@shware/security 7.0.0 → 7.1.1

package/dist/oauth2/error.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"error.d.mts","names":[],"sources":["../../src/oauth2/error.ts"],"mappings":";YACY;wBAiCI,uBAAuB;qBAI1B,oBAAoB;WACtB;WACA,OAAO;EAEhB,YAAY,gBAAgB,OAAO,iBAAiB;;qBAQzC,4BAA4B;EACvC,YAAY"}
+{"version":3,"file":"error.d.mts","names":[],"sources":["../../src/oauth2/error.ts"],"mappings":"A,YACY;wBAiCI,uBAAuB;qBAI1B,oBAAoB;WACtB;WACA,OAAO;EAEhB,YAAY,gBAAgB,OAAO,iBAAiB;;qBAQzC,4BAA4B;EACvC,YAAY"}

package/dist/oauth2/error.mjs

@@ -1,4 +1,4 @@
-//#region src/oauth2/error.ts
+// src/oauth2/error.ts
 /** The registered error codes of `OAuth2ErrorType`, for checking untrusted input at runtime. */
 const OAUTH2_ERROR_TYPES = /* @__PURE__ */ new Set([
 	"invalid_request",
@@ -34,7 +34,6 @@ var AuthenticationError = class AuthenticationError extends Error {
 		Object.setPrototypeOf(this, AuthenticationError.prototype);
 	}
 };
-//#endregion
 export { AuthenticationError, OAuth2Error, isKnownOAuth2ErrorType };
 
 //# sourceMappingURL=error.mjs.map

package/dist/oauth2/name.cjs

@@ -1,5 +1,5 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-//#region src/oauth2/name.ts
+// src/oauth2/name.ts
 /**
 * Upper bound, in characters, on each name part taken from the client. Names that reach us outside
 * a signed token (Apple's form_post `user`, a native login body) are plain client input, so they
@@ -96,7 +96,6 @@ function isObject(value) {
 function withoutUndefined(value) {
 	return Object.fromEntries(Object.entries(value).filter(([, v]) => v !== void 0));
 }
-//#endregion
 exports.MAX_NAME_PART_LENGTH = MAX_NAME_PART_LENGTH;
 exports.cleanNamePart = cleanNamePart;
 exports.cleanPersonName = cleanPersonName;

package/dist/oauth2/name.d.cts

@@ -1,5 +1,4 @@
 import { PersonNameComponents, StandardClaims } from "./types.cjs";
-//#region src/oauth2/name.d.ts
 /**
  * Upper bound, in characters, on each name part taken from the client. Names that reach us outside
  * a signed token (Apple's form_post `user`, a native login body) are plain client input, so they
@@ -44,6 +43,5 @@ type NameClaims = Pick<StandardClaims, 'name' | 'given_name' | 'family_name' | '
  * Undefined parts are left out, so spreading the result never overwrites a claim with `undefined`.
  */
 export declare function nameClaims(parts: Omit<NameClaims, 'name'>): NameClaims;
-//#endregion
 export {};
 //# sourceMappingURL=name.d.cts.map

package/dist/oauth2/name.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"name.d.cts","names":[],"sources":["../../src/oauth2/name.ts"],"mappings":";;;;;;;qBAOa;;;;;;;wBAaG,cACd,YACA,eACC,KAAK;;;;;;wBAcQ,cAAc;;iBAQb;EACf;IAAS;IAAoB;;EAC7B;;;;;;;wBAQc,eAAe,0BAA0B;;;;;wBAkCzC,gBAAgB,iBAAiB;KAU5C,aAAa,KAChB;;;;;wBAQc,WAAW,OAAO,KAAK,sBAAsB"}
+{"version":3,"file":"name.d.cts","names":[],"sources":["../../src/oauth2/name.ts"],"mappings":";;;;;;qBAOa;;;;;;;wBAaG,cACd,YACA,eACC,KAAK;;;;;;wBAcQ,cAAc;;iBAQb;EACf;IAAS;IAAoB;;EAC7B;;;;;;;wBAQc,eAAe,0BAA0B;;;;;wBAkCzC,gBAAgB,iBAAiB;KAU5C,aAAa,KAChB;;;;;wBAQc,WAAW,OAAO,KAAK,sBAAsB"}

package/dist/oauth2/name.d.mts

@@ -1,5 +1,4 @@
 import { PersonNameComponents, StandardClaims } from "./types.mjs";
-//#region src/oauth2/name.d.ts
 /**
  * Upper bound, in characters, on each name part taken from the client. Names that reach us outside
  * a signed token (Apple's form_post `user`, a native login body) are plain client input, so they
@@ -44,6 +43,5 @@ type NameClaims = Pick<StandardClaims, 'name' | 'given_name' | 'family_name' | '
  * Undefined parts are left out, so spreading the result never overwrites a claim with `undefined`.
  */
 export declare function nameClaims(parts: Omit<NameClaims, 'name'>): NameClaims;
-//#endregion
 export {};
 //# sourceMappingURL=name.d.mts.map

