@withwiz/toolkit 0.6.2 → 0.6.3

package/README.md

@@ -4,7 +4,7 @@ Shared utility library for [withwiz](https://github.com/greeun) projects — a c
 
 ## Features
 
-- **Auth** — JWT, password hashing, OAuth helpers, Prisma adapter
+- **Auth** — JWT, password hashing, OAuth helpers (Google / GitHub / Kakao / Microsoft / Meta), Prisma adapter
 - **Cache** — Redis-backed caching with factory, invalidation, and defaults
 - **Constants** — Error codes, messages, pagination, security constants
 - **Error** — Typed `AppError`, centralized error handler and display
@@ -95,7 +95,7 @@ import { normalizeUrl }  from '@withwiz/toolkit/utils/url-normalizer'
 | `/auth` | Full auth module (JWT + password + OAuth + Prisma adapter) |
 | `/auth/core/jwt` | JWT sign / verify |
 | `/auth/core/password` | bcrypt helpers |
-| `/auth/core/oauth` | OAuth utilities |
+| `/auth/core/oauth` | OAuth utilities (Google / GitHub / Kakao / Microsoft / Meta) |
 | `/auth/adapters/prisma` | Prisma-based session adapter |
 | `/cache` | Redis cache (get / set / delete / withCache) |
 | `/cache/cache-factory` | Cache factory for multiple backends |

package/dist/auth/adapters/prisma/index.js

@@ -44,8 +44,8 @@ var PrismaUserRepository = class {
       name: data.name || null
     };
     createData[this.config.userFields.password] = data.password || null;
-    if (this.config.userFields.role !== "role" || data.role) {
-      createData[this.config.userFields.role] = data.role || "USER";
+    if (data.role !== void 0 && data.role !== null) {
+      createData[this.config.userFields.role] = data.role;
     }
     createData[this.config.userFields.emailVerified] = data.emailVerified || null;
     createData[this.config.userFields.image] = data.image || null;

package/dist/auth/core/jwt/types.js

@@ -2,7 +2,7 @@ import {
   OAUTH_PROVIDERS,
   PasswordStrength,
   TokenType
-} from "../../../chunk-ITGUSYUH.js";
+} from "../../../chunk-G2WAL2T7.js";
 import "../../../chunk-YZXGOOFC.js";
 import "../../../chunk-ORMEWXMH.js";
 export {

package/dist/auth/core/oauth/index.d.ts

@@ -7,7 +7,7 @@
 import type { OAuthConfig, OAuthUserInfo, Logger, IOAuthProviderAdapter } from '@withwiz/auth/types';
 import { OAUTH_PROVIDERS } from '@withwiz/auth/types';
 export { OAUTH_PROVIDERS };
-export { GoogleOAuthProvider, GitHubOAuthProvider, KakaoOAuthProvider } from './providers';
+export { GoogleOAuthProvider, GitHubOAuthProvider, KakaoOAuthProvider, MicrosoftOAuthProvider, MetaOAuthProvider, } from './providers';
 export declare class OAuthManager {
     private config;
     private logger;

package/dist/auth/core/oauth/index.js

@@ -1,10 +1,16 @@
 import {
   OAuthManager
-} from "../../../chunk-HZLJYEOO.js";
-import "../../../chunk-T4MDCVUQ.js";
+} from "../../../chunk-57HPJEZB.js";
+import "../../../chunk-6CLQRZC2.js";
 import {
   KakaoOAuthProvider
-} from "../../../chunk-2QQNL4ND.js";
+} from "../../../chunk-TLZJQR26.js";
+import {
+  MetaOAuthProvider
+} from "../../../chunk-K3OYTLXU.js";
+import {
+  MicrosoftOAuthProvider
+} from "../../../chunk-VB64KFBD.js";
 import {
   GitHubOAuthProvider
 } from "../../../chunk-GBLNXNEH.js";
@@ -13,7 +19,7 @@ import {
 } from "../../../chunk-RVL5ROWQ.js";
 import {
   OAUTH_PROVIDERS
-} from "../../../chunk-ITGUSYUH.js";
+} from "../../../chunk-G2WAL2T7.js";
 import "../../../chunk-YZXGOOFC.js";
 import "../../../chunk-AIH3F7JV.js";
 import "../../../chunk-ORMEWXMH.js";
@@ -21,6 +27,8 @@ export {
   GitHubOAuthProvider,
   GoogleOAuthProvider,
   KakaoOAuthProvider,
+  MetaOAuthProvider,
+  MicrosoftOAuthProvider,
   OAUTH_PROVIDERS,
   OAuthManager
 };

