@tern-secure/auth 1.1.0-canary.v20251108045933 → 1.1.0-canary.v20251125170702

package/dist/cjs/utils/construct.js

@@ -1,253 +0,0 @@
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var construct_exports = {};
-__export(construct_exports, {
-  buildURL: () => buildURL,
-  constructFullUrl: () => constructFullUrl,
-  getPreviousPath: () => getPreviousPath,
-  getValidRedirectUrl: () => getValidRedirectUrl,
-  hasBannedProtocol: () => hasBannedProtocol,
-  hasRedirectLoop: () => hasRedirectLoop,
-  isAllowedRedirect: () => isAllowedRedirect,
-  isProblematicUrl: () => isProblematicUrl,
-  isValidUrl: () => isValidUrl,
-  relativeToAbsoluteUrl: () => relativeToAbsoluteUrl,
-  storePreviousPath: () => storePreviousPath,
-  stripOrigin: () => stripOrigin,
-  toURL: () => toURL,
-  trimTrailingSlash: () => trimTrailingSlash,
-  urlWithRedirect: () => urlWithRedirect
-});
-module.exports = __toCommonJS(construct_exports);
-var import_caseUtils = require("@tern-secure/shared/caseUtils");
-var import_globs = require("@tern-secure/shared/globs");
-var import_logger = require("@tern-secure/shared/logger");
-var import_path = require("./path");
-var import_querystring = require("./querystring");
-const DUMMY_URL_BASE = "http://ternsecure-dummy";
-const BANNED_URI_PROTOCOLS = ["javascript:"];
-function buildURL(params, options = {}) {
-  const { base, hashPath, hashSearch, searchParams, hashSearchParams, ...rest } = params;
-  let baseFallback = "";
-  if (typeof window !== "undefined" && !!window.location) {
-    baseFallback = window.location.href;
-  } else {
-    baseFallback = "http://react-native-fake-base-url";
-  }
-  const url = new URL(base || "", baseFallback);
-  if (searchParams instanceof URLSearchParams) {
-    searchParams.forEach((value, key) => {
-      if (value !== null && value !== void 0) {
-        url.searchParams.set((0, import_caseUtils.camelToSnake)(key), value);
-      }
-    });
-  }
-  Object.assign(url, rest);
-  if (hashPath || hashSearch || hashSearchParams) {
-    const dummyUrlForHash = new URL(DUMMY_URL_BASE + url.hash.substring(1));
-    dummyUrlForHash.pathname = (0, import_path.joinPaths)(dummyUrlForHash.pathname, hashPath || "");
-    const searchParamsFromHashSearchString = (0, import_querystring.getQueryParams)(hashSearch || "");
-    for (const [key, val] of Object.entries(searchParamsFromHashSearchString)) {
-      dummyUrlForHash.searchParams.append(key, val);
-    }
-    if (hashSearchParams) {
-      const paramsArr = Array.isArray(hashSearchParams) ? hashSearchParams : [hashSearchParams];
-      for (const _params of paramsArr) {
-        if (!(_params instanceof URLSearchParams) && typeof _params !== "object") {
-          continue;
-        }
-        const params2 = new URLSearchParams(_params);
-        params2.forEach((value, key) => {
-          if (value !== null && value !== void 0) {
-            dummyUrlForHash.searchParams.set((0, import_caseUtils.camelToSnake)(key), value);
-          }
-        });
-      }
-    }
-    const newHash = dummyUrlForHash.href.replace(DUMMY_URL_BASE, "");
-    if (newHash !== "/") {
-      url.hash = newHash;
-    }
-  }
-  const { stringify, skipOrigin } = options;
-  if (stringify) {
-    return skipOrigin ? url.href.replace(url.origin, "") : url.href;
-  }
-  return url;
-}
-const constructFullUrl = (path) => {
-  if (typeof window === "undefined") return path;
-  const baseUrl = window.location.origin;
-  if (path.startsWith("http")) {
-    return path;
-  }
-  return `${baseUrl}${path.startsWith("/") ? path : `/${path}`}`;
-};
-const hasRedirectLoop = (currentPath, redirectPath) => {
-  if (!currentPath || !redirectPath) return false;
-  const cleanCurrentPath = currentPath.split("?")[0];
-  const cleanRedirectPath = redirectPath.split("?")[0];
-  return cleanCurrentPath === cleanRedirectPath;
-};
-const urlWithRedirect = (options) => {
-  const {
-    signInUrl,
-    signInPathParam = "/sign-in",
-    currentPath,
-    signUpUrl,
-    signUpPathParam = "/sign-up"
-  } = options;
-  const baseUrl = window.location.origin;
-  if (typeof window === "undefined") {
-    return signInUrl;
-  }
-  const url = new URL(signInUrl, baseUrl);
-  if (!currentPath.includes(signInPathParam) && !currentPath.includes(signUpPathParam)) {
-    url.searchParams.set("redirect", currentPath);
-  }
-  return url.toString();
-};
-const storePreviousPath = (path) => {
-  if (typeof window !== "undefined") {
-    sessionStorage.setItem("previousPath", path);
-  }
-};
-const getPreviousPath = () => {
-  if (typeof window !== "undefined") {
-    return sessionStorage.getItem("previousPath");
-  }
-  return null;
-};
-const getValidRedirectUrl = (searchParams, configuredRedirect) => {
-  const urlRedirect = searchParams.get("redirect");
-  if (urlRedirect) {
-    return validateUrl(urlRedirect);
-  }
-  if (configuredRedirect) {
-    return validateUrl(configuredRedirect);
-  }
-  return "/";
-};
-const validateUrl = (url) => {
-  try {
-    if (url.startsWith("http")) {
-      const urlObj = new URL(url);
-      if (typeof window !== "undefined" && urlObj.origin !== window.location.origin) {
-        return "/";
-      }
-    }
-    return "/";
-  } catch {
-    return "/";
-  }
-};
-function toURL(url) {
-  return new URL(url.toString(), window.location.origin);
-}
-function stripOrigin(url) {
-  url = toURL(url);
-  return url.href.replace(url.origin, "");
-}
-const trimTrailingSlash = (path) => {
-  return (path || "").replace(/\/+$/, "");
-};
-function isValidUrl(val) {
-  if (!val) {
-    return false;
-  }
-  try {
-    new URL(val);
-    return true;
-  } catch {
-    return false;
-  }
-}
-function relativeToAbsoluteUrl(url, origin) {
-  try {
-    return new URL(url);
-  } catch {
-    return new URL(url, origin);
-  }
-}
-const disallowedPatterns = [
-  /\0/,
-  // Null bytes
-  /^\/\//,
-  // Protocol-relative
-  // eslint-disable-next-line no-control-regex
-  /[\x00-\x1F]/
-  // Control characters
-];
-function isProblematicUrl(url) {
-  if (hasBannedProtocol(url)) {
-    return true;
-  }
-  for (const pattern of disallowedPatterns) {
-    if (pattern.test(url.pathname)) {
-      return true;
-    }
-  }
-  return false;
-}
-function hasBannedProtocol(val) {
-  if (!isValidUrl(val)) {
-    return false;
-  }
-  const protocol = new URL(val).protocol;
-  return BANNED_URI_PROTOCOLS.some((bp) => bp === protocol);
-}
-const isAllowedRedirect = (allowedRedirectOrigins, currentOrigin) => (_url) => {
-  if (!currentOrigin) return true;
-  let url = _url;
-  if (typeof url === "string") {
-    url = relativeToAbsoluteUrl(url, currentOrigin);
-  }
-  if (!allowedRedirectOrigins) {
-    return true;
-  }
-  const isSameOrigin = currentOrigin === url.origin;
-  const isAllowed = !isProblematicUrl(url) && (isSameOrigin || allowedRedirectOrigins.map(
-    (origin) => typeof origin === "string" ? import_globs.globs.toRegexp(trimTrailingSlash(origin)) : origin
-  ).some((origin) => origin.test(trimTrailingSlash(url.origin))));
-  if (!isAllowed) {
-    import_logger.logger.warnOnce(
-      `Clerk: Redirect URL ${url} is not on one of the allowedRedirectOrigins, falling back to the default redirect URL.`
-    );
-  }
-  return isAllowed;
-};
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  buildURL,
-  constructFullUrl,
-  getPreviousPath,
-  getValidRedirectUrl,
-  hasBannedProtocol,
-  hasRedirectLoop,
-  isAllowedRedirect,
-  isProblematicUrl,
-  isValidUrl,
-  relativeToAbsoluteUrl,
-  storePreviousPath,
-  stripOrigin,
-  toURL,
-  trimTrailingSlash,
-  urlWithRedirect
-});
-//# sourceMappingURL=construct.js.map

