covara 0.0.1 → 0.6.0

package/dist/oidc/stores/index.js

@@ -0,0 +1,337 @@
+import { getGlobalKV, hasGlobalKV } from "../../kv/index.js";
+const PREFIX = "oidc";
+export class InMemoryClientStore {
+    constructor(clients = []) {
+        this.clients = new Map();
+        for (const client of clients) {
+            this.clients.set(client.id, client);
+        }
+    }
+    async get(clientId) {
+        return this.clients.get(clientId) ?? null;
+    }
+    async getAll() {
+        return Array.from(this.clients.values());
+    }
+    async set(client) {
+        this.clients.set(client.id, client);
+    }
+    async delete(clientId) {
+        this.clients.delete(clientId);
+    }
+}
+export class InMemoryAuthorizationCodeStore {
+    constructor() {
+        this.codes = new Map();
+    }
+    async set(code) {
+        this.codes.set(code.code, code);
+        setTimeout(() => this.codes.delete(code.code), code.expiresAt - Date.now());
+    }
+    async get(code) {
+        const data = this.codes.get(code);
+        if (!data)
+            return null;
+        if (Date.now() > data.expiresAt) {
+            this.codes.delete(code);
+            return null;
+        }
+        return data;
+    }
+    async delete(code) {
+        this.codes.delete(code);
+    }
+}
+export class InMemoryRefreshTokenStore {
+    constructor() {
+        this.tokens = new Map();
+        this.userIndex = new Map();
+    }
+    async set(data) {
+        this.tokens.set(data.token, data);
+        const userTokens = this.userIndex.get(data.userId) ?? new Set();
+        userTokens.add(data.token);
+        this.userIndex.set(data.userId, userTokens);
+    }
+    async get(token) {
+        const data = this.tokens.get(token);
+        if (!data)
+            return null;
+        if (Date.now() > data.expiresAt) {
+            await this.delete(token);
+            return null;
+        }
+        return data;
+    }
+    async delete(token) {
+        const data = this.tokens.get(token);
+        if (data) {
+            const userTokens = this.userIndex.get(data.userId);
+            userTokens?.delete(token);
+        }
+        this.tokens.delete(token);
+    }
+    async deleteByUserId(userId) {
+        const userTokens = this.userIndex.get(userId);
+        if (userTokens) {
+            for (const token of userTokens) {
+                this.tokens.delete(token);
+            }
+            this.userIndex.delete(userId);
+        }
+    }
+}
+export class InMemoryConsentStore {
+    constructor() {
+        this.consents = new Map();
+    }
+    key(userId, clientId) {
+        return `${userId}:${clientId}`;
+    }
+    async get(userId, clientId) {
+        const consent = this.consents.get(this.key(userId, clientId));
+        if (!consent)
+            return null;
+        if (consent.expiresAt && Date.now() > consent.expiresAt) {
+            await this.delete(userId, clientId);
+            return null;
+        }
+        return consent;
+    }
+    async set(consent) {
+        this.consents.set(this.key(consent.userId, consent.clientId), consent);
+    }
+    async delete(userId, clientId) {
+        this.consents.delete(this.key(userId, clientId));
+    }
+    async deleteByUserId(userId) {
+        for (const [key] of this.consents) {
+            if (key.startsWith(`${userId}:`)) {
+                this.consents.delete(key);
+            }
+        }
+    }
+}
+export class InMemoryInteractionStore {
+    constructor() {
+        this.interactions = new Map();
+    }
+    async set(id, data) {
+        this.interactions.set(id, data);
+        setTimeout(() => this.interactions.delete(id), data.expiresAt - Date.now());
+    }
+    async get(id) {
+        const data = this.interactions.get(id);
+        if (!data)
+            return null;
+        if (Date.now() > data.expiresAt) {
+            this.interactions.delete(id);
+            return null;
+        }
+        return data;
+    }
+    async delete(id) {
+        this.interactions.delete(id);
+    }
+}
+export class InMemoryStateStore {
+    constructor() {
+        this.states = new Map();
+    }
+    async set(state, data) {
+        this.states.set(state, data);
+        setTimeout(() => this.states.delete(state), 10 * 60 * 1000);
+    }
+    async get(state) {
