covara 0.0.1 → 0.6.0

package/dist/middleware/securityHeaders.js

@@ -0,0 +1,58 @@
+import { isProduction } from "../server/env.js";
+const DEFAULT_CSP = "default-src 'none'; frame-ancestors 'none'";
+const DEFAULT_REFERRER_POLICY = "strict-origin-when-cross-origin";
+const DEFAULT_DNS_PREFETCH_CONTROL = "off";
+const DEFAULT_COOP = "same-origin";
+const DEFAULT_HSTS_MAX_AGE = 15552000;
+const buildHSTSValue = (opts) => {
+    const maxAge = opts.maxAge ?? DEFAULT_HSTS_MAX_AGE;
+    const includeSubDomains = opts.includeSubDomains ?? true;
+    const parts = [`max-age=${maxAge}`];
+    if (includeSubDomains)
+        parts.push("includeSubDomains");
+    if (opts.preload)
+        parts.push("preload");
+    return parts.join("; ");
+};
+const isHttpsRequest = (url) => {
+    try {
+        return new URL(url).protocol === "https:";
+    }
+    catch {
+        return false;
+    }
+};
+export const createSecurityHeaders = (options = {}) => {
+    const { contentSecurityPolicy = DEFAULT_CSP, contentTypeOptions = true, frameOptions = "DENY", referrerPolicy = DEFAULT_REFERRER_POLICY, dnsPrefetchControl = DEFAULT_DNS_PREFETCH_CONTROL, crossOriginOpenerPolicy = DEFAULT_COOP, hsts = {}, } = options;
+    return async (c, next) => {
+        await next();
+        const headers = c.res.headers;
+        const setIfAbsent = (name, value) => {
+            if (!headers.has(name)) {
+                headers.set(name, value);
+            }
+        };
+        if (contentTypeOptions) {
+            setIfAbsent("X-Content-Type-Options", "nosniff");
+        }
+        if (frameOptions !== false) {
+            setIfAbsent("X-Frame-Options", frameOptions);
+        }
+        if (referrerPolicy !== false) {
+            setIfAbsent("Referrer-Policy", referrerPolicy);
+        }
+        if (dnsPrefetchControl !== false) {
+            setIfAbsent("X-DNS-Prefetch-Control", dnsPrefetchControl);
+        }
+        if (crossOriginOpenerPolicy !== false) {
+            setIfAbsent("Cross-Origin-Opener-Policy", crossOriginOpenerPolicy);
+        }
+        if (contentSecurityPolicy !== false) {
+            setIfAbsent("Content-Security-Policy", contentSecurityPolicy);
+        }
+        if (hsts !== false && (isHttpsRequest(c.req.url) || isProduction())) {
+            setIfAbsent("Strict-Transport-Security", buildHSTSValue(hsts));
+        }
+    };
+};
+//# sourceMappingURL=securityHeaders.js.map

package/dist/middleware/securityHeaders.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"securityHeaders.js","sourceRoot":"","sources":["../../src/middleware/securityHeaders.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAoB5C,MAAM,WAAW,GAAG,4CAA4C,CAAC;AACjE,MAAM,uBAAuB,GAAG,iCAAiC,CAAC;AAClE,MAAM,4BAA4B,GAAG,KAAK,CAAC;AAC3C,MAAM,YAAY,GAAG,aAAa,CAAC;AACnC,MAAM,oBAAoB,GAAG,QAAQ,CAAC;AAEtC,MAAM,cAAc,GAAG,CAAC,IAAiB,EAAU,EAAE;IACnD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,oBAAoB,CAAC;IACnD,MAAM,iBAAiB,GAAG,IAAI,CAAC,iBAAiB,IAAI,IAAI,CAAC;IACzD,MAAM,KAAK,GAAG,CAAC,WAAW,MAAM,EAAE,CAAC,CAAC;IACpC,IAAI,iBAAiB;QAAE,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IACvD,IAAI,IAAI,CAAC,OAAO;QAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACxC,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC,CAAC;AAEF,MAAM,cAAc,GAAG,CAAC,GAAW,EAAW,EAAE;IAC9C,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CACnC,UAAkC,EAAE,EACjB,EAAE;IACrB,MAAM,EACJ,qBAAqB,GAAG,WAAW,EACnC,kBAAkB,GAAG,IAAI,EACzB,YAAY,GAAG,MAAM,EACrB,cAAc,GAAG,uBAAuB,EACxC,kBAAkB,GAAG,4BAA4B,EACjD,uBAAuB,GAAG,YAAY,EACtC,IAAI,GAAG,EAAE,GACV,GAAG,OAAO,CAAC;IAEZ,OAAO,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QACvB,MAAM,IAAI,EAAE,CAAC;QAEb,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC;QAC9B,MAAM,WAAW,GAAG,CAAC,IAAY,EAAE,KAAa,EAAQ,EAAE;YACxD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACvB,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAC3B,CAAC;QACH,CAAC,CAAC;QAEF,IAAI,kBAAkB,EAAE,CAAC;YACvB,WAAW,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAAC;QACnD,CAAC;QACD,IAAI,YAAY,KAAK,KAAK,EAAE,CAAC;YAC3B,WAAW,CAAC,iBAAiB,EAAE,YAAY,CAAC,CAAC;QAC/C,CAAC;QACD,IAAI,cAAc,KAAK,KAAK,EAAE,CAAC;YAC7B,WAAW,CAAC,iBAAiB,EAAE,cAAc,CAAC,CAAC;QACjD,CAAC;QACD,IAAI,kBAAkB,KAAK,KAAK,EAAE,CAAC;YACjC,WAAW,CAAC,wBAAwB,EAAE,kBAAkB,CAAC,CAAC;QAC5D,CAAC;QACD,IAAI,uBAAuB,KAAK,KAAK,EAAE,CAAC;YACtC,WAAW,CAAC,4BAA4B,EAAE,uBAAuB,CAAC,CAAC;QACrE,CAAC;QACD,IAAI,qBAAqB,KAAK,KAAK,EAAE,CAAC;YACpC,WAAW,CAAC,yBAAyB,EAAE,qBAAqB,CAAC,CAAC;QAChE,CAAC;QAED,IAAI,IAAI,KAAK,KAAK,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,YAAY,EAAE,CAAC,EAAE,CAAC;YACpE,WAAW,CAAC,2BAA2B,EAAE,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC;QACjE,CAAC;IACH,CAAC,CAAC;AACJ,CAAC,CAAC"}

