@trokky/trokky 2.0.3 → 2.0.5

package/dist/core/utils/logger.js

@@ -51,6 +51,206 @@ const COLORS = {
     gray: '\x1b[90m', // Gray
     bold: '\x1b[1m' // Bold
 };
+/**
+ * Replacement used for redacted values
+ */
+const REDACTED = '[REDACTED]';
+/**
+ * Guards against pathological payloads. Logging must never be the thing that
+ * takes a request down, so deep or very large structures are truncated rather
+ * than followed, and an accessor that throws is reported rather than rethrown.
+ */
+const MAX_DEPTH = 10;
+const MAX_NODES = 5000;
+/**
+ * Key names whose values are never written to logs.
+ *
+ * Keys are normalised before comparison - lowercased, with `-`, `_` and spaces
+ * removed - so `setCookie`, `set_cookie` and the wire-format `set-cookie` all
+ * match one entry. Matching is still EXACT on that normalised form, never a
+ * substring match: substring matching would also redact innocuous fields such
+ * as `tokenCount`, `passwordPolicy` or `secretsManagerRegion`, which destroys
+ * debuggability and makes redaction unpredictable.
+ *
+ * A few entries are less obvious. An app token's `tokenHash` is the lookup key
+ * accepted by `getAppTokenByHash`, so it is credential-equivalent rather than a
+ * mere digest. `userCode`/`deviceCode` are the one-time approval values of the
+ * OAuth2 device flow.
+ *
+ * `auth` and `credential` are deliberately included even though they sometimes
+ * hold non-secret values - a route's auth mode, a WebAuthn response. Hiding a
+ * diagnostic field is recoverable; printing a credential is not.
+ */
+export const SENSITIVE_KEYS = [
+    'secret',
+    'secrets',
+    'token',
+    'tokenHash',
+    'accessToken',
+    'refreshToken',
+    'resetToken',
+    'idToken',
+    'sessionToken',
+    'apiKey',
+    'xApiKey',
+    'password',
+    'passwordHash',
+    'newPassword',
+    'currentPassword',
+    'temporaryPassword',
+    'passphrase',
+    'authorization',
+    'proxyAuthorization',
+    'wwwAuthenticate',
+    'auth',
+    'bearer',
+    'cookie',
+    'setCookie',
+    'connectionString',
+    'databaseUrl',
+    'privateKey',
+    'privateKeyPem',
+    'salt',
+    'credential',
+    'credentials',
+    'clientSecret',
+    'clientAssertion',
+    'userCode',
+    'deviceCode',
+    'mfaSecret',
+    'totpSecret',
+    'webhookSecret',
+    'jwtSecret',
+    'signature'
+];
+/**
+ * Collapse the spellings a key arrives in - camelCase, snake_case and the
+ * hyphenated wire format used by real HTTP headers - onto one form.
+ */
+function normalizeKey(key) {
+    return key.toLowerCase().replace(/[-_\s]/g, '');
+}
+const SENSITIVE_KEY_SET = new Set(SENSITIVE_KEYS.map(normalizeKey));
+/**
+ * Read one own property without trusting it.
+ *
+ * `Object.entries` invokes every enumerable getter, which means a throwing
+ * accessor would take down the log call and a side-effecting one would run as
+ * a consequence of logging. Descriptors let us see what a property is before
+ * deciding whether to touch it - and a getter under a sensitive key is never
+ * invoked at all.
+ */
+function readOwnProperty(source, key) {
+    const descriptor = Object.getOwnPropertyDescriptor(source, key);
+    if (!descriptor)
+        return { ok: false };
+    if ('value' in descriptor)
+        return { ok: true, value: descriptor.value };
+    if (typeof descriptor.get !== 'function')
+        return { ok: false };
+    try {
+        return { ok: true, value: descriptor.get.call(source) };
+    }
+    catch {
+        return { ok: false };
+    }
+}
+/**
+ * Errors are rebuilt rather than passed through.
+ *
+ * Returning the Error itself leaked twice over: any attached context survived
+ * redaction (`err.config.headers.authorization` is the common shape), and
+ * `message`/`stack` are non-enumerable so a JSON serializer rendered the whole
+ * thing as `{}`. Rebuilding fixes both - the diagnostic fields are carried
+ * explicitly and everything hung off the error is redacted like any payload.
+ */
+function sanitizeError(error, budget, depth) {
+    const result = Object.create(null);
+    result.name = error.name;
+    result.message = error.message;
+    if (error.stack)
+        result.stack = error.stack;
+    for (const key of Object.keys(error)) {
+        if (key === 'name' || key === 'message' || key === 'stack')
+            continue;
+        if (SENSITIVE_KEY_SET.has(normalizeKey(key))) {
+            result[key] = REDACTED;
+            continue;
+        }
+        const read = readOwnProperty(error, key);
+        result[key] = read.ok ? redactValue(read.value, budget, depth + 1) : '[Unreadable]';
+    }
+    const cause = error.cause;
+    if (cause !== undefined) {
+        result.cause = redactValue(cause, budget, depth + 1);
+    }
+    return result;
+}
+/**
+ * `ancestors` tracks only the objects currently being recursed into, so a true
+ * cycle is detected while the same object referenced twice in different
+ * branches (an acyclic DAG) is still rendered in full.
+ */
+function redactValue(value, budget, depth) {
+    // A copied function is not inert: an own `toJSON` would be invoked by the
+    // serializer and could hand back the very object we just redacted.
+    if (typeof value === 'function')
+        return '[Function]';
+    if (value === null || typeof value !== 'object')
+        return value;
+    // Date's toJSON lives on the prototype, is not copied, and yields an ISO
+    // string, so dates are safe to pass through untouched.
+    if (value instanceof Date)
+        return value;
+    if (depth > MAX_DEPTH)
+        return '[Max depth exceeded]';
+    if (budget.nodes >= MAX_NODES)
+        return '[Truncated]';
+    budget.nodes++;
+    if (budget.ancestors.has(value))
+        return '[Circular]';
+    budget.ancestors.add(value);
+    try {
+        if (value instanceof Error) {
+            return sanitizeError(value, budget, depth);
+        }
+        // Not traversed: their contents are invisible to JSON anyway, and walking
+        // them would add leak surface for no diagnostic gain. Say so plainly
+        // instead of rendering a misleading empty object.
+        if (value instanceof Map)
+            return '[Map]';
+        if (value instanceof Set)
+            return '[Set]';
+        if (Array.isArray(value)) {
+            return value.map(item => redactValue(item, budget, depth + 1));
+        }
+        // Null prototype: an own `__proto__` key copied onto a normal object would
+        // otherwise reassign the clone's prototype.
+        const result = Object.create(null);
+        for (const key of Object.keys(value)) {
+            if (SENSITIVE_KEY_SET.has(normalizeKey(key))) {
+                result[key] = REDACTED;
+                continue;
+            }
+            const read = readOwnProperty(value, key);
+            result[key] = read.ok ? redactValue(read.value, budget, depth + 1) : '[Unreadable]';
+        }
+        return result;
+    }
+    finally {
+        budget.ancestors.delete(value);
+    }
+}
+/**
+ * Recursively replace values held under sensitive keys with '[REDACTED]'.
+ *
+ * Returns a new structure, leaving the input unmutated. The result is inert:
+ * no functions are carried over, so nothing in it can execute during
+ * serialization and reintroduce what was removed.
+ */
+export function redactSensitive(value) {
+    return redactValue(value, { ancestors: new WeakSet(), nodes: 0 }, 0);
+}
 /**
  * Platform-agnostic logger
  */
@@ -72,7 +272,7 @@ export class TrokkyLogger {
             context: this.context
         };
         if (data !== undefined) {
-            entry.data = data;
+            entry.data = redactSensitive(data);
         }
         if (error) {
             entry.error = {