package/dist/auth/core/oauth/providers/index.d.ts

@@ -1,3 +1,5 @@
 export { GoogleOAuthProvider } from './google';
 export { GitHubOAuthProvider } from './github';
 export { KakaoOAuthProvider } from './kakao';
+export { MicrosoftOAuthProvider } from './microsoft';
+export { MetaOAuthProvider } from './meta';

package/dist/auth/core/oauth/providers/index.js

@@ -1,7 +1,13 @@
-import "../../../../chunk-T4MDCVUQ.js";
+import "../../../../chunk-6CLQRZC2.js";
 import {
   KakaoOAuthProvider
-} from "../../../../chunk-2QQNL4ND.js";
+} from "../../../../chunk-TLZJQR26.js";
+import {
+  MetaOAuthProvider
+} from "../../../../chunk-K3OYTLXU.js";
+import {
+  MicrosoftOAuthProvider
+} from "../../../../chunk-VB64KFBD.js";
 import {
   GitHubOAuthProvider
 } from "../../../../chunk-GBLNXNEH.js";
@@ -13,5 +19,7 @@ import "../../../../chunk-ORMEWXMH.js";
 export {
   GitHubOAuthProvider,
   GoogleOAuthProvider,
-  KakaoOAuthProvider
+  KakaoOAuthProvider,
+  MetaOAuthProvider,
+  MicrosoftOAuthProvider
 };

package/dist/auth/core/oauth/providers/kakao.js

@@ -1,6 +1,6 @@
 import {
   KakaoOAuthProvider
-} from "../../../../chunk-2QQNL4ND.js";
+} from "../../../../chunk-TLZJQR26.js";
 import "../../../../chunk-AIH3F7JV.js";
 import "../../../../chunk-ORMEWXMH.js";
 export {

package/dist/auth/core/oauth/providers/meta.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Meta(Facebook) OAuth Provider Adapter
+ *
+ * Meta OAuth 2.0 인증 어댑터 (Graph API v25.0).
+ * - Token 교환은 Meta 공식 권고에 따라 GET + query string 사용
+ * - 사용자 정보는 Graph /me?fields=id,name,email,picture 응답에서 매핑
+ */
+import type { IOAuthProviderAdapter, OAuthProviderConfig, OAuthUserInfo, OAuthTokenResponse } from '@withwiz/auth/types';
+export declare class MetaOAuthProvider implements IOAuthProviderAdapter {
+    readonly name = "meta";
+    getLoginUrl(config: OAuthProviderConfig, state?: string): string;
+    exchangeCodeForToken(config: OAuthProviderConfig, code: string): Promise<OAuthTokenResponse>;
+    getUserInfo(accessToken: string): Promise<OAuthUserInfo>;
+}

package/dist/auth/core/oauth/providers/meta.js

@@ -0,0 +1,8 @@
+import {
+  MetaOAuthProvider
+} from "../../../../chunk-K3OYTLXU.js";
+import "../../../../chunk-AIH3F7JV.js";
+import "../../../../chunk-ORMEWXMH.js";
+export {
+  MetaOAuthProvider
+};

package/dist/auth/core/oauth/providers/microsoft.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Microsoft OAuth Provider Adapter
+ *
+ * Microsoft Entra v2.0 (common 테넌트, server-side code flow).
+ *
+ * 신뢰 모델: 이 어댑터의 `getUserInfo`는 동일 어댑터의 `exchangeCodeForToken`이
+ * 반환한 토큰만 입력으로 받는다는 가정 하에 동작한다 (HTTPS code-flow 채널 신뢰).
+ * 외부에서 받은 id_token을 직접 주입하지 말 것. 클라이언트-사이드 흐름(SPA/PKCE)
+ * 지원이 필요해지면 JWKS 기반 서명 검증을 별도 spec으로 추가한다.
+ *
+ * 인터페이스 우회: IOAuthProviderAdapter 변경 없이 id_token 클레임을 사용하기
+ * 위해, exchangeCodeForToken은 upstream의 `id_token` 값을 OAuthTokenResponse.access_token
+ * 필드에 담아 반환한다. getUserInfo는 그 문자열을 jose.decodeJwt로 디코딩한다.
+ */
+import type { IOAuthProviderAdapter, OAuthProviderConfig, OAuthUserInfo, OAuthTokenResponse } from '@withwiz/auth/types';
+export declare class MicrosoftOAuthProvider implements IOAuthProviderAdapter {
+    readonly name = "microsoft";
+    getLoginUrl(config: OAuthProviderConfig, state?: string): string;
+    exchangeCodeForToken(config: OAuthProviderConfig, code: string): Promise<OAuthTokenResponse>;
+    getUserInfo(idToken: string): Promise<OAuthUserInfo>;
+}

