@yielded/auth-persistence 0.1.0-beta.25 → 0.1.0-beta.26
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +6 -8
- package/dist/Adapter.d.mts +47 -33
- package/dist/Adapter.mjs +36 -23
- package/dist/OAuthPersistence.d.mts +35 -51
- package/dist/OAuthPersistence.mjs +60 -68
- package/dist/OAuthPersistence.mjs.map +1 -1
- package/dist/index.d.mts +2 -2
- package/dist/index.mjs +2 -2
- package/dist/internal/browser-login.d.mts +1 -1
- package/dist/internal/browser-login.mjs +29 -9
- package/dist/internal/browser-login.mjs.map +1 -1
- package/dist/internal/configuration.d.mts +13 -8
- package/dist/internal/configuration.mjs.map +1 -1
- package/dist/internal/crypto.d.mts +1 -0
- package/dist/internal/crypto.mjs +1 -1
- package/dist/internal/d1-planning.mjs +8 -0
- package/dist/internal/d1-planning.mjs.map +1 -0
- package/dist/internal/email-native-state.mjs +135 -0
- package/dist/internal/email-native-state.mjs.map +1 -0
- package/dist/internal/email-native.d.mts +17 -0
- package/dist/internal/email-native.mjs +245 -0
- package/dist/internal/email-native.mjs.map +1 -0
- package/dist/internal/email-policy.mjs +92 -0
- package/dist/internal/email-policy.mjs.map +1 -0
- package/dist/internal/email-registration-native.d.mts +38 -0
- package/dist/internal/email-registration-native.mjs +171 -0
- package/dist/internal/email-registration-native.mjs.map +1 -0
- package/dist/internal/models/email-model.d.mts +40 -104
- package/dist/internal/models/email-model.mjs +3 -5
- package/dist/internal/models/email-model.mjs.map +1 -1
- package/dist/internal/models/oauth-connected-model.d.mts +44 -213
- package/dist/internal/models/oauth-connected-model.mjs +6 -14
- package/dist/internal/models/oauth-connected-model.mjs.map +1 -1
- package/dist/internal/models/oauth-model.d.mts +95 -244
- package/dist/internal/models/oauth-model.mjs +28 -22
- package/dist/internal/models/oauth-model.mjs.map +1 -1
- package/dist/internal/models/passkey-model.d.mts +11 -147
- package/dist/internal/models/passkey-model.mjs +5 -24
- package/dist/internal/models/passkey-model.mjs.map +1 -1
- package/dist/internal/models/passkey-registration-ceremony-model.d.mts +5 -39
- package/dist/internal/models/passkey-write-model.d.mts +17 -75
- package/dist/internal/models/passkey-write-model.mjs +1 -7
- package/dist/internal/models/passkey-write-model.mjs.map +1 -1
- package/dist/internal/models/password-model.d.mts +14 -81
- package/dist/internal/models/password-model.mjs +1 -4
- package/dist/internal/models/password-model.mjs.map +1 -1
- package/dist/internal/models/phone-model.d.mts +86 -0
- package/dist/internal/models/phone-model.mjs +10 -0
- package/dist/internal/models/phone-model.mjs.map +1 -0
- package/dist/internal/models/proof-model.d.mts +43 -272
- package/dist/internal/models/proof-model.mjs +2 -10
- package/dist/internal/models/proof-model.mjs.map +1 -1
- package/dist/internal/models/session-model.d.mts +74 -93
- package/dist/internal/models/session-model.mjs +3 -11
- package/dist/internal/models/session-model.mjs.map +1 -1
- package/dist/internal/models/step-up-model.d.mts +12 -50
- package/dist/internal/models/step-up-model.mjs +2 -4
- package/dist/internal/models/step-up-model.mjs.map +1 -1
- package/dist/internal/models/totp-model.d.mts +76 -0
- package/dist/internal/models/totp-model.mjs +10 -0
- package/dist/internal/models/totp-model.mjs.map +1 -0
- package/dist/internal/native-sql-table.d.mts +21 -4
- package/dist/internal/native-sql-table.mjs +9 -5
- package/dist/internal/native-sql-table.mjs.map +1 -1
- package/dist/internal/oauth/native-accounts.d.mts +17 -0
- package/dist/internal/oauth/native-accounts.mjs +290 -0
- package/dist/internal/oauth/native-accounts.mjs.map +1 -0
- package/dist/internal/oauth/native-connected-state.d.mts +11 -0
- package/dist/internal/oauth/native-connected-state.mjs +146 -0
- package/dist/internal/oauth/native-connected-state.mjs.map +1 -0
- package/dist/internal/oauth/native-connected.d.mts +15 -0
- package/dist/internal/oauth/native-connected.mjs +462 -0
- package/dist/internal/oauth/native-connected.mjs.map +1 -0
- package/dist/internal/oauth/native-flow.mjs +138 -0
- package/dist/internal/oauth/native-flow.mjs.map +1 -0
- package/dist/internal/oauth/native-layers.d.mts +24 -0
- package/dist/internal/oauth/native-layers.mjs +13 -0
- package/dist/internal/oauth/native-layers.mjs.map +1 -0
- package/dist/internal/oauth/native-mutation.mjs +122 -0
- package/dist/internal/oauth/native-mutation.mjs.map +1 -0
- package/dist/internal/oauth/native-registration.d.mts +24 -0
- package/dist/internal/oauth/native-registration.mjs +328 -0
- package/dist/internal/oauth/native-registration.mjs.map +1 -0
- package/dist/internal/oauth/native-revocations.d.mts +17 -0
- package/dist/internal/oauth/native-revocations.mjs +106 -0
- package/dist/internal/oauth/native-revocations.mjs.map +1 -0
- package/dist/internal/oauth/native-sign-in.d.mts +17 -0
