gitlab-mcp-test 6.62.1

package/dist/src/oauth/gitlab-device-flow.js

@@ -0,0 +1,215 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.initiateDeviceFlow = initiateDeviceFlow;
+exports.pollDeviceFlowOnce = pollDeviceFlowOnce;
+exports.pollForToken = pollForToken;
+exports.refreshGitLabToken = refreshGitLabToken;
+exports.getGitLabUser = getGitLabUser;
+exports.validateGitLabToken = validateGitLabToken;
+exports.exchangeGitLabAuthCode = exchangeGitLabAuthCode;
+exports.buildGitLabAuthUrl = buildGitLabAuthUrl;
+const config_1 = require("../config");
+const logger_1 = require("../logger");
+async function initiateDeviceFlow(config) {
+    const url = `${config_1.GITLAB_BASE_URL}/oauth/authorize_device`;
+    (0, logger_1.logDebug)("Initiating GitLab device flow", { url, clientId: config.gitlabClientId });
+    const scopes = config.gitlabScopes.replace(/,/g, " ");
+    const response = await fetch(url, {
+        method: "POST",
+        headers: {
+            "Content-Type": "application/x-www-form-urlencoded",
+            Accept: "application/json",
+        },
+        body: new URLSearchParams({
+            client_id: config.gitlabClientId,
+            scope: scopes,
+        }),
+    });
+    if (!response.ok) {
+        const errorText = await response.text();
+        (0, logger_1.logError)("Failed to initiate device flow", { status: response.status, error: errorText });
+        throw new Error(`Failed to initiate device flow: ${response.status} ${errorText}`);
+    }
+    const data = (await response.json());
+    (0, logger_1.logInfo)("Device flow initiated", {
+        userCode: data.user_code,
+        verificationUri: data.verification_uri,
+        expiresIn: data.expires_in,
+    });
+    return data;
+}
+async function pollDeviceFlowOnce(deviceCode, config) {
+    const url = `${config_1.GITLAB_BASE_URL}/oauth/token`;
+    const params = {
+        client_id: config.gitlabClientId,
+        device_code: deviceCode,
+        grant_type: "urn:ietf:params:oauth:grant-type:device_code",
+    };
+    if (config.gitlabClientSecret) {
+        params.client_secret = config.gitlabClientSecret;
+    }
+    const response = await fetch(url, {
+        method: "POST",
+        headers: {
+            "Content-Type": "application/x-www-form-urlencoded",
+            Accept: "application/json",
+        },
+        body: new URLSearchParams(params),
+    });
+    if (response.ok) {
+        const data = (await response.json());
+        (0, logger_1.logInfo)("Device flow authorization completed successfully");
+        return data;
+    }
+    const error = (await response.json());
+    switch (error.error) {
+        case "authorization_pending":
+            return null;
+        case "slow_down":
+            (0, logger_1.logDebug)("Device flow: slow_down received, should increase poll interval");
+            return null;
+        case "expired_token":
+            throw new Error("Device code expired. Please start a new authorization.");
+        case "access_denied":
+            throw new Error("User denied the authorization request.");
+        case "invalid_grant":
+            throw new Error("Invalid device code or grant.");
+        default:
+            throw new Error(`Device flow error: ${error.error_description ?? error.error}`);
+    }
+}
+async function pollForToken(deviceCode, config, onPending) {
+    const startTime = Date.now();
+    const timeout = config.deviceTimeout * 1000;
+    let interval = config.devicePollInterval * 1000;
+    while (Date.now() - startTime < timeout) {
+        await sleep(interval);
+        try {
+            const result = await pollDeviceFlowOnce(deviceCode, config);
+            if (result) {
+                return result;
+            }
+            onPending?.();
+        }
+        catch (error) {
+            if (error instanceof Error) {
+                if (error.message.includes("expired") ||
