@shware/security 2.5.3 → 2.6.0

package/dist/oauth2/provider/common.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"common.d.cts","names":[],"sources":["../../../src/oauth2/provider/common.ts"],"mappings":";;iBAIgB,uBAAuB;EACrC;EACA;EACA;EACA;EACA;EACA,OAAO,KAAK;IACb;iBAcqB,0BACpB,QAAQ;EACN;EACA;IACD,QAAA;iBAuBmB,mBACpB,QAAQ;EACN;EACA;IACD,QAAA;UAsBO;EACR;EACA;EACA;EACA;EACA;;iBAGoB,YAAY,QAAQ,oBAAiB;iBAwBrC,cAAc,GAAG,iBAAiB,oBAAiB,QAAA"}

package/dist/oauth2/provider/common.d.mts

@@ -0,0 +1,30 @@
+import { ExchangeCodeParams, PkceParameters, RefreshTokenParams } from "../types.mjs";
+//#region src/oauth2/provider/common.d.ts
+declare function createAuthorizationUri(options: {
+  state: string;
+  scope: string[];
+  clientId: string;
+  redirectUri: string;
+  authorizationUri: string;
+  pkce?: Omit<PkceParameters, 'code_verifier'>;
+}): URL;
+declare function exchangeAuthorizationCode(params: ExchangeCodeParams & {
+  tokenUri: string;
+  authentication?: 'basic' | 'post';
+}): Promise<Response>;
+declare function refreshAccessToken(params: RefreshTokenParams & {
+  tokenUri: string;
+  authentication?: 'basic' | 'post';
+}): Promise<Response>;
+interface RevokeTokenParams {
+  token: string;
+  clientId: string;
+  clientSecret: string;
+  tokenRevokeUri: string;
+  authentication?: 'basic' | 'post';
+}
+declare function revokeToken(params: RevokeTokenParams): Promise<void>;
+declare function verifyIdToken<T>(idToken: string, jwkSetUri: string): Promise<T>;
+//#endregion
+export { createAuthorizationUri, exchangeAuthorizationCode, refreshAccessToken, revokeToken, verifyIdToken };
+//# sourceMappingURL=common.d.mts.map

package/dist/oauth2/provider/common.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"common.d.mts","names":[],"sources":["../../../src/oauth2/provider/common.ts"],"mappings":";;iBAIgB,uBAAuB;EACrC;EACA;EACA;EACA;EACA;EACA,OAAO,KAAK;IACb;iBAcqB,0BACpB,QAAQ;EACN;EACA;IACD,QAAA;iBAuBmB,mBACpB,QAAQ;EACN;EACA;IACD,QAAA;UAsBO;EACR;EACA;EACA;EACA;EACA;;iBAGoB,YAAY,QAAQ,oBAAiB;iBAwBrC,cAAc,GAAG,iBAAiB,oBAAiB,QAAA"}

package/dist/oauth2/provider/common.mjs

@@ -1,91 +1,92 @@
-// src/oauth2/provider/common.ts
-import { createRemoteJWKSet, jwtVerify } from "jose";
 import { OAuth2Error } from "../error.mjs";
+import { createRemoteJWKSet, jwtVerify } from "jose";
+//#region src/oauth2/provider/common.ts
 function createAuthorizationUri(options) {
-  const url = new URL(options.authorizationUri);
-  url.searchParams.append("response_type", "code");
-  url.searchParams.append("client_id", options.clientId);
-  url.searchParams.append("state", options.state);
-  url.searchParams.append("scope", options.scope.join(" "));
-  url.searchParams.append("redirect_uri", options.redirectUri);
-  if (options.pkce) {
-    url.searchParams.append("code_challenge_method", options.pkce.code_challenge_method);
-    url.searchParams.append("code_challenge", options.pkce.code_challenge);
-  }
-  return url;
+	const url = new URL(options.authorizationUri);
+	url.searchParams.append("response_type", "code");
+	url.searchParams.append("client_id", options.clientId);
+	url.searchParams.append("state", options.state);
+	url.searchParams.append("scope", options.scope.join(" "));
+	url.searchParams.append("redirect_uri", options.redirectUri);
+	if (options.pkce) {
+		url.searchParams.append("code_challenge_method", options.pkce.code_challenge_method);
+		url.searchParams.append("code_challenge", options.pkce.code_challenge);
+	}
+	return url;
 }
 async function exchangeAuthorizationCode(params) {
-  const body = new URLSearchParams();
-  body.append("code", params.code);
-  body.append("redirect_uri", params.redirectUri);
-  body.append("grant_type", "authorization_code");
-  if (params.pkce) body.append("code_verifier", params.pkce.code_verifier);
-  const headers = {
-    Accept: "application/json",
-    "Content-Type": "application/x-www-form-urlencoded"
-  };
-  if (params.authentication === "basic") {
-    const token = Buffer.from(`${params.clientId}:${params.clientSecret}`).toString("base64");
-    headers.Authorization = `Basic ${token}`;
-  } else {
-    body.append("client_id", params.clientId);
-    body.append("client_secret", params.clientSecret);
-  }
-  return fetch(params.tokenUri, { method: "POST", headers, body });
+	const body = new URLSearchParams();
+	body.append("code", params.code);
+	body.append("redirect_uri", params.redirectUri);
+	body.append("grant_type", "authorization_code");
+	if (params.pkce) body.append("code_verifier", params.pkce.code_verifier);
+	const headers = {
+		Accept: "application/json",
+		"Content-Type": "application/x-www-form-urlencoded"
+	};
+	if (params.authentication === "basic") headers.Authorization = `Basic ${Buffer.from(`${params.clientId}:${params.clientSecret}`).toString("base64")}`;
+	else {
+		body.append("client_id", params.clientId);
+		body.append("client_secret", params.clientSecret);
+	}
+	return fetch(params.tokenUri, {
+		method: "POST",
+		headers,
+		body
+	});
 }
 async function refreshAccessToken(params) {
-  const body = new URLSearchParams();
-  body.append("grant_type", "refresh_token");
-  body.append("refresh_token", params.refreshToken);
-  const headers = {
-    Accept: "application/json",
-    "Content-Type": "application/x-www-form-urlencoded"
-  };
-  if (params.authentication === "basic") {
-    const token = Buffer.from(`${params.clientId}:${params.clientSecret}`).toString("base64");
-    headers.Authorization = `Basic ${token}`;
-  } else {
-    body.append("client_id", params.clientId);
-    body.append("client_secret", params.clientSecret);
-  }
-  return fetch(params.tokenUri, { method: "POST", headers, body });
+	const body = new URLSearchParams();
+	body.append("grant_type", "refresh_token");
+	body.append("refresh_token", params.refreshToken);
+	const headers = {
+		Accept: "application/json",
+		"Content-Type": "application/x-www-form-urlencoded"
+	};
+	if (params.authentication === "basic") headers.Authorization = `Basic ${Buffer.from(`${params.clientId}:${params.clientSecret}`).toString("base64")}`;
+	else {
+		body.append("client_id", params.clientId);
+		body.append("client_secret", params.clientSecret);
+	}
+	return fetch(params.tokenUri, {
+		method: "POST",
+		headers,
+		body
+	});
 }
 async function revokeToken(params) {
-  const body = new URLSearchParams();
-  body.append("token", params.token);
-  const headers = {
-    Accept: "application/json",
-    "Content-Type": "application/x-www-form-urlencoded"
-  };
-  if (params.authentication === "basic") {
-    const token = Buffer.from(`${params.clientId}:${params.clientSecret}`).toString("base64");
-    headers.Authorization = `Basic ${token}`;
-  } else {
-    body.append("client_id", params.clientId);
-    body.append("client_secret", params.clientSecret);
-  }
-  const response = await fetch(params.tokenRevokeUri, { method: "POST", headers, body });
-  if (!response.ok) {
-    const error = await response.json();
-    console.error("Refresh token error:", error);
-    throw new OAuth2Error(response.status, "invalid_request", "Failed to revoke token");
-  }
+	const body = new URLSearchParams();
+	body.append("token", params.token);
+	const headers = {
+		Accept: "application/json",
+		"Content-Type": "application/x-www-form-urlencoded"
+	};
+	if (params.authentication === "basic") headers.Authorization = `Basic ${Buffer.from(`${params.clientId}:${params.clientSecret}`).toString("base64")}`;
+	else {
+		body.append("client_id", params.clientId);
+		body.append("client_secret", params.clientSecret);
+	}
+	const response = await fetch(params.tokenRevokeUri, {
+		method: "POST",
+		headers,
+		body
+	});
+	if (!response.ok) {
+		const error = await response.json();
+		console.error("Refresh token error:", error);
+		throw new OAuth2Error(response.status, "invalid_request", "Failed to revoke token");
+	}
 }
 async function verifyIdToken(idToken, jwkSetUri) {
-  try {
-    const jwks = createRemoteJWKSet(new URL(jwkSetUri));
-    const { payload } = await jwtVerify(idToken, jwks);
-    return payload;
-  } catch {
-    console.error("Failed to verify id_token");
-    throw new OAuth2Error(400, "invalid_request", "Failed to verify id_token");
-  }
+	try {
+		const { payload } = await jwtVerify(idToken, createRemoteJWKSet(new URL(jwkSetUri)));
+		return payload;
+	} catch {
+		console.error("Failed to verify id_token");
+		throw new OAuth2Error(400, "invalid_request", "Failed to verify id_token");
+	}
 }
-export {
-  createAuthorizationUri,
-  exchangeAuthorizationCode,
-  refreshAccessToken,
-  revokeToken,
-  verifyIdToken
-};
+//#endregion
+export { createAuthorizationUri, exchangeAuthorizationCode, refreshAccessToken, revokeToken, verifyIdToken };
+
 //# sourceMappingURL=common.mjs.map

