@shware/security 2.5.3 → 2.6.0

package/dist/oauth2/client.cjs

@@ -1,150 +1,114 @@
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-
-// src/oauth2/client.ts
-var client_exports = {};
-__export(client_exports, {
-  OAuth2Client: () => OAuth2Client,
-  googleOneTapSchema: () => googleOneTapSchema,
-  oauth2RedirectQuerySchema: () => oauth2RedirectQuerySchema
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+let _shware_utils = require("@shware/utils");
+let zod_v4_mini = require("zod/v4-mini");
+//#region src/oauth2/client.ts
+const oauth2RedirectQuerySchema = (0, zod_v4_mini.object)({
+	code: (0, zod_v4_mini.optional)((0, zod_v4_mini.string)()),
+	state: (0, zod_v4_mini.optional)((0, zod_v4_mini.string)()),
+	error: (0, zod_v4_mini.optional)((0, zod_v4_mini.string)()),
+	error_description: (0, zod_v4_mini.optional)((0, zod_v4_mini.string)()),
+	error_uri: (0, zod_v4_mini.optional)((0, zod_v4_mini.string)())
 });
-module.exports = __toCommonJS(client_exports);
-var import_utils = require("@shware/utils");
-var import_v4_mini = require("zod/v4-mini");
-var oauth2RedirectQuerySchema = (0, import_v4_mini.object)({
-  code: (0, import_v4_mini.optional)((0, import_v4_mini.string)()),
-  state: (0, import_v4_mini.optional)((0, import_v4_mini.string)()),
-  error: (0, import_v4_mini.optional)((0, import_v4_mini.string)()),
-  error_description: (0, import_v4_mini.optional)((0, import_v4_mini.string)()),
-  error_uri: (0, import_v4_mini.optional)((0, import_v4_mini.string)())
-});
-var googleOneTapSchema = (0, import_v4_mini.object)({
-  // login_uri
-  code: (0, import_v4_mini.optional)((0, import_v4_mini.string)()),
-  state: (0, import_v4_mini.optional)((0, import_v4_mini.string)()),
-  error: (0, import_v4_mini.optional)((0, import_v4_mini.string)()),
-  error_description: (0, import_v4_mini.optional)((0, import_v4_mini.string)()),
-  error_uri: (0, import_v4_mini.optional)((0, import_v4_mini.string)()),
-  nonce: (0, import_v4_mini.optional)((0, import_v4_mini.string)()),
-  g_csrf_token: (0, import_v4_mini.optional)((0, import_v4_mini.string)()),
-  hd: (0, import_v4_mini.optional)((0, import_v4_mini.string)()),
-  // callback
-  credential: (0, import_v4_mini.optional)((0, import_v4_mini.string)())
+const googleOneTapSchema = (0, zod_v4_mini.object)({
+	code: (0, zod_v4_mini.optional)((0, zod_v4_mini.string)()),
+	state: (0, zod_v4_mini.optional)((0, zod_v4_mini.string)()),
+	error: (0, zod_v4_mini.optional)((0, zod_v4_mini.string)()),
+	error_description: (0, zod_v4_mini.optional)((0, zod_v4_mini.string)()),
+	error_uri: (0, zod_v4_mini.optional)((0, zod_v4_mini.string)()),
+	nonce: (0, zod_v4_mini.optional)((0, zod_v4_mini.string)()),
+	g_csrf_token: (0, zod_v4_mini.optional)((0, zod_v4_mini.string)()),
+	hd: (0, zod_v4_mini.optional)((0, zod_v4_mini.string)()),
+	credential: (0, zod_v4_mini.optional)((0, zod_v4_mini.string)())
 });
 var OAuth2Client = class {
-  config;
-  constructor(config) {
-    this.config = config;
-  }
-  get baseUri() {
-    return this.config.baseUri;
-  }
-  get successUri() {
-    return this.config.successUri;
-  }
-  get errorUri() {
-    return this.config.errorUri;
-  }
-  async getClientConfig(registrationId) {
-    const registrations = typeof this.config.registration === "function" ? await this.config.registration() : this.config.registration;
-    const registration = registrations[registrationId];
-    (0, import_utils.invariant)(registration, `Registration ${registrationId} not found`);
-    const provider = this.config.provider[registration.provider ?? registrationId];
-    (0, import_utils.invariant)(provider, `Provider ${registration.provider ?? registrationId} not found`);
-    return { registration, provider };
-  }
-  async createAuthorizationUri({
-    registrationId,
-    state,
-    pkce
-  }) {
-    const { provider, registration } = await this.getClientConfig(registrationId);
-    const { baseUri } = this.config;
-    const { scope, clientId, redirectUri } = registration;
-    return provider.createAuthorizationUri({
-      pkce,
-      state,
-      scope,
-      clientId,
-      redirectUri: redirectUri ?? `${baseUri}/login/oauth2/code/${registrationId}`
-    });
-  }
-  async exchangeAuthorizationCode({
-    registrationId,
-    code,
-    pkce
