@symbiote-native/auth-session 0.0.0-stage → 0.1.0

package/build-ngc/core/auth-session.js

@@ -0,0 +1,38 @@
+import { Platform } from 'react-native';
+import { dismissAuthSession } from '@symbiote-native/web-browser';
+import { AuthRequest } from './auth-request';
+import { resolveDiscoveryAsync } from './discovery';
+const IPV4_PATTERN = /\b(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\b/;
+/** Cancels an active `AuthSession`, if there is one. */
+export function dismiss() {
+    dismissAuthSession();
+}
+/** Unlike upstream, never reads an app manifest - pass `native` or `scheme` explicitly. */
+export function makeRedirectUri({ native, scheme, isTripleSlashed = false, queryParams = {}, path = '', preferLocalhost = false, } = {}) {
+    if (Platform.OS !== 'web' && native) {
+        return native;
+    }
+    if (!scheme) {
+        throw new Error('makeRedirectUri() requires a `scheme` (or a `native` URI on non-web platforms) - there is no app manifest to infer one from.');
+    }
+    const cleanedPath = path.replace(/^\//, '');
+    const query = new URLSearchParams(Object.entries(queryParams).filter((entry) => entry[1] != null)).toString();
+    const slashes = isTripleSlashed ? '///' : '//';
+    const url = `${scheme}:${slashes}${cleanedPath}${query ? `?${query}` : ''}`;
+    if (preferLocalhost) {
+        const ipAddress = url.match(IPV4_PATTERN);
+        if (ipAddress?.length) {
+            const [protocol, rest] = url.split(ipAddress[0]);
+            return `${protocol}localhost${rest}`;
+        }
+    }
+    return url;
+}
+/** Builds an `AuthRequest` and loads its authorization URL before returning it. */
+export async function loadAsync(config, issuerOrDiscovery) {
+    const request = new AuthRequest(config);
+    const discovery = await resolveDiscoveryAsync(issuerOrDiscovery);
+    await request.makeAuthUrlAsync(discovery);
+    return request;
+}
+//# sourceMappingURL=auth-session.js.map

package/build-ngc/core/auth-session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-session.js","sourceRoot":"","sources":["../../src/core/auth-session.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AACxC,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAI7C,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAEpD,MAAM,YAAY,GAChB,oKAAoK,CAAC;AAEvK,wDAAwD;AACxD,MAAM,UAAU,OAAO;IACrB,kBAAkB,EAAE,CAAC;AACvB,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,eAAe,CAAC,EAC9B,MAAM,EACN,MAAM,EACN,eAAe,GAAG,KAAK,EACvB,WAAW,GAAG,EAAE,EAChB,IAAI,GAAG,EAAE,EACT,eAAe,GAAG,KAAK,MACW,EAAE;IACpC,IAAI,QAAQ,CAAC,EAAE,KAAK,KAAK,IAAI,MAAM,EAAE,CAAC;QACpC,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,8HAA8H,CAC/H,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC5C,MAAM,KAAK,GAAG,IAAI,eAAe,CAC/B,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,MAAM,CAChC,CAAC,KAAK,EAA6B,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,CACvD,CACF,CAAC,QAAQ,EAAE,CAAC;IACb,MAAM,OAAO,GAAG,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/C,MAAM,GAAG,GAAG,GAAG,MAAM,IAAI,OAAO,GAAG,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IAE5E,IAAI,eAAe,EAAE,CAAC;QACpB,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAC1C,IAAI,SAAS,EAAE,MAAM,EAAE,CAAC;YACtB,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;YACjD,OAAO,GAAG,QAAQ,YAAY,IAAI,EAAE,CAAC;QACvC,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,mFAAmF;AACnF,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,MAA0B,EAC1B,iBAAqC;IAErC,MAAM,OAAO,GAAG,IAAI,WAAW,CAAC,MAAM,CAAC,CAAC;IACxC,MAAM,SAAS,GAAG,MAAM,qBAAqB,CAAC,iBAAiB,CAAC,CAAC;IACjE,MAAM,OAAO,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;IAC1C,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/build-ngc/core/auth-session.types.d.ts

@@ -0,0 +1,27 @@
+import type { AuthError } from './errors';
+import type { TokenResponse } from './token-request';
+/** cancel/dismiss/opened/locked carry no extra data; error/success carry params + any token. */
+export type IAuthSessionResult = {
+    type: 'cancel' | 'dismiss' | 'opened' | 'locked';
+} | {
+    type: 'error' | 'success';
+    /** @deprecated legacy error-code query param, use `error` instead. */
+    errorCode: string | null;
+    error?: AuthError | null;
+    params: Record<string, string>;
+    authentication: TokenResponse | null;
+    url: string;
+};
+export type IAuthSessionRedirectUriOptions = {
+    /** Appended to `scheme`; not applied when `native` is used. */
+    path?: string;
+    /** URI protocol `<scheme>://` built into the native app. Ignored if `native` is set. */
+    scheme?: string;
+    queryParams?: Record<string, string | undefined>;
+    /** `scheme:///path` when `true`, `scheme://path` otherwise. @default false */
+    isTripleSlashed?: boolean;
+    /** Rewrites a matched IPv4 host to `localhost` (iOS simulator convenience). @default false */
+    preferLocalhost?: boolean;
+    /** Manual scheme for a production build; takes precedence over every other option. */
+    native?: string;
+};

package/build-ngc/core/auth-session.types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=auth-session.types.js.map

