@shware/security 2.5.3 → 2.6.0

package/dist/oauth2/provider/google.mjs

@@ -1,99 +1,106 @@
-// src/oauth2/provider/google.ts
-import { invariant } from "@shware/utils";
 import { OAuth2Error } from "../error.mjs";
 import { createAuthorizationUri, exchangeAuthorizationCode, verifyIdToken } from "./common.mjs";
+import { invariant } from "@shware/utils";
+//#region src/oauth2/provider/google.ts
 function createGoogleProvider() {
-  return {
-    authorizationUri: "https://accounts.google.com/o/oauth2/v2/auth",
-    tokenUri: "https://oauth2.googleapis.com/token",
-    userInfoUri: "https://www.googleapis.com/oauth2/v3/userinfo",
-    userNameAttribute: "sub",
-    jwkSetUri: "https://www.googleapis.com/oauth2/v3/certs",
-    // https://developers.google.com/identity/protocols/oauth2/scopes#oauth2
-    defaultScope: [
-      "https://www.googleapis.com/auth/userinfo.email",
-      "https://www.googleapis.com/auth/userinfo.profile",
-      "openid"
-    ],
-    createAuthorizationUri(params) {
-      return createAuthorizationUri({
-        ...params,
-        scope: params.scope ?? this.defaultScope,
-        authorizationUri: this.authorizationUri
-      });
-    },
-    async exchangeAuthorizationCode(params) {
-      const response = await exchangeAuthorizationCode({ ...params, tokenUri: this.tokenUri });
-      if (!response.ok) {
-        const { error, error_description } = await response.json();
-        throw new OAuth2Error(response.status, error, error_description);
-      }
-      return await response.json();
-    },
-    async getUserInfo({ id_token }) {
-      invariant(id_token, "id_token is required");
-      invariant(this.jwkSetUri, "jwkSetUri is required");
-      const data = await verifyIdToken(id_token, this.jwkSetUri);
-      return {
-        data,
-        claims: {
-          sub: data.sub,
-          name: data.name,
-          picture: data.picture,
-          email: data.email,
-          email_verified: data.email_verified,
-          given_name: data.given_name,
-          family_name: data.family_name,
-          locale: data.locale
-        }
-      };
-    },
-    async loginOAuth2Native({ pkce: _, credentials, ...params }) {
-      invariant(credentials.code, "code is required");
-      const { code } = credentials;
-      const { tokenUri } = this;
-      const response = await exchangeAuthorizationCode({ code, tokenUri, ...params });
-      if (!response.ok) {
-        const { error, error_description } = await response.json();
-        throw new OAuth2Error(response.status, error, error_description);
-      }
-      const token = await response.json();
-      const userInfo = await this.getUserInfo(token);
-      return { token, userInfo };
-    },
-    async getTokenInfo(id_token) {
-      invariant(id_token, "id_token is required");
-      invariant(this.jwkSetUri, "jwkSetUri is required");
-      const data = await verifyIdToken(id_token, this.jwkSetUri);
-      return {
-        token: {
-          id_token,
-          access_token: "",
-          token_type: "",
-          expires_in: 0,
-          refresh_token: "",
-          scope: ""
-        },
-        userInfo: {
-          data,
-          claims: {
-            sub: data.sub,
-            name: data.name,
-            picture: data.picture,
-            email: data.email,
-            email_verified: data.email_verified,
-            given_name: data.given_name,
-            family_name: data.family_name,
-            locale: data.locale
-          }
-        }
-      };
-    }
-  };
+	return {
+		authorizationUri: "https://accounts.google.com/o/oauth2/v2/auth",
+		tokenUri: "https://oauth2.googleapis.com/token",
+		userInfoUri: "https://www.googleapis.com/oauth2/v3/userinfo",
+		userNameAttribute: "sub",
+		jwkSetUri: "https://www.googleapis.com/oauth2/v3/certs",
+		defaultScope: [
+			"https://www.googleapis.com/auth/userinfo.email",
+			"https://www.googleapis.com/auth/userinfo.profile",
+			"openid"
+		],
+		createAuthorizationUri(params) {
+			return createAuthorizationUri({
+				...params,
+				scope: params.scope ?? this.defaultScope,
+				authorizationUri: this.authorizationUri
+			});
+		},
+		async exchangeAuthorizationCode(params) {
+			const response = await exchangeAuthorizationCode({
+				...params,
+				tokenUri: this.tokenUri
+			});
+			if (!response.ok) {
+				const { error, error_description } = await response.json();
+				throw new OAuth2Error(response.status, error, error_description);
+			}
+			return await response.json();
+		},
+		async getUserInfo({ id_token }) {
+			invariant(id_token, "id_token is required");
+			invariant(this.jwkSetUri, "jwkSetUri is required");
+			const data = await verifyIdToken(id_token, this.jwkSetUri);
+			return {
+				data,
+				claims: {
+					sub: data.sub,
+					name: data.name,
+					picture: data.picture,
+					email: data.email,
+					email_verified: data.email_verified,
+					given_name: data.given_name,
+					family_name: data.family_name,
+					locale: data.locale
+				}
+			};
+		},
+		async loginOAuth2Native({ pkce: _, credentials, ...params }) {
+			invariant(credentials.code, "code is required");
+			const { code } = credentials;
+			const { tokenUri } = this;
+			const response = await exchangeAuthorizationCode({
+				code,
+				tokenUri,
+				...params
+			});
+			if (!response.ok) {
+				const { error, error_description } = await response.json();
+				throw new OAuth2Error(response.status, error, error_description);
