@textrp/briij-js-sdk 41.0.1 → 43.0.0

package/lib/models/typed-event-emitter.js.map

@@ -1 +1 @@
-{"version":3,"file":"typed-event-emitter.js","names":["EventEmitter","EventEmitterEvents","TypedEventEmitter","addListener","event","listener","emit","_len","arguments","length","args","Array","_key","emitPromised","_arguments","_this","_asyncToGenerator","_len2","_key2","listeners","Promise","allSettled","map","l","then","listenerCount","off","on","once","prependListener","prependOnceListener","removeAllListeners","undefined","removeListener","rawListeners"],"sources":["../../src/models/typed-event-emitter.ts"],"sourcesContent":["/*\r\nCopyright 2021 The Matrix.org Foundation C.I.C.\r\n\r\nLicensed under the Apache License, Version 2.0 (the \"License\");\r\nyou may not use this file except in compliance with the License.\r\nYou may obtain a copy of the License at\r\n\r\n    http://www.apache.org/licenses/LICENSE-2.0\r\n\r\nUnless required by applicable law or agreed to in writing, software\r\ndistributed under the License is distributed on an \"AS IS\" BASIS,\r\nWITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\r\nSee the License for the specific language governing permissions and\r\nlimitations under the License.\r\n*/\r\n\r\n// eslint-disable-next-line no-restricted-imports\r\nimport { EventEmitter } from \"events\";\r\n\r\n/** Events emitted by EventEmitter itself */\r\nexport enum EventEmitterEvents {\r\n    NewListener = \"newListener\",\r\n    RemoveListener = \"removeListener\",\r\n    Error = \"error\",\r\n}\r\n\r\ntype AnyListener = (...args: any) => any;\r\n\r\n/** Base class for types mapping from event name to the type of listeners to that event */\r\nexport type ListenerMap<E extends string> = { [eventName in E]: AnyListener };\r\n\r\ntype EventEmitterEventListener = (eventName: string, listener: AnyListener) => void;\r\ntype EventEmitterErrorListener = (error: Error) => void;\r\n\r\n/**\r\n * The expected type of a listener function for a particular event.\r\n *\r\n * Type parameters:\r\n *   * `E` - List of all events emitted by the `TypedEventEmitter`. Normally an enum type.\r\n *   * `A` - A type providing mappings from event names to listener types.\r\n *   * `T` - The name of the actual event that this listener is for. Normally one of the types in `E` or\r\n *           {@link EventEmitterEvents}.\r\n */\r\nexport type Listener<E extends string, A extends ListenerMap<E>, T extends E | EventEmitterEvents> = T extends E\r\n    ? A[T]\r\n    : T extends EventEmitterEvents\r\n      ? EventEmitterErrorListener\r\n      : EventEmitterEventListener;\r\n\r\n/**\r\n * Typed Event Emitter class which can act as a Base Model for all our model\r\n * and communication events.\r\n * This makes it much easier for us to distinguish between events, as we now need\r\n * to properly type this, so that our events are not stringly-based and prone\r\n * to silly typos.\r\n *\r\n * Type parameters:\r\n *  * `Events` - List of all events emitted by this `TypedEventEmitter`. Normally an enum type.\r\n *  * `Arguments` - A {@link ListenerMap} type providing mappings from event names to listener types.\r\n *  * `SuperclassArguments` - TODO: not really sure. Alternative listener mappings, I think? But only honoured for `.emit`?\r\n */\r\nexport class TypedEventEmitter<\r\n    Events extends string,\r\n    Arguments extends ListenerMap<Events>,\r\n    SuperclassArguments extends ListenerMap<any> = Arguments,\r\n> extends EventEmitter {\r\n    /**\r\n     * Alias for {@link on}.\r\n     */\r\n    public addListener<T extends Events | EventEmitterEvents>(\r\n        event: T,\r\n        listener: Listener<Events, Arguments, T>,\r\n    ): this {\r\n        return super.addListener(event, listener);\r\n    }\r\n\r\n    /**\r\n     * Synchronously calls each of the listeners registered for the event named\r\n     * `event`, in the order they were registered, passing the supplied arguments\r\n     * to each.\r\n     *\r\n     * @param event - The name of the event to emit\r\n     * @param args - Arguments to pass to the listener\r\n     * @returns `true` if the event had listeners, `false` otherwise.\r\n     */\r\n    public emit<T extends Events>(event: T, ...args: Parameters<SuperclassArguments[T]>): boolean;\r\n    public emit<T extends Events>(event: T, ...args: Parameters<Arguments[T]>): boolean;\r\n    public emit<T extends Events>(event: T, ...args: any[]): boolean {\r\n        return super.emit(event, ...args);\r\n    }\r\n\r\n    /**\r\n     * Similar to `emit` but calls all listeners within a `Promise.all` and returns the promise chain\r\n     * @param event - The name of the event to emit\r\n     * @param args - Arguments to pass to the listener\r\n     * @returns `true` if the event had listeners, `false` otherwise.\r\n     */\r\n    public async emitPromised<T extends Events>(\r\n        event: T,\r\n        ...args: Parameters<SuperclassArguments[T]>\r\n    ): Promise<boolean>;\r\n    public async emitPromised<T extends Events>(event: T, ...args: Parameters<Arguments[T]>): Promise<boolean>;\r\n    public async emitPromised<T extends Events>(event: T, ...args: any[]): Promise<boolean> {\r\n        const listeners = this.listeners(event);\r\n        return Promise.allSettled(listeners.map((l) => l(...args))).then(() => {\r\n            return listeners.length > 0;\r\n        });\r\n    }\r\n\r\n    /**\r\n     * Returns the number of listeners listening to the event named `event`.\r\n     *\r\n     * @param event - The name of the event being listened for\r\n     */\r\n    public listenerCount(event: Events | EventEmitterEvents): number {\r\n        return super.listenerCount(event);\r\n    }\r\n\r\n    /**\r\n     * Returns a copy of the array of listeners for the event named `event`.\r\n     */\r\n    public listeners(event: Events | EventEmitterEvents): ReturnType<EventEmitter[\"listeners\"]> {\r\n        return super.listeners(event);\r\n    }\r\n\r\n    /**\r\n     * Alias for {@link removeListener}\r\n     */\r\n    public off<T extends Events | EventEmitterEvents>(event: T, listener: Listener<Events, Arguments, T>): this {\r\n        return super.off(event, listener);\r\n    }\r\n\r\n    /**\r\n     * Adds the `listener` function to the end of the listeners array for the\r\n     * event named `event`.\r\n     *\r\n     * No checks are made to see if the `listener` has already been added. Multiple calls\r\n     * passing the same combination of `event` and `listener` will result in the `listener`\r\n     * being added, and called, multiple times.\r\n     *\r\n     * By default, event listeners are invoked in the order they are added. The\r\n     * {@link prependListener} method can be used as an alternative to add the\r\n     * event listener to the beginning of the listeners array.\r\n     *\r\n     * @param event - The name of the event.\r\n     * @param listener - The callback function\r\n     *\r\n     * @returns a reference to the `EventEmitter`, so that calls can be chained.\r\n     */\r\n    public on<T extends Events | EventEmitterEvents>(event: T, listener: Listener<Events, Arguments, T>): this {\r\n        return super.on(event, listener);\r\n    }\r\n\r\n    /**\r\n     * Adds a **one-time** `listener` function for the event named `event`. The\r\n     * next time `event` is triggered, this listener is removed and then invoked.\r\n     *\r\n     * Returns a reference to the `EventEmitter`, so that calls can be chained.\r\n     *\r\n     * By default, event listeners are invoked in the order they are added.\r\n     * The {@link prependOnceListener} method can be used as an alternative to add the\r\n     * event listener to the beginning of the listeners array.\r\n     *\r\n     * @param event - The name of the event.\r\n     * @param listener - The callback function\r\n     *\r\n     * @returns a reference to the `EventEmitter`, so that calls can be chained.\r\n     */\r\n    public once<T extends Events | EventEmitterEvents>(event: T, listener: Listener<Events, Arguments, T>): this {\r\n        return super.once(event, listener);\r\n    }\r\n\r\n    /**\r\n     * Adds the `listener` function to the _beginning_ of the listeners array for the\r\n     * event named `event`.\r\n     *\r\n     * No checks are made to see if the `listener` has already been added. Multiple calls\r\n     * passing the same combination of `event` and `listener` will result in the `listener`\r\n     * being added, and called, multiple times.\r\n     *\r\n     * @param event - The name of the event.\r\n     * @param listener - The callback function\r\n     *\r\n     * @returns a reference to the `EventEmitter`, so that calls can be chained.\r\n     */\r\n    public prependListener<T extends Events | EventEmitterEvents>(\r\n        event: T,\r\n        listener: Listener<Events, Arguments, T>,\r\n    ): this {\r\n        return super.prependListener(event, listener);\r\n    }\r\n\r\n    /**\r\n     * Adds a **one-time**`listener` function for the event named `event` to the _beginning_ of the listeners array.\r\n     * The next time `event` is triggered, this listener is removed, and then invoked.\r\n     *\r\n     * @param event - The name of the event.\r\n     * @param listener - The callback function\r\n     *\r\n     * @returns a reference to the `EventEmitter`, so that calls can be chained.\r\n     */\r\n    public prependOnceListener<T extends Events | EventEmitterEvents>(\r\n        event: T,\r\n        listener: Listener<Events, Arguments, T>,\r\n    ): this {\r\n        return super.prependOnceListener(event, listener);\r\n    }\r\n\r\n    /**\r\n     * Removes all listeners, or those of the specified `event`.\r\n     *\r\n     * It is bad practice to remove listeners added elsewhere in the code,\r\n     * particularly when the `EventEmitter` instance was created by some other\r\n     * component or module (e.g. sockets or file streams).\r\n     *\r\n     * @param event - The name of the event. If undefined, all listeners everywhere are removed.\r\n     * @returns a reference to the `EventEmitter`, so that calls can be chained.\r\n     */\r\n    public removeAllListeners(event?: Events | EventEmitterEvents): this {\r\n        // EventEmitter::removeAllListeners uses `arguments.length` to determine undefined case\r\n        if (event === undefined) {\r\n            return super.removeAllListeners();\r\n        }\r\n        return super.removeAllListeners(event);\r\n    }\r\n\r\n    /**\r\n     * Removes the specified `listener` from the listener array for the event named `event`.\r\n     *\r\n     * @returns a reference to the `EventEmitter`, so that calls can be chained.\r\n     */\r\n    public removeListener<T extends Events | EventEmitterEvents>(\r\n        event: T,\r\n        listener: Listener<Events, Arguments, T>,\r\n    ): this {\r\n        return super.removeListener(event, listener);\r\n    }\r\n\r\n    /**\r\n     * Returns a copy of the array of listeners for the event named `eventName`,\r\n     * including any wrappers (such as those created by `.once()`).\r\n     */\r\n    public rawListeners(event: Events | EventEmitterEvents): ReturnType<EventEmitter[\"rawListeners\"]> {\r\n        return super.rawListeners(event);\r\n    }\r\n}\r\n"],"mappings":";AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA,SAASA,YAAY,QAAQ,QAAQ;;AAErC;AACA,WAAYC,kBAAkB,0BAAlBA,kBAAkB;EAAlBA,kBAAkB;EAAlBA,kBAAkB;EAAlBA,kBAAkB;EAAA,OAAlBA,kBAAkB;AAAA;;AAQ9B;;AAMA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAOA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMC,iBAAiB,SAIpBF,YAAY,CAAC;EACnB;AACJ;AACA;EACWG,WAAWA,CACdC,KAAQ,EACRC,QAAwC,EACpC;IACJ,OAAO,KAAK,CAACF,WAAW,CAACC,KAAK,EAAEC,QAAQ,CAAC;EAC7C;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;EAGWC,IAAIA,CAAmBF,KAAQ,EAA2B;IAAA,SAAAG,IAAA,GAAAC,SAAA,CAAAC,MAAA,EAAtBC,IAAI,OAAAC,KAAA,CAAAJ,IAAA,OAAAA,IAAA,WAAAK,IAAA,MAAAA,IAAA,GAAAL,IAAA,EAAAK,IAAA;MAAJF,IAAI,CAAAE,IAAA,QAAAJ,SAAA,CAAAI,IAAA;IAAA;IAC3C,OAAO,KAAK,CAACN,IAAI,CAACF,KAAK,EAAE,GAAGM,IAAI,CAAC;EACrC;;EAEA;AACJ;AACA;AACA;AACA;AACA;;EAMiBG,YAAYA,CAAmBT,KAAQ,EAAoC;IAAA,IAAAU,UAAA,GAAAN,SAAA;MAAAO,KAAA;IAAA,OAAAC,iBAAA;MAAA,SAAAC,KAAA,GAAAH,UAAA,CAAAL,MAAA,EAA/BC,IAAI,OAAAC,KAAA,CAAAM,KAAA,OAAAA,KAAA,WAAAC,KAAA,MAAAA,KAAA,GAAAD,KAAA,EAAAC,KAAA;QAAJR,IAAI,CAAAQ,KAAA,QAAAJ,UAAA,CAAAI,KAAA;MAAA;MACzD,IAAMC,SAAS,GAAGJ,KAAI,CAACI,SAAS,CAACf,KAAK,CAAC;MACvC,OAAOgB,OAAO,CAACC,UAAU,CAACF,SAAS,CAACG,GAAG,CAAEC,CAAC,IAAKA,CAAC,CAAC,GAAGb,IAAI,CAAC,CAAC,CAAC,CAACc,IAAI,CAAC,MAAM;QACnE,OAAOL,SAAS,CAACV,MAAM,GAAG,CAAC;MAC/B,CAAC,CAAC;IAAC;EACP;;EAEA;AACJ;AACA;AACA;AACA;EACWgB,aAAaA,CAACrB,KAAkC,EAAU;IAC7D,OAAO,KAAK,CAACqB,aAAa,CAACrB,KAAK,CAAC;EACrC;;EAEA;AACJ;AACA;EACWe,SAASA,CAACf,KAAkC,EAAyC;IACxF,OAAO,KAAK,CAACe,SAAS,CAACf,KAAK,CAAC;EACjC;;EAEA;AACJ;AACA;EACWsB,GAAGA,CAAwCtB,KAAQ,EAAEC,QAAwC,EAAQ;IACxG,OAAO,KAAK,CAACqB,GAAG,CAACtB,KAAK,EAAEC,QAAQ,CAAC;EACrC;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;EACWsB,EAAEA,CAAwCvB,KAAQ,EAAEC,QAAwC,EAAQ;IACvG,OAAO,KAAK,CAACsB,EAAE,CAACvB,KAAK,EAAEC,QAAQ,CAAC;EACpC;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;EACWuB,IAAIA,CAAwCxB,KAAQ,EAAEC,QAAwC,EAAQ;IACzG,OAAO,KAAK,CAACuB,IAAI,CAACxB,KAAK,EAAEC,QAAQ,CAAC;EACtC;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;EACWwB,eAAeA,CAClBzB,KAAQ,EACRC,QAAwC,EACpC;IACJ,OAAO,KAAK,CAACwB,eAAe,CAACzB,KAAK,EAAEC,QAAQ,CAAC;EACjD;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;AACA;EACWyB,mBAAmBA,CACtB1B,KAAQ,EACRC,QAAwC,EACpC;IACJ,OAAO,KAAK,CAACyB,mBAAmB,CAAC1B,KAAK,EAAEC,QAAQ,CAAC;EACrD;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;EACW0B,kBAAkBA,CAAC3B,KAAmC,EAAQ;IACjE;IACA,IAAIA,KAAK,KAAK4B,SAAS,EAAE;MACrB,OAAO,KAAK,CAACD,kBAAkB,CAAC,CAAC;IACrC;IACA,OAAO,KAAK,CAACA,kBAAkB,CAAC3B,KAAK,CAAC;EAC1C;;EAEA;AACJ;AACA;AACA;AACA;EACW6B,cAAcA,CACjB7B,KAAQ,EACRC,QAAwC,EACpC;IACJ,OAAO,KAAK,CAAC4B,cAAc,CAAC7B,KAAK,EAAEC,QAAQ,CAAC;EAChD;;EAEA;AACJ;AACA;AACA;EACW6B,YAAYA,CAAC9B,KAAkC,EAA4C;IAC9F,OAAO,KAAK,CAAC8B,YAAY,CAAC9B,KAAK,CAAC;EACpC;AACJ","ignoreList":[]}
