@salesforce/b2c-tooling-sdk 0.0.8 → 0.2.0

package/dist/cjs/auth/index.d.ts

@@ -63,3 +63,5 @@ export type { ImplicitOAuthConfig } from './oauth-implicit.js';
 export { ApiKeyStrategy } from './api-key.js';
 export { resolveAuthStrategy, checkAvailableAuthMethods } from './resolve.js';
 export type { ResolveAuthStrategyOptions, AvailableAuthMethods } from './resolve.js';
+export { globalAuthMiddlewareRegistry, AuthMiddlewareRegistry, applyAuthRequestMiddleware, applyAuthResponseMiddleware, } from './middleware.js';
+export type { AuthMiddleware, AuthMiddlewareProvider } from './middleware.js';

package/dist/cjs/auth/index.js

@@ -66,4 +66,6 @@ export { ImplicitOAuthStrategy } from './oauth-implicit.js';
 export { ApiKeyStrategy } from './api-key.js';
 // Resolution helpers
 export { resolveAuthStrategy, checkAvailableAuthMethods } from './resolve.js';
+// Auth middleware
+export { globalAuthMiddlewareRegistry, AuthMiddlewareRegistry, applyAuthRequestMiddleware, applyAuthResponseMiddleware, } from './middleware.js';
 //# sourceMappingURL=index.js.map

package/dist/cjs/auth/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/auth/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsDG;AAcH,OAAO,EAAC,gBAAgB,EAAC,MAAM,YAAY,CAAC;AAE5C,aAAa;AACb,OAAO,EAAC,iBAAiB,EAAC,MAAM,YAAY,CAAC;AAC7C,OAAO,EAAC,aAAa,EAAE,SAAS,EAAC,MAAM,YAAY,CAAC;AAEpD,OAAO,EAAC,qBAAqB,EAAC,MAAM,qBAAqB,CAAC;AAE1D,OAAO,EAAC,cAAc,EAAC,MAAM,cAAc,CAAC;AAE5C,qBAAqB;AACrB,OAAO,EAAC,mBAAmB,EAAE,yBAAyB,EAAC,MAAM,cAAc,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/auth/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsDG;AAcH,OAAO,EAAC,gBAAgB,EAAC,MAAM,YAAY,CAAC;AAE5C,aAAa;AACb,OAAO,EAAC,iBAAiB,EAAC,MAAM,YAAY,CAAC;AAC7C,OAAO,EAAC,aAAa,EAAE,SAAS,EAAC,MAAM,YAAY,CAAC;AAEpD,OAAO,EAAC,qBAAqB,EAAC,MAAM,qBAAqB,CAAC;AAE1D,OAAO,EAAC,cAAc,EAAC,MAAM,cAAc,CAAC;AAE5C,qBAAqB;AACrB,OAAO,EAAC,mBAAmB,EAAE,yBAAyB,EAAC,MAAM,cAAc,CAAC;AAG5E,kBAAkB;AAClB,OAAO,EACL,4BAA4B,EAC5B,sBAAsB,EACtB,0BAA0B,EAC1B,2BAA2B,GAC5B,MAAM,iBAAiB,CAAC"}