package/build-ngc/core/auth-session.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-session.types.js","sourceRoot":"","sources":["../../src/core/auth-session.types.ts"],"names":[],"mappings":""}

package/build-ngc/core/base64.d.ts

@@ -0,0 +1 @@
+export declare function encodeNoWrap(input: string): string;

package/build-ngc/core/base64.js

@@ -0,0 +1,29 @@
+const KEYSET = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=';
+export function encodeNoWrap(input) {
+    let output = '';
+    let i = 0;
+    do {
+        const chr1 = input.charCodeAt(i++);
+        const chr2 = input.charCodeAt(i++);
+        const chr3 = input.charCodeAt(i++);
+        const enc1 = chr1 >> 2;
+        const enc2 = ((chr1 & 3) << 4) | (chr2 >> 4);
+        let enc3 = ((chr2 & 15) << 2) | (chr3 >> 6);
+        let enc4 = chr3 & 63;
+        if (isNaN(chr2)) {
+            enc3 = 64;
+            enc4 = 64;
+        }
+        else if (isNaN(chr3)) {
+            enc4 = 64;
+        }
+        output =
+            output +
+                KEYSET.charAt(enc1) +
+                KEYSET.charAt(enc2) +
+                KEYSET.charAt(enc3) +
+                KEYSET.charAt(enc4);
+    } while (i < input.length);
+    return output;
+}
+//# sourceMappingURL=base64.js.map

package/build-ngc/core/base64.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"base64.js","sourceRoot":"","sources":["../../src/core/base64.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,GACV,mEAAmE,CAAC;AAEtE,MAAM,UAAU,YAAY,CAAC,KAAa;IACxC,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,CAAC,GAAG,CAAC,CAAC;IAEV,GAAG,CAAC;QACF,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC;QACnC,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC;QACnC,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC;QAEnC,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,CAAC;QACvB,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC;QAC7C,IAAI,IAAI,GAAG,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC;QAC5C,IAAI,IAAI,GAAG,IAAI,GAAG,EAAE,CAAC;QACrB,IAAI,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAChB,IAAI,GAAG,EAAE,CAAC;YACV,IAAI,GAAG,EAAE,CAAC;QACZ,CAAC;aAAM,IAAI,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,IAAI,GAAG,EAAE,CAAC;QACZ,CAAC;QAED,MAAM;YACJ,MAAM;gBACN,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;gBACnB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;gBACnB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;gBACnB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE;IAE3B,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/build-ngc/core/discovery.d.ts

@@ -0,0 +1,57 @@
+import type { ICodeChallengeMethod } from './auth-request.types';
+/** URL using the `https` scheme with no query or fragment, asserted by the OP as its issuer. */
+export type IIssuer = string;
+export type IProviderMetadataEndpoints = {
+    issuer?: IIssuer;
+    authorization_endpoint: string;
+    token_endpoint: string;
+    userinfo_endpoint?: string;
+    revocation_endpoint?: string;
+    registration_endpoint?: string;
+    end_session_endpoint?: string;
+    introspection_endpoint?: string;
+    device_authorization_endpoint?: string;
+};
+export type IProviderMetadata = Record<string, string | boolean | string[]> & IProviderMetadataEndpoints & {
+    jwks_uri?: string;
+    scopes_supported?: string[];
+    response_types_supported?: string[];
+    response_modes_supported?: string[];
+    grant_types_supported?: string[];
+    id_token_signing_alg_values_supported?: string[];
+    subject_types_supported?: string[];
+    token_endpoint_auth_methods_supported?: string[];
+    display_values_supported?: string[];
+    claim_types_supported?: string[];
+    claims_supported?: string[];
+    service_documentation?: string;
+    claims_locales_supported?: string[];
+    ui_locales_supported?: string[];
+    claims_parameter_supported?: boolean;
+    request_parameter_supported?: boolean;
+    request_uri_parameter_supported?: boolean;
+    require_request_uri_registration?: boolean;
+    op_policy_uri?: string;
+    op_tos_uri?: string;
+    code_challenge_methods_supported?: ICodeChallengeMethod[];
+    check_session_iframe?: string;
+    backchannel_logout_supported?: boolean;
+    backchannel_logout_session_supported?: boolean;
+    frontchannel_logout_supported?: boolean;
+    frontchannel_logout_session_supported?: boolean;
+};
+export type IDiscoveryDocument = {
+    authorizationEndpoint?: string;
+    tokenEndpoint?: string;
+    /** Some providers (e.g. Spotify) don't expose one despite the spec requiring it. */
+    revocationEndpoint?: string;
+    userInfoEndpoint?: string;
+    endSessionEndpoint?: string;
+    registrationEndpoint?: string;
+    discoveryDocument?: IProviderMetadata;
+};
+export type IIssuerOrDiscovery = IIssuer | IDiscoveryDocument;
+/** https://tools.ietf.org/html/rfc5785 */
+export declare function issuerWithWellKnownUrl(issuer: IIssuer): string;
+export declare function fetchDiscoveryAsync(issuer: IIssuer): Promise<IDiscoveryDocument>;
+export declare function resolveDiscoveryAsync(issuerOrDiscovery: IIssuerOrDiscovery): Promise<IDiscoveryDocument>;

