@withwiz/toolkit 0.6.1 → 0.6.3

package/dist/{chunk-4BGAE7NU.js → chunk-TLBY3DUK.js}

@@ -1,6 +1,6 @@
 import {
   logger
-} from "./chunk-TEXVRHPF.js";
+} from "./chunk-NOAU2JG7.js";
 
 // src/middleware/security.ts
 import { NextResponse } from "next/server";

package/dist/{chunk-2QQNL4ND.js → chunk-TLZJQR26.js}

@@ -35,9 +35,17 @@ var KakaoOAuthProvider = class {
       const errorData = await response.text();
       throw new OAuthError(`Kakao token exchange failed: ${errorData}`, "TOKEN_EXCHANGE_FAILED");
     }
-    return response.json();
+    const data = await response.json();
+    if (data.error) {
+      throw new OAuthError(
+        `Kakao token exchange failed: ${data.error}${data.error_description ? ` - ${data.error_description}` : ""}`,
+        "TOKEN_EXCHANGE_FAILED"
+      );
+    }
+    return data;
   }
   async getUserInfo(accessToken) {
+    var _a, _b, _c, _d;
     const response = await fetch("https://kapi.kakao.com/v2/user/me", {
       headers: { Authorization: `Bearer ${accessToken}` }
     });
@@ -45,14 +53,17 @@ var KakaoOAuthProvider = class {
       throw new OAuthError("Failed to get Kakao user info", "USER_INFO_FAILED");
     }
     const data = await response.json();
-    const account = data.kakao_account || {};
-    const profile = account.profile || {};
+    if (!data.id) {
+      throw new OAuthError("Invalid Kakao response: missing id", "INVALID_RESPONSE");
+    }
+    const account = (_a = data.kakao_account) != null ? _a : {};
+    const profile = (_b = account.profile) != null ? _b : {};
     return {
       id: data.id.toString(),
       email: account.email,
-      name: profile.nickname || null,
-      image: profile.profile_image_url || null,
-      emailVerified: account.is_email_verified || false
+      name: (_c = profile.nickname) != null ? _c : null,
+      image: (_d = profile.profile_image_url) != null ? _d : null,
+      emailVerified: account.is_email_valid === true && account.is_email_verified === true
     };
   }
 };

package/dist/{chunk-IHUQRVPV.js → chunk-UQM35MAO.js}

@@ -1,13 +1,13 @@
 import {
   logger
-} from "./chunk-TEXVRHPF.js";
+} from "./chunk-NOAU2JG7.js";
 import {
   getCacheFallbackConfig,
   getConfig,
   getEnv,
   isCacheEnabled,
   validateRedisEnvironment
-} from "./chunk-DBHISLC6.js";
+} from "./chunk-OFSPZUQD.js";
 
 // src/cache/cache-redis.ts
 import { Redis } from "@upstash/redis";

package/dist/{chunk-G2Q4TI3Q.js → chunk-V3ZIR4UL.js}

@@ -1,6 +1,6 @@
 import {
   getAuthConfig
-} from "./chunk-A2XAOU55.js";
+} from "./chunk-LNPZZ23G.js";
 import {
   __spreadValues
 } from "./chunk-ORMEWXMH.js";

