exisjs 0.6.1 → 0.7.1

package/dist/auth/index.js

@@ -1,49 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-var __exportStar = (this && this.__exportStar) || function(m, exports) {
-    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.OAuth = exports.JWT = exports.Password = void 0;
-const Password = __importStar(require("./password"));
-exports.Password = Password;
-const JWT = __importStar(require("./jwt"));
-exports.JWT = JWT;
-const OAuth = __importStar(require("./oauth"));
-exports.OAuth = OAuth;
-__exportStar(require("./rbac"), exports);
-__exportStar(require("./session"), exports);
-__exportStar(require("./oauth"), exports);
-//# sourceMappingURL=index.js.map

package/dist/auth/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,qDAAsC;AAO7B,4BAAQ;AANjB,2CAA4B;AAMT,kBAAG;AALtB,+CAAgC;AAKR,sBAAK;AAH7B,yCAAsB;AACtB,4CAAyB;AACzB,0CAAuB"}

package/dist/auth/jwt.d.ts

@@ -1,20 +0,0 @@
-import { HttpError } from '../error/errors';
-export interface JWTOptions {
-    expiresIn?: number;
-}
-/**
- * Sign a payload to create a JWT token.
- * @param payload Object to encode
- * @param secret The signing secret
- * @param options JWTOptions (e.g. expiresIn)
- */
-export declare function signJWT(payload: Record<string, unknown>, secret: string | string[], options?: JWTOptions): string;
-export declare class TokenExpiredError extends HttpError {
-    constructor(message?: string);
-}
-/**
- * Verify a JWT token and extract its payload.
- * Throws HttpError(401) if the token is invalid or TokenExpiredError if expired.
- */
-export declare function verifyJWT<T = unknown>(token: string, secret: string | string[]): T;
-//# sourceMappingURL=jwt.d.ts.map

package/dist/auth/jwt.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"jwt.d.ts","sourceRoot":"","sources":["../../src/auth/jwt.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAG3C,MAAM,WAAW,UAAU;IACzB,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED;;;;;GAKG;AACH,wBAAgB,OAAO,CACrB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,EACzB,OAAO,CAAC,EAAE,UAAU,GACnB,MAAM,CAQR;AAED,qBAAa,iBAAkB,SAAQ,SAAS;gBAClC,OAAO,SAAkB;CAItC;AAED;;;GAGG;AACH,wBAAgB,SAAS,CAAC,CAAC,GAAG,OAAO,EACnC,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GACxB,CAAC,CA2BH"}

package/dist/auth/jwt.js

@@ -1,59 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.TokenExpiredError = void 0;
-exports.signJWT = signJWT;
-exports.verifyJWT = verifyJWT;
-const errors_1 = require("../error/errors");
-const rs_1 = require("@exisjs/rs");
-/**
- * Sign a payload to create a JWT token.
- * @param payload Object to encode
- * @param secret The signing secret
- * @param options JWTOptions (e.g. expiresIn)
- */
-function signJWT(payload, secret, options) {
-    const actualSecret = Array.isArray(secret) ? secret[0] : secret;
-    try {
-        return (0, rs_1.signJwt)(payload, actualSecret, options?.expiresIn);
-    }
-    catch (err) {
-        throw new Error(`Failed to sign JWT: ${err.message}`, { cause: err });
-    }
-}
-class TokenExpiredError extends errors_1.HttpError {
-    constructor(message = 'Token expired') {
-        super(message, 401, 'TOKEN_EXPIRED');
-        this.name = 'TokenExpiredError';
-    }
-}
-exports.TokenExpiredError = TokenExpiredError;
-/**
- * Verify a JWT token and extract its payload.
- * Throws HttpError(401) if the token is invalid or TokenExpiredError if expired.
- */
-function verifyJWT(token, secret) {
-    if (!token || typeof token !== 'string') {
-        throw errors_1.HttpError.unauthorized('Invalid token format');
-    }
-    const secrets = Array.isArray(secret) ? secret : [secret];
-    try {
-        return (0, rs_1.verifyJwt)(token, secrets);
-    }
-    catch (err) {
-        if (err.message.includes('TokenExpiredError')) {
-            throw new TokenExpiredError();
-        }
-        // Check specific N-API error messages mapped to HTTP 401
-        const unauthMsg = [
-            'Invalid token',
-            'Malformed token',
-            'HMAC error',
-            'Invalid base64url',
-        ];
-        if (unauthMsg.some((m) => err.message.includes(m))) {
-            throw errors_1.HttpError.unauthorized(err.message);
-        }
-        throw errors_1.HttpError.unauthorized('Invalid token signature');
-    }
-}
-//# sourceMappingURL=jwt.js.map

