mcp-auth-server 0.0.0-stage → 0.1.0

package/lib/functions/http/form.params.js

@@ -0,0 +1,5 @@
+'use strict';
+Object.defineProperty(exports, "__esModule", { value: true });
+const formParams = (body) => (body && 'object' === typeof body ? body : {});
+exports.default = formParams;
+//# sourceMappingURL=form.params.js.map

package/lib/functions/http/form.params.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"form.params.js","sourceRoot":"","sources":["../../../src/functions/http/form.params.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;;AAEb,MAAM,UAAU,GAAG,CAAC,IAAa,EAA2B,EAAE,CAAC,CAAC,IAAI,IAAI,QAAQ,KAAK,OAAO,IAAI,CAAC,CAAC,CAAE,IAAgC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAC3I,kBAAe,UAAU,CAAC"}

package/lib/functions/http/header.value.d.ts

@@ -0,0 +1,3 @@
+import type HttpRequestType from '../../types/http.request.type';
+declare const headerValue: (headers: HttpRequestType["headers"], name: string) => string | undefined;
+export default headerValue;

package/lib/functions/http/header.value.js

@@ -0,0 +1,8 @@
+'use strict';
+Object.defineProperty(exports, "__esModule", { value: true });
+const headerValue = (headers, name) => {
+    const value = headers[name] ?? headers[name.toLowerCase()];
+    return Array.isArray(value) ? value[0] : value;
+};
+exports.default = headerValue;
+//# sourceMappingURL=header.value.js.map

package/lib/functions/http/header.value.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"header.value.js","sourceRoot":"","sources":["../../../src/functions/http/header.value.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;;AAIb,MAAM,WAAW,GAAG,CAAC,OAAmC,EAAE,IAAY,EAAsB,EAAE;IAC7F,MAAM,KAAK,GAAkC,OAAO,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IAC1F,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AAChD,CAAC,CAAC;AACF,kBAAe,WAAW,CAAC"}

package/lib/functions/http/json.response.d.ts

@@ -0,0 +1,3 @@
+import type HttpResponseType from '../../types/http.response.type';
+declare const jsonResponse: (status: number, body: unknown, headers?: Record<string, string>) => HttpResponseType;
+export default jsonResponse;

package/lib/functions/http/json.response.js

@@ -0,0 +1,9 @@
+'use strict';
+Object.defineProperty(exports, "__esModule", { value: true });
+const jsonResponse = (status, body, headers = {}) => ({
+    status,
+    headers: { 'content-type': 'application/json', ...headers },
+    body
+});
+exports.default = jsonResponse;
+//# sourceMappingURL=json.response.js.map

package/lib/functions/http/json.response.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"json.response.js","sourceRoot":"","sources":["../../../src/functions/http/json.response.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;;AAIb,MAAM,YAAY,GAAG,CAAC,MAAc,EAAE,IAAa,EAAE,UAAkC,EAAE,EAAoB,EAAE,CAAC,CAAC;IAChH,MAAM;IACN,OAAO,EAAE,EAAC,cAAc,EAAE,kBAAkB,EAAE,GAAG,OAAO,EAAC;IACzD,IAAI;CACJ,CAAC,CAAC;AACH,kBAAe,YAAY,CAAC"}

package/lib/functions/http/oauth.error.response.d.ts

@@ -0,0 +1,3 @@
+import type HttpResponseType from '../../types/http.response.type';
+declare const oauthErrorResponse: (status: number, error: string, description: string, headers?: Record<string, string>) => HttpResponseType;
+export default oauthErrorResponse;

package/lib/functions/http/oauth.error.response.js

@@ -0,0 +1,9 @@
+'use strict';
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const json_response_1 = __importDefault(require("./json.response"));
+const oauthErrorResponse = (status, error, description, headers = {}) => (0, json_response_1.default)(status, { error, error_description: description }, headers);
+exports.default = oauthErrorResponse;
+//# sourceMappingURL=oauth.error.response.js.map

package/lib/functions/http/oauth.error.response.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.error.response.js","sourceRoot":"","sources":["../../../src/functions/http/oauth.error.response.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;;;;;AAGb,oEAA2C;AAE3C,MAAM,kBAAkB,GAAG,CAAC,MAAc,EAAE,KAAa,EAAE,WAAmB,EAAE,UAAkC,EAAE,EAAoB,EAAE,CACzI,IAAA,uBAAY,EAAC,MAAM,EAAE,EAAC,KAAK,EAAE,iBAAiB,EAAE,WAAW,EAAC,EAAE,OAAO,CAAC,CAAC;AACxE,kBAAe,kBAAkB,CAAC"}

package/lib/functions/http/plain.error.response.d.ts

@@ -0,0 +1,3 @@
+import type HttpResponseType from '../../types/http.response.type';
+declare const plainErrorResponse: (status: number, message: string) => HttpResponseType;
+export default plainErrorResponse;

package/lib/functions/http/plain.error.response.js

@@ -0,0 +1,5 @@
+'use strict';
+Object.defineProperty(exports, "__esModule", { value: true });
+const plainErrorResponse = (status, message) => ({ status, headers: { 'content-type': 'text/plain', 'cache-control': 'no-store' }, body: message });
+exports.default = plainErrorResponse;
+//# sourceMappingURL=plain.error.response.js.map