package/dist/cjs/auth/middleware.d.ts

@@ -0,0 +1,196 @@
+/**
+ * Auth Middleware Registry for B2C SDK.
+ *
+ * Provides a middleware system specifically for authentication requests (OAuth token requests).
+ * This is separate from the HTTP middleware registry because auth requests bypass the
+ * standard openapi-fetch client middleware chain.
+ *
+ * ## SDK Usage
+ *
+ * ```typescript
+ * import { globalAuthMiddlewareRegistry, AuthMiddlewareProvider } from '@salesforce/b2c-tooling-sdk/auth';
+ *
+ * const loggingProvider: AuthMiddlewareProvider = {
+ *   name: 'auth-logger',
+ *   getMiddleware() {
+ *     return {
+ *       onRequest({ request }) {
+ *         console.log(`[Auth] ${request.method} ${request.url}`);
+ *         return request;
+ *       },
+ *       onResponse({ response }) {
+ *         console.log(`[Auth] ${response.status}`);
+ *         return response;
+ *       },
+ *     };
+ *   },
+ * };
+ *
+ * globalAuthMiddlewareRegistry.register(loggingProvider);
+ * ```
+ *
+ * ## CLI Plugin Usage
+ *
+ * Plugins can provide auth middleware via the `b2c:auth-middleware` hook.
+ *
+ * @module auth/middleware
+ */
+/**
+ * Middleware interface for authentication requests.
+ *
+ * Similar to openapi-fetch's Middleware interface, but simplified for auth requests.
+ */
+export interface AuthMiddleware {
+    /**
+     * Called before the auth request is sent.
+     * Can modify the request or return a new one.
+     *
+     * @param params - Object containing the request
+     * @returns Modified request, or void to use original
+     */
+    onRequest?(params: {
+        request: Request;
+    }): Promise<Request | void>;
+    /**
+     * Called after the auth response is received.
+     * Can modify the response or return a new one.
+     *
+     * @param params - Object containing request and response
+     * @returns Modified response, or void to use original
+     */
+    onResponse?(params: {
+        request: Request;
+        response: Response;
+    }): Promise<Response | void>;
+}
+/**
+ * Middleware provider that supplies middleware for auth requests.
+ *
+ * @example
+ * ```typescript
+ * const provider: AuthMiddlewareProvider = {
+ *   name: 'user-agent',
+ *   getMiddleware() {
+ *     return {
+ *       onRequest({ request }) {
+ *         request.headers.set('User-Agent', 'my-app/1.0');
+ *         return request;
+ *       },
+ *     };
+ *   },
+ * };
+ * ```
+ */
+export interface AuthMiddlewareProvider {
+    /**
+     * Human-readable name for the provider (used in logging/debugging).
+     */
+    readonly name: string;
+    /**
+     * Returns middleware for auth requests.
+     *
+     * @returns Middleware to apply, or undefined to skip
+     */
+    getMiddleware(): AuthMiddleware | undefined;
+}
+/**
+ * Registry for auth middleware providers.
+ *
+ * The registry collects middleware from multiple providers and returns
+ * them in registration order when requested during OAuth token requests.
+ *
+ * ## Usage Modes
+ *
+ * **SDK Mode**: Register providers directly via `register()`:
+ * ```typescript
+ * globalAuthMiddlewareRegistry.register(myProvider);
+ * ```
+ *
+ * **CLI Mode**: Providers are collected via the `b2c:auth-middleware` hook
+ * and registered during command initialization.
+ */
+export declare class AuthMiddlewareRegistry {
+    private providers;
+    /**
+     * Registers a middleware provider.
+     *
+     * Providers are called in registration order when middleware is requested.
+     *
+     * @param provider - The provider to register
+     */
+    register(provider: AuthMiddlewareProvider): void;
+    /**
+     * Unregisters a middleware provider by name.
+     *
+     * @param name - The name of the provider to remove
+     * @returns true if a provider was removed, false if not found
+     */
+    unregister(name: string): boolean;
+    /**
+     * Collects middleware from all providers.
+     *
+     * @returns Array of middleware in registration order
+     */
+    getMiddleware(): AuthMiddleware[];
+    /**
+     * Clears all registered providers.
+     *
+     * Primarily useful for testing.
+     */
+    clear(): void;
+    /**
+     * Returns the number of registered providers.
+     */
+    get size(): number;
+    /**
+     * Returns the names of all registered providers.
+     */
+    getProviderNames(): string[];
+}
+/**
+ * Global auth middleware registry instance.
+ *
+ * This is the default registry used by OAuth strategies. Register
+ * middleware providers here to have them applied to token requests.
+ *
+ * @example
+ * ```typescript
+ * import { globalAuthMiddlewareRegistry } from '@salesforce/b2c-tooling-sdk/auth';
+ *
+ * globalAuthMiddlewareRegistry.register({
+ *   name: 'user-agent',
+ *   getMiddleware() {
+ *     return {
+ *       onRequest({ request }) {
+ *         request.headers.set('User-Agent', 'my-app/1.0');
+ *         return request;
+ *       },
+ *     };
+ *   },
+ * });
+ * ```
+ */
+export declare const globalAuthMiddlewareRegistry: AuthMiddlewareRegistry;
+/**
+ * Applies auth middleware to a request.
+ *
+ * This helper applies all registered `onRequest` middleware in order,
+ * accumulating modifications to the request.
+ *
+ * @param request - The original request
+ * @param middleware - Array of middleware to apply
+ * @returns The modified request
+ */
+export declare function applyAuthRequestMiddleware(request: Request, middleware: AuthMiddleware[]): Promise<Request>;
+/**
+ * Applies auth middleware to a response.
+ *
+ * This helper applies all registered `onResponse` middleware in order,
+ * accumulating modifications to the response.
+ *
+ * @param request - The original request (for context)
+ * @param response - The response to process
+ * @param middleware - Array of middleware to apply
+ * @returns The modified response
+ */
+export declare function applyAuthResponseMiddleware(request: Request, response: Response, middleware: AuthMiddleware[]): Promise<Response>;