package/dist/auth/core/oauth/providers/microsoft.js

@@ -0,0 +1,8 @@
+import {
+  MicrosoftOAuthProvider
+} from "../../../../chunk-VB64KFBD.js";
+import "../../../../chunk-AIH3F7JV.js";
+import "../../../../chunk-ORMEWXMH.js";
+export {
+  MicrosoftOAuthProvider
+};

package/dist/auth/core/password/client-helper.js

@@ -12,7 +12,7 @@ import {
   PasswordHasher,
   PasswordValidator
 } from "../../../chunk-IHXRF3BH.js";
-import "../../../chunk-ITGUSYUH.js";
+import "../../../chunk-G2WAL2T7.js";
 import "../../../chunk-YZXGOOFC.js";
 import "../../../chunk-ORMEWXMH.js";
 export {

package/dist/auth/core/password/index.js

@@ -4,7 +4,7 @@ import {
   defaultPasswordSchema,
   strongPasswordSchema
 } from "../../../chunk-IHXRF3BH.js";
-import "../../../chunk-ITGUSYUH.js";
+import "../../../chunk-G2WAL2T7.js";
 import "../../../chunk-YZXGOOFC.js";
 import "../../../chunk-ORMEWXMH.js";
 export {

package/dist/auth/handlers/forgot-password.handler.js

@@ -3,7 +3,7 @@ import {
 } from "../../chunk-FRY3TNJ6.js";
 import "../../chunk-WC2IYFGC.js";
 import "../../chunk-GDWEDUHO.js";
-import "../../chunk-ITGUSYUH.js";
+import "../../chunk-G2WAL2T7.js";
 import "../../chunk-YZXGOOFC.js";
 import "../../chunk-AIH3F7JV.js";
 import "../../chunk-ORMEWXMH.js";

package/dist/auth/handlers/index.js

@@ -1,3 +1,9 @@
+import {
+  createVerifyEmailHandler
+} from "../../chunk-QYXI45KH.js";
+import {
+  createLoginHandler
+} from "../../chunk-L74XPPH4.js";
 import {
   createLogoutHandler
 } from "../../chunk-ERO4PGNO.js";
@@ -6,40 +12,36 @@ import {
 } from "../../chunk-4YQ6YBM7.js";
 import {
   createOAuthAuthorizeHandler
-} from "../../chunk-6JY6NUR6.js";
+} from "../../chunk-GDX3YQGK.js";
 import {
   createOAuthCallbackHandler
-} from "../../chunk-B6Q7UNCU.js";
-import "../../chunk-6B7VU6RZ.js";
+} from "../../chunk-XIJMATSG.js";
 import {
   createRefreshHandler
 } from "../../chunk-O5E36ZIJ.js";
-import "../../chunk-JQFQT4S2.js";
 import {
   createRegisterHandler
-} from "../../chunk-Q7VFOUFI.js";
-import "../../chunk-ETMTDHK2.js";
+} from "../../chunk-D6MIC5AU.js";
 import {
   createResetPasswordHandler
 } from "../../chunk-TFZOOP3V.js";
-import {
-  createVerifyEmailHandler
-} from "../../chunk-QYXI45KH.js";
-import "../../chunk-N6TMHITU.js";
+import "../../chunk-JDXC3QIA.js";
+import "../../chunk-SOQOAFB2.js";
+import "../../chunk-JQFQT4S2.js";
 import {
   createForgotPasswordHandler
 } from "../../chunk-FRY3TNJ6.js";
 import "../../chunk-WC2IYFGC.js";
-import {
-  createLoginHandler
-} from "../../chunk-L74XPPH4.js";
-import "../../chunk-HZLJYEOO.js";
-import "../../chunk-T4MDCVUQ.js";
-import "../../chunk-2QQNL4ND.js";
+import "../../chunk-N6TMHITU.js";
+import "../../chunk-57HPJEZB.js";
+import "../../chunk-6CLQRZC2.js";
+import "../../chunk-TLZJQR26.js";
+import "../../chunk-K3OYTLXU.js";
+import "../../chunk-VB64KFBD.js";
 import "../../chunk-GBLNXNEH.js";
 import "../../chunk-RVL5ROWQ.js";
 import "../../chunk-GDWEDUHO.js";
-import "../../chunk-ITGUSYUH.js";
+import "../../chunk-G2WAL2T7.js";
 import "../../chunk-YZXGOOFC.js";
 import "../../chunk-3GAY2T2A.js";
 import "../../chunk-V3ZIR4UL.js";

