@schemavaults/auth-common 0.7.27

package/dist/audience-schema.d.ts

@@ -0,0 +1,3 @@
+import { z } from "zod";
+export declare const audienceRefSchema: z.ZodUnion<[z.ZodString, z.ZodLiteral<"schemavaults-registry">, z.ZodLiteral<"schemavaults-auth">, z.ZodLiteral<"schemavaults-mail">]>;
+export declare const audienceSchema: z.ZodUnion<[z.ZodUnion<[z.ZodString, z.ZodLiteral<"schemavaults-registry">, z.ZodLiteral<"schemavaults-auth">, z.ZodLiteral<"schemavaults-mail">]>, z.ZodArray<z.ZodUnion<[z.ZodString, z.ZodLiteral<"schemavaults-registry">, z.ZodLiteral<"schemavaults-auth">, z.ZodLiteral<"schemavaults-mail">]>, "many">]>;

package/dist/audience-schema.js

@@ -0,0 +1,12 @@
+import { apiServerIdSchema } from "@schemavaults/app-definitions";
+import { z } from "zod";
+export const audienceRefSchema = apiServerIdSchema;
+const MAX_APPS_IN_AUDIENCE_LIST = 10;
+export const audienceSchema = z.union([
+    audienceRefSchema,
+    audienceRefSchema
+        .array()
+        .min(1, "Audience list may not be empty")
+        .max(MAX_APPS_IN_AUDIENCE_LIST, `Audience list may not contain more than ${MAX_APPS_IN_AUDIENCE_LIST} audience references.`),
+]);
+//# sourceMappingURL=audience-schema.js.map

package/dist/audience-schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audience-schema.js","sourceRoot":"","sources":["../src/audience-schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,iBAAiB,GAAG,iBAAiB,CAAC;AAEnD,MAAM,yBAAyB,GAAG,EAA4B,CAAC;AAE/D,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC;IACpC,iBAAiB;IACjB,iBAAiB;SACd,KAAK,EAAE;SACP,GAAG,CAAC,CAAC,EAAE,gCAAgC,CAAC;SACxC,GAAG,CACF,yBAAyB,EACzB,2CAA2C,yBAAyB,uBAAuB,CAC5F;CACJ,CAAC,CAAC"}