+			}
+			const token = await response.json();
+			return {
+				token,
+				userInfo: await this.getUserInfo(token)
+			};
+		},
+		async getTokenInfo(id_token) {
+			invariant(id_token, "id_token is required");
+			invariant(this.jwkSetUri, "jwkSetUri is required");
+			const data = await verifyIdToken(id_token, this.jwkSetUri);
+			return {
+				token: {
+					id_token,
+					access_token: "",
+					token_type: "",
+					expires_in: 0,
+					refresh_token: "",
+					scope: ""
+				},
+				userInfo: {
+					data,
+					claims: {
+						sub: data.sub,
+						name: data.name,
+						picture: data.picture,
+						email: data.email,
+						email_verified: data.email_verified,
+						given_name: data.given_name,
+						family_name: data.family_name,
+						locale: data.locale
+					}
+				}
+			};
+		}
+	};
 }
-var google = createGoogleProvider();
-export {
-  createGoogleProvider,
-  google
-};
+const google = createGoogleProvider();
+//#endregion
+export { createGoogleProvider, google };
+
 //# sourceMappingURL=google.mjs.map

package/dist/oauth2/provider/google.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/oauth2/provider/google.ts"],"sourcesContent":["import { invariant } from '@shware/utils';\nimport { OAuth2Error } from '../error';\nimport type {\n  LoginOAuth2NativeParams,\n  NativeCredential,\n  OAuth2Token,\n  OneTapProvider,\n} from '../types';\nimport { createAuthorizationUri, exchangeAuthorizationCode, verifyIdToken } from './common';\n\nexport function createGoogleProvider(): OneTapProvider {\n  return {\n    authorizationUri: 'https://accounts.google.com/o/oauth2/v2/auth',\n    tokenUri: 'https://oauth2.googleapis.com/token',\n    userInfoUri: 'https://www.googleapis.com/oauth2/v3/userinfo',\n    userNameAttribute: 'sub',\n    jwkSetUri: 'https://www.googleapis.com/oauth2/v3/certs',\n    // https://developers.google.com/identity/protocols/oauth2/scopes#oauth2\n    defaultScope: [\n      'https://www.googleapis.com/auth/userinfo.email',\n      'https://www.googleapis.com/auth/userinfo.profile',\n      'openid',\n    ],\n    createAuthorizationUri(params) {\n      return createAuthorizationUri({\n        ...params,\n        scope: params.scope ?? this.defaultScope,\n        authorizationUri: this.authorizationUri,\n      });\n    },\n    async exchangeAuthorizationCode(params) {\n      const response = await exchangeAuthorizationCode({ ...params, tokenUri: this.tokenUri });\n      if (!response.ok) {\n        const { error, error_description } = (await response.json()) as GoogleErrorResponse;\n        throw new OAuth2Error(response.status, error, error_description);\n      }\n      return (await response.json()) as GoogleToken;\n    },\n    async getUserInfo({ id_token }) {\n      invariant(id_token, 'id_token is required');\n      invariant(this.jwkSetUri, 'jwkSetUri is required');\n      const data = await verifyIdToken<GoogleUserInfo>(id_token, this.jwkSetUri);\n      return {\n        data,\n        claims: {\n          sub: data.sub,\n          name: data.name,\n          picture: data.picture,\n          email: data.email,\n          email_verified: data.email_verified,\n          given_name: data.given_name,\n          family_name: data.family_name,\n          locale: data.locale,\n        },\n      };\n    },\n    async loginOAuth2Native({ pkce: _, credentials, ...params }: LoginOAuth2NativeParams) {\n      invariant(credentials.code, 'code is required');\n      const { code } = credentials;\n      const { tokenUri } = this;\n      const response = await exchangeAuthorizationCode({ code, tokenUri, ...params });\n      if (!response.ok) {\n        const { error, error_description } = (await response.json()) as GoogleErrorResponse;\n        throw new OAuth2Error(response.status, error, error_description);\n      }\n      const token = (await response.json()) as GoogleToken;\n      const userInfo = await this.getUserInfo(token);\n      return { token, userInfo };\n    },\n    async getTokenInfo(id_token: string) {\n      invariant(id_token, 'id_token is required');\n      invariant(this.jwkSetUri, 'jwkSetUri is required');\n      const data = await verifyIdToken<GoogleUserInfo>(id_token, this.jwkSetUri);\n      return {\n        token: {\n          id_token,\n          access_token: '',\n          token_type: '',\n          expires_in: 0,\n          refresh_token: '',\n          scope: '',\n        },\n        userInfo: {\n          data,\n          claims: {\n            sub: data.sub,\n            name: data.name,\n            picture: data.picture,\n            email: data.email,\n            email_verified: data.email_verified,\n            given_name: data.given_name,\n            family_name: data.family_name,\n            locale: data.locale,\n          },\n        },\n      };\n    },\n  };\n}\n\nexport const google = createGoogleProvider();\n\nexport interface GoogleUserInfo {\n  aud: string;\n  azp: string;\n  email: string;\n  email_verified: boolean;\n  exp: number;\n  family_name: string;\n  given_name: string;\n  hd?: string;\n  iat: number;\n  iss: string;\n  jti?: string;\n  locale?: string;\n  name: string;\n  nbf?: number;\n  picture: string;\n  sub: string;\n  nonce?: string;\n}\n\nexport interface GoogleToken extends OAuth2Token {\n  access_token: string;\n  token_type: string;\n  expires_in: number;\n  refresh_token: string;\n  id_token: string;\n  scope: string;\n}\n\n// android,ios has different client_id and redirect_uri\nexport