package/dist/auth/handlers/oauth-authorize.handler.js

@@ -1,12 +1,14 @@
 import {
   createOAuthAuthorizeHandler
-} from "../../chunk-6JY6NUR6.js";
-import "../../chunk-HZLJYEOO.js";
-import "../../chunk-T4MDCVUQ.js";
-import "../../chunk-2QQNL4ND.js";
+} from "../../chunk-GDX3YQGK.js";
+import "../../chunk-57HPJEZB.js";
+import "../../chunk-6CLQRZC2.js";
+import "../../chunk-TLZJQR26.js";
+import "../../chunk-K3OYTLXU.js";
+import "../../chunk-VB64KFBD.js";
 import "../../chunk-GBLNXNEH.js";
 import "../../chunk-RVL5ROWQ.js";
-import "../../chunk-ITGUSYUH.js";
+import "../../chunk-G2WAL2T7.js";
 import "../../chunk-YZXGOOFC.js";
 import "../../chunk-AIH3F7JV.js";
 import "../../chunk-ORMEWXMH.js";

package/dist/auth/handlers/oauth-callback.handler.js

@@ -1,13 +1,15 @@
 import {
   createOAuthCallbackHandler
-} from "../../chunk-B6Q7UNCU.js";
-import "../../chunk-6B7VU6RZ.js";
-import "../../chunk-HZLJYEOO.js";
-import "../../chunk-T4MDCVUQ.js";
-import "../../chunk-2QQNL4ND.js";
+} from "../../chunk-XIJMATSG.js";
+import "../../chunk-JDXC3QIA.js";
+import "../../chunk-57HPJEZB.js";
+import "../../chunk-6CLQRZC2.js";
+import "../../chunk-TLZJQR26.js";
+import "../../chunk-K3OYTLXU.js";
+import "../../chunk-VB64KFBD.js";
 import "../../chunk-GBLNXNEH.js";
 import "../../chunk-RVL5ROWQ.js";
-import "../../chunk-ITGUSYUH.js";
+import "../../chunk-G2WAL2T7.js";
 import "../../chunk-YZXGOOFC.js";
 import "../../chunk-3GAY2T2A.js";
 import "../../chunk-V3ZIR4UL.js";

package/dist/auth/handlers/register.handler.js

@@ -1,9 +1,9 @@
 import {
   createRegisterHandler
-} from "../../chunk-Q7VFOUFI.js";
-import "../../chunk-ETMTDHK2.js";
+} from "../../chunk-D6MIC5AU.js";
+import "../../chunk-SOQOAFB2.js";
 import "../../chunk-GDWEDUHO.js";
-import "../../chunk-ITGUSYUH.js";
+import "../../chunk-G2WAL2T7.js";
 import "../../chunk-YZXGOOFC.js";
 import "../../chunk-AIH3F7JV.js";
 import "../../chunk-ORMEWXMH.js";

package/dist/auth/handlers/reset-password.handler.js

@@ -3,7 +3,7 @@ import {
 } from "../../chunk-TFZOOP3V.js";
 import "../../chunk-WC2IYFGC.js";
 import "../../chunk-GDWEDUHO.js";
-import "../../chunk-ITGUSYUH.js";
+import "../../chunk-G2WAL2T7.js";
 import "../../chunk-YZXGOOFC.js";
 import "../../chunk-AIH3F7JV.js";
 import "../../chunk-ORMEWXMH.js";

package/dist/auth/handlers/verify-email.handler.js

@@ -3,7 +3,7 @@ import {
 } from "../../chunk-QYXI45KH.js";
 import "../../chunk-N6TMHITU.js";
 import "../../chunk-GDWEDUHO.js";
-import "../../chunk-ITGUSYUH.js";
+import "../../chunk-G2WAL2T7.js";
 import "../../chunk-YZXGOOFC.js";
 import "../../chunk-AIH3F7JV.js";
 import "../../chunk-ORMEWXMH.js";

package/dist/auth/index.js

@@ -31,11 +31,13 @@ import {
 } from "../chunk-XRRPEBKB.js";
 import {
   OAuthManager
-} from "../chunk-HZLJYEOO.js";
-import "../chunk-T4MDCVUQ.js";
+} from "../chunk-57HPJEZB.js";
+import "../chunk-6CLQRZC2.js";
 import {
   KakaoOAuthProvider
-} from "../chunk-2QQNL4ND.js";
+} from "../chunk-TLZJQR26.js";
+import "../chunk-K3OYTLXU.js";
+import "../chunk-VB64KFBD.js";
 import {
   GitHubOAuthProvider
 } from "../chunk-GBLNXNEH.js";
@@ -49,7 +51,7 @@ import {
   OAUTH_PROVIDERS,
   PasswordStrength,
   TokenType
-} from "../chunk-ITGUSYUH.js";
+} from "../chunk-G2WAL2T7.js";
 import "../chunk-YZXGOOFC.js";
 import {
   JWTManager,

