@tekcify/auth-core-client 1.0.0 → 1.0.2

package/{src/index.ts → dist/index.d.ts}

@@ -1,3 +1,4 @@
 export * from './types';
 export * from './pkce';
 export * from './oauth';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,SAAS,CAAC;AACxB,cAAc,QAAQ,CAAC;AACvB,cAAc,SAAS,CAAC"}

package/dist/index.js

@@ -0,0 +1,20 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./types"), exports);
+__exportStar(require("./pkce"), exports);
+__exportStar(require("./oauth"), exports);
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,0CAAwB;AACxB,yCAAuB;AACvB,0CAAwB"}

package/dist/oauth.d.ts

@@ -0,0 +1,52 @@
+import type { TokenResponse, UserInfo, IntrospectResult, OAuthConfig } from './types';
+import { generateCodeVerifier, generateCodeChallenge } from './pkce';
+export declare function buildAuthorizeUrl(authServerUrl: string, config: {
+    clientId: string;
+    redirectUri: string;
+    scopes: string[];
+    state?: string;
+    codeChallenge?: string;
+    codeChallengeMethod?: 'plain' | 'S256';
+}): string;
+export declare function exchangeCode(authServerUrl: string, config: {
+    code: string;
+    clientId: string;
+    clientSecret: string;
+    redirectUri: string;
+    codeVerifier?: string;
+}): Promise<TokenResponse>;
+export declare function refreshAccessToken(authServerUrl: string, config: {
+    refreshToken: string;
+    clientId: string;
+    clientSecret: string;
+}): Promise<TokenResponse>;
+export declare function revokeToken(authServerUrl: string, config: {
+    token: string;
+    clientId: string;
+    clientSecret: string;
+}): Promise<void>;
+export declare function introspectToken(authServerUrl: string, config: {
+    token: string;
+    clientId?: string;
+    clientSecret?: string;
+}): Promise<IntrospectResult>;
+export declare function getUserInfo(authServerUrl: string, accessToken: string): Promise<UserInfo>;
+export declare class OAuthClient {
+    private config;
+    constructor(config: OAuthConfig);
+    buildAuthorizeUrl(options?: {
+        state?: string;
+        codeChallenge?: string;
+        codeChallengeMethod?: 'plain' | 'S256';
+    }): Promise<string>;
+    exchangeCode(code: string, codeVerifier?: string): Promise<TokenResponse>;
+    refreshAccessToken(refreshToken: string): Promise<TokenResponse>;
+    revokeToken(token: string): Promise<void>;
+    introspectToken(token: string, options?: {
+        clientId?: string;
+        clientSecret?: string;
+    }): Promise<IntrospectResult>;
+    getUserInfo(accessToken: string): Promise<UserInfo>;
+}
+export { generateCodeVerifier, generateCodeChallenge };
+//# sourceMappingURL=oauth.d.ts.map

