@symbiote-native/auth-session 0.0.0-stage → 0.1.1

package/build-ngc/core/auth-request-controllers.d.ts

@@ -0,0 +1,44 @@
+import type { IEventValueSource } from '@symbiote-native/engine';
+import type { IAuthDiscoveryDocument, IAuthRequestConfig, IAuthRequestPromptOptions } from './auth-request.types';
+import type { IAuthSessionResult } from './auth-session.types';
+import type { IDiscoveryDocument, IIssuerOrDiscovery } from './discovery';
+export declare const AUTH_CELL_CHANGE = "change";
+export type IAuthCell<T> = IEventValueSource<T, typeof AUTH_CELL_CHANGE> & {
+    getSnapshot: () => T;
+};
+type IWritableAuthCell<T> = IAuthCell<T> & {
+    set: (value: T) => void;
+};
+export declare function createAuthCell<T>(initial: T): IWritableAuthCell<T>;
+/** What a request has to offer for a hook to load it and prompt with it */
+export type ILoadableRequest = {
+    url: string | null;
+    codeVerifier?: string;
+    makeAuthUrlAsync: (discovery: IAuthDiscoveryDocument) => Promise<string>;
+    promptAsync: (discovery: IAuthDiscoveryDocument, options?: IAuthRequestPromptOptions) => Promise<IAuthSessionResult>;
+};
+export type IAuthRequestClass<TRequest extends ILoadableRequest> = new (config: IAuthRequestConfig) => TRequest;
+type ICellResourceController<TArgs extends unknown[], TValue> = {
+    resolve: (...args: TArgs) => IAuthCell<TValue>;
+    flushDispose: () => void;
+    dispose: () => void;
+};
+export declare function createAutoDiscoveryController(): ICellResourceController<[
+    IIssuerOrDiscovery
+], IDiscoveryDocument | null>;
+export declare function createLoadedRequestController<TRequest extends ILoadableRequest = ILoadableRequest>(): {
+    resolve: (config: IAuthRequestConfig, discovery: IDiscoveryDocument | null, RequestClass: IAuthRequestClass<TRequest>) => IAuthCell<TRequest | null>;
+    flushDispose: () => void;
+    dispose: () => void;
+};
+export type IPromptMethod = (options?: IAuthRequestPromptOptions) => Promise<IAuthSessionResult>;
+export type IRequestResultHolder = {
+    result: IAuthCell<IAuthSessionResult | null>;
+    promptAsync: IPromptMethod;
+};
+export declare function createRequestResultController(): {
+    resolve: (request: ILoadableRequest | null, discovery: IDiscoveryDocument | null, customOptions?: IAuthRequestPromptOptions) => IRequestResultHolder;
+    flushDispose: () => void;
+    dispose: () => void;
+};
+export {};

package/build-ngc/core/auth-request-controllers.js

@@ -0,0 +1,123 @@
+// Framework-agnostic halves of `useAutoDiscovery`, `useLoadedAuthRequest` and
+// `useAuthRequestResult`. Each controller binds to an adapter's `createResourceHook`, and the value
+// it hands back is a cell the adapter follows with its `createEventValueHook`
+import { createResourceController } from '@symbiote-native/engine';
+import { resolveDiscoveryAsync } from './discovery';
+import { createPromptString } from './prompt-string';
+export const AUTH_CELL_CHANGE = 'change';
+export function createAuthCell(initial) {
+    let value = initial;
+    const listeners = new Set();
+    return {
+        getSnapshot: () => value,
+        set(next) {
+            value = next;
+            for (const listener of [...listeners])
+                listener(next);
+        },
+        addListener(_event, listener) {
+            listeners.add(listener);
+            return { remove: () => void listeners.delete(listener) };
+        },
+    };
+}
+export function createAutoDiscoveryController() {
+    const controller = createResourceController(issuerOrDiscovery => {
+        const cell = createAuthCell(null);
+        let isAllowed = true;
+        void resolveDiscoveryAsync(issuerOrDiscovery).then(discovery => {
+            if (isAllowed)
+                cell.set(discovery);
+        });
+        return {
+            cell,
+            stop: () => {
+                isAllowed = false;
+            },
+        };
+    }, resource => resource.stop());
+    return {
+        resolve: issuerOrDiscovery => controller.resolve(issuerOrDiscovery).cell,
+        flushDispose: controller.flushDispose,
+        dispose: controller.dispose,
+    };
+}
+// Everything upstream lists as the effect's dependencies, folded to primitives
+function loadedRequestKey(config, discovery) {
+    return JSON.stringify([
+        discovery?.authorizationEndpoint,
+        config.clientId,
+        config.redirectUri,
+        config.responseType,
+        config.clientSecret,
+        config.codeChallenge,
+        config.state,
+        config.usePKCE,
+        config.scopes?.join(' '),
+        createPromptString(config.prompt),
+        JSON.stringify(config.extraParams ?? {}),
+    ]);
+}
+export function createLoadedRequestController() {
+    // The request that finished loading last, shown while a changed config reloads
+    let lastLoaded = null;
+    let RequestClassInUse = null;
+    const controller = createResourceController(({ config, discovery }) => {
+        const cell = createAuthCell(lastLoaded);
+        let isMounted = true;
+        if (discovery && RequestClassInUse) {
+            const request = new RequestClassInUse(config);
+            void request.makeAuthUrlAsync(discovery).then(() => {
+                if (!isMounted)
+                    return;
+                lastLoaded = request;
+                cell.set(request);
+            });
+        }
+        return {
+            cell,
+            stop: () => {
+                isMounted = false;
+            },
+        };
+    }, resource => resource.stop(), (a, b) => a.key === b.key);
+    return {
+        resolve(config, discovery, RequestClass) {
+            RequestClassInUse = RequestClass;
+            return controller.resolve({
+                key: loadedRequestKey(config, discovery),
+                config,
+                discovery,
+            }).cell;
+        },
+        flushDispose: controller.flushDispose,
+        dispose: controller.dispose,
+    };
+}
+export function createRequestResultController() {
+    const result = createAuthCell(null);
+    let latest = { request: null, discovery: null, customOptions: {} };
+    // Reads the latest inputs when called, so one stable function serves every render
+    const promptAsync = async (options = {}) => {
+        const { request, discovery, customOptions } = latest;
+        if (!discovery || !request) {
+            throw new Error('Cannot prompt to authenticate until the request has finished loading.');
+        }
+        const prompted = await request.promptAsync(discovery, {
+            ...customOptions,
+            ...options,
+        });
+        result.set(prompted);
+        return prompted;
+    };
+    const holder = { result, promptAsync };
+    return {
+        resolve(request, discovery, customOptions = {}) {
+            latest = { request, discovery, customOptions };
+            return holder;
+        },
+        flushDispose: () => undefined,
+        dispose: () => undefined,
+    };
+}
+//# sourceMappingURL=auth-request-controllers.js.map

