exisjs 0.6.0 → 0.7.0

package/dist/auth/oauth/providers/github.js

@@ -1,132 +0,0 @@
-"use strict";
-/**
- * GitHub OAuth Provider.
- *
- * Endpoints:
- *   Auth:     https://github.com/login/oauth/authorize
- *   Token:    https://github.com/login/oauth/access_token
- *   UserInfo: https://api.github.com/user
- *   Emails:   https://api.github.com/user/emails
- *
- * Default scopes: user:email, read:user
- *
- * Note: GitHub does not support PKCE or refresh tokens in the standard OAuth flow.
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.GithubProvider = void 0;
-const AUTH_URL = 'https://github.com/login/oauth/authorize';
-const TOKEN_URL = 'https://github.com/login/oauth/access_token';
-const USERINFO_URL = 'https://api.github.com/user';
-const EMAILS_URL = 'https://api.github.com/user/emails';
-const DEFAULT_SCOPES = ['user:email', 'read:user'];
-class GithubProvider {
-    constructor(config) {
-        this.name = 'github';
-        this.config = config;
-    }
-    getAuthorizationUrl(state, _codeVerifier) {
-        const scopes = this.config.scopes || DEFAULT_SCOPES;
-        const params = new URLSearchParams({
-            client_id: this.config.clientId,
-            redirect_uri: this.config.redirectUri,
-            scope: scopes.join(' '),
-            state,
-        });
-        return `${AUTH_URL}?${params.toString()}`;
-    }
-    async exchangeCode(code, _codeVerifier) {
-        const response = await fetch(TOKEN_URL, {
-            method: 'POST',
-            headers: {
-                'Content-Type': 'application/json',
-                Accept: 'application/json',
-            },
-            body: JSON.stringify({
-                client_id: this.config.clientId,
-                client_secret: this.config.clientSecret,
-                code,
-                redirect_uri: this.config.redirectUri,
-            }),
-        });
-        if (!response.ok) {
-            const error = await response.text();
-            throw new Error(`GitHub token exchange failed: ${error}`);
-        }
-        const data = (await response.json());
-        if (data.error) {
-            throw new Error(`GitHub token exchange failed: ${data.error_description || data.error}`);
-        }
-        return {
-            accessToken: data.access_token,
-            tokenType: data.token_type || 'Bearer',
-            scope: data.scope,
-        };
-    }
-    async getUserProfile(tokens) {
-        const headers = {
-            Authorization: `Bearer ${tokens.accessToken}`,
-            Accept: 'application/json',
-        };
-        // Fetch user info
-        const userResponse = await fetch(USERINFO_URL, { headers });
-        if (!userResponse.ok) {
-            throw new Error(`GitHub user info request failed: ${userResponse.statusText}`);
-        }
-        const userData = (await userResponse.json());
-        // Fetch emails (since the user endpoint might not include email)
-        let email = userData.email || '';
-        let emailVerified = false;
-        if (!email || tokens.scope?.includes('user:email')) {
-            try {
-                const emailsResponse = await fetch(EMAILS_URL, { headers });
-                if (emailsResponse.ok) {
-                    const emails = (await emailsResponse.json());
-                    const primaryEmail = emails.find((e) => e.primary) || emails[0];
-                    if (primaryEmail) {
-                        email = primaryEmail.email;
-                        emailVerified = primaryEmail.verified ?? false;
-                    }
-                }
-            }
-            catch {
-                // Non-critical: proceed with whatever email we have
-            }
-        }
-        // Parse name
-        const fullName = userData.name || userData.login || '';
-        const nameParts = fullName.split(' ');
-        return {
-            id: String(userData.id),
-            email,
-            emailVerified,
-            name: fullName,
-            firstName: nameParts[0] || undefined,
-            lastName: nameParts.length > 1 ? nameParts.slice(1).join(' ') : undefined,
-            avatar: userData.avatar_url,
-            provider: 'github',
-            raw: userData,
-        };
-    }
-    async refreshToken(_refreshToken) {
-        throw new Error('GitHub OAuth does not support refresh tokens in the standard flow. ' +
-            'The user must re-authenticate.');
-    }
-    async revokeToken(token) {
-        // GitHub uses the application API to revoke tokens
-        const response = await fetch(`https://api.github.com/applications/${this.config.clientId}/token`, {
-            method: 'DELETE',
-            headers: {
-                Authorization: 'Basic ' +
-                    Buffer.from(`${this.config.clientId}:${this.config.clientSecret}`).toString('base64'),
-                Accept: 'application/vnd.github+json',
-            },
-            body: JSON.stringify({ access_token: token }),
-        });
-        if (!response.ok && response.status !== 404) {
-            const error = await response.text();
-            throw new Error(`GitHub token revocation failed: ${error}`);
-        }
-    }
-}
-exports.GithubProvider = GithubProvider;
-//# sourceMappingURL=github.js.map

