@stackframe/js 2.7.20 → 2.7.22

package/dist/admin-app-impl-s-tPjfRz.d.mts

@@ -0,0 +1,357 @@
+import * as _stackframe_stack_shared_dist_sessions from '@stackframe/stack-shared/dist/sessions';
+import { InternalSession } from '@stackframe/stack-shared/dist/sessions';
+import * as _stackframe_stack_shared_dist_interface_crud_current_user from '@stackframe/stack-shared/dist/interface/crud/current-user';
+import { CurrentUserCrud } from '@stackframe/stack-shared/dist/interface/crud/current-user';
+import { S as StackClientAppConstructorOptions, a as StackClientApp, P as Project, T as TeamUser, b as TeamInvitation, c as Team, A as Auth, E as EditableTeamMemberProfile, B as BaseUser, U as UserExtra, I as InternalUserExtra, d as ProjectCurrentUser, e as UserUpdateOptions, f as AdminOwnedProject, g as AdminProjectUpdateOptions, h as StackClientAppJson, i as StackServerAppConstructorOptions, j as ServerUser, k as ServerTeamUser, l as ProjectCurrentServerUser, m as ServerTeam, n as ServerUserCreateOptions, o as ServerListUsersOptions, p as ServerTeamCreateOptions, q as StackAdminAppConstructorOptions, r as AdminProject } from './index-COYzPcGI.mjs';
+import { TokenStoreInit, RedirectMethod, HandlerUrls, OAuthScopesOnSignIn, RequestLike, RedirectToOptions, GetUserOptions, stackAppInternalsSymbol, EmailConfig } from './lib/stack-app/common.mjs';
+import { StackClientInterface, KnownErrors, StackServerInterface, StackAdminInterface } from '@stackframe/stack-shared';
+import { Result } from '@stackframe/stack-shared/dist/utils/results';
+import { TeamPermission, AdminTeamPermission, AdminTeamPermissionDefinition, AdminTeamPermissionDefinitionCreateOptions, AdminTeamPermissionDefinitionUpdateOptions } from './lib/stack-app/permissions/index.mjs';
+import { ApiKeyCreateCrudResponse } from '@stackframe/stack-shared/dist/interface/adminInterface';
+import { ApiKeysCrud } from '@stackframe/stack-shared/dist/interface/crud/api-keys';
+import { EmailTemplateCrud, EmailTemplateType } from '@stackframe/stack-shared/dist/interface/crud/email-templates';
+import { ProjectsCrud, InternalProjectsCrud } from '@stackframe/stack-shared/dist/interface/crud/projects';
+import { ApiKeyBaseCrudRead, ApiKeyBase, ApiKey, ApiKeyFirstView, ApiKeyCreateOptions } from './lib/stack-app/api-keys/index.mjs';
+import { AdminEmailTemplate, AdminEmailTemplateUpdateOptions } from './lib/stack-app/email-templates/index.mjs';
+import { ContactChannelsCrud } from '@stackframe/stack-shared/dist/interface/crud/contact-channels';
+import { TeamInvitationCrud } from '@stackframe/stack-shared/dist/interface/crud/team-invitation';
+import { TeamMemberProfilesCrud } from '@stackframe/stack-shared/dist/interface/crud/team-member-profiles';
+import { TeamPermissionsCrud, TeamPermissionDefinitionsCrud } from '@stackframe/stack-shared/dist/interface/crud/team-permissions';
+import { TeamsCrud } from '@stackframe/stack-shared/dist/interface/crud/teams';
+import { UsersCrud } from '@stackframe/stack-shared/dist/interface/crud/users';
+import { ContactChannel, ServerContactChannel } from './lib/stack-app/contact-channels/index.mjs';
+import { ProviderType } from '@stackframe/stack-shared/dist/utils/oauth';
+import { Store } from '@stackframe/stack-shared/dist/utils/stores';
+import { CookieHelper } from './lib/cookie.mjs';
+import { TokenObject } from './lib/stack-app/apps/implementations/common.mjs';
+
+declare class _StackClientAppImplIncomplete<HasTokenStore extends boolean, ProjectId extends string = string> {
+    protected readonly _options: {
+        uniqueIdentifier?: string;
+        checkString?: string;
+    } & (StackClientAppConstructorOptions<HasTokenStore, ProjectId> | Exclude<StackClientAppConstructorOptions<HasTokenStore, ProjectId>, "baseUrl" | "projectId" | "publishableClientKey"> & {
+        interface: StackClientInterface;
+    });
+    /**
+     * There is a circular dependency between the admin app and the client app, as the former inherits from the latter and
+     * the latter needs to use the former when creating a new instance of an internal project.
+     *
+     * To break it, we set the admin app here lazily instead of importing it directly. This variable is set by ./index.ts,
+     * which imports both this file and ./admin-app-impl.ts.