package/build-ngc/core/auth-request-controllers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-request-controllers.js","sourceRoot":"","sources":["../../src/core/auth-request-controllers.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,oGAAoG;AACpG,8EAA8E;AAG9E,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AAQnE,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAErD,MAAM,CAAC,MAAM,gBAAgB,GAAG,QAAQ,CAAC;AAQzC,MAAM,UAAU,cAAc,CAAI,OAAU;IAC1C,IAAI,KAAK,GAAG,OAAO,CAAC;IACpB,MAAM,SAAS,GAAG,IAAI,GAAG,EAAqB,CAAC;IAC/C,OAAO;QACL,WAAW,EAAE,GAAG,EAAE,CAAC,KAAK;QACxB,GAAG,CAAC,IAAI;YACN,KAAK,GAAG,IAAI,CAAC;YACb,KAAK,MAAM,QAAQ,IAAI,CAAC,GAAG,SAAS,CAAC;gBAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;QACxD,CAAC;QACD,WAAW,CAAC,MAAM,EAAE,QAAQ;YAC1B,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACxB,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,KAAK,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3D,CAAC;KACF,CAAC;AACJ,CAAC;AA4BD,MAAM,UAAU,6BAA6B;IAI3C,MAAM,UAAU,GAAG,wBAAwB,CAIzC,iBAAiB,CAAC,EAAE;QAClB,MAAM,IAAI,GAAG,cAAc,CAA4B,IAAI,CAAC,CAAC;QAC7D,IAAI,SAAS,GAAG,IAAI,CAAC;QACrB,KAAK,qBAAqB,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE;YAC7D,IAAI,SAAS;gBAAE,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;QACH,OAAO;YACL,IAAI;YACJ,IAAI,EAAE,GAAG,EAAE;gBACT,SAAS,GAAG,KAAK,CAAC;YACpB,CAAC;SACF,CAAC;IACJ,CAAC,EACD,QAAQ,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,CAC5B,CAAC;IACF,OAAO;QACL,OAAO,EAAE,iBAAiB,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,IAAI;QACxE,YAAY,EAAE,UAAU,CAAC,YAAY;QACrC,OAAO,EAAE,UAAU,CAAC,OAAO;KAC5B,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,SAAS,gBAAgB,CACvB,MAA0B,EAC1B,SAAoC;IAEpC,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,SAAS,EAAE,qBAAqB;QAChC,MAAM,CAAC,QAAQ;QACf,MAAM,CAAC,WAAW;QAClB,MAAM,CAAC,YAAY;QACnB,MAAM,CAAC,YAAY;QACnB,MAAM,CAAC,aAAa;QACpB,MAAM,CAAC,KAAK;QACZ,MAAM,CAAC,OAAO;QACd,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC;QACxB,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC;QACjC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC;KACzC,CAAC,CAAC;AACL,CAAC;AAaD,MAAM,UAAU,6BAA6B;IAW3C,+EAA+E;IAC/E,IAAI,UAAU,GAAoB,IAAI,CAAC;IACvC,IAAI,iBAAiB,GAAuC,IAAI,CAAC;IAEjE,MAAM,UAAU,GAAG,wBAAwB,CAIzC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE;QACxB,MAAM,IAAI,GAAG,cAAc,CAAkB,UAAU,CAAC,CAAC;QACzD,IAAI,SAAS,GAAG,IAAI,CAAC;QACrB,IAAI,SAAS,IAAI,iBAAiB,EAAE,CAAC;YACnC,MAAM,OAAO,GAAG,IAAI,iBAAiB,CAAC,MAAM,CAAC,CAAC;YAC9C,KAAK,OAAO,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE;gBACjD,IAAI,CAAC,SAAS;oBAAE,OAAO;gBACvB,UAAU,GAAG,OAAO,CAAC;gBACrB,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACpB,CAAC,CAAC,CAAC;QACL,CAAC;QACD,OAAO;YACL,IAAI;YACJ,IAAI,EAAE,GAAG,EAAE;gBACT,SAAS,GAAG,KAAK,CAAC;YACpB,CAAC;SACF,CAAC;IACJ,CAAC,EACD,QAAQ,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,EAC3B,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,CAC1B,CAAC;IAEF,OAAO;QACL,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,YAAY;YACrC,iBAAiB,GAAG,YAAY,CAAC;YACjC,OAAO,UAAU,CAAC,OAAO,CAAC;gBACxB,GAAG,EAAE,gBAAgB,CAAC,MAAM,EAAE,SAAS,CAAC;gBACxC,MAAM;gBACN,SAAS;aACV,CAAC,CAAC,IAAI,CAAC;QACV,CAAC;QACD,YAAY,EAAE,UAAU,CAAC,YAAY;QACrC,OAAO,EAAE,UAAU,CAAC,OAAO;KAC5B,CAAC;AACJ,CAAC;AAWD,MAAM,UAAU,6BAA6B;IAS3C,MAAM,MAAM,GAAG,cAAc,CAA4B,IAAI,CAAC,CAAC;IAC/D,IAAI,MAAM,GAIN,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC;IAE1D,kFAAkF;IAClF,MAAM,WAAW,GAAkB,KAAK,EAAE,OAAO,GAAG,EAAE,EAAE,EAAE;QACxD,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,GAAG,MAAM,CAAC;QACrD,IAAI,CAAC,SAAS,IAAI,CAAC,OAAO,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CACb,uEAAuE,CACxE,CAAC;QACJ,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,SAAS,EAAE;YACpD,GAAG,aAAa;YAChB,GAAG,OAAO;SACX,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACrB,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC;IACF,MAAM,MAAM,GAAyB,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IAE7D,OAAO;QACL,OAAO,CAAC,OAAO,EAAE,SAAS,EAAE,aAAa,GAAG,EAAE;YAC5C,MAAM,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC;YAC/C,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,YAAY,EAAE,GAAG,EAAE,CAAC,SAAS;QAC7B,OAAO,EAAE,GAAG,EAAE,CAAC,SAAS;KACzB,CAAC;AACJ,CAAC"}

