@superfunctions/oauth-router 0.0.1

package/README.md

@@ -0,0 +1,49 @@
+# @superfunctions/oauth-router
+
+Reusable OAuth route factories for browser-auth and connection-management flows.
+
+## Install
+
+```bash
+npm install @superfunctions/oauth-router @superfunctions/oauth-flow @superfunctions/http
+```
+
+Use an HTTP adapter such as `@superfunctions/http-express`, `@superfunctions/http-fastify`, or `@superfunctions/http-hono` in the consuming app.
+
+## Quick Start
+
+```ts
+import { createOAuthBrowserRoutes } from "@superfunctions/oauth-router";
+
+const routes = createOAuthBrowserRoutes({
+  basePath: "/auth/social",
+  flowService,
+  async resolveStartInput(request) {
+    return (await request.json()) as never;
+  },
+});
+```
+
+## Package Boundary
+
+`@superfunctions/oauth-router` owns route factories only:
+
+- `createOAuthBrowserRoutes(...)`
+- `createOAuthConnectionRoutes(...)`
+- secure default route metadata
+- per-route `routeMeta` overrides
+
+It does not create framework servers, resolve sessions, or persist OAuth state by itself.
+
+## Production Notes
+
+- Browser routes default to `start=none`, `callback=none`, `disconnect=hybrid`.
+- Connection routes default to `start=hybrid`, `callback=none`, `disconnect=hybrid`.
+- Override route metadata explicitly when your app requires stronger auth or different OpenAPI annotations.
+- Keep callback routes reachable without session enforcement unless your app handles provider callbacks through another trust boundary.
+
+## Related Packages
+
+- OAuth core primitives: [../oauth-core/README.md](../oauth-core/README.md)
+- Flow orchestration: [../oauth-flow/README.md](../oauth-flow/README.md)
+- HTTP primitives: [../oauth-http/README.md](../oauth-http/README.md)

package/dist/browser-routes.d.ts

@@ -0,0 +1,22 @@
+import type { HttpRouteMeta, Route, RouteContext } from "@superfunctions/http";
+import type { OAuthFlowCallbackInput, OAuthFlowCallbackResult, OAuthFlowDisconnectInput, OAuthFlowService, OAuthFlowStartInput } from "@superfunctions/oauth-flow";
+export type OAuthBrowserCallbackMode = "redirect" | "json";
+export type OAuthBrowserRouteMetaOverrides = {
+    start?: HttpRouteMeta;
+    callback?: HttpRouteMeta;
+    disconnect?: HttpRouteMeta;
+};
+export interface OAuthBrowserRouteConfig {
+    basePath: string;
+    flowService: OAuthFlowService;
+    resolveStartInput: (request: Request, context: RouteContext) => Promise<OAuthFlowStartInput> | OAuthFlowStartInput;
+    resolveDisconnectInput?: (request: Request, context: RouteContext) => Promise<Omit<OAuthFlowDisconnectInput, "providerId" | "requestId">> | Omit<OAuthFlowDisconnectInput, "providerId" | "requestId">;
+    resolveCallbackInput?: (request: Request, context: RouteContext) => Promise<Partial<Omit<OAuthFlowCallbackInput, "providerId" | "requestId">>> | Partial<Omit<OAuthFlowCallbackInput, "providerId" | "requestId">>;
+    callbackMode?: OAuthBrowserCallbackMode | ((result: OAuthFlowCallbackResult, request: Request, context: RouteContext) => Promise<OAuthBrowserCallbackMode> | OAuthBrowserCallbackMode);
+    getRedirectLocation?: (result: OAuthFlowCallbackResult, request: Request, context: RouteContext) => Promise<string> | string;
+    serializeCallbackResult?: (result: OAuthFlowCallbackResult, request: Request, context: RouteContext) => Promise<unknown> | unknown;
+    routeMeta?: OAuthBrowserRouteMetaOverrides;
+    requestIdHeader?: string;
+}
+export declare function createOAuthBrowserRoutes(config: OAuthBrowserRouteConfig): Route[];
+//# sourceMappingURL=browser-routes.d.ts.map