package/dist/chunk-VB64KFBD.js

@@ -0,0 +1,99 @@
+import {
+  OAuthError
+} from "./chunk-AIH3F7JV.js";
+
+// src/auth/core/oauth/providers/microsoft.ts
+import { decodeJwt } from "jose";
+var MicrosoftOAuthProvider = class {
+  constructor() {
+    this.name = "microsoft";
+  }
+  getLoginUrl(config, state) {
+    const params = new URLSearchParams({
+      client_id: config.clientId,
+      redirect_uri: config.redirectUri,
+      response_type: "code",
+      response_mode: "query",
+      scope: "openid profile email"
+    });
+    if (state) {
+      params.set("state", state);
+    }
+    return `https://login.microsoftonline.com/common/oauth2/v2.0/authorize?${params.toString()}`;
+  }
+  async exchangeCodeForToken(config, code) {
+    var _a;
+    const response = await fetch("https://login.microsoftonline.com/common/oauth2/v2.0/token", {
+      method: "POST",
+      headers: { "Content-Type": "application/x-www-form-urlencoded" },
+      body: new URLSearchParams({
+        client_id: config.clientId,
+        client_secret: config.clientSecret,
+        code,
+        grant_type: "authorization_code",
+        redirect_uri: config.redirectUri,
+        scope: "openid profile email"
+      })
+    });
+    if (!response.ok) {
+      const errorData = await response.text();
+      throw new OAuthError(`Microsoft token exchange failed: ${errorData}`, "TOKEN_EXCHANGE_FAILED");
+    }
+    const data = await response.json();
+    if (data.error) {
+      throw new OAuthError(
+        `Microsoft token exchange failed: ${data.error}${data.error_description ? ` - ${data.error_description}` : ""}`,
+        "TOKEN_EXCHANGE_FAILED"
+      );
+    }
+    if (!data.id_token) {
+      throw new OAuthError("Missing id_token in Microsoft token response", "INVALID_RESPONSE");
+    }
+    const claims = decodeMicrosoftClaims(data.id_token);
+    assertMicrosoftClaims(claims, config.clientId);
+    return {
+      access_token: data.id_token,
+      token_type: (_a = data.token_type) != null ? _a : "Bearer",
+      expires_in: data.expires_in,
+      refresh_token: data.refresh_token,
+      scope: data.scope
+    };
+  }
+  async getUserInfo(idToken) {
+    var _a, _b;
+    const claims = decodeMicrosoftClaims(idToken);
+    assertMicrosoftClaims(claims);
+    return {
+      id: claims.oid,
+      email: (_a = claims.email) != null ? _a : claims.preferred_username,
+      name: (_b = claims.name) != null ? _b : null,
+      image: null,
+      emailVerified: claims.email_verified === true
+    };
+  }
+};
+function decodeMicrosoftClaims(token) {
+  try {
+    return decodeJwt(token);
+  } catch (e) {
+    throw new OAuthError("Invalid Microsoft id_token: malformed JWT", "INVALID_RESPONSE");
+  }
+}
+function assertMicrosoftClaims(claims, expectedAud) {
+  if (!claims.iss || !/^https:\/\/login\.microsoftonline\.com\/(?!common\/|consumers\/|organizations\/)[\w-]+\/v2\.0$/.test(claims.iss)) {
+    throw new OAuthError("Invalid Microsoft id_token: bad iss", "INVALID_RESPONSE");
+  }
+  if (expectedAud !== void 0 && claims.aud !== expectedAud) {
+    throw new OAuthError("Invalid Microsoft id_token: aud mismatch", "INVALID_RESPONSE");
+  }
+  if (!claims.exp || claims.exp < Math.floor(Date.now() / 1e3)) {
+    throw new OAuthError("Invalid Microsoft id_token: expired", "INVALID_RESPONSE");
+  }
+  if (!claims.oid) {
+    throw new OAuthError("Invalid Microsoft id_token: missing oid", "INVALID_RESPONSE");
+  }
+}
+
+export {
+  MicrosoftOAuthProvider
+};

package/dist/{chunk-GFWGLWTS.js → chunk-WJWCTCWZ.js}

@@ -6,16 +6,10 @@ import {
 } from "./chunk-2QH66EVQ.js";
 