package/build-ngc/core/auth-request-hooks.d.ts

@@ -0,0 +1,67 @@
+import { AuthRequest } from './auth-request';
+import type { IAuthCell, IAuthRequestClass, IPromptMethod } from './auth-request-controllers';
+import { AUTH_CELL_CHANGE } from './auth-request-controllers';
+import type { IAuthRequestConfig, IAuthRequestPromptOptions } from './auth-request.types';
+import type { IAuthSessionRedirectUriOptions, IAuthSessionResult } from './auth-session.types';
+import type { IDiscoveryDocument, IIssuerOrDiscovery } from './discovery';
+import type { FacebookAuthRequest, IFacebookAuthRequestConfig } from './providers/facebook';
+import type { GoogleAuthRequest, IGoogleAuthRequestConfig } from './providers/google';
+/** A type-level function, how an adapter says "its box of `T`" */
+export interface IHkt {
+    readonly input: unknown;
+    readonly output: unknown;
+}
+export type IApply<F extends IHkt, T> = (F & {
+    readonly input: T;
+})['output'];
+/** A plain getter, the argument shape of Solid, Svelte and Angular */
+export interface IGetterKind extends IHkt {
+    readonly output: () => this['input'];
+}
+type IBoxed<T> = {
+    readonly current: T;
+};
+/** A `{ current }` box, Svelte's result shape */
+export interface IBoxedKind extends IHkt {
+    readonly output: IBoxed<this['input']>;
+}
+/** The argument half of a kit for adapters whose arguments are plain getters */
+export declare const GETTER_ARGS: {
+    toGetter: <T>(arg: () => T) => (() => T);
+    constant: <T>(value: T) => (() => T);
+};
+type IDiscoveryValue = IDiscoveryDocument | null;
+type IResultValue = IAuthSessionResult | null;
+export type IAuthResourceController<TArgs extends unknown[], TResource> = {
+    resolve: (...args: TArgs) => TResource;
+    flushDispose: () => void;
+    dispose: () => void;
+};
+/** The adapter's own primitives the hooks are built from */
+export type IAuthHooksKit<FResource extends IHkt, FValue extends IHkt, FArg extends IHkt> = {
+    createResourceHook: <TArgs extends unknown[], TResource>(createController: () => IAuthResourceController<TArgs, TResource>) => (getArgs: () => TArgs) => IApply<FResource, TResource>;
+    readResource: <T>(box: IApply<FResource, T>) => T;
+    createEventValueHook: <TValue>(event: typeof AUTH_CELL_CHANGE, getValue: (source: IAuthCell<TValue>) => TValue) => (getSource: () => IAuthCell<TValue>) => IApply<FValue, TValue>;
+    readValue: <T>(box: IApply<FValue, T>) => T;
+    /** Turns whatever the adapter accepts as an argument into a getter */
+    toGetter: <T>(arg: IApply<FArg, T>) => () => T;
+    /** Wraps a fixed value in the adapter's argument shape */
+    constant: <T>(value: T) => IApply<FArg, T>;
+};
+type IUseAuthRequestBoxes<FValue extends IHkt, TRequest extends AuthRequest> = readonly [
+    IApply<FValue, TRequest | null>,
+    IApply<FValue, IResultValue>,
+    IPromptMethod
+];
+type IAnyKit = IAuthHooksKit<IHkt, IHkt, IHkt>;
+export type IAuthRequestHooks<FValue extends IHkt, FArg extends IHkt> = {
+    useAutoDiscovery: (issuerOrDiscovery: IApply<FArg, IIssuerOrDiscovery>) => IApply<FValue, IDiscoveryValue>;
+    useLoadedAuthRequest: (config: IApply<FArg, IAuthRequestConfig>, discovery: IApply<FArg, IDiscoveryValue>, RequestClass: IAuthRequestClass<AuthRequest>) => IApply<FValue, AuthRequest | null>;
+    useAuthRequestResult: (request: IApply<FArg, AuthRequest | null>, discovery: IApply<FArg, IDiscoveryValue>, customOptions?: IApply<FArg, IAuthRequestPromptOptions>) => readonly [IApply<FValue, IResultValue>, IPromptMethod];
+    useAuthRequest: (config: IApply<FArg, IAuthRequestConfig>, discovery: IApply<FArg, IDiscoveryValue>) => IUseAuthRequestBoxes<FValue, AuthRequest>;
+    useGoogleAuthRequest: (config?: IApply<FArg, Partial<IGoogleAuthRequestConfig>>, redirectUriOptions?: IApply<FArg, Partial<IAuthSessionRedirectUriOptions>>) => IUseAuthRequestBoxes<FValue, GoogleAuthRequest>;
+    useGoogleIdTokenAuthRequest: (config: IApply<FArg, Partial<IGoogleAuthRequestConfig>>, redirectUriOptions?: IApply<FArg, Partial<IAuthSessionRedirectUriOptions>>) => IUseAuthRequestBoxes<FValue, GoogleAuthRequest>;
+    useFacebookAuthRequest: (config?: IApply<FArg, Partial<IFacebookAuthRequestConfig>>, redirectUriOptions?: IApply<FArg, Partial<IAuthSessionRedirectUriOptions>>) => IUseAuthRequestBoxes<FValue, FacebookAuthRequest>;
+};
+export declare function createAuthRequestHooks<FResource extends IHkt, FValue extends IHkt, FArg extends IHkt>(kit: IAuthHooksKit<FResource, FValue, FArg>): IAuthRequestHooks<FValue, FArg>;
+export type { IAnyKit as IAuthHooksAnyKit };

