@vunexa/lixa 0.1.4 → 0.1.6-alpha.2

package/README.md

@@ -28,7 +28,36 @@ A flexible, provider-agnostic OAuth 2.0 and OpenID Connect (OIDC) client library
 
 ## Architecture Overview
 
-![Architecture Overview](https://cdn.jsdelivr.net/npm/@vunexa/lixa/docs/images/architecture.svg)
+```mermaid
+graph TD
+    User([User Client / Browser])
+    
+    subgraph Lixa ["Lixa Core Engine"]
+        AuthNGuard["Primary AuthN Guard<br/>(Minimal Identity Scopes Only)"]
+        SessionMgr["Session Handler & Unified Session"]
+        AccountLinker["Account Linker<br/>(AUTO_LINK_BY_VERIFIED_EMAIL)"]
+        ResourceConn["Resource Connection API<br/>(Post-Login AuthZ)"]
+    end
+
+    subgraph IdentityProviders ["Identity Providers (AuthN)"]
+        GoogleAuth["Google / OIDC"]
+        GitHubAuth["GitHub OAuth"]
+    end
+
+    subgraph ResourceProviders ["Resource APIs (AuthZ)"]
+        GitHubAPI["GitHub API (repos, orgs)"]
+        GoogleDriveAPI["Google Drive API"]
+    end
+
+    User -->|"1. Primary Login / Link Account"| AuthNGuard
+    AuthNGuard -->|"Request Identity"| IdentityProviders
+    IdentityProviders -->|"Tokens + UserInfo"| AccountLinker
+    AccountLinker -->|"Unified Session (session.accounts)"| SessionMgr
+    
+    User -->|"2. Connect Resource API (Post-Login)"| ResourceConn
+    ResourceConn -->|"Request Permissions (repo, drive)"| ResourceProviders
+    ResourceProviders -->|"Resource Access Tokens"| SessionMgr
+```
 
 ---
 
@@ -220,26 +249,26 @@ export interface Session<TRaw = OAuthTokenResponse> {
   /** Unique session ID generated by Lixa */
   id?: string;
 
-  /** Primary access token or session token */
-  token: string;
-
   /** Unified user ID across linked accounts */
   userId?: string;
 
   /** Primary user email */
   email?: string;
 
-  /** Current active auth provider */
-  provider?: string;
-
-  /** Linked SSO provider accounts (AuthN) */
+  /** Linked SSO provider accounts (AuthN) - Single Source of Truth */
   accounts?: Record<string, LinkedAccount>;
 
-  /** Connected third-party resource provider tokens (AuthZ) */
+  /** Connected third-party resource provider tokens (AuthZ) - Single Source of Truth */
   resources?: Record<string, ConnectedResource>;
 
