@strapi/plugin-users-permissions 0.0.0-experimental.6340da17068c3bed7fb006e7bcc554c71129e282 → 0.0.0-experimental.63624e21eb5b0713345a0cf2f68f1c40eab427bc

package/dist/server/utils/oauth-connect/oauth2.js

@@ -0,0 +1,117 @@
+'use strict';
+
+var _node_crypto_commonjsExternal = require('../../_virtual/_node_crypto.js');
+
+var oauth2;
+var hasRequiredOauth2;
+function requireOauth2() {
+    if (hasRequiredOauth2) return oauth2;
+    hasRequiredOauth2 = 1;
+    const crypto = _node_crypto_commonjsExternal.__require();
+    const formatScope = (scope, delimiter = ',')=>{
+        if (Array.isArray(scope)) {
+            return scope.filter(Boolean).join(delimiter) || undefined;
+        }
+        return scope || undefined;
+    };
+    const substituteSubdomain = (url, subdomain)=>subdomain ? url.replace('[subdomain]', subdomain) : url;
+    const buildAuthorizeUrl = (provider, { key, redirectUri, scope, subdomain })=>{
+        const authorizeUrl = substituteSubdomain(provider.authorize_url, subdomain);
+        const params = new URLSearchParams({
+            client_id: key,
+            response_type: 'code',
+            redirect_uri: redirectUri
+        });
+        const formattedScope = formatScope(scope, provider.scope_delimiter);
+        if (formattedScope) {
+            params.set('scope', formattedScope);
+        }
+        if (provider.name === 'instagram' && /^\d+$/.test(key)) {
+            params.delete('client_id');
+            params.set('app_id', key);
+            if (formattedScope) {
+                params.set('scope', formattedScope.replaceAll(' ', ','));
+            }
+        }
+        return `${authorizeUrl}?${params.toString()}`;
+    };
+    const parseTokenResponse = async (response)=>{
+        const contentType = response.headers.get('content-type') || '';
+        if (contentType.includes('application/json')) {
+            return response.json();
+        }
+        const text = await response.text();
+        return Object.fromEntries(new URLSearchParams(text));
+    };
+    const exchangeAuthorizationCode = async (provider, { key, secret, redirectUri, code, subdomain })=>{
+        const accessUrl = substituteSubdomain(provider.access_url, subdomain);
+        const body = new URLSearchParams({
+            grant_type: 'authorization_code',
+            code,
+            redirect_uri: redirectUri,
+            client_id: key,
+            client_secret: secret
+        });
+        const headers = {
+            'Content-Type': 'application/x-www-form-urlencoded'
+        };
+        if (provider.token_endpoint_auth_method === 'client_secret_basic') {
+            const credentials = Buffer.from(`${key}:${secret}`).toString('base64');
+            headers.Authorization = `Basic ${credentials}`;
+            body.delete('client_id');
+            body.delete('client_secret');
+        }
+        if (provider.name === 'instagram' && /^\d+$/.test(key)) {
+            body.delete('client_id');
+            body.delete('client_secret');
+            body.set('app_id', key);
+            body.set('app_secret', secret);
+        }
+        const response = await fetch(accessUrl, {
+            method: 'POST',
+            headers,
+            body
+        });
+        const output = await parseTokenResponse(response);
+        if (!response.ok) {
+            throw new Error(output.error_description || output.error || `Token exchange failed (${response.status})`);
+        }
+        return output;
+    };
+    const tokensToQueryPayload = (provider, tokenResponse)=>{
+        const data = {
+            raw: tokenResponse
+        };
+        if (provider.oauth === 1) {
+            if (tokenResponse.oauth_token) {
+                data.access_token = tokenResponse.oauth_token;
+            }
+            if (tokenResponse.oauth_token_secret) {
+                data.access_secret = tokenResponse.oauth_token_secret;
+            }
+            return data;
+        }
+        if (tokenResponse.id_token) {
+            data.id_token = tokenResponse.id_token;
+        }
+        if (tokenResponse.access_token) {
+            data.access_token = tokenResponse.access_token;
+        }
+        if (tokenResponse.refresh_token) {
+            data.refresh_token = tokenResponse.refresh_token;
+        }
+        return data;
+    };
+    const generateState = ()=>crypto.randomBytes(20).toString('hex');
+    oauth2 = {
+        buildAuthorizeUrl,
+        exchangeAuthorizationCode,
+        tokensToQueryPayload,
+        generateState,
+        substituteSubdomain
+    };
+    return oauth2;
+}
+
+exports.__require = requireOauth2;
+//# sourceMappingURL=oauth2.js.map

