aws-delivlib 14.4.2 → 14.4.3

package/lib/publishing/github/node_modules/@octokit/auth-oauth-device/dist-node/index.js

@@ -8,9 +8,9 @@ var oauthMethods = require('@octokit/oauth-methods');
 
 async function getOAuthAccessToken(state, options) {
   const cachedAuthentication = getCachedAuthentication(state, options.auth);
-  if (cachedAuthentication) return cachedAuthentication; // Step 1: Request device and user codes
+  if (cachedAuthentication) return cachedAuthentication;
+  // Step 1: Request device and user codes
   // https://docs.github.com/en/developers/apps/authorizing-oauth-apps#step-1-app-requests-the-device-and-user-verification-codes-from-github
-
   const {
     data: verification
   } = await oauthMethods.createDeviceCode({
@@ -19,48 +19,45 @@ async function getOAuthAccessToken(state, options) {
     request: options.request || state.request,
     // @ts-expect-error the extra code to make TS happy is not worth it
     scopes: options.auth.scopes || state.scopes
-  }); // Step 2: User must enter the user code on https://github.com/login/device
+  });
+  // Step 2: User must enter the user code on https://github.com/login/device
   // See https://docs.github.com/en/developers/apps/authorizing-oauth-apps#step-2-prompt-the-user-to-enter-the-user-code-in-a-browser
-
-  await state.onVerification(verification); // Step 3: Exchange device code for access token
+  await state.onVerification(verification);
+  // Step 3: Exchange device code for access token
   // See https://docs.github.com/en/developers/apps/authorizing-oauth-apps#step-3-app-polls-github-to-check-if-the-user-authorized-the-device
-
   const authentication = await waitForAccessToken(options.request || state.request, state.clientId, state.clientType, verification);
   state.authentication = authentication;
   return authentication;
 }
-
 function getCachedAuthentication(state, auth) {
   if (auth.refresh === true) return false;
   if (!state.authentication) return false;
-
   if (state.clientType === "github-app") {
     return state.authentication;
   }
-
   const authentication = state.authentication;
   const newScope = ("scopes" in auth && auth.scopes || state.scopes).join(" ");
   const currentScope = authentication.scopes.join(" ");
   return newScope === currentScope ? authentication : false;
 }
-
 async function wait(seconds) {
   await new Promise(resolve => setTimeout(resolve, seconds * 1000));
 }
-
 async function waitForAccessToken(request, clientId, clientType, verification) {
   try {
     const options = {
       clientId,
       request,
       code: verification.device_code
-    }; // WHY TYPESCRIPT WHY ARE YOU DOING THIS TO ME
-
+    };
+    // WHY TYPESCRIPT WHY ARE YOU DOING THIS TO ME
     const {
       authentication
-    } = clientType === "oauth-app" ? await oauthMethods.exchangeDeviceCode({ ...options,
+    } = clientType === "oauth-app" ? await oauthMethods.exchangeDeviceCode({
+      ...options,
       clientType: "oauth-app"
-    }) : await oauthMethods.exchangeDeviceCode({ ...options,
+    }) : await oauthMethods.exchangeDeviceCode({
+      ...options,
       clientType: "github-app"
     });
     return {
@@ -71,20 +68,17 @@ async function waitForAccessToken(request, clientId, clientType, verification) {
   } catch (error) {
     // istanbul ignore if
     // @ts-ignore
-    if (!error.response) throw error; // @ts-ignore
-
+    if (!error.response) throw error;
+    // @ts-ignore
     const errorType = error.response.data.error;
-
     if (errorType === "authorization_pending") {
       await wait(verification.interval);
       return waitForAccessToken(request, clientId, clientType, verification);
     }
-
     if (errorType === "slow_down") {
       await wait(verification.interval + 5);
       return waitForAccessToken(request, clientId, clientType, verification);
     }
-
     throw error;
   }
 }
@@ -96,12 +90,11 @@ async function auth(state, authOptions) {
 }
 
 async function hook(state, request, route, parameters) {
-  let endpoint = request.endpoint.merge(route, parameters); // Do not intercept request to retrieve codes or token
-
+  let endpoint = request.endpoint.merge(route, parameters);
+  // Do not intercept request to retrieve codes or token
   if (/\/login\/(oauth\/access_token|device\/code)$/.test(endpoint.url)) {
     return request(endpoint);
   }
-
   const {
     token
   } = await getOAuthAccessToken(state, {
@@ -114,7 +107,7 @@ async function hook(state, request, route, parameters) {
   return request(endpoint);
 }
 
-const VERSION = "4.0.3";
+const VERSION = "4.0.4";
 
 function createOAuthDeviceAuth(options) {
   const requestWithDefaults = options.request || request.request.defaults({
@@ -126,24 +119,23 @@ function createOAuthDeviceAuth(options) {
     request: request$1 = requestWithDefaults,
     ...otherOptions
   } = options;
-  const state = options.clientType === "github-app" ? { ...otherOptions,
+  const state = options.clientType === "github-app" ? {
+    ...otherOptions,
     clientType: "github-app",
     request: request$1
-  } : { ...otherOptions,
+  } : {
+    ...otherOptions,
     clientType: "oauth-app",
     request: request$1,
     scopes: options.scopes || []
   };
-
   if (!options.clientId) {
     throw new Error('[@octokit/auth-oauth-device] "clientId" option must be set (https://github.com/octokit/auth-oauth-device.js#usage)');
   }
-
   if (!options.onVerification) {
     throw new Error('[@octokit/auth-oauth-device] "onVerification" option must be a function (https://github.com/octokit/auth-oauth-device.js#usage)');
-  } // @ts-ignore too much for tsc / ts-jest ¯\_(ツ)_/¯
-
-
+  }
+  // @ts-ignore too much for tsc / ts-jest ¯\_(ツ)_/¯
   return Object.assign(auth.bind(null, state), {
     hook: hook.bind(null, state)
   });