package/build-ngc/core/auth-request-hooks.js

@@ -0,0 +1,76 @@
+// The auth request hooks written once for every adapter whose hooks take getters (Vue, Solid,
+// Svelte, Angular), React keeps its own wiring. An adapter's boxes (`ShallowRef`, `Accessor`,
+// `{ current }`, `Signal`) are type-level functions here, since one hook returns several box types
+import { AuthRequest } from './auth-request';
+import { AUTH_CELL_CHANGE, createAutoDiscoveryController, createLoadedRequestController, createRequestResultController, } from './auth-request-controllers';
+import { discovery as facebookDiscovery, FacebookAuthRequest as FacebookRequest, } from './providers/facebook';
+import { createGoogleExchangeController } from './providers/google-exchange-controller';
+import { discovery as googleDiscovery, GoogleAuthRequest as GoogleRequest, } from './providers/google';
+import { resolveFacebookRequestSetup, resolveGoogleRequestSetup, toGoogleIdTokenConfig, } from './providers/provider-hook-setup';
+/** The argument half of a kit for adapters whose arguments are plain getters */
+export const GETTER_ARGS = {
+    toGetter: (arg) => arg,
+    constant: (value) => () => value,
+};
+function readAuthCell(cell) {
+    return cell.getSnapshot();
+}
+function valueHook(kit) {
+    return kit.createEventValueHook(AUTH_CELL_CHANGE, readAuthCell);
+}
+function discoveryOf(kit, getIssuer) {
+    const cell = kit.createResourceHook(createAutoDiscoveryController)(() => [
+        getIssuer(),
+    ]);
+    return valueHook(kit)(() => kit.readResource(cell));
+}
+function loadedRequestOf(kit, getConfig, getDiscovery, RequestClass) {
+    const useCell = kit.createResourceHook(() => createLoadedRequestController());
+    const cell = useCell(() => [getConfig(), getDiscovery(), RequestClass]);
+    return valueHook(kit)(() => kit.readResource(cell));
+}
+function resultOf(kit, getRequest, getDiscovery, getOptions) {
+    const useHolder = kit.createResourceHook(createRequestResultController);
+    const holder = useHolder(() => [getRequest(), getDiscovery(), getOptions()]);
+    const result = valueHook(kit)(() => kit.readResource(holder).result);
+    return [result, options => kit.readResource(holder).promptAsync(options)];
+}
+function baseRequestOf(kit, getConfig, getDiscovery) {
+    const request = loadedRequestOf(kit, getConfig, getDiscovery, AuthRequest);
+    const [result, promptAsync] = resultOf(kit, () => kit.readValue(request), getDiscovery, () => ({}));
+    return [request, result, promptAsync];
+}
+function googleRequestOf(kit, getConfig, getRedirectUriOptions) {
+    const getSetup = () => resolveGoogleRequestSetup(getConfig(), getRedirectUriOptions());
+    const request = loadedRequestOf(kit, () => getSetup().requestConfig, () => googleDiscovery, GoogleRequest);
+    const [result, promptAsync] = resultOf(kit, () => kit.readValue(request), () => googleDiscovery, () => ({}));
+    const useExchange = kit.createResourceHook(createGoogleExchangeController);
+    const exchanged = useExchange(() => [
+        kit.readValue(result),
+        kit.readValue(request),
+        getSetup().exchange,
+    ]);
+    const fullResult = valueHook(kit)(() => kit.readResource(exchanged));
+    return [request, fullResult, promptAsync];
+}
+function facebookRequestOf(kit, getConfig, getRedirectUriOptions) {
+    const request = loadedRequestOf(kit, () => resolveFacebookRequestSetup(getConfig(), getRedirectUriOptions()), () => facebookDiscovery, FacebookRequest);
+    const [result, promptAsync] = resultOf(kit, () => kit.readValue(request), () => facebookDiscovery, () => ({}));
+    return [request, result, promptAsync];
+}
+export function createAuthRequestHooks(kit) {
+    const noOptions = kit.constant({});
+    return {
+        useAutoDiscovery: issuer => discoveryOf(kit, kit.toGetter(issuer)),
+        useLoadedAuthRequest: (config, discovery, RequestClass) => loadedRequestOf(kit, kit.toGetter(config), kit.toGetter(discovery), RequestClass),
+        useAuthRequestResult: (request, discovery, customOptions = kit.constant({})) => resultOf(kit, kit.toGetter(request), kit.toGetter(discovery), kit.toGetter(customOptions)),
+        useAuthRequest: (config, discovery) => baseRequestOf(kit, kit.toGetter(config), kit.toGetter(discovery)),
+        useGoogleAuthRequest: (config = kit.constant({}), redirect = noOptions) => googleRequestOf(kit, kit.toGetter(config), kit.toGetter(redirect)),
+        useGoogleIdTokenAuthRequest: (config, redirect = noOptions) => {
+            const getConfig = kit.toGetter(config);
+            return googleRequestOf(kit, () => toGoogleIdTokenConfig(getConfig()), kit.toGetter(redirect));
+        },
+        useFacebookAuthRequest: (config = kit.constant({}), redirect = noOptions) => facebookRequestOf(kit, kit.toGetter(config), kit.toGetter(redirect)),
+    };
+}
+//# sourceMappingURL=auth-request-hooks.js.map

