@zudojs/auth 0.0.1

package/dist/authToken/authToken.core.d.ts

@@ -0,0 +1,31 @@
+/**
+ * JWT token creation, verification, and refresh.
+ *
+ * @module authToken/authToken
+ *
+ * Pure Node.js implementation (no jsonwebtoken dependency).
+ * Uses HMAC SHA-256 for signing.
+ */
+import type { UserId } from "@zudojs/constants";
+import type { JwtToken, TokenPair, TokenConfig, TokenVerificationResult } from "../authTypes/authToken.type.js";
+/**
+ * Create a new token pair (access + refresh).
+ */
+export declare function createTokenPair(userId: UserId, config: TokenConfig, options?: {
+    readonly roles?: readonly string[];
+}): TokenPair;
+/**
+ * Verify and decode an access token.
+ */
+export declare function verifyAccessToken(token: JwtToken, config: TokenConfig): TokenVerificationResult;
+/**
+ * Verify and decode a refresh token.
+ */
+export declare function verifyRefreshToken(token: JwtToken, config: TokenConfig): TokenVerificationResult;
+/**
+ * Refresh an access token using a valid refresh token.
+ */
+export declare function refreshAccessToken(refreshToken: JwtToken, config: TokenConfig, options?: {
+    readonly roles?: readonly string[];
+}): TokenPair | null;
+//# sourceMappingURL=authToken.core.d.ts.map

package/dist/authToken/authToken.core.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authToken.core.d.ts","sourceRoot":"","sources":["../../src/authToken/authToken.core.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,KAAK,EACV,QAAQ,EACR,SAAS,EACT,WAAW,EACX,uBAAuB,EACxB,MAAM,gCAAgC,CAAC;AAUxC;;GAEG;AACH,wBAAgB,eAAe,CAC7B,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,WAAW,EACnB,OAAO,CAAC,EAAE;IAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,GAC/C,SAAS,CAsCX;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,QAAQ,EACf,MAAM,EAAE,WAAW,GAClB,uBAAuB,CAEzB;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,QAAQ,EACf,MAAM,EAAE,WAAW,GAClB,uBAAuB,CAEzB;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAChC,YAAY,EAAE,QAAQ,EACtB,MAAM,EAAE,WAAW,EACnB,OAAO,CAAC,EAAE;IAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,GAC/C,SAAS,GAAG,IAAI,CAOlB"}

package/dist/authToken/authToken.core.js

@@ -0,0 +1,69 @@
+/**
+ * JWT token creation, verification, and refresh.
+ *
+ * @module authToken/authToken
+ *
+ * Pure Node.js implementation (no jsonwebtoken dependency).
+ * Uses HMAC SHA-256 for signing.
+ */
+import { TimeMs } from "@zudojs/constants";
+import { signToken, verifyToken, generateTokenId, } from "./authToken.signing.js";
+const DEFAULT_ACCESS_TTL = TimeMs.SECOND * 15; // 15 minutes
+const DEFAULT_REFRESH_TTL = TimeMs.SECOND * 60 * 60 * 24 * 7; // 7 days
+/**
+ * Create a new token pair (access + refresh).
+ */
+export function createTokenPair(userId, config, options) {
+    const accessTtl = config.accessTtl ?? DEFAULT_ACCESS_TTL;
+    const refreshTtl = config.refreshTtl ?? DEFAULT_REFRESH_TTL;
+    const now = Math.floor(Date.now() / 1000);
+    const accessToken = signToken({
+        sub: userId,
+        iat: now,
+        exp: now + accessTtl,
+        typ: "access",
+        jti: generateTokenId(),
+        roles: options?.roles,
+        ...(config.issuer ? { iss: config.issuer } : {}),
+        ...(config.audience ? { aud: config.audience } : {}),
+    }, config.accessSecret);
+    const refreshToken = signToken({
+        sub: userId,
+        iat: now,
+        exp: now + refreshTtl,
+        typ: "refresh",
+        jti: generateTokenId(),
+        ...(config.issuer ? { iss: config.issuer } : {}),
+        ...(config.audience ? { aud: config.audience } : {}),
+    }, config.refreshSecret);
+    return {
+        accessToken,
+        refreshToken,
+        expiresIn: accessTtl,
+        tokenType: "Bearer",
+    };
+}
+/**
+ * Verify and decode an access token.
+ */
+export function verifyAccessToken(token, config) {
+    return verifyToken(token, config.accessSecret, "access", config);
+}
+/**
+ * Verify and decode a refresh token.
+ */
+export function verifyRefreshToken(token, config) {
+    return verifyToken(token, config.refreshSecret, "refresh", config);
+}
+/**
+ * Refresh an access token using a valid refresh token.
+ */
+export function refreshAccessToken(refreshToken, config, options) {
+    const result = verifyRefreshToken(refreshToken, config);
+    if (!result.valid || !result.payload)
+        return null;
+    return createTokenPair(result.payload.sub, config, {
+        roles: options?.roles ?? result.payload.roles,
+    });
+}
+//# sourceMappingURL=authToken.core.js.map