+        return this.states.get(state) ?? null;
+    }
+    async delete(state) {
+        this.states.delete(state);
+    }
+}
+export class KVClientStore {
+    constructor(kv, prefix = PREFIX) {
+        this.kv = kv;
+        this.prefix = prefix;
+    }
+    key(clientId) {
+        return `${this.prefix}:clients:${clientId}`;
+    }
+    async get(clientId) {
+        const data = await this.kv.get(this.key(clientId));
+        return data ? JSON.parse(data) : null;
+    }
+    async getAll() {
+        const keys = await this.kv.keys(`${this.prefix}:clients:*`);
+        const clients = [];
+        for (const key of keys) {
+            const data = await this.kv.get(key);
+            if (data)
+                clients.push(JSON.parse(data));
+        }
+        return clients;
+    }
+    async set(client) {
+        await this.kv.set(this.key(client.id), JSON.stringify(client));
+    }
+    async delete(clientId) {
+        await this.kv.del(this.key(clientId));
+    }
+}
+export class KVAuthorizationCodeStore {
+    constructor(kv, prefix = PREFIX) {
+        this.kv = kv;
+        this.prefix = prefix;
+    }
+    key(code) {
+        return `${this.prefix}:authcodes:${code}`;
+    }
+    async set(code) {
+        const ttl = Math.ceil((code.expiresAt - Date.now()) / 1000);
+        await this.kv.set(this.key(code.code), JSON.stringify(code), { ex: ttl });
+    }
+    async get(code) {
+        const data = await this.kv.get(this.key(code));
+        return data ? JSON.parse(data) : null;
+    }
+    async delete(code) {
+        await this.kv.del(this.key(code));
+    }
+}
+export class KVRefreshTokenStore {
+    constructor(kv, prefix = PREFIX) {
+        this.kv = kv;
+        this.prefix = prefix;
+    }
+    key(token) {
+        return `${this.prefix}:refresh:${token}`;
+    }
+    userKey(userId) {
+        return `${this.prefix}:refresh:user:${userId}`;
+    }
+    async set(data) {
+        const ttl = Math.ceil((data.expiresAt - Date.now()) / 1000);
+        await this.kv.set(this.key(data.token), JSON.stringify(data), { ex: ttl });
+        await this.kv.sadd(this.userKey(data.userId), data.token);
+    }
+    async get(token) {
+        const data = await this.kv.get(this.key(token));
+        return data ? JSON.parse(data) : null;
+    }
+    async delete(token) {
+        const data = await this.get(token);
+        if (data) {
+            await this.kv.srem(this.userKey(data.userId), token);
+        }
+        await this.kv.del(this.key(token));
+    }
+    async deleteByUserId(userId) {
+        const tokens = await this.kv.smembers(this.userKey(userId));
+        for (const token of tokens) {
+            await this.kv.del(this.key(token));
+        }
+        await this.kv.del(this.userKey(userId));
+    }
+}
+export class KVConsentStore {
+    constructor(kv, prefix = PREFIX) {
+        this.kv = kv;
+        this.prefix = prefix;
+    }
+    key(userId, clientId) {
+        return `${this.prefix}:consent:${userId}:${clientId}`;
+    }
+    async get(userId, clientId) {
+        const data = await this.kv.get(this.key(userId, clientId));
+        return data ? JSON.parse(data) : null;
+    }
+    async set(consent) {
+        const options = {};
+        if (consent.expiresAt) {
+            options.ex = Math.ceil((consent.expiresAt - Date.now()) / 1000);
+        }
+        await this.kv.set(this.key(consent.userId, consent.clientId), JSON.stringify(consent), options);
+    }
+    async delete(userId, clientId) {
+        await this.kv.del(this.key(userId, clientId));
+    }
+    async deleteByUserId(userId) {
+        const keys = await this.kv.keys(`${this.prefix}:consent:${userId}:*`);
+        for (const key of keys) {
+            await this.kv.del(key);
+        }
+    }
+}
+export class KVInteractionStore {
+    constructor(kv, prefix = PREFIX) {
+        this.kv = kv;
+        this.prefix = prefix;
+    }
+    key(id) {
+        return `${this.prefix}:interaction:${id}`;
+    }
+    async set(id, data) {
+        const ttl = Math.ceil((data.expiresAt - Date.now()) / 1000);
+        await this.kv.set(this.key(id), JSON.stringify(data), { ex: ttl });
+    }
+    async get(id) {
+        const data = await this.kv.get(this.key(id));
+        return data ? JSON.parse(data) : null;
+    }