+                    error.message.includes("denied") ||
+                    error.message.includes("invalid")) {
+                    throw error;
+                }
+            }
+            (0, logger_1.logWarn)("Device flow poll error, will retry", { err: error });
+        }
+    }
+    throw new Error(`Device flow timeout after ${config.deviceTimeout} seconds`);
+}
+async function refreshGitLabToken(refreshToken, config) {
+    const url = `${config_1.GITLAB_BASE_URL}/oauth/token`;
+    const params = {
+        client_id: config.gitlabClientId,
+        refresh_token: refreshToken,
+        grant_type: "refresh_token",
+    };
+    if (config.gitlabClientSecret) {
+        params.client_secret = config.gitlabClientSecret;
+    }
+    (0, logger_1.logDebug)("Refreshing GitLab token");
+    const response = await fetch(url, {
+        method: "POST",
+        headers: {
+            "Content-Type": "application/x-www-form-urlencoded",
+            Accept: "application/json",
+        },
+        body: new URLSearchParams(params),
+    });
+    if (!response.ok) {
+        const errorText = await response.text();
+        (0, logger_1.logError)("Failed to refresh GitLab token", { status: response.status, error: errorText });
+        throw new Error(`Failed to refresh token: ${response.status} ${errorText}`);
+    }
+    const data = (await response.json());
+    (0, logger_1.logInfo)("GitLab token refreshed successfully");
+    return data;
+}
+async function getGitLabUser(accessToken) {
+    const url = `${config_1.GITLAB_BASE_URL}/api/v4/user`;
+    const response = await fetch(url, {
+        headers: {
+            Authorization: `Bearer ${accessToken}`,
+            Accept: "application/json",
+        },
+    });
+    if (!response.ok) {
+        const errorText = await response.text();
+        (0, logger_1.logError)("Failed to get GitLab user info", { status: response.status, error: errorText });
+        throw new Error(`Failed to get GitLab user info: ${response.status}`);
+    }
+    const user = (await response.json());
+    (0, logger_1.logDebug)("Retrieved GitLab user info", { userId: user.id, username: user.username });
+    return {
+        id: user.id,
+        username: user.username,
+        name: user.name,
+        email: user.email,
+    };
+}
+async function validateGitLabToken(accessToken) {
+    try {
+        const url = `${config_1.GITLAB_BASE_URL}/api/v4/user`;
+        const response = await fetch(url, {
+            method: "HEAD",
+            headers: {
+                Authorization: `Bearer ${accessToken}`,
+            },
+        });
+        return response.ok;
+    }
+    catch {
+        return false;
+    }
+}
+async function exchangeGitLabAuthCode(code, redirectUri, config) {
+    const url = `${config_1.GITLAB_BASE_URL}/oauth/token`;
+    const params = {
+        client_id: config.gitlabClientId,
+        code: code,
+        grant_type: "authorization_code",
+        redirect_uri: redirectUri,
+    };
+    if (config.gitlabClientSecret) {
+        params.client_secret = config.gitlabClientSecret;
+    }
+    (0, logger_1.logDebug)("Exchanging GitLab authorization code for tokens", { redirectUri });
+    const response = await fetch(url, {
+        method: "POST",
+        headers: {
+            "Content-Type": "application/x-www-form-urlencoded",
+            Accept: "application/json",
+        },
+        body: new URLSearchParams(params),
+    });
+    if (!response.ok) {
+        const errorText = await response.text();
+        (0, logger_1.logError)("Failed to exchange GitLab auth code", { status: response.status, error: errorText });
+        throw new Error(`Failed to exchange authorization code: ${response.status} ${errorText}`);
+    }
+    const data = (await response.json());
+    (0, logger_1.logInfo)("GitLab authorization code exchanged successfully");