 // src/middleware/cors-config.ts
-var GLOBAL_KEY = "__withwiz_cors_config";
-function getConfig() {
-  var _a;
-  return (_a = globalThis[GLOBAL_KEY]) != null ? _a : null;
-}
-function setConfig(config) {
-  globalThis[GLOBAL_KEY] = config;
-}
 function initializeCors(config) {
-  if (getConfig()) return;
+  var _a;
+  (_a = globalThis.__withwiz_config) != null ? _a : globalThis.__withwiz_config = {};
+  if (globalThis.__withwiz_config.cors) return;
   if (!config.allowedOrigins) {
     throw new ConfigurationError("CORS", "allowedOrigins is required");
   }
@@ -25,20 +19,21 @@ function initializeCors(config) {
   if (config.baseUrl === void 0) {
     configWarn("CORS", "baseUrl not provided");
   }
-  setConfig({
+  globalThis.__withwiz_config.cors = {
     allowedOrigins: [...config.allowedOrigins],
     baseUrl: config.baseUrl
-  });
+  };
 }
 function getCorsConfig() {
-  const config = getConfig();
-  if (!config) {
+  var _a;
+  const cors = (_a = globalThis.__withwiz_config) == null ? void 0 : _a.cors;
+  if (!cors) {
     throw new ConfigurationError("CORS", "Not initialized. Call initializeCors() first.");
   }
-  return config;
+  return cors;
 }
 function resetCors() {
-  globalThis[GLOBAL_KEY] = void 0;
+  if (globalThis.__withwiz_config) delete globalThis.__withwiz_config.cors;
 }
 
 export {

package/dist/{chunk-CMU52MEQ.js → chunk-WLXAEHKK.js}

@@ -1,9 +1,9 @@
 import {
   IPGeolocationProvider
-} from "./chunk-HHCDMWEF.js";
+} from "./chunk-LGAV5UU2.js";
 import {
   MaxMindProvider
-} from "./chunk-G5OMETUS.js";
+} from "./chunk-FDRQUDFH.js";
 import {
   IPApiProvider
 } from "./chunk-DEEJBDJE.js";

package/dist/{chunk-SFPMFVSD.js → chunk-WPW4HXW4.js}

@@ -6,31 +6,25 @@ import {
 } from "./chunk-2QH66EVQ.js";
 
 // src/config/common.ts
-var GLOBAL_KEY = "__withwiz_common_config";
-function getConfig() {
-  var _a;
-  return (_a = globalThis[GLOBAL_KEY]) != null ? _a : null;
-}
-function setConfig(config) {
-  globalThis[GLOBAL_KEY] = config;
-}
 function initializeCommon(config) {
-  var _a;
-  if (getConfig()) return;
+  var _a, _b;
+  (_a = globalThis.__withwiz_config) != null ? _a : globalThis.__withwiz_config = {};
+  if (globalThis.__withwiz_config.common) return;
   if (!config.nodeEnv) {
     configWarn("Common", "nodeEnv not provided, using default: development");
   }
-  setConfig({ nodeEnv: (_a = config.nodeEnv) != null ? _a : "development" });
+  globalThis.__withwiz_config.common = { nodeEnv: (_b = config.nodeEnv) != null ? _b : "development" };
 }
 function getCommonConfig() {
-  const config = getConfig();
-  if (!config) {
+  var _a;
+  const common = (_a = globalThis.__withwiz_config) == null ? void 0 : _a.common;
+  if (!common) {
     throw new ConfigurationError("Common", "Not initialized. Call initializeCommon() first.");
   }
-  return config;
+  return common;
 }
 function resetCommon() {
-  globalThis[GLOBAL_KEY] = void 0;
+  if (globalThis.__withwiz_config) delete globalThis.__withwiz_config.common;
 }
 
 export {

package/dist/{chunk-ON7HZ3PW.js → chunk-WSXOKK6N.js}

@@ -1,7 +1,7 @@
 import {
   cache,
   geoCache
-} from "./chunk-7JKZBEVB.js";
+} from "./chunk-YX3XMDDI.js";
 
 // src/cache/cache-invalidation.ts
 var invalidateCache = {

package/dist/{chunk-S7OQWKUJ.js → chunk-XIJMATSG.js}

@@ -1,12 +1,12 @@
 import {
   OAuthCallbackService
-} from "./chunk-6B7VU6RZ.js";
+} from "./chunk-JDXC3QIA.js";
 import {
   OAuthManager
-} from "./chunk-HZLJYEOO.js";
+} from "./chunk-57HPJEZB.js";
 import {
   setTokenCookies
-} from "./chunk-G2Q4TI3Q.js";
+} from "./chunk-V3ZIR4UL.js";
 import {
   AuthError
 } from "./chunk-AIH3F7JV.js";