+     */
+    static readonly LazyStackAdminAppImpl: {
+        value: typeof _StackAdminAppImplIncomplete | undefined;
+    };
+    protected _uniqueIdentifier: string | undefined;
+    protected _interface: StackClientInterface;
+    protected readonly _tokenStoreInit: TokenStoreInit<HasTokenStore>;
+    protected readonly _redirectMethod: RedirectMethod | undefined;
+    protected readonly _urlOptions: Partial<HandlerUrls>;
+    protected readonly _oauthScopesOnSignIn: Partial<OAuthScopesOnSignIn>;
+    private __DEMO_ENABLE_SLIGHT_FETCH_DELAY;
+    private readonly _ownedAdminApps;
+    private readonly _currentUserCache;
+    private readonly _currentProjectCache;
+    private readonly _ownedProjectsCache;
+    private readonly _currentUserPermissionsCache;
+    private readonly _currentUserTeamsCache;
+    private readonly _currentUserOAuthConnectionAccessTokensCache;
+    private readonly _currentUserOAuthConnectionCache;
+    private readonly _teamMemberProfilesCache;
+    private readonly _teamInvitationsCache;
+    private readonly _currentUserTeamProfileCache;
+    private readonly _clientContactChannelsCache;
+    protected _createCookieHelper(): Promise<CookieHelper>;
+    protected _getUserOAuthConnectionCacheFn(options: {
+        getUser: () => Promise<CurrentUserCrud['Client']['Read'] | null>;
+        getOrWaitOAuthToken: () => Promise<{
+            accessToken: string;
+        } | null>;
+        providerId: ProviderType;
+        scope: string | null;
+    } & ({
+        redirect: true;
+        session: InternalSession | null;
+    } | {
+        redirect: false;
+    })): Promise<{
+        id: "google" | "github" | "microsoft" | "spotify" | "facebook" | "discord" | "gitlab" | "bitbucket" | "linkedin" | "apple" | "x";
+        getAccessToken(): Promise<{
+            accessToken: string;
+        }>;
+    } | null>;
+    constructor(_options: {
+        uniqueIdentifier?: string;
+        checkString?: string;
+    } & (StackClientAppConstructorOptions<HasTokenStore, ProjectId> | Exclude<StackClientAppConstructorOptions<HasTokenStore, ProjectId>, "baseUrl" | "projectId" | "publishableClientKey"> & {
+        interface: StackClientInterface;
+    }));
+    protected _initUniqueIdentifier(): void;
+    /**
+     * Cloudflare workers does not allow use of randomness on the global scope (on which the Stack app is probably
+     * initialized). For that reason, we generate the unique identifier lazily when it is first needed instead of in the
+     * constructor.
+     */
+    protected _getUniqueIdentifier(): string;
+    protected _checkFeatureSupport(name: string, options: any): Promise<never>;
+    protected _useCheckFeatureSupport(name: string, options: any): never;
+    protected _memoryTokenStore: Store<TokenObject>;
+    protected _nextServerCookiesTokenStores: WeakMap<object, Store<TokenObject>>;
+    protected _requestTokenStores: WeakMap<RequestLike, Store<TokenObject>>;
+    protected _storedBrowserCookieTokenStore: Store<TokenObject> | null;
+    protected get _refreshTokenCookieName(): string;
+    protected _getTokensFromCookies(cookies: {
+        refreshTokenCookie: string | null;
+        accessTokenCookie: string | null;
+    }): TokenObject;
+    protected get _accessTokenCookieName(): string;
+    protected _getBrowserCookieTokenStore(): Store<TokenObject>;
+    protected _getOrCreateTokenStore(cookieHelper: CookieHelper, overrideTokenStoreInit?: TokenStoreInit): Store<TokenObject>;
+    /**
+     * A map from token stores and session keys to sessions.
+     *
+     * This isn't just a map from session keys to sessions for two reasons:
+     *
+     * - So we can garbage-collect Session objects when the token store is garbage-collected
+     * - So different token stores are separated and don't leak information between each other, eg. if the same user sends two requests to the same server they should get a different session object
+     */
+    private _sessionsByTokenStoreAndSessionKey;
+    protected _getSessionFromTokenStore(tokenStore: Store<TokenObject>): InternalSession;
+    protected _getSession(overrideTokenStoreInit?: TokenStoreInit): Promise<InternalSession>;
+    protected _signInToAccountWithTokens(tokens: {
+        accessToken: string | null;
+        refreshToken: string;
+    }): Promise<void>;
+    protected _hasPersistentTokenStore(overrideTokenStoreInit?: TokenStoreInit): this is StackClientApp<true, ProjectId>;
+    protected _ensurePersistentTokenStore(overrideTokenStoreInit?: TokenStoreInit): asserts this is StackClientApp<true, ProjectId>;
+    protected _isInternalProject(): this is {
+        projectId: "internal";
+    };
+    protected _ensureInternalProject(): asserts this is {
+        projectId: "internal";
+    };
+    protected _clientProjectFromCrud(crud: ProjectsCrud['Client']['Read']): Project;
+    protected _clientTeamPermissionFromCrud(crud: TeamPermissionsCrud['Client']['Read']): TeamPermission;
+    protected _clientTeamUserFromCrud(crud: TeamMemberProfilesCrud['Client']['Read']): TeamUser;
