@withwiz/toolkit 0.6.5 → 0.7.0

package/dist/{chunk-GDX3YQGK.js → chunk-ZVGEGDYF.js}

@@ -1,13 +1,17 @@
 import {
   OAuthManager
-} from "./chunk-57HPJEZB.js";
+} from "./chunk-V3GEYUBG.js";
+import {
+  generateOAuthState,
+  setOAuthStateCookie
+} from "./chunk-JLRMET4V.js";
 
-// src/auth/handlers/oauth-authorize.handler.ts
+// src/next/auth-handlers/oauth-authorize.handler.ts
 import { NextResponse } from "next/server";
 function createOAuthAuthorizeHandler(options) {
   const { oauth } = options;
   return async (request) => {
-    var _a;
+    var _a, _b, _c, _d;
     try {
       const body = await request.json();
       const provider = body.provider;
@@ -24,9 +28,15 @@ function createOAuthAuthorizeHandler(options) {
       }, error() {
       } };
       const manager = new OAuthManager({ providers }, (_a = options.dependencies.logger) != null ? _a : noopLogger);
-      const state = crypto.randomUUID();
+      const state = generateOAuthState();
       const loginUrl = manager.getLoginUrl(provider, state);
-      return NextResponse.json({ success: true, loginUrl, state });
+      const response = NextResponse.json({ success: true, loginUrl, state });
+      setOAuthStateCookie(response, state, {
+        secure: (_b = options.cookie) == null ? void 0 : _b.secure,
+        sameSite: (_c = options.cookie) == null ? void 0 : _c.sameSite,
+        domain: (_d = options.cookie) == null ? void 0 : _d.domain
+      });
+      return response;
     } catch (e) {
       return NextResponse.json({ success: false, error: "OAuth initialization failed" }, { status: 500 });
     }

package/dist/core/auth/config.js

@@ -0,0 +1,14 @@
+import {
+  getAuthConfig,
+  initializeAuth,
+  resetAuth
+} from "../../chunk-UKPMQBU2.js";
+import "../../chunk-6J2EJVND.js";
+import "../../chunk-F3R3UYBF.js";
+import "../../chunk-2SIBG5BG.js";
+import "../../chunk-ORMEWXMH.js";
+export {
+  getAuthConfig,
+  initializeAuth,
+  resetAuth
+};

package/dist/{auth → core/auth}/email/index.d.ts

@@ -1,2 +1,3 @@
 export { SmtpEmailSender } from './sender';
 export type { SmtpConfig, EmailTemplates } from './sender';
+export { TokenGenerator } from './token-generator';

package/dist/core/auth/email/index.js

@@ -0,0 +1,11 @@
+import {
+  SmtpEmailSender
+} from "../../../chunk-7X2N4VZM.js";
+import {
+  TokenGenerator
+} from "../../../chunk-D73ZJQMX.js";
+import "../../../chunk-ORMEWXMH.js";
+export {
+  SmtpEmailSender,
+  TokenGenerator
+};

package/dist/core/auth/email/sender.js

@@ -0,0 +1,7 @@
+import {
+  SmtpEmailSender
+} from "../../../chunk-7X2N4VZM.js";
+import "../../../chunk-ORMEWXMH.js";
+export {
+  SmtpEmailSender
+};

package/dist/{auth/core → core/auth}/email/token-generator.js

@@ -1,6 +1,6 @@
 import {
   TokenGenerator
-} from "../../../chunk-GDWEDUHO.js";
+} from "../../../chunk-D73ZJQMX.js";
 import "../../../chunk-ORMEWXMH.js";
 export {
   TokenGenerator

package/dist/{auth → core/auth}/errors/index.js

@@ -5,8 +5,8 @@ import {
   JWTError,
   OAuthError,
   PasswordError
-} from "../../chunk-AIH3F7JV.js";
-import "../../chunk-ORMEWXMH.js";
+} from "../../../chunk-5GWGARXI.js";
+import "../../../chunk-ORMEWXMH.js";
 export {
   AUTH_ERROR_CODES,
   AuthError,