package/dist/oauth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.d.ts","sourceRoot":"","sources":["../src/oauth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,aAAa,EACb,QAAQ,EACR,gBAAgB,EAChB,WAAW,EACZ,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,QAAQ,CAAC;AAErE,wBAAgB,iBAAiB,CAC/B,aAAa,EAAE,MAAM,EACrB,MAAM,EAAE;IACN,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,mBAAmB,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;CACxC,GACA,MAAM,CAmBR;AAED,wBAAsB,YAAY,CAChC,aAAa,EAAE,MAAM,EACrB,MAAM,EAAE;IACN,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,GACA,OAAO,CAAC,aAAa,CAAC,CAwBxB;AAED,wBAAsB,kBAAkB,CACtC,aAAa,EAAE,MAAM,EACrB,MAAM,EAAE;IACN,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;CACtB,GACA,OAAO,CAAC,aAAa,CAAC,CAsBxB;AAED,wBAAsB,WAAW,CAC/B,aAAa,EAAE,MAAM,EACrB,MAAM,EAAE;IACN,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;CACtB,GACA,OAAO,CAAC,IAAI,CAAC,CAmBf;AAED,wBAAsB,eAAe,CACnC,aAAa,EAAE,MAAM,EACrB,MAAM,EAAE;IACN,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,GACA,OAAO,CAAC,gBAAgB,CAAC,CA4B3B;AAED,wBAAsB,WAAW,CAC/B,aAAa,EAAE,MAAM,EACrB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,QAAQ,CAAC,CAgBnB;AAED,qBAAa,WAAW;IACV,OAAO,CAAC,MAAM;gBAAN,MAAM,EAAE,WAAW;IAEjC,iBAAiB,CAAC,OAAO,CAAC,EAAE;QAChC,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,mBAAmB,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;KACxC,GAAG,OAAO,CAAC,MAAM,CAAC;IASb,YAAY,CAChB,IAAI,EAAE,MAAM,EACZ,YAAY,CAAC,EAAE,MAAM,GACpB,OAAO,CAAC,aAAa,CAAC;IAUnB,kBAAkB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IAQhE,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQzC,eAAe,CACnB,KAAK,EAAE,MAAM,EACb,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,GACrD,OAAO,CAAC,gBAAgB,CAAC;IAQtB,WAAW,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;CAG1D;AAED,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,CAAC"}