package/dist/oauth2/name.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"name.d.mts","names":[],"sources":["../../src/oauth2/name.ts"],"mappings":";;;;;;;qBAOa;;;;;;;wBAaG,cACd,YACA,eACC,KAAK;;;;;;wBAcQ,cAAc;;iBAQb;EACf;IAAS;IAAoB;;EAC7B;;;;;;;wBAQc,eAAe,0BAA0B;;;;;wBAkCzC,gBAAgB,iBAAiB;KAU5C,aAAa,KAChB;;;;;wBAQc,WAAW,OAAO,KAAK,sBAAsB"}
+{"version":3,"file":"name.d.mts","names":[],"sources":["../../src/oauth2/name.ts"],"mappings":";;;;;;qBAOa;;;;;;;wBAaG,cACd,YACA,eACC,KAAK;;;;;;wBAcQ,cAAc;;iBAQb;EACf;IAAS;IAAoB;;EAC7B;;;;;;;wBAQc,eAAe,0BAA0B;;;;;wBAkCzC,gBAAgB,iBAAiB;KAU5C,aAAa,KAChB;;;;;wBAQc,WAAW,OAAO,KAAK,sBAAsB"}

package/dist/oauth2/name.mjs

@@ -1,4 +1,4 @@
-//#region src/oauth2/name.ts
+// src/oauth2/name.ts
 /**
 * Upper bound, in characters, on each name part taken from the client. Names that reach us outside
 * a signed token (Apple's form_post `user`, a native login body) are plain client input, so they
@@ -95,7 +95,6 @@ function isObject(value) {
 function withoutUndefined(value) {
 	return Object.fromEntries(Object.entries(value).filter(([, v]) => v !== void 0));
 }
-//#endregion
 export { MAX_NAME_PART_LENGTH, cleanNamePart, cleanPersonName, composeName, nameClaims, parseAppleUser };
 
 //# sourceMappingURL=name.mjs.map

package/dist/oauth2/provider/apple-client-secret.cjs

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 let jose = require("jose");
-//#region src/oauth2/provider/apple-client-secret.ts
+// src/oauth2/provider/apple-client-secret.ts
 /**
 * Sign in with Apple has no static client secret: the secret is a JWT the server signs with its
 * Sign in with Apple key (ES256, `iss` = team, `sub` = client id, `aud` = appleid.apple.com), and
@@ -40,7 +40,6 @@ function createAppleClientSecret(options) {
 		return secret;
 	};
 }
-//#endregion
 exports.createAppleClientSecret = createAppleClientSecret;
 
 //# sourceMappingURL=apple-client-secret.cjs.map

package/dist/oauth2/provider/apple-client-secret.d.cts

@@ -1,4 +1,3 @@
-//#region src/oauth2/provider/apple-client-secret.d.ts
 export interface AppleClientSecretOptions {
   /** Apple Developer Team ID (Membership details). */
   teamId: string;
@@ -23,5 +22,4 @@ export interface AppleClientSecretOptions {
  * instead of generating, storing and rotating static ones by hand.
  */
 export declare function createAppleClientSecret(options: AppleClientSecretOptions): (clientId: string) => Promise<string>;
-//#endregion
 //# sourceMappingURL=apple-client-secret.d.cts.map

package/dist/oauth2/provider/apple-client-secret.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"apple-client-secret.d.cts","names":[],"sources":["../../../src/oauth2/provider/apple-client-secret.ts"],"mappings":";iBAEiB;;EAEf;;EAEA;;EAEA;;EAEA;;EAEA;;;;;;;;;;;;;wBAcc,wBAAwB,SAAS,4BAAwB,qBAmBZ"}
+{"version":3,"file":"apple-client-secret.d.cts","names":[],"sources":["../../../src/oauth2/provider/apple-client-secret.ts"],"mappings":"A,iBAEiB;;EAEf;;EAEA;;EAEA;;EAEA;;EAEA;;;;;;;;;;;;;wBAcc,wBAAwB,SAAS,4BAAwB,qBAmBZ"}

package/dist/oauth2/provider/apple-client-secret.d.mts

@@ -1,4 +1,3 @@
-//#region src/oauth2/provider/apple-client-secret.d.ts
 export interface AppleClientSecretOptions {
   /** Apple Developer Team ID (Membership details). */
   teamId: string;
@@ -23,5 +22,4 @@ export interface AppleClientSecretOptions {
  * instead of generating, storing and rotating static ones by hand.
  */
 export declare function createAppleClientSecret(options: AppleClientSecretOptions): (clientId: string) => Promise<string>;
-//#endregion
 //# sourceMappingURL=apple-client-secret.d.mts.map

package/dist/oauth2/provider/apple-client-secret.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"apple-client-secret.d.mts","names":[],"sources":["../../../src/oauth2/provider/apple-client-secret.ts"],"mappings":";iBAEiB;;EAEf;;EAEA;;EAEA;;EAEA;;EAEA;;;;;;;;;;;;;wBAcc,wBAAwB,SAAS,4BAAwB,qBAmBZ"}
+{"version":3,"file":"apple-client-secret.d.mts","names":[],"sources":["../../../src/oauth2/provider/apple-client-secret.ts"],"mappings":"A,iBAEiB;;EAEf;;EAEA;;EAEA;;EAEA;;EAEA;;;;;;;;;;;;;wBAcc,wBAAwB,SAAS,4BAAwB,qBAmBZ"}

package/dist/oauth2/provider/apple-client-secret.mjs

@@ -1,5 +1,5 @@
 import { SignJWT, importPKCS8 } from "jose";
-//#region src/oauth2/provider/apple-client-secret.ts
+// src/oauth2/provider/apple-client-secret.ts
 /**
 * Sign in with Apple has no static client secret: the secret is a JWT the server signs with its
 * Sign in with Apple key (ES256, `iss` = team, `sub` = client id, `aud` = appleid.apple.com), and
@@ -39,7 +39,6 @@ function createAppleClientSecret(options) {
 		return secret;
 	};
 }
-//#endregion
 export { createAppleClientSecret };
 