package/dist/cjs/utils/construct.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../../src/utils/construct.ts"],"sourcesContent":["import { camelToSnake } from '@tern-secure/shared/caseUtils';\nimport { globs } from '@tern-secure/shared/globs';\nimport { logger } from '@tern-secure/shared/logger';\n\nimport { joinPaths } from './path';\nimport { getQueryParams } from './querystring';\n\nconst DUMMY_URL_BASE = 'http://ternsecure-dummy';\n\nconst BANNED_URI_PROTOCOLS = ['javascript:'] as const;\n\nexport type constructUrlWithRedirectProps = {\n  signInUrl: string;\n  signInPathParam?: string;\n  currentPath: string;\n  signUpUrl?: string;\n  signUpPathParam?: string;\n};\n\ninterface BuildURLParams extends Partial<URL> {\n  base?: string;\n  hashPath?: string;\n  hashSearch?: string;\n  hashSearchParams?:\n    | URLSearchParams\n    | Record<string, string>\n    | Array<URLSearchParams | Record<string, string>>;\n}\n\ninterface BuildURLOptions<T> {\n  skipOrigin?: boolean;\n  stringify?: T;\n}\n\n/**\n *\n * buildURL(params: URLParams, options: BuildURLOptions): string\n *\n * Builds a URL safely by using the native URL() constructor. It can\n * also build a secondary path and search URL that lives inside the hash\n * of the main URL. For example:\n *\n * https://foo.com/bar?qux=42#/hash-bar?hash-qux=42\n *\n * References:\n * https://developer.mozilla.org/en-US/docs/Web/API/URL\n *\n * @param {BuildURLParams} params\n * @param {BuildURLOptions} options\n * @returns {URL | string} Returns the URL href\n */\nexport function buildURL<B extends boolean>(\n  params: BuildURLParams,\n  options?: BuildURLOptions<B>,\n): B extends true ? string : URL;\n\nexport function buildURL(\n  params: BuildURLParams,\n  options: BuildURLOptions<boolean> = {},\n): URL | string {\n  const { base, hashPath, hashSearch, searchParams, hashSearchParams, ...rest } = params;\n\n  let baseFallback = '';\n  if (typeof window !== 'undefined' && !!window.location) {\n    baseFallback = window.location.href;\n  } else {\n    baseFallback = 'http://react-native-fake-base-url';\n  }\n\n  const url = new URL(base || '', baseFallback);\n\n  // Handle search parameters\n  // params.searchParams comes from Partial<URL>, so it's URLSearchParams | undefined\n  if (searchParams instanceof URLSearchParams) {\n    searchParams.forEach((value, key) => {\n      if (value !== null && value !== undefined) {\n        url.searchParams.set(camelToSnake(key), value);\n      }\n    });\n  }\n\n  Object.assign(url, rest);\n\n  // Handle hash-related parameters\n  if (hashPath || hashSearch || hashSearchParams) {\n    const dummyUrlForHash = new URL(DUMMY_URL_BASE + url.hash.substring(1));\n\n    dummyUrlForHash.pathname = joinPaths(dummyUrlForHash.pathname, hashPath || '');\n\n    const searchParamsFromHashSearchString = getQueryParams(hashSearch || '');\n\n    for (const [key, val] of Object.entries(searchParamsFromHashSearchString)) {\n      dummyUrlForHash.searchParams.append(key, val);\n    }\n\n    if (hashSearchParams) {\n      const paramsArr = Array.isArray(hashSearchParams) ? hashSearchParams : [hashSearchParams];\n      for (const _params of paramsArr) {\n        if (!(_params instanceof URLSearchParams) && typeof _params !== 'object') {\n          continue;\n        }\n        const params = new URLSearchParams(_params);\n        params.forEach((value, key) => {\n          if (value !== null && value !== undefined) {\n            dummyUrlForHash.searchParams.set(camelToSnake(key), value);\n          }\n        });\n      }\n    }\n\n    const newHash = dummyUrlForHash.href.replace(DUMMY_URL_BASE, '');\n    if (newHash !