+    protected _clientTeamInvitationFromCrud(session: InternalSession, crud: TeamInvitationCrud['Client']['Read']): TeamInvitation;
+    protected _clientTeamFromCrud(crud: TeamsCrud['Client']['Read'], session: InternalSession): Team;
+    protected _clientContactChannelFromCrud(crud: ContactChannelsCrud['Client']['Read'], session: InternalSession): ContactChannel;
+    protected _createAuth(session: InternalSession): Auth;
+    protected _editableTeamProfileFromCrud(crud: TeamMemberProfilesCrud['Client']['Read'], session: InternalSession): EditableTeamMemberProfile;
+    protected _createBaseUser(crud: NonNullable<CurrentUserCrud['Client']['Read']> | UsersCrud['Server']['Read']): BaseUser;
+    protected _createUserExtraFromCurrent(crud: NonNullable<CurrentUserCrud['Client']['Read']>, session: InternalSession): UserExtra;
+    protected _createInternalUserExtra(session: InternalSession): InternalUserExtra;
+    protected _currentUserFromCrud(crud: NonNullable<CurrentUserCrud['Client']['Read']>, session: InternalSession): ProjectCurrentUser<ProjectId>;
+    protected _getOwnedAdminApp(forProjectId: string, session: InternalSession): _StackAdminAppImplIncomplete<false, string>;
+    get projectId(): ProjectId;
+    protected _isTrusted(url: string): Promise<boolean>;
+    get urls(): Readonly<HandlerUrls>;
+    protected _getCurrentUrl(): Promise<URL | null>;
+    protected _redirectTo(options: {
+        url: URL | string;
+        replace?: boolean;
+    }): Promise<void>;
+    protected _redirectIfTrusted(url: string, options?: RedirectToOptions): Promise<void>;
+    protected _redirectToHandler(handlerName: keyof HandlerUrls, options?: RedirectToOptions): Promise<void>;
+    redirectToSignIn(options?: RedirectToOptions): Promise<void>;
+    redirectToSignUp(options?: RedirectToOptions): Promise<void>;
+    redirectToSignOut(options?: RedirectToOptions): Promise<void>;
+    redirectToEmailVerification(options?: RedirectToOptions): Promise<void>;
+    redirectToPasswordReset(options?: RedirectToOptions): Promise<void>;
+    redirectToForgotPassword(options?: RedirectToOptions): Promise<void>;
+    redirectToHome(options?: RedirectToOptions): Promise<void>;
+    redirectToOAuthCallback(options?: RedirectToOptions): Promise<void>;
+    redirectToMagicLinkCallback(options?: RedirectToOptions): Promise<void>;
+    redirectToAfterSignIn(options?: RedirectToOptions): Promise<void>;
+    redirectToAfterSignUp(options?: RedirectToOptions): Promise<void>;
+    redirectToAfterSignOut(options?: RedirectToOptions): Promise<void>;
+    redirectToAccountSettings(options?: RedirectToOptions): Promise<void>;
+    redirectToError(options?: RedirectToOptions): Promise<void>;
+    redirectToTeamInvitation(options?: RedirectToOptions): Promise<void>;
+    sendForgotPasswordEmail(email: string, options?: {
+        callbackUrl?: string;
+    }): Promise<Result<undefined, KnownErrors["UserNotFound"]>>;
+    sendMagicLinkEmail(email: string, options?: {
+        callbackUrl?: string;
+    }): Promise<Result<{
+        nonce: string;
+    }, KnownErrors["RedirectUrlNotWhitelisted"]>>;
+    resetPassword(options: {
+        password: string;
+        code: string;
+    }): Promise<Result<undefined, KnownErrors["VerificationCodeError"]>>;
+    verifyPasswordResetCode(code: string): Promise<Result<undefined, KnownErrors["VerificationCodeError"]>>;
+    verifyTeamInvitationCode(code: string): Promise<Result<undefined, KnownErrors["VerificationCodeError"]>>;
+    acceptTeamInvitation(code: string): Promise<Result<undefined, KnownErrors["VerificationCodeError"]>>;
+    getTeamInvitationDetails(code: string): Promise<Result<{
+        teamDisplayName: string;
+    }, KnownErrors["VerificationCodeError"]>>;
+    verifyEmail(code: string): Promise<Result<undefined, KnownErrors["VerificationCodeError"]>>;
+    getUser(options: GetUserOptions<HasTokenStore> & {
+        or: 'redirect';
+    }): Promise<ProjectCurrentUser<ProjectId>>;
+    getUser(options: GetUserOptions<HasTokenStore> & {
+        or: 'throw';
+    }): Promise<ProjectCurrentUser<ProjectId>>;
+    getUser(options?: GetUserOptions<HasTokenStore>): Promise<ProjectCurrentUser<ProjectId> | null>;
+    protected _updateClientUser(update: UserUpdateOptions, session: InternalSession): Promise<void>;
+    signInWithOAuth(provider: ProviderType): Promise<void>;
+    /**
+     * @deprecated
+     * TODO remove
+     */
+    protected _experimentalMfa(error: KnownErrors['MultiFactorAuthenticationRequired'], session: InternalSession): Promise<{
+        accessToken: any;
+        refreshToken: any;
+        newUser: any;
+    }>;
+    /**
+     * @deprecated
+     * TODO remove
+     */
+    protected _catchMfaRequiredError<T, E>(callback: () => Promise<Result<T, E>>): Promise<Result<T | {
+        accessToken: string;
+        refreshToken: string;
+        newUser: boolean;
+    }, E>>;
+    signInWithCredential(options: {
+        email: string;
+        password: string;
+        noRedirect?: boolean;
+    }): Promise<Result<undefined, KnownErrors["EmailPasswordMismatch"] | KnownErrors["InvalidTotpCode"]>>;