package/dist/auth/services/email-verification.service.js

@@ -2,7 +2,7 @@ import {
   EmailVerificationService
 } from "../../chunk-N6TMHITU.js";
 import "../../chunk-GDWEDUHO.js";
-import "../../chunk-ITGUSYUH.js";
+import "../../chunk-G2WAL2T7.js";
 import "../../chunk-YZXGOOFC.js";
 import "../../chunk-AIH3F7JV.js";
 import "../../chunk-ORMEWXMH.js";

package/dist/auth/services/index.js

@@ -3,21 +3,21 @@ import {
 } from "../../chunk-DFSNHVXF.js";
 import {
   OAuthCallbackService
-} from "../../chunk-6B7VU6RZ.js";
+} from "../../chunk-JDXC3QIA.js";
+import {
+  RegisterService
+} from "../../chunk-SOQOAFB2.js";
 import {
   TokenRefreshService
 } from "../../chunk-JQFQT4S2.js";
 import {
-  RegisterService
-} from "../../chunk-ETMTDHK2.js";
+  PasswordResetService
+} from "../../chunk-WC2IYFGC.js";
 import {
   EmailVerificationService
 } from "../../chunk-N6TMHITU.js";
-import {
-  PasswordResetService
-} from "../../chunk-WC2IYFGC.js";
 import "../../chunk-GDWEDUHO.js";
-import "../../chunk-ITGUSYUH.js";
+import "../../chunk-G2WAL2T7.js";
 import "../../chunk-YZXGOOFC.js";
 import "../../chunk-3GAY2T2A.js";
 import "../../chunk-V3ZIR4UL.js";

package/dist/auth/services/oauth-callback.service.js

@@ -1,6 +1,6 @@
 import {
   OAuthCallbackService
-} from "../../chunk-6B7VU6RZ.js";
+} from "../../chunk-JDXC3QIA.js";
 import "../../chunk-3GAY2T2A.js";
 import "../../chunk-V3ZIR4UL.js";
 import "../../chunk-AIH3F7JV.js";

package/dist/auth/services/password-reset.service.js

@@ -2,7 +2,7 @@ import {
   PasswordResetService
 } from "../../chunk-WC2IYFGC.js";
 import "../../chunk-GDWEDUHO.js";
-import "../../chunk-ITGUSYUH.js";
+import "../../chunk-G2WAL2T7.js";
 import "../../chunk-YZXGOOFC.js";
 import "../../chunk-AIH3F7JV.js";
 import "../../chunk-ORMEWXMH.js";

package/dist/auth/services/register.service.js

@@ -1,8 +1,8 @@
 import {
   RegisterService
-} from "../../chunk-ETMTDHK2.js";
+} from "../../chunk-SOQOAFB2.js";
 import "../../chunk-GDWEDUHO.js";
-import "../../chunk-ITGUSYUH.js";
+import "../../chunk-G2WAL2T7.js";
 import "../../chunk-YZXGOOFC.js";
 import "../../chunk-AIH3F7JV.js";
 import "../../chunk-ORMEWXMH.js";

package/dist/auth/types/index.d.ts

@@ -34,6 +34,8 @@ export declare const OAUTH_PROVIDERS: {
     readonly GOOGLE: "google";
     readonly GITHUB: "github";
     readonly KAKAO: "kakao";
+    readonly MICROSOFT: "microsoft";
+    readonly META: "meta";
 };
 export type OAuthProviderName = typeof OAUTH_PROVIDERS[keyof typeof OAUTH_PROVIDERS];
 export interface OAuthUserInfo {

package/dist/auth/types/index.js

@@ -2,7 +2,7 @@ import {
   OAUTH_PROVIDERS,
   PasswordStrength,
   TokenType
-} from "../../chunk-ITGUSYUH.js";
+} from "../../chunk-G2WAL2T7.js";
 import "../../chunk-YZXGOOFC.js";
 import "../../chunk-ORMEWXMH.js";
 export {