package/dist/cjs/auth/middleware.js

@@ -0,0 +1,190 @@
+/*
+ * Copyright (c) 2025, Salesforce, Inc.
+ * SPDX-License-Identifier: Apache-2
+ * For full license text, see the license.txt file in the repo root or http://www.apache.org/licenses/LICENSE-2.0
+ */
+/**
+ * Auth Middleware Registry for B2C SDK.
+ *
+ * Provides a middleware system specifically for authentication requests (OAuth token requests).
+ * This is separate from the HTTP middleware registry because auth requests bypass the
+ * standard openapi-fetch client middleware chain.
+ *
+ * ## SDK Usage
+ *
+ * ```typescript
+ * import { globalAuthMiddlewareRegistry, AuthMiddlewareProvider } from '@salesforce/b2c-tooling-sdk/auth';
+ *
+ * const loggingProvider: AuthMiddlewareProvider = {
+ *   name: 'auth-logger',
+ *   getMiddleware() {
+ *     return {
+ *       onRequest({ request }) {
+ *         console.log(`[Auth] ${request.method} ${request.url}`);
+ *         return request;
+ *       },
+ *       onResponse({ response }) {
+ *         console.log(`[Auth] ${response.status}`);
+ *         return response;
+ *       },
+ *     };
+ *   },
+ * };
+ *
+ * globalAuthMiddlewareRegistry.register(loggingProvider);
+ * ```
+ *
+ * ## CLI Plugin Usage
+ *
+ * Plugins can provide auth middleware via the `b2c:auth-middleware` hook.
+ *
+ * @module auth/middleware
+ */
+/**
+ * Registry for auth middleware providers.
+ *
+ * The registry collects middleware from multiple providers and returns
+ * them in registration order when requested during OAuth token requests.
+ *
+ * ## Usage Modes
+ *
+ * **SDK Mode**: Register providers directly via `register()`:
+ * ```typescript
+ * globalAuthMiddlewareRegistry.register(myProvider);
+ * ```
+ *
+ * **CLI Mode**: Providers are collected via the `b2c:auth-middleware` hook
+ * and registered during command initialization.
+ */
+export class AuthMiddlewareRegistry {
+    providers = [];
+    /**
+     * Registers a middleware provider.
+     *
+     * Providers are called in registration order when middleware is requested.
+     *
+     * @param provider - The provider to register
+     */
+    register(provider) {
+        this.providers.push(provider);
+    }
+    /**
+     * Unregisters a middleware provider by name.
+     *
+     * @param name - The name of the provider to remove
+     * @returns true if a provider was removed, false if not found
+     */
+    unregister(name) {
+        const index = this.providers.findIndex((p) => p.name === name);
+        if (index >= 0) {
+            this.providers.splice(index, 1);
+            return true;
+        }
+        return false;
+    }
+    /**
+     * Collects middleware from all providers.
+     *
+     * @returns Array of middleware in registration order
+     */
+    getMiddleware() {
+        const middleware = [];
+        for (const provider of this.providers) {
+            const m = provider.getMiddleware();
+            if (m) {
+                middleware.push(m);
+            }
+        }
+        return middleware;
+    }
+    /**
+     * Clears all registered providers.
+     *
+     * Primarily useful for testing.
+     */
+    clear() {
+        this.providers = [];
+    }
+    /**
+     * Returns the number of registered providers.
+     */
+    get size() {
+        return this.providers.length;
+    }
+    /**
+     * Returns the names of all registered providers.
+     */
+    getProviderNames() {
+        return this.providers.map((p) => p.name);
+    }
+}
+/**
+ * Global auth middleware registry instance.
+ *
+ * This is the default registry used by OAuth strategies. Register
+ * middleware providers here to have them applied to token requests.
+ *
+ * @example
+ * ```typescript
+ * import { globalAuthMiddlewareRegistry } from '@salesforce/b2c-tooling-sdk/auth';
+ *
+ * globalAuthMiddlewareRegistry.register({
+ *   name: 'user-agent',
+ *   getMiddleware() {
+ *     return {
+ *       onRequest({ request }) {
+ *         request.headers.set('User-Agent', 'my-app/1.0');
+ *         return request;
+ *       },
+ *     };
+ *   },
+ * });
+ * ```
+ */
+export const globalAuthMiddlewareRegistry = new AuthMiddlewareRegistry();
+/**
+ * Applies auth middleware to a request.
+ *
+ * This helper applies all registered `onRequest` middleware in order,
+ * accumulating modifications to the request.
+ *
+ * @param request - The original request
+ * @param middleware - Array of middleware to apply
+ * @returns The modified request
+ */
+export async function applyAuthRequestMiddleware(request, middleware) {
+    let currentRequest = request;
+    for (const m of middleware) {
+        if (m.onRequest) {
+            const result = await m.onRequest({ request: currentRequest });
+            if (result) {
+                currentRequest = result;
+            }
+        }
+    }
+    return currentRequest;
+}
+/**
+ * Applies auth middleware to a response.
+ *
+ * This helper applies all registered `onResponse` middleware in order,
+ * accumulating modifications to the response.
+ *
+ * @param request - The original request (for context)
+ * @param response - The response to process
+ * @param middleware - Array of middleware to apply
+ * @returns The modified response
+ */
+export async function applyAuthResponseMiddleware(request, response, middleware) {
+    let currentResponse = response;
+    for (const m of middleware) {
+        if (m.onResponse) {
+            const result = await m.onResponse({ request, response: currentResponse });
+            if (result) {
+                currentResponse = result;
+            }
+        }
+    }
+    return currentResponse;
+}
+//# sourceMappingURL=middleware.js.map

