@samebase/identity-broker 0.8.0 → 0.9.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (28) hide show
  1. package/README.md +8 -5
  2. package/dist/client/index.js +20 -20
  3. package/dist/client/index.js.map +1 -1
  4. package/dist/client/keys.js +2 -9
  5. package/dist/client/keys.js.map +1 -1
  6. package/dist/client/protocol.d.ts +4 -2
  7. package/dist/client/protocol.js +14 -12
  8. package/dist/client/protocol.js.map +1 -1
  9. package/dist/client/responses.d.ts +4 -1
  10. package/dist/client/responses.js +9 -6
  11. package/dist/client/responses.js.map +1 -1
  12. package/dist/client/subject.js +3 -8
  13. package/dist/client/subject.js.map +1 -1
  14. package/dist/component/_generated/api.d.ts +0 -2
  15. package/dist/component/_generated/api.js.map +1 -1
  16. package/dist/component/_generated/component.d.ts +6 -6
  17. package/dist/component/authRequests.d.ts +8 -8
  18. package/dist/component/authRequests.js +9 -10
  19. package/dist/component/authRequests.js.map +1 -1
  20. package/dist/component/lifecycle.d.ts +5 -5
  21. package/dist/component/lifecycle.js +5 -5
  22. package/dist/component/schema.d.ts +60 -60
  23. package/dist/component/schema.js +4 -4
  24. package/dist/component/schema.js.map +1 -1
  25. package/package.json +1 -1
  26. package/dist/component/crypto.d.ts +0 -2
  27. package/dist/component/crypto.js +0 -9
  28. package/dist/component/crypto.js.map +0 -1
package/dist/component/schema.d.ts CHANGED
@@ -35,7 +35,7 @@ export declare const vAuthRequest: import("convex/values").VUnion<{
35
35
  scope: string;
36
36
  state?: string;
37
37
  status: "pending";
38
- txnCookieHash?: string;
38
+ txnCookieHash: string;
39
39
  } | {
40
40
  appId: string;
41
41
  clientId: string;
@@ -50,7 +50,7 @@ export declare const vAuthRequest: import("convex/values").VUnion<{
50
50
  scope: string;
51
51
  state?: string;
52
52
  status: "upstream";
53
- txnCookieHash?: string;
53
+ txnCookieHash: string;
54
54
  upstreamCodeVerifier: string;
55
55
  upstreamNonce?: string;
56
56
  upstreamStateHash: string;
@@ -68,7 +68,7 @@ export declare const vAuthRequest: import("convex/values").VUnion<{
68
68
  scope: string;
69
69
  state?: string;
70
70
  status: "claimed";
71
- txnCookieHash?: string;
71
+ txnCookieHash: string;
72
72
  } | {
73
73
  appId: string;
74
74
  clientId: string;
@@ -89,7 +89,7 @@ export declare const vAuthRequest: import("convex/values").VUnion<{
89
89
  scope: string;
90
90
  state?: string;
91
91
  status: "emailSent";
92
- txnCookieHash?: string;
92
+ txnCookieHash: string;
93
93
  } | {
94
94
  appId: string;
95
95
  authTime: number;
@@ -112,7 +112,7 @@ export declare const vAuthRequest: import("convex/values").VUnion<{
112
112
  scope: string;
113
113
  state?: string;
114
114
  status: "completed";
115
- txnCookieHash?: string;
115
+ txnCookieHash: string;
116
116
  }, [import("convex/values").VObject<{
117
117
  appId: string;
118
118
  clientId: string;
@@ -126,7 +126,7 @@ export declare const vAuthRequest: import("convex/values").VUnion<{
126
126
  scope: string;
127
127
  state?: string;
128
128
  status: "pending";
129
- txnCookieHash?: string;
129
+ txnCookieHash: string;
130
130
  }, {
131
131
  requestId: import("convex/values").VString<string, "required">;
132
132
  appId: import("convex/values").VString<string, "required">;
@@ -139,11 +139,11 @@ export declare const vAuthRequest: import("convex/values").VUnion<{
139
139
  /** `prompt=login` or `max_age` was sent: the connector must reauthenticate or refuse. */
140
140
  freshLogin: import("convex/values").VBoolean<boolean, "required">;
141
141
  /**
142
- * SHA-256 hex of the request's transaction cookie, set with the chooser page. `/continue`, the
143
- * connector callback, and the email steps need the cookie, so only the browser that saw the
144
- * chooser can move the request on. Absent when /authorize skipped the chooser.
142
+ * SHA-256 hex of the request's transaction cookie, set by `/authorize`. `/continue`, the connector
143
+ * callback, and the email steps need the cookie, so only the browser that started the request can
144
+ * move it on.