-  }) {
-    const { provider, registration } = await this.getClientConfig(registrationId);
-    const { baseUri } = this.config;
-    const { clientId, clientSecret, redirectUri } = registration;
-    return provider.exchangeAuthorizationCode({
-      code,
-      pkce,
-      clientId,
-      clientSecret,
-      redirectUri: redirectUri ?? `${baseUri}/login/oauth2/code/${registrationId}`
-    });
-  }
-  async getUserInfo({
-    registrationId,
-    token
-  }) {
-    const { provider } = await this.getClientConfig(registrationId);
-    return provider.getUserInfo(token);
-  }
-  async refreshAccessToken({
-    registrationId,
-    refreshToken
-  }) {
-    const { provider, registration } = await this.getClientConfig(registrationId);
-    const { clientId, clientSecret } = registration;
-    (0, import_utils.invariant)(provider.refreshAccessToken, "Provider does not support refreshAccessToken");
-    return provider.refreshAccessToken({ refreshToken, clientId, clientSecret });
-  }
-  async revokeToken(registrationId, token) {
-    const { provider, registration } = await this.getClientConfig(registrationId);
-    const { clientId, clientSecret } = registration;
-    (0, import_utils.invariant)(provider.revokeToken, "Provider does not support revokeToken");
-    await provider.revokeToken({ token, clientId, clientSecret });
-  }
-  async loginOAuth2Native({
-    registrationId,
-    credentials,
-    pkce
-  }) {
-    const { provider, registration } = await this.getClientConfig(registrationId);
-    (0, import_utils.invariant)(provider.loginOAuth2Native, "Provider does not support loginOAuth2Native");
-    const { baseUri } = this.config;
-    const { clientId, clientSecret, redirectUri } = registration;
-    return provider.loginOAuth2Native({
-      clientId,
-      clientSecret,
-      redirectUri: redirectUri ?? `${baseUri}/login/oauth2/code/${registrationId}`,
-      credentials,
-      pkce
-    });
-  }
+	config;
+	constructor(config) {
+		this.config = config;
+	}
+	get baseUri() {
+		return this.config.baseUri;
+	}
+	get successUri() {
+		return this.config.successUri;
+	}
+	get errorUri() {
+		return this.config.errorUri;
+	}
+	async getClientConfig(registrationId) {
+		const registration = (typeof this.config.registration === "function" ? await this.config.registration() : this.config.registration)[registrationId];
+		(0, _shware_utils.invariant)(registration, `Registration ${registrationId} not found`);
+		const provider = this.config.provider[registration.provider ?? registrationId];
+		(0, _shware_utils.invariant)(provider, `Provider ${registration.provider ?? registrationId} not found`);
+		return {
+			registration,
+			provider
+		};
+	}
+	async createAuthorizationUri({ registrationId, state, pkce }) {
+		const { provider, registration } = await this.getClientConfig(registrationId);
+		const { baseUri } = this.config;
+		const { scope, clientId, redirectUri } = registration;
+		return provider.createAuthorizationUri({
+			pkce,
+			state,
+			scope,
+			clientId,
+			redirectUri: redirectUri ?? `${baseUri}/login/oauth2/code/${registrationId}`
+		});
+	}
+	async exchangeAuthorizationCode({ registrationId, code, pkce }) {
+		const { provider, registration } = await this.getClientConfig(registrationId);
+		const { baseUri } = this.config;
+		const { clientId, clientSecret, redirectUri } = registration;
+		return provider.exchangeAuthorizationCode({
+			code,
+			pkce,
+			clientId,
+			clientSecret,
+			redirectUri: redirectUri ?? `${baseUri}/login/oauth2/code/${registrationId}`
+		});
+	}
+	async getUserInfo({ registrationId, token }) {
+		const { provider } = await this.getClientConfig(registrationId);
+		return provider.getUserInfo(token);
+	}
+	async refreshAccessToken({ registrationId, refreshToken }) {
+		const { provider, registration } = await this.getClientConfig(registrationId);
+		const { clientId, clientSecret } = registration;
+		(0, _shware_utils.invariant)(provider.refreshAccessToken, "Provider does not support refreshAccessToken");
+		return provider.refreshAccessToken({
+			refreshToken,
+			clientId,
+			clientSecret
+		});
+	}
+	async revokeToken(registrationId, token) {
+		const { provider, registration } = await this.getClientConfig(registrationId);
