@workos-inc/node 8.0.0-beta.4 → 8.0.0-rc.10

package/lib/cjs/client/sso.cjs

@@ -1,65 +0,0 @@
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var sso_exports = {};
-__export(sso_exports, {
-  getAuthorizationUrl: () => getAuthorizationUrl
-});
-module.exports = __toCommonJS(sso_exports);
-var import_utils = require('./utils.cjs');
-function getAuthorizationUrl(options) {
-  const {
-    connection,
-    clientId,
-    domainHint,
-    loginHint,
-    organization,
-    provider,
-    providerQueryParams,
-    providerScopes,
-    redirectUri,
-    state,
-    baseURL = "https://api.workos.com"
-  } = options;
-  if (!provider && !connection && !organization) {
-    throw new Error(
-      `Incomplete arguments. Need to specify either a 'connection', 'organization', or 'provider'.`
-    );
-  }
-  const query = (0, import_utils.toQueryString)({
-    connection,
-    organization,
-    domain_hint: domainHint,
-    login_hint: loginHint,
-    provider,
-    provider_query_params: providerQueryParams,
-    provider_scopes: providerScopes,
-    client_id: clientId,
-    redirect_uri: redirectUri,
-    response_type: "code",
-    state
-  });
-  return `${baseURL}/sso/authorize?${query}`;
-}
-__name(getAuthorizationUrl, "getAuthorizationUrl");
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  getAuthorizationUrl
-});
-//# sourceMappingURL=sso.cjs.map

package/lib/cjs/client/sso.cjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../../src/client/sso.ts"],"sourcesContent":["import { toQueryString } from './utils';\nimport type { SSOAuthorizationURLOptions as BaseSSOAuthorizationURLOptions } from '../sso/interfaces';\n\n// Extend the base options to include baseURL for internal use\nexport type SSOAuthorizationURLOptions = BaseSSOAuthorizationURLOptions & {\n  baseURL?: string;\n};\n\n/**\n * Generates the authorization URL for SSO authentication.\n * Does not require an API key, suitable for OAuth client operations.\n *\n * @param options - SSO authorization URL options\n * @returns The authorization URL as a string\n * @throws Error if required arguments are missing\n */\nexport function getAuthorizationUrl(\n  options: SSOAuthorizationURLOptions,\n): string {\n  const {\n    connection,\n    clientId,\n    domainHint,\n    loginHint,\n    organization,\n    provider,\n    providerQueryParams,\n    providerScopes,\n    redirectUri,\n    state,\n    baseURL = 'https://api.workos.com',\n  } = options;\n\n  if (!provider && !connection && !organization) {\n    throw new Error(\n      `Incomplete arguments. Need to specify either a 'connection', 'organization', or 'provider'.`,\n    );\n  }\n\n  const query = toQueryString({\n    connection,\n    organization,\n    domain_hint: domainHint,\n    login_hint: loginHint,\n    provider,\n    provider_query_params: providerQueryParams,\n    provider_scopes: providerScopes,\n    client_id: clientId,\n    redirect_uri: redirectUri,\n    response_type: 'code',\n    state,\n  });\n\n  return `${baseURL}/sso/authorize?${query}`;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,mBAA8B;AAgBvB,SAAS,oBACd,SACQ;AACR,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,UAAU;AAAA,EACZ,IAAI;AAEJ,MAAI,CAAC,YAAY,CAAC,cAAc,CAAC,cAAc;AAC7C,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAEA,QAAM,YAAQ,4BAAc;AAAA,IAC1B;AAAA,IACA;AAAA,IACA,aAAa;AAAA,IACb,YAAY;AAAA,IACZ;AAAA,IACA,uBAAuB;AAAA,IACvB,iBAAiB;AAAA,IACjB,WAAW;AAAA,IACX,cAAc;AAAA,IACd,eAAe;AAAA,IACf;AAAA,EACF,CAAC;AAED,SAAO,GAAG,OAAO,kBAAkB,KAAK;AAC1C;AAtCgB;","names":[]}

package/lib/cjs/client/sso.d.cts

@@ -1,2 +0,0 @@
-import '../sso/interfaces/authorization-url-options.interface.cjs';
-export { S as SSOAuthorizationURLOptions, g as getAuthorizationUrl } from '../sso-BkBnkcTC.cjs';