+    signUpWithCredential(options: {
+        email: string;
+        password: string;
+        noRedirect?: boolean;
+        verificationCallbackUrl?: string;
+    }): Promise<Result<undefined, KnownErrors["UserEmailAlreadyExists"] | KnownErrors['PasswordRequirementsNotMet']>>;
+    signInWithMagicLink(code: string): Promise<Result<undefined, KnownErrors["VerificationCodeError"] | KnownErrors["InvalidTotpCode"]>>;
+    signInWithPasskey(): Promise<Result<undefined, KnownErrors["PasskeyAuthenticationFailed"] | KnownErrors["InvalidTotpCode"] | KnownErrors["PasskeyWebAuthnError"]>>;
+    callOAuthCallback(): Promise<boolean>;
+    protected _signOut(session: InternalSession, options?: {
+        redirectUrl?: URL | string;
+    }): Promise<void>;
+    signOut(options?: {
+        redirectUrl?: URL | string;
+    }): Promise<void>;
+    getProject(): Promise<Project>;
+    protected _listOwnedProjects(session: InternalSession): Promise<AdminOwnedProject[]>;
+    protected _createProject(session: InternalSession, newProject: AdminProjectUpdateOptions & {
+        displayName: string;
+    }): Promise<AdminOwnedProject>;
+    protected _refreshUser(session: InternalSession): Promise<void>;
+    protected _refreshSession(session: InternalSession): Promise<void>;
+    protected _refreshUsers(): Promise<void>;
+    protected _refreshProject(): Promise<void>;
+    protected _refreshOwnedProjects(session: InternalSession): Promise<void>;
+    static get [stackAppInternalsSymbol](): {
+        fromClientJson: <HasTokenStore extends boolean, ProjectId extends string>(json: StackClientAppJson<HasTokenStore, ProjectId>) => StackClientApp<HasTokenStore, ProjectId>;
+    };
+    get [stackAppInternalsSymbol](): {
+        toClientJson: () => StackClientAppJson<HasTokenStore, ProjectId>;
+        setCurrentUser: (userJsonPromise: Promise<CurrentUserCrud["Client"]["Read"] | null>) => void;
+        sendRequest: (path: string, requestOptions: RequestInit, requestType?: "client" | "server" | "admin") => Promise<Response & {
+            usedTokens: {
+                accessToken: _stackframe_stack_shared_dist_sessions.AccessToken;
+                refreshToken: _stackframe_stack_shared_dist_sessions.RefreshToken | null;
+            } | null;
+        }>;
+    };
+}
+
+declare class _StackServerAppImplIncomplete<HasTokenStore extends boolean, ProjectId extends string> extends _StackClientAppImplIncomplete<HasTokenStore, ProjectId> {
+    protected _interface: StackServerInterface;
+    private readonly _currentServerUserCache;
+    private readonly _serverUsersCache;
+    private readonly _serverUserCache;
+    private readonly _serverTeamsCache;
+    private readonly _serverTeamUserPermissionsCache;
+    private readonly _serverUserOAuthConnectionAccessTokensCache;
+    private readonly _serverUserOAuthConnectionCache;
+    private readonly _serverTeamMemberProfilesCache;
+    private readonly _serverTeamInvitationsCache;
+    private readonly _serverUserTeamProfileCache;
+    private readonly _serverContactChannelsCache;
+    private _updateServerUser;
+    protected _serverEditableTeamProfileFromCrud(crud: TeamMemberProfilesCrud['Client']['Read']): EditableTeamMemberProfile;
+    protected _serverContactChannelFromCrud(userId: string, crud: ContactChannelsCrud['Server']['Read']): ServerContactChannel;
+    constructor(options: StackServerAppConstructorOptions<HasTokenStore, ProjectId> | {
+        interface: StackServerInterface;
+        tokenStore: TokenStoreInit<HasTokenStore>;
+        urls: Partial<HandlerUrls> | undefined;
+        oauthScopesOnSignIn?: Partial<OAuthScopesOnSignIn> | undefined;
+    });
+    protected _serverUserFromCrud(crud: UsersCrud['Server']['Read']): ServerUser;
+    protected _serverTeamUserFromCrud(crud: TeamMemberProfilesCrud["Server"]["Read"]): ServerTeamUser;
+    protected _serverTeamInvitationFromCrud(crud: TeamInvitationCrud['Server']['Read']): TeamInvitation;
+    protected _currentUserFromCrud(crud: UsersCrud['Server']['Read'], session: InternalSession): ProjectCurrentServerUser<ProjectId>;
+    protected _serverTeamFromCrud(crud: TeamsCrud['Server']['Read']): ServerTeam;
+    createUser(options: ServerUserCreateOptions): Promise<ServerUser>;
+    getUser(options: GetUserOptions<HasTokenStore> & {
+        or: 'redirect';
+    }): Promise<ProjectCurrentServerUser<ProjectId>>;
+    getUser(options: GetUserOptions<HasTokenStore> & {
+        or: 'throw';
+    }): Promise<ProjectCurrentServerUser<ProjectId>>;
+    getUser(options?: GetUserOptions<HasTokenStore>): Promise<ProjectCurrentServerUser<ProjectId> | null>;
+    getUser(id: string): Promise<ServerUser | null>;
+    getServerUser(): Promise<ProjectCurrentServerUser<ProjectId> | null>;
+    getServerUserById(userId: string): Promise<ServerUser | null>;
+    listUsers(options?: ServerListUsersOptions): Promise<ServerUser[] & {
+        nextCursor: string | null;
+    }>;
+    _serverPermissionFromCrud(crud: TeamPermissionsCrud['Server']['Read']): AdminTeamPermission;
+    _serverTeamPermissionDefinitionFromCrud(crud: TeamPermissionDefinitionsCrud['Admin']['Read']): AdminTeamPermissionDefinition;
