oCAAoC,MAAM;AAC/D,aAAS,QAAQ,IAAI,gCAAgC,qCAAqC;AAC1F,aAAS,QAAQ,IAAI,gCAAgC,oBAAoB;AACzE,WAAO;AAAA,EACT;AAEA,SAAO,eAAgB,SAA6C;AAElE,QAAI,QAAQ,WAAW,WAAW;AAChC,YAAM,SAAS,QAAQ,QAAQ,IAAI,QAAQ,KAAK,QAAQ,QAAQ,IAAI,QAAQ,KAAK;AACjF,YAAM,MAAM,IAAI,SAAS,MAAM;AAAA,QAC7B,QAAQ;AAAA,QACR,SAAS;AAAA,UACP,+BAA+B;AAAA,UAC/B,oCAAoC;AAAA,UACpC,gCAAgC;AAAA,UAChC,gCAAgC;AAAA,QAClC;AAAA,MACF,CAAC;AACD,aAAO;AAAA,IACT;AAEA,UAAM,MAAM,IAAI,IAAI,QAAQ,GAAG;AAC/B,QAAI,CAAC,IAAI,SAAS,WAAW,QAAQ;AACnC,aAAO,UAAU,SAAS,KAAK,EAAE,OAAO,YAAY,GAAG,EAAE,QAAQ,IAAI,CAAC,CAAC;AAEzE,QAAI,QAAQ,WAAW,UAAU,CAAC,oBAAoB,SAAS,KAAK,UAAU;AAC5E,aAAO,UAAU,SAAS,KAAK,EAAE,OAAO,YAAY,GAAG,EAAE,QAAQ,IAAI,CAAC,CAAC;AAEzE,UAAM,OAAO,IAAI,SAAS,UAAU,SAAS,MAAM;AACnD,UAAM,QAAQ,KAAK,MAAM,GAAG,EAAE,OAAO,OAAO;AAC5C,UAAM,SAAS,MAAM,CAAC;AAEtB,QAAI,CAAC;AACH,aAAO,UAAU,SAAS,KAAK,EAAE,OAAO,YAAY,GAAG,EAAE,QAAQ,IAAI,CAAC,CAAC;AAEzE,QAAI;AAEJ,QAAI,QAAQ,WAAW,OAAO;AAC5B,UAAI,YAAY,IAAI,MAAM,GAAG;AAC3B,YAAI,MAAM,WAAW,KAAK,MAAM,CAAC,MAAM;AACrC,qBAAW,MAAM,eAAe,SAAS,MAAM,MAAM;AAAA,iBAC9C,MAAM,WAAW;AACxB,qBAAW,MAAM,aAAa,SAAS,MAAM,MAAM;AAAA;AAEnD,qBAAW,KAAK,EAAE,OAAO,YAAY,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,MAC3D,WACS,MAAM,WAAW,KAAK,WAAW,WAAW;AACnD,mBAAW,MAAM,cAAc,SAAS,IAAI;AAAA,MAC9C,OACK;AACH,mBAAW,KAAK,EAAE,OAAO,YAAY,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,MACzD;AAAA,IACF,WACS,QAAQ,WAAW,QAAQ;AAClC,UAAI,MAAM,WAAW,KAAK,WAAW;AACnC,mBAAW,MAAM,cAAc,SAAS,IAAI;AAAA;AAE5C,mBAAW,KAAK,EAAE,OAAO,YAAY,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC3D,OACK;AACH,iBAAW,KAAK,EAAE,OAAO,qBAAqB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAClE;AAEA,WAAO,UAAU,SAAS,QAAoB;AAAA,EAChD;AACF;AAEA,SAAS,oBAAoB,SAAsB,YAAuC;AACxF,MAAI,eAAe;AACjB,WAAO;AAET,QAAM,SAAS,QAAQ,QAAQ,IAAI,QAAQ;AAE3C,MAAI,CAAC;AACH,WAAO;AAET,MAAI;AACJ,MAAI;AACF,iBAAa,IAAI,IAAI,MAAM,EAAE;AAAA,EAC/B,QACM;AACJ,WAAO;AAAA,EACT;AAEA,QAAM,aAAa,IAAI,IAAI,QAAQ,GAAG;AACtC,QAAM,cAAc,WAAW;AAC/B,QAAM,gBAAgB,GAAG,WAAW,QAAQ,KAAK,WAAW;AAE5D,MAAI,WAAW;AACb,WAAO;AAET,SAAO,WAAW,SAAS,UAAU;AACvC;;;ACnYO,IAAM,YAAN,cAAwB,MAAM;AAAA,EACjB;AAAA,EAClB,YAAY,SAAiB,OAAiB;AAC5C,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,SAAK,QAAQ;AAAA,EACf;AACF;AAEO,SAAS,KAAQ,MAAS,OAAqB,CAAC,GAAa;AAClE,QAAM,UAAU,IAAI,QAAQ,KAAK,OAAO;AACxC,MAAI,CAAC,QAAQ,IAAI,cAAc;AAC7B,YAAQ,IAAI,gBAAgB,iCAAiC;AAC/D,SAAO,IAAI,SAAS,KAAK,UAAU,IAAI,GAAG,EAAE,GAAG,MAAM,QAAQ,CAAC;AAChE;AAEO,SAAS,SAAS,KAAa,SAAoB,KAAe;AACvE,SAAO,IAAI,SAAS,MAAM;AAAA,IACxB;AAAA,IACA,SAAS;AAAA,MACP,UAAU;AAAA,IACZ;AAAA,EACF,CAAC;AACH;;;AC1FO,SAAS,kBAAkB,GAAe,GAAwB;AACvE,MAAI,OAAO,EAAE,SAAS,EAAE;AACxB,QAAM,MAAM,KAAK,IAAI,EAAE,QAAQ,EAAE,MAAM;AACvC,WAAS,IAAI,GAAG,IAAI,KAAK;AACvB,aAAS,EAAE,CAAC,KAAK,MAAM,EAAE,CAAC,KAAK;AAEjC,SAAO,SAAS;AAClB;AAEA,SAAS,iBAAiB,WAA+B;AACvD,QAAM,SAAS,UAAU,QAAQ,MAAM,GAAG,EAAE,QAAQ,MAAM,GAAG;AAC7D,QAAM,aAAa,IAAK,OAAO,SAAS,KAAM;AAC9C,QAAM,SAAS,OAAO,OAAO,OAAO,SAAS,WAAW,GAAG;AAC3D,QAAM,gBAAgB,KAAK,MAAM;AACjC,QAAM,MAAM,cAAc;AAC1B,QAAM,QAAQ,IAAI,WAAW,GAAG;AAChC,WAAS,IAAI,GAAG,IAAI,KAAK;AACvB,UAAM,CAAC,IAAI,cAAc,WAAW,CAAC;AAEvC,SAAO;AACT;AAEA,eAAsB,qBAAqB,QAA0E;AACnH,MAAI;AACF,UAAM,cAAc,iBAAiB,MAAM;AAC3C,UAAM,aAAa,MAAM,OAAO,OAAO;AAAA,MACrC;AAAA,MACA,YAAY,MAAM;AAAA,MAClB,EAAE,MAAM,SAAS,YAAY,QAAQ;AAAA,MACrC;AAAA,MACA,CAAC,MAAM;AAAA,IACT;AAEA,UAAM,MAAM,MAAM,OAAO,OAAO,UAAU,OAAO,UAAU;AAC3D,WAAO,IAAI;AACX,QAAI,UAAU,CAAC,QAAQ;AAEvB,UAAM,YAAY,MAAM,OAAO,OAAO;AAAA,MACpC;AAAA,MACA;AAAA,MACA,EAAE,MAAM,SAAS,YAAY,QAAQ;AAAA,MACrC;AAAA,MACA,CAAC,QAAQ;AAAA,IACX;AACA,WAAO,EAAE,YAAY,UAAU;AAAA,EACjC,SACO,OAAO;AACZ,UAAM,IAAI,UAAU,oHAAoH,KAAK;AAAA,EAC/I;AACF;AAKO,SAAS,SAAS,KAA6B;AACpD,MAAI,IAAI,WAAW;AACjB,UAAM,IAAI,MAAM,8BAA8B;AAEhD,MAAI,IAAI,IAAI,MAAM,GAAG,EAAE;AACvB,MAAI,IAAI,IAAI,MAAM,EAAE;AAEpB,MAAI,UAAU;AACd,SAAO,UAAU,EAAE,SAAS,KAAK,EAAE,OAAO,MAAM,EAAG;AACnD,MAAI,EAAE,MAAM,OAAO;AAEnB,MAAI,UAAU;AACd,SAAO,UAAU,EAAE,SAAS,KAAK,EAAE,OAAO,MAAM,EAAG;AACnD,MAAI,EAAE,MAAM,OAAO;AAEnB,MAAI,EAAE,SAAS,KAAK,EAAE,CAAC,IAAK,KAAM;AAChC,UAAM,UAAU,IAAI,WAAW,EAAE,SAAS,CAAC;AAC3C,YAAQ,CAAC,IAAI;AACb,YAAQ,IAAI,GAAG,CAAC;AAChB,QAAI;AAAA,EACN;AACA,MAAI,EAAE,SAAS,KAAK,EAAE,CAAC,IAAK,KAAM;AAChC,UAAM,UAAU,IAAI,WAAW,EAAE,SAAS,CAAC;AAC3C,YAAQ,CAAC,IAAI;AACb,YAAQ,IAAI,GAAG,CAAC;AAChB,QAAI;AAAA,EACN;AAEA,QAAM,UAAU,EAAE;AAClB,QAAM,UAAU,EAAE;AAClB,QAAM,cAAc,IAAI,UAAU,IAAI;AAEtC,QAAM,MAAM,IAAI,WAAW,IAAI,WAAW;AAC1C,MAAI,CAAC,IAAI;AACT,MAAI,CAAC,IAAI;AACT,MAAI,CAAC,IAAI;AACT,MAAI,CAAC,IAAI;AACT,MAAI,IAAI,GAAG,CAAC;AACZ,MAAI,IAAI,OAAO,IAAI;AACnB,MAAI,IAAI,OAAO,IAAI;AACnB,MAAI,IAAI,GAAG,IAAI,OAAO;AAEtB,SAAO;AACT;;;ANvEA,eAAsB,KAAwC,SAAY,UAAuB,CAAC,GAAoB;AACpH,MAAI,EAAE,YAAY,SAAS,KAAK,KAAK,KAAK,KAAK,YAAY,OAAO,IAAI;AAEtE,MAAI,cAAc,SAAS;AACzB,QAAI,CAAC,YAAY;AACf,UAAI,OAAO,WAAW;AACpB,cAAM,IAAI,UAAU,0EAA0E;AAEhG,OAAC,EAAE,WAAW,IAAI,MAAM,qBAAqB,MAAM;AAAA,IACrD;AAAA,EACF,WACS,cAAc,WAAW,CAAC,QAAQ;AACzC,UAAM,IAAI,UAAU,kCAAkC;AAAA,EACxD;AAEA,QAAM,MAAM,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;AAExC,QAAM,aAAsC,EAAE,KAAK,KAAK,KAAK,KAAK,KAAK,GAAG,QAAQ;AAElF,MAAI,OAAO,QAAQ,MAAM;AACvB,eAAW,MAAM,MAAM;AAEzB,QAAM,UAAU,cAAc;AAC9B,QAAM,MAA0B,UAAU,UAAU;AAEpD,QAAM,aAAa,KAAK,UAAU,EAAE,KAAK,KAAK,MAAM,CAAC;AACrD,QAAM,cAAc,KAAK,UAAU,UAAU;AAE7C,QAAM,mBAAmB,0BAA0B,YAAY,WAAW;AAE1E,MAAI;AAEJ,MAAI,SAAS;AAEX,UAAM,cAAc,OAAO,WAAW,WAClC,IAAI,YAAY,EAAE,OAAO,MAAM,IAC/B;AAEJ,UAAM,YAAY,MAAM,OAAO,OAAO;AAAA,MACpC;AAAA,MACA;AAAA,MACA,EAAE,MAAM,QAAQ,MAAM,UAAU;AAAA,MAChC;AAAA,MACA,CAAC,MAAM;AAAA,IACT;AAEA,gBAAY,IAAI,WAAW,MAAM,OAAO,OAAO,KAAK,QAAQ,WAAW,gBAAgC,CAAC;AAAA,EAC1G,OACK;AAGH,gBAAY,IAAI;AAAA,MACd,MAAM,OAAO,OAAO;AAAA,QAClB,EAAE,MAAM,SAAS,MAAM,UAAU;AAAA,QACjC;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,SAAO,UAAU,YAAY,aAAa,SAAS;AACrD;AAWA,eAAsB,OAAoC,OAAe,SAAoC;AAC3G,MAAI,EAAE,YAAY,SAAS,WAAW,QAAQ,KAAK,IAAI,IAAI;AAE3D,MAAI,cAAc,SAAS;AACzB,QAAI,CAAC,WAAW;AACd,UAAI,OAAO,WAAW;AACpB,cAAM,IAAI,UAAU,4EAA4E;AAElG,OAAC,EAAE,UAAU,IAAI,MAAM,qBAAqB,MAAM;AAAA,IACpD;AAAA,EACF;AAEA,MAAI,cAAc,WAAW,CAAC;AAC5B,UAAM,IAAI,UAAU,uCAAuC;AAE7D,QAAM,CAAC,QAAQ,SAAS,WAAW,gBAAgB,IAAI,SAAS,KAAK;AAErE,QAAM,eAAe,IAAI,qBAAqB,MAAM;AACpD,QAAM,YAAY,aAAa,UAAU;AAEzC,MAAI,iBAAiB;AAGrB,MAAI,cAAc,SAAS;AACzB,QAAI,cAAc;AAChB,YAAM,IAAI,MAAM,qBAAqB,SAAS,4CAA4C;AAE5F,UAAM,cAAc,OAAO,WAAW,WAClC,IAAI,YAAY,EAAE,OAAO,MAAM,IAC/B;AAEJ,UAAM,YAAY,MAAM,OAAO,OAAO;AAAA,MACpC;AAAA,MACA;AAAA,MACA,EAAE,MAAM,QAAQ,MAAM,UAAU;AAAA,MAChC;AAAA,MACA,CAAC,MAAM;AAAA,IACT;AAEA,UAAM,cAAc,IAAI,WAAW,MAAM,OAAO,OAAO,KAAK,QAAQ,WAAW,gBAAgC,CAAC;AAChH,qBAAiB,kBAAkB,aAAa,IAAI,WAAW,SAAS,CAAC;AAAA,EAC3E,OAEK;AACH,QAAI,cAAc;AAChB,YAAM,IAAI,UAAU,qBAAqB,SAAS,4CAA4C;AAEhG,UAAM,eAAe,IAAI,WAAW,SAAS;AAG7C,qBAAiB,MAAM,OAAO,OAAO;AAAA,MACnC,EAAE,MAAM,SAAS,MAAM,UAAU;AAAA,MACjC;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAEA,QAAI,CAAC,gBAAgB;AAEnB,YAAM,SAAS,SAAS,YAAY;AACpC,uBAAiB,MAAM,OAAO,OAAO;AAAA,QACnC,EAAE,MAAM,SAAS,MAAM,UAAU;AAAA,QACjC;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,MAAI,CAAC;AACH,UAAM,IAAI,UAAU,uBAAuB;AAE7C,QAAM,SAAS,IAAI,oBAAoB,OAAO;AAC9C,MAAI,OAAO,cAAc,KAAK,CAAC,OAAO,iBAAiB;AACrD,UAAM,IAAI,UAAU,aAAa;AACnC,MAAI,OAAO,aAAa,KAAK,CAAC,OAAO,gBAAgB;AACnD,UAAM,IAAI,UAAU,mBAAmB;AACzC,MAAI,OAAQ,QAAgB,QAAQ;AAClC,UAAM,IAAI,UAAU,oBAAoB;AAE1C,MAAI,KAAK;AACP,UAAM,mBAAmB,MAAM,QAAQ,GAAG,IAAI,MAAM,CAAC,GAAG;AACxD,UAAM,gBAAiB,QAAgB,MAClC,MAAM,QAAS,QAAgB,GAAG,IAAK,QAAgB,MAAM,CAAE,QAAgB,GAAG,IACnF,CAAC;AAEL,QAAI,CAAC,iBAAiB,KAAK,cAAY,cAAc,SAAS,QAAQ,CAAC;AACrE,YAAM,IAAI,UAAU,sBAAsB;AAAA,EAC9C;AAEA,SAAO;AACT;","names":["response"]}
@@ -0,0 +1 @@
1
+ {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/adapters/drizzle/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAA;AAC/C,OAAO,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,UAAU,CAAA;AAEzD,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAA;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAEhD,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AAK5D,wBAAgB,cAAc,CAC5B,CAAC,SAAS,UAAU,EACpB,CAAC,SAAS,aAAa,EAEvB,EAAE,EACE,kBAAkB,CAAC,MAAM,GAAG,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,GAC9C,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,GACjC,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,EAC7B,KAAK,EAAE,CAAC,EACR,QAAQ,EAAE,CAAC,GACV,OAAO,CAeT"}
@@ -0,0 +1 @@
1
+ import{DrizzleAdapter as o}from"../../../chunk-5CS44VSP.js";export{o as DrizzleAdapter};//# sourceMappingURL=index.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"mysql.d.ts","sourceRoot":"","sources":["../../../../src/adapters/drizzle/mysql.ts"],"names":[],"mappings":"AAAA,wCAAwC;AACxC,wBAAgB,mBAAmB,IAAI,KAAK,CAE3C"}
@@ -0,0 +1 @@
1
+ {"version":3,"file":"pg.d.ts","sourceRoot":"","sources":["../../../../src/adapters/drizzle/pg.ts"],"names":[],"mappings":"AAAA,6CAA6C;AAC7C,wBAAgB,sBAAsB,IAAI,KAAK,CAE9C"}
@@ -0,0 +1 @@
1