package/dist/core/utils/logger.js.map

@@ -1 +1 @@
-{"version":3,"file":"logger.js","sourceRoot":"","sources":["../../../src/core/utils/logger.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AA8BH;;GAEG;AACH,MAAM,MAAM,GAAG,OAAO,OAAO,KAAK,WAAW,IAAI,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAA;AACvE,MAAM,SAAS,GAAG,OAAO,UAAU,KAAK,WAAW,IAAI,OAAQ,UAAkB,CAAC,MAAM,KAAK,WAAW,CAAA;AACxG,MAAM,MAAM,GAAG,OAAO,UAAU,KAAK,WAAW,IAAI,OAAQ,UAAkB,CAAC,WAAW,KAAK,WAAW,CAAA;AAC1G,MAAM,aAAa,GAAG,OAAO,OAAO,KAAK,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,aAAa,CAAA;AAE9F;;GAEG;AACH,MAAM,cAAc,GAAiB;IACnC,KAAK,EAAE,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM;IACvC,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM;IACxC,SAAS,EAAE,IAAI;IACf,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC;CAC5D,CAAA;AAED;;GAEG;AACH,MAAM,UAAU,GAA6B;IAC3C,KAAK,EAAE,CAAC;IACR,IAAI,EAAE,CAAC;IACP,IAAI,EAAE,CAAC;IACP,KAAK,EAAE,CAAC;CACT,CAAA;AAED;;GAEG;AACH,MAAM,MAAM,GAAG;IACb,KAAK,EAAE,UAAU,EAAI,OAAO;IAC5B,IAAI,EAAE,UAAU,EAAK,UAAU;IAC/B,IAAI,EAAE,UAAU,EAAK,SAAS;IAC9B,KAAK,EAAE,UAAU,EAAI,MAAM;IAC3B,KAAK,EAAE,SAAS,EAAK,QAAQ;IAC7B,IAAI,EAAE,UAAU,EAAK,OAAO;IAC5B,IAAI,EAAE,SAAS,CAAM,OAAO;CACpB,CAAA;AAEV;;GAEG;AACH,MAAM,OAAO,YAAY;IACf,MAAM,CAAc;IACpB,OAAO,CAAY;IAE3B,YAAY,OAAmB,EAAE,SAAgC,EAAE;QACjE,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;QACtB,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,MAAM,EAAE,CAAA;IAChD,CAAC;IAEO,SAAS,CAAC,KAAe;QAC/B,OAAO,UAAU,CAAC,KAAK,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IAC3D,CAAC;IAEO,cAAc,CAAC,KAAe,EAAE,OAAe,EAAE,IAAU,EAAE,KAAa;QAChF,MAAM,KAAK,GAAa;YACtB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,KAAK;YACL,OAAO;YACP,OAAO,EAAE,IAAI,CAAC,OAAO;SACtB,CAAA;QAED,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,KAAK,CAAC,IAAI,GAAG,IAAI,CAAA;QACnB,CAAC;QAED,IAAI,KAAK,EAAE,CAAC;YACV,KAAK,CAAC,KAAK,GAAG;gBACZ,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,KAAK,EAAE,KAAK,CAAC,KAAK;aACnB,CAAA;QACH,CAAC;QAED,OAAO,KAAK,CAAA;IACd,CAAC;IAEO,WAAW,CAAC,KAAe;QACjC,MAAM,KAAK,GAAa,EAAE,CAAA;QAE1B,YAAY;QACZ,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YAC1B,MAAM,IAAI,GAAG,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,CAAA,CAAC,eAAe;YAC1D,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,GAAG,IAAI,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;YAClF,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACrB,CAAC;QAED,mBAAmB;QACnB,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;QACtD,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM;YACjC,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,UAAU,GAAG,MAAM,CAAC,KAAK,EAAE;YACtD,CAAC,CAAC,UAAU,CAAA;QACd,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAEpB,UAAU;QACV,MAAM,YAAY,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;QAC5C,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS;YAAE,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;QACvE,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS;YAAE,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;QAEvE,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM;YACnC,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,IAAI,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,KAAK,EAAE;YAC5D,CAAC,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAA;QACjC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QAEtB,UAAU;QACV,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QAEzB,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACxB,CAAC;IAEO,UAAU,CAAC,KAAe;QAChC,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;IAC9B,CAAC;IAEO,MAAM,CAAC,KAAe;QAC5B,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,MAAM;YAC7C,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;YACxB,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAA;QAE3B,iCAAiC;QACjC,QAAQ,KAAK,CAAC,KAAK,EAAE,CAAC;YACpB,KAAK,OAAO;gBACV,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;gBACxB,MAAK;YACP,KAAK,MAAM;gBACT,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;gBACvB,MAAK;YACP,KAAK,MAAM;gBACT,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;gBACvB,MAAK;YACP,KAAK,OAAO;gBACV,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;gBACxB,IAAI,KAAK,CAAC,KAAK,EAAE,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;oBACzD,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;gBAClC,CAAC;gBACD,MAAK;QACT,CAAC;QAED,yCAAyC;QACzC,IAAI,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;YACjD,MAAM,OAAO,GAAG,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;gBAC5C,CAAC,CAAC,KAAK,CAAC,IAAI;gBACZ,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;YACvC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QACtB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAe,EAAE,IAAU;QAC/B,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAA;QAC1D,CAAC;IACH,CAAC;IAED,IAAI,CAAC,OAAe,EAAE,IAAU;QAC9B,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAA;QACzD,CAAC;IACH,CAAC;IAED,IAAI,CAAC,OAAe,EAAE,IAAU;QAC9B,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAA;QACzD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAe,EAAE,KAAmB;QACxC,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5B,MAAM,WAAW,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;YAC9D,MAAM,IAAI,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAA;YACvD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC,CAAA;QACvE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAA4B;QAChC,OAAO,IAAI,YAAY,CACrB,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,GAAG,OAAO,EAAE,EAC/B,IAAI,CAAC,MAAM,CACZ,CAAA;IACH,CAAC;IAED,SAAS,CAAC,MAA6B;QACrC,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAA;IAC7C,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,aAAa;IAChB,MAAM,CAAC,YAAY,GAA0B,EAAE,CAAA;IAEvD,MAAM,CAAC,SAAS,CAAC,MAA6B;QAC5C,aAAa,CAAC,YAAY,GAAG,EAAE,GAAG,aAAa,CAAC,YAAY,EAAE,GAAG,MAAM,EAAE,CAAA;IAC3E,CAAC;IAED,MAAM,CAAC,MAAM,CAAC,OAAmB;QAC/B,OAAO,IAAI,YAAY,CAAC,OAAO,EAAE,aAAa,CAAC,YAAY,CAAC,CAAA;IAC9D,CAAC;IAED,MAAM,CAAC,QAAQ,CAAC,KAAe;QAC7B,aAAa,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,CAAA;IACpC,CAAC;IAED,MAAM,CAAC,SAAS,CAAC,MAAwB;QACvC,aAAa,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC,CAAA;IACrC,CAAC;IAED,MAAM,CAAC,OAAO;QACZ,aAAa,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAA;IAC7C,CAAC;;AAGH;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,YAAoB,EAAE,SAAkB;IACnE,OAAO,aAAa,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC,CAAA;AACnE,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,WAAW,EAAE,EAAE,KAAK,EAAE,OAAmB,EAAE,MAAM,EAAE,OAAgB,EAAE,MAAM,EAAE,IAAI,EAAE;IACnF,UAAU,EAAE,EAAE,KAAK,EAAE,MAAkB,EAAE,MAAM,EAAE,MAAe,EAAE,MAAM,EAAE,KAAK,EAAE;IACjF,OAAO,EAAE,EAAE,KAAK,EAAE,MAAkB,EAAE,MAAM,EAAE,OAAgB,EAAE,MAAM,EAAE,KAAK,EAAE;IAC/E,IAAI,EAAE,EAAE,KAAK,EAAE,MAAkB,EAAE,MAAM,EAAE,MAAe,EAAE,MAAM,EAAE,KAAK,EAAE;CACnE,CAAA"}
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../../../src/core/utils/logger.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AA8BH;;GAEG;AACH,MAAM,MAAM,GAAG,OAAO,OAAO,KAAK,WAAW,IAAI,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAA;AACvE,MAAM,SAAS,GAAG,OAAO,UAAU,KAAK,WAAW,IAAI,OAAQ,UAAkB,CAAC,MAAM,KAAK,WAAW,CAAA;AACxG,MAAM,MAAM,GAAG,OAAO,UAAU,KAAK,WAAW,IAAI,OAAQ,UAAkB,CAAC,WAAW,KAAK,WAAW,CAAA;AAC1G,MAAM,aAAa,GAAG,OAAO,OAAO,KAAK,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,aAAa,CAAA;AAE9F;;GAEG;AACH,MAAM,cAAc,GAAiB;IACnC,KAAK,EAAE,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM;IACvC,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM;IACxC,SAAS,EAAE,IAAI;IACf,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC;CAC5D,CAAA;AAED;;GAEG;AACH,MAAM,UAAU,GAA6B;IAC3C,KAAK,EAAE,CAAC;IACR,IAAI,EAAE,CAAC;IACP,IAAI,EAAE,CAAC;IACP,KAAK,EAAE,CAAC;CACT,CAAA;AAED;;GAEG;AACH,MAAM,MAAM,GAAG;IACb,KAAK,EAAE,UAAU,EAAI,OAAO;IAC5B,IAAI,EAAE,UAAU,EAAK,UAAU;IAC/B,IAAI,EAAE,UAAU,EAAK,SAAS;IAC9B,KAAK,EAAE,UAAU,EAAI,MAAM;IAC3B,KAAK,EAAE,SAAS,EAAK,QAAQ;IAC7B,IAAI,EAAE,UAAU,EAAK,OAAO;IAC5B,IAAI,EAAE,SAAS,CAAM,OAAO;CACpB,CAAA;AAEV;;GAEG;AACH,MAAM,QAAQ,GAAG,YAAY,CAAA;AAE7B;;;;GAIG;AACH,MAAM,SAAS,GAAG,EAAE,CAAA;AACpB,MAAM,SAAS,GAAG,IAAI,CAAA;AAEtB;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,MAAM,cAAc,GAAsB;IAC/C,QAAQ;IACR,SAAS;IACT,OAAO;IACP,WAAW;IACX,aAAa;IACb,cAAc;IACd,YAAY;IACZ,SAAS;IACT,cAAc;IACd,QAAQ;IACR,SAAS;IACT,UAAU;IACV,cAAc;IACd,aAAa;IACb,iBAAiB;IACjB,mBAAmB;IACnB,YAAY;IACZ,eAAe;IACf,oBAAoB;IACpB,iBAAiB;IACjB,MAAM;IACN,QAAQ;IACR,QAAQ;IACR,WAAW;IACX,kBAAkB;IAClB,aAAa;IACb,YAAY;IACZ,eAAe;IACf,MAAM;IACN,YAAY;IACZ,aAAa;IACb,cAAc;IACd,iBAAiB;IACjB,UAAU;IACV,YAAY;IACZ,WAAW;IACX,YAAY;IACZ,eAAe;IACf,WAAW;IACX,WAAW;CACZ,CAAA;AAED;;;GAGG;AACH,SAAS,YAAY,CAAC,GAAW;IAC/B,OAAO,GAAG,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAA;AACjD,CAAC;AAED,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAA;AAOnE;;;;;;;;GAQG;AACH,SAAS,eAAe