interface GoogleAppCredential extends NativeCredential {\n  state: string;\n  code: string;\n  client_id: string;\n  redirect_uri: string;\n}\n\nexport interface GoogleErrorResponse {\n  error:\n    | 'invalid_request'\n    | 'invalid_client'\n    | 'invalid_grant'\n    | 'invalid_token'\n    | 'invalid_scope'\n    | 'unauthorized_client'\n    | 'unsupported_grant_type'\n    | 'access_denied'\n    | 'server_error';\n  error_description: string;\n}\n"],"mappings":";AAAA,SAAS,iBAAiB;AAC1B,SAAS,mBAAmB;AAO5B,SAAS,wBAAwB,2BAA2B,qBAAqB;AAE1E,SAAS,uBAAuC;AACrD,SAAO;AAAA,IACL,kBAAkB;AAAA,IAClB,UAAU;AAAA,IACV,aAAa;AAAA,IACb,mBAAmB;AAAA,IACnB,WAAW;AAAA;AAAA,IAEX,cAAc;AAAA,MACZ;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,uBAAuB,QAAQ;AAC7B,aAAO,uBAAuB;AAAA,QAC5B,GAAG;AAAA,QACH,OAAO,OAAO,SAAS,KAAK;AAAA,QAC5B,kBAAkB,KAAK;AAAA,MACzB,CAAC;AAAA,IACH;AAAA,IACA,MAAM,0BAA0B,QAAQ;AACtC,YAAM,WAAW,MAAM,0BAA0B,EAAE,GAAG,QAAQ,UAAU,KAAK,SAAS,CAAC;AACvF,UAAI,CAAC,SAAS,IAAI;AAChB,cAAM,EAAE,OAAO,kBAAkB,IAAK,MAAM,SAAS,KAAK;AAC1D,cAAM,IAAI,YAAY,SAAS,QAAQ,OAAO,iBAAiB;AAAA,MACjE;AACA,aAAQ,MAAM,SAAS,KAAK;AAAA,IAC9B;AAAA,IACA,MAAM,YAAY,EAAE,SAAS,GAAG;AAC9B,gBAAU,UAAU,sBAAsB;AAC1C,gBAAU,KAAK,WAAW,uBAAuB;AACjD,YAAM,OAAO,MAAM,cAA8B,UAAU,KAAK,SAAS;AACzE,aAAO;AAAA,QACL;AAAA,QACA,QAAQ;AAAA,UACN,KAAK,KAAK;AAAA,UACV,MAAM,KAAK;AAAA,UACX,SAAS,KAAK;AAAA,UACd,OAAO,KAAK;AAAA,UACZ,gBAAgB,KAAK;AAAA,UACrB,YAAY,KAAK;AAAA,UACjB,aAAa,KAAK;AAAA,UAClB,QAAQ,KAAK;AAAA,QACf;AAAA,MACF;AAAA,IACF;AAAA,IACA,MAAM,kBAAkB,EAAE,MAAM,GAAG,aAAa,GAAG,OAAO,GAA4B;AACpF,gBAAU,YAAY,MAAM,kBAAkB;AAC9C,YAAM,EAAE,KAAK,IAAI;AACjB,YAAM,EAAE,SAAS,IAAI;AACrB,YAAM,WAAW,MAAM,0BAA0B,EAAE,MAAM,UAAU,GAAG,OAAO,CAAC;AAC9E,UAAI,CAAC,SAAS,IAAI;AAChB,cAAM,EAAE,OAAO,kBAAkB,IAAK,MAAM,SAAS,KAAK;AAC1D,cAAM,IAAI,YAAY,SAAS,QAAQ,OAAO,iBAAiB;AAAA,MACjE;AACA,YAAM,QAAS,MAAM,SAAS,KAAK;AACnC,YAAM,WAAW,MAAM,KAAK,YAAY,KAAK;AAC7C,aAAO,EAAE,OAAO,SAAS;AAAA,IAC3B;AAAA,IACA,MAAM,aAAa,UAAkB;AACnC,gBAAU,UAAU,sBAAsB;AAC1C,gBAAU,KAAK,WAAW,uBAAuB;AACjD,YAAM,OAAO,MAAM,cAA8B,UAAU,KAAK,SAAS;AACzE,aAAO;AAAA,QACL,OAAO;AAAA,UACL;AAAA,UACA,cAAc;AAAA,UACd,YAAY;AAAA,UACZ,YAAY;AAAA,UACZ,eAAe;AAAA,UACf,OAAO;AAAA,QACT;AAAA,QACA,UAAU;AAAA,UACR;AAAA,UACA,QAAQ;AAAA,YACN,KAAK,KAAK;AAAA,YACV,MAAM,KAAK;AAAA,YACX,SAAS,KAAK;AAAA,YACd,OAAO,KAAK;AAAA,YACZ,gBAAgB,KAAK;AAAA,YACrB,YAAY,KAAK;AAAA,YACjB,aAAa,KAAK;AAAA,YAClB,QAAQ,KAAK;AAAA,UACf;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAEO,IAAM,SAAS,qBAAqB;","names":[]}
+{"version":3,"file":"google.mjs","names":[],"sources":["../../../src/oauth2/provider/google.ts"],"sourcesContent":["import { invariant } from '@shware/utils';\nimport { OAuth2Error } from '../error';\nimport type {\n  LoginOAuth2NativeParams,\n  NativeCredential,\n  OAuth2Token,\n  OneTapProvider,\n} from '../types';\nimport { createAuthorizationUri, exchangeAuthorizationCode, verifyIdToken } from './common';\n\nexport function createGoogleProvider(): OneTapProvider {\n  return {\n    authorizationUri: 'https://accounts.google.com/o/oauth2/v2/auth',\n    tokenUri: 'https://oauth2.googleapis.com/token',\n    userInfoUri: 'https://www.googleapis.com/oauth2/v3/userinfo',\n    userNameAttribute: 'sub',\n    jwkSetUri: 'https://www.googleapis.com/oauth2/v3/certs',\n    // https://developers.google.com/identity/protocols/oauth2/scopes#oauth2\n    defaultScope: [\n      'https://www.googleapis.com/auth/userinfo.email',\n      'https://www.googleapis.com/auth/userinfo.profile',\n      'openid',\n    ],\n    createAuthorizationUri(params) {\n      return createAuthorizationUri({\n        ...params,\n        scope: params.scope ?? this.defaultScope,\n        authorizationUri: this.authorizationUri,\n      });\n    },\n    async exchangeAuthorizationCode(params) {\n      const response = await exchangeAuthorizationCode({ ...params, tokenUri: this.tokenUri });\n      if (!response.ok) {\n        const { error, error_description } = (await response.json()) as GoogleErrorResponse;\n        throw new OAuth2Error(response.status, error, error_description);\n      }\n      return (await response.json()) as GoogleToken;\n    },\n    async getUserInfo({ id_token }) {\n      invariant(id_token, 'id_token is required');\n      invariant(this.jwkSetUri, 'jwkSetUri is required');\n      const data = await verifyIdToken<GoogleUserInfo>(id_token, this.jwkSetUri);\n      return {\n        data,\n        claims: {\n          sub: data.sub,\n          name: data.name,\n          picture: data.picture,\n          email: data.email,\n          email_verified: data.email_verified,\n          given_name: data.given_name,\n          family_name: data.family_name,\n          locale: data.locale,\n        },\n      };\n    },\n    async loginOAuth2Native({ pkce: _, credentials, ...params }: LoginOAuth2NativeParams) {\n      invariant(credentials.code, 'code is required');\n      const { code } = credentials;\n      const { tokenUri } = this;\n      const response = await exchangeAuthorizationCode({ code, tokenUri, ...params });\n      if (!response.ok) {\n        const { error, error_description } = (await response.json()) as GoogleErrorResponse;\n        throw new OAuth2Error(response.status, error, error_description);\n      }\n      const token = (await response.json()) as GoogleToken;\n      const userInfo = await this.getUserInfo(token);\n      return { token, userInfo };\n    },\n    async getTokenInfo(id_token: string) {\n      invariant(id_token, 'id_token is required');\n      invariant(this.jwkSetUri, 'jwkSetUri