package/build-ngc/core/auth-request-hooks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-request-hooks.js","sourceRoot":"","sources":["../../src/core/auth-request-hooks.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,8FAA8F;AAC9F,mGAAmG;AAEnG,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAM7C,OAAO,EACL,gBAAgB,EAChB,6BAA6B,EAC7B,6BAA6B,EAC7B,6BAA6B,GAC9B,MAAM,4BAA4B,CAAC;AAcpC,OAAO,EACL,SAAS,IAAI,iBAAiB,EAC9B,mBAAmB,IAAI,eAAe,GACvC,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,8BAA8B,EAAE,MAAM,wCAAwC,CAAC;AAKxF,OAAO,EACL,SAAS,IAAI,eAAe,EAC5B,iBAAiB,IAAI,aAAa,GACnC,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,2BAA2B,EAC3B,yBAAyB,EACzB,qBAAqB,GACtB,MAAM,iCAAiC,CAAC;AAqBzC,gFAAgF;AAChF,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,QAAQ,EAAE,CAAI,GAAY,EAAa,EAAE,CAAC,GAAG;IAC7C,QAAQ,EACN,CAAI,KAAQ,EAAa,EAAE,CAC3B,GAAG,EAAE,CACH,KAAK;CACV,CAAC;AA2CF,SAAS,YAAY,CAAI,IAAkB;IACzC,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC;AAC5B,CAAC;AAED,SAAS,SAAS,CAMhB,GAA2C;IAE3C,OAAO,GAAG,CAAC,oBAAoB,CAAI,gBAAgB,EAAE,YAAY,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,WAAW,CAKlB,GAA2C,EAC3C,SAAmC;IAEnC,MAAM,IAAI,GAAG,GAAG,CAAC,kBAAkB,CAAC,6BAA6B,CAAC,CAAC,GAAG,EAAE,CAAC;QACvE,SAAS,EAAE;KACZ,CAAC,CAAC;IACH,OAAO,SAAS,CAA2C,GAAG,CAAC,CAAC,GAAG,EAAE,CACnE,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,CACvB,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAMtB,GAA2C,EAC3C,SAAmC,EACnC,YAAmC,EACnC,YAAyC;IAEzC,MAAM,OAAO,GAAG,GAAG,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAC1C,6BAA6B,EAAY,CAC1C,CAAC;IACF,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,SAAS,EAAE,EAAE,YAAY,EAAE,EAAE,YAAY,CAAC,CAAC,CAAC;IACxE,OAAO,SAAS,CAA2C,GAAG,CAAC,CAAC,GAAG,EAAE,CACnE,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,CACvB,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAKf,GAA2C,EAC3C,UAAoC,EACpC,YAAmC,EACnC,UAA2C;IAE3C,MAAM,SAAS,GAAG,GAAG,CAAC,kBAAkB,CAAC,6BAA6B,CAAC,CAAC;IACxE,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,EAAE,CAAC,CAAC,UAAU,EAAE,EAAE,YAAY,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;IAC7E,MAAM,MAAM,GAAG,SAAS,CAAwC,GAAG,CAAC,CAClE,GAAG,EAAE,CAAC,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,MAAM,CACtC,CAAC;IACF,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,aAAa,CAKpB,GAA2C,EAC3C,SAAmC,EACnC,YAAmC;IAEnC,MAAM,OAAO,GAAG,eAAe,CAAC,GAAG,EAAE,SAAS,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;IAC3E,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,GAAG,QAAQ,CACpC,GAAG,EACH,GAAG,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,EAC5B,YAAY,EACZ,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CACX,CAAC;IACF,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,eAAe,CAKtB,GAA2C,EAC3C,SAAkD,EAClD,qBAAoE;IAEpE,MAAM,QAAQ,GAAG,GAAiD,EAAE,CAClE,yBAAyB,CAAC,SAAS,EAAE,EAAE,qBAAqB,EAAE,CAAC,CAAC;IAClE,MAAM,OAAO,GAAG,eAAe,CAC7B,GAAG,EACH,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,aAAa,EAC9B,GAAG,EAAE,CAAC,eAAe,EACrB,aAAa,CACd,CAAC;IACF,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,GAAG,QAAQ,CACpC,GAAG,EACH,GAAG,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,EAC5B,GAAG,EAAE,CAAC,eAAe,EACrB,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CACX,CAAC;IACF,MAAM,WAAW,GAAG,GAAG,CAAC,kBAAkB,CAAC,8BAA8B,CAAC,CAAC;IAC3E,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QAClC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC;QACrB,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC;QACtB,QAAQ,EAAE,CAAC,QAAQ;KACpB,CAAC,CAAC;IACH,MAAM,UAAU,GAAG,SAAS,CAAwC,GAAG,CAAC,CAAC,GAAG,EAAE,CAC5E,GAAG,CAAC,YAAY,CAAC,SAAS,CAAC,CAC5B,CAAC;IACF,OAAO,CAAC,OAAO,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;AAC5C,CAAC;AAED,SAAS,iBAAiB,CAKxB,GAA2C,EAC3C,SAAoD,EACpD,qBAAoE;IAEpE,MAAM,OAAO,GAAG,eAAe,CAC7B,GAAG,EACH,GAAG,EAAE,CAAC,2BAA2B,CAAC,SAAS,EAAE,EAAE,qBAAqB,EAAE,CAAC,EACvE,GAAG,EAAE,CAAC,iBAAiB,EACvB,eAAe,CAChB,CAAC;IACF,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,GAAG,QAAQ,CACpC,GAAG,EACH,GAAG,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,EAC5B,GAAG,EAAE,CAAC,iBAAiB,EACvB,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CACX,CAAC;IACF,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;AACxC,CAAC;AAkCD,MAAM,UAAU,sBAAsB,CAKpC,GAA2C;IAE3C,MAAM,SAAS,GAAG,GAAG,CAAC,QAAQ,CAA0C,EAAE,CAAC,CAAC;IAC5E,OAAO;QACL,gBAAgB,EAAE,MAAM,CAAC,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAClE,oBAAoB,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,EAAE,CACxD,eAAe,CACb,GAAG,EACH,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EACpB,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EACvB,YAAY,CACb;QACH,oBAAoB,EAAE,CACpB,OAAO,EACP,SAAS,EACT,aAAa,GAAG,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,EAChC,EAAE,CACF,QAAQ,CACN,GAAG,EACH,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,EACrB,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EACvB,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC,CAC5B;QACH,cAAc,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,CACpC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QACnE,oBAAoB,EAAE,CAAC,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,QAAQ,GAAG,SAAS,EAAE,EAAE,CACxE,eAAe,CAAC,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACpE,2BAA2B,EAAE,CAAC,MAAM,EAAE,QAAQ,GAAG,SAAS,EAAE,EAAE;YAC5D,MAAM,SAAS,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACvC,OAAO,eAAe,CACpB,GAAG,EACH,GAAG,EAAE,CAAC,qBAAqB,CAAC,SAAS,EAAE,CAAC,EACxC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CACvB,CAAC;QACJ,CAAC;QACD,sBAAsB,EAAE,CAAC,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,QAAQ,GAAG,SAAS,EAAE,EAAE,CAC1E,iBAAiB,CAAC,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;KACvE,CAAC;AACJ,CAAC"}

