oauth4webapi 2.14.0 → 2.15.0

package/build/index.d.ts

@@ -999,6 +999,9 @@ export interface OAuth2Error {
  * @group Token Revocation
  * @group Refreshing an Access Token
  * @group Pushed Authorization Requests (PAR)
+ * @group JWT Bearer Token Grant Type
+ * @group SAML 2.0 Bearer Assertion Grant Type
+ * @group Token Exchange Grant Type
  */
 export declare function isOAuth2Error(input?: TokenEndpointResponse | OAuth2TokenEndpointResponse | OpenIDTokenEndpointResponse | ClientCredentialsGrantResponse | DeviceAuthorizationResponse | IntrospectionResponse | OAuth2Error | PushedAuthorizationResponse | URLSearchParams | UserInfoResponse): input is OAuth2Error;
 export interface WWWAuthenticateChallengeParameters {
@@ -1036,6 +1039,9 @@ export interface WWWAuthenticateChallenge {
  * @group Token Revocation
  * @group Refreshing an Access Token
  * @group Pushed Authorization Requests (PAR)
+ * @group JWT Bearer Token Grant Type
+ * @group SAML 2.0 Bearer Assertion Grant Type
+ * @group Token Exchange Grant Type
  */
 export declare function parseWwwAuthenticateChallenges(response: Response): WWWAuthenticateChallenge[] | undefined;
 /**
@@ -1252,7 +1258,7 @@ export declare function validateIdTokenSignature(as: AuthorizationServer, ref: O
  *
  * @see [OpenID Connect Core 1.0](https://openid.net/specs/openid-connect-core-1_0.html#UserInfo)
  */
-export declare function validateJwtUserinfoSignature(as: AuthorizationServer, ref: Response, options?: ValidateSignatureOptions): Promise<void>;
+export declare function validateJwtUserInfoSignature(as: AuthorizationServer, ref: Response, options?: ValidateSignatureOptions): Promise<void>;
 /**
  * Validates the JWS Signature of an JWT {@link !Response} body of responses previously processed by
  * {@link processIntrospectionResponse} for non-repudiation purposes.
@@ -1461,6 +1467,24 @@ export interface ClientCredentialsGrantRequestOptions extends HttpRequestOptions
  * @see [RFC 9449 - OAuth 2.0 Demonstrating Proof-of-Possession at the Application Layer (DPoP)](https://www.rfc-editor.org/rfc/rfc9449.html#name-dpop-access-token-request)
  */
 export declare function clientCredentialsGrantRequest(as: AuthorizationServer, client: Client, parameters: URLSearchParams | Record<string, string> | string[][], options?: ClientCredentialsGrantRequestOptions): Promise<Response>;
+/**
+ * Performs any Grant request at the {@link AuthorizationServer.token_endpoint `as.token_endpoint`}.
+ * The purpose is to be able to execute grant requests such as Token Exchange Grant Type, JWT Bearer
+ * Token Grant Type, or SAML 2.0 Bearer Assertion Grant Type.
+ *
+ * @param as Authorization Server Metadata.
+ * @param client Client Metadata.
+ * @param grantType Grant Type.
+ *
+ * @group JWT Bearer Token Grant Type
+ * @group SAML 2.0 Bearer Assertion Grant Type
+ * @group Token Exchange Grant Type
+ *
+ * @see {@link https://www.rfc-editor.org/rfc/rfc8693.html Token Exchange Grant Type}
+ * @see {@link https://www.rfc-editor.org/rfc/rfc7523.html#section-2.1 JWT Bearer Token Grant Type}
+ * @see {@link https://www.rfc-editor.org/rfc/rfc7522.html#section-2.1 SAML 2.0 Bearer Assertion Grant Type}
+ */
+export declare function genericTokenEndpointRequest(as: AuthorizationServer, client: Client, grantType: string, parameters: URLSearchParams | Record<string, string> | string[][], options?: Omit<TokenEndpointRequestOptions, 'additionalParameters'>): Promise<Response>;
 /**
  * Validates Client Credentials Grant {@link !Response} instance to be one coming from the
  * {@link AuthorizationServer.token_endpoint `as.token_endpoint`}.
@@ -1864,6 +1888,12 @@ export declare const experimental_validateDetachedSignatureResponse: (as: Author
  * @deprecated Use {@link validateJwtAccessToken}.
  */
 export declare const experimental_validateJwtAccessToken: (as: AuthorizationServer, request: Request, expectedAudience: string, options?: ValidateJWTAccessTokenOptions | undefined) => ReturnType<typeof validateJwtAccessToken>;
+/**
+ * @ignore
+ *
+ * @deprecated Use {@link validateJwtUserinfoSignature}.
+ */
+export declare const validateJwtUserinfoSignature: (as: AuthorizationServer, ref: Response, options?: ValidateSignatureOptions | undefined) => ReturnType<typeof validateJwtUserInfoSignature>;
 /**
  * @ignore
  *

package/build/index.js

@@ -1,7 +1,7 @@
 let USER_AGENT;
 if (typeof navigator === 'undefined' || !navigator.userAgent?.startsWith?.('Mozilla/5.0 ')) {
     const NAME = 'oauth4webapi';
-    const VERSION = 'v2.14.0';
+    const VERSION = 'v2.15.0';
     USER_AGENT = `${NAME}/${VERSION}`;
 }
 function looseInstanceOf(input, expected) {
@@ -967,7 +967,7 @@ async function validateJwtResponseSignature(as, ref, options) {
     key = await getPublicSigKeyFromIssuerJwksUri(as, options, header);
     await validateJwsSignature(protectedHeader, payload, key, b64u(encodedSignature));
 }
-export function validateJwtUserinfoSignature(as, ref, options) {
+export function validateJwtUserInfoSignature(as, ref, options) {
     return validateJwtResponseSignature(as, ref, options);
 }
 export function validateJwtIntrospectionSignature(as, ref, options) {
@@ -1198,6 +1198,14 @@ export async function clientCredentialsGrantRequest(as, client, parameters, opti
     assertClient(client);
     return tokenEndpointRequest(as, client, 'client_credentials', new URLSearchParams(parameters), options);
 }
+export async function genericTokenEndpointRequest(as, client, grantType, parameters, options) {
+    assertAs(as);
+    assertClient(client);
+    if (!validateString(grantType)) {
+        throw new TypeError('"grantType" must be a non-empty string');
+    }
+    return tokenEndpointRequest(as, client, grantType, new URLSearchParams(parameters), options);
+}
 export async function processClientCredentialsResponse(as, client, response) {
     const result = await processGenericAccessTokenResponse(as, client, response, true, true);
     if (isOAuth2Error(result)) {
@@ -2011,4 +2019,5 @@ export const experimentalUseMtlsAlias = useMtlsAlias;
 export const experimental_useMtlsAlias = useMtlsAlias;
 export const experimental_validateDetachedSignatureResponse = (...args) => validateDetachedSignatureResponse(...args);
 export const experimental_validateJwtAccessToken = (...args) => validateJwtAccessToken(...args);
+export const validateJwtUserinfoSignature = (...args) => validateJwtUserInfoSignature(...args);
 export const experimental_jwksCache = jwksCache;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "oauth4webapi",
-  "version": "2.14.0",
+  "version": "2.15.0",
   "description": "OAuth 2 / OpenID Connect for JavaScript Runtimes",
   "keywords": [
     "access token",