package/dist/authToken/authToken.core.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authToken.core.js","sourceRoot":"","sources":["../../src/authToken/authToken.core.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAQ3C,OAAO,EACL,SAAS,EACT,WAAW,EACX,eAAe,GAChB,MAAM,wBAAwB,CAAC;AAEhC,MAAM,kBAAkB,GAAG,MAAM,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,aAAa;AAC5D,MAAM,mBAAmB,GAAG,MAAM,CAAC,MAAM,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,SAAS;AAEvE;;GAEG;AACH,MAAM,UAAU,eAAe,CAC7B,MAAc,EACd,MAAmB,EACnB,OAAgD;IAEhD,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,kBAAkB,CAAC;IACzD,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,mBAAmB,CAAC;IAC5D,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAE1C,MAAM,WAAW,GAAG,SAAS,CAC3B;QACE,GAAG,EAAE,MAAM;QACX,GAAG,EAAE,GAAG;QACR,GAAG,EAAE,GAAG,GAAG,SAAS;QACpB,GAAG,EAAE,QAAQ;QACb,GAAG,EAAE,eAAe,EAAE;QACtB,KAAK,EAAE,OAAO,EAAE,KAAK;QACrB,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChD,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACrD,EACD,MAAM,CAAC,YAAY,CACpB,CAAC;IAEF,MAAM,YAAY,GAAG,SAAS,CAC5B;QACE,GAAG,EAAE,MAAM;QACX,GAAG,EAAE,GAAG;QACR,GAAG,EAAE,GAAG,GAAG,UAAU;QACrB,GAAG,EAAE,SAAS;QACd,GAAG,EAAE,eAAe,EAAE;QACtB,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChD,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACrD,EACD,MAAM,CAAC,aAAa,CACrB,CAAC;IAEF,OAAO;QACL,WAAW;QACX,YAAY;QACZ,SAAS,EAAE,SAAS;QACpB,SAAS,EAAE,QAAQ;KACpB,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAC/B,KAAe,EACf,MAAmB;IAEnB,OAAO,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,YAAY,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;AACnE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAChC,KAAe,EACf,MAAmB;IAEnB,OAAO,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,aAAa,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;AACrE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAChC,YAAsB,EACtB,MAAmB,EACnB,OAAgD;IAEhD,MAAM,MAAM,GAAG,kBAAkB,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IACxD,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAElD,OAAO,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE;QACjD,KAAK,EAAE,OAAO,EAAE,KAAK,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK;KAC9C,CAAC,CAAC;AACL,CAAC"}

package/dist/authToken/authToken.signing.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Internal JWT signing and verification helpers.
+ *
+ * @module authToken/authToken.signing
+ *
+ * Not exported from the package barrel — used internally by authToken.core.ts.
+ */
+import type { JwtToken, TokenId, TokenPayload, TokenConfig, TokenVerificationResult } from "../authTypes/authToken.type.js";
+/**
+ * Sign a JWT payload with HMAC SHA-256.
+ */
+export declare function signToken(payload: TokenPayload, secret: string): JwtToken;
+/**
+ * Verify a JWT token's signature, expiration, and type.
+ */
+export declare function verifyToken(token: JwtToken, secret: string, expectedType: "access" | "refresh", config: TokenConfig): TokenVerificationResult;
+/**
+ * Generate a random token ID.
+ */
+export declare function generateTokenId(): TokenId;
+//# sourceMappingURL=authToken.signing.d.ts.map