package/dist/{chunk-HZLJYEOO.js → chunk-57HPJEZB.js}

@@ -1,6 +1,12 @@
 import {
   KakaoOAuthProvider
-} from "./chunk-2QQNL4ND.js";
+} from "./chunk-TLZJQR26.js";
+import {
+  MetaOAuthProvider
+} from "./chunk-K3OYTLXU.js";
+import {
+  MicrosoftOAuthProvider
+} from "./chunk-VB64KFBD.js";
 import {
   GitHubOAuthProvider
 } from "./chunk-GBLNXNEH.js";
@@ -20,6 +26,8 @@ var OAuthManager = class {
     this.registerProvider(new GoogleOAuthProvider());
     this.registerProvider(new GitHubOAuthProvider());
     this.registerProvider(new KakaoOAuthProvider());
+    this.registerProvider(new MicrosoftOAuthProvider());
+    this.registerProvider(new MetaOAuthProvider());
   }
   /**
    * 프로바이더 어댑터 등록

package/dist/{chunk-Q7VFOUFI.js → chunk-D6MIC5AU.js}

@@ -1,6 +1,6 @@
 import {
   RegisterService
-} from "./chunk-ETMTDHK2.js";
+} from "./chunk-SOQOAFB2.js";
 import {
   AuthError
 } from "./chunk-AIH3F7JV.js";

package/dist/{chunk-ITGUSYUH.js → chunk-G2WAL2T7.js}

@@ -2,7 +2,9 @@
 var OAUTH_PROVIDERS = {
   GOOGLE: "google",
   GITHUB: "github",
-  KAKAO: "kakao"
+  KAKAO: "kakao",
+  MICROSOFT: "microsoft",
+  META: "meta"
 };
 var PasswordStrength = /* @__PURE__ */ ((PasswordStrength2) => {
   PasswordStrength2["VERY_WEAK"] = "VERY_WEAK";

package/dist/{chunk-6JY6NUR6.js → chunk-GDX3YQGK.js}

@@ -1,6 +1,6 @@
 import {
   OAuthManager
-} from "./chunk-HZLJYEOO.js";
+} from "./chunk-57HPJEZB.js";
 
 // src/auth/handlers/oauth-authorize.handler.ts
 import { NextResponse } from "next/server";

package/dist/{chunk-6B7VU6RZ.js → chunk-JDXC3QIA.js}

@@ -59,7 +59,6 @@ var OAuthCallbackService = class {
       email: input.email,
       name: input.name,
       image: input.image,
-      role: "USER",
       emailVerified: /* @__PURE__ */ new Date()
       // OAuth users are auto-verified
     });

package/dist/chunk-K3OYTLXU.js

@@ -0,0 +1,63 @@
+import {
+  OAuthError
+} from "./chunk-AIH3F7JV.js";
+
+// src/auth/core/oauth/providers/meta.ts
+var META_GRAPH_VERSION = "v25.0";
+var MetaOAuthProvider = class {
+  constructor() {
+    this.name = "meta";
+  }
+  getLoginUrl(config, state) {
+    const params = new URLSearchParams({
+      client_id: config.clientId,
+      redirect_uri: config.redirectUri,
+      response_type: "code",
+      scope: "email,public_profile"
+    });
+    if (state) {
+      params.set("state", state);
+    }
+    return `https://www.facebook.com/${META_GRAPH_VERSION}/dialog/oauth?${params.toString()}`;
+  }
+  async exchangeCodeForToken(config, code) {
+    const params = new URLSearchParams({
+      client_id: config.clientId,
+      client_secret: config.clientSecret,
+      code,
+      redirect_uri: config.redirectUri
+    });
+    const url = `https://graph.facebook.com/${META_GRAPH_VERSION}/oauth/access_token?${params.toString()}`;
+    const response = await fetch(url);
+    if (!response.ok) {
+      const errorData = await response.text();
+      throw new OAuthError(`Meta token exchange failed: ${errorData}`, "TOKEN_EXCHANGE_FAILED");
+    }
+    return response.json();
+  }
+  async getUserInfo(accessToken) {
+    var _a, _b, _c, _d;
+    const url = `https://graph.facebook.com/${META_GRAPH_VERSION}/me?fields=id,name,email,picture`;
+    const response = await fetch(url, {
+      headers: { Authorization: `Bearer ${accessToken}` }
+    });
+    if (!response.ok) {
+      throw new OAuthError("Failed to get Meta user info", "USER_INFO_FAILED");
+    }
+    const data = await response.json();
+    if (!data.id) {
+      throw new OAuthError("Invalid Meta response: missing id", "INVALID_RESPONSE");
+    }
+    return {
+      id: data.id,
+      email: data.email,
+      name: (_a = data.name) != null ? _a : null,
+      image: (_d = (_c = (_b = data.picture) == null ? void 0 : _b.data) == null ? void 0 : _c.url) != null ? _d : null,
+      emailVerified: !!data.email
+    };
+  }
+};
+
+export {
+  MetaOAuthProvider
+};

