@tinyrack/tinyauth-server 0.4.0 → 0.5.0

package/dist/migrations/sqlite/Migration20260619075330.js

@@ -0,0 +1,57 @@
+import { Migration } from '@mikro-orm/migrations';
+export class Migration20260619075330 extends Migration {
+    up() {
+        this.addSql(`create table \`oauth_device_code\` (\`id\` text not null primary key, \`created_at\` datetime not null, \`updated_at\` datetime not null, \`device_code_hash\` text not null, \`user_code_hash\` text not null, \`client_id\` text not null, \`scope\` json not null default '[]', \`expires_at\` datetime not null, \`authorized_user_sub\` text null, \`authorized_at\` datetime null, \`consumed_at\` datetime null, constraint \`oauth_device_code_client_id_foreign\` foreign key (\`client_id\`) references \`oauth_client\` (\`id\`), constraint \`oauth_device_code_authorized_user_sub_foreign\` foreign key (\`authorized_user_sub\`) references \`user\` (\`sub\`) on delete set null) /* Issued OAuth device authorization grants */;`);
+        this.addSql(`create unique index \`oauth_device_code_device_code_hash_unique\` on \`oauth_device_code\` (\`device_code_hash\`);`);
+        this.addSql(`create unique index \`oauth_device_code_user_code_hash_unique\` on \`oauth_device_code\` (\`user_code_hash\`);`);
+        this.addSql(`create index \`oauth_device_code_client_id_index\` on \`oauth_device_code\` (\`client_id\`);`);
+        this.addSql(`create index \`oauth_device_code_authorized_user_sub_index\` on \`oauth_device_code\` (\`authorized_user_sub\`);`);
+        this.addSql(`create index \`oauth_device_code_device_hash_idx\` on \`oauth_device_code\` (\`device_code_hash\`);`);
+        this.addSql(`create index \`oauth_device_code_user_hash_idx\` on \`oauth_device_code\` (\`user_code_hash\`);`);
+        this.addSql(`create index \`oauth_device_code_expired_at_idx\` on \`oauth_device_code\` (\`expires_at\`);`);
+        this.addSql(`pragma foreign_keys = off;`);
+        this.addSql(`create table \`background_jobs__temp_alter\` (\`id\` text not null primary key, \`created_at\` datetime not null, \`updated_at\` datetime not null, \`job_id\` text not null, \`payload\` text not null, \`status\` text check (status in ('pending', 'running', 'succeeded', 'failed')) not null default 'pending', \`available_at\` datetime not null, \`locked_by\` text null, \`locked_until\` datetime null, \`attempt_count\` integer check (attempt_count >= 0) not null default 0, \`max_attempts\` integer check (max_attempts > 0) not null default 3, \`last_error\` text null, \`completed_at\` datetime null) /* Durable background job queue */;`);
+        this.addSql(`insert into \`background_jobs__temp_alter\` select \`id\`, \`created_at\`, \`updated_at\`, \`job_id\`, \`payload\`, \`status\`, \`available_at\`, \`locked_by\`, \`locked_until\`, \`attempt_count\`, \`max_attempts\`, \`last_error\`, \`completed_at\` from \`background_jobs\`;`);
+        this.addSql(`drop table \`background_jobs\`;`);
+        this.addSql(`alter table \`background_jobs__temp_alter\` rename to \`background_jobs\`;`);
+        this.addSql(`create index \`background_jobs_status_available_at_idx\` on \`background_jobs\` (\`status\`, \`available_at\`);`);
+        this.addSql(`create index \`background_jobs_locked_until_idx\` on \`background_jobs\` (\`locked_until\`);`);
+        this.addSql(`create index \`background_jobs_job_id_idx\` on \`background_jobs\` (\`job_id\`);`);
+        this.addSql(`pragma foreign_keys = on;`);
+        this.addSql(`alter table \`oauth_client\` add column \`post_logout_redirect_uris\` json not null default '[]';`);
+        this.addSql(`alter table \`oauth_client\` add column \`web_origins\` json not null default '[]';`);
+        this.addSql(`pragma foreign_keys = off;`);
+        this.addSql(`create table \`user_oauth__temp_alter\` (\`id\` integer not null primary key autoincrement, \`created_at\` datetime not null, \`updated_at\` datetime not null, \`user_sub\` text not null, \`provider_name\` text not null, \`provider_user_id\` text not null, \`access_token\` text not null, \`refresh_token\` text not null, \`expires_at\` datetime null, constraint \`user_oauth_user_sub_foreign\` foreign key (\`user_sub\`) references \`user\` (\`sub\`) on update no action on delete no action);`);
+        this.addSql(`insert into \`user_oauth__temp_alter\` select \`id\`, \`created_at\`, \`updated_at\`, \`user_sub\`, \`provider_name\`, \`provider_user_id\`, \`access_token\`, \`refresh_token\`, \`expires_at\` from \`user_oauth\`;`);
+        this.addSql(`drop table \`user_oauth\`;`);
+        this.addSql(`alter table \`user_oauth__temp_alter\` rename to \`user_oauth\`;`);
+        this.addSql(`create index \`user_oauth_user_sub_idx\` on \`user_oauth\` (\`user_sub\`);`);
+        this.addSql(`create index \`user_oauth_user_provider_idx\` on \`user_oauth\` (\`user_sub\`, \`provider_name\`);`);
+        this.addSql(`create unique index \`user_oauth_provider_unique\` on \`user_oauth\` (\`provider_name\`, \`provider_user_id\`);`);
+        this.addSql(`pragma foreign_keys = on;`);
+    }
+    down() {
+        this.addSql(`drop table if exists \`oauth_device_code\`;`);
+        this.addSql(`pragma foreign_keys = off;`);
+        this.addSql(`create table \`background_jobs__temp_alter\` (\`id\` TEXT not null primary key, \`created_at\` datetime not null, \`updated_at\` datetime not null, \`job_id\` TEXT not null, \`payload\` TEXT not null, \`status\` TEXT check (\`status\` in ('pending', 'running', 'succeeded', 'failed')) not null default 'pending', \`available_at\` datetime not null, \`locked_by\` TEXT null, \`locked_until\` datetime null, \`attempt_count\` INTEGER check (\`attempt_count\` >= 0) not null default 0, \`max_attempts\` INTEGER check (\`max_attempts\` > 0) not null default 3, \`last_error\` TEXT null, \`completed_at\` datetime null);`);
+        this.addSql(`insert into \`background_jobs__temp_alter\` select \`id\`, \`created_at\`, \`updated_at\`, \`job_id\`, \`payload\`, \`status\`, \`available_at\`, \`locked_by\`, \`locked_until\`, \`attempt_count\`, \`max_attempts\`, \`last_error\`, \`completed_at\` from \`background_jobs\`;`);
+        this.addSql(`drop table \`background_jobs\`;`);
+        this.addSql(`alter table \`background_jobs__temp_alter\` rename to \`background_jobs\`;`);
+        this.addSql(`create index \`background_jobs_job_id_idx\` on \`background_jobs\` (\`job_id\`);`);
+        this.addSql(`create index \`background_jobs_locked_until_idx\` on \`background_jobs\` (\`locked_until\`);`);
+        this.addSql(`create index \`background_jobs_status_available_at_idx\` on \`background_jobs\` (\`status\`, \`available_at\`);`);
+        this.addSql(`pragma foreign_keys = on;`);
+        this.addSql(`alter table \`oauth_client\` drop column \`post_logout_redirect_uris\`;`);
+        this.addSql(`alter table \`oauth_client\` drop column \`web_origins\`;`);
+        this.addSql(`pragma foreign_keys = off;`);
+        this.addSql(`create table \`user_oauth__temp_alter\` (\`id\` integer not null primary key autoincrement, \`created_at\` datetime not null, \`updated_at\` datetime not null, \`user_sub\` TEXT not null, \`provider_name\` TEXT not null, \`provider_user_id\` TEXT not null, \`access_token\` TEXT not null, \`refresh_token\` TEXT not null, \`expires_at\` datetime null, constraint \`user_oauth_user_sub_foreign\` foreign key (\`user_sub\`) references \`user\` (\`sub\`) on update no action on delete no action);`);
+        this.addSql(`insert into \`user_oauth__temp_alter\` select \`id\`, \`created_at\`, \`updated_at\`, \`user_sub\`, \`provider_name\`, \`provider_user_id\`, \`access_token\`, \`refresh_token\`, \`expires_at\` from \`user_oauth\`;`);
+        this.addSql(`drop table \`user_oauth\`;`);
+        this.addSql(`alter table \`user_oauth__temp_alter\` rename to \`user_oauth\`;`);
+        this.addSql(`create unique index \`user_oauth_provider_unique\` on \`user_oauth\` (\`provider_name\`, \`provider_user_id\`);`);
+        this.addSql(`create index \`user_oauth_user_provider_idx\` on \`user_oauth\` (\`user_sub\`, \`provider_name\`);`);
+        this.addSql(`create index \`user_oauth_user_sub_idx\` on \`user_oauth\` (\`user_sub\`);`);
+        this.addSql(`pragma foreign_keys = on;`);
+    }
+}
+//# sourceMappingURL=Migration20260619075330.js.map