145
145
  */
146
- txnCookieHash: import("convex/values").VString<string | undefined, "optional">;
146
+ txnCookieHash: import("convex/values").VString<string, "required">;
147
147
  createdAt: import("convex/values").VFloat64<number, "required">;
148
148
  expiresAt: import("convex/values").VFloat64<number, "required">;
149
149
  status: import("convex/values").VLiteral<"pending", "required">;
@@ -161,7 +161,7 @@ export declare const vAuthRequest: import("convex/values").VUnion<{
161
161
  scope: string;
162
162
  state?: string;
163
163
  status: "upstream";
164
- txnCookieHash?: string;
164
+ txnCookieHash: string;
165
165
  upstreamCodeVerifier: string;
166
166
  upstreamNonce?: string;
167
167
  upstreamStateHash: string;
@@ -177,11 +177,11 @@ export declare const vAuthRequest: import("convex/values").VUnion<{
177
177
  /** `prompt=login` or `max_age` was sent: the connector must reauthenticate or refuse. */
178
178
  freshLogin: import("convex/values").VBoolean<boolean, "required">;
179
179
  /**
180
- * SHA-256 hex of the request's transaction cookie, set with the chooser page. `/continue`, the
181
- * connector callback, and the email steps need the cookie, so only the browser that saw the
182
- * chooser can move the request on. Absent when /authorize skipped the chooser.
180
+ * SHA-256 hex of the request's transaction cookie, set by `/authorize`. `/continue`, the connector
181
+ * callback, and the email steps need the cookie, so only the browser that started the request can
182
+ * move it on.
183
183
  */
184
- txnCookieHash: import("convex/values").VString<string | undefined, "optional">;
184
+ txnCookieHash: import("convex/values").VString<string, "required">;
185
185
  createdAt: import("convex/values").VFloat64<number, "required">;
186
186
  expiresAt: import("convex/values").VFloat64<number, "required">;
187
187
  status: import("convex/values").VLiteral<"upstream", "required">;
@@ -203,7 +203,7 @@ export declare const vAuthRequest: import("convex/values").VUnion<{
203
203
  scope: string;
204
204
  state?: string;
205
205
  status: "claimed";
206
- txnCookieHash?: string;
206
+ txnCookieHash: string;
207
207
  }, {
208
208
  requestId: import("convex/values").VString<string, "required">;
209
209
  appId: import("convex/values").VString<string, "required">;
@@ -216,11 +216,11 @@ export declare const vAuthRequest: import("convex/values").VUnion<{
216
216
  /** `prompt=login` or `max_age` was sent: the connector must reauthenticate or refuse. */
217
217
  freshLogin: import("convex/values").VBoolean<boolean, "required">;
218
218
  /**
219
- * SHA-256 hex of the request's transaction cookie, set with the chooser page. `/continue`, the
220
- * connector callback, and the email steps need the cookie, so only the browser that saw the
221
- * chooser can move the request on. Absent when /authorize skipped the chooser.
219
+ * SHA-256 hex of the request's transaction cookie, set by `/authorize`. `/continue`, the connector
220
+ * callback, and the email steps need the cookie, so only the browser that started the request can
221
+ * move it on.
222
222
  */
223
- txnCookieHash: import("convex/values").VString<string | undefined, "optional">;
223
+ txnCookieHash: import("convex/values").VString<string, "required">;
224
224
  createdAt: import("convex/values").VFloat64<number, "required">;
225
225
  expiresAt: import("convex/values").VFloat64<number, "required">;
226
226
  status: import("convex/values").VLiteral<"claimed", "required">;
@@ -245,7 +245,7 @@ export declare const vAuthRequest: import("convex/values").VUnion<{
245
245
  scope: string;
246
246
  state?: string;
247
247
  status: "emailSent";
248
- txnCookieHash?: string;
248
+ txnCookieHash: string;
249
249
  }, {
250
250
  requestId: import("convex/values").VString<string, "required">;
251
251
  appId: import("convex/values").VString<string, "required">;
@@ -258,11 +258,11 @@ export declare const vAuthRequest: import("convex/values").VUnion<{
258
258
  /** `prompt=login` or `max_age` was sent: the connector must reauthenticate or refuse. */
259
259
  freshLogin: import("convex/values").VBoolean<boolean, "required">;
260
260
  /**
261
- * SHA-256 hex of the request's transaction cookie, set with the chooser page. `/continue`, the
262
- * connector callback, and the email steps need the cookie, so only the browser that saw the
263
- * chooser can move the request on. Absent when /authorize skipped the chooser.
261
+ * SHA-256 hex of the request's transaction cookie, set by `/authorize`. `/continue`, the connector
262
+ * callback, and the email steps need the cookie, so only the browser that started the request can
263
+ * move it on.