package/dist/auth/oauth/providers/github.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"github.js","sourceRoot":"","sources":["../../../../src/auth/oauth/providers/github.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;GAYG;;;AASH,MAAM,QAAQ,GAAG,0CAA0C,CAAA;AAC3D,MAAM,SAAS,GAAG,6CAA6C,CAAA;AAC/D,MAAM,YAAY,GAAG,6BAA6B,CAAA;AAClD,MAAM,UAAU,GAAG,oCAAoC,CAAA;AAEvD,MAAM,cAAc,GAAG,CAAC,YAAY,EAAE,WAAW,CAAC,CAAA;AAElD,MAAa,cAAc;IAKzB,YAAY,MAA2B;QAJ9B,SAAI,GAAG,QAAiB,CAAA;QAK/B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;IACtB,CAAC;IAED,mBAAmB,CAAC,KAAa,EAAE,aAAsB;QACvD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,cAAc,CAAA;QACnD,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YACjC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC/B,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW;YACrC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;YACvB,KAAK;SACN,CAAC,CAAA;QAEF,OAAO,GAAG,QAAQ,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAA;IAC3C,CAAC;IAED,KAAK,CAAC,YAAY,CAChB,IAAY,EACZ,aAAsB;QAEtB,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,EAAE;YACtC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,MAAM,EAAE,kBAAkB;aAC3B;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;gBAC/B,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;gBACvC,IAAI;gBACJ,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW;aACtC,CAAC;SACH,CAAC,CAAA;QAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;YACnC,MAAM,IAAI,KAAK,CAAC,iCAAiC,KAAK,EAAE,CAAC,CAAA;QAC3D,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAQ,CAAA;QAE3C,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CACb,iCAAiC,IAAI,CAAC,iBAAiB,IAAI,IAAI,CAAC,KAAK,EAAE,CACxE,CAAA;QACH,CAAC;QAED,OAAO;YACL,WAAW,EAAE,IAAI,CAAC,YAAY;YAC9B,SAAS,EAAE,IAAI,CAAC,UAAU,IAAI,QAAQ;YACtC,KAAK,EAAE,IAAI,CAAC,KAAK;SAClB,CAAA;IACH,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,MAAmB;QACtC,MAAM,OAAO,GAAG;YACd,aAAa,EAAE,UAAU,MAAM,CAAC,WAAW,EAAE;YAC7C,MAAM,EAAE,kBAAkB;SAC3B,CAAA;QAED,kBAAkB;QAClB,MAAM,YAAY,GAAG,MAAM,KAAK,CAAC,YAAY,EAAE,EAAE,OAAO,EAAE,CAAC,CAAA;QAC3D,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CACb,oCAAoC,YAAY,CAAC,UAAU,EAAE,CAC9D,CAAA;QACH,CAAC;QACD,MAAM,QAAQ,GAAG,CAAC,MAAM,YAAY,CAAC,IAAI,EAAE,CAAQ,CAAA;QAEnD,iEAAiE;QACjE,IAAI,KAAK,GAAG,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAA;QAChC,IAAI,aAAa,GAAG,KAAK,CAAA;QAEzB,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;YACnD,IAAI,CAAC;gBACH,MAAM,cAAc,GAAG,MAAM,KAAK,CAAC,UAAU,EAAE,EAAE,OAAO,EAAE,CAAC,CAAA;gBAC3D,IAAI,cAAc,CAAC,EAAE,EAAE,CAAC;oBACtB,MAAM,MAAM,GAAG,CAAC,MAAM,cAAc,CAAC,IAAI,EAAE,CAAU,CAAA;oBACrD,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,CAAA;oBACpE,IAAI,YAAY,EAAE,CAAC;wBACjB,KAAK,GAAG,YAAY,CAAC,KAAK,CAAA;wBAC1B,aAAa,GAAG,YAAY,CAAC,QAAQ,IAAI,KAAK,CAAA;oBAChD,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,oDAAoD;YACtD,CAAC;QACH,CAAC;QAED,aAAa;QACb,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAA;QACtD,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QAErC,OAAO;YACL,EAAE,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YACvB,KAAK;YACL,aAAa;YACb,IAAI,EAAE,QAAQ;YACd,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,SAAS;YACpC,QAAQ,EAAE,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS;YACzE,MAAM,EAAE,QAAQ,CAAC,UAAU;YAC3B,QAAQ,EAAE,QAAQ;YAClB,GAAG,EAAE,QAAQ;SACd,CAAA;IACH,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,aAAqB;QACtC,MAAM,IAAI,KAAK,CACb,qEAAqE;YACnE,gCAAgC,CACnC,CAAA;IACH,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,KAAa;QAC7B,mDAAmD;QACnD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAC1B,uCAAuC,IAAI,CAAC,MAAM,CAAC,QAAQ,QAAQ,EACnE;YACE,MAAM,EAAE,QAAQ;YAChB,OAAO,EAAE;gBACP,aAAa,EACX,QAAQ;oBACR,MAAM,CAAC,IAAI,CACT,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CACtD,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBACtB,MAAM,EAAE,6BAA6B;aACtC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;SAC9C,CACF,CAAA;QAED,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC5C,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;YACnC,MAAM,IAAI,KAAK,CAAC,mCAAmC,KAAK,EAAE,CAAC,CAAA;QAC7D,CAAC;IACH,CAAC;CACF;AA7ID,wCA6IC"}

package/dist/auth/oauth/providers/google.d.ts

@@ -1,23 +0,0 @@
-/**
- * Google OAuth 2.0 + OpenID Connect Provider.
- *
- * Endpoints:
- *   Auth:     https://accounts.google.com/o/oauth2/v2/auth
- *   Token:    https://oauth2.googleapis.com/token
- *   UserInfo: https://www.googleapis.com/oauth2/v3/userinfo
- *   Revoke:   https://oauth2.googleapis.com/revoke
- *
- * Default scopes: openid, email, profile
- */
-import type { OAuthProviderAdapter, OAuthProviderConfig, OAuthTokens, OAuthUserProfile } from '../types';
-export declare class GoogleProvider implements OAuthProviderAdapter {
-    readonly name: "google";
-    private config;
-    constructor(config: OAuthProviderConfig);
-    getAuthorizationUrl(state: string, codeVerifier?: string): string;
-    exchangeCode(code: string, codeVerifier?: string): Promise<OAuthTokens>;
-    getUserProfile(tokens: OAuthTokens): Promise<OAuthUserProfile>;
-    refreshToken(refreshToken: string): Promise<OAuthTokens>;
-    revokeToken(token: string): Promise<void>;
-}
-//# sourceMappingURL=google.d.ts.map