package/dist/auth/jwt.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"jwt.js","sourceRoot":"","sources":["../../src/auth/jwt.ts"],"names":[],"mappings":";;;AAaA,0BAYC;AAaD,8BA8BC;AApED,4CAA2C;AAC3C,mCAA+C;AAM/C;;;;;GAKG;AACH,SAAgB,OAAO,CACrB,OAAgC,EAChC,MAAyB,EACzB,OAAoB;IAEpB,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAA;IAE/D,IAAI,CAAC;QACH,OAAO,IAAA,YAAO,EAAC,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,SAAS,CAAC,CAAA;IAC3D,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,uBAAuB,GAAG,CAAC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAA;IACvE,CAAC;AACH,CAAC;AAED,MAAa,iBAAkB,SAAQ,kBAAS;IAC9C,YAAY,OAAO,GAAG,eAAe;QACnC,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,eAAe,CAAC,CAAA;QACpC,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAA;IACjC,CAAC;CACF;AALD,8CAKC;AAED;;;GAGG;AACH,SAAgB,SAAS,CACvB,KAAa,EACb,MAAyB;IAEzB,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxC,MAAM,kBAAS,CAAC,YAAY,CAAC,sBAAsB,CAAC,CAAA;IACtD,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;IAEzD,IAAI,CAAC;QACH,OAAO,IAAA,cAAS,EAAC,KAAK,EAAE,OAAO,CAAM,CAAA;IACvC,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,iBAAiB,EAAE,CAAA;QAC/B,CAAC;QAED,yDAAyD;QACzD,MAAM,SAAS,GAAG;YAChB,eAAe;YACf,iBAAiB;YACjB,YAAY;YACZ,mBAAmB;SACpB,CAAA;QACD,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACnD,MAAM,kBAAS,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QAC3C,CAAC;QAED,MAAM,kBAAS,CAAC,YAAY,CAAC,yBAAyB,CAAC,CAAA;IACzD,CAAC;AACH,CAAC"}

package/dist/auth/oauth/core.d.ts

@@ -1,96 +0,0 @@
-/**
- * OAuth Manager — The core orchestration engine.
- *
- * Manages OAuth provider registrations, generates authorization URLs with
- * PKCE + state, handles the token exchange callback, and normalizes user profiles.
- *
- * Usage:
- *   import { OAuth } from 'exisjs/auth'
- *
- *   OAuth.configure({
- *     google: { clientId: '...', clientSecret: '...', redirectUri: '...' },
- *     github: { clientId: '...', clientSecret: '...', redirectUri: '...' },
- *   })
- *
- *   const { url, state, codeVerifier } = OAuth.getAuthUrl('google')
- *   const { profile, tokens } = await OAuth.handleCallback('google', code, codeVerifier)
- */
-import type { OAuthProviderConfig, OAuthProviderAdapter, OAuthTokens, OAuthUserProfile, OAuthFlowState, CustomOAuthProviderConfig } from './types';
-/**
- * Generate a cryptographically random code verifier for PKCE.
- */
-declare function generateCodeVerifier(): string;
-/**
- * Derive the code challenge from a code verifier using S256 method.
- */
-declare function generateCodeChallenge(verifier: string): string;
-/**
- * Generate a cryptographically random state token for CSRF protection.
- */
-declare function generateState(): string;
-export declare class OAuthManager {
-    private providers;
-    /**
-     * Configure multiple OAuth providers at once.
-     */
-    configure(providers: Record<string, OAuthProviderConfig>): this;
-    /**
-     * Register a single OAuth provider.
-     */
-    register(name: string, config: OAuthProviderConfig): this;
-    /**
-     * Register a custom OAuth provider.
-     */
-    custom(config: CustomOAuthProviderConfig): this;
-    /**
-     * Register a fully custom provider adapter directly.
-     */
-    registerAdapter(name: string, adapter: OAuthProviderAdapter): this;
-    /**
-     * Generate the authorization URL for a provider.
-     * Returns the URL, state token, and PKCE code verifier.
-     */
-    getAuthUrl(provider: string, options?: {
-        usePKCE?: boolean;
-        additionalParams?: Record<string, string>;
-    }): {
-        url: string;
-        state: string;
-        codeVerifier?: string;
-        flowState: OAuthFlowState;
-    };
-    /**
-     * Handle the OAuth callback — exchange the authorization code for tokens
-     * and fetch the user profile.
-     */
-    handleCallback(provider: string, code: string, codeVerifier?: string): Promise<{
-        profile: OAuthUserProfile;
-        tokens: OAuthTokens;
-    }>;
-    /**
-     * Refresh an expired access token.
-     */
-    refreshAccessToken(provider: string, refreshToken: string): Promise<OAuthTokens>;
-    /**
-     * Revoke a token.
-     */
-    revokeToken(provider: string, token: string): Promise<void>;
-    /**
-     * Get a registered provider adapter.
-     */
-    getProvider(name: string): OAuthProviderAdapter;
-    /**
-     * Check if a provider is registered.
-     */
-    hasProvider(name: string): boolean;
-    /**
-     * Get all registered provider names.
-     */
-    getProviderNames(): string[];
-}
-/**
- * Default global OAuthManager instance.
- */
-export declare const OAuth: OAuthManager;
-export { generateCodeVerifier, generateCodeChallenge, generateState };
-//# sourceMappingURL=core.d.ts.map