package/dist/browser-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser-routes.d.ts","sourceRoot":"","sources":["../src/browser-routes.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAiB,aAAa,EAAoB,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAChH,OAAO,KAAK,EACV,sBAAsB,EACtB,uBAAuB,EACvB,wBAAwB,EACxB,gBAAgB,EAChB,mBAAmB,EACpB,MAAM,4BAA4B,CAAC;AAEpC,MAAM,MAAM,wBAAwB,GAAG,UAAU,GAAG,MAAM,CAAC;AAE3D,MAAM,MAAM,8BAA8B,GAAG;IAC3C,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB,QAAQ,CAAC,EAAE,aAAa,CAAC;IACzB,UAAU,CAAC,EAAE,aAAa,CAAC;CAC5B,CAAC;AAEF,MAAM,WAAW,uBAAuB;IACtC,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,gBAAgB,CAAC;IAC9B,iBAAiB,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,KAAK,OAAO,CAAC,mBAAmB,CAAC,GAAG,mBAAmB,CAAC;IACnH,sBAAsB,CAAC,EAAE,CACvB,OAAO,EAAE,OAAO,EAChB,OAAO,EAAE,YAAY,KAClB,OAAO,CAAC,IAAI,CAAC,wBAAwB,EAAE,YAAY,GAAG,WAAW,CAAC,CAAC,GAAG,IAAI,CAAC,wBAAwB,EAAE,YAAY,GAAG,WAAW,CAAC,CAAC;IACtI,oBAAoB,CAAC,EAAE,CACrB,OAAO,EAAE,OAAO,EAChB,OAAO,EAAE,YAAY,KAClB,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,sBAAsB,EAAE,YAAY,GAAG,WAAW,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,sBAAsB,EAAE,YAAY,GAAG,WAAW,CAAC,CAAC,CAAC;IACpJ,YAAY,CAAC,EAAE,wBAAwB,GAAG,CAAC,CACzC,MAAM,EAAE,uBAAuB,EAC/B,OAAO,EAAE,OAAO,EAChB,OAAO,EAAE,YAAY,KAClB,OAAO,CAAC,wBAAwB,CAAC,GAAG,wBAAwB,CAAC,CAAC;IACnE,mBAAmB,CAAC,EAAE,CACpB,MAAM,EAAE,uBAAuB,EAC/B,OAAO,EAAE,OAAO,EAChB,OAAO,EAAE,YAAY,KAClB,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC;IAC9B,uBAAuB,CAAC,EAAE,CACxB,MAAM,EAAE,uBAAuB,EAC/B,OAAO,EAAE,OAAO,EAChB,OAAO,EAAE,YAAY,KAClB,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;IAChC,SAAS,CAAC,EAAE,8BAA8B,CAAC;IAC3C,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,uBAAuB,GAAG,KAAK,EAAE,CAsEjF"}