+		const { clientId, clientSecret } = registration;
+		(0, _shware_utils.invariant)(provider.revokeToken, "Provider does not support revokeToken");
+		await provider.revokeToken({
+			token,
+			clientId,
+			clientSecret
+		});
+	}
+	async loginOAuth2Native({ registrationId, credentials, pkce }) {
+		const { provider, registration } = await this.getClientConfig(registrationId);
+		(0, _shware_utils.invariant)(provider.loginOAuth2Native, "Provider does not support loginOAuth2Native");
+		const { baseUri } = this.config;
+		const { clientId, clientSecret, redirectUri } = registration;
+		return provider.loginOAuth2Native({
+			clientId,
+			clientSecret,
+			redirectUri: redirectUri ?? `${baseUri}/login/oauth2/code/${registrationId}`,
+			credentials,
+			pkce
+		});
+	}
 };
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  OAuth2Client,
-  googleOneTapSchema,
-  oauth2RedirectQuerySchema
-});
+//#endregion
+exports.OAuth2Client = OAuth2Client;
+exports.googleOneTapSchema = googleOneTapSchema;
+exports.oauth2RedirectQuerySchema = oauth2RedirectQuerySchema;
+
 //# sourceMappingURL=client.cjs.map

package/dist/oauth2/client.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/oauth2/client.ts"],"sourcesContent":["import { invariant } from '@shware/utils';\nimport { object, optional, string } from 'zod/v4-mini';\nimport type {\n  NativeCredential,\n  OAuth2ClientConfig,\n  OAuth2Token,\n  OidcToken,\n  PkceParameters,\n} from './types';\n\nexport const oauth2RedirectQuerySchema = object({\n  code: optional(string()),\n  state: optional(string()),\n  error: optional(string()),\n  error_description: optional(string()),\n  error_uri: optional(string()),\n});\n\nexport const googleOneTapSchema = object({\n  // login_uri\n  code: optional(string()),\n  state: optional(string()),\n  error: optional(string()),\n  error_description: optional(string()),\n  error_uri: optional(string()),\n  nonce: optional(string()),\n  g_csrf_token: optional(string()),\n  hd: optional(string()),\n  // callback\n  credential: optional(string()),\n});\n\nexport class OAuth2Client {\n  private config: OAuth2ClientConfig;\n  constructor(config: OAuth2ClientConfig) {\n    this.config = config;\n  }\n\n  get baseUri() {\n    return this.config.baseUri;\n  }\n\n  get successUri() {\n    return this.config.successUri;\n  }\n\n  get errorUri() {\n    return this.config.errorUri;\n  }\n\n  private async getClientConfig(registrationId: string) {\n    const registrations =\n      typeof this.config.registration === 'function'\n        ? await this.config.registration()\n        : this.config.registration;\n\n    const registration = registrations[registrationId];\n    invariant(registration, `Registration ${registrationId} not found`);\n\n    const provider = this.config.provider[registration.provider ?? registrationId];\n    invariant(provider, `Provider ${registration.provider ?? registrationId} not found`);\n    return { registration, provider };\n  }\n\n  async createAuthorizationUri({\n    registrationId,\n    state,\n    pkce,\n  }: {\n    registrationId: string;\n    state: string;\n    pkce?: PkceParameters;\n  }): Promise<URL> {\n    const { provider, registration } = await this.getClientConfig(registrationId);\n\n    const { baseUri } = this.config;\n    const { scope, clientId, redirectUri } = registration;\n    return provider.createAuthorizationUri({\n      pkce,\n      state,\n      scope,\n      clientId,\n      redirectUri: redirectUri ?? `${baseUri}/login/oauth2/code/${registrationId}`,\n    });\n  }\n\n  async exchangeAuthorizationCode({\n    registrationId,\n    code,\n    pkce,\n  }: {\n    registrationId: string;\n    code: string;\n    pkce?: PkceParameters;\n  }): Promise<OAuth2Token> {\n    const { provider, registration } = await this.getClientConfig(registrationId);\n\n    const { baseUri } = this.config;\n    const { clientId, clientSecret, redirectUri } = registration;\n    return provider.exchangeAuthorizationCode({\n      code,\n      pkce,\n      clientId,\n      clientSecret,\n      redirectUri: redirectUri ?? `${baseUri}/login/oauth2/code/${registrationId}`,\n    });\n  }\n\n  async getUserInfo({\n    registrationId,\n    token,\n  }: {\n    registrationId: string;\n    token: OAuth2Token | OidcToken;\n  }) {\n    const { provider } = await this.getClientConfig(registrationId);\n    return provider.getUserInfo(token);\n  }\n\n  async refreshAccessToken({\n    registrationId,\n    refreshToken,\n  }: {\n    registrationId: string;\n    refreshToken: string;\n  }): Promise<OAuth2Token> {\n    const { provider, registration } = await this.getClientConfig(registrationId);\n    const { clientId, clientSecret } = registration;\n\n    invariant(provider.refreshAccessToken, 'Provider does not support refreshAccessToken');\n    return provider.refreshAccessToken({ refreshToken, clientId, clientSecret });\n  }\n\n  async revokeToken(registrationId: string, token: string) {\n    const { provider, registration } = await this.getClientConfig(registrationId);\n    const { clientId, clientSecret } = registration;\n\n    invariant(provider.revokeToken, 'Provider does not support revokeToken');\n    await provider.revokeToken({ token, clientId, clientSecret });\n  }\n\n  async loginOAuth2Native({\n    registrationId,\n    credentials,\n    pkce,\n  }: {\n    registrationId: string;\n    credentials: NativeCredential;\n    pkce?: PkceParameters;\n  }) {\n    const { provider, registration } = await this.getClientConfig(registrationId);\n    invariant(provider.loginOAuth2Native, 'Provider does not support loginOAuth2Native');\n    const { baseUri } = this.config;\n    const { clientId, clientSecret, redirectUri } = registration;\n\n    return provider.loginOAuth2Native({\n      clientId,\n      clientSecret,\n      redirectUri: redirectUri ?? `${baseUri}/login/oauth2/code/${registrationId}`,\n      credentials,\n      pkce,\n    });\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,mBAA0B;AAC1B,qBAAyC;AASlC,IAAM,gCAA4B,uBAAO;AAAA,EAC9C,UAAM,6BAAS,uBAAO,CAAC;AAAA,EACvB,WAAO,6BAAS,uBAAO,CAAC;AAAA,EACxB,WAAO,6BAAS,uBAAO,CAAC;AAAA,EACxB,uBAAmB,6BAAS,uBAAO,CAAC;AAAA,EACpC,eAAW,6BAAS,uBAAO,CAAC;AAC9B,CAAC;AAEM,IAAM,yBAAqB,uBAAO;AAAA;AAAA,EAEvC,UAAM,6BAAS,uBAAO,CAAC;AAAA,EACvB,WAAO,6BAAS,uBAAO,CAAC;AAAA,EACxB,WAAO,6BAAS,uBAAO,CAAC;AAAA,EACxB,uBAAmB,6BAAS,uBAAO,CAAC;AAAA,EACpC,eAAW,6BAAS,uBAAO,CAAC;AAAA,EAC5B,WAAO,6BAAS,uBAAO,CAAC;AAAA,EACxB,kBAAc,6BAAS,uBAAO,CAAC;AAAA,EAC/B,QAAI,6BAAS,uBAAO,CAAC;AAAA;AAAA,EAErB,gBAAY,6BAAS,uBAAO,CAAC;AAC/B,CAAC;AAEM,IAAM,eAAN,MAAmB;AAAA,EAChB;AAAA,EACR,YAAY,QAA4B;AACtC,SAAK,SAAS;AAAA,EAChB;AAAA,EAEA,IAAI,UAAU;AACZ,WAAO,KAAK,OAAO;AAAA,EACrB;AAAA,EAEA,IAAI,aAAa;AACf,WAAO,KAAK,OAAO;AAAA,EACrB;AAAA,EAEA,IAAI,WAAW;AACb,WAAO,KAAK,OAAO;AAAA,EACrB;AAAA,EAEA,MAAc,gBAAgB,gBAAwB;AACpD,UAAM,gBACJ,OAAO,KAAK,OAAO,iBAAiB,aAChC,MAAM,KAAK,OAAO,aAAa,IAC/B,KAAK,OAAO;AAElB,UAAM,eAAe,cAAc,cAAc;AACjD,gCAAU,cAAc,gBAAgB,cAAc,YAAY;AAElE,UAAM,WAAW,KAAK,OAAO,SAAS,aAAa,YAAY,cAAc;AAC7E,gCAAU,UAAU,YAAY,aAAa,YAAY,cAAc,YAAY;AACnF,WAAO,EAAE,cAAc,SAAS;AAAA,EAClC;AAAA,EAEA,MAAM,uBAAuB;AAAA,IAC3B;AAAA,IACA;AAAA,IACA;AAAA,EACF,GAIiB;AACf,UAAM,EAAE,UAAU,aAAa,IAAI,MAAM,KAAK,gBAAgB,cAAc;AAE5E,UAAM,EAAE,QAAQ,IAAI,KAAK;AACzB,UAAM,EAAE,OAAO,UAAU,YAAY,IAAI;AACzC,WAAO,SAAS,uBAAuB;AAAA,MACrC;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,aAAa,eAAe,GAAG,OAAO,sBAAsB,cAAc;AAAA,IAC5E,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,0BAA0B;AAAA,IAC9B;AAAA,IACA;AAAA,IACA;AAAA,EACF,GAIyB;AACvB,UAAM,EAAE,UAAU,aAAa,IAAI,MAAM,KAAK,gBAAgB,cAAc;AAE5E,UAAM,EAAE,QAAQ,IAAI,KAAK;AACzB,UAAM,EAAE,UAAU,cAAc,YAAY,IAAI;AAChD,WAAO,SAAS,0BAA0B;AAAA,MACxC;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,aAAa,eAAe,GAAG,OAAO,sBAAsB,cAAc;AAAA,IAC5E,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,YAAY;AAAA,IAChB;AAAA,IACA;AAAA,EACF,GAGG;AACD,UAAM,EAAE,SAAS,IAAI,MAAM,KAAK,gBAAgB,cAAc;AAC9D,WAAO,SAAS,YAAY,KAAK;AAAA,EACnC;AAAA,EAEA,MAAM,mBAAmB;AAAA,IACvB;AAAA,IACA;AAAA,EACF,GAGyB;AACvB,UAAM,EAAE,UAAU,aAAa,IAAI,MAAM,KAAK,gBAAgB,cAAc;AAC5E,UAAM,EAAE,UAAU,aAAa,IAAI;AAEnC,gCAAU,SAAS,oBAAoB,8CAA8C;AACrF,WAAO,SAAS,mBAAmB,EAAE,cAAc,UAAU,aAAa,CAAC;AAAA,EAC7E;AAAA,EAEA,MAAM,YAAY,gBAAwB,OAAe;AACvD,UAAM,EAAE,UAAU,aAAa,IAAI,MAAM,KAAK,gBAAgB,cAAc;AAC5E,UAAM,EAAE,UAAU,aAAa,IAAI;AAEnC,gCAAU,SAAS,aAAa,uCAAuC;AACvE,UAAM,SAAS,YAAY,EAAE,OAAO,UAAU,aAAa,CAAC;AAAA,EAC9D;AAAA,EAEA,MAAM,kBAAkB;AAAA,IACtB;AAAA,IACA;AAAA,IACA;AAAA,EACF,GAIG;AACD,UAAM,EAAE,UAAU,aAAa,IAAI,MAAM,KAAK,gBAAgB,cAAc;AAC5E,gCAAU,SAAS,mBAAmB,6CAA6C;AACnF,UAAM,EAAE,QAAQ,IAAI,KAAK;AACzB,UAAM,EAAE,UAAU,cAAc,YAAY,IAAI;AAEhD,WAAO,SAAS,kBAAkB;AAAA,MAChC;AAAA,MACA;AAAA,MACA,aAAa,eAAe,GAAG,OAAO,sBAAsB,cAAc;AAAA,MAC1E;AAAA,MACA;AAAA,IACF,CAAC;AAAA,EACH;AACF;","names":[]}