+    async delete(id) {
+        await this.kv.del(this.key(id));
+    }
+}
+export class KVStateStore {
+    constructor(kv, prefix = PREFIX) {
+        this.kv = kv;
+        this.prefix = prefix;
+    }
+    key(state) {
+        return `${this.prefix}:state:${state}`;
+    }
+    async set(state, data) {
+        await this.kv.set(this.key(state), JSON.stringify(data), { ex: 600 });
+    }
+    async get(state) {
+        const data = await this.kv.get(this.key(state));
+        return data ? JSON.parse(data) : null;
+    }
+    async delete(state) {
+        await this.kv.del(this.key(state));
+    }
+}
+const buildKVStores = (kv, prefix, clients) => {
+    const clientStore = new KVClientStore(kv, prefix);
+    for (const client of clients) {
+        void clientStore.set(client);
+    }
+    return {
+        clients: clientStore,
+        authorizationCodes: new KVAuthorizationCodeStore(kv, prefix),
+        refreshTokens: new KVRefreshTokenStore(kv, prefix),
+        consent: new KVConsentStore(kv, prefix),
+        interactions: new KVInteractionStore(kv, prefix),
+        state: new KVStateStore(kv, prefix),
+    };
+};
+export const createStores = (config, clients) => {
+    const prefix = config?.prefix ?? PREFIX;
+    if (config?.kv) {
+        return buildKVStores(config.kv, prefix, clients);
+    }
+    const forcedMemory = config?.type === "memory";
+    if (!forcedMemory && hasGlobalKV()) {
+        return buildKVStores(getGlobalKV(), prefix, clients);
+    }
+    const clientStore = new InMemoryClientStore(clients);
+    return {
+        clients: clientStore,
+        authorizationCodes: new InMemoryAuthorizationCodeStore(),
+        refreshTokens: new InMemoryRefreshTokenStore(),
+        consent: new InMemoryConsentStore(),
+        interactions: new InMemoryInteractionStore(),
+        state: new InMemoryStateStore(),
+    };
+};
+//# sourceMappingURL=index.js.map

package/dist/oidc/stores/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/oidc/stores/index.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,MAAM,CAAC;AAEhD,MAAM,MAAM,GAAG,MAAM,CAAC;AAEtB,MAAM,OAAO,mBAAmB;IAG9B,YAAY,UAAwB,EAAE;QAF9B,YAAO,GAAG,IAAI,GAAG,EAAsB,CAAC;QAG9C,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,QAAgB;QACxB,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,MAAM;QACV,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC3C,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,MAAkB;QAC1B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,QAAgB;QAC3B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;CACF;AAED,MAAM,OAAO,8BAA8B;IAA3C;QACU,UAAK,GAAG,IAAI,GAAG,EAA6B,CAAC;IAoBvD,CAAC;IAlBC,KAAK,CAAC,GAAG,CAAC,IAAuB;QAC/B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAChC,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC9E,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,IAAY;QACpB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QACvB,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;YAChC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACxB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAY;QACvB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;CACF;AAED,MAAM,OAAO,yBAAyB;IAAtC;QACU,WAAM,GAAG,IAAI,GAAG,EAA4B,CAAC;QAC7C,cAAS,GAAG,IAAI,GAAG,EAAuB,CAAC;IAsCrD,CAAC;IApCC,KAAK,CAAC,GAAG,CAAC,IAAsB;QAC9B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAElC,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,GAAG,EAAE,CAAC;QAChE,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,KAAa;QACrB,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QACvB,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;YAChC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACzB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAAa;QACxB,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,IAAI,EAAE,CAAC;YACT,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACnD,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5B,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,MAAc;QACjC,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC9C,IAAI,UAAU,EAAE,CAAC;YACf,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;gBAC/B,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC5B,CAAC;YACD,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;CACF;AAED,MAAM,OAAO,oBAAoB;IAAjC;QACU,aAAQ,GAAG,IAAI,GAAG,EAAuB,CAAC;IA+BpD,CAAC;IA7BS,GAAG,CAAC,MAAc,EAAE,QAAgB;QAC1C,OAAO,GAAG,MAAM,IAAI,QAAQ,EAAE,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,MAAc,EAAE,QAAgB;QACxC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC9D,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAC1B,IAAI,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;YACxD,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YACpC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,OAAoB;QAC5B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC,CAAC;IACzE,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAAc,EAAE,QAAgB;QAC3C,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;IACnD,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,MAAc;QACjC,KAAK,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClC,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC;gBACjC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC;IACH,CAAC;CACF;AAED,MAAM,OAAO,wBAAwB;IAArC;QACU,iBAAY,GAAG,IAAI,GAAG,EAA2B,CAAC;IAuB5D,CAAC;IArBC,KAAK,CAAC,GAAG,CAAC,EAAU,EAAE,IAAqB;QACzC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAChC,UAAU,CACR,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC,EAClC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAC5B,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,EAAU;QAClB,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACvC,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QACvB,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;YAChC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC7B,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAU;QACrB,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC/B,CAAC;CACF;AAED,MAAM,OAAO,kBAAkB;IAA/B;QACU,WAAM,GAAG,IAAI,GAAG,EAGrB,CAAC;IAsBN,CAAC;IApBC,KAAK,CAAC,GAAG,CACP,KAAa,EACb,IAAkF;QAElF,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC7B,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC9D,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,KAAa;QAMrB,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAAa;QACxB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC;CACF;AAED,MAAM,OAAO,aAAa;IACxB,YACU,EAAa,EACb,SAAiB,MAAM;QADvB,OAAE,GAAF,EAAE,CAAW;QACb,WAAM,GAAN,MAAM,CAAiB;IAC9B,CAAC;IAEI,GAAG,CAAC,QAAgB;QAC1B,OAAO,GAAG,IAAI,CAAC,MAAM,YAAY,QAAQ,EAAE,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,QAAgB;QACxB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;QACnD,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,MAAM;QACV,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,YAAY,CAAC,CAAC;QAC5D,MAAM,OAAO,GAAiB,EAAE,CAAC;QACjC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACpC,IAAI,IAAI;gBAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3C,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,MAAkB;QAC1B,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IACjE,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,QAAgB;QAC3B,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;IACxC,CAAC;CACF;AAED,MAAM,OAAO,wBAAwB;IACnC,YACU,EAAa,EACb,SAAiB,MAAM;QADvB,OAAE,GAAF,EAAE,CAAW;QACb,WAAM,GAAN,MAAM,CAAiB;IAC9B,CAAC;IAEI,GAAG,CAAC,IAAY;QACtB,OAAO,GAAG,IAAI,CAAC,MAAM,cAAc,IAAI,EAAE,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,IAAuB;QAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;QAC5D,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IAC5E,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,IAAY;QACpB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QAC/C,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAY;QACvB,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IACpC,CAAC;CACF;AAED,MAAM,OAAO,mBAAmB;IAC9B,YACU,EAAa,EACb,SAAiB,MAAM;QADvB,OAAE,GAAF,EAAE,CAAW;QACb,WAAM,GAAN,MAAM,CAAiB;IAC9B,CAAC;IAEI,GAAG,CAAC,KAAa;QACvB,OAAO,GAAG,IAAI,CAAC,MAAM,YAAY,KAAK,EAAE,CAAC;IAC3C,CAAC;IAEO,OAAO,CAAC,MAAc;QAC5B,OAAO,GAAG,IAAI,CAAC,MAAM,iBAAiB,MAAM,EAAE,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,IAAsB;QAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;QAC5D,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QAC3E,MAAM,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,KAAa;QACrB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;QAChD,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAAa;QACxB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACnC,IAAI,IAAI,EAAE,CAAC;YACT,MAAM,