package/dist/server/utils/oauth-connect/oauth2.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth2.js","sources":["../../../../server/src/utils/oauth-connect/oauth2.js"],"sourcesContent":["'use strict';\n\nconst crypto = require('node:crypto');\n\nconst formatScope = (scope, delimiter = ',') => {\n  if (Array.isArray(scope)) {\n    return scope.filter(Boolean).join(delimiter) || undefined;\n  }\n  return scope || undefined;\n};\n\nconst substituteSubdomain = (url, subdomain) =>\n  subdomain ? url.replace('[subdomain]', subdomain) : url;\n\nconst buildAuthorizeUrl = (provider, { key, redirectUri, scope, subdomain }) => {\n  const authorizeUrl = substituteSubdomain(provider.authorize_url, subdomain);\n  const params = new URLSearchParams({\n    client_id: key,\n    response_type: 'code',\n    redirect_uri: redirectUri,\n  });\n\n  const formattedScope = formatScope(scope, provider.scope_delimiter);\n  if (formattedScope) {\n    params.set('scope', formattedScope);\n  }\n\n  if (provider.name === 'instagram' && /^\\d+$/.test(key)) {\n    params.delete('client_id');\n    params.set('app_id', key);\n    if (formattedScope) {\n      params.set('scope', formattedScope.replaceAll(' ', ','));\n    }\n  }\n\n  return `${authorizeUrl}?${params.toString()}`;\n};\n\nconst parseTokenResponse = async (response) => {\n  const contentType = response.headers.get('content-type') || '';\n  if (contentType.includes('application/json')) {\n    return response.json();\n  }\n  const text = await response.text();\n  return Object.fromEntries(new URLSearchParams(text));\n};\n\nconst exchangeAuthorizationCode = async (\n  provider,\n  { key, secret, redirectUri, code, subdomain }\n) => {\n  const accessUrl = substituteSubdomain(provider.access_url, subdomain);\n  const body = new URLSearchParams({\n    grant_type: 'authorization_code',\n    code,\n    redirect_uri: redirectUri,\n    client_id: key,\n    client_secret: secret,\n  });\n\n  const headers = { 'Content-Type': 'application/x-www-form-urlencoded' };\n\n  if (provider.token_endpoint_auth_method === 'client_secret_basic') {\n    const credentials = Buffer.from(`${key}:${secret}`).toString('base64');\n    headers.Authorization = `Basic ${credentials}`;\n    body.delete('client_id');\n    body.delete('client_secret');\n  }\n\n  if (provider.name === 'instagram' && /^\\d+$/.test(key)) {\n    body.delete('client_id');\n    body.delete('client_secret');\n    body.set('app_id', key);\n    body.set('app_secret', secret);\n  }\n\n  const response = await fetch(accessUrl, { method: 'POST', headers, body });\n  const output = await parseTokenResponse(response);\n\n  if (!response.ok) {\n    throw new Error(\n      output.error_description || output.error || `Token exchange failed (${response.status})`\n    );\n  }\n\n  return output;\n};\n\nconst tokensToQueryPayload = (provider, tokenResponse) => {\n  const data = { raw: tokenResponse };\n\n  if (provider.oauth === 1) {\n    if (tokenResponse.oauth_token) {\n      data.access_token = tokenResponse.oauth_token;\n    }\n    if (tokenResponse.oauth_token_secret) {\n      data.access_secret = tokenResponse.oauth_token_secret;\n    }\n    return data;\n  }\n\n  if (tokenResponse.id_token) {\n    data.id_token = tokenResponse.id_token;\n  }\n  if (tokenResponse.access_token) {\n    data.access_token = tokenResponse.access_token;\n  }\n  if (tokenResponse.refresh_token) {\n    data.refresh_token = tokenResponse.refresh_token;\n  }\n\n  return data;\n};\n\nconst generateState = () => crypto.randomBytes(20).toString('hex');\n\nmodule.exports = {\n  buildAuthorizeUrl,\n  exchangeAuthorizationCode,\n  tokensToQueryPayload,\n  generateState,\n  substituteSubdomain,\n};\n"],"names":["crypto","require$$0","formatScope","scope","delimiter","Array","isArray","filter","Boolean","join","undefined","substituteSubdomain","url","subdomain","replace","buildAuthorizeUrl","provider","key","redirectUri","authorizeUrl","authorize_url","params","URLSearchParams","client_id","response_type","redirect_uri","formattedScope","scope_delimiter","set","name","test","delete","replaceAll","toString","parseTokenResponse","response","contentType","headers","get","includes","json","text","Object","fromEntries","exchangeAuthorizationCode","secret","code","accessUrl","access_url","body","grant_type","client_secret","token_endpoint_auth_method","credentials","Buffer","from","Authorization","fetch","method","output","ok","Error","error_description","error","status","tokensToQueryPayload","tokenResponse","data","raw","oauth","oauth_token","access_token","oauth_token_secret","access_secret","id_token","refresh_token","generateState","randomBytes","oauth2"],"mappings":";;;;;;;;;AAEA,IAAA,MAAMA,MAAAA,GAASC,uCAAAA,EAAAA;AAEf,IAAA,MAAMC,WAAAA,GAAc,CAACC,KAAAA,EAAOC,SAAAA,GAAY,GAAG,GAAA;QACzC,IAAIC,KAAAA,CAAMC,OAAO,CAACH,KAAAA,CAAAA,EAAQ;AACxB,YAAA,OAAOA,MAAMI,MAAM,CAACC,OAAAA,CAAAA,CAASC,IAAI,CAACL,SAAAA,CAAAA,IAAcM,SAAAA;AACpD,QAAA;AACE,QAAA,OAAOP,KAAAA,IAASO,SAAAA;AAClB,IAAA,CAAA;IAEA,MAAMC,mBAAAA,GAAsB,CAACC,GAAAA,EAAKC,SAAAA,GAChCA,YAAYD,GAAAA,CAAIE,OAAO,CAAC,aAAA,EAAeD,SAAAA,CAAAA,GAAaD,GAAAA;IAEtD,MAAMG,iBAAAA,GAAoB,CAACC,QAAAA,EAAU,EAAEC,GAAG,EAAEC,WAAW,EAAEf,KAAK,EAAEU,SAAS,EAAE,GAAA;AACzE,QAAA,MAAMM,YAAAA,GAAeR,mBAAAA,CAAoBK,QAAAA,CAASI,aAAa,EAAEP,SAAAA,CAAAA;QACjE,MAAMQ,MAAAA,GAAS,IAAIC,eAAAA,CAAgB;YACjCC,SAAAA,EAAWN,GAAAA;YACXO,aAAAA,EAAe,MAAA;YACfC,YAAAA,EAAcP;AAClB,SAAA,CAAA;AAEE,QAAA,MAAMQ,cAAAA,GAAiBxB,WAAAA,CAAYC,KAAAA,EAAOa,QAAAA,CAASW,eAAe,CAAA;AAClE,QAAA,IAAID,cAAAA,EAAgB;YAClBL,MAAAA,CAAOO,GAAG,CAAC,OAAA,EAASF,cAAAA,CAAAA;AACxB,QAAA;AAEE,QAAA,IAAIV,SAASa,IAAI,KAAK,eAAe,OAAA,CAAQC,IAAI,CAACb,GAAAA,CAAAA,EAAM;AACtDI,YAAAA,MAAAA,CAAOU,MAAM,CAAC,WAAA,CAAA;YACdV,MAAAA,CAAOO,GAAG,CAAC,QAAA,EAAUX,GAAAA,CAAAA;AACrB,YAAA,IAAIS,cAAAA,EAAgB;AAClBL,gBAAAA,MAAAA,CAAOO,GAAG,CAAC,OAAA,EAASF,cAAAA,CAAeM,UAAU,CAAC,GAAA,EAAK,GAAA,CAAA,CAAA;AACzD,YAAA;AACA,QAAA;AAEE,QAAA,OAAO,GAAGb,YAAAA,CAAa,CAAC,EAAEE,MAAAA,CAAOY,QAAQ,EAAA,CAAA,CAAI;AAC/C,IAAA,CAAA;AAEA,IAAA,MAAMC,qBAAqB,OAAOC,QAAAA,GAAAA;AAChC,QAAA,MAAMC,cAAcD,QAAAA,CAASE,OAAO,CAACC,GAAG,CAAC,cAAA,CAAA,IAAmB,EAAA;QAC5D,IAAIF,WAAAA,CAAYG,QAAQ,CAAC,kBAAA,CAAA,EAAqB;AAC5C,YAAA,OAAOJ,SAASK,IAAI,EAAA;AACxB,QAAA;QACE,MAAMC,IAAAA,GAAO,MAAMN,QAAAA,CAASM,IAAI,EAAA;AAChC,QAAA,OAAOC,MAAAA,CAAOC,WAAW,CAAC,IAAIrB,eAAAA,CAAgBmB,IAAAA,CAAAA,CAAAA;AAChD,IAAA,CAAA;AAEA,IAAA,MAAMG,yBAAAA,GAA4B,OAChC5B,QAAAA,EACA,EAAEC,GAAG,EAAE4B,MAAM,EAAE3B,WAAW,EAAE4B,IAAI,EAAEjC,SAAS,EAAA,GAAA;AAE3C,QAAA,MAAMkC,SAAAA,GAAYpC,mBAAAA,CAAoBK,QAAAA,CAASgC,UAAU,EAAEnC,SAAAA,CAAAA;QAC3D,MAAMoC,IAAAA,GAAO,IAAI3B,eAAAA,CAAgB;YAC/B4B,UAAAA,EAAY,oBAAA;AACZJ,YAAAA,IAAAA;YACArB,YAAAA,EAAcP,WAAAA;YACdK,SAAAA,EAAWN,GAAAA;YACXkC,aAAAA,EAAeN;AACnB,SAAA,CAAA;AAEE,QAAA,MAAMR,OAAAA,GAAU;YAAE,cAAA,EAAgB;AAAmC,SAAA;QAErE,IAAIrB,QAAAA,CAASoC,0BAA0B,KAAK,qBAAA,EAAuB;YACjE,MAAMC,WAAAA,GAAcC,MAAAA,CAAOC,IAAI,CAAC,CAAA,EAAGtC,GAAAA,CAAI,CAAC,EAAE4B,MAAAA,CAAAA,CAAQ,CAAA,CAAEZ,QAAQ,CAAC,QAAA,CAAA;AAC7DI,YAAAA,OAAAA,CAAQmB,aAAa,GAAG,CAAC,MAAM,EAAEH,WAAAA,CAAAA,CAAa;AAC9CJ,YAAAA,IAAAA,CAAKlB,MAAM,CAAC,WAAA,CAAA;AACZkB,YAAAA,IAAAA,CAAKlB,MAAM,CAAC,eAAA,CAAA;AAChB,QAAA;AAEE,QAAA,IAAIf,SAASa,IAAI,KAAK,eAAe,OAAA,CAAQC,IAAI,CAACb,GAAAA,CAAAA,EAAM;AACtDgC,YAAAA,IAAAA,CAAKlB,MAAM,CAAC,WAAA,CAAA;AACZkB,YAAAA,IAAAA,CAAKlB,MAAM,CAAC,eAAA,CAAA;YACZkB,IAAAA,CAAKrB,GAAG,CAAC,QAAA,EAAUX,GAAAA,CAAAA;YACnBgC,IAAAA,CAAKrB,GAAG,CAAC,YAAA,EAAciB,MAAAA,CAAAA;AAC3B,QAAA;QAEE,MAAMV,QAAAA,GAAW,MAAMsB,KAAAA,CAAMV,SAAAA,EAAW;YAAEW,MAAAA,EAAQ,MAAA;AAAQrB,YAAAA,OAAAA;AAASY,YAAAA;;QACnE,MAAMU,MAAAA,GAAS,MAAMzB,kBAAAA,CAAmBC,QAAAA,CAAAA;QAExC,IAAI,CAACA,QAAAA,CAASyB,EAAE,EAAE;AAChB,YAAA,MAAM,IAAIC,KAAAA,CACRF,MAAAA,CAAOG,iBAAiB,IAAIH,MAAAA,CAAOI,KAAK,IAAI,CAAC,uBAAuB,EAAE5B,QAAAA,CAAS6B,MAAM,CAAC,CAAC,CAAA,CAAA;AAE7F,QAAA;QAEE,OAAOL,MAAAA;AACT,IAAA,CAAA;IAEA,MAAMM,oBAAAA,GAAuB,CAACjD,QAAAA,EAAUkD,aAAAA,GAAAA;AACtC,QAAA,MAAMC,IAAAA,GAAO;YAAEC,GAAAA,EAAKF;AAAa,SAAA;QAEjC,IAAIlD,QAAAA,CAASqD,KAAK,KAAK,CAAA,EAAG;YACxB,IAAIH,aAAAA,CAAcI,WAAW,EAAE;gBAC7BH,IAAAA,CAAKI,YAAY,GAAGL,aAAAA,CAAcI,WAAW;AACnD,YAAA;YACI,IAAIJ,aAAAA,CAAcM,kBAAkB,EAAE;gBACpCL,IAAAA,CAAKM,aAAa,GAAGP,aAAAA,CAAcM,kBAAkB;AAC3D,YAAA;YACI,OAAOL,IAAAA;AACX,QAAA;QAEE,IAAID,aAAAA,CAAcQ,QAAQ,EAAE;YAC1BP,IAAAA,CAAKO,QAAQ,GAAGR,aAAAA,CAAcQ,QAAQ;AAC1C,QAAA;QACE,IAAIR,aAAAA,CAAcK,YAAY,EAAE;YAC9BJ,IAAAA,CAAKI,YAAY,GAAGL,aAAAA,CAAcK,YAAY;AAClD,QAAA;QACE,IAAIL,aAAAA,CAAcS,aAAa,EAAE;YAC/BR,IAAAA,CAAKQ,aAAa,GAAGT,aAAAA,CAAcS,aAAa;AACpD,QAAA;QAEE,OAAOR,IAAAA;AACT,IAAA,CAAA;AAEA,IAAA,MAAMS,gBAAgB,IAAM5E,MAAAA,CAAO6E,WAAW,CAAC,EAAA,CAAA,CAAI5C,QAAQ,CAAC,KAAA,CAAA;IAE5D6C,MAAAA,GAAiB;AACf/D,QAAAA,iBAAAA;AACA6B,QAAAA,yBAAAA;AACAqB,QAAAA,oBAAAA;AACAW,QAAAA,aAAAA;AACAjE,QAAAA;AACF,KAAA;;;;;;"}