package/dist/authToken/authToken.signing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authToken.signing.d.ts","sourceRoot":"","sources":["../../src/authToken/authToken.signing.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,OAAO,KAAK,EACV,QAAQ,EACR,OAAO,EACP,YAAY,EACZ,WAAW,EACX,uBAAuB,EACxB,MAAM,gCAAgC,CAAC;AAKxC;;GAEG;AACH,wBAAgB,SAAS,CAAC,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,GAAG,QAAQ,CAQzE;AAED;;GAEG;AACH,wBAAgB,WAAW,CACzB,KAAK,EAAE,QAAQ,EACf,MAAM,EAAE,MAAM,EACd,YAAY,EAAE,QAAQ,GAAG,SAAS,EAClC,MAAM,EAAE,WAAW,GAClB,uBAAuB,CA0CzB;AAED;;GAEG;AACH,wBAAgB,eAAe,IAAI,OAAO,CAEzC"}

package/dist/authToken/authToken.signing.js

@@ -0,0 +1,87 @@
+/**
+ * Internal JWT signing and verification helpers.
+ *
+ * @module authToken/authToken.signing
+ *
+ * Not exported from the package barrel — used internally by authToken.core.ts.
+ */
+import { createHmac, timingSafeEqual } from "node:crypto";
+import { randomBytes } from "node:crypto";
+/** HMAC signing algorithm. */
+const ALGORITHM = "HS256";
+/**
+ * Sign a JWT payload with HMAC SHA-256.
+ */
+export function signToken(payload, secret) {
+    const header = base64UrlEncode(JSON.stringify({ alg: ALGORITHM, typ: "JWT" }));
+    const body = base64UrlEncode(JSON.stringify(payload));
+    const signatureInput = `${header}.${body}`;
+    const signature = hmacSha256(signatureInput, secret);
+    return `${signatureInput}.${signature}`;
+}
+/**
+ * Verify a JWT token's signature, expiration, and type.
+ */
+export function verifyToken(token, secret, expectedType, config) {
+    const parts = token.split(".");
+    if (parts.length !== 3) {
+        return { valid: false, error: "Invalid token format" };
+    }
+    const [headerB64, bodyB64, signature] = parts;
+    const signatureInput = `${headerB64}.${bodyB64}`;
+    const expectedSignature = hmacSha256(signatureInput, secret);
+    const sigBuffer = Buffer.from(signature ?? "", "hex");
+    const expectedBuffer = Buffer.from(expectedSignature, "hex");
+    if (sigBuffer.length !== expectedBuffer.length ||
+        !timingSafeEqual(sigBuffer, expectedBuffer)) {
+        return { valid: false, error: "Invalid signature" };
+    }
+    let payload;
+    try {
+        payload = JSON.parse(base64UrlDecode(bodyB64));
+    }
+    catch {
+        return { valid: false, error: "Invalid payload" };
+    }
+    const now = Math.floor(Date.now() / 1000);
+    if (payload.exp < now) {
+        return { valid: false, error: "Token expired" };
+    }
+    if (payload.typ !== expectedType) {
+        return { valid: false, error: `Expected ${expectedType} token` };
+    }
+    if (config.issuer && payload.iss !== config.issuer) {
+        return { valid: false, error: "Invalid issuer" };
+    }
+    return { valid: true, payload };
+}
+/**
+ * Generate a random token ID.
+ */
+export function generateTokenId() {
+    return randomBytes(16).toString("hex");
+}
+// ─── Internal helpers ─────────────────────────────────────────────────────
+function hmacSha256(data, secret) {
+    return createHmac("sha256", secret).update(data).digest("hex");
+}
+function base64UrlEncode(data) {
+    const encoded = Buffer.from(data).toString("base64");
+    let result = "";
+    for (let i = 0; i < encoded.length; i++) {
+        const char = encoded[i];
+        if (char === "+")
+            result += "-";
+        else if (char === "/")
+            result += "_";
+        else if (char !== "=")
+            result += char;
+    }
+    return result;
+}
+function base64UrlDecode(data) {
+    const padded = data.replace(/-/g, "+").replace(/_/g, "/");
+    const padLength = (4 - (padded.length % 4)) % 4;
+    return Buffer.from(padded + "=".repeat(padLength), "base64").toString("utf-8");
+}
+//# sourceMappingURL=authToken.signing.js.map