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,CAAC;QACvD,CAAC;QACD,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,MAAc;QACjC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;QAC5D,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;QACrC,CAAC;QACD,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IAC1C,CAAC;CACF;AAED,MAAM,OAAO,cAAc;IACzB,YACU,EAAa,EACb,SAAiB,MAAM;QADvB,OAAE,GAAF,EAAE,CAAW;QACb,WAAM,GAAN,MAAM,CAAiB;IAC9B,CAAC;IAEI,GAAG,CAAC,MAAc,EAAE,QAAgB;QAC1C,OAAO,GAAG,IAAI,CAAC,MAAM,YAAY,MAAM,IAAI,QAAQ,EAAE,CAAC;IACxD,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,MAAc,EAAE,QAAgB;QACxC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC3D,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,OAAoB;QAC5B,MAAM,OAAO,GAAoB,EAAE,CAAC;QACpC,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;YACtB,OAAO,CAAC,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;QAClE,CAAC;QACD,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,CACf,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,EAC1C,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EACvB,OAAO,CACR,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAAc,EAAE,QAAgB;QAC3C,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,MAAc;QACjC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,YAAY,MAAM,IAAI,CAAC,CAAC;QACtE,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;CACF;AAED,MAAM,OAAO,kBAAkB;IAC7B,YACU,EAAa,EACb,SAAiB,MAAM;QADvB,OAAE,GAAF,EAAE,CAAW;QACb,WAAM,GAAN,MAAM,CAAiB;IAC9B,CAAC;IAEI,GAAG,CAAC,EAAU;QACpB,OAAO,GAAG,IAAI,CAAC,MAAM,gBAAgB,EAAE,EAAE,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,EAAU,EAAE,IAAqB;QACzC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;QAC5D,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IACrE,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,EAAU;QAClB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QAC7C,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAU;QACrB,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAClC,CAAC;CACF;AAED,MAAM,OAAO,YAAY;IACvB,YACU,EAAa,EACb,SAAiB,MAAM;QADvB,OAAE,GAAF,EAAE,CAAW;QACb,WAAM,GAAN,MAAM,CAAiB;IAC9B,CAAC;IAEI,GAAG,CAAC,KAAa;QACvB,OAAO,GAAG,IAAI,CAAC,MAAM,UAAU,KAAK,EAAE,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,GAAG,CACP,KAAa,EACb,IAAkF;QAElF,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IACxE,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,KAAa;QAMrB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;QAChD,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAAa;QACxB,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;IACrC,CAAC;CACF;AAED,MAAM,aAAa,GAAG,CACpB,EAAa,EACb,MAAc,EACd,OAAqB,EACD,EAAE;IACtB,MAAM,WAAW,GAAG,IAAI,aAAa,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;IAClD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,KAAK,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO;QACL,OAAO,EAAE,WAAW;QACpB,kBAAkB,EAAE,IAAI,wBAAwB,CAAC,EAAE,EAAE,MAAM,CAAC;QAC5D,aAAa,EAAE,IAAI,mBAAmB,CAAC,EAAE,EAAE,MAAM,CAAC;QAClD,OAAO,EAAE,IAAI,cAAc,CAAC,EAAE,EAAE,MAAM,CAAC;QACvC,YAAY,EAAE,IAAI,kBAAkB,CAAC,EAAE,EAAE,MAAM,CAAC;QAChD,KAAK,EAAE,IAAI,YAAY,CAAC,EAAE,EAAE,MAAM,CAAC;KACpC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,YAAY,GAAG,CAC1B,MAA+B,EAC/B,OAAqB,EACD,EAAE;IACtB,MAAM,MAAM,GAAG,MAAM,EAAE,MAAM,IAAI,MAAM,CAAC;IAExC,IAAI,MAAM,EAAE,EAAE,EAAE,CAAC;QACf,OAAO,aAAa,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IACnD,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,EAAE,IAAI,KAAK,QAAQ,CAAC;IAE/C,IAAI,CAAC,YAAY,IAAI,WAAW,EAAE,EAAE,CAAC;QACnC,OAAO,aAAa,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IACvD,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,mBAAmB,CAAC,OAAO,CAAC,CAAC;IACrD,OAAO;QACL,OAAO,EAAE,WAAW;QACpB,kBAAkB,EAAE,IAAI,8BAA8B,EAAE;QACxD,aAAa,EAAE,IAAI,yBAAyB,EAAE;QAC9C,OAAO,EAAE,IAAI,oBAAoB,EAAE;QACnC,YAAY,EAAE,IAAI,wBAAwB,EAAE;QAC5C,KAAK,EAAE,IAAI,kBAAkB,EAAE;KAChC,CAAC;AACJ,CAAC,CAAC"}

package/dist/oidc/tokens/index.d.ts

@@ -0,0 +1,4 @@
+import { KeyManager, OIDCProviderConfig, RefreshTokenStore, TokenService } from "../types.js";
+export declare const validateIdTokenNonce: (idToken: string, expectedNonce: string) => boolean;
+export declare const createTokenService: (config: OIDCProviderConfig, keyManager: KeyManager, refreshTokenStore: RefreshTokenStore) => TokenService;