package/dist/{chunk-MDTID4D2.js → chunk-XY3ZVORI.js}

@@ -12,7 +12,7 @@ import {
 } from "./chunk-AIH3F7JV.js";
 import {
   logger
-} from "./chunk-TEXVRHPF.js";
+} from "./chunk-NOAU2JG7.js";
 import {
   __spreadProps,
   __spreadValues

package/dist/{chunk-KF3O2DAV.js → chunk-YTXCKIWE.js}

@@ -1,6 +1,6 @@
 import {
   logger
-} from "./chunk-TEXVRHPF.js";
+} from "./chunk-NOAU2JG7.js";
 import {
   __spreadValues
 } from "./chunk-ORMEWXMH.js";

package/dist/{chunk-7JKZBEVB.js → chunk-YX3XMDDI.js}

@@ -1,29 +1,29 @@
 import {
   NoopCacheManager
-} from "./chunk-Q6KXN7HL.js";
+} from "./chunk-ENETIGKL.js";
 import {
   RedisCacheManager
-} from "./chunk-O35V6RIF.js";
+} from "./chunk-7UQZH2OH.js";
 import {
   HybridCacheManager
-} from "./chunk-EXJQKCTN.js";
+} from "./chunk-A7TN46LC.js";
 import {
   isRedisAvailableNow,
   isRedisGloballyDisabled
-} from "./chunk-IHUQRVPV.js";
+} from "./chunk-UQM35MAO.js";
 import {
   InMemoryCacheManager
-} from "./chunk-CW3INZMV.js";
+} from "./chunk-ZG2XGO44.js";
 import {
   logger
-} from "./chunk-TEXVRHPF.js";
+} from "./chunk-NOAU2JG7.js";
 import {
   getCacheConfig
-} from "./chunk-BEV7PQM3.js";
+} from "./chunk-F3NGZYL2.js";
 import {
   getENV,
   isCacheEnabled
-} from "./chunk-DBHISLC6.js";
+} from "./chunk-OFSPZUQD.js";
 
 // src/cache/cache-factory.ts
 function getInMemoryConfig() {

package/dist/{chunk-CW3INZMV.js → chunk-ZG2XGO44.js}

@@ -1,6 +1,6 @@
 import {
   logger
-} from "./chunk-TEXVRHPF.js";
+} from "./chunk-NOAU2JG7.js";
 import {
   DEFAULT_INMEMORY_CONFIG
 } from "./chunk-SS56XFLI.js";

package/dist/config/common.d.ts

@@ -4,9 +4,6 @@ export interface CommonConfig {
 export interface ResolvedCommonConfig {
     nodeEnv: 'development' | 'production' | 'test';
 }
-declare global {
-    var __withwiz_common_config: ResolvedCommonConfig | undefined;
-}
 export declare function initializeCommon(config: CommonConfig): void;
 export declare function getCommonConfig(): ResolvedCommonConfig;
 export declare function resetCommon(): void;

package/dist/config/common.js

@@ -2,7 +2,7 @@ import {
   getCommonConfig,
   initializeCommon,
   resetCommon
-} from "../chunk-SFPMFVSD.js";
+} from "../chunk-WPW4HXW4.js";
 import "../chunk-K25ICPU4.js";
 import "../chunk-2QH66EVQ.js";
 import "../chunk-ORMEWXMH.js";

package/dist/config/registry.d.ts

@@ -1,11 +1,8 @@
 /**
  * Unified Config Registry
  *
- * Live read-only view over individual module stores
- * (`globalThis.__withwiz_*_config`).
- *
- * `config.auth` and `getAuthConfig()` return the same object —
- * there is only one source of truth per module.
+ * 모든 모듈 설정을 단일 객체 `globalThis.__withwiz_config`에 저장.
+ * `config.auth`와 `getAuthConfig()` 모두 같은 객체를 반환한다.
  */
 import type { ResolvedCommonConfig } from './common';
 import type { ResolvedAuthConfig } from '../auth/config';
@@ -23,13 +20,8 @@ export interface ConfigRegistry {
     geolocation?: ResolvedGeolocationConfig;
     cors?: ResolvedCorsConfig;
 }
-/**
- * Read-only Proxy that delegates to each module's globalThis store.
- * Returns `undefined` for optional modules that haven't been initialized.
- * Throws `TypeError` on any setter attempt.
- */
+declare global {
+    var __withwiz_config: Partial<ConfigRegistry> | undefined;
+}
 export declare const config: ConfigRegistry;
-/**
- * Reset all module stores. For test cleanup only.
- */
 export declare function resetConfig(): void;