package/lib/functions/http/plain.error.response.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plain.error.response.js","sourceRoot":"","sources":["../../../src/functions/http/plain.error.response.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;;AAIb,MAAM,kBAAkB,GAAG,CAAC,MAAc,EAAE,OAAe,EAAoB,EAAE,CAAC,CAAC,EAAC,MAAM,EAAE,OAAO,EAAE,EAAC,cAAc,EAAE,YAAY,EAAE,eAAe,EAAE,UAAU,EAAC,EAAE,IAAI,EAAE,OAAO,EAAC,CAAC,CAAC;AAClL,kBAAe,kBAAkB,CAAC"}

package/lib/functions/http/query.param.d.ts

@@ -0,0 +1,3 @@
+import type HttpRequestType from '../../types/http.request.type';
+declare const queryParam: (request: HttpRequestType, name: string) => string | undefined;
+export default queryParam;

package/lib/functions/http/query.param.js

@@ -0,0 +1,8 @@
+'use strict';
+Object.defineProperty(exports, "__esModule", { value: true });
+const queryParam = (request, name) => {
+    const value = request.query[name];
+    return 'string' === typeof value ? value : undefined;
+};
+exports.default = queryParam;
+//# sourceMappingURL=query.param.js.map

package/lib/functions/http/query.param.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"query.param.js","sourceRoot":"","sources":["../../../src/functions/http/query.param.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;;AAIb,MAAM,UAAU,GAAG,CAAC,OAAwB,EAAE,IAAY,EAAsB,EAAE;IACjF,MAAM,KAAK,GAAkC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACjE,OAAO,QAAQ,KAAK,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACtD,CAAC,CAAC;AACF,kBAAe,UAAU,CAAC"}

package/lib/functions/http/redirect.response.d.ts

@@ -0,0 +1,3 @@
+import type HttpResponseType from '../../types/http.response.type';
+declare const redirectResponse: (location: string) => HttpResponseType;
+export default redirectResponse;

package/lib/functions/http/redirect.response.js

@@ -0,0 +1,5 @@
+'use strict';
+Object.defineProperty(exports, "__esModule", { value: true });
+const redirectResponse = (location) => ({ status: 302, headers: { location, 'cache-control': 'no-store' } });
+exports.default = redirectResponse;
+//# sourceMappingURL=redirect.response.js.map

package/lib/functions/http/redirect.response.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redirect.response.js","sourceRoot":"","sources":["../../../src/functions/http/redirect.response.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;;AAIb,MAAM,gBAAgB,GAAG,CAAC,QAAgB,EAAoB,EAAE,CAAC,CAAC,EAAC,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAC,QAAQ,EAAE,eAAe,EAAE,UAAU,EAAC,EAAC,CAAC,CAAC;AACnI,kBAAe,gBAAgB,CAAC"}

package/lib/functions/http/text.value.d.ts

@@ -0,0 +1,2 @@
+declare const textValue: (value: unknown) => string | undefined;
+export default textValue;

package/lib/functions/http/text.value.js

@@ -0,0 +1,5 @@
+'use strict';
+Object.defineProperty(exports, "__esModule", { value: true });
+const textValue = (value) => ('string' === typeof value && value ? value : undefined);
+exports.default = textValue;
+//# sourceMappingURL=text.value.js.map

package/lib/functions/http/text.value.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"text.value.js","sourceRoot":"","sources":["../../../src/functions/http/text.value.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;;AAEb,MAAM,SAAS,GAAG,CAAC,KAAc,EAAsB,EAAE,CAAC,CAAC,QAAQ,KAAK,OAAO,KAAK,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;AACnH,kBAAe,SAAS,CAAC"}

package/lib/functions/http/trim.trailing.slashes.d.ts

@@ -0,0 +1,2 @@
+declare const trimTrailingSlashes: (value: string) => string;
+export default trimTrailingSlashes;

package/lib/functions/http/trim.trailing.slashes.js

@@ -0,0 +1,10 @@
+'use strict';
+Object.defineProperty(exports, "__esModule", { value: true });
+const trimTrailingSlashes = (value) => {
+    let end = value.length;
+    while (end > 0 && '/' === value[end - 1])
+        end -= 1;
+    return value.slice(0, end);
+};
+exports.default = trimTrailingSlashes;
+//# sourceMappingURL=trim.trailing.slashes.js.map

package/lib/functions/http/trim.trailing.slashes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trim.trailing.slashes.js","sourceRoot":"","sources":["../../../src/functions/http/trim.trailing.slashes.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;;AAEb,MAAM,mBAAmB,GAAG,CAAC,KAAa,EAAU,EAAE;IACrD,IAAI,GAAG,GAAW,KAAK,CAAC,MAAM,CAAC;IAC/B,OAAO,GAAG,GAAG,CAAC,IAAI,GAAG,KAAK,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC;QAAE,GAAG,IAAI,CAAC,CAAC;IACnD,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAC5B,CAAC,CAAC;AACF,kBAAe,mBAAmB,CAAC"}