package/dist/oauth2/provider/common.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/oauth2/provider/common.ts"],"sourcesContent":["import { createRemoteJWKSet, jwtVerify } from 'jose';\nimport { OAuth2Error } from '../error';\nimport type { ExchangeCodeParams, PkceParameters, RefreshTokenParams } from '../types';\n\nexport function createAuthorizationUri(options: {\n  state: string;\n  scope: string[];\n  clientId: string;\n  redirectUri: string;\n  authorizationUri: string;\n  pkce?: Omit<PkceParameters, 'code_verifier'>;\n}) {\n  const url = new URL(options.authorizationUri);\n  url.searchParams.append('response_type', 'code');\n  url.searchParams.append('client_id', options.clientId);\n  url.searchParams.append('state', options.state);\n  url.searchParams.append('scope', options.scope.join(' '));\n  url.searchParams.append('redirect_uri', options.redirectUri);\n  if (options.pkce) {\n    url.searchParams.append('code_challenge_method', options.pkce.code_challenge_method);\n    url.searchParams.append('code_challenge', options.pkce.code_challenge);\n  }\n  return url;\n}\n\nexport async function exchangeAuthorizationCode(\n  params: ExchangeCodeParams & {\n    tokenUri: string;\n    authentication?: 'basic' | 'post';\n  }\n) {\n  const body = new URLSearchParams();\n  body.append('code', params.code);\n  body.append('redirect_uri', params.redirectUri);\n  body.append('grant_type', 'authorization_code');\n  if (params.pkce) body.append('code_verifier', params.pkce.code_verifier);\n\n  const headers: Record<string, string> = {\n    Accept: 'application/json',\n    'Content-Type': 'application/x-www-form-urlencoded',\n  };\n  if (params.authentication === 'basic') {\n    const token = Buffer.from(`${params.clientId}:${params.clientSecret}`).toString('base64');\n    headers.Authorization = `Basic ${token}`;\n  } else {\n    body.append('client_id', params.clientId);\n    body.append('client_secret', params.clientSecret);\n  }\n\n  return fetch(params.tokenUri, { method: 'POST', headers, body });\n}\n\nexport async function refreshAccessToken(\n  params: RefreshTokenParams & {\n    tokenUri: string;\n    authentication?: 'basic' | 'post';\n  }\n) {\n  const body = new URLSearchParams();\n  body.append('grant_type', 'refresh_token');\n  body.append('refresh_token', params.refreshToken);\n\n  const headers: Record<string, string> = {\n    Accept: 'application/json',\n    'Content-Type': 'application/x-www-form-urlencoded',\n  };\n\n  if (params.authentication === 'basic') {\n    const token = Buffer.from(`${params.clientId}:${params.clientSecret}`).toString('base64');\n    headers.Authorization = `Basic ${token}`;\n  } else {\n    body.append('client_id', params.clientId);\n    body.append('client_secret', params.clientSecret);\n  }\n\n  return fetch(params.tokenUri, { method: 'POST', headers, body });\n}\n\ninterface RevokeTokenParams {\n  token: string;\n  clientId: string;\n  clientSecret: string;\n  tokenRevokeUri: string;\n  authentication?: 'basic' | 'post';\n}\n\nexport async function revokeToken(params: RevokeTokenParams) {\n  const body = new URLSearchParams();\n  body.append('token', params.token);\n  const headers: Record<string, string> = {\n    Accept: 'application/json',\n    'Content-Type': 'application/x-www-form-urlencoded',\n  };\n\n  if (params.authentication === 'basic') {\n    const token = Buffer.from(`${params.clientId}:${params.clientSecret}`).toString('base64');\n    headers.Authorization = `Basic ${token}`;\n  } else {\n    body.append('client_id', params.clientId);\n    body.append('client_secret', params.clientSecret);\n  }\n\n  const response = await fetch(params.tokenRevokeUri, { method: 'POST', headers, body });\n  if (!response.ok) {\n    const error = await response.json();\n    console.error('Refresh token error:', error);\n    throw new OAuth2Error(response.status, 'invalid_request', 'Failed to revoke token');\n  }\n}\n\nexport async function verifyIdToken<T>(idToken: string, jwkSetUri: string) {\n  try {\n    const jwks = createRemoteJWKSet(new URL(jwkSetUri));\n    const { payload } = await jwtVerify(idToken, jwks);\n    return payload as T;\n  } catch {\n    console.error('Failed to verify id_token');\n    throw new OAuth2Error(400, 'invalid_request', 'Failed to verify