@tekcify/auth-core-client 1.0.0 → 1.0.2

package/src/oauth.ts

@@ -1,250 +0,0 @@
-import type {
-  TokenResponse,
-  UserInfo,
-  IntrospectResult,
-  OAuthConfig,
-} from './types';
-import { generateCodeVerifier, generateCodeChallenge } from './pkce';
-
-export function buildAuthorizeUrl(
-  authServerUrl: string,
-  config: {
-    clientId: string;
-    redirectUri: string;
-    scopes: string[];
-    state?: string;
-    codeChallenge?: string;
-    codeChallengeMethod?: 'plain' | 'S256';
-  },
-): string {
-  const url = new URL(`${authServerUrl}/oauth/authorize`);
-  url.searchParams.set('clientId', config.clientId);
-  url.searchParams.set('redirectUri', config.redirectUri);
-  url.searchParams.set('scopes', config.scopes.join(' '));
-  if (config.state) {
-    url.searchParams.set('state', config.state);
-  }
-  if (config.codeChallenge) {
-    url.searchParams.set('codeChallenge', config.codeChallenge);
-    url.searchParams.set(
-      'codeChallengeMethod',
-      config.codeChallengeMethod ?? 'S256',
-    );
-  }
-  return url.toString();
-}
-
-export async function exchangeCode(
-  authServerUrl: string,
-  config: {
-    code: string;
-    clientId: string;
-    clientSecret: string;
-    redirectUri: string;
-    codeVerifier?: string;
-  },
-): Promise<TokenResponse> {
-  const response = await fetch(`${authServerUrl}/oauth/token`, {
-    method: 'POST',
-    headers: {
-      'Content-Type': 'application/json',
-    },
-    body: JSON.stringify({
-      grant_type: 'authorization_code',
-      code: config.code,
-      clientId: config.clientId,
-      clientSecret: config.clientSecret,
-      redirectUri: config.redirectUri,
-      codeVerifier: config.codeVerifier,
-    }),
-  });
-
-  if (!response.ok) {
-    const error = (await response.json().catch(() => ({}))) as {
-      message?: string;
-    };
-    throw new Error(error.message ?? 'Failed to exchange authorization code');
-  }
-
-  return (await response.json()) as TokenResponse;
-}
-
-export async function refreshAccessToken(
-  authServerUrl: string,
-  config: {
-    refreshToken: string;
-    clientId: string;
-    clientSecret: string;
-  },
-): Promise<TokenResponse> {
-  const response = await fetch(`${authServerUrl}/oauth/token`, {
-    method: 'POST',
-    headers: {
-      'Content-Type': 'application/json',
-    },
-    body: JSON.stringify({
-      grant_type: 'refresh_token',
-      refreshToken: config.refreshToken,
-      clientId: config.clientId,
-      clientSecret: config.clientSecret,
-    }),
-  });
-
-  if (!response.ok) {
-    const error = (await response.json().catch(() => ({}))) as {
-      message?: string;
-    };
-    throw new Error(error.message ?? 'Failed to refresh access token');
-  }
-
-  return (await response.json()) as TokenResponse;
-}
-
-export async function revokeToken(
-  authServerUrl: string,
-  config: {
-    token: string;
-    clientId: string;
-    clientSecret: string;
-  },
-): Promise<void> {
-  const response = await fetch(`${authServerUrl}/oauth/revoke`, {
-    method: 'POST',
-    headers: {
-      'Content-Type': 'application/json',
-    },
-    body: JSON.stringify({
-      token: config.token,
-      clientId: config.clientId,
-      clientSecret: config.clientSecret,
-    }),
-  });
-
-  if (!response.ok) {
-    const error = (await response.json().catch(() => ({}))) as {
-      message?: string;
-    };
-    throw new Error(error.message ?? 'Failed to revoke token');
-  }
-}
-
-export async function introspectToken(
-  authServerUrl: string,
-  config: {
-    token: string;
-    clientId?: string;
-    clientSecret?: string;
-  },
-): Promise<IntrospectResult> {
-  const body: Record<string, string> = {
-    token: config.token,
-  };
-
-  if (config.clientId) {
-    body.clientId = config.clientId;
-  }
-  if (config.clientSecret) {
-    body.clientSecret = config.clientSecret;
-  }
-
-  const response = await fetch(`${authServerUrl}/oauth/token/introspect`, {
-    method: 'POST',
-    headers: {
-      'Content-Type': 'application/json',
-    },
-    body: JSON.stringify(body),
-  });
-
-  if (!response.ok) {
-    const error = (await response.json().catch(() => ({}))) as {
-      message?: string;
-    };
-    throw new Error(error.message ?? 'Failed to introspect token');
-  }
-
-  return (await response.json()) as IntrospectResult;
-}
-
-export async function getUserInfo(
-  authServerUrl: string,
-  accessToken: string,
-): Promise<UserInfo> {
-  const response = await fetch(`${authServerUrl}/oauth/userinfo`, {
-    method: 'GET',
-    headers: {
-      Authorization: `Bearer ${accessToken}`,
-    },
-  });
-
-  if (!response.ok) {
-    const error = (await response.json().catch(() => ({}))) as {
-      message?: string;
-    };
-    throw new Error(error.message ?? 'Failed to get user info');
-  }
-
-  return (await response.json()) as UserInfo;
-}
-
-export class OAuthClient {
-  constructor(private config: OAuthConfig) {}
-
-  async buildAuthorizeUrl(options?: {
-    state?: string;
-    codeChallenge?: string;
-    codeChallengeMethod?: 'plain' | 'S256';
-  }): Promise<string> {
-    return buildAuthorizeUrl(this.config.authServerUrl, {
-      clientId: this.config.clientId,
-      redirectUri: this.config.redirectUri,
-      scopes: this.config.scopes,
-      ...options,
-    });
-  }
-
-  async exchangeCode(
-    code: string,
-    codeVerifier?: string,
-  ): Promise<TokenResponse> {
-    return exchangeCode(this.config.authServerUrl, {
-      code,
-      clientId: this.config.clientId,
-      clientSecret: this.config.clientSecret,
-      redirectUri: this.config.redirectUri,
-      codeVerifier,
-    });
-  }
-
-  async refreshAccessToken(refreshToken: string): Promise<TokenResponse> {
-    return refreshAccessToken(this.config.authServerUrl, {
-      refreshToken,
-      clientId: this.config.clientId,
-      clientSecret: this.config.clientSecret,
-    });
-  }
-
-  async revokeToken(token: string): Promise<void> {
-    return revokeToken(this.config.authServerUrl, {
-      token,
-      clientId: this.config.clientId,
-      clientSecret: this.config.clientSecret,
-    });
-  }
-
-  async introspectToken(
-    token: string,
-    options?: { clientId?: string; clientSecret?: string },
-  ): Promise<IntrospectResult> {
-    return introspectToken(this.config.authServerUrl, {
-      token,
-      clientId: options?.clientId ?? this.config.clientId,
-      clientSecret: options?.clientSecret ?? this.config.clientSecret,
-    });
-  }
-
-  async getUserInfo(accessToken: string): Promise<UserInfo> {
-    return getUserInfo(this.config.authServerUrl, accessToken);
-  }
-}
-
-export { generateCodeVerifier, generateCodeChallenge };