,CAAC,MAAc,EAAE,GAAW;IAClD,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC/D,IAAI,CAAC,UAAU;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAA;IACrC,IAAI,OAAO,IAAI,UAAU;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,CAAA;IACvE,IAAI,OAAO,UAAU,CAAC,GAAG,KAAK,UAAU;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAA;IAC9D,IAAI,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAA;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAA;IACtB,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,aAAa,CAAC,KAAY,EAAE,MAAuB,EAAE,KAAa;IACzE,MAAM,MAAM,GAA4B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IAC3D,MAAM,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAA;IACxB,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAA;IAC9B,IAAI,KAAK,CAAC,KAAK;QAAE,MAAM,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAA;IAE3C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACrC,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,OAAO;YAAE,SAAQ;QACpE,IAAI,iBAAiB,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YAC7C,MAAM,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAA;YACtB,SAAQ;QACV,CAAC;QACD,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;QACxC,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,CAAA;IACrF,CAAC;IAED,MAAM,KAAK,GAAI,KAAqC,CAAC,KAAK,CAAA;IAC1D,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,CAAC,KAAK,GAAG,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,GAAG,CAAC,CAAC,CAAA;IACtD,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC;AAED;;;;GAIG;AACH,SAAS,WAAW,CAAC,KAAc,EAAE,MAAuB,EAAE,KAAa;IACzE,0EAA0E;IAC1E,mEAAmE;IACnE,IAAI,OAAO,KAAK,KAAK,UAAU;QAAE,OAAO,YAAY,CAAA;IACpD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAA;IAE7D,yEAAyE;IACzE,uDAAuD;IACvD,IAAI,KAAK,YAAY,IAAI;QAAE,OAAO,KAAK,CAAA;IAEvC,IAAI,KAAK,GAAG,SAAS;QAAE,OAAO,sBAAsB,CAAA;IACpD,IAAI,MAAM,CAAC,KAAK,IAAI,SAAS;QAAE,OAAO,aAAa,CAAA;IACnD,MAAM,CAAC,KAAK,EAAE,CAAA;IAEd,IAAI,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,YAAY,CAAA;IACpD,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;IAE3B,IAAI,CAAC;QACH,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;YAC3B,OAAO,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,CAAA;QAC5C,CAAC;QAED,0EAA0E;QAC1E,qEAAqE;QACrE,kDAAkD;QAClD,IAAI,KAAK,YAAY,GAAG;YAAE,OAAO,OAAO,CAAA;QACxC,IAAI,KAAK,YAAY,GAAG;YAAE,OAAO,OAAO,CAAA;QAExC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAA;QAChE,CAAC;QAED,2EAA2E;QAC3E,4CAA4C;QAC5C,MAAM,MAAM,GAA4B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QAC3D,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACrC,IAAI,iBAAiB,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;gBAC7C,MAAM,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAA;gBACtB,SAAQ;YACV,CAAC;YACD,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;YACxC,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,CAAA;QACrF,CAAC;QACD,OAAO,MAAM,CAAA;IACf,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IAChC,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,OAAO,WAAW,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,OAAO,EAAU,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;AAC9E,CAAC;AAED;;GAEG;AACH,MAAM,OAAO,YAAY;IACf,MAAM,CAAc;IACpB,OAAO,CAAY;IAE3B,YAAY,OAAmB,EAAE,SAAgC,EAAE;QACjE,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;QACtB,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,MAAM,EAAE,CAAA;IAChD,CAAC;IAEO,SAAS,CAAC,KAAe;QAC/B,OAAO,UAAU,CAAC,KAAK,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IAC3D,CAAC;IAEO,cAAc,CAAC,KAAe,EAAE,OAAe,EAAE,IAAU,EAAE,KAAa;QAChF,MAAM,KAAK,GAAa;YACtB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,KAAK;YACL,OAAO;YACP,OAAO,EAAE,IAAI,CAAC,OAAO;SACtB,CAAA;QAED,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,KAAK,CAAC,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC,CAAA;QACpC,CAAC;QAED,IAAI,KAAK,EAAE,CAAC;YACV,KAAK,CAAC,KAAK,GAAG;gBACZ,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,KAAK,EAAE,KAAK,CAAC,KAAK;aACnB,CAAA;QACH,CAAC;QAED,OAAO,KAAK,CAAA;IACd,CAAC;IAEO,WAAW,CAAC,KAAe;QACjC,MAAM,KAAK,GAAa,EAAE,CAAA;QAE1B,YAAY;QACZ,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YAC1B,MAAM,IAAI,GAAG,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,CAAA,CAAC,eAAe;YAC1D,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,GAAG,IAAI,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;YAClF,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACrB,CAAC;QAED,mBAAmB;QACnB,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;QACtD,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM;YACjC,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,UAAU,GAAG,MAAM,CAAC,KAAK,EAAE;YACtD,CAAC,CAAC,UAAU,CAAA;QACd,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAEpB,UAAU;QACV,MAAM,YAAY,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;QAC5C,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS;YAAE,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;QACvE,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS;YAAE,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;QAEvE,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM;YACnC,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,IAAI,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,KAAK,EAAE;YAC5D,CAAC,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAA;QACjC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QAEtB,UAAU;QACV,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QAEzB,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACxB,CAAC;IAEO,UAAU,CAAC,KAAe;QAChC,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;IAC9B,CAAC;IAEO,MAAM,CAAC,KAAe;QAC5B,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,MAAM;YAC7C,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;YACxB,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAA;QAE3B,iCAAiC;QACjC,QAAQ,KAAK,CAAC,KAAK,EAAE,CAAC;YACpB,KAAK,OAAO;gBACV,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;gBACxB,MAAK;YACP,KAAK,MAAM;gBACT,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;gBACvB,MAAK;YACP,KAAK,MAAM;gBACT,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;gBACvB,MAAK;YACP,KAAK,OAAO;gBACV,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;gBACxB,IAAI,KAAK,CAAC,KAAK,EAAE,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;oBACzD,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;gBAClC,CAAC;gBACD,MAAK;QACT,CAAC;QAED,yCAAyC;QACzC,IAAI,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;YACjD,MAAM,OAAO,GAAG,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;gBAC5C,CAAC,CAAC,KAAK,CAAC,IAAI;gBACZ,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;YACvC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QACtB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAe,EAAE,IAAU;QAC/B,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAA;QAC1D,CAAC;IACH,CAAC;IAED,IAAI,CAAC,OAAe,EAAE,IAAU;QAC9B,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAA;QACzD,CAAC;IACH,CAAC;IAED,IAAI,CAAC,OAAe,EAAE,IAAU;QAC9B,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAA;QACzD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAe,EAAE,KAAmB;QACxC,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5B,MAAM,WAAW,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;YAC9D,MAAM,IAAI,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAA;YACvD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC,CAAA;QACvE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAA4B;QAChC,OAAO,IAAI,YAAY,CACrB,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,GAAG,OAAO,EAAE,EAC/B,IAAI,CAAC,MAAM,CACZ,CAAA;IACH,CAAC;IAED,SAAS,CAAC,MAA6B;QACrC,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAA;IAC7C,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,aAAa;IAChB,MAAM,CAAC,YAAY,GAA0B,EAAE,CAAA;IAEvD,MAAM,CAAC,SAAS,CAAC,MAA6B;QAC5C,aAAa,CAAC,YAAY,GAAG,EAAE,GAAG,aAAa,CAAC,YAAY,EAAE,GAAG,MAAM,EAAE,CAAA;IAC3E,CAAC;IAED,MAAM,CAAC,MAAM,CAAC,OAAmB;QAC/B,OAAO,IAAI,YAAY,CAAC,OAAO,EAAE,aAAa,CAAC,YAAY,CAAC,CAAA;IAC9D,CAAC;IAED,MAAM,CAAC,QAAQ,CAAC,KAAe;QAC7B,aAAa,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,CAAA;IACpC,CAAC;IAED,MAAM,CAAC,SAAS,CAAC,MAAwB;QACvC,aAAa,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC,CAAA;IACrC,CAAC;IAED,MAAM,CAAC,OAAO;QACZ,aAAa,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAA;IAC7C,CAAC;;AAGH;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,YAAoB,EAAE,SAAkB;IACnE,OAAO,aAAa,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC,CAAA;AACnE,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,WAAW,EAAE,EAAE,KAAK,EAAE,OAAmB,EAAE,MAAM,EAAE,OAAgB,EAAE,MAAM,EAAE,IAAI,EAAE;IACnF,UAAU,EAAE,EAAE,KAAK,EAAE,MAAkB,EAAE,MAAM,EAAE,MAAe,EAAE,MAAM,EAAE,KAAK,EAAE;IACjF,OAAO,EAAE,EAAE,KAAK,EAAE,MAAkB,EAAE,MAAM,EAAE,OAAgB,EAAE,MAAM,EAAE,KAAK,EAAE;IAC/E,IAAI,EAAE,EAAE,KAAK,EAAE,MAAkB,EAAE,MAAM,EAAE,MAAe,EAAE,MAAM,EAAE,KAAK,EAAE;CACnE,CAAA"}

