@symbiote-native/auth-session 0.0.0-stage → 0.1.1

package/build-ngc/core/token-request.js

@@ -0,0 +1,329 @@
+import invariant from 'invariant';
+import * as Base64 from './base64';
+import { TokenError } from './errors';
+import { requestAsync } from './fetch';
+import { GrantType } from './token-request.types';
+export function getCurrentTimeInSeconds() {
+    return Math.floor(Date.now() / 1000);
+}
+function asTokenType(value) {
+    return value === 'bearer' || value === 'mac' ? value : undefined;
+}
+/** https://tools.ietf.org/html/rfc6749#section-5.1 */
+export class TokenResponse {
+    static isTokenFresh(token, 
+    /** -10 minutes in seconds. */
+    secondsMargin = 60 * 10 * -1) {
+        if (!token) {
+            return false;
+        }
+        if (token.expiresIn) {
+            const now = getCurrentTimeInSeconds();
+            return now < token.issuedAt + token.expiresIn + secondsMargin;
+        }
+        return true;
+    }
+    static fromQueryParams(params) {
+        return new TokenResponse({
+            accessToken: params.access_token ?? '',
+            refreshToken: params.refresh_token,
+            scope: params.scope,
+            state: params.state,
+            idToken: params.id_token,
+            tokenType: asTokenType(params.token_type),
+            expiresIn: params.expires_in ? Number(params.expires_in) : undefined,
+            issuedAt: params.issued_at ? Number(params.issued_at) : undefined,
+        });
+    }
+    accessToken;
+    tokenType;
+    expiresIn;
+    refreshToken;
+    scope;
+    state;
+    idToken;
+    issuedAt;
+    /** Unprocessed token response, for fields outside RFC 6749. */
+    rawResponse;
+    constructor(response, rawResponse) {
+        this.rawResponse = rawResponse;
+        this.accessToken = response.accessToken;
+        this.tokenType = response.tokenType ?? 'bearer';
+        this.expiresIn = response.expiresIn;
+        this.refreshToken = response.refreshToken;
+        this.scope = response.scope;
+        this.state = response.state;
+        this.idToken = response.idToken;
+        this.issuedAt = response.issuedAt ?? getCurrentTimeInSeconds();
+    }
+    applyResponseConfig(response) {
+        this.accessToken = response.accessToken ?? this.accessToken;
+        this.tokenType = response.tokenType ?? this.tokenType ?? 'bearer';
+        this.expiresIn = response.expiresIn ?? this.expiresIn;
+        this.refreshToken = response.refreshToken ?? this.refreshToken;
+        this.scope = response.scope ?? this.scope;
+        this.state = response.state ?? this.state;
+        this.idToken = response.idToken ?? this.idToken;
+        this.issuedAt =
+            response.issuedAt ?? this.issuedAt ?? getCurrentTimeInSeconds();
+    }
+    getRequestConfig() {
+        return {
+            accessToken: this.accessToken,
+            idToken: this.idToken,
+            refreshToken: this.refreshToken,
+            scope: this.scope,
+            state: this.state,
+            tokenType: this.tokenType,
+            issuedAt: this.issuedAt,
+            expiresIn: this.expiresIn,
+        };
+    }
+    async refreshAsync(config, discovery) {
+        const request = new RefreshTokenRequest({
+            ...config,
+            refreshToken: this.refreshToken,
+        });
+        const response = await request.performAsync(discovery);
+        response.refreshToken = response.refreshToken ?? this.refreshToken;
+        this.applyResponseConfig(response.getRequestConfig());
+        return this;
+    }
+    shouldRefresh() {
+        return !(TokenResponse.isTokenFresh(this) || !this.refreshToken);
+    }
+}
+function sanitizeExtraHeaders(extra, hasClientSecret) {
+    if (!extra) {
+        return undefined;
+    }
+    const extraHeaders = { ...extra };
+    delete extraHeaders['Content-Type'];
+    delete extraHeaders['content-type'];