+    return data;
+}
+function buildGitLabAuthUrl(config, redirectUri, state) {
+    const scopes = config.gitlabScopes.replace(/,/g, " ");
+    const params = new URLSearchParams({
+        client_id: config.gitlabClientId,
+        redirect_uri: redirectUri,
+        response_type: "code",
+        state: state,
+        scope: scopes,
+    });
+    return `${config_1.GITLAB_BASE_URL}/oauth/authorize?${params.toString()}`;
+}
+function sleep(ms) {
+    return new Promise(resolve => setTimeout(resolve, ms));
+}
+//# sourceMappingURL=gitlab-device-flow.js.map

package/dist/src/oauth/gitlab-device-flow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gitlab-device-flow.js","sourceRoot":"","sources":["../../../src/oauth/gitlab-device-flow.ts"],"names":[],"mappings":";;AA6CA,gDAmCC;AAaD,gDA0DC;AAcD,oCAwCC;AAaD,gDAqCC;AAWD,sCA0BC;AAUD,kDAeC;AAaD,wDAuCC;AAYD,gDAiBC;AApYD,sCAA4C;AAG5C,sCAAiE;AAgC1D,KAAK,UAAU,kBAAkB,CAAC,MAAmB;IAC1D,MAAM,GAAG,GAAG,GAAG,wBAAe,yBAAyB,CAAC;IAExD,IAAA,iBAAQ,EAAC,+BAA+B,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC;IAGpF,MAAM,MAAM,GAAG,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAEtD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAChC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,mCAAmC;YACnD,MAAM,EAAE,kBAAkB;SAC3B;QACD,IAAI,EAAE,IAAI,eAAe,CAAC;YACxB,SAAS,EAAE,MAAM,CAAC,cAAc;YAChC,KAAK,EAAE,MAAM;SACd,CAAC;KACH,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACxC,IAAA,iBAAQ,EAAC,gCAAgC,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QAC1F,MAAM,IAAI,KAAK,CAAC,mCAAmC,QAAQ,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC,CAAC;IACrF,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAyB,CAAC;IAE7D,IAAA,gBAAO,EAAC,uBAAuB,EAAE;QAC/B,QAAQ,EAAE,IAAI,CAAC,SAAS;QACxB,eAAe,EAAE,IAAI,CAAC,gBAAgB;QACtC,SAAS,EAAE,IAAI,CAAC,UAAU;KAC3B,CAAC,CAAC;IAEH,OAAO,IAAI,CAAC;AACd,CAAC;AAaM,KAAK,UAAU,kBAAkB,CACtC,UAAkB,EAClB,MAAmB;IAEnB,MAAM,GAAG,GAAG,GAAG,wBAAe,cAAc,CAAC;IAE7C,MAAM,MAAM,GAA2B;QACrC,SAAS,EAAE,MAAM,CAAC,cAAc;QAChC,WAAW,EAAE,UAAU;QACvB,UAAU,EAAE,8CAA8C;KAC3D,CAAC;IAGF,IAAI,MAAM,CAAC,kBAAkB,EAAE,CAAC;QAC9B,MAAM,CAAC,aAAa,GAAG,MAAM,CAAC,kBAAkB,CAAC;IACnD,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAChC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,mCAAmC;YACnD,MAAM,EAAE,kBAAkB;SAC3B;QACD,IAAI,EAAE,IAAI,eAAe,CAAC,MAAM,CAAC;KAClC,CAAC,CAAC;IAEH,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;QAChB,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAwB,CAAC;QAC5D,IAAA,gBAAO,EAAC,kDAAkD,CAAC,CAAC;QAC5D,OAAO,IAAI,CAAC;IACd,CAAC;IAGD,MAAM,KAAK,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA4B,CAAC;IAEjE,QAAQ,KAAK,CAAC,KAAK,EAAE,CAAC;QACpB,KAAK,uBAAuB;YAE1B,OAAO,IAAI,CAAC;QAEd,KAAK,WAAW;YAGd,IAAA,iBAAQ,EAAC,gEAAgE,CAAC,CAAC;YAC3E,OAAO,IAAI,CAAC;QAEd,KAAK,eAAe;YAClB,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;QAE5E,KAAK,eAAe;YAClB,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAE5D,KAAK,eAAe;YAClB,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QAEnD;YACE,MAAM,IAAI,KAAK,CAAC,sBAAsB,KAAK,CAAC,iBAAiB,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;IACpF,CAAC;AACH,CAAC;AAcM,KAAK,UAAU,YAAY,CAChC,UAAkB,EAClB,MAAmB,EACnB,SAAsB;IAEtB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAG,MAAM,CAAC,aAAa,GAAG,IAAI,CAAC;IAC5C,IAAI,QAAQ,GAAG,MAAM,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAEhD,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,OAAO,EAAE,CAAC;QAExC,MAAM,KAAK,CAAC,QAAQ,CAAC,CAAC;QAEtB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YAE5D,IAAI,MAAM,EAAE,CAAC;gBACX,OAAO,MAAM,CAAC;YAChB,CAAC;YAGD,SAAS,EAAE,EAAE,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAEf,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;gBAC3B,IACE,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;oBACjC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;oBAChC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,EACjC,CAAC;oBACD,MAAM,KAAK,CAAC;gBACd,CAAC;YACH,CAAC;YAGD,IAAA,gBAAO,EAAC,oCAAoC,EAAE,EAAE,GAAG,EAAE,KAAc,EAAE,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,6BAA6B,MAAM,CAAC,aAAa,UAAU,CAAC,CAAC;AAC/E,CAAC;AAaM,KAAK,UAAU,kBAAkB,CACtC,YAAoB,EACpB,MAAmB;IAEnB,MAAM,GAAG,GAAG,GAAG,wBAAe,cAAc,CAAC;IAE7C,MAAM,MAAM,GAA2B;QACrC,SAAS,EAAE,MAAM,CAAC,cAAc;QAChC,aAAa,EAAE,YAAY;QAC3B,UAAU,EAAE,eAAe;KAC5B,CAAC;IAGF,IAAI,MAAM,CAAC,kBAAkB,EAAE,CAAC;QAC9B,MAAM,CAAC,aAAa,GAAG,MAAM,CAAC,kBAAkB,CAAC;IACnD,CAAC;IAED,IAAA,iBAAQ,EAAC,yBAAyB,CAAC,CAAC;IAEpC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAChC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,mCAAmC;YACnD,MAAM,EAAE,kBAAkB;SAC3B;QACD,IAAI,EAAE,IAAI,eAAe,CAAC,MAAM,CAAC;KAClC,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACxC,IAAA,iBAAQ,EAAC,gCAAgC,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QAC1F,MAAM,IAAI,KAAK,CAAC,4BAA4B,QAAQ,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC,CAAC;IAC9E,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAwB,CAAC;IAC5D,IAAA,gBAAO,EAAC,qCAAqC,CAAC,CAAC;IAC/C,OAAO,IAAI,CAAC;AACd,CAAC;AAWM,KAAK,UAAU,aAAa,CAAC,WAAmB;IACrD,MAAM,GAAG,GAAG,GAAG,wBAAe,cAAc,CAAC;IAE7C,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAChC,OAAO,EAAE;YACP,aAAa,EAAE,UAAU,WAAW,EAAE;YACtC,MAAM,EAAE,kBAAkB;SAC3B;KACF,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACxC,IAAA,iBAAQ,EAAC,gCAAgC,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QAC1F,MAAM,IAAI,KAAK,CAAC,mCAAmC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACxE,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAmB,CAAC;IAEvD,IAAA,iBAAQ,EAAC,4BAA4B,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;IAErF,OAAO;QACL,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,KAAK,EAAE,IAAI,CAAC,KAAK;KAClB,CAAC;AACJ,CAAC;AAUM,KAAK,UAAU,mBAAmB,CAAC,WAAmB;IAC3D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,GAAG,wBAAe,cAAc,CAAC;QAE7C,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAChC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,WAAW,EAAE;aACvC;SACF,CAAC,CAAC;QAEH,OAAO,QAAQ,CAAC,EAAE,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAaM,KAAK,UAAU,sBAAsB,CAC1C,IAAY,EACZ,WAAmB,EACnB,MAAmB;IAEnB,MAAM,GAAG,GAAG,GAAG,wBAAe,cAAc,CAAC;IAE7C,MAAM,MAAM,GAA2B;QACrC,SAAS,EAAE,MAAM,CAAC,cAAc;QAChC,IAAI,EAAE,IAAI;QACV,UAAU,EAAE,oBAAoB;QAChC,YAAY,EAAE,WAAW;KAC1B,CAAC;IAGF,IAAI,MAAM,CAAC,kBAAkB,EAAE,CAAC;QAC9B,MAAM,CAAC,aAAa,GAAG,MAAM,CAAC,kBAAkB,CAAC;IACnD,CAAC;IAED,IAAA,iBAAQ,EAAC,iDAAiD,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;IAE7E,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAChC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,mCAAmC;YACnD,MAAM,EAAE,kBAAkB;SAC3B;QACD,IAAI,EAAE,IAAI,eAAe,CAAC,MAAM,CAAC;KAClC,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACxC,IAAA,iBAAQ,EAAC,qCAAqC,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QAC/F,MAAM,IAAI,KAAK,CAAC,0CAA0C,QAAQ,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC,CAAC;IAC5F,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAwB,CAAC;IAC5D,IAAA,gBAAO,EAAC,kDAAkD,CAAC,CAAC;IAC5D,OAAO,IAAI,CAAC;AACd,CAAC;AAYD,SAAgB,kBAAkB,CAChC,MAAmB,EACnB,WAAmB,EACnB,KAAa;IAGb,MAAM,MAAM,GAAG,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAEtD,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;QACjC,SAAS,EAAE,MAAM,CAAC,cAAc;QAChC,YAAY,EAAE,WAAW;QACzB,aAAa,EAAE,MAAM;QACrB,KAAK,EAAE,KAAK;QACZ,KAAK,EAAE,MAAM;KACd,CAAC,CAAC;IAEH,OAAO,GAAG,wBAAe,oBAAoB,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;AACnE,CAAC;AAKD,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AACzD,CAAC"}

package/dist/src/oauth/index.d.ts

@@ -0,0 +1,10 @@
+export { loadOAuthConfig, validateStaticConfig, ConfigurationError, isOAuthEnabled, getAuthModeDescription, resetOAuthConfigCache, isStaticTokenConfigured, isAuthenticationConfigured, } from "./config";
+export type { OAuthConfig } from "./config";