package/lib/cjs/client/user-management.cjs

@@ -1,110 +0,0 @@
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var user_management_exports = {};
-__export(user_management_exports, {
-  getAuthorizationUrl: () => getAuthorizationUrl,
-  getJwksUrl: () => getJwksUrl,
-  getLogoutUrl: () => getLogoutUrl
-});
-module.exports = __toCommonJS(user_management_exports);
-var import_utils = require('./utils.cjs');
-function getAuthorizationUrl(options) {
-  const {
-    connectionId,
-    codeChallenge,
-    codeChallengeMethod,
-    context,
-    clientId,
-    domainHint,
-    loginHint,
-    organizationId,
-    provider,
-    providerQueryParams,
-    providerScopes,
-    prompt,
-    redirectUri,
-    state,
-    screenHint,
-    baseURL = "https://api.workos.com"
-  } = options;
-  if (!provider && !connectionId && !organizationId) {
-    throw new TypeError(
-      `Incomplete arguments. Need to specify either a 'connectionId', 'organizationId', or 'provider'.`
-    );
-  }
-  if (provider !== "authkit" && screenHint) {
-    throw new TypeError(
-      `'screenHint' is only supported for 'authkit' provider`
-    );
-  }
-  if (context) {
-    console.warn(
-      `WorkOS: \`context\` is deprecated. We previously required initiate login endpoints to return the
-\`context\` query parameter when getting the authorization URL. This is no longer necessary.`
-    );
-  }
-  const query = (0, import_utils.toQueryString)({
-    connection_id: connectionId,
-    code_challenge: codeChallenge,
-    code_challenge_method: codeChallengeMethod,
-    context,
-    organization_id: organizationId,
-    domain_hint: domainHint,
-    login_hint: loginHint,
-    provider,
-    provider_query_params: providerQueryParams,
-    provider_scopes: providerScopes,
-    prompt,
-    client_id: clientId,
-    redirect_uri: redirectUri,
-    response_type: "code",
-    state,
-    screen_hint: screenHint
-  });
-  return `${baseURL}/user_management/authorize?${query}`;
-}
-__name(getAuthorizationUrl, "getAuthorizationUrl");
-function getLogoutUrl(options) {
-  const { sessionId, returnTo, baseURL = "https://api.workos.com" } = options;
-  if (!sessionId) {
-    throw new TypeError(`Incomplete arguments. Need to specify 'sessionId'.`);
-  }
-  const url = new URL("/user_management/sessions/logout", baseURL);
-  url.searchParams.set("session_id", sessionId);
-  if (returnTo) {
-    url.searchParams.set("return_to", returnTo);
-  }
-  return url.toString();
-}
-__name(getLogoutUrl, "getLogoutUrl");
-function getJwksUrl(clientId, baseURL = "https://api.workos.com") {
-  if (!clientId) {
-    throw new TypeError("clientId must be a valid clientId");
-  }
-  return `${baseURL}/sso/jwks/${clientId}`;
-}
-__name(getJwksUrl, "getJwksUrl");
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  getAuthorizationUrl,
-  getJwksUrl,
-  getLogoutUrl
-});
-//# sourceMappingURL=user-management.cjs.map