+    if (hasClientSecret) {
+        delete extraHeaders.authorization;
+        delete extraHeaders.Authorization;
+    }
+    return extraHeaders;
+}
+function encodeBasicAuth(clientId, clientSecret) {
+    const credentials = `${encodeURIComponent(clientId)}:${encodeURIComponent(clientSecret)}`;
+    return Base64.encodeNoWrap(credentials);
+}
+class BaseRequest {
+    request;
+    constructor(request) {
+        this.request = request;
+    }
+}
+/** A generic token request. */
+export class TokenRequest extends BaseRequest {
+    grantType;
+    clientId;
+    clientSecret;
+    scopes;
+    extraParams;
+    extraHeaders;
+    constructor(request, grantType) {
+        super(request);
+        this.grantType = grantType;
+        this.clientId = request.clientId;
+        this.clientSecret = request.clientSecret;
+        this.extraParams = request.extraParams;
+        this.scopes = request.scopes;
+        this.extraHeaders = sanitizeExtraHeaders(request.extraHeaders, typeof request.clientSecret !== 'undefined');
+    }
+    getHeaders() {
+        const headers = {
+            ...this.extraHeaders,
+            'Content-Type': 'application/x-www-form-urlencoded',
+        };
+        if (typeof this.clientSecret !== 'undefined') {
+            headers.Authorization = `Basic ${encodeBasicAuth(this.clientId, this.clientSecret)}`;
+        }
+        return headers;
+    }
+    async performAsync(discovery) {
+        invariant(discovery.tokenEndpoint, 'Cannot invoke `performAsync()` without a valid tokenEndpoint');
+        const response = await requestAsync(discovery.tokenEndpoint, {
+            dataType: 'json',
+            method: 'POST',
+            headers: this.getHeaders(),
+            body: this.getQueryBody(),
+        });
+        if ('error' in response) {
+            throw new TokenError(response);
+        }
+        return new TokenResponse({
+            accessToken: response.access_token,
+            tokenType: response.token_type,
+            expiresIn: response.expires_in,
+            refreshToken: response.refresh_token,
+            scope: response.scope,
+            idToken: response.id_token,
+            issuedAt: response.issued_at,
+        }, response);
+    }
+    getRequestConfig() {
+        return this.request;
+    }
+    getQueryBody() {
+        const queryBody = { grant_type: this.grantType };
+        if (!this.clientSecret) {
+            queryBody.client_id = this.clientId;
+        }
+        if (this.scopes) {
+            queryBody.scope = this.scopes.join(' ');
+        }
+        for (const extra in this.extraParams) {
+            const param = this.extraParams[extra];
+            if (param != null && !(extra in queryBody)) {
+                queryBody[extra] = param;
+            }
+        }
+        return queryBody;
+    }
+}
+/** https://tools.ietf.org/html/rfc6749#section-4.1.3 */
+export class AccessTokenRequest extends TokenRequest {
+    code;
+    redirectUri;
+    constructor(options) {
+        invariant(options.redirectUri, '`AccessTokenRequest` requires a valid `redirectUri`.');
+        invariant(options.code, '`AccessTokenRequest` requires a valid authorization `code`.');
+        super(options, GrantType.AuthorizationCode);
+        this.code = options.code;
+        this.redirectUri = options.redirectUri;
+    }
+    getQueryBody() {
+        return {
+            ...super.getQueryBody(),
+            redirect_uri: this.redirectUri,
+            code: this.code,
+        };
+    }
+    getRequestConfig() {
+        return {
+            clientId: this.clientId,
+            clientSecret: this.clientSecret,
+            grantType: this.grantType,
+            code: this.code,
+            redirectUri: this.redirectUri,
+            extraParams: this.extraParams,
+            extraHeaders: this.extraHeaders,
+            scopes: this.scopes,
+        };