 //# sourceMappingURL=apple-client-secret.mjs.map

package/dist/oauth2/provider/apple.cjs

@@ -3,7 +3,7 @@ const require_oauth2_error = require("../error.cjs");
 const require_oauth2_name = require("../name.cjs");
 const require_oauth2_provider_common = require("./common.cjs");
 let _shware_utils = require("@shware/utils");
-//#region src/oauth2/provider/apple.ts
+// src/oauth2/provider/apple.ts
 /** `iss` of every Apple id token (https://appleid.apple.com/.well-known/openid-configuration). */
 const APPLE_ISSUER = "https://appleid.apple.com";
 function createAppleProvider() {
@@ -99,7 +99,6 @@ function createAppleProvider() {
 	};
 }
 const apple = createAppleProvider();
-//#endregion
 exports.apple = apple;
 exports.createAppleProvider = createAppleProvider;
 

package/dist/oauth2/provider/apple.d.cts

@@ -1,6 +1,5 @@
 import { NativeCredential, OAuth2Token, PersonNameComponents, Provider } from "../types.cjs";
 import { AppleUser } from "../name.cjs";
-//#region src/oauth2/provider/apple.d.ts
 export declare function createAppleProvider(): Provider;
 export declare const apple: Provider;
 export interface AppleIdToken {
@@ -42,5 +41,4 @@ export interface AppleNativeCredential extends NativeCredential {
 export interface AppleErrorResponse {
   error: 'invalid_request' | 'invalid_client' | 'invalid_grant' | 'unauthorized_client' | 'unsupported_grant_type' | 'invalid_scope';
 }
-//#endregion
 //# sourceMappingURL=apple.d.cts.map

package/dist/oauth2/provider/apple.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"apple.d.cts","names":[],"sources":["../../../src/oauth2/provider/apple.ts"],"mappings":";;;wBAiBgB,uBAAuB;qBAgF1B,OAAK;iBAID;EACf;EACA;EACA;EACA;EACA;EACA;EACA;EACA;;EAEA;EACA;EACA;;;;;;iBAOe,sBAAsB;;EAErC,OAAO;;EAEP,WAAW;;iBAKI,mBAAmB;EAClC;EACA;EACA;EACA;EACA;;iBAGe,8BAA8B;EAC7C;EACA;EACA;;iBAIe;EACf"}
+{"version":3,"file":"apple.d.cts","names":[],"sources":["../../../src/oauth2/provider/apple.ts"],"mappings":";;wBAiBgB,uBAAuB;qBAgF1B,OAAK;iBAID;EACf;EACA;EACA;EACA;EACA;EACA;EACA;EACA;;EAEA;EACA;EACA;;;;;;iBAOe,sBAAsB;;EAErC,OAAO;;EAEP,WAAW;;iBAKI,mBAAmB;EAClC;EACA;EACA;EACA;EACA;;iBAGe,8BAA8B;EAC7C;EACA;EACA;;iBAIe;EACf"}

package/dist/oauth2/provider/apple.d.mts

@@ -1,6 +1,5 @@
 import { NativeCredential, OAuth2Token, PersonNameComponents, Provider } from "../types.mjs";
 import { AppleUser } from "../name.mjs";
-//#region src/oauth2/provider/apple.d.ts
 export declare function createAppleProvider(): Provider;
 export declare const apple: Provider;
 export interface AppleIdToken {
@@ -42,5 +41,4 @@ export interface AppleNativeCredential extends NativeCredential {
 export interface AppleErrorResponse {
   error: 'invalid_request' | 'invalid_client' | 'invalid_grant' | 'unauthorized_client' | 'unsupported_grant_type' | 'invalid_scope';
 }
-//#endregion
 //# sourceMappingURL=apple.d.mts.map

package/dist/oauth2/provider/apple.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"apple.d.mts","names":[],"sources":["../../../src/oauth2/provider/apple.ts"],"mappings":";;;wBAiBgB,uBAAuB;qBAgF1B,OAAK;iBAID;EACf;EACA;EACA;EACA;EACA;EACA;EACA;EACA;;EAEA;EACA;EACA;;;;;;iBAOe,sBAAsB;;EAErC,OAAO;;EAEP,WAAW;;iBAKI,mBAAmB;EAClC;EACA;EACA;EACA;EACA;;iBAGe,8BAA8B;EAC7C;EACA;EACA;;iBAIe;EACf"}
+{"version":3,"file":"apple.d.mts","names":[],"sources":["../../../src/oauth2/provider/apple.ts"],"mappings":";;wBAiBgB,uBAAuB;qBAgF1B,OAAK;iBAID;EACf;EACA;EACA;EACA;EACA;EACA;EACA;EACA;;EAEA;EACA;EACA;;;;;;iBAOe,sBAAsB;;EAErC,OAAO;;EAEP,WAAW;;iBAKI,mBAAmB;EAClC;EACA;EACA;EACA;EACA;;iBAGe,8BAA8B;EAC7C;EACA;EACA;;iBAIe;EACf"}