package/dist/authToken/authToken.signing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authToken.signing.js","sourceRoot":"","sources":["../../src/authToken/authToken.signing.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAS1C,8BAA8B;AAC9B,MAAM,SAAS,GAAG,OAAO,CAAC;AAE1B;;GAEG;AACH,MAAM,UAAU,SAAS,CAAC,OAAqB,EAAE,MAAc;IAC7D,MAAM,MAAM,GAAG,eAAe,CAC5B,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAC/C,CAAC;IACF,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IACtD,MAAM,cAAc,GAAG,GAAG,MAAM,IAAI,IAAI,EAAE,CAAC;IAC3C,MAAM,SAAS,GAAG,UAAU,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;IACrD,OAAO,GAAG,cAAc,IAAI,SAAS,EAAE,CAAC;AAC1C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW,CACzB,KAAe,EACf,MAAc,EACd,YAAkC,EAClC,MAAmB;IAEnB,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC;IACzD,CAAC;IAED,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,SAAS,CAAC,GAAG,KAAK,CAAC;IAC9C,MAAM,cAAc,GAAG,GAAG,SAAS,IAAI,OAAO,EAAE,CAAC;IACjD,MAAM,iBAAiB,GAAG,UAAU,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;IAE7D,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC;IACtD,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAC;IAE7D,IACE,SAAS,CAAC,MAAM,KAAK,cAAc,CAAC,MAAM;QAC1C,CAAC,eAAe,CAAC,SAAS,EAAE,cAAc,CAAC,EAC3C,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC;IACtD,CAAC;IAED,IAAI,OAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,OAAQ,CAAC,CAAiB,CAAC;IAClE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC;IACpD,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAE1C,IAAI,OAAO,CAAC,GAAG,GAAG,GAAG,EAAE,CAAC;QACtB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC;IAClD,CAAC;IAED,IAAI,OAAO,CAAC,GAAG,KAAK,YAAY,EAAE,CAAC;QACjC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,YAAY,QAAQ,EAAE,CAAC;IACnE,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;QACnD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC;IACnD,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAClC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe;IAC7B,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAY,CAAC;AACpD,CAAC;AAED,6EAA6E;AAE7E,SAAS,UAAU,CAAC,IAAY,EAAE,MAAc;IAC9C,OAAO,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,eAAe,CAAC,IAAY;IACnC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACrD,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACxB,IAAI,IAAI,KAAK,GAAG;YAAE,MAAM,IAAI,GAAG,CAAC;aAC3B,IAAI,IAAI,KAAK,GAAG;YAAE,MAAM,IAAI,GAAG,CAAC;aAChC,IAAI,IAAI,KAAK,GAAG;YAAE,MAAM,IAAI,IAAI,CAAC;IACxC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,eAAe,CAAC,IAAY;IACnC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC1D,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAChD,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,CACnE,OAAO,CACR,CAAC;AACJ,CAAC"}

package/dist/authToken/index.d.ts

@@ -0,0 +1,7 @@
+/**
+ * JWT token creation, verification, and refresh.
+ *
+ * @module authToken
+ */
+export { createTokenPair, verifyAccessToken, verifyRefreshToken, refreshAccessToken, } from "./authToken.core.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/authToken/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/authToken/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EACL,eAAe,EACf,iBAAiB,EACjB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,qBAAqB,CAAC"}

package/dist/authToken/index.js

@@ -0,0 +1,7 @@
+/**
+ * JWT token creation, verification, and refresh.
+ *
+ * @module authToken
+ */
+export { createTokenPair, verifyAccessToken, verifyRefreshToken, refreshAccessToken, } from "./authToken.core.js";
+//# sourceMappingURL=index.js.map

package/dist/authToken/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/authToken/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EACL,eAAe,EACf,iBAAiB,EACjB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,qBAAqB,CAAC"}

package/dist/authToken/jwt.namespace.d.ts

@@ -0,0 +1,18 @@
+/**
+ * @zudojs/auth — JWT Namespace
+ *
+ * Convenience namespace for all JWT-related utilities.
+ */
+import { createTokenPair, verifyAccessToken, verifyRefreshToken, refreshAccessToken } from "./authToken.core.js";
+import { parseBearerToken, isTokenExpired, extractUserId } from "../authUtils/authUtils.helper.js";
+export type { JwtToken, TokenPair, TokenConfig, TokenVerificationResult, } from "../authTypes/authToken.type.js";
+export declare const jwt: {
+    createTokenPair: typeof createTokenPair;
+    verifyAccessToken: typeof verifyAccessToken;
+    verifyRefreshToken: typeof verifyRefreshToken;
+    refreshAccessToken: typeof refreshAccessToken;
+    parseBearerToken: typeof parseBearerToken;
+    isTokenExpired: typeof isTokenExpired;
+    extractUserId: typeof extractUserId;
+};
+//# sourceMappingURL=jwt.namespace.d.ts.map