+{"version":3,"file":"client.cjs","names":[],"sources":["../../src/oauth2/client.ts"],"sourcesContent":["import { invariant } from '@shware/utils';\nimport { object, optional, string } from 'zod/v4-mini';\nimport type {\n  NativeCredential,\n  OAuth2ClientConfig,\n  OAuth2Token,\n  OidcToken,\n  PkceParameters,\n} from './types';\n\nexport const oauth2RedirectQuerySchema = object({\n  code: optional(string()),\n  state: optional(string()),\n  error: optional(string()),\n  error_description: optional(string()),\n  error_uri: optional(string()),\n});\n\nexport const googleOneTapSchema = object({\n  // login_uri\n  code: optional(string()),\n  state: optional(string()),\n  error: optional(string()),\n  error_description: optional(string()),\n  error_uri: optional(string()),\n  nonce: optional(string()),\n  g_csrf_token: optional(string()),\n  hd: optional(string()),\n  // callback\n  credential: optional(string()),\n});\n\nexport class OAuth2Client {\n  private config: OAuth2ClientConfig;\n  constructor(config: OAuth2ClientConfig) {\n    this.config = config;\n  }\n\n  get baseUri() {\n    return this.config.baseUri;\n  }\n\n  get successUri() {\n    return this.config.successUri;\n  }\n\n  get errorUri() {\n    return this.config.errorUri;\n  }\n\n  private async getClientConfig(registrationId: string) {\n    const registrations =\n      typeof this.config.registration === 'function'\n        ? await this.config.registration()\n        : this.config.registration;\n\n    const registration = registrations[registrationId];\n    invariant(registration, `Registration ${registrationId} not found`);\n\n    const provider = this.config.provider[registration.provider ?? registrationId];\n    invariant(provider, `Provider ${registration.provider ?? registrationId} not found`);\n    return { registration, provider };\n  }\n\n  async createAuthorizationUri({\n    registrationId,\n    state,\n    pkce,\n  }: {\n    registrationId: string;\n    state: string;\n    pkce?: PkceParameters;\n  }): Promise<URL> {\n    const { provider, registration } = await this.getClientConfig(registrationId);\n\n    const { baseUri } = this.config;\n    const { scope, clientId, redirectUri } = registration;\n    return provider.createAuthorizationUri({\n      pkce,\n      state,\n      scope,\n      clientId,\n      redirectUri: redirectUri ?? `${baseUri}/login/oauth2/code/${registrationId}`,\n    });\n  }\n\n  async exchangeAuthorizationCode({\n    registrationId,\n    code,\n    pkce,\n  }: {\n    registrationId: string;\n    code: string;\n    pkce?: PkceParameters;\n  }): Promise<OAuth2Token> {\n    const { provider, registration } = await this.getClientConfig(registrationId);\n\n    const { baseUri } = this.config;\n    const { clientId, clientSecret, redirectUri } = registration;\n    return provider.exchangeAuthorizationCode({\n      code,\n      pkce,\n      clientId,\n      clientSecret,\n      redirectUri: redirectUri ?? `${baseUri}/login/oauth2/code/${registrationId}`,\n    });\n  }\n\n  async getUserInfo({\n    registrationId,\n    token,\n  }: {\n    registrationId: string;\n    token: OAuth2Token | OidcToken;\n  }) {\n    const { provider } = await this.getClientConfig(registrationId);\n    return provider.getUserInfo(token);\n  }\n\n  async refreshAccessToken({\n    registrationId,\n    refreshToken,\n  }: {\n    registrationId: string;\n    refreshToken: string;\n  }): Promise<OAuth2Token> {\n    const { provider, registration } = await this.getClientConfig(registrationId);\n    const { clientId, clientSecret } = registration;\n\n    invariant(provider.refreshAccessToken, 'Provider does not support refreshAccessToken');\n    return provider.refreshAccessToken({ refreshToken, clientId, clientSecret });\n  }\n\n  async revokeToken(registrationId: string, token: string) {\n    const { provider, registration } = await this.getClientConfig(registrationId);\n    const { clientId, clientSecret } = registration;\n\n    invariant(provider.revokeToken, 'Provider does not support revokeToken');\n    await provider.revokeToken({ token, clientId, clientSecret });\n  }\n\n  async loginOAuth2Native({\n    