package/dist/oauth.js

@@ -0,0 +1,170 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.generateCodeChallenge = exports.generateCodeVerifier = exports.OAuthClient = void 0;
+exports.buildAuthorizeUrl = buildAuthorizeUrl;
+exports.exchangeCode = exchangeCode;
+exports.refreshAccessToken = refreshAccessToken;
+exports.revokeToken = revokeToken;
+exports.introspectToken = introspectToken;
+exports.getUserInfo = getUserInfo;
+const pkce_1 = require("./pkce");
+Object.defineProperty(exports, "generateCodeVerifier", { enumerable: true, get: function () { return pkce_1.generateCodeVerifier; } });
+Object.defineProperty(exports, "generateCodeChallenge", { enumerable: true, get: function () { return pkce_1.generateCodeChallenge; } });
+function buildAuthorizeUrl(authServerUrl, config) {
+    const oauthUrl = new URL(`${authServerUrl}/api/oauth/authorize`);
+    oauthUrl.searchParams.set('clientId', config.clientId);
+    oauthUrl.searchParams.set('redirectUri', config.redirectUri);
+    oauthUrl.searchParams.set('scopes', config.scopes.join(' '));
+    if (config.state) {
+        oauthUrl.searchParams.set('state', config.state);
+    }
+    if (config.codeChallenge) {
+        oauthUrl.searchParams.set('codeChallenge', config.codeChallenge);
+        oauthUrl.searchParams.set('codeChallengeMethod', config.codeChallengeMethod ?? 'S256');
+    }
+    const loginUrl = new URL(`${authServerUrl}/login`);
+    loginUrl.searchParams.set('redirect', oauthUrl.toString());
+    return loginUrl.toString();
+}
+async function exchangeCode(authServerUrl, config) {
+    const response = await fetch(`${authServerUrl}/oauth/token`, {
+        method: 'POST',
+        headers: {
+            'Content-Type': 'application/json',
+        },
+        body: JSON.stringify({
+            grant_type: 'authorization_code',
+            code: config.code,
+            clientId: config.clientId,
+            clientSecret: config.clientSecret,
+            redirectUri: config.redirectUri,
+            codeVerifier: config.codeVerifier,
+        }),
+    });
+    if (!response.ok) {
+        const error = (await response.json().catch(() => ({})));
+        throw new Error(error.message ?? 'Failed to exchange authorization code');
+    }
+    return (await response.json());
+}
+async function refreshAccessToken(authServerUrl, config) {
+    const response = await fetch(`${authServerUrl}/oauth/token`, {
+        method: 'POST',
+        headers: {
+            'Content-Type': 'application/json',
+        },
+        body: JSON.stringify({
+            grant_type: 'refresh_token',
+            refreshToken: config.refreshToken,
+            clientId: config.clientId,
+            clientSecret: config.clientSecret,
+        }),
+    });
+    if (!response.ok) {
+        const error = (await response.json().catch(() => ({})));
+        throw new Error(error.message ?? 'Failed to refresh access token');
+    }
+    return (await response.json());
+}
+async function revokeToken(authServerUrl, config) {
+    const response = await fetch(`${authServerUrl}/oauth/revoke`, {
+        method: 'POST',
+        headers: {
+            'Content-Type': 'application/json',
+        },
+        body: JSON.stringify({
+            token: config.token,
+            clientId: config.clientId,
+            clientSecret: config.clientSecret,
+        }),
+    });
+    if (!response.ok) {
+        const error = (await response.json().catch(() => ({})));
+        throw new Error(error.message ?? 'Failed to revoke token');
+    }
+}
+async function introspectToken(authServerUrl, config) {
+    const body = {
+        token: config.token,
+    };
+    if (config.clientId) {
+        body.clientId = config.clientId;
+    }
+    if (config.clientSecret) {
+        body.clientSecret = config.clientSecret;
+    }
+    const response = await fetch(`${authServerUrl}/oauth/token/introspect`, {
+        method: 'POST',
+        headers: {
+            'Content-Type': 'application/json',
+        },
+        body: JSON.stringify(body),
+    });
+    if (!response.ok) {
+        const error = (await response.json().catch(() => ({})));
+        throw new Error(error.message ?? 'Failed to introspect token');
+    }
+    return (await response.json());
+}
+async function getUserInfo(authServerUrl, accessToken) {
+    const response = await fetch(`${authServerUrl}/oauth/userinfo`, {
+        method: 'GET',
+        headers: {
+            Authorization: `Bearer ${accessToken}`,
+        },
+    });
+    if (!response.ok) {
+        const error = (await response.json().catch(() => ({})));
+        throw new Error(error.message ?? 'Failed to get user info');
+    }
+    return (await response.json());
+}
+class OAuthClient {
+    config;
+    constructor(config) {
+        this.config = config;
+    }
+    async buildAuthorizeUrl(options) {
+        return buildAuthorizeUrl(this.config.authServerUrl, {
+            clientId: this.config.clientId,
+            redirectUri: this.config.redirectUri,
+            scopes: this.config.scopes,
+            ...options,
+        });
+    }
+    async exchangeCode(code, codeVerifier) {
+        return exchangeCode(this.config.authServerUrl, {
+            code,
+            clientId: this.config.clientId,
+            clientSecret: this.config.clientSecret,
+            redirectUri: this.config.redirectUri,
+            codeVerifier,
+        });
+    }
+    async refreshAccessToken(refreshToken) {
+        return refreshAccessToken(this.config.authServerUrl, {
+            refreshToken,
+            clientId: this.config.clientId,
+            clientSecret: this.config.clientSecret,
+        });
+    }
+    async revokeToken(token) {
+        return revokeToken(this.config.authServerUrl, {
+            token,
+            clientId: this.config.clientId,
+            clientSecret: this.config.clientSecret,
+        });
+    }
+    async introspectToken(token, options) {
+        return introspectToken(this.config.authServerUrl, {
+            token,
+            clientId: options?.clientId ?? this.config.clientId,
+            clientSecret: options?.clientSecret ?? this.config.clientSecret,
+        });
+    }
+    async getUserInfo(accessToken) {
+        return getUserInfo(this.config.authServerUrl, accessToken);
+    }
+}
+exports.OAuthClient = OAuthClient;
+//# sourceMappingURL=oauth.js.map