package/dist/browser-routes.js

@@ -0,0 +1,175 @@
+import { BadRequestError } from "@superfunctions/http";
+export function createOAuthBrowserRoutes(config) {
+    const requestIdHeader = (config.requestIdHeader ?? "x-request-id").toLowerCase();
+    return [
+        {
+            method: "POST",
+            path: joinPath(config.basePath, "start"),
+            meta: resolveRouteMeta({ auth: { mode: "none" } }, config.routeMeta?.start),
+            handler: async (request, context) => {
+                const requestId = request.headers.get(requestIdHeader) ?? undefined;
+                const input = await config.resolveStartInput(request, context);
+                const result = await config.flowService.start({
+                    ...input,
+                    requestId: requestId ?? input.requestId
+                });
+                return Response.json(result);
+            }
+        },
+        {
+            method: "GET",
+            path: joinPath(config.basePath, "callback/:provider"),
+            meta: resolveRouteMeta({ auth: { mode: "none" } }, config.routeMeta?.callback),
+            handler: async (request, context) => {
+                const requestId = request.headers.get(requestIdHeader) ?? undefined;
+                const resolvedInput = (await config.resolveCallbackInput?.(request, context)) ?? {};
+                const url = new URL(request.url);
+                const callbackResult = await config.flowService.handleCallback({
+                    providerId: context.params.provider,
+                    code: asRequiredString(resolvedInput.code ?? url.searchParams.get("code"), "code"),
+                    state: asRequiredString(resolvedInput.state ?? url.searchParams.get("state"), "state"),
+                    redirectUri: asRequiredString(resolvedInput.redirectUri ??
+                        url.searchParams.get("redirectUri") ??
+                        inferCallbackRedirectUri(url), "redirectUri"),
+                    requestId
+                });
+                const mode = await resolveCallbackMode(config.callbackMode, callbackResult, request, context);
+                if (mode === "redirect") {
+                    const location = await resolveRedirectLocation(config, callbackResult, request, context);
+                    return Response.redirect(location, 302);
+                }
+                const payload = config.serializeCallbackResult
+                    ? await config.serializeCallbackResult(callbackResult, request, context)
+                    : callbackResult;
+                return Response.json(payload);
+            }
+        },
+        {
+            method: "POST",
+            path: joinPath(config.basePath, "disconnect/:provider"),
+            meta: resolveRouteMeta({ auth: { mode: "hybrid" } }, config.routeMeta?.disconnect),
+            handler: async (request, context) => {
+                const requestId = request.headers.get(requestIdHeader) ?? undefined;
+                const input = (await config.resolveDisconnectInput?.(request, context)) ??
+                    (await parseDisconnectBody(request));
+                const result = await config.flowService.disconnect({
+                    ...input,
+                    providerId: context.params.provider,
+                    requestId
+                });
+                return Response.json(result);
+            }
+        }
+    ];
+}
+function resolveRouteMeta(defaultMeta, overrideMeta) {
+    if (!overrideMeta) {
+        return defaultMeta;
+    }
+    return {
+        ...defaultMeta,
+        ...overrideMeta,
+        auth: mergeAuthMeta(defaultMeta.auth, overrideMeta.auth),
+        openapi: mergeOpenApiMeta(defaultMeta.openapi, overrideMeta.openapi)
+    };
+}
+function mergeAuthMeta(defaultMeta, overrideMeta) {
+    if (!defaultMeta) {
+        return overrideMeta ? { ...overrideMeta } : undefined;
+    }
+    if (!overrideMeta) {
+        return { ...defaultMeta };
+    }
+    return {
+        ...defaultMeta,
+        ...overrideMeta
+    };
+}
+function mergeOpenApiMeta(defaultMeta, overrideMeta) {
+    if (!defaultMeta) {
+        return overrideMeta ? { ...overrideMeta } : undefined;
+    }
+    if (!overrideMeta) {
+        return { ...defaultMeta };
+    }
+    return {
+        ...defaultMeta,
+        ...overrideMeta
+    };
+}
+function joinPath(basePath, suffix) {
+    const normalizedBase = basePath.startsWith("/") ? basePath : `/${basePath}`;
+    return `${normalizedBase.replace(/\/$/, "")}/${suffix.replace(/^\//, "")}`;
+}
+function asRequiredString(value, field) {
+    if (typeof value !== "string" || value.length === 0) {
+        throw new BadRequestError(`${field} is required`, "OAUTH_ROUTE_INVALID_INPUT");
+    }
+    return value;
+}
+async function resolveCallbackMode(mode, result, request, context) {
+    if (!mode) {
+        return "json";
+    }
+    if (typeof mode === "function") {
+        return mode(result, request, context);
+    }
+    return mode;
+}
+async function resolveRedirectLocation(config, result, request, context) {
+    if (config.getRedirectLocation) {
+        return config.getRedirectLocation(result, request, context);
+    }
+    if (result.subject.kind === "browser-auth" && result.subject.returnTo) {
+        return result.subject.returnTo;
+    }
+    return new URL("/", request.url).toString();
+}
+async function parseDisconnectBody(request) {
+    const body = asJsonObject(await parseJsonBody(request), "disconnect body");
+    return {
+        connectionId: asRequiredString(body.connectionId, "connectionId"),
+        revokeRemote: asOptionalBoolean(body.revokeRemote, "revokeRemote"),
+        tokenTypeHint: asTokenTypeHint(body.tokenTypeHint)
+    };
+}
+async function parseJsonBody(request) {
+    try {
+        return await request.json();
+    }
+    catch {
+        throw new BadRequestError("disconnect body must be valid JSON", "OAUTH_ROUTE_INVALID_INPUT");
+    }
+}
+function inferCallbackRedirectUri(url) {
+    const redirectUrl = new URL(url.toString());
+    for (const transientParam of ["code", "state", "redirectUri", "error", "error_description", "error_uri"]) {
+        redirectUrl.searchParams.delete(transientParam);
+    }
+    return redirectUrl.toString();
+}
+function asJsonObject(value, field) {
+    if (!value || typeof value !== "object" || Array.isArray(value)) {
+        throw new BadRequestError(`${field} must be a JSON object`, "OAUTH_ROUTE_INVALID_INPUT");
+    }
+    return value;
+}
+function asOptionalBoolean(value, field) {
+    if (value === undefined) {
+        return undefined;
+    }
+    if (typeof value !== "boolean") {
+        throw new BadRequestError(`${field} must be a boolean`, "OAUTH_ROUTE_INVALID_INPUT");
+    }
+    return value;
+}
+function asTokenTypeHint(value) {
+    if (value === undefined) {
+        return undefined;
+    }
+    if (value === "access_token" || value === "refresh_token") {
+        return value;
+    }
+    throw new BadRequestError("tokenTypeHint must be access_token or refresh_token", "OAUTH_ROUTE_INVALID_INPUT");
+}
+//# sourceMappingURL=browser-routes.js.map