package/dist/oauth2/provider/apple.mjs

@@ -2,7 +2,7 @@ import { OAuth2Error } from "../error.mjs";
 import { cleanPersonName, nameClaims, parseAppleUser } from "../name.mjs";
 import { createAuthorizationUri, exchangeAuthorizationCode, verifyIdToken } from "./common.mjs";
 import { invariant } from "@shware/utils";
-//#region src/oauth2/provider/apple.ts
+// src/oauth2/provider/apple.ts
 /** `iss` of every Apple id token (https://appleid.apple.com/.well-known/openid-configuration). */
 const APPLE_ISSUER = "https://appleid.apple.com";
 function createAppleProvider() {
@@ -98,7 +98,6 @@ function createAppleProvider() {
 	};
 }
 const apple = createAppleProvider();
-//#endregion
 export { apple, createAppleProvider };
 
 //# sourceMappingURL=apple.mjs.map

package/dist/oauth2/provider/common.cjs

@@ -1,7 +1,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_oauth2_error = require("../error.cjs");
 let jose = require("jose");
-//#region src/oauth2/provider/common.ts
+// src/oauth2/provider/common.ts
 function createAuthorizationUri(options) {
 	const url = new URL(options.authorizationUri);
 	url.searchParams.append("response_type", "code");
@@ -93,7 +93,6 @@ async function verifyIdToken(idToken, options) {
 		throw new require_oauth2_error.OAuth2Error(400, "invalid_request", "Failed to verify id_token");
 	}
 }
-//#endregion
 exports.createAuthorizationUri = createAuthorizationUri;
 exports.exchangeAuthorizationCode = exchangeAuthorizationCode;
 exports.refreshAccessToken = refreshAccessToken;

package/dist/oauth2/provider/common.d.cts

@@ -1,5 +1,4 @@
 import { ExchangeCodeParams, PkceParameters, RefreshTokenParams } from "../types.cjs";
-//#region src/oauth2/provider/common.d.ts
 export declare function createAuthorizationUri(options: {
   state: string;
   scope: string[];
@@ -38,6 +37,5 @@ export interface VerifyIdTokenOptions {
   audience: string;
 }
 export declare function verifyIdToken<T>(idToken: string, options: VerifyIdTokenOptions): Promise<T>;
-//#endregion
 export {};
 //# sourceMappingURL=common.d.cts.map

package/dist/oauth2/provider/common.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"common.d.cts","names":[],"sources":["../../../src/oauth2/provider/common.ts"],"mappings":";;wBAIgB,uBAAuB;EACrC;EACA;EACA;EACA;EACA;EACA,OAAO,KAAK;IACb;wBAcqB,0BACpB,QAAQ;EACN;EACA;;EAEA,UAAU;IACX,QAAA;wBAyBmB,mBACpB,QAAQ;EACN;EACA;IACD,QAAA;UAsBO;EACR;EACA;EACA;EACA;EACA;;wBAGoB,YAAY,QAAQ,oBAAiB;iBAwB1C;EACf;;EAEA;;;;;;EAMA;;wBAGoB,cAAc,GAAG,iBAAiB,SAAS,uBAAoB,QAAA"}
+{"version":3,"file":"common.d.cts","names":[],"sources":["../../../src/oauth2/provider/common.ts"],"mappings":";wBAIgB,uBAAuB;EACrC;EACA;EACA;EACA;EACA;EACA,OAAO,KAAK;IACb;wBAcqB,0BACpB,QAAQ;EACN;EACA;;EAEA,UAAU;IACX,QAAA;wBAyBmB,mBACpB,QAAQ;EACN;EACA;IACD,QAAA;UAsBO;EACR;EACA;EACA;EACA;EACA;;wBAGoB,YAAY,QAAQ,oBAAiB;iBAwB1C;EACf;;EAEA;;;;;;EAMA;;wBAGoB,cAAc,GAAG,iBAAiB,SAAS,uBAAoB,QAAA"}

package/dist/oauth2/provider/common.d.mts

@@ -1,5 +1,4 @@
 import { ExchangeCodeParams, PkceParameters, RefreshTokenParams } from "../types.mjs";
-//#region src/oauth2/provider/common.d.ts
 export declare function createAuthorizationUri(options: {
   state: string;
   scope: string[];
@@ -38,6 +37,5 @@ export interface VerifyIdTokenOptions {
   audience: string;
 }
 export declare function verifyIdToken<T>(idToken: string, options: VerifyIdTokenOptions): Promise<T>;
-//#endregion
 export {};
 //# sourceMappingURL=common.d.mts.map