package/build-ngc/core/discovery.js

@@ -0,0 +1,30 @@
+import invariant from 'invariant';
+import { requestAsync } from './fetch';
+/** https://tools.ietf.org/html/rfc5785 */
+export function issuerWithWellKnownUrl(issuer) {
+    return `${issuer}/.well-known/openid-configuration`;
+}
+export async function fetchDiscoveryAsync(issuer) {
+    const json = await requestAsync(issuerWithWellKnownUrl(issuer), {
+        dataType: 'json',
+        method: 'GET',
+    });
+    return {
+        discoveryDocument: json,
+        authorizationEndpoint: json.authorization_endpoint,
+        tokenEndpoint: json.token_endpoint,
+        revocationEndpoint: json.revocation_endpoint,
+        userInfoEndpoint: json.userinfo_endpoint,
+        endSessionEndpoint: json.end_session_endpoint,
+        registrationEndpoint: json.registration_endpoint,
+    };
+}
+export async function resolveDiscoveryAsync(issuerOrDiscovery) {
+    invariant(issuerOrDiscovery &&
+        !['number', 'boolean'].includes(typeof issuerOrDiscovery), 'Expected a valid discovery object or issuer URL');
+    if (typeof issuerOrDiscovery === 'string') {
+        return await fetchDiscoveryAsync(issuerOrDiscovery);
+    }
+    return issuerOrDiscovery;
+}
+//# sourceMappingURL=discovery.js.map

package/build-ngc/core/discovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"discovery.js","sourceRoot":"","sources":["../../src/core/discovery.ts"],"names":[],"mappings":"AAAA,OAAO,SAAS,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AA4DvC,0CAA0C;AAC1C,MAAM,UAAU,sBAAsB,CAAC,MAAe;IACpD,OAAO,GAAG,MAAM,mCAAmC,CAAC;AACtD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,MAAe;IAEf,MAAM,IAAI,GAAG,MAAM,YAAY,CAC7B,sBAAsB,CAAC,MAAM,CAAC,EAC9B;QACE,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,KAAK;KACd,CACF,CAAC;IAEF,OAAO;QACL,iBAAiB,EAAE,IAAI;QACvB,qBAAqB,EAAE,IAAI,CAAC,sBAAsB;QAClD,aAAa,EAAE,IAAI,CAAC,cAAc;QAClC,kBAAkB,EAAE,IAAI,CAAC,mBAAmB;QAC5C,gBAAgB,EAAE,IAAI,CAAC,iBAAiB;QACxC,kBAAkB,EAAE,IAAI,CAAC,oBAAoB;QAC7C,oBAAoB,EAAE,IAAI,CAAC,qBAAqB;KACjD,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,iBAAqC;IAErC,SAAS,CACP,iBAAiB;QACf,CAAC,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,OAAO,iBAAiB,CAAC,EAC3D,iDAAiD,CAClD,CAAC;IACF,IAAI,OAAO,iBAAiB,KAAK,QAAQ,EAAE,CAAC;QAC1C,OAAO,MAAM,mBAAmB,CAAC,iBAAiB,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,iBAAiB,CAAC;AAC3B,CAAC"}

package/build-ngc/core/errors.d.ts

@@ -0,0 +1,29 @@
+declare class CodedError extends Error {
+    code: string;
+    constructor(code: string, message: string);
+}
+export type IResponseErrorConfig = Record<string, unknown> & {
+    error: string;
+    error_description?: string;
+    error_uri?: string;
+};
+export type IAuthErrorConfig = IResponseErrorConfig & {
+    /** Required only if `state` was used in the initial request. */
+    state?: string;
+};
+/** https://tools.ietf.org/html/rfc6749#section-4.1.2.1 */
+export declare class ResponseError extends CodedError {
+    description?: string;
+    uri?: string;
+    params: Record<string, unknown>;
+    constructor(params: IResponseErrorConfig, errorCodeType: 'auth' | 'token');
+}
+/** https://tools.ietf.org/html/rfc6749#section-5.2 */
+export declare class AuthError extends ResponseError {
+    state?: string;
+    constructor(response: IAuthErrorConfig);
+}
+export declare class TokenError extends ResponseError {
+    constructor(response: IResponseErrorConfig);
+}
+export {};