package/lib/functions/jwt/sign.access.token.d.ts

@@ -0,0 +1,4 @@
+import type AccessTokenInputType from '../../types/access.token.input.type';
+import type KeyPairType from '../../types/key.pair.type';
+declare const signAccessToken: (keys: KeyPairType, input: AccessTokenInputType) => Promise<string>;
+export default signAccessToken;

package/lib/functions/jwt/sign.access.token.js

@@ -0,0 +1,21 @@
+'use strict';
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const jose_1 = require("jose");
+const random_id_1 = __importDefault(require("../crypto/random.id"));
+const signAccessToken = async (keys, input) => {
+    const issuedAt = Math.floor(input.now.getTime() / 1000);
+    return new jose_1.SignJWT({ client_id: input.clientId })
+        .setProtectedHeader({ alg: 'RS256' })
+        .setIssuer(input.issuer)
+        .setAudience(input.resource)
+        .setSubject(input.userId)
+        .setJti((0, random_id_1.default)())
+        .setIssuedAt(issuedAt)
+        .setExpirationTime(issuedAt + input.ttlSeconds)
+        .sign(keys.privateKey);
+};
+exports.default = signAccessToken;
+//# sourceMappingURL=sign.access.token.js.map

package/lib/functions/jwt/sign.access.token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sign.access.token.js","sourceRoot":"","sources":["../../../src/functions/jwt/sign.access.token.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;;;;;AAEb,+BAA6B;AAI7B,oEAA2C;AAE3C,MAAM,eAAe,GAAG,KAAK,EAAE,IAAiB,EAAE,KAA2B,EAAmB,EAAE;IACjG,MAAM,QAAQ,GAAW,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;IAChE,OAAO,IAAI,cAAO,CAAC,EAAC,SAAS,EAAE,KAAK,CAAC,QAAQ,EAAC,CAAC;SAC7C,kBAAkB,CAAC,EAAC,GAAG,EAAE,OAAO,EAAC,CAAC;SAClC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC;SACvB,WAAW,CAAC,KAAK,CAAC,QAAQ,CAAC;SAC3B,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC;SACxB,MAAM,CAAC,IAAA,mBAAQ,GAAE,CAAC;SAClB,WAAW,CAAC,QAAQ,CAAC;SACrB,iBAAiB,CAAC,QAAQ,GAAG,KAAK,CAAC,UAAU,CAAC;SAC9C,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;AACzB,CAAC,CAAC;AACF,kBAAe,eAAe,CAAC"}

package/lib/functions/jwt/verify.access.token.d.ts

@@ -0,0 +1,4 @@
+import type KeyPairType from '../../types/key.pair.type';
+import type VerifyResultType from '../../types/verify.result.type';
+declare const verifyAccessToken: (keys: KeyPairType, token: string, issuer: string, resource: string, now: Date) => Promise<VerifyResultType>;
+export default verifyAccessToken;

package/lib/functions/jwt/verify.access.token.js

@@ -0,0 +1,16 @@
+'use strict';
+Object.defineProperty(exports, "__esModule", { value: true });
+const jose_1 = require("jose");
+const verifyAccessToken = async (keys, token, issuer, resource, now) => {
+    try {
+        const { payload } = await (0, jose_1.jwtVerify)(token, keys.publicKey, { algorithms: ['RS256'], issuer, audience: resource, currentDate: now });
+        return { claims: payload };
+    }
+    catch (error) {
+        if (error instanceof jose_1.errors.JWTExpired)
+            return { reason: 'expired' };
+        return { reason: 'invalid_token' };
+    }
+};
+exports.default = verifyAccessToken;
+//# sourceMappingURL=verify.access.token.js.map

package/lib/functions/jwt/verify.access.token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.access.token.js","sourceRoot":"","sources":["../../../src/functions/jwt/verify.access.token.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;;AAEb,+BAAuC;AAKvC,MAAM,iBAAiB,GAAG,KAAK,EAAE,IAAiB,EAAE,KAAa,EAAE,MAAc,EAAE,QAAgB,EAAE,GAAS,EAA6B,EAAE;IAC5I,IAAI,CAAC;QACJ,MAAM,EAAC,OAAO,EAAC,GAAG,MAAM,IAAA,gBAAS,EAAC,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE,EAAC,UAAU,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,EAAC,CAAC,CAAC;QAChI,OAAO,EAAC,MAAM,EAAE,OAAkC,EAAC,CAAC;IACrD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,KAAK,YAAY,aAAM,CAAC,UAAU;YAAE,OAAO,EAAC,MAAM,EAAE,SAAS,EAAC,CAAC;QACnE,OAAO,EAAC,MAAM,EAAE,eAAe,EAAC,CAAC;IAClC,CAAC;AACF,CAAC,CAAC;AACF,kBAAe,iBAAiB,CAAC"}

package/lib/functions/keys/der.length.d.ts

@@ -0,0 +1,2 @@
+declare const derLength: (length: number) => number[];
+export default derLength;

package/lib/functions/keys/der.length.js

@@ -0,0 +1,12 @@
+'use strict';
+Object.defineProperty(exports, "__esModule", { value: true });
+const derLength = (length) => {
+    if (length < 128)
+        return [length];
+    const bytes = [];
+    for (let rest = length; rest > 0; rest = Math.floor(rest / 256))
+        bytes.unshift(rest % 256);
+    return [128 + bytes.length, ...bytes];
+};
+exports.default = derLength;
+//# sourceMappingURL=der.length.js.map