+ {"version":3,"file":"sqlite.d.ts","sourceRoot":"","sources":["../../../../src/adapters/drizzle/sqlite.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAsC,KAAK,EAAE,MAAM,aAAa,CAAA;AACvF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AACjE,OAAO,KAAK,EAAE,OAAO,EAA6B,MAAM,kBAAkB,CAAA;AAG1E,MAAM,MAAM,UAAU,GAAG,KAAK,GAAG;IAC/B,EAAE,EAAE,SAAS,CAAA;IACb,IAAI,EAAE,SAAS,CAAA;IACf,KAAK,EAAE,SAAS,CAAA;IAChB,KAAK,EAAE,SAAS,CAAA;IAChB,aAAa,EAAE,SAAS,CAAA;IACxB,SAAS,EAAE,SAAS,CAAA;IACpB,SAAS,EAAE,SAAS,CAAA;CACrB,CAAA;AAED,MAAM,MAAM,aAAa,GAAG,KAAK,GAAG;IAClC,MAAM,EAAE,SAAS,CAAA;IACjB,QAAQ,EAAE,SAAS,CAAA;IACnB,iBAAiB,EAAE,SAAS,CAAA;CAC7B,CAAA;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAClC,EAAE,SAAS,kBAAkB,CAAC,MAAM,GAAG,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,EACzD,CAAC,SAAS,UAAU,EACpB,CAAC,SAAS,aAAa,EACvB,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,GAAG,OAAO,CA4FxC"}
@@ -0,0 +1 @@
1
+ {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/adapters/index.ts"],"names":[],"mappings":"AAAA,cAAc,WAAW,CAAA;AACzB,cAAc,UAAU,CAAA"}
@@ -0,0 +1 @@
1
+ import{MemoryAdapter as o}from"../../chunk-B4H7UXTD.js";import{DrizzleAdapter as r}from"../../chunk-5CS44VSP.js";export{r as DrizzleAdapter,o as MemoryAdapter};//# sourceMappingURL=index.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/adapters/memory/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAA6B,MAAM,kBAAkB,CAAA;AAW1E,wBAAgB,aAAa,IAAI,OAAO,CAsDvC"}
@@ -0,0 +1 @@
1
+ import{MemoryAdapter as o}from"../../../chunk-B4H7UXTD.js";export{o as MemoryAdapter};//# sourceMappingURL=index.js.map
@@ -1 +1 @@
1
- {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../cli/index.ts"],"names":[],"mappings":""}
1
+ {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/cli/index.ts"],"names":[],"mappings":""}
@@ -0,0 +1 @@
1
+ import{Buffer as e}from"buffer";import r from"process";(async function(){if("secret"===r.argv.slice(2)[0]){const r=await async function(){const r=await crypto.subtle.generateKey({name:"ECDSA",namedCurve:"P-256"},!0,["sign","verify"]),o=await crypto.subtle.exportKey("pkcs8",r.privateKey);return e.from(o).toString("base64").replace(/\+/g,"-").replace(/\//g,"_").replace(/=/g,"")}();console.log(`Add this to your .env file:\n\nAUTH_SECRET=${r}`)}else console.log("Usage: bunx gau secret")})().catch(console.error);//# sourceMappingURL=index.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"sources":["../../../src/cli/index.ts"],"sourcesContent":["import { Buffer } from 'node:buffer'\nimport process from 'node:process'\n\nasync function generateAuthSecret(): Promise<string> {\n const keyPair = await crypto.subtle.generateKey(\n { name: 'ECDSA', namedCurve: 'P-256' },\n true,\n ['sign', 'verify'],\n )\n\n const exported = await crypto.subtle.exportKey('pkcs8', keyPair.privateKey)\n const base64 = Buffer.from(exported).toString('base64')\n const base64url = base64.replace(/\\+/g, '-').replace(/\\//g, '_').replace(/=/g, '')\n return base64url\n}\n\nasync function main() {\n const args = process.argv.slice(2)\n if (args[0] === 'secret') {\n const secret = await generateAuthSecret()\n console.log(`Add this to your .env file:\\n\\nAUTH_SECRET=${secret}`)\n }\n else {\n console.log('Usage: bunx gau secret')\n }\n}\n\nmain().catch(console.error)\n"],"mappings":";AAAA,SAAS,cAAc;AACvB,OAAO,aAAa;AAEpB,eAAe,qBAAsC;AACnD,QAAM,UAAU,MAAM,OAAO,OAAO;AAAA,IAClC,EAAE,MAAM,SAAS,YAAY,QAAQ;AAAA,IACrC;AAAA,IACA,CAAC,QAAQ,QAAQ;AAAA,EACnB;AAEA,QAAM,WAAW,MAAM,OAAO,OAAO,UAAU,SAAS,QAAQ,UAAU;AAC1E,QAAM,SAAS,OAAO,KAAK,QAAQ,EAAE,SAAS,QAAQ;AACtD,QAAM,YAAY,OAAO,QAAQ,OAAO,GAAG,EAAE,QAAQ,OAAO,GAAG,EAAE,QAAQ,MAAM,EAAE;AACjF,SAAO;AACT;AAEA,eAAe,OAAO;AACpB,QAAM,OAAO,QAAQ,KAAK,MAAM,CAAC;AACjC,MAAI,KAAK,CAAC,MAAM,UAAU;AACxB,UAAM,SAAS,MAAM,mBAAmB;AACxC,YAAQ,IAAI;AAAA;AAAA,cAA8C,MAAM,EAAE;AAAA,EACpE,OACK;AACH,YAAQ,IAAI,wBAAwB;AAAA,EACtC;AACF;AAEA,KAAK,EAAE,MAAM,QAAQ,KAAK;","names":[]}
@@ -9,7 +9,7 @@ interface AuthContextValue<TAuth = unknown> {
9
9
  }
10
10
  export declare function AuthProvider<const TAuth = unknown>(props: ParentProps & {
11
11
  auth?: TAuth;
12
- baseUrl: string;
12
+ baseUrl?: string;
13
13
  scheme?: string;
14
14
  redirectTo?: string;
15
15
  }): import("solid-js").JSX.Element;
@@ -0,0 +1 @@
1
+ {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/client/solid/index.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,UAAU,CAAA;AACrD,OAAO,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAczD,UAAU,gBAAgB,CAAC,KAAK,GAAG,OAAO;IACxC,OAAO,EAAE,QAAQ,CAAC,UAAU,GAAG,IAAI,CAAC,CAAA;IACpC,MAAM,EAAE,CAAC,QAAQ,EAAE,WAAW,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IAC1F,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAC7B;AAID,wBAAgB,YAAY,CAAC,KAAK,CAAC,KAAK,GAAG,OAAO,EAAE,KAAK,EAAE,WAAW,GAAG;IAAE,IAAI,CAAC,EAAE,KAAK,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,kCA2EhJ;AAED,wBAAgB,OAAO,CAAC,KAAK,CAAC,KAAK,GAAG,OAAO,KAAK,gBAAgB,CAAC,KAAK,CAAC,CAKxE"}
@@ -0,0 +1 @@
1
+ import{createContext as e,createResource as n,onMount as t,useContext as o}from"solid-js";import{isServer as i}from"solid-js/web";import{listen as a}from"@tauri-apps/api/event";import{BROWSER as r}from"esm-env";var s=r&&"__TAURI_INTERNALS__"in window;function c(e){if(r)try{localStorage.setItem("gau-token",e),document.cookie=`__gau-session-token=${e}; path=/; max-age=31536000; samesite=lax`}catch{}}function u(){return r?localStorage.getItem("gau-token"):null}var l=e();function d(e){const o=e.scheme??"gau",d=e.baseUrl??"/api/auth",[h,{refetch:m}]=n(async()=>{if(i)return null;const e=u(),n=e?{Authorization:`Bearer ${e}`}:void 0,t=await fetch(`${d}/session`,e?{headers:n}:{credentials:"include"});if(!t.ok)return{user:null,session:null};const o=t.headers.get("content-type");return o?.includes("application/json")?t.json():{user:null,session:null}},{initialValue:null});return t(()=>{if(!s){const e=new URL(window.location.href).hash.substring(1),n=new URLSearchParams(e).get("token");n&&(c(n),m(),window.history.replaceState(null,"",window.location.pathname+window.location.search))}var e;s&&(e=async e=>{!function(e,n,t,o){const i=new URL(e);if(i.protocol!==`${t}:`&&i.origin!==new URL(n).origin)return;const a=new URLSearchParams(i.hash.substring(1)).get("token");a&&o(a)}(e,d,o,e=>{c(e),m()})},s&&a("deep-link",async n=>{await e(n.payload)}).catch(console.error))}),React.createElement(l.Provider,{value:{session:h,signIn:async function(n,{redirectTo:t}={}){let a=t??e.redirectTo;if(s)await async function(e,n,t="gau",o){if(!s)return;const{platform:i}=await import("@tauri-apps/plugin-os"),{open:a}=await import("@tauri-apps/plugin-shell"),r=i();let c;c=o||("android"===r||"ios"===r?new URL(n).origin:`${t}://oauth/callback`);const u=`${n}/${e}?redirectTo=${encodeURIComponent(c)}`;await a(u)}(n,d,o,a);else{a||i||(a=window.location.origin);const e=a?`?redirectTo=${encodeURIComponent(a)}`:"",t=`${d}/${n}${e}`;window.location.href=t}},signOut:async()=>{!function(){if(r)try{localStorage.removeItem("gau-token"),document.cookie="__gau-session-token=; path=/; max-age=0"}catch{}}();const e=u(),n=e?{Authorization:`Bearer ${e}`}:void 0;await fetch(`${d}/signout`,e?{method:"POST",headers:n}:{method:"POST",credentials:"include"}),m()}}},e.children)}function h(){const e=o(l);if(!e)throw new Error("useAuth must be used within an AuthProvider");return e}export{d as AuthProvider,h as useAuth};//# sourceMappingURL=index.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"sources":["../../../../src/client/solid/index.tsx","../../../../src/runtimes/tauri/index.ts"],"sourcesContent":["import type { Accessor, ParentProps } from 'solid-js'\nimport type { GauSession, ProviderIds } from '../../core'\nimport { createContext, createResource, onMount, useContext } from 'solid-js'\nimport { isServer } from 'solid-js/web'\n\nimport {\n clearSessionToken,\n getSessionToken,\n handleTauriDeepLink,\n isTauri,\n setupTauriListener,\n signInWithTauri,\n storeSessionToken,\n} from '../../runtimes/tauri'\n\ninterface AuthContextValue<TAuth = unknown> {\n session: Accessor<GauSession | null>\n signIn: (provider: ProviderIds<TAuth>, options?: { redirectTo?: string }) => Promise<void>\n signOut: () => Promise<void>\n}\n\nconst AuthContext = createContext<any>()\n\nexport function AuthProvider<const TAuth = unknown>(props: ParentProps & { auth?: TAuth, baseUrl?: string, scheme?: string, redirectTo?: string }) {\n const scheme = props.scheme ?? 