+    }
+}
+/** https://tools.ietf.org/html/rfc6749#section-6 */
+export class RefreshTokenRequest extends TokenRequest {
+    refreshToken;
+    constructor(options) {
+        invariant(options.refreshToken, '`RefreshTokenRequest` requires a valid `refreshToken`.');
+        super(options, GrantType.RefreshToken);
+        this.refreshToken = options.refreshToken;
+    }
+    getQueryBody() {
+        const queryBody = super.getQueryBody();
+        if (this.refreshToken) {
+            queryBody.refresh_token = this.refreshToken;
+        }
+        return queryBody;
+    }
+    getRequestConfig() {
+        return {
+            clientId: this.clientId,
+            clientSecret: this.clientSecret,
+            grantType: this.grantType,
+            refreshToken: this.refreshToken,
+            extraParams: this.extraParams,
+            extraHeaders: this.extraHeaders,
+            scopes: this.scopes,
+        };
+    }
+}
+/** https://tools.ietf.org/html/rfc7009#section-2.1 */
+export class RevokeTokenRequest extends BaseRequest {
+    clientId;
+    clientSecret;
+    token;
+    tokenTypeHint;
+    extraHeaders;
+    constructor(request) {
+        super(request);
+        invariant(request.token, '`RevokeTokenRequest` requires a valid `token` to revoke.');
+        this.clientId = request.clientId;
+        this.clientSecret = request.clientSecret;
+        this.token = request.token;
+        this.tokenTypeHint = request.tokenTypeHint;
+        this.extraHeaders = sanitizeExtraHeaders(request.extraHeaders, typeof request.clientSecret !== 'undefined');
+    }
+    getHeaders() {
+        const headers = {
+            ...this.extraHeaders,
+            'Content-Type': 'application/x-www-form-urlencoded',
+        };
+        if (typeof this.clientSecret !== 'undefined' && this.clientId) {
+            headers.Authorization = `Basic ${encodeBasicAuth(this.clientId, this.clientSecret)}`;
+        }
+        return headers;
+    }
+    async performAsync(discovery) {
+        invariant(discovery.revocationEndpoint, 'Cannot invoke `performAsync()` without a valid revocationEndpoint');
+        await requestAsync(discovery.revocationEndpoint, {
+            method: 'POST',
+            headers: this.getHeaders(),
+            body: this.getQueryBody(),
+        });
+        return true;
+    }
+    getRequestConfig() {
+        return {
+            clientId: this.clientId,
+            clientSecret: this.clientSecret,
+            token: this.token,
+            tokenTypeHint: this.tokenTypeHint,
+            extraHeaders: this.extraHeaders,
+        };
+    }
+    getQueryBody() {
+        const queryBody = { token: this.token };
+        if (this.tokenTypeHint) {
+            queryBody.token_type_hint = this.tokenTypeHint;
+        }
+        if (this.clientId) {
+            queryBody.client_id = this.clientId;
+        }
+        if (this.clientSecret) {
+            queryBody.client_secret = this.clientSecret;
+        }
+        return queryBody;
+    }
+}
+/** Exchange an authorization code for an access token. */
+export function exchangeCodeAsync(config, discovery) {
+    return new AccessTokenRequest(config).performAsync(discovery);
+}
+/** Refresh an access token. See `TokenResponse.isTokenFresh()`/`shouldRefresh()`. */
+export function refreshAsync(config, discovery) {
+    return new RefreshTokenRequest(config).performAsync(discovery);
+}
+/** Revoke a token, effectively requiring the user to sign in again. */
+export function revokeAsync(config, discovery) {
+    return new RevokeTokenRequest(config).performAsync(discovery);
+}
+/** Fetch generic user info from the provider's OpenID Connect `userInfoEndpoint`, if supported. */
+export function fetchUserInfoAsync(config, discovery) {
+    if (!discovery.userInfoEndpoint) {
+        throw new Error('User info endpoint is not defined in the service config discovery document');
