@scalar/api-client 2.38.4 → 2.39.1

package/dist/views/Request/libs/oauth2.d.ts

@@ -1,5 +1,5 @@
 import type { Oauth2Flow, Server } from '@scalar/oas-utils/entities/spec';
-import type { ErrorResponse } from '../../../libs/errors';
+import type { ErrorResponse } from '../../../libs/errors.js';
 /** Oauth2 security schemes which are not implicit */
 type NonImplicitFlow = Exclude<Oauth2Flow, {
     type: 'implicit';

package/dist/views/Request/libs/oauth2.js

@@ -0,0 +1,178 @@
+import { encode, fromUint8Array } from "js-base64";
+import { shouldUseProxy } from "@scalar/helpers/url/redirect-to-proxy";
+import { replaceVariables } from "@scalar/helpers/regex/replace-variables";
+import { isRelativePath } from "@scalar/helpers/url/is-relative-path";
+import { makeUrlAbsolute } from "@scalar/helpers/url/make-url-absolute";
+//#region src/views/Request/libs/oauth2.ts
+/**
+* Interpolates server URL template variables (e.g. `https://{env}.example.com`)
+* using the user-set `value` when available, falling back to the OpenAPI `default`.
+* This is needed so OAuth flows that use the server URL as a base resolve correctly
+* when the spec defines server variables.
+*/
+var getInterpolatedServerUrl = (activeServer) => {
+	if (!activeServer?.url) return void 0;
+	const serverVariables = Object.entries(activeServer.variables ?? {}).reduce((acc, [name, variable]) => {
+		const value = variable.value || variable.default;
+		if (value) acc[name] = value;
+		return acc;
+	}, {});
+	return replaceVariables(activeServer.url, serverVariables);
+};
+var getActiveServerBase = (activeServer) => {
+	const serverUrl = getInterpolatedServerUrl(activeServer);
+	if (!serverUrl) return {};
+	if (isRelativePath(serverUrl)) return typeof window === "undefined" ? {} : { basePath: serverUrl };
+	return { baseUrl: serverUrl };
+};
+/**
+* Generates a random string for PKCE code verifier
+*
+* @see https://www.rfc-editor.org/rfc/rfc7636#page-8
+*/
+var generateCodeVerifier = () => {
+	const buffer = new Uint8Array(32);
+	crypto.getRandomValues(buffer);
+	return fromUint8Array(buffer, true);
+};
+/**
+* Creates a code challenge from the code verifier
+*/
+var generateCodeChallenge = async (verifier, encoding) => {
+	if (encoding === "plain") return verifier;
+	if (typeof crypto?.subtle?.digest !== "function") {
+		console.warn("SHA-256 is only supported when using https, using a plain text code challenge instead.");
+		return verifier;
+	}
+	const data = new TextEncoder().encode(verifier);
+	const digest = await crypto.subtle.digest("SHA-256", data);
+	return fromUint8Array(new Uint8Array(digest), true);
+};
+/**
+* Authorize oauth2 flow
+*
+* @returns the accessToken
+*/
+var authorizeOauth2 = async (flow, activeServer, proxyUrl) => {
+	try {
+		if (!flow) return [/* @__PURE__ */ new Error("Flow not found"), null];
+		const scopes = flow.selectedScopes.join(" ");
+		if (flow.type === "clientCredentials" || flow.type === "password") return authorizeServers(flow, scopes, { proxyUrl }, activeServer);
+		const state = (Math.random() + 1).toString(36).substring(2, 10);
+		const authorizationUrl = makeUrlAbsolute(flow.authorizationUrl, getActiveServerBase(activeServer));
+		const url = new URL(authorizationUrl);
+		/** Special PKCE state */
+		let pkce = null;
+		if (flow.type === "implicit") url.searchParams.set("response_type", "token");
+		else if (flow.type === "authorizationCode") {
+			url.searchParams.set("response_type", "code");
+			if (flow["x-usePkce"] !== "no") {
+				const codeVerifier = generateCodeVerifier();
+				const codeChallenge = await generateCodeChallenge(codeVerifier, flow["x-usePkce"]);
+				pkce = {
+					codeVerifier,
+					codeChallenge,
+					codeChallengeMethod: flow["x-usePkce"] === "SHA-256" ? "S256" : "plain"
+				};
+				url.searchParams.set("code_challenge", codeChallenge);
+				url.searchParams.set("code_challenge_method", pkce.codeChallengeMethod);
+			}
+		}
+		if (flow["x-scalar-redirect-uri"].startsWith("/")) {
+			const baseUrl = getInterpolatedServerUrl(activeServer) || window.location.origin + window.location.pathname;
+			const redirectUri = makeUrlAbsolute(flow["x-scalar-redirect-uri"], { baseUrl });
+			url.searchParams.set("redirect_uri", redirectUri);
