@taico/taico 0.5.1 → 0.7.0

package/dist/authorization-server/client-metadata-document.fetcher.spec.js

@@ -0,0 +1,116 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const http_1 = require("http");
+const client_metadata_document_fetcher_1 = require("./client-metadata-document.fetcher");
+const public_address_1 = require("./utils/public-address");
+describe('ClientMetadataDocumentFetcher', () => {
+    describe('with the production policy', () => {
+        const fetcher = new client_metadata_document_fetcher_1.ClientMetadataDocumentFetcher(client_metadata_document_fetcher_1.DEFAULT_CLIENT_METADATA_FETCH_OPTIONS);
+        it.each([
+            ['plain http', 'http://example.com/client.json', /must use https/],
+            ['a loopback address', 'https://127.0.0.1/client.json', /non-public/],
+            ['a private address', 'https://10.0.0.5/client.json', /non-public/],
+            [
+                'the cloud metadata address',
+                'https://169.254.169.254/latest',
+                /non-public/,
+            ],
+            ['an IPv6 loopback address', 'https://[::1]/client.json', /non-public/],
+            [
+                'an IPv4-mapped loopback address',
+                'https://[::ffff:127.0.0.1]/c.json',
+                /non-public/,
+            ],
+            [
+                'a name that resolves to loopback',
+                'https://localhost/client.json',
+                /non-public/,
+            ],
+        ])('refuses %s', async (_name, url, reason) => {
+            const fetching = fetcher.fetch(new URL(url));
+            await expect(fetching).rejects.toBeInstanceOf(client_metadata_document_fetcher_1.ClientMetadataFetchError);
+            await expect(fetching).rejects.toThrow(reason);
+        });
+    });
+    describe('allowedAddressesOf', () => {
+        it('keeps only the allowed addresses of a host that also has others', () => {
+            expect((0, client_metadata_document_fetcher_1.allowedAddressesOf)([
+                { address: '10.0.0.5', family: 4 },
+                { address: '93.184.216.34', family: 4 },
+                { address: 'fd00::1', family: 6 },
+            ], public_address_1.isPublicAddress)).toEqual([{ address: '93.184.216.34', family: 4 }]);
+        });
+        it('leaves nothing to connect to for a host with no allowed address', () => {
+            expect((0, client_metadata_document_fetcher_1.allowedAddressesOf)([
+                { address: '10.0.0.5', family: 4 },
+                { address: '::1', family: 6 },
+            ], public_address_1.isPublicAddress)).toEqual([]);
+        });
+    });
+    describe('against a local server', () => {
+        let server;
+        let origin;
+        let respond = () => undefined;
+        const fetcher = new client_metadata_document_fetcher_1.ClientMetadataDocumentFetcher({
+            ...client_metadata_document_fetcher_1.DEFAULT_CLIENT_METADATA_FETCH_OPTIONS,
+            allowInsecureLoopback: true,
+            timeoutMs: 300,
+            maxBytes: 1024,
+        });
+        beforeAll(async () => {
+            server = (0, http_1.createServer)((_request, response) => respond(response));
+            await new Promise((resolve) => server.listen(0, '127.0.0.1', resolve));
+            origin = `http://127.0.0.1:${server.address().port}`;
+        });
+        afterAll(async () => {
+            server.closeAllConnections();
+            await new Promise((resolve) => server.close(resolve));
+        });
+        const json = { 'content-type': 'application/json' };
+        it.each([
+            ['a private address', 'http://10.0.0.5/client.json'],
+            ['the cloud metadata address', 'http://169.254.169.254/latest'],
+            ['a link-local IPv6 address', 'http://[fe80::1]/client.json'],
+            ['plain http to a public address', 'http://93.184.216.34/client.json'],
+        ])('still refuses %s when loopback is allowed for tests', async (_name, url) => {
+            await expect(fetcher.fetch(new URL(url))).rejects.toThrow(/non-public/);
+        });
+        it('returns the parsed document and its Cache-Control header', async () => {
+            respond = (response) => response
+                .writeHead(200, { ...json, 'cache-control': 'max-age=120' })
+                .end('{"client_name":"x"}');
+            await expect(fetcher.fetch(new URL(`${origin}/c.json`))).resolves.toEqual({
+                body: { client_name: 'x' },
+                cacheControl: 'max-age=120',
+            });
+        });
+        it('does not follow redirects', async () => {
+            respond = (response) => response.writeHead(302, { location: `${origin}/elsewhere` }).end();
+            await expect(fetcher.fetch(new URL(`${origin}/c.json`))).rejects.toThrow(/HTTP 302/);
+        });
+        it('refuses a response that is not JSON', async () => {
+            respond = (response) => response.writeHead(200, { 'content-type': 'text/html' }).end('{}');
+            await expect(fetcher.fetch(new URL(`${origin}/c.json`))).rejects.toThrow(/not JSON/);
+        });
+        it('stops reading a document that is too large', async () => {
+            respond = (response) => {
+                response.writeHead(200, json);
+                response.write('"' + 'x'.repeat(600));
+                response.end('x'.repeat(600) + '"');
+            };
+            await expect(fetcher.fetch(new URL(`${origin}/c.json`))).rejects.toThrow(/larger than 1024 bytes/);
+        });
+        it('gives up on a server that does not answer in time', async () => {
+            respond = () => undefined;
+            await expect(fetcher.fetch(new URL(`${origin}/c.json`))).rejects.toThrow(/timed out/);
+        });
+        it('gives up on a server that stalls in the middle of the document', async () => {
+            respond = (response) => {
+                response.writeHead(200, json);
+                response.write('{"client_name":');
+            };
+            await expect(fetcher.fetch(new URL(`${origin}/c.json`))).rejects.toThrow(/timed out|interrupted/);
+        });
+    });
+});
+//# sourceMappingURL=client-metadata-document.fetcher.spec.js.map

package/dist/authorization-server/client-metadata-document.fetcher.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-metadata-document.fetcher.spec.js","sourceRoot":"","sources":["../../src/authorization-server/client-metadata-document.fetcher.spec.ts"],"names":[],"mappings":";;AAAA,+BAA4C;AAE5C,yFAK4C;AAC5C,2DAAyD;AAEzD,QAAQ,CAAC,+BAA+B,EAAE,GAAG,EAAE;IAC7C,QAAQ,CAAC,4BAA4B,EAAE,GAAG,EAAE;QAC1C,MAAM,OAAO,GAAG,IAAI,gEAA6B,CAC/C,wEAAqC,CACtC,CAAC;QAEF,EAAE,CAAC,IAAI,CAAC;YACN,CAAC,YAAY,EAAE,gCAAgC,EAAE,gBAAgB,CAAC;YAClE,CAAC,oBAAoB,EAAE,+BAA+B,EAAE,YAAY,CAAC;YACrE,CAAC,mBAAmB,EAAE,8BAA8B,EAAE,YAAY,CAAC;YACnE;gBACE,4BAA4B;gBAC5B,gCAAgC;gBAChC,YAAY;aACb;YACD,CAAC,0BAA0B,EAAE,2BAA2B,EAAE,YAAY,CAAC;YACvE;gBACE,iCAAiC;gBACjC,mCAAmC;gBACnC,YAAY;aACb;YAED;gBACE,kCAAkC;gBAClC,+BAA+B;gBAC/B,YAAY;aACb;SACF,CAAC,CAAC,YAAY,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;YAC5C,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;YAC7C,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,2DAAwB,CAAC,CAAC;YACxE,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACjD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;QAClC,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;YACzE,MAAM,CACJ,IAAA,qDAAkB,EAChB;gBACE,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,EAAE;gBAClC,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,CAAC,EAAE;gBACvC,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,EAAE;aAClC,EACD,gCAAe,CAChB,CACF,CAAC,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QACvD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;YACzE,MAAM,CACJ,IAAA,qDAAkB,EAChB;gBACE,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,EAAE;gBAClC,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE;aAC9B,EACD,gCAAe,CAChB,CACF,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAChB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;QACtC,IAAI,MAAc,CAAC;QACnB,IAAI,MAAc,CAAC;QACnB,IAAI,OAAO,GAAsD,GAAG,EAAE,CACpE,SAAS,CAAC;QAEZ,MAAM,OAAO,GAAG,IAAI,gEAA6B,CAAC;YAChD,GAAG,wEAAqC;YACxC,qBAAqB,EAAE,IAAI;YAC3B,SAAS,EAAE,GAAG;YACd,QAAQ,EAAE,IAAI;SACf,CAAC,CAAC;QAEH,SAAS,CAAC,KAAK,IAAI,EAAE;YACnB,MAAM,GAAG,IAAA,mBAAY,EAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;YACjE,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAClC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,CACvC,CAAC;YACF,MAAM,GAAG,oBAAqB,MAAM,CAAC,OAAO,EAAkB,CAAC,IAAI,EAAE,CAAC;QACxE,CAAC,CAAC,CAAC;QAEH,QAAQ,CAAC,KAAK,IAAI,EAAE;YAClB,MAAM,CAAC,mBAAmB,EAAE,CAAC;YAC7B,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QACxD,CAAC,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;QAEpD,EAAE,CAAC,IAAI,CAAC;YACN,CAAC,mBAAmB,EAAE,6BAA6B,CAAC;YACpD,CAAC,4BAA4B,EAAE,+BAA+B,CAAC;YAC/D,CAAC,2BAA2B,EAAE,8BAA8B,CAAC;YAC7D,CAAC,gCAAgC,EAAE,kCAAkC,CAAC;SACvE,CAAC,CACA,qDAAqD,EACrD,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YACnB,MAAM,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAC1E,CAAC,CACF,CAAC;QAEF,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;YACxE,OAAO,GAAG,CAAC,QAAQ,EAAE,EAAE,CACrB,QAAQ;iBACL,SAAS,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,EAAE,eAAe,EAAE,aAAa,EAAE,CAAC;iBAC3D,GAAG,CAAC,qBAAqB,CAAC,CAAC;YAEhC,MAAM,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,GAAG,MAAM,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CACvE;gBACE,IAAI,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE;gBAC1B,YAAY,EAAE,aAAa;aAC5B,CACF,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,2BAA2B,EAAE,KAAK,IAAI,EAAE;YACzC,OAAO,GAAG,CAAC,QAAQ,EAAE,EAAE,CACrB,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,GAAG,MAAM,YAAY,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC;YAErE,MAAM,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,GAAG,MAAM,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CACtE,UAAU,CACX,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;YACnD,OAAO,GAAG,CAAC,QAAQ,EAAE,EAAE,CACrB,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAErE,MAAM,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,GAAG,MAAM,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CACtE,UAAU,CACX,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;YAC1D,OAAO,GAAG,CAAC,QAAQ,EAAE,EAAE;gBACrB,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;gBAE9B,QAAQ,CAAC,KAAK,CAAC,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;gBACtC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC;YACtC,CAAC,CAAC;YAEF,MAAM,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,GAAG,MAAM,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CACtE,wBAAwB,CACzB,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;YACjE,OAAO,GAAG,GAAG,EAAE,CAAC,SAAS,CAAC;YAE1B,MAAM,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,GAAG,MAAM,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CACtE,WAAW,CACZ,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;YAC9E,OAAO,GAAG,CAAC,QAAQ,EAAE,EAAE;gBACrB,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;gBAC9B,QAAQ,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;YACpC,CAAC,CAAC;YAEF,MAAM,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,GAAG,MAAM,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CACtE,uBAAuB,CACxB,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/authorization-server/client-registration.service.js