package/dist/authToken/jwt.namespace.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt.namespace.d.ts","sourceRoot":"","sources":["../../src/authToken/jwt.namespace.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EACL,eAAe,EACf,iBAAiB,EACjB,kBAAkB,EAClB,kBAAkB,EACnB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,gBAAgB,EAChB,cAAc,EACd,aAAa,EACd,MAAM,kCAAkC,CAAC;AAE1C,YAAY,EACV,QAAQ,EACR,SAAS,EACT,WAAW,EACX,uBAAuB,GACxB,MAAM,gCAAgC,CAAC;AAExC,eAAO,MAAM,GAAG;;;;;;;;CAQf,CAAC"}

package/dist/authToken/jwt.namespace.js

@@ -0,0 +1,17 @@
+/**
+ * @zudojs/auth — JWT Namespace
+ *
+ * Convenience namespace for all JWT-related utilities.
+ */
+import { createTokenPair, verifyAccessToken, verifyRefreshToken, refreshAccessToken, } from "./authToken.core.js";
+import { parseBearerToken, isTokenExpired, extractUserId, } from "../authUtils/authUtils.helper.js";
+export const jwt = {
+    createTokenPair,
+    verifyAccessToken,
+    verifyRefreshToken,
+    refreshAccessToken,
+    parseBearerToken,
+    isTokenExpired,
+    extractUserId,
+};
+//# sourceMappingURL=jwt.namespace.js.map

package/dist/authToken/jwt.namespace.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt.namespace.js","sourceRoot":"","sources":["../../src/authToken/jwt.namespace.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EACL,eAAe,EACf,iBAAiB,EACjB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,gBAAgB,EAChB,cAAc,EACd,aAAa,GACd,MAAM,kCAAkC,CAAC;AAS1C,MAAM,CAAC,MAAM,GAAG,GAAG;IACjB,eAAe;IACf,iBAAiB;IACjB,kBAAkB;IAClB,kBAAkB;IAClB,gBAAgB;IAChB,cAAc;IACd,aAAa;CACd,CAAC"}

package/dist/authTypes/authRbac.type.d.ts

@@ -0,0 +1,45 @@
+/**
+ * Role-based access control (RBAC) types.
+ *
+ * @module authRbac
+ *
+ * Re-exported from @zudojs/permissions for backward compatibility.
+ * For new code, import directly from @zudojs/permissions.
+ */
+import type { PermissionString as PermissionsPermissionString, RoleDefinition as PermissionsRole } from "@zudojs/permissions";
+/**
+ * Permission string format: "resource:action"
+ * Examples: "users:read", "posts:write", "admin:*"
+ */
+export type Permission = PermissionsPermissionString;
+/**
+ * Role definition with associated permissions.
+ */
+export type Role = PermissionsRole;
+/**
+ * Guard result after checking permissions.
+ */
+export interface GuardResult {
+    /** Whether access is allowed */
+    readonly allowed: boolean;
+    /** Reason for denial (if denied) */
+    readonly reason?: string;
+    /** Required permission that was missing */
+    readonly requiredPermission?: Permission;
+    /** User's roles at time of check */
+    readonly userRoles?: readonly string[];
+}
+/**
+ * Guard context for authorization checks.
+ */
+export interface GuardContext {
+    /** User ID to check */
+    readonly userId: string;
+    /** User's roles */
+    readonly roles: readonly string[];
+    /** Required permission */
+    readonly permission: Permission;
+    /** Optional resource owner ID (for ownership checks) */
+    readonly resourceOwnerId?: string;
+}
+//# sourceMappingURL=authRbac.type.d.ts.map

package/dist/authTypes/authRbac.type.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authRbac.type.d.ts","sourceRoot":"","sources":["../../src/authTypes/authRbac.type.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EACV,gBAAgB,IAAI,2BAA2B,EAC/C,cAAc,IAAI,eAAe,EAClC,MAAM,qBAAqB,CAAC;AAE7B;;;GAGG;AACH,MAAM,MAAM,UAAU,GAAG,2BAA2B,CAAC;AAErD;;GAEG;AACH,MAAM,MAAM,IAAI,GAAG,eAAe,CAAC;AAEnC;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,gCAAgC;IAChC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,oCAAoC;IACpC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,2CAA2C;IAC3C,QAAQ,CAAC,kBAAkB,CAAC,EAAE,UAAU,CAAC;IACzC,oCAAoC;IACpC,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACxC;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,uBAAuB;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,mBAAmB;IACnB,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,0BAA0B;IAC1B,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,wDAAwD;IACxD,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;CACnC"}