package/dist/migrations/sqlite/Migration20260619075330.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Migration20260619075330.js","sourceRoot":"","sources":["../../../src/migrations/sqlite/Migration20260619075330.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAElD,MAAM,OAAO,uBAAwB,SAAQ,SAAS;IAC3C,EAAE;QACT,IAAI,CAAC,MAAM,CACT,mtBAAmtB,CACptB,CAAC;QACF,IAAI,CAAC,MAAM,CACT,oHAAoH,CACrH,CAAC;QACF,IAAI,CAAC,MAAM,CACT,gHAAgH,CACjH,CAAC;QACF,IAAI,CAAC,MAAM,CACT,8FAA8F,CAC/F,CAAC;QACF,IAAI,CAAC,MAAM,CACT,kHAAkH,CACnH,CAAC;QACF,IAAI,CAAC,MAAM,CACT,qGAAqG,CACtG,CAAC;QACF,IAAI,CAAC,MAAM,CACT,iGAAiG,CAClG,CAAC;QACF,IAAI,CAAC,MAAM,CACT,8FAA8F,CAC/F,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,4BAA4B,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM,CACT,goBAAgoB,CACjoB,CAAC;QACF,IAAI,CAAC,MAAM,CACT,oRAAoR,CACrR,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,iCAAiC,CAAC,CAAC;QAC/C,IAAI,CAAC,MAAM,CACT,4EAA4E,CAC7E,CAAC;QACF,IAAI,CAAC,MAAM,CACT,iHAAiH,CAClH,CAAC;QACF,IAAI,CAAC,MAAM,CACT,8FAA8F,CAC/F,CAAC;QACF,IAAI,CAAC,MAAM,CACT,kFAAkF,CACnF,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,2BAA2B,CAAC,CAAC;QAEzC,IAAI,CAAC,MAAM,CACT,mGAAmG,CACpG,CAAC;QACF,IAAI,CAAC,MAAM,CACT,qFAAqF,CACtF,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,4BAA4B,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM,CACT,+eAA+e,CAChf,CAAC;QACF,IAAI,CAAC,MAAM,CACT,uNAAuN,CACxN,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,4BAA4B,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM,CACT,kEAAkE,CACnE,CAAC;QACF,IAAI,CAAC,MAAM,CACT,4EAA4E,CAC7E,CAAC;QACF,IAAI,CAAC,MAAM,CACT,oGAAoG,CACrG,CAAC;QACF,IAAI,CAAC,MAAM,CACT,iHAAiH,CAClH,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,2BAA2B,CAAC,CAAC;IAC3C,CAAC;IAEQ,IAAI;QACX,IAAI,CAAC,MAAM,CAAC,6CAA6C,CAAC,CAAC;QAE3D,IAAI,CAAC,MAAM,CAAC,4BAA4B,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM,CACT,ymBAAymB,CAC1mB,CAAC;QACF,IAAI,CAAC,MAAM,CACT,oRAAoR,CACrR,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,iCAAiC,CAAC,CAAC;QAC/C,IAAI,CAAC,MAAM,CACT,4EAA4E,CAC7E,CAAC;QACF,IAAI,CAAC,MAAM,CACT,kFAAkF,CACnF,CAAC;QACF,IAAI,CAAC,MAAM,CACT,8FAA8F,CAC/F,CAAC;QACF,IAAI,CAAC,MAAM,CACT,iHAAiH,CAClH,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,2BAA2B,CAAC,CAAC;QAEzC,IAAI,CAAC,MAAM,CACT,yEAAyE,CAC1E,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,2DAA2D,CAAC,CAAC;QAEzE,IAAI,CAAC,MAAM,CAAC,4BAA4B,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM,CACT,+eAA+e,CAChf,CAAC;QACF,IAAI,CAAC,MAAM,CACT,uNAAuN,CACxN,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,4BAA4B,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM,CACT,kEAAkE,CACnE,CAAC;QACF,IAAI,CAAC,MAAM,CACT,iHAAiH,CAClH,CAAC;QACF,IAAI,CAAC,MAAM,CACT,oGAAoG,CACrG,CAAC;QACF,IAAI,CAAC,MAAM,CACT,4EAA4E,CAC7E,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,2BAA2B,CAAC,CAAC;IAC3C,CAAC;CACF"}

