auth0 6.4.0 → 7.0.0

package/README.md

@@ -15,6 +15,8 @@
 - [SDK Documentation](http://auth0.github.io/node-auth0/) - explore the SDK documentation
 - [API Reference](https://github.com/auth0/node-auth0/blob/master/reference.md) - full reference for this library
 - [v6 Migration Guide](https://github.com/auth0/node-auth0/blob/master/v6_MIGRATION_GUIDE.md) - upgrade from v5 to v6
+- [v7 Migration Guide](https://github.com/auth0/node-auth0/blob/master/v7_MIGRATION_GUIDE.md) - upgrade from v6 to v7
+- [Authentication Migration Guide](https://github.com/auth0/node-auth0/tree/master/auth-migration) - migrate the Authentication API layer to `@auth0/auth0-auth-js` / `@auth0/auth0-server-js`
 
 ## Getting Started
 
@@ -34,20 +36,22 @@ npm install auth0
 
 ### Configure the SDK
 
-#### Authentication API Client
+#### Authentication
 
-This client can be used to access Auth0's [Authentication API](https://auth0.com/docs/api/authentication).
+For authentication operations (OAuth flows, token management, user sign-up), use [`@auth0/auth0-auth-js`](https://github.com/auth0/auth0-auth-js/tree/main/packages/auth0-auth-js). As of v7, node-auth0 no longer ships `AuthenticationClient` in its main entrypoint. The authentication layer has been separated into a dedicated package.
 
 ```js
-import { AuthenticationClient } from "auth0";
+import { AuthClient } from "@auth0/auth0-auth-js";
 
-const auth0 = new AuthenticationClient({
+const auth = new AuthClient({
     domain: "{YOUR_TENANT_AND REGION}.auth0.com",
     clientId: "{YOUR_CLIENT_ID}",
     clientSecret: "{OPTIONAL_CLIENT_SECRET}",
 });
 ```
 
+See the [auth0-auth-js documentation](https://github.com/auth0/auth0-auth-js/tree/main/packages/auth0-auth-js) for full API reference.
+
 #### Management API Client
 
 The Auth0 Management API is meant to be used by back-end servers or trusted parties performing administrative tasks. Generally speaking, anything that can be done through the Auth0 dashboard (and more) can also be done through this API.
@@ -169,25 +173,28 @@ types from the root `auth0` entry adds nothing to your bundle and does not pull
 > through a bundler. A plain CommonJS `require()` cannot tree-shake and loads the full
 > resource graph.
 
-#### UserInfo API Client
+#### User Profile Information
 
-This client can be used to retrieve user profile information.
+As of v7, node-auth0 no longer ships `UserInfoClient`. Use `authClient.getUserInfo` from `@auth0/auth0-auth-js` instead.
 
 ```js
-import { UserInfoClient } from "auth0";
+import { AuthClient } from "@auth0/auth0-auth-js";
 
-const userInfo = new UserInfoClient({
-    domain: "{YOUR_TENANT_AND REGION}.auth0.com",
-});
+const auth = new AuthClient({ domain: "...", clientId: "..." });
 
-// Get user info with an access token
-const userProfile = await userInfo.getUserInfo(accessToken);
+// Requires a default OIDC token (openid scope, no explicit audience).
+// If your app uses MRRT, request https://{domain}/userinfo as the audience.
+const profile = await auth.getUserInfo({ accessToken });
 ```
 
+Note: tokens issued with a custom `audience` (e.g. the Management API) are rejected by `/userinfo`. Use a token obtained without an explicit audience, or request `https://{domain}/userinfo` as the audience when using MRRT.
+
 ## Legacy Usage
 
 If you are migrating from the legacy `node-auth0` package (v4.x) or need to maintain compatibility with legacy code, you can use the legacy export which provides the `node-auth0` v4.x API interface.
 