package/dist/{auth → core/auth}/index.d.ts

@@ -9,12 +9,12 @@
  */
 export * from './types';
 export * from './errors';
-export { JWTManager, JWTService } from './core/jwt';
+export { JWTManager, JWTService } from './jwt';
 export type { JWTConfig, JWTPayload, TokenPair } from './types';
-export { JWTClientManager, getStoredTokens, storeTokens, clearStoredTokens, clearTokens, decodeJWTPayload, isTokenExpired, getTokenRemainingTime, extractUserFromToken, createAuthHeader, createApiHeaders, isTokenExpiringSoon, getTokenExpirationString, getTokenIssuedAtString, } from './core/jwt/client';
-export { PasswordValidator, PasswordHasher, defaultPasswordSchema, strongPasswordSchema, } from './core/password';
-export type { PasswordValidationResult, PasswordConfig } from './core/password';
-export { DEFAULT_PASSWORD_CONFIG, createPasswordValidator, validatePassword, getPasswordStrength, createPasswordSchema, passwordValidator, createPasswordHasher, } from './core/password/client-helper';
-export { OAuthManager, GoogleOAuthProvider, GitHubOAuthProvider, KakaoOAuthProvider } from './core/oauth';
-export { TokenGenerator } from './core/email/token-generator';
+export { JWTClientManager, getStoredTokens, storeTokens, clearStoredTokens, clearTokens, decodeJWTPayload, isTokenExpired, getTokenRemainingTime, extractUserFromToken, createAuthHeader, createApiHeaders, isTokenExpiringSoon, getTokenExpirationString, getTokenIssuedAtString, } from './jwt/client';
+export { PasswordValidator, PasswordHasher, defaultPasswordSchema, strongPasswordSchema, } from './password';
+export type { PasswordValidationResult, PasswordConfig } from './password';
+export { DEFAULT_PASSWORD_CONFIG, createPasswordValidator, validatePassword, getPasswordStrength, createPasswordSchema, passwordValidator, createPasswordHasher, } from './password/client-helper';
+export { OAuthManager, GoogleOAuthProvider, GitHubOAuthProvider, KakaoOAuthProvider } from './oauth';
+export { TokenGenerator } from './email/token-generator';
 export { PasswordStrength, OAUTH_PROVIDERS, TokenType } from './types';