is required');\n      const data = await verifyIdToken<GoogleUserInfo>(id_token, this.jwkSetUri);\n      return {\n        token: {\n          id_token,\n          access_token: '',\n          token_type: '',\n          expires_in: 0,\n          refresh_token: '',\n          scope: '',\n        },\n        userInfo: {\n          data,\n          claims: {\n            sub: data.sub,\n            name: data.name,\n            picture: data.picture,\n            email: data.email,\n            email_verified: data.email_verified,\n            given_name: data.given_name,\n            family_name: data.family_name,\n            locale: data.locale,\n          },\n        },\n      };\n    },\n  };\n}\n\nexport const google = createGoogleProvider();\n\nexport interface GoogleUserInfo {\n  aud: string;\n  azp: string;\n  email: string;\n  email_verified: boolean;\n  exp: number;\n  family_name: string;\n  given_name: string;\n  hd?: string;\n  iat: number;\n  iss: string;\n  jti?: string;\n  locale?: string;\n  name: string;\n  nbf?: number;\n  picture: string;\n  sub: string;\n  nonce?: string;\n}\n\nexport interface GoogleToken extends OAuth2Token {\n  access_token: string;\n  token_type: string;\n  expires_in: number;\n  refresh_token: string;\n  id_token: string;\n  scope: string;\n}\n\n// android,ios has different client_id and redirect_uri\nexport interface GoogleAppCredential extends NativeCredential {\n  state: string;\n  code: string;\n  client_id: string;\n  redirect_uri: string;\n}\n\nexport interface GoogleErrorResponse {\n  error:\n    | 'invalid_request'\n    | 'invalid_client'\n    | 'invalid_grant'\n    | 'invalid_token'\n    | 'invalid_scope'\n    | 'unauthorized_client'\n    | 'unsupported_grant_type'\n    | 'access_denied'\n    | 'server_error';\n  error_description: string;\n}\n"],"mappings":";;;;AAUA,SAAgB,uBAAuC;CACrD,OAAO;EACL,kBAAkB;EAClB,UAAU;EACV,aAAa;EACb,mBAAmB;EACnB,WAAW;EAEX,cAAc;GACZ;GACA;GACA;EACF;EACA,uBAAuB,QAAQ;GAC7B,OAAO,uBAAuB;IAC5B,GAAG;IACH,OAAO,OAAO,SAAS,KAAK;IAC5B,kBAAkB,KAAK;GACzB,CAAC;EACH;EACA,MAAM,0BAA0B,QAAQ;GACtC,MAAM,WAAW,MAAM,0BAA0B;IAAE,GAAG;IAAQ,UAAU,KAAK;GAAS,CAAC;GACvF,IAAI,CAAC,SAAS,IAAI;IAChB,MAAM,EAAE,OAAO,sBAAuB,MAAM,SAAS,KAAK;IAC1D,MAAM,IAAI,YAAY,SAAS,QAAQ,OAAO,iBAAiB;GACjE;GACA,OAAQ,MAAM,SAAS,KAAK;EAC9B;EACA,MAAM,YAAY,EAAE,YAAY;GAC9B,UAAU,UAAU,sBAAsB;GAC1C,UAAU,KAAK,WAAW,uBAAuB;GACjD,MAAM,OAAO,MAAM,cAA8B,UAAU,KAAK,SAAS;GACzE,OAAO;IACL;IACA,QAAQ;KACN,KAAK,KAAK;KACV,MAAM,KAAK;KACX,SAAS,KAAK;KACd,OAAO,KAAK;KACZ,gBAAgB,KAAK;KACrB,YAAY,KAAK;KACjB,aAAa,KAAK;KAClB,QAAQ,KAAK;IACf;GACF;EACF;EACA,MAAM,kBAAkB,EAAE,MAAM,GAAG,aAAa,GAAG,UAAmC;GACpF,UAAU,YAAY,MAAM,kBAAkB;GAC9C,MAAM,EAAE,SAAS;GACjB,MAAM,EAAE,aAAa;GACrB,MAAM,WAAW,MAAM,0BAA0B;IAAE;IAAM;IAAU,GAAG;GAAO,CAAC;GAC9E,IAAI,CAAC,SAAS,IAAI;IAChB,MAAM,EAAE,OAAO,sBAAuB,MAAM,SAAS,KAAK;IAC1D,MAAM,IAAI,YAAY,SAAS,QAAQ,OAAO,iBAAiB;GACjE;GACA,MAAM,QAAS,MAAM,SAAS,KAAK;GAEnC,OAAO;IAAE;IAAO,UAAA,MADO,KAAK,YAAY,KAAK;GACpB;EAC3B;EACA,MAAM,aAAa,UAAkB;GACnC,UAAU,UAAU,sBAAsB;GAC1C,UAAU,KAAK,WAAW,uBAAuB;GACjD,MAAM,OAAO,MAAM,cAA8B,UAAU,KAAK,SAAS;GACzE,OAAO;IACL,OAAO;KACL;KACA,cAAc;KACd,YAAY;KACZ,YAAY;KACZ,eAAe;KACf,OAAO;IACT;IACA,UAAU;KACR;KACA,QAAQ;MACN,KAAK,KAAK;MACV,MAAM,KAAK;MACX,SAAS,KAAK;MACd,OAAO,KAAK;MACZ,gBAAgB,KAAK;MACrB,YAAY,KAAK;MACjB,aAAa,KAAK;MAClB,QAAQ,KAAK;KACf;IACF;GACF;EACF;CACF;AACF;AAEA,MAAa,SAAS,qBAAqB"}

package/dist/oauth2/provider/index.cjs

@@ -1,46 +1,13 @@
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-
-// src/oauth2/provider/index.ts
-var provider_exports = {};
-__export(provider_exports, {
-  apple: () => import_apple.apple,
-  facebook: () => import_facebook.facebook,
-  github: () => import_github.github,
-  google: () => import_google.google,
-  wechat: () => import_wechat.wechat,
-  x: () => import_x.x
-});
-module.exports = __toCommonJS(provider_exports);
-var import_apple = require("./apple.cjs");
-var import_facebook = require("./facebook.cjs");
-var import_github = require("./github.cjs");
-var import_google = require("./google.cjs");
-var import_wechat = require("./wechat.cjs");
-var import_x = require("./x.cjs");
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  apple,
-  facebook,
-  github,
-  google,
-  wechat,
-  x
-});
-//# sourceMappingURL=index.cjs.map
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const require_oauth2_provider_apple = require("./apple.cjs");
+const require_oauth2_provider_facebook = require("./facebook.cjs");
+const require_oauth2_provider_github = require("./github.cjs");
+const require_oauth2_provider_google = require("./google.cjs");
+const require_oauth2_provider_wechat = require("./wechat.cjs");
+const require_oauth2_provider_x = require("./x.cjs");
+exports.apple = require_oauth2_provider_apple.apple;
+exports.facebook = require_oauth2_provider_facebook.facebook;
+exports.github = require_oauth2_provider_github.github;
+exports.google = require_oauth2_provider_google.google;
+exports.wechat = require_oauth2_provider_wechat.wechat;
+exports.x = require_oauth2_provider_x.x;

package/dist/oauth2/provider/index.d.cts

@@ -1,7 +1,7 @@
-export { apple } from './apple.cjs';
-export { facebook } from './facebook.cjs';
-export { github } from './github.cjs';
-export { google } from './google.cjs';
-export { wechat } from './wechat.cjs';
-export { x } from './x.cjs';
-import '../types.cjs';
+import { apple } from "./apple.cjs";
+import { facebook } from "./facebook.cjs";
+import { github } from "./github.cjs";
