@superfunctions/oauth-testing 0.0.1

package/README.md

@@ -0,0 +1,49 @@
+# @superfunctions/oauth-testing
+
+Deterministic OAuth testing helpers built on the shared in-memory storage contracts.
+
+## Install
+
+```bash
+npm install -D @superfunctions/oauth-testing vitest
+```
+
+## Quick Start
+
+```ts
+import {
+  InMemoryOAuthStateStore,
+  InMemoryTokenVault,
+  createMockOAuthProviderDescriptor,
+} from "@superfunctions/oauth-testing";
+
+const provider = createMockOAuthProviderDescriptor({
+  id: "mock-github",
+  defaultScopes: ["read:user"],
+});
+
+const stateStore = new InMemoryOAuthStateStore();
+const tokenVault = new InMemoryTokenVault();
+```
+
+## Package Boundary
+
+`@superfunctions/oauth-testing` owns test fixtures only:
+
+- `createMockOAuthProviderDescriptor()`
+- in-memory fixture aliases from `@superfunctions/oauth-storage`
+- browser-auth schema/composition fixtures
+
+It is not a production runtime package and should not be used as your durable OAuth storage layer.
+
+## Production Notes
+
+- Use this package only in tests or local harnesses.
+- If you need production routing, use `@superfunctions/oauth-router`.
+- If you need production token persistence, use `@superfunctions/oauth-storage` and prefer `EncryptedTokenVault`.
+
+## Related Packages
+
+- Shared storage: [../oauth-storage/README.md](../oauth-storage/README.md)
+- Flow orchestration: [../oauth-flow/README.md](../oauth-flow/README.md)
+- Route factories: [../oauth-router/README.md](../oauth-router/README.md)

package/dist/browser-auth-fixtures.d.ts

@@ -0,0 +1,19 @@
+import type { OAuthTokenSet } from "@superfunctions/oauth-core";
+import type { OAuthFlowCallbackInput, OAuthFlowStartInput } from "@superfunctions/oauth-flow";
+export interface BrowserAuthFixture {
+    startInput: OAuthFlowStartInput;
+    callbackInput: OAuthFlowCallbackInput;
+    tokenSet: OAuthTokenSet;
+    eventSnapshot: Record<string, unknown>;
+}
+export interface AuthFnSchemaCompositionFixture {
+    config: {
+        namespace: string;
+        plugins: string[];
+    };
+    expectedTables: string[];
+}
+export declare function createBrowserAuthFixture(): BrowserAuthFixture;
+export declare function createAuthFnSchemaCompositionFixture(): AuthFnSchemaCompositionFixture;
+export declare function redactSecrets<T>(value: T): T;
+//# sourceMappingURL=browser-auth-fixtures.d.ts.map

package/dist/browser-auth-fixtures.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser-auth-fixtures.d.ts","sourceRoot":"","sources":["../src/browser-auth-fixtures.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,KAAK,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAE9F,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,mBAAmB,CAAC;IAChC,aAAa,EAAE,sBAAsB,CAAC;IACtC,QAAQ,EAAE,aAAa,CAAC;IACxB,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACxC;AAED,MAAM,WAAW,8BAA8B;IAC7C,MAAM,EAAE;QACN,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,EAAE,MAAM,EAAE,CAAC;KACnB,CAAC;IACF,cAAc,EAAE,MAAM,EAAE,CAAC;CAC1B;AAID,wBAAgB,wBAAwB,IAAI,kBAAkB,CAuC7D;AAED,wBAAgB,oCAAoC,IAAI,8BAA8B,CAcrF;AAED,wBAAgB,aAAa,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,CAE5C"}