package/dist/auth/oauth/core.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"core.d.ts","sourceRoot":"","sources":["../../../src/auth/oauth/core.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAGH,OAAO,KAAK,EAEV,mBAAmB,EACnB,oBAAoB,EACpB,WAAW,EACX,gBAAgB,EAChB,cAAc,EACd,yBAAyB,EAC1B,MAAM,SAAS,CAAA;AA2ChB;;GAEG;AACH,iBAAS,oBAAoB,IAAI,MAAM,CAEtC;AAED;;GAEG;AACH,iBAAS,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAEvD;AAED;;GAEG;AACH,iBAAS,aAAa,IAAI,MAAM,CAE/B;AAID,qBAAa,YAAY;IACvB,OAAO,CAAC,SAAS,CAA0C;IAE3D;;OAEG;IACH,SAAS,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,GAAG,IAAI;IAO/D;;OAEG;IACH,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,mBAAmB,GAAG,IAAI;IAMzD;;OAEG;IACH,MAAM,CAAC,MAAM,EAAE,yBAAyB,GAAG,IAAI;IAQ/C;;OAEG;IACH,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,oBAAoB,GAAG,IAAI;IAKlE;;;OAGG;IACH,UAAU,CACR,QAAQ,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,OAAO,CAAC;QAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE,GACzE;QACD,GAAG,EAAE,MAAM,CAAA;QACX,KAAK,EAAE,MAAM,CAAA;QACb,YAAY,CAAC,EAAE,MAAM,CAAA;QACrB,SAAS,EAAE,cAAc,CAAA;KAC1B;IAkCD;;;OAGG;IACG,cAAc,CAClB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,EACZ,YAAY,CAAC,EAAE,MAAM,GACpB,OAAO,CAAC;QAAE,OAAO,EAAE,gBAAgB,CAAC;QAAC,MAAM,EAAE,WAAW,CAAA;KAAE,CAAC;IAY9D;;OAEG;IACG,kBAAkB,CACtB,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,WAAW,CAAC;IAKvB;;OAEG;IACG,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAKjE;;OAEG;IACH,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,oBAAoB;IAU/C;;OAEG;IACH,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAIlC;;OAEG;IACH,gBAAgB,IAAI,MAAM,EAAE;CAG7B;AAID;;GAEG;AACH,eAAO,MAAM,KAAK,cAAqB,CAAA;AAGvC,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,aAAa,EAAE,CAAA"}