package/dist/{auth → core/auth}/index.js

@@ -6,13 +6,13 @@ import {
   getPasswordStrength,
   passwordValidator,
   validatePassword
-} from "../chunk-G26T2PRQ.js";
+} from "../../chunk-6JXHXIEH.js";
 import {
   PasswordHasher,
   PasswordValidator,
   defaultPasswordSchema,
   strongPasswordSchema
-} from "../chunk-IHXRF3BH.js";
+} from "../../chunk-MNYVAEXK.js";
 import {
   JWTClientManager,
   clearStoredTokens,
@@ -28,35 +28,36 @@ import {
   isTokenExpired,
   isTokenExpiringSoon,
   storeTokens
-} from "../chunk-XRRPEBKB.js";
+} from "../../chunk-LG3KM5V3.js";
 import {
-  OAuthManager
-} from "../chunk-57HPJEZB.js";
-import "../chunk-6CLQRZC2.js";
+  TokenGenerator
+} from "../../chunk-D73ZJQMX.js";
 import {
-  KakaoOAuthProvider
-} from "../chunk-TLZJQR26.js";
-import "../chunk-K3OYTLXU.js";
-import "../chunk-VB64KFBD.js";
+  OAuthManager
+} from "../../chunk-V3GEYUBG.js";
+import "../../chunk-CDALZTPN.js";
 import {
   GitHubOAuthProvider
-} from "../chunk-GBLNXNEH.js";
+} from "../../chunk-HIZ7USIF.js";
 import {
   GoogleOAuthProvider
-} from "../chunk-RVL5ROWQ.js";
+} from "../../chunk-GF3DKZIW.js";
 import {
-  TokenGenerator
-} from "../chunk-GDWEDUHO.js";
+  KakaoOAuthProvider
+} from "../../chunk-65HVR74O.js";
+import "../../chunk-33RIHX7O.js";
+import "../../chunk-GSSHHVHF.js";
+import "../../chunk-JLRMET4V.js";
 import {
   OAUTH_PROVIDERS,
   PasswordStrength,
   TokenType
-} from "../chunk-G2CKET5G.js";
+} from "../../chunk-GH3U4WRE.js";
 import {
   JWTManager,
   JWTService
-} from "../chunk-3GAY2T2A.js";
-import "../chunk-2O72OV5X.js";
+} from "../../chunk-2PFSRVVD.js";
+import "../../chunk-2JGSS4RM.js";
 import {
   AUTH_ERROR_CODES,
   AuthError,
@@ -64,12 +65,12 @@ import {
   JWTError,
   OAuthError,
   PasswordError
-} from "../chunk-AIH3F7JV.js";
-import "../chunk-JXACXHRL.js";
-import "../chunk-C4TSQUFA.js";
-import "../chunk-K25ICPU4.js";
-import "../chunk-2QH66EVQ.js";
-import "../chunk-ORMEWXMH.js";
+} from "../../chunk-5GWGARXI.js";
+import "../../chunk-UKPMQBU2.js";
+import "../../chunk-6J2EJVND.js";
+import "../../chunk-F3R3UYBF.js";
+import "../../chunk-2SIBG5BG.js";
+import "../../chunk-ORMEWXMH.js";
 export {
   AUTH_ERROR_CODES,
   AuthError,

package/dist/{auth/core → core/auth}/jwt/client.js

@@ -15,7 +15,7 @@ import {
   isTokenExpired,
   isTokenExpiringSoon,
   storeTokens
-} from "../../../chunk-XRRPEBKB.js";
+} from "../../../chunk-LG3KM5V3.js";
 import "../../../chunk-ORMEWXMH.js";
 export {
   JWTClientManager,

package/dist/{auth/core → core/auth}/jwt/cookie.d.ts

@@ -4,7 +4,7 @@
  * NextResponse 타입을 제네릭으로 처리하여
  * symlink 환경에서의 next 패키지 경로 충돌을 방지합니다.
  */
-import type { TokenPair } from '@withwiz/auth/types';
+import type { TokenPair } from '@withwiz/core/auth/types';
 /** cookies.set()을 지원하는 Response 타입 */
 interface CookieSettableResponse {
     cookies: {

package/dist/core/auth/jwt/cookie.js

@@ -0,0 +1,13 @@
+import {
+  clearTokenCookies,
+  setTokenCookies
+} from "../../../chunk-2JGSS4RM.js";
+import "../../../chunk-UKPMQBU2.js";
+import "../../../chunk-6J2EJVND.js";
+import "../../../chunk-F3R3UYBF.js";
+import "../../../chunk-2SIBG5BG.js";
+import "../../../chunk-ORMEWXMH.js";
+export {
+  clearTokenCookies,
+  setTokenCookies
+};

package/dist/{auth/core → core/auth}/jwt/index.d.ts

@@ -4,7 +4,7 @@
  * JWT 토큰 생성 및 검증 모듈 (프레임워크 독립적)
  * Next.js, Express, Fastify 등 어디서나 사용 가능
  */
-import type { JWTConfig, JWTPayload, TokenPair, Logger } from "@withwiz/auth/types";
+import type { JWTConfig, JWTPayload, TokenPair, Logger } from "@withwiz/core/auth/types";
 export declare class JWTManager {
     private config;
     private logger;