package/dist/cjs/auth/middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.js","sourceRoot":"","sources":["../../../src/auth/middleware.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AA2DH;;;;;;;;;;;;;;;GAeG;AACH,MAAM,OAAO,sBAAsB;IACzB,SAAS,GAA6B,EAAE,CAAC;IAEjD;;;;;;OAMG;IACH,QAAQ,CAAC,QAAgC;QACvC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;IAED;;;;;OAKG;IACH,UAAU,CAAC,IAAY;QACrB,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QAC/D,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;YACf,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YAChC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;OAIG;IACH,aAAa;QACX,MAAM,UAAU,GAAqB,EAAE,CAAC;QAExC,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACtC,MAAM,CAAC,GAAG,QAAQ,CAAC,aAAa,EAAE,CAAC;YACnC,IAAI,CAAC,EAAE,CAAC;gBACN,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;IAED;;;;OAIG;IACH,KAAK;QACH,IAAI,CAAC,SAAS,GAAG,EAAE,CAAC;IACtB,CAAC;IAED;;OAEG;IACH,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,gBAAgB;QACd,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC3C,CAAC;CACF;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,IAAI,sBAAsB,EAAE,CAAC;AAEzE;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,OAAgB,EAAE,UAA4B;IAC7F,IAAI,cAAc,GAAG,OAAO,CAAC;IAE7B,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC;YAChB,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,SAAS,CAAC,EAAC,OAAO,EAAE,cAAc,EAAC,CAAC,CAAC;YAC5D,IAAI,MAAM,EAAE,CAAC;gBACX,cAAc,GAAG,MAAM,CAAC;YAC1B,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,cAAc,CAAC;AACxB,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,OAAgB,EAChB,QAAkB,EAClB,UAA4B;IAE5B,IAAI,eAAe,GAAG,QAAQ,CAAC;IAE/B,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC;YACjB,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,UAAU,CAAC,EAAC,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAC,CAAC,CAAC;YACxE,IAAI,MAAM,EAAE,CAAC;gBACX,eAAe,GAAG,MAAM,CAAC;YAC3B,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,eAAe,CAAC;AACzB,CAAC"}

package/dist/cjs/auth/oauth.js

@@ -1,5 +1,6 @@
 import { getLogger } from '../logging/logger.js';
 import { DEFAULT_ACCOUNT_MANAGER_HOST } from '../defaults.js';
+import { globalAuthMiddlewareRegistry, applyAuthRequestMiddleware, applyAuthResponseMiddleware } from './middleware.js';
 // Module-level token cache to support multiple instances with same clientId
 const ACCESS_TOKEN_CACHE = new Map();
 /**
@@ -131,21 +132,32 @@ export class OAuthStrategy {
             params.append('scope', this.config.scopes.join(' '));
         }
         const credentials = Buffer.from(`${this.config.clientId}:${this.config.clientSecret}`).toString('base64');
-        const requestHeaders = {
-            Authorization: `Basic ${credentials}`,
-            'Content-Type': 'application/x-www-form-urlencoded',
-        };
+        // Build request object for middleware
+        let request = new Request(url, {
+            method,
+            headers: {
+                Authorization: `Basic ${credentials}`,
+                'Content-Type': 'application/x-www-form-urlencoded',
+            },
+            body: params.toString(),
+        });
+        // Apply auth middleware (e.g., User-Agent)
+        const middleware = globalAuthMiddlewareRegistry.getMiddleware();
+        request = await applyAuthRequestMiddleware(request, middleware);
+        // Convert headers to object for logging
+        const requestHeaders = {};
+        request.headers.forEach((value, key) => {
+            requestHeaders[key] = value;
+        });
         logger.debug({ clientId: this.config.clientId }, `[Auth] Using OAuth client_credentials grant for client: ${this.config.clientId}`);
         // Debug: Log request start
         logger.debug({ method, url }, `[Auth REQ] ${method} ${url}`);
         // Trace: Log request details
         logger.trace({ method, url, headers: requestHeaders, body: params.toString() }, `[Auth REQ BODY] ${method} ${url}`);
         const startTime = Date.now();
-        const response = await fetch(url, {
-            method,
-            headers: requestHeaders,
-            body: params.toString(),
-        });
+        let response = await fetch(request);
+        // Apply response middleware
+        response = await applyAuthResponseMiddleware(request, response, middleware);
         const duration = Date.now() - startTime;
         // Debug: Log response summary
         logger.debug({ method, url, status: response.status, duration }, `[Auth RESP] ${method} ${url} ${response.status} ${duration}ms`);