package/dist/auth/oauth/core.js

@@ -1,203 +0,0 @@
-"use strict";
-/**
- * OAuth Manager — The core orchestration engine.
- *
- * Manages OAuth provider registrations, generates authorization URLs with
- * PKCE + state, handles the token exchange callback, and normalizes user profiles.
- *
- * Usage:
- *   import { OAuth } from 'exisjs/auth'
- *
- *   OAuth.configure({
- *     google: { clientId: '...', clientSecret: '...', redirectUri: '...' },
- *     github: { clientId: '...', clientSecret: '...', redirectUri: '...' },
- *   })
- *
- *   const { url, state, codeVerifier } = OAuth.getAuthUrl('google')
- *   const { profile, tokens } = await OAuth.handleCallback('google', code, codeVerifier)
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.OAuth = exports.OAuthManager = void 0;
-exports.generateCodeVerifier = generateCodeVerifier;
-exports.generateCodeChallenge = generateCodeChallenge;
-exports.generateState = generateState;
-const node_crypto_1 = require("node:crypto");
-// ─── Provider Factories ──────────────────────────────────────────────────────
-function createBuiltInProvider(name, config) {
-    switch (name) {
-        case 'google': {
-            // eslint-disable-next-line @typescript-eslint/no-require-imports
-            const { GoogleProvider } = require('./providers/google');
-            return new GoogleProvider(config);
-        }
-        case 'github': {
-            // eslint-disable-next-line @typescript-eslint/no-require-imports
-            const { GithubProvider } = require('./providers/github');
-            return new GithubProvider(config);
-        }
-        case 'microsoft': {
-            // eslint-disable-next-line @typescript-eslint/no-require-imports
-            const { MicrosoftProvider } = require('./providers/microsoft');
-            return new MicrosoftProvider(config);
-        }
-        case 'discord': {
-            // eslint-disable-next-line @typescript-eslint/no-require-imports
-            const { DiscordProvider } = require('./providers/discord');
-            return new DiscordProvider(config);
-        }
-        case 'facebook': {
-            // eslint-disable-next-line @typescript-eslint/no-require-imports
-            const { FacebookProvider } = require('./providers/facebook');
-            return new FacebookProvider(config);
-        }
-        default:
-            throw new Error(`Unknown OAuth provider '${name}'. Use OAuth.custom() for custom providers.`);
-    }
-}
-// ─── PKCE Helpers ────────────────────────────────────────────────────────────
-/**
- * Generate a cryptographically random code verifier for PKCE.
- */
-function generateCodeVerifier() {
-    return (0, node_crypto_1.randomBytes)(32).toString('base64url');
-}
-/**
- * Derive the code challenge from a code verifier using S256 method.
- */
-function generateCodeChallenge(verifier) {
-    return (0, node_crypto_1.createHash)('sha256').update(verifier).digest('base64url');
-}
-/**
- * Generate a cryptographically random state token for CSRF protection.
- */
-function generateState() {
-    return (0, node_crypto_1.randomBytes)(24).toString('base64url');
-}
-// ─── OAuth Manager ───────────────────────────────────────────────────────────
-class OAuthManager {
-    constructor() {
-        this.providers = new Map();
-    }
-    /**
-     * Configure multiple OAuth providers at once.
-     */
-    configure(providers) {
-        for (const [name, config] of Object.entries(providers)) {
-            this.register(name, config);
-        }
-        return this;
-    }
-    /**
-     * Register a single OAuth provider.
-     */
-    register(name, config) {
-        const adapter = createBuiltInProvider(name, config);
-        this.providers.set(name, adapter);
-        return this;
-    }
-    /**
-     * Register a custom OAuth provider.
-     */
-    custom(config) {
-        // eslint-disable-next-line @typescript-eslint/no-require-imports
-        const { CustomProvider } = require('./providers/custom');
-        const adapter = new CustomProvider(config);
-        this.providers.set(config.name, adapter);
-        return this;
-    }
-    /**
-     * Register a fully custom provider adapter directly.
-     */
-    registerAdapter(name, adapter) {
-        this.providers.set(name, adapter);
-        return this;
-    }
-    /**
-     * Generate the authorization URL for a provider.
-     * Returns the URL, state token, and PKCE code verifier.
-     */
-    getAuthUrl(provider, options) {
-        const adapter = this.getProvider(provider);
-        const state = generateState();
-        const usePKCE = options?.usePKCE !== false; // PKCE on by default
-        let codeVerifier;
-        let url;
-        if (usePKCE) {
-            codeVerifier = generateCodeVerifier();
-            url = adapter.getAuthorizationUrl(state, codeVerifier);
-        }
-        else {
-            url = adapter.getAuthorizationUrl(state);
-        }
-        // Append any additional query params
-        if (options?.additionalParams) {
-            const urlObj = new URL(url);
-            for (const [key, value] of Object.entries(options.additionalParams)) {
-                urlObj.searchParams.set(key, value);
-            }
-            url = urlObj.toString();
-        }
-        const flowState = {
-            state,
-            codeVerifier,
-            provider,
-            createdAt: Date.now(),
-        };
-        return { url, state, codeVerifier, flowState };
-    }
-    /**
-     * Handle the OAuth callback — exchange the authorization code for tokens
-     * and fetch the user profile.
-     */
-    async handleCallback(provider, code, codeVerifier) {
-        const adapter = this.getProvider(provider);
-        // Exchange the code for tokens
-        const tokens = await adapter.exchangeCode(code, codeVerifier);
-        // Fetch the user profile
-        const profile = await adapter.getUserProfile(tokens);
-        return { profile, tokens };
-    }
-    /**
-     * Refresh an expired access token.
-     */
-    async refreshAccessToken(provider, refreshToken) {
-        const adapter = this.getProvider(provider);
-        return adapter.refreshToken(refreshToken);
-    }
-    /**
-     * Revoke a token.
-     */
-    async revokeToken(provider, token) {
-        const adapter = this.getProvider(provider);
-        return adapter.revokeToken(token);
-    }
-    /**
-     * Get a registered provider adapter.
-     */
-    getProvider(name) {
-        const adapter = this.providers.get(name);
-        if (!adapter) {
-            throw new Error(`OAuth provider '${name}' is not registered. Call OAuth.register() or OAuth.configure() first.`);
-        }
-        return adapter;
-    }
-    /**
-     * Check if a provider is registered.
-     */
-    hasProvider(name) {
-        return this.providers.has(name);
-    }
-    /**
-     * Get all registered provider names.
-     */
-    getProviderNames() {
-        return Array.from(this.providers.keys());
-    }
-}
-exports.OAuthManager = OAuthManager;
-// ─── Singleton & Exports ─────────────────────────────────────────────────────
-/**
- * Default global OAuthManager instance.
- */
-exports.OAuth = new OAuthManager();
-//# sourceMappingURL=core.js.map