+export type { OAuthSession, AuthCodeFlowState, DeviceFlowState, AuthorizationCode, GitLabTokenResponse, GitLabDeviceResponse, TokenContext, GitLabUserInfo, MCPTokenResponse, OAuthErrorResponse, DeviceFlowPollStatus, DeviceFlowPollResponse, MCPTokenPayload, } from "./types";
+export { sessionStore, SessionStore } from "./session-store";
+export { createStorageBackend, getStorageType, validateStorageConfig, MemoryStorageBackend, FileStorageBackend, PostgreSQLStorageBackend, STORAGE_DATA_VERSION, } from "./storage";
+export type { SessionStorageBackend, StorageConfig, SessionStorageStats, StorageData, } from "./storage";
+export { runWithTokenContext, getTokenContext, getGitLabTokenFromContext, getGitLabUserIdFromContext, getGitLabUsernameFromContext, getSessionIdFromContext, getGitLabApiUrlFromContext, getInstanceLabelFromContext, isInOAuthContext, } from "./token-context";
+export { createJWT, verifyJWT, verifyMCPToken, generateCodeVerifier, generateCodeChallenge, verifyCodeChallenge, generateRandomString, generateUUID, generateAuthorizationCode, generateSessionId, generateRefreshToken, isTokenExpiringSoon, calculateTokenExpiry, } from "./token-utils";
+export { initiateDeviceFlow, pollDeviceFlowOnce, pollForToken, refreshGitLabToken, getGitLabUser, validateGitLabToken, exchangeGitLabAuthCode, buildGitLabAuthUrl, } from "./gitlab-device-flow";
+export { metadataHandler, protectedResourceHandler, getBaseUrl, authorizeHandler, pollHandler, callbackHandler, tokenHandler, registerHandler, getRegisteredClient, isValidRedirectUri, } from "./endpoints/index";

package/dist/src/oauth/index.js

@@ -0,0 +1,69 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getBaseUrl = exports.protectedResourceHandler = exports.metadataHandler = exports.buildGitLabAuthUrl = exports.exchangeGitLabAuthCode = exports.validateGitLabToken = exports.getGitLabUser = exports.refreshGitLabToken = exports.pollForToken = exports.pollDeviceFlowOnce = exports.initiateDeviceFlow = exports.calculateTokenExpiry = exports.isTokenExpiringSoon = exports.generateRefreshToken = exports.generateSessionId = exports.generateAuthorizationCode = exports.generateUUID = exports.generateRandomString = exports.verifyCodeChallenge = exports.generateCodeChallenge = exports.generateCodeVerifier = exports.verifyMCPToken = exports.verifyJWT = exports.createJWT = exports.isInOAuthContext = exports.getInstanceLabelFromContext = exports.getGitLabApiUrlFromContext = exports.getSessionIdFromContext = exports.getGitLabUsernameFromContext = exports.getGitLabUserIdFromContext = exports.getGitLabTokenFromContext = exports.getTokenContext = exports.runWithTokenContext = exports.STORAGE_DATA_VERSION = exports.PostgreSQLStorageBackend = exports.FileStorageBackend = exports.MemoryStorageBackend = exports.validateStorageConfig = exports.getStorageType = exports.createStorageBackend = exports.SessionStore = exports.sessionStore = exports.isAuthenticationConfigured = exports.isStaticTokenConfigured = exports.resetOAuthConfigCache = exports.getAuthModeDescription = exports.isOAuthEnabled = exports.ConfigurationError = exports.validateStaticConfig = exports.loadOAuthConfig = void 0;
+exports.isValidRedirectUri = exports.getRegisteredClient = exports.registerHandler = exports.tokenHandler = exports.callbackHandler = exports.pollHandler = exports.authorizeHandler = void 0;
+var config_1 = require("./config");
+Object.defineProperty(exports, "loadOAuthConfig", { enumerable: true, get: function () { return config_1.loadOAuthConfig; } });
+Object.defineProperty(exports, "validateStaticConfig", { enumerable: true, get: function () { return config_1.validateStaticConfig; } });
+Object.defineProperty(exports, "ConfigurationError", { enumerable: true, get: function () { return config_1.ConfigurationError; } });
+Object.defineProperty(exports, "isOAuthEnabled", { enumerable: true, get: function () { return config_1.isOAuthEnabled; } });