package/dist/migrations/sqlite/Migration20260619191600_unique_oauth_client_client_id.d.ts

@@ -0,0 +1,6 @@
+import { Migration } from '@mikro-orm/migrations';
+export declare class Migration20260619191600_unique_oauth_client_client_id extends Migration {
+    up(): void | Promise<void>;
+    down(): void | Promise<void>;
+}
+//# sourceMappingURL=Migration20260619191600_unique_oauth_client_client_id.d.ts.map

package/dist/migrations/sqlite/Migration20260619191600_unique_oauth_client_client_id.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Migration20260619191600_unique_oauth_client_client_id.d.ts","sourceRoot":"","sources":["../../../src/migrations/sqlite/Migration20260619191600_unique_oauth_client_client_id.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAElD,qBAAa,qDAAsD,SAAQ,SAAS;IACzE,EAAE,IAAI,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAO1B,IAAI,IAAI,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;CAMtC"}

package/dist/migrations/sqlite/Migration20260619191600_unique_oauth_client_client_id.js

@@ -0,0 +1,12 @@
+import { Migration } from '@mikro-orm/migrations';
+export class Migration20260619191600_unique_oauth_client_client_id extends Migration {
+    up() {
+        this.addSql(`drop index if exists \`client_client_id_unique\`;`);
+        this.addSql(`create unique index \`client_client_id_unique\` on \`oauth_client\` (\`client_id\`);`);
+    }
+    down() {
+        this.addSql(`drop index if exists \`client_client_id_unique\`;`);
+        this.addSql(`create index \`client_client_id_unique\` on \`oauth_client\` (\`client_id\`);`);
+    }
+}
+//# sourceMappingURL=Migration20260619191600_unique_oauth_client_client_id.js.map