package/dist/auth/oauth/core.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"core.js","sourceRoot":"","sources":["../../../src/auth/oauth/core.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;GAgBG;;;AA+OM,oDAAoB;AAAE,sDAAqB;AAAE,sCAAa;AA7OnE,6CAAqD;AAWrD,gFAAgF;AAEhF,SAAS,qBAAqB,CAC5B,IAAmB,EACnB,MAA2B;IAE3B,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,iEAAiE;YACjE,MAAM,EAAE,cAAc,EAAE,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAA;YACxD,OAAO,IAAI,cAAc,CAAC,MAAM,CAAC,CAAA;QACnC,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,iEAAiE;YACjE,MAAM,EAAE,cAAc,EAAE,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAA;YACxD,OAAO,IAAI,cAAc,CAAC,MAAM,CAAC,CAAA;QACnC,CAAC;QACD,KAAK,WAAW,CAAC,CAAC,CAAC;YACjB,iEAAiE;YACjE,MAAM,EAAE,iBAAiB,EAAE,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAA;YAC9D,OAAO,IAAI,iBAAiB,CAAC,MAAM,CAAC,CAAA;QACtC,CAAC;QACD,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,iEAAiE;YACjE,MAAM,EAAE,eAAe,EAAE,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAA;YAC1D,OAAO,IAAI,eAAe,CAAC,MAAM,CAAC,CAAA;QACpC,CAAC;QACD,KAAK,UAAU,CAAC,CAAC,CAAC;YAChB,iEAAiE;YACjE,MAAM,EAAE,gBAAgB,EAAE,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAA;YAC5D,OAAO,IAAI,gBAAgB,CAAC,MAAM,CAAC,CAAA;QACrC,CAAC;QACD;YACE,MAAM,IAAI,KAAK,CACb,2BAA2B,IAAI,6CAA6C,CAC7E,CAAA;IACL,CAAC;AACH,CAAC;AAED,gFAAgF;AAEhF;;GAEG;AACH,SAAS,oBAAoB;IAC3B,OAAO,IAAA,yBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;AAC9C,CAAC;AAED;;GAEG;AACH,SAAS,qBAAqB,CAAC,QAAgB;IAC7C,OAAO,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;AAClE,CAAC;AAED;;GAEG;AACH,SAAS,aAAa;IACpB,OAAO,IAAA,yBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;AAC9C,CAAC;AAED,gFAAgF;AAEhF,MAAa,YAAY;IAAzB;QACU,cAAS,GAAG,IAAI,GAAG,EAAgC,CAAA;IAuJ7D,CAAC;IArJC;;OAEG;IACH,SAAS,CAAC,SAA8C;QACtD,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YACvD,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;QAC7B,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IAED;;OAEG;IACH,QAAQ,CAAC,IAAY,EAAE,MAA2B;QAChD,MAAM,OAAO,GAAG,qBAAqB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;QACnD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;QACjC,OAAO,IAAI,CAAA;IACb,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,MAAiC;QACtC,iEAAiE;QACjE,MAAM,EAAE,cAAc,EAAE,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAA;QACxD,MAAM,OAAO,GAAG,IAAI,cAAc,CAAC,MAAM,CAAC,CAAA;QAC1C,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;QACxC,OAAO,IAAI,CAAA;IACb,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,IAAY,EAAE,OAA6B;QACzD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;QACjC,OAAO,IAAI,CAAA;IACb,CAAC;IAED;;;OAGG;IACH,UAAU,CACR,QAAgB,EAChB,OAA0E;QAO1E,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAA;QAC1C,MAAM,KAAK,GAAG,aAAa,EAAE,CAAA;QAC7B,MAAM,OAAO,GAAG,OAAO,EAAE,OAAO,KAAK,KAAK,CAAA,CAAC,qBAAqB;QAEhE,IAAI,YAAgC,CAAA;QACpC,IAAI,GAAW,CAAA;QAEf,IAAI,OAAO,EAAE,CAAC;YACZ,YAAY,GAAG,oBAAoB,EAAE,CAAA;YACrC,GAAG,GAAG,OAAO,CAAC,mBAAmB,CAAC,KAAK,EAAE,YAAY,CAAC,CAAA;QACxD,CAAC;aAAM,CAAC;YACN,GAAG,GAAG,OAAO,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAA;QAC1C,CAAC;QAED,qCAAqC;QACrC,IAAI,OAAO,EAAE,gBAAgB,EAAE,CAAC;YAC9B,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAA;YAC3B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBACpE,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;YACrC,CAAC;YACD,GAAG,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAA;QACzB,CAAC;QAED,MAAM,SAAS,GAAmB;YAChC,KAAK;YACL,YAAY;YACZ,QAAQ;YACR,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAA;QAED,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,CAAA;IAChD,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,cAAc,CAClB,QAAgB,EAChB,IAAY,EACZ,YAAqB;QAErB,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAA;QAE1C,+BAA+B;QAC/B,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,IAAI,EAAE,YAAY,CAAC,CAAA;QAE7D,yBAAyB;QACzB,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC,CAAA;QAEpD,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAA;IAC5B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,kBAAkB,CACtB,QAAgB,EAChB,YAAoB;QAEpB,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAA;QAC1C,OAAO,OAAO,CAAC,YAAY,CAAC,YAAY,CAAC,CAAA;IAC3C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,CAAC,QAAgB,EAAE,KAAa;QAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAA;QAC1C,OAAO,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAA;IACnC,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,IAAY;QACtB,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QACxC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CACb,mBAAmB,IAAI,wEAAwE,CAChG,CAAA;QACH,CAAC;QACD,OAAO,OAAO,CAAA;IAChB,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,IAAY;QACtB,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IACjC,CAAC;IAED;;OAEG;IACH,gBAAgB;QACd,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAA;IAC1C,CAAC;CACF;AAxJD,oCAwJC;AAED,gFAAgF;AAEhF;;GAEG;AACU,QAAA,KAAK,GAAG,IAAI,YAAY,EAAE,CAAA"}

