@shware/security 2.5.3 → 2.6.0

package/dist/oauth2/client.mjs

@@ -1,123 +1,111 @@
-// src/oauth2/client.ts
 import { invariant } from "@shware/utils";
 import { object, optional, string } from "zod/v4-mini";
-var oauth2RedirectQuerySchema = object({
-  code: optional(string()),
-  state: optional(string()),
-  error: optional(string()),
-  error_description: optional(string()),
-  error_uri: optional(string())
+//#region src/oauth2/client.ts
+const oauth2RedirectQuerySchema = object({
+	code: optional(string()),
+	state: optional(string()),
+	error: optional(string()),
+	error_description: optional(string()),
+	error_uri: optional(string())
 });
-var googleOneTapSchema = object({
-  // login_uri
-  code: optional(string()),
-  state: optional(string()),
-  error: optional(string()),
-  error_description: optional(string()),
-  error_uri: optional(string()),
-  nonce: optional(string()),
-  g_csrf_token: optional(string()),
-  hd: optional(string()),
-  // callback
-  credential: optional(string())
+const googleOneTapSchema = object({
+	code: optional(string()),
+	state: optional(string()),
+	error: optional(string()),
+	error_description: optional(string()),
+	error_uri: optional(string()),
+	nonce: optional(string()),
+	g_csrf_token: optional(string()),
+	hd: optional(string()),
+	credential: optional(string())
 });
 var OAuth2Client = class {
-  config;
-  constructor(config) {
-    this.config = config;
-  }
-  get baseUri() {
-    return this.config.baseUri;
-  }
-  get successUri() {
-    return this.config.successUri;
-  }
-  get errorUri() {
-    return this.config.errorUri;
-  }
-  async getClientConfig(registrationId) {
-    const registrations = typeof this.config.registration === "function" ? await this.config.registration() : this.config.registration;
-    const registration = registrations[registrationId];
-    invariant(registration, `Registration ${registrationId} not found`);
-    const provider = this.config.provider[registration.provider ?? registrationId];
-    invariant(provider, `Provider ${registration.provider ?? registrationId} not found`);
-    return { registration, provider };
-  }
-  async createAuthorizationUri({
-    registrationId,
-    state,
-    pkce
-  }) {
-    const { provider, registration } = await this.getClientConfig(registrationId);
-    const { baseUri } = this.config;
-    const { scope, clientId, redirectUri } = registration;
-    return provider.createAuthorizationUri({
-      pkce,
-      state,
-      scope,
-      clientId,
-      redirectUri: redirectUri ?? `${baseUri}/login/oauth2/code/${registrationId}`
-    });
-  }
-  async exchangeAuthorizationCode({
-    registrationId,
-    code,
-    pkce
-  }) {
-    const { provider, registration } = await this.getClientConfig(registrationId);
-    const { baseUri } = this.config;
-    const { clientId, clientSecret, redirectUri } = registration;
-    return provider.exchangeAuthorizationCode({
-      code,
-      pkce,
-      clientId,
-      clientSecret,
-      redirectUri: redirectUri ?? `${baseUri}/login/oauth2/code/${registrationId}`
-    });
-  }
-  async getUserInfo({
-    registrationId,
-    token
-  }) {
-    const { provider } = await this.getClientConfig(registrationId);
-    return provider.getUserInfo(token);
-  }
-  async refreshAccessToken({
-    registrationId,
-    refreshToken
-  }) {
-    const { provider, registration } = await this.getClientConfig(registrationId);
-    const { clientId, clientSecret } = registration;
-    invariant(provider.refreshAccessToken, "Provider does not support refreshAccessToken");
-    return provider.refreshAccessToken({ refreshToken, clientId, clientSecret });
-  }
-  async revokeToken(registrationId, token) {
-    const { provider, registration } = await this.getClientConfig(registrationId);
-    const { clientId, clientSecret } = registration;
-    invariant(provider.revokeToken, "Provider does not support revokeToken");
-    await provider.revokeToken({ token, clientId, clientSecret });
-  }
-  async loginOAuth2Native({
-    registrationId,
-    credentials,
-    pkce
-  }) {
-    const { provider, registration } = await this.getClientConfig(registrationId);
-    invariant(provider.loginOAuth2Native, "Provider does not support loginOAuth2Native");
-    const { baseUri } = this.config;
-    const { clientId, clientSecret, redirectUri } = registration;
-    return provider.loginOAuth2Native({
-      clientId,
-      clientSecret,
-      redirectUri: redirectUri ?? `${baseUri}/login/oauth2/code/${registrationId}`,
-      credentials,
-      pkce
-    });
-  }
-};
-export {
-  OAuth2Client,
-  googleOneTapSchema,
-  oauth2RedirectQuerySchema
+	config;
+	constructor(config) {
+		this.config = config;
+	}
+	get baseUri() {
+		return this.config.baseUri;
+	}
+	get successUri() {
+		return this.config.successUri;
+	}
+	get errorUri() {
+		return this.config.errorUri;
+	}
+	async getClientConfig(registrationId) {
+		const registration = (typeof this.config.registration === "function" ? await this.config.registration() : this.config.registration)[registrationId];
+		invariant(registration, `Registration ${registrationId} not found`);
+		const provider = this.config.provider[registration.provider ?? registrationId];
+		invariant(provider, `Provider ${registration.provider ?? registrationId} not found`);
+		return {
+			registration,
+			provider
+		};
+	}
+	async createAuthorizationUri({ registrationId, state, pkce }) {
+		const { provider, registration } = await this.getClientConfig(registrationId);
+		const { baseUri } = this.config;
+		const { scope, clientId, redirectUri } = registration;
+		return provider.createAuthorizationUri({
+			pkce,
+			state,
+			scope,
+			clientId,
+			redirectUri: redirectUri ?? `${baseUri}/login/oauth2/code/${registrationId}`
+		});
+	}
+	async exchangeAuthorizationCode({ registrationId, code, pkce }) {
+		const { provider, registration } = await this.getClientConfig(registrationId);
+		const { baseUri } = this.config;
+		const { clientId, clientSecret, redirectUri } = registration;
+		return provider.exchangeAuthorizationCode({
+			code,
+			pkce,
+			clientId,
+			clientSecret,
+			redirectUri: redirectUri ?? `${baseUri}/login/oauth2/code/${registrationId}`
+		});
+	}
+	async getUserInfo({ registrationId, token }) {
+		const { provider } = await this.getClientConfig(registrationId);
+		return provider.getUserInfo(token);
+	}
+	async refreshAccessToken({ registrationId, refreshToken }) {
+		const { provider, registration } = await this.getClientConfig(registrationId);
+		const { clientId, clientSecret } = registration;
+		invariant(provider.refreshAccessToken, "Provider does not support refreshAccessToken");
+		return provider.refreshAccessToken({
+			refreshToken,
+			clientId,
+			clientSecret
+		});
+	}
+	async revokeToken(registrationId, token) {
+		const { provider, registration } = await this.getClientConfig(registrationId);
+		const { clientId, clientSecret } = registration;
+		invariant(provider.revokeToken, "Provider does not support revokeToken");
+		await provider.revokeToken({
+			token,
+			clientId,
+			clientSecret
+		});
+	}
+	async loginOAuth2Native({ registrationId, credentials, pkce }) {
+		const { provider, registration } = await this.getClientConfig(registrationId);
+		invariant(provider.loginOAuth2Native, "Provider does not support loginOAuth2Native");
+		const { baseUri } = this.config;
+		const { clientId, clientSecret, redirectUri } = registration;
+		return provider.loginOAuth2Native({
+			clientId,
+			clientSecret,
+			redirectUri: redirectUri ?? `${baseUri}/login/oauth2/code/${registrationId}`,
+			credentials,
+			pkce
+		});
+	}
 };
+//#endregion
+export { OAuth2Client, googleOneTapSchema, oauth2RedirectQuerySchema };
+
 //# sourceMappingURL=client.mjs.map

