@silkweave/auth 1.4.0 → 1.5.0

package/.turbo/turbo-build.log

@@ -1,18 +1,17 @@
 
 
-> @silkweave/auth@1.3.2 build /Users/atomic/projects/ai/silkweave/packages/auth
-> tsup
+> @silkweave/auth@1.4.1 build /Users/atomic/projects/ai/silkweave/packages/auth
+> tsdown
 
-CLI Building entry: src/index.ts
-CLI Using tsconfig: tsconfig.json
-CLI tsup v8.5.1
-CLI Using tsup config: /Users/atomic/projects/ai/silkweave/packages/auth/tsup.config.ts
-CLI Target: node18
-CLI Cleaning output folder
-ESM Build start
-ESM build/index.js     26.07 KB
-ESM build/index.js.map 48.54 KB
-ESM ⚡️ Build success in 12ms
-DTS Build start
-DTS ⚡️ Build success in 527ms
-DTS build/index.d.ts 5.84 KB
+ℹ tsdown v0.21.8 powered by rolldown v1.0.0-rc.15
+ℹ config file: /Users/atomic/projects/ai/silkweave/packages/auth/tsdown.config.ts 
+ℹ entry: ./src/index.ts
+ℹ tsconfig: tsconfig.json
+ℹ Build start
+ℹ Cleaning 4 files
+ℹ build/index.mjs        24.45 kB │ gzip:  5.82 kB
+ℹ build/index.mjs.map    46.54 kB │ gzip: 11.29 kB
+ℹ build/index.d.mts.map   3.35 kB │ gzip:  0.96 kB
+ℹ build/index.d.mts       6.26 kB │ gzip:  1.51 kB
+ℹ 4 files, total: 80.59 kB
+✔ Build complete in 613ms

package/.turbo/turbo-check.log

@@ -1,12 +1,13 @@
-
-> @silkweave/auth@1.3.2 check /Users/atomic/projects/ai/silkweave/packages/auth
-> pnpm lint && pnpm typecheck
-
-
-> @silkweave/auth@1.3.2 lint /Users/atomic/projects/ai/silkweave/packages/auth
-> eslint
-
-
-> @silkweave/auth@1.3.2 typecheck /Users/atomic/projects/ai/silkweave/packages/auth
-> tsc --noEmit
-
+
+
+> @silkweave/auth@1.4.1 check /Users/atomic/projects/ai/silkweave/packages/auth
+> pnpm lint && pnpm typecheck
+
+
+> @silkweave/auth@1.4.1 lint /Users/atomic/projects/ai/silkweave/packages/auth
+> eslint
+
+
+> @silkweave/auth@1.4.1 typecheck /Users/atomic/projects/ai/silkweave/packages/auth
+> tsc --noEmit
+

package/.turbo/turbo-lint.log

@@ -1,5 +1,5 @@
 
 
-> @silkweave/auth@1.3.2 lint /Users/atomic/projects/ai/silkweave/packages/auth
+> @silkweave/auth@1.4.1 lint /Users/atomic/projects/ai/silkweave/packages/auth
 > eslint
 

package/.turbo/turbo-prepack.log

@@ -1,26 +1,24 @@
 
 
-> @silkweave/auth@1.4.0 prepack /Users/atomic/projects/ai/silkweave/packages/auth
+> @silkweave/auth@1.5.0 prepack /Users/atomic/projects/ai/silkweave/packages/auth
 > pnpm clean && pnpm build
 
 
-> @silkweave/auth@1.4.0 clean /Users/atomic/projects/ai/silkweave/packages/auth
+> @silkweave/auth@1.5.0 clean /Users/atomic/projects/ai/silkweave/packages/auth
 > rimraf build
 
 
-> @silkweave/auth@1.4.0 build /Users/atomic/projects/ai/silkweave/packages/auth
-> tsup
+> @silkweave/auth@1.5.0 build /Users/atomic/projects/ai/silkweave/packages/auth
+> tsdown
 
