react-native-oauth-essentials 1.0.12 → 1.2.0

package/lib/module/oauth.js

@@ -0,0 +1,97 @@
+"use strict";
+
+import { createCredentialError } from "./errors.js";
+import { warnOnce } from "./platform.js";
+import { CredentialError } from "./types.js";
+function encodeQuery(params) {
+  return Object.keys(params).map(key => `${encodeURIComponent(key)}=${encodeURIComponent(params[key])}`).join('&');
+}
+
+/**
+ * Decodes a query component, keeping it raw when its percent-encoding is malformed (`50%off`), so
+ * a provider bug does not turn into an error without `code`.
+ */
+function decodeComponent(value) {
+  const spaced = value.replace(/\+/g, ' ');
+  try {
+    return decodeURIComponent(spaced);
+  } catch {
+    return spaced;
+  }
+}
+
+/**
+ * Set by the library and checked or reused later (state, PKCE, token exchange), so
+ * `additionalParameters` cannot override them.
+ */
+export const RESERVED_AUTHORIZATION_PARAMS = ['response_type', 'client_id', 'redirect_uri', 'state', 'code_challenge', 'code_challenge_method'];
+export function buildAuthorizationUrl(p) {
+  const params = {
+    response_type: 'code',
+    client_id: p.clientId,
+    redirect_uri: p.redirectUri,
+    state: p.state
+  };
+  if (p.scopes && p.scopes.length > 0) {
+    params.scope = p.scopes.join(' ');
+  }
+  if (p.codeChallenge) {
+    params.code_challenge = p.codeChallenge;
+    params.code_challenge_method = 'S256';
+  }
+  const reserved = RESERVED_AUTHORIZATION_PARAMS;
+  for (const [key, value] of Object.entries(p.additionalParameters ?? {})) {
+    if (reserved.includes(key)) {
+      warnOnce('oauthSignIn', `additionalParameters.${key}`, `additionalParameters.${key} is ignored: the library sets it (use the matching option instead).`);
+      continue;
+    }
+    params[key] = value;
+  }
+  const separator = p.authorizationEndpoint.includes('?') ? '&' : '?';
+  return `${p.authorizationEndpoint}${separator}${encodeQuery(params)}`;
+}
+
+/**
+ * Reads the query and fragment parameters of a redirect url.
+ */
+export function parseRedirectParams(url) {
+  const params = {};
+  const queryStart = url.indexOf('?');
+  const hashStart = url.indexOf('#');
+  const parts = [];
+  if (queryStart >= 0) {
+    parts.push(url.slice(queryStart + 1, hashStart > queryStart ? hashStart : undefined));
+  }
+  if (hashStart >= 0) {
+    parts.push(url.slice(hashStart + 1));
+  }
+  for (const part of parts) {
+    for (const pair of part.split('&')) {
+      if (!pair) continue;