package/build-ngc/core/errors.js

@@ -0,0 +1,75 @@
+// Hand-ported from expo-modules-core's CodedError (src/errors/CodedError.ts) - this package
+// depends on none of the rest of expo-modules-core, so a single small class is copied rather
+// than pulling in the whole native-module runtime as a dependency.
+class CodedError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+    }
+}
+const AUTH_ERROR_MESSAGES = {
+    invalid_request: `The request is missing a required parameter, includes an invalid parameter value, includes a parameter more than once, or is otherwise malformed.`,
+    unauthorized_client: `The client is not authorized to request an authorization code using this method.`,
+    access_denied: `The resource owner or authorization server denied the request.`,
+    unsupported_response_type: `The authorization server does not support obtaining an authorization code using this method.`,
+    invalid_scope: 'The requested scope is invalid, unknown, or malformed.',
+    server_error: 'The authorization server encountered an unexpected condition that prevented it from fulfilling the request.',
+    temporarily_unavailable: 'The authorization server is currently unable to handle the request due to a temporary overloading or maintenance of the server.',
+    interaction_required: 'Auth server requires user interaction of some form to proceed.',
+    login_required: 'Auth server requires user authentication.',
+    account_selection_required: 'User is required to select a session at the auth server.',
+    consent_required: 'Auth server requires user consent.',
+    invalid_request_uri: 'The `request_uri` in the auth request returns an error or contains invalid data.',
+    invalid_request_object: 'The request parameter contains an invalid request object.',
+    request_not_supported: 'The OP does not support use of the `request` parameter.',
+    request_uri_not_supported: 'The OP does not support use of the `request_uri` parameter.',
+    registration_not_supported: 'The OP does not support use of the `registration` parameter.',
+};
+const TOKEN_ERROR_MESSAGES = {
+    invalid_request: `The request is missing a required parameter, includes an unsupported parameter value (other than grant type), repeats a parameter, includes multiple credentials, utilizes more than one mechanism for authenticating the client, or is otherwise malformed.`,
+    invalid_client: `Client authentication failed (e.g., unknown client, no client authentication included, or unsupported authentication method).`,
+    invalid_grant: `The provided authorization grant (e.g., authorization code, resource owner credentials) or refresh token is invalid, expired, revoked, does not match the redirection URI used in the authorization request, or was issued to another client.`,
+    unauthorized_client: `The authenticated client is not authorized to use this authorization grant type.`,
+    unsupported_grant_type: `The authorization grant type is not supported by the authorization server.`,
+};
+/** https://tools.ietf.org/html/rfc6749#section-4.1.2.1 */
+export class ResponseError extends CodedError {
+    description;
+    uri;
+    params;
+    constructor(params, errorCodeType) {
+        const { error, error_description, error_uri } = params;
+        const message = (errorCodeType === 'auth' ? AUTH_ERROR_MESSAGES : TOKEN_ERROR_MESSAGES)[error];
+        let errorMessage;
+        if (message) {
+            errorMessage =
+                message +
+                    (error_description ? `\nMore info: ${error_description}` : '');
+        }
+        else if (error_description) {
+            errorMessage = error_description;
+        }
+        else {
+            errorMessage = 'An unknown error occurred';
+        }
+        super(error, errorMessage);
+        this.description = error_description ?? message;
+        this.uri = error_uri;
+        this.params = params;
+    }
+}
+/** https://tools.ietf.org/html/rfc6749#section-5.2 */
+export class AuthError extends ResponseError {
+    state;
+    constructor(response) {
+        super(response, 'auth');
+        this.state = response.state;
+    }
+}
+export class TokenError extends ResponseError {
+    constructor(response) {
+        super(response, 'token');
+    }
+}
+//# sourceMappingURL=errors.js.map

package/build-ngc/core/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/core/errors.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,6FAA6F;AAC7F,mEAAmE;AACnE,MAAM,UAAW,SAAQ,KAAK;IAC5B,IAAI,CAAS;IAEb,YAAY,IAAY,EAAE,OAAe;QACvC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAaD,MAAM,mBAAmB,GAA2B;IAClD,eAAe,EAAE,mJAAmJ;IACpK,mBAAmB,EAAE,kFAAkF;IACvG,aAAa,EAAE,gEAAgE;IAC/E,yBAAyB,EAAE,8FAA8F;IACzH,aAAa,EAAE,wDAAwD;IACvE,YAAY,EACV,6GAA6G;IAC/G,uBAAuB,EACrB,iIAAiI;IACnI,oBAAoB,EAClB,gEAAgE;IAClE,cAAc,EAAE,2CAA2C;IAC3D,0BAA0B,EACxB,0DAA0D;IAC5D,gBAAgB,EAAE,oCAAoC;IACtD,mBAAmB,EACjB,kFAAkF;IACpF,sBAAsB,EACpB,2DAA2D;IAC7D,qBAAqB,EACnB,yDAAyD;IAC3D,yBAAyB,EACvB,6DAA6D;IAC/D,0BAA0B,EACxB,8DAA8D;CACjE,CAAC;AAEF,MAAM,oBAAoB,GAA2B;IACnD,eAAe,EAAE,8PAA8P;IAC/Q,cAAc,EAAE,+HAA+H;IAC/I,aAAa,EAAE,+OAA+O;IAC9P,mBAAmB,EAAE,kFAAkF;IACvG,sBAAsB,EAAE,4EAA4E;CACrG,CAAC;AAEF,0DAA0D;AAC1D,MAAM,OAAO,aAAc,SAAQ,UAAU;IAC3C,WAAW,CAAU;IACrB,GAAG,CAAU;IACb,MAAM,CAA0B;IAEhC,YAAY,MAA4B,EAAE,aAA+B;QACvE,MAAM,EAAE,KAAK,EAAE,iBAAiB,EAAE,SAAS,EAAE,GAAG,MAAM,CAAC;QACvD,MAAM,OAAO,GAAG,CACd,aAAa,KAAK,MAAM,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,oBAAoB,CACtE,CAAC,KAAK,CAAC,CAAC;QACT,IAAI,YAAoB,CAAC;QACzB,IAAI,OAAO,EAAE,CAAC;YACZ,YAAY;gBACV,OAAO;oBACP,CAAC,iBAAiB,CAAC,CAAC,CAAC,gBAAgB,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACnE,CAAC;aAAM,IAAI,iBAAiB,EAAE,CAAC;YAC7B,YAAY,GAAG,iBAAiB,CAAC;QACnC,CAAC;aAAM,CAAC;YACN,YAAY,GAAG,2BAA2B,CAAC;QAC7C,CAAC;QACD,KAAK,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;QAC3B,IAAI,CAAC,WAAW,GAAG,iBAAiB,IAAI,OAAO,CAAC;QAChD,IAAI,CAAC,GAAG,GAAG,SAAS,CAAC;QACrB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF;AAED,sDAAsD;AACtD,MAAM,OAAO,SAAU,SAAQ,aAAa;IAC1C,KAAK,CAAU;IAEf,YAAY,QAA0B;QACpC,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACxB,IAAI,CAAC,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;IAC9B,CAAC;CACF;AAED,MAAM,OAAO,UAAW,SAAQ,aAAa;IAC3C,YAAY,QAA8B;QACxC,KAAK,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC3B,CAAC;CACF"}