package/build-ngc/core/auth-request.d.ts

@@ -0,0 +1,29 @@
+import type { IAuthDiscoveryDocument, IAuthRequestConfig, IAuthRequestPromptOptions, Prompt } from './auth-request.types';
+import { CodeChallengeMethod, ResponseType } from './auth-request.types';
+import type { IAuthSessionResult } from './auth-session.types';
+/** Manages an authorization request, https://tools.ietf.org/html/rfc6749#section-4.1.1 */
+export declare class AuthRequest implements Omit<IAuthRequestConfig, 'state'> {
+    /** Protection against Cross-Site Request Forgery. */
+    state: string;
+    url: string | null;
+    codeVerifier?: string;
+    codeChallenge?: string;
+    readonly responseType: ResponseType | string;
+    readonly clientId: string;
+    readonly extraParams: Record<string, string>;
+    readonly usePKCE?: boolean;
+    readonly codeChallengeMethod: CodeChallengeMethod;
+    readonly redirectUri: string;
+    readonly scopes?: string[];
+    readonly clientSecret?: string;
+    readonly prompt?: Prompt | Prompt[];
+    constructor(request: IAuthRequestConfig);
+    /** Loads and returns a valid auth request config, generating PKCE fields if needed. */
+    getAuthRequestConfigAsync(): Promise<IAuthRequestConfig>;
+    /** Prompts the user to authorize, opening a browser session for the auth URL. */
+    promptAsync(discovery: IAuthDiscoveryDocument, { url, ...options }?: IAuthRequestPromptOptions): Promise<IAuthSessionResult>;
+    parseReturnUrl(url: string): IAuthSessionResult;
+    /** Builds and caches the authorization URL. */
+    makeAuthUrlAsync(discovery: IAuthDiscoveryDocument): Promise<string>;
+    private ensureCodeIsSetupAsync;
+}

package/build-ngc/core/auth-request.js

@@ -0,0 +1,162 @@
+import { Platform } from 'react-native';
+import invariant from 'invariant';
+import { openAuthSessionAsync } from '@symbiote-native/web-browser';
+import { CodeChallengeMethod, ResponseType } from './auth-request.types';
+import { AuthError } from './errors';
+import { createPromptString } from './prompt-string';
+import { getQueryParams } from './query-params';
+import { buildCodeAsync, generateRandom } from './pkce';
+import { TokenResponse } from './token-request';
+let authLock = false;
+/** Manages an authorization request, https://tools.ietf.org/html/rfc6749#section-4.1.1 */
+export class AuthRequest {
+    /** Protection against Cross-Site Request Forgery. */
+    state;
+    url = null;
+    codeVerifier;
+    codeChallenge;
+    responseType;
+    clientId;
+    extraParams;
+    usePKCE;
+    codeChallengeMethod;
+    redirectUri;
+    scopes;
+    clientSecret;
+    prompt;
+    constructor(request) {
+        this.responseType = request.responseType ?? ResponseType.Code;
+        this.clientId = request.clientId;
+        this.redirectUri = request.redirectUri;
+        this.scopes = request.scopes;
+        this.clientSecret = request.clientSecret;
+        this.prompt = request.prompt;
+        this.state = request.state ?? generateRandom(10);
+        this.extraParams = request.extraParams ?? {};
+        this.codeChallengeMethod =
+            request.codeChallengeMethod ?? CodeChallengeMethod.S256;
+        this.usePKCE = request.usePKCE ?? true;
+        invariant(this.codeChallengeMethod !== CodeChallengeMethod.Plain, '`AuthRequest` does not support `CodeChallengeMethod.Plain` as it is not secure.');
+        invariant(this.redirectUri, `\`AuthRequest\` requires a valid \`redirectUri\`. Ex: ${Platform.OS === 'web'
+            ? 'https://yourwebsite.com/'
+            : 'com.your.app:/oauthredirect'}`);
+    }
+    /** Loads and returns a valid auth request config, generating PKCE fields if needed. */
+    async getAuthRequestConfigAsync() {
+        if (this.usePKCE) {
+            await this.ensureCodeIsSetupAsync();
+        }
+        return {
+            responseType: this.responseType,
+            clientId: this.clientId,
+            redirectUri: this.redirectUri,
+            scopes: this.scopes,
+            clientSecret: this.clientSecret,
+            codeChallenge: this.codeChallenge,
+            codeChallengeMethod: this.codeChallengeMethod,
+            prompt: this.prompt,
+            state: this.state,
+            extraParams: this.extraParams,
+            usePKCE: this.usePKCE,
+        };
+    }
+    /** Prompts the user to authorize, opening a browser session for the auth URL. */
+    async promptAsync(discovery, { url, ...options } = {}) {
+        if (!url) {
+            if (!this.url) {
+                return this.promptAsync(discovery, {
+                    ...options,
+                    url: await this.makeAuthUrlAsync(discovery),
+                });
+            }
+            url = this.url;
+        }
+        invariant(url, 'No authUrl provided - it points to the page where the user signs in.');
+        if (authLock) {
+            return { type: 'locked' };
+        }
+        authLock = true;
+        let result;
+        try {
+            result = await openAuthSessionAsync(url, this.redirectUri, options);
+        }
+        finally {
+            authLock = false;
+        }
+        if (result.type === 'opened') {
+            throw new Error('An unexpected error occurred');
+        }
+        if (result.type !== 'success') {
+            return { type: result.type };
+        }
+        return this.parseReturnUrl(result.url);
+    }
+    parseReturnUrl(url) {
+        const { params, errorCode } = getQueryParams(url);
+        const { state, error = errorCode ?? undefined } = params;
+        let parsedError = null;
+        let authentication = null;
+        if (state !== this.state) {
+            parsedError = new AuthError({
+                error: 'state_mismatch',
+                error_description: 'Cross-Site request verification failed. Cached state and returned state do not match.',
+            });
+        }
+        else if (error) {
+            parsedError = new AuthError({ error, ...params });
+        }
+        if (params.access_token) {
+            authentication = TokenResponse.fromQueryParams(params);
+        }
+        return {
+            type: parsedError ? 'error' : 'success',
+            error: parsedError,
+            url,
+            params,
+            authentication,
+            errorCode,
+        };
+    }
+    /** Builds and caches the authorization URL. */
+    async makeAuthUrlAsync(discovery) {
+        const request = await this.getAuthRequestConfigAsync();
+        if (!request.state)
+            throw new Error('Cannot make request URL without a valid `state` loaded');
+        const params = {};
+        if (request.codeChallenge) {
+            params.code_challenge = request.codeChallenge;
+        }
+        for (const extra in request.extraParams) {
+            const param = request.extraParams[extra];
+            if (param != null) {
+                params[extra] = param;
+            }
+        }
+        if (request.usePKCE && request.codeChallengeMethod) {
+            params.code_challenge_method = request.codeChallengeMethod;
+        }
+        if (request.clientSecret) {
+            params.client_secret = request.clientSecret;
+        }
+        if (request.prompt) {
+            params.prompt = createPromptString(request.prompt) ?? '';
+        }
+        params.redirect_uri = request.redirectUri;
+        params.client_id = request.clientId;
+        params.response_type = request.responseType ?? ResponseType.Code;
+        params.state = request.state;
+        if (request.scopes?.length) {
+            params.scope = request.scopes.join(' ');
+        }
+        this.url = `${discovery.authorizationEndpoint}?${new URLSearchParams(params)}`;
+        return this.url;
+    }
+    async ensureCodeIsSetupAsync() {
+        if (this.codeVerifier)
+            return;
+        const { codeVerifier, codeChallenge } = await buildCodeAsync();
+        this.codeVerifier = codeVerifier;
+        this.codeChallenge = codeChallenge;
+    }
+}
+//# sourceMappingURL=auth-request.js.map