package/dist/oauth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.js","sourceRoot":"","sources":["../src/oauth.ts"],"names":[],"mappings":";;;AAQA,8CA6BC;AAED,oCAiCC;AAED,gDA6BC;AAED,kCA0BC;AAED,0CAmCC;AAED,kCAmBC;AAvLD,iCAAqE;AAsP5D,qGAtPA,2BAAoB,OAsPA;AAAE,sGAtPA,4BAAqB,OAsPA;AApPpD,SAAgB,iBAAiB,CAC/B,aAAqB,EACrB,MAOC;IAED,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,GAAG,aAAa,sBAAsB,CAAC,CAAC;IACjE,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IACvD,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,aAAa,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;IAC7D,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7D,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;IACnD,CAAC;IACD,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;QACzB,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;QACjE,QAAQ,CAAC,YAAY,CAAC,GAAG,CACvB,qBAAqB,EACrB,MAAM,CAAC,mBAAmB,IAAI,MAAM,CACrC,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,GAAG,aAAa,QAAQ,CAAC,CAAC;IACnD,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC3D,OAAO,QAAQ,CAAC,QAAQ,EAAE,CAAC;AAC7B,CAAC;AAEM,KAAK,UAAU,YAAY,CAChC,aAAqB,EACrB,MAMC;IAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,aAAa,cAAc,EAAE;QAC3D,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;SACnC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,UAAU,EAAE,oBAAoB;YAChC,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,YAAY,EAAE,MAAM,CAAC,YAAY;SAClC,CAAC;KACH,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,KAAK,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAErD,CAAC;QACF,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,OAAO,IAAI,uCAAuC,CAAC,CAAC;IAC5E,CAAC;IAED,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAkB,CAAC;AAClD,CAAC;AAEM,KAAK,UAAU,kBAAkB,CACtC,aAAqB,EACrB,MAIC;IAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,aAAa,cAAc,EAAE;QAC3D,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;SACnC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,UAAU,EAAE,eAAe;YAC3B,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,YAAY,EAAE,MAAM,CAAC,YAAY;SAClC,CAAC;KACH,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,KAAK,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAErD,CAAC;QACF,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,OAAO,IAAI,gCAAgC,CAAC,CAAC;IACrE,CAAC;IAED,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAkB,CAAC;AAClD,CAAC;AAEM,KAAK,UAAU,WAAW,CAC/B,aAAqB,EACrB,MAIC;IAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,aAAa,eAAe,EAAE;QAC5D,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;SACnC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,YAAY,EAAE,MAAM,CAAC,YAAY;SAClC,CAAC;KACH,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,KAAK,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAErD,CAAC;QACF,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,OAAO,IAAI,wBAAwB,CAAC,CAAC;IAC7D,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,eAAe,CACnC,aAAqB,EACrB,MAIC;IAED,MAAM,IAAI,GAA2B;QACnC,KAAK,EAAE,MAAM,CAAC,KAAK;KACpB,CAAC;IAEF,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpB,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;IAClC,CAAC;IACD,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;QACxB,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;IAC1C,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,aAAa,yBAAyB,EAAE;QACtE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;SACnC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;KAC3B,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,KAAK,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAErD,CAAC;QACF,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,OAAO,IAAI,4BAA4B,CAAC,CAAC;IACjE,CAAC;IAED,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAqB,CAAC;AACrD,CAAC;AAEM,KAAK,UAAU,WAAW,CAC/B,aAAqB,EACrB,WAAmB;IAEnB,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,aAAa,iBAAiB,EAAE;QAC9D,MAAM,EAAE,KAAK;QACb,OAAO,EAAE;YACP,aAAa,EAAE,UAAU,WAAW,EAAE;SACvC;KACF,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,KAAK,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAErD,CAAC;QACF,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,OAAO,IAAI,yBAAyB,CAAC,CAAC;IAC9D,CAAC;IAED,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAa,CAAC;AAC7C,CAAC;AAED,MAAa,WAAW;IACF;IAApB,YAAoB,MAAmB;QAAnB,WAAM,GAAN,MAAM,CAAa;IAAG,CAAC;IAE3C,KAAK,CAAC,iBAAiB,CAAC,OAIvB;QACC,OAAO,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE;YAClD,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC9B,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW;YACpC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM;YAC1B,GAAG,OAAO;SACX,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,YAAY,CAChB,IAAY,EACZ,YAAqB;QAErB,OAAO,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE;YAC7C,IAAI;YACJ,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC9B,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;YACtC,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW;YACpC,YAAY;SACb,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,YAAoB;QAC3C,OAAO,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE;YACnD,YAAY;YACZ,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC9B,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;SACvC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,KAAa;QAC7B,OAAO,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE;YAC5C,KAAK;YACL,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC9B,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;SACvC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,eAAe,CACnB,KAAa,EACb,OAAsD;QAEtD,OAAO,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE;YAChD,KAAK;YACL,QAAQ,EAAE,OAAO,EAAE,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ;YACnD,YAAY,EAAE,OAAO,EAAE,YAAY,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY;SAChE,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,WAAmB;QACnC,OAAO,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;IAC7D,CAAC;CACF;AA3DD,kCA2DC"}