package/lib/functions/keys/der.length.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"der.length.js","sourceRoot":"","sources":["../../../src/functions/keys/der.length.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;;AAEb,MAAM,SAAS,GAAG,CAAC,MAAc,EAAY,EAAE;IAC9C,IAAI,MAAM,GAAG,GAAG;QAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAClC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,IAAI,IAAI,GAAG,MAAM,EAAE,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,GAAG,CAAC;QAAE,KAAK,CAAC,OAAO,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC;IAC3F,OAAO,CAAC,GAAG,GAAG,KAAK,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC;AACvC,CAAC,CAAC;AACF,kBAAe,SAAS,CAAC"}

package/lib/functions/keys/is.rsa.key.d.ts

@@ -0,0 +1,2 @@
+declare const isRsaKey: (key: unknown) => boolean;
+export default isRsaKey;

package/lib/functions/keys/is.rsa.key.js

@@ -0,0 +1,8 @@
+'use strict';
+Object.defineProperty(exports, "__esModule", { value: true });
+const isRsaKey = (key) => {
+    const candidate = key;
+    return 'rsa' === candidate.asymmetricKeyType || 'RSASSA-PKCS1-v1_5' === candidate.algorithm?.name;
+};
+exports.default = isRsaKey;
+//# sourceMappingURL=is.rsa.key.js.map

package/lib/functions/keys/is.rsa.key.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"is.rsa.key.js","sourceRoot":"","sources":["../../../src/functions/keys/is.rsa.key.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;;AAEb,MAAM,QAAQ,GAAG,CAAC,GAAY,EAAW,EAAE;IAC1C,MAAM,SAAS,GAAG,GAAgE,CAAC;IACnF,OAAO,KAAK,KAAK,SAAS,CAAC,iBAAiB,IAAI,mBAAmB,KAAK,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC;AACnG,CAAC,CAAC;AACF,kBAAe,QAAQ,CAAC"}

package/lib/functions/keys/normalize.pem.d.ts

@@ -0,0 +1,2 @@
+declare const normalizePem: (value: string) => string;
+export default normalizePem;

package/lib/functions/keys/normalize.pem.js

@@ -0,0 +1,16 @@
+'use strict';
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const pkcs1_to_pkcs8_1 = __importDefault(require("./pkcs1.to.pkcs8"));
+const wrap_pem_1 = __importDefault(require("./wrap.pem"));
+const normalizePem = (value) => {
+    const pem = value.replace(/\\n/g, '\n').trim();
+    if (!pem.includes('BEGIN RSA PRIVATE KEY'))
+        return pem;
+    const base64 = pem.replace(/-----[A-Z ]+-----/g, '').replace(/\s+/g, '');
+    return (0, wrap_pem_1.default)((0, pkcs1_to_pkcs8_1.default)(Uint8Array.from(atob(base64), (char) => char.charCodeAt(0))));
+};
+exports.default = normalizePem;
+//# sourceMappingURL=normalize.pem.js.map

package/lib/functions/keys/normalize.pem.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"normalize.pem.js","sourceRoot":"","sources":["../../../src/functions/keys/normalize.pem.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;;;;;AAEb,sEAA4C;AAC5C,0DAAiC;AAEjC,MAAM,YAAY,GAAG,CAAC,KAAa,EAAU,EAAE;IAC9C,MAAM,GAAG,GAAW,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;IACvD,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,uBAAuB,CAAC;QAAE,OAAO,GAAG,CAAC;IACvD,MAAM,MAAM,GAAW,GAAG,CAAC,OAAO,CAAC,oBAAoB,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACjF,OAAO,IAAA,kBAAO,EAAC,IAAA,wBAAY,EAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAY,EAAU,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC3G,CAAC,CAAC;AACF,kBAAe,YAAY,CAAC"}

package/lib/functions/keys/pkcs1.to.pkcs8.d.ts

@@ -0,0 +1,2 @@
+declare const pkcs1ToPkcs8: (pkcs1: Uint8Array) => Uint8Array;
+export default pkcs1ToPkcs8;

package/lib/functions/keys/pkcs1.to.pkcs8.js

@@ -0,0 +1,14 @@
+'use strict';
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const der_length_1 = __importDefault(require("./der.length"));
+const rsaEncryptionAlgorithm = [0x30, 0x0d, 0x06, 0x09, 0x2a, 0x86, 0x48, 0x86, 0xf7, 0x0d, 0x01, 0x01, 0x01, 0x05, 0x00];
+const pkcs1ToPkcs8 = (pkcs1) => {
+    const octetString = [0x04, ...(0, der_length_1.default)(pkcs1.length), ...pkcs1];
+    const body = [0x02, 0x01, 0x00, ...rsaEncryptionAlgorithm, ...octetString];
+    return Uint8Array.from([0x30, ...(0, der_length_1.default)(body.length), ...body]);
+};
+exports.default = pkcs1ToPkcs8;
+//# sourceMappingURL=pkcs1.to.pkcs8.js.map