+{"version":3,"file":"typed-event-emitter.js","names":["EventEmitter","EventEmitterEvents","TypedEventEmitter","addListener","event","listener","emit","_len","arguments","length","args","Array","_key","emitPromised","_arguments","_this","_asyncToGenerator","_len2","_key2","listeners","Promise","allSettled","map","l","then","listenerCount","off","on","once","prependListener","prependOnceListener","removeAllListeners","undefined","removeListener","rawListeners"],"sources":["../../src/models/typed-event-emitter.ts"],"sourcesContent":["/*\nCopyright 2021 The Matrix.org Foundation C.I.C.\n\nLicensed under the Apache License, Version 2.0 (the \"License\");\nyou may not use this file except in compliance with the License.\nYou may obtain a copy of the License at\n\n    http://www.apache.org/licenses/LICENSE-2.0\n\nUnless required by applicable law or agreed to in writing, software\ndistributed under the License is distributed on an \"AS IS\" BASIS,\nWITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\nSee the License for the specific language governing permissions and\nlimitations under the License.\n*/\n\n// eslint-disable-next-line no-restricted-imports\nimport { EventEmitter } from \"events\";\n\n/** Events emitted by EventEmitter itself */\nexport enum EventEmitterEvents {\n    NewListener = \"newListener\",\n    RemoveListener = \"removeListener\",\n    Error = \"error\",\n}\n\ntype AnyListener = (...args: any) => any;\n\n/** Base class for types mapping from event name to the type of listeners to that event */\nexport type ListenerMap<E extends string> = { [eventName in E]: AnyListener };\n\ntype EventEmitterEventListener = (eventName: string, listener: AnyListener) => void;\ntype EventEmitterErrorListener = (error: Error) => void;\n\n/**\n * The expected type of a listener function for a particular event.\n *\n * Type parameters:\n *   * `E` - List of all events emitted by the `TypedEventEmitter`. Normally an enum type.\n *   * `A` - A type providing mappings from event names to listener types.\n *   * `T` - The name of the actual event that this listener is for. Normally one of the types in `E` or\n *           {@link EventEmitterEvents}.\n */\nexport type Listener<E extends string, A extends ListenerMap<E>, T extends E | EventEmitterEvents> = T extends E\n    ? A[T]\n    : T extends EventEmitterEvents\n      ? EventEmitterErrorListener\n      : EventEmitterEventListener;\n\n/**\n * Typed Event Emitter class which can act as a Base Model for all our model\n * and communication events.\n * This makes it much easier for us to distinguish between events, as we now need\n * to properly type this, so that our events are not stringly-based and prone\n * to silly typos.\n *\n * Type parameters:\n *  * `Events` - List of all events emitted by this `TypedEventEmitter`. Normally an enum type.\n *  * `Arguments` - A {@link ListenerMap} type providing mappings from event names to listener types.\n *  * `SuperclassArguments` - TODO: not really sure. Alternative listener mappings, I think? But only honoured for `.emit`?\n */\nexport class TypedEventEmitter<\n    Events extends string,\n    Arguments extends ListenerMap<Events>,\n    SuperclassArguments extends ListenerMap<any> = Arguments,\n> extends EventEmitter {\n    /**\n     * Alias for {@link on}.\n     */\n    public addListener<T extends Events | EventEmitterEvents>(\n        event: T,\n        listener: Listener<Events, Arguments, T>,\n    ): this {\n        return super.addListener(event, listener);\n    }\n\n    /**\n     * Synchronously calls each of the listeners registered for the event named\n     * `event`, in the order they were registered, passing the supplied arguments\n     * to each.\n     *\n     * @param event - The name of the event to emit\n     * @param args - Arguments to pass to the listener\n     * @returns `true` if the event had listeners, `false` otherwise.\n     */\n    public emit<T extends Events>(event: T, ...args: Parameters<SuperclassArguments[T]>): boolean;\n    public emit<T extends Events>(event: T, ...args: Parameters<Arguments[T]>): boolean;\n    public emit<T extends Events>(event: T, ...args: any[]): boolean {\n        return super.emit(event, ...args);\n    }\n\n    /**\n     * Similar to `emit` but calls all listeners within a `Promise.all` and returns the promise chain\n     * @param event - The name of the event to emit\n     * @param args - Arguments to pass to the listener\n     * @returns `true` if the event had listeners, `false` otherwise.\n     */\n    public async emitPromised<T extends Events>(\n        event: T,\n        ...args: Parameters<SuperclassArguments[T]>\n    ): Promise<boolean>;\n    public async emitPromised<T extends Events>(event: T, ...args: Parameters<Arguments[T]>): Promise<boolean>;\n    public async emitPromised<T extends Events>(event: T, ...args: any[]): Promise<boolean> {\n        const listeners = this.listeners(event);\n        return Promise.allSettled(listeners.map((l) => l(...args))).then(() => {\n            return listeners.length > 0;\n        });\n    }\n\n    /**\n     * Returns the number of listeners listening to the event named `event`.\n     *\n     * @param event - The name of the event being listened for\n     */\n    public listenerCount(event: Events | EventEmitterEvents): number {\n        return super.listenerCount(event);\n    }\n\n    /**\n     * Returns a copy of the array of listeners for the event named `event`.\n     */\n    public listeners(event: Events | EventEmitterEvents): ReturnType<EventEmitter[\"listeners\"]> {\n        return super.listeners(event);\n    }\n\n    /**\n     * Alias for {@link removeListener}\n     */\n    public off<T extends Events | EventEmitterEvents>(event: T, listener: Listener<Events, Arguments, T>): this {\n        return super.off(event, listener);\n    }\n\n    /**\n     * Adds the `listener` function to the end of the listeners array for the\n     * event named `event`.\n     *\n     * No checks are made to see if the `listener` has already been added. Multiple calls\n     * passing the same combination of `event` and `listener` will result in the `listener`\n     * being added, and called, multiple times.\n     *\n     * By default, event listeners are invoked in the order they are added. The\n     * {@link prependListener} method can be used as an alternative to add the\n     * event listener to the beginning of the listeners array.\n     *\n     * @param event - The name of the event.\n     * @param listener - The callback function\n     *\n     * @returns a reference to the `EventEmitter`, so that calls can be chained.\n     */\n    public on<T extends Events | EventEmitterEvents>(event: T, listener: Listener<Events, Arguments, T>): this {\n        return super.on(event, listener);\n    }\n\n    /**\n     * Adds a **one-time** `listener` function for the event named `event`. The\n     * next time `event` is triggered, this listener is removed and then invoked.\n     *\n     * Returns a reference to the `EventEmitter`, so that calls can be chained.\n     *\n     * By default, event listeners are invoked in the order they are added.\n     * The {@link prependOnceListener} method can be used as an alternative to add the\n     * event listener to the beginning of the listeners array.\n     *\n     * @param event - The name of the event.\n     * @param listener - The callback function\n     *\n     * @returns a reference to the `EventEmitter`, so that calls can be chained.\n     */\n    public once<T extends Events | EventEmitterEvents>(event: T, listener: Listener<Events, Arguments, T>): this {\n        return super.once(event, listener);\n    }\n\n    /**\n     * Adds the `listener` function to the _beginning_ of the listeners array for the\n     * event named `event`.\n     *\n     * No checks are made to see if the `listener` has already been added. Multiple calls\n     * passing the same combination of `event` and `listener` will result in the `listener`\n     * being added, and called, multiple times.\n     *\n     * @param event - The name of the event.\n     * @param listener - The callback function\n     *\n     * @returns a reference to the `EventEmitter`, so that calls can be chained.\n     */\n    public prependListener<T extends Events | EventEmitterEvents>(\n        event: T,\n        listener: Listener<Events, Arguments, T>,\n    ): this {\n        return super.prependListener(event, listener);\n    }\n\n    /**\n     * Adds a **one-time**`listener` function for the event named `event` to the _beginning_ of the listeners array.\n     * The next time `event` is triggered, this listener is removed, and then invoked.\n     *\n     * @param event - The name of the event.\n     * @param listener - The callback function\n     *\n     * @returns a reference to the `EventEmitter`, so that calls can be chained.\n     */\n    public prependOnceListener<T extends Events | EventEmitterEvents>(\n        event: T,\n        listener: Listener<Events, Arguments, T>,\n    ): this {\n        return super.prependOnceListener(event, listener);\n    }\n\n    /**\n     * Removes all listeners, or those of the specified `event`.\n     *\n     * It is bad practice to remove listeners added elsewhere in the code,\n     * particularly when the `EventEmitter` instance was created by some other\n     * component or module (e.g. sockets or file streams).\n     *\n     * @param event - The name of the event. If undefined, all listeners everywhere are removed.\n     * @returns a reference to the `EventEmitter`, so that calls can be chained.\n     */\n    public removeAllListeners(event?: Events | EventEmitterEvents): this {\n        // EventEmitter::removeAllListeners uses `arguments.length` to determine undefined case\n        if (event === undefined) {\n            return super.removeAllListeners();\n        }\n        return super.removeAllListeners(event);\n    }\n\n    /**\n     * Removes the specified `listener` from the listener array for the event named `event`.\n     *\n     * @returns a reference to the `EventEmitter`, so that calls can be chained.\n     */\n    public removeListener<T extends Events | EventEmitterEvents>(\n        event: T,\n        listener: Listener<Events, Arguments, T>,\n    ): this {\n        return super.removeListener(event, listener);\n    }\n\n    /**\n     * Returns a copy of the array of listeners for the event named `eventName`,\n     * including any wrappers (such as those created by `.once()`).\n     */\n    public rawListeners(event: Events | EventEmitterEvents): ReturnType<EventEmitter[\"rawListeners\"]> {\n        return super.rawListeners(event);\n    }\n}\n"],"mappings":";AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA,SAASA,YAAY,QAAQ,QAAQ;;AAErC;AACA,WAAYC,kBAAkB,0BAAlBA,kBAAkB;EAAlBA,kBAAkB;EAAlBA,kBAAkB;EAAlBA,kBAAkB;EAAA,OAAlBA,kBAAkB;AAAA;;AAQ9B;;AAMA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAOA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMC,iBAAiB,SAIpBF,YAAY,CAAC;EACnB;AACJ;AACA;EACWG,WAAWA,CACdC,KAAQ,EACRC,QAAwC,EACpC;IACJ,OAAO,KAAK,CAACF,WAAW,CAACC,KAAK,EAAEC,QAAQ,CAAC;EAC7C;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;EAGWC,IAAIA,CAAmBF,KAAQ,EAA2B;IAAA,SAAAG,IAAA,GAAAC,SAAA,CAAAC,MAAA,EAAtBC,IAAI,OAAAC,KAAA,CAAAJ,IAAA,OAAAA,IAAA,WAAAK,IAAA,MAAAA,IAAA,GAAAL,IAAA,EAAAK,IAAA;MAAJF,IAAI,CAAAE,IAAA,QAAAJ,SAAA,CAAAI,IAAA;IAAA;IAC3C,OAAO,KAAK,CAACN,IAAI,CAACF,KAAK,EAAE,GAAGM,IAAI,CAAC;EACrC;;EAEA;AACJ;AACA;AACA;AACA;AACA;;EAMiBG,YAAYA,CAAmBT,KAAQ,EAAoC;IAAA,IAAAU,UAAA,GAAAN,SAAA;MAAAO,KAAA;IAAA,OAAAC,iBAAA;MAAA,SAAAC,KAAA,GAAAH,UAAA,CAAAL,MAAA,EAA/BC,IAAI,OAAAC,KAAA,CAAAM,KAAA,OAAAA,KAAA,WAAAC,KAAA,MAAAA,KAAA,GAAAD,KAAA,EAAAC,KAAA;QAAJR,IAAI,CAAAQ,KAAA,QAAAJ,UAAA,CAAAI,KAAA;MAAA;MACzD,IAAMC,SAAS,GAAGJ,KAAI,CAACI,SAAS,CAACf,KAAK,CAAC;MACvC,OAAOgB,OAAO,CAACC,UAAU,CAACF,SAAS,CAACG,GAAG,CAAEC,CAAC,IAAKA,CAAC,CAAC,GAAGb,IAAI,CAAC,CAAC,CAAC,CAACc,IAAI,CAAC,MAAM;QACnE,OAAOL,SAAS,CAACV,MAAM,GAAG,CAAC;MAC/B,CAAC,CAAC;IAAC;EACP;;EAEA;AACJ;AACA;AACA;AACA;EACWgB,aAAaA,CAACrB,KAAkC,EAAU;IAC7D,OAAO,KAAK,CAACqB,aAAa,CAACrB,KAAK,CAAC;EACrC;;EAEA;AACJ;AACA;EACWe,SAASA,CAACf,KAAkC,EAAyC;IACxF,OAAO,KAAK,CAACe,SAAS,CAACf,KAAK,CAAC;EACjC;;EAEA;AACJ;AACA;EACWsB,GAAGA,CAAwCtB,KAAQ,EAAEC,QAAwC,EAAQ;IACxG,OAAO,KAAK,CAACqB,GAAG,CAACtB,KAAK,EAAEC,QAAQ,CAAC;EACrC;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;EACWsB,EAAEA,CAAwCvB,KAAQ,EAAEC,QAAwC,EAAQ;IACvG,OAAO,KAAK,CAACsB,EAAE,CAACvB,KAAK,EAAEC,QAAQ,CAAC;EACpC;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;EACWuB,IAAIA,CAAwCxB,KAAQ,EAAEC,QAAwC,EAAQ;IACzG,OAAO,KAAK,CAACuB,IAAI,CAACxB,KAAK,EAAEC,QAAQ,CAAC;EACtC;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;EACWwB,eAAeA,CAClBzB,KAAQ,EACRC,QAAwC,EACpC;IACJ,OAAO,KAAK,CAACwB,eAAe,CAACzB,KAAK,EAAEC,QAAQ,CAAC;EACjD;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;AACA;EACWyB,mBAAmBA,CACtB1B,KAAQ,EACRC,QAAwC,EACpC;IACJ,OAAO,KAAK,CAACyB,mBAAmB,CAAC1B,KAAK,EAAEC,QAAQ,CAAC;EACrD;;EAEA;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;EACW0B,kBAAkBA,CAAC3B,KAAmC,EAAQ;IACjE;IACA,IAAIA,KAAK,KAAK4B,SAAS,EAAE;MACrB,OAAO,KAAK,CAACD,kBAAkB,CAAC,CAAC;IACrC;IACA,OAAO,KAAK,CAACA,kBAAkB,CAAC3B,KAAK,CAAC;EAC1C;;EAEA;AACJ;AACA;AACA;AACA;EACW6B,cAAcA,CACjB7B,KAAQ,EACRC,QAAwC,EACpC;IACJ,OAAO,KAAK,CAAC4B,cAAc,CAAC7B,KAAK,EAAEC,QAAQ,CAAC;EAChD;;EAEA;AACJ;AACA;AACA;EACW6B,YAAYA,CAAC9B,KAAkC,EAA4C;IAC9F,OAAO,KAAK,CAAC8B,YAAY,CAAC9B,KAAK,CAAC;EACpC;AACJ","ignoreList":[]}