@@ -72,6 +72,9 @@ let ClientRegistrationService = ClientRegistrationService_1 = class ClientRegist
         this.validateRequiredFields(dto);
         this.validateGrantTypes(dto.grant_types);
         this.validateRedirectUris(dto.redirect_uris);
+        if (dto.token_endpoint_auth_method === enums_1.TokenEndpointAuthMethod.PRIVATE_KEY_JWT) {
+            throw new client_registration_errors_1.InvalidTokenEndpointAuthMethodError(dto.token_endpoint_auth_method);
+        }
         const clientId = this.generateClientId();
         const clientSecret = dto.token_endpoint_auth_method !== enums_1.TokenEndpointAuthMethod.NONE
             ? this.generateClientSecret()

package/dist/authorization-server/client-registration.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"client-registration.service.js","sourceRoot":"","sources":["../../src/authorization-server/client-registration.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,2CAAoD;AACpD,6CAAmD;AACnD,qCAAqC;AACrC,kFAA6E;AAE7E,mCAA6D;AAC7D,oFAK6C;AAC7C,mCAAqC;AACrC,kFAA8E;AAC9E,+EAA2E;AAC3E,qDAAkD;AAClD,+CAAiC;AAI1B,IAAM,yBAAyB,iCAA/B,MAAM,yBAAyB;IAKjB;IAEA;IACA;IAPX,MAAM,GAAG,IAAI,eAAM,CAAC,2BAAyB,CAAC,IAAI,CAAC,CAAC;IAE5D,YAEmB,gBAAoD,EAEpD,kBAAuC,EACvC,kBAAsC;QAHtC,qBAAgB,GAAhB,gBAAgB,CAAoC;QAEpD,uBAAkB,GAAlB,kBAAkB,CAAqB;QACvC,uBAAkB,GAAlB,kBAAkB,CAAoB;IACtD,CAAC;IAMJ,KAAK,CAAC,cAAc,CAClB,GAAsB,EACtB,QAAgB;QAKhB,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC;QAGjC,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAGzC,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAG7C,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACzC,MAAM,YAAY,GAChB,GAAG,CAAC,0BAA0B,KAAK,+BAAuB,CAAC,IAAI;YAC7D,CAAC,CAAC,IAAI,CAAC,oBAAoB,EAAE;YAC7B,CAAC,CAAC,IAAI,CAAC;QAGX,MAAM,SAAS,GACb,MAAM,IAAI,CAAC,kBAAkB,CAAC,qBAAqB,CAAC,QAAQ,CAAC,CAAC;QAGhE,IAAI,MAAM,GAAa,EAAE,CAAC;QAC1B,IAAI,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC;YACxC,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAChC,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC;YAC1C,QAAQ;YACR,YAAY,EAAE,YAAY,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI;YACvE,UAAU,EAAE,GAAG,CAAC,WAAW;YAC3B,YAAY,EAAE,GAAG,CAAC,aAAa;YAC/B,UAAU,EAAE,GAAG,CAAC,WAAW;YAC3B,uBAAuB,EAAE,GAAG,CAAC,0BAA0B;YACvD,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE,GAAG,CAAC,QAAQ,IAAI,IAAI;SAC/B,CAAC,CAAC;QAEH,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAG7D,MAAM,WAAW,GACf,MAAM,IAAI,CAAC,kBAAkB,CAAC,+BAA+B,CAAC;YAC5D,WAAW,EAAE,SAAS,CAAC,EAAE;YACzB,WAAW,EAAE,WAAW,CAAC,EAAE;SAC5B,CAAC,CAAC;QAGL,OAAO,IAAI,CAAC,iBAAiB,CAAC;YAC5B,GAAG,WAAW;YACd,YAAY;SACb,CAAC,CAAC;IACL,CAAC;IAKD,KAAK,CAAC,SAAS,CAAC,QAAgB;QAC9B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC;YACjD,KAAK,EAAE,EAAE,QAAQ,EAAE;SACpB,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,gDAAmB,CAAC,QAAQ,CAAC,CAAC;QAC1C,CAAC;QAED,OAAO,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACxC,CAAC;IAKD,KAAK,CAAC,WAAW;QACf,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC;YAC/C,KAAK,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE;SAC7B,CAAC,CAAC;QAEH,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC;IACjE,CAAC;IAIO,sBAAsB,CAAC,GAAsB;QACnD,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;YACrB,MAAM,IAAI,sDAAyB,CAAC,aAAa,CAAC,CAAC;QACrD,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,aAAa,IAAI,GAAG,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzD,MAAM,IAAI,sDAAyB,CAAC,eAAe,CAAC,CAAC;QACvD,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrD,MAAM,IAAI,sDAAyB,CAAC,aAAa,CAAC,CAAC;QACrD,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,0BAA0B,EAAE,CAAC;YACpC,MAAM,IAAI,sDAAyB,CAAC,4BAA4B,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IAEO,kBAAkB,CAAC,UAAuB;QAEhD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,iBAAS,CAAC,kBAAkB,CAAC,EAAE,CAAC;YACvD,MAAM,IAAI,kDAAqB,CAC7B,iEAAiE,CAClE,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,iBAAS,CAAC,aAAa,CAAC,EAAE,CAAC;YAClD,MAAM,IAAI,kDAAqB,CAC7B,4DAA4D,CAC7D,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,oBAAoB,CAAC,YAAsB;QACjD,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,oDAAuB,CAC/B,uCAAuC,CACxC,CAAC;QACJ,CAAC;QAGD,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;YAC/B,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;YAI3B,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,oDAAuB,CAAC,uBAAuB,GAAG,EAAE,CAAC,CAAC;YAClE,CAAC;QACH,CAAC;IACH,CAAC;IAIO,gBAAgB;QACtB,OAAO,IAAA,oBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC;IAEO,oBAAoB;QAC1B,MAAM,MAAM,GAAG,IAAA,sBAAS,GAAE,CAAC;QAC3B,OAAO,IAAA,oBAAW,EAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACtE,CAAC;IAMO,KAAK,CAAC,UAAU,CAAC,MAAc;QACrC,MAAM,UAAU,GAAG,EAAE,CAAC;QACtB,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACzC,CAAC;IAQD,KAAK,CAAC,kBAAkB,CACtB,SAAiB,EACjB,IAAY;QAEZ,OAAO,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IACzC,CAAC;IAEO,iBAAiB,CACvB,MAA8B;QAE9B,OAAO;YACL,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,uBAAuB,EAAE,MAAM,CAAC,uBAAuB;YACvD,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,SAAS,EAAE,MAAM,CAAC,SAAS;SAC5B,CAAC;IACJ,CAAC;CACF,CAAA;AArMY,8DAAyB;oCAAzB,yBAAyB;IADrC,IAAA,mBAAU,GAAE;IAKR,WAAA,IAAA,0BAAgB,EAAC,iDAAsB,CAAC,CAAA;qCACN,oBAAU;QAER,2CAAmB;QACnB,yCAAkB;GAR9C,yBAAyB,CAqMrC"}
+{"version":3,"file":"client-registration.service.js","sourceRoot":"","sources":["../../src/authorization-server/client-registration.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,2CAAoD;AACpD,6CAAmD;AACnD,qCAAqC;AACrC,kFAA6E;AAE7E,mCAA6D;AAC7D,oFAM6C;AAC7C,mCAAqC;AACrC,kFAA8E;AAC9E,+EAA2E;AAC3E,qDAAkD;AAClD,+CAAiC;AAI1B,IAAM,yBAAyB,iCAA/B,MAAM,yBAAyB;IAKjB;IAEA;IACA;IAPX,MAAM,GAAG,IAAI,eAAM,CAAC,2BAAyB,CAAC,IAAI,CAAC,CAAC;IAE5D,YAEmB,gBAAoD,EAEpD,kBAAuC,EACvC,kBAAsC;QAHtC,qBAAgB,GAAhB,gBAAgB,CAAoC;QAEpD,uBAAkB,GAAlB,kBAAkB,CAAqB;QACvC,uBAAkB,GAAlB,kBAAkB,CAAoB;IACtD,CAAC;IAMJ,KAAK,CAAC,cAAc,CAClB,GAAsB,EACtB,QAAgB;QAKhB,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC;QAGjC,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAGzC,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAG7C,IACE,GAAG,CAAC,0BAA0B,KAAK,+BAAuB,CAAC,eAAe,EAC1E,CAAC;YACD,MAAM,IAAI,gEAAmC,CAC3C,GAAG,CAAC,0BAA0B,CAC/B,CAAC;QACJ,CAAC;QAGD,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACzC,MAAM,YAAY,GAChB,GAAG,CAAC,0BAA0B,KAAK,+BAAuB,CAAC,IAAI;YAC7D,CAAC,CAAC,IAAI,CAAC,oBAAoB,EAAE;YAC7B,CAAC,CAAC,IAAI,CAAC;QAGX,MAAM,SAAS,GACb,MAAM,IAAI,CAAC,kBAAkB,CAAC,qBAAqB,CAAC,QAAQ,CAAC,CAAC;QAGhE,IAAI,MAAM,GAAa,EAAE,CAAC;QAC1B,IAAI,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC;YACxC,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAChC,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC;YAC1C,QAAQ;YACR,YAAY,EAAE,YAAY,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI;YACvE,UAAU,EAAE,GAAG,CAAC,WAAW;YAC3B,YAAY,EAAE,GAAG,CAAC,aAAa;YAC/B,UAAU,EAAE,GAAG,CAAC,WAAW;YAC3B,uBAAuB,EAAE,GAAG,CAAC,0BAA0B;YACvD,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE,GAAG,CAAC,QAAQ,IAAI,IAAI;SAC/B,CAAC,CAAC;QAEH,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAG7D,MAAM,WAAW,GACf,MAAM,IAAI,CAAC,kBAAkB,CAAC,+BAA+B,CAAC;YAC5D,WAAW,EAAE,SAAS,CAAC,EAAE;YACzB,WAAW,EAAE,WAAW,CAAC,EAAE;SAC5B,CAAC,CAAC;QAGL,OAAO,IAAI,CAAC,iBAAiB,CAAC;YAC5B,GAAG,WAAW;YACd,YAAY;SACb,CAAC,CAAC;IACL,CAAC;IAKD,KAAK,CAAC,SAAS,CAAC,QAAgB;QAC9B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC;YACjD,KAAK,EAAE,EAAE,QAAQ,EAAE;SACpB,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,gDAAmB,CAAC,QAAQ,CAAC,CAAC;QAC1C,CAAC;QAED,OAAO,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACxC,CAAC;IAKD,KAAK,CAAC,WAAW;QACf,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC;YAC/C,KAAK,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE;SAC7B,CAAC,CAAC;QAEH,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC;IACjE,CAAC;IAIO,sBAAsB,CAAC,GAAsB;QACnD,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;YACrB,MAAM,IAAI,sDAAyB,CAAC,aAAa,CAAC,CAAC;QACrD,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,aAAa,IAAI,GAAG,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzD,MAAM,IAAI,sDAAyB,CAAC,eAAe,CAAC,CAAC;QACvD,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrD,MAAM,IAAI,sDAAyB,CAAC,aAAa,CAAC,CAAC;QACrD,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,0BAA0B,EAAE,CAAC;YACpC,MAAM,IAAI,sDAAyB,CAAC,4BAA4B,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IAEO,kBAAkB,CAAC,UAAuB;QAEhD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,iBAAS,CAAC,kBAAkB,CAAC,EAAE,CAAC;YACvD,MAAM,IAAI,kDAAqB,CAC7B,iEAAiE,CAClE,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,iBAAS,CAAC,aAAa,CAAC,EAAE,CAAC;YAClD,MAAM,IAAI,kDAAqB,CAC7B,4DAA4D,CAC7D,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,oBAAoB,CAAC,YAAsB;QACjD,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,oDAAuB,CAC/B,uCAAuC,CACxC,CAAC;QACJ,CAAC;QAGD,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;YAC/B,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;YAI3B,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,oDAAuB,CAAC,uBAAuB,GAAG,EAAE,CAAC,CAAC;YAClE,CAAC;QACH,CAAC;IACH,CAAC;IAIO,gBAAgB;QACtB,OAAO,IAAA,oBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC;IAEO,oBAAoB;QAC1B,MAAM,MAAM,GAAG,IAAA,sBAAS,GAAE,CAAC;QAC3B,OAAO,IAAA,oBAAW,EAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACtE,CAAC;IAMO,KAAK,CAAC,UAAU,CAAC,MAAc;QACrC,MAAM,UAAU,GAAG,EAAE,CAAC;QACtB,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACzC,CAAC;IAQD,KAAK,CAAC,kBAAkB,CAAC,SAAiB,EAAE,IAAY;QACtD,OAAO,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IACzC,CAAC;IAEO,iBAAiB,CACvB,MAA8B;QAE9B,OAAO;YACL,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,uBAAuB,EAAE,MAAM,CAAC,uBAAuB;YACvD,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,SAAS,EAAE,MAAM,CAAC,SAAS;SAC5B,CAAC;IACJ,CAAC;CACF,CAAA;AA3MY,8DAAyB;oCAAzB,yBAAyB;IADrC,IAAA,mBAAU,GAAE;IAKR,WAAA,IAAA,0BAAgB,EAAC,iDAAsB,CAAC,CAAA;qCACN,oBAAU;QAER,2CAAmB;QACnB,yCAAkB;GAR9C,yBAAyB,CA2MrC"}