+		} else url.searchParams.set("redirect_uri", flow["x-scalar-redirect-uri"]);
+		if (flow["x-scalar-security-query"]) Object.keys(flow["x-scalar-security-query"]).forEach((key) => {
+			const value = flow["x-scalar-security-query"]?.[key];
+			if (!value) return;
+			url.searchParams.set(key, value);
+		});
+		url.searchParams.set("client_id", flow["x-scalar-client-id"]);
+		url.searchParams.set("state", state);
+		if (scopes) url.searchParams.set("scope", scopes);
+		const authWindow = window.open(url, "openAuth2Window", "left=100,top=100,width=800,height=600");
+		if (authWindow) return new Promise((resolve) => {
+			const checkWindowClosed = setInterval(() => {
+				let accessToken = null;
+				let code = null;
+				let error = null;
+				let errorDescription = null;
+				try {
+					const urlParams = new URL(authWindow.location.href).searchParams;
+					const tokenName = flow["x-tokenName"] || "access_token";
+					accessToken = urlParams.get(tokenName);
+					code = urlParams.get("code");
+					error = urlParams.get("error");
+					errorDescription = urlParams.get("error_description");
+					const hashParams = new URLSearchParams(authWindow.location.href.split("#")[1]);
+					accessToken ||= hashParams.get(tokenName);
+					code ||= hashParams.get("code");
+					error ||= hashParams.get("error");
+					errorDescription ||= hashParams.get("error_description");
+				} catch (_e) {}
+				if (authWindow.closed || accessToken || code || error) {
+					clearInterval(checkWindowClosed);
+					authWindow.close();
+					if (error) resolve([/* @__PURE__ */ new Error(`OAuth error: ${error}${errorDescription ? ` (${errorDescription})` : ""}`), null]);
+					else if (accessToken) if (authWindow.location.href.match(/state=([^&]*)/)?.[1] === state) resolve([null, accessToken]);
+					else resolve([/* @__PURE__ */ new Error("State mismatch"), null]);
+					else if (code) if (new URL(authWindow.location.href).searchParams.get("state") === state) authorizeServers(flow, scopes, {
+						code,
+						pkce,
+						proxyUrl
+					}, activeServer).then(resolve);
+					else resolve([/* @__PURE__ */ new Error("State mismatch"), null]);
+					else {
+						clearInterval(checkWindowClosed);
+						resolve([/* @__PURE__ */ new Error("Window was closed without granting authorization"), null]);
+					}
+				}
+			}, 200);
+		});
+		return [/* @__PURE__ */ new Error("Failed to open auth window"), null];
+	} catch (_) {
+		return [/* @__PURE__ */ new Error("Failed to authorize oauth2 flow"), null];
+	}
+};
+/**
+* Makes the BE authorization call to grab the token server to server
+* Used for clientCredentials and authorizationCode
+*/
+var authorizeServers = async (flow, scopes, { code, pkce, proxyUrl } = {}, activeServer) => {
+	if (!flow) return [/* @__PURE__ */ new Error("OAuth2 flow was not defined"), null];
+	const formData = new URLSearchParams();
+	formData.set("client_id", flow["x-scalar-client-id"]);
+	if (scopes && (flow.type === "clientCredentials" || flow.type === "password")) formData.set("scope", scopes);
+	if (flow.clientSecret && (!flow["x-scalar-credentials-location"] || flow["x-scalar-credentials-location"] === "body")) formData.set("client_secret", flow.clientSecret);
+	if ("x-scalar-redirect-uri" in flow && flow["x-scalar-redirect-uri"]) formData.set("redirect_uri", flow["x-scalar-redirect-uri"]);
+	if (code) {
+		formData.set("code", code);
+		formData.set("grant_type", "authorization_code");
+		if (pkce) formData.set("code_verifier", pkce.codeVerifier);
+	} else if (flow.type === "password") {
+		formData.set("grant_type", "password");
+		formData.set("username", flow.username);
+		formData.set("password", flow.password);
+	} else formData.set("grant_type", "client_credentials");
+	if (flow["x-scalar-security-body"]) Object.entries(flow["x-scalar-security-body"]).forEach(([key, value]) => {
+		if (value) formData.set(key, value);
+	});
+	try {
+		const headers = { "Content-Type": "application/x-www-form-urlencoded" };
+		if (flow.clientSecret && (!flow["x-scalar-credentials-location"] || flow["x-scalar-credentials-location"] === "header")) headers.Authorization = `Basic ${encode(`${flow["x-scalar-client-id"]}:${flow.clientSecret}`)}`;