package/build-ngc/core/auth-request.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-request.js","sourceRoot":"","sources":["../../src/core/auth-request.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AACxC,OAAO,SAAS,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAQpE,OAAO,EAAE,mBAAmB,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAEzE,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AACrC,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,QAAQ,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAEhD,IAAI,QAAQ,GAAG,KAAK,CAAC;AAErB,0FAA0F;AAC1F,MAAM,OAAO,WAAW;IACtB,qDAAqD;IAC9C,KAAK,CAAS;IACd,GAAG,GAAkB,IAAI,CAAC;IAC1B,YAAY,CAAU;IACtB,aAAa,CAAU;IAErB,YAAY,CAAwB;IACpC,QAAQ,CAAS;IACjB,WAAW,CAAyB;IACpC,OAAO,CAAW;IAClB,mBAAmB,CAAsB;IACzC,WAAW,CAAS;IACpB,MAAM,CAAY;IAClB,YAAY,CAAU;IACtB,MAAM,CAAqB;IAEpC,YAAY,OAA2B;QACrC,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,YAAY,CAAC,IAAI,CAAC;QAC9D,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QACjC,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;QACvC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;QACzC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,cAAc,CAAC,EAAE,CAAC,CAAC;QACjD,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC;QAC7C,IAAI,CAAC,mBAAmB;YACtB,OAAO,CAAC,mBAAmB,IAAI,mBAAmB,CAAC,IAAI,CAAC;QAC1D,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC;QAEvC,SAAS,CACP,IAAI,CAAC,mBAAmB,KAAK,mBAAmB,CAAC,KAAK,EACtD,iFAAiF,CAClF,CAAC;QACF,SAAS,CACP,IAAI,CAAC,WAAW,EAChB,yDACE,QAAQ,CAAC,EAAE,KAAK,KAAK;YACnB,CAAC,CAAC,0BAA0B;YAC5B,CAAC,CAAC,6BACN,EAAE,CACH,CAAC;IACJ,CAAC;IAED,uFAAuF;IACvF,KAAK,CAAC,yBAAyB;QAC7B,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,MAAM,IAAI,CAAC,sBAAsB,EAAE,CAAC;QACtC,CAAC;QAED,OAAO;YACL,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;YAC7C,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,OAAO,EAAE,IAAI,CAAC,OAAO;SACtB,CAAC;IACJ,CAAC;IAED,iFAAiF;IACjF,KAAK,CAAC,WAAW,CACf,SAAiC,EACjC,EAAE,GAAG,EAAE,GAAG,OAAO,KAAgC,EAAE;QAEnD,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;gBACd,OAAO,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE;oBACjC,GAAG,OAAO;oBACV,GAAG,EAAE,MAAM,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC;iBAC5C,CAAC,CAAC;YACL,CAAC;YACD,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;QACjB,CAAC;QACD,SAAS,CACP,GAAG,EACH,sEAAsE,CACvE,CAAC;QAEF,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QAC5B,CAAC;QACD,QAAQ,GAAG,IAAI,CAAC;QAEhB,IAAI,MAAoC,CAAC;QACzC,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,oBAAoB,CAAC,GAAG,EAAE,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QACtE,CAAC;gBAAS,CAAC;YACT,QAAQ,GAAG,KAAK,CAAC;QACnB,CAAC;QAED,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAClD,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC9B,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;QAC/B,CAAC;QACD,OAAO,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACzC,CAAC;IAED,cAAc,CAAC,GAAW;QACxB,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;QAClD,MAAM,EAAE,KAAK,EAAE,KAAK,GAAG,SAAS,IAAI,SAAS,EAAE,GAAG,MAAM,CAAC;QAEzD,IAAI,WAAW,GAAqB,IAAI,CAAC;QACzC,IAAI,cAAc,GAAyB,IAAI,CAAC;QAChD,IAAI,KAAK,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC;YACzB,WAAW,GAAG,IAAI,SAAS,CAAC;gBAC1B,KAAK,EAAE,gBAAgB;gBACvB,iBAAiB,EACf,uFAAuF;aAC1F,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,KAAK,EAAE,CAAC;YACjB,WAAW,GAAG,IAAI,SAAS,CAAC,EAAE,KAAK,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;QACpD,CAAC;QACD,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;YACxB,cAAc,GAAG,aAAa,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QACzD,CAAC;QAED,OAAO;YACL,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;YACvC,KAAK,EAAE,WAAW;YAClB,GAAG;YACH,MAAM;YACN,cAAc;YACd,SAAS;SACV,CAAC;IACJ,CAAC;IAED,+CAA+C;IAC/C,KAAK,CAAC,gBAAgB,CAAC,SAAiC;QACtD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,yBAAyB,EAAE,CAAC;QACvD,IAAI,CAAC,OAAO,CAAC,KAAK;YAChB,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;QAE5E,MAAM,MAAM,GAA2B,EAAE,CAAC;QAC1C,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;YAC1B,MAAM,CAAC,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC;QAChD,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;YACxC,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YACzC,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;gBAClB,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC;YACxB,CAAC;QACH,CAAC;QACD,IAAI,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,mBAAmB,EAAE,CAAC;YACnD,MAAM,CAAC,qBAAqB,GAAG,OAAO,CAAC,mBAAmB,CAAC;QAC7D,CAAC;QACD,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;YACzB,MAAM,CAAC,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC;QAC9C,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,MAAM,CAAC,MAAM,GAAG,kBAAkB,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAC3D,CAAC;QACD,MAAM,CAAC,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC;QAC1C,MAAM,CAAC,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC;QACpC,MAAM,CAAC,aAAa,GAAG,OAAO,CAAC,YAAY,IAAI,YAAY,CAAC,IAAI,CAAC;QACjE,MAAM,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAC7B,IAAI,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;YAC3B,MAAM,CAAC,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC1C,CAAC;QAED,IAAI,CAAC,GAAG,GAAG,GAAG,SAAS,CAAC,qBAAqB,IAAI,IAAI,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/E,OAAO,IAAI,CAAC,GAAG,CAAC;IAClB,CAAC;IAEO,KAAK,CAAC,sBAAsB;QAClC,IAAI,IAAI,CAAC,YAAY;YAAE,OAAO;QAC9B,MAAM,EAAE,YAAY,EAAE,aAAa,EAAE,GAAG,MAAM,cAAc,EAAE,CAAC;QAC/D,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;QACjC,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;IACrC,CAAC;CACF"}

