@thunderid/javascript 0.0.1

package/dist/models/store.d.ts

@@ -0,0 +1,84 @@
+/**
+ * Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).
+ *
+ * WSO2 LLC. licenses this file to you under the Apache License,
+ * Version 2.0 (the "License"); you may not use this file except
+ * in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ * KIND, either express or implied. See the License for the
+ * specific language governing permissions and limitations
+ * under the License.
+ */
+import { OIDCEndpoints } from './oidc-endpoints';
+/**
+ * Interface representing a key-value storage mechanism.
+ * Implementations can include various storage backends like browser storage,
+ * memory cache, or distributed caches like Redis or Memcached.
+ */
+export interface Storage {
+    /**
+     * Retrieves a value by its key.
+     *
+     * @param key - The key of the value to retrieve
+     * @returns A promise that resolves with the stored value
+     * @throws Error if the key doesn't exist or retrieval fails
+     */
+    getData(key: string): Promise<string>;
+    /**
+     * Removes a value from the store.
+     *
+     * @param key - The key of the value to remove
+     * @returns A promise that resolves when the value is successfully removed
+     * @throws Error if removal fails or the key doesn't exist
+     */
+    removeData(key: string): Promise<void>;
+    /**
+     * Stores a value with the specified key.
+     *
+     * @param key - The unique identifier for the stored value
+     * @param value - The string value to store
+     * @returns A promise that resolves when the value is successfully stored
+     * @throws Error if storage operation fails
+     */
+    setData(key: string, value: string): Promise<void>;
+}
+/**
+ * Represents the possible value types that can be stored in the temporary data storage.
+ */
+export type TemporaryStoreValue = string | string[] | boolean | number | OIDCEndpoints;
+/**
+ * Represents a key-value store for temporary data storage.
+ */
+export type TemporaryStore = Record<string, TemporaryStoreValue>;
+/**
+ * Enum representing different types of data stores used in the application.
+ */
+export declare enum Stores {
+    /**
+     * Store for configuration data that defines the application's behavior and settings.
+     */
+    ConfigData = "config_data",
+    /**
+     * Store for OpenID Connect provider metadata, including endpoints and configuration.
+     */
+    OIDCProviderMetaData = "oidc_provider_meta_data",
+    /**
+     * Store for persisted data that needs to be retained across sessions and application restarts.
+     */
+    PersistedData = "persisted_data",
+    /**
+     * Store for user session-related data like tokens and authentication state.
+     */
+    SessionData = "session_data",
+    /**
+     * Store for temporary data that needs to persist only for a short duration.
+     */
+    TemporaryData = "temporary_data"
+}
+//# sourceMappingURL=store.d.ts.map

package/dist/models/store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/models/store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAC,aAAa,EAAC,MAAM,kBAAkB,CAAC;AAE/C;;;;GAIG;AACH,MAAM,WAAW,OAAO;IACtB;;;;;;OAMG;IACH,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAEtC;;;;;;OAMG;IACH,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEvC;;;;;;;OAOG;IACH,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACpD;AAED;;GAEG;AACH,MAAM,MAAM,mBAAmB,GAAG,MAAM,GAAG,MAAM,EAAE,GAAG,OAAO,GAAG,MAAM,GAAG,aAAa,CAAC;AAEvF;;GAEG;AACH,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;AAEjE;;GAEG;AACH,oBAAY,MAAM;IAChB;;OAEG;IACH,UAAU,gBAAgB;IAE1B;;OAEG;IACH,oBAAoB,4BAA4B;IAEhD;;OAEG;IACH,aAAa,mBAAmB;IAEhC;;OAEG;IACH,WAAW,iBAAiB;IAE5B;;OAEG;IACH,aAAa,mBAAmB;CACjC"}

package/dist/models/token-endpoint-auth.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).
+ *
+ * WSO2 LLC. licenses this file to you under the Apache License,
+ * Version 2.0 (the "License"); you may not use this file except
+ * in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ * KIND, either express or implied. See the License for the
+ * specific language governing permissions and limitations
+ * under the License.
+ */
+/**
+ * OAuth 2.0 client authentication method used at the token endpoint.
+ * Corresponds to the `token_endpoint_auth_method` parameter in OIDC Discovery.
+ *
+ * - `client_secret_basic` — HTTP Basic authentication: credentials are sent in the
+ *   `Authorization: Basic base64(client_id:client_secret)` header (RFC 6749 §2.3.1).
+ *   Required for ThunderIDV2 (Thunder) by default.
+ * - `client_secret_post` — Credentials are sent as `client_id` / `client_secret`
+ *   parameters in the POST body (RFC 6749 §2.3.1). Default for all other platforms.
+ * - `none` — No client authentication (public clients that have no client secret).
+ */
+export type TokenEndpointAuthMethod = 'client_secret_basic' | 'client_secret_post' | 'none';
+//# sourceMappingURL=token-endpoint-auth.d.ts.map