package/dist/middleware/versioning.d.ts

@@ -0,0 +1,62 @@
+import type { MiddlewareHandler } from "hono";
+export declare const COVARA_VERSION = "1.0.0";
+export interface DeprecationWarning {
+    feature?: string;
+    message: string;
+    replacement?: string;
+    sunsetDate?: Date;
+    affectedPaths?: string[];
+    affectedFields?: string[];
+}
+export interface VersioningConfig {
+    currentVersion?: string;
+    headerName?: string;
+    deprecationWarnings?: DeprecationWarning[];
+    deprecations?: DeprecationWarning[];
+    minSupportedVersion?: string;
+}
+export declare const versioningMiddleware: (config?: VersioningConfig) => MiddlewareHandler;
+export interface FieldDeprecation {
+    field: string;
+    replacement?: string;
+    message: string;
+    sunsetDate?: Date;
+}
+export declare const addFieldDeprecationWarnings: <T extends Record<string, unknown>>(items: T[], deprecations: FieldDeprecation[]) => (T & {
+    _warnings?: Array<{
+        type: string;
+        field: string;
+        replacement?: string;
+    }>;
+})[];
+export interface VersionWarning {
+    type: string;
+    feature?: string;
+    field?: string;
+    message?: string;
+    replacement?: string;
+    sunsetDate?: string;
+}
+export interface VersionedResponse<T> {
+    data: T;
+    version: string;
+    timestamp: string;
+    warnings?: VersionWarning[];
+}
+export declare const wrapWithVersion: <T>(data: T, warnings?: VersionWarning[] | DeprecationWarning[]) => VersionedResponse<T>;
+export declare const checkMinimumVersion: (clientVersion: string | undefined, minVersion: string) => {
+    supported: boolean;
+    message?: string;
+};
+export declare const createVersionChecker: (minVersion: string) => MiddlewareHandler;
+export declare const CURSOR_VERSION_HEADER = "X-Covara-Cursor-Version";
+export declare const SCHEMA_VERSION_HEADER = "X-Covara-Schema-Version";
+export declare const schemaVersionMiddleware: (schemaVersion: string | number) => MiddlewareHandler;
+export interface SchemaVersionEvent {
+    type: "schemaVersion";
+    version: number;
+    resource: string;
+    changes: string[];
+}
+export declare const formatSchemaVersionEvent: (version: number, resource: string, changes: string[]) => string;
+//# sourceMappingURL=versioning.d.ts.map

package/dist/middleware/versioning.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"versioning.d.ts","sourceRoot":"","sources":["../../src/middleware/versioning.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,MAAM,CAAC;AAE9C,eAAO,MAAM,cAAc,UAAU,CAAC;AAEtC,MAAM,WAAW,kBAAkB;IACjC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,IAAI,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED,MAAM,WAAW,gBAAgB;IAC/B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,mBAAmB,CAAC,EAAE,kBAAkB,EAAE,CAAC;IAC3C,YAAY,CAAC,EAAE,kBAAkB,EAAE,CAAC;IACpC,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAOD,eAAO,MAAM,oBAAoB,GAAI,SAAQ,gBAAqB,KAAG,iBAkDpE,CAAC;AAEF,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,IAAI,CAAC;CACnB;AAED,eAAO,MAAM,2BAA2B,GAAI,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC3E,OAAO,CAAC,EAAE,EACV,cAAc,gBAAgB,EAAE,KAC/B,CAAC,CAAC,GAAG;IAAE,SAAS,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAAE,CAAC,EAwBpF,CAAC;AAEF,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,iBAAiB,CAAC,CAAC;IAClC,IAAI,EAAE,CAAC,CAAC;IACR,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,cAAc,EAAE,CAAC;CAC7B;AAED,eAAO,MAAM,eAAe,GAAI,CAAC,EAC/B,MAAM,CAAC,EACP,WAAW,cAAc,EAAE,GAAG,kBAAkB,EAAE,KACjD,iBAAiB,CAAC,CAAC,CAwBrB,CAAC;AA6BF,eAAO,MAAM,mBAAmB,GAC9B,eAAe,MAAM,GAAG,SAAS,EACjC,YAAY,MAAM,KACjB;IAAE,SAAS,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAsBxC,CAAC;AAEF,eAAO,MAAM,oBAAoB,GAAI,YAAY,MAAM,KAAG,iBAqBzD,CAAC;AAEF,eAAO,MAAM,qBAAqB,4BAA4B,CAAC;AAC/D,eAAO,MAAM,qBAAqB,4BAA4B,CAAC;AAE/D,eAAO,MAAM,uBAAuB,GAAI,eAAe,MAAM,GAAG,MAAM,KAAG,iBAMxE,CAAC;AAEF,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,eAAe,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,eAAO,MAAM,wBAAwB,GACnC,SAAS,MAAM,EACf,UAAU,MAAM,EAChB,SAAS,MAAM,EAAE,KAChB,MASF,CAAC"}