package/build-ngc/core/auth-request.types.d.ts

@@ -0,0 +1,46 @@
+import type { IAuthSessionOpenOptions } from '@symbiote-native/web-browser';
+import type { IDiscoveryDocument } from './discovery';
+export declare enum CodeChallengeMethod {
+    /** The default and recommended method for transforming the code verifier. */
+    S256 = "S256",
+    /** Not secure - the code verifier would be sent to the server as-is. */
+    Plain = "plain"
+}
+export type ICodeChallengeMethod = CodeChallengeMethod;
+/** https://tools.ietf.org/html/rfc6749#section-3.1.1 */
+export declare enum ResponseType {
+    Code = "code",
+    Token = "token",
+    /** A custom registered type for getting an `id_token` from Google OAuth. */
+    IdToken = "id_token"
+}
+/** https://openid.net/specs/openid-connect-core-1_0.html#AuthorizationRequest */
+export declare enum Prompt {
+    None = "none",
+    Login = "login",
+    Consent = "consent",
+    SelectAccount = "select_account"
+}
+export type IAuthRequestPromptOptions = IAuthSessionOpenOptions & {
+    /** URL to open when prompting the user; usually left undefined and generated internally. */
+    url?: string;
+};
+/** Represents an OAuth authorization request as JSON. */
+export type IAuthRequestConfig = {
+    /** @default ResponseType.Code */
+    responseType?: ResponseType | string;
+    clientId: string;
+    redirectUri: string;
+    scopes?: string[];
+    clientSecret?: string;
+    /** @default CodeChallengeMethod.S256 */
+    codeChallengeMethod?: CodeChallengeMethod;
+    codeChallenge?: string;
+    prompt?: Prompt | Prompt[];
+    /** Protection against Cross-Site Request Forgery. */
+    state?: string;
+    extraParams?: Record<string, string>;
+    /** @default true */
+    usePKCE?: boolean;
+};
+export type IAuthDiscoveryDocument = Pick<IDiscoveryDocument, 'authorizationEndpoint'>;

package/build-ngc/core/auth-request.types.js

@@ -0,0 +1,24 @@
+export var CodeChallengeMethod;
+(function (CodeChallengeMethod) {
+    /** The default and recommended method for transforming the code verifier. */
+    CodeChallengeMethod["S256"] = "S256";
+    /** Not secure - the code verifier would be sent to the server as-is. */
+    CodeChallengeMethod["Plain"] = "plain";
+})(CodeChallengeMethod || (CodeChallengeMethod = {}));
+/** https://tools.ietf.org/html/rfc6749#section-3.1.1 */
+export var ResponseType;
+(function (ResponseType) {
+    ResponseType["Code"] = "code";
+    ResponseType["Token"] = "token";
+    /** A custom registered type for getting an `id_token` from Google OAuth. */
+    ResponseType["IdToken"] = "id_token";
+})(ResponseType || (ResponseType = {}));
+/** https://openid.net/specs/openid-connect-core-1_0.html#AuthorizationRequest */
+export var Prompt;
+(function (Prompt) {
+    Prompt["None"] = "none";
+    Prompt["Login"] = "login";
+    Prompt["Consent"] = "consent";
+    Prompt["SelectAccount"] = "select_account";
+})(Prompt || (Prompt = {}));
+//# sourceMappingURL=auth-request.types.js.map

package/build-ngc/core/auth-request.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-request.types.js","sourceRoot":"","sources":["../../src/core/auth-request.types.ts"],"names":[],"mappings":"AAGA,MAAM,CAAN,IAAY,mBAKX;AALD,WAAY,mBAAmB;IAC7B,6EAA6E;IAC7E,oCAAa,CAAA;IACb,wEAAwE;IACxE,sCAAe,CAAA;AACjB,CAAC,EALW,mBAAmB,KAAnB,mBAAmB,QAK9B;AAGD,wDAAwD;AACxD,MAAM,CAAN,IAAY,YAKX;AALD,WAAY,YAAY;IACtB,6BAAa,CAAA;IACb,+BAAe,CAAA;IACf,4EAA4E;IAC5E,oCAAoB,CAAA;AACtB,CAAC,EALW,YAAY,KAAZ,YAAY,QAKvB;AAED,iFAAiF;AACjF,MAAM,CAAN,IAAY,MAKX;AALD,WAAY,MAAM;IAChB,uBAAa,CAAA;IACb,yBAAe,CAAA;IACf,6BAAmB,CAAA;IACnB,0CAAgC,CAAA;AAClC,CAAC,EALW,MAAM,KAAN,MAAM,QAKjB"}

package/build-ngc/core/auth-session.d.ts

@@ -0,0 +1,10 @@
+import { AuthRequest } from './auth-request';
+import type { IAuthRequestConfig } from './auth-request.types';
+import type { IAuthSessionRedirectUriOptions } from './auth-session.types';
+import type { IIssuerOrDiscovery } from './discovery';
+/** Cancels an active `AuthSession`, if there is one. */
+export declare function dismiss(): void;
+/** Unlike upstream, never reads an app manifest - pass `native` or `scheme` explicitly. */
+export declare function makeRedirectUri({ native, scheme, isTripleSlashed, queryParams, path, preferLocalhost, }?: IAuthSessionRedirectUriOptions): string;
+/** Builds an `AuthRequest` and loads its authorization URL before returning it. */
+export declare function loadAsync(config: IAuthRequestConfig, issuerOrDiscovery: IIssuerOrDiscovery): Promise<AuthRequest>;