== '/') {\n      // Assign them to the hash of the main url\n      url.hash = newHash;\n    }\n  }\n\n  const { stringify, skipOrigin } = options;\n  if (stringify) {\n    return skipOrigin ? url.href.replace(url.origin, '') : url.href;\n  }\n  return url;\n}\n\n/**\n * Constructs a full URL with the current origin\n * @param path - The path to construct the URL for\n * @returns The full URL with origin\n */\nexport const constructFullUrl = (path: string) => {\n  if (typeof window === 'undefined') return path;\n  const baseUrl = window.location.origin;\n  if (path.startsWith('http')) {\n    return path;\n  }\n  return `${baseUrl}${path.startsWith('/') ? path : `/${path}`}`;\n};\n\n/**\n * Checks if the current URL has a redirect loop\n * @param currentPath - The current pathname\n * @param redirectPath - The path we're trying to redirect to\n * @returns boolean indicating if there's a redirect loop\n */\nexport const hasRedirectLoop = (currentPath: string, redirectPath: string): boolean => {\n  if (!currentPath || !redirectPath) return false;\n\n  // Remove any query parameters for comparison\n  const cleanCurrentPath = currentPath.split('?')[0];\n  const cleanRedirectPath = redirectPath.split('?')[0];\n\n  return cleanCurrentPath === cleanRedirectPath;\n};\n\nexport const urlWithRedirect = (options: constructUrlWithRedirectProps): string => {\n  const {\n    signInUrl,\n    signInPathParam = '/sign-in',\n    currentPath,\n    signUpUrl,\n    signUpPathParam = '/sign-up',\n  } = options;\n\n  const baseUrl = window.location.origin;\n\n  if (typeof window === 'undefined') {\n    return signInUrl;\n  }\n\n  const url = new URL(signInUrl, baseUrl);\n\n  if (!currentPath.includes(signInPathParam) && !currentPath.includes(signUpPathParam)) {\n    url.searchParams.set('redirect', currentPath);\n  }\n\n  return url.toString();\n};\n\n/**\n * Stores the current path before signing out\n */\nexport const storePreviousPath = (path: string): void => {\n  if (typeof window !== 'undefined') {\n    sessionStorage.setItem('previousPath', path);\n  }\n};\n\n/**\n * Gets the stored previous path\n */\nexport const getPreviousPath = (): string | null => {\n  if (typeof window !== 'undefined') {\n    return sessionStorage.getItem('previousPath');\n  }\n  return null;\n};\n\n/**\n * Gets a validated redirect URL ensuring it's from the same origin\n * @param redirectUrl - The URL to validate\n * @param searchParams - The search parameters to check for redirect\n * @returns A validated redirect URL\n */\nexport const getValidRedirectUrl = (\n  searchParams: URLSearchParams,\n  configuredRedirect?: string,\n): string => {\n  // Check URL search param first (highest priority)\n  const urlRedirect = searchParams.get('redirect');\n  if (urlRedirect) {\n    return validateUrl(urlRedirect);\n  }\n\n  // Then check configured redirect (for first visits)\n  if (configuredRedirect) {\n    return validateUrl(configuredRedirect);\n  }\n\n  // Default fallback\n  return '/';\n};\n\n/**\n * Validates and sanitizes URLs\n */\nconst validateUrl = (url: string): string => {\n  try {\n    // For absolute URLs\n    if (url.startsWith('http')) {\n      const urlObj = new URL(url);\n      if (typeof window !== 'undefined' && urlObj.origin !