package/lib/functions/keys/pkcs1.to.pkcs8.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pkcs1.to.pkcs8.js","sourceRoot":"","sources":["../../../src/functions/keys/pkcs1.to.pkcs8.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;;;;;AAEb,8DAAqC;AAErC,MAAM,sBAAsB,GAAa,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AAEpI,MAAM,YAAY,GAAG,CAAC,KAAiB,EAAc,EAAE;IACtD,MAAM,WAAW,GAAa,CAAC,IAAI,EAAE,GAAG,IAAA,oBAAS,EAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,CAAC,CAAC;IAC3E,MAAM,IAAI,GAAa,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,sBAAsB,EAAE,GAAG,WAAW,CAAC,CAAC;IACrF,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,GAAG,IAAA,oBAAS,EAAC,IAAI,CAAC,MAAM,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;AACpE,CAAC,CAAC;AACF,kBAAe,YAAY,CAAC"}

package/lib/functions/keys/resolve.key.pair.d.ts

@@ -0,0 +1,3 @@
+import type KeyPairType from '../../types/key.pair.type';
+declare const resolveKeyPair: (signingKey: CryptoKey | string, verificationKey?: CryptoKey) => Promise<KeyPairType>;
+export default resolveKeyPair;

package/lib/functions/keys/resolve.key.pair.js

@@ -0,0 +1,27 @@
+'use strict';
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const jose_1 = require("jose");
+const is_rsa_key_1 = __importDefault(require("./is.rsa.key"));
+const normalize_pem_1 = __importDefault(require("./normalize.pem"));
+const resolveKeyPair = async (signingKey, verificationKey) => {
+    let privateKey;
+    try {
+        privateKey = 'string' === typeof signingKey ? (await (0, jose_1.importPKCS8)((0, normalize_pem_1.default)(signingKey), 'RS256', { extractable: true })) : signingKey;
+    }
+    catch {
+        throw new Error('signingKey is not a valid RSA private key in PEM (PKCS8 or PKCS1) form');
+    }
+    if (!(0, is_rsa_key_1.default)(privateKey))
+        throw new Error('signingKey must be an RSA key usable with RS256');
+    if (verificationKey)
+        return { privateKey, publicKey: verificationKey };
+    if (false === privateKey.extractable)
+        throw new Error('signingKey is not extractable: pass verificationKey with the matching public key');
+    const { kty, n, e } = await (0, jose_1.exportJWK)(privateKey);
+    return { privateKey, publicKey: (await (0, jose_1.importJWK)({ kty, n, e }, 'RS256')) };
+};
+exports.default = resolveKeyPair;
+//# sourceMappingURL=resolve.key.pair.js.map

package/lib/functions/keys/resolve.key.pair.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve.key.pair.js","sourceRoot":"","sources":["../../../src/functions/keys/resolve.key.pair.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;;;;;AAEb,+BAAuD;AAGvD,8DAAoC;AACpC,oEAA2C;AAE3C,MAAM,cAAc,GAAG,KAAK,EAAE,UAA8B,EAAE,eAA2B,EAAwB,EAAE;IAClH,IAAI,UAAqB,CAAC;IAC1B,IAAI,CAAC;QACJ,UAAU,GAAG,QAAQ,KAAK,OAAO,UAAU,CAAC,CAAC,CAAE,CAAC,MAAM,IAAA,kBAAW,EAAC,IAAA,uBAAY,EAAC,UAAU,CAAC,EAAE,OAAO,EAAE,EAAC,WAAW,EAAE,IAAI,EAAC,CAAC,CAAe,CAAC,CAAC,CAAC,UAAU,CAAC;IACvJ,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;IAC3F,CAAC;IACD,IAAI,CAAC,IAAA,oBAAQ,EAAC,UAAU,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IAC9F,IAAI,eAAe;QAAE,OAAO,EAAC,UAAU,EAAE,SAAS,EAAE,eAAe,EAAC,CAAC;IACrE,IAAI,KAAK,KAAK,UAAU,CAAC,WAAW;QAAE,MAAM,IAAI,KAAK,CAAC,kFAAkF,CAAC,CAAC;IAE1I,MAAM,EAAC,GAAG,EAAE,CAAC,EAAE,CAAC,EAAC,GAAG,MAAM,IAAA,gBAAS,EAAC,UAAU,CAAC,CAAC;IAChD,OAAO,EAAC,UAAU,EAAE,SAAS,EAAE,CAAC,MAAM,IAAA,gBAAS,EAAC,EAAC,GAAG,EAAE,CAAC,EAAE,CAAC,EAAC,EAAE,OAAO,CAAC,CAAc,EAAC,CAAC;AACtF,CAAC,CAAC;AACF,kBAAe,cAAc,CAAC"}

package/lib/functions/keys/signing.key.from.env.d.ts

@@ -0,0 +1,2 @@
+declare const signingKeyFromEnv: (env: Record<string, string | undefined>, name: string) => string;
+export default signingKeyFromEnv;

package/lib/functions/keys/signing.key.from.env.js

@@ -0,0 +1,14 @@
+'use strict';
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const normalize_pem_1 = __importDefault(require("./normalize.pem"));
+const signingKeyFromEnv = (env, name) => {
+    const value = env[name];
+    if (!value)
+        throw new Error(`${name} is not set`);
+    return (0, normalize_pem_1.default)(value);
+};
+exports.default = signingKeyFromEnv;
+//# sourceMappingURL=signing.key.from.env.js.map