package/lib/publishing/github/node_modules/@octokit/auth-oauth-device/dist-node/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sources":["../dist-src/get-oauth-access-token.js","../dist-src/auth.js","../dist-src/hook.js","../dist-src/version.js","../dist-src/index.js"],"sourcesContent":["import { createDeviceCode, exchangeDeviceCode } from \"@octokit/oauth-methods\";\nexport async function getOAuthAccessToken(state, options) {\n    const cachedAuthentication = getCachedAuthentication(state, options.auth);\n    if (cachedAuthentication)\n        return cachedAuthentication;\n    // Step 1: Request device and user codes\n    // https://docs.github.com/en/developers/apps/authorizing-oauth-apps#step-1-app-requests-the-device-and-user-verification-codes-from-github\n    const { data: verification } = await createDeviceCode({\n        clientType: state.clientType,\n        clientId: state.clientId,\n        request: options.request || state.request,\n        // @ts-expect-error the extra code to make TS happy is not worth it\n        scopes: options.auth.scopes || state.scopes,\n    });\n    // Step 2: User must enter the user code on https://github.com/login/device\n    // See https://docs.github.com/en/developers/apps/authorizing-oauth-apps#step-2-prompt-the-user-to-enter-the-user-code-in-a-browser\n    await state.onVerification(verification);\n    // Step 3: Exchange device code for access token\n    // See https://docs.github.com/en/developers/apps/authorizing-oauth-apps#step-3-app-polls-github-to-check-if-the-user-authorized-the-device\n    const authentication = await waitForAccessToken(options.request || state.request, state.clientId, state.clientType, verification);\n    state.authentication = authentication;\n    return authentication;\n}\nfunction getCachedAuthentication(state, auth) {\n    if (auth.refresh === true)\n        return false;\n    if (!state.authentication)\n        return false;\n    if (state.clientType === \"github-app\") {\n        return state.authentication;\n    }\n    const authentication = state.authentication;\n    const newScope = ((\"scopes\" in auth && auth.scopes) || state.scopes).join(\" \");\n    const currentScope = authentication.scopes.join(\" \");\n    return newScope === currentScope ? authentication : false;\n}\nasync function wait(seconds) {\n    await new Promise((resolve) => setTimeout(resolve, seconds * 1000));\n}\nasync function waitForAccessToken(request, clientId, clientType, verification) {\n    try {\n        const options = {\n            clientId,\n            request,\n            code: verification.device_code,\n        };\n        // WHY TYPESCRIPT WHY ARE YOU DOING THIS TO ME\n        const { authentication } = clientType === \"oauth-app\"\n            ? await exchangeDeviceCode({\n                ...options,\n                clientType: \"oauth-app\",\n            })\n            : await exchangeDeviceCode({\n                ...options,\n                clientType: \"github-app\",\n            });\n        return {\n            type: \"token\",\n            tokenType: \"oauth\",\n            ...authentication,\n        };\n    }\n    catch (error) {\n        // istanbul ignore if\n        // @ts-ignore\n        if (!error.response)\n            throw error;\n        // @ts-ignore\n        const errorType = error.response.data.error;\n        if (errorType === \"authorization_pending\") {\n            await wait(verification.interval);\n            return waitForAccessToken(request, clientId, clientType, verification);\n        }\n        if (errorType === \"slow_down\") {\n            await wait(verification.interval + 5);\n            return waitForAccessToken(request, clientId, clientType, verification);\n        }\n        throw error;\n    }\n}\n","import { getOAuthAccessToken } from \"./get-oauth-access-token\";\nexport async function auth(state, authOptions) {\n    return getOAuthAccessToken(state, {\n        auth: authOptions,\n    });\n}\n","import { getOAuthAccessToken } from \"./get-oauth-access-token\";\nexport async function hook(state, request, route, parameters) {\n    let endpoint = request.endpoint.merge(route, parameters);\n    // Do not intercept request to retrieve codes or token\n    if (/\\/login\\/(oauth\\/access_token|device\\/code)$/.test(endpoint.url)) {\n        return request(endpoint);\n    }\n    const { token } = await getOAuthAccessToken(state, {\n        request,\n        auth: { type: \"oauth\" },\n    });\n    endpoint.headers.authorization = `token ${token}`;\n    return request(endpoint);\n}\n","export const VERSION = \"4.0.3\";\n","import { getUserAgent } from \"universal-user-agent\";\nimport { request as octokitRequest } from \"@octokit/request\";\nimport { auth } from \"./auth\";\nimport { hook } from \"./hook\";\nimport { VERSION } from \"./version\";\nexport function createOAuthDeviceAuth(options) {\n    const requestWithDefaults = options.request ||\n        octokitRequest.defaults({\n            headers: {\n                \"user-agent\": `octokit-auth-oauth-device.js/${VERSION} ${getUserAgent()}`,\n            },\n        });\n    const { request = requestWithDefaults, ...otherOptions } = options;\n    const state = options.clientType === \"github-app\"\n        ? {\n            ...otherOptions,\n            clientType: \"github-app\",\n            request,\n        }\n        : {\n            ...otherOptions,\n            clientType: \"oauth-app\",\n            request,\n            scopes: options.scopes || [],\n        };\n    if (!options.clientId) {\n        throw new Error('[@octokit/auth-oauth-device] \"clientId\" option must be set (https://github.com/octokit/auth-oauth-device.js#usage)');\n    }\n    if (!options.onVerification) {\n        throw new Error('[@octokit/auth-oauth-device] \"onVerification\" option must be a function (https://github.com/octokit/auth-oauth-device.js#usage)');\n    }\n    // @ts-ignore too much for tsc / ts-jest ¯\\_(ツ)_/¯\n    return Object.assign(auth.bind(null, state), {\n        hook: hook.bind(null, state),\n    });\n}\n"],"names":["getOAuthAccessToken","state","options","cachedAuthentication","getCachedAuthentication","auth","data","verification","createDeviceCode","clientType","clientId","request","scopes","onVerification","authentication","waitForAccessToken","refresh","newScope","join","currentScope","wait","seconds","Promise","resolve","setTimeout","code","device_code","exchangeDeviceCode","type","tokenType","error","response","errorType","interval","authOptions","hook","route","parameters","endpoint","merge","test","url","token","headers","authorization","VERSION","createOAuthDeviceAuth","requestWithDefaults","octokitRequest","defaults","getUserAgent","otherOptions","Error","Object","assign","bind"],"mappings":";;;;;;;;AACO,eAAeA,mBAAf,CAAmCC,KAAnC,EAA0CC,OAA1C,EAAmD;EACtD,MAAMC,oBAAoB,GAAGC,uBAAuB,CAACH,KAAD,EAAQC,OAAO,CAACG,IAAhB,CAApD;EACA,IAAIF,oBAAJ,EACI,OAAOA,oBAAP,CAHkD;;;EAMtD,MAAM;IAAEG,IAAI,EAAEC;MAAiB,MAAMC,6BAAgB,CAAC;IAClDC,UAAU,EAAER,KAAK,CAACQ,UADgC;IAElDC,QAAQ,EAAET,KAAK,CAACS,QAFkC;IAGlDC,OAAO,EAAET,OAAO,CAACS,OAAR,IAAmBV,KAAK,CAACU,OAHgB;;IAKlDC,MAAM,EAAEV,OAAO,CAACG,IAAR,CAAaO,MAAb,IAAuBX,KAAK,CAACW;GALY,CAArD,CANsD;;;EAetD,MAAMX,KAAK,CAACY,cAAN,CAAqBN,YAArB,CAAN,CAfsD;;;EAkBtD,MAAMO,cAAc,GAAG,MAAMC,kBAAkB,CAACb,OAAO,CAACS,OAAR,IAAmBV,KAAK,CAACU,OAA1B,EAAmCV,KAAK,CAACS,QAAzC,EAAmDT,KAAK,CAACQ,UAAzD,EAAqEF,YAArE,CAA/C;EACAN,KAAK,CAACa,cAAN,GAAuBA,cAAvB;EACA,OAAOA,cAAP;AACH;;AACD,SAASV,uBAAT,CAAiCH,KAAjC,EAAwCI,IAAxC,EAA8C;EAC1C,IAAIA,IAAI,CAACW,OAAL,KAAiB,IAArB,EACI,OAAO,KAAP;EACJ,IAAI,CAACf,KAAK,CAACa,cAAX,EACI,OAAO,KAAP;;EACJ,IAAIb,KAAK,CAACQ,UAAN,KAAqB,YAAzB,EAAuC;IACnC,OAAOR,KAAK,CAACa,cAAb;;;EAEJ,MAAMA,cAAc,GAAGb,KAAK,CAACa,cAA7B;EACA,MAAMG,QAAQ,GAAG,CAAE,YAAYZ,IAAZ,IAAoBA,IAAI,CAACO,MAA1B,IAAqCX,KAAK,CAACW,MAA5C,EAAoDM,IAApD,CAAyD,GAAzD,CAAjB;EACA,MAAMC,YAAY,GAAGL,cAAc,CAACF,MAAf,CAAsBM,IAAtB,CAA2B,GAA3B,CAArB;EACA,OAAOD,QAAQ,KAAKE,YAAb,GAA4BL,cAA5B,GAA6C,KAApD;AACH;;AACD,eAAeM,IAAf,CAAoBC,OAApB,EAA6B;EACzB,MAAM,IAAIC,OAAJ,CAAaC,OAAD,IAAaC,UAAU,CAACD,OAAD,EAAUF,OAAO,GAAG,IAApB,CAAnC,CAAN;AACH;;AACD,eAAeN,kBAAf,CAAkCJ,OAAlC,EAA2CD,QAA3C,EAAqDD,UAArD,EAAiEF,YAAjE,EAA+E;EAC3E,IAAI;IACA,MAAML,OAAO,GAAG;MACZQ,QADY;MAEZC,OAFY;MAGZc,IAAI,EAAElB,YAAY,CAACmB;KAHvB,CADA;;IAOA,MAAM;MAAEZ;QAAmBL,UAAU,KAAK,WAAf,GACrB,MAAMkB,+BAAkB,CAAC,EACvB,GAAGzB,OADoB;MAEvBO,UAAU,EAAE;KAFU,CADH,GAKrB,MAAMkB,+BAAkB,CAAC,EACvB,GAAGzB,OADoB;MAEvBO,UAAU,EAAE;KAFU,CAL9B;IASA,OAAO;MACHmB,IAAI,EAAE,OADH;MAEHC,SAAS,EAAE,OAFR;MAGH,GAAGf;KAHP;GAhBJ,CAsBA,OAAOgB,KAAP,EAAc;;;IAGV,IAAI,CAACA,KAAK,CAACC,QAAX,EACI,MAAMD,KAAN,CAJM;;IAMV,MAAME,SAAS,GAAGF,KAAK,CAACC,QAAN,CAAezB,IAAf,CAAoBwB,KAAtC;;IACA,IAAIE,SAAS,KAAK,uBAAlB,EAA2C;MACvC,MAAMZ,IAAI,CAACb,YAAY,CAAC0B,QAAd,CAAV;MACA,OAAOlB,kBAAkB,CAACJ,OAAD,EAAUD,QAAV,EAAoBD,UAApB,EAAgCF,YAAhC,CAAzB;;;IAEJ,IAAIyB,SAAS,KAAK,WAAlB,EAA+B;MAC3B,MAAMZ,IAAI,CAACb,YAAY,CAAC0B,QAAb,GAAwB,CAAzB,CAAV;MACA,OAAOlB,kBAAkB,CAACJ,OAAD,EAAUD,QAAV,EAAoBD,UAApB,EAAgCF,YAAhC,CAAzB;;;IAEJ,MAAMuB,KAAN;;AAEP;;AC9EM,eAAezB,IAAf,CAAoBJ,KAApB,EAA2BiC,WAA3B,EAAwC;EAC3C,OAAOlC,mBAAmB,CAACC,KAAD,EAAQ;IAC9BI,IAAI,EAAE6B;GADgB,CAA1B;AAGH;;ACJM,eAAeC,IAAf,CAAoBlC,KAApB,EAA2BU,OAA3B,EAAoCyB,KAApC,EAA2CC,UAA3C,EAAuD;EAC1D,IAAIC,QAAQ,GAAG3B,OAAO,CAAC2B,QAAR,CAAiBC,KAAjB,CAAuBH,KAAvB,EAA8BC,UAA9B,CAAf,CAD0D;;EAG1D,IAAI,+CAA+CG,IAA/C,CAAoDF,QAAQ,CAACG,GAA7D,CAAJ,EAAuE;IACnE,OAAO9B,OAAO,CAAC2B,QAAD,CAAd;;;EAEJ,MAAM;IAAEI;MAAU,MAAM1C,mBAAmB,CAACC,KAAD,EAAQ;IAC/CU,OAD+C;IAE/CN,IAAI,EAAE;MAAEuB,IAAI,EAAE;;GAFyB,CAA3C;EAIAU,QAAQ,CAACK,OAAT,CAAiBC,aAAjB,GAAkC,SAAQF,KAAM,EAAhD;EACA,OAAO/B,OAAO,CAAC2B,QAAD,CAAd;AACH;;ACbM,MAAMO,OAAO,GAAG,mBAAhB;;ACKA,SAASC,qBAAT,CAA+B5C,OAA/B,EAAwC;EAC3C,MAAM6C,mBAAmB,GAAG7C,OAAO,CAACS,OAAR,IACxBqC,eAAc,CAACC,QAAf,CAAwB;IACpBN,OAAO,EAAE;MACL,cAAe,gCAA+BE,OAAQ,IAAGK,+BAAY,EAAG;;GAFhF,CADJ;EAMA,MAAM;aAAEvC,SAAO,GAAGoC,mBAAZ;IAAiC,GAAGI;MAAiBjD,OAA3D;EACA,MAAMD,KAAK,GAAGC,OAAO,CAACO,UAAR,KAAuB,YAAvB,GACR,EACE,GAAG0C,YADL;IAEE1C,UAAU,EAAE,YAFd;aAGEE;GAJM,GAMR,EACE,GAAGwC,YADL;IAEE1C,UAAU,EAAE,WAFd;aAGEE,SAHF;IAIEC,MAAM,EAAEV,OAAO,CAACU,MAAR,IAAkB;GAVlC;;EAYA,IAAI,CAACV,OAAO,CAACQ,QAAb,EAAuB;IACnB,MAAM,IAAI0C,KAAJ,CAAU,oHAAV,CAAN;;;EAEJ,IAAI,CAAClD,OAAO,CAACW,cAAb,EAA6B;IACzB,MAAM,IAAIuC,KAAJ,CAAU,iIAAV,CAAN;GAxBuC;;;EA2B3C,OAAOC,MAAM,CAACC,MAAP,CAAcjD,IAAI,CAACkD,IAAL,CAAU,IAAV,EAAgBtD,KAAhB,CAAd,EAAsC;IACzCkC,IAAI,EAAEA,IAAI,CAACoB,IAAL,CAAU,IAAV,EAAgBtD,KAAhB;GADH,CAAP;AAGH;;;;"}