+		const tokenUrl = makeUrlAbsolute(flow.tokenUrl, getActiveServerBase(activeServer));
+		const url = shouldUseProxy(proxyUrl, tokenUrl) ? `${proxyUrl}?${new URLSearchParams([["scalar_url", tokenUrl]]).toString()}` : tokenUrl;
+		return [null, (await (await fetch(url, {
+			method: "POST",
+			headers,
+			body: formData
+		})).json())[flow["x-tokenName"] || "access_token"]];
+	} catch {
+		return [/* @__PURE__ */ new Error("Failed to get an access token. Please check your credentials."), null];
+	}
+};
+//#endregion
+export { authorizeOauth2, authorizeServers, generateCodeChallenge };
+
+//# sourceMappingURL=oauth2.js.map

package/dist/views/Request/libs/oauth2.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth2.js","names":[],"sources":["../../../../src/views/Request/libs/oauth2.ts"],"sourcesContent":["import { replaceVariables } from '@scalar/helpers/regex/replace-variables'\nimport { isRelativePath } from '@scalar/helpers/url/is-relative-path'\nimport { makeUrlAbsolute } from '@scalar/helpers/url/make-url-absolute'\nimport { shouldUseProxy } from '@scalar/helpers/url/redirect-to-proxy'\nimport type { Oauth2Flow, Server } from '@scalar/oas-utils/entities/spec'\nimport { encode, fromUint8Array } from 'js-base64'\n\nimport type { ErrorResponse } from '@/libs/errors'\n\n/** Oauth2 security schemes which are not implicit */\ntype NonImplicitFlow = Exclude<Oauth2Flow, { type: 'implicit' }>\n\ntype PKCEState = {\n  codeVerifier: string\n  codeChallenge: string\n  codeChallengeMethod: string\n}\n\n/**\n * Interpolates server URL template variables (e.g. `https://{env}.example.com`)\n * using the user-set `value` when available, falling back to the OpenAPI `default`.\n * This is needed so OAuth flows that use the server URL as a base resolve correctly\n * when the spec defines server variables.\n */\nexport const getInterpolatedServerUrl = (activeServer?: Server): string | undefined => {\n  if (!activeServer?.url) return undefined\n\n  const serverVariables = Object.entries(activeServer.variables ?? {}).reduce(\n    (acc, [name, variable]) => {\n      // User-set value takes priority over the OpenAPI default\n      const value = variable.value || variable.default\n      if (value) acc[name] = value\n      return acc\n    },\n    {} as Record<string, string>,\n  )\n\n  return replaceVariables(activeServer.url, serverVariables)\n}\n\nconst getActiveServerBase = (activeServer?: Server) => {\n  const serverUrl = getInterpolatedServerUrl(activeServer)\n\n  if (!serverUrl) {\n    return {}\n  }\n\n  if (isRelativePath(serverUrl)) {\n    return typeof window === 'undefined' ? {} : { basePath: serverUrl }\n  }\n\n  return { baseUrl: serverUrl }\n}\n\n/**\n * Generates a random string for PKCE code verifier\n *\n * @see https://www.rfc-editor.org/rfc/rfc7636#page-8\n */\nconst generateCodeVerifier = (): string => {\n  // Generate 32 random bytes\n  const buffer = new Uint8Array(32)\n  crypto.getRandomValues(buffer)\n\n  // Base64URL encode the bytes\n  return fromUint8Array(buffer, true)\n}\n\n/**\n * Creates a code challenge from the code verifier\n */\nexport const generateCodeChallenge = async (verifier: string, encoding: 'SHA-256' | 'plain'): Promise<string> => {\n  if (encoding === 'plain') {\n    return verifier\n  }\n\n  // If crypto.subtle.digest is not a function, we cannot use SHA-256\n  if (typeof crypto?.subtle?.digest !== 'function') {\n    console.warn('SHA-256 is only supported when using https, using a plain text code challenge instead.')\n    return verifier\n  }\n\n  // ASCII encoding is just taking the lower 8 bits of each character\n  const encoder = new TextEncoder()\n  const data = encoder.encode(verifier)\n  const digest = await crypto.subtle.digest('SHA-256', data)\n\n  // Base64URL encode the bytes\n  return fromUint8Array(new Uint8Array(digest), true)\n}\n\n/**\n * Authorize oauth2 flow\n *\n * @returns the accessToken\n */\nexport const authorizeOauth2 = async (\n  flow: Oauth2Flow,\n  /** We use the active server to set a base for relative redirect uris */\n  activeServer: Server,\n  /** If we want to use the proxy */\n  proxyUrl?: string,\n): Promise<ErrorResponse<string>> => {\n  try {\n    if (!flow) {\n      return [new Error('Flow not found'), null]\n    }\n\n    const scopes = flow.selectedScopes.join(' ')\n\n    // Client Credentials or Password Flow\n    if (flow.type === 'clientCredentials' || flow.type === 'password') {\n      return authorizeServers(\n        flow,\n        scopes,\n        {\n          proxyUrl,\n        },\n        activeServer,\n      )\n    }\n\n    // OAuth2 flows with a login popup\n\n    // Generate a random state string with the length of 8 characters\n    const state = (Math.random() + 1).toString(36).substring(2, 10)\n    const authorizationUrl = makeUrlAbsolute(flow.authorizationUrl, getActiveServerBase(activeServer))\n    const url = new URL(authorizationUrl)\n\n    /** Special PKCE state */\n    let pkce: PKCEState | null = null\n\n    // Params unique to the flows\n    if (flow.type === 'implicit') {\n      url.searchParams.set('response_type', 'token')\n    }\n\n    // Authorization Code Flow\n    else if (flow.type === 'authorizationCode') {\n      url.searchParams.set('response_type', 'code')\n\n      // PKCE\n      if (flow['x-usePkce'] !== 'no') {\n        const codeVerifier = generateCodeVerifier()\n        const codeChallenge = await generateCodeChallenge(codeVerifier, flow['x-usePkce'])\n\n        // Set state for later verification\n        pkce = {\n          codeVerifier,\n          codeChallenge,\n          codeChallengeMethod: flow['x-usePkce'] === 'SHA-256' ? 'S256' : 'plain',\n        }\n\n        // Set the code challenge and method on the url\n        url.searchParams.set('code_challenge', codeChallenge)\n        url.searchParams.set('code_challenge_method', pkce.codeChallengeMethod)\n      }\n    }\n\n    // Handle relative redirect uris\n    if (flow['x-scalar-redirect-uri'].startsWith('/')) {\n      const baseUrl = getInterpolatedServerUrl(activeServer) || window.location.origin + window.location.pathname\n      const redirectUri = makeUrlAbsolute(flow['x-scalar-redirect-uri'], { baseUrl: baseUrl })\n\n      url.searchParams.set('redirect_uri', redirectUri)\n    } else {\n      url.searchParams.set('redirect_uri', flow['x-scalar-redirect-uri'])\n    }\n\n    if (flow['x-scalar-security-query']) {\n      Object.keys(flow['x-scalar-security-query']).forEach((key: string): void => {\n        const value = flow['x-scalar-security-query']?.[key]\n        if (!value) {\n          return\n        }\n        url.searchParams.set(key, value)\n      })\n    }\n\n    // Common to all flows\n    url.searchParams.set('client_id', flow['x-scalar-client-id'])\n    url.searchParams.set('state', state)\n    if (scopes) {\n      url.searchParams.set('scope', scopes)\n    }\n\n    const windowFeatures = 'left=100,top=100,width=800,height=600'\n    const authWindow = window.open(url, 'openAuth2Window', windowFeatures)\n\n    // Open up a window and poll until closed or we have the data we want\n    if (authWindow) {\n      // We need to return a promise here due to the setInterval\n      return new Promise<ErrorResponse<string>>((resolve) => {\n        const checkWindowClosed = setInterval(() => {\n          let accessToken: string | null = null\n          let code: string | null = null\n          let error: string | null = null\n          let errorDescription: string | null = null\n\n          try {\n            const urlParams = new URL(authWindow.location.href).searchParams\n            const tokenName = flow['x-tokenName'] || 'access_token'\n            accessToken = urlParams.get(tokenName)\n            code = urlParams.get('code')\n\n            error = urlParams.get('error')\n            errorDescription = urlParams.get('error_description')\n\n            // We may get the properties in a hash\n            const hashParams = new URLSearchParams(authWindow.location.href.split('#')[1])\n            accessToken ||= hashParams.get(tokenName)\n            code ||= hashParams.get('code')\n            error ||= hashParams.get('error')\n            errorDescription ||= hashParams.get('error_description')\n          } catch (_e) {\n            // Ignore CORS error from popup\n          }\n\n          // The window has closed OR we have what we are looking for so we stop polling\n          if (authWindow.closed || accessToken || code || error) {\n            clearInterval(checkWindowClosed)\n            authWindow.close()\n\n            if (error) {\n              resolve([new Error(`OAuth error: ${error}${errorDescription ? ` (${errorDescription})` : ''}`), null])\n            }\n\n            // Implicit Flow\n            else if (accessToken) {\n              // State is a hash fragment and cannot be found through search params\n              const _state = authWindow.location.href.match(/state=([^&]*)/)?.