package/dist/server/utils/oauth-connect/oauth2.mjs

@@ -0,0 +1,115 @@
+import { __require } from '../../_virtual/_node_crypto.mjs';
+
+var oauth2;
+var hasRequiredOauth2;
+function requireOauth2() {
+    if (hasRequiredOauth2) return oauth2;
+    hasRequiredOauth2 = 1;
+    const crypto = __require();
+    const formatScope = (scope, delimiter = ',')=>{
+        if (Array.isArray(scope)) {
+            return scope.filter(Boolean).join(delimiter) || undefined;
+        }
+        return scope || undefined;
+    };
+    const substituteSubdomain = (url, subdomain)=>subdomain ? url.replace('[subdomain]', subdomain) : url;
+    const buildAuthorizeUrl = (provider, { key, redirectUri, scope, subdomain })=>{
+        const authorizeUrl = substituteSubdomain(provider.authorize_url, subdomain);
+        const params = new URLSearchParams({
+            client_id: key,
+            response_type: 'code',
+            redirect_uri: redirectUri
+        });
+        const formattedScope = formatScope(scope, provider.scope_delimiter);
+        if (formattedScope) {
+            params.set('scope', formattedScope);
+        }
+        if (provider.name === 'instagram' && /^\d+$/.test(key)) {
+            params.delete('client_id');
+            params.set('app_id', key);
+            if (formattedScope) {
+                params.set('scope', formattedScope.replaceAll(' ', ','));
+            }
+        }
+        return `${authorizeUrl}?${params.toString()}`;
+    };
+    const parseTokenResponse = async (response)=>{
+        const contentType = response.headers.get('content-type') || '';
+        if (contentType.includes('application/json')) {
+            return response.json();
+        }
+        const text = await response.text();
+        return Object.fromEntries(new URLSearchParams(text));
+    };
+    const exchangeAuthorizationCode = async (provider, { key, secret, redirectUri, code, subdomain })=>{
+        const accessUrl = substituteSubdomain(provider.access_url, subdomain);
+        const body = new URLSearchParams({
+            grant_type: 'authorization_code',
+            code,
+            redirect_uri: redirectUri,
+            client_id: key,
+            client_secret: secret
+        });
+        const headers = {
+            'Content-Type': 'application/x-www-form-urlencoded'
+        };
+        if (provider.token_endpoint_auth_method === 'client_secret_basic') {
+            const credentials = Buffer.from(`${key}:${secret}`).toString('base64');
+            headers.Authorization = `Basic ${credentials}`;
+            body.delete('client_id');
+            body.delete('client_secret');
+        }
+        if (provider.name === 'instagram' && /^\d+$/.test(key)) {
+            body.delete('client_id');
+            body.delete('client_secret');
+            body.set('app_id', key);
+            body.set('app_secret', secret);
+        }
+        const response = await fetch(accessUrl, {
+            method: 'POST',
+            headers,
+            body
+        });
+        const output = await parseTokenResponse(response);
+        if (!response.ok) {
+            throw new Error(output.error_description || output.error || `Token exchange failed (${response.status})`);
+        }
+        return output;
+    };
+    const tokensToQueryPayload = (provider, tokenResponse)=>{
+        const data = {
+            raw: tokenResponse
+        };
+        if (provider.oauth === 1) {
+            if (tokenResponse.oauth_token) {
+                data.access_token = tokenResponse.oauth_token;
+            }
+            if (tokenResponse.oauth_token_secret) {
+                data.access_secret = tokenResponse.oauth_token_secret;
+            }
+            return data;
+        }
+        if (tokenResponse.id_token) {
+            data.id_token = tokenResponse.id_token;
+        }
+        if (tokenResponse.access_token) {
+            data.access_token = tokenResponse.access_token;
+        }
+        if (tokenResponse.refresh_token) {
+            data.refresh_token = tokenResponse.refresh_token;
+        }
+        return data;
+    };
+    const generateState = ()=>crypto.randomBytes(20).toString('hex');
+    oauth2 = {
+        buildAuthorizeUrl,
+        exchangeAuthorizationCode,
+        tokensToQueryPayload,
+        generateState,
+        substituteSubdomain
+    };
+    return oauth2;
+}
+
+export { requireOauth2 as __require };
+//# sourceMappingURL=oauth2.mjs.map