package/dist/migrations/sqlite/Migration20260619191600_unique_oauth_client_client_id.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Migration20260619191600_unique_oauth_client_client_id.js","sourceRoot":"","sources":["../../../src/migrations/sqlite/Migration20260619191600_unique_oauth_client_client_id.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAElD,MAAM,OAAO,qDAAsD,SAAQ,SAAS;IACzE,EAAE;QACT,IAAI,CAAC,MAAM,CAAC,mDAAmD,CAAC,CAAC;QACjE,IAAI,CAAC,MAAM,CACT,sFAAsF,CACvF,CAAC;IACJ,CAAC;IAEQ,IAAI;QACX,IAAI,CAAC,MAAM,CAAC,mDAAmD,CAAC,CAAC;QACjE,IAAI,CAAC,MAAM,CACT,+EAA+E,CAChF,CAAC;IACJ,CAAC;CACF"}

package/dist/migrations/sqlite/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/migrations/sqlite/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,+BAA+B,EAAE,MAAM,sCAAsC,CAAC;AAGvF,eAAO,MAAM,iBAAiB,4CAG7B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/migrations/sqlite/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,+BAA+B,EAAE,MAAM,sCAAsC,CAAC;AAKvF,eAAO,MAAM,iBAAiB,4CAK7B,CAAC"}

package/dist/migrations/sqlite/index.js

@@ -1,7 +1,11 @@
 import { Migration20260509171226_initial } from './Migration20260509171226_initial.js';
 import { Migration20260512120000_add_scheduler_jobs } from './Migration20260512120000_add_scheduler_jobs.js';
+import { Migration20260619075330 } from './Migration20260619075330.js';
+import { Migration20260619191600_unique_oauth_client_client_id } from './Migration20260619191600_unique_oauth_client_client_id.js';
 export const SQLITE_MIGRATIONS = [
     Migration20260509171226_initial,
     Migration20260512120000_add_scheduler_jobs,
+    Migration20260619075330,
+    Migration20260619191600_unique_oauth_client_client_id,
 ];
 //# sourceMappingURL=index.js.map

package/dist/migrations/sqlite/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/migrations/sqlite/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,+BAA+B,EAAE,MAAM,sCAAsC,CAAC;AACvF,OAAO,EAAE,0CAA0C,EAAE,MAAM,iDAAiD,CAAC;AAE7G,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,+BAA+B;IAC/B,0CAA0C;CAC3C,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/migrations/sqlite/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,+BAA+B,EAAE,MAAM,sCAAsC,CAAC;AACvF,OAAO,EAAE,0CAA0C,EAAE,MAAM,iDAAiD,CAAC;AAC7G,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AACvE,OAAO,EAAE,qDAAqD,EAAE,MAAM,4DAA4D,CAAC;AAEnI,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,+BAA+B;IAC/B,0CAA0C;IAC1C,uBAAuB;IACvB,qDAAqD;CACtD,CAAC"}

package/dist/repositories/oauth-device-code.repository.d.ts

@@ -0,0 +1,20 @@
+import { EntityRepository } from '@mikro-orm/core';
+import type { IOAuthDeviceCodeEntity } from '../entities/oauth-device-code.entity.ts';
+export declare class OAuthDeviceCodeRepository extends EntityRepository<IOAuthDeviceCodeEntity> {
+    createDeviceAuthorization(params: {
+        clientId: string;
+        deviceCodeHash: string;
+        userCodeHash: string;
+        scope: string[];
+        expiresInSeconds?: number;
+    }): Promise<IOAuthDeviceCodeEntity>;
+    findPendingByUserCodeHash(userCodeHash: string): Promise<IOAuthDeviceCodeEntity | null>;
+    approvePendingByUserCodeHash(params: {
+        userCodeHash: string;
+        userSub: string;
+        approvedAt: Date;
+    }): Promise<IOAuthDeviceCodeEntity | null>;
+    findByClientAndDeviceCodeHash(clientId: string, deviceCodeHash: string): Promise<IOAuthDeviceCodeEntity | null>;
+    consumeAuthorizedDeviceCode(id: string, consumedAt: Date): Promise<boolean>;
+}
+//# sourceMappingURL=oauth-device-code.repository.d.ts.map

package/dist/repositories/oauth-device-code.repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-device-code.repository.d.ts","sourceRoot":"","sources":["../../src/repositories/oauth-device-code.repository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,yCAAyC,CAAC;AAEtF,qBAAa,yBAA0B,SAAQ,gBAAgB,CAAC,sBAAsB,CAAC;IAC/E,yBAAyB,CAAC,MAAM,EAAE;QACtC,QAAQ,EAAE,MAAM,CAAC;QACjB,cAAc,EAAE,MAAM,CAAC;QACvB,YAAY,EAAE,MAAM,CAAC;QACrB,KAAK,EAAE,MAAM,EAAE,CAAC;QAChB,gBAAgB,CAAC,EAAE,MAAM,CAAC;KAC3B,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAe7B,yBAAyB,CAC7B,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC;IAQnC,4BAA4B,CAAC,MAAM,EAAE;QACzC,YAAY,EAAE,MAAM,CAAC;QACrB,OAAO,EAAE,MAAM,CAAC;QAChB,UAAU,EAAE,IAAI,CAAC;KAClB,GAAG,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC;IAwBpC,6BAA6B,CACjC,QAAQ,EAAE,MAAM,EAChB,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC;IAQnC,2BAA2B,CAC/B,EAAE,EAAE,MAAM,EACV,UAAU,EAAE,IAAI,GACf,OAAO,CAAC,OAAO,CAAC;CAapB"}