package/dist/browser-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser-routes.js","sourceRoot":"","sources":["../src/browser-routes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAiDvD,MAAM,UAAU,wBAAwB,CAAC,MAA+B;IACtE,MAAM,eAAe,GAAG,CAAC,MAAM,CAAC,eAAe,IAAI,cAAc,CAAC,CAAC,WAAW,EAAE,CAAC;IAEjF,OAAO;QACL;YACE,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC;YACxC,IAAI,EAAE,gBAAgB,CAAC,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC;YAC3E,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE;gBAClC,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,SAAS,CAAC;gBACpE,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBAC/D,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC;oBAC5C,GAAG,KAAK;oBACR,SAAS,EAAE,SAAS,IAAI,KAAK,CAAC,SAAS;iBACxC,CAAC,CAAC;gBACH,OAAO,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC/B,CAAC;SACF;QACD;YACE,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,oBAAoB,CAAC;YACrD,IAAI,EAAE,gBAAgB,CAAC,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC;YAC9E,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE;gBAClC,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,SAAS,CAAC;gBACpE,MAAM,aAAa,GAAG,CAAC,MAAM,MAAM,CAAC,oBAAoB,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;gBACpF,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBACjC,MAAM,cAAc,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,cAAc,CAAC;oBAC7D,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ;oBACnC,IAAI,EAAE,gBAAgB,CAAC,aAAa,CAAC,IAAI,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;oBAClF,KAAK,EAAE,gBAAgB,CAAC,aAAa,CAAC,KAAK,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;oBACtF,WAAW,EAAE,gBAAgB,CAC3B,aAAa,CAAC,WAAW;wBACvB,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,aAAa,CAAC;wBACnC,wBAAwB,CAAC,GAAG,CAAC,EAC/B,aAAa,CACd;oBACD,SAAS;iBACV,CAAC,CAAC;gBAEH,MAAM,IAAI,GAAG,MAAM,mBAAmB,CAAC,MAAM,CAAC,YAAY,EAAE,cAAc,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;gBAC9F,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;oBACxB,MAAM,QAAQ,GAAG,MAAM,uBAAuB,CAAC,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;oBACzF,OAAO,QAAQ,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;gBAC1C,CAAC;gBAED,MAAM,OAAO,GAAG,MAAM,CAAC,uBAAuB;oBAC5C,CAAC,CAAC,MAAM,MAAM,CAAC,uBAAuB,CAAC,cAAc,EAAE,OAAO,EAAE,OAAO,CAAC;oBACxE,CAAC,CAAC,cAAc,CAAC;gBACnB,OAAO,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAChC,CAAC;SACF;QACD;YACE,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,sBAAsB,CAAC;YACvD,IAAI,EAAE,gBAAgB,CAAC,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,CAAC,SAAS,EAAE,UAAU,CAAC;YAClF,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE;gBAClC,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,SAAS,CAAC;gBACpE,MAAM,KAAK,GACT,CAAC,MAAM,MAAM,CAAC,sBAAsB,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;oBACzD,CAAC,MAAM,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC;gBAEvC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC;oBACjD,GAAG,KAAK;oBACR,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ;oBACnC,SAAS;iBACV,CAAC,CAAC;gBACH,OAAO,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC/B,CAAC;SACF;KACF,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,WAA0B,EAAE,YAAuC;IAC3F,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,OAAO;QACL,GAAG,WAAW;QACd,GAAG,YAAY;QACf,IAAI,EAAE,aAAa,CAAC,WAAW,CAAC,IAAI,EAAE,YAAY,CAAC,IAAI,CAAC;QACxD,OAAO,EAAE,gBAAgB,CAAC,WAAW,CAAC,OAAO,EAAE,YAAY,CAAC,OAAO,CAAC;KACrE,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CACpB,WAAsC,EACtC,YAAuC;IAEvC,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,YAAY,CAAC,CAAC,CAAC,EAAE,GAAG,YAAY,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACxD,CAAC;IAED,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO,EAAE,GAAG,WAAW,EAAE,CAAC;IAC5B,CAAC;IAED,OAAO;QACL,GAAG,WAAW;QACd,GAAG,YAAY;KAChB,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CACvB,WAAyC,EACzC,YAA0C;IAE1C,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,YAAY,CAAC,CAAC,CAAC,EAAE,GAAG,YAAY,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACxD,CAAC;IAED,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO,EAAE,GAAG,WAAW,EAAE,CAAC;IAC5B,CAAC;IAED,OAAO;QACL,GAAG,WAAW;QACd,GAAG,YAAY;KAChB,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,QAAgB,EAAE,MAAc;IAChD,MAAM,cAAc,GAAG,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,QAAQ,EAAE,CAAC;IAC5E,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC;AAC7E,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc,EAAE,KAAa;IACrD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,eAAe,CAAC,GAAG,KAAK,cAAc,EAAE,2BAA2B,CAAC,CAAC;IACjF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,KAAK,UAAU,mBAAmB,CAChC,IAA6C,EAC7C,MAA+B,EAC/B,OAAgB,EAChB,OAAqB;IAErB,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,OAAO,IAAI,KAAK,UAAU,EAAE,CAAC;QAC/B,OAAO,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IACxC,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,uBAAuB,CACpC,MAA+B,EAC/B,MAA+B,EAC/B,OAAgB,EAChB,OAAqB;IAErB,IAAI,MAAM,CAAC,mBAAmB,EAAE,CAAC;QAC/B,OAAO,MAAM,CAAC,mBAAmB,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAC9D,CAAC;IAED,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,KAAK,cAAc,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;QACtE,OAAO,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC;IACjC,CAAC;IAED,OAAO,IAAI,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC;AAC9C,CAAC;AAED,KAAK,UAAU,mBAAmB,CAChC,OAAgB;IAEhB,MAAM,IAAI,GAAG,YAAY,CAAC,MAAM,aAAa,CAAC,OAAO,CAAC,EAAE,iBAAiB,CAIxE,CAAC;IAEF,OAAO;QACL,YAAY,EAAE,gBAAgB,CAAC,IAAI,CAAC,YAAY,EAAE,cAAc,CAAC;QACjE,YAAY,EAAE,iBAAiB,CAAC,IAAI,CAAC,YAAY,EAAE,cAAc,CAAC;QAClE,aAAa,EAAE,eAAe,CAAC,IAAI,CAAC,aAAa,CAAC;KACnD,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,OAAgB;IAC3C,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,eAAe,CAAC,oCAAoC,EAAE,2BAA2B,CAAC,CAAC;IAC/F,CAAC;AACH,CAAC;AAED,SAAS,wBAAwB,CAAC,GAAQ;IACxC,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC5C,KAAK,MAAM,cAAc,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,mBAAmB,EAAE,WAAW,CAAC,EAAE,CAAC;QACzG,WAAW,CAAC,YAAY,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,WAAW,CAAC,QAAQ,EAAE,CAAC;AAChC,CAAC;AAED,SAAS,YAAY,CAAC,KAAc,EAAE,KAAa;IACjD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,eAAe,CAAC,GAAG,KAAK,wBAAwB,EAAE,2BAA2B,CAAC,CAAC;IAC3F,CAAC;IACD,OAAO,KAAgC,CAAC;AAC1C,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc,EAAE,KAAa;IACtD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,IAAI,eAAe,CAAC,GAAG,KAAK,oBAAoB,EAAE,2BAA2B,CAAC,CAAC;IACvF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,KAAK,KAAK,cAAc,IAAI,KAAK,KAAK,eAAe,EAAE,CAAC;QAC1D,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,IAAI,eAAe,CAAC,qDAAqD,EAAE,2BAA2B,CAAC,CAAC;AAChH,CAAC"}