package/dist/oauth2/client.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/oauth2/client.ts"],"sourcesContent":["import { invariant } from '@shware/utils';\nimport { object, optional, string } from 'zod/v4-mini';\nimport type {\n  NativeCredential,\n  OAuth2ClientConfig,\n  OAuth2Token,\n  OidcToken,\n  PkceParameters,\n} from './types';\n\nexport const oauth2RedirectQuerySchema = object({\n  code: optional(string()),\n  state: optional(string()),\n  error: optional(string()),\n  error_description: optional(string()),\n  error_uri: optional(string()),\n});\n\nexport const googleOneTapSchema = object({\n  // login_uri\n  code: optional(string()),\n  state: optional(string()),\n  error: optional(string()),\n  error_description: optional(string()),\n  error_uri: optional(string()),\n  nonce: optional(string()),\n  g_csrf_token: optional(string()),\n  hd: optional(string()),\n  // callback\n  credential: optional(string()),\n});\n\nexport class OAuth2Client {\n  private config: OAuth2ClientConfig;\n  constructor(config: OAuth2ClientConfig) {\n    this.config = config;\n  }\n\n  get baseUri() {\n    return this.config.baseUri;\n  }\n\n  get successUri() {\n    return this.config.successUri;\n  }\n\n  get errorUri() {\n    return this.config.errorUri;\n  }\n\n  private async getClientConfig(registrationId: string) {\n    const registrations =\n      typeof this.config.registration === 'function'\n        ? await this.config.registration()\n        : this.config.registration;\n\n    const registration = registrations[registrationId];\n    invariant(registration, `Registration ${registrationId} not found`);\n\n    const provider = this.config.provider[registration.provider ?? registrationId];\n    invariant(provider, `Provider ${registration.provider ?? registrationId} not found`);\n    return { registration, provider };\n  }\n\n  async createAuthorizationUri({\n    registrationId,\n    state,\n    pkce,\n  }: {\n    registrationId: string;\n    state: string;\n    pkce?: PkceParameters;\n  }): Promise<URL> {\n    const { provider, registration } = await this.getClientConfig(registrationId);\n\n    const { baseUri } = this.config;\n    const { scope, clientId, redirectUri } = registration;\n    return provider.createAuthorizationUri({\n      pkce,\n      state,\n      scope,\n      clientId,\n      redirectUri: redirectUri ?? `${baseUri}/login/oauth2/code/${registrationId}`,\n    });\n  }\n\n  async exchangeAuthorizationCode({\n    registrationId,\n    code,\n    pkce,\n  }: {\n    registrationId: string;\n    code: string;\n    pkce?: PkceParameters;\n  }): Promise<OAuth2Token> {\n    const { provider, registration } = await this.getClientConfig(registrationId);\n\n    const { baseUri } = this.config;\n    const { clientId, clientSecret, redirectUri } = registration;\n    return provider.exchangeAuthorizationCode({\n      code,\n      pkce,\n      clientId,\n      clientSecret,\n      redirectUri: redirectUri ?? `${baseUri}/login/oauth2/code/${registrationId}`,\n    });\n  }\n\n  async getUserInfo({\n    registrationId,\n    token,\n  }: {\n    registrationId: string;\n    token: OAuth2Token | OidcToken;\n  }) {\n    const { provider } = await this.getClientConfig(registrationId);\n    return provider.getUserInfo(token);\n  }\n\n  async refreshAccessToken({\n    registrationId,\n    refreshToken,\n  }: {\n    registrationId: string;\n    refreshToken: string;\n  }): Promise<OAuth2Token> {\n    const { provider, registration } = await this.getClientConfig(registrationId);\n    const { clientId, clientSecret } = registration;\n\n    invariant(provider.refreshAccessToken, 