package/dist/authTypes/authRbac.type.js

@@ -0,0 +1,10 @@
+/**
+ * Role-based access control (RBAC) types.
+ *
+ * @module authRbac
+ *
+ * Re-exported from @zudojs/permissions for backward compatibility.
+ * For new code, import directly from @zudojs/permissions.
+ */
+export {};
+//# sourceMappingURL=authRbac.type.js.map

package/dist/authTypes/authRbac.type.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authRbac.type.js","sourceRoot":"","sources":["../../src/authTypes/authRbac.type.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG"}

package/dist/authTypes/authSession.type.d.ts

@@ -0,0 +1,57 @@
+/**
+ * Session types and interfaces.
+ *
+ * @module authSession/authSession
+ */
+import type { UserId } from "../authTypes/authUser.type.js";
+import type { SessionId } from "@zudojs/constants";
+export type { SessionId } from "@zudojs/constants";
+/**
+ * Server-side session representation.
+ */
+export interface AuthSession {
+    /** Unique session identifier */
+    readonly id: SessionId;
+    /** User who owns this session */
+    readonly userId: UserId;
+    /** Client user-agent string */
+    readonly userAgent?: string;
+    /** Client IP address */
+    readonly ip?: string;
+    /** Session creation time */
+    readonly createdAt: Date;
+    /** Last activity time */
+    readonly lastActivityAt: Date;
+    /** Session expiration time */
+    readonly expiresAt: Date;
+    /** Whether the session is active */
+    readonly active: boolean;
+    /** Session metadata */
+    readonly metadata?: Record<string, unknown>;
+}
+/**
+ * Options for creating a session.
+ */
+export interface CreateSessionOptions {
+    readonly userId: UserId;
+    readonly userAgent?: string;
+    readonly ip?: string;
+    readonly ttlSeconds?: number;
+    readonly metadata?: Record<string, unknown>;
+}
+/**
+ * Session store interface.
+ */
+export interface SessionStore {
+    /** Create a new session */
+    create(options: CreateSessionOptions): Promise<AuthSession>;
+    /** Get a session by ID */
+    get(sessionId: SessionId): Promise<AuthSession | null>;
+    /** Update session activity */
+    touch(sessionId: SessionId): Promise<void>;
+    /** Destroy a session */
+    destroy(sessionId: SessionId): Promise<void>;
+    /** Destroy all sessions for a user */
+    destroyAllForUser(userId: UserId): Promise<void>;
+}
+//# sourceMappingURL=authSession.type.d.ts.map

package/dist/authTypes/authSession.type.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authSession.type.d.ts","sourceRoot":"","sources":["../../src/authTypes/authSession.type.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,+BAA+B,CAAC;AAC5D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAEnD,YAAY,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAEnD;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,gCAAgC;IAChC,QAAQ,CAAC,EAAE,EAAE,SAAS,CAAC;IACvB,iCAAiC;IACjC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,+BAA+B;IAC/B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,wBAAwB;IACxB,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC;IACrB,4BAA4B;IAC5B,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC;IACzB,yBAAyB;IACzB,QAAQ,CAAC,cAAc,EAAE,IAAI,CAAC;IAC9B,8BAA8B;IAC9B,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC;IACzB,oCAAoC;IACpC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,uBAAuB;IACvB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC7C;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC7C;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,2BAA2B;IAC3B,MAAM,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAC5D,0BAA0B;IAC1B,GAAG,CAAC,SAAS,EAAE,SAAS,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;IACvD,8BAA8B;IAC9B,KAAK,CAAC,SAAS,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3C,wBAAwB;IACxB,OAAO,CAAC,SAAS,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7C,sCAAsC;IACtC,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAClD"}

package/dist/authTypes/authSession.type.js

@@ -0,0 +1,7 @@
+/**
+ * Session types and interfaces.
+ *
+ * @module authSession/authSession
+ */
+export {};
+//# sourceMappingURL=authSession.type.js.map

package/dist/authTypes/authSession.type.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authSession.type.js","sourceRoot":"","sources":["../../src/authTypes/authSession.type.ts"],"names":[],"mappings":"AAAA;;;;GAIG"}