+    }
+    return requestAsync(discovery.userInfoEndpoint, {
+        headers: {
+            'Content-Type': 'application/x-www-form-urlencoded',
+            Authorization: `Bearer ${config.accessToken}`,
+        },
+        dataType: 'json',
+        method: 'GET',
+    });
+}
+//# sourceMappingURL=token-request.js.map

package/build-ngc/core/token-request.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-request.js","sourceRoot":"","sources":["../../src/core/token-request.ts"],"names":[],"mappings":"AAAA,OAAO,SAAS,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,MAAM,MAAM,UAAU,CAAC;AAEnC,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAGtC,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAWvC,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAElD,MAAM,UAAU,uBAAuB;IACrC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,WAAW,CAAC,KAAyB;IAC5C,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACnE,CAAC;AAED,sDAAsD;AACtD,MAAM,OAAO,aAAa;IACxB,MAAM,CAAC,YAAY,CACjB,KAAoD;IACpD,8BAA8B;IAC9B,gBAAwB,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;QAEpC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;YACpB,MAAM,GAAG,GAAG,uBAAuB,EAAE,CAAC;YACtC,OAAO,GAAG,GAAG,KAAK,CAAC,QAAQ,GAAG,KAAK,CAAC,SAAS,GAAG,aAAa,CAAC;QAChE,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,CAAC,eAAe,CAAC,MAA8B;QACnD,OAAO,IAAI,aAAa,CAAC;YACvB,WAAW,EAAE,MAAM,CAAC,YAAY,IAAI,EAAE;YACtC,YAAY,EAAE,MAAM,CAAC,aAAa;YAClC,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,OAAO,EAAE,MAAM,CAAC,QAAQ;YACxB,SAAS,EAAE,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC;YACzC,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS;YACpE,QAAQ,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS;SAClE,CAAC,CAAC;IACL,CAAC;IAED,WAAW,CAAS;IACpB,SAAS,CAAa;IACtB,SAAS,CAAU;IACnB,YAAY,CAAU;IACtB,KAAK,CAAU;IACf,KAAK,CAAU;IACf,OAAO,CAAU;IACjB,QAAQ,CAAS;IACjB,+DAA+D;IAC/D,WAAW,CAAW;IAEtB,YAAY,QAA8B,EAAE,WAAqB;QAC/D,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,WAAW,GAAG,QAAQ,CAAC,WAAW,CAAC;QACxC,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC,SAAS,IAAI,QAAQ,CAAC;QAChD,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC,SAAS,CAAC;QACpC,IAAI,CAAC,YAAY,GAAG,QAAQ,CAAC,YAAY,CAAC;QAC1C,IAAI,CAAC,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;QAC5B,IAAI,CAAC,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;QAC5B,IAAI,CAAC,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;QAChC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC,QAAQ,IAAI,uBAAuB,EAAE,CAAC;IACjE,CAAC;IAEO,mBAAmB,CAAC,QAA8B;QACxD,IAAI,CAAC,WAAW,GAAG,QAAQ,CAAC,WAAW,IAAI,IAAI,CAAC,WAAW,CAAC;QAC5D,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC,SAAS,IAAI,IAAI,CAAC,SAAS,IAAI,QAAQ,CAAC;QAClE,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC,SAAS,IAAI,IAAI,CAAC,SAAS,CAAC;QACtD,IAAI,CAAC,YAAY,GAAG,QAAQ,CAAC,YAAY,IAAI,IAAI,CAAC,YAAY,CAAC;QAC/D,IAAI,CAAC,KAAK,GAAG,QAAQ,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC;QAC1C,IAAI,CAAC,KAAK,GAAG,QAAQ,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC;QAC1C,IAAI,CAAC,OAAO,GAAG,QAAQ,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC;QAChD,IAAI,CAAC,QAAQ;YACX,QAAQ,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,IAAI,uBAAuB,EAAE,CAAC;IACpE,CAAC;IAED,gBAAgB;QACd,OAAO;YACL,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,YAAY,CAChB,MAA+D,EAC/D,SAAoD;QAEpD,MAAM,OAAO,GAAG,IAAI,mBAAmB,CAAC;YACtC,GAAG,MAAM;YACT,YAAY,EAAE,IAAI,CAAC,YAAY;SAChC,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;QACvD,QAAQ,CAAC,YAAY,GAAG,QAAQ,CAAC,YAAY,IAAI,IAAI,CAAC,YAAY,CAAC;QACnE,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,gBAAgB,EAAE,CAAC,CAAC;QACtD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,aAAa;QACX,OAAO,CAAC,CAAC,aAAa,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACnE,CAAC;CACF;AAED,SAAS,oBAAoB,CAC3B,KAAyC,EACzC,eAAwB;IAExB,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