'Provider does not support refreshAccessToken');\n    return provider.refreshAccessToken({ refreshToken, clientId, clientSecret });\n  }\n\n  async revokeToken(registrationId: string, token: string) {\n    const { provider, registration } = await this.getClientConfig(registrationId);\n    const { clientId, clientSecret } = registration;\n\n    invariant(provider.revokeToken, 'Provider does not support revokeToken');\n    await provider.revokeToken({ token, clientId, clientSecret });\n  }\n\n  async loginOAuth2Native({\n    registrationId,\n    credentials,\n    pkce,\n  }: {\n    registrationId: string;\n    credentials: NativeCredential;\n    pkce?: PkceParameters;\n  }) {\n    const { provider, registration } = await this.getClientConfig(registrationId);\n    invariant(provider.loginOAuth2Native, 'Provider does not support loginOAuth2Native');\n    const { baseUri } = this.config;\n    const { clientId, clientSecret, redirectUri } = registration;\n\n    return provider.loginOAuth2Native({\n      clientId,\n      clientSecret,\n      redirectUri: redirectUri ?? `${baseUri}/login/oauth2/code/${registrationId}`,\n      credentials,\n      pkce,\n    });\n  }\n}\n"],"mappings":";AAAA,SAAS,iBAAiB;AAC1B,SAAS,QAAQ,UAAU,cAAc;AASlC,IAAM,4BAA4B,OAAO;AAAA,EAC9C,MAAM,SAAS,OAAO,CAAC;AAAA,EACvB,OAAO,SAAS,OAAO,CAAC;AAAA,EACxB,OAAO,SAAS,OAAO,CAAC;AAAA,EACxB,mBAAmB,SAAS,OAAO,CAAC;AAAA,EACpC,WAAW,SAAS,OAAO,CAAC;AAC9B,CAAC;AAEM,IAAM,qBAAqB,OAAO;AAAA;AAAA,EAEvC,MAAM,SAAS,OAAO,CAAC;AAAA,EACvB,OAAO,SAAS,OAAO,CAAC;AAAA,EACxB,OAAO,SAAS,OAAO,CAAC;AAAA,EACxB,mBAAmB,SAAS,OAAO,CAAC;AAAA,EACpC,WAAW,SAAS,OAAO,CAAC;AAAA,EAC5B,OAAO,SAAS,OAAO,CAAC;AAAA,EACxB,cAAc,SAAS,OAAO,CAAC;AAAA,EAC/B,IAAI,SAAS,OAAO,CAAC;AAAA;AAAA,EAErB,YAAY,SAAS,OAAO,CAAC;AAC/B,CAAC;AAEM,IAAM,eAAN,MAAmB;AAAA,EAChB;AAAA,EACR,YAAY,QAA4B;AACtC,SAAK,SAAS;AAAA,EAChB;AAAA,EAEA,IAAI,UAAU;AACZ,WAAO,KAAK,OAAO;AAAA,EACrB;AAAA,EAEA,IAAI,aAAa;AACf,WAAO,KAAK,OAAO;AAAA,EACrB;AAAA,EAEA,IAAI,WAAW;AACb,WAAO,KAAK,OAAO;AAAA,EACrB;AAAA,EAEA,MAAc,gBAAgB,gBAAwB;AACpD,UAAM,gBACJ,OAAO,KAAK,OAAO,iBAAiB,aAChC,MAAM,KAAK,OAAO,aAAa,IAC/B,KAAK,OAAO;AAElB,UAAM,eAAe,cAAc,cAAc;AACjD,cAAU,cAAc,gBAAgB,cAAc,YAAY;AAElE,UAAM,WAAW,KAAK,OAAO,SAAS,aAAa,YAAY,cAAc;AAC7E,cAAU,UAAU,YAAY,aAAa,YAAY,cAAc,YAAY;AACnF,WAAO,EAAE,cAAc,SAAS;AAAA,EAClC;AAAA,EAEA,MAAM,uBAAuB;AAAA,IAC3B;AAAA,IACA;AAAA,IACA;AAAA,EACF,GAIiB;AACf,UAAM,EAAE,UAAU,aAAa,IAAI,MAAM,KAAK,gBAAgB,cAAc;AAE5E,UAAM,EAAE,QAAQ,IAAI,KAAK;AACzB,UAAM,EAAE,OAAO,UAAU,YAAY,IAAI;AACzC,WAAO,SAAS,uBAAuB;AAAA,MACrC;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,aAAa,eAAe,GAAG,OAAO,sBAAsB,cAAc;AAAA,IAC5E,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,0BAA0B;AAAA,IAC9B;AAAA,IACA;AAAA,IACA;AAAA,EACF,GAIyB;AACvB,UAAM,EAAE,UAAU,aAAa,IAAI,MAAM,KAAK,gBAAgB,cAAc;AAE5E,UAAM,EAAE,QAAQ,IAAI,KAAK;AACzB,UAAM,EAAE,UAAU,cAAc,YAAY,IAAI;AAChD,WAAO,SAAS,0BAA0B;AAAA,MACxC;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,aAAa,eAAe,GAAG,OAAO,sBAAsB,cAAc;AAAA,IAC5E,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,YAAY;AAAA,IAChB;AAAA,IACA;AAAA,EACF,GAGG;AACD,UAAM,EAAE,SAAS,IAAI,MAAM,KAAK,gBAAgB,cAAc;AAC9D,WAAO,SAAS,YAAY,KAAK;AAAA,EACnC;AAAA,EAEA,MAAM,mBAAmB;AAAA,IACvB;AAAA,IACA;AAAA,EACF,GAGyB;AACvB,UAAM,EAAE,UAAU,aAAa,IAAI,MAAM,KAAK,gBAAgB,cAAc;AAC5E,UAAM,EAAE,UAAU,aAAa,IAAI;AAEnC,cAAU,SAAS,oBAAoB,8CAA8C;AACrF,WAAO,SAAS,mBAAmB,EAAE,cAAc,UAAU,aAAa,CAAC;AAAA,EAC7E;AAAA,EAEA,MAAM,YAAY,gBAAwB,OAAe;AACvD,UAAM,EAAE,UAAU,aAAa,IAAI,MAAM,KAAK,gBAAgB,cAAc;AAC5E,UAAM,EAAE,UAAU,aAAa,IAAI;AAEnC,cAAU,SAAS,aAAa,uCAAuC;AACvE,UAAM,SAAS,YAAY,EAAE,OAAO,UAAU,aAAa,CAAC;AAAA,EAC9D;AAAA,EAEA,MAAM,kBAAkB;AAAA,IACtB;AAAA,IACA;AAAA,IACA;AAAA,EACF,GAIG;AACD,UAAM,EAAE,UAAU,aAAa,IAAI,MAAM,KAAK,gBAAgB,cAAc;AAC5E,cAAU,SAAS,mBAAmB,6CAA6C;AACnF,UAAM,EAAE,QAAQ,IAAI,KAAK;AACzB,UAAM,EAAE,UAAU,cAAc,YAAY,IAAI;AAEhD,WAAO,SAAS,kBAAkB;AAAA,MAChC;AAAA,MACA;AAAA,MACA,aAAa,eAAe,GAAG,OAAO,sBAAsB,cAAc;AAAA,MAC1E;AAAA,MACA;AAAA,IACF,CAAC;AAAA,EACH;AACF;","names":[]}