+{"version":3,"file":"index.js","sources":["../dist-src/get-oauth-access-token.js","../dist-src/auth.js","../dist-src/hook.js","../dist-src/version.js","../dist-src/index.js"],"sourcesContent":["import { createDeviceCode, exchangeDeviceCode } from \"@octokit/oauth-methods\";\nexport async function getOAuthAccessToken(state, options) {\n    const cachedAuthentication = getCachedAuthentication(state, options.auth);\n    if (cachedAuthentication)\n        return cachedAuthentication;\n    // Step 1: Request device and user codes\n    // https://docs.github.com/en/developers/apps/authorizing-oauth-apps#step-1-app-requests-the-device-and-user-verification-codes-from-github\n    const { data: verification } = await createDeviceCode({\n        clientType: state.clientType,\n        clientId: state.clientId,\n        request: options.request || state.request,\n        // @ts-expect-error the extra code to make TS happy is not worth it\n        scopes: options.auth.scopes || state.scopes,\n    });\n    // Step 2: User must enter the user code on https://github.com/login/device\n    // See https://docs.github.com/en/developers/apps/authorizing-oauth-apps#step-2-prompt-the-user-to-enter-the-user-code-in-a-browser\n    await state.onVerification(verification);\n    // Step 3: Exchange device code for access token\n    // See https://docs.github.com/en/developers/apps/authorizing-oauth-apps#step-3-app-polls-github-to-check-if-the-user-authorized-the-device\n    const authentication = await waitForAccessToken(options.request || state.request, state.clientId, state.clientType, verification);\n    state.authentication = authentication;\n    return authentication;\n}\nfunction getCachedAuthentication(state, auth) {\n    if (auth.refresh === true)\n        return false;\n    if (!state.authentication)\n        return false;\n    if (state.clientType === \"github-app\") {\n        return state.authentication;\n    }\n    const authentication = state.authentication;\n    const newScope = ((\"scopes\" in auth && auth.scopes) || state.scopes).join(\" \");\n    const currentScope = authentication.scopes.join(\" \");\n    return newScope === currentScope ? authentication : false;\n}\nasync function wait(seconds) {\n    await new Promise((resolve) => setTimeout(resolve, seconds * 1000));\n}\nasync function waitForAccessToken(request, clientId, clientType, verification) {\n    try {\n        const options = {\n            clientId,\n            request,\n            code: verification.device_code,\n        };\n        // WHY TYPESCRIPT WHY ARE YOU DOING THIS TO ME\n        const { authentication } = clientType === \"oauth-app\"\n            ? await exchangeDeviceCode({\n                ...options,\n                clientType: \"oauth-app\",\n            })\n            : await exchangeDeviceCode({\n                ...options,\n                clientType: \"github-app\",\n            });\n        return {\n            type: \"token\",\n            tokenType: \"oauth\",\n            ...authentication,\n        };\n    }\n    catch (error) {\n        // istanbul ignore if\n        // @ts-ignore\n        if (!error.response)\n            throw error;\n        // @ts-ignore\n        const errorType = error.response.data.error;\n        if (errorType === \"authorization_pending\") {\n            await wait(verification.interval);\n            return waitForAccessToken(request, clientId, clientType, verification);\n        }\n        if (errorType === \"slow_down\") {\n            await wait(verification.interval + 5);\n            return waitForAccessToken(request, clientId, clientType, verification);\n        }\n        throw error;\n    }\n}\n","import { getOAuthAccessToken } from \"./get-oauth-access-token\";\nexport async function auth(state, authOptions) {\n    return getOAuthAccessToken(state, {\n        auth: authOptions,\n    });\n}\n","import { getOAuthAccessToken } from \"./get-oauth-access-token\";\nexport async function hook(state, request, route, parameters) {\n    let endpoint = request.endpoint.merge(route, parameters);\n    // Do not intercept request to retrieve codes or token\n    if (/\\/login\\/(oauth\\/access_token|device\\/code)$/.test(endpoint.url)) {\n        return request(endpoint);\n    }\n    const { token } = await getOAuthAccessToken(state, {\n        request,\n        auth: { type: \"oauth\" },\n    });\n    endpoint.headers.authorization = `token ${token}`;\n    return request(endpoint);\n}\n","export const VERSION = \"4.0.4\";\n","import { getUserAgent } from \"universal-user-agent\";\nimport { request as octokitRequest } from \"@octokit/request\";\nimport { auth } from \"./auth\";\nimport { hook } from \"./hook\";\nimport { VERSION } from \"./version\";\nexport function createOAuthDeviceAuth(options) {\n    const requestWithDefaults = options.request ||\n        octokitRequest.defaults({\n            headers: {\n                \"user-agent\": `octokit-auth-oauth-device.js/${VERSION} ${getUserAgent()}`,\n            },\n        });\n    const { request = requestWithDefaults, ...otherOptions } = options;\n    const state = options.clientType === \"github-app\"\n        ? {\n            ...otherOptions,\n            clientType: \"github-app\",\n            request,\n        }\n        : {\n            ...otherOptions,\n            clientType: \"oauth-app\",\n            request,\n            scopes: options.scopes || [],\n        };\n    if (!options.clientId) {\n        throw new Error('[@octokit/auth-oauth-device] \"clientId\" option must be set (https://github.com/octokit/auth-oauth-device.js#usage)');\n    }\n    if (!options.onVerification) {\n        throw new Error('[@octokit/auth-oauth-device] \"onVerification\" option must be a function (https://github.com/octokit/auth-oauth-device.js#usage)');\n    }\n    // @ts-ignore too much for tsc / ts-jest ¯\\_(ツ)_/¯\n    return Object.assign(auth.bind(null, state), {\n        hook: hook.bind(null, state),\n    });\n}\n"],"names":["getOAuthAccessToken","state","options","cachedAuthentication","getCachedAuthentication","auth","data","verification","createDeviceCode","clientType","clientId","request","scopes","onVerification","authentication","waitForAccessToken","refresh","newScope","join","currentScope","wait","seconds","Promise","resolve","setTimeout","code","device_code","exchangeDeviceCode","type","tokenType","error","response","errorType","interval","authOptions","hook","route","parameters","endpoint","merge","test","url","token","headers","authorization","VERSION","createOAuthDeviceAuth","requestWithDefaults","octokitRequest","defaults","getUserAgent","otherOptions","Error","Object","assign","bind"],"mappings":";;;;;;;;AACO,eAAeA,mBAAmB,CAACC,KAAK,EAAEC,OAAO,EAAE;EACtD,MAAMC,oBAAoB,GAAGC,uBAAuB,CAACH,KAAK,EAAEC,OAAO,CAACG,IAAI,CAAC;EACzE,IAAIF,oBAAoB,EACpB,OAAOA,oBAAoB;;;EAG/B,MAAM;IAAEG,IAAI,EAAEC;GAAc,GAAG,MAAMC,6BAAgB,CAAC;IAClDC,UAAU,EAAER,KAAK,CAACQ,UAAU;IAC5BC,QAAQ,EAAET,KAAK,CAACS,QAAQ;IACxBC,OAAO,EAAET,OAAO,CAACS,OAAO,IAAIV,KAAK,CAACU,OAAO;;IAEzCC,MAAM,EAAEV,OAAO,CAACG,IAAI,CAACO,MAAM,IAAIX,KAAK,CAACW;GACxC,CAAC;;;EAGF,MAAMX,KAAK,CAACY,cAAc,CAACN,YAAY,CAAC;;;EAGxC,MAAMO,cAAc,GAAG,MAAMC,kBAAkB,CAACb,OAAO,CAACS,OAAO,IAAIV,KAAK,CAACU,OAAO,EAAEV,KAAK,CAACS,QAAQ,EAAET,KAAK,CAACQ,UAAU,EAAEF,YAAY,CAAC;EACjIN,KAAK,CAACa,cAAc,GAAGA,cAAc;EACrC,OAAOA,cAAc;AACzB;AACA,SAASV,uBAAuB,CAACH,KAAK,EAAEI,IAAI,EAAE;EAC1C,IAAIA,IAAI,CAACW,OAAO,KAAK,IAAI,EACrB,OAAO,KAAK;EAChB,IAAI,CAACf,KAAK,CAACa,cAAc,EACrB,OAAO,KAAK;EAChB,IAAIb,KAAK,CAACQ,UAAU,KAAK,YAAY,EAAE;IACnC,OAAOR,KAAK,CAACa,cAAc;;EAE/B,MAAMA,cAAc,GAAGb,KAAK,CAACa,cAAc;EAC3C,MAAMG,QAAQ,GAAG,CAAE,QAAQ,IAAIZ,IAAI,IAAIA,IAAI,CAACO,MAAM,IAAKX,KAAK,CAACW,MAAM,EAAEM,IAAI,CAAC,GAAG,CAAC;EAC9E,MAAMC,YAAY,GAAGL,cAAc,CAACF,MAAM,CAACM,IAAI,CAAC,GAAG,CAAC;EACpD,OAAOD,QAAQ,KAAKE,YAAY,GAAGL,cAAc,GAAG,KAAK;AAC7D;AACA,eAAeM,IAAI,CAACC,OAAO,EAAE;EACzB,MAAM,IAAIC,OAAO,CAAEC,OAAO,IAAKC,UAAU,CAACD,OAAO,EAAEF,OAAO,GAAG,IAAI,CAAC,CAAC;AACvE;AACA,eAAeN,kBAAkB,CAACJ,OAAO,EAAED,QAAQ,EAAED,UAAU,EAAEF,YAAY,EAAE;EAC3E,IAAI;IACA,MAAML,OAAO,GAAG;MACZQ,QAAQ;MACRC,OAAO;MACPc,IAAI,EAAElB,YAAY,CAACmB;KACtB;;IAED,MAAM;MAAEZ;KAAgB,GAAGL,UAAU,KAAK,WAAW,GAC/C,MAAMkB,+BAAkB,CAAC;MACvB,GAAGzB,OAAO;MACVO,UAAU,EAAE;KACf,CAAC,GACA,MAAMkB,+BAAkB,CAAC;MACvB,GAAGzB,OAAO;MACVO,UAAU,EAAE;KACf,CAAC;IACN,OAAO;MACHmB,IAAI,EAAE,OAAO;MACbC,SAAS,EAAE,OAAO;MAClB,GAAGf;KACN;GACJ,CACD,OAAOgB,KAAK,EAAE;;;IAGV,IAAI,CAACA,KAAK,CAACC,QAAQ,EACf,MAAMD,KAAK;;IAEf,MAAME,SAAS,GAAGF,KAAK,CAACC,QAAQ,CAACzB,IAAI,CAACwB,KAAK;IAC3C,IAAIE,SAAS,KAAK,uBAAuB,EAAE;MACvC,MAAMZ,IAAI,CAACb,YAAY,CAAC0B,QAAQ,CAAC;MACjC,OAAOlB,kBAAkB,CAACJ,OAAO,EAAED,QAAQ,EAAED,UAAU,EAAEF,YAAY,CAAC;;IAE1E,IAAIyB,SAAS,KAAK,WAAW,EAAE;MAC3B,MAAMZ,IAAI,CAACb,YAAY,CAAC0B,QAAQ,GAAG,CAAC,CAAC;MACrC,OAAOlB,kBAAkB,CAACJ,OAAO,EAAED,QAAQ,EAAED,UAAU,EAAEF,YAAY,CAAC;;IAE1E,MAAMuB,KAAK;;AAEnB;;AC9EO,eAAezB,IAAI,CAACJ,KAAK,EAAEiC,WAAW,EAAE;EAC3C,OAAOlC,mBAAmB,CAACC,KAAK,EAAE;IAC9BI,IAAI,EAAE6B;GACT,CAAC;AACN;;ACJO,eAAeC,IAAI,CAAClC,KAAK,EAAEU,OAAO,EAAEyB,KAAK,EAAEC,UAAU,EAAE;EAC1D,IAAIC,QAAQ,GAAG3B,OAAO,CAAC2B,QAAQ,CAACC,KAAK,CAACH,KAAK,EAAEC,UAAU,CAAC;;EAExD,IAAI,8CAA8C,CAACG,IAAI,CAACF,QAAQ,CAACG,GAAG,CAAC,EAAE;IACnE,OAAO9B,OAAO,CAAC2B,QAAQ,CAAC;;EAE5B,MAAM;IAAEI;GAAO,GAAG,MAAM1C,mBAAmB,CAACC,KAAK,EAAE;IAC/CU,OAAO;IACPN,IAAI,EAAE;MAAEuB,IAAI,EAAE;;GACjB,CAAC;EACFU,QAAQ,CAACK,OAAO,CAACC,aAAa,GAAI,SAAQF,KAAM,EAAC;EACjD,OAAO/B,OAAO,CAAC2B,QAAQ,CAAC;AAC5B;;ACbO,MAAMO,OAAO,GAAG,mBAAmB;;ACKnC,SAASC,qBAAqB,CAAC5C,OAAO,EAAE;EAC3C,MAAM6C,mBAAmB,GAAG7C,OAAO,CAACS,OAAO,IACvCqC,eAAc,CAACC,QAAQ,CAAC;IACpBN,OAAO,EAAE;MACL,YAAY,EAAG,gCAA+BE,OAAQ,IAAGK,+BAAY,EAAG;;GAE/E,CAAC;EACN,MAAM;aAAEvC,SAAO,GAAGoC,mBAAmB;IAAE,GAAGI;GAAc,GAAGjD,OAAO;EAClE,MAAMD,KAAK,GAAGC,OAAO,CAACO,UAAU,KAAK,YAAY,GAC3C;IACE,GAAG0C,YAAY;IACf1C,UAAU,EAAE,YAAY;aACxBE;GACH,GACC;IACE,GAAGwC,YAAY;IACf1C,UAAU,EAAE,WAAW;aACvBE,SAAO;IACPC,MAAM,EAAEV,OAAO,CAACU,MAAM,IAAI;GAC7B;EACL,IAAI,CAACV,OAAO,CAACQ,QAAQ,EAAE;IACnB,MAAM,IAAI0C,KAAK,CAAC,oHAAoH,CAAC;;EAEzI,IAAI,CAAClD,OAAO,CAACW,cAAc,EAAE;IACzB,MAAM,IAAIuC,KAAK,CAAC,iIAAiI,CAAC;;;EAGtJ,OAAOC,MAAM,CAACC,MAAM,CAACjD,IAAI,CAACkD,IAAI,CAAC,IAAI,EAAEtD,KAAK,CAAC,EAAE;IACzCkC,IAAI,EAAEA,IAAI,CAACoB,IAAI,CAAC,IAAI,EAAEtD,KAAK;GAC9B,CAAC;AACN;;;;"}