package/dist/auth/oauth/providers/google.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"google.d.ts","sourceRoot":"","sources":["../../../../src/auth/oauth/providers/google.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,KAAK,EACV,oBAAoB,EACpB,mBAAmB,EACnB,WAAW,EACX,gBAAgB,EACjB,MAAM,UAAU,CAAA;AASjB,qBAAa,cAAe,YAAW,oBAAoB;IACzD,QAAQ,CAAC,IAAI,EAAG,QAAQ,CAAS;IAEjC,OAAO,CAAC,MAAM,CAAqB;gBAEvB,MAAM,EAAE,mBAAmB;IAIvC,mBAAmB,CAAC,KAAK,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,MAAM;IAuB3D,YAAY,CAChB,IAAI,EAAE,MAAM,EACZ,YAAY,CAAC,EAAE,MAAM,GACpB,OAAO,CAAC,WAAW,CAAC;IAoCjB,cAAc,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,gBAAgB,CAAC;IA0B9D,YAAY,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IA6BxD,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAchD"}

package/dist/auth/oauth/providers/google.js

@@ -1,134 +0,0 @@
-"use strict";
-/**
- * Google OAuth 2.0 + OpenID Connect Provider.
- *
- * Endpoints:
- *   Auth:     https://accounts.google.com/o/oauth2/v2/auth
- *   Token:    https://oauth2.googleapis.com/token
- *   UserInfo: https://www.googleapis.com/oauth2/v3/userinfo
- *   Revoke:   https://oauth2.googleapis.com/revoke
- *
- * Default scopes: openid, email, profile
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.GoogleProvider = void 0;
-const node_crypto_1 = require("node:crypto");
-const AUTH_URL = 'https://accounts.google.com/o/oauth2/v2/auth';
-const TOKEN_URL = 'https://oauth2.googleapis.com/token';
-const USERINFO_URL = 'https://www.googleapis.com/oauth2/v3/userinfo';
-const REVOKE_URL = 'https://oauth2.googleapis.com/revoke';
-const DEFAULT_SCOPES = ['openid', 'email', 'profile'];
-class GoogleProvider {
-    constructor(config) {
-        this.name = 'google';
-        this.config = config;
-    }
-    getAuthorizationUrl(state, codeVerifier) {
-        const scopes = this.config.scopes || DEFAULT_SCOPES;
-        const params = new URLSearchParams({
-            client_id: this.config.clientId,
-            redirect_uri: this.config.redirectUri,
-            response_type: 'code',
-            scope: scopes.join(' '),
-            state,
-            access_type: 'offline', // Request refresh token
-            prompt: 'consent',
-        });
-        if (codeVerifier) {
-            const challenge = (0, node_crypto_1.createHash)('sha256')
-                .update(codeVerifier)
-                .digest('base64url');
-            params.set('code_challenge', challenge);
-            params.set('code_challenge_method', 'S256');
-        }
-        return `${AUTH_URL}?${params.toString()}`;
-    }
-    async exchangeCode(code, codeVerifier) {
-        const body = {
-            client_id: this.config.clientId,
-            client_secret: this.config.clientSecret,
-            code,
-            grant_type: 'authorization_code',
-            redirect_uri: this.config.redirectUri,
-        };
-        if (codeVerifier) {
-            body.code_verifier = codeVerifier;
-        }
-        const response = await fetch(TOKEN_URL, {
-            method: 'POST',
-            headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
-            body: new URLSearchParams(body),
-        });
-        if (!response.ok) {
-            const error = await response.text();
-            throw new Error(`Google token exchange failed: ${error}`);
-        }
-        const data = (await response.json());
-        return {
-            accessToken: data.access_token,
-            refreshToken: data.refresh_token,
-            expiresIn: data.expires_in,
-            tokenType: data.token_type || 'Bearer',
-            idToken: data.id_token,
-            scope: data.scope,
-        };
-    }
-    async getUserProfile(tokens) {
-        const response = await fetch(USERINFO_URL, {
-            headers: { Authorization: `Bearer ${tokens.accessToken}` },
-        });
-        if (!response.ok) {
-            throw new Error(`Google user info request failed: ${response.statusText}`);
-        }
-        const data = (await response.json());
-        return {
-            id: data.sub,
-            email: data.email,
-            emailVerified: data.email_verified ?? false,
-            name: data.name ||
-                `${data.given_name || ''} ${data.family_name || ''}`.trim(),
-            firstName: data.given_name,
-            lastName: data.family_name,
-            avatar: data.picture,
-            provider: 'google',
-            raw: data,
-        };
-    }
-    async refreshToken(refreshToken) {
-        const response = await fetch(TOKEN_URL, {
-            method: 'POST',
-            headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
-            body: new URLSearchParams({
-                client_id: this.config.clientId,
-                client_secret: this.config.clientSecret,
-                refresh_token: refreshToken,
-                grant_type: 'refresh_token',
-            }),
-        });
-        if (!response.ok) {
-            const error = await response.text();
-            throw new Error(`Google token refresh failed: ${error}`);
-        }
-        const data = (await response.json());
-        return {
-            accessToken: data.access_token,
-            refreshToken: data.refresh_token || refreshToken,
-            expiresIn: data.expires_in,
-            tokenType: data.token_type || 'Bearer',
-            idToken: data.id_token,
-            scope: data.scope,
-        };
-    }
-    async revokeToken(token) {
-        const response = await fetch(`${REVOKE_URL}?token=${encodeURIComponent(token)}`, {
-            method: 'POST',
-            headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
-        });
-        if (!response.ok) {
-            const error = await response.text();
-            throw new Error(`Google token revocation failed: ${error}`);
-        }
-    }
-}
-exports.GoogleProvider = GoogleProvider;
-//# sourceMappingURL=google.js.map