- package/dist/internal/oauth/native-sign-in.mjs +50 -0
- package/dist/internal/oauth/native-sign-in.mjs.map +1 -0
- package/dist/internal/oauth/native-state.d.mts +10 -0
- package/dist/internal/oauth/native-state.mjs +214 -0
- package/dist/internal/oauth/native-state.mjs.map +1 -0
- package/dist/internal/oauth/state.d.mts +10 -0
- package/dist/internal/oauth/state.mjs +3 -27
- package/dist/internal/oauth/state.mjs.map +1 -1
- package/dist/internal/passkey-actions.mjs +55 -0
- package/dist/internal/passkey-actions.mjs.map +1 -0
- package/dist/internal/passkey-inputs.mjs +73 -0
- package/dist/internal/passkey-inputs.mjs.map +1 -0
- package/dist/internal/passkey-managed.mjs +224 -0
- package/dist/internal/passkey-managed.mjs.map +1 -0
- package/dist/internal/passkey-native-ceremony.d.mts +35 -0
- package/dist/internal/passkey-native-ceremony.mjs +38 -0
- package/dist/internal/passkey-native-ceremony.mjs.map +1 -0
- package/dist/internal/passkey-native-flow.mjs +91 -0
- package/dist/internal/passkey-native-flow.mjs.map +1 -0
- package/dist/internal/passkey-native-registration.d.mts +10 -0
- package/dist/internal/passkey-native-registration.mjs +114 -0
- package/dist/internal/passkey-native-registration.mjs.map +1 -0
- package/dist/internal/passkey-native-state.d.mts +15 -0
- package/dist/internal/passkey-native-state.mjs +186 -0
- package/dist/internal/passkey-native-state.mjs.map +1 -0
- package/dist/internal/passkey-native-write.d.mts +82 -0
- package/dist/internal/passkey-native-write.mjs +330 -0
- package/dist/internal/passkey-native-write.mjs.map +1 -0
- package/dist/internal/passkey-native.d.mts +835 -0
- package/dist/internal/passkey-native.mjs +175 -0
- package/dist/internal/passkey-native.mjs.map +1 -0
- package/dist/internal/passkey-policy.mjs +115 -0
- package/dist/internal/passkey-policy.mjs.map +1 -0
- package/dist/internal/password-credentials.mjs +38 -9
- package/dist/internal/password-credentials.mjs.map +1 -1
- package/dist/internal/password-native.d.mts +14 -0
- package/dist/internal/password-native.mjs +292 -0
- package/dist/internal/password-native.mjs.map +1 -0
- package/dist/internal/password-policy.mjs +93 -0
- package/dist/internal/password-policy.mjs.map +1 -0
- package/dist/internal/password-registration-native.d.mts +22 -0
- package/dist/internal/password-registration-native.mjs +142 -0
- package/dist/internal/password-registration-native.mjs.map +1 -0
- package/dist/internal/persistence.d.mts +6 -19
- package/dist/internal/persistence.mjs +199 -166
- package/dist/internal/persistence.mjs.map +1 -1
- package/dist/internal/phone-composed.mjs +79 -0
- package/dist/internal/phone-composed.mjs.map +1 -0
- package/dist/internal/phone-native.d.mts +15 -0
- package/dist/internal/phone-native.mjs +354 -0
- package/dist/internal/phone-native.mjs.map +1 -0
- package/dist/internal/proof-native.d.mts +15 -0
- package/dist/internal/proof-native.mjs +289 -0
- package/dist/internal/proof-native.mjs.map +1 -0
- package/dist/internal/registration.mjs +50 -60
- package/dist/internal/registration.mjs.map +1 -1
- package/dist/internal/session-native-authority.d.mts +15 -0
- package/dist/internal/session-native-authority.mjs +91 -0
- package/dist/internal/session-native-authority.mjs.map +1 -0
- package/dist/internal/session-native-cleanup.d.mts +14 -0
- package/dist/internal/session-native-cleanup.mjs +48 -0
- package/dist/internal/session-native-cleanup.mjs.map +1 -0
- package/dist/internal/session-native-login.d.mts +15 -0
- package/dist/internal/session-native-login.mjs +87 -0
- package/dist/internal/session-native-login.mjs.map +1 -0
- package/dist/internal/session-native-pending-read.mjs +42 -0
- package/dist/internal/session-native-pending-read.mjs.map +1 -0
- package/dist/internal/session-native-pending.mjs +134 -0
- package/dist/internal/session-native-pending.mjs.map +1 -0
- package/dist/internal/session-native-record.mjs +79 -0
- package/dist/internal/session-native-record.mjs.map +1 -0
- package/dist/internal/session-native-state.mjs +130 -0
- package/dist/internal/session-native-state.mjs.map +1 -0
- package/dist/internal/session-native-stateful.d.mts +16 -0
- package/dist/internal/session-native-stateful.mjs +225 -0
- package/dist/internal/session-native-stateful.mjs.map +1 -0
- package/dist/internal/session-native-step-up.d.mts +15 -0
- package/dist/internal/session-native-step-up.mjs +212 -0
- package/dist/internal/session-native-step-up.mjs.map +1 -0
- package/dist/internal/session-native-validity.d.mts +15 -0
- package/dist/internal/session-native-validity.mjs +97 -0
- package/dist/internal/session-native-validity.mjs.map +1 -0
- package/dist/internal/session-policy.mjs +29 -0
- package/dist/internal/session-policy.mjs.map +1 -0
- package/dist/internal/sql-authority.d.mts +16 -0
- package/dist/internal/sql-authority.mjs +32 -0
- package/dist/internal/sql-authority.mjs.map +1 -0