package/lib/publishing/github/node_modules/@octokit/auth-oauth-device/dist-src/version.js

@@ -1 +1 @@
-export const VERSION = "4.0.3";
+export const VERSION = "4.0.4";

package/lib/publishing/github/node_modules/@octokit/auth-oauth-device/dist-types/types.d.ts

@@ -1,14 +1,14 @@
 import { RequestInterface, Route, EndpointOptions, RequestParameters, OctokitResponse } from "@octokit/types";
 import * as OAuthMethodsTypes from "@octokit/oauth-methods";
-export declare type ClientType = "oauth-app" | "github-app";
-export declare type OAuthAppStrategyOptions = {
+export type ClientType = "oauth-app" | "github-app";
+export type OAuthAppStrategyOptions = {
     clientId: string;
     clientType?: "oauth-app";
     onVerification: OnVerificationCallback;
     scopes?: string[];
     request?: RequestInterface;
 };
-export declare type GitHubAppStrategyOptions = {
+export type GitHubAppStrategyOptions = {
     clientId: string;
     clientType: "github-app";
     onVerification: OnVerificationCallback;
@@ -22,36 +22,36 @@ export interface GitHubAppAuthInterface {
     (options: GitHubAppAuthOptions): Promise<GitHubAppAuthentication | GitHubAppAuthenticationWithExpiration>;
     hook(request: RequestInterface, route: Route | EndpointOptions, parameters?: RequestParameters): Promise<OctokitResponse<any>>;
 }
-export declare type OAuthAppAuthOptions = {
+export type OAuthAppAuthOptions = {
     type: "oauth";
     scopes?: string[];
     refresh?: boolean;
 };
-export declare type GitHubAppAuthOptions = {
+export type GitHubAppAuthOptions = {
     type: "oauth";
     refresh?: boolean;
 };
-export declare type OAuthAppAuthentication = {
+export type OAuthAppAuthentication = {
     type: "token";
     tokenType: "oauth";
 } & Omit<OAuthMethodsTypes.OAuthAppAuthentication, "clientSecret">;
-export declare type GitHubAppAuthentication = {
+export type GitHubAppAuthentication = {
     type: "token";
     tokenType: "oauth";
 } & Omit<OAuthMethodsTypes.GitHubAppAuthentication, "clientSecret">;
-export declare type GitHubAppAuthenticationWithExpiration = {
+export type GitHubAppAuthenticationWithExpiration = {
     type: "token";
     tokenType: "oauth";
 } & Omit<OAuthMethodsTypes.GitHubAppAuthentication, "clientSecret">;
-export declare type Verification = {
+export type Verification = {
     device_code: string;
     user_code: string;
     verification_uri: string;
     expires_in: number;
     interval: number;
 };
-export declare type OnVerificationCallback = (verification: Verification) => any | Promise<any>;
-export declare type OAuthAppState = {
+export type OnVerificationCallback = (verification: Verification) => any | Promise<any>;
+export type OAuthAppState = {
     clientId: string;
     clientType: "oauth-app";
     onVerification: OnVerificationCallback;
@@ -59,7 +59,7 @@ export declare type OAuthAppState = {
     request: RequestInterface;
     authentication?: OAuthAppAuthentication;
 };
-export declare type GitHubAppState = {
+export type GitHubAppState = {
     clientId: string;
     clientType: "github-app";
     onVerification: OnVerificationCallback;