package/dist/authorization-server/dto/authorization-request.dto.js

@@ -10,10 +10,11 @@ var __metadata = (this && this.__metadata) || function (k, v) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.AuthorizationRequestDto = void 0;
+const app_validation_pipe_1 = require("../../http/app-validation.pipe");
 const class_validator_1 = require("class-validator");
 const swagger_1 = require("@nestjs/swagger");
 const enums_1 = require("../enums");
-class AuthorizationRequestDto {
+let AuthorizationRequestDto = class AuthorizationRequestDto {
     response_type;
     scope;
     client_id;
@@ -22,7 +23,7 @@ class AuthorizationRequestDto {
     redirect_uri;
     state;
     resource;
-}
+};
 exports.AuthorizationRequestDto = AuthorizationRequestDto;
 __decorate([
     (0, swagger_1.ApiProperty)({
@@ -101,4 +102,7 @@ __decorate([
     (0, class_validator_1.IsUrl)({ require_tld: false, require_protocol: true }),
     __metadata("design:type", String)
 ], AuthorizationRequestDto.prototype, "resource", void 0);
+exports.AuthorizationRequestDto = AuthorizationRequestDto = __decorate([
+    (0, app_validation_pipe_1.IgnoresUnknownProperties)()
+], AuthorizationRequestDto);
 //# sourceMappingURL=authorization-request.dto.js.map

package/dist/authorization-server/dto/authorization-request.dto.js.map

@@ -1 +1 @@
-{"version":3,"file":"authorization-request.dto.js","sourceRoot":"","sources":["../../../src/authorization-server/dto/authorization-request.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qDAQyB;AACzB,6CAAmE;AACnE,oCAAwC;AAMxC,MAAa,uBAAuB;IAQlC,aAAa,CAAgB;IAQ7B,KAAK,CAAU;IAQf,SAAS,CAAU;IAUnB,cAAc,CAAU;IASxB,qBAAqB,CAAU;IAS/B,YAAY,CAAU;IAQtB,KAAK,CAAU;IASf,QAAQ,CAAU;CACnB;AAtED,0DAsEC;AA9DC;IAPC,IAAA,qBAAW,EAAC;QACX,WAAW,EACT,sEAAsE;QACxE,OAAO,EAAE,MAAM;QACf,IAAI,EAAE,oBAAY;KACnB,CAAC;IACD,IAAA,wBAAM,EAAC,oBAAY,CAAC;;8DACQ;AAQ7B;IANC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,gDAAgD;QAC7D,OAAO,EAAE,wBAAwB;KAClC,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;sDACI;AAQf;IANC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,8CAA8C;QAC3D,OAAO,EAAE,kCAAkC;KAC5C,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;0DACM;AAUnB;IARC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,oDAAoD;QACjE,OAAO,EAAE,6CAA6C;KACvD,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;IACZ,IAAA,wBAAM,EAAC,EAAE,EAAE,GAAG,CAAC;IACf,IAAA,yBAAO,EAAC,kBAAkB,CAAC;;+DACJ;AASxB;IAPC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,+CAA+C;QAC5D,OAAO,EAAE,MAAM;KAChB,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;IACZ,IAAA,yBAAO,EAAC,QAAQ,CAAC;;sEACa;AAS/B;IAPC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,4DAA4D;QACzE,OAAO,EAAE,4CAA4C;KACtD,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;IACZ,IAAA,uBAAK,EAAC,EAAE,WAAW,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC;;6DAChC;AAQtB;IANC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,wCAAwC;QACrD,OAAO,EAAE,kEAAkE;KAC5E,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;sDACE;AASf;IAPC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,qDAAqD;QAClE,OAAO,EAAE,wBAAwB;KAClC,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;IACV,IAAA,uBAAK,EAAC,EAAE,WAAW,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC;;yDACpC"}
+{"version":3,"file":"authorization-request.dto.js","sourceRoot":"","sources":["../../../src/authorization-server/dto/authorization-request.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,wEAA0E;AAC1E,qDAQyB;AACzB,6CAAmE;AACnE,oCAAwC;AAOjC,IAAM,uBAAuB,GAA7B,MAAM,uBAAuB;IAQlC,aAAa,CAAgB;IAQ7B,KAAK,CAAU;IAQf,SAAS,CAAU;IAUnB,cAAc,CAAU;IASxB,qBAAqB,CAAU;IAS/B,YAAY,CAAU;IAQtB,KAAK,CAAU;IASf,QAAQ,CAAU;CACnB,CAAA;AAtEY,0DAAuB;AAQlC;IAPC,IAAA,qBAAW,EAAC;QACX,WAAW,EACT,sEAAsE;QACxE,OAAO,EAAE,MAAM;QACf,IAAI,EAAE,oBAAY;KACnB,CAAC;IACD,IAAA,wBAAM,EAAC,oBAAY,CAAC;;8DACQ;AAQ7B;IANC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,gDAAgD;QAC7D,OAAO,EAAE,wBAAwB;KAClC,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;sDACI;AAQf;IANC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,8CAA8C;QAC3D,OAAO,EAAE,kCAAkC;KAC5C,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;0DACM;AAUnB;IARC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,oDAAoD;QACjE,OAAO,EAAE,6CAA6C;KACvD,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;IACZ,IAAA,wBAAM,EAAC,EAAE,EAAE,GAAG,CAAC;IACf,IAAA,yBAAO,EAAC,kBAAkB,CAAC;;+DACJ;AASxB;IAPC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,+CAA+C;QAC5D,OAAO,EAAE,MAAM;KAChB,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;IACZ,IAAA,yBAAO,EAAC,QAAQ,CAAC;;sEACa;AAS/B;IAPC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,4DAA4D;QACzE,OAAO,EAAE,4CAA4C;KACtD,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;IACZ,IAAA,uBAAK,EAAC,EAAE,WAAW,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC;;6DAChC;AAQtB;IANC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,wCAAwC;QACrD,OAAO,EAAE,kEAAkE;KAC5E,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;sDACE;AASf;IAPC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,qDAAqD;QAClE,OAAO,EAAE,wBAAwB;KAClC,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;IACV,IAAA,uBAAK,EAAC,EAAE,WAAW,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC;;yDACpC;kCArEP,uBAAuB;IADnC,IAAA,8CAAwB,GAAE;GACd,uBAAuB,CAsEnC"}