package/build-ngc/core/fetch.d.ts

@@ -0,0 +1,15 @@
+export type IFetchHeaders = Record<string, string> & {
+    'Content-Type': string;
+    Authorization?: string;
+    Accept?: string;
+};
+export type IFetchRequest = {
+    headers?: IFetchHeaders;
+    body?: Record<string, string>;
+    dataType?: string;
+    method?: string;
+};
+export declare function requestAsync<T>(requestUrl: string, fetchRequest: IFetchRequest & {
+    dataType: 'json';
+}): Promise<T>;
+export declare function requestAsync(requestUrl: string, fetchRequest: IFetchRequest): Promise<string>;

package/build-ngc/core/fetch.js

@@ -0,0 +1,41 @@
+export async function requestAsync(requestUrl, fetchRequest) {
+    const url = new URL(requestUrl);
+    const headers = {};
+    const request = {
+        body: undefined,
+        method: fetchRequest.method,
+        mode: 'cors',
+        headers,
+    };
+    const isJsonDataType = fetchRequest.dataType?.toLowerCase() === 'json';
+    if (fetchRequest.headers) {
+        for (const key in fetchRequest.headers) {
+            const header = fetchRequest.headers[key];
+            if (header != null) {
+                headers[key] = header;
+            }
+        }
+    }
+    if (fetchRequest.body) {
+        if (fetchRequest.method?.toUpperCase() === 'POST') {
+            request.body = new URLSearchParams(fetchRequest.body).toString();
+        }
+        else {
+            for (const [key, value] of Object.entries(fetchRequest.body)) {
+                url.searchParams.append(key, value);
+            }
+        }
+    }
+    if (isJsonDataType && !headers.Accept && !headers.accept) {
+        headers['Accept'] = 'application/json, text/javascript; q=0.01';
+    }
+    // React Native's URL implementation adds a trailing slash that the server doesn't expect.
+    const correctedUrl = url.toString().replace(/\/$/, '');
+    const response = await fetch(correctedUrl, request);
+    const contentType = response.headers.get('content-type');
+    if (isJsonDataType || contentType?.includes('application/json')) {
+        return response.json();
+    }
+    return response.text();
+}
+//# sourceMappingURL=fetch.js.map

package/build-ngc/core/fetch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetch.js","sourceRoot":"","sources":["../../src/core/fetch.ts"],"names":[],"mappings":"AAqBA,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,UAAkB,EAClB,YAA2B;IAE3B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC;IAEhC,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,MAAM,OAAO,GAAgB;QAC3B,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,YAAY,CAAC,MAAM;QAC3B,IAAI,EAAE,MAAM;QACZ,OAAO;KACR,CAAC;IAEF,MAAM,cAAc,GAAG,YAAY,CAAC,QAAQ,EAAE,WAAW,EAAE,KAAK,MAAM,CAAC;IAEvE,IAAI,YAAY,CAAC,OAAO,EAAE,CAAC;QACzB,KAAK,MAAM,GAAG,IAAI,YAAY,CAAC,OAAO,EAAE,CAAC;YACvC,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACzC,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;gBACnB,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC;YACxB,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,YAAY,CAAC,IAAI,EAAE,CAAC;QACtB,IAAI,YAAY,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK,MAAM,EAAE,CAAC;YAClD,OAAO,CAAC,IAAI,GAAG,IAAI,eAAe,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;QACnE,CAAC;aAAM,CAAC;YACN,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC7D,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACtC,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,cAAc,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QACzD,OAAO,CAAC,QAAQ,CAAC,GAAG,2CAA2C,CAAC;IAClE,CAAC;IAED,0FAA0F;IAC1F,MAAM,YAAY,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAEvD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IAEpD,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IACzD,IAAI,cAAc,IAAI,WAAW,EAAE,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;QAChE,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC;IACzB,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC;AACzB,CAAC"}