package/lib/cjs/client/user-management.cjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../../src/client/user-management.ts"],"sourcesContent":["import { toQueryString } from './utils';\n\n// Re-export necessary interfaces for client use\nexport interface AuthorizationURLOptions {\n  clientId: string;\n  codeChallenge?: string;\n  codeChallengeMethod?: 'S256';\n  connectionId?: string;\n  /**\n   *  @deprecated We previously required initiate login endpoints to return the `context`\n   *  query parameter when getting the authorization URL. This is no longer necessary.\n   */\n  context?: string;\n  organizationId?: string;\n  domainHint?: string;\n  loginHint?: string;\n  provider?: string;\n  providerQueryParams?: Record<string, string | boolean | number>;\n  providerScopes?: string[];\n  prompt?: string;\n  redirectUri: string;\n  state?: string;\n  screenHint?: 'sign-up' | 'sign-in';\n}\n\nexport interface LogoutURLOptions {\n  sessionId: string;\n  returnTo?: string;\n}\n\n/**\n * Generates the authorization URL for OAuth client authentication.\n * Suitable for PKCE flows and other OAuth client operations that don't require an API key.\n *\n * @param options - Authorization URL options\n * @returns The authorization URL as a string\n * @throws TypeError if required arguments are missing\n */\nexport function getAuthorizationUrl(\n  options: AuthorizationURLOptions & { baseURL?: string },\n): string {\n  const {\n    connectionId,\n    codeChallenge,\n    codeChallengeMethod,\n    context,\n    clientId,\n    domainHint,\n    loginHint,\n    organizationId,\n    provider,\n    providerQueryParams,\n    providerScopes,\n    prompt,\n    redirectUri,\n    state,\n    screenHint,\n    baseURL = 'https://api.workos.com',\n  } = options;\n\n  if (!provider && !connectionId && !organizationId) {\n    throw new TypeError(\n      `Incomplete arguments. Need to specify either a 'connectionId', 'organizationId', or 'provider'.`,\n    );\n  }\n\n  if (provider !== 'authkit' && screenHint) {\n    throw new TypeError(\n      `'screenHint' is only supported for 'authkit' provider`,\n    );\n  }\n\n  if (context) {\n    console.warn(\n      `WorkOS: \\`context\\` is deprecated. We previously required initiate login endpoints to return the\n\\`context\\` query parameter when getting the authorization URL. This is no longer necessary.`,\n    );\n  }\n\n  const query = toQueryString({\n    connection_id: connectionId,\n    code_challenge: codeChallenge,\n    code_challenge_method: codeChallengeMethod,\n    context,\n    organization_id: organizationId,\n    domain_hint: domainHint,\n    login_hint: loginHint,\n    provider,\n    provider_query_params: providerQueryParams,\n    provider_scopes: providerScopes,\n    prompt,\n    client_id: clientId,\n    redirect_uri: redirectUri,\n    response_type: 'code',\n    state,\n    screen_hint: screenHint,\n  });\n\n  return `${baseURL}/user_management/authorize?${query}`;\n}\n\n/**\n * Generates the logout URL for ending a user session.\n * This method is safe to use in browser environments as it doesn't require an API key.\n *\n * @param options - Logout URL options\n * @returns The logout URL as a string\n * @throws TypeError if sessionId is not provided\n */\nexport function getLogoutUrl(\n  options: LogoutURLOptions & { baseURL?: string },\n): string {\n  const { sessionId, returnTo, baseURL = 'https://api.workos.com' } = options;\n\n  if (!sessionId) {\n    throw new TypeError(`Incomplete arguments. Need to specify 'sessionId'.`);\n  }\n\n  const url = new URL('/user_management/sessions/logout', baseURL);\n\n  url.searchParams.set('session_id', sessionId);\n  if (returnTo) {\n    url.searchParams.set('return_to', returnTo);\n  }\n\n  return url.toString();\n}\n\n/**\n * Gets the JWKS (JSON Web Key Set) URL for a given client ID.\n * Does not require an API key, returns the public JWKS endpoint.\n *\n * @param clientId - The WorkOS client ID\n * @param baseURL - Optional base URL for the API (defaults to https://api.workos.com)\n * @returns The JWKS URL as a string\n * @throws TypeError if clientId is not provided\n */\nexport function getJwksUrl(\n  clientId: string,\n  baseURL = 'https://api.workos.com',\n): string {\n  if (!clientId) {\n    throw new TypeError('clientId must be a valid clientId');\n  }\n\n  return `${baseURL}/sso/jwks/${clientId}`;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,mBAA8B;AAsCvB,SAAS,oBACd,SACQ;AACR,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,UAAU;AAAA,EACZ,IAAI;AAEJ,MAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,gBAAgB;AACjD,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAEA,MAAI,aAAa,aAAa,YAAY;AACxC,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAEA,MAAI,SAAS;AACX,YAAQ;AAAA,MACN;AAAA;AAAA,IAEF;AAAA,EACF;AAEA,QAAM,YAAQ,4BAAc;AAAA,IAC1B,eAAe;AAAA,IACf,gBAAgB;AAAA,IAChB,uBAAuB;AAAA,IACvB;AAAA,IACA,iBAAiB;AAAA,IACjB,aAAa;AAAA,IACb,YAAY;AAAA,IACZ;AAAA,IACA,uBAAuB;AAAA,IACvB,iBAAiB;AAAA,IACjB;AAAA,IACA,WAAW;AAAA,IACX,cAAc;AAAA,IACd,eAAe;AAAA,IACf;AAAA,IACA,aAAa;AAAA,EACf,CAAC;AAED,SAAO,GAAG,OAAO,8BAA8B,KAAK;AACtD;AA7DgB;AAuET,SAAS,aACd,SACQ;AACR,QAAM,EAAE,WAAW,UAAU,UAAU,yBAAyB,IAAI;AAEpE,MAAI,CAAC,WAAW;AACd,UAAM,IAAI,UAAU,oDAAoD;AAAA,EAC1E;AAEA,QAAM,MAAM,IAAI,IAAI,oCAAoC,OAAO;AAE/D,MAAI,aAAa,IAAI,cAAc,SAAS;AAC5C,MAAI,UAAU;AACZ,QAAI,aAAa,IAAI,aAAa,QAAQ;AAAA,EAC5C;AAEA,SAAO,IAAI,SAAS;AACtB;AAjBgB;AA4BT,SAAS,WACd,UACA,UAAU,0BACF;AACR,MAAI,CAAC,UAAU;AACb,UAAM,IAAI,UAAU,mCAAmC;AAAA,EACzD;AAEA,SAAO,GAAG,OAAO,aAAa,QAAQ;AACxC;AATgB;","names":[]}