package/dist/routes/auth/auth-flow-store.d.ts

@@ -0,0 +1,45 @@
+/**
+ * Storage for a sign-in that spans two requests.
+ *
+ * OAuth login state with its PKCE verifier, and the WebAuthn challenge behind a
+ * passkey, are both written when a flow begins and read once when it completes.
+ * Held in the server process, a restart between the two halves fails the
+ * sign-in and a second replica cannot serve the second half at all.
+ *
+ * Persists through the data storage adapter when it implements the optional
+ * auth flow methods, and falls back to an in-process map when it does not, so
+ * an adapter written against the older interface keeps working.
+ */
+import type { DataStorageAdapter, AuthFlowState } from '../../core/types/storage-adapters.js';
+/**
+ * Store a pending flow.
+ *
+ * A failure to persist is raised, not swallowed. Keeping the entry in memory
+ * would report a durability the caller does not have and silently reintroduce
+ * the bug this store exists to fix: the sign-in would appear to start and then
+ * fail at the callback if it landed on another process. Failing here costs one
+ * retry and is honest about what happened.
+ */
+export declare function saveAuthFlowState(adapter: DataStorageAdapter | null | undefined, state: AuthFlowState): Promise<void>;
+/**
+ * Take a pending flow: return it and consume it, or return null.
+ *
+ * Single use is the security property here - an OAuth state is CSRF protection
+ * and a WebAuthn challenge must not be answerable twice - so the adapter is
+ * asked to return and delete in one atomic operation rather than being read and
+ * then deleted, which would let two concurrent callbacks both succeed.
+ *
+ * A storage failure propagates: a caller that cannot prove it consumed the
+ * state must not continue as though it had.
+ */
+export declare function consumeAuthFlowState(adapter: DataStorageAdapter | null | undefined, id: string, kind: AuthFlowState['kind']): Promise<AuthFlowState | null>;
+/**
+ * Drop everything that has expired.
+ *
+ * Sweeping is best-effort: expired entries are rejected on read regardless, so
+ * a failed sweep costs storage rather than correctness.
+ */
+export declare function deleteExpiredAuthFlowStates(adapter: DataStorageAdapter | null | undefined): Promise<void>;
+/** Test seam: drops the in-process entries without touching the adapter. */
+export declare function clearFallbackAuthFlowStates(): void;
+//# sourceMappingURL=auth-flow-store.d.ts.map

package/dist/routes/auth/auth-flow-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-flow-store.d.ts","sourceRoot":"","sources":["../../../src/routes/auth/auth-flow-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,sCAAsC,CAAA;AA4B7F;;;;;;;;GAQG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,kBAAkB,GAAG,IAAI,GAAG,SAAS,EAC9C,KAAK,EAAE,aAAa,GACnB,OAAO,CAAC,IAAI,CAAC,CAMf;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,kBAAkB,GAAG,IAAI,GAAG,SAAS,EAC9C,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,GAC1B,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAa/B;AAED;;;;;GAKG;AACH,wBAAsB,2BAA2B,CAC/C,OAAO,EAAE,kBAAkB,GAAG,IAAI,GAAG,SAAS,GAC7C,OAAO,CAAC,IAAI,CAAC,CAYf;AAED,4EAA4E;AAC5E,wBAAgB,2BAA2B,IAAI,IAAI,CAElD"}

package/dist/routes/auth/auth-flow-store.js

@@ -0,0 +1,95 @@
+/**
+ * Storage for a sign-in that spans two requests.
+ *
+ * OAuth login state with its PKCE verifier, and the WebAuthn challenge behind a
+ * passkey, are both written when a flow begins and read once when it completes.
+ * Held in the server process, a restart between the two halves fails the
+ * sign-in and a second replica cannot serve the second half at all.
+ *
+ * Persists through the data storage adapter when it implements the optional
+ * auth flow methods, and falls back to an in-process map when it does not, so
+ * an adapter written against the older interface keeps working.
+ */
+import { createLogger } from '../../core/utils/logger.js';
+const logger = createLogger('routes', 'AuthFlowStore');
+/** Entries live here only when the adapter cannot store them. */
+const fallbackStore = new Map();
+function adapterSupportsPersistence(adapter) {
+    return Boolean(adapter?.saveAuthFlowState && adapter.consumeAuthFlowState);
+}
+/**
+ * An unparseable expiry is treated as expired rather than as "never expires":
+ * `NaN < Date.now()` is false, so a naive comparison would accept a corrupt
+ * record forever. The boundary is exclusive - a state is dead at its expiry
+ * instant, not one millisecond after.
+ */
+function isUsable(state) {
+    const expiresAt = new Date(state.expiresAt).getTime();
+    return Number.isFinite(expiresAt) && expiresAt > Date.now();
+}
+/**
+ * Store a pending flow.
+ *
+ * A failure to persist is raised, not swallowed. Keeping the entry in memory
+ * would report a durability the caller does not have and silently reintroduce
+ * the bug this store exists to fix: the sign-in would appear to start and then
+ * fail at the callback if it landed on another process. Failing here costs one
+ * retry and is honest about what happened.
+ */
+export async function saveAuthFlowState(adapter, state) {
+    if (adapterSupportsPersistence(adapter)) {
+        await adapter.saveAuthFlowState(state);
+        return;
+    }
+    fallbackStore.set(state.id, state);
+}
+/**
+ * Take a pending flow: return it and consume it, or return null.
+ *
+ * Single use is the security property here - an OAuth state is CSRF protection
+ * and a WebAuthn challenge must not be answerable twice - so the adapter is
+ * asked to return and delete in one atomic operation rather than being read and
+ * then deleted, which would let two concurrent callbacks both succeed.
+ *
+ * A storage failure propagates: a caller that cannot prove it consumed the
+ * state must not continue as though it had.
+ */
+export async function consumeAuthFlowState(adapter, id, kind) {
+    if (adapterSupportsPersistence(adapter)) {
+        const consumed = await adapter.consumeAuthFlowState(id, kind);
+        return consumed && isUsable(consumed) ? consumed : null;
+    }
+    // The fallback map is only reachable on a single process, and there is no
+    // await between the read and the delete, so this is atomic by the same
+    // argument that made the original in-process map safe.
+    const fallback = fallbackStore.get(id);
+    fallbackStore.delete(id);
+    if (!fallback || fallback.kind !== kind || !isUsable(fallback))
+        return null;
+    return fallback;
+}
+/**
+ * Drop everything that has expired.
+ *
+ * Sweeping is best-effort: expired entries are rejected on read regardless, so
+ * a failed sweep costs storage rather than correctness.
+ */
+export async function deleteExpiredAuthFlowStates(adapter) {
+    for (const [id, state] of fallbackStore.entries()) {
+        if (!isUsable(state))
+            fallbackStore.delete(id);
+    }
+    if (adapter?.deleteExpiredAuthFlowStates) {
+        try {
+            await adapter.deleteExpiredAuthFlowStates();
+        }
+        catch (error) {
+            logger.error('Failed to sweep expired auth flow states', { error });
+        }
+    }
+}
+/** Test seam: drops the in-process entries without touching the adapter. */
+export function clearFallbackAuthFlowStates() {
+    fallbackStore.clear();
+}
+//# sourceMappingURL=auth-flow-store.js.map

package/dist/routes/auth/auth-flow-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-flow-store.js","sourceRoot":"","sources":["../../../src/routes/auth/auth-flow-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAA;AAEzD,MAAM,MAAM,GAAG,YAAY,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAA;AAEtD,iEAAiE;AACjE,MAAM,aAAa,GAAG,IAAI,GAAG,EAAyB,CAAA;AAKtD,SAAS,0BAA0B,CACjC,OAA8C;IAE9C,OAAO,OAAO,CAAC,OAAO,EAAE,iBAAiB,IAAI,OAAO,CAAC,oBAAoB,CAAC,CAAA;AAC5E,CAAC;AAED;;;;;GAKG;AACH,SAAS,QAAQ,CAAC,KAAoB;IACpC,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAA;IACrD,OAAO,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;AAC7D,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAA8C,EAC9C,KAAoB;IAEpB,IAAI,0BAA0B,CAAC,OAAO,CAAC,EAAE,CAAC;QACxC,MAAM,OAAO,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAA;QACtC,OAAM;IACR,CAAC;IACD,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAA;AACpC,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,OAA8C,EAC9C,EAAU,EACV,IAA2B;IAE3B,IAAI,0BAA0B,CAAC,OAAO,CAAC,EAAE,CAAC;QACxC,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,oBAAoB,CAAC,EAAE,EAAE,IAAI,CAAC,CAAA;QAC7D,OAAO,QAAQ,IAAI,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAA;IACzD,CAAC;IAED,0EAA0E;IAC1E,uEAAuE;IACvE,uDAAuD;IACvD,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IACtC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;IACxB,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAA;IAC3E,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,OAA8C;IAE9C,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,aAAa,CAAC,OAAO,EAAE,EAAE,CAAC;QAClD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;IAChD,CAAC;IAED,IAAI,OAAO,EAAE,2BAA2B,EAAE,CAAC;QACzC,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,2BAA2B,EAAE,CAAA;QAC7C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,0CAA0C,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;QACrE,CAAC;IACH,CAAC;AACH,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,2BAA2B;IACzC,aAAa,CAAC,KAAK,EAAE,CAAA;AACvB,CAAC"}