package/dist/auth/oauth/index.d.ts

@@ -1,45 +0,0 @@
-/**
- * ExisJS OAuth Provider System
- *
- * A complete OAuth 2.0 / OpenID Connect implementation with built-in providers
- * for Google, GitHub, Microsoft, Discord, and Facebook. Includes PKCE support,
- * state validation, profile normalization, and route middleware helpers.
- *
- * @example
- * ```ts
- * import { OAuth } from 'exisjs/auth'
- *
- * // Configure providers
- * OAuth.configure({
- *   google: {
- *     clientId: process.env.GOOGLE_CLIENT_ID!,
- *     clientSecret: process.env.GOOGLE_CLIENT_SECRET!,
- *     redirectUri: 'http://localhost:3000/auth/google/callback',
- *   },
- *   github: {
- *     clientId: process.env.GITHUB_CLIENT_ID!,
- *     clientSecret: process.env.GITHUB_CLIENT_SECRET!,
- *     redirectUri: 'http://localhost:3000/auth/github/callback',
- *   },
- * })
- *
- * // Use middleware
- * app.get('/auth/google', oauthRedirect('google'))
- * app.get('/auth/google/callback', oauthCallback('google', {
- *   onSuccess: async (req, res, profile) => {
- *     req.session.userId = profile.id
- *     res.redirect('/dashboard')
- *   },
- * }))
- * ```
- */
-export { OAuthManager, OAuth, generateCodeVerifier, generateCodeChallenge, generateState, } from './core';
-export { oauthRedirect, oauthCallback, requireAuth } from './middleware';
-export { GoogleProvider } from './providers/google';
-export { GithubProvider } from './providers/github';
-export { MicrosoftProvider } from './providers/microsoft';
-export { DiscordProvider } from './providers/discord';
-export { FacebookProvider } from './providers/facebook';
-export { CustomProvider } from './providers/custom';
-export type { OAuthProvider, OAuthProviderConfig, OAuthProviderAdapter, OAuthTokens, OAuthUserProfile, OAuthCallbackOptions, OAuthFlowState, CustomOAuthProviderConfig, } from './types';
-//# sourceMappingURL=index.d.ts.map