'gau'\n const baseUrl = props.baseUrl ?? '/api/auth'\n\n const [session, { refetch }] = createResource<GauSession | null>(\n async () => {\n if (isServer)\n return null\n\n const token = getSessionToken()\n const headers = token ? { Authorization: `Bearer ${token}` } : undefined\n const res = await fetch(`${baseUrl}/session`, token ? { headers } : { credentials: 'include' })\n if (!res.ok)\n return { user: null, session: null }\n\n const contentType = res.headers.get('content-type')\n if (contentType?.includes('application/json'))\n return res.json()\n\n return { user: null, session: null }\n },\n { initialValue: null },\n )\n\n async function signIn(provider: ProviderIds<TAuth>, { redirectTo }: { redirectTo?: string } = {}) {\n let finalRedirectTo = redirectTo ?? props.redirectTo\n if (isTauri) {\n await signInWithTauri(provider as string, baseUrl, scheme, finalRedirectTo)\n }\n else {\n if (!finalRedirectTo && !isServer)\n finalRedirectTo = window.location.origin\n\n const query = finalRedirectTo ? `?redirectTo=${encodeURIComponent(finalRedirectTo)}` : ''\n const authUrl = `${baseUrl}/${provider as string}${query}`\n window.location.href = authUrl\n }\n }\n\n const signOut = async () => {\n clearSessionToken()\n const token = getSessionToken()\n const headers = token ? { Authorization: `Bearer ${token}` } : undefined\n await fetch(`${baseUrl}/signout`, token ? { method: 'POST', headers } : { method: 'POST', credentials: 'include' })\n refetch()\n }\n\n onMount(() => {\n if (!isTauri) {\n const hash = new URL(window.location.href).hash.substring(1)\n const params = new URLSearchParams(hash)\n const tokenParam = params.get('token')\n if (tokenParam) {\n storeSessionToken(tokenParam)\n refetch()\n window.history.replaceState(null, '', window.location.pathname + window.location.search)\n }\n }\n\n if (!isTauri)\n return\n\n setupTauriListener(async (url) => {\n handleTauriDeepLink(url, baseUrl, scheme, (token) => {\n storeSessionToken(token)\n refetch()\n })\n })\n })\n\n return (\n <AuthContext.Provider value={{ session, signIn, signOut }}>\n {props.children}\n </AuthContext.Provider>\n )\n}\n\nexport function useAuth<const TAuth = unknown>(): AuthContextValue<TAuth> {\n const context = useContext(AuthContext)\n if (!context)\n throw new Error('useAuth must be used within an AuthProvider')\n return context as AuthContextValue<TAuth>\n}\n","import { listen } from '@tauri-apps/api/event'\nimport { BROWSER } from 'esm-env'\n\nexport const isTauri = BROWSER && '__TAURI_INTERNALS__' in window\n\nexport async function signInWithTauri(\n provider: string,\n baseUrl: string,\n scheme: string = 'gau',\n redirectOverride?: string,\n) {\n if (!isTauri)\n return\n\n const { platform } = await import('@tauri-apps/plugin-os')\n const { open } = await import('@tauri-apps/plugin-shell')\n\n const currentPlatform = platform()\n let redirectTo: string\n\n if (redirectOverride)\n redirectTo = redirectOverride\n\n else if (currentPlatform === 'android' || currentPlatform === 'ios')\n redirectTo = new URL(baseUrl).origin\n\n else\n redirectTo = `${scheme}://oauth/callback`\n\n const authUrl = `${baseUrl}/${provider}?redirectTo=${encodeURIComponent(redirectTo)}`\n await open(authUrl)\n}\n\nexport function setupTauriListener(handler: (url: string) => Promise<void>) {\n if (!isTauri)\n return\n\n listen<string>('deep-link', async (event) => {\n await handler(event.payload)\n }).catch(console.error)\n}\n\nexport function handleTauriDeepLink(url: string, baseUrl: string, scheme: string, onToken: (token: string) => void) {\n const parsed = new URL(url)\n if (parsed.protocol !== `${scheme}:` && parsed.origin !== new URL(baseUrl).origin)\n return\n\n const params = new URLSearchParams(parsed.hash.substring(1))\n const token = params.get('token')\n if (token)\n onToken(token)\n}\n\nexport function storeSessionToken(token: string) {\n if (!BROWSER)\n return\n try {\n localStorage.setItem('gau-token', token)\n document.cookie = `__gau-session-token=${token}; path=/; max-age=31536000; samesite=lax`\n }\n catch {}\n}\n\nexport function getSessionToken(): string | null {\n if (!BROWSER)\n return null\n return localStorage.getItem('gau-token')\n}\n\nexport function clearSessionToken() {\n if (!BROWSER)\n return\n try {\n localStorage.removeItem('gau-token')\n document.cookie = `__gau-session-token=; path=/; max-age=0`\n }\n catch {}\n}\n"],"mappings":";AAEA,SAAS,eAAe,gBAAgB,SAAS,kBAAkB;AACnE,SAAS,gBAAgB;;;ACHzB,SAAS,cAAc;AACvB,SAAS,eAAe;AAEjB,IAAM,UAAU,WAAW,yBAAyB;AAE3D,eAAsB,gBACpB,UACA,SACA,SAAiB,OACjB,kBACA;AACA,MAAI,CAAC;AACH;AAEF,QAAM,EAAE,SAAS,IAAI,MAAM,OAAO,uBAAuB;AACzD,QAAM,EAAE,KAAK,IAAI,MAAM,OAAO,0BAA0B;AAExD,QAAM,kBAAkB,SAAS;AACjC,MAAI;AAEJ,MAAI;AACF,iBAAa;AAAA,WAEN,oBAAoB,aAAa,oBAAoB;AAC5D,iBAAa,IAAI,IAAI,OAAO,EAAE;AAAA;AAG9B,iBAAa,GAAG,MAAM;AAExB,QAAM,UAAU,GAAG,OAAO,IAAI,QAAQ,eAAe,mBAAmB,UAAU,CAAC;AACnF,QAAM,KAAK,OAAO;AACpB;AAEO,SAAS,mBAAmB,SAAyC;AAC1E,MAAI,CAAC;AACH;AAEF,SAAe,aAAa,OAAO,UAAU;AAC3C,UAAM,QAAQ,MAAM,OAAO;AAAA,EAC7B,CAAC,EAAE,MAAM,QAAQ,KAAK;AACxB;AAEO,SAAS,oBAAoB,KAAa,SAAiB,QAAgB,SAAkC;AAClH,QAAM,SAAS,IAAI,IAAI,GAAG;AAC1B,MAAI,OAAO,aAAa,GAAG,MAAM,OAAO,OAAO,WAAW,IAAI,IAAI,OAAO,EAAE;AACzE;AAEF,QAAM,SAAS,IAAI,gBAAgB,OAAO,KAAK,UAAU,CAAC,CAAC;AAC3D,QAAM,QAAQ,OAAO,IAAI,OAAO;AAChC,MAAI;AACF,YAAQ,KAAK;AACjB;AAEO,SAAS,kBAAkB,OAAe;AAC/C,MAAI,CAAC;AACH;AACF,MAAI;AACF,iBAAa,QAAQ,aAAa,KAAK;AACvC,aAAS,SAAS,uBAAuB,KAAK;AAAA,EAChD,QACM;AAAA,EAAC;AACT;AAEO,SAAS,kBAAiC;AAC/C,MAAI,CAAC;AACH,WAAO;AACT,SAAO,aAAa,QAAQ,WAAW;AACzC;AAEO,SAAS,oBAAoB;AAClC,MAAI,CAAC;AACH;AACF,MAAI;AACF,iBAAa,WAAW,WAAW;AACnC,aAAS,SAAS;AAAA,EACpB,QACM;AAAA,EAAC;AACT;;;ADxDA,IAAM,cAAc,cAAmB;AAEhC,SAAS,aAAoC,OAA+F;AACjJ,QAAM,SAAS,MAAM,UAAU;AAC/B,QAAM,UAAU,MAAM,WAAW;AAEjC,QAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,IAAI;AAAA,IAC7B,YAAY;AACV,UAAI;AACF,eAAO;AAET,YAAM,QAAQ,gBAAgB;AAC9B,YAAM,UAAU,QAAQ,EAAE,eAAe,UAAU,KAAK,GAAG,IAAI;AAC/D,YAAM,MAAM,MAAM,MAAM,GAAG,OAAO,YAAY,QAAQ,EAAE,QAAQ,IAAI,EAAE,aAAa,UAAU,CAAC;AAC9F,UAAI,CAAC,IAAI;AACP,eAAO,EAAE,MAAM,MAAM,SAAS,KAAK;AAErC,YAAM,cAAc,IAAI,QAAQ,IAAI,cAAc;AAClD,UAAI,aAAa,SAAS,kBAAkB;AAC1C,eAAO,IAAI,KAAK;AAElB,aAAO,EAAE,MAAM,MAAM,SAAS,KAAK;AAAA,IACrC;AAAA,IACA,EAAE,cAAc,KAAK;AAAA,EACvB;AAEA,iBAAe,OAAO,UAA8B,EAAE,WAAW,IAA6B,CAAC,GAAG;AAChG,QAAI,kBAAkB,cAAc,MAAM;AAC1C,QAAI,SAAS;AACX,YAAM,gBAAgB,UAAoB,SAAS,QAAQ,eAAe;AAAA,IAC5E,OACK;AACH,UAAI,CAAC,mBAAmB,CAAC;AACvB,0BAAkB,OAAO,SAAS;AAEpC,YAAM,QAAQ,kBAAkB,eAAe,mBAAmB,eAAe,CAAC,KAAK;AACvF,YAAM,UAAU,GAAG,OAAO,IAAI,QAAkB,GAAG,KAAK;AACxD,aAAO,SAAS,OAAO;AAAA,IACzB;AAAA,EACF;AAEA,QAAM,UAAU,YAAY;AAC1B,sBAAkB;AAClB,UAAM,QAAQ,gBAAgB;AAC9B,UAAM,UAAU,QAAQ,EAAE,eAAe,UAAU,KAAK,GAAG,IAAI;AAC/D,UAAM,MAAM,GAAG,OAAO,YAAY,QAAQ,EAAE,QAAQ,QAAQ,QAAQ,IAAI,EAAE,QAAQ,QAAQ,aAAa,UAAU,CAAC;AAClH,YAAQ;AAAA,EACV;AAEA,UAAQ,MAAM;AACZ,QAAI,CAAC,SAAS;AACZ,YAAM,OAAO,IAAI,IAAI,OAAO,SAAS,IAAI,EAAE,KAAK,UAAU,CAAC;AAC3D,YAAM,SAAS,IAAI,gBAAgB,IAAI;AACvC,YAAM,aAAa,OAAO,IAAI,OAAO;AACrC,UAAI,YAAY;AACd,0BAAkB,UAAU;AAC5B,gBAAQ;AACR,eAAO,QAAQ,aAAa,MAAM,IAAI,OAAO,SAAS,WAAW,OAAO,SAAS,MAAM;AAAA,MACzF;AAAA,IACF;AAEA,QAAI,CAAC;AACH;AAEF,uBAAmB,OAAO,QAAQ;AAChC,0BAAoB,KAAK,SAAS,QAAQ,CAAC,UAAU;AACnD,0BAAkB,KAAK;AACvB,gBAAQ;AAAA,MACV,CAAC;AAAA,IACH,CAAC;AAAA,EACH,CAAC;AAED,SACE,oCAAC,YAAY,UAAZ,EAAqB,OAAO,EAAE,SAAS,QAAQ,QAAQ,KACrD,MAAM,QACT;AAEJ;AAEO,SAAS,UAA0D;AACxE,QAAM,UAAU,WAAW,WAAW;AACtC,MAAI,CAAC;AACH,UAAM,IAAI,MAAM,6CAA6C;AAC/D,SAAO;AACT;","names":[]}
@@ -0,0 +1,17 @@
1
+ <script lang='ts'>
2
+ import type { Snippet } from 'svelte'
3
+ import { createSvelteAuth } from '../index.svelte'
4
+
5
+ type Props = {
6
+ baseUrl?: string
7
+ scheme?: string
8
+ redirectTo?: string
9
+ children: Snippet
10
+ }
11
+
12
+ const { baseUrl, scheme, redirectTo, children }: Props = $props()
13
+
14
+ createSvelteAuth({ baseUrl, scheme, redirectTo })
15
+ </script>
16
+
17
+ {@render children()}
@@ -0,0 +1,16 @@
1
+ import type { GauSession, ProviderIds } from '../../core';
2
+ interface AuthContextValue<TAuth = unknown> {
3
+ session: GauSession | null;
4
+ signIn: (provider: ProviderIds<TAuth>, options?: {
5
+ redirectTo?: string;
6
+ }) => Promise<void>;
7
+ signOut: () => Promise<void>;
8
+ }
9
+ export declare function createSvelteAuth<const TAuth = unknown>({ baseUrl, scheme, redirectTo: defaultRedirectTo }: {
10
+ baseUrl?: string;
11
+ scheme?: string;
12
+ redirectTo?: string;
13
+ }): void;
14
+ export declare function useAuth<const TAuth = unknown>(): AuthContextValue<TAuth>;
15
+ export {};
16
+ //# sourceMappingURL=index.svelte.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"index.svelte.d.ts","sourceRoot":"","sources":["../../../../src/client/svelte/index.svelte.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAczD,UAAU,gBAAgB,CAAC,KAAK,GAAG,OAAO;IACxC,OAAO,EAAE,UAAU,GAAG,IAAI,CAAA;IAC1B,MAAM,EAAE,CAAC,QAAQ,EAAE,WAAW,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IAC1F,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAC7B;AAID,wBAAgB,gBAAgB,CAAC,KAAK,CAAC,KAAK,GAAG,OAAO,EAAE,EACtD,OAAqB,EACrB,MAAc,EACd,UAAU,EAAE,iBAAiB,EAC9B,EAAE;IACD,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB,QAyFA;AAED,wBAAgB,OAAO,CAAC,KAAK,CAAC,KAAK,GAAG,OAAO,KAAK,gBAAgB,CAAC,KAAK,CAAC,CAMxE"}
@@ -0,0 +1 @@
1