+    listTeams(): Promise<ServerTeam[]>;
+    createTeam(data: ServerTeamCreateOptions): Promise<ServerTeam>;
+    getTeam(teamId: string): Promise<ServerTeam | null>;
+    protected _refreshSession(session: InternalSession): Promise<void>;
+    protected _refreshUsers(): Promise<void>;
+}
+
+declare class _StackAdminAppImplIncomplete<HasTokenStore extends boolean, ProjectId extends string> extends _StackServerAppImplIncomplete<HasTokenStore, ProjectId> {
+    protected _interface: StackAdminInterface;
+    private readonly _adminProjectCache;
+    private readonly _apiKeysCache;
+    private readonly _adminEmailTemplatesCache;
+    private readonly _adminTeamPermissionDefinitionsCache;
+    private readonly _svixTokenCache;
+    private readonly _metricsCache;
+    constructor(options: StackAdminAppConstructorOptions<HasTokenStore, ProjectId>);
+    _adminOwnedProjectFromCrud(data: InternalProjectsCrud['Admin']['Read'], onRefresh: () => Promise<void>): AdminOwnedProject;
+    _adminProjectFromCrud(data: InternalProjectsCrud['Admin']['Read'], onRefresh: () => Promise<void>): AdminProject;
+    _adminEmailTemplateFromCrud(data: EmailTemplateCrud['Admin']['Read']): AdminEmailTemplate;
+    getProject(): Promise<AdminProject>;
+    protected _createApiKeyBaseFromCrud(data: ApiKeyBaseCrudRead): ApiKeyBase;
+    protected _createApiKeyFromCrud(data: ApiKeysCrud["Admin"]["Read"]): ApiKey;
+    protected _createApiKeyFirstViewFromCrud(data: ApiKeyCreateCrudResponse): ApiKeyFirstView;
+    listApiKeys(): Promise<ApiKey[]>;
+    createApiKey(options: ApiKeyCreateOptions): Promise<ApiKeyFirstView>;
+    listEmailTemplates(): Promise<AdminEmailTemplate[]>;
+    updateEmailTemplate(type: EmailTemplateType, data: AdminEmailTemplateUpdateOptions): Promise<void>;
+    resetEmailTemplate(type: EmailTemplateType): Promise<void>;
+    createTeamPermissionDefinition(data: AdminTeamPermissionDefinitionCreateOptions): Promise<AdminTeamPermission>;
+    updateTeamPermissionDefinition(permissionId: string, data: AdminTeamPermissionDefinitionUpdateOptions): Promise<void>;
+    deleteTeamPermissionDefinition(permissionId: string): Promise<void>;
+    listTeamPermissionDefinitions(): Promise<AdminTeamPermissionDefinition[]>;
+    protected _refreshProject(): Promise<void>;
+    protected _refreshApiKeys(): Promise<void>;
+    get [stackAppInternalsSymbol](): {
+        toClientJson: () => StackClientAppJson<HasTokenStore, ProjectId>;
+        setCurrentUser: (userJsonPromise: Promise<_stackframe_stack_shared_dist_interface_crud_current_user.CurrentUserCrud["Client"]["Read"] | null>) => void;
+        sendRequest: (path: string, requestOptions: RequestInit, requestType?: "client" | "server" | "admin") => Promise<Response & {
+            usedTokens: {
+                accessToken: _stackframe_stack_shared_dist_sessions.AccessToken;
+                refreshToken: _stackframe_stack_shared_dist_sessions.RefreshToken | null;
+            } | null;
+        }>;
+    };
+    sendTestEmail(options: {
+        recipientEmail: string;
+        emailConfig: EmailConfig;
+    }): Promise<Result<undefined, {
+        errorMessage: string;
+    }>>;
+}
+
+export { _StackAdminAppImplIncomplete as _, _StackClientAppImplIncomplete as a, _StackServerAppImplIncomplete as b };

package/dist/esm/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/index.ts"],"sourcesContent":["//===========================================\n// THIS FILE IS AUTO-GENERATED FROM TEMPLATE. DO NOT EDIT IT DIRECTLY\n//===========================================\n\nexport * from './lib/stack-app';\n\n"],"mappings":";AAIA,cAAc;","names":[]}
+{"version":3,"sources":["../../src/index.ts"],"sourcesContent":["\n//===========================================\n// THIS FILE IS AUTO-GENERATED FROM TEMPLATE. DO NOT EDIT IT DIRECTLY\n//===========================================\nexport * from './lib/stack-app';\n\n"],"mappings":";AAIA,cAAc;","names":[]}

package/dist/esm/lib/auth.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/lib/auth.ts"],"sourcesContent":["//===========================================\n// THIS FILE IS AUTO-GENERATED FROM TEMPLATE. DO NOT EDIT IT DIRECTLY\n//===========================================\n\nimport { KnownError, StackClientInterface } from \"@stackframe/stack-shared\";\nimport { InternalSession } from \"@stackframe/stack-shared/dist/sessions\";\nimport { StackAssertionError, throwErr } from \"@stackframe/stack-shared/dist/utils/errors\";\nimport { neverResolve } from \"@stackframe/stack-shared/dist/utils/promises\";\nimport { Result } from \"@stackframe/stack-shared/dist/utils/results\";\nimport { deindent } from \"@stackframe/stack-shared/dist/utils/strings\";\nimport { constructRedirectUrl } from \"../utils/url\";\nimport { consumeVerifierAndStateCookie, saveVerifierAndState } from \"./cookie\";\n\nexport async function signInWithOAuth(\n  iface: StackClientInterface,\n  options: {\n    provider: string,\n    redirectUrl: string,\n    errorRedirectUrl: string,\n    providerScope?: string,\n  }\n) {\n  const { codeChallenge, state } = await saveVerifierAndState();\n  const location = await iface.getOAuthUrl({\n    provider: options.provider,\n    redirectUrl: constructRedirectUrl(options.redirectUrl),\n    errorRedirectUrl: constructRedirectUrl(options.errorRedirectUrl),\n    codeChallenge,\n    state,\n    type: \"authenticate\",\n    providerScope: options.providerScope,\n  });\n  window.location.assign(location);\n  await neverResolve();\n}\n\nexport async function addNewOAuthProviderOrScope(\n  iface: StackClientInterface,\n  options: {\n    provider: string,\n    redirectUrl: string,\n    errorRedirectUrl: string,\n    providerScope?: string,\n  },\n  session: InternalSession,\n) {\n  const { codeChallenge, state } = await saveVerifierAndState();\n  const location = await iface.getOAuthUrl({\n    provider: options.provider,\n    redirectUrl: constructRedirectUrl(options.redirectUrl),\n    errorRedirectUrl: constructRedirectUrl(options.errorRedirectUrl),\n    afterCallbackRedirectUrl: constructRedirectUrl(window.location.href),\n    codeChallenge,\n    state,\n    type: \"link\",\n    session,\n    providerScope: options.providerScope,\n  });\n  window.location.assign(location);\n  await neverResolve();\n}\n\n/**\n * Checks if the current URL has the query parameters for an OAuth callback, and if so, removes them.\n *\n * Must be synchronous for the logic in callOAuthCallback to work without race conditions.\n */\nfunction consumeOAuthCallbackQueryParams() {\n  const requiredParams = [\"code\", \"state\"];\n  const originalUrl = new URL(window.location.href);\n  for (const param of requiredParams) {\n    if (!originalUrl.searchParams.has(param)) {\n      console.warn(new Error(`Missing required query parameter on OAuth callback: ${param}. Maybe you opened or reloaded the oauth-callback page from your history?`));\n      return null;\n    }\n  }\n\n  const expectedState = originalUrl.searchParams.get(\"state\") ?? throwErr(\"This should never happen; isn't state required above?\");\n  const cookieResult = consumeVerifierAndStateCookie(expectedState);\n\n  if (!cookieResult) {\n    // If the state can't be found in the cookies, then the callback wasn't meant for us.\n    // Maybe the website uses another OAuth library?\n    console.warn(deindent`\n      Stack found an outer OAuth callback state in the query parameters, but not in cookies.\n      \n      This could have multiple reasons:\n        - The cookie expired, because the OAuth flow took too long.\n        - The user's browser deleted the cookie, either manually or because of a very strict cookie policy.\n        - The cookie was already consumed by this page, and the user already logged in.\n        - You are using another OAuth client library with the same callback URL as Stack.\n        - The user opened the OAuth callback page from their history.\n\n      Either way, it is probably safe to ignore this warning unless you are debugging an OAuth issue.\n    `);\n    return null;\n  }\n\n\n  const newUrl = new URL(originalUrl);\n  for (const param of requiredParams) {\n    newUrl.searchParams.delete(param);\n  }\n\n  // let's get rid of the authorization code in the history as we\n  // don't redirect to `redirectUrl` if there's a validation error\n  // (as the redirectUrl might be malicious!).\n  //\n  // We use history.replaceState instead of location.assign(...) to\n  // prevent an unnecessary reload\n  window.history.replaceState({}, \"\", newUrl.toString());\n\n  return {\n    originalUrl,\n    codeVerifier: cookieResult.codeVerifier,\n    state: expectedState,\n  };\n}\n\nexport async function callOAuthCallback(\n  iface: StackClientInterface,\n  redirectUrl: string,\n) {\n  // note: this part of the function (until the return) needs\n  // to be synchronous, to prevent race conditions when\n  // callOAuthCallback is called multiple times in parallel\n  const consumed = consumeOAuthCallbackQueryParams();\n  if (!consumed) return Result.ok(undefined);\n\n  // the rest can be asynchronous (we now know that we are the\n  // intended recipient of the callback, and the only instance\n  // of callOAuthCallback that's running)\n  try {\n    return Result.ok(await iface.callOAuthCallback({\n      oauthParams: consumed.originalUrl.searchParams,\n      redirectUri: constructRedirectUrl(redirectUrl),\n      codeVerifier: consumed.codeVerifier,\n      state: consumed.state,\n    }));\n  } catch (e) {\n    if (e instanceof KnownError) {\n      throw e;\n    }\n    throw new StackAssertionError(\"Error signing in during OAuth callback. Please try again.