,YAAY,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC;IAClC,OAAO,YAAY,CAAC,cAAc,CAAC,CAAC;IACpC,OAAO,YAAY,CAAC,cAAc,CAAC,CAAC;IACpC,IAAI,eAAe,EAAE,CAAC;QACpB,OAAO,YAAY,CAAC,aAAa,CAAC;QAClC,OAAO,YAAY,CAAC,aAAa,CAAC;IACpC,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,SAAS,eAAe,CAAC,QAAgB,EAAE,YAAoB;IAC7D,MAAM,WAAW,GAAG,GAAG,kBAAkB,CAAC,QAAQ,CAAC,IAAI,kBAAkB,CAAC,YAAY,CAAC,EAAE,CAAC;IAC1F,OAAO,MAAM,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;AAC1C,CAAC;AAED,MAAe,WAAW;IACF;IAAtB,YAAsB,OAAgB;QAAhB,YAAO,GAAP,OAAO,CAAS;IAAG,CAAC;CAI3C;AAED,+BAA+B;AAC/B,MAAM,OAAO,YACX,SAAQ,WAA6B;IAW5B;IARA,QAAQ,CAAS;IACjB,YAAY,CAAU;IACtB,MAAM,CAAY;IAClB,WAAW,CAA0B;IACrC,YAAY,CAA0B;IAE/C,YACE,OAAU,EACH,SAAoB;QAE3B,KAAK,CAAC,OAAO,CAAC,CAAC;QAFR,cAAS,GAAT,SAAS,CAAW;QAG3B,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QACjC,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;QACzC,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;QACvC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,YAAY,GAAG,oBAAoB,CACtC,OAAO,CAAC,YAAY,EACpB,OAAO,OAAO,CAAC,YAAY,KAAK,WAAW,CAC5C,CAAC;IACJ,CAAC;IAED,UAAU;QACR,MAAM,OAAO,GAAkB;YAC7B,GAAG,IAAI,CAAC,YAAY;YACpB,cAAc,EAAE,mCAAmC;SACpD,CAAC;QACF,IAAI,OAAO,IAAI,CAAC,YAAY,KAAK,WAAW,EAAE,CAAC;YAC7C,OAAO,CAAC,aAAa,GAAG,SAAS,eAAe,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;QACvF,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,YAAY,CAChB,SAAoD;QAEpD,SAAS,CACP,SAAS,CAAC,aAAa,EACvB,8DAA8D,CAC/D,CAAC;QACF,MAAM,QAAQ,GAAG,MAAM,YAAY,CAEjC,SAAS,CAAC,aAAa,EAAE;YACzB,QAAQ,EAAE,MAAM;YAChB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,IAAI,CAAC,UAAU,EAAE;YAC1B,IAAI,EAAE,IAAI,CAAC,YAAY,EAAE;SAC1B,CAAC,CAAC;QAEH,IAAI,OAAO,IAAI,QAAQ,EAAE,CAAC;YACxB,MAAM,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC;QACjC,CAAC;QAED,OAAO,IAAI,aAAa,CACtB;YACE,WAAW,EAAE,QAAQ,CAAC,YAAY;YAClC,SAAS,EAAE,QAAQ,CAAC,UAAU;YAC9B,SAAS,EAAE,QAAQ,CAAC,UAAU;YAC9B,YAAY,EAAE,QAAQ,CAAC,aAAa;YACpC,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,OAAO,EAAE,QAAQ,CAAC,QAAQ;YAC1B,QAAQ,EAAE,QAAQ,CAAC,SAAS;SAC7B,EACD,QAAQ,CACT,CAAC;IACJ,CAAC;IAED,gBAAgB;QACd,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,YAAY;QACV,MAAM,SAAS,GAA2B,EAAE,UAAU,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;QACzE,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACvB,SAAS,CAAC,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC;QACtC,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,SAAS,CAAC,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC1C,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrC,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YACtC,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,CAAC,KAAK,IAAI,SAAS,CAAC,EAAE,CAAC;gBAC3C,SAAS,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC;YAC3B,CAAC;QACH,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;CACF;AAED,wDAAwD;AACxD,MAAM,OAAO,kBACX,SAAQ,YAAuC;IAGtC,IAAI,CAAS;IACb,WAAW,CAAS;IAE7B,YAAY,OAAkC;QAC5C,SAAS,CACP,OAAO,CAAC,WAAW,EACnB,sDAAsD,CACvD,CAAC;QACF,SAAS,CACP,OAAO,CAAC,IAAI,EACZ,6DAA6D,CAC9D,CAAC;QACF,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC,iBAAiB,CAAC,CAAC;QAC5C,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QACzB,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;IACzC,CAAC;IAEQ,YAAY;QACnB,OAAO;YACL,GAAG,KAAK,CAAC,YAAY,EAAE;YACvB,YAAY,EAAE,IAAI,CAAC,WAAW;YAC9B,IAAI,EAAE,IAAI,CAAC,IAAI;SAChB,CAAC;IACJ,CAAC;IAEQ,gBAAgB;QAGvB,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC;IACJ,CAAC;CACF;AAED,oDAAoD;AACpD,MAAM,OAAO,mBACX,SAAQ,YAAwC;IAGvC,YAAY,CAAU;IAE/B,YAAY,OAAmC;QAC7C,SAAS,CACP,OAAO,CAAC,YAAY,EACpB,wDAAwD,CACzD,CAAC;QACF,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC,YAAY,CAAC,CAAC;QACvC,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;IAC3C,CAAC;IAEQ,YAAY;QACnB,MAAM,SAAS,GAAG,KAAK,CAAC,YAAY,EAAE,CAAC;QACvC,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