package/lib/functions/keys/signing.key.from.env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signing.key.from.env.js","sourceRoot":"","sources":["../../../src/functions/keys/signing.key.from.env.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;;;;;AAEb,oEAA2C;AAE3C,MAAM,iBAAiB,GAAG,CAAC,GAAuC,EAAE,IAAY,EAAU,EAAE;IAC3F,MAAM,KAAK,GAAuB,GAAG,CAAC,IAAI,CAAC,CAAC;IAC5C,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,aAAa,CAAC,CAAC;IAClD,OAAO,IAAA,uBAAY,EAAC,KAAK,CAAC,CAAC;AAC5B,CAAC,CAAC;AACF,kBAAe,iBAAiB,CAAC"}

package/lib/functions/keys/wrap.pem.d.ts

@@ -0,0 +1,2 @@
+declare const wrapPem: (der: Uint8Array) => string;
+export default wrapPem;

package/lib/functions/keys/wrap.pem.js

@@ -0,0 +1,11 @@
+'use strict';
+Object.defineProperty(exports, "__esModule", { value: true });
+const wrapPem = (der) => {
+    let binary = '';
+    for (const byte of der)
+        binary += String.fromCharCode(byte);
+    const lines = btoa(binary).match(/.{1,64}/g) ?? [];
+    return `-----BEGIN PRIVATE KEY-----\n${lines.join('\n')}\n-----END PRIVATE KEY-----`;
+};
+exports.default = wrapPem;
+//# sourceMappingURL=wrap.pem.js.map

package/lib/functions/keys/wrap.pem.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wrap.pem.js","sourceRoot":"","sources":["../../../src/functions/keys/wrap.pem.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;;AAEb,MAAM,OAAO,GAAG,CAAC,GAAe,EAAU,EAAE;IAC3C,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,MAAM,IAAI,IAAI,GAAG;QAAE,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IAC5D,MAAM,KAAK,GAAa,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;IAC7D,OAAO,gCAAgC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,6BAA6B,CAAC;AACtF,CAAC,CAAC;AACF,kBAAe,OAAO,CAAC"}

package/lib/functions/redirect/build.error.redirect.d.ts

@@ -0,0 +1,2 @@
+declare const buildErrorRedirect: (redirectUri: string, issuer: string, error: string, description: string, state?: string) => string;
+export default buildErrorRedirect;

package/lib/functions/redirect/build.error.redirect.js

@@ -0,0 +1,9 @@
+'use strict';
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const build_redirect_1 = __importDefault(require("./build.redirect"));
+const buildErrorRedirect = (redirectUri, issuer, error, description, state) => (0, build_redirect_1.default)(redirectUri, issuer, { error, error_description: description, state });
+exports.default = buildErrorRedirect;
+//# sourceMappingURL=build.error.redirect.js.map

package/lib/functions/redirect/build.error.redirect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"build.error.redirect.js","sourceRoot":"","sources":["../../../src/functions/redirect/build.error.redirect.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;;;;;AAEb,sEAA6C;AAE7C,MAAM,kBAAkB,GAAG,CAAC,WAAmB,EAAE,MAAc,EAAE,KAAa,EAAE,WAAmB,EAAE,KAAc,EAAU,EAAE,CAC9H,IAAA,wBAAa,EAAC,WAAW,EAAE,MAAM,EAAE,EAAC,KAAK,EAAE,iBAAiB,EAAE,WAAW,EAAE,KAAK,EAAC,CAAC,CAAC;AACpF,kBAAe,kBAAkB,CAAC"}

package/lib/functions/redirect/build.redirect.d.ts

@@ -0,0 +1,2 @@
+declare const buildRedirect: (redirectUri: string, issuer: string, params: Record<string, string | undefined>) => string;
+export default buildRedirect;

package/lib/functions/redirect/build.redirect.js

@@ -0,0 +1,12 @@
+'use strict';
+Object.defineProperty(exports, "__esModule", { value: true });
+const buildRedirect = (redirectUri, issuer, params) => {
+    const target = new URL(redirectUri);
+    for (const [key, value] of Object.entries(params))
+        if (value)
+            target.searchParams.set(key, value);
+    target.searchParams.set('iss', issuer);
+    return target.toString();
+};
+exports.default = buildRedirect;
+//# sourceMappingURL=build.redirect.js.map

package/lib/functions/redirect/build.redirect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"build.redirect.js","sourceRoot":"","sources":["../../../src/functions/redirect/build.redirect.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;;AAEb,MAAM,aAAa,GAAG,CAAC,WAAmB,EAAE,MAAc,EAAE,MAA0C,EAAU,EAAE;IACjH,MAAM,MAAM,GAAQ,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;IACzC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,IAAI,KAAK;YAAE,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAClG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACvC,OAAO,MAAM,CAAC,QAAQ,EAAE,CAAC;AAC1B,CAAC,CAAC;AACF,kBAAe,aAAa,CAAC"}

package/lib/functions/redirect/describe.redirect.target.d.ts

@@ -0,0 +1,2 @@
+declare const describeRedirectTarget: (redirectUri: string) => string;
+export default describeRedirectTarget;