package/lib/cjs/client/user-management.d.cts

@@ -1 +0,0 @@
-export { A as AuthorizationURLOptions, L as LogoutURLOptions, g as getAuthorizationUrl, b as getJwksUrl, a as getLogoutUrl } from '../user-management-B38wNrIN.cjs';

package/lib/cjs/client/utils.cjs

@@ -1,49 +0,0 @@
-"use strict";
-var __create = Object.create;
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __getProtoOf = Object.getPrototypeOf;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
-  // If the importer is in node compatibility mode or this is not an ESM
-  // file that has been converted to a CommonJS file using a Babel-
-  // compatible transform (i.e. "__esModule" has not been set), then set
-  // "default" to the CommonJS "module.exports" for node compatibility.
-  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
-  mod
-));
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var utils_exports = {};
-__export(utils_exports, {
-  toQueryString: () => toQueryString
-});
-module.exports = __toCommonJS(utils_exports);
-var import_qs = __toESM(require("qs"), 1);
-const toQueryString = /* @__PURE__ */ __name((options) => {
-  return import_qs.default.stringify(options, {
-    arrayFormat: "repeat",
-    // sorts the keys alphabetically to maintain backwards compatibility
-    sort: /* @__PURE__ */ __name((a, b) => a.localeCompare(b), "sort"),
-    // encodes space as + instead of %20 to maintain backwards compatibility
-    format: "RFC1738"
-  });
-}, "toQueryString");
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  toQueryString
-});
-//# sourceMappingURL=utils.cjs.map

package/lib/cjs/client/utils.cjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../../src/client/utils.ts"],"sourcesContent":["import qs from 'qs';\n\n/**\n * Converts an options object to a query string using qs library.\n * Maintains backwards compatibility with existing URL formatting.\n */\nexport const toQueryString = (\n  options: Record<\n    string,\n    string | string[] | Record<string, string | boolean | number> | undefined\n  >,\n): string => {\n  return qs.stringify(options, {\n    arrayFormat: 'repeat',\n    // sorts the keys alphabetically to maintain backwards compatibility\n    sort: (a, b) => a.localeCompare(b),\n    // encodes space as + instead of %20 to maintain backwards compatibility\n    format: 'RFC1738',\n  });\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,gBAAe;AAMR,MAAM,gBAAgB,wBAC3B,YAIW;AACX,SAAO,UAAAA,QAAG,UAAU,SAAS;AAAA,IAC3B,aAAa;AAAA;AAAA,IAEb,MAAM,wBAAC,GAAG,MAAM,EAAE,cAAc,CAAC,GAA3B;AAAA;AAAA,IAEN,QAAQ;AAAA,EACV,CAAC;AACH,GAb6B;","names":["qs"]}

package/lib/cjs/client/utils.d.cts

@@ -1,7 +0,0 @@
-/**
- * Converts an options object to a query string using qs library.
- * Maintains backwards compatibility with existing URL formatting.
- */
-declare const toQueryString: (options: Record<string, string | string[] | Record<string, string | boolean | number> | undefined>) => string;
-
-export { toQueryString };

package/lib/cjs/common/crypto/crypto-provider.cjs

@@ -1,35 +0,0 @@
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var crypto_provider_exports = {};
-__export(crypto_provider_exports, {
-  CryptoProvider: () => CryptoProvider
-});
-module.exports = __toCommonJS(crypto_provider_exports);
-class CryptoProvider {
-  static {
-    __name(this, "CryptoProvider");
-  }
-  encoder = new TextEncoder();
-}
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  CryptoProvider
-});
-//# sourceMappingURL=crypto-provider.cjs.map