+ import{BROWSER as t}from"esm-env";import{getContext as n,setContext as o}from"svelte";import{listen as e}from"@tauri-apps/api/event";import{BROWSER as a}from"esm-env";var i=a&&"__TAURI_INTERNALS__"in window;function r(t){if(a)try{localStorage.setItem("gau-token",t),document.cookie=`__gau-session-token=${t}; path=/; max-age=31536000; samesite=lax`}catch{}}function s(){return a?localStorage.getItem("gau-token"):null}var c=Symbol("gau-auth");function u({baseUrl:n="/api/auth",scheme:u="gau",redirectTo:l}){let w=$state(null);async function d(){if(!t)return void(w=null);const o=s(),e=o?{Authorization:`Bearer ${o}`}:void 0,a=await fetch(`${n}/session`,o?{headers:e}:{credentials:"include"});if(!a.ok)return void(w={user:null,session:null});const i=a.headers.get("content-type");w=i?.includes("application/json")?await a.json():{user:null,session:null}}if(t){const t=new URL(window.location.href).hash.substring(1),o=new URLSearchParams(t).get("token");o?(r(o),(async()=>{try{const{replaceState:t}=await import("$app/navigation");await t(window.location.pathname+window.location.search,{})}catch{window.history.replaceState(null,"",window.location.pathname+window.location.search)}await d()})()):d(),i&&(h=async t=>{!function(t,n,o,e){const a=new URL(t);if(a.protocol!==`${o}:`&&a.origin!==new URL(n).origin)return;const i=new URLSearchParams(a.hash.substring(1)).get("token");i&&e(i)}(t,n,u,async t=>{r(t),await d()})},i&&e("deep-link",async t=>{await h(t.payload)}).catch(console.error))}var h;const p={get session(){return w},signIn:async function(o,{redirectTo:e}={}){let a=e??l;if(i)await async function(t,n,o="gau",e){if(!i)return;const{platform:a}=await import("@tauri-apps/plugin-os"),{open:r}=await import("@tauri-apps/plugin-shell"),s=a();let c;c=e||("android"===s||"ios"===s?new URL(n).origin:`${o}://oauth/callback`);const u=`${n}/${t}?redirectTo=${encodeURIComponent(c)}`;await r(u)}(o,n,u,a);else{!a&&t&&(a=window.location.origin);const e=a?`?redirectTo=${encodeURIComponent(a)}`:"";window.location.href=`${n}/${o}${e}`}},signOut:async function(){!function(){if(a)try{localStorage.removeItem("gau-token"),document.cookie="__gau-session-token=; path=/; max-age=0"}catch{}}();const t=s(),o=t?{Authorization:`Bearer ${t}`}:void 0;await fetch(`${n}/signout`,t?{method:"POST",headers:o}:{method:"POST",credentials:"include"}),await d()}};o(c,p)}function l(){const t=n(c);if(!t)throw new Error("useAuth must be used within an AuthProvider");return t}export{u as createSvelteAuth,l as useAuth};//# sourceMappingURL=index.svelte.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"sources":["../../../../src/client/svelte/index.svelte.ts","../../../../src/runtimes/tauri/index.ts"],"sourcesContent":["import type { GauSession, ProviderIds } from '../../core'\nimport { BROWSER } from 'esm-env'\nimport { getContext, setContext } from 'svelte'\n\nimport {\n clearSessionToken,\n getSessionToken,\n handleTauriDeepLink,\n isTauri,\n setupTauriListener,\n signInWithTauri,\n storeSessionToken,\n} from '../../runtimes/tauri'\n\ninterface AuthContextValue<TAuth = unknown> {\n session: GauSession | null\n signIn: (provider: ProviderIds<TAuth>, options?: { redirectTo?: string }) => Promise<void>\n signOut: () => Promise<void>\n}\n\nconst AUTH_CONTEXT_KEY = Symbol('gau-auth')\n\nexport function createSvelteAuth<const TAuth = unknown>({\n baseUrl = '/api/auth',\n scheme = 'gau',\n redirectTo: defaultRedirectTo,\n}: {\n baseUrl?: string\n scheme?: string\n redirectTo?: string\n}) {\n let session = $state<GauSession | null>(null)\n\n async function fetchSession() {\n if (!BROWSER) {\n session = null\n return\n }\n\n const token = getSessionToken()\n const headers = token ? { Authorization: `Bearer ${token}` } : undefined\n const res = await fetch(`${baseUrl}/session`, token ? { headers } : { credentials: 'include' })\n\n if (!res.ok) {\n session = { user: null, session: null }\n return\n }\n\n const contentType = res.headers.get('content-type')\n if (contentType?.includes('application/json'))\n session = await res.json()\n else\n session = { user: null, session: null }\n }\n\n async function signIn(provider: ProviderIds<TAuth>, { redirectTo }: { redirectTo?: string } = {}) {\n let finalRedirectTo = redirectTo ?? defaultRedirectTo\n if (isTauri) {\n await signInWithTauri(provider as string, baseUrl, scheme, finalRedirectTo)\n }\n else {\n if (!finalRedirectTo && BROWSER)\n finalRedirectTo = window.location.origin\n\n const query = finalRedirectTo ? `?redirectTo=${encodeURIComponent(finalRedirectTo)}` : ''\n window.location.href = `${baseUrl}/${provider as string}${query}`\n }\n }\n\n async function signOut() {\n clearSessionToken()\n const token = getSessionToken()\n const headers = token ? { Authorization: `Bearer ${token}` } : undefined\n await fetch(`${baseUrl}/signout`, token ? { method: 'POST', headers } : { method: 'POST', credentials: 'include' })\n await fetchSession()\n }\n\n if (BROWSER) {\n const hash = new URL(window.location.href).hash.substring(1)\n const params = new URLSearchParams(hash)\n const tokenFromUrl = params.get('token')\n\n if (tokenFromUrl) {\n storeSessionToken(tokenFromUrl)\n void (async () => {\n try {\n // @ts-expect-error - SvelteKit-only\n const { replaceState } = await import('$app/navigation')\n await replaceState(window.location.pathname + window.location.search, {})\n }\n catch {\n window.history.replaceState(null, '', window.location.pathname + window.location.search)\n }\n await fetchSession()\n })()\n }\n else {\n fetchSession()\n }\n\n if (isTauri) {\n setupTauriListener(async (url) => {\n handleTauriDeepLink(url, baseUrl, scheme, async (token) => {\n storeSessionToken(token)\n await fetchSession()\n })\n })\n }\n }\n\n const contextValue: AuthContextValue<TAuth> = {\n get session() {\n return session\n },\n signIn: signIn as (provider: ProviderIds<TAuth>, options?: { redirectTo?: string }) => Promise<void>,\n signOut,\n }\n\n setContext(AUTH_CONTEXT_KEY, contextValue)\n}\n\nexport function useAuth<const TAuth = unknown>(): AuthContextValue<TAuth> {\n const context = getContext<AuthContextValue<TAuth>>(AUTH_CONTEXT_KEY)\n if (!context)\n throw new Error('useAuth must be used within an AuthProvider')\n\n return context\n}\n","import { listen } from '@tauri-apps/api/event'\nimport { BROWSER } from 'esm-env'\n\nexport const isTauri = BROWSER && '__TAURI_INTERNALS__' in window\n\nexport async function signInWithTauri(\n provider: string,\n baseUrl: string,\n scheme: string = 'gau',\n redirectOverride?: string,\n) {\n if (!isTauri)\n return\n\n const { platform } = await import('@tauri-apps/plugin-os')\n const { open } = await import('@tauri-apps/plugin-shell')\n\n const currentPlatform = platform()\n let redirectTo: string\n\n if (redirectOverride)\n redirectTo = redirectOverride\n\n else if (currentPlatform === 'android' || currentPlatform === 'ios')\n redirectTo = new URL(baseUrl).origin\n\n else\n redirectTo = `${scheme}://oauth/callback`\n\n const authUrl = `${baseUrl}/${provider}?redirectTo=${encodeURIComponent(redirectTo)}`\n await open(authUrl)\n}\n\nexport function setupTauriListener(handler: (url: string) => Promise<void>) {\n if (!isTauri)\n return\n\n listen<string>('deep-link', async (event) => {\n await handler(event.payload)\n }).catch(console.error)\n}\n\nexport function handleTauriDeepLink(url: string, baseUrl: string, scheme: string, onToken: (token: string) => void) {\n const parsed = new URL(url)\n if (parsed.protocol !== `${scheme}:` && parsed.origin !== new URL(baseUrl).origin)\n return\n\n const params = new URLSearchParams(parsed.hash.substring(1))\n const token = params.get('token')\n if (token)\n onToken(token)\n}\n\nexport function storeSessionToken(token: string) {\n if (!BROWSER)\n return\n try {\n localStorage.setItem('gau-token', token)\n document.cookie = `__gau-session-token=${token}; path=/; max-age=31536000; samesite=lax`\n }\n catch {}\n}\n\nexport function getSessionToken(): string | null {\n if (!BROWSER)\n return null\n return localStorage.getItem('gau-token')\n}\n\nexport function clearSessionToken() {\n if (!BROWSER)\n return\n try {\n localStorage.removeItem('gau-token')\n document.cookie = `__gau-session-token=; path=/; max-age=0`\n }\n catch {}\n}\n"],"mappings":";AACA,SAAS,WAAAA,gBAAe;AACxB,SAAS,YAAY,kBAAkB;;;ACFvC,SAAS,cAAc;AACvB,SAAS,eAAe;AAEjB,IAAM,UAAU,WAAW,yBAAyB;AAE3D,eAAsB,gBACpB,UACA,SACA,SAAiB,OACjB,kBACA;AACA,MAAI,CAAC;AACH;AAEF,QAAM,EAAE,SAAS,IAAI,MAAM,OAAO,uBAAuB;AACzD,QAAM,EAAE,KAAK,IAAI,MAAM,OAAO,0BAA0B;AAExD,QAAM,kBAAkB,SAAS;AACjC,MAAI;AAEJ,MAAI;AACF,iBAAa;AAAA,WAEN,oBAAoB,aAAa,oBAAoB;AAC5D,iBAAa,IAAI,IAAI,OAAO,EAAE;AAAA;AAG9B,iBAAa,GAAG,MAAM;AAExB,QAAM,UAAU,GAAG,OAAO,IAAI,QAAQ,eAAe,mBAAmB,UAAU,CAAC;AACnF,QAAM,KAAK,OAAO;AACpB;AAEO,SAAS,mBAAmB,SAAyC;AAC1E,MAAI,CAAC;AACH;AAEF,SAAe,aAAa,OAAO,UAAU;AAC3C,UAAM,QAAQ,MAAM,OAAO;AAAA,EAC7B,CAAC,EAAE,MAAM,QAAQ,KAAK;AACxB;AAEO,SAAS,oBAAoB,KAAa,SAAiB,QAAgB,SAAkC;AAClH,QAAM,SAAS,IAAI,IAAI,GAAG;AAC1B,MAAI,OAAO,aAAa,GAAG,MAAM,OAAO,OAAO,WAAW,IAAI,IAAI,OAAO,EAAE;AACzE;AAEF,QAAM,SAAS,IAAI,gBAAgB,OAAO,KAAK,UAAU,CAAC,CAAC;AAC3D,QAAM,QAAQ,OAAO,IAAI,OAAO;AAChC,MAAI;AACF,YAAQ,KAAK;AACjB;AAEO,SAAS,kBAAkB,OAAe;AAC/C,MAAI,CAAC;AACH;AACF,MAAI;AACF,iBAAa,QAAQ,aAAa,KAAK;AACvC,aAAS,SAAS,uBAAuB,KAAK;AAAA,EAChD,QACM;AAAA,EAAC;AACT;AAEO,SAAS,kBAAiC;AAC/C,MAAI,CAAC;AACH,WAAO;AACT,SAAO,aAAa,QAAQ,WAAW;AACzC;AAEO,SAAS,oBAAoB;AAClC,MAAI,CAAC;AACH;AACF,MAAI;AACF,iBAAa,WAAW,WAAW;AACnC,aAAS,SAAS;AAAA,EACpB,QACM;AAAA,EAAC;AACT;;;ADzDA,IAAM,mBAAmB,OAAO,UAAU;AAEnC,SAAS,iBAAwC;AAAA,EACtD,UAAU;AAAA,EACV,SAAS;AAAA,EACT,YAAY;AACd,GAIG;AACD,MAAI,UAAU,OAA0B,IAAI;AAE5C,iBAAe,eAAe;AAC5B,QAAI,CAACC,UAAS;AACZ,gBAAU;AACV;AAAA,IACF;AAEA,UAAM,QAAQ,gBAAgB;AAC9B,UAAM,UAAU,QAAQ,EAAE,eAAe,UAAU,KAAK,GAAG,IAAI;AAC/D,UAAM,MAAM,MAAM,MAAM,GAAG,OAAO,YAAY,QAAQ,EAAE,QAAQ,IAAI,EAAE,aAAa,UAAU,CAAC;AAE9F,QAAI,CAAC,IAAI,IAAI;AACX,gBAAU,EAAE,MAAM,MAAM,SAAS,KAAK;AACtC;AAAA,IACF;AAEA,UAAM,cAAc,IAAI,QAAQ,IAAI,cAAc;AAClD,QAAI,aAAa,SAAS,kBAAkB;AAC1C,gBAAU,MAAM,IAAI,KAAK;AAAA;AAEzB,gBAAU,EAAE,MAAM,MAAM,SAAS,KAAK;AAAA,EAC1C;AAEA,iBAAe,OAAO,UAA8B,EAAE,WAAW,IAA6B,CAAC,GAAG;AAChG,QAAI,kBAAkB,cAAc;AACpC,QAAI,SAAS;AACX,YAAM,gBAAgB,UAAoB,SAAS,QAAQ,eAAe;AAAA,IAC5E,OACK;AACH,UAAI,CAAC,mBAAmBA;AACtB,0BAAkB,OAAO,SAAS;AAEpC,YAAM,QAAQ,kBAAkB,eAAe,mBAAmB,eAAe,CAAC,KAAK;AACvF,aAAO,SAAS,OAAO,GAAG,OAAO,IAAI,QAAkB,GAAG,KAAK;AAAA,IACjE;AAAA,EACF;AAEA,iBAAe,UAAU;AACvB,sBAAkB;AAClB,UAAM,QAAQ,gBAAgB;AAC9B,UAAM,UAAU,QAAQ,EAAE,eAAe,UAAU,KAAK,GAAG,IAAI;AAC/D,UAAM,MAAM,GAAG,OAAO,YAAY,QAAQ,EAAE,QAAQ,QAAQ,QAAQ,IAAI,EAAE,QAAQ,QAAQ,aAAa,UAAU,CAAC;AAClH,UAAM,aAAa;AAAA,EACrB;AAEA,MAAIA,UAAS;AACX,UAAM,OAAO,IAAI,IAAI,OAAO,SAAS,IAAI,EAAE,KAAK,UAAU,CAAC;AAC3D,UAAM,SAAS,IAAI,gBAAgB,IAAI;AACvC,UAAM,eAAe,OAAO,IAAI,OAAO;AAEvC,QAAI,cAAc;AAChB,wBAAkB,YAAY;AAC9B,YAAM,YAAY;AAChB,YAAI;AAEF,gBAAM,EAAE,aAAa,IAAI,MAAM,OAAO,iBAAiB;AACvD,gBAAM,aAAa,OAAO,SAAS,WAAW,OAAO,SAAS,QAAQ,CAAC,CAAC;AAAA,QAC1E,QACM;AACJ,iBAAO,QAAQ,aAAa,MAAM,IAAI,OAAO,SAAS,WAAW,OAAO,SAAS,MAAM;AAAA,QACzF;AACA,cAAM,aAAa;AAAA,MACrB,GAAG;AAAA,IACL,OACK;AACH,mBAAa;AAAA,IACf;AAEA,QAAI,SAAS;AACX,yBAAmB,OAAO,QAAQ;AAChC,4BAAoB,KAAK,SAAS,QAAQ,OAAO,UAAU;AACzD,4BAAkB,KAAK;AACvB,gBAAM,aAAa;AAAA,QACrB,CAAC;AAAA,MACH,CAAC;AAAA,IACH;AAAA,EACF;AAEA,QAAM,eAAwC;AAAA,IAC5C,IAAI,UAAU;AACZ,aAAO;AAAA,IACT;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAEA,aAAW,kBAAkB,YAAY;AAC3C;AAEO,SAAS,UAA0D;AACxE,QAAM,UAAU,WAAoC,gBAAgB;AACpE,MAAI,CAAC;AACH,UAAM,IAAI,MAAM,6CAA6C;AAE/D,SAAO;AACT;","names":["BROWSER","BROWSER"]}
@@ -0,0 +1 @@
1
+ {"version":3,"file":"cookies.d.ts","sourceRoot":"","sources":["../../../src/core/cookies.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,QAAQ,CAAA;AAG9C,eAAO,MAAM,gCAAgC,EAAE,gBAK9C,CAAA;AAED,MAAM,MAAM,MAAM,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAA;AAEvD,wBAAgB,YAAY,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAQzF;AAED,qBAAa,OAAO;;IAIhB,OAAO,CAAC,QAAQ,CAAC,cAAc;IAC/B,OAAO,CAAC,QAAQ,CAAC,cAAc;IAFjC,YACmB,cAAc,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EACnC,cAAc,EAAE,gBAAgB,EAC/C;IAEJ,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAEpC;IAED,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,gBAAgB,GAAG,IAAI,CAGjE;IAED,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,gBAAgB,EAAE,SAAS,GAAG,QAAQ,CAAC,GAAG,IAAI,CAEjF;IAED,SAAS,IAAI,OAAO,CAMnB;CACF;AAED,eAAO,MAAM,gBAAgB,qBAAqB,CAAA;AAClD,eAAO,MAAM,mBAAmB,wBAAwB,CAAA;AACxD,eAAO,MAAM,gBAAgB,6BAA6B,CAAA;AAC1D,eAAO,MAAM,wBAAwB,uBAAuB,CAAA;AAE5D,eAAO,MAAM,YAAY,QAAU,CAAA,CAAC,aAAa"}
@@ -0,0 +1 @@
1
+ {"version":3,"file":"createAuth.d.ts","sourceRoot":"","sources":["../../../src/core/createAuth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,QAAQ,CAAA;AAC9C,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,QAAQ,CAAA;AACxD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AAC7C,OAAO,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAA;AAKrD,KAAK,UAAU,CAAC,CAAC,IAAI,CAAC,SAAS,aAAa,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;AACjE,MAAM,MAAM,WAAW,CAAC,CAAC,IAAI,CAAC,SAAS;IAAE,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,CAAA;CAAE,GAAG,CAAC,GAAG,MAAM,CAAA;AAEtF,MAAM,WAAW,iBAAiB,CAAC,UAAU,SAAS,aAAa,EAAE;IACnE,kEAAkE;IAClE,OAAO,EAAE,OAAO,CAAA;IAChB,2CAA2C;IAC3C,SAAS,EAAE,UAAU,CAAA;IACrB,qEAAqE;IACrE,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,sDAAsD;IACtD,GAAG,CAAC,EAAE;QACJ,uDAAuD;QACvD,SAAS,CAAC,EAAE,OAAO,GAAG,OAAO,CAAA;QAC7B,2FAA2F;QAC3F,MAAM,CAAC,EAAE,MAAM,CAAA;QACf,mCAAmC;QACnC,GAAG,CAAC,EAAE,MAAM,CAAA;QACZ,qCAAqC;QACrC,GAAG,CAAC,EAAE,MAAM,CAAA;QACZ,oEAAoE;QACpE,GAAG,CAAC,EAAE,MAAM,CAAA;KACb,CAAA;IACD,0CAA0C;IAC1C,OAAO,CAAC,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAA;IACnC,uFAAuF;IACvF,UAAU,CAAC,EAAE,KAAK,GAAG,MAAM,EAAE,CAAA;IAC7B,+EAA+E;IAC/E,QAAQ,CAAC,EAAE,eAAe,GAAG,QAAQ,GAAG,KAAK,CAAA;CAC9C;AAED,MAAM,MAAM,IAAI,CAAC,UAAU,SAAS,aAAa,EAAE,GAAG,GAAG,IAAI,OAAO,GAAG;IACrE,WAAW,EAAE,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CAAA;IACpE,QAAQ,EAAE,MAAM,CAAA;IAChB,aAAa,EAAE,gBAAgB,CAAA;IAC/B,GAAG,EAAE;QACH,GAAG,EAAE,MAAM,CAAA;KACZ,CAAA;IACD,OAAO,EAAE,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,aAAa,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,KAAK,OAAO,CAAC,MAAM,CAAC,CAAA;IACjH,SAAS,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,KAAK,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAAA;IACpH,aAAa,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAA;IAChG,eAAe,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC;QAC1C,IAAI,EAAE,IAAI,CAAA;QACV,OAAO,EAAE,OAAO,CAAA;KACjB,GAAG,IAAI,CAAC,CAAA;IACT,UAAU,EAAE,KAAK,GAAG,MAAM,EAAE,CAAA;IAC5B,QAAQ,EAAE,eAAe,GAAG,QAAQ,GAAG,KAAK,CAAA;CAC7C,CAAA;AAED,wBAAgB,UAAU,CAAC,KAAK,CAAC,UAAU,SAAS,aAAa,EAAE,EAAE,EACnE,OAAO,EACP,SAAS,EACT,QAAsB,EACtB,GAAG,EAAE,SAAc,EACnB,OAAO,EAAE,YAAiB,EAC1B,UAAe,EACf,QAA0B,EAC3B,EAAE,iBAAiB,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,CA2ElD"}
@@ -0,0 +1 @@
1
+ {"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../../../src/core/handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,cAAc,CAAA;AACxC,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AAiWxD,wBAAgB,aAAa,CAAC,IAAI,EAAE,IAAI,GAAG,CAAC,OAAO,EAAE,WAAW,KAAK,OAAO,CAAC,YAAY,CAAC,CA2EzF"}
@@ -0,0 +1 @@
1
+ {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/core/index.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,WAAW;IAC1B,+BAA+B;IAC/B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,0CAA0C;IAC1C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,0DAAwD;IACxD,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,oCAAoC;IACpC,IAAI,EAAE,CAAC,CAAC,GAAG,OAAO,OAAO,OAAO,CAAC,CAAC,CAAC,CAAA;IACnC,oBAAoB;IACpB,IAAI,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAA;IAC3B,yFAAyF;IACzF,QAAQ,EAAE,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAA;CAClC;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAA;CAChC;AAED,MAAM,WAAW,IAAI;IACnB,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,aAAa,CAAC,EAAE,OAAO,GAAG,IAAI,CAAA;IAC9B,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CACtB;AAED,MAAM,WAAW,OAAO;IACtB,EAAE,EAAE,MAAM,CAAA;IACV,GAAG,EAAE,MAAM,CAAA;IACX,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CACvB;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,IAAI,GAAG,IAAI,CAAA;IACjB,OAAO,EAAE,OAAO,GAAG,IAAI,CAAA;CACxB;AAED,MAAM,WAAW,OAAQ,SAAQ,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC;IAC/C,EAAE,CAAC,EAAE,MAAM,CAAA;CACZ;AAED,MAAM,WAAW,OAAO;IACtB,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,CAAA;IAChB,iBAAiB,EAAE,MAAM,CAAA;IACzB,IAAI,CAAC,EAAE,MAAM,CAAA,CAAC,eAAe;IAC7B,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA,CAAC,gBAAgB;IAC1C,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAC7B;AAED,MAAM,WAAW,UAAW,SAAQ,OAAO;CAAG;AAE9C,MAAM,WAAW,OAAO;IACtB,OAAO,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,CAAA;IAC7C,cAAc,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,CAAA;IACvD,gBAAgB,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,CAAA;IACvF,UAAU,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IAC5C,WAAW,EAAE,CAAC,IAAI,EAAE,UAAU,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IAChD,UAAU,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;CACpE;AAED,qBAAa,SAAU,SAAQ,KAAK;IAClC,SAAkB,KAAK,CAAC,EAAE,OAAO,CAAA;IACjC,YAAY,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,EAI3C;CACF;AAED,wBAAgB,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,GAAE,YAAiB,GAAG,QAAQ,CAKlE;AAED,wBAAgB,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,GAAE,GAAG,GAAG,GAAS,GAAG,QAAQ,CAOvE;AAED,cAAc,WAAW,CAAA;AACzB,cAAc,cAAc,CAAA;AAC5B,cAAc,WAAW,CAAA"}
@@ -0,0 +1 @@
1
+ import{AuthError as o,CALLBACK_URI_COOKIE_NAME as r,CSRF_COOKIE_NAME as m,CSRF_MAX_AGE as p,Cookies as t,DEFAULT_COOKIE_SERIALIZE_OPTIONS as c,PKCE_COOKIE_NAME as e,SESSION_COOKIE_NAME as f,createAuth as h,createHandler as i,json as j,parseCookies as k,redirect as n}from"../../chunk-SXUBH3CT.js";export{o as AuthError,r as CALLBACK_URI_COOKIE_NAME,m as CSRF_COOKIE_NAME,p as CSRF_MAX_AGE,t as Cookies,c as DEFAULT_COOKIE_SERIALIZE_OPTIONS,e as PKCE_COOKIE_NAME,f as SESSION_COOKIE_NAME,h as createAuth,i as createHandler,j as json,k as parseCookies,n as redirect};//# sourceMappingURL=index.js.map