-  /** Full raw token response from provider */
-  raw: TRaw;
+  /** Optional primary access token or session token */
+  token?: string;
+
+  /** Optional current active auth provider */
+  provider?: string;
+
+  /** Optional raw token response from provider */
+  raw?: TRaw;
 }
 ```
 
@@ -252,6 +281,277 @@ export interface Session<TRaw = OAuthTokenResponse> {
 
 ---
 
+## Custom Session Storage Implementations
+
+Lixa allows you to store sessions in any database or cache by implementing the `SessionStorage` interface.
+
+### 1. SQLite Session Storage (`better-sqlite3`)
+
+For relational persistence or single-node deployments using SQLite:
+
+#### Table Schema (SQL DDL)
+
+```sql
+CREATE TABLE IF NOT EXISTS sessions (
+  id TEXT PRIMARY KEY,
+  user_email TEXT,
+  data TEXT NOT NULL,
+  expires_at INTEGER NOT NULL
+);
+
+CREATE INDEX IF NOT EXISTS idx_sessions_email ON sessions(user_email);
+CREATE INDEX IF NOT EXISTS idx_sessions_expires ON sessions(expires_at);
+```
+
+#### TypeScript Implementation
+
+```typescript
+import Database from "better-sqlite3";
+import { Lixa, type SessionStorage, type Session } from "@vunexa/lixa";
+
+export class SqliteSessionStorage implements SessionStorage {
+  private db = new Database("lixa_sessions.db");
+
+  constructor() {
+    this.db.exec(`
+      CREATE TABLE IF NOT EXISTS sessions (
+        id TEXT PRIMARY KEY,
+        user_email TEXT,
+        data TEXT NOT NULL,
+        expires_at INTEGER NOT NULL
+      );
+      CREATE INDEX IF NOT EXISTS idx_sessions_email ON sessions(user_email);
+    `);
+  }
+
+  async saveSession<T extends Session>(sessionId: string, session: T, expiresInSeconds: number): Promise<void> {
+    const expiresAt = Math.floor(Date.now() / 1000) + expiresInSeconds;
+    const stmt = this.db.prepare(`
+      INSERT INTO sessions (id, user_email, data, expires_at)
+      VALUES (?, ?, ?, ?)
+      ON CONFLICT(id) DO UPDATE SET
+        user_email = excluded.user_email,
+        data = excluded.data,
+        expires_at = excluded.expires_at
+    `);
+    stmt.run(sessionId, session.email || null, JSON.stringify(session), expiresAt);
+  }
+
+  async getSession<T extends Session>(sessionId: string): Promise<T | null> {
+    const now = Math.floor(Date.now() / 1000);
+    const stmt = this.db.prepare(`SELECT data FROM sessions WHERE id = ? AND expires_at > ?`);
+    const row = stmt.get(sessionId, now) as { data: string } | undefined;
+    return row ? (JSON.parse(row.data) as T) : null;
+  }
+
+  async deleteSession(sessionId: string): Promise<void> {
+    const stmt = this.db.prepare(`DELETE FROM sessions WHERE id = ?`);
+    stmt.run(sessionId);
+  }
+
+  async getSessionByEmail<T extends Session>(email: string): Promise<{ sessionId: string; session: T } | null> {
+    const now = Math.floor(Date.now() / 1000);
+    const stmt = this.db.prepare(`SELECT id, data FROM sessions WHERE user_email = ? AND expires_at > ? LIMIT 1`);
+    const row = stmt.get(email, now) as { id: string; data: string } | undefined;
+    return row ? { sessionId: row.id, session: JSON.parse(row.data) as T } : null;
+  }
+}
+
+// Pass to Lixa instance
+export const lixa = new Lixa({
+  sessionHandler: {
+    sessionStorage: new SqliteSessionStorage(),
+  },
+  providers: { /* ... */ },
+});
+```
+
+#### Saved JSON Record Example in SQLite (`data` Column)
+
+```json
+{
+  "id": "e4a91f82c3b4a07f",
+  "token": "ya29.a0ARW5m7...",
+  "userId": "1049281048",
+  "email": "alex.developer@example.com",
+  "provider": "google",
+  "accounts": {
+    "google": {
+      "provider": "google",
+      "email": "alex.developer@example.com",
+      "providerUserId": "1049281048",
+      "accessToken": "ya29.a0ARW5m7...",
+      "linkedAt": 1771657200000
+    },
+    "github": {
+      "provider": "github",
+      "email": "alex.developer@example.com",
+      "providerUserId": "5829104",
+      "accessToken": "gho_8f7b2a9e1c3...",
+      "linkedAt": 1771657250000
+    }
+  },
+  "resources": {
+    "github": {
+      "provider": "github",
+      "accessToken": "gho_resource_repo_9a8b7c...",
+      "scopes": ["repo", "read:org"],
+      "connectedAt": 1771657300000
+    }
+  },
+  "raw": {
+    "access_token": "ya29.a0ARW5m7...",
+    "token_type": "Bearer",
+    "expires_in": 3599
+  }
+}
+```
+
+---
+
+### 2. AWS DynamoDB Session Storage (`@aws-sdk/lib-dynamodb`)
+
+For serverless and distributed AWS deployments using DynamoDB:
+
+#### Table Configuration
+
+- **Table Name**: `LixaSessions`
+- **Partition Key**: `sessionId` (String)
+- **Global Secondary Index (GSI)**: `EmailIndex` (`email` as Partition Key)
+- **TTL Attribute**: `ttl` (Unix timestamp in seconds for automatic AWS expiration)
+
+#### TypeScript Implementation
+
+```typescript
+import { DynamoDBClient } from "@aws-sdk/client-dynamodb";