package/dist/connection-routes.d.ts

@@ -0,0 +1,19 @@
+import type { HttpRouteMeta, Route, RouteContext } from "@superfunctions/http";
+import type { OAuthFlowCallbackInput, OAuthFlowCallbackResult, OAuthFlowDisconnectInput, OAuthFlowService, OAuthFlowStartInput } from "@superfunctions/oauth-flow";
+export type OAuthConnectionRouteMetaOverrides = {
+    start?: HttpRouteMeta;
+    callback?: HttpRouteMeta;
+    disconnect?: HttpRouteMeta;
+};
+export interface OAuthConnectionRouteConfig {
+    basePath: string;
+    flowService: OAuthFlowService;
+    resolveStartInput: (request: Request, context: RouteContext) => Promise<OAuthFlowStartInput> | OAuthFlowStartInput;
+    resolveDisconnectInput?: (request: Request, context: RouteContext) => Promise<Omit<OAuthFlowDisconnectInput, "providerId" | "requestId">> | Omit<OAuthFlowDisconnectInput, "providerId" | "requestId">;
+    resolveCallbackInput?: (request: Request, context: RouteContext) => Promise<Partial<Omit<OAuthFlowCallbackInput, "providerId" | "requestId">>> | Partial<Omit<OAuthFlowCallbackInput, "providerId" | "requestId">>;
+    serializeCallbackResult?: (result: OAuthFlowCallbackResult, request: Request, context: RouteContext) => Promise<unknown> | unknown;
+    routeMeta?: OAuthConnectionRouteMetaOverrides;
+    requestIdHeader?: string;
+}
+export declare function createOAuthConnectionRoutes(config: OAuthConnectionRouteConfig): Route[];
+//# sourceMappingURL=connection-routes.d.ts.map

package/dist/connection-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connection-routes.d.ts","sourceRoot":"","sources":["../src/connection-routes.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAiB,aAAa,EAAoB,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAChH,OAAO,KAAK,EACV,sBAAsB,EACtB,uBAAuB,EACvB,wBAAwB,EACxB,gBAAgB,EAChB,mBAAmB,EACpB,MAAM,4BAA4B,CAAC;AAEpC,MAAM,MAAM,iCAAiC,GAAG;IAC9C,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB,QAAQ,CAAC,EAAE,aAAa,CAAC;IACzB,UAAU,CAAC,EAAE,aAAa,CAAC;CAC5B,CAAC;AAEF,MAAM,WAAW,0BAA0B;IACzC,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,gBAAgB,CAAC;IAC9B,iBAAiB,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,KAAK,OAAO,CAAC,mBAAmB,CAAC,GAAG,mBAAmB,CAAC;IACnH,sBAAsB,CAAC,EAAE,CACvB,OAAO,EAAE,OAAO,EAChB,OAAO,EAAE,YAAY,KAClB,OAAO,CAAC,IAAI,CAAC,wBAAwB,EAAE,YAAY,GAAG,WAAW,CAAC,CAAC,GAAG,IAAI,CAAC,wBAAwB,EAAE,YAAY,GAAG,WAAW,CAAC,CAAC;IACtI,oBAAoB,CAAC,EAAE,CACrB,OAAO,EAAE,OAAO,EAChB,OAAO,EAAE,YAAY,KAClB,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,sBAAsB,EAAE,YAAY,GAAG,WAAW,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,sBAAsB,EAAE,YAAY,GAAG,WAAW,CAAC,CAAC,CAAC;IACpJ,uBAAuB,CAAC,EAAE,CACxB,MAAM,EAAE,uBAAuB,EAC/B,OAAO,EAAE,OAAO,EAChB,OAAO,EAAE,YAAY,KAClB,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;IAChC,SAAS,CAAC,EAAE,iCAAiC,CAAC;IAC9C,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,0BAA0B,GAAG,KAAK,EAAE,CAgEvF"}