package/lib/cjs/common/crypto/crypto-provider.cjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../../../src/common/crypto/crypto-provider.ts"],"sourcesContent":["/**\n * Interface encapsulating the various crypto computations used by the library,\n * allowing pluggable underlying crypto implementations.\n */\nexport abstract class CryptoProvider {\n  encoder = new TextEncoder();\n\n  /**\n   * Computes a SHA-256 HMAC given a secret and a payload (encoded in UTF-8).\n   * The output HMAC should be encoded in hexadecimal.\n   *\n   * Sample values for implementations:\n   * - computeHMACSignature('', 'test_secret') => 'f7f9bd47fb987337b5796fdc1fdb9ba221d0d5396814bfcaf9521f43fd8927fd'\n   * - computeHMACSignature('\\ud83d\\ude00', 'test_secret') => '837da296d05c4fe31f61d5d7ead035099d9585a5bcde87de952012a78f0b0c43\n   */\n  abstract computeHMACSignature(payload: string, secret: string): string;\n\n  /**\n   * Asynchronous version of `computeHMACSignature`. Some implementations may\n   * only allow support async signature computation.\n   *\n   * Computes a SHA-256 HMAC given a secret and a payload (encoded in UTF-8).\n   * The output HMAC should be encoded in hexadecimal.\n   *\n   * Sample values for implementations:\n   * - computeHMACSignature('', 'test_secret') => 'f7f9bd47fb987337b5796fdc1fdb9ba221d0d5396814bfcaf9521f43fd8927fd'\n   * - computeHMACSignature('\\ud83d\\ude00', 'test_secret') => '837da296d05c4fe31f61d5d7ead035099d9585a5bcde87de952012a78f0b0c43\n   */\n  abstract computeHMACSignatureAsync(\n    payload: string,\n    secret: string,\n  ): Promise<string>;\n\n  /**\n   * Cryptographically determine whether two signatures are equal\n   */\n  abstract secureCompare(stringA: string, stringB: string): Promise<boolean>;\n\n  /**\n   * Encrypts data using AES-256-GCM algorithm.\n   *\n   * @param plaintext The data to encrypt\n   * @param key The encryption key (should be 32 bytes for AES-256)\n   * @param iv Optional initialization vector (if not provided, a random one will be generated)\n   * @param aad Optional additional authenticated data\n   * @returns Object containing the encrypted ciphertext, the IV used, and the authentication tag\n   */\n  abstract encrypt(\n    plaintext: Uint8Array,\n    key: Uint8Array,\n    iv?: Uint8Array,\n    aad?: Uint8Array,\n  ): Promise<{\n    ciphertext: Uint8Array;\n    iv: Uint8Array;\n    tag: Uint8Array;\n  }>;\n\n  /**\n   * Decrypts data that was encrypted using AES-256-GCM algorithm.\n   *\n   * @param ciphertext The encrypted data\n   * @param key The decryption key (must be the same key used for encryption)\n   * @param iv The initialization vector used during encryption\n   * @param tag The authentication tag produced during encryption\n   * @param aad Optional additional authenticated data (must match what was used during encryption)\n   * @returns The decrypted data\n   * @throws Will throw an error if authentication fails or the data has been tampered with\n   */\n  abstract decrypt(\n    ciphertext: Uint8Array,\n    key: Uint8Array,\n    iv: Uint8Array,\n    tag: Uint8Array,\n    aad?: Uint8Array,\n  ): Promise<Uint8Array>;\n\n  /**\n   * Generates cryptographically secure random bytes.\n   *\n   * @param length The number of random bytes to generate\n   * @returns A Uint8Array containing the random bytes\n   */\n  abstract randomBytes(length: number): Uint8Array;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAIO,MAAe,eAAe;AAAA,EAJrC,OAIqC;AAAA;AAAA;AAAA,EACnC,UAAU,IAAI,YAAY;AA+E5B;","names":[]}