package/dist/models/token-endpoint-auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-endpoint-auth.d.ts","sourceRoot":"","sources":["../../src/models/token-endpoint-auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH;;;;;;;;;;GAUG;AACH,MAAM,MAAM,uBAAuB,GAAG,qBAAqB,GAAG,oBAAoB,GAAG,MAAM,CAAC"}

package/dist/models/token.d.ts

@@ -0,0 +1,181 @@
+/**
+ * Copyright (c) 2020, WSO2 LLC. (https://www.wso2.com). All Rights Reserved.
+ *
+ * WSO2 LLC. licenses this file to you under the Apache License,
+ * Version 2.0 (the "License"); you may not use this file except
+ * in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ * KIND, either express or implied. See the License for the
+ * specific language governing permissions and limitations
+ * under the License.
+ */
+/**
+ * Represents a processed token response with standardized camelCase properties.
+ * This interface provides a clean, normalized structure for token data after
+ * processing the raw response from the authentication server.
+ *
+ * The properties in this interface follow JavaScript/TypeScript naming conventions
+ * and provide a more ergonomic API for client applications.
+ */
+export interface TokenResponse {
+    /**
+     * The bearer token used for authenticating API requests.
+     * This token should be included in the Authorization header
+     * of subsequent API requests.
+     */
+    accessToken: string;
+    /**
+     * Unix timestamp (in seconds) when the token was created.
+     * Used in combination with expiresIn to determine when
+     * the token needs to be refreshed.
+     */
+    createdAt: number;
+    /**
+     * Duration in seconds until the access token expires.
+     * Applications should refresh the token before this time
+     * to maintain uninterrupted access.
+     */
+    expiresIn: string;
+    /**
+     * JSON Web Token (JWT) containing user identity information.
+     * This token can be decoded to access user claims and metadata
+     * without additional server requests.
+     */
+    idToken: string;
+    /**
+     * Token used to obtain new access tokens without re-authentication.
+     * Store this securely as it enables long-term access to the user's
+     * account through the refresh flow.
+     */
+    refreshToken: string;
+    /**
+     * Space-separated list of OAuth scopes granted to the application.
+     * These scopes determine what resources and actions the application
+     * has permission to access.
+     */
+    scope: string;
+    /**
+     * The type of token issued, typically "Bearer".
+     * This indicates how the token should be used in
+     * API request Authorization headers.
+     */
+    tokenType: string;
+}
+/**
+ * Represents the raw token response received directly from the authentication server.
+ * This interface maintains the original snake_case property names as received in
+ * the server response before processing into the standardized TokenResponse format.
+ *
+ * The properties in this interface exactly match the OAuth2/OIDC server response
+ * format before any transformation or normalization is applied.
+ */
+export interface AccessTokenApiResponse {
+    /**
+     * Raw access token string from the server.
+     * This is the bearer token in its original format
+     * before any processing or validation.
+     */
+    access_token: string;
+    /**
+     * Server-provided creation timestamp in Unix seconds.
+     * Used to track when the token was originally issued
+     * and calculate absolute expiration time.
+     */
+    created_at: number;
+    /**
+     * Raw expiration time in seconds.
+     * Indicates how long the access token will be valid
+     * from the time it was issued.
+     */
+    expires_in: string;
+    /**
+     * Raw ID token string containing encoded user information.
+     * This JWT can be decoded to access standardized claims
+     * about the authenticated user.
+     */
+    id_token: string;
+    /**
+     * Raw refresh token string from the server.
+     * Used in its original format to request new access tokens
+     * when they expire.
+     */
+    refresh_token: string;
+    /**
+     * Raw space-separated scope string defining access permissions.
+     * Lists the OAuth scopes that were granted during the
+     * authorization process.
+     */
+    scope: string;
+    /**
+     * Raw token type identifier from the server.
+     * Typically "Bearer", indicating how the token should
+     * be used in API requests.
+     */
+    token_type: string;
+}
+/**
+ * Interface for the standard (required) claims of an ID Token payload.
+ */
+export interface KnownIdToken {
+    /**
+     * The audience for which this token is intended.
+     */
+    aud: string | string[];
+    /**
+     * The email of the user.
+     */
+    email?: string;
+    /**
+     * The issuer identifier for the issuer of the response.
+     */
+    iss: string;
+    /**
+     * The unique human readable slug of the organization to which the user belongs.
+     */
+    org_handle?: string;
+    /**
+     * The unique identifier of the organization to which the user belongs.
+     */
+    org_id?: string;
+    /**
+     * The human readable name of the organization to which the user belongs.
+     */
+    org_name?: string;
+    /**
+     * The username the user prefers to be called.
+     */
+    preferred_username?: string;
+    /**
+     * The unique identifier of the user to whom the ID token belongs.
+     */
+    sub: string;
+    /**
+     * The tenant domain of the user.
+     */
+    tenant_domain?: string;
+}
+/**
+ * Interface for ID Token payload including custom claims.
+ */
+export interface IdToken extends KnownIdToken {
+    /**
+     * Other custom claims.
+     */
+    [claim: string]: any;
+}
+export interface TokenExchangeRequestConfig {
+    attachToken: boolean;
+    data: any;
+    id: string;
+    returnsSession: boolean;
+    shouldReplayAfterRefresh?: boolean;
+    signInRequired: boolean;
+    tokenEndpoint?: string;
+}
+//# sourceMappingURL=token.d.ts.map