264
264
  */
265
- txnCookieHash: import("convex/values").VString<string | undefined, "optional">;
265
+ txnCookieHash: import("convex/values").VString<string, "required">;
266
266
  createdAt: import("convex/values").VFloat64<number, "required">;
267
267
  expiresAt: import("convex/values").VFloat64<number, "required">;
268
268
  status: import("convex/values").VLiteral<"emailSent", "required">;
@@ -297,7 +297,7 @@ export declare const vAuthRequest: import("convex/values").VUnion<{
297
297
  scope: string;
298
298
  state?: string;
299
299
  status: "completed";
300
- txnCookieHash?: string;
300
+ txnCookieHash: string;
301
301
  }, {
302
302
  requestId: import("convex/values").VString<string, "required">;
303
303
  appId: import("convex/values").VString<string, "required">;
@@ -310,11 +310,11 @@ export declare const vAuthRequest: import("convex/values").VUnion<{
310
310
  /** `prompt=login` or `max_age` was sent: the connector must reauthenticate or refuse. */
311
311
  freshLogin: import("convex/values").VBoolean<boolean, "required">;
312
312
  /**
313
- * SHA-256 hex of the request's transaction cookie, set with the chooser page. `/continue`, the
314
- * connector callback, and the email steps need the cookie, so only the browser that saw the
315
- * chooser can move the request on. Absent when /authorize skipped the chooser.
313
+ * SHA-256 hex of the request's transaction cookie, set by `/authorize`. `/continue`, the connector
314
+ * callback, and the email steps need the cookie, so only the browser that started the request can
315
+ * move it on.
316
316
  */
317
- txnCookieHash: import("convex/values").VString<string | undefined, "optional">;
317
+ txnCookieHash: import("convex/values").VString<string, "required">;
318
318
  createdAt: import("convex/values").VFloat64<number, "required">;
319
319
  expiresAt: import("convex/values").VFloat64<number, "required">;
320
320
  status: import("convex/values").VLiteral<"completed", "required">;
@@ -392,7 +392,7 @@ declare const _default: import("convex/server").SchemaDefinition<{
392
392
  scope: string;
393
393
  state?: string;
394
394
  status: "pending";
395
- txnCookieHash?: string;
395
+ txnCookieHash: string;
396
396
  } | {
397
397
  appId: string;
398
398
  clientId: string;
@@ -407,7 +407,7 @@ declare const _default: import("convex/server").SchemaDefinition<{
407
407
  scope: string;
408
408
  state?: string;
409
409
  status: "upstream";
410
- txnCookieHash?: string;
410
+ txnCookieHash: string;
411
411
  upstreamCodeVerifier: string;
412
412
  upstreamNonce?: string;
413
413
  upstreamStateHash: string;
@@ -425,7 +425,7 @@ declare const _default: import("convex/server").SchemaDefinition<{
425
425
  scope: string;
426
426
  state?: string;
427
427
  status: "claimed";
428
- txnCookieHash?: string;
428
+ txnCookieHash: string;
429
429
  } | {
430
430
  appId: string;
431
431
  clientId: string;
@@ -446,7 +446,7 @@ declare const _default: import("convex/server").SchemaDefinition<{
446
446
  scope: string;
447
447
  state?: string;
448
448
  status: "emailSent";
449
- txnCookieHash?: string;
449
+ txnCookieHash: string;
450
450
  } | {
451
451
  appId: string;
452
452
  authTime: number;
@@ -469,7 +469,7 @@ declare const _default: import("convex/server").SchemaDefinition<{
469
469
  scope: string;
470
470
  state?: string;
471
471
  status: "completed";
472
- txnCookieHash?: string;
472
+ txnCookieHash: string;
473
473
  }, [import("convex/values").VObject<{
474
474
  appId: string;
475
475
  clientId: string;
@@ -483,7 +483,7 @@ declare const _default: import("convex/server").SchemaDefinition<{
483
483
  scope: string;
484
484
  state?: string;
485
485
  status: "pending";
486
- txnCookieHash?: string;
486
+ txnCookieHash: string;
487
487
  }, {
488
488
  requestId: import("convex/values").VString<string, "required">;
489
489
  appId: import("convex/values").VString<string, "required">;
@@ -496,11 +496,11 @@ declare const _default: import("convex/server").SchemaDefinition<{
496
496
  /** `prompt=login` or `max_age` was sent: the connector must reauthenticate or refuse. */
497
497
  freshLogin: import("convex/values").VBoolean<boolean, "required">;
498
498
  /**
499
- * SHA-256 hex of the request's transaction cookie, set with the chooser page. `/continue`, the
500
- * connector callback, and the email steps need the cookie, so only the browser that saw the
501
- * chooser can move the request on. Absent when /authorize skipped the chooser.