package/dist/{chunk-ETMTDHK2.js → chunk-SOQOAFB2.js}

@@ -32,7 +32,6 @@ var RegisterService = class {
       email: input.email,
       password: hashedPassword,
       name: (_a = input.name) != null ? _a : null,
-      role: "USER",
       emailVerified: this.emailVerificationRequired ? null : /* @__PURE__ */ new Date()
     });
     let verificationSent = false;

package/dist/{chunk-2QQNL4ND.js → chunk-TLZJQR26.js}

@@ -35,9 +35,17 @@ var KakaoOAuthProvider = class {
       const errorData = await response.text();
       throw new OAuthError(`Kakao token exchange failed: ${errorData}`, "TOKEN_EXCHANGE_FAILED");
     }
-    return response.json();
+    const data = await response.json();
+    if (data.error) {
+      throw new OAuthError(
+        `Kakao token exchange failed: ${data.error}${data.error_description ? ` - ${data.error_description}` : ""}`,
+        "TOKEN_EXCHANGE_FAILED"
+      );
+    }
+    return data;
   }
   async getUserInfo(accessToken) {
+    var _a, _b, _c, _d;
     const response = await fetch("https://kapi.kakao.com/v2/user/me", {
       headers: { Authorization: `Bearer ${accessToken}` }
     });
@@ -45,14 +53,17 @@ var KakaoOAuthProvider = class {
       throw new OAuthError("Failed to get Kakao user info", "USER_INFO_FAILED");
     }
     const data = await response.json();
-    const account = data.kakao_account || {};
-    const profile = account.profile || {};
+    if (!data.id) {
+      throw new OAuthError("Invalid Kakao response: missing id", "INVALID_RESPONSE");
+    }
+    const account = (_a = data.kakao_account) != null ? _a : {};
+    const profile = (_b = account.profile) != null ? _b : {};
     return {
       id: data.id.toString(),
       email: account.email,
-      name: profile.nickname || null,
-      image: profile.profile_image_url || null,
-      emailVerified: account.is_email_verified || false
+      name: (_c = profile.nickname) != null ? _c : null,
+      image: (_d = profile.profile_image_url) != null ? _d : null,
+      emailVerified: account.is_email_valid === true && account.is_email_verified === true
     };
   }
 };

package/dist/chunk-VB64KFBD.js

@@ -0,0 +1,99 @@
+import {
+  OAuthError
+} from "./chunk-AIH3F7JV.js";
+
+// src/auth/core/oauth/providers/microsoft.ts
+import { decodeJwt } from "jose";
+var MicrosoftOAuthProvider = class {
+  constructor() {
+    this.name = "microsoft";
+  }
+  getLoginUrl(config, state) {
+    const params = new URLSearchParams({
+      client_id: config.clientId,
+      redirect_uri: config.redirectUri,
+      response_type: "code",
+      response_mode: "query",
+      scope: "openid profile email"
+    });
+    if (state) {
+      params.set("state", state);
+    }
+    return `https://login.microsoftonline.com/common/oauth2/v2.0/authorize?${params.toString()}`;
+  }
+  async exchangeCodeForToken(config, code) {
+    var _a;
+    const response = await fetch("https://login.microsoftonline.com/common/oauth2/v2.0/token", {
+      method: "POST",
+      headers: { "Content-Type": "application/x-www-form-urlencoded" },
+      body: new URLSearchParams({
+        client_id: config.clientId,
+        client_secret: config.clientSecret,
+        code,
+        grant_type: "authorization_code",
+        redirect_uri: config.redirectUri,
+        scope: "openid profile email"
+      })
+    });
+    if (!response.ok) {
+      const errorData = await response.text();
+      throw new OAuthError(`Microsoft token exchange failed: ${errorData}`, "TOKEN_EXCHANGE_FAILED");
+    }
+    const data = await response.json();
+    if (data.error) {
+      throw new OAuthError(
+        `Microsoft token exchange failed: ${data.error}${data.error_description ? ` - ${data.error_description}` : ""}`,
+        "TOKEN_EXCHANGE_FAILED"
+      );
+    }
+    if (!data.id_token) {
+      throw new OAuthError("Missing id_token in Microsoft token response", "INVALID_RESPONSE");
+    }
+    const claims = decodeMicrosoftClaims(data.id_token);
+    assertMicrosoftClaims(claims, config.clientId);
+    return {
+      access_token: data.id_token,
+      token_type: (_a = data.token_type) != null ? _a : "Bearer",
+      expires_in: data.expires_in,
+      refresh_token: data.refresh_token,
+      scope: data.scope
+    };
+  }
+  async getUserInfo(idToken) {
+    var _a, _b;
+    const claims = decodeMicrosoftClaims(idToken);
+    assertMicrosoftClaims(claims);
+    return {
+      id: claims.oid,
+      email: (_a = claims.email) != null ? _a : claims.preferred_username,
+      name: (_b = claims.name) != null ? _b : null,
+      image: null,
+      emailVerified: claims.email_verified === true
+    };
+  }
+};
+function decodeMicrosoftClaims(token) {
+  try {
+    return decodeJwt(token);
+  } catch (e) {
+    throw new OAuthError("Invalid Microsoft id_token: malformed JWT", "INVALID_RESPONSE");
+  }
+}
+function assertMicrosoftClaims(claims, expectedAud) {
+  if (!claims.iss || !/^https:\/\/login\.microsoftonline\.com\/(?!common\/|consumers\/|organizations\/)[\w-]+\/v2\.0$/.test(claims.iss)) {
+    throw new OAuthError("Invalid Microsoft id_token: bad iss", "INVALID_RESPONSE");
+  }
+  if (expectedAud !== void 0 && claims.aud !== expectedAud) {
+    throw new OAuthError("Invalid Microsoft id_token: aud mismatch", "INVALID_RESPONSE");
+  }
+  if (!claims.exp || claims.exp < Math.floor(Date.now() / 1e3)) {
+    throw new OAuthError("Invalid Microsoft id_token: expired", "INVALID_RESPONSE");
+  }
+  if (!claims.oid) {
+    throw new OAuthError("Invalid Microsoft id_token: missing oid", "INVALID_RESPONSE");
+  }
+}
+
+export {
+  MicrosoftOAuthProvider
+};