+{"version":3,"file":"client.mjs","names":[],"sources":["../../src/oauth2/client.ts"],"sourcesContent":["import { invariant } from '@shware/utils';\nimport { object, optional, string } from 'zod/v4-mini';\nimport type {\n  NativeCredential,\n  OAuth2ClientConfig,\n  OAuth2Token,\n  OidcToken,\n  PkceParameters,\n} from './types';\n\nexport const oauth2RedirectQuerySchema = object({\n  code: optional(string()),\n  state: optional(string()),\n  error: optional(string()),\n  error_description: optional(string()),\n  error_uri: optional(string()),\n});\n\nexport const googleOneTapSchema = object({\n  // login_uri\n  code: optional(string()),\n  state: optional(string()),\n  error: optional(string()),\n  error_description: optional(string()),\n  error_uri: optional(string()),\n  nonce: optional(string()),\n  g_csrf_token: optional(string()),\n  hd: optional(string()),\n  // callback\n  credential: optional(string()),\n});\n\nexport class OAuth2Client {\n  private config: OAuth2ClientConfig;\n  constructor(config: OAuth2ClientConfig) {\n    this.config = config;\n  }\n\n  get baseUri() {\n    return this.config.baseUri;\n  }\n\n  get successUri() {\n    return this.config.successUri;\n  }\n\n  get errorUri() {\n    return this.config.errorUri;\n  }\n\n  private async getClientConfig(registrationId: string) {\n    const registrations =\n      typeof this.config.registration === 'function'\n        ? await this.config.registration()\n        : this.config.registration;\n\n    const registration = registrations[registrationId];\n    invariant(registration, `Registration ${registrationId} not found`);\n\n    const provider = this.config.provider[registration.provider ?? registrationId];\n    invariant(provider, `Provider ${registration.provider ?? registrationId} not found`);\n    return { registration, provider };\n  }\n\n  async createAuthorizationUri({\n    registrationId,\n    state,\n    pkce,\n  }: {\n    registrationId: string;\n    state: string;\n    pkce?: PkceParameters;\n  }): Promise<URL> {\n    const { provider, registration } = await this.getClientConfig(registrationId);\n\n    const { baseUri } = this.config;\n    const { scope, clientId, redirectUri } = registration;\n    return provider.createAuthorizationUri({\n      pkce,\n      state,\n      scope,\n      clientId,\n      redirectUri: redirectUri ?? `${baseUri}/login/oauth2/code/${registrationId}`,\n    });\n  }\n\n  async exchangeAuthorizationCode({\n    registrationId,\n    code,\n    pkce,\n  }: {\n    registrationId: string;\n    code: string;\n    pkce?: PkceParameters;\n  }): Promise<OAuth2Token> {\n    const { provider, registration } = await this.getClientConfig(registrationId);\n\n    const { baseUri } = this.config;\n    const { clientId, clientSecret, redirectUri } = registration;\n    return provider.exchangeAuthorizationCode({\n      code,\n      pkce,\n      clientId,\n      clientSecret,\n      redirectUri: redirectUri ?? `${baseUri}/login/oauth2/code/${registrationId}`,\n    });\n  }\n\n  async getUserInfo({\n    registrationId,\n    token,\n  }: {\n    registrationId: string;\n    token: OAuth2Token | OidcToken;\n  }) {\n    const { provider } = await this.getClientConfig(registrationId);\n    return provider.getUserInfo(token);\n  }\n\n  async refreshAccessToken({\n    registrationId,\n    