package/dist/repositories/oauth-device-code.repository.js

@@ -0,0 +1,55 @@
+import { EntityRepository } from '@mikro-orm/core';
+export class OAuthDeviceCodeRepository extends EntityRepository {
+    async createDeviceAuthorization(params) {
+        const expiresInSeconds = params.expiresInSeconds ?? 600;
+        const expiresAt = new Date(Date.now() + expiresInSeconds * 1000);
+        const entity = this.create({
+            client: params.clientId,
+            deviceCodeHash: params.deviceCodeHash,
+            userCodeHash: params.userCodeHash,
+            scope: params.scope,
+            expiresAt,
+        });
+        await this.getEntityManager().persist(entity).flush();
+        return entity;
+    }
+    async findPendingByUserCodeHash(userCodeHash) {
+        return this.findOne({
+            userCodeHash,
+            consumedAt: null,
+            authorizedAt: null,
+        });
+    }
+    async approvePendingByUserCodeHash(params) {
+        const updated = await this.nativeUpdate({
+            userCodeHash: params.userCodeHash,
+            consumedAt: null,
+            authorizedAt: null,
+            expiresAt: { $gt: params.approvedAt },
+        }, {
+            authorizedUser: params.userSub,
+            authorizedAt: params.approvedAt,
+        });
+        if (updated !== 1) {
+            return null;
+        }
+        return this.findOne({ userCodeHash: params.userCodeHash }, { populate: ['client'] });
+    }
+    async findByClientAndDeviceCodeHash(clientId, deviceCodeHash) {
+        return this.findOne({
+            client: clientId,
+            deviceCodeHash,
+            consumedAt: null,
+        });
+    }
+    async consumeAuthorizedDeviceCode(id, consumedAt) {
+        const updated = await this.nativeUpdate({
+            id,
+            consumedAt: null,
+            authorizedAt: { $ne: null },
+            expiresAt: { $gt: consumedAt },
+        }, { consumedAt });
+        return updated === 1;
+    }
+}
+//# sourceMappingURL=oauth-device-code.repository.js.map

package/dist/repositories/oauth-device-code.repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-device-code.repository.js","sourceRoot":"","sources":["../../src/repositories/oauth-device-code.repository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAGnD,MAAM,OAAO,yBAA0B,SAAQ,gBAAwC;IACrF,KAAK,CAAC,yBAAyB,CAAC,MAM/B;QACC,MAAM,gBAAgB,GAAG,MAAM,CAAC,gBAAgB,IAAI,GAAG,CAAC;QACxD,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,gBAAgB,GAAG,IAAI,CAAC,CAAC;QACjE,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;YACzB,MAAM,EAAE,MAAM,CAAC,QAAQ;YACvB,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,SAAS;SACV,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,CAAC;QACtD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,yBAAyB,CAC7B,YAAoB;QAEpB,OAAO,IAAI,CAAC,OAAO,CAAC;YAClB,YAAY;YACZ,UAAU,EAAE,IAAI;YAChB,YAAY,EAAE,IAAI;SACnB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,4BAA4B,CAAC,MAIlC;QACC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,YAAY,CACrC;YACE,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,UAAU,EAAE,IAAI;YAChB,YAAY,EAAE,IAAI;YAClB,SAAS,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,UAAU,EAAE;SACtC,EACD;YACE,cAAc,EAAE,MAAM,CAAC,OAAO;YAC9B,YAAY,EAAE,MAAM,CAAC,UAAU;SAChC,CACF,CAAC;QAEF,IAAI,OAAO,KAAK,CAAC,EAAE,CAAC;YAClB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,IAAI,CAAC,OAAO,CACjB,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,EACrC,EAAE,QAAQ,EAAE,CAAC,QAAQ,CAAC,EAAE,CACzB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,6BAA6B,CACjC,QAAgB,EAChB,cAAsB;QAEtB,OAAO,IAAI,CAAC,OAAO,CAAC;YAClB,MAAM,EAAE,QAAQ;YAChB,cAAc;YACd,UAAU,EAAE,IAAI;SACjB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,2BAA2B,CAC/B,EAAU,EACV,UAAgB;QAEhB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,YAAY,CACrC;YACE,EAAE;YACF,UAAU,EAAE,IAAI;YAChB,YAAY,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE;YAC3B,SAAS,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE;SAC/B,EACD,EAAE,UAAU,EAAE,CACf,CAAC;QAEF,OAAO,OAAO,KAAK,CAAC,CAAC;IACvB,CAAC;CACF"}