package/lib/oidc/authorize.js

@@ -2,20 +2,20 @@ import _defineProperty from "@babel/runtime/helpers/defineProperty";
 import _asyncToGenerator from "@babel/runtime/helpers/asyncToGenerator";
 function ownKeys(e, r) { var t = Object.keys(e); if (Object.getOwnPropertySymbols) { var o = Object.getOwnPropertySymbols(e); r && (o = o.filter(function (r) { return Object.getOwnPropertyDescriptor(e, r).enumerable; })), t.push.apply(t, o); } return t; }
 function _objectSpread(e) { for (var r = 1; r < arguments.length; r++) { var t = null != arguments[r] ? arguments[r] : {}; r % 2 ? ownKeys(Object(t), !0).forEach(function (r) { _defineProperty(e, r, t[r]); }) : Object.getOwnPropertyDescriptors ? Object.defineProperties(e, Object.getOwnPropertyDescriptors(t)) : ownKeys(Object(t)).forEach(function (r) { Object.defineProperty(e, r, Object.getOwnPropertyDescriptor(t, r)); }); } return e; }
-/*
-Copyright 2023 The Matrix.org Foundation C.I.C.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-    http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
+/*
+Copyright 2023 The Matrix.org Foundation C.I.C.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
 */
 
 import { Log, OidcClient, SigninResponse, SigninState, WebStorageStateStore } from "oidc-client-ts";
@@ -28,16 +28,16 @@ import { encodeUnpaddedBase64Url } from "../base64.js";
 
 // reexport for backwards compatibility
 
-/**
- * Authorization parameters which are used in the authentication request of an OIDC auth code flow.
- *
- * See https://openid.net/specs/openid-connect-basic-1_0.html#RequestParameters.
+/**
+ * Authorization parameters which are used in the authentication request of an OIDC auth code flow.
+ *
+ * See https://openid.net/specs/openid-connect-basic-1_0.html#RequestParameters.
  */
 
-/**
- * @experimental
- * Generate the scope used in authorization request with OIDC OP
- * @returns scope
+/**
+ * @experimental
+ * Generate the scope used in authorization request with OIDC OP
+ * @returns scope
  */
 export var generateScope = deviceId => {
   var safeDeviceId = deviceId !== null && deviceId !== void 0 ? deviceId : secureRandomString(10);
@@ -60,13 +60,13 @@ var generateCodeChallenge = /*#__PURE__*/function () {
   };
 }();
 
-/**
- * Generate authorization params to pass to {@link generateAuthorizationUrl}.
- *
- * Used as part of an authorization code OIDC flow: see https://openid.net/specs/openid-connect-basic-1_0.html#CodeFlow.
- *
- * @param redirectUri - absolute url for OP to redirect to after authorization
- * @returns AuthorizationParams
+/**
+ * Generate authorization params to pass to {@link generateAuthorizationUrl}.
+ *
+ * Used as part of an authorization code OIDC flow: see https://openid.net/specs/openid-connect-basic-1_0.html#CodeFlow.
+ *
+ * @param redirectUri - absolute url for OP to redirect to after authorization
+ * @returns AuthorizationParams
  */
 export var generateAuthorizationParams = _ref2 => {
   var {
@@ -81,14 +81,14 @@ export var generateAuthorizationParams = _ref2 => {
   };
 };
 
-/**
- * @deprecated use generateOidcAuthorizationUrl
- * Generate a URL to attempt authorization with the OP
- * See https://openid.net/specs/openid-connect-basic-1_0.html#CodeRequest
- * @param authorizationUrl - endpoint to attempt authorization with the OP
- * @param clientId - id of this client as registered with the OP
- * @param authorizationParams - params to be used in the url
- * @returns a Promise with the url as a string
+/**
+ * @deprecated use generateOidcAuthorizationUrl
+ * Generate a URL to attempt authorization with the OP
+ * See https://openid.net/specs/openid-connect-basic-1_0.html#CodeRequest
+ * @param authorizationUrl - endpoint to attempt authorization with the OP
+ * @param clientId - id of this client as registered with the OP
+ * @param authorizationParams - params to be used in the url
+ * @returns a Promise with the url as a string
  */
 export var generateAuthorizationUrl = /*#__PURE__*/function () {
   var _ref4 = _asyncToGenerator(function* (authorizationUrl, clientId, _ref3) {
@@ -116,21 +116,21 @@ export var generateAuthorizationUrl = /*#__PURE__*/function () {
   };
 }();
 
-/**
- * @experimental
- * Generate a URL to attempt authorization with the OP
- * See https://openid.net/specs/openid-connect-basic-1_0.html#CodeRequest
- * @param metadata - validated metadata from OP discovery
- * @param clientId - this client's id as registered with the OP
- * @param homeserverUrl - used to establish the session on return from the OP
- * @param identityServerUrl - used to establish the session on return from the OP
- * @param nonce - state
- * @param prompt - indicates to the OP which flow the user should see - eg login or registration
- *          See https://openid.net/specs/openid-connect-prompt-create-1_0.html#name-prompt-parameter
- * @param urlState - value to append to the opaque state identifier to uniquely identify the callback
- * @param loginHint - value to send as the `login_hint` to the OP, giving a hint about the login identifier the user might use to log in.
- *          See {@link https://openid.net/specs/openid-connect-core-1_0.html#AuthRequest OIDC core 3.1.2.1}.
- * @returns a Promise with the url as a string
+/**
+ * @experimental
+ * Generate a URL to attempt authorization with the OP
+ * See https://openid.net/specs/openid-connect-basic-1_0.html#CodeRequest
+ * @param metadata - validated metadata from OP discovery
+ * @param clientId - this client's id as registered with the OP
+ * @param homeserverUrl - used to establish the session on return from the OP
+ * @param identityServerUrl - used to establish the session on return from the OP
+ * @param nonce - state
+ * @param prompt - indicates to the OP which flow the user should see - eg login or registration
+ *          See https://openid.net/specs/openid-connect-prompt-create-1_0.html#name-prompt-parameter
+ * @param urlState - value to append to the opaque state identifier to uniquely identify the callback
+ * @param loginHint - value to send as the `login_hint` to the OP, giving a hint about the login identifier the user might use to log in.
+ *          See {@link https://openid.net/specs/openid-connect-core-1_0.html#AuthRequest OIDC core 3.1.2.1}.
+ * @returns a Promise with the url as a string
  */
 export var generateOidcAuthorizationUrl = /*#__PURE__*/function () {
   var _ref6 = _asyncToGenerator(function* (_ref5) {
@@ -177,14 +177,14 @@ export var generateOidcAuthorizationUrl = /*#__PURE__*/function () {
   };
 }();
 
-/**
- * Normalize token_type to use capital case to make consuming the token response easier
- * token_type is case insensitive, and it is spec-compliant for OPs to return token_type: "bearer"
- * Later, when used in auth headers it is case sensitive and must be Bearer
- * See: https://datatracker.ietf.org/doc/html/rfc6749#section-4.1.4
- *
- * @param response - validated token response
- * @returns response with token_type set to 'Bearer'
+/**
+ * Normalize token_type to use capital case to make consuming the token response easier
+ * token_type is case insensitive, and it is spec-compliant for OPs to return token_type: "bearer"
+ * Later, when used in auth headers it is case sensitive and must be Bearer
+ * See: https://datatracker.ietf.org/doc/html/rfc6749#section-4.1.4
+ *
+ * @param response - validated token response
+ * @returns response with token_type set to 'Bearer'
  */
 var normalizeBearerTokenResponseTokenType = response => ({
   id_token: response.id_token,
@@ -195,25 +195,25 @@ var normalizeBearerTokenResponseTokenType = response => ({
   token_type: "Bearer"
 });
 