- package/dist/internal/sql-change.mjs +21 -0
- package/dist/internal/sql-change.mjs.map +1 -0
- package/dist/internal/sql-cleanup.mjs +35 -0
- package/dist/internal/sql-cleanup.mjs.map +1 -0
- package/dist/internal/sql-commit.d.mts +72 -0
- package/dist/internal/sql-commit.mjs +176 -0
- package/dist/internal/sql-commit.mjs.map +1 -0
- package/dist/internal/sql-expression.d.mts +17 -0
- package/dist/internal/sql-expression.mjs +49 -0
- package/dist/internal/sql-expression.mjs.map +1 -0
- package/dist/internal/sql-oauth-connected-model.d.mts +7 -23
- package/dist/internal/sql-oauth-model.d.mts +27 -52
- package/dist/internal/sql-oauth-model.mjs +3 -4
- package/dist/internal/sql-oauth-model.mjs.map +1 -1
- package/dist/internal/sql-persistence.mjs +5 -9
- package/dist/internal/sql-persistence.mjs.map +1 -1
- package/dist/internal/sql-storage-validation.mjs +1 -2
- package/dist/internal/sql-storage-validation.mjs.map +1 -1
- package/dist/internal/sql-table.d.mts +3 -16
- package/dist/internal/sql-table.mjs +21 -42
- package/dist/internal/sql-table.mjs.map +1 -1
- package/dist/internal/standalone.mjs +2 -3
- package/dist/internal/standalone.mjs.map +1 -1
- package/dist/internal/step-up-state.mjs +5 -8
- package/dist/internal/step-up-state.mjs.map +1 -1
- package/dist/internal/storage-clock.mjs +44 -0
- package/dist/internal/storage-clock.mjs.map +1 -0
- package/dist/internal/storage-mapping.d.mts +11 -8
- package/dist/internal/storage-mapping.mjs +88 -302
- package/dist/internal/storage-mapping.mjs.map +1 -1
- package/dist/internal/storage-plans.mjs +15 -73
- package/dist/internal/storage-plans.mjs.map +1 -1
- package/dist/internal/storage-tables.d.mts +37 -520
- package/dist/internal/storage-tables.mjs +31 -211
- package/dist/internal/storage-tables.mjs.map +1 -1
- package/dist/internal/storage-validation.d.mts +1 -6
- package/dist/internal/storage-validation.mjs +1 -42
- package/dist/internal/storage-validation.mjs.map +1 -1
- package/dist/internal/table-model.d.mts +21 -0
- package/dist/internal/totp-native.d.mts +15 -0
- package/dist/internal/totp-native.mjs +401 -0
- package/dist/internal/totp-native.mjs.map +1 -0
- package/package.json +1 -1
- package/src/Adapter.ts +143 -199
- package/src/OAuthPersistence.ts +128 -271
- package/src/index.ts +1 -1
- package/src/internal/browser-login.ts +54 -24
- package/src/internal/configuration.ts +16 -31
- package/src/internal/d1-planning.ts +7 -0
- package/src/internal/email-native-state.ts +247 -0
- package/src/internal/email-native.ts +514 -0
- package/src/internal/email-policy.ts +235 -0
- package/src/internal/email-registration-native.ts +386 -0
- package/src/internal/models/email-model.ts +76 -214
- package/src/internal/models/oauth-connected-model.ts +50 -288
- package/src/internal/models/oauth-model.ts +147 -368
- package/src/internal/models/passkey-model.ts +11 -208
- package/src/internal/models/passkey-registration-ceremony-model.ts +6 -60
- package/src/internal/models/passkey-write-model.ts +14 -95
- package/src/internal/models/password-model.ts +26 -147
- package/src/internal/models/phone-model.ts +110 -0
- package/src/internal/models/proof-model.ts +48 -404
- package/src/internal/models/session-model.ts +102 -200
- package/src/internal/models/step-up-model.ts +17 -96
- package/src/internal/models/totp-model.ts +82 -0
- package/src/internal/native-sql-table.ts +32 -11
- package/src/internal/oauth/native-accounts.ts +576 -0
- package/src/internal/oauth/native-connected-state.ts +288 -0
- package/src/internal/oauth/native-connected.ts +888 -0
- package/src/internal/oauth/native-flow.ts +253 -0
- package/src/internal/oauth/native-layers.ts +83 -0
- package/src/internal/oauth/native-mutation.ts +222 -0
- package/src/internal/oauth/native-registration.ts +545 -0
- package/src/internal/oauth/native-revocations.ts +190 -0
- package/src/internal/oauth/native-sign-in.ts +111 -0
- package/src/internal/oauth/native-state.ts +346 -0
- package/src/internal/oauth/state.ts +2 -70
- package/src/internal/passkey-actions.ts +70 -0
- package/src/internal/passkey-inputs.ts +56 -0
- package/src/internal/passkey-managed.ts +360 -0
- package/src/internal/passkey-native-ceremony.ts +66 -0
- package/src/internal/passkey-native-flow.ts +140 -0
- package/src/internal/passkey-native-registration.ts +221 -0
- package/src/internal/passkey-native-state.ts +335 -0
- package/src/internal/passkey-native-write.ts +611 -0
- package/src/internal/passkey-native.ts +372 -0
- package/src/internal/passkey-policy.ts +246 -0
- package/src/internal/password-credentials.ts +52 -10
- package/src/internal/password-native.ts +571 -0
- package/src/internal/password-policy.ts +307 -0
- package/src/internal/password-registration-native.ts +322 -0
- package/src/internal/persistence.ts +336 -290
- package/src/internal/phone-composed.ts +86 -0
- package/src/internal/phone-native.ts +659 -0