\", { cause: e });\n  }\n}\n"],"mappings":";AAIA,SAAS,kBAAwC;AAEjD,SAAS,qBAAqB,gBAAgB;AAC9C,SAAS,oBAAoB;AAC7B,SAAS,cAAc;AACvB,SAAS,gBAAgB;AACzB,SAAS,4BAA4B;AACrC,SAAS,+BAA+B,4BAA4B;AAEpE,eAAsB,gBACpB,OACA,SAMA;AACA,QAAM,EAAE,eAAe,MAAM,IAAI,MAAM,qBAAqB;AAC5D,QAAM,WAAW,MAAM,MAAM,YAAY;AAAA,IACvC,UAAU,QAAQ;AAAA,IAClB,aAAa,qBAAqB,QAAQ,WAAW;AAAA,IACrD,kBAAkB,qBAAqB,QAAQ,gBAAgB;AAAA,IAC/D;AAAA,IACA;AAAA,IACA,MAAM;AAAA,IACN,eAAe,QAAQ;AAAA,EACzB,CAAC;AACD,SAAO,SAAS,OAAO,QAAQ;AAC/B,QAAM,aAAa;AACrB;AAEA,eAAsB,2BACpB,OACA,SAMA,SACA;AACA,QAAM,EAAE,eAAe,MAAM,IAAI,MAAM,qBAAqB;AAC5D,QAAM,WAAW,MAAM,MAAM,YAAY;AAAA,IACvC,UAAU,QAAQ;AAAA,IAClB,aAAa,qBAAqB,QAAQ,WAAW;AAAA,IACrD,kBAAkB,qBAAqB,QAAQ,gBAAgB;AAAA,IAC/D,0BAA0B,qBAAqB,OAAO,SAAS,IAAI;AAAA,IACnE;AAAA,IACA;AAAA,IACA,MAAM;AAAA,IACN;AAAA,IACA,eAAe,QAAQ;AAAA,EACzB,CAAC;AACD,SAAO,SAAS,OAAO,QAAQ;AAC/B,QAAM,aAAa;AACrB;AAOA,SAAS,kCAAkC;AACzC,QAAM,iBAAiB,CAAC,QAAQ,OAAO;AACvC,QAAM,cAAc,IAAI,IAAI,OAAO,SAAS,IAAI;AAChD,aAAW,SAAS,gBAAgB;AAClC,QAAI,CAAC,YAAY,aAAa,IAAI,KAAK,GAAG;AACxC,cAAQ,KAAK,IAAI,MAAM,uDAAuD,KAAK,2EAA2E,CAAC;AAC/J,aAAO;AAAA,IACT;AAAA,EACF;AAEA,QAAM,gBAAgB,YAAY,aAAa,IAAI,OAAO,KAAK,SAAS,uDAAuD;AAC/H,QAAM,eAAe,8BAA8B,aAAa;AAEhE,MAAI,CAAC,cAAc;AAGjB,YAAQ,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,KAWZ;AACD,WAAO;AAAA,EACT;AAGA,QAAM,SAAS,IAAI,IAAI,WAAW;AAClC,aAAW,SAAS,gBAAgB;AAClC,WAAO,aAAa,OAAO,KAAK;AAAA,EAClC;AAQA,SAAO,QAAQ,aAAa,CAAC,GAAG,IAAI,OAAO,SAAS,CAAC;AAErD,SAAO;AAAA,IACL;AAAA,IACA,cAAc,aAAa;AAAA,IAC3B,OAAO;AAAA,EACT;AACF;AAEA,eAAsB,kBACpB,OACA,aACA;AAIA,QAAM,WAAW,gCAAgC;AACjD,MAAI,CAAC,SAAU,QAAO,OAAO,GAAG,MAAS;AAKzC,MAAI;AACF,WAAO,OAAO,GAAG,MAAM,MAAM,kBAAkB;AAAA,MAC7C,aAAa,SAAS,YAAY;AAAA,MAClC,aAAa,qBAAqB,WAAW;AAAA,MAC7C,cAAc,SAAS;AAAA,MACvB,OAAO,SAAS;AAAA,IAClB,CAAC,CAAC;AAAA,EACJ,SAAS,GAAG;AACV,QAAI,aAAa,YAAY;AAC3B,YAAM;AAAA,IACR;AACA,UAAM,IAAI,oBAAoB,6DAA6D,EAAE,OAAO,EAAE,CAAC;AAAA,EACzG;AACF;","names":[]}
+{"version":3,"sources":["../../../src/lib/auth.ts"],"sourcesContent":["\n//===========================================\n// THIS FILE IS AUTO-GENERATED FROM TEMPLATE. DO NOT EDIT IT DIRECTLY\n//===========================================\nimport { KnownError, StackClientInterface } from \"@stackframe/stack-shared\";\nimport { InternalSession } from \"@stackframe/stack-shared/dist/sessions\";\nimport { StackAssertionError, throwErr } from \"@stackframe/stack-shared/dist/utils/errors\";\nimport { neverResolve } from \"@stackframe/stack-shared/dist/utils/promises\";\nimport { Result } from \"@stackframe/stack-shared/dist/utils/results\";\nimport { deindent } from \"@stackframe/stack-shared/dist/utils/strings\";\nimport { constructRedirectUrl } from \"../utils/url\";\nimport { consumeVerifierAndStateCookie, saveVerifierAndState } from \"./cookie\";\n\nexport async function signInWithOAuth(\n  iface: StackClientInterface,\n  options: {\n    provider: string,\n    redirectUrl: string,\n    errorRedirectUrl: string,\n    providerScope?: string,\n  }\n) {\n  const { codeChallenge, state } = await saveVerifierAndState();\n  const location = await iface.getOAuthUrl({\n    provider: options.provider,\n    redirectUrl: constructRedirectUrl(options.redirectUrl),\n    errorRedirectUrl: constructRedirectUrl(options.errorRedirectUrl),\n    codeChallenge,\n    state,\n    type: \"authenticate\",\n    providerScope: options.providerScope,\n  });\n  window.location.assign(location);\n  await neverResolve();\n}\n\nexport async function addNewOAuthProviderOrScope(\n  iface: StackClientInterface,\n  options: {\n    provider: string,\n    redirectUrl: string,\n    errorRedirectUrl: string,\n    providerScope?: string,\n  },\n  session: InternalSession,\n) {\n  const { codeChallenge, state } = await saveVerifierAndState();\n  const location = await iface.getOAuthUrl({\n    provider: options.provider,\n    redirectUrl: constructRedirectUrl(options.redirectUrl),\n    errorRedirectUrl: constructRedirectUrl(options.errorRedirectUrl),\n    afterCallbackRedirectUrl: constructRedirectUrl(window.location.href),\n    codeChallenge,\n    state,\n    type: \"link\",\n    session,\n    providerScope: options.providerScope,\n  });\n  window.location.assign(location);\n  await neverResolve();\n}\n\n/**\n * Checks if the current URL has the query parameters for an OAuth callback, and if so, removes them.\n *\n * Must be synchronous for the logic in callOAuthCallback to work without race conditions.\n */\nfunction consumeOAuthCallbackQueryParams() {\n  const requiredParams = [\"code\", \"state\"];\n  const originalUrl = new URL(window.location.href);\n  for (const param of requiredParams) {\n    if (!originalUrl.searchParams.has(param)) {\n      console.warn(new Error(`Missing required query parameter on OAuth callback: ${param}. Maybe you opened or reloaded the oauth-callback page from your history?`));\n      return null;\n    }\n  }\n\n  const expectedState = originalUrl.searchParams.get(\"state\") ?? throwErr(\"This should never happen; isn't state required above?\");\n  const cookieResult = consumeVerifierAndStateCookie(expectedState);\n\n  if (!cookieResult) {\n    // If the state can't be found in the cookies, then the callback wasn't meant for us.\n    // Maybe the website uses another OAuth library?\n    console.warn(deindent`\n      Stack found an outer OAuth callback state in the query parameters, but not in cookies.\n      \n      This could have multiple reasons:\n        - The cookie expired, because the OAuth flow took too long.\n        - The user's browser deleted the cookie, either manually or because of a very strict cookie policy.