package/dist/oauth2/provider/common.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"common.d.mts","names":[],"sources":["../../../src/oauth2/provider/common.ts"],"mappings":";;wBAIgB,uBAAuB;EACrC;EACA;EACA;EACA;EACA;EACA,OAAO,KAAK;IACb;wBAcqB,0BACpB,QAAQ;EACN;EACA;;EAEA,UAAU;IACX,QAAA;wBAyBmB,mBACpB,QAAQ;EACN;EACA;IACD,QAAA;UAsBO;EACR;EACA;EACA;EACA;EACA;;wBAGoB,YAAY,QAAQ,oBAAiB;iBAwB1C;EACf;;EAEA;;;;;;EAMA;;wBAGoB,cAAc,GAAG,iBAAiB,SAAS,uBAAoB,QAAA"}
+{"version":3,"file":"common.d.mts","names":[],"sources":["../../../src/oauth2/provider/common.ts"],"mappings":";wBAIgB,uBAAuB;EACrC;EACA;EACA;EACA;EACA;EACA,OAAO,KAAK;IACb;wBAcqB,0BACpB,QAAQ;EACN;EACA;;EAEA,UAAU;IACX,QAAA;wBAyBmB,mBACpB,QAAQ;EACN;EACA;IACD,QAAA;UAsBO;EACR;EACA;EACA;EACA;EACA;;wBAGoB,YAAY,QAAQ,oBAAiB;iBAwB1C;EACf;;EAEA;;;;;;EAMA;;wBAGoB,cAAc,GAAG,iBAAiB,SAAS,uBAAoB,QAAA"}

package/dist/oauth2/provider/common.mjs

@@ -1,6 +1,6 @@
 import { OAuth2Error } from "../error.mjs";
 import { createRemoteJWKSet, jwtVerify } from "jose";
-//#region src/oauth2/provider/common.ts
+// src/oauth2/provider/common.ts
 function createAuthorizationUri(options) {
 	const url = new URL(options.authorizationUri);
 	url.searchParams.append("response_type", "code");
@@ -92,7 +92,6 @@ async function verifyIdToken(idToken, options) {
 		throw new OAuth2Error(400, "invalid_request", "Failed to verify id_token");
 	}
 }
-//#endregion
 export { createAuthorizationUri, exchangeAuthorizationCode, refreshAccessToken, revokeToken, verifyIdToken };
 
 //# sourceMappingURL=common.mjs.map

package/dist/oauth2/provider/facebook.cjs

@@ -3,7 +3,7 @@ const require_oauth2_error = require("../error.cjs");
 const require_oauth2_provider_common = require("./common.cjs");
 let node_crypto = require("node:crypto");
 let _shware_utils = require("@shware/utils");
-//#region src/oauth2/provider/facebook.ts
+// src/oauth2/provider/facebook.ts
 /**
 * `iss` of Limited Login id tokens, per https://limited.facebook.com/.well-known/openid-configuration/
 * (their `aud` is the app id).
@@ -113,7 +113,6 @@ async function fetchUserInfo(userInfoUri, accessToken, appSecretProof) {
 		}
 	};
 }
-//#endregion
 exports.createFacebookProvider = createFacebookProvider;
 exports.facebook = facebook;
 

package/dist/oauth2/provider/facebook.d.cts

@@ -1,5 +1,4 @@
 import { OAuth2Token, Provider } from "../types.cjs";
-//#region src/oauth2/provider/facebook.d.ts
 /**
  * ref: https://developers.facebook.com/docs/facebook-login/guides/advanced/manual-flow/
  * ref: https://developers.facebook.com/tools/explorer
@@ -40,5 +39,4 @@ export type FacebookAppCredential = {
   state: string;
   access_token: string;
 };
-//#endregion
 //# sourceMappingURL=facebook.d.cts.map

package/dist/oauth2/provider/facebook.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"facebook.d.cts","names":[],"sources":["../../../src/oauth2/provider/facebook.ts"],"mappings":";;;;;;wBAgBgB,0BAA0B;qBAgF7B,UAAQ;iBA8BJ;EACf;EACA;EACA;EACA;EACA;;iBAGe;EACf;EACA;EACA;EACA;EACA;IACE;MACE;MACA;MACA;MACA;;;;iBAKW,sBAAsB;EACrC;EACA;EACA;EACA;;YAGU;EACN;EAAe;;EACf;EAAe"}
+{"version":3,"file":"facebook.d.cts","names":[],"sources":["../../../src/oauth2/provider/facebook.ts"],"mappings":";;;;;wBAgBgB,0BAA0B;qBAgF7B,UAAQ;iBA8BJ;EACf;EACA;EACA;EACA;EACA;;iBAGe;EACf;EACA;EACA;EACA;EACA;IACE;MACE;MACA;MACA;MACA;;;;iBAKW,sBAAsB;EACrC;EACA;EACA;EACA;;YAGU;EACN;EAAe;;EACf;EAAe"}

package/dist/oauth2/provider/facebook.d.mts

@@ -1,5 +1,4 @@
 import { OAuth2Token, Provider } from "../types.mjs";
-//#region src/oauth2/provider/facebook.d.ts
 /**
  * ref: https://developers.facebook.com/docs/facebook-login/guides/advanced/manual-flow/
  * ref: https://developers.facebook.com/tools/explorer
@@ -40,5 +39,4 @@ export type FacebookAppCredential = {
   state: string;
   access_token: string;
 };
-//#endregion
 //# sourceMappingURL=facebook.d.mts.map

package/dist/oauth2/provider/facebook.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"facebook.d.mts","names":[],"sources":["../../../src/oauth2/provider/facebook.ts"],"mappings":";;;;;;wBAgBgB,0BAA0B;qBAgF7B,UAAQ;iBA8BJ;EACf;EACA;EACA;EACA;EACA;;iBAGe;EACf;EACA;EACA;EACA;EACA;IACE;MACE;MACA;MACA;MACA;;;;iBAKW,sBAAsB;EACrC;EACA;EACA;EACA;;YAGU;EACN;EAAe;;EACf;EAAe"}
+{"version":3,"file":"facebook.d.mts","names":[],"sources":["../../../src/oauth2/provider/facebook.ts"],"mappings":";;;;;wBAgBgB,0BAA0B;qBAgF7B,UAAQ;iBA8BJ;EACf;EACA;EACA;EACA;EACA;;iBAGe;EACf;EACA;EACA;EACA;EACA;IACE;MACE;MACA;MACA;MACA;;;;iBAKW,sBAAsB;EACrC;EACA;EACA;EACA;;YAGU;EACN;EAAe;;EACf;EAAe"}