+      const eq = pair.indexOf('=');
+      const key = decodeComponent(eq >= 0 ? pair.slice(0, eq) : pair);
+      params[key] = eq >= 0 ? decodeComponent(pair.slice(eq + 1)) : '';
+    }
+  }
+  return params;
+}
+export function getUrlScheme(url) {
+  const index = url.indexOf(':');
+  if (index <= 0) {
+    throw createCredentialError(CredentialError.CONFIGURATION_ERROR, `Invalid redirect uri: ${url}`);
+  }
+  return url.slice(0, index);
+}
+export function buildTokenRequestBody(p) {
+  const params = {
+    grant_type: 'authorization_code',
+    code: p.code,
+    client_id: p.clientId,
+    redirect_uri: p.redirectUri
+  };
+  if (p.codeVerifier) {
+    params.code_verifier = p.codeVerifier;
+  }
+  return encodeQuery(params);
+}
+//# sourceMappingURL=oauth.js.map

package/lib/module/oauth.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["createCredentialError","warnOnce","CredentialError","encodeQuery","params","Object","keys","map","key","encodeURIComponent","join","decodeComponent","value","spaced","replace","decodeURIComponent","RESERVED_AUTHORIZATION_PARAMS","buildAuthorizationUrl","p","response_type","client_id","clientId","redirect_uri","redirectUri","state","scopes","length","scope","codeChallenge","code_challenge","code_challenge_method","reserved","entries","additionalParameters","includes","separator","authorizationEndpoint","parseRedirectParams","url","queryStart","indexOf","hashStart","parts","push","slice","undefined","part","pair","split","eq","getUrlScheme","index","CONFIGURATION_ERROR","buildTokenRequestBody","grant_type","code","codeVerifier","code_verifier"],"sourceRoot":"../../src","sources":["oauth.ts"],"mappings":";;AAAA,SAASA,qBAAqB,QAAQ,aAAU;AAChD,SAASC,QAAQ,QAAQ,eAAY;AACrC,SAASC,eAAe,QAAQ,YAAS;AAkBzC,SAASC,WAAWA,CAACC,MAA8B,EAAU;EAC3D,OAAOC,MAAM,CAACC,IAAI,CAACF,MAAM,CAAC,CACvBG,GAAG,CACDC,GAAG,IAAK,GAAGC,kBAAkB,CAACD,GAAG,CAAC,IAAIC,kBAAkB,CAACL,MAAM,CAACI,GAAG,CAAE,CAAC,EACzE,CAAC,CACAE,IAAI,CAAC,GAAG,CAAC;AACd;;AAEA;AACA;AACA;AACA;AACA,SAASC,eAAeA,CAACC,KAAa,EAAU;EAC9C,MAAMC,MAAM,GAAGD,KAAK,CAACE,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;EACxC,IAAI;IACF,OAAOC,kBAAkB,CAACF,MAAM,CAAC;EACnC,CAAC,CAAC,MAAM;IACN,OAAOA,MAAM;EACf;AACF;;AAEA;AACA;AACA;AACA;AACA,OAAO,MAAMG,6BAA6B,GAAG,CAC3C,eAAe,EACf,WAAW,EACX,cAAc,EACd,OAAO,EACP,gBAAgB,EAChB,uBAAuB,CACf;AAEV,OAAO,SAASC,qBAAqBA,CAACC,CAAyB,EAAU;EACvE,MAAMd,MAA8B,GAAG;IACrCe,aAAa,EAAE,MAAM;IACrBC,SAAS,EAAEF,CAAC,CAACG,QAAQ;IACrBC,YAAY,EAAEJ,CAAC,CAACK,WAAW;IAC3BC,KAAK,EAAEN,CAAC,CAACM;EACX,CAAC;EACD,IAAIN,CAAC,CAACO,MAAM,IAAIP,CAAC,CAACO,MAAM,CAACC,MAAM,GAAG,CAAC,EAAE;IACnCtB,MAAM,CAACuB,KAAK,GAAGT,CAAC,CAACO,MAAM,CAACf,IAAI,CAAC,GAAG,CAAC;EACnC;EACA,IAAIQ,CAAC,CAACU,aAAa,EAAE;IACnBxB,MAAM,CAACyB,cAAc,GAAGX,CAAC,CAACU,aAAa;IACvCxB,MAAM,CAAC0B,qBAAqB,GAAG,MAAM;EACvC;EACA,MAAMC,QAA2B,GAAGf,6BAA6B;EACjE,KAAK,MAAM,CAACR,GAAG,EAAEI,KAAK,CAAC,IAAIP,MAAM,CAAC2B,OAAO,CAACd,CAAC,CAACe,oBAAoB,IAAI,CAAC,CAAC,CAAC,EAAE;IACvE,IAAIF,QAAQ,CAACG,QAAQ,CAAC1B,GAAG,CAAC,EAAE;MAC1BP,QAAQ,CACN,aAAa,EACb,wBAAwBO,GAAG,EAAE,EAC7B,wBAAwBA,GAAG,qEAC7B,CAAC;MACD;IACF;IACAJ,MAAM,CAACI,GAAG,CAAC,GAAGI,KAAK;EACrB;EAEA,MAAMuB,SAAS,GAAGjB,CAAC,CAACkB,qBAAqB,CAACF,QAAQ,CAAC,GAAG,CAAC,GAAG,GAAG,GAAG,GAAG;EACnE,OAAO,GAAGhB,CAAC,CAACkB,qBAAqB,GAAGD,SAAS,GAAGhC,WAAW,CAACC,MAAM,CAAC,EAAE;AACvE;;AAEA;AACA;AACA;AACA,OAAO,SAASiC,mBAAmBA,CAACC,GAAW,EAA0B;EACvE,MAAMlC,MAA8B,GAAG,CAAC,CAAC;EACzC,MAAMmC,UAAU,GAAGD,GAAG,CAACE,OAAO,CAAC,GAAG,CAAC;EACnC,MAAMC,SAAS,GAAGH,GAAG,CAACE,OAAO,CAAC,GAAG,CAAC;EAClC,MAAME,KAAe,GAAG,EAAE;EAC1B,IAAIH,UAAU,IAAI,CAAC,EAAE;IACnBG,KAAK,CAACC,IAAI,CACRL,GAAG,CAACM,KAAK,CAACL,UAAU,GAAG,CAAC,EAAEE,SAAS,GAAGF,UAAU,GAAGE,SAAS,GAAGI,SAAS,CAC1E,CAAC;EACH;EACA,IAAIJ,SAAS,IAAI,CAAC,EAAE;IAClBC,KAAK,CAACC,IAAI,CAACL,GAAG,CAACM,KAAK,CAACH,SAAS,GAAG,CAAC,CAAC,CAAC;EACtC;EACA,KAAK,MAAMK,IAAI,IAAIJ,KAAK,EAAE;IACxB,KAAK,MAAMK,IAAI,IAAID,IAAI,CAACE,KAAK,CAAC,GAAG,CAAC,EAAE;MAClC,IAAI,CAACD,IAAI,EAAE;MACX,MAAME,EAAE,GAAGF,IAAI,CAACP,OAAO,CAAC,GAAG,CAAC;MAC5B,MAAMhC,GAAG,GAAGG,eAAe,CAACsC,EAAE,IAAI,CAAC,GAAGF,IAAI,CAACH,KAAK,CAAC,CAAC,EAAEK,EAAE,CAAC,GAAGF,IAAI,CAAC;MAC/D3C,MAAM,CAACI,GAAG,CAAC,GAAGyC,EAAE,IAAI,CAAC,GAAGtC,eAAe,CAACoC,IAAI,CAACH,KAAK,CAACK,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE;IAClE;EACF;EACA,OAAO7C,MAAM;AACf;AAEA,OAAO,SAAS8C,YAAYA,CAACZ,GAAW,EAAU;EAChD,MAAMa,KAAK,GAAGb,GAAG,CAACE,OAAO,CAAC,GAAG,CAAC;EAC9B,IAAIW,KAAK,IAAI,CAAC,EAAE;IACd,MAAMnD,qBAAqB,CACzBE,eAAe,CAACkD,mBAAmB,EACnC,yBAAyBd,GAAG,EAC9B,CAAC;EACH;EACA,OAAOA,GAAG,CAACM,KAAK,CAAC,CAAC,EAAEO,KAAK,CAAC;AAC5B;AAEA,OAAO,SAASE,qBAAqBA,CAACnC,CAKrC,EAAU;EACT,MAAMd,MAA8B,GAAG;IACrCkD,UAAU,EAAE,oBAAoB;IAChCC,IAAI,EAAErC,CAAC,CAACqC,IAAI;IACZnC,SAAS,EAAEF,CAAC,CAACG,QAAQ;IACrBC,YAAY,EAAEJ,CAAC,CAACK;EAClB,CAAC;EACD,IAAIL,CAAC,CAACsC,YAAY,EAAE;IAClBpD,MAAM,CAACqD,aAAa,GAAGvC,CAAC,CAACsC,YAAY;EACvC;EACA,OAAOrD,WAAW,CAACC,MAAM,CAAC;AAC5B","ignoreList":[]}

package/lib/module/platform.js

@@ -0,0 +1,108 @@
+"use strict";
+
+/**
+ * Picks the client id the native module of `os` expects.