registrationId,\n    credentials,\n    pkce,\n  }: {\n    registrationId: string;\n    credentials: NativeCredential;\n    pkce?: PkceParameters;\n  }) {\n    const { provider, registration } = await this.getClientConfig(registrationId);\n    invariant(provider.loginOAuth2Native, 'Provider does not support loginOAuth2Native');\n    const { baseUri } = this.config;\n    const { clientId, clientSecret, redirectUri } = registration;\n\n    return provider.loginOAuth2Native({\n      clientId,\n      clientSecret,\n      redirectUri: redirectUri ?? `${baseUri}/login/oauth2/code/${registrationId}`,\n      credentials,\n      pkce,\n    });\n  }\n}\n"],"mappings":";;;;AAUA,MAAa,6BAAA,GAAA,YAAA,OAAA,CAAmC;CAC9C,OAAA,GAAA,YAAA,SAAA,EAAA,GAAA,YAAA,OAAA,CAAsB,CAAC;CACvB,QAAA,GAAA,YAAA,SAAA,EAAA,GAAA,YAAA,OAAA,CAAuB,CAAC;CACxB,QAAA,GAAA,YAAA,SAAA,EAAA,GAAA,YAAA,OAAA,CAAuB,CAAC;CACxB,oBAAA,GAAA,YAAA,SAAA,EAAA,GAAA,YAAA,OAAA,CAAmC,CAAC;CACpC,YAAA,GAAA,YAAA,SAAA,EAAA,GAAA,YAAA,OAAA,CAA2B,CAAC;AAC9B,CAAC;AAED,MAAa,sBAAA,GAAA,YAAA,OAAA,CAA4B;CAEvC,OAAA,GAAA,YAAA,SAAA,EAAA,GAAA,YAAA,OAAA,CAAsB,CAAC;CACvB,QAAA,GAAA,YAAA,SAAA,EAAA,GAAA,YAAA,OAAA,CAAuB,CAAC;CACxB,QAAA,GAAA,YAAA,SAAA,EAAA,GAAA,YAAA,OAAA,CAAuB,CAAC;CACxB,oBAAA,GAAA,YAAA,SAAA,EAAA,GAAA,YAAA,OAAA,CAAmC,CAAC;CACpC,YAAA,GAAA,YAAA,SAAA,EAAA,GAAA,YAAA,OAAA,CAA2B,CAAC;CAC5B,QAAA,GAAA,YAAA,SAAA,EAAA,GAAA,YAAA,OAAA,CAAuB,CAAC;CACxB,eAAA,GAAA,YAAA,SAAA,EAAA,GAAA,YAAA,OAAA,CAA8B,CAAC;CAC/B,KAAA,GAAA,YAAA,SAAA,EAAA,GAAA,YAAA,OAAA,CAAoB,CAAC;CAErB,aAAA,GAAA,YAAA,SAAA,EAAA,GAAA,YAAA,OAAA,CAA4B,CAAC;AAC/B,CAAC;AAED,IAAa,eAAb,MAA0B;CACxB;CACA,YAAY,QAA4B;EACtC,KAAK,SAAS;CAChB;CAEA,IAAI,UAAU;EACZ,OAAO,KAAK,OAAO;CACrB;CAEA,IAAI,aAAa;EACf,OAAO,KAAK,OAAO;CACrB;CAEA,IAAI,WAAW;EACb,OAAO,KAAK,OAAO;CACrB;CAEA,MAAc,gBAAgB,gBAAwB;EAMpD,MAAM,gBAJJ,OAAO,KAAK,OAAO,iBAAiB,aAChC,MAAM,KAAK,OAAO,aAAa,IAC/B,KAAK,OAAO,aAAA,CAEiB;EACnC,CAAA,GAAA,cAAA,UAAA,CAAU,cAAc,gBAAgB,eAAe,WAAW;EAElE,MAAM,WAAW,KAAK,OAAO,SAAS,aAAa,YAAY;EAC/D,CAAA,GAAA,cAAA,UAAA,CAAU,UAAU,YAAY,aAAa,YAAY,eAAe,WAAW;EACnF,OAAO;GAAE;GAAc;EAAS;CAClC;CAEA,MAAM,uBAAuB,EAC3B,gBACA,OACA,QAKe;EACf,MAAM,EAAE,UAAU,iBAAiB,MAAM,KAAK,gBAAgB,cAAc;EAE5E,MAAM,EAAE,YAAY,KAAK;EACzB,MAAM,EAAE,OAAO,UAAU,gBAAgB;EACzC,OAAO,SAAS,uBAAuB;GACrC;GACA;GACA;GACA;GACA,aAAa,eAAe,GAAG,QAAQ,qBAAqB;EAC9D,CAAC;CACH;CAEA,MAAM,0BAA0B,EAC9B,gBACA,MACA,QAKuB;EACvB,MAAM,EAAE,UAAU,iBAAiB,MAAM,KAAK,gBAAgB,cAAc;EAE5E,MAAM,EAAE,YAAY,KAAK;EACzB,MAAM,EAAE,UAAU,cAAc,gBAAgB;EAChD,OAAO,SAAS,0BAA0B;GACxC;GACA;GACA;GACA;GACA,aAAa,eAAe,GAAG,QAAQ,qBAAqB;EAC9D,CAAC;CACH;CAEA,MAAM,YAAY,EAChB,gBACA,SAIC;EACD,MAAM,EAAE,aAAa,MAAM,KAAK,gBAAgB,cAAc;EAC9D,OAAO,SAAS,YAAY,KAAK;CACnC;CAEA,MAAM,mBAAmB,EACvB,gBACA,gBAIuB;EACvB,MAAM,EAAE,UAAU,iBAAiB,MAAM,KAAK,gBAAgB,cAAc;EAC5E,MAAM,EAAE,UAAU,iBAAiB;EAEnC,CAAA,GAAA,cAAA,UAAA,CAAU,SAAS,oBAAoB,8CAA8C;EACrF,OAAO,SAAS,mBAAmB;GAAE;GAAc;GAAU;EAAa,CAAC;CAC7E;CAEA,MAAM,YAAY,gBAAwB,OAAe;EACvD,MAAM,EAAE,UAAU,iBAAiB,MAAM,KAAK,gBAAgB,cAAc;EAC5E,MAAM,EAAE,UAAU,iBAAiB;EAEnC,CAAA,GAAA,cAAA,UAAA,CAAU,SAAS,aAAa,uCAAuC;EACvE,MAAM,SAAS,YAAY;GAAE;GAAO;GAAU;EAAa,CAAC;CAC9D;CAEA,MAAM,kBAAkB,EACtB,gBACA,aACA,QAKC;EACD,MAAM,EAAE,UAAU,iBAAiB,MAAM,KAAK,gBAAgB,cAAc;EAC5E,CAAA,GAAA,cAAA,UAAA,CAAU,SAAS,mBAAmB,6CAA6C;EACnF,MAAM,EAAE,YAAY,KAAK;EACzB,MAAM,EAAE,UAAU,cAAc,gBAAgB;EAEhD,OAAO,SAAS,kBAAkB;GAChC;GACA;GACA,aAAa,eAAe,GAAG,QAAQ,qBAAqB;GAC5D;GACA;EACF,CAAC;CACH;AACF"}

package/dist/oauth2/client.d.cts

@@ -1,59 +1,58 @@
-import { OAuth2ClientConfig, PkceParameters, OAuth2Token, OidcToken, UserInfo, NativeCredential } from './types.cjs';
-import * as zod_v4_core from 'zod/v4/core';
-import * as zod_mini from 'zod/mini';
-
-declare const oauth2RedirectQuerySchema: zod_mini.ZodMiniObject<{
-    code: zod_mini.ZodMiniOptional<zod_mini.ZodMiniString<string>>;
-    state: zod_mini.ZodMiniOptional<zod_mini.ZodMiniString<string>>;
-    error: zod_mini.ZodMiniOptional<zod_mini.ZodMiniString<string>>;
-    error_description: zod_mini.ZodMiniOptional<zod_mini.ZodMiniString<string>>;
-    error_uri: zod_mini.ZodMiniOptional<zod_mini.ZodMiniString<string>>;
-}, zod_v4_core.$strip>;
-declare const googleOneTapSchema: zod_mini.ZodMiniObject<{
-    code: zod_mini.ZodMiniOptional<zod_mini.ZodMiniString<string>>;
-    state: zod_mini.ZodMiniOptional<zod_mini.ZodMiniString<string>>;