-CLI Building entry: src/index.ts
-CLI Using tsconfig: tsconfig.json
-CLI tsup v8.5.1
-CLI Using tsup config: /Users/atomic/projects/ai/silkweave/packages/auth/tsup.config.ts
-CLI Target: node18
-CLI Cleaning output folder
-ESM Build start
-ESM build/index.js     26.07 KB
-ESM build/index.js.map 48.54 KB
-ESM ⚡️ Build success in 9ms
-DTS Build start
-DTS ⚡️ Build success in 530ms
-DTS build/index.d.ts 5.84 KB
+ℹ tsdown v0.21.8 powered by rolldown v1.0.0-rc.15
+ℹ config file: /Users/atomic/projects/ai/silkweave/packages/auth/tsdown.config.ts 
+ℹ entry: ./src/index.ts
+ℹ tsconfig: tsconfig.json
+ℹ Build start
+ℹ build/index.mjs        24.45 kB │ gzip:  5.82 kB
+ℹ build/index.mjs.map    46.54 kB │ gzip: 11.29 kB
+ℹ build/index.d.mts.map   3.35 kB │ gzip:  0.96 kB
+ℹ build/index.d.mts       6.26 kB │ gzip:  1.51 kB
+ℹ 4 files, total: 80.59 kB
+✔ Build complete in 701ms