-/**
- * @experimental
- * Attempt to exchange authorization code for bearer token.
- *
- * Takes the authorization code returned by the OpenID Provider via the authorization URL, and makes a
- * request to the Token Endpoint, to obtain the access token, refresh token, etc.
- *
- * @param code - authorization code as returned by OP during authorization
- * @param storedAuthorizationParams - stored params from start of oidc login flow
- * @returns valid bearer token response
- * @throws An `Error` with `message` set to an entry in {@link OidcError},
- *      when the request fails, or the returned token response is invalid.
+/**
+ * @experimental
+ * Attempt to exchange authorization code for bearer token.
+ *
+ * Takes the authorization code returned by the OpenID Provider via the authorization URL, and makes a
+ * request to the Token Endpoint, to obtain the access token, refresh token, etc.
+ *
+ * @param code - authorization code as returned by OP during authorization
+ * @param storedAuthorizationParams - stored params from start of oidc login flow
+ * @returns valid bearer token response
+ * @throws An `Error` with `message` set to an entry in {@link OidcError},
+ *      when the request fails, or the returned token response is invalid.
  */
 export var completeAuthorizationCodeGrant = /*#__PURE__*/function () {
   var _ref7 = _asyncToGenerator(function* (code, state) {
-    /**
-     * Element Web strips and changes the url on starting the app
-     * Use the code and state from query params to rebuild a url
-     * so that oidc-client can parse it
+    /**
+     * Element Web strips and changes the url on starting the app
+     * Use the code and state from query params to rebuild a url
+     * so that oidc-client can parse it
      */
     var reconstructedUrl = new URL(window.location.origin);
     reconstructedUrl.searchParams.append("code", code);