package/dist/cjs/auth/oauth.js.map

@@ -1 +1 @@
-{"version":3,"file":"oauth.js","sourceRoot":"","sources":["../../../src/auth/oauth.ts"],"names":[],"mappings":"AAMA,OAAO,EAAC,SAAS,EAAC,MAAM,sBAAsB,CAAC;AAC/C,OAAO,EAAC,4BAA4B,EAAC,MAAM,gBAAgB,CAAC;AAE5D,4EAA4E;AAC5E,MAAM,kBAAkB,GAAqC,IAAI,GAAG,EAAE,CAAC;AASvE;;GAEG;AACH,SAAS,SAAS,CAAC,GAAW;IAC5B,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;IACxC,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;IACtE,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;IACvE,OAAO,EAAC,MAAM,EAAE,OAAO,EAAC,CAAC;AAC3B,CAAC;AAED,MAAM,OAAO,aAAa;IAGJ;IAFZ,kBAAkB,CAAS;IAEnC,YAAoB,MAAmB;QAAnB,WAAM,GAAN,MAAM,CAAa;QACrC,IAAI,CAAC,kBAAkB,GAAG,MAAM,CAAC,kBAAkB,IAAI,4BAA4B,CAAC;IACtF,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,GAAW,EAAE,OAAoB,EAAE;QAC7C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAE1C,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1C,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,KAAK,EAAE,CAAC,CAAC;QAChD,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAEpD,IAAI,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAC,GAAG,IAAI,EAAE,OAAO,EAAC,CAAC,CAAC;QAE/C,oFAAoF;QACpF,6DAA6D;QAC7D,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACvB,IAAI,CAAC,eAAe,EAAE,CAAC;YACvB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;YAC7C,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,QAAQ,EAAE,CAAC,CAAC;YACnD,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAC,GAAG,IAAI,EAAE,OAAO,EAAC,CAAC,CAAC;QAC7C,CAAC;QAED,OAAO,GAAG,CAAC;IACb,CAAC;IAED,KAAK,CAAC,sBAAsB;QAC1B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAC1C,OAAO,UAAU,KAAK,EAAE,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM;QACV,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAC1C,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,gBAAgB;QACpB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAE5D,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;YAChD,MAAM,YAAY,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;YAEpF,IAAI,YAAY,IAAI,GAAG,CAAC,OAAO,EAAE,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;gBAC9D,MAAM,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;gBAC5C,OAAO,MAAM,CAAC;YAChB,CAAC;QACH,CAAC;QAED,uCAAuC;QACvC,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,sBAAsB,EAAE,CAAC;QAC1D,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;QAC5D,OAAO,aAAa,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,eAAe;QACb,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAClD,CAAC;IAED;;;;;;OAMG;IACH,oBAAoB,CAAC,gBAA0B;QAC7C,MAAM,YAAY,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAC;QACxF,OAAO,IAAI,aAAa,CAAC;YACvB,GAAG,IAAI,CAAC,MAAM;YACd,MAAM,EAAE,YAAY;SACrB,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,cAAc;QAC1B,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAE5D,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;YAChD,MAAM,YAAY,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;YAEpF,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,MAAM,CAAC,IAAI,CAAC,iEAAiE,CAAC,CAAC;gBAC/E,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAClD,CAAC;iBAAM,IAAI,GAAG,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;gBACpD,MAAM,CAAC,IAAI,CAAC,0DAA0D,CAAC,CAAC;gBACxE,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAClD,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;gBAC5C,OAAO,MAAM,CAAC,WAAW,CAAC;YAC5B,CAAC;QACH,CAAC;QAED,uCAAuC;QACvC,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,sBAAsB,EAAE,CAAC;QAC1D,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;QAC5D,OAAO,aAAa,CAAC,WAAW,CAAC;IACnC,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,sBAAsB;QAClC,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,WAAW,IAAI,CAAC,kBAAkB,4BAA4B,CAAC;QAC3E,MAAM,MAAM,GAAG,MAAM,CAAC;QAEtB,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YACjC,UAAU,EAAE,oBAAoB;SACjC,CAAC,CAAC;QAEH,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxD,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACvD,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC1G,MAAM,cAAc,GAAG;YACrB,aAAa,EAAE,SAAS,WAAW,EAAE;YACrC,cAAc,EAAE,mCAAmC;SACpD,CAAC;QAEF,MAAM,CAAC,KAAK,CACV,EAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAC,EAChC,2DAA2D,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAClF,CAAC;QACF,2BAA2B;QAC3B,MAAM,CAAC,KAAK,CAAC,EAAC,MAAM,EAAE,GAAG,EAAC,EAAE,cAAc,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC;QAE3D,6BAA6B;QAC7B,MAAM,CAAC,KAAK,CAAC,EAAC,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAC,EAAE,mBAAmB,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC;QAElH,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAChC,MAAM;YACN,OAAO,EAAE,cAAc;YACvB,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE;SACxB,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QAExC,8BAA8B;QAC9B,MAAM,CAAC,KAAK,CACV,EAAC,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,EAAC,EAChD,eAAe,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,IAAI,QAAQ,IAAI,CAChE,CAAC;QAEF,uBAAuB;QACvB,MAAM,eAAe,GAA2B,EAAE,CAAC;QACnD,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YACtC,eAAe,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAC/B,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACxC,MAAM,CAAC,KAAK,CAAC,EAAC,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,SAAS,EAAC,EAAE,oBAAoB,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC;YAC5G,MAAM,IAAI,KAAK,CAAC,+BAA+B,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,MAAM,SAAS,EAAE,CAAC,CAAC;QAC1G,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAIlC,CAAC;QAEF,8BAA8B;QAC9B,MAAM,CAAC,KAAK,CAAC,EAAC,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,IAAI,EAAC,EAAE,oBAAoB,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC;QAEvG,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACzC,MAAM,CAAC,KAAK,CAAC,EAAC,GAAG,EAAE,GAAG,CAAC,OAAO,EAAC,EAAE,oBAAoB,CAAC,CAAC;QAEvD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,UAAU,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;QACpE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAE5C,OAAO;YACL,WAAW,EAAE,IAAI,CAAC,YAAY;YAC9B,OAAO,EAAE,UAAU;YACnB,MAAM;SACP,CAAC;IACJ,CAAC;CACF;AAED,OAAO,EAAC,SAAS,EAAC,CAAC"}