package/build-ngc/core/index.d.ts

@@ -0,0 +1,24 @@
+export { AuthRequest } from './auth-request';
+export { CodeChallengeMethod, Prompt, ResponseType, type IAuthDiscoveryDocument, type IAuthRequestConfig, type IAuthRequestPromptOptions, type ICodeChallengeMethod, } from './auth-request.types';
+export { dismiss, loadAsync, makeRedirectUri } from './auth-session';
+export type { IAuthSessionRedirectUriOptions, IAuthSessionResult, } from './auth-session.types';
+export type { IDiscoveryDocument, IIssuer, IIssuerOrDiscovery, IProviderMetadata, } from './discovery';
+export { fetchDiscoveryAsync, issuerWithWellKnownUrl, resolveDiscoveryAsync, } from './discovery';
+export { AuthError, ResponseError, TokenError } from './errors';
+export type { IAuthErrorConfig, IResponseErrorConfig } from './errors';
+export { requestAsync } from './fetch';
+export type { IFetchHeaders, IFetchRequest } from './fetch';
+export { AccessTokenRequest, RefreshTokenRequest, RevokeTokenRequest, TokenRequest, TokenResponse, exchangeCodeAsync, fetchUserInfoAsync, getCurrentTimeInSeconds, refreshAsync, revokeAsync, } from './token-request';
+export { GrantType, TokenTypeHint, type IAccessTokenRequestConfig, type IRefreshTokenRequestConfig, type IRevokeTokenRequestConfig, type IServerTokenResponseConfig, type ITokenRequestConfig, type ITokenResponseConfig, type ITokenType, } from './token-request.types';
+export { AUTH_CELL_CHANGE, createAutoDiscoveryController, createLoadedRequestController, createRequestResultController, } from './auth-request-controllers';
+export type { IAuthCell, IAuthRequestClass, ILoadableRequest, IPromptMethod, IRequestResultHolder, } from './auth-request-controllers';
+export { GETTER_ARGS, createAuthRequestHooks } from './auth-request-hooks';
+export type { IApply, IAuthHooksKit, IAuthRequestHooks, IAuthResourceController, IBoxedKind, IGetterKind, IHkt, } from './auth-request-hooks';
+export { createGoogleExchangeController } from './providers/google-exchange-controller';
+export { resolveFacebookRequestSetup, resolveGoogleRequestSetup, toGoogleIdTokenConfig, } from './providers/provider-hook-setup';
+export type { IGoogleExchangeParams, IGoogleRequestSetup, } from './providers/provider-hook-setup';
+export type { IProviderAuthRequestConfig } from './providers/provider.types';
+export { FacebookAuthRequest, discovery as facebookDiscovery, } from './providers/facebook';
+export type { IFacebookAuthRequestConfig } from './providers/facebook';
+export { GoogleAuthRequest, discovery as googleDiscovery, } from './providers/google';
+export type { IGoogleAuthRequestConfig } from './providers/google';

package/build-ngc/core/index.js

@@ -0,0 +1,15 @@
+export { AuthRequest } from './auth-request';
+export { CodeChallengeMethod, Prompt, ResponseType, } from './auth-request.types';
+export { dismiss, loadAsync, makeRedirectUri } from './auth-session';
+export { fetchDiscoveryAsync, issuerWithWellKnownUrl, resolveDiscoveryAsync, } from './discovery';
+export { AuthError, ResponseError, TokenError } from './errors';
+export { requestAsync } from './fetch';
+export { AccessTokenRequest, RefreshTokenRequest, RevokeTokenRequest, TokenRequest, TokenResponse, exchangeCodeAsync, fetchUserInfoAsync, getCurrentTimeInSeconds, refreshAsync, revokeAsync, } from './token-request';
+export { GrantType, TokenTypeHint, } from './token-request.types';
+export { AUTH_CELL_CHANGE, createAutoDiscoveryController, createLoadedRequestController, createRequestResultController, } from './auth-request-controllers';
+export { GETTER_ARGS, createAuthRequestHooks } from './auth-request-hooks';
+export { createGoogleExchangeController } from './providers/google-exchange-controller';
+export { resolveFacebookRequestSetup, resolveGoogleRequestSetup, toGoogleIdTokenConfig, } from './providers/provider-hook-setup';
+export { FacebookAuthRequest, discovery as facebookDiscovery, } from './providers/facebook';
+export { GoogleAuthRequest, discovery as googleDiscovery, } from './providers/google';
+//# sourceMappingURL=index.js.map

package/build-ngc/core/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/core/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EACL,mBAAmB,EACnB,MAAM,EACN,YAAY,GAKb,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAWrE,OAAO,EACL,mBAAmB,EACnB,sBAAsB,EACtB,qBAAqB,GACtB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAEhE,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEvC,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,kBAAkB,EAClB,YAAY,EACZ,aAAa,EACb,iBAAiB,EACjB,kBAAkB,EAClB,uBAAuB,EACvB,YAAY,EACZ,WAAW,GACZ,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,SAAS,EACT,aAAa,GAQd,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,gBAAgB,EAChB,6BAA6B,EAC7B,6BAA6B,EAC7B,6BAA6B,GAC9B,MAAM,4BAA4B,CAAC;AAQpC,OAAO,EAAE,WAAW,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAU3E,OAAO,EAAE,8BAA8B,EAAE,MAAM,wCAAwC,CAAC;AACxF,OAAO,EACL,2BAA2B,EAC3B,yBAAyB,EACzB,qBAAqB,GACtB,MAAM,iCAAiC,CAAC;AAMzC,OAAO,EACL,mBAAmB,EACnB,SAAS,IAAI,iBAAiB,GAC/B,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,iBAAiB,EACjB,SAAS,IAAI,eAAe,GAC7B,MAAM,oBAAoB,CAAC"}

package/build-ngc/core/pkce.d.ts

@@ -0,0 +1,9 @@
+export declare function generateRandom(size: number): string;
+/** Proof Key for Code Exchange (RFC 7636), Section 4.1. */
+export declare function deriveChallengeAsync(code: string): Promise<string>;
+export declare function buildCodeAsync(size?: number): Promise<{
+    codeChallenge: string;
+    codeVerifier: string;
+}>;
+/** Digests a random string with hex encoding, useful for creating `nonce`s. */
+export declare function generateHexStringAsync(size: number): Promise<string>;