package/dist/server/utils/oauth-connect/oauth2.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth2.mjs","sources":["../../../../server/src/utils/oauth-connect/oauth2.js"],"sourcesContent":["'use strict';\n\nconst crypto = require('node:crypto');\n\nconst formatScope = (scope, delimiter = ',') => {\n  if (Array.isArray(scope)) {\n    return scope.filter(Boolean).join(delimiter) || undefined;\n  }\n  return scope || undefined;\n};\n\nconst substituteSubdomain = (url, subdomain) =>\n  subdomain ? url.replace('[subdomain]', subdomain) : url;\n\nconst buildAuthorizeUrl = (provider, { key, redirectUri, scope, subdomain }) => {\n  const authorizeUrl = substituteSubdomain(provider.authorize_url, subdomain);\n  const params = new URLSearchParams({\n    client_id: key,\n    response_type: 'code',\n    redirect_uri: redirectUri,\n  });\n\n  const formattedScope = formatScope(scope, provider.scope_delimiter);\n  if (formattedScope) {\n    params.set('scope', formattedScope);\n  }\n\n  if (provider.name === 'instagram' && /^\\d+$/.test(key)) {\n    params.delete('client_id');\n    params.set('app_id', key);\n    if (formattedScope) {\n      params.set('scope', formattedScope.replaceAll(' ', ','));\n    }\n  }\n\n  return `${authorizeUrl}?${params.toString()}`;\n};\n\nconst parseTokenResponse = async (response) => {\n  const contentType = response.headers.get('content-type') || '';\n  if (contentType.includes('application/json')) {\n    return response.json();\n  }\n  const text = await response.text();\n  return Object.fromEntries(new URLSearchParams(text));\n};\n\nconst exchangeAuthorizationCode = async (\n  provider,\n  { key, secret, redirectUri, code, subdomain }\n) => {\n  const accessUrl = substituteSubdomain(provider.access_url, subdomain);\n  const body = new URLSearchParams({\n    grant_type: 'authorization_code',\n    code,\n    redirect_uri: redirectUri,\n    client_id: key,\n    client_secret: secret,\n  });\n\n  const headers = { 'Content-Type': 'application/x-www-form-urlencoded' };\n\n  if (provider.token_endpoint_auth_method === 'client_secret_basic') {\n    const credentials = Buffer.from(`${key}:${secret}`).toString('base64');\n    headers.Authorization = `Basic ${credentials}`;\n    body.delete('client_id');\n    body.delete('client_secret');\n  }\n\n  if (provider.name === 'instagram' && /^\\d+$/.test(key)) {\n    body.delete('client_id');\n    body.delete('client_secret');\n    body.set('app_id', key);\n    body.set('app_secret', secret);\n  }\n\n  const response = await fetch(accessUrl, { method: 'POST', headers, body });\n  const output = await parseTokenResponse(response);\n\n  if (!response.ok) {\n    throw new Error(\n      output.error_description || output.error || `Token exchange failed (${response.status})`\n    );\n  }\n\n  return output;\n};\n\nconst tokensToQueryPayload = (provider, tokenResponse) => {\n  const data = { raw: tokenResponse };\n\n  if (provider.oauth === 1) {\n    if (tokenResponse.oauth_token) {\n      data.access_token = tokenResponse.oauth_token;\n    }\n    if (tokenResponse.oauth_token_secret) {\n      data.access_secret = tokenResponse.oauth_token_secret;\n    }\n    return data;\n  }\n\n  if (tokenResponse.id_token) {\n    data.id_token = tokenResponse.id_token;\n  }\n  if (tokenResponse.access_token) {\n    data.access_token = tokenResponse.access_token;\n  }\n  if (tokenResponse.refresh_token) {\n    data.refresh_token = tokenResponse.refresh_token;\n  }\n\n  return data;\n};\n\nconst generateState = () => crypto.randomBytes(20).toString('hex');\n\nmodule.exports = {\n  buildAuthorizeUrl,\n  exchangeAuthorizationCode,\n  tokensToQueryPayload,\n  generateState,\n  substituteSubdomain,\n};\n"],"names":["crypto","require$$0","formatScope","scope","delimiter","Array","isArray","filter","Boolean","join","undefined","substituteSubdomain","url","subdomain","replace","buildAuthorizeUrl","provider","key","redirectUri","authorizeUrl","authorize_url","params","URLSearchParams","client_id","response_type","redirect_uri","formattedScope","scope_delimiter","set","name","test","delete","replaceAll","toString","parseTokenResponse","response","contentType","headers","get","includes","json","text","Object","fromEntries","exchangeAuthorizationCode","secret","code","accessUrl","access_url","body","grant_type","client_secret","token_endpoint_auth_method","credentials","Buffer","from","Authorization","fetch","method","output","ok","Error","error_description","error","status","tokensToQueryPayload","tokenResponse","data","raw","oauth","oauth_token","access_token","oauth_token_secret","access_secret","id_token","refresh_token","generateState","randomBytes","oauth2"],"mappings":";;;;;;;AAEA,IAAA,MAAMA,MAAAA,GAASC,SAAAA,EAAAA;AAEf,IAAA,MAAMC,WAAAA,GAAc,CAACC,KAAAA,EAAOC,SAAAA,GAAY,GAAG,GAAA;QACzC,IAAIC,KAAAA,CAAMC,OAAO,CAACH,KAAAA,CAAAA,EAAQ;AACxB,YAAA,OAAOA,MAAMI,MAAM,CAACC,OAAAA,CAAAA,CAASC,IAAI,CAACL,SAAAA,CAAAA,IAAcM,SAAAA;AACpD,QAAA;AACE,QAAA,OAAOP,KAAAA,IAASO,SAAAA;AAClB,IAAA,CAAA;IAEA,MAAMC,mBAAAA,GAAsB,CAACC,GAAAA,EAAKC,SAAAA,GAChCA,YAAYD,GAAAA,CAAIE,OAAO,CAAC,aAAA,EAAeD,SAAAA,CAAAA,GAAaD,GAAAA;IAEtD,MAAMG,iBAAAA,GAAoB,CAACC,QAAAA,EAAU,EAAEC,GAAG,EAAEC,WAAW,EAAEf,KAAK,EAAEU,SAAS,EAAE,GAAA;AACzE,QAAA,MAAMM,YAAAA,GAAeR,mBAAAA,CAAoBK,QAAAA,CAASI,aAAa,EAAEP,SAAAA,CAAAA;QACjE,MAAMQ,MAAAA,GAAS,IAAIC,eAAAA,CAAgB;YACjCC,SAAAA,EAAWN,GAAAA;YACXO,aAAAA,EAAe,MAAA;YACfC,YAAAA,EAAcP;AAClB,SAAA,CAAA;AAEE,QAAA,MAAMQ,cAAAA,GAAiBxB,WAAAA,CAAYC,KAAAA,EAAOa,QAAAA,CAASW,eAAe,CAAA;AAClE,QAAA,IAAID,cAAAA,EAAgB;YAClBL,MAAAA,CAAOO,GAAG,CAAC,OAAA,EAASF,cAAAA,CAAAA;AACxB,QAAA;AAEE,QAAA,IAAIV,SAASa,IAAI,KAAK,eAAe,OAAA,CAAQC,IAAI,CAACb,GAAAA,CAAAA,EAAM;AACtDI,YAAAA,MAAAA,CAAOU,MAAM,CAAC,WAAA,CAAA;YACdV,MAAAA,CAAOO,GAAG,CAAC,QAAA,EAAUX,GAAAA,CAAAA;AACrB,YAAA,IAAIS,cAAAA,EAAgB;AAClBL,gBAAAA,MAAAA,CAAOO,GAAG,CAAC,OAAA,EAASF,cAAAA,CAAeM,UAAU,CAAC,GAAA,EAAK,GAAA,CAAA,CAAA;AACzD,YAAA;AACA,QAAA;AAEE,QAAA,OAAO,GAAGb,YAAAA,CAAa,CAAC,EAAEE,MAAAA,CAAOY,QAAQ,EAAA,CAAA,CAAI;AAC/C,IAAA,CAAA;AAEA,IAAA,MAAMC,qBAAqB,OAAOC,QAAAA,GAAAA;AAChC,QAAA,MAAMC,cAAcD,QAAAA,CAASE,OAAO,CAACC,GAAG,CAAC,cAAA,CAAA,IAAmB,EAAA;QAC5D,IAAIF,WAAAA,CAAYG,QAAQ,CAAC,kBAAA,CAAA,EAAqB;AAC5C,YAAA,OAAOJ,SAASK,IAAI,EAAA;AACxB,QAAA;QACE,MAAMC,IAAAA,GAAO,MAAMN,QAAAA,CAASM,IAAI,EAAA;AAChC,QAAA,OAAOC,MAAAA,CAAOC,WAAW,CAAC,IAAIrB,eAAAA,CAAgBmB,IAAAA,CAAAA,CAAAA;AAChD,IAAA,CAAA;AAEA,IAAA,MAAMG,yBAAAA,GAA4B,OAChC5B,QAAAA,EACA,EAAEC,GAAG,EAAE4B,MAAM,EAAE3B,WAAW,EAAE4B,IAAI,EAAEjC,SAAS,EAAA,GAAA;AAE3C,QAAA,MAAMkC,SAAAA,GAAYpC,mBAAAA,CAAoBK,QAAAA,CAASgC,UAAU,EAAEnC,SAAAA,CAAAA;QAC3D,MAAMoC,IAAAA,GAAO,IAAI3B,eAAAA,CAAgB;YAC/B4B,UAAAA,EAAY,oBAAA;AACZJ,YAAAA,IAAAA;YACArB,YAAAA,EAAcP,WAAAA;YACdK,SAAAA,EAAWN,GAAAA;YACXkC,aAAAA,EAAeN;AACnB,SAAA,CAAA;AAEE,QAAA,MAAMR,OAAAA,GAAU;YAAE,cAAA,EAAgB;AAAmC,SAAA;QAErE,IAAIrB,QAAAA,CAASoC,0BAA0B,KAAK,qBAAA,EAAuB;YACjE,MAAMC,WAAAA,GAAcC,MAAAA,CAAOC,IAAI,CAAC,CAAA,EAAGtC,GAAAA,CAAI,CAAC,EAAE4B,MAAAA,CAAAA,CAAQ,CAAA,CAAEZ,QAAQ,CAAC,QAAA,CAAA;AAC7DI,YAAAA,OAAAA,CAAQmB,aAAa,GAAG,CAAC,MAAM,EAAEH,WAAAA,CAAAA,CAAa;AAC9CJ,YAAAA,IAAAA,CAAKlB,MAAM,CAAC,WAAA,CAAA;AACZkB,YAAAA,IAAAA,CAAKlB,MAAM,CAAC,eAAA,CAAA;AAChB,QAAA;AAEE,QAAA,IAAIf,SAASa,IAAI,KAAK,eAAe,OAAA,CAAQC,IAAI,CAACb,GAAAA,CAAAA,EAAM;AACtDgC,YAAAA,IAAAA,CAAKlB,MAAM,CAAC,WAAA,CAAA;AACZkB,YAAAA,IAAAA,CAAKlB,MAAM,CAAC,eAAA,CAAA;YACZkB,IAAAA,CAAKrB,GAAG,CAAC,QAAA,EAAUX,GAAAA,CAAAA;YACnBgC,IAAAA,CAAKrB,GAAG,CAAC,YAAA,EAAciB,MAAAA,CAAAA;AAC3B,QAAA;QAEE,MAAMV,QAAAA,GAAW,MAAMsB,KAAAA,CAAMV,SAAAA,EAAW;YAAEW,MAAAA,EAAQ,MAAA;AAAQrB,YAAAA,OAAAA;AAASY,YAAAA;;QACnE,MAAMU,MAAAA,GAAS,MAAMzB,kBAAAA,CAAmBC,QAAAA,CAAAA;QAExC,IAAI,CAACA,QAAAA,CAASyB,EAAE,EAAE;AAChB,YAAA,MAAM,IAAIC,KAAAA,CACRF,MAAAA,CAAOG,iBAAiB,IAAIH,MAAAA,CAAOI,KAAK,IAAI,CAAC,uBAAuB,EAAE5B,QAAAA,CAAS6B,MAAM,CAAC,CAAC,CAAA,CAAA;AAE7F,QAAA;QAEE,OAAOL,MAAAA;AACT,IAAA,CAAA;IAEA,MAAMM,oBAAAA,GAAuB,CAACjD,QAAAA,EAAUkD,aAAAA,GAAAA;AACtC,QAAA,MAAMC,IAAAA,GAAO;YAAEC,GAAAA,EAAKF;AAAa,SAAA;QAEjC,IAAIlD,QAAAA,CAASqD,KAAK,KAAK,CAAA,EAAG;YACxB,IAAIH,aAAAA,CAAcI,WAAW,EAAE;gBAC7BH,IAAAA,CAAKI,YAAY,GAAGL,aAAAA,CAAcI,WAAW;AACnD,YAAA;YACI,IAAIJ,aAAAA,CAAcM,kBAAkB,EAAE;gBACpCL,IAAAA,CAAKM,aAAa,GAAGP,aAAAA,CAAcM,kBAAkB;AAC3D,YAAA;YACI,OAAOL,IAAAA;AACX,QAAA;QAEE,IAAID,aAAAA,CAAcQ,QAAQ,EAAE;YAC1BP,IAAAA,CAAKO,QAAQ,GAAGR,aAAAA,CAAcQ,QAAQ;AAC1C,QAAA;QACE,IAAIR,aAAAA,CAAcK,YAAY,EAAE;YAC9BJ,IAAAA,CAAKI,YAAY,GAAGL,aAAAA,CAAcK,YAAY;AAClD,QAAA;QACE,IAAIL,aAAAA,CAAcS,aAAa,EAAE;YAC/BR,IAAAA,CAAKQ,aAAa,GAAGT,aAAAA,CAAcS,aAAa;AACpD,QAAA;QAEE,OAAOR,IAAAA;AACT,IAAA,CAAA;AAEA,IAAA,MAAMS,gBAAgB,IAAM5E,MAAAA,CAAO6E,WAAW,CAAC,EAAA,CAAA,CAAI5C,QAAQ,CAAC,KAAA,CAAA;IAE5D6C,MAAAA,GAAiB;AACf/D,QAAAA,iBAAAA;AACA6B,QAAAA,yBAAAA;AACAqB,QAAAA,oBAAAA;AACAW,QAAAA,aAAAA;AACAjE,QAAAA;AACF,KAAA;;;;;;"}