package/dist/oauth2/provider/facebook.mjs

@@ -2,7 +2,7 @@ import { OAuth2Error } from "../error.mjs";
 import { createAuthorizationUri, exchangeAuthorizationCode, verifyIdToken } from "./common.mjs";
 import { createHmac } from "node:crypto";
 import { invariant } from "@shware/utils";
-//#region src/oauth2/provider/facebook.ts
+// src/oauth2/provider/facebook.ts
 /**
 * `iss` of Limited Login id tokens, per https://limited.facebook.com/.well-known/openid-configuration/
 * (their `aud` is the app id).
@@ -112,7 +112,6 @@ async function fetchUserInfo(userInfoUri, accessToken, appSecretProof) {
 		}
 	};
 }
-//#endregion
 export { createFacebookProvider, facebook };
 
 //# sourceMappingURL=facebook.mjs.map

package/dist/oauth2/provider/github.cjs

@@ -2,7 +2,7 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_oauth2_error = require("../error.cjs");
 const require_oauth2_provider_common = require("./common.cjs");
 let _shware_utils = require("@shware/utils");
-//#region src/oauth2/provider/github.ts
+// src/oauth2/provider/github.ts
 /**
 * GitHub's REST API rejects any request without a `User-Agent` header with a 403. Node's fetch sends
 * a default one, but Cloudflare Workers' fetch sends none, so every GitHub request sets it explicitly.
@@ -82,7 +82,6 @@ function createGithubProvider() {
 	};
 }
 const github = createGithubProvider();
-//#endregion
 exports.createGithubProvider = createGithubProvider;
 exports.github = github;
 

package/dist/oauth2/provider/github.d.cts

@@ -1,5 +1,4 @@
 import { OAuth2Token, Provider } from "../types.cjs";
-//#region src/oauth2/provider/github.d.ts
 export declare function createGithubProvider(): Provider;
 export declare const github: Provider;
 export interface GithubUserInfo {
@@ -55,5 +54,4 @@ export interface GithubToken extends OAuth2Token {
   expires_in: number;
   refresh_token: string;
 }
-//#endregion
 //# sourceMappingURL=github.d.cts.map

package/dist/oauth2/provider/github.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"github.d.cts","names":[],"sources":["../../../src/oauth2/provider/github.ts"],"mappings":";;wBAmBgB,wBAAwB;qBAqE3B,QAAM;iBAEF;EACf;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;IACE;IACA;IACA;IACA;;;iBAWa,oBAAoB;EACnC;EACA;EACA;EACA;EACA"}
+{"version":3,"file":"github.d.cts","names":[],"sources":["../../../src/oauth2/provider/github.ts"],"mappings":";wBAmBgB,wBAAwB;qBAqE3B,QAAM;iBAEF;EACf;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;IACE;IACA;IACA;IACA;;;iBAWa,oBAAoB;EACnC;EACA;EACA;EACA;EACA"}

package/dist/oauth2/provider/github.d.mts

@@ -1,5 +1,4 @@
 import { OAuth2Token, Provider } from "../types.mjs";
-//#region src/oauth2/provider/github.d.ts
 export declare function createGithubProvider(): Provider;
 export declare const github: Provider;
 export interface GithubUserInfo {
@@ -55,5 +54,4 @@ export interface GithubToken extends OAuth2Token {
   expires_in: number;
   refresh_token: string;
 }
-//#endregion
 //# sourceMappingURL=github.d.mts.map

package/dist/oauth2/provider/github.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"github.d.mts","names":[],"sources":["../../../src/oauth2/provider/github.ts"],"mappings":";;wBAmBgB,wBAAwB;qBAqE3B,QAAM;iBAEF;EACf;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;IACE;IACA;IACA;IACA;;;iBAWa,oBAAoB;EACnC;EACA;EACA;EACA;EACA"}
+{"version":3,"file":"github.d.mts","names":[],"sources":["../../../src/oauth2/provider/github.ts"],"mappings":";wBAmBgB,wBAAwB;qBAqE3B,QAAM;iBAEF;EACf;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;IACE;IACA;IACA;IACA;;;iBAWa,oBAAoB;EACnC;EACA;EACA;EACA;EACA"}

package/dist/oauth2/provider/github.mjs

@@ -1,7 +1,7 @@
 import { OAuth2Error } from "../error.mjs";
 import { createAuthorizationUri, exchangeAuthorizationCode } from "./common.mjs";
 import { invariant } from "@shware/utils";
-//#region src/oauth2/provider/github.ts
+// src/oauth2/provider/github.ts
 /**
 * GitHub's REST API rejects any request without a `User-Agent` header with a 403. Node's fetch sends
 * a default one, but Cloudflare Workers' fetch sends none, so every GitHub request sets it explicitly.
@@ -81,7 +81,6 @@ function createGithubProvider() {
 	};
 }
 const github = createGithubProvider();
-//#endregion
 export { createGithubProvider, github };
 