package/lib/cjs/common/crypto/crypto-provider.d.cts

@@ -1,67 +0,0 @@
-/**
- * Interface encapsulating the various crypto computations used by the library,
- * allowing pluggable underlying crypto implementations.
- */
-declare abstract class CryptoProvider {
-    encoder: TextEncoder;
-    /**
-     * Computes a SHA-256 HMAC given a secret and a payload (encoded in UTF-8).
-     * The output HMAC should be encoded in hexadecimal.
-     *
-     * Sample values for implementations:
-     * - computeHMACSignature('', 'test_secret') => 'f7f9bd47fb987337b5796fdc1fdb9ba221d0d5396814bfcaf9521f43fd8927fd'
-     * - computeHMACSignature('\ud83d\ude00', 'test_secret') => '837da296d05c4fe31f61d5d7ead035099d9585a5bcde87de952012a78f0b0c43
-     */
-    abstract computeHMACSignature(payload: string, secret: string): string;
-    /**
-     * Asynchronous version of `computeHMACSignature`. Some implementations may
-     * only allow support async signature computation.
-     *
-     * Computes a SHA-256 HMAC given a secret and a payload (encoded in UTF-8).
-     * The output HMAC should be encoded in hexadecimal.
-     *
-     * Sample values for implementations:
-     * - computeHMACSignature('', 'test_secret') => 'f7f9bd47fb987337b5796fdc1fdb9ba221d0d5396814bfcaf9521f43fd8927fd'
-     * - computeHMACSignature('\ud83d\ude00', 'test_secret') => '837da296d05c4fe31f61d5d7ead035099d9585a5bcde87de952012a78f0b0c43
-     */
-    abstract computeHMACSignatureAsync(payload: string, secret: string): Promise<string>;
-    /**
-     * Cryptographically determine whether two signatures are equal
-     */
-    abstract secureCompare(stringA: string, stringB: string): Promise<boolean>;
-    /**
-     * Encrypts data using AES-256-GCM algorithm.
-     *
-     * @param plaintext The data to encrypt
-     * @param key The encryption key (should be 32 bytes for AES-256)
-     * @param iv Optional initialization vector (if not provided, a random one will be generated)
-     * @param aad Optional additional authenticated data
-     * @returns Object containing the encrypted ciphertext, the IV used, and the authentication tag
-     */
-    abstract encrypt(plaintext: Uint8Array, key: Uint8Array, iv?: Uint8Array, aad?: Uint8Array): Promise<{
-        ciphertext: Uint8Array;
-        iv: Uint8Array;
-        tag: Uint8Array;
-    }>;
-    /**
-     * Decrypts data that was encrypted using AES-256-GCM algorithm.
-     *
-     * @param ciphertext The encrypted data
-     * @param key The decryption key (must be the same key used for encryption)
-     * @param iv The initialization vector used during encryption
-     * @param tag The authentication tag produced during encryption
-     * @param aad Optional additional authenticated data (must match what was used during encryption)
-     * @returns The decrypted data
-     * @throws Will throw an error if authentication fails or the data has been tampered with
-     */
-    abstract decrypt(ciphertext: Uint8Array, key: Uint8Array, iv: Uint8Array, tag: Uint8Array, aad?: Uint8Array): Promise<Uint8Array>;
-    /**
-     * Generates cryptographically secure random bytes.
-     *
-     * @param length The number of random bytes to generate
-     * @returns A Uint8Array containing the random bytes
-     */
-    abstract randomBytes(length: number): Uint8Array;
-}
-
-export { CryptoProvider };

package/lib/cjs/common/crypto/signature-provider.cjs

@@ -1,84 +0,0 @@
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var signature_provider_exports = {};
-__export(signature_provider_exports, {
-  SignatureProvider: () => SignatureProvider
-});
-module.exports = __toCommonJS(signature_provider_exports);
-var import_exceptions = require('../exceptions/index.cjs');
-class SignatureProvider {
-  static {
-    __name(this, "SignatureProvider");
-  }
-  cryptoProvider;
-  constructor(cryptoProvider) {
-    this.cryptoProvider = cryptoProvider;
-  }
-  async verifyHeader({
-    payload,
-    sigHeader,
-    secret,
-    tolerance = 18e4
-  }) {
-    const [timestamp, signatureHash] = this.getTimestampAndSignatureHash(sigHeader);
-    if (!signatureHash || Object.keys(signatureHash).length === 0) {
-      throw new import_exceptions.SignatureVerificationException(
-        "No signature hash found with expected scheme v1"
-      );
-    }
-    if (parseInt(timestamp, 10) < Date.now() - tolerance) {
-      throw new import_exceptions.SignatureVerificationException(
-        "Timestamp outside the tolerance zone"
-      );
-    }
-    const expectedSig = await this.computeSignature(timestamp, payload, secret);
-    if (await this.cryptoProvider.secureCompare(expectedSig, signatureHash) === false) {
-      throw new import_exceptions.SignatureVerificationException(
-        "Signature hash does not match the expected signature hash for payload"
-      );
-    }
-    return true;
-  }
-  getTimestampAndSignatureHash(sigHeader) {
-    const signature = sigHeader;
-    const [t, v1] = signature.split(",");
-    if (typeof t === "undefined" || typeof v1 === "undefined") {
-      throw new import_exceptions.SignatureVerificationException(
-        "Signature or timestamp missing"
-      );
-    }
-    const { 1: timestamp } = t.split("=");
-    const { 1: signatureHash } = v1.split("=");
-    return [timestamp, signatureHash];
-  }
-  async computeSignature(timestamp, payload, secret) {
-    payload = JSON.stringify(payload);
-    const signedPayload = `${timestamp}.${payload}`;
-    return await this.cryptoProvider.computeHMACSignatureAsync(
-      signedPayload,
-      secret
-    );
-  }
-}
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  SignatureProvider
-});
-//# sourceMappingURL=signature-provider.cjs.map