[1]\n\n              if (_state === state) {\n                resolve([null, accessToken])\n              } else {\n                resolve([new Error('State mismatch'), null])\n              }\n            }\n\n            // Authorization Code Server Flow\n            else if (code) {\n              const _state = new URL(authWindow.location.href).searchParams.get('state')\n\n              if (_state === state) {\n                // biome-ignore lint/nursery/noFloatingPromises: output of authorizeServers must be returned\n                authorizeServers(\n                  flow as NonImplicitFlow,\n                  scopes,\n                  {\n                    code,\n                    pkce,\n                    proxyUrl,\n                  },\n                  activeServer,\n                ).then(resolve)\n              } else {\n                resolve([new Error('State mismatch'), null])\n              }\n            }\n            // User closed window without authorizing\n            else {\n              clearInterval(checkWindowClosed)\n              resolve([new Error('Window was closed without granting authorization'), null])\n            }\n          }\n        }, 200)\n      })\n    }\n    return [new Error('Failed to open auth window'), null]\n  } catch (_) {\n    return [new Error('Failed to authorize oauth2 flow'), null]\n  }\n}\n\n/**\n * Makes the BE authorization call to grab the token server to server\n * Used for clientCredentials and authorizationCode\n */\nexport const authorizeServers = async (\n  flow: NonImplicitFlow,\n  scopes: string,\n  {\n    code,\n    pkce,\n    proxyUrl,\n  }: {\n    code?: string\n    pkce?: PKCEState | null\n    proxyUrl?: string | undefined\n  } = {},\n  activeServer: Server | undefined,\n): Promise<ErrorResponse<string>> => {\n  if (!flow) {\n    return [new Error('OAuth2 flow was not defined'), null]\n  }\n\n  const formData = new URLSearchParams()\n  formData.set('client_id', flow['x-scalar-client-id'])\n\n  // Only client credentials and password flows support scopes in the token request\n  if (scopes && (flow.type === 'clientCredentials' || flow.type === 'password')) {\n    formData.set('scope', scopes)\n  }\n\n  // Only add the secret if a credentials location is not specified (backwards compatibility) or is set to body\n  const shouldAddSecretToBody =\n    flow.clientSecret && (!flow['x-scalar-credentials-location'] || flow['x-scalar-credentials-location'] === 'body')\n\n  if (shouldAddSecretToBody) {\n    formData.set('client_secret', flow.clientSecret)\n  }\n  if ('x-scalar-redirect-uri' in flow && flow['x-scalar-redirect-uri']) {\n    formData.set('redirect_uri', flow['x-scalar-redirect-uri'])\n  }\n\n  // Authorization Code\n  if (code) {\n    formData.set('code', code)\n    formData.set('grant_type', 'authorization_code')\n\n    // PKCE\n    if (pkce) {\n      formData.set('code_verifier', pkce.codeVerifier)\n    }\n  }\n  // Password\n  else if (flow.type === 'password') {\n    formData.set('grant_type', 'password')\n    formData.set('username', flow.username)\n    formData.set('password', flow.password)\n  }\n  // Client Credentials\n  else {\n    formData.set('grant_type', 'client_credentials')\n  }\n\n  // Additional request body parameters\n  if (flow['x-scalar-security-body']) {\n    Object.entries(flow['x-scalar-security-body']).forEach(([key, value]) => {\n      if (value) {\n        formData.set(key, value)\n      }\n    })\n  }\n\n  try {\n    const headers: Record<string, string> = {\n      'Content-Type': 'application/x-www-form-urlencoded',\n    }\n\n    // Only add the secret if a credentials location is not specified (backwards compatibility) or is set to header\n    const shouldAddSecretToHeader =\n      flow.clientSecret &&\n      (!flow['x-scalar-credentials-location'] || flow['x-scalar-credentials-location'] === 'header')\n\n    // Add client id + secret to headers\n    if (shouldAddSecretToHeader) {\n      headers.Authorization = `Basic ${encode(`${flow['x-scalar-client-id']}:${flow.clientSecret}`)}`\n    }\n\n    // Check if we should use the proxy\n    const tokenUrl = makeUrlAbsolute(flow.tokenUrl, getActiveServerBase(activeServer))\n    const url = shouldUseProxy(proxyUrl, tokenUrl)\n      ? `${proxyUrl}?