 //# sourceMappingURL=github.mjs.map

package/dist/oauth2/provider/google.cjs

@@ -2,7 +2,7 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_oauth2_error = require("../error.cjs");
 const require_oauth2_provider_common = require("./common.cjs");
 let _shware_utils = require("@shware/utils");
-//#region src/oauth2/provider/google.ts
+// src/oauth2/provider/google.ts
 /** Google signs id tokens with either `iss`, the URL or the bare host. */
 const GOOGLE_ISSUERS = ["https://accounts.google.com", "accounts.google.com"];
 function claims(data) {
@@ -109,7 +109,6 @@ function createGoogleProvider() {
 	};
 }
 const google = createGoogleProvider();
-//#endregion
 exports.createGoogleProvider = createGoogleProvider;
 exports.google = google;
 

package/dist/oauth2/provider/google.d.cts

@@ -1,5 +1,4 @@
 import { NativeCredential, OAuth2Token, OneTapProvider } from "../types.cjs";
-//#region src/oauth2/provider/google.d.ts
 export declare function createGoogleProvider(): OneTapProvider;
 export declare const google: OneTapProvider;
 export interface GoogleUserInfo {
@@ -39,5 +38,4 @@ export interface GoogleErrorResponse {
   error: 'invalid_request' | 'invalid_client' | 'invalid_grant' | 'invalid_token' | 'invalid_scope' | 'unauthorized_client' | 'unsupported_grant_type' | 'access_denied' | 'server_error';
   error_description: string;
 }
-//#endregion
 //# sourceMappingURL=google.d.cts.map

package/dist/oauth2/provider/google.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"google.d.cts","names":[],"sources":["../../../src/oauth2/provider/google.ts"],"mappings":";;wBA0BgB,wBAAwB;qBAyF3B,QAAM;iBAEF;EACf;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;;iBAGe,oBAAoB;EACnC;EACA;EACA;EACA;EACA;EACA;;iBAIe,4BAA4B;EAC3C;EACA;EACA;EACA;;iBAGe;EACf;EAUA"}
+{"version":3,"file":"google.d.cts","names":[],"sources":["../../../src/oauth2/provider/google.ts"],"mappings":";wBA0BgB,wBAAwB;qBAyF3B,QAAM;iBAEF;EACf;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;;iBAGe,oBAAoB;EACnC;EACA;EACA;EACA;EACA;EACA;;iBAIe,4BAA4B;EAC3C;EACA;EACA;EACA;;iBAGe;EACf;EAUA"}

package/dist/oauth2/provider/google.d.mts

@@ -1,5 +1,4 @@
 import { NativeCredential, OAuth2Token, OneTapProvider } from "../types.mjs";
-//#region src/oauth2/provider/google.d.ts
 export declare function createGoogleProvider(): OneTapProvider;
 export declare const google: OneTapProvider;
 export interface GoogleUserInfo {
@@ -39,5 +38,4 @@ export interface GoogleErrorResponse {
   error: 'invalid_request' | 'invalid_client' | 'invalid_grant' | 'invalid_token' | 'invalid_scope' | 'unauthorized_client' | 'unsupported_grant_type' | 'access_denied' | 'server_error';
   error_description: string;
 }
-//#endregion
 //# sourceMappingURL=google.d.mts.map

package/dist/oauth2/provider/google.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"google.d.mts","names":[],"sources":["../../../src/oauth2/provider/google.ts"],"mappings":";;wBA0BgB,wBAAwB;qBAyF3B,QAAM;iBAEF;EACf;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;;iBAGe,oBAAoB;EACnC;EACA;EACA;EACA;EACA;EACA;;iBAIe,4BAA4B;EAC3C;EACA;EACA;EACA;;iBAGe;EACf;EAUA"}
+{"version":3,"file":"google.d.mts","names":[],"sources":["../../../src/oauth2/provider/google.ts"],"mappings":";wBA0BgB,wBAAwB;qBAyF3B,QAAM;iBAEF;EACf;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;;iBAGe,oBAAoB;EACnC;EACA;EACA;EACA;EACA;EACA;;iBAIe,4BAA4B;EAC3C;EACA;EACA;EACA;;iBAGe;EACf;EAUA"}

package/dist/oauth2/provider/google.mjs

@@ -1,7 +1,7 @@
 import { OAuth2Error } from "../error.mjs";
 import { createAuthorizationUri, exchangeAuthorizationCode, verifyIdToken } from "./common.mjs";
 import { invariant } from "@shware/utils";
-//#region src/oauth2/provider/google.ts
+// src/oauth2/provider/google.ts
 /** Google signs id tokens with either `iss`, the URL or the bare host. */
 const GOOGLE_ISSUERS = ["https://accounts.google.com", "accounts.google.com"];
 function claims(data) {
@@ -108,7 +108,6 @@ function createGoogleProvider() {
 	};
 }
 const google = createGoogleProvider();
-//#endregion
 export { createGoogleProvider, google };
 