-    error: zod_mini.ZodMiniOptional<zod_mini.ZodMiniString<string>>;
-    error_description: zod_mini.ZodMiniOptional<zod_mini.ZodMiniString<string>>;
-    error_uri: zod_mini.ZodMiniOptional<zod_mini.ZodMiniString<string>>;
-    nonce: zod_mini.ZodMiniOptional<zod_mini.ZodMiniString<string>>;
-    g_csrf_token: zod_mini.ZodMiniOptional<zod_mini.ZodMiniString<string>>;
-    hd: zod_mini.ZodMiniOptional<zod_mini.ZodMiniString<string>>;
-    credential: zod_mini.ZodMiniOptional<zod_mini.ZodMiniString<string>>;
-}, zod_v4_core.$strip>;
+import { NativeCredential, OAuth2ClientConfig, OAuth2Token, OidcToken, PkceParameters, UserInfo } from "./types.cjs";
+//#region src/oauth2/client.d.ts
+declare const oauth2RedirectQuerySchema: import("zod/mini").ZodMiniObject<{
+  code: import("zod/mini").ZodMiniOptional<import("zod/mini").ZodMiniString<string>>;
+  state: import("zod/mini").ZodMiniOptional<import("zod/mini").ZodMiniString<string>>;
+  error: import("zod/mini").ZodMiniOptional<import("zod/mini").ZodMiniString<string>>;
+  error_description: import("zod/mini").ZodMiniOptional<import("zod/mini").ZodMiniString<string>>;
+  error_uri: import("zod/mini").ZodMiniOptional<import("zod/mini").ZodMiniString<string>>;
+}, import("zod/v4/core").$strip>;
+declare const googleOneTapSchema: import("zod/mini").ZodMiniObject<{
+  code: import("zod/mini").ZodMiniOptional<import("zod/mini").ZodMiniString<string>>;
+  state: import("zod/mini").ZodMiniOptional<import("zod/mini").ZodMiniString<string>>;
+  error: import("zod/mini").ZodMiniOptional<import("zod/mini").ZodMiniString<string>>;
+  error_description: import("zod/mini").ZodMiniOptional<import("zod/mini").ZodMiniString<string>>;
+  error_uri: import("zod/mini").ZodMiniOptional<import("zod/mini").ZodMiniString<string>>;
+  nonce: import("zod/mini").ZodMiniOptional<import("zod/mini").ZodMiniString<string>>;
+  g_csrf_token: import("zod/mini").ZodMiniOptional<import("zod/mini").ZodMiniString<string>>;
+  hd: import("zod/mini").ZodMiniOptional<import("zod/mini").ZodMiniString<string>>;
+  credential: import("zod/mini").ZodMiniOptional<import("zod/mini").ZodMiniString<string>>;
+}, import("zod/v4/core").$strip>;
 declare class OAuth2Client {
-    private config;
-    constructor(config: OAuth2ClientConfig);
-    get baseUri(): string;
-    get successUri(): string;
-    get errorUri(): string;
-    private getClientConfig;
-    createAuthorizationUri({ registrationId, state, pkce, }: {
-        registrationId: string;
-        state: string;
-        pkce?: PkceParameters;
-    }): Promise<URL>;
-    exchangeAuthorizationCode({ registrationId, code, pkce, }: {
-        registrationId: string;
-        code: string;
-        pkce?: PkceParameters;
-    }): Promise<OAuth2Token>;
-    getUserInfo({ registrationId, token, }: {
-        registrationId: string;
-        token: OAuth2Token | OidcToken;
-    }): Promise<UserInfo<unknown>>;
-    refreshAccessToken({ registrationId, refreshToken, }: {
-        registrationId: string;
-        refreshToken: string;
-    }): Promise<OAuth2Token>;
-    revokeToken(registrationId: string, token: string): Promise<void>;
-    loginOAuth2Native({ registrationId, credentials, pkce, }: {
-        registrationId: string;
-        credentials: NativeCredential;
-        pkce?: PkceParameters;
-    }): Promise<{
-        token: OAuth2Token;
-        userInfo: UserInfo;
-    }>;
+  private config;
+  constructor(config: OAuth2ClientConfig);
+  get baseUri(): string;
+  get successUri(): string;
+  get errorUri(): string;
+  private getClientConfig;
+  createAuthorizationUri({ registrationId, state, pkce }: {
+    registrationId: string;
+    state: string;
+    pkce?: PkceParameters;
+  }): Promise<URL>;
+  exchangeAuthorizationCode({ registrationId, code, pkce }: {
+    registrationId: string;
+    code: string;
+    pkce?: PkceParameters;
+  }): Promise<OAuth2Token>;
+  getUserInfo({ registrationId, token }: {
+    registrationId: string;
+    token: OAuth2Token | OidcToken;
+  }): Promise<UserInfo<unknown>>;
+  refreshAccessToken({ registrationId, refreshToken }: {
+    registrationId: string;
+    refreshToken: string;
+  }): Promise<OAuth2Token>;
+  revokeToken(registrationId: string, token: string): Promise<void>;