package/dist/auth_acquire_tokens_grant_types.d.ts

@@ -0,0 +1,80 @@
+import { z } from "zod";
+export declare const grant_types: readonly ["authorization_code", "refresh_token"];
+export declare const authorizationCodePOSTbody: z.ZodObject<{
+    code: z.ZodEffects<z.ZodString, string, string>;
+    challenge_time: z.ZodNumber;
+    code_verifier: z.ZodEffects<z.ZodString, string, string>;
+    audience: z.ZodUnion<[z.ZodUnion<[z.ZodString, z.ZodLiteral<"schemavaults-registry">, z.ZodLiteral<"schemavaults-auth">, z.ZodLiteral<"schemavaults-mail">]>, z.ZodArray<z.ZodUnion<[z.ZodString, z.ZodLiteral<"schemavaults-registry">, z.ZodLiteral<"schemavaults-auth">, z.ZodLiteral<"schemavaults-mail">]>, "many">]>;
+    client_app_id: z.ZodUnion<readonly [z.ZodString, z.ZodEffects<z.ZodString, "schemavaults-auth" | "schemavaults-mail" | "schemavaults-web" | "schemavaults-cli", string>]>;
+    grant_type: z.ZodLiteral<"authorization_code">;
+}, "strict", z.ZodTypeAny, {
+    code: string;
+    challenge_time: number;
+    code_verifier: string;
+    audience: string | string[];
+    client_app_id: string;
+    grant_type: "authorization_code";
+}, {
+    code: string;
+    challenge_time: number;
+    code_verifier: string;
+    audience: string | string[];
+    client_app_id: string;
+    grant_type: "authorization_code";
+}>;
+export declare const refreshTokenPOSTbody: z.ZodObject<{
+    audience: z.ZodUnion<[z.ZodUnion<[z.ZodString, z.ZodLiteral<"schemavaults-registry">, z.ZodLiteral<"schemavaults-auth">, z.ZodLiteral<"schemavaults-mail">]>, z.ZodArray<z.ZodUnion<[z.ZodString, z.ZodLiteral<"schemavaults-registry">, z.ZodLiteral<"schemavaults-auth">, z.ZodLiteral<"schemavaults-mail">]>, "many">]>;
+    client_app_id: z.ZodUnion<readonly [z.ZodString, z.ZodEffects<z.ZodString, "schemavaults-auth" | "schemavaults-mail" | "schemavaults-web" | "schemavaults-cli", string>]>;
+    grant_type: z.ZodLiteral<"refresh_token">;
+    replaceRefreshToo: z.ZodOptional<z.ZodBoolean>;
+}, "strict", z.ZodTypeAny, {
+    audience: string | string[];
+    client_app_id: string;
+    grant_type: "refresh_token";
+    replaceRefreshToo?: boolean | undefined;
+}, {
+    audience: string | string[];
+    client_app_id: string;
+    grant_type: "refresh_token";
+    replaceRefreshToo?: boolean | undefined;
+}>;
+export declare const grantTypePOSTbodySchemaMap: {
+    readonly authorization_code: z.ZodObject<{
+        code: z.ZodEffects<z.ZodString, string, string>;
+        challenge_time: z.ZodNumber;
+        code_verifier: z.ZodEffects<z.ZodString, string, string>;
+        audience: z.ZodUnion<[z.ZodUnion<[z.ZodString, z.ZodLiteral<"schemavaults-registry">, z.ZodLiteral<"schemavaults-auth">, z.ZodLiteral<"schemavaults-mail">]>, z.ZodArray<z.ZodUnion<[z.ZodString, z.ZodLiteral<"schemavaults-registry">, z.ZodLiteral<"schemavaults-auth">, z.ZodLiteral<"schemavaults-mail">]>, "many">]>;
+        client_app_id: z.ZodUnion<readonly [z.ZodString, z.ZodEffects<z.ZodString, "schemavaults-auth" | "schemavaults-mail" | "schemavaults-web" | "schemavaults-cli", string>]>;
+        grant_type: z.ZodLiteral<"authorization_code">;
+    }, "strict", z.ZodTypeAny, {
+        code: string;
+        challenge_time: number;
+        code_verifier: string;
+        audience: string | string[];
+        client_app_id: string;
+        grant_type: "authorization_code";
+    }, {
+        code: string;
+        challenge_time: number;
+        code_verifier: string;
+        audience: string | string[];
+        client_app_id: string;
+        grant_type: "authorization_code";
+    }>;
+    readonly refresh_token: z.ZodObject<{
+        audience: z.ZodUnion<[z.ZodUnion<[z.ZodString, z.ZodLiteral<"schemavaults-registry">, z.ZodLiteral<"schemavaults-auth">, z.ZodLiteral<"schemavaults-mail">]>, z.ZodArray<z.ZodUnion<[z.ZodString, z.ZodLiteral<"schemavaults-registry">, z.ZodLiteral<"schemavaults-auth">, z.ZodLiteral<"schemavaults-mail">]>, "many">]>;
+        client_app_id: z.ZodUnion<readonly [z.ZodString, z.ZodEffects<z.ZodString, "schemavaults-auth" | "schemavaults-mail" | "schemavaults-web" | "schemavaults-cli", string>]>;
+        grant_type: z.ZodLiteral<"refresh_token">;
+        replaceRefreshToo: z.ZodOptional<z.ZodBoolean>;
+    }, "strict", z.ZodTypeAny, {
+        audience: string | string[];
+        client_app_id: string;
+        grant_type: "refresh_token";
+        replaceRefreshToo?: boolean | undefined;
+    }, {
+        audience: string | string[];
+        client_app_id: string;
+        grant_type: "refresh_token";
+        replaceRefreshToo?: boolean | undefined;
+    }>;
+};