+import { google } from "./google.cjs";
+import { wechat } from "./wechat.cjs";
+import { x } from "./x.cjs";
+export { apple, facebook, github, google, wechat, x };

package/dist/oauth2/provider/index.d.mts

@@ -0,0 +1,7 @@
+import { apple } from "./apple.mjs";
+import { facebook } from "./facebook.mjs";
+import { github } from "./github.mjs";
+import { google } from "./google.mjs";
+import { wechat } from "./wechat.mjs";
+import { x } from "./x.mjs";
+export { apple, facebook, github, google, wechat, x };

package/dist/oauth2/provider/index.mjs

@@ -1,16 +1,7 @@
-// src/oauth2/provider/index.ts
 import { apple } from "./apple.mjs";
 import { facebook } from "./facebook.mjs";
 import { github } from "./github.mjs";
 import { google } from "./google.mjs";
 import { wechat } from "./wechat.mjs";
 import { x } from "./x.mjs";
-export {
-  apple,
-  facebook,
-  github,
-  google,
-  wechat,
-  x
-};
-//# sourceMappingURL=index.mjs.map
+export { apple, facebook, github, google, wechat, x };

package/dist/oauth2/provider/wechat.cjs

@@ -1,102 +1,80 @@
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-
-// src/oauth2/provider/wechat.ts
-var wechat_exports = {};
-__export(wechat_exports, {
-  createWechatProvider: () => createWechatProvider,
-  wechat: () => wechat
-});
-module.exports = __toCommonJS(wechat_exports);
-var import_utils = require("@shware/utils");
-var import_error = require("../error.cjs");
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const require_oauth2_error = require("../error.cjs");
+let _shware_utils = require("@shware/utils");
+//#region src/oauth2/provider/wechat.ts
+/**
+* reference: https://developers.weixin.qq.com/doc/offiaccount/en/OA_Web_Apps/Wechat_webpage_authorization.html
+*/
 function createWechatProvider(options = { isWechatBrowser: false }) {
-  const { isWechatBrowser } = options;
-  return {
-    authorizationUri: isWechatBrowser ? "https://open.weixin.qq.com/connect/oauth2/authorize" : "https://open.weixin.qq.com/connect/qrconnect",
-    tokenUri: "https://api.weixin.qq.com/sns/oauth2/access_token",
-    tokenRefreshUri: "https://api.weixin.qq.com/sns/oauth2/refresh_token",
-    userInfoUri: "https://api.weixin.qq.com/sns/userinfo",
-    defaultScope: [isWechatBrowser ? "snsapi_userinfo" : "snsapi_login"],
-    createAuthorizationUri(params) {
-      const url = new URL(this.authorizationUri);
-      url.searchParams.set("appid", params.clientId);
-      url.searchParams.set("scope", (params.scope ?? this.defaultScope).join(","));
-      url.searchParams.set("redirect_uri", params.redirectUri);
-      url.searchParams.set("response_type", "code");
-      url.searchParams.set("state", params.state);
-      return url;
-    },
-    async exchangeAuthorizationCode(params) {
-      const url = new URL(this.tokenUri);
-      url.searchParams.set("appid", params.clientId);
-      url.searchParams.set("secret", params.clientSecret);
-      url.searchParams.set("code", params.code);
-      url.searchParams.set("grant_type", "authorization_code");
-      const response = await fetch(url.href);
-      if (!response.ok) {
-        const { errcode, errmsg } = await response.json();
-        throw new import_error.OAuth2Error(response.status, errmsg, `errcode: ${errcode}`);
-      }
-      return await response.json();
-    },
-    async getUserInfo({ access_token, openid }) {
-      (0, import_utils.invariant)(this.userInfoUri, "userInfoUri is required");
-      (0, import_utils.invariant)(openid && typeof openid === "string", "openid is required");
-      const url = new URL(this.userInfoUri);
-      url.searchParams.set("access_token", access_token);
-      url.searchParams.set("openid", openid);
-      const response = await fetch(url.href);
-      if (!response.ok) {
-        const { errcode, errmsg } = await response.json();
-        throw new import_error.OAuth2Error(response.status, errmsg, `errcode: ${errcode}`);
-      }
-      const data = await response.json();
-      return {
-        data,
-        claims: {
-          sub: data.unionid ?? data.openid,
-          name: data.nickname,
-          picture: `${data.headimgurl.split("/").slice(0, -1).join("/")}/0`,
-          gender: data.sex === 1 ? "male" : data.sex === 2 ? "female" : void 0
-        }
-      };
-    },
-    async refreshAccessToken(params) {
-      (0, import_utils.invariant)(this.tokenRefreshUri, "tokenRefreshUri is required");
-      const url = new URL(this.tokenRefreshUri);
-      url.searchParams.set("appid", params.clientId);
-      url.searchParams.set("grant_type", "refresh_token");
-      url.searchParams.set("refresh_token", params.refreshToken);
-      const response = await fetch(url.href);
-      if (!response.ok) {
-        const { errcode, errmsg } = await response.json();
-        throw new import_error.OAuth2Error(response.status, errmsg, `errcode: ${errcode}`);
-      }
-      return await response.json();
-    }
-  };
+	const { isWechatBrowser } = options;
+	return {
+		authorizationUri: isWechatBrowser ? "https://open.weixin.qq.com/connect/oauth2/authorize" : "https://open.weixin.qq.com/connect/qrconnect",
+		tokenUri: "https://api.weixin.qq.com/sns/oauth2/access_token",
+		tokenRefreshUri: "https://api.weixin.qq.com/sns/oauth2/refresh_token",
+		userInfoUri: "https://api.weixin.qq.com/sns/userinfo",
+		defaultScope: [isWechatBrowser ? "snsapi_userinfo" : "snsapi_login"],
+		createAuthorizationUri(params) {
+			const url = new URL(this.authorizationUri);