+ *
+ * A string is passed as is. With `{ iosClientId, webClientId }`, iOS gets `iosClientId` (or '' so
+ * the native side reads `GIDClientID` from Info.plist) and `webClientId` as the default
+ * `serverClientId`; Android gets `webClientId` (or '', which rejects with `CONFIGURATION_ERROR`).
+ */
+export function resolveGoogleClientId(os, clientId, options) {
+  if (typeof clientId === 'string') {
+    return {
+      clientId,
+      options
+    };
+  }
+  const ids = clientId ?? {};
+  if (os === 'ios') {
+    const resolved = {
+      ...options
+    };
+    if (resolved.serverClientId === undefined && ids.webClientId) {
+      resolved.serverClientId = ids.webClientId;
+    }
+    return {
+      clientId: ids.iosClientId ?? '',
+      options: resolved
+    };
+  }
+  return {
+    clientId: ids.webClientId ?? '',
+    options
+  };
+}
+
+/**
+ * Splits the `(clientId?, options?)` arguments of the Google methods, which also accept
+ * `(options)`: an object with `iosClientId` or `webClientId` is the client id, any other object is
+ * the options. Without a client id the native side reads it from the app config (Info.plist,
+ * AndroidManifest meta-data or the Firebase files).
+ */
+export function splitGoogleArgs(first, second) {
+  if (first === null || first === undefined) {
+    return {
+      clientId: undefined,
+      options: second
+    };
+  }
+  if (typeof first === 'string' || 'iosClientId' in first || 'webClientId' in first) {
+    return {
+      clientId: first,
+      options: second
+    };
+  }
+  return {
+    clientId: undefined,
+    options: first
+  };
+}
+
+/**
+ * Message thrown when the native module is not in the binary: Expo Go (which only ships the Expo
+ * SDK native modules) or an app that was not rebuilt after installing the library.
+ */
+export function missingNativeModuleMessage() {
+  const expo = globalThis.expo;
+  if (expo?.modules?.ExpoGo) {
+    return 'react-native-oauth-essentials does not work in Expo Go, which only contains the Expo SDK ' + 'native code. Create a development build instead: `npx expo run:ios` / `npx expo run:android` ' + 'or `eas build --profile development`.';
+  }
+  return 'react-native-oauth-essentials: the native module "OauthEssentials" was not found. Rebuild the ' + 'app after installing the library (run `pod install` in ios/ and build again; reloading Metro is ' + 'not enough) and make sure the New Architecture is enabled. With Expo, use a development build ' + '(Expo Go is not supported).';
+}
+const warned = new Set();
+
+/**
+ * In development, warns once per method and option that an option set by the app has no effect on
+ * the current platform. `options` must be the options as passed by the app (before defaults).
+ */
+export function warnIgnored(method, platform, options, keys) {
+  if (!__DEV__ || !options) {
+    return;
+  }
+  for (const key of keys) {
+    if (options[key] !== undefined) {
+      warnOnce(method, key, `"${key}" is ignored on ${platformName(platform)}.`);
+    }
+  }
+}
+function platformName(platform) {
+  if (platform === 'ios') return 'iOS';
+  if (platform === 'android') return 'Android';
+  return platform;
+}
+
+/**
+ * In development, logs `message` once per method and key.