+import { DynamoDBDocumentClient, PutCommand, GetCommand, DeleteCommand, QueryCommand } from "@aws-sdk/lib-dynamodb";
+import { Lixa, type SessionStorage, type Session } from "@vunexa/lixa";
+
+export class DynamoDbSessionStorage implements SessionStorage {
+  private docClient: DynamoDBDocumentClient;
+  private tableName = "LixaSessions";
+
+  constructor() {
+    const client = new DynamoDBClient({ region: process.env.AWS_REGION || "us-east-1" });
+    this.docClient = DynamoDBDocumentClient.from(client);
+  }
+
+  async saveSession<T extends Session>(sessionId: string, session: T, expiresInSeconds: number): Promise<void> {
+    const ttl = Math.floor(Date.now() / 1000) + expiresInSeconds;
+    await this.docClient.send(
+      new PutCommand({
+        TableName: this.tableName,
+        Item: {
+          sessionId,
+          email: session.email || "N/A",
+          sessionData: session,
+          ttl,
+        },
+      })
+    );
+  }
+
+  async getSession<T extends Session>(sessionId: string): Promise<T | null> {
+    const res = await this.docClient.send(
+      new GetCommand({
+        TableName: this.tableName,
+        Key: { sessionId },
+      })
+    );
+
+    if (!res.Item) return null;
+    const now = Math.floor(Date.now() / 1000);
+    if (res.Item.ttl && res.Item.ttl < now) return null;
+
+    return res.Item.sessionData as T;
+  }
+
+  async deleteSession(sessionId: string): Promise<void> {
+    await this.docClient.send(
+      new DeleteCommand({
+        TableName: this.tableName,
+        Key: { sessionId },
+      })
+    );
+  }
+
+  async getSessionByEmail<T extends Session>(email: string): Promise<{ sessionId: string; session: T } | null> {
+    const res = await this.docClient.send(
+      new QueryCommand({
+        TableName: this.tableName,
+        IndexName: "EmailIndex",
+        KeyConditionExpression: "email = :email",
+        ExpressionAttributeValues: { ":email": email },
+        Limit: 1,
+      })
+    );
+
+    if (!res.Items || res.Items.length === 0) return null;
+    const item = res.Items[0];
+    const now = Math.floor(Date.now() / 1000);
+    if (item.ttl && item.ttl < now) return null;
+
+    return { sessionId: item.sessionId, session: item.sessionData as T };
+  }
+}
+
+// Pass to Lixa instance
+export const lixa = new Lixa({
+  sessionHandler: {
+    sessionStorage: new DynamoDbSessionStorage(),
+  },
+  providers: { /* ... */ },
+});
+```
+
+#### Saved DynamoDB Item JSON Example
+
+```json
+{
+  "sessionId": "e4a91f82c3b4a07f",
+  "email": "alex.developer@example.com",
+  "ttl": 1771743600,
+  "sessionData": {
+    "id": "e4a91f82c3b4a07f",
+    "token": "ya29.a0ARW5m7...",
+    "userId": "1049281048",
+    "email": "alex.developer@example.com",
+    "provider": "google",
+    "accounts": {
+      "google": {
+        "provider": "google",
+        "email": "alex.developer@example.com",
+        "providerUserId": "1049281048",
+        "accessToken": "ya29.a0ARW5m7...",
+        "linkedAt": 1771657200000
+      },
+      "github": {
+        "provider": "github",
+        "email": "alex.developer@example.com",
+        "providerUserId": "5829104",
+        "accessToken": "gho_8f7b2a9e1c3...",
+        "linkedAt": 1771657250000
+      }
+    },
+    "resources": {
+      "github": {
+        "provider": "github",
+        "accessToken": "gho_resource_repo_9a8b7c...",
+        "scopes": ["repo", "read:org"],
+        "connectedAt": 1771657300000
+      }
+    },
+    "raw": {
+      "access_token": "ya29.a0ARW5m7...",
+      "token_type": "Bearer",
+      "expires_in": 3599
+    }
+  }
+}
+```
+
+---
+
 ## User Info Utilities
 
 Lixa provides utilities to extract user information from OAuth tokens:

package/README.template.md

@@ -310,26 +310,26 @@ export interface Session<TRaw = OAuthTokenResponse> {
   /** Unique session ID generated by Lixa */
   id?: string;
 
-  /** Primary access token or session token */
-  token: string;
-
   /** Unified user ID across linked accounts */
   userId?: string;
 
   /** Primary user email */
   email?: string;
 
-  /** Current active auth provider */
-  provider?: string;
-
-  /** Linked SSO provider accounts (AuthN) */
+  /** Linked SSO provider accounts (AuthN) - Single Source of Truth */
   accounts?: Record<string, LinkedAccount>;
 
-  /** Connected third-party resource provider tokens (AuthZ) */
+  /** Connected third-party resource provider tokens (AuthZ) - Single Source of Truth */
   resources?: Record<string, ConnectedResource>;
 
-  /** Full raw token response from provider */
-  raw: TRaw;
+  /** Optional primary access token or session token */
+  token?: string;
+
+  /** Optional current active auth provider */
+  provider?: string;
+
+  /** Optional raw token response from provider */
+  raw?: TRaw;
 }
 ```
 