+**Note:** The legacy entrypoint still includes `AuthenticationClient` from the v4.x API. This is separate from the v7 main entrypoint, which no longer ships authentication clients.
+
 ### Installing Legacy Version
 
 The legacy version (`node-auth0` v4.x) is available through the `/legacy` export path:
@@ -202,7 +209,7 @@ const { ManagementClient, AuthenticationClient } = require("auth0/legacy");
 
 ### Legacy Configuration
 
-The legacy API uses the `node-auth0` v4.x configuration format and method signatures, which are different from the current v6 API:
+The legacy API uses the `node-auth0` v4.x configuration format and method signatures, which are different from the current API:
 
 #### Legacy Management Client
 
@@ -375,8 +382,6 @@ const actions = await client.actions.list(listParams);
 ### Key Classes
 
 - **ManagementClient** - for Auth0 Management API operations
-- **AuthenticationClient** - for Auth0 Authentication API operations
-- **UserInfoClient** - for retrieving user profile information
 
 ## Exception Handling
 

package/dist/cjs/index.d.ts

@@ -1,6 +1,4 @@
 export * from "./management/index.js";
-export * from "./auth/index.js";
-export * from "./userinfo/index.js";
 export * from "./lib/errors.js";
 export * from "./lib/models.js";
 export * from "./lib/httpResponseHeadersUtils.js";

package/dist/cjs/index.js

@@ -15,8 +15,6 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./management/index.js"), exports);
-__exportStar(require("./auth/index.js"), exports);
-__exportStar(require("./userinfo/index.js"), exports);
 __exportStar(require("./lib/errors.js"), exports);
 __exportStar(require("./lib/models.js"), exports);
 __exportStar(require("./lib/httpResponseHeadersUtils.js"), exports);

package/dist/cjs/lib/errors.d.ts

@@ -1,13 +1,3 @@
-/**
- * Error thrown when the API returns an error response that can't be parsed to a more specific Error instance.
- */
-export declare class ResponseError extends Error {
-    statusCode: number;
-    body: string;
-    headers: Headers;
-    name: "ResponseError";
-    constructor(statusCode: number, body: string, headers: Headers, msg?: string);
-}
 /**
  * Error thrown when the request is aborted due to a timeout.
  */
@@ -15,14 +5,6 @@ export declare class TimeoutError extends Error {
     name: "TimeoutError";
     constructor();
 }
-/**
- * Error thrown when there is a network error.
- */
-export declare class FetchError extends Error {
-    cause: Error;
-    name: "FetchError";
-    constructor(cause: Error, msg?: string);
-}
 /**
  * Error thrown when a required argument was not provided.
  */

package/dist/cjs/lib/errors.js

@@ -1,19 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.RequiredError = exports.FetchError = exports.TimeoutError = exports.ResponseError = void 0;
-/**
- * Error thrown when the API returns an error response that can't be parsed to a more specific Error instance.
- */
-class ResponseError extends Error {
-    constructor(statusCode, body, headers, msg) {
-        super(msg);
-        this.statusCode = statusCode;
-        this.body = body;
-        this.headers = headers;
-        this.name = "ResponseError";
-    }
-}
-exports.ResponseError = ResponseError;
+exports.RequiredError = exports.TimeoutError = void 0;
 /**
  * Error thrown when the request is aborted due to a timeout.
  */
@@ -24,17 +11,6 @@ class TimeoutError extends Error {
     }
 }
 exports.TimeoutError = TimeoutError;
-/**
- * Error thrown when there is a network error.
- */
-class FetchError extends Error {
-    constructor(cause, msg) {
-        super(msg);
-        this.cause = cause;
-        this.name = "FetchError";
-    }
-}
-exports.FetchError = FetchError;
 /**
  * Error thrown when a required argument was not provided.
  */