refreshToken,\n  }: {\n    registrationId: string;\n    refreshToken: string;\n  }): Promise<OAuth2Token> {\n    const { provider, registration } = await this.getClientConfig(registrationId);\n    const { clientId, clientSecret } = registration;\n\n    invariant(provider.refreshAccessToken, 'Provider does not support refreshAccessToken');\n    return provider.refreshAccessToken({ refreshToken, clientId, clientSecret });\n  }\n\n  async revokeToken(registrationId: string, token: string) {\n    const { provider, registration } = await this.getClientConfig(registrationId);\n    const { clientId, clientSecret } = registration;\n\n    invariant(provider.revokeToken, 'Provider does not support revokeToken');\n    await provider.revokeToken({ token, clientId, clientSecret });\n  }\n\n  async loginOAuth2Native({\n    registrationId,\n    credentials,\n    pkce,\n  }: {\n    registrationId: string;\n    credentials: NativeCredential;\n    pkce?: PkceParameters;\n  }) {\n    const { provider, registration } = await this.getClientConfig(registrationId);\n    invariant(provider.loginOAuth2Native, 'Provider does not support loginOAuth2Native');\n    const { baseUri } = this.config;\n    const { clientId, clientSecret, redirectUri } = registration;\n\n    return provider.loginOAuth2Native({\n      clientId,\n      clientSecret,\n      redirectUri: redirectUri ?? `${baseUri}/login/oauth2/code/${registrationId}`,\n      credentials,\n      pkce,\n    });\n  }\n}\n"],"mappings":";;;AAUA,MAAa,4BAA4B,OAAO;CAC9C,MAAM,SAAS,OAAO,CAAC;CACvB,OAAO,SAAS,OAAO,CAAC;CACxB,OAAO,SAAS,OAAO,CAAC;CACxB,mBAAmB,SAAS,OAAO,CAAC;CACpC,WAAW,SAAS,OAAO,CAAC;AAC9B,CAAC;AAED,MAAa,qBAAqB,OAAO;CAEvC,MAAM,SAAS,OAAO,CAAC;CACvB,OAAO,SAAS,OAAO,CAAC;CACxB,OAAO,SAAS,OAAO,CAAC;CACxB,mBAAmB,SAAS,OAAO,CAAC;CACpC,WAAW,SAAS,OAAO,CAAC;CAC5B,OAAO,SAAS,OAAO,CAAC;CACxB,cAAc,SAAS,OAAO,CAAC;CAC/B,IAAI,SAAS,OAAO,CAAC;CAErB,YAAY,SAAS,OAAO,CAAC;AAC/B,CAAC;AAED,IAAa,eAAb,MAA0B;CACxB;CACA,YAAY,QAA4B;EACtC,KAAK,SAAS;CAChB;CAEA,IAAI,UAAU;EACZ,OAAO,KAAK,OAAO;CACrB;CAEA,IAAI,aAAa;EACf,OAAO,KAAK,OAAO;CACrB;CAEA,IAAI,WAAW;EACb,OAAO,KAAK,OAAO;CACrB;CAEA,MAAc,gBAAgB,gBAAwB;EAMpD,MAAM,gBAJJ,OAAO,KAAK,OAAO,iBAAiB,aAChC,MAAM,KAAK,OAAO,aAAa,IAC/B,KAAK,OAAO,aAAA,CAEiB;EACnC,UAAU,cAAc,gBAAgB,eAAe,WAAW;EAElE,MAAM,WAAW,KAAK,OAAO,SAAS,aAAa,YAAY;EAC/D,UAAU,UAAU,YAAY,aAAa,YAAY,eAAe,WAAW;EACnF,OAAO;GAAE;GAAc;EAAS;CAClC;CAEA,MAAM,uBAAuB,EAC3B,gBACA,OACA,QAKe;EACf,MAAM,EAAE,UAAU,iBAAiB,MAAM,KAAK,gBAAgB,cAAc;EAE5E,MAAM,EAAE,YAAY,KAAK;EACzB,MAAM,EAAE,OAAO,UAAU,gBAAgB;EACzC,OAAO,SAAS,uBAAuB;GACrC;GACA;GACA;GACA;GACA,aAAa,eAAe,GAAG,QAAQ,qBAAqB;EAC9D,CAAC;CACH;CAEA,MAAM,0BAA0B,EAC9B,gBACA,MACA,QAKuB;EACvB,MAAM,EAAE,UAAU,iBAAiB,MAAM,KAAK,gBAAgB,cAAc;EAE5E,MAAM,EAAE,YAAY,KAAK;EACzB,MAAM,EAAE,UAAU,cAAc,gBAAgB;EAChD,OAAO,SAAS,0BAA0B;GACxC;GACA;GACA;GACA;GACA,aAAa,eAAe,GAAG,QAAQ,qBAAqB;EAC9D,CAAC;CACH;CAEA,MAAM,YAAY,EAChB,gBACA,SAIC;EACD,MAAM,EAAE,aAAa,MAAM,KAAK,gBAAgB,cAAc;EAC9D,OAAO,SAAS,YAAY,KAAK;CACnC;CAEA,MAAM,mBAAmB,EACvB,gBACA,gBAIuB;EACvB,MAAM,EAAE,UAAU,iBAAiB,MAAM,KAAK,gBAAgB,cAAc;EAC5E,MAAM,EAAE,UAAU,iBAAiB;EAEnC,UAAU,SAAS,oBAAoB,8CAA8C;EACrF,OAAO,SAAS,mBAAmB;GAAE;GAAc;GAAU;EAAa,CAAC;CAC7E;CAEA,MAAM,YAAY,gBAAwB,OAAe;EACvD,MAAM,EAAE,UAAU,iBAAiB,MAAM,KAAK,gBAAgB,cAAc;EAC5E,MAAM,EAAE,UAAU,iBAAiB;EAEnC,UAAU,SAAS,aAAa,uCAAuC;EACvE,MAAM,SAAS,YAAY;GAAE;GAAO;GAAU;EAAa,CAAC;CAC9D;CAEA,MAAM,kBAAkB,EACtB,gBACA,aACA,QAKC;EACD,MAAM,EAAE,UAAU,iBAAiB,MAAM,KAAK,gBAAgB,cAAc;EAC5E,UAAU,SAAS,mBAAmB,6CAA6C;EACnF,MAAM,EAAE,YAAY,KAAK;EACzB,MAAM,EAAE,UAAU,cAAc,gBAAgB;EAEhD,OAAO,SAAS,kBAAkB;GAChC;GACA;GACA,aAAa,eAAe,GAAG,QAAQ,qBAAqB;GAC5D;GACA;EACF,CAAC;CACH;AACF"}