package/dist/auth_acquire_tokens_grant_types.js

@@ -0,0 +1,48 @@
+import { PKCE_ProofKeyManager } from "./pkce";
+import { z } from "zod";
+import { audienceSchema } from "./audience-schema";
+import { appIdSchema } from "@schemavaults/app-definitions";
+export const grant_types = [
+    "authorization_code",
+    "refresh_token",
+];
+const _createTokenEndpointBaseSchema = z.object({
+    audience: audienceSchema,
+    client_app_id: appIdSchema,
+});
+export const authorizationCodePOSTbody = _createTokenEndpointBaseSchema
+    .extend({
+    grant_type: z.literal("authorization_code"),
+    code: z
+        .string()
+        .min(64)
+        .max(1024)
+        .refine((value) => /^[A-Za-z0-9_-]+$/.test(value)),
+    code_verifier: PKCE_ProofKeyManager.codeChallengeSchema,
+    challenge_time: z.number().nonnegative(),
+})
+    .required({
+    grant_type: true,
+    audience: true,
+    client_app_id: true,
+    code: true,
+    code_verifier: true,
+    challenge_time: true,
+})
+    .strict();
+export const refreshTokenPOSTbody = _createTokenEndpointBaseSchema
+    .extend({
+    grant_type: z.literal("refresh_token"),
+    replaceRefreshToo: z.boolean().optional(),
+})
+    .required({
+    grant_type: true,
+    audience: true,
+    client_app_id: true,
+})
+    .strict();
+export const grantTypePOSTbodySchemaMap = {
+    authorization_code: authorizationCodePOSTbody,
+    refresh_token: refreshTokenPOSTbody,
+};
+//# sourceMappingURL=auth_acquire_tokens_grant_types.js.map

package/dist/auth_acquire_tokens_grant_types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth_acquire_tokens_grant_types.js","sourceRoot":"","sources":["../src/auth_acquire_tokens_grant_types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAkB,CAAC,EAAE,MAAM,KAAK,CAAC;AACxC,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAE5D,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,oBAAoB;IACpB,eAAe;CACqB,CAAC;AAEvC,MAAM,8BAA8B,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,QAAQ,EAAE,cAAc;IACxB,aAAa,EAAE,WAAW;CAC3B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,yBAAyB,GAAG,8BAA8B;KACpE,MAAM,CAAC;IACN,UAAU,EAAE,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC;IAC3C,IAAI,EAAE,CAAC;SACJ,MAAM,EAAE;SACR,GAAG,CAAC,EAAE,CAAC;SACP,GAAG,CAAC,IAAI,CAAC;SACT,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpD,aAAa,EAAE,oBAAoB,CAAC,mBAAmB;IACvD,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE;CACzC,CAAC;KACD,QAAQ,CAAC;IACR,UAAU,EAAE,IAAI;IAChB,QAAQ,EAAE,IAAI;IACd,aAAa,EAAE,IAAI;IACnB,IAAI,EAAE,IAAI;IACV,aAAa,EAAE,IAAI;IACnB,cAAc,EAAE,IAAI;CACrB,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,oBAAoB,GAAG,8BAA8B;KAC/D,MAAM,CAAC;IACN,UAAU,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC;IACtC,iBAAiB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAC1C,CAAC;KACD,QAAQ,CAAC;IACR,UAAU,EAAE,IAAI;IAChB,QAAQ,EAAE,IAAI;IACd,aAAa,EAAE,IAAI;CACpB,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,kBAAkB,EAAE,yBAAyB;IAC7C,aAAa,EAAE,oBAAoB;CAC+B,CAAC"}

package/dist/authenticate_result.d.ts

@@ -0,0 +1,15 @@
+import { z } from "zod";
+export declare const authenticateResultSchema: z.ZodObject<{
+    message: z.ZodString;
+    authorization_code: z.ZodOptional<z.ZodString>;
+    success: z.ZodBoolean;
+}, "strict", z.ZodTypeAny, {
+    message: string;
+    success: boolean;
+    authorization_code?: string | undefined;
+}, {
+    message: string;
+    success: boolean;
+    authorization_code?: string | undefined;
+}>;
+export type AuthenticateResult = z.infer<typeof authenticateResultSchema>;

package/dist/authenticate_result.js

@@ -0,0 +1,12 @@
+import { z } from "zod";
+export const authenticateResultSchema = z.object({
+    success: z.boolean(),
+    message: z.string(),
+    authorization_code: z.string()
+        .min(43, 'Authorization code must be at least 43 characters long')
+        .optional()
+}).required({
+    success: true,
+    message: true
+}).strict();
+//# sourceMappingURL=authenticate_result.js.map