package/lib/oidc/authorize.js.map

@@ -1 +1 @@
-{"version":3,"file":"authorize.js","names":["Log","OidcClient","SigninResponse","SigninState","WebStorageStateStore","logger","secureRandomString","OidcError","validateBearerTokenResponse","validateIdToken","validateStoredUserState","sha256","encodeUnpaddedBase64Url","generateScope","deviceId","safeDeviceId","concat","generateCodeChallenge","_ref","_asyncToGenerator","codeVerifier","globalThis","crypto","subtle","warn","hashBuffer","_x","apply","arguments","generateAuthorizationParams","_ref2","redirectUri","scope","state","nonce","generateAuthorizationUrl","_ref4","authorizationUrl","clientId","_ref3","url","URL","searchParams","append","toString","_x2","_x3","_x4","generateOidcAuthorizationUrl","_ref6","_ref5","metadata","homeserverUrl","identityServerUrl","prompt","urlState","loginHint","oidcClient","_objectSpread","client_id","redirect_uri","authority","issuer","response_mode","response_type","stateStore","prefix","store","window","sessionStorage","userState","request","createSigninRequest","url_state","login_hint","_x5","normalizeBearerTokenResponseTokenType","response","id_token","expires_at","refresh_token","access_token","token_type","completeAuthorizationCodeGrant","_ref7","code","reconstructedUrl","location","origin","setLogger","stateString","get","Error","MissingOrInvalidStoredState","signInState","fromStorageString","client","signinResponse","processSigninResponse","href","settings","normalizedTokenResponse","oidcClientSettings","tokenResponse","idTokenClaims","profile","error","errorType","message","Object","values","includes","CodeExchangeFailed","_x6","_x7"],"sources":["../../src/oidc/authorize.ts"],"sourcesContent":["/*\r\nCopyright 2023 The Matrix.org Foundation C.I.C.\r\n\r\nLicensed under the Apache License, Version 2.0 (the \"License\");\r\nyou may not use this file except in compliance with the License.\r\nYou may obtain a copy of the License at\r\n\r\n    http://www.apache.org/licenses/LICENSE-2.0\r\n\r\nUnless required by applicable law or agreed to in writing, software\r\ndistributed under the License is distributed on an \"AS IS\" BASIS,\r\nWITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\r\nSee the License for the specific language governing permissions and\r\nlimitations under the License.\r\n*/\r\n\r\nimport { type IdTokenClaims, Log, OidcClient, SigninResponse, SigninState, WebStorageStateStore } from \"oidc-client-ts\";\r\n\r\nimport { logger } from \"../logger.ts\";\r\nimport { secureRandomString } from \"../randomstring.ts\";\r\nimport { OidcError } from \"./error.ts\";\r\nimport {\r\n    type BearerTokenResponse,\r\n    type UserState,\r\n    validateBearerTokenResponse,\r\n    type ValidatedAuthMetadata,\r\n    validateIdToken,\r\n    validateStoredUserState,\r\n} from \"./validate.ts\";\r\nimport { sha256 } from \"../digest.ts\";\r\nimport { encodeUnpaddedBase64Url } from \"../base64.ts\";\r\n\r\n// reexport for backwards compatibility\r\nexport type { BearerTokenResponse };\r\n\r\n/**\r\n * Authorization parameters which are used in the authentication request of an OIDC auth code flow.\r\n *\r\n * See https://openid.net/specs/openid-connect-basic-1_0.html#RequestParameters.\r\n */\r\nexport type AuthorizationParams = {\r\n    state: string;\r\n    scope: string;\r\n    redirectUri: string;\r\n    codeVerifier: string;\r\n    nonce: string;\r\n};\r\n\r\n/**\r\n * @experimental\r\n * Generate the scope used in authorization request with OIDC OP\r\n * @returns scope\r\n */\r\nexport const generateScope = (deviceId?: string): string => {\r\n    const safeDeviceId = deviceId ?? secureRandomString(10);\r\n    return `openid urn:matrix:org.matrix.msc2967.client:api:* urn:matrix:org.matrix.msc2967.client:device:${safeDeviceId}`;\r\n};\r\n\r\n// https://www.rfc-editor.org/rfc/rfc7636\r\nconst generateCodeChallenge = async (codeVerifier: string): Promise<string> => {\r\n    if (!globalThis.crypto.subtle) {\r\n        // @TODO(kerrya) should this be allowed? configurable?\r\n        logger.warn(\"A secure context is required to generate code challenge. Using plain text code challenge\");\r\n        return codeVerifier;\r\n    }\r\n\r\n    const hashBuffer = await sha256(codeVerifier);\r\n    return encodeUnpaddedBase64Url(hashBuffer);\r\n};\r\n\r\n/**\r\n * Generate authorization params to pass to {@link generateAuthorizationUrl}.\r\n *\r\n * Used as part of an authorization code OIDC flow: see https://openid.net/specs/openid-connect-basic-1_0.html#CodeFlow.\r\n *\r\n * @param redirectUri - absolute url for OP to redirect to after authorization\r\n * @returns AuthorizationParams\r\n */\r\nexport const generateAuthorizationParams = ({ redirectUri }: { redirectUri: string }): AuthorizationParams => ({\r\n    scope: generateScope(),\r\n    redirectUri,\r\n    state: secureRandomString(8),\r\n    nonce: secureRandomString(8),\r\n    codeVerifier: secureRandomString(64), // https://tools.ietf.org/html/rfc7636#section-4.1 length needs to be 43-128 characters\r\n});\r\n\r\n/**\r\n * @deprecated use generateOidcAuthorizationUrl\r\n * Generate a URL to attempt authorization with the OP\r\n * See https://openid.net/specs/openid-connect-basic-1_0.html#CodeRequest\r\n * @param authorizationUrl - endpoint to attempt authorization with the OP\r\n * @param clientId - id of this client as registered with the OP\r\n * @param authorizationParams - params to be used in the url\r\n * @returns a Promise with the url as a string\r\n */\r\nexport const generateAuthorizationUrl = async (\r\n    authorizationUrl: string,\r\n    clientId: string,\r\n    { scope, redirectUri, state, nonce, codeVerifier }: AuthorizationParams,\r\n): Promise<string> => {\r\n    const url = new URL(authorizationUrl);\r\n    url.searchParams.append(\"response_mode\", \"query\");\r\n    url.searchParams.append(\"response_type\", \"code\");\r\n    url.searchParams.append(\"redirect_uri\", redirectUri);\r\n    url.searchParams.append(\"client_id\", clientId);\r\n    url.searchParams.append(\"state\", state);\r\n    url.searchParams.append(\"scope\", scope);\r\n    url.searchParams.append(\"nonce\", nonce);\r\n\r\n    url.searchParams.append(\"code_challenge_method\", \"S256\");\r\n    url.searchParams.append(\"code_challenge\", await generateCodeChallenge(codeVerifier));\r\n\r\n    return url.toString();\r\n};\r\n\r\n/**\r\n * @experimental\r\n * Generate a URL to attempt authorization with the OP\r\n * See https://openid.net/specs/openid-connect-basic-1_0.html#CodeRequest\r\n * @param metadata - validated metadata from OP discovery\r\n * @param clientId - this client's id as registered with the OP\r\n * @param homeserverUrl - used to establish the session on return from the OP\r\n * @param identityServerUrl - used to establish the session on return from the OP\r\n * @param nonce - state\r\n * @param prompt - indicates to the OP which flow the user should see - eg login or registration\r\n *          See https://openid.net/specs/openid-connect-prompt-create-1_0.html#name-prompt-parameter\r\n * @param urlState - value to append to the opaque state identifier to uniquely identify the callback\r\n * @param loginHint - value to send as the `login_hint` to the OP, giving a hint about the login identifier the user might use to log in.\r\n *          See {@link https://openid.net/specs/openid-connect-core-1_0.html#AuthRequest OIDC core 3.1.2.1}.\r\n * @returns a Promise with the url as a string\r\n */\r\nexport const generateOidcAuthorizationUrl = async ({\r\n    metadata,\r\n    redirectUri,\r\n    clientId,\r\n    homeserverUrl,\r\n    identityServerUrl,\r\n    nonce,\r\n    prompt,\r\n    urlState,\r\n    loginHint,\r\n}: {\r\n    clientId: string;\r\n    metadata: ValidatedAuthMetadata;\r\n    homeserverUrl: string;\r\n    identityServerUrl?: string;\r\n    redirectUri: string;\r\n    nonce: string;\r\n    prompt?: string;\r\n    urlState?: string;\r\n    loginHint?: string;\r\n}): Promise<string> => {\r\n    const scope = generateScope();\r\n    const oidcClient = new OidcClient({\r\n        ...metadata,\r\n        client_id: clientId,\r\n        redirect_uri: redirectUri,\r\n        authority: metadata.issuer,\r\n        response_mode: \"query\",\r\n        response_type: \"code\",\r\n        scope,\r\n        stateStore: new WebStorageStateStore({ prefix: \"mx_oidc_\", store: window.sessionStorage }),\r\n    });\r\n    const userState: UserState = { homeserverUrl, nonce, identityServerUrl };\r\n    const request = await oidcClient.createSigninRequest({\r\n        state: userState,\r\n        nonce,\r\n        prompt,\r\n        url_state: urlState,\r\n        login_hint: loginHint,\r\n    });\r\n\r\n    return request.url;\r\n};\r\n\r\n/**\r\n * Normalize token_type to use capital case to make consuming the token response easier\r\n * token_type is case insensitive, and it is spec-compliant for OPs to return token_type: \"bearer\"\r\n * Later, when used in auth headers it is case sensitive and must be Bearer\r\n * See: https://datatracker.ietf.org/doc/html/rfc6749#section-4.1.4\r\n *\r\n * @param response - validated token response\r\n * @returns response with token_type set to 'Bearer'\r\n */\r\nconst normalizeBearerTokenResponseTokenType = (response: SigninResponse): BearerTokenResponse =>\r\n    ({\r\n        id_token: response.id_token,\r\n        scope: response.scope,\r\n        expires_at: response.expires_at,\r\n        refresh_token: response.refresh_token,\r\n        access_token: response.access_token,\r\n        token_type: \"Bearer\",\r\n    }) as BearerTokenResponse;\r\n\r\n/**\r\n * @experimental\r\n * Attempt to exchange authorization code for bearer token.\r\n *\r\n * Takes the authorization code returned by the OpenID Provider via the authorization URL, and makes a\r\n * request to the Token Endpoint, to obtain the access token, refresh token, etc.\r\n *\r\n * @param code - authorization code as returned by OP during authorization\r\n * @param storedAuthorizationParams - stored params from start of oidc login flow\r\n * @returns valid bearer token response\r\n * @throws An `Error` with `message` set to an entry in {@link OidcError},\r\n *      when the request fails, or the returned token response is invalid.\r\n */\r\nexport const completeAuthorizationCodeGrant = async (\r\n    code: string,\r\n    state: string,\r\n): Promise<{\r\n    oidcClientSettings: { clientId: string; issuer: string };\r\n    tokenResponse: BearerTokenResponse;\r\n    homeserverUrl: string;\r\n    idTokenClaims: IdTokenClaims;\r\n    identityServerUrl?: string;\r\n}> => {\r\n    /**\r\n     * Element Web strips and changes the url on starting the app\r\n     * Use the code and state from query params to rebuild a url\r\n     * so that oidc-client can parse it\r\n     */\r\n    const reconstructedUrl = new URL(window.location.origin);\r\n    reconstructedUrl.searchParams.append(\"code\", code);\r\n    reconstructedUrl.searchParams.append(\"state\", state);\r\n\r\n    // set oidc-client to use our logger\r\n    Log.setLogger(logger);\r\n    try {\r\n        const response = new SigninResponse(reconstructedUrl.searchParams);\r\n\r\n        const stateStore = new WebStorageStateStore({ prefix: \"mx_oidc_\", store: window.sessionStorage });\r\n\r\n        // retrieve the state we put in storage at the start of oidc auth flow\r\n        const stateString = await stateStore.get(response.state!);\r\n        if (!stateString) {\r\n            throw new Error(OidcError.MissingOrInvalidStoredState);\r\n        }\r\n\r\n        // hydrate the sign in state and create a client\r\n        // the stored sign in state includes oidc configuration we set at the start of the oidc login flow\r\n        const signInState = await SigninState.fromStorageString(stateString);\r\n        const client = new OidcClient({ ...signInState, stateStore });\r\n\r\n        // validate the code and state, and attempt to swap the code for tokens\r\n        const signinResponse = await client.processSigninResponse(reconstructedUrl.href);\r\n\r\n        // extra values we stored at the start of the login flow\r\n        // used to complete login in the client\r\n        const userState = signinResponse.userState;\r\n        validateStoredUserState(userState);\r\n\r\n        // throws when response is invalid\r\n        validateBearerTokenResponse(signinResponse);\r\n        // throws when token is invalid\r\n        