package/src/pkce.ts

@@ -1,38 +0,0 @@
-function generateRandomBytes(length: number): Uint8Array {
-  if (typeof crypto !== 'undefined') {
-    return crypto.getRandomValues(new Uint8Array(length));
-  }
-  throw new Error('crypto.getRandomValues is not available');
-}
-
-function base64UrlEncode(buffer: Uint8Array): string {
-  const base64 = btoa(String.fromCharCode(...buffer));
-  return base64.replace(/\+/g, '-').replace(/\//g, '_').replace(/=/g, '');
-}
-
-function sha256(data: string): Promise<Uint8Array> {
-  if (typeof crypto !== 'undefined') {
-    const encoder = new TextEncoder();
-    const dataBuffer = encoder.encode(data);
-    return crypto.subtle.digest('SHA-256', dataBuffer).then((hashBuffer) => {
-      return new Uint8Array(hashBuffer);
-    });
-  }
-  throw new Error('crypto.subtle is not available');
-}
-
-export function generateCodeVerifier(): string {
-  const randomBytes = generateRandomBytes(32);
-  return base64UrlEncode(randomBytes);
-}
-
-export async function generateCodeChallenge(
-  verifier: string,
-  method: 'plain' | 'S256' = 'S256',
-): Promise<string> {
-  if (method === 'plain') {
-    return verifier;
-  }
-  const hash = await sha256(verifier);
-  return base64UrlEncode(hash);
-}

package/src/types.ts

@@ -1,37 +0,0 @@
-export interface TokenResponse {
-  accessToken: string;
-  refreshToken: string;
-  tokenType: string;
-  expiresIn: number;
-  scope: string;
-}
-
-export interface UserInfo {
-  sub: string;
-  email: string;
-  email_verified: boolean;
-  given_name: string | null;
-  family_name: string | null;
-  name: string | null;
-  picture: string | null;
-  updated_at: number;
-}
-
-export interface IntrospectResult {
-  active: boolean;
-  clientId?: string;
-  username?: string;
-  scope?: string;
-  sub?: string;
-  exp?: number;
-  iat?: number;
-  tokenType?: string;
-}
-
-export interface OAuthConfig {
-  authServerUrl: string;
-  clientId: string;
-  clientSecret: string;
-  redirectUri: string;
-  scopes: string[];
-}

package/tsconfig.json

@@ -1,11 +0,0 @@
-{
-  "extends": "../../tsconfig.base.json",
-  "compilerOptions": {
-    "outDir": "./dist",
-    "rootDir": "./src",
-    "declaration": true,
-    "declarationMap": true
-  },
-  "include": ["src/**/*"]
-}
-