package/dist/routes/auth/oauth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"oauth.d.ts","sourceRoot":"","sources":["../../../src/routes/auth/oauth.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAC5D,OAAO,EACL,UAAU,EAKX,MAAM,qBAAqB,CAAA;AA8D5B;;;;;;GAMG;AACH,wBAAsB,eAAe,CACnC,IAAI,EAAE,UAAU,EAChB,OAAO,EAAE,WAAW,GACnB,OAAO,CAAC,YAAY,CAAC,CAkFvB;AAED;;;;;GAKG;AACH,wBAAsB,yBAAyB,CAC7C,IAAI,EAAE,UAAU,EAChB,OAAO,EAAE,WAAW,GACnB,OAAO,CAAC,YAAY,CAAC,CA8NvB;AAED;;;;;GAKG;AACH,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,UAAU,EAChB,OAAO,EAAE,WAAW,GACnB,OAAO,CAAC,YAAY,CAAC,CA4DvB;AAED;;;;;GAKG;AACH,wBAAsB,cAAc,CAClC,IAAI,EAAE,UAAU,EAChB,QAAQ,EAAE,WAAW,GACpB,OAAO,CAAC,YAAY,CAAC,CAavB"}
+{"version":3,"file":"oauth.d.ts","sourceRoot":"","sources":["../../../src/routes/auth/oauth.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAC5D,OAAO,EACL,UAAU,EAKX,MAAM,qBAAqB,CAAA;AAiF5B;;;;;;GAMG;AACH,wBAAsB,eAAe,CACnC,IAAI,EAAE,UAAU,EAChB,OAAO,EAAE,WAAW,GACnB,OAAO,CAAC,YAAY,CAAC,CAsFvB;AAED;;;;;GAKG;AACH,wBAAsB,yBAAyB,CAC7C,IAAI,EAAE,UAAU,EAChB,OAAO,EAAE,WAAW,GACnB,OAAO,CAAC,YAAY,CAAC,CA+NvB;AAED;;;;;GAKG;AACH,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,UAAU,EAChB,OAAO,EAAE,WAAW,GACnB,OAAO,CAAC,YAAY,CAAC,CA4DvB;AAED;;;;;GAKG;AACH,wBAAsB,cAAc,CAClC,IAAI,EAAE,UAAU,EAChB,QAAQ,EAAE,WAAW,GACpB,OAAO,CAAC,YAAY,CAAC,CAavB"}

package/dist/routes/auth/oauth.js

@@ -4,19 +4,27 @@
  * API routes for OAuth authentication (Google login and account linking).
  */
 import { InvalidInputError, createLogger, GoogleOAuthService, } from '../../core/index.js';
+import { saveAuthFlowState, consumeAuthFlowState, deleteExpiredAuthFlowStates, } from './auth-flow-store.js';
 const logger = createLogger('routes', 'OAuth');
-// In-memory store for PKCE and state (in production, use Redis or similar)
-// Map of state -> { codeVerifier, mode, userId?, expiresAt }
-const oauthStateStore = new Map();
-// Clean up expired states periodically
+const OAUTH_STATE_TTL_MS = 10 * 60 * 1000;
+// Sweep expired states. Reads reject them regardless, so this only reclaims space.
 setInterval(() => {
-    const now = Date.now();
-    for (const [state, data] of oauthStateStore.entries()) {
-        if (data.expiresAt < now) {
-            oauthStateStore.delete(state);
-        }
+    void deleteExpiredAuthFlowStates(lastKnownAdapter);
+}, 60000);
+/**
+ * The sweeper runs on a timer with no request in hand, so it has no core to ask
+ * for the adapter. Requests record the one they used.
+ */
+let lastKnownAdapter = null;
+function dataAdapter(core) {
+    try {
+        lastKnownAdapter = core.getDataStorageAdapter();
+        return lastKnownAdapter;
     }
-}, 60000); // Clean up every minute
+    catch {
+        return null;
+    }
+}
 // =============================================================================
 // HELPER FUNCTIONS
 // =============================================================================
@@ -79,11 +87,15 @@ export async function initGoogleOAuth(core, request) {
         const pkce = googleService.generatePKCE();
         const state = googleService.generateState();
         // Store state with PKCE verifier (expires in 10 minutes)
-        oauthStateStore.set(state, {
-            codeVerifier: pkce.codeVerifier,
-            mode,
-            userId: request.user?.id,
-            expiresAt: Date.now() + 10 * 60 * 1000,
+        await saveAuthFlowState(dataAdapter(core), {
+            id: state,
+            kind: 'oauth',
+            data: {
+                codeVerifier: pkce.codeVerifier,
+                mode,
+                userId: request.user?.id,
+            },
+            expiresAt: new Date(Date.now() + OAUTH_STATE_TTL_MS).toISOString(),
         });
         // Generate authorization URL (mode affects consent screen behavior)
         const authUrl = googleService.getAuthorizationUrl(state, pkce.codeChallenge, mode);
@@ -155,10 +167,12 @@ export async function handleGoogleOAuthCallback(core, request) {
                 },
             };
         }
-        // Validate state (CSRF protection)
-        const storedState = oauthStateStore.get(state);
-        if (!storedState || storedState.expiresAt < Date.now()) {
-            oauthStateStore.delete(state);
+        // Validate state (CSRF protection). Consuming is atomic and scoped to this
+        // flow: a replayed callback finds nothing, and one carrying another flow's
+        // id neither receives nor destroys that flow's state. An unknown, expired
+        // and wrong-kind state are all the same answer here.
+        const storedFlow = await consumeAuthFlowState(dataAdapter(core), state, 'oauth');
+        if (!storedFlow) {
             return {
                 status: 400,
                 headers: {},
@@ -171,8 +185,7 @@ export async function handleGoogleOAuthCallback(core, request) {
                 },
             };
         }
-        // Clean up used state
-        oauthStateStore.delete(state);
+        const storedState = storedFlow.data;
         // Exchange code for tokens
         const tokens = await googleService.exchangeCodeForTokens(code, codeVerifier);
         // Get user info from Google