+//# sourceMappingURL=index.d.ts.map

package/dist/oidc/tokens/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/oidc/tokens/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAGL,UAAU,EAEV,kBAAkB,EAElB,iBAAiB,EAEjB,YAAY,EACb,MAAM,UAAU,CAAC;AAkBlB,eAAO,MAAM,oBAAoB,GAC/B,SAAS,MAAM,EACf,eAAe,MAAM,KACpB,OAMF,CAAC;AASF,eAAO,MAAM,kBAAkB,GAC7B,QAAQ,kBAAkB,EAC1B,YAAY,UAAU,EACtB,mBAAmB,iBAAiB,KACnC,YAiMF,CAAC"}

package/dist/oidc/tokens/index.js

@@ -0,0 +1,158 @@
+import * as crypto from "node:crypto";
+import jwt from "jsonwebtoken";
+import { algorithmToHash } from "../util.js";
+const base64UrlEncode = (buffer) => {
+    return buffer
+        .toString("base64")
+        .replace(/\+/g, "-")
+        .replace(/\//g, "_")
+        .replace(/=/g, "");
+};
+const computeAtHash = (accessToken, algorithm) => {
+    const hashAlg = algorithmToHash(algorithm);
+    const hash = crypto.createHash(hashAlg).update(accessToken).digest();
+    const halfHash = hash.subarray(0, hash.length / 2);
+    return base64UrlEncode(halfHash);
+};
+export const validateIdTokenNonce = (idToken, expectedNonce) => {
+    const decoded = jwt.decode(idToken);
+    if (!decoded || typeof decoded !== "object") {
+        return false;
+    }
+    return decoded.nonce === expectedNonce;
+};
+export const createTokenService = (config, keyManager, refreshTokenStore) => {
+    const tokenConfig = {
+        accessToken: {
+            ttlSeconds: config.tokens?.accessToken?.ttlSeconds ?? 3600,
+            format: config.tokens?.accessToken?.format ?? "jwt",
+        },
+        idToken: {
+            ttlSeconds: config.tokens?.idToken?.ttlSeconds ?? 3600,
+        },
+        refreshToken: {
+            enabled: config.tokens?.refreshToken?.enabled ?? true,
+            ttlSeconds: config.tokens?.refreshToken?.ttlSeconds ?? 30 * 24 * 60 * 60,
+            rotateOnUse: config.tokens?.refreshToken?.rotateOnUse ?? true,
+        },
+        authorizationCode: {
+            ttlSeconds: config.tokens?.authorizationCode?.ttlSeconds ?? 600,
+        },
+    };
+    const generateAccessToken = async (user, client, scope) => {
+        const now = Math.floor(Date.now() / 1000);
+        const jti = crypto.randomUUID();
+        const claims = {
+            iss: config.issuer,
+            sub: user.id,
+            aud: client.audiences ?? [config.issuer, client.id],
+            exp: now + tokenConfig.accessToken.ttlSeconds,
+            iat: now,
+            jti,
+            scope,
+            client_id: client.id,
+        };
+        if (config.hooks?.getAccessTokenClaims) {
+            const customClaims = await config.hooks.getAccessTokenClaims(user, client, scope.split(" "));
+            Object.assign(claims, customClaims);
+        }
+        return keyManager.signToken(claims);
+    };
+    const generateIdToken = async (user, client, scope, nonce, authTime, accessToken) => {
+        const now = Math.floor(Date.now() / 1000);
+        const scopes = scope.split(" ");
+        const claims = {
+            iss: config.issuer,
+            sub: user.id,
+            aud: client.id,
+            exp: now + tokenConfig.idToken.ttlSeconds,
+            iat: now,
+        };
+        if (authTime) {
+            claims.auth_time = authTime;
+        }
+        if (nonce) {
+            claims.nonce = nonce;
+        }
+        if (accessToken) {
+            claims.at_hash = computeAtHash(accessToken, keyManager.getAlgorithm());
+        }
+        if (scopes.includes("email") && user.email) {
+            claims.email = user.email;
+            claims.email_verified = user.emailVerified ?? false;
+        }
+        if (scopes.includes("profile")) {
+            if (user.name)
+                claims.name = user.name;
+            if (user.givenName)
+                claims.given_name = user.givenName;
+            if (user.familyName)
+                claims.family_name = user.familyName;
+            if (user.picture)
+                claims.picture = user.picture;
+            if (user.locale)
+                claims.locale = user.locale;
+        }
+        return keyManager.signToken(claims);
+    };
+    const generateRefreshToken = async (user, client, scope) => {
+        const token = crypto.randomBytes(32).toString("hex");
+        const now = Date.now();