package/build/index.d.mts

@@ -0,0 +1,188 @@
+import { SilkweaveContext } from "@silkweave/core";
+
+//#region src/errors.d.ts
+declare class AuthError extends Error {
+  readonly code: string;
+  readonly statusCode: number;
+  constructor(message: string, code: string, statusCode?: number);
+}
+declare function invalidToken(message?: string): AuthError;
+declare function insufficientScope(message?: string): AuthError;
+//#endregion
+//#region src/extract.d.ts
+declare function extractBearerToken(header: string | null | undefined): string | null;
+declare function buildWWWAuthenticate(error?: string, description?: string, resourceMetadataUrl?: string): string;
+//#endregion
+//#region src/metadata.d.ts
+interface ProtectedResourceMetadata {
+  resource: string;
+  authorization_servers: string[];
+  scopes_supported?: string[];
+  bearer_methods_supported?: string[];
+}
+declare function generateProtectedResourceMetadata(resourceUrl: string, authorizationServers: string[]): ProtectedResourceMetadata;
+//#endregion
+//#region src/provider/types.d.ts
+interface AuthInfo {
+  token: string;
+  clientId?: string;
+  scopes?: string[];
+  expiresAt?: number;
+  [key: string]: unknown;
+}
+interface OAuthRequest {
+  method: string;
+  url: URL;
+  headers: Record<string, string | undefined>;
+  body?: Record<string, string>;
+}
+interface OAuthResponse {
+  status: number;
+  headers: Record<string, string>;
+  body?: string | Record<string, unknown>;
+}
+interface OAuthProvider {
+  authorize(req: OAuthRequest): Promise<OAuthResponse>;
+  callback(req: OAuthRequest): Promise<OAuthResponse>;
+  token(req: OAuthRequest): Promise<OAuthResponse>;
+  register(req: OAuthRequest): Promise<OAuthResponse>;
+  metadata(): OAuthResponse;
+  verifyToken(token: string): Promise<AuthInfo | undefined>;
+}
+//#endregion
+//#region src/types.d.ts
+type VerifyToken = (token: string, context: SilkweaveContext) => Promise<AuthInfo | undefined>;
+interface AuthConfig {
+  verifyToken: VerifyToken;
+  required?: boolean;
+  resourceUrl?: string;
+  authorizationServers?: string[];
+  requiredScopes?: string[];
+  provider?: OAuthProvider;
+  callbackPath?: string;
+}
+//#endregion
+//#region src/provider/store.d.ts
+interface AuthCodeData {
+  clientId: string;
+  redirectUri: string;
+  codeChallenge: string;
+  codeChallengeMethod: string;
+  scopes: string[];
+  upstreamAccessToken: string;
+  upstreamIdToken?: string;
+  email?: string;
+  sub?: string;
+  expiresAt: number;
+}
+interface PendingAuthData {
+  clientId: string;
+  redirectUri: string;
+  codeChallenge: string;
+  codeChallengeMethod: string;
+  scope: string;
+  clientState: string;
+  resource?: string;
+  expiresAt: number;
+}
+interface ClientRegistration {
+  clientId: string;
+  clientSecret: string;
+  redirectUris: string[];
+  clientName?: string;
+  createdAt: number;
+}
+interface RefreshTokenData {
+  clientId: string;
+  scopes: string[];
+  email?: string;
+  sub?: string;
+  expiresAt: number;
+}
+interface OAuthStore {
+  saveAuthCode(code: string, data: AuthCodeData): Promise<void>;
+  getAuthCode(code: string): Promise<AuthCodeData | undefined>;
+  deleteAuthCode(code: string): Promise<void>;
+  savePendingAuth(state: string, data: PendingAuthData): Promise<void>;
+  getPendingAuth(state: string): Promise<PendingAuthData | undefined>;
+  deletePendingAuth(state: string): Promise<void>;
+  savePkceVerifier(state: string, verifier: string): Promise<void>;
+  getPkceVerifier(state: string): Promise<string | undefined>;
+  deletePkceVerifier(state: string): Promise<void>;
+  saveClient(clientId: string, data: ClientRegistration): Promise<void>;
+  getClient(clientId: string): Promise<ClientRegistration | undefined>;
+  saveRefreshToken(token: string, data: RefreshTokenData): Promise<void>;
+  getRefreshToken(token: string): Promise<RefreshTokenData | undefined>;
+  deleteRefreshToken(token: string): Promise<void>;
+}
+//#endregion
+//#region src/provider/google.d.ts
+interface GoogleOAuthOptions {
+  clientId: string;
+  clientSecret: string;
+  resourceUrl: string;
+  redirectUris: string[];
+  requiredScopes?: string[];
+  callbackPath?: string;
+  signingKey?: string;
+  tokenTtl?: number;
+  store?: OAuthStore;
+}
+declare function google(options: GoogleOAuthOptions): AuthConfig;
+//#endregion
+//#region src/provider/proxy.d.ts
+interface OAuthProxyConfig {
+  authorizeUrl: string;
+  tokenUrl: string;
+  userinfoUrl?: string;
+  clientId: string;
+  clientSecret: string;
+  resourceUrl: string;
+  redirectUris: string[];
+  requiredScopes?: string[];
+  callbackPath?: string;
+  signingKey?: string;
+  tokenTtl?: number;
+  store?: OAuthStore;
+}
+declare function createOAuthProxy(config: OAuthProxyConfig): OAuthProvider;
+//#endregion
+//#region src/provider/uri.d.ts
+declare function matchRedirectUri(uri: string, patterns: string[]): boolean;
+//#endregion
+//#region src/store/json-store.d.ts
+declare function createJsonStore(path: string): OAuthStore;
+//#endregion
+//#region src/store/memory-store.d.ts
+declare function createMemoryStore(): OAuthStore;
+//#endregion
+//#region src/store/redis-store.d.ts
+interface RedisClient {
+  get(key: string): Promise<unknown>;
+  set(key: string, value: string, options?: {
+    ex?: number;
+  }): Promise<unknown>;
+  del(key: string): Promise<unknown>;
+}
+interface RedisStoreOptions {
+  client: RedisClient;
+  prefix?: string;
+}
+declare function createRedisStore(options: RedisStoreOptions): OAuthStore;
+//#endregion
+//#region src/validate.d.ts
+interface ValidateResult {
+  auth?: AuthInfo;
+  error?: {
+    statusCode: number;
+    headers: Record<string, string>;
+    body: {
+      error: string;
+      error_description: string;
+    };
+  };
+}
+declare function validateToken(authorizationHeader: string | null | undefined, config: AuthConfig, context: SilkweaveContext): Promise<ValidateResult>;
+//#endregion
+export { AuthCodeData, AuthConfig, AuthError, type AuthInfo, ClientRegistration, GoogleOAuthOptions, OAuthProvider, OAuthProxyConfig, OAuthRequest, OAuthResponse, OAuthStore, PendingAuthData, ProtectedResourceMetadata, RedisClient, RedisStoreOptions, RefreshTokenData, ValidateResult, VerifyToken, buildWWWAuthenticate, createJsonStore, createMemoryStore, createOAuthProxy, createRedisStore, extractBearerToken, generateProtectedResourceMetadata, google, insufficientScope, invalidToken, matchRedirectUri, validateToken };
+//# sourceMappingURL=index.d.mts.map