id_token');\n  }\n}\n"],"mappings":";AAAA,SAAS,oBAAoB,iBAAiB;AAC9C,SAAS,mBAAmB;AAGrB,SAAS,uBAAuB,SAOpC;AACD,QAAM,MAAM,IAAI,IAAI,QAAQ,gBAAgB;AAC5C,MAAI,aAAa,OAAO,iBAAiB,MAAM;AAC/C,MAAI,aAAa,OAAO,aAAa,QAAQ,QAAQ;AACrD,MAAI,aAAa,OAAO,SAAS,QAAQ,KAAK;AAC9C,MAAI,aAAa,OAAO,SAAS,QAAQ,MAAM,KAAK,GAAG,CAAC;AACxD,MAAI,aAAa,OAAO,gBAAgB,QAAQ,WAAW;AAC3D,MAAI,QAAQ,MAAM;AAChB,QAAI,aAAa,OAAO,yBAAyB,QAAQ,KAAK,qBAAqB;AACnF,QAAI,aAAa,OAAO,kBAAkB,QAAQ,KAAK,cAAc;AAAA,EACvE;AACA,SAAO;AACT;AAEA,eAAsB,0BACpB,QAIA;AACA,QAAM,OAAO,IAAI,gBAAgB;AACjC,OAAK,OAAO,QAAQ,OAAO,IAAI;AAC/B,OAAK,OAAO,gBAAgB,OAAO,WAAW;AAC9C,OAAK,OAAO,cAAc,oBAAoB;AAC9C,MAAI,OAAO,KAAM,MAAK,OAAO,iBAAiB,OAAO,KAAK,aAAa;AAEvE,QAAM,UAAkC;AAAA,IACtC,QAAQ;AAAA,IACR,gBAAgB;AAAA,EAClB;AACA,MAAI,OAAO,mBAAmB,SAAS;AACrC,UAAM,QAAQ,OAAO,KAAK,GAAG,OAAO,QAAQ,IAAI,OAAO,YAAY,EAAE,EAAE,SAAS,QAAQ;AACxF,YAAQ,gBAAgB,SAAS,KAAK;AAAA,EACxC,OAAO;AACL,SAAK,OAAO,aAAa,OAAO,QAAQ;AACxC,SAAK,OAAO,iBAAiB,OAAO,YAAY;AAAA,EAClD;AAEA,SAAO,MAAM,OAAO,UAAU,EAAE,QAAQ,QAAQ,SAAS,KAAK,CAAC;AACjE;AAEA,eAAsB,mBACpB,QAIA;AACA,QAAM,OAAO,IAAI,gBAAgB;AACjC,OAAK,OAAO,cAAc,eAAe;AACzC,OAAK,OAAO,iBAAiB,OAAO,YAAY;AAEhD,QAAM,UAAkC;AAAA,IACtC,QAAQ;AAAA,IACR,gBAAgB;AAAA,EAClB;AAEA,MAAI,OAAO,mBAAmB,SAAS;AACrC,UAAM,QAAQ,OAAO,KAAK,GAAG,OAAO,QAAQ,IAAI,OAAO,YAAY,EAAE,EAAE,SAAS,QAAQ;AACxF,YAAQ,gBAAgB,SAAS,KAAK;AAAA,EACxC,OAAO;AACL,SAAK,OAAO,aAAa,OAAO,QAAQ;AACxC,SAAK,OAAO,iBAAiB,OAAO,YAAY;AAAA,EAClD;AAEA,SAAO,MAAM,OAAO,UAAU,EAAE,QAAQ,QAAQ,SAAS,KAAK,CAAC;AACjE;AAUA,eAAsB,YAAY,QAA2B;AAC3D,QAAM,OAAO,IAAI,gBAAgB;AACjC,OAAK,OAAO,SAAS,OAAO,KAAK;AACjC,QAAM,UAAkC;AAAA,IACtC,QAAQ;AAAA,IACR,gBAAgB;AAAA,EAClB;AAEA,MAAI,OAAO,mBAAmB,SAAS;AACrC,UAAM,QAAQ,OAAO,KAAK,GAAG,OAAO,QAAQ,IAAI,OAAO,YAAY,EAAE,EAAE,SAAS,QAAQ;AACxF,YAAQ,gBAAgB,SAAS,KAAK;AAAA,EACxC,OAAO;AACL,SAAK,OAAO,aAAa,OAAO,QAAQ;AACxC,SAAK,OAAO,iBAAiB,OAAO,YAAY;AAAA,EAClD;AAEA,QAAM,WAAW,MAAM,MAAM,OAAO,gBAAgB,EAAE,QAAQ,QAAQ,SAAS,KAAK,CAAC;AACrF,MAAI,CAAC,SAAS,IAAI;AAChB,UAAM,QAAQ,MAAM,SAAS,KAAK;AAClC,YAAQ,MAAM,wBAAwB,KAAK;AAC3C,UAAM,IAAI,YAAY,SAAS,QAAQ,mBAAmB,wBAAwB;AAAA,EACpF;AACF;AAEA,eAAsB,cAAiB,SAAiB,WAAmB;AACzE,MAAI;AACF,UAAM,OAAO,mBAAmB,IAAI,IAAI,SAAS,CAAC;AAClD,UAAM,EAAE,QAAQ,IAAI,MAAM,UAAU,SAAS,IAAI;AACjD,WAAO;AAAA,EACT,QAAQ;AACN,YAAQ,MAAM,2BAA2B;AACzC,UAAM,IAAI,YAAY,KAAK,mBAAmB,2BAA2B;AAAA,EAC3E;AACF;","names":[]}
+{"version":3,"file":"common.mjs","names":[],"sources":["../../../src/oauth2/provider/common.ts"],"sourcesContent":["import { createRemoteJWKSet, jwtVerify } from 'jose';\nimport { OAuth2Error } from '../error';\nimport type { ExchangeCodeParams, PkceParameters, RefreshTokenParams } from '../types';\n\nexport function createAuthorizationUri(options: {\n  state: string;\n  scope: string[];\n  clientId: string;\n  redirectUri: string;\n  authorizationUri: string;\n  pkce?: Omit<PkceParameters, 'code_verifier'>;\n}) {\n  const url = new URL(options.authorizationUri);\n  url.searchParams.append('response_type', 'code');\n  url.searchParams.append('client_id', options.clientId);\n  url.searchParams.append('state', options.state);\n  url.searchParams.append('scope', options.scope.join(' '));\n  url.searchParams.append('redirect_uri', options.redirectUri);\n  if (options.pkce) {\n    url.searchParams.append('code_challenge_method', options.pkce.code_challenge_method);\n    url.searchParams.append('code_challenge', options.pkce.code_challenge);\n  }\n  return url;\n}\n\nexport async function exchangeAuthorizationCode(\n  params: ExchangeCodeParams & {\n    tokenUri: string;\n    authentication?: 'basic' | 'post';\n  }\n) {\n  const body = new URLSearchParams();\n  body.append('code', params.code);\n  body.append('redirect_uri', params.redirectUri);\n  body.append('grant_type', 'authorization_code');\n  if (params.pkce) body.append('code_verifier', params.pkce.code_verifier);\n\n  const headers: Record<string, string> = {\n    Accept: 'application/json',\n    'Content-Type': 'application/x-www-form-urlencoded',\n  };\n  if (params.authentication === 'basic') {\n    const token = Buffer.from(`${params.clientId}:${params.clientSecret}`).toString('base64');\n    headers.Authorization = `Basic ${token}`;\n  } else {\n    body.append('client_id', params.clientId);\n    body.append('client_secret', params.clientSecret);\n  }\n\n  return fetch(params.tokenUri, { method: 'POST', headers, body });\n}\n\nexport async function refreshAccessToken(\n  params: RefreshTokenParams & {\n    tokenUri: string;\n    authentication?: 'basic' | 'post';\n  }\n) {\n  const body = new URLSearchParams();\n  body.append('grant_type', 'refresh_token');\n  body.append('refresh_token', params.refreshToken);\n\n  const headers: Record<string, string> = {\n    Accept: 'application/json',\n    'Content-Type': 'application/x-www-form-urlencoded',\n  };\n\n  if (params.authentication === 'basic') {\n    const token = Buffer.from(`${params.clientId}:${params.clientSecret}`).toString('base64');\n    headers.Authorization = `Basic ${token}`;\n  } else {\n    body.append('client_id', params.clientId);\n    body.append('client_secret', params.clientSecret);\n  }\n\n  return fetch(params.tokenUri, { method: 'POST', headers, body });\n}\n\ninterface RevokeTokenParams {\n  token: string;\n  clientId: string;\n  clientSecret: string;\n  tokenRevokeUri: string;\n  authentication?: 'basic' | 'post';\n}\n\nexport async function revokeToken(params: RevokeTokenParams) {\n  const body = new URLSearchParams();\n  body.append('token', params.token);\n  const headers: Record<string, string> = {\n    Accept: 'application/json',\n    'Content-Type': 'application/x-www-form-urlencoded',\n  };\n\n  if (params.authentication === 'basic') {\n    const token = Buffer.from(`${params.clientId}:${params.clientSecret}`).toString('base64');\n    headers.Authorization = `Basic ${token}`;\n  } else {\n    body.append('client_id', params.clientId);\n    body.append('client_secret', params.clientSecret);\n  }\n\n  const response = await fetch(params.tokenRevokeUri, { method: 'POST', headers, body });\n  if (!response.ok) {\n    const error = await response.json();\n    console.error('Refresh token error:', error);\n    throw new OAuth2Error(response.status, 'invalid_request', 'Failed to revoke token');\n  }\n}\n\nexport async function verifyIdToken<T>(idToken: string, jwkSetUri: string) {\n  try {\n    const jwks = createRemoteJWKSet(new URL(jwkSetUri));\n    const { payload } = await jwtVerify(idToken, jwks);\n    return payload as T;\n  } catch {\n    console.error('Failed to verify id_token');\n    throw new OAuth2Error(400, 'invalid_request', 'Failed to verify id_token');\n  }\n}\n"],"mappings":";;;AAIA,SAAgB,uBAAuB,SAOpC;CACD,MAAM,MAAM,IAAI,IAAI,QAAQ,gBAAgB;CAC5C,IAAI,aAAa,OAAO,iBAAiB,MAAM;CAC/C,IAAI,aAAa,OAAO,aAAa,QAAQ,QAAQ;CACrD,IAAI,aAAa,OAAO,SAAS,QAAQ,KAAK;CAC9C,IAAI,aAAa,OAAO,SAAS,QAAQ,MAAM,KAAK,GAAG,CAAC;CACxD,IAAI,aAAa,OAAO,gBAAgB,QAAQ,WAAW;CAC3D,IAAI,QAAQ,MAAM;EAChB,IAAI,aAAa,OAAO,yBAAyB,QAAQ,KAAK,qBAAqB;EACnF,IAAI,aAAa,OAAO,kBAAkB,QAAQ,KAAK,cAAc;CACvE;CACA,OAAO;AACT;AAEA,eAAsB,0BACpB,QAIA;CACA,MAAM,OAAO,IAAI,gBAAgB;CACjC,KAAK,OAAO,QAAQ,OAAO,IAAI;CAC/B,KAAK,OAAO,gBAAgB,OAAO,WAAW;CAC9C,KAAK,OAAO,cAAc,oBAAoB;CAC9C,IAAI,OAAO,MAAM,KAAK,OAAO,iBAAiB,OAAO,KAAK,aAAa;CAEvE,MAAM,UAAkC;EACtC,QAAQ;EACR,gBAAgB;CAClB;CACA,IAAI,OAAO,mBAAmB,SAE5B,QAAQ,gBAAgB,SADV,OAAO,KAAK,GAAG,OAAO,SAAS,GAAG,OAAO,cAAc,CAAC,CAAC,SAAS,QAC3C;MAChC;EACL,KAAK,OAAO,aAAa,OAAO,QAAQ;EACxC,KAAK,OAAO,iBAAiB,OAAO,YAAY;CAClD;CAEA,OAAO,MAAM,OAAO,UAAU;EAAE,QAAQ;EAAQ;EAAS;CAAK,CAAC;AACjE;AAEA,eAAsB,mBACpB,QAIA;CACA,MAAM,OAAO,IAAI,gBAAgB;CACjC,KAAK,OAAO,cAAc,eAAe;CACzC,KAAK,OAAO,iBAAiB,OAAO,YAAY;CAEhD,MAAM,UAAkC;EACtC,QAAQ;EACR,gBAAgB;CAClB;CAEA,IAAI,OAAO,mBAAmB,SAE5B,QAAQ,gBAAgB,SADV,OAAO,KAAK,GAAG,OAAO,SAAS,GAAG,OAAO,cAAc,CAAC,CAAC,SAAS,QAC3C;MAChC;EACL,KAAK,OAAO,aAAa,OAAO,QAAQ;EACxC,KAAK,OAAO,iBAAiB,OAAO,YAAY;CAClD;CAEA,OAAO,MAAM,OAAO,UAAU;EAAE,QAAQ;EAAQ;EAAS;CAAK,CAAC;AACjE;AAUA,eAAsB,YAAY,QAA2B;CAC3D,MAAM,OAAO,IAAI,gBAAgB;CACjC,KAAK,OAAO,SAAS,OAAO,KAAK;CACjC,MAAM,UAAkC;EACtC,QAAQ;EACR,gBAAgB;CAClB;CAEA,IAAI,OAAO,mBAAmB,SAE5B,QAAQ,gBAAgB,SADV,OAAO,KAAK,GAAG,OAAO,SAAS,GAAG,OAAO,cAAc,CAAC,CAAC,SAAS,QAC3C;MAChC;EACL,KAAK,OAAO,aAAa,OAAO,QAAQ;EACxC,KAAK,OAAO,iBAAiB,OAAO,YAAY;CAClD;CAEA,MAAM,WAAW,MAAM,MAAM,OAAO,gBAAgB;EAAE,QAAQ;EAAQ;EAAS;CAAK,CAAC;CACrF,IAAI,CAAC,SAAS,IAAI;EAChB,MAAM,QAAQ,MAAM,SAAS,KAAK;EAClC,QAAQ,MAAM,wBAAwB,KAAK;EAC3C,MAAM,IAAI,YAAY,SAAS,QAAQ,mBAAmB,wBAAwB;CACpF;AACF;AAEA,eAAsB,cAAiB,SAAiB,WAAmB;CACzE,IAAI;EAEF,MAAM,EAAE,YAAY,MAAM,UAAU,SADvB,mBAAmB,IAAI,IAAI,SAAS,CACD,CAAC;EACjD,OAAO;CACT,QAAQ;EACN,QAAQ,MAAM,2BAA2B;EACzC,MAAM,IAAI,YAAY,KAAK,mBAAmB,2BAA2B;CAC3E;AACF"}