package/lib/functions/redirect/describe.redirect.target.js

@@ -0,0 +1,8 @@
+'use strict';
+Object.defineProperty(exports, "__esModule", { value: true });
+const describeRedirectTarget = (redirectUri) => {
+    const url = new URL(redirectUri);
+    return url.protocol.startsWith('http') ? url.host : `${url.protocol}//${url.host}`;
+};
+exports.default = describeRedirectTarget;
+//# sourceMappingURL=describe.redirect.target.js.map

package/lib/functions/redirect/describe.redirect.target.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"describe.redirect.target.js","sourceRoot":"","sources":["../../../src/functions/redirect/describe.redirect.target.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;;AAEb,MAAM,sBAAsB,GAAG,CAAC,WAAmB,EAAU,EAAE;IAC9D,MAAM,GAAG,GAAQ,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;IACtC,OAAO,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,QAAQ,KAAK,GAAG,CAAC,IAAI,EAAE,CAAC;AACpF,CAAC,CAAC;AACF,kBAAe,sBAAsB,CAAC"}

package/lib/functions/redirect/is.allowed.redirect.uri.d.ts

@@ -0,0 +1,3 @@
+import type RedirectPolicyType from '../../types/redirect.policy.type';
+declare const isAllowedRedirectUri: (redirectUri: unknown, policy: RedirectPolicyType) => boolean;
+export default isAllowedRedirectUri;

package/lib/functions/redirect/is.allowed.redirect.uri.js

@@ -0,0 +1,19 @@
+'use strict';
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const parse_url_1 = __importDefault(require("./parse.url"));
+const loopbackHosts = ['localhost', '127.0.0.1'];
+const isAllowedRedirectUri = (redirectUri, policy) => {
+    const url = (0, parse_url_1.default)(redirectUri);
+    if (!url || url.hash || 'string' !== typeof redirectUri || redirectUri.includes('#'))
+        return false;
+    if ('http:' === url.protocol)
+        return loopbackHosts.includes(url.hostname);
+    if ('https:' === url.protocol)
+        return policy.httpsHosts.includes(url.hostname);
+    return policy.customSchemes.some((scheme) => redirectUri.startsWith(scheme));
+};
+exports.default = isAllowedRedirectUri;
+//# sourceMappingURL=is.allowed.redirect.uri.js.map

package/lib/functions/redirect/is.allowed.redirect.uri.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"is.allowed.redirect.uri.js","sourceRoot":"","sources":["../../../src/functions/redirect/is.allowed.redirect.uri.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;;;;;AAGb,4DAAmC;AAEnC,MAAM,aAAa,GAAa,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;AAE3D,MAAM,oBAAoB,GAAG,CAAC,WAAoB,EAAE,MAA0B,EAAW,EAAE;IAC1F,MAAM,GAAG,GAAe,IAAA,mBAAQ,EAAC,WAAW,CAAC,CAAC;IAC9C,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,IAAI,QAAQ,KAAK,OAAO,WAAW,IAAI,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACnG,IAAI,OAAO,KAAK,GAAG,CAAC,QAAQ;QAAE,OAAO,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC1E,IAAI,QAAQ,KAAK,GAAG,CAAC,QAAQ;QAAE,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC/E,OAAO,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,MAAc,EAAW,EAAE,CAAC,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;AAC/F,CAAC,CAAC;AACF,kBAAe,oBAAoB,CAAC"}

package/lib/functions/redirect/is.loopback.redirect.d.ts

@@ -0,0 +1,2 @@
+declare const isLoopbackRedirect: (redirectUri: string) => boolean;
+export default isLoopbackRedirect;

package/lib/functions/redirect/is.loopback.redirect.js

@@ -0,0 +1,13 @@
+'use strict';
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const parse_url_1 = __importDefault(require("./parse.url"));
+const loopbackHosts = ['localhost', '127.0.0.1'];
+const isLoopbackRedirect = (redirectUri) => {
+    const url = (0, parse_url_1.default)(redirectUri);
+    return !!url && 'http:' === url.protocol && loopbackHosts.includes(url.hostname);
+};
+exports.default = isLoopbackRedirect;
+//# sourceMappingURL=is.loopback.redirect.js.map

package/lib/functions/redirect/is.loopback.redirect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"is.loopback.redirect.js","sourceRoot":"","sources":["../../../src/functions/redirect/is.loopback.redirect.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;;;;;AAEb,4DAAmC;AAEnC,MAAM,aAAa,GAAa,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;AAE3D,MAAM,kBAAkB,GAAG,CAAC,WAAmB,EAAW,EAAE;IAC3D,MAAM,GAAG,GAAe,IAAA,mBAAQ,EAAC,WAAW,CAAC,CAAC;IAC9C,OAAO,CAAC,CAAC,GAAG,IAAI,OAAO,KAAK,GAAG,CAAC,QAAQ,IAAI,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;AAClF,CAAC,CAAC;AACF,kBAAe,kBAAkB,CAAC"}

package/lib/functions/redirect/is.safe.metadata.redirect.uri.d.ts

@@ -0,0 +1,2 @@
+declare const isSafeMetadataRedirectUri: (redirectUri: unknown) => boolean;
+export default isSafeMetadataRedirectUri;