,SAAS,CAAC,aAAa,GAAG,IAAI,CAAC,YAAY,CAAC;QAC9C,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAEQ,gBAAgB;QAGvB,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC;IACJ,CAAC;CACF;AAED,sDAAsD;AACtD,MAAM,OAAO,kBACX,SAAQ,WAA+C;IAG9C,QAAQ,CAAU;IAClB,YAAY,CAAU;IACtB,KAAK,CAAS;IACd,aAAa,CAAiB;IAC9B,YAAY,CAA0B;IAE/C,YAAY,OAAkC;QAC5C,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,SAAS,CACP,OAAO,CAAC,KAAK,EACb,0DAA0D,CAC3D,CAAC;QACF,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QACjC,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;QACzC,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAC3B,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;QAC3C,IAAI,CAAC,YAAY,GAAG,oBAAoB,CACtC,OAAO,CAAC,YAAY,EACpB,OAAO,OAAO,CAAC,YAAY,KAAK,WAAW,CAC5C,CAAC;IACJ,CAAC;IAED,UAAU;QACR,MAAM,OAAO,GAAkB;YAC7B,GAAG,IAAI,CAAC,YAAY;YACpB,cAAc,EAAE,mCAAmC;SACpD,CAAC;QACF,IAAI,OAAO,IAAI,CAAC,YAAY,KAAK,WAAW,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC9D,OAAO,CAAC,aAAa,GAAG,SAAS,eAAe,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;QACvF,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,YAAY,CAChB,SAAyD;QAEzD,SAAS,CACP,SAAS,CAAC,kBAAkB,EAC5B,mEAAmE,CACpE,CAAC;QACF,MAAM,YAAY,CAAC,SAAS,CAAC,kBAAkB,EAAE;YAC/C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,IAAI,CAAC,UAAU,EAAE;YAC1B,IAAI,EAAE,IAAI,CAAC,YAAY,EAAE;SAC1B,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAED,gBAAgB;QACd,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,YAAY,EAAE,IAAI,CAAC,YAAY;SAChC,CAAC;IACJ,CAAC;IAED,YAAY;QACV,MAAM,SAAS,GAA2B,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;QAChE,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,SAAS,CAAC,eAAe,GAAG,IAAI,CAAC,aAAa,CAAC;QACjD,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,SAAS,CAAC,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC;QACtC,CAAC;QACD,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,SAAS,CAAC,aAAa,GAAG,IAAI,CAAC,YAAY,CAAC;QAC9C,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;CACF;AAED,0DAA0D;AAC1D,MAAM,UAAU,iBAAiB,CAC/B,MAAiC,EACjC,SAAoD;IAEpD,OAAO,IAAI,kBAAkB,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;AAChE,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,YAAY,CAC1B,MAAkC,EAClC,SAAoD;IAEpD,OAAO,IAAI,mBAAmB,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;AACjE,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,WAAW,CACzB,MAAiC,EACjC,SAAyD;IAEzD,OAAO,IAAI,kBAAkB,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;AAChE,CAAC;AAED,mGAAmG;AACnG,MAAM,UAAU,kBAAkB,CAChC,MAA0C,EAC1C,SAAuD;IAEvD,IAAI,CAAC,SAAS,CAAC,gBAAgB,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CACb,4EAA4E,CAC7E,CAAC;IACJ,CAAC;IACD,OAAO,YAAY,CAA0B,SAAS,CAAC,gBAAgB,EAAE;QACvE,OAAO,EAAE;YACP,cAAc,EAAE,mCAAmC;YACnD,aAAa,EAAE,UAAU,MAAM,CAAC,WAAW,EAAE;SAC9C;QACD,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,KAAK;KACd,CAAC,CAAC;AACL,CAAC"}

package/build-ngc/core/token-request.types.d.ts

@@ -0,0 +1,52 @@
+/** https://tools.ietf.org/html/rfc6749#section-7.1 */
+export type ITokenType = 'bearer' | 'mac';
+/** A hint about the type of the token submitted for revocation. */
+export declare enum TokenTypeHint {
+    AccessToken = "access_token",
+    RefreshToken = "refresh_token"
+}
+export type ITokenRequestConfig = {
+    clientId: string;
+    clientSecret?: string;
+    extraParams?: Record<string, string>;
+    extraHeaders?: Record<string, string>;
+    scopes?: string[];
+};
+export type IAccessTokenRequestConfig = ITokenRequestConfig & {
+    code: string;
+    /** Must match the `redirectUri` used in the `AuthRequest`. */
+    redirectUri: string;
+};
+export type IRefreshTokenRequestConfig = ITokenRequestConfig & {
+    refreshToken?: string;
+};
+export type IRevokeTokenRequestConfig = Partial<ITokenRequestConfig> & {
+    token: string;
+    tokenTypeHint?: TokenTypeHint;
+};
+/** https://tools.ietf.org/html/rfc6749#appendix-A.10 */