package/dist/cjs/lib/middleware/auth0-client-telemetry.d.ts

@@ -1,10 +1,9 @@
-import { Middleware, ClientOptions, FetchParams, RequestContext } from "../runtime.js";
+import { ClientOptions } from "../models.js";
 /**
- * Handles Auth0 client telemetry functionality. Can be used both as middleware
- * for automatic header injection and as a standalone utility for manual telemetry header generation.
+ * Generates the Auth0-Client telemetry header value.
  * @private
  */
-export declare class Auth0ClientTelemetry implements Middleware {
+export declare class Auth0ClientTelemetry {
     clientInfo: {
         name: string;
         [key: string]: unknown;
@@ -12,9 +11,6 @@ export declare class Auth0ClientTelemetry implements Middleware {
     constructor(options: ClientOptions);
     /**
      * Get the Auth0-Client header value for telemetry.
-     * This method can be used when you need to manually add telemetry headers
-     * instead of using the middleware system.
      */
     getAuth0ClientHeader(): string | undefined;
-    pre?(context: RequestContext): Promise<FetchParams | void>;
 }

package/dist/cjs/lib/middleware/auth0-client-telemetry.js

@@ -1,20 +1,10 @@
 "use strict";
-var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
-    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
-    return new (P || (P = Promise))(function (resolve, reject) {
-        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
-        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
-        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
-        step((generator = generator.apply(thisArg, _arguments || [])).next());
-    });
-};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.Auth0ClientTelemetry = void 0;
 const utils_js_1 = require("../../utils.js");
 const jose_1 = require("jose");
 /**
- * Handles Auth0 client telemetry functionality. Can be used both as middleware
- * for automatic header injection and as a standalone utility for manual telemetry header generation.
+ * Generates the Auth0-Client telemetry header value.
  * @private
  */
 class Auth0ClientTelemetry {
@@ -23,8 +13,6 @@ class Auth0ClientTelemetry {
     }
     /**
      * Get the Auth0-Client header value for telemetry.
-     * This method can be used when you need to manually add telemetry headers
-     * instead of using the middleware system.
      */
     getAuth0ClientHeader() {
         if ("string" === typeof this.clientInfo.name && this.clientInfo.name.length > 0) {
@@ -32,17 +20,5 @@ class Auth0ClientTelemetry {
         }
         return undefined;
     }
-    pre(context) {
-        return __awaiter(this, void 0, void 0, function* () {
-            const headerValue = this.getAuth0ClientHeader();
-            if (headerValue) {
-                context.init.headers = Object.assign(Object.assign({}, context.init.headers), { "Auth0-Client": headerValue });
-            }
-            return {
-                url: context.url,
-                init: context.init,
-            };
-        });
-    }
 }
 exports.Auth0ClientTelemetry = Auth0ClientTelemetry;

package/dist/cjs/lib/models.d.ts

@@ -71,30 +71,6 @@ export interface ApiResponse<T> {
     status: number;
     statusText: string;
 }
-export declare class JSONApiResponse<T> implements ApiResponse<T> {
-    data: T;
-    headers: Headers;
-    readonly status: number;
-    readonly statusText: string;
-    constructor(data: T, headers: Headers, status: number, statusText: string);
-    static fromResponse<T = unknown>(raw: Response): Promise<JSONApiResponse<T>>;
-}
-export declare class VoidApiResponse implements ApiResponse<undefined> {
-    headers: Headers;
-    readonly status: number;
-    readonly statusText: string;
-    data: undefined;
-    constructor(headers: Headers, status: number, statusText: string);
-    static fromResponse(raw: Response): Promise<VoidApiResponse>;
-}
-export declare class TextApiResponse implements ApiResponse<string> {
-    data: string;
-    headers: Headers;
-    readonly status: number;
-    readonly statusText: string;
-    constructor(data: string, headers: Headers, status: number, statusText: string);
-    static fromResponse(raw: Response): Promise<TextApiResponse>;
-}
 export interface FetchParams {
     url: string | URL | Request;
     init: RequestInit;