- package/src/internal/proof-native.ts +448 -0
- package/src/internal/registration.ts +96 -143
- package/src/internal/session-native-authority.ts +247 -0
- package/src/internal/session-native-cleanup.ts +65 -0
- package/src/internal/session-native-login.ts +205 -0
- package/src/internal/session-native-pending-read.ts +68 -0
- package/src/internal/session-native-pending.ts +223 -0
- package/src/internal/session-native-record.ts +141 -0
- package/src/internal/session-native-state.ts +259 -0
- package/src/internal/session-native-stateful.ts +512 -0
- package/src/internal/session-native-step-up.ts +450 -0
- package/src/internal/session-native-validity.ts +208 -0
- package/src/internal/session-policy.ts +59 -0
- package/src/internal/sql-authority.ts +56 -0
- package/src/internal/sql-change.ts +38 -0
- package/src/internal/sql-cleanup.ts +56 -0
- package/src/internal/sql-commit.ts +435 -0
- package/src/internal/sql-expression.ts +94 -0
- package/src/internal/sql-metadata.ts +100 -0
- package/src/internal/sql-oauth-connected-model.ts +6 -95
- package/src/internal/sql-oauth-model.ts +31 -134
- package/src/internal/sql-persistence.ts +2 -6
- package/src/internal/sql-storage-validation.ts +1 -2
- package/src/internal/sql-table.ts +19 -52
- package/src/internal/standalone.ts +2 -11
- package/src/internal/step-up-state.ts +4 -17
- package/src/internal/storage-clock.ts +58 -0
- package/src/internal/storage-mapping.ts +125 -340
- package/src/internal/storage-plans.ts +14 -80
- package/src/internal/storage-tables.ts +28 -212
- package/src/internal/storage-validation.ts +0 -58
- package/src/internal/table-model.ts +24 -0
- package/src/internal/totp-native.ts +701 -0
- package/dist/internal/PasswordPreparedPostconditions.d.mts +0 -22
- package/dist/internal/PasswordPreparedPostconditions.mjs +0 -12
- package/dist/internal/PasswordPreparedPostconditions.mjs.map +0 -1
- package/dist/internal/authority-snapshot.mjs +0 -53
- package/dist/internal/authority-snapshot.mjs.map +0 -1
- package/dist/internal/email-kernel.d.mts +0 -276
- package/dist/internal/email-kernel.mjs +0 -497
- package/dist/internal/email-kernel.mjs.map +0 -1
- package/dist/internal/models/passkey-registration-ceremony-model.mjs +0 -18
- package/dist/internal/models/passkey-registration-ceremony-model.mjs.map +0 -1
- package/dist/internal/oauth/accounts.d.mts +0 -8
- package/dist/internal/oauth/accounts.mjs +0 -379
- package/dist/internal/oauth/accounts.mjs.map +0 -1
- package/dist/internal/oauth/connected-access.d.mts +0 -9
- package/dist/internal/oauth/connected-access.mjs +0 -229
- package/dist/internal/oauth/connected-access.mjs.map +0 -1
- package/dist/internal/oauth/connected-collection.d.mts +0 -7
- package/dist/internal/oauth/connected-collection.mjs +0 -214
- package/dist/internal/oauth/connected-collection.mjs.map +0 -1
- package/dist/internal/oauth/connected-custody.d.mts +0 -6
- package/dist/internal/oauth/connected-custody.mjs +0 -165
- package/dist/internal/oauth/connected-custody.mjs.map +0 -1
- package/dist/internal/oauth/connected-flow.d.mts +0 -7
- package/dist/internal/oauth/connected-flow.mjs +0 -324
- package/dist/internal/oauth/connected-flow.mjs.map +0 -1
- package/dist/internal/oauth/connected-input.mjs +0 -122
- package/dist/internal/oauth/connected-input.mjs.map +0 -1
- package/dist/internal/oauth/connected-keys.d.mts +0 -2
- package/dist/internal/oauth/connected-keys.mjs +0 -22
- package/dist/internal/oauth/connected-keys.mjs.map +0 -1
- package/dist/internal/oauth/connected-maintenance.d.mts +0 -9
- package/dist/internal/oauth/connected-maintenance.mjs +0 -226
- package/dist/internal/oauth/connected-maintenance.mjs.map +0 -1
- package/dist/internal/oauth/connected-management.d.mts +0 -9
- package/dist/internal/oauth/connected-management.mjs +0 -243
- package/dist/internal/oauth/connected-management.mjs.map +0 -1
- package/dist/internal/oauth/connected-reference.mjs +0 -63
- package/dist/internal/oauth/connected-reference.mjs.map +0 -1
- package/dist/internal/oauth/connected-settlement.d.mts +0 -8
- package/dist/internal/oauth/connected-settlement.mjs +0 -141
- package/dist/internal/oauth/connected-settlement.mjs.map +0 -1
- package/dist/internal/oauth/connected-sign-in.d.mts +0 -10
- package/dist/internal/oauth/connected-sign-in.mjs +0 -281
- package/dist/internal/oauth/connected-sign-in.mjs.map +0 -1
- package/dist/internal/oauth/connected-state.d.mts +0 -14
- package/dist/internal/oauth/connected-state.mjs +0 -469
- package/dist/internal/oauth/connected-state.mjs.map +0 -1
- package/dist/internal/oauth/connected-target.d.mts +0 -21
- package/dist/internal/oauth/connected-target.mjs +0 -117
- package/dist/internal/oauth/connected-target.mjs.map +0 -1
- package/dist/internal/oauth/flow.d.mts +0 -5
- package/dist/internal/oauth/flow.mjs +0 -279
- package/dist/internal/oauth/flow.mjs.map +0 -1
- package/dist/internal/oauth/input.mjs +0 -127