package/dist/server/utils/oauth-connect/providers.js

@@ -0,0 +1,109 @@
+'use strict';
+
+var providers;
+var hasRequiredProviders;
+function requireProviders() {
+    if (hasRequiredProviders) return providers;
+    hasRequiredProviders = 1;
+    /**
+	 * OAuth endpoint definitions for built-in users-permissions providers.
+	 * Derived from grant's oauth.json (MIT) — inlined to drop the grant dependency.
+	 */ providers = {
+        discord: {
+            oauth: 2,
+            authorize_url: 'https://discord.com/api/oauth2/authorize',
+            access_url: 'https://discord.com/api/oauth2/token',
+            scope_delimiter: ' '
+        },
+        facebook: {
+            oauth: 2,
+            authorize_url: 'https://www.facebook.com/dialog/oauth',
+            access_url: 'https://graph.facebook.com/oauth/access_token'
+        },
+        google: {
+            oauth: 2,
+            authorize_url: 'https://accounts.google.com/o/oauth2/v2/auth',
+            access_url: 'https://oauth2.googleapis.com/token',
+            scope_delimiter: ' '
+        },
+        github: {
+            oauth: 2,
+            authorize_url: 'https://github.com/login/oauth/authorize',
+            access_url: 'https://github.com/login/oauth/access_token'
+        },
+        microsoft: {
+            oauth: 2,
+            authorize_url: 'https://login.microsoftonline.com/common/oauth2/v2.0/authorize',
+            access_url: 'https://login.microsoftonline.com/common/oauth2/v2.0/token',
+            scope_delimiter: ' '
+        },
+        twitter: {
+            oauth: 1,
+            request_url: 'https://api.twitter.com/oauth/request_token',
+            authorize_url: 'https://api.twitter.com/oauth/authenticate',
+            access_url: 'https://api.twitter.com/oauth/access_token'
+        },
+        instagram: {
+            oauth: 2,
+            authorize_url: 'https://api.instagram.com/oauth/authorize',
+            access_url: 'https://api.instagram.com/oauth/access_token',
+            scope_delimiter: ' '
+        },
+        vk: {
+            oauth: 2,
+            authorize_url: 'https://oauth.vk.com/authorize',
+            access_url: 'https://oauth.vk.com/access_token'
+        },
+        twitch: {
+            oauth: 2,
+            authorize_url: 'https://id.twitch.tv/oauth2/authorize',
+            access_url: 'https://id.twitch.tv/oauth2/token',
+            scope_delimiter: ' '
+        },
+        linkedin: {
+            oauth: 2,
+            authorize_url: 'https://www.linkedin.com/oauth/v2/authorization',
+            access_url: 'https://www.linkedin.com/oauth/v2/accessToken',
+            scope_delimiter: ' '
+        },
+        cognito: {
+            oauth: 2,
+            authorize_url: 'https://[subdomain]/oauth2/authorize',
+            access_url: 'https://[subdomain]/oauth2/token',
+            scope_delimiter: ' '
+        },
+        reddit: {
+            oauth: 2,
+            authorize_url: 'https://ssl.reddit.com/api/v1/authorize',
+            access_url: 'https://ssl.reddit.com/api/v1/access_token',
+            token_endpoint_auth_method: 'client_secret_basic'
+        },
+        auth0: {
+            oauth: 2,
+            authorize_url: 'https://[subdomain].auth0.com/authorize',
+            access_url: 'https://[subdomain].auth0.com/oauth/token',
+            scope_delimiter: ' '
+        },
+        cas: {
+            oauth: 2,
+            authorize_url: 'https://[subdomain]/oidc/authorize',
+            access_url: 'https://[subdomain]/oidc/token'
+        },
+        patreon: {
+            oauth: 2,
+            authorize_url: 'https://www.patreon.com/oauth2/authorize',
+            access_url: 'https://www.patreon.com/api/oauth2/token',
+            scope_delimiter: ' '
+        },
+        keycloak: {
+            oauth: 2,
+            authorize_url: 'https://[subdomain]/protocol/openid-connect/auth',
+            access_url: 'https://[subdomain]/protocol/openid-connect/token',
+            scope_delimiter: ' '
+        }
+    };
+    return providers;
+}
+
+exports.__require = requireProviders;
+//# sourceMappingURL=providers.js.map

package/dist/server/utils/oauth-connect/providers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"providers.js","sources":["../../../../server/src/utils/oauth-connect/providers.js"],"sourcesContent":["'use strict';\n\n/**\n * OAuth endpoint definitions for built-in users-permissions providers.\n * Derived from grant's oauth.json (MIT) — inlined to drop the grant dependency.\n */\nmodule.exports = {\n  discord: {\n    oauth: 2,\n    authorize_url: 'https://discord.com/api/oauth2/authorize',\n    access_url: 'https://discord.com/api/oauth2/token',\n    scope_delimiter: ' ',\n  },\n  facebook: {\n    oauth: 2,\n    authorize_url: 'https://www.facebook.com/dialog/oauth',\n    access_url: 'https://graph.facebook.com/oauth/access_token',\n  },\n  google: {\n    oauth: 2,\n    authorize_url: 'https://accounts.google.com/o/oauth2/v2/auth',\n    access_url: 'https://oauth2.googleapis.com/token',\n    scope_delimiter: ' ',\n  },\n  github: {\n    oauth: 2,\n    authorize_url: 'https://github.com/login/oauth/authorize',\n    access_url: 'https://github.com/login/oauth/access_token',\n  },\n  microsoft: {\n    oauth: 2,\n    authorize_url: 'https://login.microsoftonline.com/common/oauth2/v2.0/authorize',\n    access_url: 'https://login.microsoftonline.com/common/oauth2/v2.0/token',\n    scope_delimiter: ' ',\n  },\n  twitter: {\n    oauth: 1,\n    request_url: 'https://api.twitter.com/oauth/request_token',\n    authorize_url: 'https://api.twitter.com/oauth/authenticate',\n    access_url: 'https://api.twitter.com/oauth/access_token',\n  },\n  instagram: {\n    oauth: 2,\n    authorize_url: 'https://api.instagram.com/oauth/authorize',\n    access_url: 'https://api.instagram.com/oauth/access_token',\n    scope_delimiter: ' ',\n  },\n  vk: {\n    oauth: 2,\n    authorize_url: 'https://oauth.vk.com/authorize',\n    access_url: 'https://oauth.vk.com/access_token',\n  },\n  twitch: {\n    oauth: 2,\n    authorize_url: 'https://id.twitch.tv/oauth2/authorize',\n    access_url: 'https://id.twitch.tv/oauth2/token',\n    scope_delimiter: ' ',\n  },\n  linkedin: {\n    oauth: 2,\n    authorize_url: 'https://www.linkedin.com/oauth/v2/authorization',\n    access_url: 'https://www.linkedin.com/oauth/v2/accessToken',\n    scope_delimiter: ' ',\n  },\n  cognito: {\n    oauth: 2,\n    authorize_url: 'https://[subdomain]/oauth2/authorize',\n    access_url: 'https://[subdomain]/oauth2/token',\n    scope_delimiter: ' ',\n  },\n  reddit: {\n    oauth: 2,\n    authorize_url: 'https://ssl.reddit.com/api/v1/authorize',\n    access_url: 'https://ssl.reddit.com/api/v1/access_token',\n    token_endpoint_auth_method: 'client_secret_basic',\n  },\n  auth0: {\n    oauth: 2,\n    authorize_url: 'https://[subdomain].auth0.com/authorize',\n    access_url: 'https://[subdomain].auth0.com/oauth/token',\n    scope_delimiter: ' ',\n  },\n  cas: {\n    oauth: 2,\n    authorize_url: 'https://[subdomain]/oidc/authorize',\n    access_url: 'https://[subdomain]/oidc/token',\n  },\n  patreon: {\n    oauth: 2,\n    authorize_url: 'https://www.patreon.com/oauth2/authorize',\n    access_url: 'https://www.patreon.com/api/oauth2/token',\n    scope_delimiter: ' ',\n  },\n  keycloak: {\n    oauth: 2,\n    authorize_url: 'https://[subdomain]/protocol/openid-connect/auth',\n    access_url: 'https://[subdomain]/protocol/openid-connect/token',\n    scope_delimiter: ' ',\n  },\n};\n"],"names":["providers","discord","oauth","authorize_url","access_url","scope_delimiter","facebook","google","github","microsoft","twitter","request_url","instagram","vk","twitch","linkedin","cognito","reddit","token_endpoint_auth_method","auth0","cas","patreon","keycloak"],"mappings":";;;;;;;AAEA;;;AAGA,KACAA,SAAAA,GAAiB;QACfC,OAAAA,EAAS;YACPC,KAAAA,EAAO,CAAA;YACPC,aAAAA,EAAe,0CAAA;YACfC,UAAAA,EAAY,sCAAA;YACZC,eAAAA,EAAiB;AACrB,SAAA;QACEC,QAAAA,EAAU;YACRJ,KAAAA,EAAO,CAAA;YACPC,aAAAA,EAAe,uCAAA;YACfC,UAAAA,EAAY;AAChB,SAAA;QACEG,MAAAA,EAAQ;YACNL,KAAAA,EAAO,CAAA;YACPC,aAAAA,EAAe,8CAAA;YACfC,UAAAA,EAAY,qCAAA;YACZC,eAAAA,EAAiB;AACrB,SAAA;QACEG,MAAAA,EAAQ;YACNN,KAAAA,EAAO,CAAA;YACPC,aAAAA,EAAe,0CAAA;YACfC,UAAAA,EAAY;AAChB,SAAA;QACEK,SAAAA,EAAW;YACTP,KAAAA,EAAO,CAAA;YACPC,aAAAA,EAAe,gEAAA;YACfC,UAAAA,EAAY,4DAAA;YACZC,eAAAA,EAAiB;AACrB,SAAA;QACEK,OAAAA,EAAS;YACPR,KAAAA,EAAO,CAAA;YACPS,WAAAA,EAAa,6CAAA;YACbR,aAAAA,EAAe,4CAAA;YACfC,UAAAA,EAAY;AAChB,SAAA;QACEQ,SAAAA,EAAW;YACTV,KAAAA,EAAO,CAAA;YACPC,aAAAA,EAAe,2CAAA;YACfC,UAAAA,EAAY,8CAAA;YACZC,eAAAA,EAAiB;AACrB,SAAA;QACEQ,EAAAA,EAAI;YACFX,KAAAA,EAAO,CAAA;YACPC,aAAAA,EAAe,gCAAA;YACfC,UAAAA,EAAY;AAChB,SAAA;QACEU,MAAAA,EAAQ;YACNZ,KAAAA,EAAO,CAAA;YACPC,aAAAA,EAAe,uCAAA;YACfC,UAAAA,EAAY,mCAAA;YACZC,eAAAA,EAAiB;AACrB,SAAA;QACEU,QAAAA,EAAU;YACRb,KAAAA,EAAO,CAAA;YACPC,aAAAA,EAAe,iDAAA;YACfC,UAAAA,EAAY,+CAAA;YACZC,eAAAA,EAAiB;AACrB,SAAA;QACEW,OAAAA,EAAS;YACPd,KAAAA,EAAO,CAAA;YACPC,aAAAA,EAAe,sCAAA;YACfC,UAAAA,EAAY,kCAAA;YACZC,eAAAA,EAAiB;AACrB,SAAA;QACEY,MAAAA,EAAQ;YACNf,KAAAA,EAAO,CAAA;YACPC,aAAAA,EAAe,yCAAA;YACfC,UAAAA,EAAY,4CAAA;YACZc,0BAAAA,EAA4B;AAChC,SAAA;QACEC,KAAAA,EAAO;YACLjB,KAAAA,EAAO,CAAA;YACPC,aAAAA,EAAe,yCAAA;YACfC,UAAAA,EAAY,2CAAA;YACZC,eAAAA,EAAiB;AACrB,SAAA;QACEe,GAAAA,EAAK;YACHlB,KAAAA,EAAO,CAAA;YACPC,aAAAA,EAAe,oCAAA;YACfC,UAAAA,EAAY;AAChB,SAAA;QACEiB,OAAAA,EAAS;YACPnB,KAAAA,EAAO,CAAA;YACPC,aAAAA,EAAe,0CAAA;YACfC,UAAAA,EAAY,0CAAA;YACZC,eAAAA,EAAiB;AACrB,SAAA;QACEiB,QAAAA,EAAU;YACRpB,KAAAA,EAAO,CAAA;YACPC,aAAAA,EAAe,kDAAA;YACfC,UAAAA,EAAY,mDAAA;YACZC,eAAAA,EAAiB;AACrB;AACA,KAAA;;;;;;"}