+{"version":3,"file":"oauth.js","sourceRoot":"","sources":["../../../src/auth/oauth.ts"],"names":[],"mappings":"AAMA,OAAO,EAAC,SAAS,EAAC,MAAM,sBAAsB,CAAC;AAC/C,OAAO,EAAC,4BAA4B,EAAC,MAAM,gBAAgB,CAAC;AAC5D,OAAO,EAAC,4BAA4B,EAAE,0BAA0B,EAAE,2BAA2B,EAAC,MAAM,iBAAiB,CAAC;AAEtH,4EAA4E;AAC5E,MAAM,kBAAkB,GAAqC,IAAI,GAAG,EAAE,CAAC;AASvE;;GAEG;AACH,SAAS,SAAS,CAAC,GAAW;IAC5B,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;IACxC,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;IACtE,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;IACvE,OAAO,EAAC,MAAM,EAAE,OAAO,EAAC,CAAC;AAC3B,CAAC;AAED,MAAM,OAAO,aAAa;IAGJ;IAFZ,kBAAkB,CAAS;IAEnC,YAAoB,MAAmB;QAAnB,WAAM,GAAN,MAAM,CAAa;QACrC,IAAI,CAAC,kBAAkB,GAAG,MAAM,CAAC,kBAAkB,IAAI,4BAA4B,CAAC;IACtF,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,GAAW,EAAE,OAAoB,EAAE;QAC7C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAE1C,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1C,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,KAAK,EAAE,CAAC,CAAC;QAChD,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAEpD,IAAI,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAC,GAAG,IAAI,EAAE,OAAO,EAAC,CAAC,CAAC;QAE/C,oFAAoF;QACpF,6DAA6D;QAC7D,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACvB,IAAI,CAAC,eAAe,EAAE,CAAC;YACvB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;YAC7C,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,QAAQ,EAAE,CAAC,CAAC;YACnD,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAC,GAAG,IAAI,EAAE,OAAO,EAAC,CAAC,CAAC;QAC7C,CAAC;QAED,OAAO,GAAG,CAAC;IACb,CAAC;IAED,KAAK,CAAC,sBAAsB;QAC1B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAC1C,OAAO,UAAU,KAAK,EAAE,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM;QACV,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAC1C,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,gBAAgB;QACpB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAE5D,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;YAChD,MAAM,YAAY,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;YAEpF,IAAI,YAAY,IAAI,GAAG,CAAC,OAAO,EAAE,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;gBAC9D,MAAM,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;gBAC5C,OAAO,MAAM,CAAC;YAChB,CAAC;QACH,CAAC;QAED,uCAAuC;QACvC,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,sBAAsB,EAAE,CAAC;QAC1D,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;QAC5D,OAAO,aAAa,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,eAAe;QACb,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAClD,CAAC;IAED;;;;;;OAMG;IACH,oBAAoB,CAAC,gBAA0B;QAC7C,MAAM,YAAY,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAC;QACxF,OAAO,IAAI,aAAa,CAAC;YACvB,GAAG,IAAI,CAAC,MAAM;YACd,MAAM,EAAE,YAAY;SACrB,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,cAAc;QAC1B,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAE5D,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;YAChD,MAAM,YAAY,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;YAEpF,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,MAAM,CAAC,IAAI,CAAC,iEAAiE,CAAC,CAAC;gBAC/E,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAClD,CAAC;iBAAM,IAAI,GAAG,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;gBACpD,MAAM,CAAC,IAAI,CAAC,0DAA0D,CAAC,CAAC;gBACxE,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAClD,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;gBAC5C,OAAO,MAAM,CAAC,WAAW,CAAC;YAC5B,CAAC;QACH,CAAC;QAED,uCAAuC;QACvC,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,sBAAsB,EAAE,CAAC;QAC1D,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;QAC5D,OAAO,aAAa,CAAC,WAAW,CAAC;IACnC,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,sBAAsB;QAClC,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,WAAW,IAAI,CAAC,kBAAkB,4BAA4B,CAAC;QAC3E,MAAM,MAAM,GAAG,MAAM,CAAC;QAEtB,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YACjC,UAAU,EAAE,oBAAoB;SACjC,CAAC,CAAC;QAEH,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxD,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACvD,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAE1G,sCAAsC;QACtC,IAAI,OAAO,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE;YAC7B,MAAM;YACN,OAAO,EAAE;gBACP,aAAa,EAAE,SAAS,WAAW,EAAE;gBACrC,cAAc,EAAE,mCAAmC;aACpD;YACD,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE;SACxB,CAAC,CAAC;QAEH,2CAA2C;QAC3C,MAAM,UAAU,GAAG,4BAA4B,CAAC,aAAa,EAAE,CAAC;QAChE,OAAO,GAAG,MAAM,0BAA0B,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QAEhE,wCAAwC;QACxC,MAAM,cAAc,GAA2B,EAAE,CAAC;QAClD,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YACrC,cAAc,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAC9B,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,KAAK,CACV,EAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAC,EAChC,2DAA2D,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAClF,CAAC;QACF,2BAA2B;QAC3B,MAAM,CAAC,KAAK,CAAC,EAAC,MAAM,EAAE,GAAG,EAAC,EAAE,cAAc,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC;QAE3D,6BAA6B;QAC7B,MAAM,CAAC,KAAK,CAAC,EAAC,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAC,EAAE,mBAAmB,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC;QAElH,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,IAAI,QAAQ,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC;QAEpC,4BAA4B;QAC5B,QAAQ,GAAG,MAAM,2BAA2B,CAAC,OAAO,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;QAE5E,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QAExC,8BAA8B;QAC9B,MAAM,CAAC,KAAK,CACV,EAAC,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,EAAC,EAChD,eAAe,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,IAAI,QAAQ,IAAI,CAChE,CAAC;QAEF,uBAAuB;QACvB,MAAM,eAAe,GAA2B,EAAE,CAAC;QACnD,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YACtC,eAAe,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAC/B,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACxC,MAAM,CAAC,KAAK,CAAC,EAAC,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,SAAS,EAAC,EAAE,oBAAoB,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC;YAC5G,MAAM,IAAI,KAAK,CAAC,+BAA+B,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,MAAM,SAAS,EAAE,CAAC,CAAC;QAC1G,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAIlC,CAAC;QAEF,8BAA8B;QAC9B,MAAM,CAAC,KAAK,CAAC,EAAC,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,IAAI,EAAC,EAAE,oBAAoB,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC;QAEvG,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACzC,MAAM,CAAC,KAAK,CAAC,EAAC,GAAG,EAAE,GAAG,CAAC,OAAO,EAAC,EAAE,oBAAoB,CAAC,CAAC;QAEvD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,UAAU,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;QACpE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAE5C,OAAO;YACL,WAAW,EAAE,IAAI,CAAC,YAAY;YAC9B,OAAO,EAAE,UAAU;YACnB,MAAM;SACP,CAAC;IACJ,CAAC;CACF;AAED,OAAO,EAAC,SAAS,EAAC,CAAC"}