package/dist/auth/oauth/providers/google.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"google.js","sourceRoot":"","sources":["../../../../src/auth/oauth/providers/google.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG;;;AAEH,6CAAwC;AAQxC,MAAM,QAAQ,GAAG,8CAA8C,CAAA;AAC/D,MAAM,SAAS,GAAG,qCAAqC,CAAA;AACvD,MAAM,YAAY,GAAG,+CAA+C,CAAA;AACpE,MAAM,UAAU,GAAG,sCAAsC,CAAA;AAEzD,MAAM,cAAc,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC,CAAA;AAErD,MAAa,cAAc;IAKzB,YAAY,MAA2B;QAJ9B,SAAI,GAAG,QAAiB,CAAA;QAK/B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;IACtB,CAAC;IAED,mBAAmB,CAAC,KAAa,EAAE,YAAqB;QACtD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,cAAc,CAAA;QACnD,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YACjC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC/B,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW;YACrC,aAAa,EAAE,MAAM;YACrB,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;YACvB,KAAK;YACL,WAAW,EAAE,SAAS,EAAE,wBAAwB;YAChD,MAAM,EAAE,SAAS;SAClB,CAAC,CAAA;QAEF,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,SAAS,GAAG,IAAA,wBAAU,EAAC,QAAQ,CAAC;iBACnC,MAAM,CAAC,YAAY,CAAC;iBACpB,MAAM,CAAC,WAAW,CAAC,CAAA;YACtB,MAAM,CAAC,GAAG,CAAC,gBAAgB,EAAE,SAAS,CAAC,CAAA;YACvC,MAAM,CAAC,GAAG,CAAC,uBAAuB,EAAE,MAAM,CAAC,CAAA;QAC7C,CAAC;QAED,OAAO,GAAG,QAAQ,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAA;IAC3C,CAAC;IAED,KAAK,CAAC,YAAY,CAChB,IAAY,EACZ,YAAqB;QAErB,MAAM,IAAI,GAA2B;YACnC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC/B,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;YACvC,IAAI;YACJ,UAAU,EAAE,oBAAoB;YAChC,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW;SACtC,CAAA;QAED,IAAI,YAAY,EAAE,CAAC;YACjB,IAAI,CAAC,aAAa,GAAG,YAAY,CAAA;QACnC,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,EAAE;YACtC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;YAChE,IAAI,EAAE,IAAI,eAAe,CAAC,IAAI,CAAC;SAChC,CAAC,CAAA;QAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;YACnC,MAAM,IAAI,KAAK,CAAC,iCAAiC,KAAK,EAAE,CAAC,CAAA;QAC3D,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAQ,CAAA;QAE3C,OAAO;YACL,WAAW,EAAE,IAAI,CAAC,YAAY;YAC9B,YAAY,EAAE,IAAI,CAAC,aAAa;YAChC,SAAS,EAAE,IAAI,CAAC,UAAU;YAC1B,SAAS,EAAE,IAAI,CAAC,UAAU,IAAI,QAAQ;YACtC,OAAO,EAAE,IAAI,CAAC,QAAQ;YACtB,KAAK,EAAE,IAAI,CAAC,KAAK;SAClB,CAAA;IACH,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,MAAmB;QACtC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,YAAY,EAAE;YACzC,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,CAAC,WAAW,EAAE,EAAE;SAC3D,CAAC,CAAA;QAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,oCAAoC,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAA;QAC5E,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAQ,CAAA;QAE3C,OAAO;YACL,EAAE,EAAE,IAAI,CAAC,GAAG;YACZ,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,aAAa,EAAE,IAAI,CAAC,cAAc,IAAI,KAAK;YAC3C,IAAI,EACF,IAAI,CAAC,IAAI;gBACT,GAAG,IAAI,CAAC,UAAU,IAAI,EAAE,IAAI,IAAI,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE;YAC7D,SAAS,EAAE,IAAI,CAAC,UAAU;YAC1B,QAAQ,EAAE,IAAI,CAAC,WAAW;YAC1B,MAAM,EAAE,IAAI,CAAC,OAAO;YACpB,QAAQ,EAAE,QAAQ;YAClB,GAAG,EAAE,IAAI;SACV,CAAA;IACH,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,YAAoB;QACrC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,EAAE;YACtC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;YAChE,IAAI,EAAE,IAAI,eAAe,CAAC;gBACxB,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;gBAC/B,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;gBACvC,aAAa,EAAE,YAAY;gBAC3B,UAAU,EAAE,eAAe;aAC5B,CAAC;SACH,CAAC,CAAA;QAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;YACnC,MAAM,IAAI,KAAK,CAAC,gCAAgC,KAAK,EAAE,CAAC,CAAA;QAC1D,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAQ,CAAA;QAE3C,OAAO;YACL,WAAW,EAAE,IAAI,CAAC,YAAY;YAC9B,YAAY,EAAE,IAAI,CAAC,aAAa,IAAI,YAAY;YAChD,SAAS,EAAE,IAAI,CAAC,UAAU;YAC1B,SAAS,EAAE,IAAI,CAAC,UAAU,IAAI,QAAQ;YACtC,OAAO,EAAE,IAAI,CAAC,QAAQ;YACtB,KAAK,EAAE,IAAI,CAAC,KAAK;SAClB,CAAA;IACH,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,KAAa;QAC7B,MAAM,QAAQ,GAAG,MAAM,KAAK,CAC1B,GAAG,UAAU,UAAU,kBAAkB,CAAC,KAAK,CAAC,EAAE,EAClD;YACE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;SACjE,CACF,CAAA;QAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;YACnC,MAAM,IAAI,KAAK,CAAC,mCAAmC,KAAK,EAAE,CAAC,CAAA;QAC7D,CAAC;IACH,CAAC;CACF;AA5ID,wCA4IC"}