package/dist/authTypes/authStrategy.type.d.ts

@@ -0,0 +1,83 @@
+/**
+ * Authentication strategy types (OAuth2, social login, etc.).
+ *
+ * @module authStrategy/authStrategy
+ */
+import type { UserId } from "../authTypes/authUser.type.js";
+/**
+ * Supported OAuth2 provider identifiers.
+ */
+export type OAuthProvider = "google" | "github" | "microsoft" | "apple" | "discord" | "custom";
+/**
+ * OAuth2 provider configuration.
+ */
+export interface OAuthConfig {
+    /** Provider name */
+    readonly provider: OAuthProvider;
+    /** OAuth2 client ID */
+    readonly clientId: string;
+    /** OAuth2 client secret */
+    readonly clientSecret: string;
+    /** OAuth2 authorization URL */
+    readonly authorizeUrl: string;
+    /** OAuth2 token URL */
+    readonly tokenUrl: string;
+    /** OAuth2 user info URL */
+    readonly userInfoUrl: string;
+    /** Redirect URI after authorization */
+    readonly redirectUri: string;
+    /** Requested scopes */
+    readonly scopes?: readonly string[];
+}
+/**
+ * User info returned from an OAuth2 provider.
+ */
+export interface OAuthUserInfo {
+    /** Provider's user ID */
+    readonly providerId: string;
+    /** Email address */
+    readonly email: string;
+    /** Display name */
+    readonly name?: string;
+    /** Avatar URL */
+    readonly avatarUrl?: string;
+    /** Raw provider data */
+    readonly raw?: Record<string, unknown>;
+}
+/**
+ * Result of OAuth2 authentication.
+ */
+export interface OAuthResult {
+    /** Whether authentication succeeded */
+    readonly success: boolean;
+    /** Authenticated user ID (if success) */
+    readonly userId?: UserId;
+    /** Whether a new user was created */
+    readonly isNewUser?: boolean;
+    /** Error message (if failure) */
+    readonly error?: string;
+}
+/**
+ * Authentication strategy interface.
+ * Each strategy (password, OAuth2, API key, etc.) implements this.
+ */
+export interface AuthStrategy {
+    /** Strategy identifier */
+    readonly name: string;
+    /** Authenticate with strategy-specific credentials */
+    authenticate(credentials: unknown): Promise<OAuthResult>;
+}
+/**
+ * Password strategy credentials.
+ */
+export interface PasswordCredentials {
+    readonly identifier: string;
+    readonly password: string;
+}
+/**
+ * API key strategy credentials.
+ */
+export interface ApiKeyCredentials {
+    readonly apiKey: string;
+}
+//# sourceMappingURL=authStrategy.type.d.ts.map

package/dist/authTypes/authStrategy.type.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authStrategy.type.d.ts","sourceRoot":"","sources":["../../src/authTypes/authStrategy.type.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,+BAA+B,CAAC;AAE5D;;GAEG;AACH,MAAM,MAAM,aAAa,GACvB,QAAQ,GAAG,QAAQ,GAAG,WAAW,GAAG,OAAO,GAAG,SAAS,GAAG,QAAQ,CAAC;AAErE;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,oBAAoB;IACpB,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;IACjC,uBAAuB;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,2BAA2B;IAC3B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,+BAA+B;IAC/B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,uBAAuB;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,2BAA2B;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,uCAAuC;IACvC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,uBAAuB;IACvB,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACrC;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,yBAAyB;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,oBAAoB;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,mBAAmB;IACnB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,iBAAiB;IACjB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,wBAAwB;IACxB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACxC;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,uCAAuC;IACvC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,yCAAyC;IACzC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,qCAAqC;IACrC,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAC7B,iCAAiC;IACjC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,0BAA0B;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,sDAAsD;IACtD,YAAY,CAAC,WAAW,EAAE,OAAO,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;CAC1D;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB"}

package/dist/authTypes/authStrategy.type.js

@@ -0,0 +1,7 @@
+/**
+ * Authentication strategy types (OAuth2, social login, etc.).
+ *
+ * @module authStrategy/authStrategy
+ */
+export {};
+//# sourceMappingURL=authStrategy.type.js.map

package/dist/authTypes/authStrategy.type.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authStrategy.type.js","sourceRoot":"","sources":["../../src/authTypes/authStrategy.type.ts"],"names":[],"mappings":"AAAA;;;;GAIG"}