- package/dist/internal/oauth/input.mjs.map +0 -1
- package/dist/internal/oauth/owner.d.mts +0 -10
- package/dist/internal/oauth/owner.mjs +0 -10
- package/dist/internal/oauth/owner.mjs.map +0 -1
- package/dist/internal/oauth/query-compiler.d.mts +0 -7
- package/dist/internal/oauth/query-compiler.mjs +0 -9
- package/dist/internal/oauth/query-compiler.mjs.map +0 -1
- package/dist/internal/oauth/registration.d.mts +0 -7
- package/dist/internal/oauth/registration.mjs +0 -393
- package/dist/internal/oauth/registration.mjs.map +0 -1
- package/dist/internal/oauth/target.d.mts +0 -31
- package/dist/internal/oauth/target.mjs +0 -273
- package/dist/internal/oauth/target.mjs.map +0 -1
- package/dist/internal/oauth-kernel.d.mts +0 -1423
- package/dist/internal/oauth-kernel.mjs +0 -187
- package/dist/internal/oauth-kernel.mjs.map +0 -1
- package/dist/internal/passkey/admission.d.mts +0 -6
- package/dist/internal/passkey/admission.mjs +0 -220
- package/dist/internal/passkey/admission.mjs.map +0 -1
- package/dist/internal/passkey/credentials.d.mts +0 -14
- package/dist/internal/passkey/credentials.mjs +0 -249
- package/dist/internal/passkey/credentials.mjs.map +0 -1
- package/dist/internal/passkey/enrollment.mjs +0 -138
- package/dist/internal/passkey/enrollment.mjs.map +0 -1
- package/dist/internal/passkey/flow.d.mts +0 -21
- package/dist/internal/passkey/flow.mjs +0 -452
- package/dist/internal/passkey/flow.mjs.map +0 -1
- package/dist/internal/passkey/management.mjs +0 -231
- package/dist/internal/passkey/management.mjs.map +0 -1
- package/dist/internal/passkey/registration-ceremony.d.mts +0 -9
- package/dist/internal/passkey/registration-ceremony.mjs +0 -129
- package/dist/internal/passkey/registration-ceremony.mjs.map +0 -1
- package/dist/internal/passkey/registration-custody.d.mts +0 -2
- package/dist/internal/passkey/registration-custody.mjs +0 -52
- package/dist/internal/passkey/registration-custody.mjs.map +0 -1
- package/dist/internal/passkey/registration-write.mjs +0 -211
- package/dist/internal/passkey/registration-write.mjs.map +0 -1
- package/dist/internal/passkey/state.d.mts +0 -10
- package/dist/internal/passkey/state.mjs +0 -234
- package/dist/internal/passkey/state.mjs.map +0 -1
- package/dist/internal/passkey/target.d.mts +0 -20
- package/dist/internal/passkey/target.mjs +0 -200
- package/dist/internal/passkey/target.mjs.map +0 -1
- package/dist/internal/passkey/write-state.d.mts +0 -17
- package/dist/internal/passkey/write-state.mjs +0 -354
- package/dist/internal/passkey/write-state.mjs.map +0 -1
- package/dist/internal/passkey/write-target.mjs +0 -192
- package/dist/internal/passkey/write-target.mjs.map +0 -1
- package/dist/internal/passkey-kernel.d.mts +0 -6045
- package/dist/internal/passkey-kernel.mjs +0 -49
- package/dist/internal/passkey-kernel.mjs.map +0 -1
- package/dist/internal/passkeys.d.mts +0 -7
- package/dist/internal/passkeys.mjs +0 -387
- package/dist/internal/passkeys.mjs.map +0 -1
- package/dist/internal/password-credentials.d.mts +0 -11
- package/dist/internal/password-kernel.d.mts +0 -278
- package/dist/internal/password-kernel.mjs +0 -508
- package/dist/internal/password-kernel.mjs.map +0 -1
- package/dist/internal/phone-kernel.d.mts +0 -162
- package/dist/internal/phone-kernel.mjs +0 -437
- package/dist/internal/phone-kernel.mjs.map +0 -1
- package/dist/internal/proof-kernel.d.mts +0 -94
- package/dist/internal/proof-kernel.mjs +0 -624
- package/dist/internal/proof-kernel.mjs.map +0 -1
- package/dist/internal/query-operations.d.mts +0 -68
- package/dist/internal/session-kernel.d.mts +0 -62
- package/dist/internal/session-kernel.mjs +0 -820
- package/dist/internal/session-kernel.mjs.map +0 -1
- package/dist/internal/sql-oauth-connected-model.mjs +0 -7
- package/dist/internal/sql-oauth-connected-model.mjs.map +0 -1
- package/dist/internal/sql-query.d.mts +0 -12
- package/dist/internal/sql-query.mjs +0 -206
- package/dist/internal/sql-query.mjs.map +0 -1
- package/dist/internal/step-up-state.d.mts +0 -49
- package/dist/internal/transaction-execution-kernel.d.mts +0 -37
- package/dist/internal/transaction-execution-kernel.mjs +0 -120
- package/dist/internal/transaction-execution-kernel.mjs.map +0 -1
- package/dist/internal/transaction-kernel.d.mts +0 -81
- package/dist/internal/transaction-kernel.mjs +0 -264
- package/dist/internal/transaction-kernel.mjs.map +0 -1
- package/src/internal/PasswordPreparedPostconditions.ts +0 -30
- package/src/internal/authority-snapshot.ts +0 -91
- package/src/internal/email-kernel.ts +0 -1556
- package/src/internal/oauth/accounts.ts +0 -839
- package/src/internal/oauth/connected-access.ts +0 -388
- package/src/internal/oauth/connected-collection.ts +0 -345
- package/src/internal/oauth/connected-custody.ts +0 -308
- package/src/internal/oauth/connected-flow.ts +0 -562
- package/src/internal/oauth/connected-input.ts +0 -147
- package/src/internal/oauth/connected-keys.ts +0 -31