package/dist/config/registry.js

@@ -1,7 +1,7 @@
 import {
   config,
   resetConfig
-} from "../chunk-GTPUVHSV.js";
+} from "../chunk-FDFPNSKY.js";
 import "../chunk-ORMEWXMH.js";
 export {
   config,

package/dist/error/error-handler.js

@@ -5,12 +5,12 @@ import {
   error_handler_default,
   processError,
   withErrorHandler
-} from "../chunk-MDTID4D2.js";
+} from "../chunk-XY3ZVORI.js";
 import "../chunk-EOEMOXNT.js";
 import "../chunk-SNTLJ646.js";
 import "../chunk-AIH3F7JV.js";
-import "../chunk-TEXVRHPF.js";
-import "../chunk-OHBAELPZ.js";
+import "../chunk-NOAU2JG7.js";
+import "../chunk-LMQSV5UK.js";
 import "../chunk-K25ICPU4.js";
 import "../chunk-2QH66EVQ.js";
 import "../chunk-ORMEWXMH.js";

package/dist/error/index.js

@@ -15,7 +15,7 @@ import {
   errorToResponse,
   processError,
   withErrorHandler
-} from "../chunk-MDTID4D2.js";
+} from "../chunk-XY3ZVORI.js";
 import {
   AppError
 } from "../chunk-EOEMOXNT.js";
@@ -48,8 +48,8 @@ import {
   getLogLevel
 } from "../chunk-SNTLJ646.js";
 import "../chunk-AIH3F7JV.js";
-import "../chunk-TEXVRHPF.js";
-import "../chunk-OHBAELPZ.js";
+import "../chunk-NOAU2JG7.js";
+import "../chunk-LMQSV5UK.js";
 import "../chunk-K25ICPU4.js";
 import "../chunk-2QH66EVQ.js";
 import "../chunk-ORMEWXMH.js";

package/dist/geolocation/batch-processor.js

@@ -1,9 +1,9 @@
 import {
   BatchProcessor,
   createBatchProcessor
-} from "../chunk-SSS6XSEG.js";
-import "../chunk-TEXVRHPF.js";
-import "../chunk-OHBAELPZ.js";
+} from "../chunk-LG6GH4V7.js";
+import "../chunk-NOAU2JG7.js";
+import "../chunk-LMQSV5UK.js";
 import "../chunk-K25ICPU4.js";
 import "../chunk-2QH66EVQ.js";
 import "../chunk-ORMEWXMH.js";

package/dist/geolocation/config.d.ts

@@ -6,9 +6,6 @@ export interface ResolvedGeolocationConfig {
     ipgeolocationApiKey?: string;
     maxmindLicenseKey?: string;
 }
-declare global {
-    var __withwiz_geolocation_config: ResolvedGeolocationConfig | undefined;
-}
 export declare function initializeGeolocation(config: GeolocationConfig): void;
 export declare function getGeolocationConfig(): ResolvedGeolocationConfig;
 export declare function resetGeolocation(): void;

package/dist/geolocation/config.js

@@ -2,7 +2,7 @@ import {
   getGeolocationConfig,
   initializeGeolocation,
   resetGeolocation
-} from "../chunk-3CBGGMIY.js";
+} from "../chunk-LHIVUV7Q.js";
 import "../chunk-K25ICPU4.js";
 import "../chunk-2QH66EVQ.js";
 import "../chunk-ORMEWXMH.js";