package/build/index.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.mts","names":[],"sources":["../src/errors.ts","../src/extract.ts","../src/metadata.ts","../src/provider/types.ts","../src/types.ts","../src/provider/store.ts","../src/provider/google.ts","../src/provider/proxy.ts","../src/provider/uri.ts","../src/store/json-store.ts","../src/store/memory-store.ts","../src/store/redis-store.ts","../src/validate.ts"],"mappings":";;;cAAa,SAAA,SAAkB,KAAA;EAAA,SAGX,IAAA;EAAA,SACA,UAAA;cAFhB,OAAA,UACgB,IAAA,UACA,UAAA;AAAA;AAAA,iBAOJ,YAAA,CAAa,OAAA,YAAyB,SAAA;AAAA,iBAItC,iBAAA,CAAkB,OAAA,YAA8B,SAAA;;;iBCfhD,kBAAA,CAAmB,MAAA;AAAA,iBAMnB,oBAAA,CACd,KAAA,WACA,WAAA,WACA,mBAAA;;;UCTe,yBAAA;EACf,QAAA;EACA,qBAAA;EACA,gBAAA;EACA,wBAAA;AAAA;AAAA,iBAGc,iCAAA,CACd,WAAA,UACA,oBAAA,aACC,yBAAA;;;UCVc,QAAA;EACf,KAAA;EACA,QAAA;EACA,MAAA;EACA,SAAA;EAAA,CACC,GAAA;AAAA;AAAA,UAGc,YAAA;EACf,MAAA;EACA,GAAA,EAAK,GAAA;EACL,OAAA,EAAS,MAAA;EACT,IAAA,GAAO,MAAA;AAAA;AAAA,UAGQ,aAAA;EACf,MAAA;EACA,OAAA,EAAS,MAAA;EACT,IAAA,YAAgB,MAAA;AAAA;AAAA,UAGD,aAAA;EACf,SAAA,CAAU,GAAA,EAAK,YAAA,GAAe,OAAA,CAAQ,aAAA;EACtC,QAAA,CAAS,GAAA,EAAK,YAAA,GAAe,OAAA,CAAQ,aAAA;EACrC,KAAA,CAAM,GAAA,EAAK,YAAA,GAAe,OAAA,CAAQ,aAAA;EAClC,QAAA,CAAS,GAAA,EAAK,YAAA,GAAe,OAAA,CAAQ,aAAA;EACrC,QAAA,IAAY,aAAA;EACZ,WAAA,CAAY,KAAA,WAAgB,OAAA,CAAQ,QAAA;AAAA;;;KCtB1B,WAAA,IAAe,KAAA,UAAe,OAAA,EAAS,gBAAA,KAAqB,OAAA,CAAQ,QAAA;AAAA,UAE/D,UAAA;EACf,WAAA,EAAa,WAAA;EACb,QAAA;EACA,WAAA;EACA,oBAAA;EACA,cAAA;EACA,QAAA,GAAW,aAAA;EACX,YAAA;AAAA;;;UCde,YAAA;EACf,QAAA;EACA,WAAA;EACA,aAAA;EACA,mBAAA;EACA,MAAA;EACA,mBAAA;EACA,eAAA;EACA,KAAA;EACA,GAAA;EACA,SAAA;AAAA;AAAA,UAGe,eAAA;EACf,QAAA;EACA,WAAA;EACA,aAAA;EACA,mBAAA;EACA,KAAA;EACA,WAAA;EACA,QAAA;EACA