package/dist/cjs/lib/models.js

@@ -1,55 +1,2 @@
 "use strict";
-var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
-    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
-    return new (P || (P = Promise))(function (resolve, reject) {
-        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
-        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
-        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
-        step((generator = generator.apply(thisArg, _arguments || [])).next());
-    });
-};
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.TextApiResponse = exports.VoidApiResponse = exports.JSONApiResponse = void 0;
-class JSONApiResponse {
-    constructor(data, headers, status, statusText) {
-        this.data = data;
-        this.headers = headers;
-        this.status = status;
-        this.statusText = statusText;
-    }
-    static fromResponse(raw) {
-        return __awaiter(this, void 0, void 0, function* () {
-            const value = (yield raw.json());
-            return new JSONApiResponse(value, raw.headers, raw.status, raw.statusText);
-        });
-    }
-}
-exports.JSONApiResponse = JSONApiResponse;
-class VoidApiResponse {
-    constructor(headers, status, statusText) {
-        this.headers = headers;
-        this.status = status;
-        this.statusText = statusText;
-    }
-    static fromResponse(raw) {
-        return __awaiter(this, void 0, void 0, function* () {
-            return new VoidApiResponse(raw.headers, raw.status, raw.statusText);
-        });
-    }
-}
-exports.VoidApiResponse = VoidApiResponse;
-class TextApiResponse {
-    constructor(data, headers, status, statusText) {
-        this.data = data;
-        this.headers = headers;
-        this.status = status;
-        this.statusText = statusText;
-    }
-    static fromResponse(raw) {
-        return __awaiter(this, void 0, void 0, function* () {
-            const value = yield raw.text();
-            return new TextApiResponse(value, raw.headers, raw.status, raw.statusText);
-        });
-    }
-}
-exports.TextApiResponse = TextApiResponse;

package/dist/cjs/management/version.d.ts

@@ -1 +1 @@
-export declare const SDK_VERSION = "6.4.0";
+export declare const SDK_VERSION = "7.0.0";

package/dist/cjs/management/version.js

@@ -1,4 +1,4 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.SDK_VERSION = void 0;
-exports.SDK_VERSION = "6.4.0";
+exports.SDK_VERSION = "7.0.0";

package/dist/cjs/management/wrapper/ManagementClient.d.ts

@@ -15,7 +15,7 @@ export declare namespace ManagementClient {
      * @group Management API
      * @public
      */
-    interface ManagementClientOptions extends Omit<FernClient.Options, "token" | "environment" | "fetcher" | "baseUrl" | "fetch"> {
+    interface ManagementClientOptions extends Omit<FernClient.Options, "token" | "environment" | "fetcher" | "baseUrl"> {
         /** Auth0 domain (e.g., 'your-tenant.auth0.com') */
         domain: string;
         /**
@@ -114,7 +114,14 @@ export declare namespace ManagementClient {
         clientAssertionSigningKey: string;
         /** Algorithm for signing the client assertion. Defaults to RS256 */
         clientAssertionSigningAlg?: string;
-        /** Enable mTLS for token endpoint calls */
+        /**
+         * Enable mTLS for token endpoint calls.
+         *
+         * mTLS (RFC 8705) is a transport-layer concern that is independent of the client
+         * authentication method: a client authenticating with `private_key_jwt` can still present a
+         * TLS client certificate to obtain a certificate-bound access token. This mirrors v6, which
+         * added the `mtls.` endpoint alias from `useMTLS` alone regardless of the auth method.
+         */
         useMTLS?: boolean;
     }
     /**

package/dist/cjs/management/wrapper/ManagementClient.js

@@ -74,7 +74,6 @@ class ManagementClient extends Client_js_1.ManagementClient {
         const token = (0, auth_helpers_js_1.createTokenSupplier)(_options);
         // Temporarily remove fetcher from options to avoid people passing it for now
         delete _options.fetcher;
-        delete _options.fetch;
         // Prepare the base client options
         let clientOptions = Object.assign(Object.assign({}, _options), { baseUrl,
             headers,