package/dist/routes/auth/oauth.js.map

@@ -1 +1 @@
-{"version":3,"file":"oauth.js","sourceRoot":"","sources":["../../../src/routes/auth/oauth.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAEL,iBAAiB,EACjB,YAAY,EACZ,kBAAkB,GAEnB,MAAM,qBAAqB,CAAA;AAE5B,MAAM,MAAM,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;AAkB9C,2EAA2E;AAC3E,6DAA6D;AAC7D,MAAM,eAAe,GAAG,IAAI,GAAG,EAQ5B,CAAA;AAEH,uCAAuC;AACvC,WAAW,CAAC,GAAG,EAAE;IACf,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;IACtB,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,eAAe,CAAC,OAAO,EAAE,EAAE,CAAC;QACtD,IAAI,IAAI,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC;YACzB,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QAC/B,CAAC;IACH,CAAC;AACH,CAAC,EAAE,KAAK,CAAC,CAAA,CAAC,wBAAwB;AAElC,gFAAgF;AAChF,mBAAmB;AACnB,gFAAgF;AAEhF,SAAS,qBAAqB,CAAC,IAAgB;IAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAA;IAC5C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,IAAI,CAAA;IACb,CAAC;IACD,OAAO,IAAI,kBAAkB,CAAC;QAC5B,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,WAAW,EAAE,MAAM,CAAC,WAAW;KAChC,CAAC,CAAA;AACJ,CAAC;AAED,gFAAgF;AAChF,iBAAiB;AACjB,gFAAgF;AAEhF;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,IAAgB,EAChB,OAAoB;IAEpB,IAAI,CAAC;QACH,MAAM,aAAa,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAA;QACjD,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,OAAO;gBACL,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,EAAE;gBACX,IAAI,EAAE;oBACJ,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE;wBACL,IAAI,EAAE,sBAAsB;wBAC5B,OAAO,EAAE,gCAAgC;qBAC1C;iBACF;aACF,CAAA;QACH,CAAC;QAED,MAAM,IAAI,GAAG,OAAO,CAAC,IAAwB,CAAA;QAC7C,MAAM,IAAI,GAAG,IAAI,EAAE,IAAI,IAAI,OAAO,CAAA;QAElC,4CAA4C;QAC5C,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;YACpB,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;gBAClB,OAAO;oBACL,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE,EAAE;oBACX,IAAI,EAAE;wBACJ,OAAO,EAAE,KAAK;wBACd,KAAK,EAAE;4BACL,IAAI,EAAE,cAAc;4BACpB,OAAO,EAAE,yCAAyC;yBACnD;qBACF;iBACF,CAAA;YACH,CAAC;QACH,CAAC;QAED,0BAA0B;QAC1B,MAAM,IAAI,GAAG,aAAa,CAAC,YAAY,EAAE,CAAA;QACzC,MAAM,KAAK,GAAG,aAAa,CAAC,aAAa,EAAE,CAAA;QAE3C,yDAAyD;QACzD,eAAe,CAAC,GAAG,CAAC,KAAK,EAAE;YACzB,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,IAAI;YACJ,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE;YACxB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;SACvC,CAAC,CAAA;QAEF,oEAAoE;QACpE,MAAM,OAAO,GAAG,aAAa,CAAC,mBAAmB,CAAC,KAAK,EAAE,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,CAAA;QAElF,MAAM,CAAC,IAAI,CAAC,sBAAsB,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAA;QAE3E,OAAO;YACL,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,EAAE;YACX,IAAI,EAAE;gBACJ,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE;oBACJ,OAAO;oBACP,KAAK;oBACL,gEAAgE;oBAChE,sCAAsC;oBACtC,YAAY,EAAE,IAAI,CAAC,YAAY;iBAChC;aACF;SACF,CAAA;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,4BAA4B,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;QACrD,OAAO;YACL,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,EAAE;YACX,IAAI,EAAE;gBACJ,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE;oBACL,IAAI,EAAE,gBAAgB;oBACtB,OAAO,EAAE,iCAAiC;iBAC3C;aACF;SACF,CAAA;IACH,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,IAAgB,EAChB,OAAoB;IAEpB,IAAI,CAAC;QACH,MAAM,aAAa,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAA;QACjD,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,OAAO;gBACL,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,EAAE;gBACX,IAAI,EAAE;oBACJ,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE;wBACL,IAAI,EAAE,sBAAsB;wBAC5B,OAAO,EAAE,gCAAgC;qBAC1C;iBACF;aACF,CAAA;QACH,CAAC;QAED,MAAM,IAAI,GAAG,OAAO,CAAC,IAA4B,CAAA;QACjD,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAA;QAE1D,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC,YAAY,EAAE,CAAC;YACrC,OAAO;gBACL,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,EAAE;gBACX,IAAI,EAAE;oBACJ,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE;wBACL,IAAI,EAAE,iBAAiB;wBACvB,OAAO,EAAE,wDAAwD;qBAClE;iBACF;aACF,CAAA;QACH,CAAC;QAED,mCAAmC;QACnC,MAAM,WAAW,GAAG,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QAC9C,IAAI,CAAC,WAAW,IAAI,WAAW,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YACvD,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;YAC7B,OAAO;gBACL,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,EAAE;gBACX,IAAI,EAAE;oBACJ,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE;wBACL,IAAI,EAAE,eAAe;wBACrB,OAAO,EAAE,oCAAoC;qBAC9C;iBACF;aACF,CAAA;QACH,CAAC;QAED,sBAAsB;QACtB,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QAE7B,2BAA2B;QAC3B,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,qBAAqB,CAAC,IAAI,EAAE,YAAY,CAAC,CAAA;QAE5E,4BAA4B;QAC5B,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,WAAW,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;QAEtE,qBAAqB;QACrB,aAAa,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAA;QAE1C,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;YACpB,yCAAyC;YACzC,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,IAAI,OAAO,CAAC,IAAI,EAAE,EAAE,CAAA;YACrD,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,OAAO;oBACL,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE,EAAE;oBACX,IAAI,EAAE;wBACJ,OAAO,EAAE,KAAK;wBACd,KAAK,EAAE;4BACL,IAAI,EAAE,cAAc;4BACpB,OAAO,EAAE,4CAA4C;yBACtD;qBACF;iBACF,CAAA;YACH,CAAC;YAED,MAAM,QAAQ,GAAkB;gBAC9B,QAAQ,EAAE,QAAQ;gBAClB,UAAU,EAAE,UAAU,CAAC,GAAG;gBAC1B,KAAK,EAAE,UAAU,CAAC,KAAK;gBACvB,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACnC,CAAA;YAED,IAAI,CAAC;gBACH,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;gBAClE,MAAM,CAAC,IAAI,CAAC,uBAAuB,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC,CAAA;gBAE/E,OAAO;oBACL,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE,EAAE;oBACX,IAAI,EAAE;wBACJ,OAAO,EAAE,IAAI;wBACb,IAAI,EAAE;4BACJ,OAAO,EAAE,oCAAoC;4BAC7C,QAAQ,EAAE;gCACR,QAAQ,EAAE,QAAQ;gCAClB,KAAK,EAAE,UAAU,CAAC,KAAK;gCACvB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;6BAC5B;yBACF;qBACF;iBACF,CAAA;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,YAAY,iBAAiB,EAAE,CAAC;oBACvC,OAAO;wBACL,MAAM,EAAE,GAAG;wBACX,OAAO,EAAE,EAAE;wBACX,IAAI,EAAE;4BACJ,OAAO,EAAE,KAAK;4BACd,KAAK,EAAE;gCACL,IAAI,EAAE,aAAa;gCACnB,OAAO,EAAE,KAAK,CAAC,OAAO;6BACvB;yBACF;qBACF,CAAA;gBACH,CAAC;gBACD,MAAM,KAAK,CAAA;YACb,CAAC;QACH,CAAC;aAAM,CAAC;YACN,uCAAuC;YACvC,6DAA6D;YAC7D,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,QAAQ,EAAE,UAAU,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAA;YAE3F,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,0CAA0C;gBAC1C,OAAO;oBACL,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE,EAAE;oBACX,IAAI,EAAE;wBACJ,OAAO,EAAE,KAAK;wBACd,KAAK,EAAE;4BACL,IAAI,EAAE,mBAAmB;4BACzB,OAAO,EACL,4HAA4H;yBAC/H;qBACF;iBACF,CAAA;YACH,CAAC;YAED,+CAA+C;YAC/C,IAAI,UAAU,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;gBACvC,MAAM,CAAC,IAAI,CAAC,uCAAuC,EAAE;oBACnD,WAAW,EAAE,UAAU,CAAC,KAAK;oBAC7B,OAAO,EAAE,UAAU,CAAC,OAAO;iBAC5B,CAAC,CAAA;gBAEF,OAAO;oBACL,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE,EAAE;oBACX,IAAI,EAAE;wBACJ,OAAO,EAAE,IAAI;wBACb,IAAI,EAAE;4BACJ,WAAW,EAAE,IAAI;4BACjB,QAAQ,EAAE,UAAU,CAAC,QAAQ;4BAC7B,OAAO,EAAE,UAAU,CAAC,OAAO;4BAC3B,SAAS,EAAE,UAAU,CAAC,SAAS;yBAChC;qBACF;iBACF,CAAA;YACH,CAAC;YAED,IAAI,UAAU,CAAC,IAAI,KAAK,oBAAoB,EAAE,CAAC;gBAC7C,MAAM,CAAC,IAAI,CAAC,gCAAgC,EAAE;oBAC5C,WAAW,EAAE,UAAU,CAAC,KAAK;oBAC7B,cAAc,EAAE,UAAU,CAAC,cAAc;iBAC1C,CAAC,CAAA;gBAEF,OAAO;oBACL,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE,EAAE;oBACX,IAAI,EAAE;wBACJ,OAAO,EAAE,IAAI;wBACb,IAAI,EAAE;4BACJ,gBAAgB,EAAE,IAAI;4BACtB,UAAU,EAAE,UAAU,CAAC,UAAU;4BACjC,cAAc,EAAE,UAAU,CAAC,cAAc;4BACzC,OAAO,EAAE,UAAU,CAAC,OAAO;4BAC3B,SAAS,EAAE,UAAU,CAAC,SAAS;yBAChC;qBACF;iBACF,CAAA;YACH,CAAC;YAED,gCAAgC;YAChC,MAAM,CAAC,IAAI,CAAC,4BAA4B,EAAE;gBACxC,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC,EAAE;gBAC1B,WAAW,EAAE,UAAU,CAAC,KAAK;aAC9B,CAAC,CAAA;YAEF,OAAO;gBACL,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,EAAE;gBACX,IAAI,EAAE;oBACJ,OAAO,EAAE,IAAI;oBACb,IAAI,EAAE;wBACJ,KAAK,EAAE,UAAU,CAAC,KAAK;wBACvB,YAAY,EAAE,UAAU,CAAC,YAAY;wBACrC,IAAI,EAAE,UAAU,CAAC,IAAI;wBACrB,SAAS,EAAE,UAAU,CAAC,SAAS;qBAChC;iBACF;aACF,CAAA;QACH,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,uBAAuB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;QAChD,OAAO;YACL,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,EAAE;YACX,IAAI,EAAE;gBACJ,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE;oBACL,IAAI,EAAE,iBAAiB;oBACvB,OAAO,EACL,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,uBAAuB;iBACnE;aACF;SACF,CAAA;IACH,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,IAAgB,EAChB,OAAoB;IAEpB,IAAI,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAClB,OAAO;gBACL,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,EAAE;gBACX,IAAI,EAAE;oBACJ,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE;wBACL,IAAI,EAAE,cAAc;wBACpB,OAAO,EAAE,yBAAyB;qBACnC;iBACF;aACF,CAAA;QACH,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAA;YACzD,MAAM,CAAC,IAAI,CAAC,yBAAyB,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAA;YAEnE,OAAO;gBACL,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,EAAE;gBACX,IAAI,EAAE;oBACJ,OAAO,EAAE,IAAI;oBACb,IAAI,EAAE;wBACJ,OAAO,EAAE,sCAAsC;qBAChD;iBACF;aACF,CAAA;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,iBAAiB,EAAE,CAAC;gBACvC,OAAO;oBACL,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE,EAAE;oBACX,IAAI,EAAE;wBACJ,OAAO,EAAE,KAAK;wBACd,KAAK,EAAE;4BACL,IAAI,EAAE,eAAe;4BACrB,OAAO,EAAE,KAAK,CAAC,OAAO;yBACvB;qBACF;iBACF,CAAA;YACH,CAAC;YACD,MAAM,KAAK,CAAA;QACb,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,iCAAiC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;QAC1D,OAAO;YACL,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,EAAE;YACX,IAAI,EAAE;gBACJ,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE;oBACL,IAAI,EAAE,gBAAgB;oBACtB,OAAO,EAAE,iCAAiC;iBAC3C;aACF;SACF,CAAA;IACH,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,IAAgB,EAChB,QAAqB;IAErB,OAAO;QACL,MAAM,EAAE,GAAG;QACX,OAAO,EAAE,EAAE;QACX,IAAI,EAAE;YACJ,OAAO,EAAE,IAAI;YACb,IAAI,EAAE;gBACJ,SAAS,EAAE;oBACT,MAAM,EAAE,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC;iBACzC;aACF;SACF;KACF,CAAA;AACH,CAAC"}