package/dist/cjs/cli/base-command.d.ts

@@ -61,6 +61,11 @@ export declare abstract class BaseCommand<T extends typeof Command> extends Comm
      * Plugin sources are collected into two arrays based on their priority:
      * - `pluginSourcesBefore`: High priority sources (override defaults)
      * - `pluginSourcesAfter`: Low priority sources (fill gaps)
+     *
+     * Priority mapping:
+     * - 'before' → -1 (higher priority than defaults)
+     * - 'after' → 10 (lower priority than defaults)
+     * - number → used directly
      */
     protected collectPluginConfigSources(): Promise<void>;
     /**
@@ -73,6 +78,16 @@ export declare abstract class BaseCommand<T extends typeof Command> extends Comm
      * Plugin middleware is registered with the global middleware registry.
      */
     protected collectPluginHttpMiddleware(): Promise<void>;
+    /**
+     * Collects auth middleware from plugins via the `b2c:auth-middleware` hook.
+     *
+     * This method is called during command initialization, after flags are parsed
+     * but before any authentication is performed. It allows CLI plugins to provide
+     * custom middleware that will be applied to OAuth token requests.
+     *
+     * Plugin middleware is registered with the global auth middleware registry.
+     */
+    protected collectPluginAuthMiddleware(): Promise<void>;
     /**
      * Handle errors thrown during command execution.
      *