499
+ * SHA-256 hex of the request's transaction cookie, set by `/authorize`. `/continue`, the connector
500
+ * callback, and the email steps need the cookie, so only the browser that started the request can
501
+ * move it on.
502
502
  */
503
- txnCookieHash: import("convex/values").VString<string | undefined, "optional">;
503
+ txnCookieHash: import("convex/values").VString<string, "required">;
504
504
  createdAt: import("convex/values").VFloat64<number, "required">;
505
505
  expiresAt: import("convex/values").VFloat64<number, "required">;
506
506
  status: import("convex/values").VLiteral<"pending", "required">;
@@ -518,7 +518,7 @@ declare const _default: import("convex/server").SchemaDefinition<{
518
518
  scope: string;
519
519
  state?: string;
520
520
  status: "upstream";
521
- txnCookieHash?: string;
521
+ txnCookieHash: string;
522
522
  upstreamCodeVerifier: string;
523
523
  upstreamNonce?: string;
524
524
  upstreamStateHash: string;
@@ -534,11 +534,11 @@ declare const _default: import("convex/server").SchemaDefinition<{
534
534
  /** `prompt=login` or `max_age` was sent: the connector must reauthenticate or refuse. */
535
535
  freshLogin: import("convex/values").VBoolean<boolean, "required">;
536
536
  /**
537
- * SHA-256 hex of the request's transaction cookie, set with the chooser page. `/continue`, the
538
- * connector callback, and the email steps need the cookie, so only the browser that saw the
539
- * chooser can move the request on. Absent when /authorize skipped the chooser.
537
+ * SHA-256 hex of the request's transaction cookie, set by `/authorize`. `/continue`, the connector
538
+ * callback, and the email steps need the cookie, so only the browser that started the request can
539
+ * move it on.
540
540
  */
541
- txnCookieHash: import("convex/values").VString<string | undefined, "optional">;
541
+ txnCookieHash: import("convex/values").VString<string, "required">;
542
542
  createdAt: import("convex/values").VFloat64<number, "required">;
543
543
  expiresAt: import("convex/values").VFloat64<number, "required">;
544
544
  status: import("convex/values").VLiteral<"upstream", "required">;
@@ -560,7 +560,7 @@ declare const _default: import("convex/server").SchemaDefinition<{
560
560
  scope: string;
561
561
  state?: string;
562
562
  status: "claimed";
563
- txnCookieHash?: string;
563
+ txnCookieHash: string;
564
564
  }, {
565
565
  requestId: import("convex/values").VString<string, "required">;
566
566
  appId: import("convex/values").VString<string, "required">;
@@ -573,11 +573,11 @@ declare const _default: import("convex/server").SchemaDefinition<{
573
573
  /** `prompt=login` or `max_age` was sent: the connector must reauthenticate or refuse. */
574
574
  freshLogin: import("convex/values").VBoolean<boolean, "required">;
575
575
  /**
576
- * SHA-256 hex of the request's transaction cookie, set with the chooser page. `/continue`, the
577
- * connector callback, and the email steps need the cookie, so only the browser that saw the
578
- * chooser can move the request on. Absent when /authorize skipped the chooser.
576
+ * SHA-256 hex of the request's transaction cookie, set by `/authorize`. `/continue`, the connector
577
+ * callback, and the email steps need the cookie, so only the browser that started the request can
578
+ * move it on.
579
579
  */
580
- txnCookieHash: import("convex/values").VString<string | undefined, "optional">;
580
+ txnCookieHash: import("convex/values").VString<string, "required">;
581
581
  createdAt: import("convex/values").VFloat64<number, "required">;
582
582
  expiresAt: import("convex/values").VFloat64<number, "required">;
583
583
  status: import("convex/values").VLiteral<"claimed", "required">;
@@ -602,7 +602,7 @@ declare const _default: import("convex/server").SchemaDefinition<{
602
602
  scope: string;
603
603
  state?: string;
604
604
  status: "emailSent";
605
- txnCookieHash?: string;
605
+ txnCookieHash: string;
606
606
  }, {
607
607
  requestId: import("convex/values").VString<string, "required">;
608
608
  appId: import("convex/values").VString<string, "required">;
@@ -615,11 +615,11 @@ declare const _default: import("convex/server").SchemaDefinition<{
615
615
  /** `prompt=login` or `max_age` was sent: the connector must reauthenticate or refuse. */
616
616
  freshLogin: import("convex/values").VBoolean<boolean, "required">;
617
617
  /**
618
- * SHA-256 hex of the request's transaction cookie, set with the chooser page. `/continue`, the
619
- * connector callback, and the email steps need the cookie, so only the browser that saw the
620
- * chooser can move the request on. Absent when /authorize skipped the chooser.