package/build-ngc/core/pkce.js

@@ -0,0 +1,42 @@
+import invariant from 'invariant';
+import { CryptoDigestAlgorithm, CryptoEncoding, digestStringAsync, getRandomValues, } from '@symbiote-native/crypto';
+const CHARSET = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789';
+function convertBufferToString(buffer) {
+    const chars = [];
+    for (const byte of buffer) {
+        const char = CHARSET[byte % CHARSET.length];
+        if (char != null) {
+            chars.push(char);
+        }
+    }
+    return chars.join('');
+}
+function convertToUrlSafeString(b64) {
+    return b64.replace(/\+/g, '-').replace(/\//g, '_').replace(/=/g, '');
+}
+export function generateRandom(size) {
+    const buffer = getRandomValues(new Uint8Array(size));
+    return convertBufferToString(buffer);
+}
+/** Proof Key for Code Exchange (RFC 7636), Section 4.1. */
+export async function deriveChallengeAsync(code) {
+    invariant(code.length > 42 && code.length < 129, 'Invalid code length for PKCE.');
+    const buffer = await digestStringAsync(CryptoDigestAlgorithm.SHA256, code, {
+        encoding: CryptoEncoding.BASE64,
+    });
+    return convertToUrlSafeString(buffer);
+}
+export async function buildCodeAsync(size = 128) {
+    const codeVerifier = generateRandom(size);
+    const codeChallenge = await deriveChallengeAsync(codeVerifier);
+    return { codeVerifier, codeChallenge };
+}
+/** Digests a random string with hex encoding, useful for creating `nonce`s. */
+export async function generateHexStringAsync(size) {
+    const value = generateRandom(size);
+    const buffer = await digestStringAsync(CryptoDigestAlgorithm.SHA256, value, {
+        encoding: CryptoEncoding.HEX,
+    });
+    return convertToUrlSafeString(buffer);
+}
+//# sourceMappingURL=pkce.js.map

package/build-ngc/core/pkce.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pkce.js","sourceRoot":"","sources":["../../src/core/pkce.ts"],"names":[],"mappings":"AAAA,OAAO,SAAS,MAAM,WAAW,CAAC;AAClC,OAAO,EACL,qBAAqB,EACrB,cAAc,EACd,iBAAiB,EACjB,eAAe,GAChB,MAAM,yBAAyB,CAAC;AAEjC,MAAM,OAAO,GACX,gEAAgE,CAAC;AAEnE,SAAS,qBAAqB,CAAC,MAAkB;IAC/C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;QAC5C,IAAI,IAAI,IAAI,IAAI,EAAE,CAAC;YACjB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnB,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACxB,CAAC;AAED,SAAS,sBAAsB,CAAC,GAAW;IACzC,OAAO,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;IACrD,OAAO,qBAAqB,CAAC,MAAM,CAAC,CAAC;AACvC,CAAC;AAED,2DAA2D;AAC3D,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,IAAY;IACrD,SAAS,CACP,IAAI,CAAC,MAAM,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,GAAG,GAAG,EACrC,+BAA+B,CAChC,CAAC;IAEF,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,qBAAqB,CAAC,MAAM,EAAE,IAAI,EAAE;QACzE,QAAQ,EAAE,cAAc,CAAC,MAAM;KAChC,CAAC,CAAC;IACH,OAAO,sBAAsB,CAAC,MAAM,CAAC,CAAC;AACxC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,OAAe,GAAG;IAElB,MAAM,YAAY,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IAC1C,MAAM,aAAa,GAAG,MAAM,oBAAoB,CAAC,YAAY,CAAC,CAAC;IAC/D,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,CAAC;AACzC,CAAC;AAED,+EAA+E;AAC/E,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,IAAY;IACvD,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IACnC,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,qBAAqB,CAAC,MAAM,EAAE,KAAK,EAAE;QAC1E,QAAQ,EAAE,cAAc,CAAC,GAAG;KAC7B,CAAC,CAAC;IACH,OAAO,sBAAsB,CAAC,MAAM,CAAC,CAAC;AACxC,CAAC"}

package/build-ngc/core/prompt-string.d.ts

@@ -0,0 +1,2 @@
+import type { Prompt } from './auth-request.types';
+export declare function createPromptString(prompt: Prompt | Prompt[] | undefined): string | undefined;

package/build-ngc/core/prompt-string.js

@@ -0,0 +1,6 @@
+export function createPromptString(prompt) {
+    if (!prompt)
+        return undefined;
+    return Array.isArray(prompt) ? prompt.join(' ') : prompt;
+}
+//# sourceMappingURL=prompt-string.js.map

package/build-ngc/core/prompt-string.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt-string.js","sourceRoot":"","sources":["../../src/core/prompt-string.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,kBAAkB,CAChC,MAAqC;IAErC,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;AAC3D,CAAC"}

package/build-ngc/core/providers/facebook.d.ts

@@ -0,0 +1,16 @@
+import type { IAuthRequestConfig } from '../auth-request.types';
+import { AuthRequest } from '../auth-request';
+import type { IDiscoveryDocument } from '../discovery';
+import type { IProviderAuthRequestConfig } from './provider.types';
+export declare const discovery: IDiscoveryDocument;
+export type IFacebookAuthRequestConfig = IProviderAuthRequestConfig & {
+    webClientId?: string;
+    iosClientId?: string;
+    androidClientId?: string;
+};
+/** Extends `AuthRequest`, applying Facebook's minimum scopes and an auth nonce. */
+export declare class FacebookAuthRequest extends AuthRequest {
+    nonce?: string;
+    constructor({ language, extraParams, clientSecret, ...config }: IFacebookAuthRequestConfig);
+    getAuthRequestConfigAsync(): Promise<IAuthRequestConfig>;
+}