package/dist/models/token.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token.d.ts","sourceRoot":"","sources":["../../src/models/token.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH;;;;;;;GAOG;AACH,MAAM,WAAW,aAAa;IAC5B;;;;OAIG;IACH,WAAW,EAAE,MAAM,CAAC;IAEpB;;;;OAIG;IACH,SAAS,EAAE,MAAM,CAAC;IAElB;;;;OAIG;IACH,SAAS,EAAE,MAAM,CAAC;IAElB;;;;OAIG;IACH,OAAO,EAAE,MAAM,CAAC;IAEhB;;;;OAIG;IACH,YAAY,EAAE,MAAM,CAAC;IAErB;;;;OAIG;IACH,KAAK,EAAE,MAAM,CAAC;IAEd;;;;OAIG;IACH,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,sBAAsB;IACrC;;;;OAIG;IACH,YAAY,EAAE,MAAM,CAAC;IAErB;;;;OAIG;IACH,UAAU,EAAE,MAAM,CAAC;IAEnB;;;;OAIG;IACH,UAAU,EAAE,MAAM,CAAC;IAEnB;;;;OAIG;IACH,QAAQ,EAAE,MAAM,CAAC;IAEjB;;;;OAIG;IACH,aAAa,EAAE,MAAM,CAAC;IAEtB;;;;OAIG;IACH,KAAK,EAAE,MAAM,CAAC;IAEd;;;;OAIG;IACH,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B;;OAEG;IACH,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAEvB;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf;;OAEG;IACH,GAAG,EAAE,MAAM,CAAC;IAEZ;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB;;OAEG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAE5B;;OAEG;IACH,GAAG,EAAE,MAAM,CAAC;IAEZ;;OAEG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,OAAQ,SAAQ,YAAY;IAC3C;;OAEG;IACH,CAAC,KAAK,EAAE,MAAM,GAAG,GAAG,CAAC;CACtB;AAED,MAAM,WAAW,0BAA0B;IACzC,WAAW,EAAE,OAAO,CAAC;IACrB,IAAI,EAAE,GAAG,CAAC;IACV,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,EAAE,OAAO,CAAC;IACxB,wBAAwB,CAAC,EAAE,OAAO,CAAC;IACnC,cAAc,EAAE,OAAO,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB"}

package/dist/models/user.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).
+ *
+ * WSO2 LLC. licenses this file to you under the Apache License,
+ * Version 2.0 (the "License"); you may not use this file except
+ * in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ * KIND, either express or implied. See the License for the
+ * specific language governing permissions and limitations
+ * under the License.
+ */
+import { Schema } from './scim2-schema';
+export interface KnownUser {
+    displayName?: string;
+    email?: string;
+    familyName?: string;
+    givenName?: string;
+    username?: string;
+}
+export interface User extends KnownUser {
+    [key: string]: any;
+}
+export interface UserProfile {
+    flattenedProfile: User;
+    profile: User;
+    schemas: Schema[];
+}
+//# sourceMappingURL=user.d.ts.map

package/dist/models/user.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user.d.ts","sourceRoot":"","sources":["../../src/models/user.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAC,MAAM,EAAC,MAAM,gBAAgB,CAAC;AAEtC,MAAM,WAAW,SAAS;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,IAAK,SAAQ,SAAS;IACrC,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;CACpB;AAED,MAAM,WAAW,WAAW;IAC1B,gBAAgB,EAAE,IAAI,CAAC;IACvB,OAAO,EAAE,IAAI,CAAC;IACd,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB"}

package/dist/models/utility-types.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).
+ *
+ * WSO2 LLC. licenses this file to you under the Apache License,
+ * Version 2.0 (the "License"); you may not use this file except
+ * in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ * KIND, either express or implied. See the License for the
+ * specific language governing permissions and limitations
+ * under the License.
+ */
+export type RecursivePartial<T> = {
+    [P in keyof T]?: RecursivePartial<T[P]>;
+};
+//# sourceMappingURL=utility-types.d.ts.map

package/dist/models/utility-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"utility-types.d.ts","sourceRoot":"","sources":["../../src/models/utility-types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,MAAM,MAAM,gBAAgB,CAAC,CAAC,IAAI;KAC/B,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;CACxC,CAAC"}