618
+ * SHA-256 hex of the request's transaction cookie, set by `/authorize`. `/continue`, the connector
619
+ * callback, and the email steps need the cookie, so only the browser that started the request can
620
+ * move it on.
621
621
  */
622
- txnCookieHash: import("convex/values").VString<string | undefined, "optional">;
622
+ txnCookieHash: import("convex/values").VString<string, "required">;
623
623
  createdAt: import("convex/values").VFloat64<number, "required">;
624
624
  expiresAt: import("convex/values").VFloat64<number, "required">;
625
625
  status: import("convex/values").VLiteral<"emailSent", "required">;
@@ -654,7 +654,7 @@ declare const _default: import("convex/server").SchemaDefinition<{
654
654
  scope: string;
655
655
  state?: string;
656
656
  status: "completed";
657
- txnCookieHash?: string;
657
+ txnCookieHash: string;
658
658
  }, {
659
659
  requestId: import("convex/values").VString<string, "required">;
660
660
  appId: import("convex/values").VString<string, "required">;
@@ -667,11 +667,11 @@ declare const _default: import("convex/server").SchemaDefinition<{
667
667
  /** `prompt=login` or `max_age` was sent: the connector must reauthenticate or refuse. */
668
668
  freshLogin: import("convex/values").VBoolean<boolean, "required">;
669
669
  /**
670
- * SHA-256 hex of the request's transaction cookie, set with the chooser page. `/continue`, the
671
- * connector callback, and the email steps need the cookie, so only the browser that saw the
672
- * chooser can move the request on. Absent when /authorize skipped the chooser.
670
+ * SHA-256 hex of the request's transaction cookie, set by `/authorize`. `/continue`, the connector
671
+ * callback, and the email steps need the cookie, so only the browser that started the request can
672
+ * move it on.
673
673
  */
674
- txnCookieHash: import("convex/values").VString<string | undefined, "optional">;
674
+ txnCookieHash: import("convex/values").VString<string, "required">;
675
675
  createdAt: import("convex/values").VFloat64<number, "required">;
676
676
  expiresAt: import("convex/values").VFloat64<number, "required">;
677
677
  status: import("convex/values").VLiteral<"completed", "required">;
package/dist/component/schema.js CHANGED
@@ -31,11 +31,11 @@ const authRequestFields = {
31
31
  /** `prompt=login` or `max_age` was sent: the connector must reauthenticate or refuse. */
32
32
  freshLogin: boolean(),
33
33
  /**
34
- * SHA-256 hex of the request's transaction cookie, set with the chooser page. `/continue`, the
35
- * connector callback, and the email steps need the cookie, so only the browser that saw the
36
- * chooser can move the request on. Absent when /authorize skipped the chooser.
34
+ * SHA-256 hex of the request's transaction cookie, set by `/authorize`. `/continue`, the connector
35
+ * callback, and the email steps need the cookie, so only the browser that started the request can
36
+ * move it on.
37
37
  */
38
- txnCookieHash: optional(string()),
38
+ txnCookieHash: string(),
39
39
  createdAt: number(),
40
40
  expiresAt: number(),
41
41
  };