+			url.searchParams.set("appid", params.clientId);
+			url.searchParams.set("scope", (params.scope ?? this.defaultScope).join(","));
+			url.searchParams.set("redirect_uri", params.redirectUri);
+			url.searchParams.set("response_type", "code");
+			url.searchParams.set("state", params.state);
+			return url;
+		},
+		async exchangeAuthorizationCode(params) {
+			const url = new URL(this.tokenUri);
+			url.searchParams.set("appid", params.clientId);
+			url.searchParams.set("secret", params.clientSecret);
+			url.searchParams.set("code", params.code);
+			url.searchParams.set("grant_type", "authorization_code");
+			const response = await fetch(url.href);
+			if (!response.ok) {
+				const { errcode, errmsg } = await response.json();
+				throw new require_oauth2_error.OAuth2Error(response.status, errmsg, `errcode: ${errcode}`);
+			}
+			return await response.json();
+		},
+		async getUserInfo({ access_token, openid }) {
+			(0, _shware_utils.invariant)(this.userInfoUri, "userInfoUri is required");
+			(0, _shware_utils.invariant)(openid && typeof openid === "string", "openid is required");
+			const url = new URL(this.userInfoUri);
+			url.searchParams.set("access_token", access_token);
+			url.searchParams.set("openid", openid);
+			const response = await fetch(url.href);
+			if (!response.ok) {
+				const { errcode, errmsg } = await response.json();
+				throw new require_oauth2_error.OAuth2Error(response.status, errmsg, `errcode: ${errcode}`);
+			}
+			const data = await response.json();
+			return {
+				data,
+				claims: {
+					sub: data.unionid ?? data.openid,
+					name: data.nickname,
+					picture: `${data.headimgurl.split("/").slice(0, -1).join("/")}/0`,
+					gender: data.sex === 1 ? "male" : data.sex === 2 ? "female" : void 0
+				}
+			};
+		},
+		async refreshAccessToken(params) {
+			(0, _shware_utils.invariant)(this.tokenRefreshUri, "tokenRefreshUri is required");
+			const url = new URL(this.tokenRefreshUri);
+			url.searchParams.set("appid", params.clientId);
+			url.searchParams.set("grant_type", "refresh_token");
+			url.searchParams.set("refresh_token", params.refreshToken);
+			const response = await fetch(url.href);
+			if (!response.ok) {
+				const { errcode, errmsg } = await response.json();
+				throw new require_oauth2_error.OAuth2Error(response.status, errmsg, `errcode: ${errcode}`);
+			}
+			return await response.json();
+		}
+	};
 }
-var wechat = createWechatProvider();
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  createWechatProvider,
-  wechat
-});
+const wechat = createWechatProvider();
+//#endregion
+exports.createWechatProvider = createWechatProvider;
+exports.wechat = wechat;
+
 //# sourceMappingURL=wechat.cjs.map

package/dist/oauth2/provider/wechat.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/oauth2/provider/wechat.ts"],"sourcesContent":["import { invariant } from '@shware/utils';\nimport { OAuth2Error } from '../error';\nimport type { OAuth2Token, Provider } from '../types';\n\nexport type Options = { isWechatBrowser: boolean };\n\n/**\n * reference: https://developers.weixin.qq.com/doc/offiaccount/en/OA_Web_Apps/Wechat_webpage_authorization.html\n */\nexport function createWechatProvider(options: Options = { isWechatBrowser: false }): Provider {\n  const { isWechatBrowser } = options;\n  return {\n    authorizationUri: isWechatBrowser\n      ? 'https://open.weixin.qq.com/connect/oauth2/authorize'\n      : 'https://open.weixin.qq.com/connect/qrconnect',\n    tokenUri: 'https://api.weixin.qq.com/sns/oauth2/access_token',\n    tokenRefreshUri: 'https://api.weixin.qq.com/sns/oauth2/refresh_token',\n    userInfoUri: 'https://api.weixin.qq.com/sns/userinfo',\n    defaultScope: [isWechatBrowser ? 'snsapi_userinfo' : 'snsapi_login'],\n    createAuthorizationUri(params) {\n      const url = new URL(this.authorizationUri);\n      url.searchParams.set('appid', params.clientId);\n      url.searchParams.set('scope', (params.scope ?? this.defaultScope).join(','));\n      url.searchParams.set('redirect_uri', params.redirectUri);\n      url.searchParams.set('response_type', 'code');\n      url.searchParams.set('state', params.state);\n      return url;\n    },\n    async exchangeAuthorizationCode(params) {\n      const url = new URL(this.tokenUri);\n      url.searchParams.set('appid', params.clientId);\n      url.searchParams.set('secret', params.clientSecret);\n      url.searchParams.set('code', params.code);\n      url.searchParams.set('grant_type', 'authorization_code');\n      const response = await fetch(url.href);\n      if (!response.ok) {\n        const { errcode, errmsg } = (await response.json()) as WechatErrorResponse;\n        throw new OAuth2Error(response.status, errmsg, `errcode: ${errcode}`);\n      }\n      return (await response.json()) as WechatToken;\n    },\n    async getUserInfo({ access_token, openid }) {\n      invariant(this.userInfoUri, 'userInfoUri is required');\n      invariant(openid && typeof openid === 'string', 'openid is required');\n      const url = new URL(this.userInfoUri);\n      url.searchParams.set('access_token', access_token);\n      url.searchParams.set('openid', openid);\n      const response = await fetch(url.href);\n      if (!response.ok) {\n        const { errcode, errmsg } = (await response.json()) as WechatErrorResponse;\n        throw new OAuth2Error(response.status, errmsg, `errcode: ${errcode}`);\n      }\n      const data = (await response.json()) as WechatUserInfo;\n\n      return {\n        data,\n        claims: {\n          sub: data.unionid ?? data.openid,\n          name: data.nickname,\n          picture: `${data.headimgurl.split('/').slice(0, -1).join('/')}/0`,\n          gender: data.sex === 1 ? 