+  loginOAuth2Native({ registrationId, credentials, pkce }: {
+    registrationId: string;
+    credentials: NativeCredential;
+    pkce?: PkceParameters;
+  }): Promise<{
+    token: OAuth2Token;
+    userInfo: UserInfo;
+  }>;
 }
-
+//#endregion
 export { OAuth2Client, googleOneTapSchema, oauth2RedirectQuerySchema };
+//# sourceMappingURL=client.d.cts.map

package/dist/oauth2/client.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.cts","names":[],"sources":["../../src/oauth2/client.ts"],"mappings":";;cAUa,8CAAyB;;;;;;;cAQzB,uCAAkB;;;;;;;;;;;cAclB;UACH;EACR,YAAY,QAAQ;MAIhB;MAIA;MAIA;UAIU;EAcR,yBACJ,gBACA,OACA;IAEA;IACA;IACA,OAAO;MACL,QAAQ;EAcN,4BACJ,gBACA,MACA;IAEA;IACA;IACA,OAAO;MACL,QAAQ;EAcN,cACJ,gBACA;IAEA;IACA,OAAO,cAAc;MACtB,QADsB;EAMjB,qBACJ,gBACA;IAEA;IACA;MACE,QAAQ;EAQN,YAAY,wBAAwB,gBAAa;EAQjD,oBACJ,gBACA,aACA;IAEA;IACA,aAAa;IACb,OAAO;MACR"}

package/dist/oauth2/client.d.mts

@@ -0,0 +1,58 @@
+import { NativeCredential, OAuth2ClientConfig, OAuth2Token, OidcToken, PkceParameters, UserInfo } from "./types.mjs";
+//#region src/oauth2/client.d.ts
+declare const oauth2RedirectQuerySchema: import("zod/mini").ZodMiniObject<{
+  code: import("zod/mini").ZodMiniOptional<import("zod/mini").ZodMiniString<string>>;
+  state: import("zod/mini").ZodMiniOptional<import("zod/mini").ZodMiniString<string>>;
+  error: import("zod/mini").ZodMiniOptional<import("zod/mini").ZodMiniString<string>>;
+  error_description: import("zod/mini").ZodMiniOptional<import("zod/mini").ZodMiniString<string>>;
+  error_uri: import("zod/mini").ZodMiniOptional<import("zod/mini").ZodMiniString<string>>;
+}, import("zod/v4/core").$strip>;
+declare const googleOneTapSchema: import("zod/mini").ZodMiniObject<{
+  code: import("zod/mini").ZodMiniOptional<import("zod/mini").ZodMiniString<string>>;
+  state: import("zod/mini").ZodMiniOptional<import("zod/mini").ZodMiniString<string>>;
+  error: import("zod/mini").ZodMiniOptional<import("zod/mini").ZodMiniString<string>>;
+  error_description: import("zod/mini").ZodMiniOptional<import("zod/mini").ZodMiniString<string>>;
+  error_uri: import("zod/mini").ZodMiniOptional<import("zod/mini").ZodMiniString<string>>;
+  nonce: import("zod/mini").ZodMiniOptional<import("zod/mini").ZodMiniString<string>>;
+  g_csrf_token: import("zod/mini").ZodMiniOptional<import("zod/mini").ZodMiniString<string>>;
+  hd: import("zod/mini").ZodMiniOptional<import("zod/mini").ZodMiniString<string>>;
+  credential: import("zod/mini").ZodMiniOptional<import("zod/mini").ZodMiniString<string>>;
+}, import("zod/v4/core").$strip>;
+declare class OAuth2Client {
+  private config;
+  constructor(config: OAuth2ClientConfig);
+  get baseUri(): string;
+  get successUri(): string;
+  get errorUri(): string;
+  private getClientConfig;
+  createAuthorizationUri({ registrationId, state, pkce }: {
+    registrationId: string;
+    state: string;
+    pkce?: PkceParameters;
+  }): Promise<URL>;
+  exchangeAuthorizationCode({ registrationId, code, pkce }: {
+    registrationId: string;
+    code: string;
+    pkce?: PkceParameters;
+  }): Promise<OAuth2Token>;
+  getUserInfo({ registrationId, token }: {
+    registrationId: string;
+    token: OAuth2Token | OidcToken;
+  }): Promise<UserInfo<unknown>>;
+  refreshAccessToken({ registrationId, refreshToken }: {
+    registrationId: string;
+    refreshToken: string;
+  }): Promise<OAuth2Token>;
+  revokeToken(registrationId: string, token: string): Promise<void>;
+  loginOAuth2Native({ registrationId, credentials, pkce }: {
+    registrationId: string;
+    credentials: NativeCredential;
+    pkce?: PkceParameters;
+  }): Promise<{
+    token: OAuth2Token;
+    userInfo: UserInfo;
+  }>;
+}
+//#endregion
+export { OAuth2Client, googleOneTapSchema, oauth2RedirectQuerySchema };
+//# sourceMappingURL=client.d.mts.map

package/dist/oauth2/client.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.mts","names":[],"sources":["../../src/oauth2/client.ts"],"mappings":";;cAUa,8CAAyB;;;;;;;cAQzB,uCAAkB;;;;;;;;;;;cAclB;UACH;EACR,YAAY,QAAQ;MAIhB;MAIA;MAIA;UAIU;EAcR,yBACJ,gBACA,OACA;IAEA;IACA;IACA,OAAO;MACL,QAAQ;EAcN,4BACJ,gBACA,MACA;IAEA;IACA;IACA,OAAO;MACL,QAAQ;EAcN,cACJ,gBACA;IAEA;IACA,OAAO,cAAc;MACtB,QADsB;EAMjB,qBACJ,gBACA;IAEA;IACA;MACE,QAAQ;EAQN,YAAY,wBAAwB,gBAAa;EAQjD,oBACJ,gBACA,aACA;IAEA;IACA,aAAa;IACb,OAAO;MACR"}