package/dist/middleware/versioning.js

@@ -0,0 +1,178 @@
+export const COVARA_VERSION = "1.0.0";
+const DEFAULT_CONFIG = {
+    currentVersion: COVARA_VERSION,
+    headerName: "X-Covara-Version",
+};
+export const versioningMiddleware = (config = {}) => {
+    const mergedConfig = { ...DEFAULT_CONFIG, ...config };
+    const { currentVersion, headerName } = mergedConfig;
+    const deprecationWarnings = config.deprecationWarnings ?? config.deprecations ?? [];
+    return async (c, next) => {
+        c.set("apiVersion", currentVersion);
+        c.header(headerName, currentVersion);
+        if (deprecationWarnings.length > 0) {
+            const applicableWarnings = deprecationWarnings.filter((warning) => {
+                if (warning.affectedPaths) {
+                    return warning.affectedPaths.some((path) => c.req.path.startsWith(path));
+                }
+                return true;
+            });
+            if (applicableWarnings.length > 0) {
+                const warningMessages = applicableWarnings.map((warning) => {
+                    if (warning.feature) {
+                        let msg = `${warning.feature}: ${warning.message}`;
+                        if (warning.replacement) {
+                            msg += ` Use '${warning.replacement}' instead.`;
+                        }
+                        if (warning.sunsetDate) {
+                            msg += ` Sunset: ${warning.sunsetDate.toISOString().split("T")[0]}`;
+                        }
+                        return msg;
+                    }
+                    return warning.message;
+                });
+                c.header("X-Covara-Warn", warningMessages.join("; "));
+                const sunsetDate = applicableWarnings
+                    .map((w) => w.sunsetDate)
+                    .filter(Boolean)
+                    .sort((a, b) => (a.getTime() - b.getTime()))[0];
+                if (sunsetDate) {
+                    c.header("Deprecation", sunsetDate.toISOString().split("T")[0]);
+                    c.header("Sunset", sunsetDate.toUTCString());
+                }
+                else {
+                    c.header("Deprecation", "true");
+                }
+            }
+        }
+        return next();
+    };
+};
+export const addFieldDeprecationWarnings = (items, deprecations) => {
+    if (deprecations.length === 0) {
+        return items;
+    }
+    return items.map((item) => {
+        const warnings = [];
+        for (const deprecation of deprecations) {
+            if (deprecation.field in item) {
+                warnings.push({
+                    type: "deprecation",
+                    field: deprecation.field,
+                    replacement: deprecation.replacement,
+                });
+            }
+        }
+        if (warnings.length > 0) {
+            return { ...item, _warnings: warnings };
+        }
+        return item;
+    });
+};
+export const wrapWithVersion = (data, warnings) => {
+    const response = {
+        data,
+        version: COVARA_VERSION,
+        timestamp: new Date().toISOString(),
+    };
+    if (warnings && warnings.length > 0) {
+        response.warnings = warnings.map((w) => {
+            if ("feature" in w && "sunsetDate" in w) {
+                const dep = w;
+                return {
+                    type: "deprecation",
+                    feature: dep.feature,
+                    message: dep.message,
+                    replacement: dep.replacement,
+                    sunsetDate: dep.sunsetDate?.toISOString().split("T")[0],
+                };
+            }
+            return w;
+        });
+    }
+    return response;
+};
+const parseVersion = (version) => {
+    const match = version.match(/^(\d+)(?:\.(\d+))?(?:\.(\d+))?(?:-(.+))?$/);
+    if (!match)
+        return null;
+    return {
+        major: parseInt(match[1], 10),
+        minor: parseInt(match[2] ?? "0", 10),
+        patch: parseInt(match[3] ?? "0", 10),
+        prerelease: match[4],
+    };
+};
+const compareVersions = (v1, v2) => {
+    const parsed1 = parseVersion(v1);
+    const parsed2 = parseVersion(v2);
+    if (!parsed1 || !parsed2)
+        return 0;
+    if (parsed1.major !== parsed2.major)
+        return parsed1.major - parsed2.major;
+    if (parsed1.minor !== parsed2.minor)
+        return parsed1.minor - parsed2.minor;
+    if (parsed1.patch !== parsed2.patch)
+        return parsed1.patch - parsed2.patch;
+    if (parsed1.prerelease && !parsed2.prerelease)
+        return -1;
+    if (!parsed1.prerelease && parsed2.prerelease)
+        return 1;
+    return 0;
+};
+export const checkMinimumVersion = (clientVersion, minVersion) => {
+    if (!clientVersion) {
+        return { supported: true };
+    }
+    const parsed = parseVersion(clientVersion);
+    if (!parsed) {
+        return {
+            supported: false,
+            message: `Invalid version format: ${clientVersion}`,
+        };
+    }
+    const comparison = compareVersions(clientVersion, minVersion);
+    if (comparison < 0) {
+        return {
+            supported: false,
+            message: `Client version ${clientVersion} is below minimum supported version ${minVersion}. Please upgrade.`,
+        };
+    }
+    return { supported: true };
+};
+export const createVersionChecker = (minVersion) => {
+    return async (c, next) => {
+        const clientVersion = c.req.header("x-covara-client-version");
+        const result = checkMinimumVersion(clientVersion, minVersion);
+        if (!result.supported) {
+            return c.json({
+                type: "/__covara/problems/unsupported-version",
+                title: "Unsupported client version",
+                status: 400,
+                detail: result.message,
+                minVersion,
+                clientVersion,
+            }, 400);
+        }
+        return next();
+    };
+};
+export const CURSOR_VERSION_HEADER = "X-Covara-Cursor-Version";
+export const SCHEMA_VERSION_HEADER = "X-Covara-Schema-Version";
+export const schemaVersionMiddleware = (schemaVersion) => {
+    const versionStr = String(schemaVersion);
+    return async (c, next) => {
+        c.header(SCHEMA_VERSION_HEADER, versionStr);
+        return next();
+    };
+};
+export const formatSchemaVersionEvent = (version, resource, changes) => {
+    const event = {
+        type: "schemaVersion",
+        version,
+        resource,
+        changes,
+    };
+    return `event: schemaVersion\ndata: ${JSON.stringify(event)}\n\n`;
+};
+//# sourceMappingURL=versioning.js.map