+export declare enum GrantType {
+    AuthorizationCode = "authorization_code",
+    Implicit = "implicit",
+    RefreshToken = "refresh_token",
+    ClientCredentials = "client_credentials"
+}
+export type IServerTokenResponseConfig = {
+    access_token: string;
+    token_type?: ITokenType;
+    expires_in?: number;
+    refresh_token?: string;
+    scope?: string;
+    id_token?: string;
+    issued_at?: number;
+};
+export type ITokenResponseConfig = {
+    accessToken: string;
+    tokenType?: ITokenType;
+    expiresIn?: number;
+    refreshToken?: string;
+    scope?: string;
+    state?: string;
+    idToken?: string;
+    issuedAt?: number;
+};

package/build-ngc/core/token-request.types.js

@@ -0,0 +1,15 @@
+/** A hint about the type of the token submitted for revocation. */
+export var TokenTypeHint;
+(function (TokenTypeHint) {
+    TokenTypeHint["AccessToken"] = "access_token";
+    TokenTypeHint["RefreshToken"] = "refresh_token";
+})(TokenTypeHint || (TokenTypeHint = {}));
+/** https://tools.ietf.org/html/rfc6749#appendix-A.10 */
+export var GrantType;
+(function (GrantType) {
+    GrantType["AuthorizationCode"] = "authorization_code";
+    GrantType["Implicit"] = "implicit";
+    GrantType["RefreshToken"] = "refresh_token";
+    GrantType["ClientCredentials"] = "client_credentials";
+})(GrantType || (GrantType = {}));
+//# sourceMappingURL=token-request.types.js.map

package/build-ngc/core/token-request.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-request.types.js","sourceRoot":"","sources":["../../src/core/token-request.types.ts"],"names":[],"mappings":"AAGA,mEAAmE;AACnE,MAAM,CAAN,IAAY,aAGX;AAHD,WAAY,aAAa;IACvB,6CAA4B,CAAA;IAC5B,+CAA8B,CAAA;AAChC,CAAC,EAHW,aAAa,KAAb,aAAa,QAGxB;AAyBD,wDAAwD;AACxD,MAAM,CAAN,IAAY,SAKX;AALD,WAAY,SAAS;IACnB,qDAAwC,CAAA;IACxC,kCAAqB,CAAA;IACrB,2CAA8B,CAAA;IAC9B,qDAAwC,CAAA;AAC1C,CAAC,EALW,SAAS,KAAT,SAAS,QAKpB"}

package/package.json

@@ -1,6 +1,154 @@
 {
   "name": "@symbiote-native/auth-session",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
+  "version": "0.1.1",
+  "description": "expo-auth-session ported for SymbioteNative — one framework-agnostic core, built once and reachable from the React, Vue, Svelte, Solid, and Angular adapters. PKCE-based OAuth2/OpenID Connect flow over @symbiote-native/web-browser, @symbiote-native/crypto, and @symbiote-native/application.",
+  "license": "MIT",
+  "keywords": [
+    "react-native",
+    "symbiote-native",
+    "expo-auth-session",
+    "react",
+    "vue",
+    "svelte",
+    "solid",
+    "angular",
+    "oauth",
+    "oauth2",
+    "openid",
+    "auth-session"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/OneEyed1366/symbiote-native.git",
+    "directory": "packages/auth-session"
+  },
+  "homepage": "https://github.com/OneEyed1366/symbiote-native/tree/master/packages/auth-session#readme",
+  "bugs": {
+    "url": "https://github.com/OneEyed1366/symbiote-native/issues"
+  },
+  "author": "Andrey Prokopenko <psevdoproger@gmail.com>",
+  "type": "module",
+  "main": "./build/core/index.js",
+  "module": "./build/core/index.js",
+  "types": "./build/core/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./build/core/index.d.ts",
+      "default": "./build/core/index.js"
+    },
+    "./vue": {
+      "types": "./build/vue/index.d.ts",
+      "default": "./build/vue/index.js"
+    },
+    "./react": {
+      "types": "./build/react/index.d.ts",
+      "default": "./build/react/index.js"
+    },
+    "./svelte": {
+      "types": "./build/svelte/index.d.ts",
+      "default": "./build/svelte/index.js"
+    },
+    "./solid": {
+      "types": "./build/solid/index.d.ts",
+      "default": "./build/solid/index.js"
+    },
+    "./angular": {
+      "types": "./build-ngc/angular/index.d.ts",
+      "react-native": "./build-ngc/angular/index.js",
+      "default": "./src/angular/index.ts"
+    }
+  },
+  "files": [