package/build-ngc/core/providers/facebook.js

@@ -0,0 +1,44 @@
+import { ResponseType } from '../auth-request.types';
+import { AuthRequest } from '../auth-request';
+import { generateHexStringAsync } from '../pkce';
+import { applyRequiredScopes } from './provider-utils';
+/** Required for Firebase to work properly - a reasonable default either way. */
+const MINIMUM_SCOPES = ['public_profile', 'email'];
+export const discovery = {
+    authorizationEndpoint: 'https://www.facebook.com/v6.0/dialog/oauth',
+    tokenEndpoint: 'https://graph.facebook.com/v6.0/oauth/access_token',
+};
+/** Extends `AuthRequest`, applying Facebook's minimum scopes and an auth nonce. */
+export class FacebookAuthRequest extends AuthRequest {
+    nonce;
+    constructor({ language, extraParams = {}, clientSecret, ...config }) {
+        const inputParams = {
+            display: 'popup',
+            ...extraParams,
+        };
+        if (language) {
+            inputParams.locale = language;
+        }
+        const scopes = applyRequiredScopes(config.scopes, MINIMUM_SCOPES);
+        // Facebook rejects a client secret unless the code flow is used.
+        const inputClientSecret = config.responseType && config.responseType !== ResponseType.Code
+            ? clientSecret
+            : undefined;
+        super({
+            ...config,
+            responseType: config.responseType ?? ResponseType.Token,
+            clientSecret: inputClientSecret,
+            scopes,
+            extraParams: inputParams,
+        });
+    }
+    async getAuthRequestConfigAsync() {
+        const { extraParams = {}, ...config } = await super.getAuthRequestConfigAsync();
+        if (!extraParams.nonce) {
+            this.nonce = this.nonce ?? (await generateHexStringAsync(16));
+            extraParams.auth_nonce = this.nonce;
+        }
+        return { ...config, extraParams };
+    }
+}
+//# sourceMappingURL=facebook.js.map

package/build-ngc/core/providers/facebook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"facebook.js","sourceRoot":"","sources":["../../../src/core/providers/facebook.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAE9C,OAAO,EAAE,sBAAsB,EAAE,MAAM,SAAS,CAAC;AACjD,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAGvD,gFAAgF;AAChF,MAAM,cAAc,GAAG,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC;AAEnD,MAAM,CAAC,MAAM,SAAS,GAAuB;IAC3C,qBAAqB,EAAE,4CAA4C;IACnE,aAAa,EAAE,oDAAoD;CACpE,CAAC;AAQF,mFAAmF;AACnF,MAAM,OAAO,mBAAoB,SAAQ,WAAW;IAClD,KAAK,CAAU;IAEf,YAAY,EACV,QAAQ,EACR,WAAW,GAAG,EAAE,EAChB,YAAY,EACZ,GAAG,MAAM,EACkB;QAC3B,MAAM,WAAW,GAA2B;YAC1C,OAAO,EAAE,OAAO;YAChB,GAAG,WAAW;SACf,CAAC;QACF,IAAI,QAAQ,EAAE,CAAC;YACb,WAAW,CAAC,MAAM,GAAG,QAAQ,CAAC;QAChC,CAAC;QAED,MAAM,MAAM,GAAG,mBAAmB,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;QAClE,iEAAiE;QACjE,MAAM,iBAAiB,GACrB,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,YAAY,KAAK,YAAY,CAAC,IAAI;YAC9D,CAAC,CAAC,YAAY;YACd,CAAC,CAAC,SAAS,CAAC;QAEhB,KAAK,CAAC;YACJ,GAAG,MAAM;YACT,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,YAAY,CAAC,KAAK;YACvD,YAAY,EAAE,iBAAiB;YAC/B,MAAM;YACN,WAAW,EAAE,WAAW;SACzB,CAAC,CAAC;IACL,CAAC;IAEQ,KAAK,CAAC,yBAAyB;QACtC,MAAM,EAAE,WAAW,GAAG,EAAE,EAAE,GAAG,MAAM,EAAE,GACnC,MAAM,KAAK,CAAC,yBAAyB,EAAE,CAAC;QAC1C,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;YACvB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,sBAAsB,CAAC,EAAE,CAAC,CAAC,CAAC;YAC9D,WAAW,CAAC,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC;QACtC,CAAC;QACD,OAAO,EAAE,GAAG,MAAM,EAAE,WAAW,EAAE,CAAC;IACpC,CAAC;CACF"}

package/build-ngc/core/providers/google-exchange-controller.d.ts

@@ -0,0 +1,10 @@
+import type { IAuthCell, ILoadableRequest } from '../auth-request-controllers';
+import type { IAuthSessionResult } from '../auth-session.types';
+import type { IGoogleExchangeParams } from './provider-hook-setup';
+type ICodeSource = Pick<ILoadableRequest, 'codeVerifier'>;
+export declare function createGoogleExchangeController(): {
+    resolve: (result: IAuthSessionResult | null, request: ICodeSource | null, exchange: IGoogleExchangeParams) => IAuthCell<IAuthSessionResult | null>;
+    flushDispose: () => void;
+    dispose: () => void;
+};
+export {};