package/dist/authorization-server/dto/consent-metadata-response.dto.d.ts

@@ -1,3 +1,4 @@
+import { ClientRegistrationMethod } from '../enums';
 import { McpAuthorizationFlowStatus } from '../../auth-journeys/enums/mcp-authorization-flow-status.enum';
 export declare class FlowServerDto {
     providedId: string;
@@ -7,6 +8,7 @@ export declare class FlowServerDto {
 export declare class FlowClientDto {
     clientId: string;
     clientName: string;
+    registrationMethod: ClientRegistrationMethod;
 }
 export declare class GetConsentMetadataResponseDto {
     id: string;

package/dist/authorization-server/dto/consent-metadata-response.dto.js

@@ -11,6 +11,7 @@ var __metadata = (this && this.__metadata) || function (k, v) {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.GetConsentMetadataResponseDto = exports.FlowClientDto = exports.FlowServerDto = void 0;
 const swagger_1 = require("@nestjs/swagger");
+const enums_1 = require("../enums");
 const mcp_authorization_flow_status_enum_1 = require("../../auth-journeys/enums/mcp-authorization-flow-status.enum");
 class FlowServerDto {
     providedId;
@@ -42,6 +43,7 @@ __decorate([
 class FlowClientDto {
     clientId;
     clientName;
+    registrationMethod;
 }
 exports.FlowClientDto = FlowClientDto;
 __decorate([
@@ -58,6 +60,14 @@ __decorate([
     }),
     __metadata("design:type", String)
 ], FlowClientDto.prototype, "clientName", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'How the client is known: it registered, or its client_id is a URL to a metadata document it hosts. The client name is self-declared either way.',
+        enum: enums_1.ClientRegistrationMethod,
+        example: enums_1.ClientRegistrationMethod.METADATA_DOCUMENT,
+    }),
+    __metadata("design:type", String)
+], FlowClientDto.prototype, "registrationMethod", void 0);
 class GetConsentMetadataResponseDto {
     id;
     status;

package/dist/authorization-server/dto/consent-metadata-response.dto.js.map

@@ -1 +1 @@
-{"version":3,"file":"consent-metadata-response.dto.js","sourceRoot":"","sources":["../../../src/authorization-server/dto/consent-metadata-response.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,6CAAmE;AACnE,qHAA0G;AAK1G,MAAa,aAAa;IAKxB,UAAU,CAAU;IAMpB,IAAI,CAAU;IAMd,WAAW,CAAU;CACtB;AAlBD,sCAkBC;AAbC;IAJC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,qCAAqC;QAClD,OAAO,EAAE,OAAO;KACjB,CAAC;;iDACkB;AAMpB;IAJC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,uCAAuC;QACpD,OAAO,EAAE,OAAO;KACjB,CAAC;;2CACY;AAMd;IAJC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,yCAAyC;QACtD,OAAO,EAAE,uCAAuC;KACjD,CAAC;;kDACmB;AAMvB,MAAa,aAAa;IAKxB,QAAQ,CAAU;IAMlB,UAAU,CAAU;CACrB;AAZD,sCAYC;AAPC;IAJC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,yBAAyB;QACtC,OAAO,EAAE,kCAAkC;KAC5C,CAAC;;+CACgB;AAMlB;IAJC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,+CAA+C;QAC5D,OAAO,EAAE,gBAAgB;KAC1B,CAAC;;iDACkB;AAStB,MAAa,6BAA6B;IAKxC,EAAE,CAAU;IAOZ,MAAM,CAA8B;IAOpC,MAAM,CAAY;IAMlB,QAAQ,CAAU;IAMlB,MAAM,CAAiB;IAMvB,MAAM,CAAiB;IAMvB,WAAW,CAAU;IAMrB,SAAS,CAAU;CACpB;AAlDD,sEAkDC;AA7CC;IAJC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,6CAA6C;QAC1D,OAAO,EAAE,sCAAsC;KAChD,CAAC;;yDACU;AAOZ;IALC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,0CAA0C;QACvD,IAAI,EAAE,+DAA0B;QAChC,OAAO,EAAE,+DAA0B,CAAC,6BAA6B;KAClE,CAAC;;6DACkC;AAOpC;IALC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,gCAAgC;QAC7C,OAAO,EAAE,CAAC,YAAY,EAAE,aAAa,CAAC;QACtC,IAAI,EAAE,CAAC,MAAM,CAAC;KACf,CAAC;;6DACgB;AAMlB;IAJC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,yCAAyC;QACtD,OAAO,EAAE,wBAAwB;KAClC,CAAC;;+DACgB;AAMlB;IAJC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,+CAA+C;QAC5D,IAAI,EAAE,aAAa;KACpB,CAAC;8BACO,aAAa;6DAAC;AAMvB;IAJC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,6CAA6C;QAC1D,IAAI,EAAE,aAAa;KACpB,CAAC;8BACO,aAAa;6DAAC;AAMvB;IAJC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,oDAAoD;QACjE,OAAO,EAAE,gCAAgC;KAC1C,CAAC;;kEACmB;AAMrB;IAJC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,qCAAqC;QAClD,OAAO,EAAE,0BAA0B;KACpC,CAAC;;gEACiB"}
+{"version":3,"file":"consent-metadata-response.dto.js","sourceRoot":"","sources":["../../../src/authorization-server/dto/consent-metadata-response.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,6CAAmE;AACnE,oCAAoD;AACpD,qHAA0G;AAK1G,MAAa,aAAa;IAKxB,UAAU,CAAU;IAMpB,IAAI,CAAU;IAMd,WAAW,CAAU;CACtB;AAlBD,sCAkBC;AAbC;IAJC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,qCAAqC;QAClD,OAAO,EAAE,OAAO;KACjB,CAAC;;iDACkB;AAMpB;IAJC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,uCAAuC;QACpD,OAAO,EAAE,OAAO;KACjB,CAAC;;2CACY;AAMd;IAJC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,yCAAyC;QACtD,OAAO,EAAE,uCAAuC;KACjD,CAAC;;kDACmB;AAMvB,MAAa,aAAa;IAKxB,QAAQ,CAAU;IAMlB,UAAU,CAAU;IAQpB,kBAAkB,CAA4B;CAC/C;AApBD,sCAoBC;AAfC;IAJC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,yBAAyB;QACtC,OAAO,EAAE,kCAAkC;KAC5C,CAAC;;+CACgB;AAMlB;IAJC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,+CAA+C;QAC5D,OAAO,EAAE,gBAAgB;KAC1B,CAAC;;iDACkB;AAQpB;IANC,IAAA,qBAAW,EAAC;QACX,WAAW,EACT,iJAAiJ;QACnJ,IAAI,EAAE,gCAAwB;QAC9B,OAAO,EAAE,gCAAwB,CAAC,iBAAiB;KACpD,CAAC;;yDAC4C;AAShD,MAAa,6BAA6B;IAKxC,EAAE,CAAU;IAOZ,MAAM,CAA8B;IAOpC,MAAM,CAAY;IAMlB,QAAQ,CAAU;IAMlB,MAAM,CAAiB;IAMvB,MAAM,CAAiB;IAMvB,WAAW,CAAU;IAMrB,SAAS,CAAU;CACpB;AAlDD,sEAkDC;AA7CC;IAJC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,6CAA6C;QAC1D,OAAO,EAAE,sCAAsC;KAChD,CAAC;;yDACU;AAOZ;IALC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,0CAA0C;QACvD,IAAI,EAAE,+DAA0B;QAChC,OAAO,EAAE,+DAA0B,CAAC,6BAA6B;KAClE,CAAC;;6DACkC;AAOpC;IALC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,gCAAgC;QAC7C,OAAO,EAAE,CAAC,YAAY,EAAE,aAAa,CAAC;QACtC,IAAI,EAAE,CAAC,MAAM,CAAC;KACf,CAAC;;6DACgB;AAMlB;IAJC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,yCAAyC;QACtD,OAAO,EAAE,wBAAwB;KAClC,CAAC;;+DACgB;AAMlB;IAJC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,+CAA+C;QAC5D,IAAI,EAAE,aAAa;KACpB,CAAC;8BACO,aAAa;6DAAC;AAMvB;IAJC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,6CAA6C;QAC1D,IAAI,EAAE,aAAa;KACpB,CAAC;8BACO,aAAa;6DAAC;AAMvB;IAJC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,oDAAoD;QACjE,OAAO,EAAE,gCAAgC;KAC1C,CAAC;;kEACmB;AAMrB;IAJC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,qCAAqC;QAClD,OAAO,EAAE,0BAA0B;KACpC,CAAC;;gEACiB"}