'male' : data.sex === 2 ? 'female' : undefined,\n        },\n      };\n    },\n    async refreshAccessToken(params) {\n      invariant(this.tokenRefreshUri, 'tokenRefreshUri is required');\n      const url = new URL(this.tokenRefreshUri);\n      url.searchParams.set('appid', params.clientId);\n      url.searchParams.set('grant_type', 'refresh_token');\n      url.searchParams.set('refresh_token', params.refreshToken);\n      const response = await fetch(url.href);\n      if (!response.ok) {\n        const { errcode, errmsg } = (await response.json()) as WechatErrorResponse;\n        throw new OAuth2Error(response.status, errmsg, `errcode: ${errcode}`);\n      }\n      return (await response.json()) as WechatToken;\n    },\n  };\n}\n\nexport const wechat = createWechatProvider();\n\nexport interface WechatUserInfo {\n  openid: string;\n  nickname: string;\n  sex: 0 | 1 | 2; // 0: unknown, 1: male, 2: female\n  province: string;\n  city: string;\n  country: string;\n  /**\n   * User's profile photo. The last numeric value represents the size of a square profile photo\n   * (The value can be 0, 46, 64, 96, or 132. The value 0 represents a 640*640 square profile\n   * photo). This parameter is left blank if a user has no profile photo. If the user changes the\n   * profile photo, the URL of the original profile photo will expire.\n   * e.g. http://thirdwx.qlogo.cn/mmopen/g3MonUZtNHkdmzicIlibx6iaFqAc56vxLSUfpb6n5WKSYVY0ChQKkiaJSgQ1dZuTOgvLLrhJbERQQ4eMsv84eavHiaiceqxibJxCfHe/46\n   */\n  headimgurl: string;\n  privilege: string[];\n  unionid?: string;\n}\n\nexport interface WechatToken extends OAuth2Token {\n  access_token: string;\n  expires_in: number;\n  refresh_token: string;\n  openid: string;\n  scope: string;\n  unionid?: string;\n}\n\ninterface WechatErrorResponse {\n  errcode: number;\n  errmsg: string;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,mBAA0B;AAC1B,mBAA4B;AAQrB,SAAS,qBAAqB,UAAmB,EAAE,iBAAiB,MAAM,GAAa;AAC5F,QAAM,EAAE,gBAAgB,IAAI;AAC5B,SAAO;AAAA,IACL,kBAAkB,kBACd,wDACA;AAAA,IACJ,UAAU;AAAA,IACV,iBAAiB;AAAA,IACjB,aAAa;AAAA,IACb,cAAc,CAAC,kBAAkB,oBAAoB,cAAc;AAAA,IACnE,uBAAuB,QAAQ;AAC7B,YAAM,MAAM,IAAI,IAAI,KAAK,gBAAgB;AACzC,UAAI,aAAa,IAAI,SAAS,OAAO,QAAQ;AAC7C,UAAI,aAAa,IAAI,UAAU,OAAO,SAAS,KAAK,cAAc,KAAK,GAAG,CAAC;AAC3E,UAAI,aAAa,IAAI,gBAAgB,OAAO,WAAW;AACvD,UAAI,aAAa,IAAI,iBAAiB,MAAM;AAC5C,UAAI,aAAa,IAAI,SAAS,OAAO,KAAK;AAC1C,aAAO;AAAA,IACT;AAAA,IACA,MAAM,0BAA0B,QAAQ;AACtC,YAAM,MAAM,IAAI,IAAI,KAAK,QAAQ;AACjC,UAAI,aAAa,IAAI,SAAS,OAAO,QAAQ;AAC7C,UAAI,aAAa,IAAI,UAAU,OAAO,YAAY;AAClD,UAAI,aAAa,IAAI,QAAQ,OAAO,IAAI;AACxC,UAAI,aAAa,IAAI,cAAc,oBAAoB;AACvD,YAAM,WAAW,MAAM,MAAM,IAAI,IAAI;AACrC,UAAI,CAAC,SAAS,IAAI;AAChB,cAAM,EAAE,SAAS,OAAO,IAAK,MAAM,SAAS,KAAK;AACjD,cAAM,IAAI,yBAAY,SAAS,QAAQ,QAAQ,YAAY,OAAO,EAAE;AAAA,MACtE;AACA,aAAQ,MAAM,SAAS,KAAK;AAAA,IAC9B;AAAA,IACA,MAAM,YAAY,EAAE,cAAc,OAAO,GAAG;AAC1C,kCAAU,KAAK,aAAa,yBAAyB;AACrD,kCAAU,UAAU,OAAO,WAAW,UAAU,oBAAoB;AACpE,YAAM,MAAM,IAAI,IAAI,KAAK,WAAW;AACpC,UAAI,aAAa,IAAI,gBAAgB,YAAY;AACjD,UAAI,aAAa,IAAI,UAAU,MAAM;AACrC,YAAM,WAAW,MAAM,MAAM,IAAI,IAAI;AACrC,UAAI,CAAC,SAAS,IAAI;AAChB,cAAM,EAAE,SAAS,OAAO,IAAK,MAAM,SAAS,KAAK;AACjD,cAAM,IAAI,yBAAY,SAAS,QAAQ,QAAQ,YAAY,OAAO,EAAE;AAAA,MACtE;AACA,YAAM,OAAQ,MAAM,SAAS,KAAK;AAElC,aAAO;AAAA,QACL;AAAA,QACA,QAAQ;AAAA,UACN,KAAK,KAAK,WAAW,KAAK;AAAA,UAC1B,MAAM,KAAK;AAAA,UACX,SAAS,GAAG,KAAK,WAAW,MAAM,GAAG,EAAE,MAAM,GAAG,EAAE,EAAE,KAAK,GAAG,CAAC;AAAA,UAC7D,QAAQ,KAAK,QAAQ,IAAI,SAAS,KAAK,QAAQ,IAAI,WAAW;AAAA,QAChE;AAAA,MACF;AAAA,IACF;AAAA,IACA,MAAM,mBAAmB,QAAQ;AAC/B,kCAAU,KAAK,iBAAiB,6BAA6B;AAC7D,YAAM,MAAM,IAAI,IAAI,KAAK,eAAe;AACxC,UAAI,aAAa,IAAI,SAAS,OAAO,QAAQ;AAC7C,UAAI,aAAa,IAAI,cAAc,eAAe;AAClD,UAAI,aAAa,IAAI,iBAAiB,OAAO,YAAY;AACzD,YAAM,WAAW,MAAM,MAAM,IAAI,IAAI;AACrC,UAAI,CAAC,SAAS,IAAI;AAChB,cAAM,EAAE,SAAS,OAAO,IAAK,MAAM,SAAS,KAAK;AACjD,cAAM,IAAI,yBAAY,SAAS,QAAQ,QAAQ,YAAY,OAAO,EAAE;AAAA,MACtE;AACA,aAAQ,MAAM,SAAS,KAAK;AAAA,IAC9B;AAAA,EACF;AACF;AAEO,IAAM,SAAS,qBAAqB;","names":[]}
+{"version":3,"file":"wechat.cjs","names":["OAuth2Error"],"sources":["../../../src/oauth2/provider/wechat.ts"],"sourcesContent":["import { invariant } from '@shware/utils';\nimport { OAuth2Error } from '../error';\nimport type { OAuth2Token, Provider } from '../types';\n\nexport type Options = { isWechatBrowser: boolean };\n\n/**\n * reference: https://developers.weixin.qq.com/doc/offiaccount/en/OA_Web_Apps/Wechat_webpage_authorization.html\n */\nexport function createWechatProvider(options: Options = { isWechatBrowser: false }): Provider {\n  const { isWechatBrowser } = options;\n  return {\n    authorizationUri: isWechatBrowser\n      ? 'https://open.weixin.qq.com/connect/oauth2/authorize'\n      : 'https://open.weixin.qq.com/connect/qrconnect',\n    tokenUri: 'https://api.weixin.qq.com/sns/oauth2/access_token',\n    tokenRefreshUri: 'https://api.weixin.qq.com/sns/oauth2/refresh_token',\n    userInfoUri: 'https://api.weixin.qq.com/sns/userinfo',\n    defaultScope: [isWechatBrowser ? 