== window.location.origin) {\n        return '/';\n      }\n    }\n\n    // For relative URLs\n    return '/';\n  } catch {\n    return '/';\n  }\n};\n\nexport function toURL(url: string | URL): URL {\n  return new URL(url.toString(), window.location.origin);\n}\n\n/**\n *\n * stripOrigin(url: URL | string): string\n *\n * Strips the origin part of a URL and preserves path, search and hash is applicable\n *\n * References:\n * https://developer.mozilla.org/en-US/docs/Web/API/URL\n *\n * @param {URL | string} url\n * @returns {string} Returns the URL href without the origin\n */\nexport function stripOrigin(url: URL | string): string {\n  url = toURL(url);\n  return url.href.replace(url.origin, '');\n}\n\n/**\n * trimTrailingSlash(path: string): string\n *\n * Strips the trailing slashes from a string\n *\n * @returns {string} Returns the string without trailing slashes\n * @param path\n */\nexport const trimTrailingSlash = (path: string): string => {\n  return (path || '').replace(/\\/+$/, '');\n};\n\nexport function isValidUrl(val: unknown): val is string {\n  if (!val) {\n    return false;\n  }\n\n  try {\n    new URL(val as string);\n    return true;\n  } catch {\n    return false;\n  }\n}\n\nexport function relativeToAbsoluteUrl(url: string, origin: string | URL): URL {\n  try {\n    return new URL(url);\n  } catch {\n    return new URL(url, origin);\n  }\n}\n\n// Regular expression to detect disallowed patterns\nconst disallowedPatterns = [\n  /\\0/, // Null bytes\n  /^\\/\\//, // Protocol-relative\n  // eslint-disable-next-line no-control-regex\n  /[\\x00-\\x1F]/, // Control characters\n];\n\n/**\n * Check for potentially problematic URLs that could have been crafted to intentionally bypass the origin check. Note that the URLs passed to this\n * function are assumed to be from an \"allowed origin\", so we are not executing origin-specific checks here.\n */\nexport function isProblematicUrl(url: URL): boolean {\n  if (hasBannedProtocol(url)) {\n    return true;\n  }\n  // Check against disallowed patterns\n  for (const pattern of disallowedPatterns) {\n    if (pattern.test(url.pathname)) {\n      return true;\n    }\n  }\n\n  return false;\n}\n\nexport function hasBannedProtocol(val: string | URL) {\n  if (!isValidUrl(val)) {\n    return false;\n  }\n  const protocol = new URL(val).protocol;\n  return BANNED_URI_PROTOCOLS.some(bp => bp === protocol);\n}\n\nexport const isAllowedRedirect =\n  (allowedRedirectOrigins: Array<string | RegExp> | undefined, currentOrigin: string) =>\n  (_url: URL | string) => {\n    // On server-side (no origin), allow all redirects\n    // They will be validated on client-side\n    if (!currentOrigin) return true;\n\n    let url = _url;\n    if (typeof url === 'string') {\n      url = relativeToAbsoluteUrl(url, currentOrigin);\n    }\n\n    if (!allowedRedirectOrigins) {\n      return true;\n    }\n\n    const isSameOrigin = currentOrigin === url.origin;\n\n    const isAllowed =\n      !isProblematicUrl(url) &&\n      (isSameOrigin ||\n        allowedRedirectOrigins\n          .map(origin =>\n            typeof origin === 'string' ? globs.toRegexp(trimTrailingSlash(origin)) : origin,\n          )\n          .some(origin => origin.test(trimTrailingSlash(url.origin))));\n\n    if (!isAllowed) {\n      logger.warnOnce(\n        `Clerk: Redirect URL ${url} is not on one of the allowedRedirectOrigins, falling back to the default redirect URL.`,\n      );\n    }\n    return isAllowed;\n  };\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,uBAA6B;AAC7B,mBAAsB;AACtB,oBAAuB;AAEvB,kBAA0B;AAC1B,yBAA+B;AAE/B,MAAM,iBAAiB;AAEvB,MAAM,uBAAuB,CAAC,aAAa;AA+CpC,SAAS,SACd,QACA,UAAoC,CAAC,GACvB;AACd,QAAM,EAAE,MAAM,UAAU,YAAY,cAAc,kBAAkB,GAAG,KAAK,IAAI;AAEhF,MAAI,eAAe;AACnB,MAAI,OAAO,WAAW,eAAe,CAAC,CAAC,OAAO,UAAU;AACtD,mBAAe,OAAO,SAAS;AAAA,EACjC,OAAO;AACL,mBAAe;AAAA,EACjB;AAEA,QAAM,MAAM,IAAI,IAAI,QAAQ,IAAI,YAAY;AAI5C,MAAI,wBAAwB,iBAAiB;AAC3C,iBAAa,QAAQ,CAAC,OAAO,QAAQ;AACnC,UAAI,UAAU,QAAQ,UAAU,QAAW;AACzC,YAAI,aAAa,QAAI,+BAAa,GAAG,GAAG,KAAK;AAAA,MAC/C;AAAA,IACF,CAAC;AAAA