- package/src/internal/oauth/connected-maintenance.ts +0 -379
- package/src/internal/oauth/connected-management.ts +0 -391
- package/src/internal/oauth/connected-reference.ts +0 -135
- package/src/internal/oauth/connected-settlement.ts +0 -278
- package/src/internal/oauth/connected-sign-in.ts +0 -472
- package/src/internal/oauth/connected-state.ts +0 -924
- package/src/internal/oauth/connected-target.ts +0 -307
- package/src/internal/oauth/flow.ts +0 -505
- package/src/internal/oauth/input.ts +0 -201
- package/src/internal/oauth/owner.ts +0 -22
- package/src/internal/oauth/query-compiler.ts +0 -15
- package/src/internal/oauth/registration.ts +0 -676
- package/src/internal/oauth/target.ts +0 -803
- package/src/internal/oauth-kernel.ts +0 -294
- package/src/internal/passkey/admission.ts +0 -368
- package/src/internal/passkey/credentials.ts +0 -511
- package/src/internal/passkey/enrollment.ts +0 -326
- package/src/internal/passkey/flow.ts +0 -1062
- package/src/internal/passkey/management.ts +0 -426
- package/src/internal/passkey/registration-ceremony.ts +0 -283
- package/src/internal/passkey/registration-custody.ts +0 -91
- package/src/internal/passkey/registration-write.ts +0 -426
- package/src/internal/passkey/state.ts +0 -351
- package/src/internal/passkey/target.ts +0 -598
- package/src/internal/passkey/write-state.ts +0 -692
- package/src/internal/passkey/write-target.ts +0 -450
- package/src/internal/passkey-kernel.ts +0 -112
- package/src/internal/passkeys.ts +0 -652
- package/src/internal/password-kernel.ts +0 -1523
- package/src/internal/phone-kernel.ts +0 -872
- package/src/internal/proof-kernel.ts +0 -1992
- package/src/internal/query-operations.ts +0 -91
- package/src/internal/session-kernel.ts +0 -2406
- package/src/internal/sql-query.ts +0 -304
- package/src/internal/transaction-execution-kernel.ts +0 -335
- package/src/internal/transaction-kernel.ts +0 -603
|
@@ -1,307 +0,0 @@
|
|
|
1
|
-
import * as M from "@yielded/auth/OAuth";
|
|
2
|
-
import {
|
|
3
|
-
OAuthConnectedPersistence,
|
|
4
|
-
OAuthConnectedRevocations,
|
|
5
|
-
OAuthConnectedRevocationDecision,
|
|
6
|
-
OAuthExternalIdentity,
|
|
7
|
-
snapshotOAuthSync,
|
|
8
|
-
type PrepareOAuthCommit,
|
|
9
|
-
type OAuthUnavailable,
|
|
10
|
-
} from "@yielded/auth/OAuth";
|
|
11
|
-
/* oxlint-disable no-explicit-any -- concrete adapters retain the native database, table and ID types. */
|
|
12
|
-
import { type Crypto, Effect, Layer, type PlatformError, Schema, Context } from "effect";
|
|
13
|
-
import type { Statement } from "effect/sql/Statement";
|
|
14
|
-
|
|
15
|
-
import type { PersistenceMappingError } from "../models/common";
|
|
16
|
-
import { OAuthConnectedAccess } from "./connected-access";
|
|
17
|
-
import { OAuthConnectedFlow } from "./connected-flow";
|
|
18
|
-
import { connectedInputs, connectedRevocationInputs } from "./connected-input";
|
|
19
|
-
import { OAuthConnectedMaintenance } from "./connected-maintenance";
|
|
20
|
-
import { OAuthConnectedManagement } from "./connected-management";
|
|
21
|
-
import { OAuthConnectedSettlement } from "./connected-settlement";
|
|
22
|
-
import { OAuthConnectedSignIn } from "./connected-sign-in";
|
|
23
|
-
import { OAuthConnectedState } from "./connected-state";
|
|
24
|
-
import type * as STypes from "./connected-state";
|
|
25
|
-
import { capturedOAuthService } from "./input";
|
|
26
|
-
import { CurrentOAuthTransaction } from "./owner";
|
|
27
|
-
import { captureOAuthMapping } from "./state";
|
|
28
|
-
import { OAuthTarget } from "./target";
|
|
29
|
-
import type { OAuthExecution, OAuthTargetConfiguration } from "./target";
|
|
30
|
-
|
|
31
|
-
const make = Effect.gen(function* () {
|
|
32
|
-
const A = yield* OAuthConnectedAccess;
|
|
33
|
-
const F = yield* OAuthConnectedFlow;
|
|
34
|
-
const Maintenance = yield* OAuthConnectedMaintenance;
|
|
35
|
-
const Management = yield* OAuthConnectedManagement;
|
|
36
|
-
const connectedSettlement = yield* OAuthConnectedSettlement;
|
|
37
|
-
const SignIn = yield* OAuthConnectedSignIn;
|
|
38
|
-
const S = yield* OAuthConnectedState;
|
|
39
|
-
const target = yield* OAuthTarget;
|
|
40
|
-
|
|
41
|
-
const { settle } = connectedSettlement;
|
|
42
|
-
const { coordinateOAuthOwner, makeOAuthExecution } = target;
|
|
43
|
-
|
|
44
|
-
const captured = <T extends STypes.Authority>(mapping: T): T => {
|
|
45
|
-
const retained = captureOAuthMapping(mapping),
|
|
46
|
-
codec = retained.subjectId;
|
|
47
|
-
|
|
48
|
-
const subjectId = {
|
|
49
|
-
...codec,
|
|
50
|
-
toNative: (subject: Parameters<typeof codec.toNative>[0]) =>
|
|
51
|
-
Effect.map(codec.toNative(subject), S.nativeCopy),
|
|
52
|
-
toSubject: (native: unknown) => codec.toSubject(S.nativeCopy(native)),
|
|
53
|
-
equals: (a: unknown, b: unknown) => codec.equals(S.nativeCopy(a), S.nativeCopy(b)),
|
|
54
|
-
};
|
|
55
|
-
|
|
56
|
-