'snsapi_userinfo' : 'snsapi_login'],\n    createAuthorizationUri(params) {\n      const url = new URL(this.authorizationUri);\n      url.searchParams.set('appid', params.clientId);\n      url.searchParams.set('scope', (params.scope ?? this.defaultScope).join(','));\n      url.searchParams.set('redirect_uri', params.redirectUri);\n      url.searchParams.set('response_type', 'code');\n      url.searchParams.set('state', params.state);\n      return url;\n    },\n    async exchangeAuthorizationCode(params) {\n      const url = new URL(this.tokenUri);\n      url.searchParams.set('appid', params.clientId);\n      url.searchParams.set('secret', params.clientSecret);\n      url.searchParams.set('code', params.code);\n      url.searchParams.set('grant_type', 'authorization_code');\n      const response = await fetch(url.href);\n      if (!response.ok) {\n        const { errcode, errmsg } = (await response.json()) as WechatErrorResponse;\n        throw new OAuth2Error(response.status, errmsg, `errcode: ${errcode}`);\n      }\n      return (await response.json()) as WechatToken;\n    },\n    async getUserInfo({ access_token, openid }) {\n      invariant(this.userInfoUri, 'userInfoUri is required');\n      invariant(openid && typeof openid === 'string', 'openid is required');\n      const url = new URL(this.userInfoUri);\n      url.searchParams.set('access_token', access_token);\n      url.searchParams.set('openid', openid);\n      const response = await fetch(url.href);\n      if (!response.ok) {\n        const { errcode, errmsg } = (await response.json()) as WechatErrorResponse;\n        throw new OAuth2Error(response.status, errmsg, `errcode: ${errcode}`);\n      }\n      const data = (await response.json()) as WechatUserInfo;\n\n      return {\n        data,\n        claims: {\n          sub: data.unionid ?? data.openid,\n          name: data.nickname,\n          picture: `${data.headimgurl.split('/').slice(0, -1).join('/')}/0`,\n          gender: data.sex === 1 ? 'male' : data.sex === 2 ? 'female' : undefined,\n        },\n      };\n    },\n    async refreshAccessToken(params) {\n      invariant(this.tokenRefreshUri, 'tokenRefreshUri is required');\n      const url = new URL(this.tokenRefreshUri);\n      url.searchParams.set('appid', params.clientId);\n      url.searchParams.set('grant_type', 'refresh_token');\n      url.searchParams.set('refresh_token', params.refreshToken);\n      const response = await fetch(url.href);\n      if (!response.ok) {\n        const { errcode, errmsg } = (await response.json()) as WechatErrorResponse;\n        throw new OAuth2Error(response.status, errmsg, `errcode: ${errcode}`);\n      }\n      return (await response.json()) as WechatToken;\n    },\n  };\n}\n\nexport const wechat = createWechatProvider();\n\nexport interface WechatUserInfo {\n  openid: string;\n  nickname: string;\n  sex: 0 | 1 | 2; // 0: unknown, 1: male, 2: female\n  province: string;\n  city: string;\n  country: string;\n  /**\n   * User's profile photo. The last numeric value represents the size of a square profile photo\n   * (The value can be 0, 46, 64, 96, or 132. The value 0 represents a 640*640 square profile\n   * photo). This parameter is left blank if a user has no profile photo. If the user changes the\n   * profile photo, the URL of the original profile photo will expire.\n   * e.g. http://thirdwx.qlogo.cn/mmopen/g3MonUZtNHkdmzicIlibx6iaFqAc56vxLSUfpb6n5WKSYVY0ChQKkiaJSgQ1dZuTOgvLLrhJbERQQ4eMsv84eavHiaiceqxibJxCfHe/46\n   */\n  headimgurl: string;\n  privilege: string[];\n  unionid?: string;\n}\n\nexport interface WechatToken extends OAuth2Token {\n  access_token: string;\n  expires_in: number;\n  refresh_token: string;\n  openid: string;\n  scope: string;\n  unionid?: string;\n}\n\ninterface WechatErrorResponse {\n  errcode: number;\n  errmsg: string;\n}\n"],"mappings":";;;;;;;AASA,SAAgB,qBAAqB,UAAmB,EAAE,iBAAiB,MAAM,GAAa;CAC5F,MAAM,EAAE,oBAAoB;CAC5B,OAAO;EACL,kBAAkB,kBACd,wDACA;EACJ,UAAU;EACV,iBAAiB;EACjB,aAAa;EACb,cAAc,CAAC,kBAAkB,oBAAoB,cAAc;EACnE,uBAAuB,QAAQ;GAC7B,MAAM,MAAM,IAAI,IAAI,KAAK,gBAAgB;GACzC,IAAI,aAAa,IAAI,SAAS,OAAO,QAAQ;GAC7C,IAAI,aAAa,IAAI,UAAU,OAAO,SAAS,KAAK,aAAA,CAAc,KAAK,GAAG,CAAC;GAC3E,IAAI,aAAa,IAAI,gBAAgB,OAAO,WAAW;GACvD,IAAI,aAAa,IAAI,iBAAiB,MAAM;GAC5C,IAAI,aAAa,IAAI,SAAS,OAAO,KAAK;GAC1C,OAAO;EACT;EACA,MAAM,0BAA0B,QAAQ;GACtC,MAAM,MAAM,IAAI,IAAI,KAAK,QAAQ;GACjC,IAAI,aAAa,IAAI,SAAS,OAAO,QAAQ;GAC7C,IAAI,aAAa,IAAI,UAAU,OAAO,YAAY;GAClD,IAAI,aAAa,IAAI,QAAQ,OAAO,IAAI;GACxC,IAAI,aAAa,IAAI,cAAc,oBAAoB;GACvD,MAAM,WAAW,MAAM,MAAM,IAAI,IAAI;GACrC,IAAI,CAAC,SAAS,IAAI;IAChB,MAAM,EAAE,SAAS,WAAY,MAAM,SAAS,KAAK;IACjD,MAAM,IAAIA,qBAAAA,YAAY,SAAS,QAAQ,QAAQ,YAAY,SAAS;GACtE;GACA,OAAQ,MAAM,SAAS,KAAK;EAC9B;EACA,MAAM,YAAY,EAAE,cAAc,UAAU;GAC1C,CAAA,GAAA,cAAA,UAAA,CAAU,KAAK,aAAa,yBAAyB;GACrD,CAAA,GAAA,cAAA,UAAA,CAAU,UAAU,OAAO,WAAW,UAAU,oBAAoB;GACpE,MAAM,MAAM,IAAI,IAAI,KAAK,WAAW;GACpC,IAAI,aAAa,IAAI,gBAAgB,YAAY;GACjD,IAAI,aAAa,IAAI,UAAU,MAAM;GACrC,MAAM,WAAW,MAAM,MAAM,IAAI,IAAI;GACrC,IAAI,CAAC,SAAS,IAAI;IAChB,MAAM,EAAE,SAAS,WAAY,MAAM,SAAS,KAAK;IACjD,MAAM,IAAIA,qBAAAA,YAAY,SAAS,QAAQ,QAAQ,YAAY,SAAS;GACtE;GACA,MAAM,OAAQ,MAAM,SAAS,KAAK;GAElC,OAAO;IACL;IACA,QAAQ;KACN,KAAK,KAAK,WAAW,KAAK;KAC1B,MAAM,KAAK;KACX,SAAS,GAAG,KAAK,WAAW,MAAM,GAAG,CAAC,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,KAAK,GAAG,EAAE;KAC9D,QAAQ,KAAK,QAAQ,IAAI,SAAS,KAAK,QAAQ,IAAI,WAAW,KAAA;IAChE;GACF;EACF;EACA,MAAM,mBAAmB,QAAQ;GAC/B,CAAA,GAAA,cAAA,UAAA,CAAU,KAAK,iBAAiB,6BAA6B;GAC7D,MAAM,MAAM,IAAI,IAAI,KAAK,eAAe;GACxC,IAAI,aAAa,IAAI,SAAS,OAAO,QAAQ;GAC7C,IAAI,aAAa,IAAI,cAAc,eAAe;GAClD,IAAI,aAAa,IAAI,iBAAiB,OAAO,YAAY;GACzD,MAAM,WAAW,MAAM,MAAM,IAAI,IAAI;GACrC,IAAI,CAAC,SAAS,IAAI;IAChB,MAAM,EAAE,SAAS,WAAY,MAAM,SAAS,KAAK;IACjD,MAAM,IAAIA,qBAAAA,YAAY,SAAS,QAAQ,QAAQ,YAAY,SAAS;GACtE;GACA,OAAQ,MAAM,SAAS,KAAK;EAC9B;CACF;AACF;AAEA,MAAa,SAAS,qBAAqB"}