package/dist/oauth2/provider/facebook.cjs

@@ -1,112 +1,96 @@
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-
-// src/oauth2/provider/facebook.ts
-var facebook_exports = {};
-__export(facebook_exports, {
-  createFacebookProvider: () => createFacebookProvider,
-  facebook: () => facebook
-});
-module.exports = __toCommonJS(facebook_exports);
-var import_utils = require("@shware/utils");
-var import_error = require("../error.cjs");
-var import_common = require("./common.cjs");
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const require_oauth2_error = require("../error.cjs");
+const require_oauth2_provider_common = require("./common.cjs");
+let _shware_utils = require("@shware/utils");
+//#region src/oauth2/provider/facebook.ts
+/**
+* ref: https://developers.facebook.com/docs/facebook-login/guides/advanced/manual-flow/
+* ref: https://developers.facebook.com/tools/explorer
+* */
 function createFacebookProvider() {
-  return {
-    authorizationUri: "https://www.facebook.com/v21.0/dialog/oauth",
-    tokenUri: "https://graph.facebook.com/v19.0/oauth/access_token",
-    userInfoUri: "https://graph.facebook.com/me",
-    jwkSetUri: "https://limited.facebook.com/.well-known/oauth/openid/jwks/",
-    userNameAttribute: "id",
-    defaultScope: ["profile", "email"],
-    createAuthorizationUri({ pkce: _, ...params }) {
-      return (0, import_common.createAuthorizationUri)({
-        ...params,
-        scope: params.scope ?? this.defaultScope,
-        authorizationUri: this.authorizationUri
-      });
-    },
-    async exchangeAuthorizationCode({ pkce: _, ...params }) {
-      const response = await (0, import_common.exchangeAuthorizationCode)({ ...params, tokenUri: this.tokenUri });
-      if (!response.ok) {
-        const { error } = await response.json();
-        throw new import_error.OAuth2Error(response.status, "invalid_request", error.message);
-      }
-      return await response.json();
-    },
-    async getUserInfo({ id_token, access_token }) {
-      (0, import_utils.invariant)(this.jwkSetUri, "jwkSetUri is required");
-      if (id_token) {
-        const data2 = await (0, import_common.verifyIdToken)(id_token, this.jwkSetUri);
-        return {
-          data: data2,
-          claims: {
-            sub: data2.sub,
-            name: data2.name,
-            picture: data2.picture,
-            email: data2.email,
-            email_verified: true
-          }
-        };
-      }
-      (0, import_utils.invariant)(access_token, "access_token is required");
-      (0, import_utils.invariant)(this.userInfoUri, "userInfoUri is required");
-      const url = new URL(this.userInfoUri);
-      const fields = ["id", "name", "email", "picture.width(320).height(320)"];
-      url.searchParams.append("access_token", access_token);
-      url.searchParams.append("fields", fields.join(","));
-      const headers = { Accept: "application/json" };
-      const response = await fetch(url.href, { headers });
-      if (!response.ok) {
-        throw new import_error.OAuth2Error(response.status, "invalid_request", "Failed to fetch user info");
-      }
-      const data = await response.json();
-      return {
-        data,
-        claims: {
-          sub: data.id,
-          name: data.name,
-          email: data.email,
-          picture: data.picture.data.url,
-          email_verified: data.email_verified
-        }
-      };
-    },
-    async loginOAuth2Native({ credentials }) {
-      if (credentials.id_token || credentials.access_token) {
-        const userInfo = await this.getUserInfo(credentials);
-        const token = {
-          token_type: "bearer",
-          access_token: credentials.access_token ?? "",
-          id_token: credentials.id_token
-        };
-        return { token, userInfo };
-      } else {
-        throw new import_error.OAuth2Error(400, "invalid_request", "id_token or access_token is required");
-      }
-    }
-  };
+	return {
+		authorizationUri: "https://www.facebook.com/v21.0/dialog/oauth",
+		tokenUri: "https://graph.facebook.com/v19.0/oauth/access_token",
+		userInfoUri: "https://graph.facebook.com/me",
+		jwkSetUri: "https://limited.facebook.com/.well-known/oauth/openid/jwks/",
+		userNameAttribute: "id",
+		defaultScope: ["profile", "email"],
+		createAuthorizationUri({ pkce: _, ...params }) {
+			return require_oauth2_provider_common.createAuthorizationUri({
+				...params,
+				scope: params.scope ?? this.defaultScope,
+				authorizationUri: this.authorizationUri
+			});
+		},
+		async exchangeAuthorizationCode({ pkce: _, ...params }) {
+			const response = await require_oauth2_provider_common.exchangeAuthorizationCode({
+				...params,
+				tokenUri: this.tokenUri
+			});
+			if (!response.ok) {
+				const { error } = await response.json();
+				throw new require_oauth2_error.OAuth2Error(response.status, "invalid_request", error.message);
+			}
+			return await response.json();
+		},
+		async getUserInfo({ id_token, access_token }) {
+			(0, _shware_utils.invariant)(this.jwkSetUri, "jwkSetUri is required");
+			if (id_token) {
+				const data = await require_oauth2_provider_common.verifyIdToken(id_token, this.jwkSetUri);
+				return {
+					data,
+					claims: {
+						sub: data.sub,
+						name: data.name,
+						picture: data.picture,
+						email: data.email,
+						email_verified: true
+					}
+				};
+			}
+			(0, _shware_utils.invariant)(access_token, "access_token is required");
+			(0, _shware_utils.invariant)(this.userInfoUri, "userInfoUri is required");
+			const url = new URL(this.userInfoUri);
+			const fields = [
+				"id",
+				"name",
+				"email",
+				"picture.width(320).height(320)"
+			];
+			url.searchParams.append("access_token", access_token);
+			url.searchParams.append("fields", fields.join(","));
+			const response = await fetch(url.href, { headers: { Accept: "application/json" } });
+			if (!response.ok) throw new require_oauth2_error.OAuth2Error(response.status, "invalid_request", "Failed to fetch user info");
+			const data = await response.json();
+			return {
+				data,
+				claims: {
+					sub: data.id,
+					name: data.name,
+					email: data.email,
+					picture: data.picture.data.url,
+					email_verified: data.email_verified
+				}
+			};
+		},
+		async loginOAuth2Native({ credentials }) {
+			if (credentials.id_token || credentials.access_token) {
+				const userInfo = await this.getUserInfo(credentials);
+				return {
+					token: {
+						token_type: "bearer",
+						access_token: credentials.access_token ?? "",
+						id_token: credentials.id_token
+					},
+					userInfo
+				};
+			} else throw new require_oauth2_error.OAuth2Error(400, "invalid_request", "id_token or access_token is required");
+		}
+	};
 }
-var facebook = createFacebookProvider();
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  createFacebookProvider,
-  facebook
-});
+const facebook = createFacebookProvider();
+//#endregion
+exports.createFacebookProvider = createFacebookProvider;
+exports.facebook = facebook;
+
 //# sourceMappingURL=facebook.cjs.map