validateIdToken(signinResponse.id_token, client.settings.authority, client.settings.client_id, userState.nonce);\r\n        const normalizedTokenResponse = normalizeBearerTokenResponseTokenType(signinResponse);\r\n\r\n        return {\r\n            oidcClientSettings: {\r\n                clientId: client.settings.client_id,\r\n                issuer: client.settings.authority,\r\n            },\r\n            tokenResponse: normalizedTokenResponse,\r\n            homeserverUrl: userState.homeserverUrl,\r\n            identityServerUrl: userState.identityServerUrl,\r\n            idTokenClaims: signinResponse.profile,\r\n        };\r\n    } catch (error) {\r\n        logger.error(\"Oidc login failed\", error);\r\n        const errorType = (error as Error).message;\r\n\r\n        // rethrow errors that we recognise\r\n        if (Object.values(OidcError).includes(errorType as any)) {\r\n            throw error;\r\n        }\r\n        throw new Error(OidcError.CodeExchangeFailed);\r\n    }\r\n};\r\n"],"mappings":";;;;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA,SAA6BA,GAAG,EAAEC,UAAU,EAAEC,cAAc,EAAEC,WAAW,EAAEC,oBAAoB,QAAQ,gBAAgB;AAEvH,SAASC,MAAM,QAAQ,cAAc;AACrC,SAASC,kBAAkB,QAAQ,oBAAoB;AACvD,SAASC,SAAS,QAAQ,YAAY;AACtC,SAGIC,2BAA2B,EAE3BC,eAAe,EACfC,uBAAuB,QACpB,eAAe;AACtB,SAASC,MAAM,QAAQ,cAAc;AACrC,SAASC,uBAAuB,QAAQ,cAAc;;AAEtD;;AAGA;AACA;AACA;AACA;AACA;;AASA;AACA;AACA;AACA;AACA;AACA,OAAO,IAAMC,aAAa,GAAIC,QAAiB,IAAa;EACxD,IAAMC,YAAY,GAAGD,QAAQ,aAARA,QAAQ,cAARA,QAAQ,GAAIR,kBAAkB,CAAC,EAAE,CAAC;EACvD,wGAAAU,MAAA,CAAwGD,YAAY;AACxH,CAAC;;AAED;AACA,IAAME,qBAAqB;EAAA,IAAAC,IAAA,GAAAC,iBAAA,CAAG,WAAOC,YAAoB,EAAsB;IAC3E,IAAI,CAACC,UAAU,CAACC,MAAM,CAACC,MAAM,EAAE;MAC3B;MACAlB,MAAM,CAACmB,IAAI,CAAC,0FAA0F,CAAC;MACvG,OAAOJ,YAAY;IACvB;IAEA,IAAMK,UAAU,SAASd,MAAM,CAACS,YAAY,CAAC;IAC7C,OAAOR,uBAAuB,CAACa,UAAU,CAAC;EAC9C,CAAC;EAAA,gBATKR,qBAAqBA,CAAAS,EAAA;IAAA,OAAAR,IAAA,CAAAS,KAAA,OAAAC,SAAA;EAAA;AAAA,GAS1B;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,IAAMC,2BAA2B,GAAGC,KAAA;EAAA,IAAC;IAAEC;EAAqC,CAAC,GAAAD,KAAA;EAAA,OAA2B;IAC3GE,KAAK,EAAEnB,aAAa,CAAC,CAAC;IACtBkB,WAAW;IACXE,KAAK,EAAE3B,kBAAkB,CAAC,CAAC,CAAC;IAC5B4B,KAAK,EAAE5B,kBAAkB,CAAC,CAAC,CAAC;IAC5Bc,YAAY,EAAEd,kBAAkB,CAAC,EAAE,CAAC,CAAE;EAC1C,CAAC;AAAA,CAAC;;AAEF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,IAAM6B,wBAAwB;EAAA,IAAAC,KAAA,GAAAjB,iBAAA,CAAG,WACpCkB,gBAAwB,EACxBC,QAAgB,EAAAC,KAAA,EAEE;IAAA,IADlB;MAAEP,KAAK;MAAED,WAAW;MAAEE,KAAK;MAAEC,KAAK;MAAEd;IAAkC,CAAC,GAAAmB,KAAA;IAEvE,IAAMC,GAAG,GAAG,IAAIC,GAAG,CAACJ,gBAAgB,CAAC;IACrCG,GAAG,CAACE,YAAY,CAACC,MAAM,CAAC,eAAe,EAAE,OAAO,CAAC;IACjDH,GAAG,CAACE,YAAY,CAACC,MAAM,CAAC,eAAe,EAAE,MAAM,CAAC;IAChDH,GAAG,CAACE,YAAY,CAACC,MAAM,CAAC,cAAc,EAAEZ,WAAW,CAAC;IACpDS,GAAG,CAACE,YAAY,CAACC,MAAM,CAAC,WAAW,EAAEL,QAAQ,CAAC;IAC9CE,GAAG,CAACE,YAAY,CAACC,MAAM,CAAC,OAAO,EAAEV,KAAK,CAAC;IACvCO,GAAG,CAACE,YAAY,CAACC,MAAM,CAAC,OAAO,EAAEX,KAAK,CAAC;IACvCQ,GAAG,CAACE,YAAY,CAACC,MAAM,CAAC,OAAO,EAAET,KAAK,CAAC;IAEvCM,GAAG,CAACE,YAAY,CAACC,MAAM,CAAC,uBAAuB,EAAE,MAAM,CAAC;IACxDH,GAAG,CAACE,YAAY,CAACC,MAAM,CAAC,gBAAgB,QAAQ1B,qBAAqB,CAACG,YAAY,CAAC,CAAC;IAEpF,OAAOoB,GAAG,CAACI,QAAQ,CAAC,CAAC;EACzB,CAAC;EAAA,gBAlBYT,wBAAwBA,CAAAU,GAAA,EAAAC,GAAA,EAAAC,GAAA;IAAA,OAAAX,KAAA,CAAAT,KAAA,OAAAC,SAAA;EAAA;AAAA,GAkBpC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,IAAMoB,4BAA4B;EAAA,IAAAC,KAAA,GAAA9B,iBAAA,CAAG,WAAA+B,KAAA,EAoBrB;IAAA,IApB4B;MAC/CC,QAAQ;MACRpB,WAAW;MACXO,QAAQ;MACRc,aAAa;MACbC,iBAAiB;MACjBnB,KAAK;MACLoB,MAAM;MACNC,QAAQ;MACRC;IAWJ,CAAC,GAAAN,KAAA;IACG,IAAMlB,KAAK,GAAGnB,aAAa,CAAC,CAAC;IAC7B,IAAM4C,UAAU,GAAG,IAAIxD,UAAU,CAAAyD,aAAA,CAAAA,aAAA,KAC1BP,QAAQ;MACXQ,SAAS,EAAErB,QAAQ;MACnBsB,YAAY,EAAE7B,WAAW;MACzB8B,SAAS,EAAEV,QAAQ,CAACW,MAAM;MAC1BC,aAAa,EAAE,OAAO;MACtBC,aAAa,EAAE,MAAM;MACrBhC,KAAK;MACLiC,UAAU,EAAE,IAAI7D,oBAAoB,CAAC;QAAE8D,MAAM,EAAE,UAAU;QAAEC,KAAK,EAAEC,MAAM,CAACC;MAAe,CAAC;IAAC,EAC7F,CAAC;IACF,IAAMC,SAAoB,GAAG;MAAElB,aAAa;MAAElB,KAAK;MAAEmB;IAAkB,CAAC;IACxE,IAAMkB,OAAO,SAASd,UAAU,CAACe,mBAAmB,CAAC;MACjDvC,KAAK,EAAEqC,SAAS;MAChBpC,KAAK;MACLoB,MAAM;MACNmB,SAAS,EAAElB,QAAQ;MACnBmB,UAAU,EAAElB;IAChB,CAAC,CAAC;IAEF,OAAOe,OAAO,CAAC/B,GAAG;EACtB,CAAC;EAAA,gBA1CYQ,4BAA4BA,CAAA2B,GAAA;IAAA,OAAA1B,KAAA,CAAAtB,KAAA,OAAAC,SAAA;EAAA;AAAA,GA0CxC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,IAAMgD,qCAAqC,GAAIC,QAAwB,KAClE;EACGC,QAAQ,EAAED,QAAQ,CAACC,QAAQ;EAC3B9C,KAAK,EAAE6C,QAAQ,CAAC7C,KAAK;EACrB+C,UAAU,EAAEF,QAAQ,CAACE,UAAU;EAC/BC,aAAa,EAAEH,QAAQ,CAACG,aAAa;EACrCC,YAAY,EAAEJ,QAAQ,CAACI,YAAY;EACnCC,UAAU,EAAE;AAChB,CAAC,CAAwB;;AAE7B;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,IAAMC,8BAA8B;EAAA,IAAAC,KAAA,GAAAjE,iBAAA,CAAG,WAC1CkE,IAAY,EACZpD,KAAa,EAOX;IACF;AACJ;AACA;AACA;AACA;IACI,IAAMqD,gBAAgB,GAAG,IAAI7C,GAAG,CAAC2B,MAAM,CAACmB,QAAQ,CAACC,MAAM,CAAC;IACxDF,gBAAgB,CAAC5C,YAAY,CAACC,MAAM,CAAC,MAAM,EAAE0C,IAAI,CAAC;IAClDC,gBAAgB,CAAC5C,YAAY,CAACC,MAAM,CAAC,OAAO,EAAEV,KAAK,CAAC;;IAEpD;IACAjC,GAAG,CAACyF,SAAS,CAACpF,MAAM,CAAC;IACrB,IAAI;MACA,IAAMwE,QAAQ,GAAG,IAAI3E,cAAc,CAACoF,gBAAgB,CAAC5C,YAAY,CAAC;MAElE,IAAMuB,UAAU,GAAG,IAAI7D,oBAAoB,CAAC;QAAE8D,MAAM,EAAE,UAAU;QAAEC,KAAK,EAAEC,MAAM,CAACC;MAAe,CAAC,CAAC;;MAEjG;MACA,IAAMqB,WAAW,SAASzB,UAAU,CAAC0B,GAAG,CAACd,QAAQ,CAAC5C,KAAM,CAAC;MACzD,IAAI,CAACyD,WAAW,EAAE;QACd,MAAM,IAAIE,KAAK,CAACrF,SAAS,CAACsF,2BAA2B,CAAC;MAC1D;;MAEA;MACA;MACA,IAAMC,WAAW,SAAS3F,WAAW,CAAC4F,iBAAiB,CAACL,WAAW,CAAC;MACpE,IAAMM,MAAM,GAAG,IAAI/F,UAAU,CAAAyD,aAAA,CAAAA,aAAA,KAAMoC,WAAW;QAAE7B;MAAU,EAAE,CAAC;;MAE7D;MACA,IAAMgC,cAAc,SAASD,MAAM,CAACE,qBAAqB,CAACZ,gBAAgB,CAACa,IAAI,CAAC;;MAEhF;MACA;MACA,IAAM7B,SAAS,GAAG2B,cAAc,CAAC3B,SAAS;MAC1C5D,uBAAuB,CAAC4D,SAAS,CAAC;;MAElC;MACA9D,2BAA2B,CAACyF,cAAc,CAAC;MAC3C;MACAxF,eAAe,CAACwF,cAAc,CAACnB,QAAQ,EAAEkB,MAAM,CAACI,QAAQ,CAACvC,SAAS,EAAEmC,MAAM,CAACI,QAAQ,CAACzC,SAAS,EAAEW,SAAS,CAACpC,KAAK,CAAC;MAC/G,IAAMmE,uBAAuB,GAAGzB,qCAAqC,CAACqB,cAAc,CAAC;MAErF,OAAO;QACHK,kBAAkB,EAAE;UAChBhE,QAAQ,EAAE0D,MAAM,CAACI,QAAQ,CAACzC,SAAS;UACnCG,MAAM,EAAEkC,MAAM,CAACI,QAAQ,CAACvC;QAC5B,CAAC;QACD0C,aAAa,EAAEF,uBAAuB;QACtCjD,aAAa,EAAEkB,SAAS,CAAClB,aAAa;QACtCC,iBAAiB,EAAEiB,SAAS,CAACjB,iBAAiB;QAC9CmD,aAAa,EAAEP,cAAc,CAACQ;MAClC,CAAC;IACL,CAAC,CAAC,OAAOC,KAAK,EAAE;MACZrG,MAAM,CAACqG,KAAK,CAAC,mBAAmB,EAAEA,KAAK,CAAC;MACxC,IAAMC,SAAS,GAAID,KAAK,CAAWE,OAAO;;MAE1C;MACA,IAAIC,MAAM,CAACC,MAAM,CAACvG,SAAS,CAAC,CAACwG,QAAQ,CAACJ,SAAgB,CAAC,EAAE;QACrD,MAAMD,KAAK;MACf;MACA,MAAM,IAAId,KAAK,CAACrF,SAAS,CAACyG,kBAAkB,CAAC;IACjD;EACJ,CAAC;EAAA,gBAvEY7B,8BAA8BA,CAAA8B,GAAA,EAAAC,GAAA;IAAA,OAAA9B,KAAA,CAAAzD,KAAA,OAAAC,SAAA;EAAA;AAAA,GAuE1C","ignoreList":[]}
+{"version":3,"file":"authorize.js","names":["Log","OidcClient","SigninResponse","SigninState","WebStorageStateStore","logger","secureRandomString","OidcError","validateBearerTokenResponse","validateIdToken","validateStoredUserState","sha256","encodeUnpaddedBase64Url","generateScope","deviceId","safeDeviceId","concat","generateCodeChallenge","_ref","_asyncToGenerator","codeVerifier","globalThis","crypto","subtle","warn","hashBuffer","_x","apply","arguments","generateAuthorizationParams","_ref2","redirectUri","scope","state","nonce","generateAuthorizationUrl","_ref4","authorizationUrl","clientId","_ref3","url","URL","searchParams","append","toString","_x2","_x3","_x4","generateOidcAuthorizationUrl","_ref6","_ref5","metadata","homeserverUrl","identityServerUrl","prompt","urlState","loginHint","oidcClient","_objectSpread","client_id","redirect_uri","authority","issuer","response_mode","response_type","stateStore","prefix","store","window","sessionStorage","userState","request","createSigninRequest","url_state","login_hint","_x5","normalizeBearerTokenResponseTokenType","response","id_token","expires_at","refresh_token","access_token","token_type","completeAuthorizationCodeGrant","_ref7","code","reconstructedUrl","location","origin","setLogger","stateString","get","Error","MissingOrInvalidStoredState","signInState","fromStorageString","client","signinResponse","processSigninResponse","href","settings","normalizedTokenResponse","oidcClientSettings","tokenResponse","idTokenClaims","profile","error","errorType","message","Object","values","includes","CodeExchangeFailed","_x6","_x7"],"sources":["../../src/oidc/authorize.ts"],"sourcesContent":["/*\nCopyright 2023 The Matrix.org Foundation C.I.C.\n\nLicensed under the Apache License, Version 2.0 (the \"License\");\nyou may not use this file except in compliance with the License.\nYou may obtain a copy of the License at\n\n    http://www.apache.org/licenses/LICENSE-2.0\n\nUnless required by applicable law or agreed to in writing, software\ndistributed under the License is distributed on an \"AS IS\" BASIS,\nWITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\nSee the License for the specific language governing permissions and\nlimitations under the License.\n*/\n\nimport { type IdTokenClaims, Log, OidcClient, SigninResponse, SigninState, WebStorageStateStore } from \"oidc-client-ts\";\n\nimport { logger } from \"../logger.ts\";\nimport { secureRandomString } from \"../randomstring.ts\";\nimport { OidcError } from \"./error.ts\";\nimport {\n    type BearerTokenResponse,\n    type UserState,\n    validateBearerTokenResponse,\n    type ValidatedAuthMetadata,\n    validateIdToken,\n    validateStoredUserState,\n} from \"./validate.ts\";\nimport { sha256 } from \"../digest.ts\";\nimport { encodeUnpaddedBase64Url } from \"../base64.ts\";\n\n// reexport for backwards compatibility\nexport type { BearerTokenResponse };\n\n/**\n * Authorization parameters which are used in the authentication request of an OIDC auth code flow.\n *\n * See https://openid.net/specs/openid-connect-basic-1_0.html#RequestParameters.\n */\nexport type AuthorizationParams = {\n    state: string;\n    scope: string;\n    redirectUri: string;\n    codeVerifier: string;\n    nonce: string;\n};\n\n/**\n * @experimental\n * Generate the scope used in authorization request with OIDC OP\n * @returns scope\n */\nexport const generateScope = (deviceId?: string): string => {\n    const safeDeviceId = deviceId ?? secureRandomString(10);\n    return `openid urn:matrix:org.matrix.msc2967.client:api:* urn:matrix:org.matrix.msc2967.client:device:${safeDeviceId}`;\n};\n\n// https://www.rfc-editor.org/rfc/rfc7636\nconst generateCodeChallenge = async (codeVerifier: string): Promise<string> => {\n    if (!globalThis.crypto.subtle) {\n        // @TODO(kerrya) should this be allowed? configurable?\n        logger.warn(\"A secure context is required to generate code challenge. Using plain text code challenge\");\n        return codeVerifier;\n    }\n\n    const hashBuffer = await sha256(codeVerifier);\n    return encodeUnpaddedBase64Url(hashBuffer);\n};\n\n/**\n * Generate authorization params to pass to {@link generateAuthorizationUrl}.\n *\n * Used as part of an authorization code OIDC flow: see https://openid.net/specs/openid-connect-basic-1_0.html#CodeFlow.\n *\n * @param redirectUri - absolute url for OP to redirect to after authorization\n * @returns AuthorizationParams\n */\nexport const generateAuthorizationParams = ({ redirectUri }: { redirectUri: string }): AuthorizationParams => ({\n    scope: generateScope(),\n    redirectUri,\n    state: secureRandomString(8),\n    nonce: secureRandomString(8),\n    codeVerifier: secureRandomString(64), // https://tools.ietf.org/html/rfc7636#section-4.1 length needs to be 43-128 characters\n});\n\n/**\n * @deprecated use generateOidcAuthorizationUrl\n * Generate a URL to attempt authorization with the OP\n * See https://openid.net/specs/openid-connect-basic-1_0.html#CodeRequest\n * @param authorizationUrl - endpoint to attempt authorization with the OP\n * @param clientId - id of this client as registered with the OP\n * @param authorizationParams - params to be used in the url\n * @returns a Promise with the url as a string\n */\nexport const generateAuthorizationUrl = async (\n    authorizationUrl: string,\n    clientId: string,\n    { scope, redirectUri, state, nonce, codeVerifier }: AuthorizationParams,\n): Promise<string> => {\n    const url = new URL(authorizationUrl);\n    url.searchParams.append(\"response_mode\", \"query\");\n    url.searchParams.append(\"response_type\", \"code\");\n    url.searchParams.append(\"redirect_uri\", redirectUri);\n    url.searchParams.append(\"client_id\", clientId);\n    url.searchParams.append(\"state\", state);\n    url.searchParams.append(\"scope\", scope);\n    url.searchParams.append(\"nonce\", nonce);\n\n    url.searchParams.append(\"code_challenge_method\", \"S256\");\n    url.searchParams.append(\"code_challenge\", await generateCodeChallenge(codeVerifier));\n\n    return url.toString();\n};\n\n/**\n * @experimental\n * Generate a URL to attempt authorization with the OP\n * See https://openid.net/specs/openid-connect-basic-1_0.html#CodeRequest\n * @param metadata - validated metadata from OP discovery\n * @param clientId - this client's id as registered with the OP\n * @param homeserverUrl - used to establish the session on return from the OP\n * @param identityServerUrl - used to establish the session on return from the OP\n * @param nonce - state\n * @param prompt - indicates to the OP which flow the user should see - eg login or registration\n *          See https://openid.net/specs/openid-connect-prompt-create-1_0.html#name-prompt-parameter\n * @param urlState - value to append to the opaque state identifier to uniquely identify the callback\n * @param loginHint - value to send as the `login_hint` to the OP, giving a hint about the login identifier the user might use to log in.