const ownership = retained.ownership;
|
|
57
|
-
|
|
58
|
-
if (ownership.mode === "separate" && "encodeInsert" in ownership.external) {
|
|
59
|
-
const encode = ownership.external.encodeInsert as (input: {
|
|
60
|
-
readonly identity: typeof OAuthExternalIdentity.Type;
|
|
61
|
-
readonly identityKey: string;
|
|
62
|
-
readonly subjectId: unknown;
|
|
63
|
-
}) => import("./owner").Row;
|
|
64
|
-
|
|
65
|
-
return captureOAuthMapping({
|
|
66
|
-
...retained,
|
|
67
|
-
subjectId,
|
|
68
|
-
ownership: {
|
|
69
|
-
...ownership,
|
|
70
|
-
external: {
|
|
71
|
-
...ownership.external,
|
|
72
|
-
encodeInsert: (input: Parameters<typeof encode>[0]) =>
|
|
73
|
-
encode({
|
|
74
|
-
...input,
|
|
75
|
-
identity: snapshotOAuthSync(OAuthExternalIdentity, input.identity),
|
|
76
|
-
subjectId: S.nativeCopy(input.subjectId),
|
|
77
|
-
}),
|
|
78
|
-
},
|
|
79
|
-
},
|
|
80
|
-
});
|
|
81
|
-
}
|
|
82
|
-
|
|
83
|
-
return captureOAuthMapping({ ...retained, subjectId });
|
|
84
|
-
};
|
|
85
|
-
|
|
86
|
-
const prepare = <Value, Encoded, A>(
|
|
87
|
-
schema: Schema.Codec<Value, Encoded, never, never>,
|
|
88
|
-
value: Value,
|
|
89
|
-
callback: PrepareOAuthCommit<Value, A>,
|
|
90
|
-
) =>
|
|
91
|
-
Effect.flatMap(CurrentOAuthTransaction, (owner) =>
|
|
92
|
-
Effect.sync(() => {
|
|
93
|
-
owner.guards.push(owner.journal.prepare(undefined));
|
|
94
|
-
|
|
95
|
-
return callback(snapshotOAuthSync(schema, value), owner.journal);
|
|
96
|
-
}),
|
|
97
|
-
);
|
|
98
|
-
|
|
99
|
-
const mutation =
|
|
100
|
-
<Input, Value, Encoded>(
|
|
101
|
-
mapping: STypes.Mapping,
|
|
102
|
-
execute: OAuthExecution,
|
|
103
|
-
body: (
|
|
104
|
-
mapping: STypes.Mapping,
|
|
105
|
-
input: Input,
|
|
106
|
-
) => Effect.Effect<
|
|
107
|
-
Value,
|
|
108
|
-
OAuthUnavailable | PersistenceMappingError | PlatformError.PlatformError,
|
|
109
|
-
CurrentOAuthTransaction | Crypto.Crypto
|
|
110
|
-
>,
|
|
111
|
-
schema: Schema.Codec<Value, Encoded, never, never>,
|
|
112
|
-
) =>
|
|
113
|
-
<A>(input: Input, callback: PrepareOAuthCommit<Value, A>) =>
|
|
114
|
-
execute.run(
|
|
115
|
-
Effect.flatMap(body(mapping, input), (value) => prepare(schema, value, callback)),
|
|
116
|
-
);
|
|
117
|
-
|
|
118
|
-
const read =
|
|
119
|
-
<Input, Value>(
|
|
120
|
-
mapping: STypes.Mapping,
|
|
121
|
-
execute: OAuthExecution,
|
|
122
|
-
body: (
|
|
123
|
-
mapping: STypes.Mapping,
|
|
124
|
-
input: Input,
|
|
125
|
-
) => Effect.Effect<
|
|
126
|
-
Value,
|
|
127
|
-
OAuthUnavailable | PersistenceMappingError | PlatformError.PlatformError,
|
|
128
|
-
CurrentOAuthTransaction | Crypto.Crypto
|
|
129
|
-
>,
|
|
130
|
-
) =>
|
|
131
|
-
(input: Input) =>
|
|
132
|
-
execute.run(body(mapping, input), false);
|
|
133
|
-
|
|
134
|
-
const makeConnected = (
|
|
135
|
-
mapping: STypes.Mapping,
|
|
136
|
-
execute: OAuthExecution,
|
|
137
|
-
): OAuthConnectedPersistence["Service"] =>
|
|
138
|
-
capturedOAuthService<OAuthConnectedPersistence["Service"]>(
|
|
139
|
-
{
|
|
140
|
-
claimSignIn: mutation(mapping, execute, SignIn.claimSignIn, M.OAuthSignInAccessClaim),
|
|
141
|
-
inspectSignIn: read(mapping, execute, SignIn.inspectSignIn),
|
|
142
|
-
settleSignIn: mutation(
|
|
143
|
-
mapping,
|
|
144
|
-
execute,
|
|
145
|
-
SignIn.settleSignIn,
|
|
146
|
-
M.OAuthConnectedSettlementDecision,
|
|
147
|
-
),
|
|
148
|
-
capture: read(mapping, execute, F.capture),
|
|
149
|
-
issue: mutation(mapping, execute, F.issue, M.OAuthConnectedIssueDecision),
|
|
150
|
-
prepare: mutation(mapping, execute, F.prepare, M.OAuthConnectedIssueDecision),
|
|
151
|
-
inspectPrepared: read(mapping, execute, F.inspectPrepared),
|
|
152
|
-
preflight: read(mapping, execute, F.preflight),
|
|
153
|
-
claim: mutation(mapping, execute, F.claim, M.OAuthConnectedClaimDecision),
|
|
154
|
-
inspectGrant: read(mapping, execute, F.inspectGrant),
|
|
155
|
-
settle: mutation(mapping, execute, settle, M.OAuthConnectedSettlementDecision),
|
|
156
|
-
list: read(mapping, execute, Management.list),
|
|
157
|
-
inspectDisconnect: read(mapping, execute, Management.inspectDisconnect),
|
|
158
|
-
disconnect: mutation(
|
|
159
|
-
mapping,
|
|
160
|
-
execute,
|
|
161
|
-
Management.disconnect,
|
|
162
|
-
M.OAuthConnectedDisconnectDecision,
|
|
163
|
-
),
|
|
164
|
-
inspectAccess: read(mapping, execute, A.inspectAccess),
|
|
165
|
-
claimRefresh: mutation(mapping, execute, A.claimRefresh, M.OAuthConnectedRefreshDecision),
|
|
166
|
-
settleRefresh: mutation(
|
|
167
|
-
mapping,
|
|
168
|
-
execute,
|
|
169
|
-
A.settleRefresh,
|
|
170
|
-
M.OAuthConnectedRefreshSettlement,
|
|
171
|
-
),
|
|
172
|
-
admitUse: mutation(mapping, execute, A.admitUse, M.OAuthConnectedUseAdmission),
|
|
173
|
-
cleanup: mutation(mapping, execute, Maintenance.cleanup, M.OAuthConnectedCleanupResult),
|
|
174
|
-
},
|
|
175
|
-
connectedInputs,
|
|
176
|
-
execute.active,
|
|
177
|
-
execute.poison,
|