package/dist/connection-routes.js

@@ -0,0 +1,152 @@
+import { BadRequestError } from "@superfunctions/http";
+export function createOAuthConnectionRoutes(config) {
+    const requestIdHeader = (config.requestIdHeader ?? "x-request-id").toLowerCase();
+    return [
+        {
+            method: "POST",
+            path: joinPath(config.basePath, "start"),
+            meta: resolveRouteMeta({ auth: { mode: "hybrid" } }, config.routeMeta?.start),
+            handler: async (request, context) => {
+                const requestId = request.headers.get(requestIdHeader) ?? undefined;
+                const input = await config.resolveStartInput(request, context);
+                const result = await config.flowService.start({
+                    ...input,
+                    requestId: requestId ?? input.requestId
+                });
+                return Response.json(result);
+            }
+        },
+        {
+            method: "GET",
+            path: joinPath(config.basePath, "callback/:provider"),
+            meta: resolveRouteMeta({ auth: { mode: "none" } }, config.routeMeta?.callback),
+            handler: async (request, context) => {
+                const requestId = request.headers.get(requestIdHeader) ?? undefined;
+                const resolvedInput = (await config.resolveCallbackInput?.(request, context)) ?? {};
+                const url = new URL(request.url);
+                const callbackResult = await config.flowService.handleCallback({
+                    providerId: context.params.provider,
+                    code: asRequiredString(resolvedInput.code ?? url.searchParams.get("code"), "code"),
+                    state: asRequiredString(resolvedInput.state ?? url.searchParams.get("state"), "state"),
+                    redirectUri: asRequiredString(resolvedInput.redirectUri ??
+                        url.searchParams.get("redirectUri") ??
+                        inferCallbackRedirectUri(url), "redirectUri"),
+                    requestId
+                });
+                const payload = config.serializeCallbackResult
+                    ? await config.serializeCallbackResult(callbackResult, request, context)
+                    : callbackResult;
+                return Response.json(payload);
+            }
+        },
+        {
+            method: "POST",
+            path: joinPath(config.basePath, "disconnect/:provider"),
+            meta: resolveRouteMeta({ auth: { mode: "hybrid" } }, config.routeMeta?.disconnect),
+            handler: async (request, context) => {
+                const requestId = request.headers.get(requestIdHeader) ?? undefined;
+                const input = (await config.resolveDisconnectInput?.(request, context)) ??
+                    (await parseDisconnectBody(request));
+                const result = await config.flowService.disconnect({
+                    ...input,
+                    providerId: context.params.provider,
+                    requestId
+                });
+                return Response.json(result);
+            }
+        }
+    ];
+}
+function resolveRouteMeta(defaultMeta, overrideMeta) {
+    if (!overrideMeta) {
+        return defaultMeta;
+    }
+    return {
+        ...defaultMeta,
+        ...overrideMeta,
+        auth: mergeAuthMeta(defaultMeta.auth, overrideMeta.auth),
+        openapi: mergeOpenApiMeta(defaultMeta.openapi, overrideMeta.openapi)
+    };
+}
+function mergeAuthMeta(defaultMeta, overrideMeta) {
+    if (!defaultMeta) {
+        return overrideMeta ? { ...overrideMeta } : undefined;
+    }
+    if (!overrideMeta) {
+        return { ...defaultMeta };
+    }
+    return {
+        ...defaultMeta,
+        ...overrideMeta
+    };
+}
+function mergeOpenApiMeta(defaultMeta, overrideMeta) {
+    if (!defaultMeta) {
+        return overrideMeta ? { ...overrideMeta } : undefined;
+    }
+    if (!overrideMeta) {
+        return { ...defaultMeta };
+    }
+    return {
+        ...defaultMeta,
+        ...overrideMeta
+    };
+}
+function joinPath(basePath, suffix) {
+    const normalizedBase = basePath.startsWith("/") ? basePath : `/${basePath}`;
+    return `${normalizedBase.replace(/\/$/, "")}/${suffix.replace(/^\//, "")}`;
+}
+function asRequiredString(value, field) {
+    if (typeof value !== "string" || value.length === 0) {
+        throw new BadRequestError(`${field} is required`, "OAUTH_ROUTE_INVALID_INPUT");
+    }
+    return value;
+}
+async function parseDisconnectBody(request) {
+    const body = asJsonObject(await parseJsonBody(request), "disconnect body");
+    return {
+        connectionId: asRequiredString(body.connectionId, "connectionId"),
+        revokeRemote: asOptionalBoolean(body.revokeRemote, "revokeRemote"),
+        tokenTypeHint: asTokenTypeHint(body.tokenTypeHint)
+    };
+}
+async function parseJsonBody(request) {
+    try {
+        return await request.json();
+    }
+    catch {
+        throw new BadRequestError("disconnect body must be valid JSON", "OAUTH_ROUTE_INVALID_INPUT");
+    }
+}
+function inferCallbackRedirectUri(url) {
+    const redirectUrl = new URL(url.toString());
+    for (const transientParam of ["code", "state", "redirectUri", "error", "error_description", "error_uri"]) {
+        redirectUrl.searchParams.delete(transientParam);
+    }
+    return redirectUrl.toString();
+}
+function asJsonObject(value, field) {
+    if (!value || typeof value !== "object" || Array.isArray(value)) {
+        throw new BadRequestError(`${field} must be a JSON object`, "OAUTH_ROUTE_INVALID_INPUT");
+    }
+    return value;
+}
+function asOptionalBoolean(value, field) {
+    if (value === undefined) {
+        return undefined;
+    }
+    if (typeof value !== "boolean") {
+        throw new BadRequestError(`${field} must be a boolean`, "OAUTH_ROUTE_INVALID_INPUT");
+    }
+    return value;
+}
+function asTokenTypeHint(value) {
+    if (value === undefined) {
+        return undefined;
+    }
+    if (value === "access_token" || value === "refresh_token") {
+        return value;
+    }
+    throw new BadRequestError("tokenTypeHint must be access_token or refresh_token", "OAUTH_ROUTE_INVALID_INPUT");
+}
+//# sourceMappingURL=connection-routes.js.map