package/dist/middleware/versioning.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"versioning.js","sourceRoot":"","sources":["../../src/middleware/versioning.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,cAAc,GAAG,OAAO,CAAC;AAmBtC,MAAM,cAAc,GAAqG;IACvH,cAAc,EAAE,cAAc;IAC9B,UAAU,EAAE,kBAAkB;CAC/B,CAAC;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,SAA2B,EAAE,EAAqB,EAAE;IACvF,MAAM,YAAY,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,MAAM,EAAE,CAAC;IACtD,MAAM,EAAE,cAAc,EAAE,UAAU,EAAE,GAAG,YAAY,CAAC;IACpD,MAAM,mBAAmB,GAAG,MAAM,CAAC,mBAAmB,IAAI,MAAM,CAAC,YAAY,IAAI,EAAE,CAAC;IAEpF,OAAO,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QACvB,CAAC,CAAC,GAAG,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;QACpC,CAAC,CAAC,MAAM,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;QAErC,IAAI,mBAAmB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACnC,MAAM,kBAAkB,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE;gBAChE,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;oBAC1B,OAAO,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;gBAC3E,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC,CAAC,CAAC;YAEH,IAAI,kBAAkB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAClC,MAAM,eAAe,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;oBACzD,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;wBACpB,IAAI,GAAG,GAAG,GAAG,OAAO,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC;wBACnD,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;4BACxB,GAAG,IAAI,SAAS,OAAO,CAAC,WAAW,YAAY,CAAC;wBAClD,CAAC;wBACD,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;4BACvB,GAAG,IAAI,YAAY,OAAO,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;wBACtE,CAAC;wBACD,OAAO,GAAG,CAAC;oBACb,CAAC;oBACD,OAAO,OAAO,CAAC,OAAO,CAAC;gBACzB,CAAC,CAAC,CAAC;gBAEH,CAAC,CAAC,MAAM,CAAC,eAAe,EAAE,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;gBAEtD,MAAM,UAAU,GAAG,kBAAkB;qBAClC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC;qBACxB,MAAM,CAAC,OAAO,CAAC;qBACf,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAE,CAAC,OAAO,EAAE,GAAG,CAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAEpD,IAAI,UAAU,EAAE,CAAC;oBACf,CAAC,CAAC,MAAM,CAAC,aAAa,EAAE,UAAU,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;oBAChE,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC;gBAC/C,CAAC;qBAAM,CAAC;oBACN,CAAC,CAAC,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;gBAClC,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC,CAAC;AACJ,CAAC,CAAC;AASF,MAAM,CAAC,MAAM,2BAA2B,GAAG,CACzC,KAAU,EACV,YAAgC,EACsD,EAAE;IACxF,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACxB,MAAM,QAAQ,GAAiE,EAAE,CAAC;QAElF,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;YACvC,IAAI,WAAW,CAAC,KAAK,IAAI,IAAI,EAAE,CAAC;gBAC9B,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,aAAa;oBACnB,KAAK,EAAE,WAAW,CAAC,KAAK;oBACxB,WAAW,EAAE,WAAW,CAAC,WAAW;iBACrC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,OAAO,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;QAC1C,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AAkBF,MAAM,CAAC,MAAM,eAAe,GAAG,CAC7B,IAAO,EACP,QAAkD,EAC5B,EAAE;IACxB,MAAM,QAAQ,GAAyB;QACrC,IAAI;QACJ,OAAO,EAAE,cAAc;QACvB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC;IAEF,IAAI,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpC,QAAQ,CAAC,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YACrC,IAAI,SAAS,IAAI,CAAC,IAAI,YAAY,IAAI,CAAC,EAAE,CAAC;gBACxC,MAAM,GAAG,GAAG,CAAuB,CAAC;gBACpC,OAAO;oBACL,IAAI,EAAE,aAAa;oBACnB,OAAO,EAAE,GAAG,CAAC,OAAO;oBACpB,OAAO,EAAE,GAAG,CAAC,OAAO;oBACpB,WAAW,EAAE,GAAG,CAAC,WAAW;oBAC5B,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;iBACxD,CAAC;YACJ,CAAC;YACD,OAAO,CAAmB,CAAC;QAC7B,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC,CAAC;AAEF,MAAM,YAAY,GAAG,CAAC,OAAe,EAA+E,EAAE;IACpH,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC;IACzE,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,OAAO;QACL,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QAC7B,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,EAAE,CAAC;QACpC,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,EAAE,CAAC;QACpC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC;KACrB,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,eAAe,GAAG,CAAC,EAAU,EAAE,EAAU,EAAU,EAAE;IACzD,MAAM,OAAO,GAAG,YAAY,CAAC,EAAE,CAAC,CAAC;IACjC,MAAM,OAAO,GAAG,YAAY,CAAC,EAAE,CAAC,CAAC;IAEjC,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO;QAAE,OAAO,CAAC,CAAC;IAEnC,IAAI,OAAO,CAAC,KAAK,KAAK,OAAO,CAAC,KAAK;QAAE,OAAO,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;IAC1E,IAAI,OAAO,CAAC,KAAK,KAAK,OAAO,CAAC,KAAK;QAAE,OAAO,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;IAC1E,IAAI,OAAO,CAAC,KAAK,KAAK,OAAO,CAAC,KAAK;QAAE,OAAO,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;IAE1E,IAAI,OAAO,CAAC,UAAU,IAAI,CAAC,OAAO,CAAC,UAAU;QAAE,OAAO,CAAC,CAAC,CAAC;IACzD,IAAI,CAAC,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,UAAU;QAAE,OAAO,CAAC,CAAC;IAExD,OAAO,CAAC,CAAC;AACX,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,mBAAmB,GAAG,CACjC,aAAiC,EACjC,UAAkB,EACwB,EAAE;IAC5C,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IAC7B,CAAC;IAED,MAAM,MAAM,GAAG,YAAY,CAAC,aAAa,CAAC,CAAC;IAC3C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO;YACL,SAAS,EAAE,KAAK;YAChB,OAAO,EAAE,2BAA2B,aAAa,EAAE;SACpD,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,eAAe,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;IAC9D,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;QACnB,OAAO;YACL,SAAS,EAAE,KAAK;YAChB,OAAO,EAAE,kBAAkB,aAAa,uCAAuC,UAAU,mBAAmB;SAC7G,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AAC7B,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,UAAkB,EAAqB,EAAE;IAC5E,OAAO,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QACvB,MAAM,aAAa,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,yBAAyB,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,mBAAmB,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;QAE9D,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YACtB,OAAO,CAAC,CAAC,IAAI,CACX;gBACE,IAAI,EAAE,wCAAwC;gBAC9C,KAAK,EAAE,4BAA4B;gBACnC,MAAM,EAAE,GAAG;gBACX,MAAM,EAAE,MAAM,CAAC,OAAO;gBACtB,UAAU;gBACV,aAAa;aACd,EACD,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAG,yBAAyB,CAAC;AAC/D,MAAM,CAAC,MAAM,qBAAqB,GAAG,yBAAyB,CAAC;AAE/D,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,aAA8B,EAAqB,EAAE;IAC3F,MAAM,UAAU,GAAG,MAAM,CAAC,aAAa,CAAC,CAAC;IACzC,OAAO,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QACvB,CAAC,CAAC,MAAM,CAAC,qBAAqB,EAAE,UAAU,CAAC,CAAC;QAC5C,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC,CAAC;AACJ,CAAC,CAAC;AASF,MAAM,CAAC,MAAM,wBAAwB,GAAG,CACtC,OAAe,EACf,QAAgB,EAChB,OAAiB,EACT,EAAE;IACV,MAAM,KAAK,GAAuB;QAChC,IAAI,EAAE,eAAe;QACrB,OAAO;QACP,QAAQ;QACR,OAAO;KACR,CAAC;IAEF,OAAO,+BAA+B,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC;AACpE,CAAC,CAAC"}