package/dist/core/auth/jwt/index.js

@@ -0,0 +1,20 @@
+import {
+  JWTManager,
+  JWTService
+} from "../../../chunk-2PFSRVVD.js";
+import {
+  clearTokenCookies,
+  setTokenCookies
+} from "../../../chunk-2JGSS4RM.js";
+import "../../../chunk-5GWGARXI.js";
+import "../../../chunk-UKPMQBU2.js";
+import "../../../chunk-6J2EJVND.js";
+import "../../../chunk-F3R3UYBF.js";
+import "../../../chunk-2SIBG5BG.js";
+import "../../../chunk-ORMEWXMH.js";
+export {
+  JWTManager,
+  JWTService,
+  clearTokenCookies,
+  setTokenCookies
+};

package/dist/{auth/core → core/auth}/jwt/types.d.ts

@@ -3,4 +3,4 @@
  *
  * JWT 모듈 전용 타입 정의
  */
-export * from '@withwiz/auth/types';
+export * from '@withwiz/core/auth/types';

package/dist/{auth/core → core/auth}/jwt/types.js

@@ -2,7 +2,7 @@ import {
   OAUTH_PROVIDERS,
   PasswordStrength,
   TokenType
-} from "../../../chunk-G2CKET5G.js";
+} from "../../../chunk-GH3U4WRE.js";
 import "../../../chunk-ORMEWXMH.js";
 export {
   OAUTH_PROVIDERS,

package/dist/{auth/core → core/auth}/oauth/index.d.ts

@@ -4,9 +4,11 @@
  * OAuth 2.0 인증 모듈 (프레임워크 독립적)
  * 플러그인 기반 프로바이더 레지스트리 패턴
  */
-import type { OAuthConfig, OAuthUserInfo, Logger, IOAuthProviderAdapter } from '@withwiz/auth/types';
-import { OAUTH_PROVIDERS } from '@withwiz/auth/types';
+import type { OAuthConfig, OAuthUserInfo, Logger, IOAuthProviderAdapter } from '@withwiz/core/auth/types';
+import { OAUTH_PROVIDERS } from '@withwiz/core/auth/types';
 export { OAUTH_PROVIDERS };
+export { OAUTH_STATE_COOKIE, generateOAuthState, setOAuthStateCookie, clearOAuthStateCookie, validateOAuthState, } from './state-cookie';
+export type { OAuthStateCookieOptions } from './state-cookie';
 export { GoogleOAuthProvider, GitHubOAuthProvider, KakaoOAuthProvider, MicrosoftOAuthProvider, MetaOAuthProvider, } from './providers';
 export declare class OAuthManager {
     private config;
@@ -38,4 +40,4 @@ export declare class OAuthManager {
      */
     private getProviderConfig;
 }
-export type { OAuthConfig, OAuthUserInfo, OAuthTokenResponse, IOAuthProviderAdapter, OAuthProviderConfig } from '@withwiz/auth/types';
+export type { OAuthConfig, OAuthUserInfo, OAuthTokenResponse, IOAuthProviderAdapter, OAuthProviderConfig } from '@withwiz/core/auth/types';

package/dist/core/auth/oauth/index.js

@@ -0,0 +1,45 @@
+import {
+  OAuthManager
+} from "../../../chunk-V3GEYUBG.js";
+import "../../../chunk-CDALZTPN.js";
+import {
+  GitHubOAuthProvider
+} from "../../../chunk-HIZ7USIF.js";
+import {
+  GoogleOAuthProvider
+} from "../../../chunk-GF3DKZIW.js";
+import {
+  KakaoOAuthProvider
+} from "../../../chunk-65HVR74O.js";
+import {
+  MetaOAuthProvider
+} from "../../../chunk-33RIHX7O.js";
+import {
+  MicrosoftOAuthProvider
+} from "../../../chunk-GSSHHVHF.js";
+import {
+  OAUTH_STATE_COOKIE,
+  clearOAuthStateCookie,
+  generateOAuthState,
+  setOAuthStateCookie,
+  validateOAuthState
+} from "../../../chunk-JLRMET4V.js";
+import {
+  OAUTH_PROVIDERS
+} from "../../../chunk-GH3U4WRE.js";
+import "../../../chunk-5GWGARXI.js";
+import "../../../chunk-ORMEWXMH.js";
+export {
+  GitHubOAuthProvider,
+  GoogleOAuthProvider,
+  KakaoOAuthProvider,
+  MetaOAuthProvider,
+  MicrosoftOAuthProvider,
+  OAUTH_PROVIDERS,
+  OAUTH_STATE_COOKIE,
+  OAuthManager,
+  clearOAuthStateCookie,
+  generateOAuthState,
+  setOAuthStateCookie,
+  validateOAuthState
+};