package/dist/authenticate_result.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authenticate_result.js","sourceRoot":"","sources":["../src/authenticate_result.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE;SAC3B,GAAG,CAAC,EAAE,EAAE,wDAAwD,CAAC;SACjE,QAAQ,EAAE;CACd,CAAC,CAAC,QAAQ,CAAC;IACV,OAAO,EAAE,IAAI;IACb,OAAO,EAAE,IAAI;CACd,CAAC,CAAC,MAAM,EAAE,CAAC"}

package/dist/credentials/email_credentials.d.ts

@@ -0,0 +1,12 @@
+import { z } from 'zod';
+export declare const emailCredentialsSchema: z.ZodObject<{
+    email: z.ZodString;
+    password: z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>, string, string>, string, string>;
+}, "strict", z.ZodTypeAny, {
+    email: string;
+    password: string;
+}, {
+    email: string;
+    password: string;
+}>;
+export type EmailCredentials = z.infer<typeof emailCredentialsSchema>;

package/dist/credentials/email_credentials.js

@@ -0,0 +1,10 @@
+import { z } from 'zod';
+import { passwordSchema } from './password_requirements';
+export const emailCredentialsSchema = z.object({
+    email: z.string().email(),
+    password: passwordSchema
+}).required({
+    email: true,
+    password: true
+}).strict();
+//# sourceMappingURL=email_credentials.js.map

package/dist/credentials/email_credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"email_credentials.js","sourceRoot":"","sources":["../../src/credentials/email_credentials.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAEzD,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;IACzB,QAAQ,EAAE,cAAc;CACzB,CAAC,CAAC,QAAQ,CAAC;IACV,KAAK,EAAE,IAAI;IACX,QAAQ,EAAE,IAAI;CACf,CAAC,CAAC,MAAM,EAAE,CAAC"}

package/dist/credentials/index.d.ts

@@ -0,0 +1,3 @@
+export { passwordSchema } from './password_requirements';
+export { emailCredentialsSchema, type EmailCredentials } from './email_credentials';
+export { emailRegistrationCredentialsSchema, type EmailRegistrationCredentials } from './register_credentials';

package/dist/credentials/index.js

@@ -0,0 +1,4 @@
+export { passwordSchema } from './password_requirements';
+export { emailCredentialsSchema } from './email_credentials';
+export { emailRegistrationCredentialsSchema } from './register_credentials';
+//# sourceMappingURL=index.js.map

package/dist/credentials/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/credentials/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACzD,OAAO,EAAE,sBAAsB,EAAyB,MAAM,qBAAqB,CAAC;AACpF,OAAO,EAAE,kCAAkC,EAAqC,MAAM,wBAAwB,CAAC"}

package/dist/credentials/password_requirements.d.ts

@@ -0,0 +1,2 @@
+import { z } from "zod";
+export declare const passwordSchema: z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>, string, string>, string, string>;

package/dist/credentials/password_requirements.js

@@ -0,0 +1,17 @@
+import { z } from "zod";
+export const passwordSchema = z.string()
+    .min(10, "Password must be at least 10 characters long")
+    .max(255, "Password must be at most 255 characters long")
+    .refine((password) => {
+    return /[a-z]/.test(password);
+}, "Password must contain at least one lowercase letter")
+    .refine((password) => {
+    return /[A-Z]/.test(password);
+}, "Password must contain at least one uppercase letter")
+    .refine((password) => {
+    return /[0-9]/.test(password);
+}, "Password must contain at least one number")
+    .refine((password) => {
+    return /[^a-zA-Z0-9]/.test(password);
+}, "Password must contain at least one special character");
+//# sourceMappingURL=password_requirements.js.map

package/dist/credentials/password_requirements.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"password_requirements.js","sourceRoot":"","sources":["../../src/credentials/password_requirements.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,EAAE;KACrC,GAAG,CAAC,EAAE,EAAE,8CAA8C,CAAC;KACvD,GAAG,CAAC,GAAG,EAAE,8CAA8C,CAAC;KACxD,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE;IACnB,OAAO,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AAChC,CAAC,EAAE,qDAAqD,CAAC;KACxD,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE;IACnB,OAAO,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AAChC,CAAC,EAAE,qDAAqD,CAAC;KACxD,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE;IACnB,OAAO,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AAChC,CAAC,EAAE,2CAA2C,CAAC;KAC9C,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE;IACnB,OAAO,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AACvC,CAAC,EAAE,sDAAsD,CAAC,CAAC"}