package/dist/export-types/index.d.ts

@@ -976,25 +976,29 @@ export declare interface Session<TRaw = OAuthTokenResponse> {
      */
     id?: string;
     /**
-     * The primary access token or session token identifier.
+     * Linked identity provider accounts (AuthN) keyed by provider name.
+     * Single source of truth for all authenticated user SSO identities.
      */
-    token: string;
+    accounts?: Record<string, LinkedAccount>;
+    /**
+     * Connected third-party resource provider tokens (AuthZ) keyed by provider name.
+     * Single source of truth for all post-login third-party API permissions.
+     */
+    resources?: Record<string, ConnectedResource>;
     /** Unique unified user ID across linked accounts */
     userId?: string;
     /** Primary user email */
     email?: string;
-    /** Current active auth provider for this session turn */
+    /**
+     * Optional primary access token or custom session token identifier.
+     */
+    token?: string;
+    /** Optional current active auth provider for this session turn */
     provider?: string;
-    /** Linked SSO provider accounts keyed by provider name */
-    accounts?: Record<string, LinkedAccount>;
-    /** Connected third-party resource provider tokens keyed by provider name */
-    resources?: Record<string, ConnectedResource>;
     /**
-     * Raw session data.
-     * Contains the complete OAuth token response and any additional data
-     * your SessionStrategy adds (user info, database IDs, etc.).
+     * Optional raw session token response data from provider.
      */
-    raw: TRaw;
+    raw?: TRaw;
 }
 
 /**

package/dist/index.d.cts

@@ -103,25 +103,29 @@ interface Session<TRaw = OAuthTokenResponse> {
      */
     id?: string;
     /**
-     * The primary access token or session token identifier.
+     * Linked identity provider accounts (AuthN) keyed by provider name.
+     * Single source of truth for all authenticated user SSO identities.
      */
-    token: string;
+    accounts?: Record<string, LinkedAccount>;
+    /**
+     * Connected third-party resource provider tokens (AuthZ) keyed by provider name.
+     * Single source of truth for all post-login third-party API permissions.
+     */
+    resources?: Record<string, ConnectedResource>;
     /** Unique unified user ID across linked accounts */
     userId?: string;
     /** Primary user email */
     email?: string;
-    /** Current active auth provider for this session turn */
+    /**
+     * Optional primary access token or custom session token identifier.
+     */
+    token?: string;
+    /** Optional current active auth provider for this session turn */
     provider?: string;
-    /** Linked SSO provider accounts keyed by provider name */
-    accounts?: Record<string, LinkedAccount>;
-    /** Connected third-party resource provider tokens keyed by provider name */
-    resources?: Record<string, ConnectedResource>;
     /**
-     * Raw session data.
-     * Contains the complete OAuth token response and any additional data
-     * your SessionStrategy adds (user info, database IDs, etc.).
+     * Optional raw session token response data from provider.
      */
-    raw: TRaw;
+    raw?: TRaw;
 }
 /**
  * Provider metadata passed to session strategy.