package/dist/auth/oauth/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/auth/oauth/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAGH,OAAO,EACL,YAAY,EACZ,KAAK,EACL,oBAAoB,EACpB,qBAAqB,EACrB,aAAa,GACd,MAAM,QAAQ,CAAA;AAGf,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA;AAGxE,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAA;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAA;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AAGnD,YAAY,EACV,aAAa,EACb,mBAAmB,EACnB,oBAAoB,EACpB,WAAW,EACX,gBAAgB,EAChB,oBAAoB,EACpB,cAAc,EACd,yBAAyB,GAC1B,MAAM,SAAS,CAAA"}

package/dist/auth/oauth/index.js

@@ -1,64 +0,0 @@
-"use strict";
-/**
- * ExisJS OAuth Provider System
- *
- * A complete OAuth 2.0 / OpenID Connect implementation with built-in providers
- * for Google, GitHub, Microsoft, Discord, and Facebook. Includes PKCE support,
- * state validation, profile normalization, and route middleware helpers.
- *
- * @example
- * ```ts
- * import { OAuth } from 'exisjs/auth'
- *
- * // Configure providers
- * OAuth.configure({
- *   google: {
- *     clientId: process.env.GOOGLE_CLIENT_ID!,
- *     clientSecret: process.env.GOOGLE_CLIENT_SECRET!,
- *     redirectUri: 'http://localhost:3000/auth/google/callback',
- *   },
- *   github: {
- *     clientId: process.env.GITHUB_CLIENT_ID!,
- *     clientSecret: process.env.GITHUB_CLIENT_SECRET!,
- *     redirectUri: 'http://localhost:3000/auth/github/callback',
- *   },
- * })
- *
- * // Use middleware
- * app.get('/auth/google', oauthRedirect('google'))
- * app.get('/auth/google/callback', oauthCallback('google', {
- *   onSuccess: async (req, res, profile) => {
- *     req.session.userId = profile.id
- *     res.redirect('/dashboard')
- *   },
- * }))
- * ```
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.CustomProvider = exports.FacebookProvider = exports.DiscordProvider = exports.MicrosoftProvider = exports.GithubProvider = exports.GoogleProvider = exports.requireAuth = exports.oauthCallback = exports.oauthRedirect = exports.generateState = exports.generateCodeChallenge = exports.generateCodeVerifier = exports.OAuth = exports.OAuthManager = void 0;
-// ─── Core ────────────────────────────────────────────────────────────────────
-var core_1 = require("./core");
-Object.defineProperty(exports, "OAuthManager", { enumerable: true, get: function () { return core_1.OAuthManager; } });
-Object.defineProperty(exports, "OAuth", { enumerable: true, get: function () { return core_1.OAuth; } });
-Object.defineProperty(exports, "generateCodeVerifier", { enumerable: true, get: function () { return core_1.generateCodeVerifier; } });
-Object.defineProperty(exports, "generateCodeChallenge", { enumerable: true, get: function () { return core_1.generateCodeChallenge; } });
-Object.defineProperty(exports, "generateState", { enumerable: true, get: function () { return core_1.generateState; } });
-// ─── Middleware ───────────────────────────────────────────────────────────────
-var middleware_1 = require("./middleware");
-Object.defineProperty(exports, "oauthRedirect", { enumerable: true, get: function () { return middleware_1.oauthRedirect; } });
-Object.defineProperty(exports, "oauthCallback", { enumerable: true, get: function () { return middleware_1.oauthCallback; } });
-Object.defineProperty(exports, "requireAuth", { enumerable: true, get: function () { return middleware_1.requireAuth; } });
-// ─── Providers ───────────────────────────────────────────────────────────────
-var google_1 = require("./providers/google");
-Object.defineProperty(exports, "GoogleProvider", { enumerable: true, get: function () { return google_1.GoogleProvider; } });
-var github_1 = require("./providers/github");
-Object.defineProperty(exports, "GithubProvider", { enumerable: true, get: function () { return github_1.GithubProvider; } });
-var microsoft_1 = require("./providers/microsoft");
-Object.defineProperty(exports, "MicrosoftProvider", { enumerable: true, get: function () { return microsoft_1.MicrosoftProvider; } });
-var discord_1 = require("./providers/discord");
-Object.defineProperty(exports, "DiscordProvider", { enumerable: true, get: function () { return discord_1.DiscordProvider; } });
-var facebook_1 = require("./providers/facebook");
-Object.defineProperty(exports, "FacebookProvider", { enumerable: true, get: function () { return facebook_1.FacebookProvider; } });
-var custom_1 = require("./providers/custom");
-Object.defineProperty(exports, "CustomProvider", { enumerable: true, get: function () { return custom_1.CustomProvider; } });
-//# sourceMappingURL=index.js.map