package/dist/pkce.d.ts

@@ -0,0 +1,3 @@
+export declare function generateCodeVerifier(): string;
+export declare function generateCodeChallenge(verifier: string, method?: 'plain' | 'S256'): Promise<string>;
+//# sourceMappingURL=pkce.d.ts.map

package/dist/pkce.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pkce.d.ts","sourceRoot":"","sources":["../src/pkce.ts"],"names":[],"mappings":"AAuBA,wBAAgB,oBAAoB,IAAI,MAAM,CAG7C;AAED,wBAAsB,qBAAqB,CACzC,QAAQ,EAAE,MAAM,EAChB,MAAM,GAAE,OAAO,GAAG,MAAe,GAChC,OAAO,CAAC,MAAM,CAAC,CAMjB"}

package/dist/pkce.js

@@ -0,0 +1,36 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.generateCodeVerifier = generateCodeVerifier;
+exports.generateCodeChallenge = generateCodeChallenge;
+function generateRandomBytes(length) {
+    if (typeof crypto !== 'undefined') {
+        return crypto.getRandomValues(new Uint8Array(length));
+    }
+    throw new Error('crypto.getRandomValues is not available');
+}
+function base64UrlEncode(buffer) {
+    const base64 = btoa(String.fromCharCode(...buffer));
+    return base64.replace(/\+/g, '-').replace(/\//g, '_').replace(/=/g, '');
+}
+function sha256(data) {
+    if (typeof crypto !== 'undefined') {
+        const encoder = new TextEncoder();
+        const dataBuffer = encoder.encode(data);
+        return crypto.subtle.digest('SHA-256', dataBuffer).then((hashBuffer) => {
+            return new Uint8Array(hashBuffer);
+        });
+    }
+    throw new Error('crypto.subtle is not available');
+}
+function generateCodeVerifier() {
+    const randomBytes = generateRandomBytes(32);
+    return base64UrlEncode(randomBytes);
+}
+async function generateCodeChallenge(verifier, method = 'S256') {
+    if (method === 'plain') {
+        return verifier;
+    }
+    const hash = await sha256(verifier);
+    return base64UrlEncode(hash);
+}
+//# sourceMappingURL=pkce.js.map