package/dist/authorization-server/dto/register-client.dto.js

@@ -10,10 +10,11 @@ var __metadata = (this && this.__metadata) || function (k, v) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.RegisterClientDto = void 0;
+const app_validation_pipe_1 = require("../../http/app-validation.pipe");
 const class_validator_1 = require("class-validator");
 const swagger_1 = require("@nestjs/swagger");
 const enums_1 = require("../enums");
-class RegisterClientDto {
+let RegisterClientDto = class RegisterClientDto {
     redirect_uris;
     token_endpoint_auth_method;
     grant_types;
@@ -29,7 +30,7 @@ class RegisterClientDto {
     jwks;
     software_id;
     software_version;
-}
+};
 exports.RegisterClientDto = RegisterClientDto;
 __decorate([
     (0, swagger_1.ApiProperty)({
@@ -177,4 +178,7 @@ __decorate([
     (0, class_validator_1.IsOptional)(),
     __metadata("design:type", String)
 ], RegisterClientDto.prototype, "software_version", void 0);
+exports.RegisterClientDto = RegisterClientDto = __decorate([
+    (0, app_validation_pipe_1.IgnoresUnknownProperties)()
+], RegisterClientDto);
 //# sourceMappingURL=register-client.dto.js.map

package/dist/authorization-server/dto/register-client.dto.js.map

@@ -1 +1 @@
-{"version":3,"file":"register-client.dto.js","sourceRoot":"","sources":["../../../src/authorization-server/dto/register-client.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qDAUyB;AACzB,6CAAmE;AACnE,oCAA4E;AAmB5E,MAAa,iBAAiB;IAU5B,aAAa,CAAY;IASzB,0BAA0B,CAA2B;IAYrD,WAAW,CAAe;IAY1B,cAAc,CAAkB;IAQhC,WAAW,CAAU;IAarB,KAAK,CAAU;IAUf,QAAQ,CAAY;IAQpB,OAAO,CAAU;IAQjB,UAAU,CAAU;IAQpB,QAAQ,CAAU;IASlB,UAAU,CAAU;IASpB,QAAQ,CAAU;IAUlB,IAAI,CAAU;IASd,WAAW,CAAU;IAQrB,gBAAgB,CAAU;CAC3B;AAhJD,8CAgJC;AAtIC;IATC,IAAA,qBAAW,EAAC;QACX,WAAW,EACT,kGAAkG;QACpG,OAAO,EAAE,CAAC,gCAAgC,EAAE,8BAA8B,CAAC;QAC3E,IAAI,EAAE,CAAC,MAAM,CAAC;KACf,CAAC;IACD,IAAA,yBAAO,GAAE;IACT,IAAA,+BAAa,GAAE;IACf,IAAA,uBAAK,EAAC,EAAE,WAAW,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;;wDAC7C;AASzB;IAPC,IAAA,qBAAW,EAAC;QACX,WAAW,EACT,uEAAuE;QACzE,OAAO,EAAE,+BAAuB,CAAC,IAAI;QACrC,IAAI,EAAE,+BAAuB;KAC9B,CAAC;IACD,IAAA,wBAAM,EAAC,+BAAuB,CAAC;;qEACqB;AAYrD;IAVC,IAAA,qBAAW,EAAC;QACX,WAAW,EACT,0GAA0G;QAC5G,OAAO,EAAE,CAAC,oBAAoB,EAAE,eAAe,CAAC;QAChD,IAAI,EAAE,iBAAS;QACf,OAAO,EAAE,IAAI;KACd,CAAC;IACD,IAAA,yBAAO,GAAE;IACT,IAAA,+BAAa,GAAE;IACf,IAAA,wBAAM,EAAC,iBAAS,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;;sDACR;AAY1B;IAVC,IAAA,qBAAW,EAAC;QACX,WAAW,EACT,qGAAqG;QACvG,OAAO,EAAE,CAAC,oBAAY,CAAC,IAAI,CAAC;QAC5B,IAAI,EAAE,oBAAY;QAClB,OAAO,EAAE,IAAI;KACd,CAAC;IACD,IAAA,yBAAO,GAAE;IACT,IAAA,+BAAa,GAAE;IACf,IAAA,wBAAM,EAAC,oBAAY,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;;yDACL;AAQhC;IANC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,mCAAmC;QAChD,OAAO,EAAE,iBAAiB;KAC3B,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;sDACQ;AAarB;IAPC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,iCAAiC;QAC9C,OAAO,EAAE,sBAAsB;QAC/B,IAAI,EAAE,MAAM;KACb,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;gDACE;AAUf;IARC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,4CAA4C;QACzD,OAAO,EAAE,CAAC,mBAAmB,CAAC;QAC9B,IAAI,EAAE,CAAC,MAAM,CAAC;KACf,CAAC;IACD,IAAA,yBAAO,GAAE;IACT,IAAA,0BAAQ,EAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACxB,IAAA,4BAAU,GAAE;;mDACO;AAQpB;IANC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,kDAAkD;QAC/D,OAAO,EAAE,yBAAyB;KACnC,CAAC;IACD,IAAA,uBAAK,GAAE;IACP,IAAA,4BAAU,GAAE;;kDACI;AAQjB;IANC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,oCAAoC;QACjD,OAAO,EAAE,qBAAqB;KAC/B,CAAC;IACD,IAAA,uBAAK,GAAE;IACP,IAAA,4BAAU,GAAE;;qDACO;AAQpB;IANC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,uDAAuD;QACpE,OAAO,EAAE,8BAA8B;KACxC,CAAC;IACD,IAAA,uBAAK,GAAE;IACP,IAAA,4BAAU,GAAE;;mDACK;AASlB;IAPC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EACT,8FAA8F;QAChG,OAAO,EAAE,6BAA6B;KACvC,CAAC;IACD,IAAA,uBAAK,GAAE;IACP,IAAA,4BAAU,GAAE;;qDACO;AASpB;IAPC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EACT,6FAA6F;QAC/F,OAAO,EAAE,2CAA2C;KACrD,CAAC;IACD,IAAA,uBAAK,GAAE;IACP,IAAA,4BAAU,GAAE;;mDACK;AAUlB;IARC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EACT,4GAA4G;QAC9G,OAAO,EACL,yEAAyE;KAC5E,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;+CACC;AASd;IAPC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EACT,iFAAiF;QACnF,OAAO,EAAE,iBAAiB;KAC3B,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;sDACQ;AAQrB;IANC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,mDAAmD;QAChE,OAAO,EAAE,OAAO;KACjB,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;2DACa"}
+{"version":3,"file":"register-client.dto.js","sourceRoot":"","sources":["../../../src/authorization-server/dto/register-client.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,wEAA0E;AAC1E,qDAUyB;AACzB,6CAAmE;AACnE,oCAA4E;AAoBrE,IAAM,iBAAiB,GAAvB,MAAM,iBAAiB;IAU5B,aAAa,CAAY;IASzB,0BAA0B,CAA2B;IAYrD,WAAW,CAAe;IAY1B,cAAc,CAAkB;IAQhC,WAAW,CAAU;IAarB,KAAK,CAAU;IAUf,QAAQ,CAAY;IAQpB,OAAO,CAAU;IAQjB,UAAU,CAAU;IAQpB,QAAQ,CAAU;IASlB,UAAU,CAAU;IASpB,QAAQ,CAAU;IAUlB,IAAI,CAAU;IASd,WAAW,CAAU;IAQrB,gBAAgB,CAAU;CAC3B,CAAA;AAhJY,8CAAiB;AAU5B;IATC,IAAA,qBAAW,EAAC;QACX,WAAW,EACT,kGAAkG;QACpG,OAAO,EAAE,CAAC,gCAAgC,EAAE,8BAA8B,CAAC;QAC3E,IAAI,EAAE,CAAC,MAAM,CAAC;KACf,CAAC;IACD,IAAA,yBAAO,GAAE;IACT,IAAA,+BAAa,GAAE;IACf,IAAA,uBAAK,EAAC,EAAE,WAAW,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;;wDAC7C;AASzB;IAPC,IAAA,qBAAW,EAAC;QACX,WAAW,EACT,uEAAuE;QACzE,OAAO,EAAE,+BAAuB,CAAC,IAAI;QACrC,IAAI,EAAE,+BAAuB;KAC9B,CAAC;IACD,IAAA,wBAAM,EAAC,+BAAuB,CAAC;;qEACqB;AAYrD;IAVC,IAAA,qBAAW,EAAC;QACX,WAAW,EACT,0GAA0G;QAC5G,OAAO,EAAE,CAAC,oBAAoB,EAAE,eAAe,CAAC;QAChD,IAAI,EAAE,iBAAS;QACf,OAAO,EAAE,IAAI;KACd,CAAC;IACD,IAAA,yBAAO,GAAE;IACT,IAAA,+BAAa,GAAE;IACf,IAAA,wBAAM,EAAC,iBAAS,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;;sDACR;AAY1B;IAVC,IAAA,qBAAW,EAAC;QACX,WAAW,EACT,qGAAqG;QACvG,OAAO,EAAE,CAAC,oBAAY,CAAC,IAAI,CAAC;QAC5B,IAAI,EAAE,oBAAY;QAClB,OAAO,EAAE,IAAI;KACd,CAAC;IACD,IAAA,yBAAO,GAAE;IACT,IAAA,+BAAa,GAAE;IACf,IAAA,wBAAM,EAAC,oBAAY,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;;yDACL;AAQhC;IANC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,mCAAmC;QAChD,OAAO,EAAE,iBAAiB;KAC3B,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;sDACQ;AAarB;IAPC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,iCAAiC;QAC9C,OAAO,EAAE,sBAAsB;QAC/B,IAAI,EAAE,MAAM;KACb,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;gDACE;AAUf;IARC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,4CAA4C;QACzD,OAAO,EAAE,CAAC,mBAAmB,CAAC;QAC9B,IAAI,EAAE,CAAC,MAAM,CAAC;KACf,CAAC;IACD,IAAA,yBAAO,GAAE;IACT,IAAA,0BAAQ,EAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACxB,IAAA,4BAAU,GAAE;;mDACO;AAQpB;IANC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,kDAAkD;QAC/D,OAAO,EAAE,yBAAyB;KACnC,CAAC;IACD,IAAA,uBAAK,GAAE;IACP,IAAA,4BAAU,GAAE;;kDACI;AAQjB;IANC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,oCAAoC;QACjD,OAAO,EAAE,qBAAqB;KAC/B,CAAC;IACD,IAAA,uBAAK,GAAE;IACP,IAAA,4BAAU,GAAE;;qDACO;AAQpB;IANC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,uDAAuD;QACpE,OAAO,EAAE,8BAA8B;KACxC,CAAC;IACD,IAAA,uBAAK,GAAE;IACP,IAAA,4BAAU,GAAE;;mDACK;AASlB;IAPC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EACT,8FAA8F;QAChG,OAAO,EAAE,6BAA6B;KACvC,CAAC;IACD,IAAA,uBAAK,GAAE;IACP,IAAA,4BAAU,GAAE;;qDACO;AASpB;IAPC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EACT,6FAA6F;QAC/F,OAAO,EAAE,2CAA2C;KACrD,CAAC;IACD,IAAA,uBAAK,GAAE;IACP,IAAA,4BAAU,GAAE;;mDACK;AAUlB;IARC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EACT,4GAA4G;QAC9G,OAAO,EACL,yEAAyE;KAC5E,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;+CACC;AASd;IAPC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EACT,iFAAiF;QACnF,OAAO,EAAE,iBAAiB;KAC3B,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;sDACQ;AAQrB;IANC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,mDAAmD;QAChE,OAAO,EAAE,OAAO;KACjB,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;2DACa;4BA/If,iBAAiB;IAD7B,IAAA,8CAAwB,GAAE;GACd,iBAAiB,CAgJ7B"}