package/dist/connection-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connection-routes.js","sourceRoot":"","sources":["../src/connection-routes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAqCvD,MAAM,UAAU,2BAA2B,CAAC,MAAkC;IAC5E,MAAM,eAAe,GAAG,CAAC,MAAM,CAAC,eAAe,IAAI,cAAc,CAAC,CAAC,WAAW,EAAE,CAAC;IAEjF,OAAO;QACL;YACE,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC;YACxC,IAAI,EAAE,gBAAgB,CAAC,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC;YAC7E,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE;gBAClC,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,SAAS,CAAC;gBACpE,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBAC/D,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC;oBAC5C,GAAG,KAAK;oBACR,SAAS,EAAE,SAAS,IAAI,KAAK,CAAC,SAAS;iBACxC,CAAC,CAAC;gBACH,OAAO,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC/B,CAAC;SACF;QACD;YACE,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,oBAAoB,CAAC;YACrD,IAAI,EAAE,gBAAgB,CAAC,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC;YAC9E,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE;gBAClC,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,SAAS,CAAC;gBACpE,MAAM,aAAa,GAAG,CAAC,MAAM,MAAM,CAAC,oBAAoB,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;gBACpF,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBACjC,MAAM,cAAc,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,cAAc,CAAC;oBAC7D,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ;oBACnC,IAAI,EAAE,gBAAgB,CAAC,aAAa,CAAC,IAAI,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;oBAClF,KAAK,EAAE,gBAAgB,CAAC,aAAa,CAAC,KAAK,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;oBACtF,WAAW,EAAE,gBAAgB,CAC3B,aAAa,CAAC,WAAW;wBACvB,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,aAAa,CAAC;wBACnC,wBAAwB,CAAC,GAAG,CAAC,EAC/B,aAAa,CACd;oBACD,SAAS;iBACV,CAAC,CAAC;gBAEH,MAAM,OAAO,GAAG,MAAM,CAAC,uBAAuB;oBAC5C,CAAC,CAAC,MAAM,MAAM,CAAC,uBAAuB,CAAC,cAAc,EAAE,OAAO,EAAE,OAAO,CAAC;oBACxE,CAAC,CAAC,cAAc,CAAC;gBACnB,OAAO,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAChC,CAAC;SACF;QACD;YACE,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,sBAAsB,CAAC;YACvD,IAAI,EAAE,gBAAgB,CAAC,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,CAAC,SAAS,EAAE,UAAU,CAAC;YAClF,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE;gBAClC,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,SAAS,CAAC;gBACpE,MAAM,KAAK,GACT,CAAC,MAAM,MAAM,CAAC,sBAAsB,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;oBACzD,CAAC,MAAM,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC;gBAEvC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC;oBACjD,GAAG,KAAK;oBACR,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ;oBACnC,SAAS;iBACV,CAAC,CAAC;gBACH,OAAO,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC/B,CAAC;SACF;KACF,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,WAA0B,EAAE,YAAuC;IAC3F,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,OAAO;QACL,GAAG,WAAW;QACd,GAAG,YAAY;QACf,IAAI,EAAE,aAAa,CAAC,WAAW,CAAC,IAAI,EAAE,YAAY,CAAC,IAAI,CAAC;QACxD,OAAO,EAAE,gBAAgB,CAAC,WAAW,CAAC,OAAO,EAAE,YAAY,CAAC,OAAO,CAAC;KACrE,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CACpB,WAAsC,EACtC,YAAuC;IAEvC,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,YAAY,CAAC,CAAC,CAAC,EAAE,GAAG,YAAY,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACxD,CAAC;IAED,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO,EAAE,GAAG,WAAW,EAAE,CAAC;IAC5B,CAAC;IAED,OAAO;QACL,GAAG,WAAW;QACd,GAAG,YAAY;KAChB,