package/dist/routes/.well-known/index.d.ts

@@ -3,9 +3,35 @@ export declare const wellKnownRoutes: import("hono/hono-base").HonoBase<AppEnv,
     "/openid-configuration": {
         $get: {
             input: {};
-            output: undefined;
-            outputFormat: "redirect";
-            status: 302;
+            output: {
+                issuer: string;
+                authorization_endpoint: string;
+                token_endpoint: string;
+                jwks_uri: string;
+                response_types_supported: string[];
+                response_modes_supported: string[];
+                subject_types_supported: string[];
+                id_token_signing_alg_values_supported: string[];
+                userinfo_signing_alg_values_supported: string[];
+                userinfo_endpoint: string;
+                scopes_supported: string[];
+                claims_supported: string[];
+                grant_types_supported: string[];
+                token_endpoint_auth_methods_supported: string[];
+                introspection_endpoint_auth_methods_supported: string[];
+                revocation_endpoint_auth_methods_supported: string[];
+                code_challenge_methods_supported: string[];
+                introspection_endpoint: string;
+                revocation_endpoint: string;
+                end_session_endpoint: string;
+                device_authorization_endpoint: string;
+                ui_locales_supported: ("en" | "ko" | "ja")[];
+                request_parameter_supported: boolean;
+                request_uri_parameter_supported: boolean;
+                claims_parameter_supported: boolean;
+            };
+            outputFormat: "json";
+            status: 200;
         };
     };
 }, "/">, "/", "/">;

package/dist/routes/.well-known/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/routes/.well-known/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAGrD,eAAO,MAAM,eAAe;;;;;;;;;kBAAiD,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/routes/.well-known/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAGrD,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAAiD,CAAC"}

package/dist/routes/.well-known/openid-configuration/get.d.ts

@@ -1,7 +1,7 @@
 import type { AppEnv } from '#server/lib/app-env.js';
 /**
  * Standard OIDC Discovery endpoint at /.well-known/openid-configuration
- * Redirects to /oauth/.well-known/openid-configuration
+ * Serves direct JSON rather than redirecting for client compatibility.
  *
  * This provides compatibility with clients that expect the standard
  * OIDC Discovery URL at the root level.
@@ -10,9 +10,35 @@ export declare const openidConfigGet: import("hono/hono-base").HonoBase<AppEnv,
     "/openid-configuration": {
         $get: {
             input: {};
-            output: undefined;
-            outputFormat: "redirect";
-            status: 302;
+            output: {
+                issuer: string;
+                authorization_endpoint: string;
+                token_endpoint: string;
+                jwks_uri: string;
+                response_types_supported: string[];
+                response_modes_supported: string[];
+                subject_types_supported: string[];
+                id_token_signing_alg_values_supported: string[];
+                userinfo_signing_alg_values_supported: string[];
+                userinfo_endpoint: string;
+                scopes_supported: string[];
+                claims_supported: string[];
+                grant_types_supported: string[];
+                token_endpoint_auth_methods_supported: string[];
+                introspection_endpoint_auth_methods_supported: string[];
+                revocation_endpoint_auth_methods_supported: string[];
+                code_challenge_methods_supported: string[];
+                introspection_endpoint: string;
+                revocation_endpoint: string;
+                end_session_endpoint: string;
+                device_authorization_endpoint: string;
+                ui_locales_supported: ("en" | "ko" | "ja")[];
+                request_parameter_supported: boolean;
+                request_uri_parameter_supported: boolean;
+                claims_parameter_supported: boolean;
+            };
+            outputFormat: "json";
+            status: 200;
         };
     };
 }, "/", "/openid-configuration">;

package/dist/routes/.well-known/openid-configuration/get.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"get.d.ts","sourceRoot":"","sources":["../../../../src/routes/.well-known/openid-configuration/get.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAErD;;;;;;GAMG;AACH,eAAO,MAAM,eAAe;;;;;;;;;gCAK3B,CAAC"}
+{"version":3,"file":"get.d.ts","sourceRoot":"","sources":["../../../../src/routes/.well-known/openid-configuration/get.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAGrD;;;;;;GAMG;AACH,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCAO3B,CAAC"}

package/dist/routes/.well-known/openid-configuration/get.js

@@ -1,12 +1,15 @@
 import { Hono } from 'hono';
+import { buildOpenidConfiguration } from '#server/routes/oauth/.well-known/openid-configuration/get.js';
 /**
  * Standard OIDC Discovery endpoint at /.well-known/openid-configuration
- * Redirects to /oauth/.well-known/openid-configuration
+ * Serves direct JSON rather than redirecting for client compatibility.
  *
  * This provides compatibility with clients that expect the standard
  * OIDC Discovery URL at the root level.
  */
 export const openidConfigGet = new Hono().get('/openid-configuration', async (c) => {
-    return c.redirect('/oauth/.well-known/openid-configuration');
+    const { config } = c.var.services;
+    c.header('Cache-Control', 'public, max-age=3600');
+    return c.json(buildOpenidConfiguration(config), 200);
 });
 //# sourceMappingURL=get.js.map

package/dist/routes/.well-known/openid-configuration/get.js.map

@@ -1 +1 @@
-{"version":3,"file":"get.js","sourceRoot":"","sources":["../../../../src/routes/.well-known/openid-configuration/get.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAG5B;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,IAAI,EAAU,CAAC,GAAG,CACnD,uBAAuB,EACvB,KAAK,EAAE,CAAC,EAAE,EAAE;IACV,OAAO,CAAC,CAAC,QAAQ,CAAC,yCAAyC,CAAC,CAAC;AAC/D,CAAC,CACF,CAAC"}
+{"version":3,"file":"get.js","sourceRoot":"","sources":["../../../../src/routes/.well-known/openid-configuration/get.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EAAE,wBAAwB,EAAE,MAAM,8DAA8D,CAAC;AAExG;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,IAAI,EAAU,CAAC,GAAG,CACnD,uBAAuB,EACvB,KAAK,EAAE,CAAC,EAAE,EAAE;IACV,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClC,CAAC,CAAC,MAAM,CAAC,eAAe,EAAE,sBAAsB,CAAC,CAAC;IAClD,OAAO,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,CAAC;AACvD,CAAC,CACF,CAAC"}