package/dist/auth/oauth/providers/microsoft.d.ts

@@ -1,28 +0,0 @@
-/**
- * Microsoft Entra ID (Azure AD) OAuth Provider.
- *
- * Endpoints:
- *   Auth:     https://login.microsoftonline.com/{tenant}/oauth2/v2.0/authorize
- *   Token:    https://login.microsoftonline.com/{tenant}/oauth2/v2.0/token
- *   UserInfo: https://graph.microsoft.com/v1.0/me
- *
- * Supports multi-tenant ('common'), organizations-only ('organizations'),
- * or a specific tenant ID.
- *
- * Default scopes: openid, email, profile, User.Read
- */
-import type { OAuthProviderAdapter, OAuthProviderConfig, OAuthTokens, OAuthUserProfile } from '../types';
-export declare class MicrosoftProvider implements OAuthProviderAdapter {
-    readonly name: "microsoft";
-    private config;
-    private tenant;
-    constructor(config: OAuthProviderConfig);
-    private get authUrl();
-    private get tokenUrl();
-    getAuthorizationUrl(state: string, codeVerifier?: string): string;
-    exchangeCode(code: string, codeVerifier?: string): Promise<OAuthTokens>;
-    getUserProfile(tokens: OAuthTokens): Promise<OAuthUserProfile>;
-    refreshToken(refreshToken: string): Promise<OAuthTokens>;
-    revokeToken(_token: string): Promise<void>;
-}
-//# sourceMappingURL=microsoft.d.ts.map

package/dist/auth/oauth/providers/microsoft.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"microsoft.d.ts","sourceRoot":"","sources":["../../../../src/auth/oauth/providers/microsoft.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,OAAO,KAAK,EACV,oBAAoB,EACpB,mBAAmB,EACnB,WAAW,EACX,gBAAgB,EACjB,MAAM,UAAU,CAAA;AAKjB,qBAAa,iBAAkB,YAAW,oBAAoB;IAC5D,QAAQ,CAAC,IAAI,EAAG,WAAW,CAAS;IAEpC,OAAO,CAAC,MAAM,CAAqB;IACnC,OAAO,CAAC,MAAM,CAAQ;gBAEV,MAAM,EAAE,mBAAmB;IAKvC,OAAO,KAAK,OAAO,GAElB;IAED,OAAO,KAAK,QAAQ,GAEnB;IAED,mBAAmB,CAAC,KAAK,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,MAAM;IAsB3D,YAAY,CAChB,IAAI,EAAE,MAAM,EACZ,YAAY,CAAC,EAAE,MAAM,GACpB,OAAO,CAAC,WAAW,CAAC;IAoCjB,cAAc,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,gBAAgB,CAAC;IA0B9D,YAAY,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IA6BxD,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAUjD"}

package/dist/auth/oauth/providers/microsoft.js

@@ -1,136 +0,0 @@
-"use strict";
-/**
- * Microsoft Entra ID (Azure AD) OAuth Provider.
- *
- * Endpoints:
- *   Auth:     https://login.microsoftonline.com/{tenant}/oauth2/v2.0/authorize
- *   Token:    https://login.microsoftonline.com/{tenant}/oauth2/v2.0/token
- *   UserInfo: https://graph.microsoft.com/v1.0/me
- *
- * Supports multi-tenant ('common'), organizations-only ('organizations'),
- * or a specific tenant ID.
- *
- * Default scopes: openid, email, profile, User.Read
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.MicrosoftProvider = void 0;
-const node_crypto_1 = require("node:crypto");
-const USERINFO_URL = 'https://graph.microsoft.com/v1.0/me';
-const DEFAULT_SCOPES = ['openid', 'email', 'profile', 'User.Read'];
-class MicrosoftProvider {
-    constructor(config) {
-        this.name = 'microsoft';
-        this.config = config;
-        this.tenant = config.tenant || 'common';
-    }
-    get authUrl() {
-        return `https://login.microsoftonline.com/${this.tenant}/oauth2/v2.0/authorize`;
-    }
-    get tokenUrl() {
-        return `https://login.microsoftonline.com/${this.tenant}/oauth2/v2.0/token`;
-    }
-    getAuthorizationUrl(state, codeVerifier) {
-        const scopes = this.config.scopes || DEFAULT_SCOPES;
-        const params = new URLSearchParams({
-            client_id: this.config.clientId,
-            redirect_uri: this.config.redirectUri,
-            response_type: 'code',
-            scope: scopes.join(' '),
-            state,
-            response_mode: 'query',
-        });
-        if (codeVerifier) {
-            const challenge = (0, node_crypto_1.createHash)('sha256')
-                .update(codeVerifier)
-                .digest('base64url');
-            params.set('code_challenge', challenge);
-            params.set('code_challenge_method', 'S256');
-        }
-        return `${this.authUrl}?${params.toString()}`;
-    }
-    async exchangeCode(code, codeVerifier) {
-        const body = {
-            client_id: this.config.clientId,
-            client_secret: this.config.clientSecret,
-            code,
-            grant_type: 'authorization_code',
-            redirect_uri: this.config.redirectUri,
-        };
-        if (codeVerifier) {
-            body.code_verifier = codeVerifier;
-        }
-        const response = await fetch(this.tokenUrl, {
-            method: 'POST',
-            headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
-            body: new URLSearchParams(body),
-        });
-        if (!response.ok) {
-            const error = await response.text();
-            throw new Error(`Microsoft token exchange failed: ${error}`);
-        }
-        const data = (await response.json());
-        return {
-            accessToken: data.access_token,
-            refreshToken: data.refresh_token,
-            expiresIn: data.expires_in,
-            tokenType: data.token_type || 'Bearer',
-            idToken: data.id_token,
-            scope: data.scope,
-        };
-    }
-    async getUserProfile(tokens) {
-        const response = await fetch(USERINFO_URL, {
-            headers: { Authorization: `Bearer ${tokens.accessToken}` },
-        });
-        if (!response.ok) {
-            throw new Error(`Microsoft user info request failed: ${response.statusText}`);
-        }
-        const data = (await response.json());
-        return {
-            id: data.id,
-            email: data.mail || data.userPrincipalName || '',
-            emailVerified: true, // Microsoft verifies emails by default
-            name: data.displayName || '',
-            firstName: data.givenName,
-            lastName: data.surname,
-            avatar: undefined, // Graph API requires a separate photo request
-            provider: 'microsoft',
-            raw: data,
-        };
-    }
-    async refreshToken(refreshToken) {
-        const response = await fetch(this.tokenUrl, {
-            method: 'POST',
-            headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
-            body: new URLSearchParams({
-                client_id: this.config.clientId,
-                client_secret: this.config.clientSecret,
-                refresh_token: refreshToken,
-                grant_type: 'refresh_token',
-            }),
-        });
-        if (!response.ok) {
-            const error = await response.text();
-            throw new Error(`Microsoft token refresh failed: ${error}`);
-        }
-        const data = (await response.json());
-        return {
-            accessToken: data.access_token,
-            refreshToken: data.refresh_token || refreshToken,
-            expiresIn: data.expires_in,
-            tokenType: data.token_type || 'Bearer',
-            idToken: data.id_token,
-            scope: data.scope,
-        };
-    }
-    async revokeToken(_token) {
-        // Microsoft's v2.0 endpoint does not have a standard revocation endpoint.
-        // Token revocation is handled via the admin portal or by signing the user out.
-        // The logout URL can be used instead:
-        //   https://login.microsoftonline.com/{tenant}/oauth2/v2.0/logout
-        throw new Error('Microsoft does not provide a standard token revocation endpoint. ' +
-            'Use the logout endpoint or revoke via the Azure admin portal.');
-    }
-}
-exports.MicrosoftProvider = MicrosoftProvider;
-//# sourceMappingURL=microsoft.js.map