package/dist/pkce.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pkce.js","sourceRoot":"","sources":["../src/pkce.ts"],"names":[],"mappings":";;AAuBA,oDAGC;AAED,sDASC;AArCD,SAAS,mBAAmB,CAAC,MAAc;IACzC,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;QAClC,OAAO,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;IACxD,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,eAAe,CAAC,MAAkB;IACzC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC;IACpD,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;AAC1E,CAAC;AAED,SAAS,MAAM,CAAC,IAAY;IAC1B,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;QAClC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;QAClC,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACxC,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE;YACrE,OAAO,IAAI,UAAU,CAAC,UAAU,CAAC,CAAC;QACpC,CAAC,CAAC,CAAC;IACL,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;AACpD,CAAC;AAED,SAAgB,oBAAoB;IAClC,MAAM,WAAW,GAAG,mBAAmB,CAAC,EAAE,CAAC,CAAC;IAC5C,OAAO,eAAe,CAAC,WAAW,CAAC,CAAC;AACtC,CAAC;AAEM,KAAK,UAAU,qBAAqB,CACzC,QAAgB,EAChB,SAA2B,MAAM;IAEjC,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;QACvB,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;IACpC,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC;AAC/B,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,35 @@
+export interface TokenResponse {
+    accessToken: string;
+    refreshToken: string;
+    tokenType: string;
+    expiresIn: number;
+    scope: string;
+}
+export interface UserInfo {
+    sub: string;
+    email: string;
+    email_verified: boolean;
+    given_name: string | null;
+    family_name: string | null;
+    name: string | null;
+    picture: string | null;
+    updated_at: number;
+}
+export interface IntrospectResult {
+    active: boolean;
+    clientId?: string;
+    username?: string;
+    scope?: string;
+    sub?: string;
+    exp?: number;
+    iat?: number;
+    tokenType?: string;
+}
+export interface OAuthConfig {
+    authServerUrl: string;
+    clientId: string;
+    clientSecret: string;
+    redirectUri: string;
+    scopes: string[];
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,aAAa;IAC5B,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,QAAQ;IACvB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,OAAO,CAAC;IACxB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,OAAO,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,WAAW;IAC1B,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB"}

package/dist/types.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":""}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tekcify/auth-core-client",
-  "version": "1.0.0",
+  "version": "1.0.2",
   "description": "Core OAuth 2.0 client utilities for Tekcify Auth",
   "author": "Tekcify",
   "main": "./dist/index.js",
@@ -13,6 +13,10 @@
     "url": "https://github.com/tekcify/auth/issues"
   },
   "homepage": "https://github.com/tekcify/auth#readme",
+  "files": [
+    "dist",
+    "README.md"
+  ],
   "exports": {
     ".": {
       "types": "./dist/index.d.ts",
@@ -21,7 +25,7 @@
     }
   },
   "scripts": {
-    "build": "tsc",
+    "build": "tsc -p tsconfig.build.json",
     "clean": "rm -rf dist",
     "lint": "eslint \"src/**/*.ts\" --max-warnings=0",
     "test": "vitest run",
@@ -35,8 +39,7 @@
   ],
   "license": "MIT",
   "devDependencies": {
-    "typescript": "^5.7.3",
+    "typescript": "^5.9.3",
     "vitest": "^4.0.15"
   }
 }
-

package/src/__tests__/pkce.test.ts

@@ -1,31 +0,0 @@
-import { describe, it, expect } from 'vitest';
-import { generateCodeVerifier, generateCodeChallenge } from '../pkce';
-
-describe('PKCE', () => {
-  it('should generate a code verifier', () => {
-    const verifier = generateCodeVerifier();
-    expect(verifier).toBeDefined();
-    expect(verifier.length).toBeGreaterThanOrEqual(43);
-    expect(verifier.length).toBeLessThanOrEqual(128);
-  });
-
-  it('should generate different verifiers each time', () => {
-    const verifier1 = generateCodeVerifier();
-    const verifier2 = generateCodeVerifier();
-    expect(verifier1).not.toBe(verifier2);
-  });
-
-  it('should generate a code challenge from verifier (S256)', async () => {
-    const verifier = generateCodeVerifier();
-    const challenge = await generateCodeChallenge(verifier, 'S256');
-    expect(challenge).toBeDefined();
-    expect(challenge).not.toBe(verifier);
-    expect(challenge.length).toBeGreaterThan(0);
-  });
-
-  it('should generate a plain code challenge', async () => {
-    const verifier = generateCodeVerifier();
-    const challenge = await generateCodeChallenge(verifier, 'plain');
-    expect(challenge).toBe(verifier);
-  });
-});