,EACH;AAEA,SAAO,OAAO,KAAK,IAAI;AAGvB,MAAI,YAAY,cAAc,kBAAkB;AAC9C,UAAM,kBAAkB,IAAI,IAAI,iBAAiB,IAAI,KAAK,UAAU,CAAC,CAAC;AAEtE,oBAAgB,eAAW,uBAAU,gBAAgB,UAAU,YAAY,EAAE;AAE7E,UAAM,uCAAmC,mCAAe,cAAc,EAAE;AAExE,eAAW,CAAC,KAAK,GAAG,KAAK,OAAO,QAAQ,gCAAgC,GAAG;AACzE,sBAAgB,aAAa,OAAO,KAAK,GAAG;AAAA,IAC9C;AAEA,QAAI,kBAAkB;AACpB,YAAM,YAAY,MAAM,QAAQ,gBAAgB,IAAI,mBAAmB,CAAC,gBAAgB;AACxF,iBAAW,WAAW,WAAW;AAC/B,YAAI,EAAE,mBAAmB,oBAAoB,OAAO,YAAY,UAAU;AACxE;AAAA,QACF;AACA,cAAMA,UAAS,IAAI,gBAAgB,OAAO;AAC1C,QAAAA,QAAO,QAAQ,CAAC,OAAO,QAAQ;AAC7B,cAAI,UAAU,QAAQ,UAAU,QAAW;AACzC,4BAAgB,aAAa,QAAI,+BAAa,GAAG,GAAG,KAAK;AAAA,UAC3D;AAAA,QACF,CAAC;AAAA,MACH;AAAA,IACF;AAEA,UAAM,UAAU,gBAAgB,KAAK,QAAQ,gBAAgB,EAAE;AAC/D,QAAI,YAAY,KAAK;AAEnB,UAAI,OAAO;AAAA,IACb;AAAA,EACF;AAEA,QAAM,EAAE,WAAW,WAAW,IAAI;AAClC,MAAI,WAAW;AACb,WAAO,aAAa,IAAI,KAAK,QAAQ,IAAI,QAAQ,EAAE,IAAI,IAAI;AAAA,EAC7D;AACA,SAAO;AACT;AAOO,MAAM,mBAAmB,CAAC,SAAiB;AAChD,MAAI,OAAO,WAAW,YAAa,QAAO;AAC1C,QAAM,UAAU,OAAO,SAAS;AAChC,MAAI,KAAK,WAAW,MAAM,GAAG;AAC3B,WAAO;AAAA,EACT;AACA,SAAO,GAAG,OAAO,GAAG,KAAK,WAAW,GAAG,IAAI,OAAO,IAAI,IAAI,EAAE;AAC9D;AAQO,MAAM,kBAAkB,CAAC,aAAqB,iBAAkC;AACrF,MAAI,CAAC,eAAe,CAAC,aAAc,QAAO;AAG1C,QAAM,mBAAmB,YAAY,MAAM,GAAG,EAAE,CAAC;AACjD,QAAM,oBAAoB,aAAa,MAAM,GAAG,EAAE,CAAC;AAEnD,SAAO,qBAAqB;AAC9B;AAEO,MAAM,kBAAkB,CAAC,YAAmD;AACjF,QAAM;AAAA,IACJ;AAAA,IACA,kBAAkB;AAAA,IAClB;AAAA,IACA;AAAA,IACA,kBAAkB;AAAA,EACpB,IAAI;AAEJ,QAAM,UAAU,OAAO,SAAS;AAEhC,MAAI,OAAO,WAAW,aAAa;AACjC,WAAO;AAAA,EACT;AAEA,QAAM,MAAM,IAAI,IAAI,WAAW,OAAO;AAEtC,MAAI,CAAC,YAAY,SAAS,eAAe,KAAK,CAAC,YAAY,SAAS,eAAe,GAAG;AACpF,QAAI,aAAa,IAAI,YAAY,WAAW;AAAA,EAC9C;AAEA,SAAO,IAAI,SAAS;AACtB;AAKO,MAAM,oBAAoB,CAAC,SAAuB;AACvD,MAAI,OAAO,WAAW,aAAa;AACjC,mBAAe,QAAQ,gBAAgB,IAAI;AAAA,EAC7C;AACF;AAKO,MAAM,kBAAkB,MAAqB;AAClD,MAAI,OAAO,WAAW,aAAa;AACjC,WAAO,eAAe,QAAQ,cAAc;AAAA,EAC9C;AACA,SAAO;AACT;AAQO,MAAM,sBAAsB,CACjC,cACA,uBACW;AAEX,QAAM,cAAc,aAAa,IAAI,UAAU;AAC/C,MAAI,aAAa;AACf,WAAO,YAAY,WAAW;AAAA,EAChC;AAGA,MAAI,oBAAoB;AACtB,WAAO,YAAY,kBAAkB;AAAA,EACvC;AAGA,SAAO;AACT;AAKA,MAAM,cAAc,CAAC,QAAwB;AAC3C,MAAI;AAEF,QAAI,IAAI,WAAW,MAAM,GAAG;AAC1B,YAAM,SAAS,IAAI,IAAI,GAAG;AAC1B,UAAI,OAAO,WAAW,eAAe,OAAO,WAAW,OAAO,SAAS,QAAQ;AAC7E,eAAO;AAAA,MACT;AAAA,IACF;AAGA,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEO,SAAS,MAAM,KAAwB;AAC5C,SAAO,IAAI,IAAI,IAAI,SAAS,GAAG,OAAO,SAAS,MAAM;AACvD;AAcO,SAAS,YAAY,KAA2B;AACrD,QAAM,MAAM,GAAG;AACf,SAAO,IAAI,KAAK,QAAQ,IAAI,QAAQ,EAAE;AACxC;AAUO,MAAM,oBAAoB,CAAC,SAAyB;AACzD,UAAQ,QAAQ,IAAI,QAAQ,QAAQ,EAAE;AACxC;AAEO,SAAS,WAAW,KAA6B;AACtD,MAAI,CAAC,KAAK;AACR,WAAO;AAAA,EACT;AAEA,MAAI;AACF,QAAI,IAAI,GAAa;AACrB,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEO,SAAS,sBAAsB,KAAa,QAA2B;AAC5E,MAAI;AACF,WAAO,IAAI,IAAI,GAAG;AAAA,EACpB,QAAQ;AACN,WAAO,IAAI,IAAI,KAAK,MAAM;AAAA,EAC5B;AACF;AAGA,MAAM,qBAAqB;AAAA,EACzB;AAAA;AAAA,EACA;AAAA;AAAA;AAAA,EAEA;AAAA;AACF;AAMO,SAAS,iBAAiB,KAAmB;AAClD,MAAI,kBAAkB,GAAG,GAAG;AAC1B,WAAO;AAAA,EACT;AAEA,aAAW,WAAW,oBAAoB;AACxC,QAAI,QAAQ,KAAK,IAAI,QAAQ,GAAG;AAC9B,aAAO;AAAA,IACT;AAAA,EACF;AAEA,SAAO;AACT;AAEO,SAAS,kBAAkB,KAAmB;AACnD,MAAI,CAAC,WAAW,GAAG,GAAG;AACpB,WAAO;AAAA,EACT;AACA,QAAM,WAAW,IAAI,IAAI,GAAG,EAAE;AAC9B,SAAO,qBAAqB,KAAK,QAAM,OAAO,QAAQ;AACxD;AAEO,MAAM,oBACX,CAAC,wBAA4D,kBAC7D,CAAC,SAAuB;AAGtB,MAAI,CAAC,cAAe,QAAO;AAE3B,MAAI,MAAM;AACV,MAAI,OAAO,QAAQ,UAAU;AAC3B,UAAM,sBAAsB,KAAK,aAAa;AAAA,EAChD;AAEA,MAAI,CAAC,wBAAwB;AAC3B,WAAO;AAAA,EACT;AAEA,QAAM,eAAe,kBAAkB,IAAI;AAE3C,QAAM,YACJ,CAAC,iBAAiB,GAAG,MACpB,gBACC,uBACG;AAAA,IAAI,YACH,OAAO,WAAW,WAAW,mBAAM,SAAS,kBAAkB,MAAM,CAAC,IAAI;AAAA,EAC3E,EACC,KAAK,YAAU,OAAO,KAAK,kBAAkB,IAAI,MAAM,CAAC,CAAC;AAEhE,MAAI,CAAC,WAAW;AACd,yBAAO;AAAA,MACL,uBAAuB,GAAG;AAAA,IAC5B;AAAA,EACF;AACA,SAAO;AACT;","names":["params"]}