${new URLSearchParams([['scalar_url', tokenUrl]]).toString()}`\n      : tokenUrl\n\n    // Make the call\n    const resp = await fetch(url, {\n      method: 'POST',\n      headers,\n      body: formData,\n    })\n    const responseData = await resp.json()\n\n    // Use custom token name if specified, otherwise default to access_token\n    const tokenName = flow['x-tokenName'] || 'access_token'\n    const accessToken = responseData[tokenName]\n\n    return [null, accessToken]\n  } catch {\n    return [new Error('Failed to get an access token. Please check your credentials.'), null]\n  }\n}\n"],"mappings":";;;;;;;;;;;;AAwBA,IAAa,4BAA4B,iBAA8C;AACrF,KAAI,CAAC,cAAc,IAAK,QAAO,KAAA;CAE/B,MAAM,kBAAkB,OAAO,QAAQ,aAAa,aAAa,EAAE,CAAC,CAAC,QAClE,KAAK,CAAC,MAAM,cAAc;EAEzB,MAAM,QAAQ,SAAS,SAAS,SAAS;AACzC,MAAI,MAAO,KAAI,QAAQ;AACvB,SAAO;IAET,EAAE,CACH;AAED,QAAO,iBAAiB,aAAa,KAAK,gBAAgB;;AAG5D,IAAM,uBAAuB,iBAA0B;CACrD,MAAM,YAAY,yBAAyB,aAAa;AAExD,KAAI,CAAC,UACH,QAAO,EAAE;AAGX,KAAI,eAAe,UAAU,CAC3B,QAAO,OAAO,WAAW,cAAc,EAAE,GAAG,EAAE,UAAU,WAAW;AAGrE,QAAO,EAAE,SAAS,WAAW;;;;;;;AAQ/B,IAAM,6BAAqC;CAEzC,MAAM,SAAS,IAAI,WAAW,GAAG;AACjC,QAAO,gBAAgB,OAAO;AAG9B,QAAO,eAAe,QAAQ,KAAK;;;;;AAMrC,IAAa,wBAAwB,OAAO,UAAkB,aAAmD;AAC/G,KAAI,aAAa,QACf,QAAO;AAIT,KAAI,OAAO,QAAQ,QAAQ,WAAW,YAAY;AAChD,UAAQ,KAAK,yFAAyF;AACtG,SAAO;;CAKT,MAAM,OADU,IAAI,aAAa,CACZ,OAAO,SAAS;CACrC,MAAM,SAAS,MAAM,OAAO,OAAO,OAAO,WAAW,KAAK;AAG1D,QAAO,eAAe,IAAI,WAAW,OAAO,EAAE,KAAK;;;;;;;AAQrD,IAAa,kBAAkB,OAC7B,MAEA,cAEA,aACmC;AACnC,KAAI;AACF,MAAI,CAAC,KACH,QAAO,iBAAC,IAAI,MAAM,iBAAiB,EAAE,KAAK;EAG5C,MAAM,SAAS,KAAK,eAAe,KAAK,IAAI;AAG5C,MAAI,KAAK,SAAS,uBAAuB,KAAK,SAAS,WACrD,QAAO,iBACL,MACA,QACA,EACE,UACD,EACD,aACD;EAMH,MAAM,SAAS,KAAK,QAAQ,GAAG,GAAG,SAAS,GAAG,CAAC,UAAU,GAAG,GAAG;EAC/D,MAAM,mBAAmB,gBAAgB,KAAK,kBAAkB,oBAAoB,aAAa,CAAC;EAClG,MAAM,MAAM,IAAI,IAAI,iBAAiB;;EAGrC,IAAI,OAAyB;AAG7B,MAAI,KAAK,SAAS,WAChB,KAAI,aAAa,IAAI,iBAAiB,QAAQ;WAIvC,KAAK,SAAS,qBAAqB;AAC1C,OAAI,aAAa,IAAI,iBAAiB,OAAO;AAG7C,OAAI,KAAK,iBAAiB,MAAM;IAC9B,MAAM,eAAe,sBAAsB;IAC3C,MAAM,gBAAgB,MAAM,sBAAsB,cAAc,KAAK,aAAa;AAGlF,WAAO;KACL;KACA;KACA,qBAAqB,KAAK,iBAAiB,YAAY,SAAS;KACjE;AAGD,QAAI,aAAa,IAAI,kBAAkB,cAAc;AACrD,QAAI,aAAa,IAAI,yBAAyB,KAAK,oBAAoB;;;AAK3E,MAAI,KAAK,yBAAyB,WAAW,IAAI,EAAE;GACjD,MAAM,UAAU,yBAAyB,aAAa,IAAI,OAAO,SAAS,SAAS,OAAO,SAAS;GACnG,MAAM,cAAc,gBAAgB,KAAK,0BAA0B,EAAW,SAAS,CAAC;AAExF,OAAI,aAAa,IAAI,gBAAgB,YAAY;QAEjD,KAAI,aAAa,IAAI,gBAAgB,KAAK,yBAAyB;AAGrE,MAAI,KAAK,2BACP,QAAO,KAAK,KAAK,2BAA2B,CAAC,SAAS,QAAsB;GAC1E,MAAM,QAAQ,KAAK,6BAA6B;AAChD,OAAI,CAAC,MACH;AAEF,OAAI,aAAa,IAAI,KAAK,MAAM;IAChC;AAIJ,MAAI,aAAa,IAAI,aAAa,KAAK,sBAAsB;AAC7D,MAAI,aAAa,IAAI,SAAS,MAAM;AACpC,MAAI,OACF,KAAI,aAAa,IAAI,SAAS,OAAO;EAIvC,MAAM,aAAa,OAAO,KAAK,KAAK,mBADb,wCAC+C;AAGtE,MAAI,WAEF,QAAO,IAAI,SAAgC,YAAY;GACrD,MAAM,oBAAoB,kBAAkB;IAC1C,IAAI,cAA6B;IACjC,IAAI,OAAsB;IAC1B,IAAI,QAAuB;IAC3B,IAAI,mBAAkC;AAEtC,QAAI;KACF,MAAM,YAAY,IAAI,IAAI,WAAW,SAAS,KAAK,CAAC;KACpD,MAAM,YAAY,KAAK,kBAAkB;AACzC,mBAAc,UAAU,IAAI,UAAU;AACtC,YAAO,UAAU,IAAI,OAAO;AAE5B,aAAQ,UAAU,IAAI,QAAQ;AAC9B,wBAAmB,UAAU,IAAI,oBAAoB;KAGrD,MAAM,aAAa,IAAI,gBAAgB,WAAW,SAAS,KAAK,MAAM,IAAI,CAAC,GAAG;AAC9E,qBAAgB,WAAW,IAAI,UAAU;AACzC,cAAS,WAAW,IAAI,OAAO;AAC/B,eAAU,WAAW,IAAI,QAAQ;AACjC,0BAAqB,WAAW,IAAI,oBAAoB;aACjD,IAAI;AAKb,QAAI,WAAW,UAAU,eAAe,QAAQ,OAAO;AACrD,mBAAc,kBAAkB;AAChC,gBAAW,OAAO;AAElB,SAAI,MACF,SAAQ,iBAAC,IAAI,MAAM,gBAAgB,QAAQ,mBAAmB,KAAK,iBAAiB,KAAK,KAAK,EAAE,KAAK,CAAC;cAI/F,YAIP,KAFe,WAAW,SAAS,KAAK,MAAM,gBAAgB,GAAG,OAElD,MACb,SAAQ,CAAC,MAAM,YAAY,CAAC;SAE5B,SAAQ,iBAAC,IAAI,MAAM,iBAAiB,EAAE,KAAK,CAAC;cAKvC,KAGP,KAFe,IAAI,IAAI,WAAW,SAAS,KAAK,CAAC,aAAa,IAAI,QAAQ,KAE3D,MAEb,kBACE,MACA,QACA;MACE;MACA;MACA;MACD,EACD,aACD,CAAC,KAAK,QAAQ;SAEf,SAAQ,iBAAC,IAAI,MAAM,iBAAiB,EAAE,KAAK,CAAC;UAI3C;AACH,oBAAc,kBAAkB;AAChC,cAAQ,iBAAC,IAAI,MAAM,mDAAmD,EAAE,KAAK,CAAC;;;MAGjF,IAAI;IACP;AAEJ,SAAO,iBAAC,IAAI,