@@ -0,0 +1,3 @@
1
+ export * from './core';
2
+ export type { GauSession, Session, User } from './core';
3
+ //# sourceMappingURL=index.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,QAAQ,CAAA;AACtB,YAAY,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAA"}
@@ -0,0 +1 @@
1
+ import{AuthError as o,CALLBACK_URI_COOKIE_NAME as r,CSRF_COOKIE_NAME as m,CSRF_MAX_AGE as p,Cookies as t,DEFAULT_COOKIE_SERIALIZE_OPTIONS as c,PKCE_COOKIE_NAME as e,SESSION_COOKIE_NAME as f,createAuth as h,createHandler as i,json as j,parseCookies as k,redirect as n}from"../chunk-SXUBH3CT.js";export{o as AuthError,r as CALLBACK_URI_COOKIE_NAME,m as CSRF_COOKIE_NAME,p as CSRF_MAX_AGE,t as Cookies,c as DEFAULT_COOKIE_SERIALIZE_OPTIONS,e as PKCE_COOKIE_NAME,f as SESSION_COOKIE_NAME,h as createAuth,i as createHandler,j as json,k as parseCookies,n as redirect};//# sourceMappingURL=index.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/jwt/index.ts"],"names":[],"mappings":"AAAA,cAAc,OAAO,CAAA"}
@@ -0,0 +1 @@
1
+ import{sign as o,verify as r}from"../../chunk-SXUBH3CT.js";export{o as sign,r as verify};//# sourceMappingURL=index.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"jwt.d.ts","sourceRoot":"","sources":["../../../src/jwt/jwt.ts"],"names":[],"mappings":"AAWA,MAAM,MAAM,kBAAkB,GAAG,OAAO,GAAG,OAAO,CAAA;AAElD,UAAU,iBAAiB;IACzB,iFAAiF;IACjF,GAAG,CAAC,EAAE,MAAM,CAAA;CACb;AAED,MAAM,MAAM,WAAW,GACjB,CAAC;IAAE,SAAS,CAAC,EAAE,OAAO,CAAC;IAAC,UAAU,CAAC,EAAE,SAAS,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GACjE,iBAAiB,GAAG;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,GAC9E,CAAC;IAAE,SAAS,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,GAAG,UAAU,CAAC;IAAC,UAAU,CAAC,EAAE,KAAK,CAAA;CAAE,GACvE,iBAAiB,GAAG;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAAA;AAElF;;;GAGG;AACH,wBAAsB,IAAI,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,GAAE,WAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,CA6DpH;AAED,MAAM,MAAM,aAAa,GACnB;IAAE,SAAS,CAAC,EAAE,OAAO,CAAC;IAAC,SAAS,CAAC,EAAE,SAAS,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAA;CAAE,GACtG;IAAE,SAAS,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,GAAG,UAAU,CAAC;IAAC,SAAS,CAAC,EAAE,KAAK,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAA;CAAE,CAAA;AAEpH;;;;GAIG;AACH,wBAAsB,MAAM,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,CAAC,CAAC,CA2F3G"}
@@ -0,0 +1 @@
1
+ {"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../../src/jwt/utils.ts"],"names":[],"mappings":"AAEA,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,UAAU,GAAG,OAAO,CAOvE;AAeD,wBAAsB,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,UAAU,EAAE,SAAS,CAAC;IAAC,SAAS,EAAE,SAAS,CAAA;CAAE,CAAC,CA2BnH;AAED;;GAEG;AACH,wBAAgB,QAAQ,CAAC,GAAG,EAAE,UAAU,GAAG,UAAU,CA2CpD"}
@@ -0,0 +1 @@
1
+ {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/oauth/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAA;AAE1C,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAA;AAC3C,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAA;AAC3C,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAA;AAEjD,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,MAAM,CAAA;IAChB,YAAY,EAAE,MAAM,CAAA;IACpB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;CACjB;AAED,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,aAAa,EAAE,OAAO,GAAG,IAAI,CAAA;IAC7B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAC7B;AAED,MAAM,WAAW,aAAa,CAAC,CAAC,SAAS,MAAM,GAAG,MAAM;IACtD,EAAE,EAAE,CAAC,CAAA;IACL,mBAAmB,CAAC,EAAE,OAAO,CAAA;IAC7B,mBAAmB,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,GAAG,CAAC,CAAA;IACjI,gBAAgB,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC;QAAE,MAAM,EAAE,YAAY,CAAC;QAAC,IAAI,EAAE,QAAQ,CAAA;KAAE,CAAC,CAAA;CAClI"}
@@ -0,0 +1 @@
1
+ import{CodeChallengeMethod as e,OAuth2Client as t}from"arctic";var i="https://api.github.com";function a(a){const r=new t(a.clientId,a.clientSecret,a.redirectUri??null);function n(e){return!e||a.redirectUri&&e===a.redirectUri?r:new t(a.clientId,a.clientSecret,e)}return{id:"github",async getAuthorizationUrl(t,i,r){const o=n(r?.redirectUri),c=r?.scopes??a.scope??["user:email"];return await o.createAuthorizationURLWithPKCE("https://github.com/login/oauth/authorize",t,e.S256,i,c)},async validateCallback(e,t,a){const r=n(a),o=await r.validateAuthorizationCode("https://github.com/login/oauth/access_token",e,t),c=await async function(e){const t=await fetch(`${i}/user`,{headers:{Authorization:`Bearer ${e}`,"User-Agent":"gau",Accept:"application/vnd.github+json"}}),a=await t.json();let r=a.email,n=!1;const o=await fetch(`${i}/user/emails`,{headers:{Authorization:`Bearer ${e}`,"User-Agent":"gau",Accept:"application/vnd.github+json"}});if(o.ok){const e=await o.json(),t=e.find(e=>e.primary&&e.verified);if(t)r=t.email,n=!0;else{const t=e.find(e=>e.verified);t&&(r=t.email,n=!0)}}return{id:a.id.toString(),name:a.name??a.login,email:r,emailVerified:n,avatar:a.avatar_url,raw:a}}(o.accessToken());return{tokens:o,user:c}}}}import{CodeChallengeMethod as r,OAuth2Client as n}from"arctic";function o(e){const t=new n(e.clientId,e.clientSecret,e.redirectUri??null);function i(i){return i&&i!==e.redirectUri?new n(e.clientId,e.clientSecret,i):t}return{id:"google",requiresRedirectUri:!0,async getAuthorizationUrl(t,a,n){const o=i(n?.redirectUri),c=n?.scopes??e.scope??["openid","email","profile"];return await o.createAuthorizationURLWithPKCE("https://accounts.google.com/o/oauth2/v2/auth",t,r.S256,a,c)},async validateCallback(e,t,a){const r=i(a),n=await r.validateAuthorizationCode("https://oauth2.googleapis.com/token",e,t),o=await async function(e){const t=await fetch("https://openidconnect.googleapis.com/v1/userinfo",{headers:{Authorization:`Bearer ${e}`,"User-Agent":"gau"}}),i=await t.json();return{id:i.sub,name:i.name,email:i.email,emailVerified:i.email_verified,avatar:i.picture,raw:i}}(n.accessToken());return{tokens:n,user:o}}}}import{CodeChallengeMethod as c,OAuth2Client as s}from"arctic";async function l(e,t){const i=await fetch("https://graph.microsoft.com/v1.0/me",{headers:{Authorization:`Bearer ${e}`}}),a=await i.json();let r=a.mail??a.userPrincipalName,n=!1;if(t)try{const e=t.split("."),i=JSON.parse((new TextDecoder).decode(function(e){const t=e.replace(/-/g,"+").replace(/_/g,"/"),i=(4-t.length%4)%4,a=t.padEnd(t.length+i,"="),r=atob(a),n=r.length,o=new Uint8Array(n);for(let e=0;e<n;e++)o[e]=r.charCodeAt(e);return o}(e[1]))),a="9188040d-6c67-4c5b-b112-36a304b66dad";if(i.verified_primary_email){const e=Array.isArray(i.verified_primary_email)?i.verified_primary_email[0]:i.verified_primary_email;"string"==typeof e&&(r=e,n=!0)}else(i.tid===a||!0===i.xms_edov)&&(r=i.email??r,n=!0)}catch{}const o=await fetch("https://graph.microsoft.com/v1.0/me/photo/$value",{headers:{Authorization:`Bearer ${e}`}});let c=null;if(o.ok)try{const e=await o.blob(),t=new FileReader,i=new Promise((i,a)=>{t.onloadend=()=>i(t.result),t.onerror=a,t.readAsDataURL(e)});c=await i}catch{}return{id:a.id,name:a.displayName,email:r,emailVerified:n,avatar:c,raw:a}}function u(e){const t=e.tenant??"common",i=`https://login.microsoftonline.com/${t}/oauth2/v2.0/authorize`,a=`https://login.microsoftonline.com/${t}/oauth2/v2.0/token`,r=new s(e.clientId,e.clientSecret,e.redirectUri??null);function n(t){return t&&t!==e.redirectUri?new s(e.clientId,e.clientSecret,t):r}return{id:"microsoft",requiresRedirectUri:!0,async getAuthorizationUrl(t,a,r){const o=n(r?.redirectUri),s=r?.scopes??e.scope??["openid","profile","email","User.Read"];return await o.createAuthorizationURLWithPKCE(i,t,c.S256,a,s)},async validateCallback(e,t,i){const r=n(i),o=await r.validateAuthorizationCode(a,e,t),c=await l(o.accessToken(),o.idToken());return{tokens:o,user:c}}}}export{a as GitHub,o as Google,u as Microsoft};//# sourceMappingURL=index.