package/dist/oidc/backends/email-password.d.ts

@@ -0,0 +1,3 @@
+import { AuthBackend, EmailPasswordBackendConfig } from "../types.js";
+export declare const createEmailPasswordBackend: (config: EmailPasswordBackendConfig) => AuthBackend;
+//# sourceMappingURL=email-password.d.ts.map

package/dist/oidc/backends/email-password.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"email-password.d.ts","sourceRoot":"","sources":["../../../src/oidc/backends/email-password.ts"],"names":[],"mappings":"AACA,OAAO,EACL,WAAW,EAEX,0BAA0B,EAC3B,MAAM,UAAU,CAAC;AAGlB,eAAO,MAAM,0BAA0B,GACrC,QAAQ,0BAA0B,KACjC,WAyCD,CAAC"}

package/dist/oidc/backends/email-password.js

@@ -0,0 +1,37 @@
+import { readFormBody } from "../body.js";
+export const createEmailPasswordBackend = (config) => ({
+    name: "email-password",
+    async authenticate(c) {
+        const body = await readFormBody(c);
+        const { email, password } = body;
+        if (!email || !password) {
+            return { success: false, error: "Email and password are required" };
+        }
+        const user = await config.validateUser(email, password);
+        if (!user) {
+            return { success: false, error: "Invalid email or password" };
+        }
+        return {
+            success: true,
+            user,
+            authTime: Math.floor(Date.now() / 1000),
+            amr: ["pwd"],
+        };
+    },
+    getLoginForm() {
+        return {
+            fields: [
+                { name: "email", type: "email", label: "Email", required: true },
+                { name: "password", type: "password", label: "Password", required: true },
+            ],
+        };
+    },
+    supportsSignup: !!config.createUser,
+    async createUser(data) {
+        if (!config.createUser) {
+            throw new Error("User creation not supported");
+        }
+        return config.createUser(data);
+    },
+});
+//# sourceMappingURL=email-password.js.map

package/dist/oidc/backends/email-password.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"email-password.js","sourceRoot":"","sources":["../../../src/oidc/backends/email-password.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEvC,MAAM,CAAC,MAAM,0BAA0B,GAAG,CACxC,MAAkC,EACrB,EAAE,CAAC,CAAC;IACjB,IAAI,EAAE,gBAAgB;IAEtB,KAAK,CAAC,YAAY,CAAC,CAAU;QAC3B,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,CAAC,CAAC,CAAC;QACnC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC;QAEjC,IAAI,CAAC,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;YACxB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,iCAAiC,EAAE,CAAC;QACtE,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QACxD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC;QAChE,CAAC;QAED,OAAO;YACL,OAAO,EAAE,IAAI;YACb,IAAI;YACJ,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;YACvC,GAAG,EAAE,CAAC,KAAK,CAAC;SACb,CAAC;IACJ,CAAC;IAED,YAAY;QACV,OAAO;YACL,MAAM,EAAE;gBACN,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE;gBAChE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE;aAC1E;SACF,CAAC;IACJ,CAAC;IAED,cAAc,EAAE,CAAC,CAAC,MAAM,CAAC,UAAU;IAEnC,KAAK,CAAC,UAAU,CAAC,IAAwD;QACvE,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACjD,CAAC;QACD,OAAO,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;CACF,CAAC,CAAC"}

package/dist/oidc/backends/federated.d.ts

@@ -0,0 +1,13 @@
+import { AuthBackend, FederatedProvider, OIDCUser, StateStore } from "../types.js";
+export declare const clearFederatedCaches: () => void;
+interface FederatedBackendConfig {
+    providers: FederatedProvider[];
+    baseUrl: string;
+    stateStore: StateStore;
+    findUserByAccount: (provider: string, providerAccountId: string) => Promise<OIDCUser | null>;
+    createUser: (userInfo: Record<string, unknown>, provider: string) => Promise<OIDCUser>;
+    linkAccount?: (userId: string, provider: string, providerAccountId: string) => Promise<void>;
+}
+export declare const createFederatedBackend: (config: FederatedBackendConfig) => AuthBackend;
+export {};
+//# sourceMappingURL=federated.d.ts.map

package/dist/oidc/backends/federated.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"federated.d.ts","sourceRoot":"","sources":["../../../src/oidc/backends/federated.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,WAAW,EAEX,iBAAiB,EAGjB,QAAQ,EACR,UAAU,EACX,MAAM,UAAU,CAAC;AAalB,eAAO,MAAM,oBAAoB,QAAO,IAGvC,CAAC;AAyFF,UAAU,sBAAsB;IAC9B,SAAS,EAAE,iBAAiB,EAAE,CAAC;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,UAAU,CAAC;IACvB,iBAAiB,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,KAAK,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC;IAC7F,UAAU,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;IACvF,WAAW,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9F;AAED,eAAO,MAAM,sBAAsB,GAAI,QAAQ,sBAAsB,KAAG,WAgMvE,CAAC"}