|
178
|
-
);
|
|
179
|
-
|
|
180
|
-
const settled = Schema.Struct({ settled: Schema.Boolean });
|
|
181
|
-
|
|
182
|
-
const makeRevocations = (
|
|
183
|
-
mapping: STypes.Revocations,
|
|
184
|
-
execute: OAuthExecution,
|
|
185
|
-
): OAuthConnectedRevocations["Service"] =>
|
|
186
|
-
capturedOAuthService<OAuthConnectedRevocations["Service"]>(
|
|
187
|
-
{
|
|
188
|
-
claim: (input, callback) =>
|
|
189
|
-
execute.run(
|
|
190
|
-
Effect.flatMap(Maintenance.claimRevocation(mapping, input), (value) =>
|
|
191
|
-
prepare(OAuthConnectedRevocationDecision, value, callback),
|
|
192
|
-
),
|
|
193
|
-
),
|
|
194
|
-
settle: (input, callback) =>
|
|
195
|
-
execute.run(
|
|
196
|
-
Effect.flatMap(Maintenance.settleRevocation(mapping, input), (value) =>
|
|
197
|
-
prepare(settled, value, callback),
|
|
198
|
-
),
|
|
199
|
-
),
|
|
200
|
-
},
|
|
201
|
-
connectedRevocationInputs,
|
|
202
|
-
execute.active,
|
|
203
|
-
execute.poison,
|
|
204
|
-
);
|
|
205
|
-
|
|
206
|
-
const makeTargetOAuthConnectedServices = (
|
|
207
|
-
mapping: STypes.Mapping,
|
|
208
|
-
configuration: OAuthTargetConfiguration,
|
|
209
|
-
) => {
|
|
210
|
-
const retained = captured(mapping);
|
|
211
|
-
|
|
212
|
-
return Effect.map(makeOAuthExecution(configuration, retained), (execution) => ({
|
|
213
|
-
oauthConnectedPersistence: makeConnected(retained, execution),
|
|
214
|
-
}));
|
|
215
|
-
};
|
|
216
|
-
|
|
217
|
-
const makeTargetOAuthConnectedRevocationServices = (
|
|
218
|
-
mapping: STypes.Revocations,
|
|
219
|
-
configuration: OAuthTargetConfiguration,
|
|
220
|
-
) => {
|
|
221
|
-
const retained = captured(mapping);
|
|
222
|
-
|
|
223
|
-
return Effect.map(makeOAuthExecution(configuration, retained), (execution) => ({
|
|
224
|
-
oauthConnectedRevocations: makeRevocations(retained, execution),
|
|
225
|
-
}));
|
|
226
|
-
};
|
|
227
|
-
|
|
228
|
-
const coordinateTargetOAuthConnected = <Transaction, A, E, R>(
|
|
229
|
-
database: any,
|
|
230
|
-
mapping: STypes.Mapping,
|
|
231
|
-
configuration: OAuthTargetConfiguration,
|
|
232
|
-
owner: (
|
|
233
|
-
transaction: Transaction,
|
|
234
|
-
services: { readonly oauthConnectedPersistence: OAuthConnectedPersistence["Service"] },
|
|
235
|
-
append: (statement: Statement<any>) => void,
|
|
236
|
-
) => Effect.Effect<A, E, R>,
|
|
237
|
-
) =>
|
|
238
|
-
coordinateOAuthOwner(
|
|
239
|
-
database,
|
|
240
|
-
captured(mapping),
|
|
241
|
-
configuration,
|
|
242
|
-
() => Effect.void,
|
|
243
|
-
(value: STypes.Mapping, execution) => ({
|
|
244
|
-
oauthConnectedPersistence: makeConnected(value, execution),
|
|
245
|
-
}),
|
|
246
|
-
owner,
|
|
247
|
-
);
|
|
248
|
-
|
|
249
|
-
const coordinateTargetOAuthConnectedRevocations = <Transaction, A, E, R>(
|
|
250
|
-
database: any,
|
|
251
|
-
mapping: STypes.Revocations,
|
|
252
|
-
configuration: OAuthTargetConfiguration,
|
|
253
|
-
owner: (
|
|
254
|
-
transaction: Transaction,
|
|
255
|
-
services: { readonly oauthConnectedRevocations: OAuthConnectedRevocations["Service"] },
|
|
256
|
-
append: (statement: Statement<any>) => void,
|
|
257
|
-
) => Effect.Effect<A, E, R>,
|
|
258
|
-
) =>
|
|
259
|
-
coordinateOAuthOwner(
|
|
260
|
-
database,
|
|
261
|
-
captured(mapping),
|
|
262
|
-
configuration,
|
|
263
|
-
() => Effect.void,
|
|
264
|
-
(value: STypes.Revocations, execution) => ({
|
|
265
|
-
oauthConnectedRevocations: makeRevocations(value, execution),
|
|
266
|
-
}),
|
|
267
|
-
owner,
|
|
268
|
-
);
|
|
269
|
-
|
|
270
|
-
return {
|
|
271
|
-
makeTargetOAuthConnectedServices,
|
|
272
|
-
makeTargetOAuthConnectedRevocationServices,
|
|
273
|
-
coordinateTargetOAuthConnected,
|
|
274
|
-
coordinateTargetOAuthConnectedRevocations,
|
|
275
|
-
};
|
|
276
|
-
});
|
|
277
|
-
|
|
278
|
-
export class OAuthConnectedTarget extends Context.Service<
|
|
279
|
-
OAuthConnectedTarget,
|
|
280
|
-
Effect.Success<typeof make>
|
|
281
|
-
>()("effect-auth/persistence/OAuthConnectedTarget") {
|
|
282
|
-
static readonly layer = Layer.effect(OAuthConnectedTarget, make);
|
|
283
|
-
}
|
|
284
|
-
|
|
285
|
-
export const oauthConnectedPersistenceLayer = <E, R>(
|
|
286
|
-
services: Effect.Effect<
|
|
287
|
-
{ readonly oauthConnectedPersistence: OAuthConnectedPersistence["Service"] },
|
|
288
|
-
E,
|
|
289
|
-
R
|
|
290
|
-
>,
|
|
291
|
-
) =>
|
|
292
|
-
Layer.effect(
|
|
293
|
-
OAuthConnectedPersistence,
|
|
294
|
-
Effect.map(services, (value) => value.oauthConnectedPersistence),
|
|
295
|
-
);
|
|
296
|
-
|
|
297
|
-
export const oauthConnectedRevocationsLayer = <E, R>(
|
|
298
|
-
services: Effect.Effect<
|
|
299
|
-
{ readonly oauthConnectedRevocations: OAuthConnectedRevocations["Service"] },
|
|
300
|
-
E,
|
|
301
|
-
R
|
|
302
|
-
>,
|
|
303
|
-
) =>
|
|
304
|
-
Layer.effect(
|
|
305
|
-
OAuthConnectedRevocations,
|
|
306
|
-
Effect.map(services, (value) => value.oauthConnectedRevocations),
|
|
307
|
-
);
|