package/dist/auth/oauth/providers/microsoft.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"microsoft.js","sourceRoot":"","sources":["../../../../src/auth/oauth/providers/microsoft.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;GAYG;;;AAEH,6CAAwC;AAQxC,MAAM,YAAY,GAAG,qCAAqC,CAAA;AAC1D,MAAM,cAAc,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,CAAC,CAAA;AAElE,MAAa,iBAAiB;IAM5B,YAAY,MAA2B;QAL9B,SAAI,GAAG,WAAoB,CAAA;QAMlC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;QACpB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,QAAQ,CAAA;IACzC,CAAC;IAED,IAAY,OAAO;QACjB,OAAO,qCAAqC,IAAI,CAAC,MAAM,wBAAwB,CAAA;IACjF,CAAC;IAED,IAAY,QAAQ;QAClB,OAAO,qCAAqC,IAAI,CAAC,MAAM,oBAAoB,CAAA;IAC7E,CAAC;IAED,mBAAmB,CAAC,KAAa,EAAE,YAAqB;QACtD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,cAAc,CAAA;QACnD,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YACjC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC/B,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW;YACrC,aAAa,EAAE,MAAM;YACrB,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;YACvB,KAAK;YACL,aAAa,EAAE,OAAO;SACvB,CAAC,CAAA;QAEF,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,SAAS,GAAG,IAAA,wBAAU,EAAC,QAAQ,CAAC;iBACnC,MAAM,CAAC,YAAY,CAAC;iBACpB,MAAM,CAAC,WAAW,CAAC,CAAA;YACtB,MAAM,CAAC,GAAG,CAAC,gBAAgB,EAAE,SAAS,CAAC,CAAA;YACvC,MAAM,CAAC,GAAG,CAAC,uBAAuB,EAAE,MAAM,CAAC,CAAA;QAC7C,CAAC;QAED,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAA;IAC/C,CAAC;IAED,KAAK,CAAC,YAAY,CAChB,IAAY,EACZ,YAAqB;QAErB,MAAM,IAAI,GAA2B;YACnC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC/B,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;YACvC,IAAI;YACJ,UAAU,EAAE,oBAAoB;YAChC,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW;SACtC,CAAA;QAED,IAAI,YAAY,EAAE,CAAC;YACjB,IAAI,CAAC,aAAa,GAAG,YAAY,CAAA;QACnC,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE;YAC1C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;YAChE,IAAI,EAAE,IAAI,eAAe,CAAC,IAAI,CAAC;SAChC,CAAC,CAAA;QAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;YACnC,MAAM,IAAI,KAAK,CAAC,oCAAoC,KAAK,EAAE,CAAC,CAAA;QAC9D,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAQ,CAAA;QAE3C,OAAO;YACL,WAAW,EAAE,IAAI,CAAC,YAAY;YAC9B,YAAY,EAAE,IAAI,CAAC,aAAa;YAChC,SAAS,EAAE,IAAI,CAAC,UAAU;YAC1B,SAAS,EAAE,IAAI,CAAC,UAAU,IAAI,QAAQ;YACtC,OAAO,EAAE,IAAI,CAAC,QAAQ;YACtB,KAAK,EAAE,IAAI,CAAC,KAAK;SAClB,CAAA;IACH,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,MAAmB;QACtC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,YAAY,EAAE;YACzC,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,CAAC,WAAW,EAAE,EAAE;SAC3D,CAAC,CAAA;QAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CACb,uCAAuC,QAAQ,CAAC,UAAU,EAAE,CAC7D,CAAA;QACH,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAQ,CAAA;QAE3C,OAAO;YACL,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,KAAK,EAAE,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,iBAAiB,IAAI,EAAE;YAChD,aAAa,EAAE,IAAI,EAAE,uCAAuC;YAC5D,IAAI,EAAE,IAAI,CAAC,WAAW,IAAI,EAAE;YAC5B,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,QAAQ,EAAE,IAAI,CAAC,OAAO;YACtB,MAAM,EAAE,SAAS,EAAE,8CAA8C;YACjE,QAAQ,EAAE,WAAW;YACrB,GAAG,EAAE,IAAI;SACV,CAAA;IACH,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,YAAoB;QACrC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE;YAC1C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;YAChE,IAAI,EAAE,IAAI,eAAe,CAAC;gBACxB,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;gBAC/B,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;gBACvC,aAAa,EAAE,YAAY;gBAC3B,UAAU,EAAE,eAAe;aAC5B,CAAC;SACH,CAAC,CAAA;QAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;YACnC,MAAM,IAAI,KAAK,CAAC,mCAAmC,KAAK,EAAE,CAAC,CAAA;QAC7D,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAQ,CAAA;QAE3C,OAAO;YACL,WAAW,EAAE,IAAI,CAAC,YAAY;YAC9B,YAAY,EAAE,IAAI,CAAC,aAAa,IAAI,YAAY;YAChD,SAAS,EAAE,IAAI,CAAC,UAAU;YAC1B,SAAS,EAAE,IAAI,CAAC,UAAU,IAAI,QAAQ;YACtC,OAAO,EAAE,IAAI,CAAC,QAAQ;YACtB,KAAK,EAAE,IAAI,CAAC,KAAK;SAClB,CAAA;IACH,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,MAAc;QAC9B,0EAA0E;QAC1E,+EAA+E;QAC/E,sCAAsC;QACtC,kEAAkE;QAClE,MAAM,IAAI,KAAK,CACb,mEAAmE;YACjE,+DAA+D,CAClE,CAAA;IACH,CAAC;CACF;AAjJD,8CAiJC"}