package/dist/credentials/register_credentials.d.ts

@@ -0,0 +1,28 @@
+import { z } from 'zod';
+export declare const emailRegistrationCredentialsSchema: z.ZodEffects<z.ZodObject<{
+    email: z.ZodString;
+    invite_code: z.ZodString;
+    password: z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>, string, string>, string, string>;
+    confirm: z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>, string, string>, string, string>;
+}, "strict", z.ZodTypeAny, {
+    email: string;
+    invite_code: string;
+    password: string;
+    confirm: string;
+}, {
+    email: string;
+    invite_code: string;
+    password: string;
+    confirm: string;
+}>, {
+    email: string;
+    invite_code: string;
+    password: string;
+    confirm: string;
+}, {
+    email: string;
+    invite_code: string;
+    password: string;
+    confirm: string;
+}>;
+export type EmailRegistrationCredentials = z.infer<typeof emailRegistrationCredentialsSchema>;

package/dist/credentials/register_credentials.js

@@ -0,0 +1,13 @@
+import { emailCredentialsSchema } from "./email_credentials";
+import { passwordSchema } from "./password_requirements";
+import { z } from 'zod';
+export const emailRegistrationCredentialsSchema = emailCredentialsSchema.extend({
+    confirm: passwordSchema,
+    invite_code: z.string().min(5, "Invite code must be at least 5 characters long.")
+}).required({
+    confirm: true,
+    invite_code: true
+}).strict().refine((data) => {
+    return data.password === data.confirm;
+}, "Passwords do not match");
+//# sourceMappingURL=register_credentials.js.map

package/dist/credentials/register_credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"register_credentials.js","sourceRoot":"","sources":["../../src/credentials/register_credentials.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACzD,OAAO,EAAC,CAAC,EAAC,MAAM,KAAK,CAAC;AAEtB,MAAM,CAAC,MAAM,kCAAkC,GAAG,sBAAsB,CAAC,MAAM,CAAC;IAC9E,OAAO,EAAE,cAAc;IACvB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,iDAAiD,CAAC;CAClF,CAAC,CAAC,QAAQ,CAAC;IACV,OAAO,EAAE,IAAI;IACb,WAAW,EAAE,IAAI;CAClB,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;IAC1B,OAAO,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,OAAO,CAAC;AACxC,CAAC,EAAE,wBAAwB,CAAC,CAAC"}

package/dist/frontend-client-state.d.ts

@@ -0,0 +1,4 @@
+import type { RefreshToken } from "./token-data";
+export interface AuthClientState {
+    refreshToken: RefreshToken;
+}

package/dist/frontend-client-state.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=frontend-client-state.js.map

package/dist/frontend-client-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"frontend-client-state.js","sourceRoot":"","sources":["../src/frontend-client-state.ts"],"names":[],"mappings":""}

package/dist/index.d.ts

@@ -0,0 +1,21 @@
+export { userDataSchema, type UserData } from "./user_data";
+export * from "./credentials";
+export type * from "./credentials";
+export * from "./token-data";
+export type * from "./token-data";
+export type { AuthClientState } from "./frontend-client-state";
+export * from "./middleware";
+export type * from "./middleware";
+export * from "./pkce";
+export type * from "./pkce";
+export { authenticateResultSchema, type AuthenticateResult, } from "./authenticate_result";
+export { requestTokensResultSchema, type RequestTokensResult, successfullyGeneratedTokensRecordSchema, type SuccessfullyGeneratedTokensRecord, } from "./request_tokens_result";
+export * from "./auth_acquire_tokens_grant_types";
+export type * from "./auth_acquire_tokens_grant_types";
+export { PRODUCTION_AUTH_SERVER_URL } from "@schemavaults/app-definitions";
+export { appIdSchema } from "@schemavaults/app-definitions";
+export { audienceSchema, audienceRefSchema } from "./audience-schema";
+export { inviteCodeFormatSchema, inviteCodeDefinitionSchema, } from "./invite-code";
+export type { InviteCode, InviteCodeDefinition } from "./invite-code";
+export { organizationIdSchema, isValidOrganizationID, organizationDefinitionSchema, SCHEMAVAULTS_ORGANIZATION_ID, } from "./organizations";
+export type { OrganizationID, OrganizationDefinition } from "./organizations";