package/dist/oauth2/provider/facebook.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/oauth2/provider/facebook.ts"],"sourcesContent":["import { invariant } from '@shware/utils';\nimport { OAuth2Error } from '../error';\nimport type { LoginOAuth2NativeParams, OAuth2Token, Provider } from '../types';\nimport { createAuthorizationUri, exchangeAuthorizationCode, verifyIdToken } from './common';\n\n/**\n * ref: https://developers.facebook.com/docs/facebook-login/guides/advanced/manual-flow/\n * ref: https://developers.facebook.com/tools/explorer\n * */\nexport function createFacebookProvider(): Provider {\n  return {\n    authorizationUri: 'https://www.facebook.com/v21.0/dialog/oauth',\n    tokenUri: 'https://graph.facebook.com/v19.0/oauth/access_token',\n    userInfoUri: 'https://graph.facebook.com/me',\n    jwkSetUri: 'https://limited.facebook.com/.well-known/oauth/openid/jwks/',\n    userNameAttribute: 'id',\n    defaultScope: ['profile', 'email'],\n    createAuthorizationUri({ pkce: _, ...params }) {\n      return createAuthorizationUri({\n        ...params,\n        scope: params.scope ?? this.defaultScope,\n        authorizationUri: this.authorizationUri,\n      });\n    },\n    async exchangeAuthorizationCode({ pkce: _, ...params }) {\n      const response = await exchangeAuthorizationCode({ ...params, tokenUri: this.tokenUri });\n      if (!response.ok) {\n        const { error } = (await response.json()) as FacebookErrorResponse;\n        throw new OAuth2Error(response.status, 'invalid_request', error.message);\n      }\n      return (await response.json()) as FacebookToken;\n    },\n    async getUserInfo({ id_token, access_token }) {\n      invariant(this.jwkSetUri, 'jwkSetUri is required');\n      if (id_token) {\n        const data = await verifyIdToken<FacebookDecodedIdToken>(id_token, this.jwkSetUri);\n        return {\n          data,\n          claims: {\n            sub: data.sub,\n            name: data.name,\n            picture: data.picture,\n            email: data.email,\n            email_verified: true,\n          },\n        };\n      }\n      invariant(access_token, 'access_token is required');\n      invariant(this.userInfoUri, 'userInfoUri is required');\n\n      const url = new URL(this.userInfoUri);\n      const fields = ['id', 'name', 'email', 'picture.width(320).height(320)'];\n      url.searchParams.append('access_token', access_token);\n      url.searchParams.append('fields', fields.join(','));\n      const headers = { Accept: 'application/json' };\n      const response = await fetch(url.href, { headers });\n      if (!response.ok) {\n        throw new OAuth2Error(response.status, 'invalid_request', 'Failed to fetch user info');\n      }\n      const data = (await response.json()) as FacebookUserInfo;\n      return {\n        data,\n        claims: {\n          sub: data.id,\n          name: data.name,\n          email: data.email,\n          picture: data.picture.data.url,\n          email_verified: data.email_verified,\n        },\n      };\n    },\n    async loginOAuth2Native({ credentials }: LoginOAuth2NativeParams) {\n      if (credentials.id_token || credentials.access_token) {\n        const userInfo = await this.getUserInfo(credentials as unknown as OAuth2Token);\n        const token: OAuth2Token = {\n          token_type: 'bearer',\n          access_token: credentials.access_token ?? '',\n          id_token: credentials.id_token,\n        };\n        return { token, userInfo };\n      } else {\n        throw new OAuth2Error(400, 'invalid_request', 'id_token or access_token is required');\n      }\n    },\n  };\n}\n\nexport const facebook = createFacebookProvider();\n\nexport interface FacebookDecodedIdToken {\n  sub: string;\n  name: string;\n  email: string;\n  picture: string;\n  nonce?: string;\n}\n\nexport interface FacebookUserInfo {\n  id: string;\n  name: string;\n  email: string;\n  email_verified: boolean;\n  picture: {\n    data: {\n      url: string;\n      width: number;\n      height: number;\n      is_silhouette: boolean;\n    };\n  };\n}\n\nexport interface FacebookToken extends OAuth2Token {\n  access_token: string;\n  token_type: 'bearer';\n  expires_in: number;\n  id_token?: string;\n}\n\nexport type FacebookAppCredential =\n  | { state: string; id_token: string } // platform=ios and tracking=limited\n  | { state: string; access_token: string }; // tracking=enabled\n\ninterface FacebookErrorResponse {\n  error: {\n    message: string;\n    type: 'OAuthException';\n    code: number;\n    error_subcode: number;\n    fbtrace_id: string;\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,mBAA0B;AAC1B,mBAA4B;AAE5B,oBAAiF;AAM1E,SAAS,yBAAmC;AACjD,SAAO;AAAA,IACL,kBAAkB;AAAA,IAClB,UAAU;AAAA,IACV,aAAa;AAAA,IACb,WAAW;AAAA,IACX,mBAAmB;AAAA,IACnB,cAAc,CAAC,WAAW,OAAO;AAAA,IACjC,uBAAuB,EAAE,MAAM,GAAG,GAAG,OAAO,GAAG;AAC7C,iBAAO,sCAAuB;AAAA,QAC5B,GAAG;AAAA,QACH,OAAO,OAAO,SAAS,KAAK;AAAA,QAC5B,kBAAkB,KAAK;AAAA,MACzB,CAAC;AAAA,IACH;AAAA,IACA,MAAM,0BAA0B,EAAE,MAAM,GAAG,GAAG,OAAO,GAAG;AACtD,YAAM,WAAW,UAAM,yCAA0B,EAAE,GAAG,QAAQ,UAAU,KAAK,SAAS,CAAC;AACvF,UAAI,CAAC,SAAS,IAAI;AAChB,cAAM,EAAE,MAAM,IAAK,MAAM,SAAS,KAAK;AACvC,cAAM,IAAI,yBAAY,SAAS,QAAQ,mBAAmB,MAAM,OAAO;AAAA,MACzE;AACA,aAAQ,MAAM,SAAS,KAAK;AAAA,IAC9B;AAAA,IACA,MAAM,YAAY,EAAE,UAAU,aAAa,GAAG;AAC5C,kCAAU,KAAK,WAAW,uBAAuB;AACjD,UAAI,UAAU;AACZ,cAAMA,QAAO,UAAM,6BAAsC,UAAU,KAAK,SAAS;AACjF,eAAO;AAAA,UACL,MAAAA;AAAA,UACA,QAAQ;AAAA,YACN,KAAKA,MAAK;AAAA,YACV,MAAMA,MAAK;AAAA,YACX,SAASA,MAAK;AAAA,YACd,OAAOA,MAAK;AAAA,YACZ,gBAAgB;AAAA,UAClB;AAAA,QACF;AAAA,MACF;AACA,kCAAU,cAAc,0BAA0B;AAClD,kCAAU,KAAK,aAAa,yBAAyB;AAErD,YAAM,MAAM,IAAI,IAAI,KAAK,WAAW;AACpC,YAAM,SAAS,CAAC,MAAM,QAAQ,SAAS,gCAAgC;AACvE,UAAI,aAAa,OAAO,gBAAgB,YAAY;AACpD,UAAI,aAAa,OAAO,UAAU,OAAO,KAAK,GAAG,CAAC;AAClD,YAAM,UAAU,EAAE,QAAQ,mBAAmB;AAC7C,YAAM,WAAW,MAAM,MAAM,IAAI,MAAM,EAAE,QAAQ,CAAC;AAClD,UAAI,CAAC,SAAS,IAAI;AAChB,cAAM,IAAI,yBAAY,SAAS,QAAQ,mBAAmB,2BAA2B;AAAA,MACvF;AACA,YAAM,OAAQ,MAAM,SAAS,KAAK;AAClC,aAAO;AAAA,QACL;AAAA,QACA,QAAQ;AAAA,UACN,KAAK,KAAK;AAAA,UACV,MAAM,KAAK;AAAA,UACX,OAAO,KAAK;AAAA,UACZ,SAAS,KAAK,QAAQ,KAAK;AAAA,UAC3B,gBAAgB,KAAK;AAAA,QACvB;AAAA,MACF;AAAA,IACF;AAAA,IACA,MAAM,kBAAkB,EAAE,YAAY,GAA4B;AAChE,UAAI,YAAY,YAAY,YAAY,cAAc;AACpD,cAAM,WAAW,MAAM,KAAK,YAAY,WAAqC;AAC7E,cAAM,QAAqB;AAAA,UACzB,YAAY;AAAA,UACZ,cAAc,YAAY,gBAAgB;AAAA,UAC1C,UAAU,YAAY;AAAA,QACxB;AACA,eAAO,EAAE,OAAO,SAAS;AAAA,MAC3B,OAAO;AACL,cAAM,IAAI,yBAAY,KAAK,mBAAmB,sCAAsC;AAAA,MACtF;AAAA,IACF;AAAA,EACF;AACF;AAEO,IAAM,WAAW,uBAAuB;","names":["data"]}