package/dist/server/utils/oauth-connect/providers.mjs

@@ -0,0 +1,107 @@
+var providers;
+var hasRequiredProviders;
+function requireProviders() {
+    if (hasRequiredProviders) return providers;
+    hasRequiredProviders = 1;
+    /**
+	 * OAuth endpoint definitions for built-in users-permissions providers.
+	 * Derived from grant's oauth.json (MIT) — inlined to drop the grant dependency.
+	 */ providers = {
+        discord: {
+            oauth: 2,
+            authorize_url: 'https://discord.com/api/oauth2/authorize',
+            access_url: 'https://discord.com/api/oauth2/token',
+            scope_delimiter: ' '
+        },
+        facebook: {
+            oauth: 2,
+            authorize_url: 'https://www.facebook.com/dialog/oauth',
+            access_url: 'https://graph.facebook.com/oauth/access_token'
+        },
+        google: {
+            oauth: 2,
+            authorize_url: 'https://accounts.google.com/o/oauth2/v2/auth',
+            access_url: 'https://oauth2.googleapis.com/token',
+            scope_delimiter: ' '
+        },
+        github: {
+            oauth: 2,
+            authorize_url: 'https://github.com/login/oauth/authorize',
+            access_url: 'https://github.com/login/oauth/access_token'
+        },
+        microsoft: {
+            oauth: 2,
+            authorize_url: 'https://login.microsoftonline.com/common/oauth2/v2.0/authorize',
+            access_url: 'https://login.microsoftonline.com/common/oauth2/v2.0/token',
+            scope_delimiter: ' '
+        },
+        twitter: {
+            oauth: 1,
+            request_url: 'https://api.twitter.com/oauth/request_token',
+            authorize_url: 'https://api.twitter.com/oauth/authenticate',
+            access_url: 'https://api.twitter.com/oauth/access_token'
+        },
+        instagram: {
+            oauth: 2,
+            authorize_url: 'https://api.instagram.com/oauth/authorize',
+            access_url: 'https://api.instagram.com/oauth/access_token',
+            scope_delimiter: ' '
+        },
+        vk: {
+            oauth: 2,
+            authorize_url: 'https://oauth.vk.com/authorize',
+            access_url: 'https://oauth.vk.com/access_token'
+        },
+        twitch: {
+            oauth: 2,
+            authorize_url: 'https://id.twitch.tv/oauth2/authorize',
+            access_url: 'https://id.twitch.tv/oauth2/token',
+            scope_delimiter: ' '
+        },
+        linkedin: {
+            oauth: 2,
+            authorize_url: 'https://www.linkedin.com/oauth/v2/authorization',
+            access_url: 'https://www.linkedin.com/oauth/v2/accessToken',
+            scope_delimiter: ' '
+        },
+        cognito: {
+            oauth: 2,
+            authorize_url: 'https://[subdomain]/oauth2/authorize',
+            access_url: 'https://[subdomain]/oauth2/token',
+            scope_delimiter: ' '
+        },
+        reddit: {
+            oauth: 2,
+            authorize_url: 'https://ssl.reddit.com/api/v1/authorize',
+            access_url: 'https://ssl.reddit.com/api/v1/access_token',
+            token_endpoint_auth_method: 'client_secret_basic'
+        },
+        auth0: {
+            oauth: 2,
+            authorize_url: 'https://[subdomain].auth0.com/authorize',
+            access_url: 'https://[subdomain].auth0.com/oauth/token',
+            scope_delimiter: ' '
+        },
+        cas: {
+            oauth: 2,
+            authorize_url: 'https://[subdomain]/oidc/authorize',
+            access_url: 'https://[subdomain]/oidc/token'
+        },
+        patreon: {
+            oauth: 2,
+            authorize_url: 'https://www.patreon.com/oauth2/authorize',
+            access_url: 'https://www.patreon.com/api/oauth2/token',
+            scope_delimiter: ' '
+        },
+        keycloak: {
+            oauth: 2,
+            authorize_url: 'https://[subdomain]/protocol/openid-connect/auth',
+            access_url: 'https://[subdomain]/protocol/openid-connect/token',
+            scope_delimiter: ' '
+        }
+    };
+    return providers;
+}
+
+export { requireProviders as __require };
+//# sourceMappingURL=providers.mjs.map