package/dist/cjs/management/wrapper/token-provider.d.ts

@@ -1,7 +1,6 @@
-import { ManagementClient } from "./ManagementClient.js";
+import type { ManagementClient } from "./ManagementClient.js";
 export declare class TokenProvider {
     private readonly options;
-    private authenticationClient;
     private expiresAt;
     private accessToken;
     private pending;
@@ -12,4 +11,7 @@ export declare class TokenProvider {
         audience: string;
     });
     getAccessToken(): Promise<string>;
+    private fetchToken;
+    private buildClientAssertion;
+    private buildTelemetryHeader;
 }

package/dist/cjs/management/wrapper/token-provider.js

@@ -10,31 +10,162 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.TokenProvider = void 0;
-const index_js_1 = require("../../auth/index.js");
-const LEEWAY = 10 * 1000;
+const jose_1 = require("jose");
+const utils_js_1 = require("../../utils.js");
+const ManagementError_js_1 = require("../errors/ManagementError.js");
+const LEEWAY = 10 * 1000; // 10s refresh-ahead in ms
 class TokenProvider {
     constructor(options) {
         this.options = options;
         this.expiresAt = 0;
         this.accessToken = "";
-        this.authenticationClient = new index_js_1.AuthenticationClient(Object.assign(Object.assign({}, options), { headers: options.headers }));
+        // Validate domain: must be a bare hostname, no slashes or query strings.
+        if (/[/?#]/.test(options.domain)) {
+            throw new Error(`ManagementClient: invalid domain "${options.domain}". Provide a bare hostname, e.g. "tenant.auth0.com".`);
+        }
+        if (options.useMTLS) {
+            const { fetch: customFetch } = options;
+            if (!customFetch) {
+                throw new Error("ManagementClient: useMTLS requires a custom fetch implementation. " +
+                    "Provide a `fetch` option configured with your mTLS client certificate.");
+            }
+            // mTLS (RFC 8705) is a transport-layer concern independent of the client authentication
+            // method. It combines with both `clientSecret` and `clientAssertionSigningKey`: the TLS
+            // client certificate yields a certificate-bound token regardless of how the client
+            // authenticates. v6 supported this, so no auth-method restriction is imposed here.
+        }
     }
     getAccessToken() {
         return __awaiter(this, void 0, void 0, function* () {
             if (!this.accessToken || Date.now() > this.expiresAt - LEEWAY) {
-                this.pending =
-                    this.pending ||
-                        this.authenticationClient.oauth.clientCredentialsGrant({
-                            audience: this.options.audience,
-                        });
-                const { data: { access_token: accessToken, expires_in: expiresIn }, } = yield this.pending.finally(() => {
+                this.pending = this.pending || this.fetchToken();
+                const result = yield this.pending.finally(() => {
                     delete this.pending;
                 });
-                this.expiresAt = Date.now() + expiresIn * 1000;
-                this.accessToken = accessToken;
+                this.expiresAt = result.expiresAt;
+                this.accessToken = result.accessToken;
             }
             return this.accessToken;
         });
     }
+    fetchToken() {
+        return __awaiter(this, void 0, void 0, function* () {
+            var _a;
+            const { domain, clientId, audience } = this.options;
+            const tokenUrl = this.options.useMTLS ? `https://mtls.${domain}/oauth/token` : `https://${domain}/oauth/token`;
+            const body = new URLSearchParams({
+                grant_type: "client_credentials",
+                client_id: clientId,
+                audience,
+            });
+            if ("clientSecret" in this.options) {
+                body.set("client_secret", this.options.clientSecret);
+            }
+            else if ("clientAssertionSigningKey" in this.options) {
+                const assertion = yield this.buildClientAssertion(domain, clientId);
+                body.set("client_assertion", assertion);
+                body.set("client_assertion_type", "urn:ietf:params:oauth:client-assertion-type:jwt-bearer");
+            }
+            // Build request headers. Start with user-supplied plain-string headers so they can be
+            // overridden by SDK-controlled values (Content-Type, Auth0-Client) set below.
+            // Supplier-function headers (Fern's Supplier<string | null | undefined> type) are skipped —
+            // they require async resolution and are not supported on the token endpoint path.
+            const userHeaders = (_a = this.options.headers) !== null && _a !== void 0 ? _a : {};
+            const headers = {};
+            for (const [key, value] of Object.entries(userHeaders)) {