package/dist/oidc/backends/federated.js

@@ -0,0 +1,225 @@
+import { Hono } from "hono";
+import * as crypto from "node:crypto";
+import jwt from "jsonwebtoken";
+const base64UrlEncode = (buffer) => {
+    return buffer
+        .toString("base64")
+        .replace(/\+/g, "-")
+        .replace(/\//g, "_")
+        .replace(/=/g, "");
+};
+const discoveryCache = new Map();
+const jwksCache = new Map();
+export const clearFederatedCaches = () => {
+    discoveryCache.clear();
+    jwksCache.clear();
+};
+const fetchJwks = async (jwksUri) => {
+    const cached = jwksCache.get(jwksUri);
+    if (cached && Date.now() < cached.expiresAt) {
+        return cached.keys;
+    }
+    const response = await fetch(jwksUri);
+    if (!response.ok) {
+        throw new Error(`Failed to fetch JWKS from ${jwksUri}`);
+    }
+    const body = (await response.json());
+    const keys = body.keys ?? [];
+    jwksCache.set(jwksUri, { keys, expiresAt: Date.now() + 3600000 });
+    return keys;
+};
+const jwkToPublicKey = (jwk) => {
+    return crypto.createPublicKey({
+        key: jwk,
+        format: "jwk",
+    });
+};
+const verifyIdToken = async (idToken, discovery, provider) => {
+    const decoded = jwt.decode(idToken, { complete: true });
+    if (!decoded?.header) {
+        throw new Error("Invalid id_token format");
+    }
+    const keys = await fetchJwks(discovery.jwks_uri);
+    const candidates = decoded.header.kid
+        ? keys.filter((k) => k.kid === decoded.header.kid)
+        : keys;
+    if (candidates.length === 0) {
+        throw new Error("No matching JWKS key for id_token");
+    }
+    let lastError;
+    for (const jwk of candidates) {
+        try {
+            const payload = jwt.verify(idToken, jwkToPublicKey(jwk), {
+                algorithms: jwk.alg ? [jwk.alg] : undefined,
+                issuer: provider.issuer,
+                audience: provider.clientId,
+            });
+            return payload;
+        }
+        catch (error) {
+            lastError = error;
+        }
+    }
+    throw new Error(`id_token signature verification failed: ${lastError instanceof Error ? lastError.message : String(lastError)}`);
+};
+const fetchDiscovery = async (issuer) => {
+    const cached = discoveryCache.get(issuer);
+    if (cached && Date.now() < cached.expiresAt) {
+        return cached.doc;
+    }
+    const url = issuer.endsWith("/")
+        ? `${issuer}.well-known/openid-configuration`
+        : `${issuer}/.well-known/openid-configuration`;
+    const response = await fetch(url);
+    if (!response.ok) {
+        throw new Error(`Failed to fetch OIDC discovery document from ${url}`);
+    }
+    const doc = (await response.json());
+    discoveryCache.set(issuer, { doc, expiresAt: Date.now() + 3600000 });
+    return doc;
+};
+export const createFederatedBackend = (config) => {
+    const providerMap = new Map();
+    for (const provider of config.providers) {
+        providerMap.set(provider.name, provider);
+    }
+    return {
+        name: "federated",
+        async authenticate(_c) {
+            return { success: false, error: "Use handleExternalCallback for federated auth" };
+        },
+        getExternalProviders() {
+            return config.providers.map((p) => ({
+                name: p.name,
+                authUrl: `/auth/federated/${p.name}`,
+            }));
+        },
+        async initiateExternalAuth(providerName, c) {
+            const provider = providerMap.get(providerName);
+            if (!provider) {
+                return c.json({ error: `Unknown provider: ${providerName}` }, 400);
+            }
+            const discovery = await fetchDiscovery(provider.issuer);
+            const state = crypto.randomUUID();
+            const nonce = crypto.randomUUID();
+            const codeVerifier = base64UrlEncode(crypto.randomBytes(32));
+            const codeChallenge = base64UrlEncode(crypto.createHash("sha256").update(codeVerifier).digest());
+            const interactionId = c.req.query("interaction");
+            await config.stateStore.set(state, {
+                provider: providerName,
+                nonce,
+                codeVerifier,
+                returnTo: interactionId ? `/login?interaction=${interactionId}` : undefined,
+            });
+            const authUrl = new URL(discovery.authorization_endpoint);
+            authUrl.searchParams.set("client_id", provider.clientId);
+            authUrl.searchParams.set("redirect_uri", `${config.baseUrl}/auth/federated/callback`);
+            authUrl.searchParams.set("response_type", "code");
+            authUrl.searchParams.set("scope", (provider.scopes ?? ["openid", "email", "profile"]).join(" "));
+            authUrl.searchParams.set("state", state);
+            authUrl.searchParams.set("nonce", nonce);
+            authUrl.searchParams.set("code_challenge", codeChallenge);
+            authUrl.searchParams.set("code_challenge_method", "S256");
+            return c.redirect(authUrl.toString(), 302);
+        },
+        async handleExternalCallback(c) {
+            const code = c.req.query("code");
+            const state = c.req.query("state");
+            const error = c.req.query("error");
+            const error_description = c.req.query("error_description");
+            if (error) {
+                return { success: false, error: error_description ?? error };
+            }
+            if (!code || !state) {
+                return { success: false, error: "Missing code or state parameter" };
+            }
+            const stateData = await config.stateStore.get(state);
+            if (!stateData) {
+                return { success: false, error: "Invalid or expired state" };
+            }
+            await config.stateStore.delete(state);
+            const provider = providerMap.get(stateData.provider);
+            if (!provider) {
+                return { success: false, error: `Unknown provider: ${stateData.provider}` };
+            }
+            const discovery = await fetchDiscovery(provider.issuer);
+            const tokenParams = new URLSearchParams({
+                grant_type: "authorization_code",
+                code,
+                redirect_uri: `${config.baseUrl}/auth/federated/callback`,
+                client_id: provider.clientId,
+                client_secret: provider.clientSecret,
+                code_verifier: stateData.codeVerifier,
+            });
+            const tokenResponse = await fetch(discovery.token_endpoint, {
+                method: "POST",
+                headers: { "Content-Type": "application/x-www-form-urlencoded" },
+                body: tokenParams.toString(),
+            });
+            if (!tokenResponse.ok) {
+                const errorText = await tokenResponse.text();
+                return { success: false, error: `Token exchange failed: ${errorText}` };
+            }
+            const tokens = (await tokenResponse.json());
+            let verifiedClaims = null;
+            if (tokens.id_token) {
+                try {
+                    verifiedClaims = await verifyIdToken(tokens.id_token, discovery, provider);
+                }
+                catch (error) {
+                    return {
+                        success: false,
+                        error: `id_token verification failed: ${error instanceof Error ? error.message : String(error)}`,
+                    };
+                }
+                if (verifiedClaims.nonce && verifiedClaims.nonce !== stateData.nonce) {
+                    return { success: false, error: "id_token nonce mismatch" };
+                }
+            }
+            const userinfoResponse = await fetch(discovery.userinfo_endpoint, {
+                headers: { Authorization: `Bearer ${tokens.access_token}` },
+            });
+            if (!userinfoResponse.ok) {
+                return { success: false, error: "Failed to fetch user info" };
+            }
+            const userInfo = (await userinfoResponse.json());
+            if (verifiedClaims?.sub &&
+                userInfo.sub &&
+                verifiedClaims.sub !== userInfo.sub) {
+                return { success: false, error: "userinfo sub does not match id_token sub" };
+            }
+            const providerAccountId = (verifiedClaims?.sub ?? userInfo.sub);
+            let user = await config.findUserByAccount(stateData.provider, providerAccountId);
+            if (!user) {
+                user = provider.mapUser
+                    ? await provider.mapUser(userInfo)
+                    : await config.createUser(userInfo, stateData.provider);
+                if (config.linkAccount) {
+                    await config.linkAccount(user.id, stateData.provider, providerAccountId);
+                }
+            }
+            return {
+                success: true,
+                user,
+                authTime: Math.floor(Date.now() / 1000),
+                amr: ["fed"],
+                provider: stateData.provider,
+            };
+        },
+        getRoutes() {
+            const router = new Hono();
+            router.get("/callback", async (c) => {
+                const result = await this.handleExternalCallback(c);
+                if (!result.success) {
+                    return c.json({ error: result.error }, 400);
+                }
+                return c.json({ success: true, user: result.user });
+            });
+            router.get("/:provider", async (c) => {
+                return this.initiateExternalAuth(c.req.param("provider"), c);
+            });
+            return router;
+        },
+    };
+};
+//# sourceMappingURL=federated.js.map