+{"version":3,"file":"facebook.cjs","names":["createAuthorizationUri","exchangeAuthorizationCode","OAuth2Error","verifyIdToken"],"sources":["../../../src/oauth2/provider/facebook.ts"],"sourcesContent":["import { invariant } from '@shware/utils';\nimport { OAuth2Error } from '../error';\nimport type { LoginOAuth2NativeParams, OAuth2Token, Provider } from '../types';\nimport { createAuthorizationUri, exchangeAuthorizationCode, verifyIdToken } from './common';\n\n/**\n * ref: https://developers.facebook.com/docs/facebook-login/guides/advanced/manual-flow/\n * ref: https://developers.facebook.com/tools/explorer\n * */\nexport function createFacebookProvider(): Provider {\n  return {\n    authorizationUri: 'https://www.facebook.com/v21.0/dialog/oauth',\n    tokenUri: 'https://graph.facebook.com/v19.0/oauth/access_token',\n    userInfoUri: 'https://graph.facebook.com/me',\n    jwkSetUri: 'https://limited.facebook.com/.well-known/oauth/openid/jwks/',\n    userNameAttribute: 'id',\n    defaultScope: ['profile', 'email'],\n    createAuthorizationUri({ pkce: _, ...params }) {\n      return createAuthorizationUri({\n        ...params,\n        scope: params.scope ?? this.defaultScope,\n        authorizationUri: this.authorizationUri,\n      });\n    },\n    async exchangeAuthorizationCode({ pkce: _, ...params }) {\n      const response = await exchangeAuthorizationCode({ ...params, tokenUri: this.tokenUri });\n      if (!response.ok) {\n        const { error } = (await response.json()) as FacebookErrorResponse;\n        throw new OAuth2Error(response.status, 'invalid_request', error.message);\n      }\n      return (await response.json()) as FacebookToken;\n    },\n    async getUserInfo({ id_token, access_token }) {\n      invariant(this.jwkSetUri, 'jwkSetUri is required');\n      if (id_token) {\n        const data = await verifyIdToken<FacebookDecodedIdToken>(id_token, this.jwkSetUri);\n        return {\n          data,\n          claims: {\n            sub: data.sub,\n            name: data.name,\n            picture: data.picture,\n            email: data.email,\n            email_verified: true,\n          },\n        };\n      }\n      invariant(access_token, 'access_token is required');\n      invariant(this.userInfoUri, 'userInfoUri is required');\n\n      const url = new URL(this.userInfoUri);\n      const fields = ['id', 'name', 'email', 'picture.width(320).height(320)'];\n      url.searchParams.append('access_token', access_token);\n      url.searchParams.append('fields', fields.join(','));\n      const headers = { Accept: 'application/json' };\n      const response = await fetch(url.href, { headers });\n      if (!response.ok) {\n        throw new OAuth2Error(response.status, 'invalid_request', 'Failed to fetch user info');\n      }\n      const data = (await response.json()) as FacebookUserInfo;\n      return {\n        data,\n        claims: {\n          sub: data.id,\n          name: data.name,\n          email: data.email,\n          picture: data.picture.data.url,\n          email_verified: data.email_verified,\n        },\n      };\n    },\n    async loginOAuth2Native({ credentials }: LoginOAuth2NativeParams) {\n      if (credentials.id_token || credentials.access_token) {\n        const userInfo = await this.getUserInfo(credentials as unknown as OAuth2Token);\n        const token: OAuth2Token = {\n          token_type: 'bearer',\n          access_token: credentials.access_token ?? '',\n          id_token: credentials.id_token,\n        };\n        return { token, userInfo };\n      } else {\n        throw new OAuth2Error(400, 'invalid_request', 'id_token or access_token is required');\n      }\n    },\n  };\n}\n\nexport const facebook = createFacebookProvider();\n\nexport interface FacebookDecodedIdToken {\n  sub: string;\n  name: string;\n  email: string;\n  picture: string;\n  nonce?: string;\n}\n\nexport interface FacebookUserInfo {\n  id: string;\n  name: string;\n  email: string;\n  email_verified: boolean;\n  picture: {\n    data: {\n      url: string;\n      width: number;\n      height: number;\n      is_silhouette: boolean;\n    };\n  };\n}\n\nexport interface FacebookToken extends OAuth2Token {\n  access_token: string;\n  token_type: 'bearer';\n  expires_in: number;\n  id_token?: string;\n}\n\nexport type FacebookAppCredential =\n  | { state: string; id_token: string } // platform=ios and tracking=limited\n  | { state: string; access_token: string }; // tracking=enabled\n\ninterface FacebookErrorResponse {\n  error: {\n    message: string;\n    type: 'OAuthException';\n    code: number;\n    error_subcode: number;\n    fbtrace_id: string;\n  };\n}\n"],"mappings":";;;;;;;;;AASA,SAAgB,yBAAmC;CACjD,OAAO;EACL,kBAAkB;EAClB,UAAU;EACV,aAAa;EACb,WAAW;EACX,mBAAmB;EACnB,cAAc,CAAC,WAAW,OAAO;EACjC,uBAAuB,EAAE,MAAM,GAAG,GAAG,UAAU;GAC7C,OAAOA,+BAAAA,uBAAuB;IAC5B,GAAG;IACH,OAAO,OAAO,SAAS,KAAK;IAC5B,kBAAkB,KAAK;GACzB,CAAC;EACH;EACA,MAAM,0BAA0B,EAAE,MAAM,GAAG,GAAG,UAAU;GACtD,MAAM,WAAW,MAAMC,+BAAAA,0BAA0B;IAAE,GAAG;IAAQ,UAAU,KAAK;GAAS,CAAC;GACvF,IAAI,CAAC,SAAS,IAAI;IAChB,MAAM,EAAE,UAAW,MAAM,SAAS,KAAK;IACvC,MAAM,IAAIC,qBAAAA,YAAY,SAAS,QAAQ,mBAAmB,MAAM,OAAO;GACzE;GACA,OAAQ,MAAM,SAAS,KAAK;EAC9B;EACA,MAAM,YAAY,EAAE,UAAU,gBAAgB;GAC5C,CAAA,GAAA,cAAA,UAAA,CAAU,KAAK,WAAW,uBAAuB;GACjD,IAAI,UAAU;IACZ,MAAM,OAAO,MAAMC,+BAAAA,cAAsC,UAAU,KAAK,SAAS;IACjF,OAAO;KACL;KACA,QAAQ;MACN,KAAK,KAAK;MACV,MAAM,KAAK;MACX,SAAS,KAAK;MACd,OAAO,KAAK;MACZ,gBAAgB;KAClB;IACF;GACF;GACA,CAAA,GAAA,cAAA,UAAA,CAAU,cAAc,0BAA0B;GAClD,CAAA,GAAA,cAAA,UAAA,CAAU,KAAK,aAAa,yBAAyB;GAErD,MAAM,MAAM,IAAI,IAAI,KAAK,WAAW;GACpC,MAAM,SAAS;IAAC;IAAM;IAAQ;IAAS;GAAgC;GACvE,IAAI,aAAa,OAAO,gBAAgB,YAAY;GACpD,IAAI,aAAa,OAAO,UAAU,OAAO,KAAK,GAAG,CAAC;GAElD,MAAM,WAAW,MAAM,MAAM,IAAI,MAAM,EAAE,SAAA,EADvB,QAAQ,mBACqB,EAAE,CAAC;GAClD,IAAI,CAAC,SAAS,IACZ,MAAM,IAAID,qBAAAA,YAAY,SAAS,QAAQ,mBAAmB,2BAA2B;GAEvF,MAAM,OAAQ,MAAM,SAAS,KAAK;GAClC,OAAO;IACL;IACA,QAAQ;KACN,KAAK,KAAK;KACV,MAAM,KAAK;KACX,OAAO,KAAK;KACZ,SAAS,KAAK,QAAQ,KAAK;KAC3B,gBAAgB,KAAK;IACvB;GACF;EACF;EACA,MAAM,kBAAkB,EAAE,eAAwC;GAChE,IAAI,YAAY,YAAY,YAAY,cAAc;IACpD,MAAM,WAAW,MAAM,KAAK,YAAY,WAAqC;IAM7E,OAAO;KAAE,OAAA;MAJP,YAAY;MACZ,cAAc,YAAY,gBAAgB;MAC1C,UAAU,YAAY;KAEX;KAAG;IAAS;GAC3B,OACE,MAAM,IAAIA,qBAAAA,YAAY,KAAK,mBAAmB,sCAAsC;EAExF;CACF;AACF;AAEA,MAAa,WAAW,uBAAuB"}