package/dist/models/session.d.ts

@@ -103,25 +103,29 @@ export interface Session<TRaw = OAuthTokenResponse> {
      */
     id?: string;
     /**
-     * The primary access token or session token identifier.
+     * Linked identity provider accounts (AuthN) keyed by provider name.
+     * Single source of truth for all authenticated user SSO identities.
      */
-    token: string;
+    accounts?: Record<string, LinkedAccount>;
+    /**
+     * Connected third-party resource provider tokens (AuthZ) keyed by provider name.
+     * Single source of truth for all post-login third-party API permissions.
+     */
+    resources?: Record<string, ConnectedResource>;
     /** Unique unified user ID across linked accounts */
     userId?: string;
     /** Primary user email */
     email?: string;
-    /** Current active auth provider for this session turn */
+    /**
+     * Optional primary access token or custom session token identifier.
+     */
+    token?: string;
+    /** Optional current active auth provider for this session turn */
     provider?: string;
-    /** Linked SSO provider accounts keyed by provider name */
-    accounts?: Record<string, LinkedAccount>;
-    /** Connected third-party resource provider tokens keyed by provider name */
-    resources?: Record<string, ConnectedResource>;
     /**
-     * Raw session data.
-     * Contains the complete OAuth token response and any additional data
-     * your SessionStrategy adds (user info, database IDs, etc.).
+     * Optional raw session token response data from provider.
      */
-    raw: TRaw;
+    raw?: TRaw;
 }
 /**
  * Provider metadata passed to session strategy.