package/dist/oauth2/error.cjs

@@ -1,48 +1,23 @@
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+//#region src/oauth2/error.ts
+var OAuth2Error = class OAuth2Error extends Error {
+	status;
+	error;
+	constructor(status, error, message) {
+		super(message ?? `OAuth2 error: ${error}`);
+		this.status = status;
+		this.error = error;
+		Object.setPrototypeOf(this, OAuth2Error.prototype);
+	}
 };
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
+var AuthenticationError = class AuthenticationError extends Error {
+	constructor(message) {
+		super(message);
+		Object.setPrototypeOf(this, AuthenticationError.prototype);
+	}
 };
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+//#endregion
+exports.AuthenticationError = AuthenticationError;
+exports.OAuth2Error = OAuth2Error;
 
-// src/oauth2/error.ts
-var error_exports = {};
-__export(error_exports, {
-  AuthenticationError: () => AuthenticationError,
-  OAuth2Error: () => OAuth2Error
-});
-module.exports = __toCommonJS(error_exports);
-var OAuth2Error = class _OAuth2Error extends Error {
-  status;
-  error;
-  constructor(status, error, message) {
-    super(message ?? `OAuth2 error: ${error}`);
-    this.status = status;
-    this.error = error;
-    Object.setPrototypeOf(this, _OAuth2Error.prototype);
-  }
-};
-var AuthenticationError = class _AuthenticationError extends Error {
-  constructor(message) {
-    super(message);
-    Object.setPrototypeOf(this, _AuthenticationError.prototype);
-  }
-};
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  AuthenticationError,
-  OAuth2Error
-});
 //# sourceMappingURL=error.cjs.map

package/dist/oauth2/error.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/oauth2/error.ts"],"sourcesContent":["// reference: https://datatracker.ietf.org/doc/html/rfc6749#section-4.2.2.1\nexport type OAuth2ErrorType =\n  | 'invalid_request' // 400\n  | 'invalid_client' // 401\n  | 'invalid_grant' // 400\n  | 'invalid_token' // 401\n  | 'invalid_scope' // 400\n  | 'unauthorized_client' // 401\n  | 'unsupported_grant_type' // 400\n  | 'unsupported_response_type' // 400\n  | 'insufficient_scope' // 403\n  | 'redirect_uri_mismatch' // 400\n  | 'access_denied' // 400\n  | 'server_error' // 500\n  | 'temporarily_unavailable' // 503\n  | (string & {});\n\nexport class OAuth2Error extends Error {\n  readonly status: number;\n  readonly error: OAuth2ErrorType;\n\n  constructor(status: number, error: OAuth2ErrorType, message?: string) {\n    super(message ?? `OAuth2 error: ${error}`);\n    this.status = status;\n    this.error = error;\n    Object.setPrototypeOf(this, OAuth2Error.prototype);\n  }\n}\n\nexport class AuthenticationError extends Error {\n  constructor(message: string) {\n    super(message);\n    Object.setPrototypeOf(this, AuthenticationError.prototype);\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAiBO,IAAM,cAAN,MAAM,qBAAoB,MAAM;AAAA,EAC5B;AAAA,EACA;AAAA,EAET,YAAY,QAAgB,OAAwB,SAAkB;AACpE,UAAM,WAAW,iBAAiB,KAAK,EAAE;AACzC,SAAK,SAAS;AACd,SAAK,QAAQ;AACb,WAAO,eAAe,MAAM,aAAY,SAAS;AAAA,EACnD;AACF;AAEO,IAAM,sBAAN,MAAM,6BAA4B,MAAM;AAAA,EAC7C,YAAY,SAAiB;AAC3B,UAAM,OAAO;AACb,WAAO,eAAe,MAAM,qBAAoB,SAAS;AAAA,EAC3D;AACF;","names":[]}
+{"version":3,"file":"error.cjs","names":[],"sources":["../../src/oauth2/error.ts"],"sourcesContent":["// reference: https://datatracker.ietf.org/doc/html/rfc6749#section-4.2.2.1\nexport type OAuth2ErrorType =\n  | 'invalid_request' // 400\n  | 'invalid_client' // 401\n  | 'invalid_grant' // 400\n  | 'invalid_token' // 401\n  | 'invalid_scope' // 400\n  | 'unauthorized_client' // 401\n  | 'unsupported_grant_type' // 400\n  | 'unsupported_response_type' // 400\n  | 'insufficient_scope' // 403\n  | 'redirect_uri_mismatch' // 400\n  | 'access_denied' // 400\n  | 'server_error' // 500\n  | 'temporarily_unavailable' // 503\n  | (string & {});\n\nexport class OAuth2Error extends Error {\n  readonly status: number;\n  readonly error: OAuth2ErrorType;\n\n  constructor(status: number, error: OAuth2ErrorType, message?: string) {\n    super(message ?? `OAuth2 error: ${error}`);\n    this.status = status;\n    this.error = error;\n    Object.setPrototypeOf(this, OAuth2Error.prototype);\n  }\n}\n\nexport class AuthenticationError extends Error {\n  constructor(message: string) {\n    super(message);\n    Object.setPrototypeOf(this, AuthenticationError.prototype);\n  }\n}\n"],"mappings":";;AAiBA,IAAa,cAAb,MAAa,oBAAoB,MAAM;CACrC;CACA;CAEA,YAAY,QAAgB,OAAwB,SAAkB;EACpE,MAAM,WAAW,iBAAiB,OAAO;EACzC,KAAK,SAAS;EACd,KAAK,QAAQ;EACb,OAAO,eAAe,MAAM,YAAY,SAAS;CACnD;AACF;AAEA,IAAa,sBAAb,MAAa,4BAA4B,MAAM;CAC7C,YAAY,SAAiB;EAC3B,MAAM,OAAO;EACb,OAAO,eAAe,MAAM,oBAAoB,SAAS;CAC3D;AACF"}

package/dist/oauth2/error.d.cts

@@ -1,11 +1,13 @@
+//#region src/oauth2/error.d.ts
 type OAuth2ErrorType = 'invalid_request' | 'invalid_client' | 'invalid_grant' | 'invalid_token' | 'invalid_scope' | 'unauthorized_client' | 'unsupported_grant_type' | 'unsupported_response_type' | 'insufficient_scope' | 'redirect_uri_mismatch' | 'access_denied' | 'server_error' | 'temporarily_unavailable' | (string & {});
 declare class OAuth2Error extends Error {
-    readonly status: number;
-    readonly error: OAuth2ErrorType;
-    constructor(status: number, error: OAuth2ErrorType, message?: string);
+  readonly status: number;
+  readonly error: OAuth2ErrorType;
+  constructor(status: number, error: OAuth2ErrorType, message?: string);
 }
 declare class AuthenticationError extends Error {
-    constructor(message: string);
+  constructor(message: string);
 }
-
-export { AuthenticationError, OAuth2Error, type OAuth2ErrorType };
+//#endregion
+export { AuthenticationError, OAuth2Error, OAuth2ErrorType };
+//# sourceMappingURL=error.d.cts.map

package/dist/oauth2/error.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"error.d.cts","names":[],"sources":["../../src/oauth2/error.ts"],"mappings":";KACY;cAgBC,oBAAoB;WACtB;WACA,OAAO;EAEhB,YAAY,gBAAgB,OAAO,iBAAiB;;cAQzC,4BAA4B;EACvC,YAAY"}