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"sources":["../../../src/oauth/providers/github.ts","../../../src/oauth/providers/google.ts","../../../src/oauth/providers/microsoft.ts"],"sourcesContent":["import type { AuthUser, OAuthProvider, OAuthProviderConfig } from '../index'\nimport { CodeChallengeMethod, OAuth2Client } from 'arctic'\n\nconst GITHUB_AUTH_URL = 'https://github.com/login/oauth/authorize'\nconst GITHUB_TOKEN_URL = 'https://github.com/login/oauth/access_token'\nconst GITHUB_API_URL = 'https://api.github.com'\n\ninterface GitHubUser {\n id: number\n login: string\n avatar_url: string\n name: string\n email: string | null\n [key: string]: unknown\n}\n\ninterface GitHubEmail {\n email: string\n primary: boolean\n verified: boolean\n visibility: 'public' | 'private' | null\n}\n\nasync function getUser(accessToken: string): Promise<AuthUser> {\n const response = await fetch(`${GITHUB_API_URL}/user`, {\n headers: {\n 'Authorization': `Bearer ${accessToken}`,\n 'User-Agent': 'gau',\n 'Accept': 'application/vnd.github+json',\n },\n })\n const data: GitHubUser = await response.json()\n\n let email: string | null = data.email\n let emailVerified = false\n\n const emailsResponse = await fetch(`${GITHUB_API_URL}/user/emails`, {\n headers: {\n 'Authorization': `Bearer ${accessToken}`,\n 'User-Agent': 'gau',\n 'Accept': 'application/vnd.github+json',\n },\n })\n\n if (emailsResponse.ok) {\n const emails: GitHubEmail[] = await emailsResponse.json()\n const primaryEmail = emails.find(e => e.primary && e.verified)\n if (primaryEmail) {\n email = primaryEmail.email\n emailVerified = true\n }\n else {\n // Fallback to the first verified email if no primary is found\n const verifiedEmail = emails.find(e => e.verified)\n if (verifiedEmail) {\n email = verifiedEmail.email\n emailVerified = true\n }\n }\n }\n\n return {\n id: data.id.toString(),\n name: data.name ?? data.login,\n email,\n emailVerified,\n avatar: data.avatar_url,\n raw: data,\n }\n}\n\nexport function GitHub(config: OAuthProviderConfig): OAuthProvider<'github'> {\n const defaultClient = new OAuth2Client(config.clientId, config.clientSecret, config.redirectUri ?? null)\n\n function getClient(redirectUri?: string): OAuth2Client {\n if (!redirectUri || (config.redirectUri && redirectUri === config.redirectUri))\n return defaultClient\n\n return new OAuth2Client(config.clientId, config.clientSecret, redirectUri)\n }\n\n return {\n id: 'github',\n\n async getAuthorizationUrl(state: string, codeVerifier: string, options?: { scopes?: string[], redirectUri?: string }) {\n const client = getClient(options?.redirectUri)\n const scopes = options?.scopes ?? config.scope ?? ['user:email']\n const url = await client.createAuthorizationURLWithPKCE(GITHUB_AUTH_URL, state, CodeChallengeMethod.S256, codeVerifier, scopes)\n return url\n },\n\n async validateCallback(code: string, codeVerifier: string, redirectUri?: string) {\n const client = getClient(redirectUri)\n const tokens = await client.validateAuthorizationCode(GITHUB_TOKEN_URL, code, codeVerifier)\n const user = await getUser(tokens.accessToken())\n return { tokens, user }\n },\n }\n}\n","import type { AuthUser, OAuthProvider, OAuthProviderConfig } from '../index'\nimport { CodeChallengeMethod, OAuth2Client } from 'arctic'\n\nconst GOOGLE_AUTH_URL = 'https://accounts.google.com/o/oauth2/v2/auth'\nconst GOOGLE_TOKEN_URL = 'https://oauth2.googleapis.com/token'\nconst GOOGLE_USERINFO_URL = 'https://openidconnect.googleapis.com/v1/userinfo'\n\ninterface GoogleUser {\n sub: string\n name: string\n email: string | null\n email_verified: boolean\n picture: string | null\n [key: string]: unknown\n}\n\nasync function getUser(accessToken: string): Promise<AuthUser> {\n const response = await fetch(GOOGLE_USERINFO_URL, {\n headers: {\n 'Authorization': `Bearer ${accessToken}`,\n 'User-Agent': 'gau',\n },\n })\n const data: GoogleUser = await response.json()\n\n return {\n id: data.sub,\n name: data.name,\n email: data.email,\n emailVerified: data.email_verified,\n avatar: data.picture,\n raw: data,\n }\n}\n\nexport function Google(config: OAuthProviderConfig): OAuthProvider<'google'> {\n const defaultClient = new OAuth2Client(config.clientId, config.clientSecret, config.redirectUri ?? null)\n\n function getClient(redirectUri?: string): OAuth2Client {\n if (!redirectUri || redirectUri === config.redirectUri)\n return defaultClient\n\n return new OAuth2Client(config.clientId, config.clientSecret, redirectUri)\n }\n\n return {\n id: 'google',\n requiresRedirectUri: true,\n\n async getAuthorizationUrl(state: string, codeVerifier: string, options?: { scopes?: string[], redirectUri?: string }) {\n const client = getClient(options?.redirectUri)\n const scopes = options?.scopes ?? config.scope ?? ['openid', 'email', 'profile']\n const url = await client.createAuthorizationURLWithPKCE(GOOGLE_AUTH_URL, state, CodeChallengeMethod.S256, codeVerifier, scopes)\n return url\n },\n\n async validateCallback(code: string, codeVerifier: string, redirectUri?: string) {\n const client = getClient(redirectUri)\n const tokens = await client.validateAuthorizationCode(GOOGLE_TOKEN_URL, code, codeVerifier)\n const user = await getUser(tokens.accessToken())\n return { tokens, user }\n },\n }\n}\n","import type { AuthUser, OAuthProvider, OAuthProviderConfig } from '../index'\nimport { CodeChallengeMethod, OAuth2Client } from 'arctic'\n\n// https://learn.microsoft.com/en-us/entra/identity-platform/v2-protocols-oidc\nconst MICROSOFT_USER_INFO_URL = 'https://graph.microsoft.com/v1.0/me'\n\n// https://learn.microsoft.com/en-us/graph/api/profilephoto-get?view=graph-rest-1.0\nconst MICROSOFT_USER_PHOTO_URL = 'https://graph.microsoft.com/v1.0/me/photo/$value'\n\ninterface MicrosoftConfig extends OAuthProviderConfig {\n tenant?: 'common' | 'organizations' | 'consumers' | string\n}\n\ninterface MicrosoftUser {\n id: string\n displayName: string\n mail: string | null\n userPrincipalName: string\n [key: string]: unknown\n}\n\nfunction base64url_decode(str: string): Uint8Array {\n const base64 = str.replace(/-/g, '+').replace(/_/g, '/')\n const padLength = (4 - (base64.length % 4)) % 4\n const padded = base64.padEnd(base64.length + padLength, '=')\n const binary_string = atob(padded)\n const len = binary_string.length\n const bytes = new Uint8Array(len)\n for (let i = 0; i < len; i++)\n bytes[i] = binary_string.charCodeAt(i)\n\n return bytes\n}\n\nasync function getUser(accessToken: string, idToken: string | null): Promise<AuthUser> {\n const userResponse = await fetch(MICROSOFT_USER_INFO_URL, {\n headers: {\n Authorization: `Bearer ${accessToken}`,\n },\n })\n const userData: MicrosoftUser = await userResponse.json()\n\n let email: string | null = userData.mail ?? userData.userPrincipalName\n let emailVerified = false\n if (idToken) {\n try {\n const parts = idToken.split('.')\n const payload = JSON.parse(new TextDecoder().decode(base64url_decode(parts[1]!))) as Record<string, any>\n const personalTenantId = '9188040d-6c67-4c5b-b112-36a304b66dad'\n\n // For work/school accounts, the `verified_primary_email` is the source of truth.\n if (payload.verified_primary_email) {\n const primaryEmail = Array.isArray(payload.verified_primary_email)\n ? payload.verified_primary_email[0]\n : payload.verified_primary_email\n\n if (typeof primaryEmail === 'string') {\n email = primaryEmail\n emailVerified = true\n }\n }\n // For personal accounts, the `email` claim is reliable and verified.\n else if (payload.tid === personalTenantId) {\n email = payload.email ?? email\n emailVerified = true\n }\n // Legacy fallback for `xms_edov`.\n else if (payload.xms_edov === true) {\n email = payload.email ?? email\n emailVerified = true\n }\n }\n catch {\n }\n }\n\n const photoResponse = await fetch(MICROSOFT_USER_PHOTO_URL, {\n headers: {\n Authorization: `Bearer ${accessToken}`,\n },\n })\n\n let avatar: string | null = null\n if (photoResponse.ok) {\n try {\n const blob = await photoResponse.blob()\n const reader = new FileReader()\n const dataUrlPromise = new Promise<string>((resolve, reject) => {\n reader.onloadend = () => resolve(reader.result as string)\n reader.onerror = reject\n reader.readAsDataURL(blob)\n })\n avatar = await dataUrlPromise\n }\n catch {\n }\n }\n\n return {\n id: userData.id,\n name: userData.displayName,\n email,\n emailVerified,\n avatar,\n raw: userData,\n }\n}\n\nexport function Microsoft(config: MicrosoftConfig): OAuthProvider<'microsoft'> {\n const tenant = config.tenant ?? 