+ */
+export function warnOnce(method, key, message) {
+  if (!__DEV__) {
+    return;
+  }
+  const id = `${method}:${key}`;
+  if (warned.has(id)) {
+    return;
+  }
+  warned.add(id);
+  console.warn(`[react-native-oauth-essentials] ${method}: ${message}`);
+}
+//# sourceMappingURL=platform.js.map

package/lib/module/platform.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["resolveGoogleClientId","os","clientId","options","ids","resolved","serverClientId","undefined","webClientId","iosClientId","splitGoogleArgs","first","second","missingNativeModuleMessage","expo","globalThis","modules","ExpoGo","warned","Set","warnIgnored","method","platform","keys","__DEV__","key","warnOnce","platformName","message","id","has","add","console","warn"],"sourceRoot":"../../src","sources":["platform.ts"],"mappings":";;AAIA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASA,qBAAqBA,CACnCC,EAAM,EACNC,QAA2C,EAC3CC,OAAU,EACwB;EAClC,IAAI,OAAOD,QAAQ,KAAK,QAAQ,EAAE;IAChC,OAAO;MAAEA,QAAQ;MAAEC;IAAQ,CAAC;EAC9B;EACA,MAAMC,GAAG,GAAGF,QAAQ,IAAI,CAAC,CAAC;EAC1B,IAAID,EAAE,KAAK,KAAK,EAAE;IAChB,MAAMI,QAAQ,GAAG;MAAE,GAAGF;IAAQ,CAAC;IAC/B,IAAIE,QAAQ,CAACC,cAAc,KAAKC,SAAS,IAAIH,GAAG,CAACI,WAAW,EAAE;MAC5DH,QAAQ,CAACC,cAAc,GAAGF,GAAG,CAACI,WAAW;IAC3C;IACA,OAAO;MAAEN,QAAQ,EAAEE,GAAG,CAACK,WAAW,IAAI,EAAE;MAAEN,OAAO,EAAEE;IAAS,CAAC;EAC/D;EACA,OAAO;IAAEH,QAAQ,EAAEE,GAAG,CAACI,WAAW,IAAI,EAAE;IAAEL;EAAQ,CAAC;AACrD;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASO,eAAeA,CAC7BC,KAA4C,EAC5CC,MAAqB,EAC6C;EAClE,IAAID,KAAK,KAAK,IAAI,IAAIA,KAAK,KAAKJ,SAAS,EAAE;IACzC,OAAO;MAAEL,QAAQ,EAAEK,SAAS;MAAEJ,OAAO,EAAES;IAAO,CAAC;EACjD;EACA,IACE,OAAOD,KAAK,KAAK,QAAQ,IACzB,aAAa,IAAIA,KAAK,IACtB,aAAa,IAAIA,KAAK,EACtB;IACA,OAAO;MAAET,QAAQ,EAAES,KAAuB;MAAER,OAAO,EAAES;IAAO,CAAC;EAC/D;EACA,OAAO;IAAEV,QAAQ,EAAEK,SAAS;IAAEJ,OAAO,EAAEQ;EAAW,CAAC;AACrD;;AAEA;AACA;AACA;AACA;AACA,OAAO,SAASE,0BAA0BA,CAAA,EAAW;EACnD,MAAMC,IAAI,GAAIC,UAAU,CACrBD,IAAI;EACP,IAAIA,IAAI,EAAEE,OAAO,EAAEC,MAAM,EAAE;IACzB,OACE,2FAA2F,GAC3F,+FAA+F,GAC/F,uCAAuC;EAE3C;EACA,OACE,gGAAgG,GAChG,kGAAkG,GAClG,gGAAgG,GAChG,6BAA6B;AAEjC;AAEA,MAAMC,MAAM,GAAG,IAAIC,GAAG,CAAS,CAAC;;AAEhC;AACA;AACA;AACA;AACA,OAAO,SAASC,WAAWA,CACzBC,MAAc,EACdC,QAAgB,EAChBnB,OAAkC,EAClCoB,IAAuB,EACjB;EACN,IAAI,CAACC,OAAO,IAAI,CAACrB,OAAO,EAAE;IACxB;EACF;EACA,KAAK,MAAMsB,GAAG,IAAIF,IAAI,EAAE;IACtB,IAAKpB,OAAO,CAA6BsB,GAAG,CAAC,KAAKlB,SAAS,EAAE;MAC3DmB,QAAQ,CACNL,MAAM,EACNI,GAAG,EACH,IAAIA,GAAG,mBAAmBE,YAAY,CAACL,QAAQ,CAAC,GAClD,CAAC;IACH;EACF;AACF;AAEA,SAASK,YAAYA,CAACL,QAAgB,EAAU;EAC9C,IAAIA,QAAQ,KAAK,KAAK,EAAE,OAAO,KAAK;EACpC,IAAIA,QAAQ,KAAK,SAAS,EAAE,OAAO,SAAS;EAC5C,OAAOA,QAAQ;AACjB;;AAEA;AACA;AACA;AACA,OAAO,SAASI,QAAQA,CAACL,MAAc,EAAEI,GAAW,EAAEG,OAAe,EAAQ;EAC3E,IAAI,CAACJ,OAAO,EAAE;IACZ;EACF;EACA,MAAMK,EAAE,GAAG,GAAGR,MAAM,IAAII,GAAG,EAAE;EAC7B,IAAIP,MAAM,CAACY,GAAG,CAACD,EAAE,CAAC,EAAE;IAClB;EACF;EACAX,MAAM,CAACa,GAAG,CAACF,EAAE,CAAC;EACdG,OAAO,CAACC,IAAI,CAAC,mCAAmCZ,MAAM,KAAKO,OAAO,EAAE,CAAC;AACvE","ignoreList":[]}

package/lib/module/types.js

@@ -1,5 +1,17 @@
 "use strict";
 
+/**
+ * Google OAuth client ids per platform, all from the same Google Cloud project.