package/dist/component/schema.js.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/component/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC1D,OAAO,EAAE,CAAC,EAAE,MAAM,eAAe,CAAC;AAElC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;AAE/E,8FAA8F;AAC9F,MAAM,CAAC,MAAM,wBAAwB,GAAG,KAAK,CAC3C,OAAO,CAAC,oBAAoB,CAAC,EAC7B,OAAO,CAAC,qBAAqB,CAAC,CAC/B,CAAC;AAEF,0CAA0C;AAC1C,MAAM,CAAC,MAAM,eAAe,GAAG,KAAK,CAClC,OAAO,CAAC,YAAY,CAAC,EACrB,OAAO,CAAC,aAAa,CAAC,EACtB,OAAO,CAAC,SAAS,CAAC,CACnB,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,MAAM,CAAC;IACtC,SAAS,EAAE,MAAM,EAAE;IACnB,UAAU,EAAE,MAAM,EAAE;IACpB,KAAK,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;IACzB,aAAa,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC;IAClC,IAAI,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;IACxB,OAAO,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;CAC5B,CAAC,CAAC;AAEH,4FAA4F;AAC5F,MAAM,iBAAiB,GAAG;IACxB,SAAS,EAAE,MAAM,EAAE;IACnB,KAAK,EAAE,MAAM,EAAE;IACf,QAAQ,EAAE,MAAM,EAAE;IAClB,WAAW,EAAE,MAAM,EAAE;IACrB,KAAK,EAAE,MAAM,EAAE;IACf,KAAK,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;IACzB,KAAK,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;IACzB,aAAa,EAAE,MAAM,EAAE;IACvB,yFAAyF;IACzF,UAAU,EAAE,OAAO,EAAE;IACrB;;;;OAIG;IACH,aAAa,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;IACjC,SAAS,EAAE,MAAM,EAAE;IACnB,SAAS,EAAE,MAAM,EAAE;CACpB,CAAC;AAEF,MAAM,CAAC,MAAM,YAAY,GAAG,KAAK;AAC/B,iEAAiE;AACjE,MAAM,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,SAAS,CAAC,EAAE,GAAG,iBAAiB,EAAE,CAAC;AAC5D,+FAA+F;AAC/F,MAAM,CAAC;IACL,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC;IAC3B,GAAG,iBAAiB;IACpB,SAAS,EAAE,MAAM,EAAE;IACnB,iBAAiB,EAAE,MAAM,EAAE;IAC3B,oBAAoB,EAAE,MAAM,EAAE;IAC9B,aAAa,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;CAClC,CAAC;AACF,kGAAkG;AAClG,MAAM,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,SAAS,CAAC,EAAE,GAAG,iBAAiB,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,CAAC;AACjF,8FAA8F;AAC9F,MAAM,CAAC;IACL,MAAM,EAAE,OAAO,CAAC,WAAW,CAAC;IAC5B,GAAG,iBAAiB;IACpB,SAAS,EAAE,MAAM,EAAE;IACnB,KAAK,EAAE,MAAM,EAAE;IACf,aAAa,EAAE,MAAM,EAAE;IACvB,kBAAkB,EAAE,MAAM,EAAE;IAC5B,kEAAkE;IAClE,aAAa,EAAE,MAAM,EAAE;IACvB,mCAAmC;IACnC,UAAU,EAAE,MAAM,EAAE;IACpB,eAAe,EAAE,MAAM,EAAE;CAC1B,CAAC;AACF,iGAAiG;AACjG,MAAM,CAAC;IACL,MAAM,EAAE,OAAO,CAAC,WAAW,CAAC;IAC5B,GAAG,iBAAiB;IACpB,QAAQ,EAAE,iBAAiB;IAC3B,QAAQ,EAAE,MAAM,EAAE;CACnB,CAAC,CACH,CAAC;AAEF,eAAe,YAAY,CAAC;IAC1B,IAAI,EAAE,WAAW,CAAC;QAChB,KAAK,EAAE,MAAM,EAAE;QACf,IAAI,EAAE,MAAM,EAAE;QACd,UAAU,EAAE,OAAO,EAAE;QACrB,yEAAyE;QACzE,oBAAoB,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QAC/C,SAAS,EAAE,MAAM,EAAE;KACpB,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,CAAC;IAEhC,OAAO,EAAE,WAAW,CAAC;QACnB,QAAQ,EAAE,MAAM,EAAE;QAClB,KAAK,EAAE,MAAM,EAAE;QACf,UAAU,EAAE,MAAM,EAAE;QACpB,uBAAuB,EAAE,wBAAwB;QACjD,WAAW,EAAE,MAAM,EAAE;QACrB,cAAc,EAAE,eAAe;QAC/B,UAAU,EAAE,MAAM,EAAE;QACpB,eAAe,EAAE,MAAM,EAAE;QACzB,SAAS,EAAE,MAAM,EAAE;QACnB,YAAY,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;KACjC,CAAC;SACC,KAAK,CAAC,cAAc,EAAE,CAAC,UAAU,CAAC,CAAC;SACnC,KAAK,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,CAAC;SAC7B,KAAK,CAAC,oBAAoB,EAAE,CAAC,gBAAgB,CAAC,CAAC;IAElD,YAAY,EAAE,WAAW,CAAC,YAAY,CAAC;SACpC,KAAK,CAAC,eAAe,EAAE,CAAC,WAAW,CAAC,CAAC;SACrC,KAAK,CAAC,wBAAwB,EAAE,CAAC,mBAAmB,CAAC,CAAC;SACtD,KAAK,CAAC,eAAe,EAAE,CAAC,WAAW,CAAC,CAAC;IAExC,kBAAkB,EAAE,WAAW,CAAC;QAC9B,QAAQ,EAAE,MAAM,EAAE;QAClB,aAAa,EAAE,CAAC,CAAC,EAAE,CAAC,cAAc,CAAC;QACnC,QAAQ,EAAE,MAAM,EAAE;QAClB,SAAS,EAAE,MAAM,EAAE;QACnB,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;KAC3B,CAAC;SACC,KAAK,CAAC,cAAc,EAAE,CAAC,UAAU,CAAC,CAAC;SACnC,KAAK,CAAC,eAAe,EAAE,CAAC,WAAW,CAAC,CAAC;IAExC,gGAAgG;IAChG,UAAU,EAAE,WAAW,CAAC;QACtB,4CAA4C;QAC5C,SAAS,EAAE,MAAM,EAAE;QACnB,EAAE,EAAE,MAAM,EAAE;KACb,CAAC;SACC,KAAK,CAAC,sBAAsB,EAAE,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;SAClD,KAAK,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC;IAEzB,OAAO,EAAE,WAAW,CAAC;QACnB,KAAK,EAAE,MAAM,EAAE;QACf,QAAQ,EAAE,MAAM,EAAE;QAClB,SAAS,EAAE,MAAM,EAAE;QACnB,GAAG,EAAE,MAAM,EAAE;QACb,EAAE,EAAE,MAAM,EAAE;KACb,CAAC;SACC,KAAK,CAAC,kBAAkB,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;SAC1C,KAAK,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC;CAC1B,CAAC,CAAC"}
1
+ {"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/component/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC1D,OAAO,EAAE,CAAC,EAAE,MAAM,eAAe,CAAC;AAElC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;AAE/E,8FAA8F;AAC9F,MAAM,CAAC,MAAM,wBAAwB,GAAG,KAAK,CAC3C,OAAO,CAAC,oBAAoB,CAAC,EAC7B,OAAO,CAAC,qBAAqB,CAAC,CAC/B,CAAC;AAEF,0CAA0C;AAC1C,MAAM,CAAC,MAAM,eAAe,GAAG,KAAK,CAClC,OAAO,CAAC,YAAY,CAAC,EACrB,OAAO,CAAC,aAAa,CAAC,EACtB,OAAO,CAAC,SAAS,CAAC,CACnB,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,MAAM,CAAC;IACtC,SAAS,EAAE,MAAM,EAAE;IACnB,UAAU,EAAE,MAAM,EAAE;IACpB,KAAK,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;IACzB,aAAa,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC;IAClC,IAAI,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;IACxB,OAAO,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;CAC5B,CAAC,CAAC;AAEH,4FAA4F;AAC5F,MAAM,iBAAiB,GAAG;IACxB,SAAS,EAAE,MAAM,EAAE;IACnB,KAAK,EAAE,MAAM,EAAE;IACf,QAAQ,EAAE,MAAM,EAAE;IAClB,WAAW,EAAE,MAAM,EAAE;IACrB,KAAK,EAAE,MAAM,EAAE;IACf,KAAK,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;IACzB,KAAK,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;IACzB,aAAa,EAAE,MAAM,EAAE;IACvB,yFAAyF;IACzF,UAAU,EAAE,OAAO,EAAE;IACrB;;;;OAIG;IACH,aAAa,EAAE,MAAM,EAAE;IACvB,SAAS,EAAE,MAAM,EAAE;IACnB,SAAS,EAAE,MAAM,EAAE;CACpB,CAAC;AAEF,MAAM,CAAC,MAAM,YAAY,GAAG,KAAK;AAC/B,iEAAiE;AACjE,MAAM,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,SAAS,CAAC,EAAE,GAAG,iBAAiB,EAAE,CAAC;AAC5D,+FAA+F;AAC/F,MAAM,CAAC;IACL,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC;IAC3B,GAAG,iBAAiB;IACpB,SAAS,EAAE,MAAM,EAAE;IACnB,iBAAiB,EAAE,MAAM,EAAE;IAC3B,oBAAoB,EAAE,MAAM,EAAE;IAC9B,aAAa,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;CAClC,CAAC;AACF,kGAAkG;AAClG,MAAM,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,SAAS,CAAC,EAAE,GAAG,iBAAiB,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,CAAC;AACjF,8FAA8F;AAC9F,MAAM,CAAC;IACL,MAAM,EAAE,OAAO,CAAC,WAAW,CAAC;IAC5B,GAAG,iBAAiB;IACpB,SAAS,EAAE,MAAM,EAAE;IACnB,KAAK,EAAE,MAAM,EAAE;IACf,aAAa,EAAE,MAAM,EAAE;IACvB,kBAAkB,EAAE,MAAM,EAAE;IAC5B,kEAAkE;IAClE,aAAa,EAAE,MAAM,EAAE;IACvB,mCAAmC;IACnC,UAAU,EAAE,MAAM,EAAE;IACpB,eAAe,EAAE,MAAM,EAAE;CAC1B,CAAC;AACF,iGAAiG;AACjG,MAAM,CAAC;IACL,MAAM,EAAE,OAAO,CAAC,WAAW,CAAC;IAC5B,GAAG,iBAAiB;IACpB,QAAQ,EAAE,iBAAiB;IAC3B,QAAQ,EAAE,MAAM,EAAE;CACnB,CAAC,CACH,CAAC;AAEF,eAAe,YAAY,CAAC;IAC1B,IAAI,EAAE,WAAW,CAAC;QAChB,KAAK,EAAE,MAAM,EAAE;QACf,IAAI,EAAE,MAAM,EAAE;QACd,UAAU,EAAE,OAAO,EAAE;QACrB,yEAAyE;QACzE,oBAAoB,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QAC/C,SAAS,EAAE,MAAM,EAAE;KACpB,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,CAAC;IAEhC,OAAO,EAAE,WAAW,CAAC;QACnB,QAAQ,EAAE,MAAM,EAAE;QAClB,KAAK,EAAE,MAAM,EAAE;QACf,UAAU,EAAE,MAAM,EAAE;QACpB,uBAAuB,EAAE,wBAAwB;QACjD,WAAW,EAAE,MAAM,EAAE;QACrB,cAAc,EAAE,eAAe;QAC/B,UAAU,EAAE,MAAM,EAAE;QACpB,eAAe,EAAE,MAAM,EAAE;QACzB,SAAS,EAAE,MAAM,EAAE;QACnB,YAAY,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;KACjC,CAAC;SACC,KAAK,CAAC,cAAc,EAAE,CAAC,UAAU,CAAC,CAAC;SACnC,KAAK,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,CAAC;SAC7B,KAAK,CAAC,oBAAoB,EAAE,CAAC,gBAAgB,CAAC,CAAC;IAElD,YAAY,EAAE,WAAW,CAAC,YAAY,CAAC;SACpC,KAAK,CAAC,eAAe,EAAE,CAAC,WAAW,CAAC,CAAC;SACrC,KAAK,CAAC,wBAAwB,EAAE,CAAC,mBAAmB,CAAC,CAAC;SACtD,KAAK,CAAC,eAAe,EAAE,CAAC,WAAW,CAAC,CAAC;IAExC,kBAAkB,EAAE,WAAW,CAAC;QAC9B,QAAQ,EAAE,MAAM,EAAE;QAClB,aAAa,EAAE,CAAC,CAAC,EAAE,CAAC,cAAc,CAAC;QACnC,QAAQ,EAAE,MAAM,EAAE;QAClB,SAAS,EAAE,MAAM,EAAE;QACnB,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;KAC3B,CAAC;SACC,KAAK,CAAC,cAAc,EAAE,CAAC,UAAU,CAAC,CAAC;SACnC,KAAK,CAAC,eAAe,EAAE,CAAC,WAAW,CAAC,CAAC;IAExC,gGAAgG;IAChG,UAAU,EAAE,WAAW,CAAC;QACtB,4CAA4C;QAC5C,SAAS,EAAE,MAAM,EAAE;QACnB,EAAE,EAAE,MAAM,EAAE;KACb,CAAC;SACC,KAAK,CAAC,sBAAsB,EAAE,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;SAClD,KAAK,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC;IAEzB,OAAO,EAAE,WAAW,CAAC;QACnB,KAAK,EAAE,MAAM,EAAE;QACf,QAAQ,EAAE,MAAM,EAAE;QAClB,SAAS,EAAE,MAAM,EAAE;QACnB,GAAG,EAAE,MAAM,EAAE;QACb,EAAE,EAAE,MAAM,EAAE;KACb,CAAC;SACC,KAAK,CAAC,kBAAkB,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;SAC1C,KAAK,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC;CAC1B,CAAC,CAAC"}
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@samebase/identity-broker",
3
- "version": "0.8.0",
3
+ "version": "0.9.0",
4
4
  "description": "An OpenID Provider for Convex that holds a team's upstream sign-in connections once and keeps no user accounts.",
5
5
  "license": "Apache-2.0",
6
6
  "repository": {
package/dist/component/crypto.d.ts DELETED
@@ -1,2 +0,0 @@
1
- /** SHA-256 of `input`, base64url without padding: the PKCE S256 transform of RFC 7636. */
2
- export declare function sha256Base64Url(input: string): Promise<string>;
package/dist/component/crypto.js DELETED
@@ -1,9 +0,0 @@
1
- /** SHA-256 of `input`, base64url without padding: the PKCE S256 transform of RFC 7636. */
2
- export async function sha256Base64Url(input) {
3
- const digest = await crypto.subtle.digest("SHA-256", new TextEncoder().encode(input));
4
- return btoa(String.fromCharCode(...new Uint8Array(digest)))
5
- .replace(/\+/g, "-")
6
- .replace(/\//g, "_")
7
- .replace(/=+$/, "");
8
- }
9
- //# sourceMappingURL=crypto.js.map
package/dist/component/crypto.js.map DELETED
@@ -1 +0,0 @@
1
- {"version":3,"file":"crypto.js","sourceRoot":"","sources":["../../src/component/crypto.ts"],"names":[],"mappings":"AAAA,0FAA0F;AAC1F,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,KAAa;IACjD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACtF,OAAO,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;SACxD,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AACxB,CAAC"}