package/dist/authorization-server/dto/service/authorization.service.types.d.ts

@@ -1,3 +1,4 @@
+import { ClientRegistrationMethod } from '../../enums';
 import { McpAuthorizationFlowStatus } from "../../../auth-journeys/enums/mcp-authorization-flow-status.enum";
 export type ConsentMetadata = {
     id: string;
@@ -12,6 +13,7 @@ export type ConsentMetadata = {
     client: {
         clientId: string;
         clientName: string;
+        registrationMethod: ClientRegistrationMethod;
     };
     redirectUri: string;
     createdAt: Date;

package/dist/authorization-server/dto/token-request.dto.d.ts

@@ -1,7 +1,9 @@
 import { GrantType } from '../enums';
 export declare class TokenRequestDto {
     grant_type: GrantType;
-    client_id: string;
+    client_id?: string;
+    client_assertion_type?: string;
+    client_assertion?: string;
     code?: string;
     redirect_uri?: string;
     code_verifier?: string;

package/dist/authorization-server/dto/token-request.dto.js

@@ -10,19 +10,22 @@ var __metadata = (this && this.__metadata) || function (k, v) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.TokenRequestDto = void 0;
+const app_validation_pipe_1 = require("../../http/app-validation.pipe");
 const class_validator_1 = require("class-validator");
 const swagger_1 = require("@nestjs/swagger");
 const enums_1 = require("../enums");
-class TokenRequestDto {
+let TokenRequestDto = class TokenRequestDto {
     grant_type;
     client_id;
+    client_assertion_type;
+    client_assertion;
     code;
     redirect_uri;
     code_verifier;
     refresh_token;
     scope;
     resource;
-}
+};
 exports.TokenRequestDto = TokenRequestDto;
 __decorate([
     (0, swagger_1.ApiProperty)({
@@ -34,14 +37,33 @@ __decorate([
     __metadata("design:type", String)
 ], TokenRequestDto.prototype, "grant_type", void 0);
 __decorate([
-    (0, swagger_1.ApiProperty)({
-        description: 'Client identifier issued during dynamic registration',
+    (0, swagger_1.ApiPropertyOptional)({
+        description: 'Client identifier: issued during dynamic registration, or the URL of the client metadata document. Required unless a client_assertion is sent',
         example: '0bab273987a2e163c3abb40c631ec0a4',
     }),
+    (0, class_validator_1.ValidateIf)((dto) => !dto.client_assertion || dto.client_id !== undefined),
     (0, class_validator_1.IsString)(),
     (0, class_validator_1.IsNotEmpty)(),
     __metadata("design:type", String)
 ], TokenRequestDto.prototype, "client_id", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({
+        description: 'Type of the client assertion. Sent by clients that authenticate with private_key_jwt',
+        example: 'urn:ietf:params:oauth:client-assertion-type:jwt-bearer',
+    }),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    __metadata("design:type", String)
+], TokenRequestDto.prototype, "client_assertion_type", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({
+        description: 'JWT signed with the client private key (RFC 7523). Sent by clients that authenticate with private_key_jwt',
+    }),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MaxLength)(8192),
+    __metadata("design:type", String)
+], TokenRequestDto.prototype, "client_assertion", void 0);
 __decorate([
     (0, swagger_1.ApiPropertyOptional)({
         description: 'Authorization code that was issued by the /authorize endpoint',
@@ -103,4 +125,7 @@ __decorate([
     (0, class_validator_1.IsString)(),
     __metadata("design:type", String)
 ], TokenRequestDto.prototype, "resource", void 0);
+exports.TokenRequestDto = TokenRequestDto = __decorate([
+    (0, app_validation_pipe_1.IgnoresUnknownProperties)()
+], TokenRequestDto);
 //# sourceMappingURL=token-request.dto.js.map

package/dist/authorization-server/dto/token-request.dto.js.map

@@ -1 +1 @@
-{"version":3,"file":"token-request.dto.js","sourceRoot":"","sources":["../../../src/authorization-server/dto/token-request.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qDASyB;AACzB,6CAAmE;AACnE,oCAAqC;AAMrC,MAAa,eAAe;IAO1B,UAAU,CAAa;IAQvB,SAAS,CAAU;IAUnB,IAAI,CAAU;IAWd,YAAY,CAAU;IAYtB,aAAa,CAAU;IASvB,aAAa,CAAU;IASvB,KAAK,CAAU;IASf,QAAQ,CAAU;CACnB;AA5ED,0CA4EC;AArEC;IANC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,8DAA8D;QAC3E,IAAI,EAAE,iBAAS;QACf,OAAO,EAAE,iBAAS,CAAC,kBAAkB;KACtC,CAAC;IACD,IAAA,wBAAM,EAAC,iBAAS,CAAC;;mDACK;AAQvB;IANC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,sDAAsD;QACnE,OAAO,EAAE,kCAAkC;KAC5C,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;kDACM;AAUnB;IARC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EACT,+DAA+D;QACjE,OAAO,EAAE,wBAAwB;KAClC,CAAC;IACD,IAAA,4BAAU,EAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,KAAK,iBAAS,CAAC,kBAAkB,CAAC;IACpE,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;6CACC;AAWd;IATC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EACT,wEAAwE;QAC1E,OAAO,EAAE,4CAA4C;KACtD,CAAC;IACD,IAAA,4BAAU,EAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,KAAK,iBAAS,CAAC,kBAAkB,CAAC;IACpE,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;IACZ,IAAA,uBAAK,EAAC,EAAE,gBAAgB,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;;qDAChC;AAYtB;IAVC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EACT,qEAAqE;QACvE,OAAO,EAAE,6CAA6C;KACvD,CAAC;IACD,IAAA,4BAAU,EAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,KAAK,iBAAS,CAAC,kBAAkB,CAAC;IACpE,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;IACZ,IAAA,wBAAM,EAAC,EAAE,EAAE,GAAG,CAAC;IACf,IAAA,yBAAO,EAAC,oBAAoB,CAAC;;sDACP;AASvB;IAPC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,0DAA0D;QACvE,OAAO,EAAE,wBAAwB;KAClC,CAAC;IACD,IAAA,4BAAU,EAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,KAAK,iBAAS,CAAC,aAAa,CAAC;IAC/D,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;sDACU;AASvB;IAPC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EACT,6EAA6E;QAC/E,OAAO,EAAE,wBAAwB;KAClC,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;8CACI;AASf;IAPC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EACT,gFAAgF;QAClF,OAAO,EAAE,wBAAwB;KAClC,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;iDACO"}
+{"version":3,"file":"token-request.dto.js","sourceRoot":"","sources":["../../../src/authorization-server/dto/token-request.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,wEAA0E;AAC1E,qDAUyB;AACzB,6CAAmE;AACnE,oCAAqC;AAO9B,IAAM,eAAe,GAArB,MAAM,eAAe;IAO1B,UAAU,CAAa;IAYvB,SAAS,CAAU;IASnB,qBAAqB,CAAU;IAS/B,gBAAgB,CAAU;IAU1B,IAAI,CAAU;IAWd,YAAY,CAAU;IAYtB,aAAa,CAAU;IASvB,aAAa,CAAU;IASvB,KAAK,CAAU;IASf,QAAQ,CAAU;CACnB,CAAA;AAlGY,0CAAe;AAO1B;IANC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,8DAA8D;QAC3E,IAAI,EAAE,iBAAS;QACf,OAAO,EAAE,iBAAS,CAAC,kBAAkB;KACtC,CAAC;IACD,IAAA,wBAAM,EAAC,iBAAS,CAAC;;mDACK;AAYvB;IAVC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EACT,+IAA+I;QACjJ,OAAO,EAAE,kCAAkC;KAC5C,CAAC;IAGD,IAAA,4BAAU,EAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,gBAAgB,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC;IACzE,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;kDACM;AASnB;IAPC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EACT,sFAAsF;QACxF,OAAO,EAAE,wDAAwD;KAClE,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;8DACoB;AAS/B;IAPC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EACT,2GAA2G;KAC9G,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,IAAI,CAAC;;yDACU;AAU1B;IARC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EACT,+DAA+D;QACjE,OAAO,EAAE,wBAAwB;KAClC,CAAC;IACD,IAAA,4BAAU,EAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,KAAK,iBAAS,CAAC,kBAAkB,CAAC;IACpE,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;6CACC;AAWd;IATC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EACT,wEAAwE;QAC1E,OAAO,EAAE,4CAA4C;KACtD,CAAC;IACD,IAAA,4BAAU,EAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,KAAK,iBAAS,CAAC,kBAAkB,CAAC;IACpE,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;IACZ,IAAA,uBAAK,EAAC,EAAE,gBAAgB,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;;qDAChC;AAYtB;IAVC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EACT,qEAAqE;QACvE,OAAO,EAAE,6CAA6C;KACvD,CAAC;IACD,IAAA,4BAAU,EAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,KAAK,iBAAS,CAAC,kBAAkB,CAAC;IACpE,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;IACZ,IAAA,wBAAM,EAAC,EAAE,EAAE,GAAG,CAAC;IACf,IAAA,yBAAO,EAAC,oBAAoB,CAAC;;sDACP;AASvB;IAPC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,0DAA0D;QACvE,OAAO,EAAE,wBAAwB;KAClC,CAAC;IACD,IAAA,4BAAU,EAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,KAAK,iBAAS,CAAC,aAAa,CAAC;IAC/D,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;sDACU;AASvB;IAPC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EACT,6EAA6E;QAC/E,OAAO,EAAE,wBAAwB;KAClC,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;8CACI;AASf;IAPC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EACT,gFAAgF;QAClF,OAAO,EAAE,wBAAwB;KAClC,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;iDACO;0BAjGP,eAAe;IAD3B,IAAA,8CAAwB,GAAE;GACd,eAAe,CAkG3B"}