package/dist/cjs/cli/base-command.js

@@ -9,6 +9,8 @@ import { setLanguage } from '../i18n/index.js';
 import { configureLogger, getLogger } from '../logging/index.js';
 import { createExtraParamsMiddleware } from '../clients/middleware.js';
 import { globalMiddlewareRegistry } from '../clients/middleware-registry.js';
+import { globalAuthMiddlewareRegistry } from '../auth/middleware.js';
+import { setUserAgent } from '../clients/user-agent.js';
 const LOG_LEVELS = ['trace', 'debug', 'info', 'warn', 'error', 'silent'];
 /**
  * Base command class for B2C CLI tools.
@@ -101,11 +103,16 @@ export class BaseCommand extends Command {
             setLanguage(this.flags.lang);
         }
         this.configureLogging();
+        // Set CLI User-Agent (CLI name/version only, without @salesforce/ prefix)
+        // This must happen before any API clients are created
+        setUserAgent(`${this.config.name.replace(/^@salesforce\//, '')}/${this.config.version}`);
         // Register extra params middleware (from --extra-query, --extra-body, --extra-headers flags)
         // This must happen before any API clients are created
         this.registerExtraParamsMiddleware();
         // Collect middleware from plugins before any API clients are created
         await this.collectPluginHttpMiddleware();
+        // Collect auth middleware from plugins before any authentication is performed
+        await this.collectPluginAuthMiddleware();
         // Collect config sources from plugins before loading configuration
         await this.collectPluginConfigSources();
         this.resolvedConfig = this.loadConfiguration();
@@ -180,6 +187,11 @@ export class BaseCommand extends Command {
      * Plugin sources are collected into two arrays based on their priority:
      * - `pluginSourcesBefore`: High priority sources (override defaults)
      * - `pluginSourcesAfter`: Low priority sources (fill gaps)
+     *
+     * Priority mapping:
+     * - 'before' → -1 (higher priority than defaults)
+     * - 'after' → 10 (lower priority than defaults)
+     * - number → used directly
      */
     async collectPluginConfigSources() {
         // Access flags that may be defined in subclasses (OAuthCommand, InstanceCommand)
@@ -200,11 +212,26 @@ export class BaseCommand extends Command {
             const result = success.result;
             if (!result?.sources?.length)
                 continue;
-            if (result.priority === 'before') {
+            // Map priority: 'before' → -1, 'after' → 10, number → as-is, undefined → 10
+            const numericPriority = result.priority === 'before'
+                ? -1
+                : result.priority === 'after'
+                    ? 10
+                    : typeof result.priority === 'number'
+                        ? result.priority
+                        : 10; // default 'after'
+            // Apply priority to sources that don't already have one set
+            for (const source of result.sources) {
+                if (source.priority === undefined) {
+                    source.priority = numericPriority;
+                }
+            }
+            // Still use before/after arrays for backwards compatibility
+            // The resolver will sort all sources by priority anyway
+            if (numericPriority < 0) {
                 this.pluginSourcesBefore.push(...result.sources);
             }
             else {
-                // Default priority is 'after'
                 this.pluginSourcesAfter.push(...result.sources);
             }
         }
@@ -242,6 +269,35 @@ export class BaseCommand extends Command {
             this.logger?.warn(`Plugin ${failure.plugin.name} b2c:http-middleware hook failed: ${failure.error.message}`);
         }
     }
+    /**
+     * Collects auth middleware from plugins via the `b2c:auth-middleware` hook.
+     *
+     * This method is called during command initialization, after flags are parsed
+     * but before any authentication is performed. It allows CLI plugins to provide
+     * custom middleware that will be applied to OAuth token requests.
+     *
+     * Plugin middleware is registered with the global auth middleware registry.
+     */
+    async collectPluginAuthMiddleware() {
+        const hookOptions = {
+            flags: this.flags,
+        };
+        const hookResult = await this.config.runHook('b2c:auth-middleware', hookOptions);
+        // Register middleware from all plugins that responded
+        for (const success of hookResult.successes) {
+            const result = success.result;
+            if (!result?.providers?.length)
+                continue;
+            for (const provider of result.providers) {
+                globalAuthMiddlewareRegistry.register(provider);
+                this.logger?.debug(`Registered auth middleware provider: ${provider.name}`);
+            }
+        }
+        // Log warnings for hook failures (don't break the CLI)
+        for (const failure of hookResult.failures) {
+            this.logger?.warn(`Plugin ${failure.plugin.name} b2c:auth-middleware hook failed: ${failure.error.message}`);
+        }
+    }
     /**
      * Handle errors thrown during command execution.
      *