+Object.defineProperty(exports, "getAuthModeDescription", { enumerable: true, get: function () { return config_1.getAuthModeDescription; } });
+Object.defineProperty(exports, "resetOAuthConfigCache", { enumerable: true, get: function () { return config_1.resetOAuthConfigCache; } });
+Object.defineProperty(exports, "isStaticTokenConfigured", { enumerable: true, get: function () { return config_1.isStaticTokenConfigured; } });
+Object.defineProperty(exports, "isAuthenticationConfigured", { enumerable: true, get: function () { return config_1.isAuthenticationConfigured; } });
+var session_store_1 = require("./session-store");
+Object.defineProperty(exports, "sessionStore", { enumerable: true, get: function () { return session_store_1.sessionStore; } });
+Object.defineProperty(exports, "SessionStore", { enumerable: true, get: function () { return session_store_1.SessionStore; } });
+var storage_1 = require("./storage");
+Object.defineProperty(exports, "createStorageBackend", { enumerable: true, get: function () { return storage_1.createStorageBackend; } });
+Object.defineProperty(exports, "getStorageType", { enumerable: true, get: function () { return storage_1.getStorageType; } });
+Object.defineProperty(exports, "validateStorageConfig", { enumerable: true, get: function () { return storage_1.validateStorageConfig; } });
+Object.defineProperty(exports, "MemoryStorageBackend", { enumerable: true, get: function () { return storage_1.MemoryStorageBackend; } });
+Object.defineProperty(exports, "FileStorageBackend", { enumerable: true, get: function () { return storage_1.FileStorageBackend; } });
+Object.defineProperty(exports, "PostgreSQLStorageBackend", { enumerable: true, get: function () { return storage_1.PostgreSQLStorageBackend; } });
+Object.defineProperty(exports, "STORAGE_DATA_VERSION", { enumerable: true, get: function () { return storage_1.STORAGE_DATA_VERSION; } });
+var token_context_1 = require("./token-context");
+Object.defineProperty(exports, "runWithTokenContext", { enumerable: true, get: function () { return token_context_1.runWithTokenContext; } });
+Object.defineProperty(exports, "getTokenContext", { enumerable: true, get: function () { return token_context_1.getTokenContext; } });
+Object.defineProperty(exports, "getGitLabTokenFromContext", { enumerable: true, get: function () { return token_context_1.getGitLabTokenFromContext; } });
+Object.defineProperty(exports, "getGitLabUserIdFromContext", { enumerable: true, get: function () { return token_context_1.getGitLabUserIdFromContext; } });
+Object.defineProperty(exports, "getGitLabUsernameFromContext", { enumerable: true, get: function () { return token_context_1.getGitLabUsernameFromContext; } });
+Object.defineProperty(exports, "getSessionIdFromContext", { enumerable: true, get: function () { return token_context_1.getSessionIdFromContext; } });
+Object.defineProperty(exports, "getGitLabApiUrlFromContext", { enumerable: true, get: function () { return token_context_1.getGitLabApiUrlFromContext; } });
+Object.defineProperty(exports, "getInstanceLabelFromContext", { enumerable: true, get: function () { return token_context_1.getInstanceLabelFromContext; } });
+Object.defineProperty(exports, "isInOAuthContext", { enumerable: true, get: function () { return token_context_1.isInOAuthContext; } });
+var token_utils_1 = require("./token-utils");
+Object.defineProperty(exports, "createJWT", { enumerable: true, get: function () { return token_utils_1.createJWT; } });
+Object.defineProperty(exports, "verifyJWT", { enumerable: true, get: function () { return token_utils_1.verifyJWT; } });
+Object.defineProperty(exports, "verifyMCPToken", { enumerable: true, get: function () { return token_utils_1.verifyMCPToken; } });
+Object.defineProperty(exports, "generateCodeVerifier", { enumerable: true, get: function () { return token_utils_1.generateCodeVerifier; } });