package/dist/authorization-server/entities/registered-client.entity.d.ts

@@ -1,4 +1,4 @@
-import { GrantType, TokenEndpointAuthMethod } from '../enums';
+import { ClientRegistrationMethod, GrantType, TokenEndpointAuthMethod } from '../enums';
 export declare class RegisteredClientEntity {
     id: string;
     clientId: string;
@@ -9,6 +9,13 @@ export declare class RegisteredClientEntity {
     tokenEndpointAuthMethod: TokenEndpointAuthMethod;
     scopes: string[] | null;
     contacts: string[] | null;
+    registrationMethod: ClientRegistrationMethod;
+    jwksUri: string | null;
+    jwks: {
+        keys: Record<string, unknown>[];
+    } | null;
+    tokenEndpointAuthSigningAlg: string | null;
+    metadataExpiresAt: Date | null;
     rowVersion: number;
     createdAt: Date;
     updatedAt: Date;

package/dist/authorization-server/entities/registered-client.entity.js

@@ -22,6 +22,11 @@ let RegisteredClientEntity = class RegisteredClientEntity {
     tokenEndpointAuthMethod;
     scopes;
     contacts;
+    registrationMethod;
+    jwksUri;
+    jwks;
+    tokenEndpointAuthSigningAlg;
+    metadataExpiresAt;
     rowVersion;
     createdAt;
     updatedAt;
@@ -68,6 +73,34 @@ __decorate([
     (0, typeorm_1.Column)('simple-array', { nullable: true }),
     __metadata("design:type", Object)
 ], RegisteredClientEntity.prototype, "contacts", void 0);
+__decorate([
+    (0, typeorm_1.Column)({
+        type: 'text',
+        name: 'registration_method',
+        default: enums_1.ClientRegistrationMethod.DYNAMIC_REGISTRATION,
+    }),
+    __metadata("design:type", String)
+], RegisteredClientEntity.prototype, "registrationMethod", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ type: 'text', name: 'jwks_uri', nullable: true }),
+    __metadata("design:type", Object)
+], RegisteredClientEntity.prototype, "jwksUri", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ type: 'jsonb', nullable: true }),
+    __metadata("design:type", Object)
+], RegisteredClientEntity.prototype, "jwks", void 0);
+__decorate([
+    (0, typeorm_1.Column)({
+        type: 'text',
+        name: 'token_endpoint_auth_signing_alg',
+        nullable: true,
+    }),
+    __metadata("design:type", Object)
+], RegisteredClientEntity.prototype, "tokenEndpointAuthSigningAlg", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ type: 'timestamptz', name: 'metadata_expires_at', nullable: true }),
+    __metadata("design:type", Object)
+], RegisteredClientEntity.prototype, "metadataExpiresAt", void 0);
 __decorate([
     (0, typeorm_1.VersionColumn)({ name: 'row_version' }),
     __metadata("design:type", Number)

package/dist/authorization-server/entities/registered-client.entity.js.map

@@ -1 +1 @@
-{"version":3,"file":"registered-client.entity.js","sourceRoot":"","sources":["../../../src/authorization-server/entities/registered-client.entity.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qCAQiB;AACjB,oCAA8D;AAGvD,IAAM,sBAAsB,GAA5B,MAAM,sBAAsB;IAEjC,EAAE,CAAU;IAGZ,QAAQ,CAAU;IAGlB,YAAY,CAAiB;IAG7B,UAAU,CAAU;IAGpB,YAAY,CAAY;IAGxB,UAAU,CAAe;IAOzB,uBAAuB,CAA2B;IAGlD,MAAM,CAAmB;IAGzB,QAAQ,CAAmB;IAG3B,UAAU,CAAU;IAGpB,SAAS,CAAQ;IAGjB,SAAS,CAAQ;IAGjB,SAAS,CAAe;CACzB,CAAA;AA3CY,wDAAsB;AAEjC;IADC,IAAA,gCAAsB,EAAC,MAAM,CAAC;;kDACnB;AAGZ;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;;wDACxC;AAGlB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;4DACnC;AAG7B;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;;0DAC1B;AAGpB;IADC,IAAA,gBAAM,EAAC,cAAc,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;;4DAC1B;AAGxB;IADC,IAAA,gBAAM,EAAC,cAAc,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;;0DACvB;AAOzB;IALC,IAAA,gBAAM,EAAC;QACN,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,4BAA4B;QAClC,IAAI,EAAE,+BAAuB;KAC9B,CAAC;;uEACgD;AAGlD;IADC,IAAA,gBAAM,EAAC,cAAc,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;sDAClB;AAGzB;IADC,IAAA,gBAAM,EAAC,cAAc,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;wDAChB;AAG3B;IADC,IAAA,uBAAa,EAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;;0DACnB;AAGpB;IADC,IAAA,0BAAgB,EAAC,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;8BAClD,IAAI;yDAAC;AAGjB;IADC,IAAA,0BAAgB,EAAC,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;8BAClD,IAAI;yDAAC;AAGjB;IADC,IAAA,0BAAgB,EAAC,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;yDACtD;iCA1Cb,sBAAsB;IADlC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC;GAC1B,sBAAsB,CA2ClC"}
+{"version":3,"file":"registered-client.entity.js","sourceRoot":"","sources":["../../../src/authorization-server/entities/registered-client.entity.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qCAQiB;AACjB,oCAIkB;AAGX,IAAM,sBAAsB,GAA5B,MAAM,sBAAsB;IAEjC,EAAE,CAAU;IAGZ,QAAQ,CAAU;IAGlB,YAAY,CAAiB;IAG7B,UAAU,CAAU;IAGpB,YAAY,CAAY;IAGxB,UAAU,CAAe;IAOzB,uBAAuB,CAA2B;IAGlD,MAAM,CAAmB;IAGzB,QAAQ,CAAmB;IAO3B,kBAAkB,CAA4B;IAK9C,OAAO,CAAiB;IAGxB,IAAI,CAA8C;IAQlD,2BAA2B,CAAiB;IAI5C,iBAAiB,CAAe;IAGhC,UAAU,CAAU;IAGpB,SAAS,CAAQ;IAGjB,SAAS,CAAQ;IAGjB,SAAS,CAAe;CACzB,CAAA;AAtEY,wDAAsB;AAEjC;IADC,IAAA,gCAAsB,EAAC,MAAM,CAAC;;kDACnB;AAGZ;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;;wDACxC;AAGlB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;4DACnC;AAG7B;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;;0DAC1B;AAGpB;IADC,IAAA,gBAAM,EAAC,cAAc,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;;4DAC1B;AAGxB;IADC,IAAA,gBAAM,EAAC,cAAc,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;;0DACvB;AAOzB;IALC,IAAA,gBAAM,EAAC;QACN,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,4BAA4B;QAClC,IAAI,EAAE,+BAAuB;KAC9B,CAAC;;uEACgD;AAGlD;IADC,IAAA,gBAAM,EAAC,cAAc,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;sDAClB;AAGzB;IADC,IAAA,gBAAM,EAAC,cAAc,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;wDAChB;AAO3B;IALC,IAAA,gBAAM,EAAC;QACN,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,qBAAqB;QAC3B,OAAO,EAAE,gCAAwB,CAAC,oBAAoB;KACvD,CAAC;;kEAC4C;AAK9C;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;uDACnC;AAGxB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;oDACQ;AAQlD;IALC,IAAA,gBAAM,EAAC;QACN,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,iCAAiC;QACvC,QAAQ,EAAE,IAAI;KACf,CAAC;;2EAC0C;AAI5C;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,qBAAqB,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;iEAC7C;AAGhC;IADC,IAAA,uBAAa,EAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;;0DACnB;AAGpB;IADC,IAAA,0BAAgB,EAAC,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;8BAClD,IAAI;yDAAC;AAGjB;IADC,IAAA,0BAAgB,EAAC,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;8BAClD,IAAI;yDAAC;AAGjB;IADC,IAAA,0BAAgB,EAAC,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;yDACtD;iCArEb,sBAAsB;IADlC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC;GAC1B,sBAAsB,CAsElC"}