 //# sourceMappingURL=google.mjs.map

package/dist/oauth2/provider/wechat.cjs

@@ -1,7 +1,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_oauth2_error = require("../error.cjs");
 let _shware_utils = require("@shware/utils");
-//#region src/oauth2/provider/wechat.ts
+// src/oauth2/provider/wechat.ts
 /**
 * WeChat error codes mapped to the closest OAuth2 error. Anything not listed is a `server_error`.
 * reference: https://developers.weixin.qq.com/doc/oplatform/Return_codes/Return_code_descriptions_new.html
@@ -127,7 +127,6 @@ function createWechatProvider(options = { isWechatBrowser: false }) {
 	};
 }
 const wechat = createWechatProvider();
-//#endregion
 exports.createWechatProvider = createWechatProvider;
 exports.wechat = wechat;
 

package/dist/oauth2/provider/wechat.d.cts

@@ -1,5 +1,4 @@
 import { OAuth2Token, Provider } from "../types.cjs";
-//#region src/oauth2/provider/wechat.d.ts
 export type Options = {
   isWechatBrowser: boolean;
 };
@@ -34,5 +33,4 @@ export interface WechatToken extends OAuth2Token {
   scope: string;
   unionid?: string;
 }
-//#endregion
 //# sourceMappingURL=wechat.d.cts.map

package/dist/oauth2/provider/wechat.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"wechat.d.cts","names":[],"sources":["../../../src/oauth2/provider/wechat.ts"],"mappings":";;YAkDY;EAAY;;;;;wBAKR,qBAAqB,UAAS,UAAuC;qBA2DxE,QAAM;iBAEF;EACf;EACA;EACA;EACA;EACA;EACA;;;;;;;;EAQA;EACA;EACA;;iBAGe,oBAAoB;EACnC;EACA;EACA;EACA;EACA;EACA"}
+{"version":3,"file":"wechat.d.cts","names":[],"sources":["../../../src/oauth2/provider/wechat.ts"],"mappings":";YAkDY;EAAY;;;;;wBAKR,qBAAqB,UAAS,UAAuC;qBA2DxE,QAAM;iBAEF;EACf;EACA;EACA;EACA;EACA;EACA;;;;;;;;EAQA;EACA;EACA;;iBAGe,oBAAoB;EACnC;EACA;EACA;EACA;EACA;EACA"}

package/dist/oauth2/provider/wechat.d.mts

@@ -1,5 +1,4 @@
 import { OAuth2Token, Provider } from "../types.mjs";
-//#region src/oauth2/provider/wechat.d.ts
 export type Options = {
   isWechatBrowser: boolean;
 };
@@ -34,5 +33,4 @@ export interface WechatToken extends OAuth2Token {
   scope: string;
   unionid?: string;
 }
-//#endregion
 //# sourceMappingURL=wechat.d.mts.map

package/dist/oauth2/provider/wechat.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"wechat.d.mts","names":[],"sources":["../../../src/oauth2/provider/wechat.ts"],"mappings":";;YAkDY;EAAY;;;;;wBAKR,qBAAqB,UAAS,UAAuC;qBA2DxE,QAAM;iBAEF;EACf;EACA;EACA;EACA;EACA;EACA;;;;;;;;EAQA;EACA;EACA;;iBAGe,oBAAoB;EACnC;EACA;EACA;EACA;EACA;EACA"}
+{"version":3,"file":"wechat.d.mts","names":[],"sources":["../../../src/oauth2/provider/wechat.ts"],"mappings":";YAkDY;EAAY;;;;;wBAKR,qBAAqB,UAAS,UAAuC;qBA2DxE,QAAM;iBAEF;EACf;EACA;EACA;EACA;EACA;EACA;;;;;;;;EAQA;EACA;EACA;;iBAGe,oBAAoB;EACnC;EACA;EACA;EACA;EACA;EACA"}

package/dist/oauth2/provider/wechat.mjs

@@ -1,6 +1,6 @@
 import { OAuth2Error } from "../error.mjs";
 import { invariant } from "@shware/utils";
-//#region src/oauth2/provider/wechat.ts
+// src/oauth2/provider/wechat.ts
 /**
 * WeChat error codes mapped to the closest OAuth2 error. Anything not listed is a `server_error`.
 * reference: https://developers.weixin.qq.com/doc/oplatform/Return_codes/Return_code_descriptions_new.html
@@ -126,7 +126,6 @@ function createWechatProvider(options = { isWechatBrowser: false }) {
 	};
 }
 const wechat = createWechatProvider();
-//#endregion
 export { createWechatProvider, wechat };
 
 //# sourceMappingURL=wechat.mjs.map

package/dist/oauth2/provider/x.cjs

@@ -2,7 +2,7 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_oauth2_error = require("../error.cjs");
 const require_oauth2_provider_common = require("./common.cjs");
 let _shware_utils = require("@shware/utils");
-//#region src/oauth2/provider/x.ts
+// src/oauth2/provider/x.ts
 const defaultUserFields = [
 	"id",
 	"name",
@@ -99,7 +99,6 @@ function createXProvider(options) {
 	};
 }
 const x = createXProvider();
-//#endregion
 exports.createXProvider = createXProvider;
 exports.x = x;
 

package/dist/oauth2/provider/x.d.cts

@@ -1,5 +1,4 @@
 import { OAuth2Token, Provider } from "../types.cjs";
-//#region src/oauth2/provider/x.d.ts
 export interface XOptions {
   userFields?: UserField[];
 }
@@ -64,6 +63,5 @@ export interface XToken extends OAuth2Token {
   scope: string;
   refresh_token: string;
 }
-//#endregion
 export {};
 //# sourceMappingURL=x.d.cts.map