package/lib/publishing/github/node_modules/@octokit/auth-oauth-device/dist-types/version.d.ts

@@ -1 +1 @@
-export declare const VERSION = "4.0.3";
+export declare const VERSION = "4.0.4";

package/lib/publishing/github/node_modules/@octokit/auth-oauth-device/dist-web/index.js

@@ -102,7 +102,7 @@ async function hook(state, request, route, parameters) {
     return request(endpoint);
 }
 
-const VERSION = "4.0.3";
+const VERSION = "4.0.4";
 
 function createOAuthDeviceAuth(options) {
     const requestWithDefaults = options.request ||

package/lib/publishing/github/node_modules/@octokit/auth-oauth-device/dist-web/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sources":["../dist-src/get-oauth-access-token.js","../dist-src/auth.js","../dist-src/hook.js","../dist-src/version.js","../dist-src/index.js"],"sourcesContent":["import { createDeviceCode, exchangeDeviceCode } from \"@octokit/oauth-methods\";\nexport async function getOAuthAccessToken(state, options) {\n    const cachedAuthentication = getCachedAuthentication(state, options.auth);\n    if (cachedAuthentication)\n        return cachedAuthentication;\n    // Step 1: Request device and user codes\n    // https://docs.github.com/en/developers/apps/authorizing-oauth-apps#step-1-app-requests-the-device-and-user-verification-codes-from-github\n    const { data: verification } = await createDeviceCode({\n        clientType: state.clientType,\n        clientId: state.clientId,\n        request: options.request || state.request,\n        // @ts-expect-error the extra code to make TS happy is not worth it\n        scopes: options.auth.scopes || state.scopes,\n    });\n    // Step 2: User must enter the user code on https://github.com/login/device\n    // See https://docs.github.com/en/developers/apps/authorizing-oauth-apps#step-2-prompt-the-user-to-enter-the-user-code-in-a-browser\n    await state.onVerification(verification);\n    // Step 3: Exchange device code for access token\n    // See https://docs.github.com/en/developers/apps/authorizing-oauth-apps#step-3-app-polls-github-to-check-if-the-user-authorized-the-device\n    const authentication = await waitForAccessToken(options.request || state.request, state.clientId, state.clientType, verification);\n    state.authentication = authentication;\n    return authentication;\n}\nfunction getCachedAuthentication(state, auth) {\n    if (auth.refresh === true)\n        return false;\n    if (!state.authentication)\n        return false;\n    if (state.clientType === \"github-app\") {\n        return state.authentication;\n    }\n    const authentication = state.authentication;\n    const newScope = ((\"scopes\" in auth && auth.scopes) || state.scopes).join(\" \");\n    const currentScope = authentication.scopes.join(\" \");\n    return newScope === currentScope ? authentication : false;\n}\nasync function wait(seconds) {\n    await new Promise((resolve) => setTimeout(resolve, seconds * 1000));\n}\nasync function waitForAccessToken(request, clientId, clientType, verification) {\n    try {\n        const options = {\n            clientId,\n            request,\n            code: verification.device_code,\n        };\n        // WHY TYPESCRIPT WHY ARE YOU DOING THIS TO ME\n        const { authentication } = clientType === \"oauth-app\"\n            ? await exchangeDeviceCode({\n                ...options,\n                clientType: \"oauth-app\",\n            })\n            : await exchangeDeviceCode({\n                ...options,\n                clientType: \"github-app\",\n            });\n        return {\n            type: \"token\",\n            tokenType: \"oauth\",\n            ...authentication,\n        };\n    }\n    catch (error) {\n        // istanbul ignore if\n        // @ts-ignore\n        if (!error.response)\n            throw error;\n        // @ts-ignore\n        const errorType = error.response.data.error;\n        if (errorType === \"authorization_pending\") {\n            await wait(verification.interval);\n            return waitForAccessToken(request, clientId, clientType, verification);\n        }\n        if (errorType === \"slow_down\") {\n            await wait(verification.interval + 5);\n            return waitForAccessToken(request, clientId, clientType, verification);\n        }\n        throw error;\n    }\n}\n","import { getOAuthAccessToken } from \"./get-oauth-access-token\";\nexport async function auth(state, authOptions) {\n    return getOAuthAccessToken(state, {\n        auth: authOptions,\n    });\n}\n","import { getOAuthAccessToken } from \"./get-oauth-access-token\";\nexport async function hook(state, request, route, parameters) {\n    let endpoint = request.endpoint.merge(route, parameters);\n    // Do not intercept request to retrieve codes or token\n    if (/\\/login\\/(oauth\\/access_token|device\\/code)$/.test(endpoint.url)) {\n        return request(endpoint);\n    }\n    const { token } = await getOAuthAccessToken(state, {\n        request,\n        auth: { type: \"oauth\" },\n    });\n    endpoint.headers.authorization = `token ${token}`;\n    return request(endpoint);\n}\n","export const VERSION = \"4.0.3\";\n","import { getUserAgent } from \"universal-user-agent\";\nimport { request as octokitRequest } from \"@octokit/request\";\nimport { auth } from \"./auth\";\nimport { hook } from \"./hook\";\nimport { VERSION } from \"./version\";\nexport function createOAuthDeviceAuth(options) {\n    const requestWithDefaults = options.request ||\n        octokitRequest.defaults({\n            headers: {\n                \"user-agent\": `octokit-auth-oauth-device.js/${VERSION} ${getUserAgent()}`,\n            },\n        });\n    const { request = requestWithDefaults, ...otherOptions } = options;\n    const state = options.clientType === \"github-app\"\n        ? {\n            ...otherOptions,\n            clientType: \"github-app\",\n            request,\n        }\n        : {\n            ...otherOptions,\n            clientType: \"oauth-app\",\n            request,\n            scopes: options.scopes || [],\n        };\n    if (!options.clientId) {\n        throw new Error('[@octokit/auth-oauth-device] \"clientId\" option must be set (https://github.com/octokit/auth-oauth-device.js#usage)');\n    }\n    if (!options.onVerification) {\n        throw new Error('[@octokit/auth-oauth-device] \"onVerification\" option must be a function (https://github.com/octokit/auth-oauth-device.js#usage)');\n    }\n    // @ts-ignore too much for tsc / ts-jest ¯\\_(ツ)_/¯\n    return Object.assign(auth.bind(null, state), {\n        hook: hook.bind(null, state),\n    });\n}\n"],"names":["octokitRequest","request"],"mappings":";;;;AACO,eAAe,mBAAmB,CAAC,KAAK,EAAE,OAAO,EAAE;AAC1D,IAAI,MAAM,oBAAoB,GAAG,uBAAuB,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;AAC9E,IAAI,IAAI,oBAAoB;AAC5B,QAAQ,OAAO,oBAAoB,CAAC;AACpC;AACA;AACA,IAAI,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,MAAM,gBAAgB,CAAC;AAC1D,QAAQ,UAAU,EAAE,KAAK,CAAC,UAAU;AACpC,QAAQ,QAAQ,EAAE,KAAK,CAAC,QAAQ;AAChC,QAAQ,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,KAAK,CAAC,OAAO;AACjD;AACA,QAAQ,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM;AACnD,KAAK,CAAC,CAAC;AACP;AACA;AACA,IAAI,MAAM,KAAK,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC;AAC7C;AACA;AACA,IAAI,MAAM,cAAc,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,OAAO,IAAI,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;AACtI,IAAI,KAAK,CAAC,cAAc,GAAG,cAAc,CAAC;AAC1C,IAAI,OAAO,cAAc,CAAC;AAC1B,CAAC;AACD,SAAS,uBAAuB,CAAC,KAAK,EAAE,IAAI,EAAE;AAC9C,IAAI,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI;AAC7B,QAAQ,OAAO,KAAK,CAAC;AACrB,IAAI,IAAI,CAAC,KAAK,CAAC,cAAc;AAC7B,QAAQ,OAAO,KAAK,CAAC;AACrB,IAAI,IAAI,KAAK,CAAC,UAAU,KAAK,YAAY,EAAE;AAC3C,QAAQ,OAAO,KAAK,CAAC,cAAc,CAAC;AACpC,KAAK;AACL,IAAI,MAAM,cAAc,GAAG,KAAK,CAAC,cAAc,CAAC;AAChD,IAAI,MAAM,QAAQ,GAAG,CAAC,CAAC,QAAQ,IAAI,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;AACnF,IAAI,MAAM,YAAY,GAAG,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACzD,IAAI,OAAO,QAAQ,KAAK,YAAY,GAAG,cAAc,GAAG,KAAK,CAAC;AAC9D,CAAC;AACD,eAAe,IAAI,CAAC,OAAO,EAAE;AAC7B,IAAI,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,UAAU,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC;AACxE,CAAC;AACD,eAAe,kBAAkB,CAAC,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,YAAY,EAAE;AAC/E,IAAI,IAAI;AACR,QAAQ,MAAM,OAAO,GAAG;AACxB,YAAY,QAAQ;AACpB,YAAY,OAAO;AACnB,YAAY,IAAI,EAAE,YAAY,CAAC,WAAW;AAC1C,SAAS,CAAC;AACV;AACA,QAAQ,MAAM,EAAE,cAAc,EAAE,GAAG,UAAU,KAAK,WAAW;AAC7D,cAAc,MAAM,kBAAkB,CAAC;AACvC,gBAAgB,GAAG,OAAO;AAC1B,gBAAgB,UAAU,EAAE,WAAW;AACvC,aAAa,CAAC;AACd,cAAc,MAAM,kBAAkB,CAAC;AACvC,gBAAgB,GAAG,OAAO;AAC1B,gBAAgB,UAAU,EAAE,YAAY;AACxC,aAAa,CAAC,CAAC;AACf,QAAQ,OAAO;AACf,YAAY,IAAI,EAAE,OAAO;AACzB,YAAY,SAAS,EAAE,OAAO;AAC9B,YAAY,GAAG,cAAc;AAC7B,SAAS,CAAC;AACV,KAAK;AACL,IAAI,OAAO,KAAK,EAAE;AAClB;AACA;AACA,QAAQ,IAAI,CAAC,KAAK,CAAC,QAAQ;AAC3B,YAAY,MAAM,KAAK,CAAC;AACxB;AACA,QAAQ,MAAM,SAAS,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC;AACpD,QAAQ,IAAI,SAAS,KAAK,uBAAuB,EAAE;AACnD,YAAY,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;AAC9C,YAAY,OAAO,kBAAkB,CAAC,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;AACnF,SAAS;AACT,QAAQ,IAAI,SAAS,KAAK,WAAW,EAAE;AACvC,YAAY,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;AAClD,YAAY,OAAO,kBAAkB,CAAC,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;AACnF,SAAS;AACT,QAAQ,MAAM,KAAK,CAAC;AACpB,KAAK;AACL;;AC9EO,eAAe,IAAI,CAAC,KAAK,EAAE,WAAW,EAAE;AAC/C,IAAI,OAAO,mBAAmB,CAAC,KAAK,EAAE;AACtC,QAAQ,IAAI,EAAE,WAAW;AACzB,KAAK,CAAC,CAAC;AACP,CAAC;;ACJM,eAAe,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE;AAC9D,IAAI,IAAI,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;AAC7D;AACA,IAAI,IAAI,8CAA8C,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE;AAC3E,QAAQ,OAAO,OAAO,CAAC,QAAQ,CAAC,CAAC;AACjC,KAAK;AACL,IAAI,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,mBAAmB,CAAC,KAAK,EAAE;AACvD,QAAQ,OAAO;AACf,QAAQ,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;AAC/B,KAAK,CAAC,CAAC;AACP,IAAI,QAAQ,CAAC,OAAO,CAAC,aAAa,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;AACtD,IAAI,OAAO,OAAO,CAAC,QAAQ,CAAC,CAAC;AAC7B,CAAC;;ACbM,MAAM,OAAO,GAAG,mBAAmB,CAAC;;ACKpC,SAAS,qBAAqB,CAAC,OAAO,EAAE;AAC/C,IAAI,MAAM,mBAAmB,GAAG,OAAO,CAAC,OAAO;AAC/C,QAAQA,OAAc,CAAC,QAAQ,CAAC;AAChC,YAAY,OAAO,EAAE;AACrB,gBAAgB,YAAY,EAAE,CAAC,6BAA6B,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC;AACzF,aAAa;AACb,SAAS,CAAC,CAAC;AACX,IAAI,MAAM,WAAEC,SAAO,GAAG,mBAAmB,EAAE,GAAG,YAAY,EAAE,GAAG,OAAO,CAAC;AACvE,IAAI,MAAM,KAAK,GAAG,OAAO,CAAC,UAAU,KAAK,YAAY;AACrD,UAAU;AACV,YAAY,GAAG,YAAY;AAC3B,YAAY,UAAU,EAAE,YAAY;AACpC,qBAAYA,SAAO;AACnB,SAAS;AACT,UAAU;AACV,YAAY,GAAG,YAAY;AAC3B,YAAY,UAAU,EAAE,WAAW;AACnC,qBAAYA,SAAO;AACnB,YAAY,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,EAAE;AACxC,SAAS,CAAC;AACV,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE;AAC3B,QAAQ,MAAM,IAAI,KAAK,CAAC,oHAAoH,CAAC,CAAC;AAC9I,KAAK;AACL,IAAI,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE;AACjC,QAAQ,MAAM,IAAI,KAAK,CAAC,iIAAiI,CAAC,CAAC;AAC3J,KAAK;AACL;AACA,IAAI,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE;AACjD,QAAQ,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC;AACpC,KAAK,CAAC,CAAC;AACP,CAAC;;;;"}