'common'\n\n const authURL = `https://login.microsoftonline.com/${tenant}/oauth2/v2.0/authorize`\n const tokenURL = `https://login.microsoftonline.com/${tenant}/oauth2/v2.0/token`\n\n const defaultClient = new OAuth2Client(config.clientId, config.clientSecret, config.redirectUri ?? null)\n\n function getClient(redirectUri?: string): OAuth2Client {\n if (!redirectUri || redirectUri === config.redirectUri)\n return defaultClient\n\n return new OAuth2Client(config.clientId, config.clientSecret, redirectUri)\n }\n\n return {\n id: 'microsoft',\n requiresRedirectUri: true,\n\n async getAuthorizationUrl(state: string, codeVerifier: string, options?: { scopes?: string[], redirectUri?: string }) {\n const client = getClient(options?.redirectUri)\n const scopes = options?.scopes ?? config.scope ?? ['openid', 'profile', 'email', 'User.Read']\n const url = await client.createAuthorizationURLWithPKCE(authURL, state, CodeChallengeMethod.S256, codeVerifier, scopes)\n return url\n },\n\n async validateCallback(code: string, codeVerifier: string, redirectUri?: string) {\n const client = getClient(redirectUri)\n const tokens = await client.validateAuthorizationCode(tokenURL, code, codeVerifier)\n const user = await getUser(tokens.accessToken(), tokens.idToken())\n return { tokens, user }\n },\n }\n}\n"],"mappings":";AACA,SAAS,qBAAqB,oBAAoB;AAElD,IAAM,kBAAkB;AACxB,IAAM,mBAAmB;AACzB,IAAM,iBAAiB;AAkBvB,eAAe,QAAQ,aAAwC;AAC7D,QAAM,WAAW,MAAM,MAAM,GAAG,cAAc,SAAS;AAAA,IACrD,SAAS;AAAA,MACP,iBAAiB,UAAU,WAAW;AAAA,MACtC,cAAc;AAAA,MACd,UAAU;AAAA,IACZ;AAAA,EACF,CAAC;AACD,QAAM,OAAmB,MAAM,SAAS,KAAK;AAE7C,MAAI,QAAuB,KAAK;AAChC,MAAI,gBAAgB;AAEpB,QAAM,iBAAiB,MAAM,MAAM,GAAG,cAAc,gBAAgB;AAAA,IAClE,SAAS;AAAA,MACP,iBAAiB,UAAU,WAAW;AAAA,MACtC,cAAc;AAAA,MACd,UAAU;AAAA,IACZ;AAAA,EACF,CAAC;AAED,MAAI,eAAe,IAAI;AACrB,UAAM,SAAwB,MAAM,eAAe,KAAK;AACxD,UAAM,eAAe,OAAO,KAAK,OAAK,EAAE,WAAW,EAAE,QAAQ;AAC7D,QAAI,cAAc;AAChB,cAAQ,aAAa;AACrB,sBAAgB;AAAA,IAClB,OACK;AAEH,YAAM,gBAAgB,OAAO,KAAK,OAAK,EAAE,QAAQ;AACjD,UAAI,eAAe;AACjB,gBAAQ,cAAc;AACtB,wBAAgB;AAAA,MAClB;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AAAA,IACL,IAAI,KAAK,GAAG,SAAS;AAAA,IACrB,MAAM,KAAK,QAAQ,KAAK;AAAA,IACxB;AAAA,IACA;AAAA,IACA,QAAQ,KAAK;AAAA,IACb,KAAK;AAAA,EACP;AACF;AAEO,SAAS,OAAO,QAAsD;AAC3E,QAAM,gBAAgB,IAAI,aAAa,OAAO,UAAU,OAAO,cAAc,OAAO,eAAe,IAAI;AAEvG,WAAS,UAAU,aAAoC;AACrD,QAAI,CAAC,eAAgB,OAAO,eAAe,gBAAgB,OAAO;AAChE,aAAO;AAET,WAAO,IAAI,aAAa,OAAO,UAAU,OAAO,cAAc,WAAW;AAAA,EAC3E;AAEA,SAAO;AAAA,IACL,IAAI;AAAA,IAEJ,MAAM,oBAAoB,OAAe,cAAsB,SAAuD;AACpH,YAAM,SAAS,UAAU,SAAS,WAAW;AAC7C,YAAM,SAAS,SAAS,UAAU,OAAO,SAAS,CAAC,YAAY;AAC/D,YAAM,MAAM,MAAM,OAAO,+BAA+B,iBAAiB,OAAO,oBAAoB,MAAM,cAAc,MAAM;AAC9H,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,iBAAiB,MAAc,cAAsB,aAAsB;AAC/E,YAAM,SAAS,UAAU,WAAW;AACpC,YAAM,SAAS,MAAM,OAAO,0BAA0B,kBAAkB,MAAM,YAAY;AAC1F,YAAM,OAAO,MAAM,QAAQ,OAAO,YAAY,CAAC;AAC/C,aAAO,EAAE,QAAQ,KAAK;AAAA,IACxB;AAAA,EACF;AACF;;;ACjGA,SAAS,uBAAAA,sBAAqB,gBAAAC,qBAAoB;AAElD,IAAM,kBAAkB;AACxB,IAAM,mBAAmB;AACzB,IAAM,sBAAsB;AAW5B,eAAeC,SAAQ,aAAwC;AAC7D,QAAM,WAAW,MAAM,MAAM,qBAAqB;AAAA,IAChD,SAAS;AAAA,MACP,iBAAiB,UAAU,WAAW;AAAA,MACtC,cAAc;AAAA,IAChB;AAAA,EACF,CAAC;AACD,QAAM,OAAmB,MAAM,SAAS,KAAK;AAE7C,SAAO;AAAA,IACL,IAAI,KAAK;AAAA,IACT,MAAM,KAAK;AAAA,IACX,OAAO,KAAK;AAAA,IACZ,eAAe,KAAK;AAAA,IACpB,QAAQ,KAAK;AAAA,IACb,KAAK;AAAA,EACP;AACF;AAEO,SAAS,OAAO,QAAsD;AAC3E,QAAM,gBAAgB,IAAID,cAAa,OAAO,UAAU,OAAO,cAAc,OAAO,eAAe,IAAI;AAEvG,WAAS,UAAU,aAAoC;AACrD,QAAI,CAAC,eAAe,gBAAgB,OAAO;AACzC,aAAO;AAET,WAAO,IAAIA,cAAa,OAAO,UAAU,OAAO,cAAc,WAAW;AAAA,EAC3E;AAEA,SAAO;AAAA,IACL,IAAI;AAAA,IACJ,qBAAqB;AAAA,IAErB,MAAM,oBAAoB,OAAe,cAAsB,SAAuD;AACpH,YAAM,SAAS,UAAU,SAAS,WAAW;AAC7C,YAAM,SAAS,SAAS,UAAU,OAAO,SAAS,CAAC,UAAU,SAAS,SAAS;AAC/E,YAAM,MAAM,MAAM,OAAO,+BAA+B,iBAAiB,OAAOD,qBAAoB,MAAM,cAAc,MAAM;AAC9H,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,iBAAiB,MAAc,cAAsB,aAAsB;AAC/E,YAAM,SAAS,UAAU,WAAW;AACpC,YAAM,SAAS,MAAM,OAAO,0BAA0B,kBAAkB,MAAM,YAAY;AAC1F,YAAM,OAAO,MAAME,SAAQ,OAAO,YAAY,CAAC;AAC/C,aAAO,EAAE,QAAQ,KAAK;AAAA,IACxB;AAAA,EACF;AACF;;;AC9DA,SAAS,uBAAAC,sBAAqB,gBAAAC,qBAAoB;AAGlD,IAAM,0BAA0B;AAGhC,IAAM,2BAA2B;AAcjC,SAAS,iBAAiB,KAAyB;AACjD,QAAM,SAAS,IAAI,QAAQ,MAAM,GAAG,EAAE,QAAQ,MAAM,GAAG;AACvD,QAAM,aAAa,IAAK,OAAO,SAAS,KAAM;AAC9C,QAAM,SAAS,OAAO,OAAO,OAAO,SAAS,WAAW,GAAG;AAC3D,QAAM,gBAAgB,KAAK,MAAM;AACjC,QAAM,MAAM,cAAc;AAC1B,QAAM,QAAQ,IAAI,WAAW,GAAG;AAChC,WAAS,IAAI,GAAG,IAAI,KAAK;AACvB,UAAM,CAAC,IAAI,cAAc,WAAW,CAAC;AAEvC,SAAO;AACT;AAEA,eAAeC,SAAQ,aAAqB,SAA2C;AACrF,QAAM,eAAe,MAAM,MAAM,yBAAyB;AAAA,IACxD,SAAS;AAAA,MACP,eAAe,UAAU,WAAW;AAAA,IACtC;AAAA,EACF,CAAC;AACD,QAAM,WAA0B,MAAM,aAAa,KAAK;AAExD,MAAI,QAAuB,SAAS,QAAQ,SAAS;AACrD,MAAI,gBAAgB;AACpB,MAAI,SAAS;AACX,QAAI;AACF,YAAM,QAAQ,QAAQ,MAAM,GAAG;AAC/B,YAAM,UAAU,KAAK,MAAM,IAAI,YAAY,EAAE,OAAO,iBAAiB,MAAM,CAAC,CAAE,CAAC,CAAC;AAChF,YAAM,mBAAmB;AAGzB,UAAI,QAAQ,wBAAwB;AAClC,cAAM,eAAe,MAAM,QAAQ,QAAQ,sBAAsB,IAC7D,QAAQ,uBAAuB,CAAC,IAChC,QAAQ;AAEZ,YAAI,OAAO,iBAAiB,UAAU;AACpC,kBAAQ;AACR,0BAAgB;AAAA,QAClB;AAAA,MACF,WAES,QAAQ,QAAQ,kBAAkB;AACzC,gBAAQ,QAAQ,SAAS;AACzB,wBAAgB;AAAA,MAClB,WAES,QAAQ,aAAa,MAAM;AAClC,gBAAQ,QAAQ,SAAS;AACzB,wBAAgB;AAAA,MAClB;AAAA,IACF,QACM;AAAA,IACN;AAAA,EACF;AAEA,QAAM,gBAAgB,MAAM,MAAM,0BAA0B;AAAA,IAC1D,SAAS;AAAA,MACP,eAAe,UAAU,WAAW;AAAA,IACtC;AAAA,EACF,CAAC;AAED,MAAI,SAAwB;AAC5B,MAAI,cAAc,IAAI;AACpB,QAAI;AACF,YAAM,OAAO,MAAM,cAAc,KAAK;AACtC,YAAM,SAAS,IAAI,WAAW;AAC9B,YAAM,iBAAiB,IAAI,QAAgB,CAAC,SAAS,WAAW;AAC9D,eAAO,YAAY,MAAM,QAAQ,OAAO,MAAgB;AACxD,eAAO,UAAU;AACjB,eAAO,cAAc,IAAI;AAAA,MAC3B,CAAC;AACD,eAAS,MAAM;AAAA,IACjB,QACM;AAAA,IACN;AAAA,EACF;AAEA,SAAO;AAAA,IACL,IAAI,SAAS;AAAA,IACb,MAAM,SAAS;AAAA,IACf;AAAA,IACA;AAAA,IACA;AAAA,IACA,KAAK;AAAA,EACP;AACF;AAEO,SAAS,UAAU,QAAqD;AAC7E,QAAM,SAAS,OAAO,UAAU;AAEhC,QAAM,UAAU,qCAAqC,MAAM;AAC3D,QAAM,WAAW,qCAAqC,MAAM;AAE5D,QAAM,gBAAgB,IAAID,cAAa,OAAO,UAAU,OAAO,cAAc,OAAO,eAAe,IAAI;AAEvG,WAAS,UAAU,aAAoC;AACrD,QAAI,CAAC,eAAe,gBAAgB,OAAO;AACzC,aAAO;AAET,WAAO,IAAIA,cAAa,OAAO,UAAU,OAAO,cAAc,WAAW;AAAA,EAC3E;AAEA,SAAO;AAAA,IACL,IAAI;AAAA,IACJ,qBAAqB;AAAA,IAErB,MAAM,oBAAoB,OAAe,cAAsB,SAAuD;AACpH,YAAM,SAAS,UAAU,SAAS,WAAW;AAC7C,YAAM,SAAS,SAAS,UAAU,OAAO,SAAS,CAAC,UAAU,WAAW,SAAS,WAAW;AAC5F,YAAM,MAAM,MAAM,OAAO,+BAA+B,SAAS,OAAOD,qBAAoB,MAAM,cAAc,MAAM;AACtH,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,iBAAiB,MAAc,cAAsB,aAAsB;AAC/E,YAAM,SAAS,UAAU,WAAW;AACpC,YAAM,SAAS,MAAM,OAAO,0BAA0B,UAAU,MAAM,YAAY;AAClF,YAAM,OAAO,MAAME,SAAQ,OAAO,YAAY,GAAG,OAAO,QAAQ,CAAC;AACjE,aAAO,EAAE,QAAQ,KAAK;AAAA,IACxB;AAAA,EACF;AACF;","names":["CodeChallengeMethod","OAuth2Client","getUser","CodeChallengeMethod","OAuth2Client","getUser"]}
@@ -0,0 +1 @@
1
+ {"version":3,"file":"github.d.ts","sourceRoot":"","sources":["../../../../src/oauth/providers/github.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAY,aAAa,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAA;AAuE5E,wBAAgB,MAAM,CAAC,MAAM,EAAE,mBAAmB,GAAG,aAAa,CAAC,QAAQ,CAAC,CA2B3E"}
@@ -0,0 +1 @@
1
+ {"version":3,"file":"google.d.ts","sourceRoot":"","sources":["../../../../src/oauth/providers/google.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAY,aAAa,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAA;AAmC5E,wBAAgB,MAAM,CAAC,MAAM,EAAE,mBAAmB,GAAG,aAAa,CAAC,QAAQ,CAAC,CA4B3E"}
@@ -0,0 +1 @@
1
+ {"version":3,"file":"microsoft.d.ts","sourceRoot":"","sources":["../../../../src/oauth/providers/microsoft.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAY,aAAa,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAA;AAS5E,UAAU,eAAgB,SAAQ,mBAAmB;IACnD,MAAM,CAAC,EAAE,QAAQ,GAAG,eAAe,GAAG,WAAW,GAAG,MAAM,CAAA;CAC3D;AAiGD,wBAAgB,SAAS,CAAC,MAAM,EAAE,eAAe,GAAG,aAAa,CAAC,WAAW,CAAC,CAiC7E"}
@@ -0,0 +1 @@
1
+ {"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../../src/oauth/utils.ts"],"names":[],"mappings":"AAEA,wBAAgB,eAAe;;;EAQ9B"}
@@ -0,0 +1 @@
1
+ {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/runtimes/bun/index.ts"],"names":[],"mappings":"AAAA,0CAA0C;AAC1C,eAAO,MAAM,sBAAsB,OAAO,CAAA"}
@@ -0,0 +1 @@
1
+ import{_bunRuntimePlaceholder as o}from"../../../chunk-HJ4NAE7M.js";export{o as _bunRuntimePlaceholder};//# sourceMappingURL=index.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/runtimes/index.ts"],"names":[],"mappings":"AAAA,cAAc,OAAO,CAAA;AACrB,cAAc,SAAS,CAAA"}
@@ -0,0 +1 @@
1
+ import{clearSessionToken as o,getSessionToken as r,handleTauriDeepLink as m,isTauri as p,setupTauriListener as t,signInWithTauri as c,storeSessionToken as f}from"../../chunk-7LEK5L4N.js";import{_bunRuntimePlaceholder as h}from"../../chunk-HJ4NAE7M.js";export{h as _bunRuntimePlaceholder,o as clearSessionToken,r as getSessionToken,m as handleTauriDeepLink,p as isTauri,t as setupTauriListener,c as signInWithTauri,f as storeSessionToken};//# sourceMappingURL=index.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/runtimes/tauri/index.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,OAAO,SAA6C,CAAA;AAEjE,wBAAsB,eAAe,CACnC,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,EACf,MAAM,GAAE,MAAc,EACtB,gBAAgB,CAAC,EAAE,MAAM,iBAsB1B;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,QAOzE;AAED,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,QASjH;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,QAQ9C;AAED,wBAAgB,eAAe,IAAI,MAAM,GAAG,IAAI,CAI/C;AAED,wBAAgB,iBAAiB,SAQhC"}
@@ -0,0 +1 @@
1
+ import{clearSessionToken as o,getSessionToken as r,handleTauriDeepLink as m,isTauri as p,setupTauriListener as t,signInWithTauri as L,storeSessionToken as c}from"../../../chunk-7LEK5L4N.js";export{o as clearSessionToken,r as getSessionToken,m as handleTauriDeepLink,p as isTauri,t as setupTauriListener,L as signInWithTauri,c as storeSessionToken};//# sourceMappingURL=index.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/solidstart/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAA;AAChD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AAC7C,OAAO,EAAE,UAAU,EAAiB,MAAM,SAAS,CAAA;AAEnD,KAAK,YAAY,CAAC,UAAU,SAAS,aAAa,CAAC,GAAG,CAAC,EAAE,IAAI,UAAU,CAAC,OAAO,UAAU,CAAC,UAAU,CAAC,CAAC,CAAA;AAEtG;;;;;;;;;;;GAWG;AACH,wBAAgB,SAAS,CAAC,KAAK,CAAC,UAAU,SAAS,aAAa,CAAC,GAAG,CAAC,EAAE,EAAE,aAAa,EAAE,iBAAiB,CAAC,UAAU,CAAC,GAAG,YAAY,CAAC,UAAU,CAAC;;;;EAe/I"}