+ *
+ * Both are optional: a missing id is read from the app config, which the Expo plugin writes (from
+ * its options or the Firebase files).
+ */
+
+/**
+ * A {@link GoogleClientIds} object, or a single client id string, used as is on both platforms
+ * (it must be the iOS client id on iOS and the web client id on Android).
+ */
+
 export let CredentialsType = /*#__PURE__*/function (CredentialsType) {
   CredentialsType["GOOGLE_ID"] = "GOOGLE_ID";
   // GoogleId credentials type
@@ -11,13 +23,46 @@ export let CredentialsType = /*#__PURE__*/function (CredentialsType) {
   // Android AppleId credentials type
   CredentialsType["CANCELLED"] = "CANCELLED";
   // type when the user cancels it
-  CredentialsType["PASSKEY"] = "PASSKEY"; // Passkey credential type
+  CredentialsType["PASSKEY"] = "PASSKEY";
+  // Passkey credential type
+  CredentialsType["OAUTH"] = "OAUTH"; // Generic OAuth2/OIDC authorization code
   return CredentialsType;
 }({});
+export let AppleIdCredentialState = /*#__PURE__*/function (AppleIdCredentialState) {
+  AppleIdCredentialState["AUTHORIZED"] = "AUTHORIZED";
+  AppleIdCredentialState["REVOKED"] = "REVOKED";
+  AppleIdCredentialState["NOT_FOUND"] = "NOT_FOUND";
+  AppleIdCredentialState["TRANSFERRED"] = "TRANSFERRED";
+  return AppleIdCredentialState;
+}({});
 export let CredentialError = /*#__PURE__*/function (CredentialError) {
+  /**
+   * @deprecated Never thrown: missing Play Services rejects with `NOT_SUPPORTED_ERROR`.
+   */
   CredentialError["NO_PLAY_SERVICES_ERROR"] = "NO_PLAY_SERVICES_ERROR";
+  /** No Android activity, or no iOS view controller attached to a window, to present the UI. */
   CredentialError["NO_ACTIVITY_ERROR"] = "NO_ACTIVITY_ERROR";
+  /** The provider failed or returned something unexpected; `message` has the native error. */
   CredentialError["INVALID_RESULT_ERROR"] = "INVALID_RESULT_ERROR";
+  /** There is no credential to return (no account / passkey / previous sign in). */
+  CredentialError["NO_SIGN_IN_AVAILABLE"] = "NO_SIGN_IN_AVAILABLE";
+  /** iOS: the same method (or method group) is still waiting for the previous call. */
+  CredentialError["SIMULTANEOUS_CALL_ERROR"] = "SIMULTANEOUS_CALL_ERROR";
+  /** The OS version, missing Play Services or the platform does not support the method. */
+  CredentialError["NOT_SUPPORTED_ERROR"] = "NOT_SUPPORTED_ERROR";
+  /** The browser session could not be opened (app in background, Guided Access, no browser). */
+  CredentialError["BROWSER_UNAVAILABLE"] = "BROWSER_UNAVAILABLE";
+  /**
+   * The app is misconfigured: missing Google client id, missing iOS URL scheme (the message has
+   * the exact scheme to add) or an invalid `redirectUri`.