\n *          See {@link https://openid.net/specs/openid-connect-core-1_0.html#AuthRequest OIDC core 3.1.2.1}.\n * @returns a Promise with the url as a string\n */\nexport const generateOidcAuthorizationUrl = async ({\n    metadata,\n    redirectUri,\n    clientId,\n    homeserverUrl,\n    identityServerUrl,\n    nonce,\n    prompt,\n    urlState,\n    loginHint,\n}: {\n    clientId: string;\n    metadata: ValidatedAuthMetadata;\n    homeserverUrl: string;\n    identityServerUrl?: string;\n    redirectUri: string;\n    nonce: string;\n    prompt?: string;\n    urlState?: string;\n    loginHint?: string;\n}): Promise<string> => {\n    const scope = generateScope();\n    const oidcClient = new OidcClient({\n        ...metadata,\n        client_id: clientId,\n        redirect_uri: redirectUri,\n        authority: metadata.issuer,\n        response_mode: \"query\",\n        response_type: \"code\",\n        scope,\n        stateStore: new WebStorageStateStore({ prefix: \"mx_oidc_\", store: window.sessionStorage }),\n    });\n    const userState: UserState = { homeserverUrl, nonce, identityServerUrl };\n    const request = await oidcClient.createSigninRequest({\n        state: userState,\n        nonce,\n        prompt,\n        url_state: urlState,\n        login_hint: loginHint,\n    });\n\n    return request.url;\n};\n\n/**\n * Normalize token_type to use capital case to make consuming the token response easier\n * token_type is case insensitive, and it is spec-compliant for OPs to return token_type: \"bearer\"\n * Later, when used in auth headers it is case sensitive and must be Bearer\n * See: https://datatracker.ietf.org/doc/html/rfc6749#section-4.1.4\n *\n * @param response - validated token response\n * @returns response with token_type set to 'Bearer'\n */\nconst normalizeBearerTokenResponseTokenType = (response: SigninResponse): BearerTokenResponse =>\n    ({\n        id_token: response.id_token,\n        scope: response.scope,\n        expires_at: response.expires_at,\n        refresh_token: response.refresh_token,\n        access_token: response.access_token,\n        token_type: \"Bearer\",\n    }) as BearerTokenResponse;\n\n/**\n * @experimental\n * Attempt to exchange authorization code for bearer token.\n *\n * Takes the authorization code returned by the OpenID Provider via the authorization URL, and makes a\n * request to the Token Endpoint, to obtain the access token, refresh token, etc.\n *\n * @param code - authorization code as returned by OP during authorization\n * @param storedAuthorizationParams - stored params from start of oidc login flow\n * @returns valid bearer token response\n * @throws An `Error` with `message` set to an entry in {@link OidcError},\n *      when the request fails, or the returned token response is invalid.\n */\nexport const completeAuthorizationCodeGrant = async (\n    code: string,\n    state: string,\n): Promise<{\n    oidcClientSettings: { clientId: string; issuer: string };\n    tokenResponse: BearerTokenResponse;\n    homeserverUrl: string;\n    idTokenClaims: IdTokenClaims;\n    identityServerUrl?: string;\n}> => {\n    /**\n     * Element Web strips and changes the url on starting the app\n     * Use the code and state from query params to rebuild a url\n     * so that oidc-client can parse it\n     */\n    const reconstructedUrl = new URL(window.location.origin);\n    reconstructedUrl.searchParams.append(\"code\", code);\n    reconstructedUrl.searchParams.append(\"state\", state);\n\n    // set oidc-client to use our logger\n    Log.setLogger(logger);\n    try {\n        const response = new SigninResponse(reconstructedUrl.searchParams);\n\n        const stateStore = new WebStorageStateStore({ prefix: \"mx_oidc_\", store: window.sessionStorage });\n\n        // retrieve the state we put in storage at the start of oidc auth flow\n        const stateString = await stateStore.get(response.state!);\n        if (!stateString) {\n            throw new Error(OidcError.MissingOrInvalidStoredState);\n        }\n\n        // hydrate the sign in state and create a client\n        // the stored sign in state includes oidc configuration we set at the start of the oidc login flow\n        const signInState = await SigninState.fromStorageString(stateString);\n        const client = new OidcClient({ ...signInState, stateStore });\n\n        // validate the code and state, and attempt to swap the code for tokens\n        const signinResponse = await client.processSigninResponse(reconstructedUrl.href);\n\n        // extra values we stored at the start of the login flow\n        // used to complete login in the client\n        const userState = signinResponse.userState;\n        validateStoredUserState(userState);\n\n        // throws when response is invalid\n        validateBearerTokenResponse(signinResponse);\n        // throws when token is invalid\n        validateIdToken(signinResponse.id_token, client.settings.authority, client.settings.client_id, userState.nonce);\n        const normalizedTokenResponse = normalizeBearerTokenResponseTokenType(signinResponse);\n\n        return {\n            oidcClientSettings: {\n                clientId: client.settings.client_id,\n                issuer: client.settings.authority,\n            },\n            tokenResponse: normalizedTokenResponse,\n            homeserverUrl: userState.homeserverUrl,\n            identityServerUrl: userState.identityServerUrl,\n            idTokenClaims: signinResponse.profile,\n        };\n    } catch (error) {\n        logger.error(\"Oidc login failed\", error);\n        const errorType = (error as Error).message;\n\n        // rethrow errors that we recognise\n        if (Object.values(OidcError).includes(errorType as any)) {\n            throw error;\n        }\n        throw new Error(OidcError.CodeExchangeFailed);\n    }\n};\n"],"mappings":";;;;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA,SAA6BA,GAAG,EAAEC,UAAU,EAAEC,cAAc,EAAEC,WAAW,EAAEC,oBAAoB,QAAQ,gBAAgB;AAEvH,SAASC,MAAM,QAAQ,cAAc;AACrC,SAASC,kBAAkB,QAAQ,oBAAoB;AACvD,SAASC,SAAS,QAAQ,YAAY;AACtC,SAGIC,2BAA2B,EAE3BC,eAAe,EACfC,uBAAuB,QACpB,eAAe;AACtB,SAASC,MAAM,QAAQ,cAAc;AACrC,SAASC,uBAAuB,QAAQ,cAAc;;AAEtD;;AAGA;AACA;AACA;AACA;AACA;;AASA;AACA;AACA;AACA;AACA;AACA,OAAO,IAAMC,aAAa,GAAIC,QAAiB,IAAa;EACxD,IAAMC,YAAY,GAAGD,QAAQ,aAARA,QAAQ,cAARA,QAAQ,GAAIR,kBAAkB,CAAC,EAAE,CAAC;EACvD,wGAAAU,MAAA,CAAwGD,YAAY;AACxH,CAAC;;AAED;AACA,IAAME,qBAAqB;EAAA,IAAAC,IAAA,GAAAC,iBAAA,CAAG,WAAOC,YAAoB,EAAsB;IAC3E,IAAI,CAACC,UAAU,CAACC,MAAM,CAACC,MAAM,EAAE;MAC3B;MACAlB,MAAM,CAACmB,IAAI,CAAC,0FAA0F,CAAC;MACvG,OAAOJ,YAAY;IACvB;IAEA,IAAMK,UAAU,SAASd,MAAM,CAACS,YAAY,CAAC;IAC7C,OAAOR,uBAAuB,CAACa,UAAU,CAAC;EAC9C,CAAC;EAAA,gBATKR,qBAAqBA,CAAAS,EAAA;IAAA,OAAAR,IAAA,CAAAS,KAAA,OAAAC,SAAA;EAAA;AAAA,GAS1B;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,IAAMC,2BAA2B,GAAGC,KAAA;EAAA,IAAC;IAAEC;EAAqC,CAAC,GAAAD,KAAA;EAAA,OAA2B;IAC3GE,KAAK,EAAEnB,aAAa,CAAC,CAAC;IACtBkB,WAAW;IACXE,KAAK,EAAE3B,kBAAkB,CAAC,CAAC,CAAC;IAC5B4B,KAAK,EAAE5B,kBAAkB,CAAC,CAAC,CAAC;IAC5Bc,YAAY,EAAEd,kBAAkB,CAAC,EAAE,CAAC,CAAE;EAC1C,CAAC;AAAA,CAAC;;AAEF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,IAAM6B,wBAAwB;EAAA,IAAAC,KAAA,GAAAjB,iBAAA,CAAG,WACpCkB,gBAAwB,EACxBC,QAAgB,EAAAC,KAAA,EAEE;IAAA,IADlB;MAAEP,KAAK;MAAED,WAAW;MAAEE,KAAK;MAAEC,KAAK;MAAEd;IAAkC,CAAC,GAAAmB,KAAA;IAEvE,IAAMC,GAAG,GAAG,IAAIC,GAAG,CAACJ,gBAAgB,CAAC;IACrCG,GAAG,CAACE,YAAY,CAACC,MAAM,CAAC,eAAe,EAAE,OAAO,CAAC;IACjDH,GAAG,CAACE,YAAY,CAACC,MAAM,CAAC,eAAe,EAAE,MAAM,CAAC;IAChDH,GAAG,CAACE,YAAY,CAACC,MAAM,CAAC,cAAc,EAAEZ,WAAW,CAAC;IACpDS,GAAG,CAACE,YAAY,CAACC,MAAM,CAAC,WAAW,EAAEL,QAAQ,CAAC;IAC9CE,GAAG,CAACE,YAAY,CAACC,MAAM,CAAC,OAAO,EAAEV,KAAK,CAAC;IACvCO,GAAG,CAACE,YAAY,CAACC,MAAM,CAAC,OAAO,EAAEX,KAAK,CAAC;IACvCQ,GAAG,CAACE,YAAY,CAACC,MAAM,CAAC,OAAO,EAAET,KAAK,CAAC;IAEvCM,GAAG,CAACE,YAAY,CAACC,MAAM,CAAC,uBAAuB,EAAE,MAAM,CAAC;IACxDH,GAAG,CAACE,YAAY,CAACC,MAAM,CAAC,gBAAgB,QAAQ1B,qBAAqB,CAACG,YAAY,CAAC,CAAC;IAEpF,OAAOoB,GAAG,CAACI,QAAQ,CAAC,CAAC;EACzB,CAAC;EAAA,gBAlBYT,wBAAwBA,CAAAU,GAAA,EAAAC,GAAA,EAAAC,GAAA;IAAA,OAAAX,KAAA,CAAAT,KAAA,OAAAC,SAAA;EAAA;AAAA,GAkBpC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,IAAMoB,4BAA4B;EAAA,IAAAC,KAAA,GAAA9B,iBAAA,CAAG,WAAA+B,KAAA,EAoBrB;IAAA,IApB4B;MAC/CC,QAAQ;MACRpB,WAAW;MACXO,QAAQ;MACRc,aAAa;MACbC,iBAAiB;MACjBnB,KAAK;MACLoB,MAAM;MACNC,QAAQ;MACRC;IAWJ,CAAC,GAAAN,KAAA;IACG,IAAMlB,KAAK,GAAGnB,aAAa,CAAC,CAAC;IAC7B,IAAM4C,UAAU,GAAG,IAAIxD,UAAU,CAAAyD,aAAA,CAAAA,aAAA,KAC1BP,QAAQ;MACXQ,SAAS,EAAErB,QAAQ;MACnBsB,YAAY,EAAE7B,WAAW;MACzB8B,SAAS,EAAEV,QAAQ,CAACW,MAAM;MAC1BC,aAAa,EAAE,OAAO;MACtBC,aAAa,EAAE,MAAM;MACrBhC,KAAK;MACLiC,UAAU,EAAE,IAAI7D,oBAAoB,CAAC;QAAE8D,MAAM,EAAE,UAAU;QAAEC,KAAK,EAAEC,MAAM,CAACC;MAAe,CAAC;IAAC,EAC7F,CAAC;IACF,IAAMC,SAAoB,GAAG;MAAElB,aAAa;MAAElB,KAAK;MAAEmB;IAAkB,CAAC;IACxE,IAAMkB,OAAO,SAASd,UAAU,CAACe,mBAAmB,CAAC;MACjDvC,KAAK,EAAEqC,SAAS;MAChBpC,KAAK;MACLoB,MAAM;MACNmB,SAAS,EAAElB,QAAQ;MACnBmB,UAAU,EAAElB;IAChB,CAAC,CAAC;IAEF,OAAOe,OAAO,CAAC/B,GAAG;EACtB,CAAC;EAAA,gBA1CYQ,4BAA4BA,CAAA2B,GAAA;IAAA,OAAA1B,KAAA,CAAAtB,KAAA,OAAAC,SAAA;EAAA;AAAA,GA0CxC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,IAAMgD,qCAAqC,GAAIC,QAAwB,KAClE;EACGC,QAAQ,EAAED,QAAQ,CAACC,QAAQ;EAC3B9C,KAAK,EAAE6C,QAAQ,CAAC7C,KAAK;EACrB+C,UAAU,EAAEF,QAAQ,CAACE,UAAU;EAC/BC,aAAa,EAAEH,QAAQ,CAACG,aAAa;EACrCC,YAAY,EAAEJ,QAAQ,CAACI,YAAY;EACnCC,UAAU,EAAE;AAChB,CAAC,CAAwB;;AAE7B;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,IAAMC,8BAA8B;EAAA,IAAAC,KAAA,GAAAjE,iBAAA,CAAG,WAC1CkE,IAAY,EACZpD,KAAa,EAOX;IACF;AACJ;AACA;AACA;AACA;IACI,IAAMqD,gBAAgB,GAAG,IAAI7C,GAAG,CAAC2B,MAAM,CAACmB,QAAQ,CAACC,MAAM,CAAC;IACxDF,gBAAgB,CAAC5C,YAAY,CAACC,MAAM,CAAC,MAAM,EAAE0C,IAAI,CAAC;IAClDC,gBAAgB,CAAC5C,YAAY,CAACC,MAAM,CAAC,OAAO,EAAEV,KAAK,CAAC;;IAEpD;IACAjC,GAAG,CAACyF,SAAS,CAACpF,MAAM,CAAC;IACrB,IAAI;MACA,IAAMwE,QAAQ,GAAG,IAAI3E,cAAc,CAACoF,gBAAgB,CAAC5C,YAAY,CAAC;MAElE,IAAMuB,UAAU,GAAG,IAAI7D,oBAAoB,CAAC;QAAE8D,MAAM,EAAE,UAAU;QAAEC,KAAK,EAAEC,MAAM,CAACC;MAAe,CAAC,CAAC;;MAEjG;MACA,IAAMqB,WAAW,SAASzB,UAAU,CAAC0B,GAAG,CAACd,QAAQ,CAAC5C,KAAM,CAAC;MACzD,IAAI,CAACyD,WAAW,EAAE;QACd,MAAM,IAAIE,KAAK,CAACrF,SAAS,CAACsF,2BAA2B,CAAC;MAC1D;;MAEA;MACA;MACA,IAAMC,WAAW,SAAS3F,WAAW,CAAC4F,iBAAiB,CAACL,WAAW,CAAC;MACpE,IAAMM,MAAM,GAAG,IAAI/F,UAAU,CAAAyD,aAAA,CAAAA,aAAA,KAAMoC,WAAW;QAAE7B;MAAU,EAAE,CAAC;;MAE7D;MACA,IAAMgC,cAAc,SAASD,MAAM,CAACE,qBAAqB,CAACZ,gBAAgB,CAACa,IAAI,CAAC;;MAEhF;MACA;MACA,IAAM7B,SAAS,GAAG2B,cAAc,CAAC3B,SAAS;MAC1C5D,uBAAuB,CAAC4D,SAAS,CAAC;;MAElC;MACA9D,2BAA2B,CAACyF,cAAc,CAAC;MAC3C;MACAxF,eAAe,CAACwF,cAAc,CAACnB,QAAQ,EAAEkB,MAAM,CAACI,QAAQ,CAACvC,SAAS,EAAEmC,MAAM,CAACI,QAAQ,CAACzC,SAAS,EAAEW,SAAS,CAACpC,KAAK,CAAC;MAC/G,IAAMmE,uBAAuB,GAAGzB,qCAAqC,CAACqB,cAAc,CAAC;MAErF,OAAO;QACHK,kBAAkB,EAAE;UAChBhE,QAAQ,EAAE0D,MAAM,CAACI,QAAQ,CAACzC,SAAS;UACnCG,MAAM,EAAEkC,MAAM,CAACI,QAAQ,CAACvC;QAC5B,CAAC;QACD0C,aAAa,EAAEF,uBAAuB;QACtCjD,aAAa,EAAEkB,SAAS,CAAClB,aAAa;QACtCC,iBAAiB,EAAEiB,SAAS,CAACjB,iBAAiB;QAC9CmD,aAAa,EAAEP,cAAc,CAACQ;MAClC,CAAC;IACL,CAAC,CAAC,OAAOC,KAAK,EAAE;MACZrG,MAAM,CAACqG,KAAK,CAAC,mBAAmB,EAAEA,KAAK,CAAC;MACxC,IAAMC,SAAS,GAAID,KAAK,CAAWE,OAAO;;MAE1C;MACA,IAAIC,MAAM,CAACC,MAAM,CAACvG,SAAS,CAAC,CAACwG,QAAQ,CAACJ,SAAgB,CAAC,EAAE;QACrD,MAAMD,KAAK;MACf;MACA,MAAM,IAAId,KAAK,CAACrF,SAAS,CAACyG,kBAAkB,CAAC;IACjD;EACJ,CAAC;EAAA,gBAvEY7B,8BAA8BA,CAAA8B,GAAA,EAAAC,GAAA;IAAA,OAAA9B,KAAA,CAAAzD,KAAA,OAAAC,SAAA;EAAA;AAAA,GAuE1C","ignoreList":[]}