package/dist/authorization-server/enums/client-registration-method.enum.d.ts

@@ -0,0 +1,4 @@
+export declare enum ClientRegistrationMethod {
+    DYNAMIC_REGISTRATION = "dynamic_registration",
+    METADATA_DOCUMENT = "metadata_document"
+}

package/dist/authorization-server/enums/client-registration-method.enum.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ClientRegistrationMethod = void 0;
+var ClientRegistrationMethod;
+(function (ClientRegistrationMethod) {
+    ClientRegistrationMethod["DYNAMIC_REGISTRATION"] = "dynamic_registration";
+    ClientRegistrationMethod["METADATA_DOCUMENT"] = "metadata_document";
+})(ClientRegistrationMethod || (exports.ClientRegistrationMethod = ClientRegistrationMethod = {}));
+//# sourceMappingURL=client-registration-method.enum.js.map

package/dist/authorization-server/enums/client-registration-method.enum.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-registration-method.enum.js","sourceRoot":"","sources":["../../../src/authorization-server/enums/client-registration-method.enum.ts"],"names":[],"mappings":";;;AAGA,IAAY,wBAKX;AALD,WAAY,wBAAwB;IAElC,yEAA6C,CAAA;IAE7C,mEAAuC,CAAA;AACzC,CAAC,EALW,wBAAwB,wCAAxB,wBAAwB,QAKnC"}

package/dist/authorization-server/enums/index.d.ts

@@ -1,3 +1,4 @@
+export * from './client-registration-method.enum';
 export * from './grant-type.enum';
 export * from './response-type.enum';
 export * from './token-endpoint-auth-method.enum';

package/dist/authorization-server/enums/index.js

@@ -14,6 +14,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./client-registration-method.enum"), exports);
 __exportStar(require("./grant-type.enum"), exports);
 __exportStar(require("./response-type.enum"), exports);
 __exportStar(require("./token-endpoint-auth-method.enum"), exports);

package/dist/authorization-server/enums/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/authorization-server/enums/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,oDAAkC;AAClC,uDAAqC;AACrC,oEAAkD;AAClD,oDAAkC;AAClC,yDAAuC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/authorization-server/enums/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,oEAAkD;AAClD,oDAAkC;AAClC,uDAAqC;AACrC,oEAAkD;AAClD,oDAAkC;AAClC,yDAAuC"}

package/dist/authorization-server/enums/token-endpoint-auth-method.enum.d.ts

@@ -1,4 +1,5 @@
 export declare enum TokenEndpointAuthMethod {
     NONE = "none",
-    CLIENT_SECRET_BASIC = "client_secret_basic"
+    CLIENT_SECRET_BASIC = "client_secret_basic",
+    PRIVATE_KEY_JWT = "private_key_jwt"
 }

package/dist/authorization-server/enums/token-endpoint-auth-method.enum.js

@@ -5,5 +5,6 @@ var TokenEndpointAuthMethod;
 (function (TokenEndpointAuthMethod) {
     TokenEndpointAuthMethod["NONE"] = "none";
     TokenEndpointAuthMethod["CLIENT_SECRET_BASIC"] = "client_secret_basic";
+    TokenEndpointAuthMethod["PRIVATE_KEY_JWT"] = "private_key_jwt";
 })(TokenEndpointAuthMethod || (exports.TokenEndpointAuthMethod = TokenEndpointAuthMethod = {}));
 //# sourceMappingURL=token-endpoint-auth-method.enum.js.map

package/dist/authorization-server/enums/token-endpoint-auth-method.enum.js.map

@@ -1 +1 @@
-{"version":3,"file":"token-endpoint-auth-method.enum.js","sourceRoot":"","sources":["../../../src/authorization-server/enums/token-endpoint-auth-method.enum.ts"],"names":[],"mappings":";;;AAIA,IAAY,uBAGX;AAHD,WAAY,uBAAuB;IACjC,wCAAa,CAAA;IACb,sEAA2C,CAAA;AAC7C,CAAC,EAHW,uBAAuB,uCAAvB,uBAAuB,QAGlC"}
+{"version":3,"file":"token-endpoint-auth-method.enum.js","sourceRoot":"","sources":["../../../src/authorization-server/enums/token-endpoint-auth-method.enum.ts"],"names":[],"mappings":";;;AAIA,IAAY,uBAQX;AARD,WAAY,uBAAuB;IACjC,wCAAa,CAAA;IACb,sEAA2C,CAAA;IAK3C,8DAAmC,CAAA;AACrC,CAAC,EARW,uBAAuB,uCAAvB,uBAAuB,QAQlC"}

package/dist/authorization-server/errors/authorization.errors.d.ts

@@ -3,6 +3,7 @@ export declare const AuthorizationErrorCodes: {
     readonly AUTH_FLOW_ALREADY_COMPLETED: "AUTH_FLOW_ALREADY_COMPLETED";
     readonly INVALID_FLOW_STATE: "INVALID_FLOW_STATE";
     readonly SERVER_IDENTIFIER_MISMATCH: "SERVER_IDENTIFIER_MISMATCH";
+    readonly RESOURCE_MISMATCH: "RESOURCE_MISMATCH";
     readonly DOWNSTREAM_AUTH_FAILED: "DOWNSTREAM_AUTH_FAILED";
     readonly NO_PENDING_CONNECTION_FLOWS: "NO_PENDING_CONNECTION_FLOWS";
     readonly CONNECTION_FLOW_NOT_FOUND: "CONNECTION_FLOW_NOT_FOUND";
@@ -29,6 +30,9 @@ export declare class InvalidFlowStateError extends AuthorizationDomainError {
 export declare class ServerIdentifierMismatchError extends AuthorizationDomainError {
     constructor(expected: string, actual: string);
 }
+export declare class ResourceMismatchError extends AuthorizationDomainError {
+    constructor(expected: string, actual: string);
+}
 export declare class DownstreamAuthFailedError extends AuthorizationDomainError {
     constructor(reason: string);
 }

package/dist/authorization-server/errors/authorization.errors.js

@@ -1,12 +1,13 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.InvalidRedirectUriError = exports.McpClientNotFoundError = exports.McpServerNotFoundError = exports.TokenExchangeFailedError = exports.ConnectionFlowNotFoundError = exports.NoPendingConnectionFlowsError = exports.DownstreamAuthFailedError = exports.ServerIdentifierMismatchError = exports.InvalidFlowStateError = exports.AuthFlowAlreadyCompletedError = exports.AuthFlowNotFoundError = exports.AuthorizationDomainError = exports.AuthorizationErrorCodes = void 0;
+exports.InvalidRedirectUriError = exports.McpClientNotFoundError = exports.McpServerNotFoundError = exports.TokenExchangeFailedError = exports.ConnectionFlowNotFoundError = exports.NoPendingConnectionFlowsError = exports.DownstreamAuthFailedError = exports.ResourceMismatchError = exports.ServerIdentifierMismatchError = exports.InvalidFlowStateError = exports.AuthFlowAlreadyCompletedError = exports.AuthFlowNotFoundError = exports.AuthorizationDomainError = exports.AuthorizationErrorCodes = void 0;
 const errors_1 = require("@taico/errors");
 exports.AuthorizationErrorCodes = {
     AUTH_FLOW_NOT_FOUND: errors_1.ErrorCodes.AUTH_FLOW_NOT_FOUND,
     AUTH_FLOW_ALREADY_COMPLETED: errors_1.ErrorCodes.AUTH_FLOW_ALREADY_COMPLETED,
     INVALID_FLOW_STATE: errors_1.ErrorCodes.INVALID_FLOW_STATE,
     SERVER_IDENTIFIER_MISMATCH: errors_1.ErrorCodes.SERVER_IDENTIFIER_MISMATCH,
+    RESOURCE_MISMATCH: errors_1.ErrorCodes.RESOURCE_MISMATCH,
     DOWNSTREAM_AUTH_FAILED: errors_1.ErrorCodes.DOWNSTREAM_AUTH_FAILED,
     NO_PENDING_CONNECTION_FLOWS: errors_1.ErrorCodes.NO_PENDING_CONNECTION_FLOWS,
     CONNECTION_FLOW_NOT_FOUND: errors_1.ErrorCodes.CONNECTION_FLOW_NOT_FOUND,
@@ -50,6 +51,12 @@ class ServerIdentifierMismatchError extends AuthorizationDomainError {
     }
 }
 exports.ServerIdentifierMismatchError = ServerIdentifierMismatchError;
+class ResourceMismatchError extends AuthorizationDomainError {
+    constructor(expected, actual) {
+        super('Resource does not match the MCP server being authorized.', exports.AuthorizationErrorCodes.RESOURCE_MISMATCH, { expected, actual });
+    }
+}
+exports.ResourceMismatchError = ResourceMismatchError;
 class DownstreamAuthFailedError extends AuthorizationDomainError {
     constructor(reason) {
         super(`One or more downstream connections failed to authorize: ${reason}`, exports.AuthorizationErrorCodes.DOWNSTREAM_AUTH_FAILED, { reason });