\n        - The cookie was already consumed by this page, and the user already logged in.\n        - You are using another OAuth client library with the same callback URL as Stack.\n        - The user opened the OAuth callback page from their history.\n\n      Either way, it is probably safe to ignore this warning unless you are debugging an OAuth issue.\n    `);\n    return null;\n  }\n\n\n  const newUrl = new URL(originalUrl);\n  for (const param of requiredParams) {\n    newUrl.searchParams.delete(param);\n  }\n\n  // let's get rid of the authorization code in the history as we\n  // don't redirect to `redirectUrl` if there's a validation error\n  // (as the redirectUrl might be malicious!).\n  //\n  // We use history.replaceState instead of location.assign(...) to\n  // prevent an unnecessary reload\n  window.history.replaceState({}, \"\", newUrl.toString());\n\n  return {\n    originalUrl,\n    codeVerifier: cookieResult.codeVerifier,\n    state: expectedState,\n  };\n}\n\nexport async function callOAuthCallback(\n  iface: StackClientInterface,\n  redirectUrl: string,\n) {\n  // note: this part of the function (until the return) needs\n  // to be synchronous, to prevent race conditions when\n  // callOAuthCallback is called multiple times in parallel\n  const consumed = consumeOAuthCallbackQueryParams();\n  if (!consumed) return Result.ok(undefined);\n\n  // the rest can be asynchronous (we now know that we are the\n  // intended recipient of the callback, and the only instance\n  // of callOAuthCallback that's running)\n  try {\n    return Result.ok(await iface.callOAuthCallback({\n      oauthParams: consumed.originalUrl.searchParams,\n      redirectUri: constructRedirectUrl(redirectUrl),\n      codeVerifier: consumed.codeVerifier,\n      state: consumed.state,\n    }));\n  } catch (e) {\n    if (e instanceof KnownError) {\n      throw e;\n    }\n    throw new StackAssertionError(\"Error signing in during OAuth callback. Please try again.\", { cause: e });\n  }\n}\n"],"mappings":";AAIA,SAAS,kBAAwC;AAEjD,SAAS,qBAAqB,gBAAgB;AAC9C,SAAS,oBAAoB;AAC7B,SAAS,cAAc;AACvB,SAAS,gBAAgB;AACzB,SAAS,4BAA4B;AACrC,SAAS,+BAA+B,4BAA4B;AAEpE,eAAsB,gBACpB,OACA,SAMA;AACA,QAAM,EAAE,eAAe,MAAM,IAAI,MAAM,qBAAqB;AAC5D,QAAM,WAAW,MAAM,MAAM,YAAY;AAAA,IACvC,UAAU,QAAQ;AAAA,IAClB,aAAa,qBAAqB,QAAQ,WAAW;AAAA,IACrD,kBAAkB,qBAAqB,QAAQ,gBAAgB;AAAA,IAC/D;AAAA,IACA;AAAA,IACA,MAAM;AAAA,IACN,eAAe,QAAQ;AAAA,EACzB,CAAC;AACD,SAAO,SAAS,OAAO,QAAQ;AAC/B,QAAM,aAAa;AACrB;AAEA,eAAsB,2BACpB,OACA,SAMA,SACA;AACA,QAAM,EAAE,eAAe,MAAM,IAAI,MAAM,qBAAqB;AAC5D,QAAM,WAAW,MAAM,MAAM,YAAY;AAAA,IACvC,UAAU,QAAQ;AAAA,IAClB,aAAa,qBAAqB,QAAQ,WAAW;AAAA,IACrD,kBAAkB,qBAAqB,QAAQ,gBAAgB;AAAA,IAC/D,0BAA0B,qBAAqB,OAAO,SAAS,IAAI;AAAA,IACnE;AAAA,IACA;AAAA,IACA,MAAM;AAAA,IACN;AAAA,IACA,eAAe,QAAQ;AAAA,EACzB,CAAC;AACD,SAAO,SAAS,OAAO,QAAQ;AAC/B,QAAM,aAAa;AACrB;AAOA,SAAS,kCAAkC;AACzC,QAAM,iBAAiB,CAAC,QAAQ,OAAO;AACvC,QAAM,cAAc,IAAI,IAAI,OAAO,SAAS,IAAI;AAChD,aAAW,SAAS,gBAAgB;AAClC,QAAI,CAAC,YAAY,aAAa,IAAI,KAAK,GAAG;AACxC,cAAQ,KAAK,IAAI,MAAM,uDAAuD,KAAK,2EAA2E,CAAC;AAC/J,aAAO;AAAA,IACT;AAAA,EACF;AAEA,QAAM,gBAAgB,YAAY,aAAa,IAAI,OAAO,KAAK,SAAS,uDAAuD;AAC/H,QAAM,eAAe,8BAA8B,aAAa;AAEhE,MAAI,CAAC,cAAc;AAGjB,YAAQ,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,KAWZ;AACD,WAAO;AAAA,EACT;AAGA,QAAM,SAAS,IAAI,IAAI,WAAW;AAClC,aAAW,SAAS,gBAAgB;AAClC,WAAO,aAAa,OAAO,KAAK;AAAA,EAClC;AAQA,SAAO,QAAQ,aAAa,CAAC,GAAG,IAAI,OAAO,SAAS,CAAC;AAErD,SAAO;AAAA,IACL;AAAA,IACA,cAAc,aAAa;AAAA,IAC3B,OAAO;AAAA,EACT;AACF;AAEA,eAAsB,kBACpB,OACA,aACA;AAIA,QAAM,WAAW,gCAAgC;AACjD,MAAI,CAAC,SAAU,QAAO,OAAO,GAAG,MAAS;AAKzC,MAAI;AACF,WAAO,OAAO,GAAG,MAAM,MAAM,kBAAkB;AAAA,MAC7C,aAAa,SAAS,YAAY;AAAA,MAClC,aAAa,qBAAqB,WAAW;AAAA,MAC7C,cAAc,SAAS;AAAA,MACvB,OAAO,SAAS;AAAA,IAClB,CAAC,CAAC;AAAA,EACJ,SAAS,GAAG;AACV,QAAI,aAAa,YAAY;AAC3B,YAAM;AAAA,IACR;AACA,UAAM,IAAI,oBAAoB,6DAA6D,EAAE,OAAO,EAAE,CAAC;AAAA,EACzG;AACF;","names":[]}

package/dist/esm/lib/cookie.js

@@ -136,15 +136,12 @@ function ensureClient() {
     throw new Error("cookieClient functions can only be called in a browser environment, yet window is undefined");
   }
 }
-async function createEmptyCookieHelper() {
+async function createPlaceholderCookieHelper() {
   function throwError() {
-    throw new StackAssertionError("Empty cookie helper is just a placeholder. This should never be called");
+    throw new StackAssertionError("Throwing cookie helper is just a placeholder. This should never be called");
   }
   return {
-    get: () => {
-      throwError();
-      return null;
-    },
+    get: throwError,
     set: throwError,
     setOrDelete: throwError,
     delete: throwError
@@ -154,7 +151,7 @@ async function createCookieHelper() {
   if (isBrowserLike()) {
     return createBrowserCookieHelper();
   } else {
-    return await createEmptyCookieHelper();
+    return await createPlaceholderCookieHelper();
   }
 }
 function createBrowserCookieHelper() {
@@ -230,7 +227,7 @@ export {
   consumeVerifierAndStateCookie,
   createBrowserCookieHelper,
   createCookieHelper,
-  createEmptyCookieHelper,
+  createPlaceholderCookieHelper,
   deleteCookie,
   deleteCookieClient,
   getCookie,