package/dist/server/utils/oauth-connect/providers.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"providers.mjs","sources":["../../../../server/src/utils/oauth-connect/providers.js"],"sourcesContent":["'use strict';\n\n/**\n * OAuth endpoint definitions for built-in users-permissions providers.\n * Derived from grant's oauth.json (MIT) — inlined to drop the grant dependency.\n */\nmodule.exports = {\n  discord: {\n    oauth: 2,\n    authorize_url: 'https://discord.com/api/oauth2/authorize',\n    access_url: 'https://discord.com/api/oauth2/token',\n    scope_delimiter: ' ',\n  },\n  facebook: {\n    oauth: 2,\n    authorize_url: 'https://www.facebook.com/dialog/oauth',\n    access_url: 'https://graph.facebook.com/oauth/access_token',\n  },\n  google: {\n    oauth: 2,\n    authorize_url: 'https://accounts.google.com/o/oauth2/v2/auth',\n    access_url: 'https://oauth2.googleapis.com/token',\n    scope_delimiter: ' ',\n  },\n  github: {\n    oauth: 2,\n    authorize_url: 'https://github.com/login/oauth/authorize',\n    access_url: 'https://github.com/login/oauth/access_token',\n  },\n  microsoft: {\n    oauth: 2,\n    authorize_url: 'https://login.microsoftonline.com/common/oauth2/v2.0/authorize',\n    access_url: 'https://login.microsoftonline.com/common/oauth2/v2.0/token',\n    scope_delimiter: ' ',\n  },\n  twitter: {\n    oauth: 1,\n    request_url: 'https://api.twitter.com/oauth/request_token',\n    authorize_url: 'https://api.twitter.com/oauth/authenticate',\n    access_url: 'https://api.twitter.com/oauth/access_token',\n  },\n  instagram: {\n    oauth: 2,\n    authorize_url: 'https://api.instagram.com/oauth/authorize',\n    access_url: 'https://api.instagram.com/oauth/access_token',\n    scope_delimiter: ' ',\n  },\n  vk: {\n    oauth: 2,\n    authorize_url: 'https://oauth.vk.com/authorize',\n    access_url: 'https://oauth.vk.com/access_token',\n  },\n  twitch: {\n    oauth: 2,\n    authorize_url: 'https://id.twitch.tv/oauth2/authorize',\n    access_url: 'https://id.twitch.tv/oauth2/token',\n    scope_delimiter: ' ',\n  },\n  linkedin: {\n    oauth: 2,\n    authorize_url: 'https://www.linkedin.com/oauth/v2/authorization',\n    access_url: 'https://www.linkedin.com/oauth/v2/accessToken',\n    scope_delimiter: ' ',\n  },\n  cognito: {\n    oauth: 2,\n    authorize_url: 'https://[subdomain]/oauth2/authorize',\n    access_url: 'https://[subdomain]/oauth2/token',\n    scope_delimiter: ' ',\n  },\n  reddit: {\n    oauth: 2,\n    authorize_url: 'https://ssl.reddit.com/api/v1/authorize',\n    access_url: 'https://ssl.reddit.com/api/v1/access_token',\n    token_endpoint_auth_method: 'client_secret_basic',\n  },\n  auth0: {\n    oauth: 2,\n    authorize_url: 'https://[subdomain].auth0.com/authorize',\n    access_url: 'https://[subdomain].auth0.com/oauth/token',\n    scope_delimiter: ' ',\n  },\n  cas: {\n    oauth: 2,\n    authorize_url: 'https://[subdomain]/oidc/authorize',\n    access_url: 'https://[subdomain]/oidc/token',\n  },\n  patreon: {\n    oauth: 2,\n    authorize_url: 'https://www.patreon.com/oauth2/authorize',\n    access_url: 'https://www.patreon.com/api/oauth2/token',\n    scope_delimiter: ' ',\n  },\n  keycloak: {\n    oauth: 2,\n    authorize_url: 'https://[subdomain]/protocol/openid-connect/auth',\n    access_url: 'https://[subdomain]/protocol/openid-connect/token',\n    scope_delimiter: ' ',\n  },\n};\n"],"names":["providers","discord","oauth","authorize_url","access_url","scope_delimiter","facebook","google","github","microsoft","twitter","request_url","instagram","vk","twitch","linkedin","cognito","reddit","token_endpoint_auth_method","auth0","cas","patreon","keycloak"],"mappings":";;;;;AAEA;;;AAGA,KACAA,SAAAA,GAAiB;QACfC,OAAAA,EAAS;YACPC,KAAAA,EAAO,CAAA;YACPC,aAAAA,EAAe,0CAAA;YACfC,UAAAA,EAAY,sCAAA;YACZC,eAAAA,EAAiB;AACrB,SAAA;QACEC,QAAAA,EAAU;YACRJ,KAAAA,EAAO,CAAA;YACPC,aAAAA,EAAe,uCAAA;YACfC,UAAAA,EAAY;AAChB,SAAA;QACEG,MAAAA,EAAQ;YACNL,KAAAA,EAAO,CAAA;YACPC,aAAAA,EAAe,8CAAA;YACfC,UAAAA,EAAY,qCAAA;YACZC,eAAAA,EAAiB;AACrB,SAAA;QACEG,MAAAA,EAAQ;YACNN,KAAAA,EAAO,CAAA;YACPC,aAAAA,EAAe,0CAAA;YACfC,UAAAA,EAAY;AAChB,SAAA;QACEK,SAAAA,EAAW;YACTP,KAAAA,EAAO,CAAA;YACPC,aAAAA,EAAe,gEAAA;YACfC,UAAAA,EAAY,4DAAA;YACZC,eAAAA,EAAiB;AACrB,SAAA;QACEK,OAAAA,EAAS;YACPR,KAAAA,EAAO,CAAA;YACPS,WAAAA,EAAa,6CAAA;YACbR,aAAAA,EAAe,4CAAA;YACfC,UAAAA,EAAY;AAChB,SAAA;QACEQ,SAAAA,EAAW;YACTV,KAAAA,EAAO,CAAA;YACPC,aAAAA,EAAe,2CAAA;YACfC,UAAAA,EAAY,8CAAA;YACZC,eAAAA,EAAiB;AACrB,SAAA;QACEQ,EAAAA,EAAI;YACFX,KAAAA,EAAO,CAAA;YACPC,aAAAA,EAAe,gCAAA;YACfC,UAAAA,EAAY;AAChB,SAAA;QACEU,MAAAA,EAAQ;YACNZ,KAAAA,EAAO,CAAA;YACPC,aAAAA,EAAe,uCAAA;YACfC,UAAAA,EAAY,mCAAA;YACZC,eAAAA,EAAiB;AACrB,SAAA;QACEU,QAAAA,EAAU;YACRb,KAAAA,EAAO,CAAA;YACPC,aAAAA,EAAe,iDAAA;YACfC,UAAAA,EAAY,+CAAA;YACZC,eAAAA,EAAiB;AACrB,SAAA;QACEW,OAAAA,EAAS;YACPd,KAAAA,EAAO,CAAA;YACPC,aAAAA,EAAe,sCAAA;YACfC,UAAAA,EAAY,kCAAA;YACZC,eAAAA,EAAiB;AACrB,SAAA;QACEY,MAAAA,EAAQ;YACNf,KAAAA,EAAO,CAAA;YACPC,aAAAA,EAAe,yCAAA;YACfC,UAAAA,EAAY,4CAAA;YACZc,0BAAAA,EAA4B;AAChC,SAAA;QACEC,KAAAA,EAAO;YACLjB,KAAAA,EAAO,CAAA;YACPC,aAAAA,EAAe,yCAAA;YACfC,UAAAA,EAAY,2CAAA;YACZC,eAAAA,EAAiB;AACrB,SAAA;QACEe,GAAAA,EAAK;YACHlB,KAAAA,EAAO,CAAA;YACPC,aAAAA,EAAe,oCAAA;YACfC,UAAAA,EAAY;AAChB,SAAA;QACEiB,OAAAA,EAAS;YACPnB,KAAAA,EAAO,CAAA;YACPC,aAAAA,EAAe,0CAAA;YACfC,UAAAA,EAAY,0CAAA;YACZC,eAAAA,EAAiB;AACrB,SAAA;QACEiB,QAAAA,EAAU;YACRpB,KAAAA,EAAO,CAAA;YACPC,aAAAA,EAAe,kDAAA;YACfC,UAAAA,EAAY,mDAAA;YACZC,eAAAA,EAAiB;AACrB;AACA,KAAA;;;;;;"}

package/dist/server/utils/provider-http.js

@@ -0,0 +1,52 @@
+'use strict';
+
+var providerHttp;
+var hasRequiredProviderHttp;
+function requireProviderHttp() {
+    if (hasRequiredProviderHttp) return providerHttp;
+    hasRequiredProviderHttp = 1;
+    const fetchJson = async (url, options = {})=>{
+        const response = await fetch(url, options);
+        const contentType = response.headers.get('content-type') || '';
+        let body;
+        if (contentType.includes('application/json')) {
+            body = await response.json();
+        } else {
+            const text = await response.text();
+            try {
+                body = JSON.parse(text);
+            } catch  {
+                body = text;
+            }
+        }
+        if (!response.ok) {
+            const message = typeof body === 'object' && body !== null ? body.error_description || body.error || body.message : body;
+            throw new Error(message || `HTTP ${response.status}`);
+        }
+        return {
+            body
+        };
+    };
+    const bearerGet = (url, accessToken, { headers = {}, qs = {} } = {})=>{
+        const target = new URL(url);
+        Object.entries(qs).forEach(([key, value])=>{
+            if (value !== undefined && value !== null) {
+                target.searchParams.set(key, String(value));
+            }
+        });
+        return fetchJson(target, {
+            headers: {
+                Authorization: `Bearer ${accessToken}`,
+                ...headers
+            }
+        });
+    };
+    providerHttp = {
+        fetchJson,
+        bearerGet
+    };
+    return providerHttp;
+}
+
+exports.__require = requireProviderHttp;
+//# sourceMappingURL=provider-http.js.map