package/dist/oidc/backends/federated.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"federated.js","sourceRoot":"","sources":["../../../src/oidc/backends/federated.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAgB,MAAM,MAAM,CAAC;AAC1C,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AACtC,OAAO,GAAG,MAAM,cAAc,CAAC;AAW/B,MAAM,eAAe,GAAG,CAAC,MAAc,EAAU,EAAE;IACjD,OAAO,MAAM;SACV,QAAQ,CAAC,QAAQ,CAAC;SAClB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;AACvB,CAAC,CAAC;AAEF,MAAM,cAAc,GAAG,IAAI,GAAG,EAA6D,CAAC;AAC5F,MAAM,SAAS,GAAG,IAAI,GAAG,EAA8C,CAAC;AAExE,MAAM,CAAC,MAAM,oBAAoB,GAAG,GAAS,EAAE;IAC7C,cAAc,CAAC,KAAK,EAAE,CAAC;IACvB,SAAS,CAAC,KAAK,EAAE,CAAC;AACpB,CAAC,CAAC;AAEF,MAAM,SAAS,GAAG,KAAK,EAAE,OAAe,EAAkB,EAAE;IAC1D,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACtC,IAAI,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC;QAC5C,OAAO,MAAM,CAAC,IAAI,CAAC;IACrB,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC;IACtC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,6BAA6B,OAAO,EAAE,CAAC,CAAC;IAC1D,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAoB,CAAC;IACxD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;IAC7B,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;IAClE,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AAEF,MAAM,cAAc,GAAG,CAAC,GAAQ,EAAoB,EAAE;IACpD,OAAO,MAAM,CAAC,eAAe,CAAC;QAC5B,GAAG,EAAE,GAA4B;QACjC,MAAM,EAAE,KAAK;KACd,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,aAAa,GAAG,KAAK,EACzB,OAAe,EACf,SAAgC,EAChC,QAA2B,EACF,EAAE;IAC3B,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAE9C,CAAC;IACT,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC7C,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IACjD,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG;QACnC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC;QAClD,CAAC,CAAC,IAAI,CAAC;IAET,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,CAAC;IAED,IAAI,SAAkB,CAAC;IACvB,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,cAAc,CAAC,GAAG,CAAC,EAAE;gBACvD,UAAU,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAoB,CAAC,CAAC,CAAC,CAAC,SAAS;gBAC5D,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;aAC5B,CAAmB,CAAC;YACrB,OAAO,OAAO,CAAC;QACjB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,SAAS,GAAG,KAAK,CAAC;QACpB,CAAC;IACH,CAAC;IAED,MAAM,IAAI,KAAK,CACb,2CACE,SAAS,YAAY,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CACnE,EAAE,CACH,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,cAAc,GAAG,KAAK,EAAE,MAAc,EAAkC,EAAE;IAC9E,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC1C,IAAI,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC;QAC5C,OAAO,MAAM,CAAC,GAAG,CAAC;IACpB,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;QAC9B,CAAC,CAAC,GAAG,MAAM,kCAAkC;QAC7C,CAAC,CAAC,GAAG,MAAM,mCAAmC,CAAC;IAEjD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,gDAAgD,GAAG,EAAE,CAAC,CAAC;IACzE,CAAC;IAED,MAAM,GAAG,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA0B,CAAC;IAC7D,cAAc,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;IAErE,OAAO,GAAG,CAAC;AACb,CAAC,CAAC;AAWF,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,MAA8B,EAAe,EAAE;IACpF,MAAM,WAAW,GAAG,IAAI,GAAG,EAA6B,CAAC;IACzD,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QACxC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC3C,CAAC;IAED,OAAO;QACL,IAAI,EAAE,WAAW;QAEjB,KAAK,CAAC,YAAY,CAAC,EAAW;YAC5B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,+CAA+C,EAAE,CAAC;QACpF,CAAC;QAED,oBAAoB;YAClB,OAAO,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAClC,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,OAAO,EAAE,mBAAmB,CAAC,CAAC,IAAI,EAAE;aACrC,CAAC,CAAC,CAAC;QACN,CAAC;QAED,KAAK,CAAC,oBAAoB,CAAC,YAAoB,EAAE,CAAU;YACzD,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YAC/C,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,qBAAqB,YAAY,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;YACrE,CAAC;YAED,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAExD,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;YAClC,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;YAClC,MAAM,YAAY,GAAG,eAAe,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;YAC7D,MAAM,aAAa,GAAG,eAAe,CACnC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,EAAE,CAC1D,CAAC;YAEF,MAAM,aAAa,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;YAEjD,MAAM,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE;gBACjC,QAAQ,EAAE,YAAY;gBACtB,KAAK;gBACL,YAAY;gBACZ,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC,sBAAsB,aAAa,EAAE,CAAC,CAAC,CAAC,SAAS;aAC5E,CAAC,CAAC;YAEH,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC;YAC1D,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACzD,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,MAAM,CAAC,OAAO,0BAA0B,CAAC,CAAC;YACtF,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;YAClD,OAAO,CAAC,YAAY,CAAC,GAAG,CACtB,OAAO,EACP,CAAC,QAAQ,CAAC,MAAM,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAC9D,CAAC;YACF,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACzC,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACzC,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,gBAAgB,EAAE,aAAa,CAAC,CAAC;YAC1D,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,uBAAuB,EAAE,MAAM,CAAC,CAAC;YAE1D,OAAO,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,GAAG,CAAC,CAAC;QAC7C,CAAC;QAED,KAAK,CAAC,sBAAsB,CAAC,CAAU;YACrC,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACjC,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACnC,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACnC,MAAM,iBAAiB,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;YAE3D,IAAI,KAAK,EAAE,CAAC;gBACV,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,IAAI,KAAK,EAAE,CAAC;YAC/D,CAAC;YAED,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBACpB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,iCAAiC,EAAE,CAAC;YACtE,CAAC;YAED,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YACrD,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC;YAC/D,CAAC;YAED,MAAM,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAEtC,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;YACrD,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,qBAAqB,SAAS,CAAC,QAAQ,EAAE,EAAE,CAAC;YAC9E,CAAC;YAED,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAExD,MAAM,WAAW,GAAG,IAAI,eAAe,CAAC;gBACtC,UAAU,EAAE,oBAAoB;gBAChC,IAAI;gBACJ,YAAY,EAAE,GAAG,MAAM,CAAC,OAAO,0BAA0B;gBACzD,SAAS,EAAE,QAAQ,CAAC,QAAQ;gBAC5B,aAAa,EAAE,QAAQ,CAAC,YAAY;gBACpC,aAAa,EAAE,SAAS,CAAC,YAAY;aACtC,CAAC,CAAC;YAEH,MAAM,aAAa,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,cAAc,EAAE;gBAC1D,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;gBAChE,IAAI,EAAE,WAAW,CAAC,QAAQ,EAAE;aAC7B,CAAC,CAAC;YAEH,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC;gBACtB,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,CAAC;gBAC7C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,0BAA0B,SAAS,EAAE,EAAE,CAAC;YAC1E,CAAC;YAED,MAAM,MAAM,GAAG,CAAC,MAAM,aAAa,CAAC,IAAI,EAAE,CAGzC,CAAC;YAEF,IAAI,cAAc,GAA0B,IAAI,CAAC;YACjD,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACpB,IAAI,CAAC;oBACH,cAAc,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;gBAC7E,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,OAAO;wBACL,OAAO,EAAE,KAAK;wBACd,KAAK,EAAE,iCACL,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACvD,EAAE;qBACH,CAAC;gBACJ,CAAC;gBAED,IAAI,cAAc,CAAC,KAAK,IAAI,cAAc,CAAC,KAAK,KAAK,SAAS,CAAC,KAAK,EAAE,CAAC;oBACrE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC;gBAC9D,CAAC;YACH,CAAC;YAED,MAAM,gBAAgB,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,iBAAkB,EAAE;gBACjE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,CAAC,YAAY,EAAE,EAAE;aAC5D,CAAC,CAAC;YAEH,IAAI,CAAC,gBAAgB,CAAC,EAAE,EAAE,CAAC;gBACzB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC;YAChE,CAAC;YAED,MAAM,QAAQ,GAAG,CAAC,MAAM,gBAAgB,CAAC,IAAI,EAAE,CAA4B,CAAC;YAE5E,IACE,cAAc,EAAE,GAAG;gBACnB,QAAQ,CAAC,GAAG;gBACZ,cAAc,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,EACnC,CAAC;gBACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,0CAA0C,EAAE,CAAC;YAC/E,CAAC;YAED,MAAM,iBAAiB,GAAG,CAAC,cAAc,EAAE,GAAG,IAAI,QAAQ,CAAC,GAAG,CAAW,CAAC;YAE1E,IAAI,IAAI,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,SAAS,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC;YAEjF,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,IAAI,GAAG,QAAQ,CAAC,OAAO;oBACrB,CAAC,CAAC,MAAM,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC;oBAClC,CAAC,CAAC,MAAM,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAC;gBAE1D,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;oBACvB,MAAM,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC;gBAC3E,CAAC;YACH,CAAC;YAED,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,IAAI;gBACJ,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;gBACvC,GAAG,EAAE,CAAC,KAAK,CAAC;gBACZ,QAAQ,EAAE,SAAS,CAAC,QAAQ;aAC7B,CAAC;QACJ,CAAC;QAED,SAAS;YACP,MAAM,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YAE1B,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;gBAClC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,sBAAuB,CAAC,CAAC,CAAC,CAAC;gBAErD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;oBACpB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,EAAE,GAAG,CAAC,CAAC;gBAC9C,CAAC;gBAED,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YACtD,CAAC,CAAC,CAAC;YAEH,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;gBACnC,OAAO,IAAI,CAAC,oBAAqB,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;YAChE,CAAC,CAAC,CAAC;YAEH,OAAO,MAAM,CAAC;QAChB,CAAC;KACF,CAAC;AACJ,CAAC,CAAC"}

package/dist/oidc/backends/index.d.ts

@@ -0,0 +1,3 @@
+export { createEmailPasswordBackend } from "./email-password.js";
+export { createFederatedBackend } from "./federated.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/oidc/backends/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/oidc/backends/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC"}

package/dist/oidc/backends/index.js

@@ -0,0 +1,3 @@
+export { createEmailPasswordBackend } from "./email-password.js";
+export { createFederatedBackend } from "./federated.js";
+//# sourceMappingURL=index.js.map

package/dist/oidc/backends/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/oidc/backends/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC"}