package/dist/authTypes/authToken.type.d.ts

@@ -0,0 +1,72 @@
+/**
+ * JWT token types and interfaces.
+ *
+ * @module authToken/authToken
+ */
+import type { UserId } from "../authTypes/authUser.type.js";
+import type { TokenId } from "@zudojs/constants";
+/** JWT token string. */
+export type JwtToken = string;
+/** Token identifier. Re-exported from @zudojs/constants for type safety. */
+export type { TokenId } from "@zudojs/constants";
+/**
+ * Token payload embedded in JWT.
+ */
+export interface TokenPayload {
+    /** Subject (user ID) */
+    readonly sub: UserId;
+    /** Issued-at timestamp */
+    readonly iat: number;
+    /** Expiration timestamp */
+    readonly exp: number;
+    /** Token type: access or refresh */
+    readonly typ: "access" | "refresh";
+    /** Token ID for revocation */
+    readonly jti: TokenId;
+    /** User roles */
+    readonly roles?: readonly string[];
+    /** Custom claims */
+    readonly [key: string]: unknown;
+}
+/**
+ * Token pair returned after authentication.
+ */
+export interface TokenPair {
+    /** Short-lived access token */
+    readonly accessToken: JwtToken;
+    /** Long-lived refresh token */
+    readonly refreshToken: JwtToken;
+    /** Access token expiration in seconds */
+    readonly expiresIn: number;
+    /** Token type (always "Bearer") */
+    readonly tokenType: "Bearer";
+}
+/**
+ * Configuration for token generation.
+ */
+export interface TokenConfig {
+    /** Secret key for signing (access tokens) */
+    readonly accessSecret: string;
+    /** Secret key for signing (refresh tokens) */
+    readonly refreshSecret: string;
+    /** Access token TTL in seconds (default: 900 = 15 min) */
+    readonly accessTtl?: number;
+    /** Refresh token TTL in seconds (default: 604800 = 7 days) */
+    readonly refreshTtl?: number;
+    /** JWT issuer */
+    readonly issuer?: string;
+    /** JWT audience */
+    readonly audience?: string;
+}
+/**
+ * Result of token verification.
+ */
+export interface TokenVerificationResult {
+    /** Whether the token is valid */
+    readonly valid: boolean;
+    /** Decoded payload (if valid) */
+    readonly payload?: TokenPayload;
+    /** Error message (if invalid) */
+    readonly error?: string;
+}
+//# sourceMappingURL=authToken.type.d.ts.map

package/dist/authTypes/authToken.type.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authToken.type.d.ts","sourceRoot":"","sources":["../../src/authTypes/authToken.type.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,+BAA+B,CAAC;AAC5D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAEjD,wBAAwB;AACxB,MAAM,MAAM,QAAQ,GAAG,MAAM,CAAC;AAE9B,4EAA4E;AAC5E,YAAY,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAEjD;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,wBAAwB;IACxB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,0BAA0B;IAC1B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,2BAA2B;IAC3B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,oCAAoC;IACpC,QAAQ,CAAC,GAAG,EAAE,QAAQ,GAAG,SAAS,CAAC;IACnC,8BAA8B;IAC9B,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC;IACtB,iBAAiB;IACjB,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,oBAAoB;IACpB,QAAQ,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACjC;AAED;;GAEG;AACH,MAAM,WAAW,SAAS;IACxB,+BAA+B;IAC/B,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC;IAC/B,+BAA+B;IAC/B,QAAQ,CAAC,YAAY,EAAE,QAAQ,CAAC;IAChC,yCAAyC;IACzC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,mCAAmC;IACnC,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC;CAC9B;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,6CAA6C;IAC7C,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,8CAA8C;IAC9C,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,0DAA0D;IAC1D,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,8DAA8D;IAC9D,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,iBAAiB;IACjB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,mBAAmB;IACnB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,iCAAiC;IACjC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,iCAAiC;IACjC,QAAQ,CAAC,OAAO,CAAC,EAAE,YAAY,CAAC;IAChC,iCAAiC;IACjC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB"}

package/dist/authTypes/authToken.type.js

@@ -0,0 +1,7 @@
+/**
+ * JWT token types and interfaces.
+ *
+ * @module authToken/authToken
+ */
+export {};
+//# sourceMappingURL=authToken.type.js.map

package/dist/authTypes/authToken.type.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authToken.type.js","sourceRoot":"","sources":["../../src/authTypes/authToken.type.ts"],"names":[],"mappings":"AAAA;;;;GAIG"}