package/dist/auth/oauth/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/auth/oauth/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;;;AAEH,gFAAgF;AAChF,+BAMe;AALb,oGAAA,YAAY,OAAA;AACZ,6FAAA,KAAK,OAAA;AACL,4GAAA,oBAAoB,OAAA;AACpB,6GAAA,qBAAqB,OAAA;AACrB,qGAAA,aAAa,OAAA;AAGf,iFAAiF;AACjF,2CAAwE;AAA/D,2GAAA,aAAa,OAAA;AAAE,2GAAA,aAAa,OAAA;AAAE,yGAAA,WAAW,OAAA;AAElD,gFAAgF;AAChF,6CAAmD;AAA1C,wGAAA,cAAc,OAAA;AACvB,6CAAmD;AAA1C,wGAAA,cAAc,OAAA;AACvB,mDAAyD;AAAhD,8GAAA,iBAAiB,OAAA;AAC1B,+CAAqD;AAA5C,0GAAA,eAAe,OAAA;AACxB,iDAAuD;AAA9C,4GAAA,gBAAgB,OAAA;AACzB,6CAAmD;AAA1C,wGAAA,cAAc,OAAA"}

package/dist/auth/oauth/middleware.d.ts

@@ -1,63 +0,0 @@
-/**
- * OAuth Middleware Helpers.
- *
- * Express-style middleware functions for handling OAuth redirects, callbacks,
- * and authentication guards in ExisJS route handlers.
- *
- * @example
- * ```ts
- * import { oauthRedirect, oauthCallback, requireAuth } from 'exisjs/auth/oauth'
- *
- * app.get('/auth/google', oauthRedirect('google'))
- * app.get('/auth/google/callback', oauthCallback('google', {
- *   onSuccess: async (req, res, profile, tokens) => {
- *     // Create or update user in your database
- *     req.session.userId = profile.id
- *     res.redirect('/dashboard')
- *   },
- * }))
- *
- * // Protect routes
- * app.get('/dashboard', requireAuth(), (req, res) => {
- *   res.json({ user: req.user })
- * })
- * ```
- */
-import type { Request, Response, NextFunction } from '../../types';
-import type { OAuthCallbackOptions } from './types';
-/**
- * Middleware that redirects the user to an OAuth provider's login page.
- * Stores the state and code verifier in the user's session for validation on callback.
- *
- * @param provider The OAuth provider name (e.g. 'google', 'github')
- * @param options Optional settings like additional params or disabling PKCE
- */
-export declare function oauthRedirect(provider: string, options?: {
-    usePKCE?: boolean;
-    additionalParams?: Record<string, string>;
-    stateKey?: string;
-}): (req: Request, res: Response, _next: NextFunction) => void;
-/**
- * Middleware that handles the OAuth callback from a provider.
- * Validates the state, exchanges the authorization code for tokens,
- * fetches the user profile, and calls the onSuccess callback.
- *
- * @param provider The OAuth provider name
- * @param options Callback options including onSuccess and onError handlers
- */
-export declare function oauthCallback(provider: string, options: OAuthCallbackOptions): (req: Request, res: Response, next: NextFunction) => Promise<void>;
-/**
- * Guard middleware that ensures the user is authenticated.
- * Checks for `req.user` or `req.session.userId` to determine authentication status.
- *
- * @param options Configuration options
- */
-export declare function requireAuth(options?: {
-    /** Custom function to check if the request is authenticated */
-    isAuthenticated?: (req: Request) => boolean;
-    /** URL to redirect to if not authenticated (for browser requests). If not set, returns 401 JSON */
-    redirectTo?: string;
-    /** Custom error message */
-    message?: string;
-}): (req: Request, res: Response, next: NextFunction) => void;
-//# sourceMappingURL=middleware.d.ts.map

package/dist/auth/oauth/middleware.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"middleware.d.ts","sourceRoot":"","sources":["../../../src/auth/oauth/middleware.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAGlE,OAAO,KAAK,EAAE,oBAAoB,EAAkB,MAAM,SAAS,CAAA;AAKnE;;;;;;GAMG;AACH,wBAAgB,aAAa,CAC3B,QAAQ,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE;IACR,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACzC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB,IAEO,KAAK,OAAO,EAAE,KAAK,QAAQ,EAAE,OAAO,YAAY,UAuBzD;AAED;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,oBAAoB,IAG7D,KAAK,OAAO,EAAE,KAAK,QAAQ,EAAE,MAAM,YAAY,mBAkF9D;AAED;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,OAAO,CAAC,EAAE;IACpC,+DAA+D;IAC/D,eAAe,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAA;IAC3C,mGAAmG;IACnG,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,2BAA2B;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB,IACS,KAAK,OAAO,EAAE,KAAK,QAAQ,EAAE,MAAM,YAAY,UA0BxD"}