package/dist/{chunk-B6Q7UNCU.js → chunk-XIJMATSG.js}

@@ -1,9 +1,9 @@
 import {
   OAuthCallbackService
-} from "./chunk-6B7VU6RZ.js";
+} from "./chunk-JDXC3QIA.js";
 import {
   OAuthManager
-} from "./chunk-HZLJYEOO.js";
+} from "./chunk-57HPJEZB.js";
 import {
   setTokenCookies
 } from "./chunk-V3ZIR4UL.js";

package/dist/constants/index.js

@@ -1,17 +1,3 @@
-import {
-  ERROR_CODES,
-  HTTP_STATUS,
-  classifyError,
-  formatErrorMessage,
-  getAllErrorCodes,
-  getDefaultErrorMessage,
-  getErrorByCode,
-  getErrorCategory,
-  getErrorCodesByCategory,
-  getErrorInfo,
-  getHttpStatus,
-  getLogLevel
-} from "../chunk-SNTLJ646.js";
 import {
   GENERIC_CONFIRM_MESSAGES,
   GENERIC_ERROR_MESSAGES,
@@ -44,6 +30,20 @@ import {
   URL,
   USER_INPUT
 } from "../chunk-LNV2E4I6.js";
+import {
+  ERROR_CODES,
+  HTTP_STATUS,
+  classifyError,
+  formatErrorMessage,
+  getAllErrorCodes,
+  getDefaultErrorMessage,
+  getErrorByCode,
+  getErrorCategory,
+  getErrorCodesByCategory,
+  getErrorInfo,
+  getHttpStatus,
+  getLogLevel
+} from "../chunk-SNTLJ646.js";
 import "../chunk-ORMEWXMH.js";
 export {
   CSRF,

package/dist/utils/index.js

@@ -1,11 +1,3 @@
-import {
-  removeEventHandlers,
-  sanitizeArray,
-  sanitizeHtml,
-  sanitizeInput,
-  sanitizeObjectFields,
-  sanitizeUrl
-} from "../chunk-N54KGJPU.js";
 import {
   isApiErrorResponse,
   isApiSuccessResponse,
@@ -34,6 +26,14 @@ import {
   isValidJSON,
   isValidUrl
 } from "../chunk-EUQATJLI.js";
+import {
+  removeEventHandlers,
+  sanitizeArray,
+  sanitizeHtml,
+  sanitizeInput,
+  sanitizeObjectFields,
+  sanitizeUrl
+} from "../chunk-N54KGJPU.js";
 import {
   createPaginatedResponse,
   getReferer,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@withwiz/toolkit",
-  "version": "0.6.2",
+  "version": "0.6.3",
   "description": "Shared utility library for withwiz projects",
   "license": "MIT",
   "private": false,