+{"version":3,"file":"oauth.js","sourceRoot":"","sources":["../../../src/routes/auth/oauth.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAEL,iBAAiB,EACjB,YAAY,EACZ,kBAAkB,GAEnB,MAAM,qBAAqB,CAAA;AAE5B,OAAO,EACL,iBAAiB,EACjB,oBAAoB,EACpB,2BAA2B,GAC5B,MAAM,sBAAsB,CAAA;AAE7B,MAAM,MAAM,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;AA+B9C,MAAM,kBAAkB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;AAEzC,mFAAmF;AACnF,WAAW,CAAC,GAAG,EAAE;IACf,KAAK,2BAA2B,CAAC,gBAAgB,CAAC,CAAA;AACpD,CAAC,EAAE,KAAK,CAAC,CAAA;AAET;;;GAGG;AACH,IAAI,gBAAgB,GAA8B,IAAI,CAAA;AAEtD,SAAS,WAAW,CAAC,IAAgB;IACnC,IAAI,CAAC;QACH,gBAAgB,GAAG,IAAI,CAAC,qBAAqB,EAAE,CAAA;QAC/C,OAAO,gBAAgB,CAAA;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,mBAAmB;AACnB,gFAAgF;AAEhF,SAAS,qBAAqB,CAAC,IAAgB;IAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAA;IAC5C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,IAAI,CAAA;IACb,CAAC;IACD,OAAO,IAAI,kBAAkB,CAAC;QAC5B,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,WAAW,EAAE,MAAM,CAAC,WAAW;KAChC,CAAC,CAAA;AACJ,CAAC;AAED,gFAAgF;AAChF,iBAAiB;AACjB,gFAAgF;AAEhF;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,IAAgB,EAChB,OAAoB;IAEpB,IAAI,CAAC;QACH,MAAM,aAAa,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAA;QACjD,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,OAAO;gBACL,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,EAAE;gBACX,IAAI,EAAE;oBACJ,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE;wBACL,IAAI,EAAE,sBAAsB;wBAC5B,OAAO,EAAE,gCAAgC;qBAC1C;iBACF;aACF,CAAA;QACH,CAAC;QAED,MAAM,IAAI,GAAG,OAAO,CAAC,IAAwB,CAAA;QAC7C,MAAM,IAAI,GAAG,IAAI,EAAE,IAAI,IAAI,OAAO,CAAA;QAElC,4CAA4C;QAC5C,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;YACpB,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;gBAClB,OAAO;oBACL,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE,EAAE;oBACX,IAAI,EAAE;wBACJ,OAAO,EAAE,KAAK;wBACd,KAAK,EAAE;4BACL,IAAI,EAAE,cAAc;4BACpB,OAAO,EAAE,yCAAyC;yBACnD;qBACF;iBACF,CAAA;YACH,CAAC;QACH,CAAC;QAED,0BAA0B;QAC1B,MAAM,IAAI,GAAG,aAAa,CAAC,YAAY,EAAE,CAAA;QACzC,MAAM,KAAK,GAAG,aAAa,CAAC,aAAa,EAAE,CAAA;QAE3C,yDAAyD;QACzD,MAAM,iBAAiB,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE;YACzC,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,OAAO;YACb,IAAI,EAAE;gBACJ,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,IAAI;gBACJ,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE;aACD;YACzB,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,kBAAkB,CAAC,CAAC,WAAW,EAAE;SACnE,CAAC,CAAA;QAEF,oEAAoE;QACpE,MAAM,OAAO,GAAG,aAAa,CAAC,mBAAmB,CAAC,KAAK,EAAE,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,CAAA;QAElF,MAAM,CAAC,IAAI,CAAC,sBAAsB,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAA;QAE3E,OAAO;YACL,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,EAAE;YACX,IAAI,EAAE;gBACJ,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE;oBACJ,OAAO;oBACP,KAAK;oBACL,gEAAgE;oBAChE,sCAAsC;oBACtC,YAAY,EAAE,IAAI,CAAC,YAAY;iBAChC;aACF;SACF,CAAA;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,4BAA4B,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;QACrD,OAAO;YACL,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,EAAE;YACX,IAAI,EAAE;gBACJ,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE;oBACL,IAAI,EAAE,gBAAgB;oBACtB,OAAO,EAAE,iCAAiC;iBAC3C;aACF;SACF,CAAA;IACH,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,IAAgB,EAChB,OAAoB;IAEpB,IAAI,CAAC;QACH,MAAM,aAAa,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAA;QACjD,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,OAAO;gBACL,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,EAAE;gBACX,IAAI,EAAE;oBACJ,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE;wBACL,IAAI,EAAE,sBAAsB;wBAC5B,OAAO,EAAE,gCAAgC;qBAC1C;iBACF;aACF,CAAA;QACH,CAAC;QAED,MAAM,IAAI,GAAG,OAAO,CAAC,IAA4B,CAAA;QACjD,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAA;QAE1D,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC,YAAY,EAAE,CAAC;YACrC,OAAO;gBACL,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,EAAE;gBACX,IAAI,EAAE;oBACJ,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE;wBACL,IAAI,EAAE,iBAAiB;wBACvB,OAAO,EAAE,wDAAwD;qBAClE;iBACF;aACF,CAAA;QACH,CAAC;QAED,2EAA2E;QAC3E,2EAA2E;QAC3E,0EAA0E;QAC1E,qDAAqD;QACrD,MAAM,UAAU,GAAG,MAAM,oBAAoB,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,CAAA;QAChF,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO;gBACL,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,EAAE;gBACX,IAAI,EAAE;oBACJ,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE;wBACL,IAAI,EAAE,eAAe;wBACrB,OAAO,EAAE,oCAAoC;qBAC9C;iBACF;aACF,CAAA;QACH,CAAC;QAED,MAAM,WAAW,GAAG,UAAU,CAAC,IAAgC,CAAA;QAE/D,2BAA2B;QAC3B,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,qBAAqB,CAAC,IAAI,EAAE,YAAY,CAAC,CAAA;QAE5E,4BAA4B;QAC5B,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,WAAW,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;QAEtE,qBAAqB;QACrB,aAAa,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAA;QAE1C,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;YACpB,yCAAyC;YACzC,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,IAAI,OAAO,CAAC,IAAI,EAAE,EAAE,CAAA;YACrD,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,OAAO;oBACL,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE,EAAE;oBACX,IAAI,EAAE;wBACJ,OAAO,EAAE,KAAK;wBACd,KAAK,EAAE;4BACL,IAAI,EAAE,cAAc;4BACpB,OAAO,EAAE,4CAA4C;yBACtD;qBACF;iBACF,CAAA;YACH,CAAC;YAED,MAAM,QAAQ,GAAkB;gBAC9B,QAAQ,EAAE,QAAQ;gBAClB,UAAU,EAAE,UAAU,CAAC,GAAG;gBAC1B,KAAK,EAAE,UAAU,CAAC,KAAK;gBACvB,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACnC,CAAA;YAED,IAAI,CAAC;gBACH,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;gBAClE,MAAM,CAAC,IAAI,CAAC,uBAAuB,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC,CAAA;gBAE/E,OAAO;oBACL,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE,EAAE;oBACX,IAAI,EAAE;wBACJ,OAAO,EAAE,IAAI;wBACb,IAAI,EAAE;4BACJ,OAAO,EAAE,oCAAoC;4BAC7C,QAAQ,EAAE;gCACR,QAAQ,EAAE,QAAQ;gCAClB,KAAK,EAAE,UAAU,CAAC,KAAK;gCACvB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;6BAC5B;yBACF;qBACF;iBACF,CAAA;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,YAAY,iBAAiB,EAAE,CAAC;oBACvC,OAAO;wBACL,MAAM,EAAE,GAAG;wBACX,OAAO,EAAE,EAAE;wBACX,IAAI,EAAE;4BACJ,OAAO,EAAE,KAAK;4BACd,KAAK,EAAE;gCACL,IAAI,EAAE,aAAa;gCACnB,OAAO,EAAE,KAAK,CAAC,OAAO;6BACvB;yBACF;qBACF,CAAA;gBACH,CAAC;gBACD,MAAM,KAAK,CAAA;YACb,CAAC;QACH,CAAC;aAAM,CAAC;YACN,uCAAuC;YACvC,6DAA6D;YAC7D,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,QAAQ,EAAE,UAAU,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAA;YAE3F,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,0CAA0C;gBAC1C,OAAO;oBACL,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE,EAAE;oBACX,IAAI,EAAE;wBACJ,OAAO,EAAE,KAAK;wBACd,KAAK,EAAE;4BACL,IAAI,EAAE,mBAAmB;4BACzB,OAAO,EACL,4HAA4H;yBAC/H;qBACF;iBACF,CAAA;YACH,CAAC;YAED,+CAA+C;YAC/C,IAAI,UAAU,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;gBACvC,MAAM,CAAC,IAAI,CAAC,uCAAuC,EAAE;oBACnD,WAAW,EAAE,UAAU,CAAC,KAAK;oBAC7B,OAAO,EAAE,UAAU,CAAC,OAAO;iBAC5B,CAAC,CAAA;gBAEF,OAAO;oBACL,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE,EAAE;oBACX,IAAI,EAAE;wBACJ,OAAO,EAAE,IAAI;wBACb,IAAI,EAAE;4BACJ,WAAW,EAAE,IAAI;4BACjB,QAAQ,EAAE,UAAU,CAAC,QAAQ;4BAC7B,OAAO,EAAE,UAAU,CAAC,OAAO;4BAC3B,SAAS,EAAE,UAAU,CAAC,SAAS;yBAChC;qBACF;iBACF,CAAA;YACH,CAAC;YAED,IAAI,UAAU,CAAC,IAAI,KAAK,oBAAoB,EAAE,CAAC;gBAC7C,MAAM,CAAC,IAAI,CAAC,gCAAgC,EAAE;oBAC5C,WAAW,EAAE,UAAU,CAAC,KAAK;oBAC7B,cAAc,EAAE,UAAU,CAAC,cAAc;iBAC1C,CAAC,CAAA;gBAEF,OAAO;oBACL,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE,EAAE;oBACX,IAAI,EAAE;wBACJ,OAAO,EAAE,IAAI;wBACb,IAAI,EAAE;4BACJ,gBAAgB,EAAE,IAAI;4BACtB,UAAU,EAAE,UAAU,CAAC,UAAU;4BACjC,cAAc,EAAE,UAAU,CAAC,cAAc;4BACzC,OAAO,EAAE,UAAU,CAAC,OAAO;4BAC3B,SAAS,EAAE,UAAU,CAAC,SAAS;yBAChC;qBACF;iBACF,CAAA;YACH,CAAC;YAED,gCAAgC;YAChC,MAAM,CAAC,IAAI,CAAC,4BAA4B,EAAE;gBACxC,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC,EAAE;gBAC1B,WAAW,EAAE,UAAU,CAAC,KAAK;aAC9B,CAAC,CAAA;YAEF,OAAO;gBACL,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,EAAE;gBACX,IAAI,EAAE;oBACJ,OAAO,EAAE,IAAI;oBACb,IAAI,EAAE;wBACJ,KAAK,EAAE,UAAU,CAAC,KAAK;wBACvB,YAAY,EAAE,UAAU,CAAC,YAAY;wBACrC,IAAI,EAAE,UAAU,CAAC,IAAI;wBACrB,SAAS,EAAE,UAAU,CAAC,SAAS;qBAChC;iBACF;aACF,CAAA;QACH,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,uBAAuB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;QAChD,OAAO;YACL,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,EAAE;YACX,IAAI,EAAE;gBACJ,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE;oBACL,IAAI,EAAE,iBAAiB;oBACvB,OAAO,EACL,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,uBAAuB;iBACnE;aACF;SACF,CAAA;IACH,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,IAAgB,EAChB,OAAoB;IAEpB,IAAI,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAClB,OAAO;gBACL,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,EAAE;gBACX,IAAI,EAAE;oBACJ,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE;wBACL,IAAI,EAAE,cAAc;wBACpB,OAAO,EAAE,yBAAyB;qBACnC;iBACF;aACF,CAAA;QACH,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAA;YACzD,MAAM,CAAC,IAAI,CAAC,yBAAyB,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAA;YAEnE,OAAO;gBACL,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,EAAE;gBACX,IAAI,EAAE;oBACJ,OAAO,EAAE,IAAI;oBACb,IAAI,EAAE;wBACJ,OAAO,EAAE,sCAAsC;qBAChD;iBACF;aACF,CAAA;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,iBAAiB,EAAE,CAAC;gBACvC,OAAO;oBACL,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE,EAAE;oBACX,IAAI,EAAE;wBACJ,OAAO,EAAE,KAAK;wBACd,KAAK,EAAE;4BACL,IAAI,EAAE,eAAe;4BACrB,OAAO,EAAE,KAAK,CAAC,OAAO;yBACvB;qBACF;iBACF,CAAA;YACH,CAAC;YACD,MAAM,KAAK,CAAA;QACb,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,iCAAiC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;QAC1D,OAAO;YACL,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,EAAE;YACX,IAAI,EAAE;gBACJ,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE;oBACL,IAAI,EAAE,gBAAgB;oBACtB,OAAO,EAAE,iCAAiC;iBAC3C;aACF;SACF,CAAA;IACH,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,IAAgB,EAChB,QAAqB;IAErB,OAAO;QACL,MAAM,EAAE,GAAG;QACX,OAAO,EAAE,EAAE;QACX,IAAI,EAAE;YACJ,OAAO,EAAE,IAAI;YACb,IAAI,EAAE;gBACJ,SAAS,EAAE;oBACT,MAAM,EAAE,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC;iBACzC;aACF;SACF;KACF,CAAA;AACH,CAAC"}