+Object.defineProperty(exports, "generateCodeChallenge", { enumerable: true, get: function () { return token_utils_1.generateCodeChallenge; } });
+Object.defineProperty(exports, "verifyCodeChallenge", { enumerable: true, get: function () { return token_utils_1.verifyCodeChallenge; } });
+Object.defineProperty(exports, "generateRandomString", { enumerable: true, get: function () { return token_utils_1.generateRandomString; } });
+Object.defineProperty(exports, "generateUUID", { enumerable: true, get: function () { return token_utils_1.generateUUID; } });
+Object.defineProperty(exports, "generateAuthorizationCode", { enumerable: true, get: function () { return token_utils_1.generateAuthorizationCode; } });
+Object.defineProperty(exports, "generateSessionId", { enumerable: true, get: function () { return token_utils_1.generateSessionId; } });
+Object.defineProperty(exports, "generateRefreshToken", { enumerable: true, get: function () { return token_utils_1.generateRefreshToken; } });
+Object.defineProperty(exports, "isTokenExpiringSoon", { enumerable: true, get: function () { return token_utils_1.isTokenExpiringSoon; } });
+Object.defineProperty(exports, "calculateTokenExpiry", { enumerable: true, get: function () { return token_utils_1.calculateTokenExpiry; } });
+var gitlab_device_flow_1 = require("./gitlab-device-flow");
+Object.defineProperty(exports, "initiateDeviceFlow", { enumerable: true, get: function () { return gitlab_device_flow_1.initiateDeviceFlow; } });
+Object.defineProperty(exports, "pollDeviceFlowOnce", { enumerable: true, get: function () { return gitlab_device_flow_1.pollDeviceFlowOnce; } });
+Object.defineProperty(exports, "pollForToken", { enumerable: true, get: function () { return gitlab_device_flow_1.pollForToken; } });
+Object.defineProperty(exports, "refreshGitLabToken", { enumerable: true, get: function () { return gitlab_device_flow_1.refreshGitLabToken; } });
+Object.defineProperty(exports, "getGitLabUser", { enumerable: true, get: function () { return gitlab_device_flow_1.getGitLabUser; } });
+Object.defineProperty(exports, "validateGitLabToken", { enumerable: true, get: function () { return gitlab_device_flow_1.validateGitLabToken; } });
+Object.defineProperty(exports, "exchangeGitLabAuthCode", { enumerable: true, get: function () { return gitlab_device_flow_1.exchangeGitLabAuthCode; } });
+Object.defineProperty(exports, "buildGitLabAuthUrl", { enumerable: true, get: function () { return gitlab_device_flow_1.buildGitLabAuthUrl; } });
+var index_1 = require("./endpoints/index");
+Object.defineProperty(exports, "metadataHandler", { enumerable: true, get: function () { return index_1.metadataHandler; } });
+Object.defineProperty(exports, "protectedResourceHandler", { enumerable: true, get: function () { return index_1.protectedResourceHandler; } });
+Object.defineProperty(exports, "getBaseUrl", { enumerable: true, get: function () { return index_1.getBaseUrl; } });
+Object.defineProperty(exports, "authorizeHandler", { enumerable: true, get: function () { return index_1.authorizeHandler; } });
+Object.defineProperty(exports, "pollHandler", { enumerable: true, get: function () { return index_1.pollHandler; } });
+Object.defineProperty(exports, "callbackHandler", { enumerable: true, get: function () { return index_1.callbackHandler; } });
+Object.defineProperty(exports, "tokenHandler", { enumerable: true, get: function () { return index_1.tokenHandler; } });
+Object.defineProperty(exports, "registerHandler", { enumerable: true, get: function () { return index_1.registerHandler; } });
+Object.defineProperty(exports, "getRegisteredClient", { enumerable: true, get: function () { return index_1.getRegisteredClient; } });
+Object.defineProperty(exports, "isValidRedirectUri", { enumerable: true, get: function () { return index_1.isValidRedirectUri; } });
+//# sourceMappingURL=index.js.map