package/dist/index.js

@@ -0,0 +1,15 @@
+export { userDataSchema } from "./user_data";
+export * from "./credentials";
+// Shapes of tokens
+export * from "./token-data";
+export * from "./middleware";
+export * from "./pkce";
+export { authenticateResultSchema, } from "./authenticate_result";
+export { requestTokensResultSchema, successfullyGeneratedTokensRecordSchema, } from "./request_tokens_result";
+export * from "./auth_acquire_tokens_grant_types";
+export { PRODUCTION_AUTH_SERVER_URL } from "@schemavaults/app-definitions";
+export { appIdSchema } from "@schemavaults/app-definitions";
+export { audienceSchema, audienceRefSchema } from "./audience-schema";
+export { inviteCodeFormatSchema, inviteCodeDefinitionSchema, } from "./invite-code";
+export { organizationIdSchema, isValidOrganizationID, organizationDefinitionSchema, SCHEMAVAULTS_ORGANIZATION_ID, } from "./organizations";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAiB,MAAM,aAAa,CAAC;AAE5D,cAAc,eAAe,CAAC;AAG9B,mBAAmB;AACnB,cAAc,cAAc,CAAC;AAM7B,cAAc,cAAc,CAAC;AAG7B,cAAc,QAAQ,CAAC;AAGvB,OAAO,EACL,wBAAwB,GAEzB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,yBAAyB,EAEzB,uCAAuC,GAExC,MAAM,yBAAyB,CAAC;AAEjC,cAAc,mCAAmC,CAAC;AAGlD,OAAO,EAAE,0BAA0B,EAAE,MAAM,+BAA+B,CAAC;AAC3E,OAAO,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAE5D,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAEtE,OAAO,EACL,sBAAsB,EACtB,0BAA0B,GAC3B,MAAM,eAAe,CAAC;AAGvB,OAAO,EACL,oBAAoB,EACpB,qBAAqB,EACrB,4BAA4B,EAC5B,4BAA4B,GAC7B,MAAM,iBAAiB,CAAC"}

package/dist/invite-code/index.d.ts

@@ -0,0 +1,4 @@
+export { inviteCodeFormatSchema } from "./invite-code-format";
+export type { InviteCode } from "./invite-code-format";
+export { inviteCodeDefinitionSchema } from "./invite-code-definition";
+export type { InviteCodeDefinition } from "./invite-code-definition";

package/dist/invite-code/index.js

@@ -0,0 +1,3 @@
+export { inviteCodeFormatSchema } from "./invite-code-format";
+export { inviteCodeDefinitionSchema } from "./invite-code-definition";
+//# sourceMappingURL=index.js.map

package/dist/invite-code/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/invite-code/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAG9D,OAAO,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAC"}

package/dist/invite-code/invite-code-definition.d.ts

@@ -0,0 +1,21 @@
+import { z } from "zod";
+export declare const inviteCodeDefinitionSchema: z.ZodObject<{
+    created_at: z.ZodNumber;
+    invite_code: z.ZodString;
+    max_uses: z.ZodNumber;
+    description: z.ZodOptional<z.ZodString>;
+    created_by: z.ZodOptional<z.ZodString>;
+}, "strict", z.ZodTypeAny, {
+    created_at: number;
+    invite_code: string;
+    max_uses: number;
+    description?: string | undefined;
+    created_by?: string | undefined;
+}, {
+    created_at: number;
+    invite_code: string;
+    max_uses: number;
+    description?: string | undefined;
+    created_by?: string | undefined;
+}>;
+export type InviteCodeDefinition = z.infer<typeof inviteCodeDefinitionSchema>;