package/dist/models/session.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../../src/models/session.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,MAAM,WAAW,kBAAkB;IACjC;;;OAGG;IACH,YAAY,EAAE,MAAM,CAAC;IAErB;;;OAGG;IACH,UAAU,EAAE,MAAM,CAAC;IAEnB;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB;;;OAGG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB;;;OAGG;IACH,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;CACtD;AAED;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,wDAAwD;IACxD,QAAQ,EAAE,MAAM,CAAC;IAEjB,oCAAoC;IACpC,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAEpC,mCAAmC;IACnC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAE3B,2CAA2C;IAC3C,WAAW,EAAE,MAAM,CAAC;IAEpB,4CAA4C;IAC5C,GAAG,EAAE,kBAAkB,CAAC;IAExB,6DAA6D;IAC7D,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;;;GAKG;AACH,MAAM,WAAW,iBAAiB;IAChC,iEAAiE;IACjE,QAAQ,EAAE,MAAM,CAAC;IAEjB,4BAA4B;IAC5B,WAAW,EAAE,MAAM,CAAC;IAEpB,yDAAyD;IACzD,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAElC,0CAA0C;IAC1C,MAAM,EAAE,MAAM,EAAE,CAAC;IAEjB,4CAA4C;IAC5C,GAAG,EAAE,kBAAkB,CAAC;IAExB,iEAAiE;IACjE,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,OAAO,CAAC,IAAI,GAAG,kBAAkB;IAChD;;OAEG;IACH,EAAE,CAAC,EAAE,MAAM,CAAC;IAEZ;;OAEG;IACH,KAAK,EAAE,MAAM,CAAC;IAEd,oDAAoD;IACpD,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,yBAAyB;IACzB,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf,yDAAyD;IACzD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,0DAA0D;IAC1D,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAEzC,4EAA4E;IAC5E,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IAE9C;;;;OAIG;IACH,GAAG,EAAE,IAAI,CAAC;CACX;AAED;;;;;GAKG;AACH,MAAM,WAAW,gBAAgB;IAC/B,mDAAmD;IACnD,IAAI,EAAE,MAAM,CAAC;IAEb,yBAAyB;IACzB,SAAS,EAAE;QACT,iCAAiC;QACjC,aAAa,EAAE,MAAM,CAAC;QACtB,yBAAyB;QACzB,KAAK,EAAE,MAAM,CAAC;QACd,4BAA4B;QAC5B,QAAQ,EAAE,MAAM,CAAC;KAClB,CAAC;CACH;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqEG;AACH,MAAM,WAAW,eAAe;IAC9B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAgFG;IACH,aAAa,CAAC,SAAS,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACpG;AAED;;;;;GAKG;AACH,qBAAa,sBAAuB,YAAW,eAAe;IAC5D;;;;;;;OAOG;IACG,aAAa,CAAC,SAAS,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC;CAUzG"}
+{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../../src/models/session.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,MAAM,WAAW,kBAAkB;IACjC;;;OAGG;IACH,YAAY,EAAE,MAAM,CAAC;IAErB;;;OAGG;IACH,UAAU,EAAE,MAAM,CAAC;IAEnB;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB;;;OAGG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB;;;OAGG;IACH,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;CACtD;AAED;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,wDAAwD;IACxD,QAAQ,EAAE,MAAM,CAAC;IAEjB,oCAAoC;IACpC,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAEpC,mCAAmC;IACnC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAE3B,2CAA2C;IAC3C,WAAW,EAAE,MAAM,CAAC;IAEpB,4CAA4C;IAC5C,GAAG,EAAE,kBAAkB,CAAC;IAExB,6DAA6D;IAC7D,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;;;GAKG;AACH,MAAM,WAAW,iBAAiB;IAChC,iEAAiE;IACjE,QAAQ,EAAE,MAAM,CAAC;IAEjB,4BAA4B;IAC5B,WAAW,EAAE,MAAM,CAAC;IAEpB,yDAAyD;IACzD,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAElC,0CAA0C;IAC1C,MAAM,EAAE,MAAM,EAAE,CAAC;IAEjB,4CAA4C;IAC5C,GAAG,EAAE,kBAAkB,CAAC;IAExB,iEAAiE;IACjE,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,OAAO,CAAC,IAAI,GAAG,kBAAkB;IAChD;;OAEG;IACH,EAAE,CAAC,EAAE,MAAM,CAAC;IAEZ;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAEzC;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IAE9C,oDAAoD;IACpD,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,yBAAyB;IACzB,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf,kEAAkE;IAClE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB;;OAEG;IACH,GAAG,CAAC,EAAE,IAAI,CAAC;CACZ;AAED;;;;;GAKG;AACH,MAAM,WAAW,gBAAgB;IAC/B,mDAAmD;IACnD,IAAI,EAAE,MAAM,CAAC;IAEb,yBAAyB;IACzB,SAAS,EAAE;QACT,iCAAiC;QACjC,aAAa,EAAE,MAAM,CAAC;QACtB,yBAAyB;QACzB,KAAK,EAAE,MAAM,CAAC;QACd,4BAA4B;QAC5B,QAAQ,EAAE,MAAM,CAAC;KAClB,CAAC;CACH;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqEG;AACH,MAAM,WAAW,eAAe;IAC9B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAgFG;IACH,aAAa,CAAC,SAAS,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACpG;AAED;;;;;GAKG;AACH,qBAAa,sBAAuB,YAAW,eAAe;IAC5D;;;;;;;OAOG;IACG,aAAa,CAAC,SAAS,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC;CAUzG"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vunexa/lixa",
-  "version": "0.1.4",
+  "version": "0.1.6-alpha.2",
   "description": "Lixa is a flexible, provider-agnostic OAuth and OpenID Connect (OIDC) client library that simplifies multi-provider authentication flows. It supports seamless integration with providers like Google and GitHub, offers extensible session management, and enables dynamic provider resolution based on callback URLs.",
   "keywords": [
     "oauth",