+                if (typeof value === "string") {
+                    headers[key.toLowerCase()] = value;
+                }
+            }
+            headers["content-type"] = "application/x-www-form-urlencoded";
+            const telemetryHeader = this.buildTelemetryHeader();
+            if (telemetryHeader) {
+                headers["auth0-client"] = telemetryHeader;
+            }
+            // Use custom fetch for mTLS, else global fetch.
+            // `fetch` is defined on BaseClientOptions (src/management/BaseClient.ts) which is Fern-generated.
+            // If that file is regenerated, verify `fetch?: typeof fetch` is still present — token acquisition
+            // for mTLS depends on it being forwarded here.
+            const { fetch: customFetch } = this.options;
+            const fetcher = customFetch !== null && customFetch !== void 0 ? customFetch : fetch;
+            let response;
+            try {
+                response = yield fetcher(tokenUrl, {
+                    method: "POST",
+                    headers,
+                    body: body.toString(),
+                    signal: AbortSignal.timeout(10000),
+                });
+            }
+            catch (err) {
+                // Built-in fetch aborts with a "TimeoutError"; node-fetch (used on the mTLS path with a
+                // custom fetch) aborts with an "AbortError". Match both so a token-request timeout maps
+                // to a 408 regardless of the underlying fetch implementation.
+                if (err instanceof Error && (err.name === "TimeoutError" || err.name === "AbortError")) {
+                    throw new ManagementError_js_1.ManagementError({
+                        message: "ManagementClient: token request timed out",
+                        statusCode: 408,
+                    });
+                }
+                throw err;
+            }
+            if (!response.ok) {
+                // Read the body exactly once. `response.json()` followed by `response.text()` throws
+                // "Body has already been read", which would swallow non-JSON error payloads (e.g. proxy
+                // or WAF 502s). Read text, then attempt to parse it as JSON.
+                const raw = yield response.text().catch(() => "");
+                let errorBody;
+                try {
+                    errorBody = raw ? JSON.parse(raw) : response.statusText;
+                }
+                catch (_b) {
+                    errorBody = raw || response.statusText;
+                }
+                throw new ManagementError_js_1.ManagementError({
+                    message: "ManagementClient: token request failed",
+                    statusCode: response.status,
+                    body: errorBody,
+                });
+            }
+            const json = (yield response.json());
+            return {
+                accessToken: json.access_token,
+                expiresAt: Date.now() + json.expires_in * 1000,
+            };
+        });
+    }
+    buildClientAssertion(domain, clientId) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const { clientAssertionSigningKey, clientAssertionSigningAlg = "RS256" } = this
+                .options;
+            const key = yield (0, jose_1.importPKCS8)(clientAssertionSigningKey, clientAssertionSigningAlg);
+            const now = Math.floor(Date.now() / 1000);
+            return new jose_1.SignJWT({})
+                .setProtectedHeader({ alg: clientAssertionSigningAlg })
+                .setIssuedAt(now)
+                .setIssuer(clientId)
+                .setSubject(clientId)
+                .setAudience(`https://${domain}/`)
+                .setExpirationTime(now + 180) // 3 min lifetime
+                .setJti(crypto.randomUUID())
+                .sign(key);
+        });
+    }
+    buildTelemetryHeader() {
+        var _a;
+        const opts = this.options;
+        if (opts.telemetry === false)
+            return null;
+        const nodeAuth0Info = (0, utils_js_1.generateClientInfo)();
+        const info = opts.clientInfo
+            ? { name: opts.clientInfo.name, version: String((_a = opts.clientInfo.version) !== null && _a !== void 0 ? _a : nodeAuth0Info.version) }
+            : { name: nodeAuth0Info.name, version: nodeAuth0Info.version };
+        // NOTE: auth0-auth-js TelemetryConfig does not support env fields.
+        // The runtime fingerprint (env.node / env.cloudflare-workers) present in the
+        // original node-auth0 Auth0-Client header is intentionally omitted here.
+        // This is a known, accepted delta vs the pre-v7 token request telemetry shape.
+        // Use jose's base64url encoder for runtime portability (Buffer is Node-only).
+        return jose_1.base64url.encode(new TextEncoder().encode(JSON.stringify(info)));
+    }
 }
 exports.TokenProvider = TokenProvider;