package/dist/src/oauth/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/oauth/index.ts"],"names":[],"mappings":";;;;AAQA,mCASkB;AARhB,yGAAA,eAAe,OAAA;AACf,8GAAA,oBAAoB,OAAA;AACpB,4GAAA,kBAAkB,OAAA;AAClB,wGAAA,cAAc,OAAA;AACd,gHAAA,sBAAsB,OAAA;AACtB,+GAAA,qBAAqB,OAAA;AACrB,iHAAA,uBAAuB,OAAA;AACvB,oHAAA,0BAA0B,OAAA;AAsB5B,iDAA6D;AAApD,6GAAA,YAAY,OAAA;AAAE,6GAAA,YAAY,OAAA;AAGnC,qCAQmB;AAPjB,+GAAA,oBAAoB,OAAA;AACpB,yGAAA,cAAc,OAAA;AACd,gHAAA,qBAAqB,OAAA;AACrB,+GAAA,oBAAoB,OAAA;AACpB,6GAAA,kBAAkB,OAAA;AAClB,mHAAA,wBAAwB,OAAA;AACxB,+GAAA,oBAAoB,OAAA;AAUtB,iDAUyB;AATvB,oHAAA,mBAAmB,OAAA;AACnB,gHAAA,eAAe,OAAA;AACf,0HAAA,yBAAyB,OAAA;AACzB,2HAAA,0BAA0B,OAAA;AAC1B,6HAAA,4BAA4B,OAAA;AAC5B,wHAAA,uBAAuB,OAAA;AACvB,2HAAA,0BAA0B,OAAA;AAC1B,4HAAA,2BAA2B,OAAA;AAC3B,iHAAA,gBAAgB,OAAA;AAIlB,6CAcuB;AAbrB,wGAAA,SAAS,OAAA;AACT,wGAAA,SAAS,OAAA;AACT,6GAAA,cAAc,OAAA;AACd,mHAAA,oBAAoB,OAAA;AACpB,oHAAA,qBAAqB,OAAA;AACrB,kHAAA,mBAAmB,OAAA;AACnB,mHAAA,oBAAoB,OAAA;AACpB,2GAAA,YAAY,OAAA;AACZ,wHAAA,yBAAyB,OAAA;AACzB,gHAAA,iBAAiB,OAAA;AACjB,mHAAA,oBAAoB,OAAA;AACpB,kHAAA,mBAAmB,OAAA;AACnB,mHAAA,oBAAoB,OAAA;AAItB,2DAS8B;AAR5B,wHAAA,kBAAkB,OAAA;AAClB,wHAAA,kBAAkB,OAAA;AAClB,kHAAA,YAAY,OAAA;AACZ,wHAAA,kBAAkB,OAAA;AAClB,mHAAA,aAAa,OAAA;AACb,yHAAA,mBAAmB,OAAA;AACnB,4HAAA,sBAAsB,OAAA;AACtB,wHAAA,kBAAkB,OAAA;AAIpB,2CAW2B;AAVzB,wGAAA,eAAe,OAAA;AACf,iHAAA,wBAAwB,OAAA;AACxB,mGAAA,UAAU,OAAA;AACV,yGAAA,gBAAgB,OAAA;AAChB,oGAAA,WAAW,OAAA;AACX,wGAAA,eAAe,OAAA;AACf,qGAAA,YAAY,OAAA;AACZ,wGAAA,eAAe,OAAA;AACf,4GAAA,mBAAmB,OAAA;AACnB,2GAAA,kBAAkB,OAAA"}

package/dist/src/oauth/session-store.d.ts

@@ -0,0 +1,54 @@
+import { OAuthSession, DeviceFlowState, AuthorizationCode, AuthCodeFlowState } from "./types";
+import { SessionStorageBackend } from "./storage";
+export declare class SessionStore {
+    private backend;
+    private initialized;
+    private sessions;
+    private deviceFlows;
+    private authCodeFlows;
+    private authCodes;
+    private tokenToSession;
+    private refreshTokenToSession;
+    private mcpSessionToOAuthSession;
+    private cleanupIntervalId;
+    constructor(backend?: SessionStorageBackend);
+    initialize(): Promise<void>;
+    getBackendType(): string;
+    createSession(session: OAuthSession): void;
+    getSession(sessionId: string): OAuthSession | undefined;
+    getSessionByToken(token: string): OAuthSession | undefined;
+    getSessionByRefreshToken(refreshToken: string): OAuthSession | undefined;
+    updateSession(sessionId: string, updates: Partial<OAuthSession>): boolean;
+    deleteSession(sessionId: string): boolean;
+    getAllSessions(): IterableIterator<OAuthSession>;
+    getSessionCount(): number;
+    storeDeviceFlow(state: string, flow: DeviceFlowState): void;
+    getDeviceFlow(state: string): DeviceFlowState | undefined;
+    getDeviceFlowByDeviceCode(deviceCode: string): DeviceFlowState | undefined;
+    deleteDeviceFlow(state: string): boolean;
+    getDeviceFlowCount(): number;
+    storeAuthCodeFlow(internalState: string, flow: AuthCodeFlowState): void;
+    getAuthCodeFlow(internalState: string): AuthCodeFlowState | undefined;
+    deleteAuthCodeFlow(internalState: string): boolean;
+    getAuthCodeFlowCount(): number;
+    storeAuthCode(code: AuthorizationCode): void;
+    getAuthCode(code: string): AuthorizationCode | undefined;
+    deleteAuthCode(code: string): boolean;
+    getAuthCodeCount(): number;
+    associateMcpSession(mcpSessionId: string, oauthSessionId: string): void;
+    getSessionByMcpSessionId(mcpSessionId: string): OAuthSession | undefined;
+    getGitLabTokenByMcpSessionId(mcpSessionId: string): string | undefined;
+    removeMcpSessionAssociation(mcpSessionId: string): boolean;
+    cleanup(): void;
+    private startCleanupInterval;
+    stopCleanupInterval(): void;
+    clear(): void;
+    close(): Promise<void>;
+    getStats(): {
+        sessions: number;
+        deviceFlows: number;
+        authCodeFlows: number;
+        authCodes: number;
+    };
+}
+export declare const sessionStore: SessionStore;