package/dist/invite-code/invite-code-definition.js

@@ -0,0 +1,18 @@
+import { z } from "zod";
+import { inviteCodeFormatSchema } from "./invite-code-format";
+const MAX_DESCRIPTION_LENGTH = 128;
+export const inviteCodeDefinitionSchema = z
+    .object({
+    invite_code: inviteCodeFormatSchema,
+    created_at: z.number().nonnegative(),
+    max_uses: z.number().int().positive(),
+    description: z.string().max(MAX_DESCRIPTION_LENGTH).optional(),
+    created_by: z.string().uuid().optional(),
+})
+    .required({
+    invite_code: true,
+    created_at: true,
+    max_uses: true,
+})
+    .strict();
+//# sourceMappingURL=invite-code-definition.js.map

package/dist/invite-code/invite-code-definition.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"invite-code-definition.js","sourceRoot":"","sources":["../../src/invite-code/invite-code-definition.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAE9D,MAAM,sBAAsB,GAAW,GAAG,CAAC;AAE3C,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC;KACxC,MAAM,CAAC;IACN,WAAW,EAAE,sBAAsB;IACnC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE;IACpC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACrC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC,QAAQ,EAAE;IAC9D,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;CACzC,CAAC;KACD,QAAQ,CAAC;IACR,WAAW,EAAE,IAAI;IACjB,UAAU,EAAE,IAAI;IAChB,QAAQ,EAAE,IAAI;CACf,CAAC;KACD,MAAM,EAAE,CAAC"}

package/dist/invite-code/invite-code-format.d.ts

@@ -0,0 +1,3 @@
+import { z } from "zod";
+export declare const inviteCodeFormatSchema: z.ZodString;
+export type InviteCode = z.infer<typeof inviteCodeFormatSchema>;

package/dist/invite-code/invite-code-format.js

@@ -0,0 +1,9 @@
+import { z } from "zod";
+const MIN_INVITE_CODE_LENGTH = 8;
+const MAX_INVITE_CODE_LENGTH = 64;
+export const inviteCodeFormatSchema = z
+    .string()
+    .min(MIN_INVITE_CODE_LENGTH, `Invite code must be at least ${MIN_INVITE_CODE_LENGTH} characters long!`)
+    .max(MAX_INVITE_CODE_LENGTH, `Invite code may not be longer than ${MAX_INVITE_CODE_LENGTH} characters long!`)
+    .regex(/^[A-Za-z0-9_-]+$/, "Invite code may only contain alphanumeric characters, hyphens, or underscores!");
+//# sourceMappingURL=invite-code-format.js.map

package/dist/invite-code/invite-code-format.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"invite-code-format.js","sourceRoot":"","sources":["../../src/invite-code/invite-code-format.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,sBAAsB,GAAW,CAAC,CAAC;AACzC,MAAM,sBAAsB,GAAW,EAAE,CAAC;AAE1C,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC;KACpC,MAAM,EAAE;KACR,GAAG,CACF,sBAAsB,EACtB,gCAAgC,sBAAsB,mBAAmB,CAC1E;KACA,GAAG,CACF,sBAAsB,EACtB,sCAAsC,sBAAsB,mBAAmB,CAChF;KACA,KAAK,CACJ,kBAAkB,EAClB,gFAAgF,CACjF,CAAC"}

package/dist/is_crypto_api_available.d.ts

@@ -0,0 +1 @@
+export default function isCryptoApiAvailable(): boolean;

package/dist/is_crypto_api_available.js

@@ -0,0 +1,31 @@
+export default function isCryptoApiAvailable() {
+    // Check if this is a server-side environment-- assume crypto is available then
+    try {
+        if (!window || typeof window === "undefined") {
+            return true;
+        }
+    }
+    catch (e) {
+        void e; // an error means 'window' is not defined and threw-- this is a server
+        return true;
+    }
+    // Check if the browser supports the Web Crypto API
+    try {
+        if (window && typeof window.crypto !== "undefined") {
+            if (window.location.protocol === "https:") {
+                return true;
+            }
+            if (window.location.href.startsWith("https://")) {
+                return true;
+            }
+            if (/^http:\/\/(localhost|127\.0\.0\.1)/.test(window.location.href)) {
+                return true;
+            }
+        }
+    }
+    catch (e) {
+        void e;
+    }
+    return false;
+}
+//# sourceMappingURL=is_crypto_api_available.js.map