package/dist/cjs/utils/index.js

@@ -1,29 +0,0 @@
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __reExport = (target, mod, secondTarget) => (__copyProps(target, mod, "default"), secondTarget && __copyProps(secondTarget, mod, "default"));
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var utils_exports = {};
-module.exports = __toCommonJS(utils_exports);
-__reExport(utils_exports, require("./construct"), module.exports);
-__reExport(utils_exports, require("./querystring"), module.exports);
-__reExport(utils_exports, require("./redirectUrls"), module.exports);
-__reExport(utils_exports, require("./windowNavigate"), module.exports);
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  ...require("./construct"),
-  ...require("./querystring"),
-  ...require("./redirectUrls"),
-  ...require("./windowNavigate")
-});
-//# sourceMappingURL=index.js.map

package/dist/cjs/utils/index.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../../src/utils/index.ts"],"sourcesContent":["export * from './construct';\nexport * from './querystring';\nexport * from './redirectUrls';\nexport * from './windowNavigate';\n"],"mappings":";;;;;;;;;;;;;;;AAAA;AAAA;AAAA,0BAAc,wBAAd;AACA,0BAAc,0BADd;AAEA,0BAAc,2BAFd;AAGA,0BAAc,6BAHd;","names":[]}

package/dist/cjs/utils/jwt.js

@@ -1,46 +0,0 @@
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var jwt_exports = {};
-__export(jwt_exports, {
-  decode: () => decode
-});
-module.exports = __toCommonJS(jwt_exports);
-var import_jose = require("jose");
-var import_mapDecode = require("./mapDecode");
-function decode(token) {
-  const header = (0, import_jose.decodeProtectedHeader)(token);
-  const payload = (0, import_jose.decodeJwt)(token);
-  const parts = (token || "").split(".");
-  const [signature] = parts;
-  const data = {
-    header,
-    payload,
-    signature
-  };
-  const decoded = (0, import_mapDecode.mapJwtPayloadToDecodedIdToken)(payload);
-  return {
-    encoded: data,
-    decoded
-  };
-}
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  decode
-});
-//# sourceMappingURL=jwt.js.map