package/dist/routes/index.d.ts

@@ -978,6 +978,74 @@ export declare const routes: import("hono/hono-base").HonoBase<AppEnv, import("h
                     max_age?: string | string[];
                     reauthenticated?: string | string[];
                     display?: string | string[];
+                    response_mode?: string | string[];
+                    login_hint?: string | string[];
+                    ui_locales?: string | string[];
+                    id_token_hint?: string | string[];
+                    acr_values?: string | string[];
+                };
+            };
+            output: {};
+            outputFormat: string;
+            status: import("hono/utils/http-status").StatusCode;
+        };
+    };
+}, "/"> | import("hono/types").MergeSchemaPath<{
+    "/device_authorization": {
+        $post: {
+            input: {
+                form: {
+                    client_id?: import("hono/types").ParsedFormValue | import("hono/types").ParsedFormValue[];
+                    client_secret?: import("hono/types").ParsedFormValue | import("hono/types").ParsedFormValue[];
+                    scope?: import("hono/types").ParsedFormValue | import("hono/types").ParsedFormValue[];
+                };
+            };
+            output: {
+                device_code: string;
+                user_code: string;
+                verification_uri: string;
+                verification_uri_complete: string;
+                expires_in: number;
+                interval: number;
+            };
+            outputFormat: "json";
+            status: 200;
+        };
+    };
+}, "/"> | import("hono/types").MergeSchemaPath<{
+    "/device": {
+        $get: {
+            input: {};
+            output: {};
+            outputFormat: string;
+            status: import("hono/utils/http-status").StatusCode;
+        };
+    };
+} & {
+    "/device": {
+        $post: {
+            input: {
+                form: {
+                    user_code: string;
+                };
+            };
+            output: {
+                status: string;
+                client_id: string;
+            };
+            outputFormat: "json";
+            status: import("hono/utils/http-status").ContentfulStatusCode;
+        };
+    };
+}, "/"> | import("hono/types").MergeSchemaPath<{
+    "/end_session": {
+        $get: {
+            input: {
+                query: {
+                    client_id?: string | string[];
+                    post_logout_redirect_uri?: string | string[];
+                    id_token_hint?: string | string[];
+                    state?: string | string[];
                 };
             };
             output: undefined;
@@ -986,18 +1054,10 @@ export declare const routes: import("hono/hono-base").HonoBase<AppEnv, import("h
         } | {
             input: {
                 query: {
-                    response_type: string | string[];
-                    redirect_uri: string | string[];
-                    client_id: string | string[];
+                    client_id?: string | string[];
+                    post_logout_redirect_uri?: string | string[];
+                    id_token_hint?: string | string[];
                     state?: string | string[];
-                    code_challenge?: string | string[];
-                    code_challenge_method?: string | string[];
-                    scope?: string | string[];
-                    nonce?: string | string[];
-                    prompt?: string | string[];
-                    max_age?: string | string[];
-                    reauthenticated?: string | string[];
-                    display?: string | string[];
                 };
             };
             output: {
@@ -1020,6 +1080,8 @@ export declare const routes: import("hono/hono-base").HonoBase<AppEnv, import("h
                     client_secret?: import("hono/types").ParsedFormValue | import("hono/types").ParsedFormValue[];
                     code_verifier?: import("hono/types").ParsedFormValue | import("hono/types").ParsedFormValue[];
                     refresh_token?: import("hono/types").ParsedFormValue | import("hono/types").ParsedFormValue[];
+                    scope?: import("hono/types").ParsedFormValue | import("hono/types").ParsedFormValue[];
+                    device_code?: import("hono/types").ParsedFormValue | import("hono/types").ParsedFormValue[];
                 };
             };
             output: {
@@ -1079,11 +1141,23 @@ export declare const routes: import("hono/hono-base").HonoBase<AppEnv, import("h
 }, "/"> | import("hono/types").MergeSchemaPath<{
     "/userinfo": {
         $get: {
-            input: {
-                header: {
-                    authorization?: string;
-                };
+            input: {};
+            output: {
+                sub: string;
+                email?: string | undefined;
+                email_verified?: boolean | undefined;
+                name?: string | undefined;
+                picture?: string | undefined;
+                preferred_username?: string | undefined;
             };
+            outputFormat: "json";
+            status: 200;
+        };
+    };
+} & {
+    "/userinfo": {
+        $post: {
+            input: {};
             output: {
                 sub: string;
                 email?: string | undefined;
@@ -1130,14 +1204,19 @@ export declare const routes: import("hono/hono-base").HonoBase<AppEnv, import("h
                 response_modes_supported: string[];
                 subject_types_supported: string[];
                 id_token_signing_alg_values_supported: string[];
+                userinfo_signing_alg_values_supported: string[];
                 userinfo_endpoint: string;
                 scopes_supported: string[];
                 claims_supported: string[];
                 grant_types_supported: string[];
                 token_endpoint_auth_methods_supported: string[];
+                introspection_endpoint_auth_methods_supported: string[];
+                revocation_endpoint_auth_methods_supported: string[];
                 code_challenge_methods_supported: string[];
                 introspection_endpoint: string;
                 revocation_endpoint: string;
+                end_session_endpoint: string;
+                device_authorization_endpoint: string;
                 ui_locales_supported: ("en" | "ko" | "ja")[];
                 request_parameter_supported: boolean;
                 request_uri_parameter_supported: boolean;
@@ -1151,9 +1230,35 @@ export declare const routes: import("hono/hono-base").HonoBase<AppEnv, import("h
     "/openid-configuration": {
         $get: {
             input: {};
-            output: undefined;
-            outputFormat: "redirect";
-            status: 302;
+            output: {
+                issuer: string;
+                authorization_endpoint: string;
+                token_endpoint: string;
+                jwks_uri: string;
+                response_types_supported: string[];
+                response_modes_supported: string[];
+                subject_types_supported: string[];
+                id_token_signing_alg_values_supported: string[];
+                userinfo_signing_alg_values_supported: string[];
+                userinfo_endpoint: string;
+                scopes_supported: string[];
+                claims_supported: string[];
+                grant_types_supported: string[];
+                token_endpoint_auth_methods_supported: string[];
+                introspection_endpoint_auth_methods_supported: string[];
+                revocation_endpoint_auth_methods_supported: string[];
+                code_challenge_methods_supported: string[];
+                introspection_endpoint: string;
+                revocation_endpoint: string;
+                end_session_endpoint: string;
+                device_authorization_endpoint: string;
+                ui_locales_supported: ("en" | "ko" | "ja")[];
+                request_parameter_supported: boolean;
+                request_uri_parameter_supported: boolean;
+                claims_parameter_supported: boolean;
+            };
+            outputFormat: "json";
+            status: 200;
         };
     };
 }, "/">, "/.well-known">, "/", "/">;