+   */
+  CredentialError["CONFIGURATION_ERROR"] = "CONFIGURATION_ERROR";
+  /** `oauthSignIn`: the token endpoint request failed (offline, DNS, TLS...). */
+  CredentialError["NETWORK_ERROR"] = "NETWORK_ERROR";
   return CredentialError;
 }({});
+
+/** A {@link CredentialError} value, as an enum member or its string. */
+
+/** Every promise of the library rejects with an `Error` that has one of these codes. */
 //# sourceMappingURL=types.js.map

package/lib/module/types.js.map

@@ -1 +1 @@
-{"version":3,"names":["CredentialsType","CredentialError"],"sourceRoot":"../../src","sources":["types.ts"],"mappings":";;AAgEA,WAAYA,eAAe,0BAAfA,eAAe;EAAfA,eAAe;EACA;EADfA,eAAe;EAEF;EAFbA,eAAe;EAGF;EAHbA,eAAe;EAIM;EAJrBA,eAAe;EAKA;EALfA,eAAe,yBAMJ;EAAA,OANXA,eAAe;AAAA;AAS3B,WAAYC,eAAe,0BAAfA,eAAe;EAAfA,eAAe;EAAfA,eAAe;EAAfA,eAAe;EAAA,OAAfA,eAAe;AAAA","ignoreList":[]}
+{"version":3,"names":["CredentialsType","AppleIdCredentialState","CredentialError"],"sourceRoot":"../../src","sources":["types.ts"],"mappings":";;AAmDA;AACA;AACA;AACA;AACA;AACA;;AAiBA;AACA;AACA;AACA;;AAuJA,WAAYA,eAAe,0BAAfA,eAAe;EAAfA,eAAe;EACA;EADfA,eAAe;EAEF;EAFbA,eAAe;EAGF;EAHbA,eAAe;EAIM;EAJrBA,eAAe;EAKA;EALfA,eAAe;EAMJ;EANXA,eAAe,qBAOR;EAAA,OAPPA,eAAe;AAAA;AAU3B,WAAYC,sBAAsB,0BAAtBA,sBAAsB;EAAtBA,sBAAsB;EAAtBA,sBAAsB;EAAtBA,sBAAsB;EAAtBA,sBAAsB;EAAA,OAAtBA,sBAAsB;AAAA;AAOlC,WAAYC,eAAe,0BAAfA,eAAe;EACzB;AACF;AACA;EAHYA,eAAe;EAKzB;EALUA,eAAe;EAOzB;EAPUA,eAAe;EASzB;EATUA,eAAe;EAWzB;EAXUA,eAAe;EAazB;EAbUA,eAAe;EAezB;EAfUA,eAAe;EAiBzB;AACF;AACA;AACA;EApBYA,eAAe;EAsBzB;EAtBUA,eAAe;EAAA,OAAfA,eAAe;AAAA;;AA0B3B;;AAGA","ignoreList":[]}

package/lib/typescript/src/NativeOauthEssentials.d.ts

@@ -1,7 +1,14 @@
 import { type CodegenTypes, type TurboModule } from 'react-native';
 export interface Spec extends TurboModule {
+    /** Emitted with the `{ type, data }` a credential method resolves with, including `CANCELLED`. */
     readonly onCredentialSuccess: CodegenTypes.EventEmitter<CredentialSuccessEvent>;
+    /** Emitted with `{ code, message }` when a credential method rejects. */
     readonly onCredentialFailure: CodegenTypes.EventEmitter<CredentialErrorEvent>;
+    /** iOS only: emitted with `{ type: 'REVOKED' }` on `credentialRevokedNotification`. */
+    readonly onAppleIdCredentialRevoked: CodegenTypes.EventEmitter<AppleIdCredentialRevokedEvent>;
+    /**
+     * Read once when the module loads. See the exported constants in `index.tsx` for the values.