package/dist/cjs/utils.d.ts

@@ -5,21 +5,3 @@ export declare const generateClientInfo: () => {
         [x: string]: string;
     };
 };
-/**
- * @private
- */
-export declare const mtlsPrefix = "mtls";
-type SyncGetter<T> = () => T;
-type AsyncGetter<T> = () => Promise<T>;
-/**
- * Resolves a value that can be a static value, a synchronous function, or an asynchronous function.
- *
- * @template T - The type of the value to be resolved.
- * @param {T | SyncGetter<T> | AsyncGetter<T>} value - The value to be resolved. It can be:
- *   - A static value of type T.
- *   - A synchronous function that returns a value of type T.
- *   - An asynchronous function that returns a Promise of type T.
- * @returns {Promise<T>} A promise that resolves to the value of type T.
- */
-export declare const resolveValueToPromise: <T>(value: T | SyncGetter<T> | AsyncGetter<T>) => Promise<T>;
-export {};

package/dist/cjs/utils.js

@@ -1,15 +1,6 @@
 "use strict";
-var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
-    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
-    return new (P || (P = Promise))(function (resolve, reject) {
-        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
-        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
-        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
-        step((generator = generator.apply(thisArg, _arguments || [])).next());
-    });
-};
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.resolveValueToPromise = exports.mtlsPrefix = exports.generateClientInfo = void 0;
+exports.generateClientInfo = void 0;
 const version_js_1 = require("./management/version.js");
 const index_js_1 = require("./management/core/index.js");
 const generateClientInfo = () => {
@@ -26,25 +17,3 @@ const generateClientInfo = () => {
     };
 };
 exports.generateClientInfo = generateClientInfo;
-/**
- * @private
- */
-exports.mtlsPrefix = "mtls";
-/**
- * Resolves a value that can be a static value, a synchronous function, or an asynchronous function.
- *
- * @template T - The type of the value to be resolved.
- * @param {T | SyncGetter<T> | AsyncGetter<T>} value - The value to be resolved. It can be:
- *   - A static value of type T.
- *   - A synchronous function that returns a value of type T.
- *   - An asynchronous function that returns a Promise of type T.
- * @returns {Promise<T>} A promise that resolves to the value of type T.
- */
-const resolveValueToPromise = (value) => __awaiter(void 0, void 0, void 0, function* () {
-    if (typeof value === "function") {
-        const result = value(); // Call the function
-        return result instanceof Promise ? result : Promise.resolve(result); // Handle sync/async
-    }
-    return Promise.resolve(value); // Static value
-});
-exports.resolveValueToPromise = resolveValueToPromise;

package/dist/esm/index.d.mts

@@ -1,6 +1,4 @@
 export * from "./management/index.mjs";
-export * from "./auth/index.mjs";
-export * from "./userinfo/index.mjs";
 export * from "./lib/errors.mjs";
 export * from "./lib/models.mjs";
 export * from "./lib/httpResponseHeadersUtils.mjs";

package/dist/esm/index.mjs

@@ -1,6 +1,4 @@
 export * from "./management/index.mjs";
-export * from "./auth/index.mjs";
-export * from "./userinfo/index.mjs";
 export * from "./lib/errors.mjs";
 export * from "./lib/models.mjs";
 export * from "./lib/httpResponseHeadersUtils.mjs";