package/dist/oauth2/{error.d.ts → error.d.mts}

@@ -1,11 +1,13 @@
+//#region src/oauth2/error.d.ts
 type OAuth2ErrorType = 'invalid_request' | 'invalid_client' | 'invalid_grant' | 'invalid_token' | 'invalid_scope' | 'unauthorized_client' | 'unsupported_grant_type' | 'unsupported_response_type' | 'insufficient_scope' | 'redirect_uri_mismatch' | 'access_denied' | 'server_error' | 'temporarily_unavailable' | (string & {});
 declare class OAuth2Error extends Error {
-    readonly status: number;
-    readonly error: OAuth2ErrorType;
-    constructor(status: number, error: OAuth2ErrorType, message?: string);
+  readonly status: number;
+  readonly error: OAuth2ErrorType;
+  constructor(status: number, error: OAuth2ErrorType, message?: string);
 }
 declare class AuthenticationError extends Error {
-    constructor(message: string);
+  constructor(message: string);
 }
-
-export { AuthenticationError, OAuth2Error, type OAuth2ErrorType };
+//#endregion
+export { AuthenticationError, OAuth2Error, OAuth2ErrorType };
+//# sourceMappingURL=error.d.mts.map

package/dist/oauth2/error.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"error.d.mts","names":[],"sources":["../../src/oauth2/error.ts"],"mappings":";KACY;cAgBC,oBAAoB;WACtB;WACA,OAAO;EAEhB,YAAY,gBAAgB,OAAO,iBAAiB;;cAQzC,4BAA4B;EACvC,YAAY"}

package/dist/oauth2/error.mjs

@@ -1,22 +1,21 @@
-// src/oauth2/error.ts
-var OAuth2Error = class _OAuth2Error extends Error {
-  status;
-  error;
-  constructor(status, error, message) {
-    super(message ?? `OAuth2 error: ${error}`);
-    this.status = status;
-    this.error = error;
-    Object.setPrototypeOf(this, _OAuth2Error.prototype);
-  }
+//#region src/oauth2/error.ts
+var OAuth2Error = class OAuth2Error extends Error {
+	status;
+	error;
+	constructor(status, error, message) {
+		super(message ?? `OAuth2 error: ${error}`);
+		this.status = status;
+		this.error = error;
+		Object.setPrototypeOf(this, OAuth2Error.prototype);
+	}
 };
-var AuthenticationError = class _AuthenticationError extends Error {
-  constructor(message) {
-    super(message);
-    Object.setPrototypeOf(this, _AuthenticationError.prototype);
-  }
-};
-export {
-  AuthenticationError,
-  OAuth2Error
+var AuthenticationError = class AuthenticationError extends Error {
+	constructor(message) {
+		super(message);
+		Object.setPrototypeOf(this, AuthenticationError.prototype);
+	}
 };
+//#endregion
+export { AuthenticationError, OAuth2Error };
+
 //# sourceMappingURL=error.mjs.map

package/dist/oauth2/error.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/oauth2/error.ts"],"sourcesContent":["// reference: https://datatracker.ietf.org/doc/html/rfc6749#section-4.2.2.1\nexport type OAuth2ErrorType =\n  | 'invalid_request' // 400\n  | 'invalid_client' // 401\n  | 'invalid_grant' // 400\n  | 'invalid_token' // 401\n  | 'invalid_scope' // 400\n  | 'unauthorized_client' // 401\n  | 'unsupported_grant_type' // 400\n  | 'unsupported_response_type' // 400\n  | 'insufficient_scope' // 403\n  | 'redirect_uri_mismatch' // 400\n  | 'access_denied' // 400\n  | 'server_error' // 500\n  | 'temporarily_unavailable' // 503\n  | (string & {});\n\nexport class OAuth2Error extends Error {\n  readonly status: number;\n  readonly error: OAuth2ErrorType;\n\n  constructor(status: number, error: OAuth2ErrorType, message?: string) {\n    super(message ?? `OAuth2 error: ${error}`);\n    this.status = status;\n    this.error = error;\n    Object.setPrototypeOf(this, OAuth2Error.prototype);\n  }\n}\n\nexport class AuthenticationError extends Error {\n  constructor(message: string) {\n    super(message);\n    Object.setPrototypeOf(this, AuthenticationError.prototype);\n  }\n}\n"],"mappings":";AAiBO,IAAM,cAAN,MAAM,qBAAoB,MAAM;AAAA,EAC5B;AAAA,EACA;AAAA,EAET,YAAY,QAAgB,OAAwB,SAAkB;AACpE,UAAM,WAAW,iBAAiB,KAAK,EAAE;AACzC,SAAK,SAAS;AACd,SAAK,QAAQ;AACb,WAAO,eAAe,MAAM,aAAY,SAAS;AAAA,EACnD;AACF;AAEO,IAAM,sBAAN,MAAM,6BAA4B,MAAM;AAAA,EAC7C,YAAY,SAAiB;AAC3B,UAAM,OAAO;AACb,WAAO,eAAe,MAAM,qBAAoB,SAAS;AAAA,EAC3D;AACF;","names":[]}
+{"version":3,"file":"error.mjs","names":[],"sources":["../../src/oauth2/error.ts"],"sourcesContent":["// reference: https://datatracker.ietf.org/doc/html/rfc6749#section-4.2.2.1\nexport type OAuth2ErrorType =\n  | 'invalid_request' // 400\n  | 'invalid_client' // 401\n  | 'invalid_grant' // 400\n  | 'invalid_token' // 401\n  | 'invalid_scope' // 400\n  | 'unauthorized_client' // 401\n  | 'unsupported_grant_type' // 400\n  | 'unsupported_response_type' // 400\n  | 'insufficient_scope' // 403\n  | 'redirect_uri_mismatch' // 400\n  | 'access_denied' // 400\n  | 'server_error' // 500\n  | 'temporarily_unavailable' // 503\n  | (string & {});\n\nexport class OAuth2Error extends Error {\n  readonly status: number;\n  readonly error: OAuth2ErrorType;\n\n  constructor(status: number, error: OAuth2ErrorType, message?: string) {\n    super(message ?? `OAuth2 error: ${error}`);\n    this.status = status;\n    this.error = error;\n    Object.setPrototypeOf(this, OAuth2Error.prototype);\n  }\n}\n\nexport class AuthenticationError extends Error {\n  constructor(message: string) {\n    super(message);\n    Object.setPrototypeOf(this, AuthenticationError.prototype);\n  }\n}\n"],"mappings":";AAiBA,IAAa,cAAb,MAAa,oBAAoB,MAAM;CACrC;CACA;CAEA,YAAY,QAAgB,OAAwB,SAAkB;EACpE,MAAM,WAAW,iBAAiB,OAAO;EACzC,KAAK,SAAS;EACd,KAAK,QAAQ;EACb,OAAO,eAAe,MAAM,YAAY,SAAS;CACnD;AACF;AAEA,IAAa,sBAAb,MAAa,4BAA4B,MAAM;CAC7C,YAAY,SAAiB;EAC3B,MAAM,OAAO;EACb,OAAO,eAAe,MAAM,oBAAoB,SAAS;CAC3D;AACF"}