package/dist/geolocation/index.js

@@ -1,12 +1,12 @@
 import {
   GeoIPProviderFactory
-} from "../chunk-CMU52MEQ.js";
+} from "../chunk-WLXAEHKK.js";
 import {
   IPGeolocationProvider
-} from "../chunk-HHCDMWEF.js";
+} from "../chunk-LGAV5UU2.js";
 import {
   MaxMindProvider
-} from "../chunk-G5OMETUS.js";
+} from "../chunk-FDRQUDFH.js";
 import {
   IPApiProvider
 } from "../chunk-DEEJBDJE.js";
@@ -20,10 +20,10 @@ import {
 import {
   BatchProcessor,
   createBatchProcessor
-} from "../chunk-SSS6XSEG.js";
-import "../chunk-3CBGGMIY.js";
-import "../chunk-TEXVRHPF.js";
-import "../chunk-OHBAELPZ.js";
+} from "../chunk-LG6GH4V7.js";
+import "../chunk-LHIVUV7Q.js";
+import "../chunk-NOAU2JG7.js";
+import "../chunk-LMQSV5UK.js";
 import "../chunk-K25ICPU4.js";
 import "../chunk-2QH66EVQ.js";
 import "../chunk-ORMEWXMH.js";

package/dist/geolocation/providers/index.js

@@ -1,12 +1,12 @@
 import {
   GeoIPProviderFactory
-} from "../../chunk-CMU52MEQ.js";
+} from "../../chunk-WLXAEHKK.js";
 import {
   IPGeolocationProvider
-} from "../../chunk-HHCDMWEF.js";
+} from "../../chunk-LGAV5UU2.js";
 import {
   MaxMindProvider
-} from "../../chunk-G5OMETUS.js";
+} from "../../chunk-FDRQUDFH.js";
 import {
   IPApiProvider
 } from "../../chunk-DEEJBDJE.js";
@@ -17,7 +17,7 @@ import {
   BaseGeoIPProvider,
   truncateString
 } from "../../chunk-AHDPGRXS.js";
-import "../../chunk-3CBGGMIY.js";
+import "../../chunk-LHIVUV7Q.js";
 import "../../chunk-K25ICPU4.js";
 import "../../chunk-2QH66EVQ.js";
 import "../../chunk-ORMEWXMH.js";

package/dist/geolocation/providers/ipgeolocation-provider.js

@@ -1,8 +1,8 @@
 import {
   IPGeolocationProvider
-} from "../../chunk-HHCDMWEF.js";
+} from "../../chunk-LGAV5UU2.js";
 import "../../chunk-AHDPGRXS.js";
-import "../../chunk-3CBGGMIY.js";
+import "../../chunk-LHIVUV7Q.js";
 import "../../chunk-K25ICPU4.js";
 import "../../chunk-2QH66EVQ.js";
 import "../../chunk-ORMEWXMH.js";

package/dist/geolocation/providers/maxmind-provider.js

@@ -1,8 +1,8 @@
 import {
   MaxMindProvider
-} from "../../chunk-G5OMETUS.js";
+} from "../../chunk-FDRQUDFH.js";
 import "../../chunk-AHDPGRXS.js";
-import "../../chunk-3CBGGMIY.js";
+import "../../chunk-LHIVUV7Q.js";
 import "../../chunk-K25ICPU4.js";
 import "../../chunk-2QH66EVQ.js";
 import "../../chunk-ORMEWXMH.js";

package/dist/initialize.d.ts

@@ -5,6 +5,7 @@ import type { CacheConfigInput } from './cache/config';
 import type { StorageConfig } from './storage/config';
 import type { GeolocationConfig } from './geolocation/config';
 import type { CorsConfig } from './middleware/cors-config';
+import type { ConfigRegistry } from './config/registry';
 export interface ToolkitConfig {
     nodeEnv?: CommonConfig['nodeEnv'];
     auth?: AuthConfig;
@@ -14,7 +15,7 @@ export interface ToolkitConfig {
     geolocation?: GeolocationConfig;
     cors?: CorsConfig;
 }
-export declare function initialize(config: ToolkitConfig): void;
+export declare function initialize(toolkitConfig: ToolkitConfig): ConfigRegistry;
 export type { AuthConfig, LoggerConfig, CacheConfigInput as CacheConfig, StorageConfig, GeolocationConfig, CorsConfig, };
 export { config, resetConfig } from './config/registry';
 export type { ConfigRegistry } from './config/registry';