package/dist/routes/auth/oauth2-server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"oauth2-server.d.ts","sourceRoot":"","sources":["../../../src/routes/auth/oauth2-server.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAC5D,OAAO,EAAE,UAAU,EAAgB,MAAM,qBAAqB,CAAA;AAqC9D;;;;;;GAMG;AACH,wBAAsB,wBAAwB,CAC5C,IAAI,EAAE,UAAU,EAChB,OAAO,EAAE,WAAW,GACnB,OAAO,CAAC,YAAY,CAAC,CAiEvB;AAED;;;;;;GAMG;AACH,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,UAAU,EAChB,OAAO,EAAE,WAAW,GACnB,OAAO,CAAC,YAAY,CAAC,CA0GvB;AAED;;;;;;GAMG;AACH,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,UAAU,EAChB,OAAO,EAAE,WAAW,GACnB,OAAO,CAAC,YAAY,CAAC,CAyHvB;AAMD;;;;;;;;GAQG;AACH,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,UAAU,EAChB,OAAO,EAAE,WAAW,GACnB,OAAO,CAAC,YAAY,CAAC,CAqOvB;AAMD;;;;;;;GAOG;AACH,wBAAsB,4BAA4B,CAChD,IAAI,EAAE,UAAU,EAChB,OAAO,EAAE,WAAW,GACnB,OAAO,CAAC,YAAY,CAAC,CA4HvB;AAED;;;;;;GAMG;AACH,wBAAsB,2BAA2B,CAC/C,IAAI,EAAE,UAAU,EAChB,OAAO,EAAE,WAAW,GACnB,OAAO,CAAC,YAAY,CAAC,CAkHvB;AAMD;;;;;GAKG;AACH,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,UAAU,EAChB,QAAQ,EAAE,WAAW,GACpB,OAAO,CAAC,YAAY,CAAC,CAkBvB"}
+{"version":3,"file":"oauth2-server.d.ts","sourceRoot":"","sources":["../../../src/routes/auth/oauth2-server.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAC5D,OAAO,EAAE,UAAU,EAAgB,MAAM,qBAAqB,CAAA;AAqC9D;;;;;;GAMG;AACH,wBAAsB,wBAAwB,CAC5C,IAAI,EAAE,UAAU,EAChB,OAAO,EAAE,WAAW,GACnB,OAAO,CAAC,YAAY,CAAC,CA8DvB;AAED;;;;;;GAMG;AACH,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,UAAU,EAChB,OAAO,EAAE,WAAW,GACnB,OAAO,CAAC,YAAY,CAAC,CA0GvB;AAED;;;;;;GAMG;AACH,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,UAAU,EAChB,OAAO,EAAE,WAAW,GACnB,OAAO,CAAC,YAAY,CAAC,CAyHvB;AAMD;;;;;;;;GAQG;AACH,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,UAAU,EAChB,OAAO,EAAE,WAAW,GACnB,OAAO,CAAC,YAAY,CAAC,CAqOvB;AAMD;;;;;;;GAOG;AACH,wBAAsB,4BAA4B,CAChD,IAAI,EAAE,UAAU,EAChB,OAAO,EAAE,WAAW,GACnB,OAAO,CAAC,YAAY,CAAC,CA4HvB;AAED;;;;;;GAMG;AACH,wBAAsB,2BAA2B,CAC/C,IAAI,EAAE,UAAU,EAChB,OAAO,EAAE,WAAW,GACnB,OAAO,CAAC,YAAY,CAAC,CAkHvB;AAMD;;;;;GAKG;AACH,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,UAAU,EAChB,QAAQ,EAAE,WAAW,GACpB,OAAO,CAAC,YAAY,CAAC,CAkBvB"}

package/dist/routes/auth/oauth2-server.js

@@ -58,10 +58,7 @@ export async function startDeviceAuthorization(core, request) {
                 }
             };
         }
-        logger.info('Started device authorization', {
-            clientId,
-            userCode: result.response.user_code
-        });
+        logger.info('Started device authorization', { clientId });
         return {
             status: 200,
             headers: { 'Content-Type': 'application/json' },