package/dist/browser-auth-fixtures.js

@@ -0,0 +1,74 @@
+const REDACTED = "[REDACTED]";
+export function createBrowserAuthFixture() {
+    const tokenSet = {
+        accessToken: "access-secret-token",
+        refreshToken: "refresh-secret-token",
+        tokenType: "Bearer",
+        expiresAt: "2026-03-22T00:00:00.000Z",
+        idToken: "id-secret-token",
+    };
+    return {
+        startInput: {
+            providerId: "google",
+            redirectUri: "https://app.example/callback",
+            subject: {
+                kind: "browser-auth",
+                intentId: "intent_browser_01",
+                returnTo: "https://app.example/post-auth",
+            },
+            requestId: "req_browser_01",
+        },
+        callbackInput: {
+            providerId: "google",
+            code: "oauth-code-01",
+            state: "st_browser_01",
+            redirectUri: "https://app.example/callback",
+            requestId: "req_browser_02",
+        },
+        tokenSet,
+        eventSnapshot: redactSecrets({
+            name: "oauth.flow.callback.success",
+            requestId: "req_browser_02",
+            details: {
+                accessToken: tokenSet.accessToken,
+                refreshToken: tokenSet.refreshToken,
+                idToken: tokenSet.idToken,
+                providerId: "google",
+            },
+        }),
+    };
+}
+export function createAuthFnSchemaCompositionFixture() {
+    return {
+        config: {
+            namespace: "auth",
+            plugins: ["password", "emailOtp", "socialOAuth"],
+        },
+        expectedTables: [
+            "users",
+            "sessions",
+            "password_credentials",
+            "otp_challenges",
+            "oauth_accounts",
+        ],
+    };
+}
+export function redactSecrets(value) {
+    return redactValue(value);
+}
+function redactValue(value) {
+    if (Array.isArray(value)) {
+        return value.map((entry) => redactValue(entry));
+    }
+    if (value && typeof value === "object") {
+        return Object.fromEntries(Object.entries(value).map(([key, entryValue]) => [
+            key,
+            shouldRedactKey(key) ? REDACTED : redactValue(entryValue),
+        ]));
+    }
+    return value;
+}
+function shouldRedactKey(key) {
+    return /(token|secret|authorization|bearer|password)/i.test(key);
+}
+//# sourceMappingURL=browser-auth-fixtures.js.map

package/dist/browser-auth-fixtures.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser-auth-fixtures.js","sourceRoot":"","sources":["../src/browser-auth-fixtures.ts"],"names":[],"mappings":"AAkBA,MAAM,QAAQ,GAAG,YAAY,CAAC;AAE9B,MAAM,UAAU,wBAAwB;IACtC,MAAM,QAAQ,GAAkB;QAC9B,WAAW,EAAE,qBAAqB;QAClC,YAAY,EAAE,sBAAsB;QACpC,SAAS,EAAE,QAAQ;QACnB,SAAS,EAAE,0BAA0B;QACrC,OAAO,EAAE,iBAAiB;KAC3B,CAAC;IAEF,OAAO;QACL,UAAU,EAAE;YACV,UAAU,EAAE,QAAQ;YACpB,WAAW,EAAE,8BAA8B;YAC3C,OAAO,EAAE;gBACP,IAAI,EAAE,cAAc;gBACpB,QAAQ,EAAE,mBAAmB;gBAC7B,QAAQ,EAAE,+BAA+B;aAC1C;YACD,SAAS,EAAE,gBAAgB;SAC5B;QACD,aAAa,EAAE;YACb,UAAU,EAAE,QAAQ;YACpB,IAAI,EAAE,eAAe;YACrB,KAAK,EAAE,eAAe;YACtB,WAAW,EAAE,8BAA8B;YAC3C,SAAS,EAAE,gBAAgB;SAC5B;QACD,QAAQ;QACR,aAAa,EAAE,aAAa,CAAC;YAC3B,IAAI,EAAE,6BAA6B;YACnC,SAAS,EAAE,gBAAgB;YAC3B,OAAO,EAAE;gBACP,WAAW,EAAE,QAAQ,CAAC,WAAW;gBACjC,YAAY,EAAE,QAAQ,CAAC,YAAY;gBACnC,OAAO,EAAE,QAAQ,CAAC,OAAO;gBACzB,UAAU,EAAE,QAAQ;aACrB;SACF,CAA4B;KAC9B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oCAAoC;IAClD,OAAO;QACL,MAAM,EAAE;YACN,SAAS,EAAE,MAAM;YACjB,OAAO,EAAE,CAAC,UAAU,EAAE,UAAU,EAAE,aAAa,CAAC;SACjD;QACD,cAAc,EAAE;YACd,OAAO;YACP,UAAU;YACV,sBAAsB;YACtB,gBAAgB;YAChB,gBAAgB;SACjB;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,aAAa,CAAI,KAAQ;IACvC,OAAO,WAAW,CAAC,KAAK,CAAM,CAAC;AACjC,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;IAClD,CAAC;IAED,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC;YAC1E,GAAG;YACH,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,UAAU,CAAC;SAC1D,CAAC,CACH,CAAC;IACJ,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CAAC,GAAW;IAClC,OAAO,+CAA+C,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACnE,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,5 @@
+import type { OAuthProviderDescriptor } from "@superfunctions/oauth-core";
+export { MemoryOAuthStateStore as InMemoryOAuthStateStore, MemoryTokenVault as InMemoryTokenVault } from "@superfunctions/oauth-storage";
+export { createAuthFnSchemaCompositionFixture, createBrowserAuthFixture, redactSecrets, } from "./browser-auth-fixtures.js";
+export declare function createMockOAuthProviderDescriptor(overrides?: Partial<OAuthProviderDescriptor>): OAuthProviderDescriptor;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AAC1E,OAAO,EACL,qBAAqB,IAAI,uBAAuB,EAChD,gBAAgB,IAAI,kBAAkB,EACvC,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,oCAAoC,EACpC,wBAAwB,EACxB,aAAa,GACd,MAAM,4BAA4B,CAAC;AAEpC,wBAAgB,iCAAiC,CAC/C,SAAS,GAAE,OAAO,CAAC,uBAAuB,CAAM,GAC/C,uBAAuB,CAYzB"}