package/dist/server/utils/provider-http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-http.js","sources":["../../../server/src/utils/provider-http.js"],"sourcesContent":["'use strict';\n\nconst fetchJson = async (url, options = {}) => {\n  const response = await fetch(url, options);\n  const contentType = response.headers.get('content-type') || '';\n\n  let body;\n  if (contentType.includes('application/json')) {\n    body = await response.json();\n  } else {\n    const text = await response.text();\n    try {\n      body = JSON.parse(text);\n    } catch {\n      body = text;\n    }\n  }\n\n  if (!response.ok) {\n    const message =\n      typeof body === 'object' && body !== null\n        ? body.error_description || body.error || body.message\n        : body;\n    throw new Error(message || `HTTP ${response.status}`);\n  }\n\n  return { body };\n};\n\nconst bearerGet = (url, accessToken, { headers = {}, qs = {} } = {}) => {\n  const target = new URL(url);\n  Object.entries(qs).forEach(([key, value]) => {\n    if (value !== undefined && value !== null) {\n      target.searchParams.set(key, String(value));\n    }\n  });\n\n  return fetchJson(target, {\n    headers: {\n      Authorization: `Bearer ${accessToken}`,\n      ...headers,\n    },\n  });\n};\n\nmodule.exports = {\n  fetchJson,\n  bearerGet,\n};\n"],"names":["fetchJson","url","options","response","fetch","contentType","headers","get","body","includes","json","text","JSON","parse","ok","message","error_description","error","Error","status","bearerGet","accessToken","qs","target","URL","Object","entries","forEach","key","value","undefined","searchParams","set","String","Authorization","providerHttp"],"mappings":";;;;;;;AAEA,IAAA,MAAMA,SAAAA,GAAY,OAAOC,GAAAA,EAAKC,OAAAA,GAAU,EAAE,GAAA;QACxC,MAAMC,QAAAA,GAAW,MAAMC,KAAAA,CAAMH,GAAAA,EAAKC,OAAAA,CAAAA;AAClC,QAAA,MAAMG,cAAcF,QAAAA,CAASG,OAAO,CAACC,GAAG,CAAC,cAAA,CAAA,IAAmB,EAAA;QAE5D,IAAIC,IAAAA;QACJ,IAAIH,WAAAA,CAAYI,QAAQ,CAAC,kBAAA,CAAA,EAAqB;YAC5CD,IAAAA,GAAO,MAAML,SAASO,IAAI,EAAA;QAC9B,CAAA,MAAS;YACL,MAAMC,IAAAA,GAAO,MAAMR,QAAAA,CAASQ,IAAI,EAAA;YAChC,IAAI;gBACFH,IAAAA,GAAOI,IAAAA,CAAKC,KAAK,CAACF,IAAAA,CAAAA;AACxB,YAAA,CAAA,CAAM,OAAM;gBACNH,IAAAA,GAAOG,IAAAA;AACb,YAAA;AACA,QAAA;QAEE,IAAI,CAACR,QAAAA,CAASW,EAAE,EAAE;AAChB,YAAA,MAAMC,OAAAA,GACJ,OAAOP,IAAAA,KAAS,QAAA,IAAYA,SAAS,IAAA,GACjCA,IAAAA,CAAKQ,iBAAiB,IAAIR,IAAAA,CAAKS,KAAK,IAAIT,IAAAA,CAAKO,OAAA,GAC7CP,IAAAA;YACN,MAAM,IAAIU,MAAMH,OAAAA,IAAW,CAAC,KAAK,EAAEZ,QAAAA,CAASgB,MAAM,CAAA,CAAE,CAAA;AACxD,QAAA;QAEE,OAAO;AAAEX,YAAAA;AAAI,SAAA;AACf,IAAA,CAAA;AAEA,IAAA,MAAMY,SAAAA,GAAY,CAACnB,GAAAA,EAAKoB,WAAAA,EAAa,EAAEf,OAAAA,GAAU,EAAE,EAAEgB,KAAK,EAAE,EAAE,GAAG,EAAE,GAAA;QACjE,MAAMC,MAAAA,GAAS,IAAIC,GAAAA,CAAIvB,GAAAA,CAAAA;QACvBwB,MAAAA,CAAOC,OAAO,CAACJ,EAAAA,CAAAA,CAAIK,OAAO,CAAC,CAAC,CAACC,KAAKC,KAAAA,CAAM,GAAA;YACtC,IAAIA,KAAAA,KAAUC,SAAAA,IAAaD,KAAAA,KAAU,IAAA,EAAM;AACzCN,gBAAAA,MAAAA,CAAOQ,YAAY,CAACC,GAAG,CAACJ,KAAKK,MAAAA,CAAOJ,KAAAA,CAAAA,CAAAA;AAC1C,YAAA;AACA,QAAA,CAAA,CAAA;AAEE,QAAA,OAAO7B,UAAUuB,MAAAA,EAAQ;YACvBjB,OAAAA,EAAS;gBACP4B,aAAAA,EAAe,CAAC,OAAO,EAAEb,WAAAA,CAAAA,CAAa;AACtC,gBAAA,GAAGf;AACT;AACA,SAAA,CAAA;AACA,IAAA,CAAA;IAEA6B,YAAAA,GAAiB;AACfnC,QAAAA,SAAAA;AACAoB,QAAAA;AACF,KAAA;;;;;;"}

package/dist/server/utils/provider-http.mjs

@@ -0,0 +1,50 @@
+var providerHttp;
+var hasRequiredProviderHttp;
+function requireProviderHttp() {
+    if (hasRequiredProviderHttp) return providerHttp;
+    hasRequiredProviderHttp = 1;
+    const fetchJson = async (url, options = {})=>{
+        const response = await fetch(url, options);
+        const contentType = response.headers.get('content-type') || '';
+        let body;
+        if (contentType.includes('application/json')) {
+            body = await response.json();
+        } else {
+            const text = await response.text();
+            try {
+                body = JSON.parse(text);
+            } catch  {
+                body = text;
+            }
+        }
+        if (!response.ok) {
+            const message = typeof body === 'object' && body !== null ? body.error_description || body.error || body.message : body;
+            throw new Error(message || `HTTP ${response.status}`);
+        }
+        return {
+            body
+        };
+    };
+    const bearerGet = (url, accessToken, { headers = {}, qs = {} } = {})=>{
+        const target = new URL(url);
+        Object.entries(qs).forEach(([key, value])=>{
+            if (value !== undefined && value !== null) {
+                target.searchParams.set(key, String(value));
+            }
+        });
+        return fetchJson(target, {
+            headers: {
+                Authorization: `Bearer ${accessToken}`,
+                ...headers
+            }
+        });
+    };
+    providerHttp = {
+        fetchJson,
+        bearerGet
+    };
+    return providerHttp;
+}
+
+export { requireProviderHttp as __require };
+//# sourceMappingURL=provider-http.mjs.map

package/dist/server/utils/provider-http.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-http.mjs","sources":["../../../server/src/utils/provider-http.js"],"sourcesContent":["'use strict';\n\nconst fetchJson = async (url, options = {}) => {\n  const response = await fetch(url, options);\n  const contentType = response.headers.get('content-type') || '';\n\n  let body;\n  if (contentType.includes('application/json')) {\n    body = await response.json();\n  } else {\n    const text = await response.text();\n    try {\n      body = JSON.parse(text);\n    } catch {\n      body = text;\n    }\n  }\n\n  if (!response.ok) {\n    const message =\n      typeof body === 'object' && body !== null\n        ? body.error_description || body.error || body.message\n        : body;\n    throw new Error(message || `HTTP ${response.status}`);\n  }\n\n  return { body };\n};\n\nconst bearerGet = (url, accessToken, { headers = {}, qs = {} } = {}) => {\n  const target = new URL(url);\n  Object.entries(qs).forEach(([key, value]) => {\n    if (value !== undefined && value !== null) {\n      target.searchParams.set(key, String(value));\n    }\n  });\n\n  return fetchJson(target, {\n    headers: {\n      Authorization: `Bearer ${accessToken}`,\n      ...headers,\n    },\n  });\n};\n\nmodule.exports = {\n  fetchJson,\n  bearerGet,\n};\n"],"names":["fetchJson","url","options","response","fetch","contentType","headers","get","body","includes","json","text","JSON","parse","ok","message","error_description","error","Error","status","bearerGet","accessToken","qs","target","URL","Object","entries","forEach","key","value","undefined","searchParams","set","String","Authorization","providerHttp"],"mappings":";;;;;AAEA,IAAA,MAAMA,SAAAA,GAAY,OAAOC,GAAAA,EAAKC,OAAAA,GAAU,EAAE,GAAA;QACxC,MAAMC,QAAAA,GAAW,MAAMC,KAAAA,CAAMH,GAAAA,EAAKC,OAAAA,CAAAA;AAClC,QAAA,MAAMG,cAAcF,QAAAA,CAASG,OAAO,CAACC,GAAG,CAAC,cAAA,CAAA,IAAmB,EAAA;QAE5D,IAAIC,IAAAA;QACJ,IAAIH,WAAAA,CAAYI,QAAQ,CAAC,kBAAA,CAAA,EAAqB;YAC5CD,IAAAA,GAAO,MAAML,SAASO,IAAI,EAAA;QAC9B,CAAA,MAAS;YACL,MAAMC,IAAAA,GAAO,MAAMR,QAAAA,CAASQ,IAAI,EAAA;YAChC,IAAI;gBACFH,IAAAA,GAAOI,IAAAA,CAAKC,KAAK,CAACF,IAAAA,CAAAA;AACxB,YAAA,CAAA,CAAM,OAAM;gBACNH,IAAAA,GAAOG,IAAAA;AACb,YAAA;AACA,QAAA;QAEE,IAAI,CAACR,QAAAA,CAASW,EAAE,EAAE;AAChB,YAAA,MAAMC,OAAAA,GACJ,OAAOP,IAAAA,KAAS,QAAA,IAAYA,SAAS,IAAA,GACjCA,IAAAA,CAAKQ,iBAAiB,IAAIR,IAAAA,CAAKS,KAAK,IAAIT,IAAAA,CAAKO,OAAA,GAC7CP,IAAAA;YACN,MAAM,IAAIU,MAAMH,OAAAA,IAAW,CAAC,KAAK,EAAEZ,QAAAA,CAASgB,MAAM,CAAA,CAAE,CAAA;AACxD,QAAA;QAEE,OAAO;AAAEX,YAAAA;AAAI,SAAA;AACf,IAAA,CAAA;AAEA,IAAA,MAAMY,SAAAA,GAAY,CAACnB,GAAAA,EAAKoB,WAAAA,EAAa,EAAEf,OAAAA,GAAU,EAAE,EAAEgB,KAAK,EAAE,EAAE,GAAG,EAAE,GAAA;QACjE,MAAMC,MAAAA,GAAS,IAAIC,GAAAA,CAAIvB,GAAAA,CAAAA;QACvBwB,MAAAA,CAAOC,OAAO,CAACJ,EAAAA,CAAAA,CAAIK,OAAO,CAAC,CAAC,CAACC,KAAKC,KAAAA,CAAM,GAAA;YACtC,IAAIA,KAAAA,KAAUC,SAAAA,IAAaD,KAAAA,KAAU,IAAA,EAAM;AACzCN,gBAAAA,MAAAA,CAAOQ,YAAY,CAACC,GAAG,CAACJ,KAAKK,MAAAA,CAAOJ,KAAAA,CAAAA,CAAAA;AAC1C,YAAA;AACA,QAAA,CAAA,CAAA;AAEE,QAAA,OAAO7B,UAAUuB,MAAAA,EAAQ;YACvBjB,OAAAA,EAAS;gBACP4B,aAAAA,EAAe,CAAC,OAAO,EAAEb,WAAAA,CAAAA,CAAa;AACtC,gBAAA,GAAGf;AACT;AACA,SAAA,CAAA;AACA,IAAA,CAAA;IAEA6B,YAAAA,GAAiB;AACfnC,QAAAA,SAAAA;AACAoB,QAAAA;AACF,KAAA;;;;;;"}