MAAM,6BAA6B,EAAE,KAAK;UAC/C,GAAG;AACV,SAAO,iBAAC,IAAI,MAAM,kCAAkC,EAAE,KAAK;;;;;;;AAQ/D,IAAa,mBAAmB,OAC9B,MACA,QACA,EACE,MACA,MACA,aAKE,EAAE,EACN,iBACmC;AACnC,KAAI,CAAC,KACH,QAAO,iBAAC,IAAI,MAAM,8BAA8B,EAAE,KAAK;CAGzD,MAAM,WAAW,IAAI,iBAAiB;AACtC,UAAS,IAAI,aAAa,KAAK,sBAAsB;AAGrD,KAAI,WAAW,KAAK,SAAS,uBAAuB,KAAK,SAAS,YAChE,UAAS,IAAI,SAAS,OAAO;AAO/B,KAFE,KAAK,iBAAiB,CAAC,KAAK,oCAAoC,KAAK,qCAAqC,QAG1G,UAAS,IAAI,iBAAiB,KAAK,aAAa;AAElD,KAAI,2BAA2B,QAAQ,KAAK,yBAC1C,UAAS,IAAI,gBAAgB,KAAK,yBAAyB;AAI7D,KAAI,MAAM;AACR,WAAS,IAAI,QAAQ,KAAK;AAC1B,WAAS,IAAI,cAAc,qBAAqB;AAGhD,MAAI,KACF,UAAS,IAAI,iBAAiB,KAAK,aAAa;YAI3C,KAAK,SAAS,YAAY;AACjC,WAAS,IAAI,cAAc,WAAW;AACtC,WAAS,IAAI,YAAY,KAAK,SAAS;AACvC,WAAS,IAAI,YAAY,KAAK,SAAS;OAIvC,UAAS,IAAI,cAAc,qBAAqB;AAIlD,KAAI,KAAK,0BACP,QAAO,QAAQ,KAAK,0BAA0B,CAAC,SAAS,CAAC,KAAK,WAAW;AACvE,MAAI,MACF,UAAS,IAAI,KAAK,MAAM;GAE1B;AAGJ,KAAI;EACF,MAAM,UAAkC,EACtC,gBAAgB,qCACjB;AAQD,MAJE,KAAK,iBACJ,CAAC,KAAK,oCAAoC,KAAK,qCAAqC,UAIrF,SAAQ,gBAAgB,SAAS,OAAO,GAAG,KAAK,sBAAsB,GAAG,KAAK,eAAe;EAI/F,MAAM,WAAW,gBAAgB,KAAK,UAAU,oBAAoB,aAAa,CAAC;EAClF,MAAM,MAAM,eAAe,UAAU,SAAS,GAC1C,GAAG,SAAS,GAAG,IAAI,gBAAgB,CAAC,CAAC,cAAc,SAAS,CAAC,CAAC,CAAC,UAAU,KACzE;AAcJ,SAAO,CAAC,OANa,OALR,MAAM,MAAM,KAAK;GAC5B,QAAQ;GACR;GACA,MAAM;GACP,CAAC,EAC8B,MAAM,EAGpB,KAAK,kBAAkB,gBAGf;SACpB;AACN,SAAO,iBAAC,IAAI,MAAM,gEAAgE,EAAE,KAAK"}

package/dist/views/Request/libs/request.js

@@ -0,0 +1,46 @@
+import { computed } from "vue";
+//#region src/views/Request/libs/request.ts
+/**
+* Check if a RequestExampleParameter has any of the following properties:
+* - description
+* - type
+* - default
+* - format
+* - minimum
+* - maximum
+*/
+var hasItemProperties = (item) => Boolean(item.description || item.type || item.default || item.format || item.minimum || item.maximum);
+/**
+* Checks if the value of a RequestExampleParameter is the expected type or format
+* Returns an alert message if the value is not in the correct type or format, otherwise false
+*/
+var parameterIsInvalid = (item) => {
+	return computed(() => {
+		if (item.value === void 0 || item.value === "") return false;
+		if (item.type) {
+			if (item.type === "integer") {
+				const value = Number(item.value);
+				if (isNaN(value) || !Number.isInteger(value)) return "Value must be a whole number (e.g., 42)";
+				if (item.minimum !== void 0 && value < item.minimum) return `Value must be ${item.minimum} or greater`;
+				if (item.maximum !== void 0 && value > item.maximum) return `Value must be ${item.maximum} or less`;
+			}
+			if (item.type === "number") {
+				const value = Number(item.value);
+				if (isNaN(value)) return "Value must be a number (e.g., 42.5)";
+				if (item.minimum !== void 0 && value < item.minimum) return `Value must be ${item.minimum} or greater`;
+				if (item.maximum !== void 0 && value > item.maximum) return `Value must be ${item.maximum} or less`;
+			}
+			if (item.type === "string" && item.format) {
+				if (item.format === "date" && !/^\d{4}-\d{2}-\d{2}$/.test(item.value)) return "Please enter a valid date in YYYY-MM-DD format (e.g., 2024-03-20)";
+				if (item.format === "date-time" && !/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(\.\d+)?(Z|[+-]\d{2}:\d{2})$/.test(item.value)) return "Please enter a valid date and time in RFC 3339 format (e.g., 2024-03-20T13:45:30Z)";
+				if (item.format === "email" && !/^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(item.value)) return "Please enter a valid email address (e.g., user@example.com)";
+				if (item.format === "uri" && !/^[a-zA-Z][a-zA-Z0-9+.-]*:.+$/.test(item.value)) return "Please enter a valid URI (e.g., https://example.com)";
+			}
+		}
+		return false;
+	});
+};
+//#endregion
+export { hasItemProperties, parameterIsInvalid };
+
+//# sourceMappingURL=request.js.map