package/dist/oauth2/provider/facebook.d.cts

@@ -1,5 +1,5 @@
-import { OAuth2Token, Provider } from '../types.cjs';
-
+import { OAuth2Token, Provider } from "../types.cjs";
+//#region src/oauth2/provider/facebook.d.ts
 /**
  * ref: https://developers.facebook.com/docs/facebook-login/guides/advanced/manual-flow/
  * ref: https://developers.facebook.com/tools/explorer
@@ -7,38 +7,39 @@ import { OAuth2Token, Provider } from '../types.cjs';
 declare function createFacebookProvider(): Provider;
 declare const facebook: Provider;
 interface FacebookDecodedIdToken {
-    sub: string;
-    name: string;
-    email: string;
-    picture: string;
-    nonce?: string;
+  sub: string;
+  name: string;
+  email: string;
+  picture: string;
+  nonce?: string;
 }
 interface FacebookUserInfo {
-    id: string;
-    name: string;
-    email: string;
-    email_verified: boolean;
-    picture: {
-        data: {
-            url: string;
-            width: number;
-            height: number;
-            is_silhouette: boolean;
-        };
+  id: string;
+  name: string;
+  email: string;
+  email_verified: boolean;
+  picture: {
+    data: {
+      url: string;
+      width: number;
+      height: number;
+      is_silhouette: boolean;
     };
+  };
 }
 interface FacebookToken extends OAuth2Token {
-    access_token: string;
-    token_type: 'bearer';
-    expires_in: number;
-    id_token?: string;
+  access_token: string;
+  token_type: 'bearer';
+  expires_in: number;
+  id_token?: string;
 }
 type FacebookAppCredential = {
-    state: string;
-    id_token: string;
+  state: string;
+  id_token: string;
 } | {
-    state: string;
-    access_token: string;
+  state: string;
+  access_token: string;
 };
-
-export { type FacebookAppCredential, type FacebookDecodedIdToken, type FacebookToken, type FacebookUserInfo, createFacebookProvider, facebook };
+//#endregion
+export { FacebookAppCredential, FacebookDecodedIdToken, FacebookToken, FacebookUserInfo, createFacebookProvider, facebook };
+//# sourceMappingURL=facebook.d.cts.map

package/dist/oauth2/provider/facebook.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"facebook.d.cts","names":[],"sources":["../../../src/oauth2/provider/facebook.ts"],"mappings":";;;;;;iBASgB,0BAA0B;cA8E7B,UAAQ;UAEJ;EACf;EACA;EACA;EACA;EACA;;UAGe;EACf;EACA;EACA;EACA;EACA;IACE;MACE;MACA;MACA;MACA;;;;UAKW,sBAAsB;EACrC;EACA;EACA;EACA;;KAGU;EACN;EAAe;;EACf;EAAe"}

package/dist/oauth2/provider/facebook.d.mts

@@ -0,0 +1,45 @@
+import { OAuth2Token, Provider } from "../types.mjs";
+//#region src/oauth2/provider/facebook.d.ts
+/**
+ * ref: https://developers.facebook.com/docs/facebook-login/guides/advanced/manual-flow/
+ * ref: https://developers.facebook.com/tools/explorer
+ * */
+declare function createFacebookProvider(): Provider;
+declare const facebook: Provider;
+interface FacebookDecodedIdToken {
+  sub: string;
+  name: string;
+  email: string;
+  picture: string;
+  nonce?: string;
+}
+interface FacebookUserInfo {
+  id: string;
+  name: string;
+  email: string;
+  email_verified: boolean;
+  picture: {
+    data: {
+      url: string;
+      width: number;
+      height: number;
+      is_silhouette: boolean;
+    };
+  };
+}
+interface FacebookToken extends OAuth2Token {
+  access_token: string;
+  token_type: 'bearer';
+  expires_in: number;
+  id_token?: string;
+}
+type FacebookAppCredential = {
+  state: string;
+  id_token: string;
+} | {
+  state: string;
+  access_token: string;
+};
+//#endregion
+export { FacebookAppCredential, FacebookDecodedIdToken, FacebookToken, FacebookUserInfo, createFacebookProvider, facebook };
+//# sourceMappingURL=facebook.d.mts.map

package/dist/oauth2/provider/facebook.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"facebook.d.mts","names":[],"sources":["../../../src/oauth2/provider/facebook.ts"],"mappings":";;;;;;iBASgB,0BAA0B;cA8E7B,UAAQ;UAEJ;EACf;EACA;EACA;EACA;EACA;;UAGe;EACf;EACA;EACA;EACA;EACA;IACE;MACE;MACA;MACA;MACA;;;;UAKW,sBAAsB;EACrC;EACA;EACA;EACA;;KAGU;EACN;EAAe;;EACf;EAAe"}