package/dist/auth/oauth/types.d.ts

@@ -1,158 +0,0 @@
-/**
- * Built-in OAuth provider identifiers.
- */
-export type OAuthProvider = 'google' | 'github' | 'microsoft' | 'discord' | 'facebook' | (string & {});
-/**
- * Configuration for an OAuth provider.
- */
-export interface OAuthProviderConfig {
-    /** OAuth client ID (from the provider's developer console) */
-    clientId: string;
-    /** OAuth client secret */
-    clientSecret: string;
-    /** The URL the provider redirects to after authentication */
-    redirectUri: string;
-    /** OAuth scopes to request */
-    scopes?: string[];
-    /**
-     * Microsoft-specific: the tenant ID.
-     * Use 'common' for multi-tenant, 'organizations' for work accounts, or a specific tenant ID.
-     * Default: 'common'
-     */
-    tenant?: string;
-}
-/**
- * Token response from an OAuth provider.
- */
-export interface OAuthTokens {
-    /** The access token used to call provider APIs */
-    accessToken: string;
-    /** The refresh token for obtaining new access tokens (if granted) */
-    refreshToken?: string;
-    /** Token expiry time in seconds */
-    expiresIn?: number;
-    /** Token type (usually 'Bearer') */
-    tokenType: string;
-    /** OpenID Connect ID token (JWT, if using openid scope) */
-    idToken?: string;
-    /** The scopes that were actually granted by the provider */
-    scope?: string;
-}
-/**
- * Normalized user profile across all providers.
- * Guarantees a consistent shape regardless of which provider is used.
- */
-export interface OAuthUserProfile {
-    /** User's unique ID on the provider */
-    id: string;
-    /** User's email address */
-    email: string;
-    /** Whether the provider has verified the email */
-    emailVerified: boolean;
-    /** User's display name */
-    name: string;
-    /** User's first name (if available) */
-    firstName?: string;
-    /** User's last name (if available) */
-    lastName?: string;
-    /** URL to the user's avatar/profile picture */
-    avatar?: string;
-    /** Which OAuth provider this profile came from */
-    provider: OAuthProvider;
-    /** The full raw response from the provider's user info endpoint */
-    raw: Record<string, unknown>;
-}
-/**
- * The contract that every OAuth provider adapter must implement.
- */
-export interface OAuthProviderAdapter {
-    /** Provider identifier */
-    readonly name: OAuthProvider;
-    /**
-     * Generate the authorization URL that the user is redirected to.
-     * @param state CSRF state token
-     * @param codeVerifier PKCE code verifier (if using PKCE)
-     */
-    getAuthorizationUrl(state: string, codeVerifier?: string): string;
-    /**
-     * Exchange an authorization code for tokens.
-     * @param code The authorization code from the callback
-     * @param codeVerifier PKCE code verifier (if using PKCE)
-     */
-    exchangeCode(code: string, codeVerifier?: string): Promise<OAuthTokens>;
-    /**
-     * Fetch the authenticated user's profile from the provider.
-     * @param tokens The tokens obtained from exchangeCode
-     */
-    getUserProfile(tokens: OAuthTokens): Promise<OAuthUserProfile>;
-    /**
-     * Refresh an expired access token using a refresh token.
-     * @param refreshToken The refresh token
-     */
-    refreshToken(refreshToken: string): Promise<OAuthTokens>;
-    /**
-     * Revoke a token (access or refresh).
-     * @param token The token to revoke
-     */
-    revokeToken(token: string): Promise<void>;
-}
-/**
- * Configuration for the OAuth middleware.
- */
-export interface OAuthCallbackOptions {
-    /**
-     * Called when authentication succeeds.
-     * Use this to create/update the user in your database, set session data, etc.
-     */
-    onSuccess: (req: import('../../types').Request, res: import('../../types').Response, profile: OAuthUserProfile, tokens: OAuthTokens) => void | Promise<void>;
-    /**
-     * Called when authentication fails.
-     * Use this to redirect to an error page, log the error, etc.
-     */
-    onError?: (req: import('../../types').Request, res: import('../../types').Response, error: Error) => void | Promise<void>;
-    /**
-     * Name of the session key to store OAuth state. Default: '_exis_oauth_state'
-     */
-    stateKey?: string;
-}
-/**
- * Configuration for a custom OAuth provider.
- */
-export interface CustomOAuthProviderConfig extends OAuthProviderConfig {
-    /** A unique name for this custom provider */
-    name: string;
-    /** The authorization endpoint URL */
-    authUrl: string;
-    /** The token exchange endpoint URL */
-    tokenUrl: string;
-    /** The user info endpoint URL */
-    userInfoUrl: string;
-    /**
-     * Map the raw user info response to a normalized OAuthUserProfile.
-     * If not provided, the raw response is used as-is with best-effort field mapping.
-     */
-    mapProfile?: (raw: Record<string, unknown>) => Omit<OAuthUserProfile, 'provider' | 'raw'>;
-    /** The revocation endpoint URL (optional) */
-    revokeUrl?: string;
-    /**
-     * How to send the client credentials during token exchange.
-     * 'body' sends them as POST body parameters.
-     * 'header' sends them as a Basic auth header.
-     * Default: 'body'
-     */
-    authMethod?: 'body' | 'header';
-}
-/**
- * Internal state stored during the OAuth flow.
- */
-export interface OAuthFlowState {
-    /** CSRF state token */
-    state: string;
-    /** PKCE code verifier */
-    codeVerifier?: string;
-    /** Provider being used */
-    provider: OAuthProvider;
-    /** Timestamp when the state was created */
-    createdAt: number;
-}
-//# sourceMappingURL=types.d.ts.map