package/dist/index.js

@@ -0,0 +1,16 @@
+export { MemoryOAuthStateStore as InMemoryOAuthStateStore, MemoryTokenVault as InMemoryTokenVault } from "@superfunctions/oauth-storage";
+export { createAuthFnSchemaCompositionFixture, createBrowserAuthFixture, redactSecrets, } from "./browser-auth-fixtures.js";
+export function createMockOAuthProviderDescriptor(overrides = {}) {
+    return {
+        id: "mock",
+        authorizationUrl: "https://mock.example/auth",
+        tokenUrl: "https://mock.example/token",
+        defaultScopes: ["read"],
+        supportsPkce: true,
+        supportsRefreshToken: true,
+        scopeSeparator: " ",
+        tokenAuthMethod: "client_secret_post",
+        ...overrides
+    };
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EACL,qBAAqB,IAAI,uBAAuB,EAChD,gBAAgB,IAAI,kBAAkB,EACvC,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,oCAAoC,EACpC,wBAAwB,EACxB,aAAa,GACd,MAAM,4BAA4B,CAAC;AAEpC,MAAM,UAAU,iCAAiC,CAC/C,YAA8C,EAAE;IAEhD,OAAO;QACL,EAAE,EAAE,MAAM;QACV,gBAAgB,EAAE,2BAA2B;QAC7C,QAAQ,EAAE,4BAA4B;QACtC,aAAa,EAAE,CAAC,MAAM,CAAC;QACvB,YAAY,EAAE,IAAI;QAClB,oBAAoB,EAAE,IAAI;QAC1B,cAAc,EAAE,GAAG;QACnB,eAAe,EAAE,oBAAoB;QACrC,GAAG,SAAS;KACb,CAAC;AACJ,CAAC"}

package/package.json

@@ -0,0 +1,50 @@
+{
+  "name": "@superfunctions/oauth-testing",
+  "version": "0.0.1",
+  "description": "OAuth testing utilities for Superfunctions",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "test": "vitest --config ./vitest.config.ts --run",
+    "test:watch": "vitest --config ./vitest.config.ts --watch",
+    "lint": "echo 'lint not configured'",
+    "typecheck": "tsc --noEmit",
+    "clean": "rm -rf dist"
+  },
+  "keywords": [
+    "oauth",
+    "testing",
+    "superfunctions"
+  ],
+  "author": "21n",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/21nCo/super-functions.git",
+    "directory": "packages/oauth-testing"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "@superfunctions/oauth-core": "0.0.1",
+    "@superfunctions/oauth-flow": "0.0.1",
+    "@superfunctions/oauth-storage": "0.0.1"
+  },
+  "devDependencies": {
+    "@types/node": "^22.0.0",
+    "typescript": "^5.6.0",
+    "vitest": "^3.2.4"
+  }
+}