+        await refreshTokenStore.set({
+            token,
+            userId: user.id,
+            clientId: client.id,
+            scope,
+            createdAt: now,
+            expiresAt: now + tokenConfig.refreshToken.ttlSeconds * 1000,
+        });
+        return token;
+    };
+    return {
+        async generateTokenSet(params) {
+            const { user, client, scope, nonce, authTime, includeIdToken = true, includeRefreshToken = true, } = params;
+            const accessToken = await generateAccessToken(user, client, scope);
+            const response = {
+                access_token: accessToken,
+                token_type: "Bearer",
+                expires_in: tokenConfig.accessToken.ttlSeconds,
+                scope,
+            };
+            if (includeIdToken && scope.split(" ").includes("openid")) {
+                response.id_token = await generateIdToken(user, client, scope, nonce, authTime, accessToken);
+            }
+            if (includeRefreshToken &&
+                tokenConfig.refreshToken.enabled &&
+                scope.split(" ").includes("offline_access")) {
+                response.refresh_token = await generateRefreshToken(user, client, scope);
+            }
+            if (config.hooks?.onTokenIssued) {
+                await config.hooks.onTokenIssued(user.id, client.id, scope.split(" "));
+            }
+            return response;
+        },
+        async validateAccessToken(token) {
+            try {
+                const claims = (await keyManager.verifyToken(token));
+                const now = Math.floor(Date.now() / 1000);
+                if (claims.exp && claims.exp < now) {
+                    return { valid: false };
+                }
+                if (claims.iss !== config.issuer) {
+                    return { valid: false };
+                }
+                return { valid: true, claims };
+            }
+            catch {
+                return { valid: false };
+            }
+        },
+        async decodeIdToken(token) {
+            return (await keyManager.verifyToken(token));
+        },
+        async revokeRefreshToken(token) {
+            await refreshTokenStore.delete(token);
+        },
+    };
+};
+//# sourceMappingURL=index.js.map

package/dist/oidc/tokens/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/oidc/tokens/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AACtC,OAAO,GAAG,MAAM,cAAc,CAAC;AAY/B,OAAO,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAE1C,MAAM,eAAe,GAAG,CAAC,MAAc,EAAU,EAAE;IACjD,OAAO,MAAM;SACV,QAAQ,CAAC,QAAQ,CAAC;SAClB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;AACvB,CAAC,CAAC;AAEF,MAAM,aAAa,GAAG,CAAC,WAAmB,EAAE,SAAiB,EAAU,EAAE;IACvE,MAAM,OAAO,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,MAAM,EAAE,CAAC;IACrE,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACnD,OAAO,eAAe,CAAC,QAAQ,CAAC,CAAC;AACnC,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAClC,OAAe,EACf,aAAqB,EACZ,EAAE;IACX,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,OAAO,CAA+B,CAAC;IAClE,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC5C,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,OAAO,CAAC,KAAK,KAAK,aAAa,CAAC;AACzC,CAAC,CAAC;AASF,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAChC,MAA0B,EAC1B,UAAsB,EACtB,iBAAoC,EACtB,EAAE;IAChB,MAAM,WAAW,GAAwB;QACvC,WAAW,EAAE;YACX,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,UAAU,IAAI,IAAI;YAC1D,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,IAAI,KAAK;SACpD;QACD,OAAO,EAAE;YACP,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,IAAI,IAAI;SACvD;QACD,YAAY,EAAE;YACZ,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,IAAI,IAAI;YACrD,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,EAAE,UAAU,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE;YACxE,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,EAAE,WAAW,IAAI,IAAI;SAC9D;QACD,iBAAiB,EAAE;YACjB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,iBAAiB,EAAE,UAAU,IAAI,GAAG;SAChE;KACF,CAAC;IAEF,MAAM,mBAAmB,GAAG,KAAK,EAC/B,IAAc,EACd,MAAkB,EAClB,KAAa,EACI,EAAE;QACnB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC1C,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QAEhC,MAAM,MAAM,GAAsB;YAChC,GAAG,EAAE,MAAM,CAAC,MAAM;YAClB,GAAG,EAAE,IAAI,CAAC,EAAE;YACZ,GAAG,EAAE,MAAM,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;YACnD,GAAG,EAAE,GAAG,GAAG,WAAW,CAAC,WAAW,CAAC,UAAU;YAC7C,GAAG,EAAE,GAAG;YACR,GAAG;YACH,KAAK;YACL,SAAS,EAAE,MAAM,CAAC,EAAE;SACrB,CAAC;QAEF,IAAI,MAAM,CAAC,KAAK,EAAE,oBAAoB,EAAE,CAAC;YACvC,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAC1D,IAAI,EACJ,MAAM,EACN,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CACjB,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;QACtC,CAAC;QAED,OAAO,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC,CAAC;IAEF,MAAM,eAAe,GAAG,KAAK,EAC3B,IAAc,EACd,MAAkB,EAClB,KAAa,EACb,KAAc,EACd,QAAiB,EACjB,WAAoB,EACH,EAAE;QACnB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAEhC,MAAM,MAAM,GAAkB;YAC5B,GAAG,EAAE,MAAM,CAAC,MAAM;YAClB,GAAG,EAAE,IAAI,CAAC,EAAE;YACZ,GAAG,EAAE,MAAM,CAAC,EAAE;YACd,GAAG,EAAE,GAAG,GAAG,WAAW,CAAC,OAAO,CAAC,UAAU;YACzC,GAAG,EAAE,GAAG;SACT,CAAC;QAEF,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,CAAC,SAAS,GAAG,QAAQ,CAAC;QAC9B,CAAC;QAED,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,CAAC,KAAK,GAAG,KAAK,CAAC;QACvB,CAAC;QAED,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,CAAC,OAAO,GAAG,aAAa,CAAC,WAAW,EAAE,UAAU,CAAC,YAAY,EAAE,CAAC,CAAC;QACzE,CAAC;QAED,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC3C,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;YAC1B,MAAM,CAAC,cAAc,GAAG,IAAI,CAAC,aAAa,IAAI,KAAK,CAAC;QACtD,CAAC;QAED,IAAI,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YAC/B,IAAI,IAAI,CAAC,IAAI;gBAAE,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;YACvC,IAAI,IAAI,CAAC,SAAS;gBAAE,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC;YACvD,IAAI,IAAI,CAAC,UAAU;gBAAE,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC,UAAU,CAAC;YAC1D,IAAI,IAAI,CAAC,OAAO;gBAAE,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;YAChD,IAAI,IAAI,CAAC,MAAM;gBAAE,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC/C,CAAC;QAED,OAAO,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC,CAAC;IAEF,MAAM,oBAAoB,GAAG,KAAK,EAChC,IAAc,EACd,MAAkB,EAClB,KAAa,EACI,EAAE;QACnB,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACrD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEvB,MAAM,iBAAiB,CAAC,GAAG,CAAC;YAC1B,KAAK;YACL,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,QAAQ,EAAE,MAAM,CAAC,EAAE;YACnB,KAAK;YACL,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG,GAAG,WAAW,CAAC,YAAY,CAAC,UAAU,GAAG,IAAI;SAC5D,CAAC,CAAC;QAEH,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IAEF,OAAO;QACL,KAAK,CAAC,gBAAgB,CAAC,MAAM;YAC3B,MAAM,EACJ,IAAI,EACJ,MAAM,EACN,KAAK,EACL,KAAK,EACL,QAAQ,EACR,cAAc,GAAG,IAAI,EACrB,mBAAmB,GAAG,IAAI,GAC3B,GAAG,MAAM,CAAC;YAEX,MAAM,WAAW,GAAG,MAAM,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;YAEnE,MAAM,QAAQ,GAAkB;gBAC9B,YAAY,EAAE,WAAW;gBACzB,UAAU,EAAE,QAAQ;gBACpB,UAAU,EAAE,WAAW,CAAC,WAAW,CAAC,UAAU;gBAC9C,KAAK;aACN,CAAC;YAEF,IAAI,cAAc,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC1D,QAAQ,CAAC,QAAQ,GAAG,MAAM,eAAe,CACvC,IAAI,EACJ,MAAM,EACN,KAAK,EACL,KAAK,EACL,QAAQ,EACR,WAAW,CACZ,CAAC;YACJ,CAAC;YAED,IACE,mBAAmB;gBACnB,WAAW,CAAC,YAAY,CAAC,OAAO;gBAChC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAC3C,CAAC;gBACD,QAAQ,CAAC,aAAa,GAAG,MAAM,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;YAC3E,CAAC;YAED,IAAI,MAAM,CAAC,KAAK,EAAE,aAAa,EAAE,CAAC;gBAChC,MAAM,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;YACzE,CAAC;YAED,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,KAAK,CAAC,mBAAmB,CACvB,KAAa;YAEb,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,CAAC,MAAM,UAAU,CAAC,WAAW,CAAC,KAAK,CAAC,CAAsB,CAAC;gBAC1E,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;gBAE1C,IAAI,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,GAAG,GAAG,EAAE,CAAC;oBACnC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;gBAC1B,CAAC;gBAED,IAAI,MAAM,CAAC,GAAG,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;oBACjC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;gBAC1B,CAAC;gBAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;YACjC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;YAC1B,CAAC;QACH,CAAC;QAED,KAAK,CAAC,aAAa,CAAC,KAAa;YAC/B,OAAO,CAAC,MAAM,UAAU,CAAC,WAAW,CAAC,KAAK,CAAC,CAAkB,CAAC;QAChE,CAAC;QAED,KAAK,CAAC,kBAAkB,CAAC,KAAa;YACpC,MAAM,iBAAiB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACxC,CAAC;KACF,CAAC;AACJ,CAAC,CAAC"}