package/lib/cjs/common/crypto/signature-provider.cjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../../../src/common/crypto/signature-provider.ts"],"sourcesContent":["import { SignatureVerificationException } from '../exceptions';\nimport { CryptoProvider } from './crypto-provider';\n\nexport class SignatureProvider {\n  private cryptoProvider: CryptoProvider;\n\n  constructor(cryptoProvider: CryptoProvider) {\n    this.cryptoProvider = cryptoProvider;\n  }\n\n  async verifyHeader({\n    payload,\n    sigHeader,\n    secret,\n    tolerance = 180000,\n  }: {\n    payload: any;\n    sigHeader: string;\n    secret: string;\n    tolerance?: number;\n  }): Promise<boolean> {\n    const [timestamp, signatureHash] =\n      this.getTimestampAndSignatureHash(sigHeader);\n\n    if (!signatureHash || Object.keys(signatureHash).length === 0) {\n      throw new SignatureVerificationException(\n        'No signature hash found with expected scheme v1',\n      );\n    }\n\n    if (parseInt(timestamp, 10) < Date.now() - tolerance) {\n      throw new SignatureVerificationException(\n        'Timestamp outside the tolerance zone',\n      );\n    }\n\n    const expectedSig = await this.computeSignature(timestamp, payload, secret);\n    if (\n      (await this.cryptoProvider.secureCompare(expectedSig, signatureHash)) ===\n      false\n    ) {\n      throw new SignatureVerificationException(\n        'Signature hash does not match the expected signature hash for payload',\n      );\n    }\n    return true;\n  }\n\n  getTimestampAndSignatureHash(sigHeader: string): [string, string] {\n    const signature = sigHeader;\n    const [t, v1] = signature.split(',');\n    if (typeof t === 'undefined' || typeof v1 === 'undefined') {\n      throw new SignatureVerificationException(\n        'Signature or timestamp missing',\n      );\n    }\n    const { 1: timestamp } = t.split('=');\n    const { 1: signatureHash } = v1.split('=');\n\n    return [timestamp, signatureHash];\n  }\n\n  async computeSignature(\n    timestamp: any,\n    payload: any,\n    secret: string,\n  ): Promise<string> {\n    payload = JSON.stringify(payload);\n    const signedPayload = `${timestamp}.${payload}`;\n\n    return await this.cryptoProvider.computeHMACSignatureAsync(\n      signedPayload,\n      secret,\n    );\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,wBAA+C;AAGxC,MAAM,kBAAkB;AAAA,EAH/B,OAG+B;AAAA;AAAA;AAAA,EACrB;AAAA,EAER,YAAY,gBAAgC;AAC1C,SAAK,iBAAiB;AAAA,EACxB;AAAA,EAEA,MAAM,aAAa;AAAA,IACjB;AAAA,IACA;AAAA,IACA;AAAA,IACA,YAAY;AAAA,EACd,GAKqB;AACnB,UAAM,CAAC,WAAW,aAAa,IAC7B,KAAK,6BAA6B,SAAS;AAE7C,QAAI,CAAC,iBAAiB,OAAO,KAAK,aAAa,EAAE,WAAW,GAAG;AAC7D,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAEA,QAAI,SAAS,WAAW,EAAE,IAAI,KAAK,IAAI,IAAI,WAAW;AACpD,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAEA,UAAM,cAAc,MAAM,KAAK,iBAAiB,WAAW,SAAS,MAAM;AAC1E,QACG,MAAM,KAAK,eAAe,cAAc,aAAa,aAAa,MACnE,OACA;AACA,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA,EAEA,6BAA6B,WAAqC;AAChE,UAAM,YAAY;AAClB,UAAM,CAAC,GAAG,EAAE,IAAI,UAAU,MAAM,GAAG;AACnC,QAAI,OAAO,MAAM,eAAe,OAAO,OAAO,aAAa;AACzD,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AACA,UAAM,EAAE,GAAG,UAAU,IAAI,EAAE,MAAM,GAAG;AACpC,UAAM,EAAE,GAAG,cAAc,IAAI,GAAG,MAAM,GAAG;AAEzC,WAAO,CAAC,WAAW,aAAa;AAAA,EAClC;AAAA,EAEA,MAAM,iBACJ,WACA,SACA,QACiB;AACjB,cAAU,KAAK,UAAU,OAAO;AAChC,UAAM,gBAAgB,GAAG,SAAS,IAAI,OAAO;AAE7C,WAAO,MAAM,KAAK,eAAe;AAAA,MAC/B;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACF;","names":[]}

package/lib/cjs/common/crypto/signature-provider.d.cts

@@ -1,16 +0,0 @@
-import { CryptoProvider } from './crypto-provider.cjs';
-
-declare class SignatureProvider {
-    private cryptoProvider;
-    constructor(cryptoProvider: CryptoProvider);
-    verifyHeader({ payload, sigHeader, secret, tolerance, }: {
-        payload: any;
-        sigHeader: string;
-        secret: string;
-        tolerance?: number;
-    }): Promise<boolean>;
-    getTimestampAndSignatureHash(sigHeader: string): [string, string];
-    computeSignature(timestamp: any, payload: any, secret: string): Promise<string>;
-}
-
-export { SignatureProvider };