package/lib/oidc/error.js

@@ -1,22 +1,22 @@
-/*
-Copyright 2023 The Matrix.org Foundation C.I.C.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-    http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
+/*
+Copyright 2023 The Matrix.org Foundation C.I.C.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
 */
 
-/**
- * Errors expected to be encountered during OIDC discovery, client registration, and authentication.
- * Not intended to be displayed directly to the user.
+/**
+ * Errors expected to be encountered during OIDC discovery, client registration, and authentication.
+ * Not intended to be displayed directly to the user.
  */
 export var OidcError = /*#__PURE__*/function (OidcError) {
   OidcError["NotSupported"] = "OIDC authentication not supported";

package/lib/oidc/error.js.map

@@ -1 +1 @@
-{"version":3,"file":"error.js","names":["OidcError"],"sources":["../../src/oidc/error.ts"],"sourcesContent":["/*\r\nCopyright 2023 The Matrix.org Foundation C.I.C.\r\n\r\nLicensed under the Apache License, Version 2.0 (the \"License\");\r\nyou may not use this file except in compliance with the License.\r\nYou may obtain a copy of the License at\r\n\r\n    http://www.apache.org/licenses/LICENSE-2.0\r\n\r\nUnless required by applicable law or agreed to in writing, software\r\ndistributed under the License is distributed on an \"AS IS\" BASIS,\r\nWITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\r\nSee the License for the specific language governing permissions and\r\nlimitations under the License.\r\n*/\r\n\r\n/**\r\n * Errors expected to be encountered during OIDC discovery, client registration, and authentication.\r\n * Not intended to be displayed directly to the user.\r\n */\r\nexport enum OidcError {\r\n    NotSupported = \"OIDC authentication not supported\",\r\n    Misconfigured = \"OIDC is misconfigured\",\r\n    General = \"Something went wrong with OIDC discovery\",\r\n    OpSupport = \"Configured OIDC OP does not support required functions\",\r\n    DynamicRegistrationNotSupported = \"Dynamic registration not supported\",\r\n    DynamicRegistrationFailed = \"Dynamic registration failed\",\r\n    DynamicRegistrationInvalid = \"Dynamic registration invalid response\",\r\n    CodeExchangeFailed = \"Failed to exchange code for token\",\r\n    InvalidBearerTokenResponse = \"Invalid bearer token response\",\r\n    InvalidIdToken = \"Invalid ID token\",\r\n    MissingOrInvalidStoredState = \"State required to finish logging in is not found in storage.\",\r\n}\r\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA;AACA;AACA;AACA,WAAYA,SAAS,0BAATA,SAAS;EAATA,SAAS;EAATA,SAAS;EAATA,SAAS;EAATA,SAAS;EAATA,SAAS;EAATA,SAAS;EAATA,SAAS;EAATA,SAAS;EAATA,SAAS;EAATA,SAAS;EAATA,SAAS;EAAA,OAATA,SAAS;AAAA","ignoreList":[]}
+{"version":3,"file":"error.js","names":["OidcError"],"sources":["../../src/oidc/error.ts"],"sourcesContent":["/*\nCopyright 2023 The Matrix.org Foundation C.I.C.\n\nLicensed under the Apache License, Version 2.0 (the \"License\");\nyou may not use this file except in compliance with the License.\nYou may obtain a copy of the License at\n\n    http://www.apache.org/licenses/LICENSE-2.0\n\nUnless required by applicable law or agreed to in writing, software\ndistributed under the License is distributed on an \"AS IS\" BASIS,\nWITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\nSee the License for the specific language governing permissions and\nlimitations under the License.\n*/\n\n/**\n * Errors expected to be encountered during OIDC discovery, client registration, and authentication.\n * Not intended to be displayed directly to the user.\n */\nexport enum OidcError {\n    NotSupported = \"OIDC authentication not supported\",\n    Misconfigured = \"OIDC is misconfigured\",\n    General = \"Something went wrong with OIDC discovery\",\n    OpSupport = \"Configured OIDC OP does not support required functions\",\n    DynamicRegistrationNotSupported = \"Dynamic registration not supported\",\n    DynamicRegistrationFailed = \"Dynamic registration failed\",\n    DynamicRegistrationInvalid = \"Dynamic registration invalid response\",\n    CodeExchangeFailed = \"Failed to exchange code for token\",\n    InvalidBearerTokenResponse = \"Invalid bearer token response\",\n    InvalidIdToken = \"Invalid ID token\",\n    MissingOrInvalidStoredState = \"State required to finish logging in is not found in storage.\",\n}\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA;AACA;AACA;AACA,WAAYA,SAAS,0BAATA,SAAS;EAATA,SAAS;EAATA,SAAS;EAATA,SAAS;EAATA,SAAS;EAATA,SAAS;EAATA,SAAS;EAATA,SAAS;EAATA,SAAS;EAATA,SAAS;EAATA,SAAS;EAATA,SAAS;EAAA,OAATA,SAAS;AAAA","ignoreList":[]}

package/lib/oidc/index.js

@@ -1,17 +1,17 @@
-/*
-Copyright 2023 The Matrix.org Foundation C.I.C.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-    http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
+/*
+Copyright 2023 The Matrix.org Foundation C.I.C.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
 */
 
 export * from "./authorize.js";
@@ -21,9 +21,9 @@ export * from "./register.js";
 export * from "./tokenRefresher.js";
 export * from "./validate.js";
 
-/**
- * Validated config for native OIDC authentication, as returned by {@link discoverAndValidateOIDCIssuerWellKnown}.
- * Contains metadata and signing keys from the issuer's well-known (https://oidc-issuer.example.com/.well-known/openid-configuration).
+/**
+ * Validated config for native OIDC authentication, as returned by {@link discoverAndValidateOIDCIssuerWellKnown}.
+ * Contains metadata and signing keys from the issuer's well-known (https://oidc-issuer.example.com/.well-known/openid-configuration).
  */
 export {};
 //# sourceMappingURL=index.js.map

package/lib/oidc/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":[],"sources":["../../src/oidc/index.ts"],"sourcesContent":["/*\r\nCopyright 2023 The Matrix.org Foundation C.I.C.\r\n\r\nLicensed under the Apache License, Version 2.0 (the \"License\");\r\nyou may not use this file except in compliance with the License.\r\nYou may obtain a copy of the License at\r\n\r\n    http://www.apache.org/licenses/LICENSE-2.0\r\n\r\nUnless required by applicable law or agreed to in writing, software\r\ndistributed under the License is distributed on an \"AS IS\" BASIS,\r\nWITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\r\nSee the License for the specific language governing permissions and\r\nlimitations under the License.\r\n*/\r\n\r\nimport type { SigningKey } from \"oidc-client-ts\";\r\nimport { type ValidatedAuthMetadata } from \"./validate.ts\";\r\n\r\nexport * from \"./authorize.ts\";\r\nexport * from \"./discovery.ts\";\r\nexport * from \"./error.ts\";\r\nexport * from \"./register.ts\";\r\nexport * from \"./tokenRefresher.ts\";\r\nexport * from \"./validate.ts\";\r\n\r\n/**\r\n * Validated config for native OIDC authentication, as returned by {@link discoverAndValidateOIDCIssuerWellKnown}.\r\n * Contains metadata and signing keys from the issuer's well-known (https://oidc-issuer.example.com/.well-known/openid-configuration).\r\n */\r\nexport interface OidcClientConfig extends ValidatedAuthMetadata {\r\n    signingKeys: SigningKey[] | null;\r\n}\r\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAKA,cAAc,gBAAgB;AAC9B,cAAc,gBAAgB;AAC9B,cAAc,YAAY;AAC1B,cAAc,eAAe;AAC7B,cAAc,qBAAqB;AACnC,cAAc,eAAe;;AAE7B;AACA;AACA;AACA;AAHA","ignoreList":[]}
+{"version":3,"file":"index.js","names":[],"sources":["../../src/oidc/index.ts"],"sourcesContent":["/*\nCopyright 2023 The Matrix.org Foundation C.I.C.\n\nLicensed under the Apache License, Version 2.0 (the \"License\");\nyou may not use this file except in compliance with the License.\nYou may obtain a copy of the License at\n\n    http://www.apache.org/licenses/LICENSE-2.0\n\nUnless required by applicable law or agreed to in writing, software\ndistributed under the License is distributed on an \"AS IS\" BASIS,\nWITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\nSee the License for the specific language governing permissions and\nlimitations under the License.\n*/\n\nimport type { SigningKey } from \"oidc-client-ts\";\nimport { type ValidatedAuthMetadata } from \"./validate.ts\";\n\nexport * from \"./authorize.ts\";\nexport * from \"./discovery.ts\";\nexport * from \"./error.ts\";\nexport * from \"./register.ts\";\nexport * from \"./tokenRefresher.ts\";\nexport * from \"./validate.ts\";\n\n/**\n * Validated config for native OIDC authentication, as returned by {@link discoverAndValidateOIDCIssuerWellKnown}.\n * Contains metadata and signing keys from the issuer's well-known (https://oidc-issuer.example.com/.well-known/openid-configuration).\n */\nexport interface OidcClientConfig extends ValidatedAuthMetadata {\n    signingKeys: SigningKey[] | null;\n}\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAKA,cAAc,gBAAgB;AAC9B,cAAc,gBAAgB;AAC9B,cAAc,YAAY;AAC1B,cAAc,eAAe;AAC7B,cAAc,qBAAqB;AACnC,cAAc,eAAe;;AAE7B;AACA;AACA;AACA;AAHA","ignoreList":[]}

package/lib/oidc/register.js

@@ -1,59 +1,59 @@
 import _asyncToGenerator from "@babel/runtime/helpers/asyncToGenerator";
-/*
-Copyright 2023 The Matrix.org Foundation C.I.C.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-    http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
+/*
+Copyright 2023 The Matrix.org Foundation C.I.C.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
 */
 
 import { OidcError } from "./error.js";
 import { Method } from "../http-api/index.js";
 import { logger } from "../logger.js";
 
-/**
- * Client metadata passed to registration endpoint
+/**
+ * Client metadata passed to registration endpoint
  */
 
-/**
- * Request body for dynamic registration as defined by https://github.com/matrix-org/matrix-spec-proposals/pull/2966
+/**
+ * Request body for dynamic registration as defined by https://github.com/matrix-org/matrix-spec-proposals/pull/2966
  */
 
-/**
- * The OAuth 2.0 grant types that are defined for Matrix in https://spec.matrix.org/v1.17/client-server-api/#grant-types
+/**
+ * The OAuth 2.0 grant types that are defined for Matrix in https://spec.matrix.org/v1.17/client-server-api/#grant-types
  */
 export var OAuthGrantType = /*#__PURE__*/function (OAuthGrantType) {
-  /**
-   * See https://spec.matrix.org/v1.17/client-server-api/#authorization-code-grant
+  /**
+   * See https://spec.matrix.org/v1.17/client-server-api/#authorization-code-grant
    */
   OAuthGrantType["AuthorizationCode"] = "authorization_code";
-  /**
-   * https://spec.matrix.org/v1.17/client-server-api/#refresh-token-grant
+  /**
+   * https://spec.matrix.org/v1.17/client-server-api/#refresh-token-grant
    */
   OAuthGrantType["RefreshToken"] = "refresh_token";
-  /**
-   * The OAuth 2.0 Device Authorization Grant type identifier as per
-   * https://www.rfc-editor.org/rfc/rfc8628.html#section-7.2 from
-   * [MSC4341](https://github.com/matrix-org/matrix-spec-proposals/pull/4341).
-   *
-   * @experimental Note that this is UNSTABLE and may have breaking changes without notice.
+  /**
+   * The OAuth 2.0 Device Authorization Grant type identifier as per
+   * https://www.rfc-editor.org/rfc/rfc8628.html#section-7.2 from
+   * [MSC4341](https://github.com/matrix-org/matrix-spec-proposals/pull/4341).
+   *
+   * @experimental Note that this is UNSTABLE and may have breaking changes without notice.
    */
   OAuthGrantType["DeviceAuthorization"] = "urn:ietf:params:oauth:grant-type:device_code";
   return OAuthGrantType;
 }({});
 
-/**
- * The name "scope" is a misnomer here as it is actually a "grant type".
- *
- * @deprecated use `OAuthGrantType.DeviceAuthorization` instead
+/**
+ * The name "scope" is a misnomer here as it is actually a "grant type".
+ *
+ * @deprecated use `OAuthGrantType.DeviceAuthorization` instead
  */
 export var DEVICE_CODE_SCOPE = OAuthGrantType.DeviceAuthorization;
 
@@ -66,13 +66,13 @@ var urlHasCommonBase = (base, urlStr) => {
   return true;
 };
 
-/**
- * Attempts dynamic registration against the configured registration endpoint.
- * Will ignore any URIs that do not use client_uri as a common base as per the spec.
- * @param delegatedAuthConfig - Auth config from {@link discoverAndValidateOIDCIssuerWellKnown}
- * @param clientMetadata - The metadata for the client which to register
- * @returns Promise<string> resolved with registered clientId
- * @throws when registration is not supported, on failed request or invalid response
+/**
+ * Attempts dynamic registration against the configured registration endpoint.
+ * Will ignore any URIs that do not use client_uri as a common base as per the spec.
+ * @param delegatedAuthConfig - Auth config from {@link discoverAndValidateOIDCIssuerWellKnown}
+ * @param clientMetadata - The metadata for the client which to register
+ * @returns Promise<string> resolved with registered clientId
+ * @throws when registration is not supported, on failed request or invalid response
  */
 export var registerOidcClient = /*#__PURE__*/function () {
   var _ref = _asyncToGenerator(function* (delegatedAuthConfig, clientMetadata) {