package/dist/{auth/core → core/auth}/oauth/providers/github.d.ts

@@ -3,7 +3,7 @@
  *
  * GitHub OAuth 2.0 인증 어댑터
  */
-import type { IOAuthProviderAdapter, OAuthProviderConfig, OAuthUserInfo, OAuthTokenResponse } from '@withwiz/auth/types';
+import type { IOAuthProviderAdapter, OAuthProviderConfig, OAuthUserInfo, OAuthTokenResponse } from '@withwiz/core/auth/types';
 export declare class GitHubOAuthProvider implements IOAuthProviderAdapter {
     readonly name = "github";
     getLoginUrl(config: OAuthProviderConfig, state?: string): string;

package/dist/{auth/core → core/auth}/oauth/providers/github.js

@@ -1,7 +1,7 @@
 import {
   GitHubOAuthProvider
-} from "../../../../chunk-GBLNXNEH.js";
-import "../../../../chunk-AIH3F7JV.js";
+} from "../../../../chunk-HIZ7USIF.js";
+import "../../../../chunk-5GWGARXI.js";
 import "../../../../chunk-ORMEWXMH.js";
 export {
   GitHubOAuthProvider

package/dist/{auth/core → core/auth}/oauth/providers/google.d.ts

@@ -3,7 +3,7 @@
  *
  * Google OAuth 2.0 인증 어댑터
  */
-import type { IOAuthProviderAdapter, OAuthProviderConfig, OAuthUserInfo, OAuthTokenResponse } from '@withwiz/auth/types';
+import type { IOAuthProviderAdapter, OAuthProviderConfig, OAuthUserInfo, OAuthTokenResponse } from '@withwiz/core/auth/types';
 export declare class GoogleOAuthProvider implements IOAuthProviderAdapter {
     readonly name = "google";
     getLoginUrl(config: OAuthProviderConfig, state?: string): string;

package/dist/{auth/core → core/auth}/oauth/providers/google.js

@@ -1,7 +1,7 @@
 import {
   GoogleOAuthProvider
-} from "../../../../chunk-RVL5ROWQ.js";
-import "../../../../chunk-AIH3F7JV.js";
+} from "../../../../chunk-GF3DKZIW.js";
+import "../../../../chunk-5GWGARXI.js";
 import "../../../../chunk-ORMEWXMH.js";
 export {
   GoogleOAuthProvider

package/dist/{auth/core → core/auth}/oauth/providers/index.js

@@ -1,20 +1,20 @@
-import "../../../../chunk-6CLQRZC2.js";
+import "../../../../chunk-CDALZTPN.js";
+import {
+  GitHubOAuthProvider
+} from "../../../../chunk-HIZ7USIF.js";
+import {
+  GoogleOAuthProvider
+} from "../../../../chunk-GF3DKZIW.js";
 import {
   KakaoOAuthProvider
-} from "../../../../chunk-TLZJQR26.js";
+} from "../../../../chunk-65HVR74O.js";
 import {
   MetaOAuthProvider
-} from "../../../../chunk-K3OYTLXU.js";
+} from "../../../../chunk-33RIHX7O.js";
 import {
   MicrosoftOAuthProvider
-} from "../../../../chunk-VB64KFBD.js";
-import {
-  GitHubOAuthProvider
-} from "../../../../chunk-GBLNXNEH.js";
-import {
-  GoogleOAuthProvider
-} from "../../../../chunk-RVL5ROWQ.js";
-import "../../../../chunk-AIH3F7JV.js";
+} from "../../../../chunk-GSSHHVHF.js";
+import "../../../../chunk-5GWGARXI.js";
 import "../../../../chunk-ORMEWXMH.js";
 export {
   GitHubOAuthProvider,