package/lib/functions/redirect/is.safe.metadata.redirect.uri.js

@@ -0,0 +1,20 @@
+'use strict';
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const parse_url_1 = __importDefault(require("./parse.url"));
+const loopbackHosts = ['localhost', '127.0.0.1'];
+const dangerousSchemes = ['javascript:', 'data:', 'file:', 'vbscript:', 'blob:', 'about:'];
+const isSafeMetadataRedirectUri = (redirectUri) => {
+    const url = (0, parse_url_1.default)(redirectUri);
+    if (!url || 'string' !== typeof redirectUri || redirectUri.includes('#'))
+        return false;
+    if ('http:' === url.protocol)
+        return loopbackHosts.includes(url.hostname);
+    if ('https:' === url.protocol)
+        return true;
+    return !dangerousSchemes.includes(url.protocol);
+};
+exports.default = isSafeMetadataRedirectUri;
+//# sourceMappingURL=is.safe.metadata.redirect.uri.js.map

package/lib/functions/redirect/is.safe.metadata.redirect.uri.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"is.safe.metadata.redirect.uri.js","sourceRoot":"","sources":["../../../src/functions/redirect/is.safe.metadata.redirect.uri.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;;;;;AAEb,4DAAmC;AAEnC,MAAM,aAAa,GAAa,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;AAC3D,MAAM,gBAAgB,GAAa,CAAC,aAAa,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;AAErG,MAAM,yBAAyB,GAAG,CAAC,WAAoB,EAAW,EAAE;IACnE,MAAM,GAAG,GAAe,IAAA,mBAAQ,EAAC,WAAW,CAAC,CAAC;IAC9C,IAAI,CAAC,GAAG,IAAI,QAAQ,KAAK,OAAO,WAAW,IAAI,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACvF,IAAI,OAAO,KAAK,GAAG,CAAC,QAAQ;QAAE,OAAO,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC1E,IAAI,QAAQ,KAAK,GAAG,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3C,OAAO,CAAC,gBAAgB,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;AACjD,CAAC,CAAC;AACF,kBAAe,yBAAyB,CAAC"}

package/lib/functions/redirect/parse.url.d.ts

@@ -0,0 +1,2 @@
+declare const parseUrl: (value: unknown) => URL | null;
+export default parseUrl;

package/lib/functions/redirect/parse.url.js

@@ -0,0 +1,14 @@
+'use strict';
+Object.defineProperty(exports, "__esModule", { value: true });
+const parseUrl = (value) => {
+    if ('string' !== typeof value)
+        return null;
+    try {
+        return new URL(value);
+    }
+    catch {
+        return null;
+    }
+};
+exports.default = parseUrl;
+//# sourceMappingURL=parse.url.js.map

package/lib/functions/redirect/parse.url.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"parse.url.js","sourceRoot":"","sources":["../../../src/functions/redirect/parse.url.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;;AAEb,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAc,EAAE;IAC/C,IAAI,QAAQ,KAAK,OAAO,KAAK;QAAE,OAAO,IAAI,CAAC;IAC3C,IAAI,CAAC;QACJ,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,IAAI,CAAC;IACb,CAAC;AACF,CAAC,CAAC;AACF,kBAAe,QAAQ,CAAC"}

package/lib/functions/server/attach.and.continue.d.ts

@@ -0,0 +1,6 @@
+import type AuthenticatedUserType from '../../types/authenticated.user.type';
+import type HttpResponseType from '../../types/http.response.type';
+import type McpAuthContextType from '../../types/mcp.auth.context.type';
+import type PendingAuthorizationType from '../../types/pending.authorization.type';
+declare const attachAndContinue: (context: McpAuthContextType<any>, pending: PendingAuthorizationType, user: AuthenticatedUserType) => Promise<HttpResponseType>;
+export default attachAndContinue;

package/lib/functions/server/attach.and.continue.js

@@ -0,0 +1,15 @@
+'use strict';
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const oauth_error_response_1 = __importDefault(require("../http/oauth.error.response"));
+const continue_with_user_1 = __importDefault(require("./continue.with.user"));
+const attachAndContinue = async (context, pending, user) => {
+    const attached = await context.options.storage.attachUserToPendingAuthorization(pending.stateId, user.id, context.now(), user.displayName);
+    if (!attached)
+        return (0, oauth_error_response_1.default)(400, 'invalid_request', 'unknown or already used state');
+    return (0, continue_with_user_1.default)(context, attached);
+};
+exports.default = attachAndContinue;
+//# sourceMappingURL=attach.and.continue.js.map

package/lib/functions/server/attach.and.continue.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attach.and.continue.js","sourceRoot":"","sources":["../../../src/functions/server/attach.and.continue.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;;;;;AAMb,wFAA8D;AAC9D,8EAAoD;AAEpD,MAAM,iBAAiB,GAAG,KAAK,EAAE,OAAgC,EAAE,OAAiC,EAAE,IAA2B,EAA6B,EAAE;IAC/J,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,gCAAgC,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;IAC3I,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAA,8BAAkB,EAAC,GAAG,EAAE,iBAAiB,EAAE,+BAA+B,CAAC,CAAC;IAClG,OAAO,IAAA,4BAAgB,EAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;AAC5C,CAAC,CAAC;AACF,kBAAe,iBAAiB,CAAC"}