+{"version":3,"file":"index.js","sources":["../dist-src/get-oauth-access-token.js","../dist-src/auth.js","../dist-src/hook.js","../dist-src/version.js","../dist-src/index.js"],"sourcesContent":["import { createDeviceCode, exchangeDeviceCode } from \"@octokit/oauth-methods\";\nexport async function getOAuthAccessToken(state, options) {\n    const cachedAuthentication = getCachedAuthentication(state, options.auth);\n    if (cachedAuthentication)\n        return cachedAuthentication;\n    // Step 1: Request device and user codes\n    // https://docs.github.com/en/developers/apps/authorizing-oauth-apps#step-1-app-requests-the-device-and-user-verification-codes-from-github\n    const { data: verification } = await createDeviceCode({\n        clientType: state.clientType,\n        clientId: state.clientId,\n        request: options.request || state.request,\n        // @ts-expect-error the extra code to make TS happy is not worth it\n        scopes: options.auth.scopes || state.scopes,\n    });\n    // Step 2: User must enter the user code on https://github.com/login/device\n    // See https://docs.github.com/en/developers/apps/authorizing-oauth-apps#step-2-prompt-the-user-to-enter-the-user-code-in-a-browser\n    await state.onVerification(verification);\n    // Step 3: Exchange device code for access token\n    // See https://docs.github.com/en/developers/apps/authorizing-oauth-apps#step-3-app-polls-github-to-check-if-the-user-authorized-the-device\n    const authentication = await waitForAccessToken(options.request || state.request, state.clientId, state.clientType, verification);\n    state.authentication = authentication;\n    return authentication;\n}\nfunction getCachedAuthentication(state, auth) {\n    if (auth.refresh === true)\n        return false;\n    if (!state.authentication)\n        return false;\n    if (state.clientType === \"github-app\") {\n        return state.authentication;\n    }\n    const authentication = state.authentication;\n    const newScope = ((\"scopes\" in auth && auth.scopes) || state.scopes).join(\" \");\n    const currentScope = authentication.scopes.join(\" \");\n    return newScope === currentScope ? authentication : false;\n}\nasync function wait(seconds) {\n    await new Promise((resolve) => setTimeout(resolve, seconds * 1000));\n}\nasync function waitForAccessToken(request, clientId, clientType, verification) {\n    try {\n        const options = {\n            clientId,\n            request,\n            code: verification.device_code,\n        };\n        // WHY TYPESCRIPT WHY ARE YOU DOING THIS TO ME\n        const { authentication } = clientType === \"oauth-app\"\n            ? await exchangeDeviceCode({\n                ...options,\n                clientType: \"oauth-app\",\n            })\n            : await exchangeDeviceCode({\n                ...options,\n                clientType: \"github-app\",\n            });\n        return {\n            type: \"token\",\n            tokenType: \"oauth\",\n            ...authentication,\n        };\n    }\n    catch (error) {\n        // istanbul ignore if\n        // @ts-ignore\n        if (!error.response)\n            throw error;\n        // @ts-ignore\n        const errorType = error.response.data.error;\n        if (errorType === \"authorization_pending\") {\n            await wait(verification.interval);\n            return waitForAccessToken(request, clientId, clientType, verification);\n        }\n        if (errorType === \"slow_down\") {\n            await wait(verification.interval + 5);\n            return waitForAccessToken(request, clientId, clientType, verification);\n        }\n        throw error;\n    }\n}\n","import { getOAuthAccessToken } from \"./get-oauth-access-token\";\nexport async function auth(state, authOptions) {\n    return getOAuthAccessToken(state, {\n        auth: authOptions,\n    });\n}\n","import { getOAuthAccessToken } from \"./get-oauth-access-token\";\nexport async function hook(state, request, route, parameters) {\n    let endpoint = request.endpoint.merge(route, parameters);\n    // Do not intercept request to retrieve codes or token\n    if (/\\/login\\/(oauth\\/access_token|device\\/code)$/.test(endpoint.url)) {\n        return request(endpoint);\n    }\n    const { token } = await getOAuthAccessToken(state, {\n        request,\n        auth: { type: \"oauth\" },\n    });\n    endpoint.headers.authorization = `token ${token}`;\n    return request(endpoint);\n}\n","export const VERSION = \"4.0.4\";\n","import { getUserAgent } from \"universal-user-agent\";\nimport { request as octokitRequest } from \"@octokit/request\";\nimport { auth } from \"./auth\";\nimport { hook } from \"./hook\";\nimport { VERSION } from \"./version\";\nexport function createOAuthDeviceAuth(options) {\n    const requestWithDefaults = options.request ||\n        octokitRequest.defaults({\n            headers: {\n                \"user-agent\": `octokit-auth-oauth-device.js/${VERSION} ${getUserAgent()}`,\n            },\n        });\n    const { request = requestWithDefaults, ...otherOptions } = options;\n    const state = options.clientType === \"github-app\"\n        ? {\n            ...otherOptions,\n            clientType: \"github-app\",\n            request,\n        }\n        : {\n            ...otherOptions,\n            clientType: \"oauth-app\",\n            request,\n            scopes: options.scopes || [],\n        };\n    if (!options.clientId) {\n        throw new Error('[@octokit/auth-oauth-device] \"clientId\" option must be set (https://github.com/octokit/auth-oauth-device.js#usage)');\n    }\n    if (!options.onVerification) {\n        throw new Error('[@octokit/auth-oauth-device] \"onVerification\" option must be a function (https://github.com/octokit/auth-oauth-device.js#usage)');\n    }\n    // @ts-ignore too much for tsc / ts-jest ¯\\_(ツ)_/¯\n    return Object.assign(auth.bind(null, state), {\n        hook: hook.bind(null, state),\n    });\n}\n"],"names":["octokitRequest","request"],"mappings":";;;;AACO,eAAe,mBAAmB,CAAC,KAAK,EAAE,OAAO,EAAE;AAC1D,IAAI,MAAM,oBAAoB,GAAG,uBAAuB,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;AAC9E,IAAI,IAAI,oBAAoB;AAC5B,QAAQ,OAAO,oBAAoB,CAAC;AACpC;AACA;AACA,IAAI,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,MAAM,gBAAgB,CAAC;AAC1D,QAAQ,UAAU,EAAE,KAAK,CAAC,UAAU;AACpC,QAAQ,QAAQ,EAAE,KAAK,CAAC,QAAQ;AAChC,QAAQ,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,KAAK,CAAC,OAAO;AACjD;AACA,QAAQ,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM;AACnD,KAAK,CAAC,CAAC;AACP;AACA;AACA,IAAI,MAAM,KAAK,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC;AAC7C;AACA;AACA,IAAI,MAAM,cAAc,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,OAAO,IAAI,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;AACtI,IAAI,KAAK,CAAC,cAAc,GAAG,cAAc,CAAC;AAC1C,IAAI,OAAO,cAAc,CAAC;AAC1B,CAAC;AACD,SAAS,uBAAuB,CAAC,KAAK,EAAE,IAAI,EAAE;AAC9C,IAAI,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI;AAC7B,QAAQ,OAAO,KAAK,CAAC;AACrB,IAAI,IAAI,CAAC,KAAK,CAAC,cAAc;AAC7B,QAAQ,OAAO,KAAK,CAAC;AACrB,IAAI,IAAI,KAAK,CAAC,UAAU,KAAK,YAAY,EAAE;AAC3C,QAAQ,OAAO,KAAK,CAAC,cAAc,CAAC;AACpC,KAAK;AACL,IAAI,MAAM,cAAc,GAAG,KAAK,CAAC,cAAc,CAAC;AAChD,IAAI,MAAM,QAAQ,GAAG,CAAC,CAAC,QAAQ,IAAI,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;AACnF,IAAI,MAAM,YAAY,GAAG,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACzD,IAAI,OAAO,QAAQ,KAAK,YAAY,GAAG,cAAc,GAAG,KAAK,CAAC;AAC9D,CAAC;AACD,eAAe,IAAI,CAAC,OAAO,EAAE;AAC7B,IAAI,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,UAAU,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC;AACxE,CAAC;AACD,eAAe,kBAAkB,CAAC,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,YAAY,EAAE;AAC/E,IAAI,IAAI;AACR,QAAQ,MAAM,OAAO,GAAG;AACxB,YAAY,QAAQ;AACpB,YAAY,OAAO;AACnB,YAAY,IAAI,EAAE,YAAY,CAAC,WAAW;AAC1C,SAAS,CAAC;AACV;AACA,QAAQ,MAAM,EAAE,cAAc,EAAE,GAAG,UAAU,KAAK,WAAW;AAC7D,cAAc,MAAM,kBAAkB,CAAC;AACvC,gBAAgB,GAAG,OAAO;AAC1B,gBAAgB,UAAU,EAAE,WAAW;AACvC,aAAa,CAAC;AACd,cAAc,MAAM,kBAAkB,CAAC;AACvC,gBAAgB,GAAG,OAAO;AAC1B,gBAAgB,UAAU,EAAE,YAAY;AACxC,aAAa,CAAC,CAAC;AACf,QAAQ,OAAO;AACf,YAAY,IAAI,EAAE,OAAO;AACzB,YAAY,SAAS,EAAE,OAAO;AAC9B,YAAY,GAAG,cAAc;AAC7B,SAAS,CAAC;AACV,KAAK;AACL,IAAI,OAAO,KAAK,EAAE;AAClB;AACA;AACA,QAAQ,IAAI,CAAC,KAAK,CAAC,QAAQ;AAC3B,YAAY,MAAM,KAAK,CAAC;AACxB;AACA,QAAQ,MAAM,SAAS,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC;AACpD,QAAQ,IAAI,SAAS,KAAK,uBAAuB,EAAE;AACnD,YAAY,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;AAC9C,YAAY,OAAO,kBAAkB,CAAC,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;AACnF,SAAS;AACT,QAAQ,IAAI,SAAS,KAAK,WAAW,EAAE;AACvC,YAAY,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;AAClD,YAAY,OAAO,kBAAkB,CAAC,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;AACnF,SAAS;AACT,QAAQ,MAAM,KAAK,CAAC;AACpB,KAAK;AACL;;AC9EO,eAAe,IAAI,CAAC,KAAK,EAAE,WAAW,EAAE;AAC/C,IAAI,OAAO,mBAAmB,CAAC,KAAK,EAAE;AACtC,QAAQ,IAAI,EAAE,WAAW;AACzB,KAAK,CAAC,CAAC;AACP,CAAC;;ACJM,eAAe,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE;AAC9D,IAAI,IAAI,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;AAC7D;AACA,IAAI,IAAI,8CAA8C,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE;AAC3E,QAAQ,OAAO,OAAO,CAAC,QAAQ,CAAC,CAAC;AACjC,KAAK;AACL,IAAI,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,mBAAmB,CAAC,KAAK,EAAE;AACvD,QAAQ,OAAO;AACf,QAAQ,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;AAC/B,KAAK,CAAC,CAAC;AACP,IAAI,QAAQ,CAAC,OAAO,CAAC,aAAa,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;AACtD,IAAI,OAAO,OAAO,CAAC,QAAQ,CAAC,CAAC;AAC7B,CAAC;;ACbM,MAAM,OAAO,GAAG,mBAAmB,CAAC;;ACKpC,SAAS,qBAAqB,CAAC,OAAO,EAAE;AAC/C,IAAI,MAAM,mBAAmB,GAAG,OAAO,CAAC,OAAO;AAC/C,QAAQA,OAAc,CAAC,QAAQ,CAAC;AAChC,YAAY,OAAO,EAAE;AACrB,gBAAgB,YAAY,EAAE,CAAC,6BAA6B,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC;AACzF,aAAa;AACb,SAAS,CAAC,CAAC;AACX,IAAI,MAAM,WAAEC,SAAO,GAAG,mBAAmB,EAAE,GAAG,YAAY,EAAE,GAAG,OAAO,CAAC;AACvE,IAAI,MAAM,KAAK,GAAG,OAAO,CAAC,UAAU,KAAK,YAAY;AACrD,UAAU;AACV,YAAY,GAAG,YAAY;AAC3B,YAAY,UAAU,EAAE,YAAY;AACpC,qBAAYA,SAAO;AACnB,SAAS;AACT,UAAU;AACV,YAAY,GAAG,YAAY;AAC3B,YAAY,UAAU,EAAE,WAAW;AACnC,qBAAYA,SAAO;AACnB,YAAY,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,EAAE;AACxC,SAAS,CAAC;AACV,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE;AAC3B,QAAQ,MAAM,IAAI,KAAK,CAAC,oHAAoH,CAAC,CAAC;AAC9I,KAAK;AACL,IAAI,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE;AACjC,QAAQ,MAAM,IAAI,KAAK,CAAC,iIAAiI,CAAC,CAAC;AAC3J,KAAK;AACL;AACA,IAAI,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE;AACjD,QAAQ,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC;AACpC,KAAK,CAAC,CAAC;AACP,CAAC;;;;"}