package/dist/cjs/utils/jwt.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../../src/utils/jwt.ts"],"sourcesContent":["import { decodeJwt, decodeProtectedHeader } from 'jose';\n\nimport type { DecodedIdToken, JWTPayload, JWTProtectedHeader } from './mapDecode';\nimport { mapJwtPayloadToDecodedIdToken } from './mapDecode';\n\ntype JWT = {\n  encoded: { header: JWTProtectedHeader; payload: JWTPayload; signature: string };\n  decoded: DecodedIdToken;\n};\n\nexport function decode(token: string): JWT {\n  const header = decodeProtectedHeader(token);\n  const payload = decodeJwt(token);\n\n  const parts = (token || '').split('.');\n  const [signature] = parts;\n\n  const data = {\n    header,\n    payload,\n    signature,\n  };\n\n  const decoded = mapJwtPayloadToDecodedIdToken(payload);\n\n  return {\n    encoded: data,\n    decoded,\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,kBAAiD;AAGjD,uBAA8C;AAOvC,SAAS,OAAO,OAAoB;AACzC,QAAM,aAAS,mCAAsB,KAAK;AAC1C,QAAM,cAAU,uBAAU,KAAK;AAE/B,QAAM,SAAS,SAAS,IAAI,MAAM,GAAG;AACrC,QAAM,CAAC,SAAS,IAAI;AAEpB,QAAM,OAAO;AAAA,IACX;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAEA,QAAM,cAAU,gDAA8B,OAAO;AAErD,SAAO;AAAA,IACL,SAAS;AAAA,IACT;AAAA,EACF;AACF;","names":[]}

package/dist/cjs/utils/mapDecode.js

@@ -1,33 +0,0 @@
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var mapDecode_exports = {};
-__export(mapDecode_exports, {
-  mapJwtPayloadToDecodedIdToken: () => mapJwtPayloadToDecodedIdToken
-});
-module.exports = __toCommonJS(mapDecode_exports);
-function mapJwtPayloadToDecodedIdToken(payload) {
-  const decodedIdToken = payload;
-  decodedIdToken.uid = decodedIdToken.sub;
-  return decodedIdToken;
-}
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  mapJwtPayloadToDecodedIdToken
-});
-//# sourceMappingURL=mapDecode.js.map

package/dist/cjs/utils/mapDecode.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../../src/utils/mapDecode.ts"],"sourcesContent":["import type { DecodedIdToken, JWTPayload, JWTProtectedHeader } from '@tern-secure/types';\n\nexport function mapJwtPayloadToDecodedIdToken(payload: JWTPayload) {\n  const decodedIdToken = payload as DecodedIdToken;\n  decodedIdToken.uid = decodedIdToken.sub;\n  return decodedIdToken;\n}\n\nexport type { DecodedIdToken, JWTPayload, JWTProtectedHeader };\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAEO,SAAS,8BAA8B,SAAqB;AACjE,QAAM,iBAAiB;AACvB,iBAAe,MAAM,eAAe;AACpC,SAAO;AACT;","names":[]}

package/dist/cjs/utils/path.js

@@ -1,33 +0,0 @@
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var path_exports = {};
-__export(path_exports, {
-  joinPaths: () => joinPaths
-});
-module.exports = __toCommonJS(path_exports);
-const SEPARATOR = "/";
-const MULTIPLE_SEPARATOR_REGEX = new RegExp(SEPARATOR + "{1,}", "g");
-function joinPaths(a, b) {
-  return [a, b].filter((p) => p).join(SEPARATOR).replace(MULTIPLE_SEPARATOR_REGEX, SEPARATOR);
-}
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  joinPaths
-});
-//# sourceMappingURL=path.js.map

package/dist/cjs/utils/path.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../../src/utils/path.ts"],"sourcesContent":["const SEPARATOR = '/';\nconst MULTIPLE_SEPARATOR_REGEX = new RegExp(SEPARATOR + '{1,}', 'g');\n\ntype PathString = string | null | undefined;\n\nexport function joinPaths(a: PathString, b: PathString): string {\n  return [a, b]\n    .filter(p => p)\n    .join(SEPARATOR)\n    .replace(MULTIPLE_SEPARATOR_REGEX, SEPARATOR);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAAM,YAAY;AAClB,MAAM,2BAA2B,IAAI,OAAO,YAAY,QAAQ,GAAG;AAI5D,SAAS,UAAU,GAAe,GAAuB;AAC9D,SAAO,CAAC,GAAG,CAAC,EACT,OAAO,OAAK,CAAC,EACb,KAAK,SAAS,EACd,QAAQ,0BAA0B,SAAS;AAChD;","names":[]}