,SAAA;AAAA;AAAA,UAGe,kBAAA;EACf,QAAA;EACA,YAAA;EACA,YAAA;EACA,UAAA;EACA,SAAA;AAAA;AAAA,UAGe,gBAAA;EACf,QAAA;EACA,MAAA;EACA,KAAA;EACA,GAAA;EACA,SAAA;AAAA;AAAA,UAGe,UAAA;EACf,YAAA,CAAa,IAAA,UAAc,IAAA,EAAM,YAAA,GAAe,OAAA;EAChD,WAAA,CAAY,IAAA,WAAe,OAAA,CAAQ,YAAA;EACnC,cAAA,CAAe,IAAA,WAAe,OAAA;EAE9B,eAAA,CAAgB,KAAA,UAAe,IAAA,EAAM,eAAA,GAAkB,OAAA;EACvD,cAAA,CAAe,KAAA,WAAgB,OAAA,CAAQ,eAAA;EACvC,iBAAA,CAAkB,KAAA,WAAgB,OAAA;EAElC,gBAAA,CAAiB,KAAA,UAAe,QAAA,WAAmB,OAAA;EACnD,eAAA,CAAgB,KAAA,WAAgB,OAAA;EAChC,kBAAA,CAAmB,KAAA,WAAgB,OAAA;EAEnC,UAAA,CAAW,QAAA,UAAkB,IAAA,EAAM,kBAAA,GAAqB,OAAA;EACxD,SAAA,CAAU,QAAA,WAAmB,OAAA,CAAQ,kBAAA;EAErC,gBAAA,CAAiB,KAAA,UAAe,IAAA,EAAM,gBAAA,GAAmB,OAAA;EACzD,eAAA,CAAgB,KAAA,WAAgB,OAAA,CAAQ,gBAAA;EACxC,kBAAA,CAAmB,KAAA,WAAgB,OAAA;AAAA;;;UCtDpB,kBAAA;EACf,QAAA;EACA,YAAA;EACA,WAAA;EACA,YAAA;EACA,cAAA;EACA,YAAA;EACA,UAAA;EACA,QAAA;EACA,KAAA,GAAQ,UAAA;AAAA;AAAA,iBAGM,MAAA,CAAO,OAAA,EAAS,kBAAA,GAAqB,UAAA;;;UCTpC,gBAAA;EACf,YAAA;EACA,QAAA;EACA,WAAA;EACA,QAAA;EACA,YAAA;EACA,WAAA;EACA,YAAA;EACA,cAAA;EACA,YAAA;EACA,UAAA;EACA,QAAA;EACA,KAAA,GAAQ,UAAA;AAAA;AAAA,iBA2SM,gBAAA,CAAiB,MAAA,EAAQ,gBAAA,GAAmB,aAAA;;;iBC9T5C,gBAAA,CAAiB,GAAA,UAAa,QAAA;;;iBCwC9B,eAAA,CAAgB,IAAA,WAAe,UAAA;;;iBC5B/B,iBAAA,CAAA,GAAqB,UAAA;;;UCVpB,WAAA;EACf,GAAA,CAAI,GAAA,WAAc,OAAA;EAClB,GAAA,CAAI,GAAA,UAAa,KAAA,UAAe,OAAA;IAAY,EAAA;EAAA,IAAgB,OAAA;EAC5D,GAAA,CAAI,GAAA,WAAc,OAAA;AAAA;AAAA,UAGH,iBAAA;EACf,MAAA,EAAQ,WAAA;EACR,MAAA;AAAA;AAAA,iBAGc,gBAAA,CAAiB,OAAA,EAAS,iBAAA,GAAoB,UAAA;;;UCR7C,cAAA;EACf,IAAA,GAAO,QAAA;EACP,KAAA;IACE,UAAA;IACA,OAAA,EAAS,MAAA;IACT,IAAA;MAAQ,KAAA;MAAe,iBAAA;IAAA;EAAA;AAAA;AAAA,iBAIL,aAAA,CACpB,mBAAA,6BACA,MAAA,EAAQ,UAAA,EACR,OAAA,EAAS,gBAAA,GACR,OAAA,CAAQ,cAAA"}