package/lib/publishing/github/node_modules/@octokit/auth-oauth-device/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@octokit/auth-oauth-device",
   "description": "GitHub OAuth Device authentication strategy for JavaScript",
-  "version": "4.0.3",
+  "version": "4.0.4",
   "license": "MIT",
   "files": [
     "dist-*/",
@@ -19,7 +19,7 @@
   "dependencies": {
     "@octokit/oauth-methods": "^2.0.0",
     "@octokit/request": "^6.0.0",
-    "@octokit/types": "^8.0.0",
+    "@octokit/types": "^9.0.0",
     "universal-user-agent": "^6.0.0"
   },
   "devDependencies": {
@@ -29,11 +29,11 @@
     "@pika/plugin-build-web": "^0.9.2",
     "@pika/plugin-ts-standard-pkg": "^0.9.2",
     "@types/jest": "^29.0.0",
-    "@types/node": "^16.0.0",
+    "@types/node": "^18.0.0",
     "fetch-mock": "^9.11.0",
     "jest": "^29.0.0",
-    "prettier": "2.7.1",
-    "semantic-release": "^19.0.0",
+    "prettier": "2.8.3",
+    "semantic-release": "^20.0.0",
     "semantic-release-plugin-update-version-in-files": "^1.1.0",
     "ts-jest": "^29.0.0",
     "typescript": "^4.2.2"