package/dist/auth/oauth/types.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/auth/oauth/types.ts"],"names":[],"mappings":"AAEA;;GAEG;AACH,MAAM,MAAM,aAAa,GACvB,QAAQ,GAAG,QAAQ,GAAG,WAAW,GAAG,SAAS,GAAG,UAAU,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAA;AAE5E;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,8DAA8D;IAC9D,QAAQ,EAAE,MAAM,CAAA;IAChB,0BAA0B;IAC1B,YAAY,EAAE,MAAM,CAAA;IACpB,6DAA6D;IAC7D,WAAW,EAAE,MAAM,CAAA;IACnB,8BAA8B;IAC9B,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;IACjB;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,kDAAkD;IAClD,WAAW,EAAE,MAAM,CAAA;IACnB,qEAAqE;IACrE,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,mCAAmC;IACnC,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,oCAAoC;IACpC,SAAS,EAAE,MAAM,CAAA;IACjB,2DAA2D;IAC3D,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,4DAA4D;IAC5D,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,uCAAuC;IACvC,EAAE,EAAE,MAAM,CAAA;IACV,2BAA2B;IAC3B,KAAK,EAAE,MAAM,CAAA;IACb,kDAAkD;IAClD,aAAa,EAAE,OAAO,CAAA;IACtB,0BAA0B;IAC1B,IAAI,EAAE,MAAM,CAAA;IACZ,uCAAuC;IACvC,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,sCAAsC;IACtC,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,+CAA+C;IAC/C,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,kDAAkD;IAClD,QAAQ,EAAE,aAAa,CAAA;IACvB,mEAAmE;IACnE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAC7B;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,0BAA0B;IAC1B,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAA;IAE5B;;;;OAIG;IACH,mBAAmB,CAAC,KAAK,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;IAEjE;;;;OAIG;IACH,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAAA;IAEvE;;;OAGG;IACH,cAAc,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAA;IAE9D;;;OAGG;IACH,YAAY,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAAA;IAExD;;;OAGG;IACH,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAC1C;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC;;;OAGG;IACH,SAAS,EAAE,CACT,GAAG,EAAE,OAAO,aAAa,EAAE,OAAO,EAClC,GAAG,EAAE,OAAO,aAAa,EAAE,QAAQ,EACnC,OAAO,EAAE,gBAAgB,EACzB,MAAM,EAAE,WAAW,KAChB,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEzB;;;OAGG;IACH,OAAO,CAAC,EAAE,CACR,GAAG,EAAE,OAAO,aAAa,EAAE,OAAO,EAClC,GAAG,EAAE,OAAO,aAAa,EAAE,QAAQ,EACnC,KAAK,EAAE,KAAK,KACT,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEzB;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,yBAA0B,SAAQ,mBAAmB;IACpE,6CAA6C;IAC7C,IAAI,EAAE,MAAM,CAAA;IACZ,qCAAqC;IACrC,OAAO,EAAE,MAAM,CAAA;IACf,sCAAsC;IACtC,QAAQ,EAAE,MAAM,CAAA;IAChB,iCAAiC;IACjC,WAAW,EAAE,MAAM,CAAA;IACnB;;;OAGG;IACH,UAAU,CAAC,EAAE,CACX,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KACzB,IAAI,CAAC,gBAAgB,EAAE,UAAU,GAAG,KAAK,CAAC,CAAA;IAC/C,6CAA6C;IAC7C,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB;;;;;OAKG;IACH,UAAU,CAAC,EAAE,MAAM,GAAG,QAAQ,CAAA;CAC/B;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,uBAAuB;IACvB,KAAK,EAAE,MAAM,CAAA;IACb,yBAAyB;IACzB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,0BAA0B;IAC1B,QAAQ,EAAE,aAAa,CAAA;IACvB,2CAA2C;IAC3C,SAAS,EAAE,MAAM,CAAA;CAClB"}

package/dist/auth/oauth/types.js

@@ -1,4 +0,0 @@
-"use strict";
-// ─── OAuth Types ────────────────────────────────────────────────────────────────
-Object.defineProperty(exports, "__esModule", { value: true });
-//# sourceMappingURL=types.js.map