package/dist/oauth2/provider/apple.cjs

@@ -1,91 +1,78 @@
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-
-// src/oauth2/provider/apple.ts
-var apple_exports = {};
-__export(apple_exports, {
-  apple: () => apple,
-  createAppleProvider: () => createAppleProvider
-});
-module.exports = __toCommonJS(apple_exports);
-var import_utils = require("@shware/utils");
-var import_error = require("../error.cjs");
-var import_common = require("./common.cjs");
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const require_oauth2_error = require("../error.cjs");
+const require_oauth2_provider_common = require("./common.cjs");
+let _shware_utils = require("@shware/utils");
+//#region src/oauth2/provider/apple.ts
 function createAppleProvider() {
-  return {
-    // important notice: response_mode=form_post is required for apple
-    authorizationUri: "https://appleid.apple.com/auth/authorize?response_mode=form_post",
-    tokenUri: "https://appleid.apple.com/auth/token",
-    jwkSetUri: "https://appleid.apple.com/auth/keys",
-    userNameAttribute: "sub",
-    defaultScope: ["openid", "name", "email"],
-    createAuthorizationUri({ pkce: _, ...params }) {
-      return (0, import_common.createAuthorizationUri)({
-        ...params,
-        scope: params.scope ?? this.defaultScope,
-        authorizationUri: this.authorizationUri
-      });
-    },
-    async exchangeAuthorizationCode({ pkce: _, ...params }) {
-      const response = await (0, import_common.exchangeAuthorizationCode)({ ...params, tokenUri: this.tokenUri });
-      if (!response.ok) {
-        const { error } = await response.json();
-        throw new import_error.OAuth2Error(response.status, error);
-      }
-      return await response.json();
-    },
-    async getUserInfo({ id_token }) {
-      (0, import_utils.invariant)(id_token, "id_token is required");
-      (0, import_utils.invariant)(this.jwkSetUri, "jwkSetUri is required");
-      const data = await (0, import_common.verifyIdToken)(id_token, this.jwkSetUri);
-      return {
-        data,
-        claims: {
-          sub: data.sub,
-          name: data.name,
-          email: data.email,
-          email_verified: true,
-          picture: data.picture,
-          given_name: data.user?.name.firstName,
-          family_name: data.user?.name.lastName
-        }
-      };
-    },
-    async loginOAuth2Native({ pkce: _, credentials, ...params }) {
-      (0, import_utils.invariant)(credentials.code, "code is required");
-      const { tokenUri } = this;
-      const { code } = credentials;
-      const response = await (0, import_common.exchangeAuthorizationCode)({ code, tokenUri, ...params });
-      if (!response.ok) {
-        const { error } = await response.json();
-        throw new import_error.OAuth2Error(response.status, error);
-      }
-      const token = await response.json();
-      const userInfo = await this.getUserInfo(token);
-      return { token, userInfo };
-    }
-  };
+	return {
+		authorizationUri: "https://appleid.apple.com/auth/authorize?response_mode=form_post",
+		tokenUri: "https://appleid.apple.com/auth/token",
+		jwkSetUri: "https://appleid.apple.com/auth/keys",
+		userNameAttribute: "sub",
+		defaultScope: [
+			"openid",
+			"name",
+			"email"
+		],
+		createAuthorizationUri({ pkce: _, ...params }) {
+			return require_oauth2_provider_common.createAuthorizationUri({
+				...params,
+				scope: params.scope ?? this.defaultScope,
+				authorizationUri: this.authorizationUri
+			});
+		},
+		async exchangeAuthorizationCode({ pkce: _, ...params }) {
+			const response = await require_oauth2_provider_common.exchangeAuthorizationCode({
+				...params,
+				tokenUri: this.tokenUri
+			});
+			if (!response.ok) {
+				const { error } = await response.json();
+				throw new require_oauth2_error.OAuth2Error(response.status, error);
+			}
+			return await response.json();
+		},
+		async getUserInfo({ id_token }) {
+			(0, _shware_utils.invariant)(id_token, "id_token is required");
+			(0, _shware_utils.invariant)(this.jwkSetUri, "jwkSetUri is required");
+			const data = await require_oauth2_provider_common.verifyIdToken(id_token, this.jwkSetUri);
+			return {
+				data,
+				claims: {
+					sub: data.sub,
+					name: data.name,
+					email: data.email,
+					email_verified: true,
+					picture: data.picture,
+					given_name: data.user?.name.firstName,
+					family_name: data.user?.name.lastName
+				}
+			};
+		},
+		async loginOAuth2Native({ pkce: _, credentials, ...params }) {
+			(0, _shware_utils.invariant)(credentials.code, "code is required");
+			const { tokenUri } = this;
+			const { code } = credentials;
+			const response = await require_oauth2_provider_common.exchangeAuthorizationCode({
+				code,
+				tokenUri,
+				...params
+			});
+			if (!response.ok) {
+				const { error } = await response.json();
+				throw new require_oauth2_error.OAuth2Error(response.status, error);
+			}
+			const token = await response.json();
+			return {
+				token,
+				userInfo: await this.getUserInfo(token)
+			};
+		}
+	};
 }
-var apple = createAppleProvider();
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  apple,
-  createAppleProvider
-});
+const apple = createAppleProvider();
+//#endregion
+exports.apple = apple;
+exports.createAppleProvider = createAppleProvider;
+
 //# sourceMappingURL=apple.cjs.map