package/dist/views/Request/libs/request.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request.js","names":[],"sources":["../../../../src/views/Request/libs/request.ts"],"sourcesContent":["import type { RequestExampleParameter } from '@scalar/oas-utils/entities/spec'\nimport { computed } from 'vue'\n\n/**\n * Check if a RequestExampleParameter has any of the following properties:\n * - description\n * - type\n * - default\n * - format\n * - minimum\n * - maximum\n */\nexport const hasItemProperties = (item: RequestExampleParameter) =>\n  Boolean(item.description || item.type || item.default || item.format || item.minimum || item.maximum)\n\n/**\n * Checks if the value of a RequestExampleParameter is the expected type or format\n * Returns an alert message if the value is not in the correct type or format, otherwise false\n */\nexport const parameterIsInvalid = (item: RequestExampleParameter) => {\n  return computed(() => {\n    if (item.value === undefined || item.value === '') {\n      return false\n    }\n\n    // Type validation\n    if (item.type) {\n      if (item.type === 'integer') {\n        const value = Number(item.value)\n        if (isNaN(value) || !Number.isInteger(value)) {\n          return 'Value must be a whole number (e.g., 42)'\n        }\n        if (item.minimum !== undefined && value < item.minimum) {\n          return `Value must be ${item.minimum} or greater`\n        }\n        if (item.maximum !== undefined && value > item.maximum) {\n          return `Value must be ${item.maximum} or less`\n        }\n      }\n\n      if (item.type === 'number') {\n        const value = Number(item.value)\n        if (isNaN(value)) {\n          return 'Value must be a number (e.g., 42.5)'\n        }\n        if (item.minimum !== undefined && value < item.minimum) {\n          return `Value must be ${item.minimum} or greater`\n        }\n        if (item.maximum !== undefined && value > item.maximum) {\n          return `Value must be ${item.maximum} or less`\n        }\n      }\n\n      if (item.type === 'string' && item.format) {\n        if (item.format === 'date' && !/^\\d{4}-\\d{2}-\\d{2}$/.test(item.value)) {\n          return 'Please enter a valid date in YYYY-MM-DD format (e.g., 2024-03-20)'\n        }\n        if (\n          item.format === 'date-time' &&\n          !/^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}(\\.\\d+)?(Z|[+-]\\d{2}:\\d{2})$/.test(item.value)\n        ) {\n          return 'Please enter a valid date and time in RFC 3339 format (e.g., 2024-03-20T13:45:30Z)'\n        }\n        if (item.format === 'email' && !/^[^\\s@]+@[^\\s@]+\\.[^\\s@]+$/.test(item.value)) {\n          return 'Please enter a valid email address (e.g., user@example.com)'\n        }\n        if (item.format === 'uri' && !/^[a-zA-Z][a-zA-Z0-9+.-]*:.+$/.test(item.value)) {\n          return 'Please enter a valid URI (e.g., https://example.com)'\n        }\n      }\n    }\n\n    return false\n  })\n}\n\n/**\n * Checks if a RequestExampleParameter is required and has an empty value\n */\nexport const hasEmptyRequiredParameter = (item: RequestExampleParameter) => Boolean(item.required && item.value === '')\n"],"mappings":";;;;;;;;;;;AAYA,IAAa,qBAAqB,SAChC,QAAQ,KAAK,eAAe,KAAK,QAAQ,KAAK,WAAW,KAAK,UAAU,KAAK,WAAW,KAAK,QAAQ;;;;;AAMvG,IAAa,sBAAsB,SAAkC;AACnE,QAAO,eAAe;AACpB,MAAI,KAAK,UAAU,KAAA,KAAa,KAAK,UAAU,GAC7C,QAAO;AAIT,MAAI,KAAK,MAAM;AACb,OAAI,KAAK,SAAS,WAAW;IAC3B,MAAM,QAAQ,OAAO,KAAK,MAAM;AAChC,QAAI,MAAM,MAAM,IAAI,CAAC,OAAO,UAAU,MAAM,CAC1C,QAAO;AAET,QAAI,KAAK,YAAY,KAAA,KAAa,QAAQ,KAAK,QAC7C,QAAO,iBAAiB,KAAK,QAAQ;AAEvC,QAAI,KAAK,YAAY,KAAA,KAAa,QAAQ,KAAK,QAC7C,QAAO,iBAAiB,KAAK,QAAQ;;AAIzC,OAAI,KAAK,SAAS,UAAU;IAC1B,MAAM,QAAQ,OAAO,KAAK,MAAM;AAChC,QAAI,MAAM,MAAM,CACd,QAAO;AAET,QAAI,KAAK,YAAY,KAAA,KAAa,QAAQ,KAAK,QAC7C,QAAO,iBAAiB,KAAK,QAAQ;AAEvC,QAAI,KAAK,YAAY,KAAA,KAAa,QAAQ,KAAK,QAC7C,QAAO,iBAAiB,KAAK,QAAQ;;AAIzC,OAAI,KAAK,SAAS,YAAY,KAAK,QAAQ;AACzC,QAAI,KAAK,WAAW,UAAU,CAAC,sBAAsB,KAAK,KAAK,MAAM,CACnE,QAAO;AAET,QACE,KAAK,WAAW,eAChB,CAAC,mEAAmE,KAAK,KAAK,MAAM,CAEpF,QAAO;AAET,QAAI,KAAK,WAAW,WAAW,CAAC,6BAA6B,KAAK,KAAK,MAAM,CAC3E,QAAO;AAET,QAAI,KAAK,WAAW,SAAS,CAAC,+BAA+B,KAAK,KAAK,MAAM,CAC3E,QAAO;;;AAKb,SAAO;GACP"}

package/dist/views/Request/libs/watch-mode.d.ts

@@ -2,7 +2,7 @@ import { type Path, type PathValue } from '@scalar/object-utils/nested';
 import { type Difference } from 'microdiff';
 import { type ZodSchema } from 'zod';
 import type { WorkspaceStore } from '../../../store/index.js';
-import type { ActiveEntitiesStore } from '../../../store/active-entities';
+import type { ActiveEntitiesStore } from '../../../store/active-entities.js';
 /**
  * Combine Rename Diffs
  * Rename diffs show up as a delete and an add.