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CACvB,WAAyC,EACzC,YAA0C;IAE1C,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,YAAY,CAAC,CAAC,CAAC,EAAE,GAAG,YAAY,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACxD,CAAC;IAED,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO,EAAE,GAAG,WAAW,EAAE,CAAC;IAC5B,CAAC;IAED,OAAO;QACL,GAAG,WAAW;QACd,GAAG,YAAY;KAChB,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,QAAgB,EAAE,MAAc;IAChD,MAAM,cAAc,GAAG,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,QAAQ,EAAE,CAAC;IAC5E,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC;AAC7E,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc,EAAE,KAAa;IACrD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,eAAe,CAAC,GAAG,KAAK,cAAc,EAAE,2BAA2B,CAAC,CAAC;IACjF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,KAAK,UAAU,mBAAmB,CAChC,OAAgB;IAEhB,MAAM,IAAI,GAAG,YAAY,CAAC,MAAM,aAAa,CAAC,OAAO,CAAC,EAAE,iBAAiB,CAIxE,CAAC;IAEF,OAAO;QACL,YAAY,EAAE,gBAAgB,CAAC,IAAI,CAAC,YAAY,EAAE,cAAc,CAAC;QACjE,YAAY,EAAE,iBAAiB,CAAC,IAAI,CAAC,YAAY,EAAE,cAAc,CAAC;QAClE,aAAa,EAAE,eAAe,CAAC,IAAI,CAAC,aAAa,CAAC;KACnD,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,OAAgB;IAC3C,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,eAAe,CAAC,oCAAoC,EAAE,2BAA2B,CAAC,CAAC;IAC/F,CAAC;AACH,CAAC;AAED,SAAS,wBAAwB,CAAC,GAAQ;IACxC,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC5C,KAAK,MAAM,cAAc,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,mBAAmB,EAAE,WAAW,CAAC,EAAE,CAAC;QACzG,WAAW,CAAC,YAAY,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,WAAW,CAAC,QAAQ,EAAE,CAAC;AAChC,CAAC;AAED,SAAS,YAAY,CAAC,KAAc,EAAE,KAAa;IACjD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,eAAe,CAAC,GAAG,KAAK,wBAAwB,EAAE,2BAA2B,CAAC,CAAC;IAC3F,CAAC;IACD,OAAO,KAAgC,CAAC;AAC1C,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc,EAAE,KAAa;IACtD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,IAAI,eAAe,CAAC,GAAG,KAAK,oBAAoB,EAAE,2BAA2B,CAAC,CAAC;IACvF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,KAAK,KAAK,cAAc,IAAI,KAAK,KAAK,eAAe,EAAE,CAAC;QAC1D,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,IAAI,eAAe,CAAC,qDAAqD,EAAE,2BAA2B,CAAC,CAAC;AAChH,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,3 @@
+export * from "./browser-routes.js";
+export * from "./connection-routes.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,qBAAqB,CAAC;AACpC,cAAc,wBAAwB,CAAC"}

package/dist/index.js

@@ -0,0 +1,3 @@
+export * from "./browser-routes.js";
+export * from "./connection-routes.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,qBAAqB,CAAC;AACpC,cAAc,wBAAwB,CAAC"}

package/package.json

@@ -0,0 +1,49 @@
+{
+  "name": "@superfunctions/oauth-router",
+  "version": "0.0.1",
+  "description": "Reusable OAuth route factories for Superfunctions",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "test": "vitest --config ./vitest.config.ts --run",
+    "test:watch": "vitest --config ./vitest.config.ts --watch",
+    "lint": "echo 'lint not configured'",
+    "typecheck": "tsc --noEmit",
+    "clean": "rm -rf dist"
+  },
+  "keywords": [
+    "oauth",
+    "router",
+    "superfunctions"
+  ],
+  "author": "21n",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/21nCo/super-functions.git",
+    "directory": "packages/oauth-router"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "@superfunctions/http": "0.1.3",
+    "@superfunctions/oauth-flow": "0.0.1"
+  },
+  "devDependencies": {
+    "@types/node": "^22.0.0",
+    "typescript": "^5.6.0",
+    "vitest": "^3.2.4"
+  }
+}