package/dist/{auth/core → core/auth}/oauth/providers/kakao.d.ts

@@ -3,7 +3,7 @@
  *
  * Kakao OAuth 2.0 인증 어댑터
  */
-import type { IOAuthProviderAdapter, OAuthProviderConfig, OAuthUserInfo, OAuthTokenResponse } from '@withwiz/auth/types';
+import type { IOAuthProviderAdapter, OAuthProviderConfig, OAuthUserInfo, OAuthTokenResponse } from '@withwiz/core/auth/types';
 export declare class KakaoOAuthProvider implements IOAuthProviderAdapter {
     readonly name = "kakao";
     getLoginUrl(config: OAuthProviderConfig, state?: string): string;

package/dist/{auth/core → core/auth}/oauth/providers/kakao.js

@@ -1,7 +1,7 @@
 import {
   KakaoOAuthProvider
-} from "../../../../chunk-TLZJQR26.js";
-import "../../../../chunk-AIH3F7JV.js";
+} from "../../../../chunk-65HVR74O.js";
+import "../../../../chunk-5GWGARXI.js";
 import "../../../../chunk-ORMEWXMH.js";
 export {
   KakaoOAuthProvider

package/dist/{auth/core → core/auth}/oauth/providers/meta.d.ts

@@ -5,7 +5,7 @@
  * - Token 교환은 Meta 공식 권고에 따라 GET + query string 사용
  * - 사용자 정보는 Graph /me?fields=id,name,email,picture 응답에서 매핑
  */
-import type { IOAuthProviderAdapter, OAuthProviderConfig, OAuthUserInfo, OAuthTokenResponse } from '@withwiz/auth/types';
+import type { IOAuthProviderAdapter, OAuthProviderConfig, OAuthUserInfo, OAuthTokenResponse } from '@withwiz/core/auth/types';
 export declare class MetaOAuthProvider implements IOAuthProviderAdapter {
     readonly name = "meta";
     getLoginUrl(config: OAuthProviderConfig, state?: string): string;

package/dist/{auth/core → core/auth}/oauth/providers/meta.js

@@ -1,7 +1,7 @@
 import {
   MetaOAuthProvider
-} from "../../../../chunk-K3OYTLXU.js";
-import "../../../../chunk-AIH3F7JV.js";
+} from "../../../../chunk-33RIHX7O.js";
+import "../../../../chunk-5GWGARXI.js";
 import "../../../../chunk-ORMEWXMH.js";
 export {
   MetaOAuthProvider