package/lib/cjs/common/crypto/subtle-crypto-provider.cjs

@@ -1,152 +0,0 @@
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var subtle_crypto_provider_exports = {};
-__export(subtle_crypto_provider_exports, {
-  SubtleCryptoProvider: () => SubtleCryptoProvider
-});
-module.exports = __toCommonJS(subtle_crypto_provider_exports);
-var import_crypto_provider = require('./crypto-provider.cjs');
-class SubtleCryptoProvider extends import_crypto_provider.CryptoProvider {
-  static {
-    __name(this, "SubtleCryptoProvider");
-  }
-  subtleCrypto;
-  constructor(subtleCrypto) {
-    super();
-    this.subtleCrypto = subtleCrypto || crypto.subtle;
-  }
-  computeHMACSignature(_payload, _secret) {
-    throw new Error(
-      "SubleCryptoProvider cannot be used in a synchronous context."
-    );
-  }
-  /** @override */
-  async computeHMACSignatureAsync(payload, secret) {
-    const encoder = new TextEncoder();
-    const key = await this.subtleCrypto.importKey(
-      "raw",
-      encoder.encode(secret),
-      {
-        name: "HMAC",
-        hash: { name: "SHA-256" }
-      },
-      false,
-      ["sign"]
-    );
-    const signatureBuffer = await this.subtleCrypto.sign(
-      "hmac",
-      key,
-      encoder.encode(payload)
-    );
-    const signatureBytes = new Uint8Array(signatureBuffer);
-    const signatureHexCodes = new Array(signatureBytes.length);
-    for (let i = 0; i < signatureBytes.length; i++) {
-      signatureHexCodes[i] = byteHexMapping[signatureBytes[i]];
-    }
-    return signatureHexCodes.join("");
-  }
-  /** @override */
-  async secureCompare(stringA, stringB) {
-    const bufferA = this.encoder.encode(stringA);
-    const bufferB = this.encoder.encode(stringB);
-    if (bufferA.length !== bufferB.length) {
-      return false;
-    }
-    const algorithm = { name: "HMAC", hash: "SHA-256" };
-    const key = await crypto.subtle.generateKey(algorithm, false, [
-      "sign",
-      "verify"
-    ]);
-    const hmac = await crypto.subtle.sign(algorithm, key, bufferA);
-    const equal = await crypto.subtle.verify(algorithm, key, hmac, bufferB);
-    return equal;
-  }
-  async encrypt(plaintext, key, iv, aad) {
-    const actualIv = iv || crypto.getRandomValues(new Uint8Array(32));
-    const cryptoKey = await this.subtleCrypto.importKey(
-      "raw",
-      key,
-      { name: "AES-GCM" },
-      false,
-      ["encrypt"]
-    );
-    const encryptParams = {
-      name: "AES-GCM",
-      iv: actualIv
-    };
-    if (aad) {
-      encryptParams.additionalData = aad;
-    }
-    const encryptedData = await this.subtleCrypto.encrypt(
-      encryptParams,
-      cryptoKey,
-      plaintext
-    );
-    const encryptedBytes = new Uint8Array(encryptedData);
-    const tagSize = 16;
-    const tagStart = encryptedBytes.length - tagSize;
-    const tag = encryptedBytes.slice(tagStart);
-    const ciphertext = encryptedBytes.slice(0, tagStart);
-    return {
-      ciphertext,
-      iv: actualIv,
-      tag
-    };
-  }
-  async decrypt(ciphertext, key, iv, tag, aad) {
-    const combinedData = new Uint8Array(ciphertext.length + tag.length);
-    combinedData.set(ciphertext, 0);
-    combinedData.set(tag, ciphertext.length);
-    const cryptoKey = await this.subtleCrypto.importKey(
-      "raw",
-      key,
-      { name: "AES-GCM" },
-      false,
-      ["decrypt"]
-    );
-    const decryptParams = {
-      name: "AES-GCM",
-      iv
-    };
-    if (aad) {
-      decryptParams.additionalData = aad;
-    }
-    const decryptedData = await this.subtleCrypto.decrypt(
-      decryptParams,
-      cryptoKey,
-      combinedData
-    );
-    return new Uint8Array(decryptedData);
-  }
-  randomBytes(length) {
-    const bytes = new Uint8Array(length);
-    crypto.getRandomValues(bytes);
-    return bytes;
-  }
-}
-const byteHexMapping = new Array(256);
-for (let i = 0; i < byteHexMapping.length; i++) {
-  byteHexMapping[i] = i.toString(16).padStart(2, "0");
-}
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  SubtleCryptoProvider
-});
-//# sourceMappingURL=subtle-crypto-provider.cjs.map