+    "src",
+    "build",
+    "build-ngc",
+    "!src/**/*.test.*",
+    "!src/**/*.spec.*",
+    "!src/**/*.detox.*"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "invariant": "^2.2.4",
+    "@symbiote-native/application": "3.0.3",
+    "@symbiote-native/crypto": "3.0.3",
+    "@symbiote-native/web-browser": "3.0.3"
+  },
+  "peerDependencies": {
+    "@angular/core": ">=20",
+    "@vue/runtime-core": "^3.5.13",
+    "react": ">=19.0.0",
+    "react-native": ">=0.86",
+    "solid-js": ">=1.9.0",
+    "svelte": ">=5.56.0",
+    "vue": ">=3.5.0",
+    "@symbiote-native/angular": "^3.2.0",
+    "@symbiote-native/engine": "^1.5.0",
+    "@symbiote-native/react": "^3.2.0",
+    "@symbiote-native/solid": "^3.1.0",
+    "@symbiote-native/svelte": "^3.1.0",
+    "@symbiote-native/vue": "^3.2.0"
+  },
+  "peerDependenciesMeta": {
+    "@symbiote-native/angular": {
+      "optional": true
+    },
+    "@symbiote-native/react": {
+      "optional": true
+    },
+    "@symbiote-native/solid": {
+      "optional": true
+    },
+    "@symbiote-native/svelte": {
+      "optional": true
+    },
+    "@symbiote-native/vue": {
+      "optional": true
+    },
+    "@angular/core": {
+      "optional": true
+    },
+    "@vue/runtime-core": {
+      "optional": true
+    },
+    "react": {
+      "optional": true
+    },
+    "solid-js": {
+      "optional": true
+    },
+    "svelte": {
+      "optional": true
+    },
+    "vue": {
+      "optional": true
+    }
+  },
+  "devDependencies": {
+    "@angular/compiler": "~22.0.8",
+    "@angular/compiler-cli": "~22.0.8",
+    "@angular/core": "~22.0.8",
+    "@types/invariant": "^2.2.37",
+    "@types/node": "^26.0.0",
+    "@types/react": "^19.2.0",
+    "@vue/runtime-core": "^3.5.13",
+    "react": "19.2.3",
+    "solid-js": "^1.9.14",
+    "svelte": "^5.56.0",
+    "typescript": "~6.0.0",
+    "@symbiote-native/angular": "3.2.0",
+    "@symbiote-native/engine": "1.5.0",
+    "@symbiote-native/react": "3.2.0",
+    "@symbiote-native/solid": "3.1.0",
+    "@symbiote-native/svelte": "3.1.0",
+    "@symbiote-native/test-utils": "0.4.6",
+    "@symbiote-native/vue": "3.2.0"
+  },
+  "scripts": {
+    "typecheck": "tsc --build",
+    "clean": "rm -rf build-ngc",
+    "ng:build": "pnpm run clean && ngc -p tsconfig.angular.json",
+    "format": "prettier --write \"src/**/*.{ts,tsx}\""
+  }
 }

package/src/angular/index.ts

@@ -0,0 +1,11 @@
+// The hooks are the `inject*` twins below, the rest is the shared core with nothing to wrap
+export * from '../core';
+export {
+  injectAuthRequest,
+  injectAuthRequestResult,
+  injectAutoDiscovery,
+  injectFacebookAuthRequest,
+  injectGoogleAuthRequest,
+  injectGoogleIdTokenAuthRequest,
+  injectLoadedAuthRequest,
+} from './use-auth-request';

package/src/angular/use-auth-request.ts

@@ -0,0 +1,30 @@
+// Angular twins of `expo-auth-session`'s auth request hooks, `injectX` shape, call them in an
+// injection context: getter or signal arguments, signal results
+
+import type { Signal } from '@angular/core';
+import {
+  createEventValueHook,
+  createResourceHook,
+} from '@symbiote-native/angular';
+import { GETTER_ARGS, createAuthRequestHooks } from '../core';
+import type { IGetterKind, IHkt } from '../core';
+
+interface ISignalKind extends IHkt {
+  readonly output: Signal<this['input']>;
+}
+
+export const {
+  useAuthRequest: injectAuthRequest,
+  useAuthRequestResult: injectAuthRequestResult,
+  useAutoDiscovery: injectAutoDiscovery,
+  useFacebookAuthRequest: injectFacebookAuthRequest,
+  useGoogleAuthRequest: injectGoogleAuthRequest,
+  useGoogleIdTokenAuthRequest: injectGoogleIdTokenAuthRequest,
+  useLoadedAuthRequest: injectLoadedAuthRequest,
+} = createAuthRequestHooks<ISignalKind, ISignalKind, IGetterKind>({
+  createResourceHook,
+  createEventValueHook,
+  readResource: box => box(),
+  readValue: box => box(),
+  ...GETTER_ARGS,
+});