package/lib/publishing/github/node_modules/@octokit/auth-oauth-user/README.md

@@ -281,7 +281,7 @@ The unguessable random string you provided in [Step 1 of GitHub's OAuth web appl
         <code>string</code>
       </th>
       <td>
-        
+
 The <code>redirect_uri</code> parameter you provided in [Step 1 of GitHub's OAuth web application flow](https://docs.github.com/en/developers/apps/authorizing-oauth-apps#1-request-a-users-github-identity).
 
 </td>
@@ -709,6 +709,17 @@ The differences are
         array of scope names enabled for the token
       </td>
     </tr>
+    <tr>
+      <th>
+        <code>onTokenCreated</code>
+      </th>
+      <th>
+        <code>function</code>
+      </th>
+      <td>
+        callback invoked when a token is "reset" or "refreshed"
+      </td>
+    </tr>
     <tr>
       <th>
         <code>invalid</code>
@@ -808,6 +819,17 @@ Either `undefined` or `true`. Will be set to `true` if the token was invalided e
         The user access token
       </td>
     </tr>
+    <tr>
+      <th>
+        <code>onTokenCreated</code>
+      </th>
+      <th>
+        <code>function</code>
+      </th>
+      <td>
+        callback invoked when a token is "reset" or "refreshed"
+      </td>
+    </tr>
     <tr>
       <th>
         <code>invalid</code>

package/lib/publishing/github/node_modules/@octokit/auth-oauth-user/dist-node/index.js

@@ -10,7 +10,7 @@ var authOauthDevice = require('@octokit/auth-oauth-device');
 var oauthMethods = require('@octokit/oauth-methods');
 var btoa = _interopDefault(require('btoa-lite'));
 
-const VERSION = "2.0.4";
+const VERSION = "2.1.1";
 
 // @ts-nocheck there is only place for one of us in this file. And it's not you, TS
 async function getAuthentication(state) {
@@ -22,6 +22,7 @@ async function getAuthentication(state) {
       clientId: state.clientId,
       clientSecret: state.clientSecret,
       clientType: state.clientType,
+      onTokenCreated: state.onTokenCreated,
       ...state.strategyOptions,
       request: state.request
     });
@@ -30,13 +31,13 @@ async function getAuthentication(state) {
       tokenType: "oauth",
       ...authentication
     };
-  } // handle OAuth device flow
-
-
+  }
+  // handle OAuth device flow
   if ("onVerification" in state.strategyOptions) {
     const deviceAuth = authOauthDevice.createOAuthDeviceAuth({
       clientType: state.clientType,
       clientId: state.clientId,
+      onTokenCreated: state.onTokenCreated,
       ...state.strategyOptions,
       request: state.request
     });
@@ -47,9 +48,8 @@ async function getAuthentication(state) {
       clientSecret: state.clientSecret,
       ...authentication
     };
-  } // use existing authentication
-
-
+  }
+  // use existing authentication
   if ("token" in state.strategyOptions) {
     return {
       type: "token",
@@ -57,10 +57,10 @@ async function getAuthentication(state) {
       clientId: state.clientId,
       clientSecret: state.clientSecret,
       clientType: state.clientType,
+      onTokenCreated: state.onTokenCreated,
       ...state.strategyOptions
     };
   }
-
   throw new Error("[@octokit/auth-oauth-user] Invalid strategy options");
 }
 
@@ -69,13 +69,11 @@ async function auth(state, options = {}) {
     // This is what TS makes us do ¯\_(ツ)_/¯
     state.authentication = state.clientType === "oauth-app" ? await getAuthentication(state) : await getAuthentication(state);
   }
-
   if (state.authentication.invalid) {
     throw new Error("[@octokit/auth-oauth-user] Token is invalid");
   }
-
-  const currentAuthentication = state.authentication; // (auto) refresh for user-to-server tokens
-
+  const currentAuthentication = state.authentication;
+  // (auto) refresh for user-to-server tokens
   if ("expiresAt" in currentAuthentication) {
     if (options.type === "refresh" || new Date(currentAuthentication.expiresAt) < new Date()) {
       const {
@@ -93,23 +91,23 @@ async function auth(state, options = {}) {
         ...authentication
       };
     }
-  } // throw error for invalid refresh call
-
-
+  }
+  // throw error for invalid refresh call
   if (options.type === "refresh") {
+    var _state$onTokenCreated;
     if (state.clientType === "oauth-app") {
       throw new Error("[@octokit/auth-oauth-user] OAuth Apps do not support expiring tokens");
     }
-
     if (!currentAuthentication.hasOwnProperty("expiresAt")) {
       throw new Error("[@octokit/auth-oauth-user] Refresh token missing");
     }
-  } // check or reset token
-
-
+    await ((_state$onTokenCreated = state.onTokenCreated) === null || _state$onTokenCreated === void 0 ? void 0 : _state$onTokenCreated.call(state, state.authentication, {
+      type: options.type
+    }));
+  }
+  // check or reset token
   if (options.type === "check" || options.type === "reset") {
     const method = options.type === "check" ? oauthMethods.checkToken : oauthMethods.resetToken;
-
     try {
       const {
         authentication
@@ -127,23 +125,26 @@ async function auth(state, options = {}) {
         // @ts-expect-error TBD
         ...authentication
       };
+      if (options.type === "reset") {
+        var _state$onTokenCreated2;
+        await ((_state$onTokenCreated2 = state.onTokenCreated) === null || _state$onTokenCreated2 === void 0 ? void 0 : _state$onTokenCreated2.call(state, state.authentication, {
+          type: options.type
+        }));
+      }
       return state.authentication;
     } catch (error) {
       // istanbul ignore else
       if (error.status === 404) {
-        error.message = "[@octokit/auth-oauth-user] Token is invalid"; // @ts-expect-error TBD
-
+        error.message = "[@octokit/auth-oauth-user] Token is invalid";
+        // @ts-expect-error TBD
         state.authentication.invalid = true;
       }
-
       throw error;
     }
-  } // invalidate
-
-
+  }
+  // invalidate
   if (options.type === "delete" || options.type === "deleteAuthorization") {
     const method = options.type === "delete" ? oauthMethods.deleteToken : oauthMethods.deleteAuthorization;
-
     try {
       await method({
         // @ts-expect-error making TS happy would require unnecessary code so no
@@ -157,11 +158,9 @@ async function auth(state, options = {}) {
       // istanbul ignore if
       if (error.status !== 404) throw error;
     }
-
     state.authentication.invalid = true;
     return state.authentication;
   }
-
   return state.authentication;
 }
 
@@ -187,24 +186,24 @@ function requiresBasicAuth(url) {
 }
 
 async function hook(state, request, route, parameters = {}) {
-  const endpoint = request.endpoint.merge(route, parameters); // Do not intercept OAuth Web/Device flow request
-
+  const endpoint = request.endpoint.merge(route, parameters);
+  // Do not intercept OAuth Web/Device flow request
   if (/\/login\/(oauth\/access_token|device\/code)$/.test(endpoint.url)) {
     return request(endpoint);
   }
-
   if (requiresBasicAuth(endpoint.url)) {
     const credentials = btoa(`${state.clientId}:${state.clientSecret}`);
     endpoint.headers.authorization = `basic ${credentials}`;
     return request(endpoint);
-  } // TS makes us do this ¯\_(ツ)_/¯
-
-
+  }
+  // TS makes us do this ¯\_(ツ)_/¯
   const {
     token
-  } = state.clientType === "oauth-app" ? await auth({ ...state,
+  } = state.clientType === "oauth-app" ? await auth({
+    ...state,
     request
-  }) : await auth({ ...state,
+  }) : await auth({
+    ...state,
     request
   });
   endpoint.headers.authorization = "token " + token;
@@ -220,16 +219,18 @@ function createOAuthUserAuth({
       "user-agent": `octokit-auth-oauth-app.js/${VERSION} ${universalUserAgent.getUserAgent()}`
     }
   }),
+  onTokenCreated,
   ...strategyOptions
 }) {
   const state = Object.assign({
     clientType,
     clientId,
     clientSecret,
+    onTokenCreated,
     strategyOptions,
     request: request$1
-  }); // @ts-expect-error not worth the extra code needed to appease TS
-
+  });
+  // @ts-expect-error not worth the extra code needed to appease TS
   return Object.assign(auth.bind(null, state), {
     // @ts-expect-error not worth the extra code needed to appease TS
     hook: hook.bind(null, state)