package/dist/cjs/utils/querystring.js

@@ -1,70 +0,0 @@
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var querystring_exports = {};
-__export(querystring_exports, {
-  getQueryParams: () => getQueryParams,
-  stringifyQueryParams: () => stringifyQueryParams
-});
-module.exports = __toCommonJS(querystring_exports);
-const getQueryParams = (queryString) => {
-  const queryParamsObject = {};
-  const queryParams = new URLSearchParams(queryString);
-  queryParams.forEach((value, key) => {
-    if (key in queryParamsObject) {
-      const existingValue = queryParamsObject[key];
-      if (Array.isArray(existingValue)) {
-        existingValue.push(value);
-      } else {
-        queryParamsObject[key] = [existingValue, value];
-      }
-    } else {
-      queryParamsObject[key] = value;
-    }
-  });
-  return queryParamsObject;
-};
-const stringifyQueryParams = (params, opts = {}) => {
-  if (params === null || params === void 0) {
-    return "";
-  }
-  if (!params || typeof params !== "object") {
-    return "";
-  }
-  const queryParams = new URLSearchParams();
-  Object.keys(params).forEach((key) => {
-    const encodedKey = opts.keyEncoder ? opts.keyEncoder(key) : key;
-    const value = params[key];
-    if (Array.isArray(value)) {
-      value.forEach((v) => v !== void 0 && queryParams.append(encodedKey, v || ""));
-    } else if (value === void 0) {
-      return;
-    } else if (typeof value === "object" && value !== null) {
-      queryParams.append(encodedKey, JSON.stringify(value));
-    } else {
-      queryParams.append(encodedKey, String(value ?? ""));
-    }
-  });
-  return queryParams.toString();
-};
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  getQueryParams,
-  stringifyQueryParams
-});
-//# sourceMappingURL=querystring.js.map

package/dist/cjs/utils/querystring.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../../src/utils/querystring.ts"],"sourcesContent":["export const getQueryParams = (queryString: string) => {\n  const queryParamsObject: { [key: string]: string | string[] } = {};\n  const queryParams = new URLSearchParams(queryString);\n  queryParams.forEach((value, key) => {\n    if (key in queryParamsObject) {\n      // If the key already exists, we need to handle it as an array\n      const existingValue = queryParamsObject[key];\n      if (Array.isArray(existingValue)) {\n        existingValue.push(value);\n      } else {\n        queryParamsObject[key] = [existingValue, value];\n      }\n    } else {\n      queryParamsObject[key] = value;\n    }\n  });\n  return queryParamsObject as Record<string, string>;\n};\n\ntype StringifyQueryParamsOptions = {\n  keyEncoder?: (key: string) => string;\n};\n\nexport const stringifyQueryParams = (\n  params:\n    | Record<string, string | undefined | null | object | boolean | Array<string | undefined | null>>\n    | null\n    | undefined\n    | string,\n  opts: StringifyQueryParamsOptions = {},\n) => {\n  if (params === null || params === undefined) {\n    return '';\n  }\n  if (!params || typeof params !== 'object') {\n    return '';\n  }\n\n  const queryParams = new URLSearchParams();\n\n  Object.keys(params).forEach(key => {\n    const encodedKey = opts.keyEncoder ? opts.keyEncoder(key) : key;\n    const value = params[key];\n    if (Array.isArray(value)) {\n      value.forEach(v => v !== undefined && queryParams.append(encodedKey, v || ''));\n    } else if (value === undefined) {\n      return;\n    } else if (typeof value === 'object' && value !== null) {\n      queryParams.append(encodedKey, JSON.stringify(value));\n    } else {\n      queryParams.append(encodedKey, String(value ?? ''));\n    }\n  });\n\n  return queryParams.toString();\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAO,MAAM,iBAAiB,CAAC,gBAAwB;AACrD,QAAM,oBAA0D,CAAC;AACjE,QAAM,cAAc,IAAI,gBAAgB,WAAW;AACnD,cAAY,QAAQ,CAAC,OAAO,QAAQ;AAClC,QAAI,OAAO,mBAAmB;AAE5B,YAAM,gBAAgB,kBAAkB,GAAG;AAC3C,UAAI,MAAM,QAAQ,aAAa,GAAG;AAChC,sBAAc,KAAK,KAAK;AAAA,MAC1B,OAAO;AACL,0BAAkB,GAAG,IAAI,CAAC,eAAe,KAAK;AAAA,MAChD;AAAA,IACF,OAAO;AACL,wBAAkB,GAAG,IAAI;AAAA,IAC3B;AAAA,EACF,CAAC;AACD,SAAO;AACT;AAMO,MAAM,uBAAuB,CAClC,QAKA,OAAoC,CAAC,MAClC;AACH,MAAI,WAAW,QAAQ,WAAW,QAAW;AAC3C,WAAO;AAAA,EACT;AACA,MAAI,CAAC,UAAU,OAAO,WAAW,UAAU;AACzC,WAAO;AAAA,EACT;AAEA,QAAM,cAAc,IAAI,gBAAgB;AAExC,SAAO,KAAK,MAAM,EAAE,QAAQ,SAAO;AACjC,UAAM,aAAa,KAAK,aAAa,KAAK,WAAW,GAAG,IAAI;AAC5D,UAAM,QAAQ,OAAO,GAAG;AACxB,QAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,YAAM,QAAQ,OAAK,MAAM,UAAa,YAAY,OAAO,YAAY,KAAK,EAAE,CAAC;AAAA,IAC/E,WAAW,UAAU,QAAW;AAC9B;AAAA,IACF,WAAW,OAAO,UAAU,YAAY,UAAU,MAAM;AACtD,kBAAY,OAAO,YAAY,KAAK,UAAU,KAAK,CAAC;AAAA,IACtD,OAAO;AACL,kBAAY,OAAO,YAAY,OAAO,SAAS,EAAE,CAAC;AAAA,IACpD;AAAA,EACF,CAAC;AAED,SAAO,YAAY,SAAS;AAC9B;","names":[]}