package/dist/{auth/core → core/auth}/oauth/providers/microsoft.d.ts

@@ -3,16 +3,16 @@
  *
  * Microsoft Entra v2.0 (common 테넌트, server-side code flow).
  *
- * 신뢰 모델: 이 어댑터의 `getUserInfo`는 동일 어댑터의 `exchangeCodeForToken`이
- * 반환한 토큰만 입력으로 받는다는 가정 하에 동작한다 (HTTPS code-flow 채널 신뢰).
- * 외부에서 받은 id_token을 직접 주입하지 말 것. 클라이언트-사이드 흐름(SPA/PKCE)
- * 지원이 필요해지면 JWKS 기반 서명 검증을 별도 spec으로 추가한다.
+ * 신뢰 모델: id_token 은 Microsoft Entra v2.0 JWKS 로 RS256 서명을
+ * 암호학적으로 검증한 뒤에만 클레임을 신뢰한다(O-2). 따라서 getUserInfo 가
+ * 외부에서 주입된 토큰을 받아도 위조 토큰은 서명 검증에서 거부되며,
+ * 클라이언트-사이드 흐름(SPA/PKCE)에서도 안전하다.
  *
  * 인터페이스 우회: IOAuthProviderAdapter 변경 없이 id_token 클레임을 사용하기
  * 위해, exchangeCodeForToken은 upstream의 `id_token` 값을 OAuthTokenResponse.access_token
- * 필드에 담아 반환한다. getUserInfo는 그 문자열을 jose.decodeJwt로 디코딩한다.
+ * 필드에 담아 반환한다. getUserInfo는 그 문자열을 JWKS 서명 검증 후 사용한다.
  */
-import type { IOAuthProviderAdapter, OAuthProviderConfig, OAuthUserInfo, OAuthTokenResponse } from '@withwiz/auth/types';
+import type { IOAuthProviderAdapter, OAuthProviderConfig, OAuthUserInfo, OAuthTokenResponse } from '@withwiz/core/auth/types';
 export declare class MicrosoftOAuthProvider implements IOAuthProviderAdapter {
     readonly name = "microsoft";
     getLoginUrl(config: OAuthProviderConfig, state?: string): string;

package/dist/{auth/core → core/auth}/oauth/providers/microsoft.js

@@ -1,7 +1,7 @@
 import {
   MicrosoftOAuthProvider
-} from "../../../../chunk-VB64KFBD.js";
-import "../../../../chunk-AIH3F7JV.js";
+} from "../../../../chunk-GSSHHVHF.js";
+import "../../../../chunk-5GWGARXI.js";
 import "../../../../chunk-ORMEWXMH.js";
 export {
   MicrosoftOAuthProvider

package/dist/core/auth/oauth/state-cookie.d.ts

@@ -0,0 +1,28 @@
+/**
+ * OAuth state(CSRF) 를 HttpOnly 쿠키로 설정/검증/삭제하는 유틸리티
+ *
+ * NextResponse 타입을 제네릭으로 처리하여 next 패키지 경로 충돌을
+ * 방지한다 (core 티어 — next 비의존, jwt/cookie.ts 패턴 미러).
+ */
+/** cookies.set() 을 지원하는 Response 타입 */
+interface CookieSettableResponse {
+    cookies: {
+        set(name: string, value: string, options?: Record<string, unknown>): void;
+    };
+}
+export declare const OAUTH_STATE_COOKIE = "oauth_state";
+export interface OAuthStateCookieOptions {
+    secure?: boolean;
+    sameSite?: 'lax' | 'strict' | 'none';
+    domain?: string;
+}
+/** CSRF 방지용 OAuth state nonce 생성 */
+export declare function generateOAuthState(): string;
+export declare function setOAuthStateCookie<T extends CookieSettableResponse>(response: T, state: string, options?: OAuthStateCookieOptions): T;
+export declare function clearOAuthStateCookie<T extends CookieSettableResponse>(response: T, options?: OAuthStateCookieOptions): T;
+/**
+ * 콜백 쿼리 state 와 쿠키 state 의 일치 검증.
+ * 양쪽 모두 비공백 문자열이고 strict 일치일 때만 true.
+ */
+export declare function validateOAuthState(cookieValue: string | null | undefined, queryState: string | null | undefined): boolean;
+export {};

package/dist/core/auth/oauth/state-cookie.js

@@ -0,0 +1,15 @@
+import {
+  OAUTH_STATE_COOKIE,
+  clearOAuthStateCookie,
+  generateOAuthState,
+  setOAuthStateCookie,
+  validateOAuthState
+} from "../../../chunk-JLRMET4V.js";
+import "../../../chunk-ORMEWXMH.js";
+export {
+  OAUTH_STATE_COOKIE,
+  clearOAuthStateCookie,
+  generateOAuthState,
+  setOAuthStateCookie,
+  validateOAuthState
+};