package/dist/is_crypto_api_available.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"is_crypto_api_available.js","sourceRoot":"","sources":["../src/is_crypto_api_available.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,OAAO,UAAU,oBAAoB;IAC1C,+EAA+E;IAC/E,IAAI,CAAC;QACH,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;YAC7C,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAAC,OAAO,CAAU,EAAE,CAAC;QACpB,KAAK,CAAC,CAAC,CAAC,sEAAsE;QAC9E,OAAO,IAAI,CAAC;IACd,CAAC;IAED,mDAAmD;IACnD,IAAI,CAAC;QACH,IAAI,MAAM,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YACnD,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBAC1C,OAAO,IAAI,CAAC;YACd,CAAC;YACD,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;gBAChD,OAAO,IAAI,CAAC;YACd,CAAC;YACD,IAAI,oCAAoC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBACpE,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,CAAU,EAAE,CAAC;QACpB,KAAK,CAAC,CAAC;IACT,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/middleware/auth-middleware-error.d.ts

@@ -0,0 +1,4 @@
+import { z } from "zod";
+export declare const AuthMiddlewareErrorTypes: readonly ["Unauthorized", "Forbidden"];
+export type AuthMiddlewareError = (typeof AuthMiddlewareErrorTypes)[number];
+export declare const authMiddlewareErrorTypesSchema: z.ZodEffects<z.ZodString, "Unauthorized" | "Forbidden", string>;

package/dist/middleware/auth-middleware-error.js

@@ -0,0 +1,12 @@
+import { z } from "zod";
+export const AuthMiddlewareErrorTypes = [
+    "Unauthorized",
+    "Forbidden",
+];
+export const authMiddlewareErrorTypesSchema = z
+    .string()
+    .refine((str) => {
+    const errorTypes = AuthMiddlewareErrorTypes;
+    return errorTypes.includes(str);
+});
+//# sourceMappingURL=auth-middleware-error.js.map

package/dist/middleware/auth-middleware-error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-middleware-error.js","sourceRoot":"","sources":["../../src/middleware/auth-middleware-error.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,cAAc;IACd,WAAW;CACyB,CAAC;AAIvC,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC;KAC5C,MAAM,EAAE;KACR,MAAM,CAAC,CAAC,GAAG,EAA8B,EAAE;IAC1C,MAAM,UAAU,GAAsB,wBAAwB,CAAC;IAC/D,OAAO,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;AAClC,CAAC,CAAC,CAAC"}

package/dist/middleware/auth-middleware.d.ts

@@ -0,0 +1,36 @@
+import { type AuthMiddlewareRules, type AuthenticationStatus } from "./middleware-rules";
+import type { SchemaVaultsAppEnvironment } from "@schemavaults/app-definitions";
+import { AuthMiddlewareError } from "./auth-middleware-error";
+export interface AuthMiddlewareOptions {
+    /** The current path, e.g. /vaults/my-vault */
+    path: string;
+    /** Is the user logged in? */
+    authStatus: AuthenticationStatus;
+    /** Define what routes are public/unauthed/authed */
+    rules: AuthMiddlewareRules;
+    /** Where the user should be sent if they are logged in on a page for unauthenticated users */
+    authedOnUnauthedRouteRedirectTo: string;
+    /** Where the user should be sent if they are not logged in on a page for authenticated users */
+    unauthedOnAuthedRouteRedirectTo: string;
+    /** Page which handles authorizing an unauthorized user via search params */
+    authorize_uri: string;
+    /** Page which users should be sent to after successfully logging out */
+    successful_logout_redirect_uri?: string;
+    /** App Environment. This can usually be loaded from the env without passing it explicitly... but it might throw if not ¯\_(ツ)_/¯ */
+    environment: SchemaVaultsAppEnvironment;
+    /** Enable debug logging. Defaults to 'true' in non-production environments. */
+    debug?: boolean;
+}
+export type AuthMiddlewareResult = {
+    redirect: false;
+    remain: true;
+} | {
+    redirect: true;
+    remain: false;
+    redirectTo: string;
+} | {
+    redirect: false;
+    error: AuthMiddlewareError;
+    remain: undefined;
+};
+export declare function AuthMiddleware({ path, authStatus, rules, authedOnUnauthedRouteRedirectTo, unauthedOnAuthedRouteRedirectTo, authorize_uri, successful_logout_redirect_uri, environment, ...opts }: AuthMiddlewareOptions): AuthMiddlewareResult;