package/dist/routes/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/routes/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAKhD,eAAO,MAAM,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;mCAGsB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/routes/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAKhD,eAAO,MAAM,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;mCAGsB,CAAC"}

package/dist/routes/oauth/.well-known/openid-configuration/get.d.ts

@@ -1,4 +1,32 @@
 import type { AppEnv } from '#server/lib/app-env.js';
+import type { TinyAuthRuntimeConfig } from '#server/lib/config/index.js';
+export declare function buildOpenidConfiguration(config: TinyAuthRuntimeConfig): {
+    issuer: string;
+    authorization_endpoint: string;
+    token_endpoint: string;
+    jwks_uri: string;
+    response_types_supported: string[];
+    response_modes_supported: string[];
+    subject_types_supported: string[];
+    id_token_signing_alg_values_supported: string[];
+    userinfo_signing_alg_values_supported: string[];
+    userinfo_endpoint: string;
+    scopes_supported: string[];
+    claims_supported: string[];
+    grant_types_supported: string[];
+    token_endpoint_auth_methods_supported: string[];
+    introspection_endpoint_auth_methods_supported: string[];
+    revocation_endpoint_auth_methods_supported: string[];
+    code_challenge_methods_supported: string[];
+    introspection_endpoint: string;
+    revocation_endpoint: string;
+    end_session_endpoint: string;
+    device_authorization_endpoint: string;
+    ui_locales_supported: ("en" | "ko" | "ja")[];
+    request_parameter_supported: boolean;
+    request_uri_parameter_supported: boolean;
+    claims_parameter_supported: boolean;
+};
 export declare const oidcConfigGet: import("hono/hono-base").HonoBase<AppEnv, {
     "/.well-known/openid-configuration": {
         $get: {
@@ -12,14 +40,19 @@ export declare const oidcConfigGet: import("hono/hono-base").HonoBase<AppEnv, {
                 response_modes_supported: string[];
                 subject_types_supported: string[];
                 id_token_signing_alg_values_supported: string[];
+                userinfo_signing_alg_values_supported: string[];
                 userinfo_endpoint: string;
                 scopes_supported: string[];
                 claims_supported: string[];
                 grant_types_supported: string[];
                 token_endpoint_auth_methods_supported: string[];
+                introspection_endpoint_auth_methods_supported: string[];
+                revocation_endpoint_auth_methods_supported: string[];
                 code_challenge_methods_supported: string[];
                 introspection_endpoint: string;
                 revocation_endpoint: string;
+                end_session_endpoint: string;
+                device_authorization_endpoint: string;
                 ui_locales_supported: ("en" | "ko" | "ja")[];
                 request_parameter_supported: boolean;
                 request_uri_parameter_supported: boolean;

package/dist/routes/oauth/.well-known/openid-configuration/get.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"get.d.ts","sourceRoot":"","sources":["../../../../../src/routes/oauth/.well-known/openid-configuration/get.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAGrD,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;4CAkLzB,CAAC"}
+{"version":3,"file":"get.d.ts","sourceRoot":"","sources":["../../../../../src/routes/oauth/.well-known/openid-configuration/get.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAGzE,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;EAqErE;AAED,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;4CAkJzB,CAAC"}