package/dist/{auth/core → core/auth}/password/client-helper.d.ts

@@ -4,7 +4,7 @@
  * 클라이언트 사이드용 비밀번호 검증 헬퍼 (프레임워크 독립적)
  */
 import { PasswordValidator, PasswordHasher } from './index';
-import type { PasswordConfig } from '@withwiz/auth/types';
+import type { PasswordConfig } from '@withwiz/core/auth/types';
 import type { z } from 'zod';
 /**
  * 기본 비밀번호 설정
@@ -21,7 +21,7 @@ export declare function validatePassword(password: string, config?: Partial<Pass
 /**
  * 비밀번호 강도 계산 헬퍼 함수
  */
-export declare function getPasswordStrength(password: string, config?: Partial<PasswordConfig>): import("@withwiz/auth/types").PasswordStrength;
+export declare function getPasswordStrength(password: string, config?: Partial<PasswordConfig>): import("@withwiz/core/auth/types").PasswordStrength;
 /**
  * Zod 스키마 생성 헬퍼 함수
  */
@@ -41,4 +41,4 @@ export declare const passwordValidator: PasswordValidator;
 export declare function createPasswordHasher(rounds?: number): PasswordHasher;
 export { PasswordValidator, PasswordHasher } from './index';
 export type { PasswordValidationResult } from './index';
-export type { PasswordConfig, PasswordStrength } from '@withwiz/auth/types';
+export type { PasswordConfig, PasswordStrength } from '@withwiz/core/auth/types';

package/dist/{auth/core → core/auth}/password/client-helper.js

@@ -7,12 +7,12 @@ import {
   getPasswordStrength,
   passwordValidator,
   validatePassword
-} from "../../../chunk-G26T2PRQ.js";
+} from "../../../chunk-6JXHXIEH.js";
 import {
   PasswordHasher,
   PasswordValidator
-} from "../../../chunk-IHXRF3BH.js";
-import "../../../chunk-G2CKET5G.js";
+} from "../../../chunk-MNYVAEXK.js";
+import "../../../chunk-GH3U4WRE.js";
 import "../../../chunk-ORMEWXMH.js";
 export {
   DEFAULT_PASSWORD_CONFIG,

package/dist/{auth/core → core/auth}/password/index.d.ts

@@ -4,8 +4,8 @@
  * 비밀번호 검증 및 강도 측정 모듈 (프레임워크 독립적)
  */
 import { z } from 'zod';
-import type { PasswordConfig } from '@withwiz/auth/types';
-import { PasswordStrength, type PasswordValidationResult as BasePasswordValidationResult } from '@withwiz/auth/types';
+import type { PasswordConfig } from '@withwiz/core/auth/types';
+import { PasswordStrength, type PasswordValidationResult as BasePasswordValidationResult } from '@withwiz/core/auth/types';
 export interface PasswordValidationResult extends BasePasswordValidationResult {
     score: number;
 }
@@ -68,4 +68,4 @@ export declare const defaultPasswordSchema: z.ZodString;
  * 최소 12자, 대소문자, 숫자, 특수문자 포함
  */
 export declare const strongPasswordSchema: z.ZodString;
-export type { PasswordConfig, PasswordStrength } from '@withwiz/auth/types';
+export type { PasswordConfig, PasswordStrength } from '@withwiz/core/auth/types';

package/dist/{auth/core → core/auth}/password/index.js

@@ -3,8 +3,8 @@ import {
   PasswordValidator,
   defaultPasswordSchema,
   strongPasswordSchema
-} from "../../../chunk-IHXRF3BH.js";
-import "../../../chunk-G2CKET5G.js";
+} from "../../../chunk-MNYVAEXK.js";
+import "../../../chunk-GH3U4WRE.js";
 import "../../../chunk-ORMEWXMH.js";
 export {
   PasswordHasher,