+     */
     getConstants(): {
         readonly GOOGLE_PLAY_SERVICES_SUPPORTED: boolean;
         readonly PASSWORD_SUPPORTED: boolean;
@@ -9,43 +16,87 @@ export interface Spec extends TurboModule {
         readonly APPLE_ID_SUPPORTED: boolean;
         readonly HYBRID_SUPPORTED: boolean;
         readonly PASSKEYS_SUPPORTED: boolean;
+        readonly OAUTH_REDIRECT_URI: string;
     };
     /**
-     * Performs the google sign in.
-     * @param androidAndIOSClientId
-     * @param options
+     * iOS: GoogleSignIn `signIn` from the top most view controller. Android: Credential Manager
+     * Google ID / "Sign in with Google" option, then the Authorization API when `scopes` or
+     * `offlineAccess` are set. Resolves `GOOGLE_ID` or `CANCELLED`.
+     * @param androidAndIOSClientId - Web client id on Android, iOS client id on iOS. '' reads it from
+     * the app: iOS `GIDClientID`, then `CLIENT_ID` of GoogleService-Info.plist; Android the
+     * `com.oauthessentials.GOOGLE_WEB_CLIENT_ID` meta-data, then the `default_web_client_id` string
+     * (Firebase). Rejects `CONFIGURATION_ERROR` when it is missing or, on iOS, when its reversed URL
+     * scheme is not registered.
+     * @param options - GoogleSignInOptions, already normalized by `index.tsx`.
      */
     googleSignIn(androidAndIOSClientId: string, options: Object): Promise<Object>;
     /**
-     * Sign ins with apple.
-     * @param androidWebUrl
+     * iOS: GoogleSignIn `restorePreviousSignIn` (no UI). Android: Credential Manager filtered to
+     * authorized accounts with auto select, authorization without UI.
+     * Resolves `GOOGLE_ID` or `CANCELLED`, rejects `NO_SIGN_IN_AVAILABLE` when there is nothing to restore.
+     */
+    googleSilentSignIn(androidAndIOSClientId: string, options: Object): Promise<Object>;
+    /**
+     * iOS: GoogleSignIn `signOut`. Android: Credential Manager `clearCredentialState`.
+     * Resolves `true`. Does not emit events.
+     */
+    signOut(): Promise<boolean>;
+    /**
+     * iOS: native Apple ID request (`fullName`, `email`, `options.nonce`, `options.state`); resolves
+     * `APPLE_ID` or `CANCELLED`, `androidWebUrl` is ignored.
+     * Android: opens `androidWebUrl` in a Custom Tab and resolves `WEB_APPLE_ID` with the redirect
+     * url or `CANCELLED`; `options` is ignored.
+     * Unlike `appleSignIn` in `index.tsx`, it does not fill `email`/`fullName` from previous results.
+     */
+    appleSignIn(androidWebUrl: string | null, options: Object): Promise<Object>;
+    /**
+     * iOS: `ASAuthorizationAppleIDProvider.getCredentialState`, resolves `AUTHORIZED`, `REVOKED`,
+     * `TRANSFERRED` or `NOT_FOUND`. Android: always rejects `NOT_SUPPORTED_ERROR`.
      */
-    appleSignIn(androidWebUrl?: string): Promise<Object>;
+    getAppleIdCredentialState(userId: string): Promise<string>;
     /**
-     * Saves the username/password credential
-     * @param username
-     * @param password
+     * iOS: resolves `false` without doing anything. Android: Credential Manager
+     * `CreatePasswordRequest`, resolves `true` when saved and `false` on any error.
      */
     passwordSignIn(username: string, password: string): Promise<boolean>;
     /**
-     * Gets the saved password.
+     * Shows the saved passwords. Resolves `PASSWORD`, or `CANCELLED` when there is none or the user
+     * dismisses it.
      */
     getPassword(): Promise<Object>;
     /**
-     * Performs the called so "hybrid sign in"
-     * @param googleClientId
-     * @param options
+     * iOS: Apple ID + password request (`googleClientId` ignored). Android: Google ID + password
+     * Credential Manager request. Resolves the picked credential or `CANCELLED`.
      */
     hybridSignIn(googleClientId: string, options: Object): Promise<Object>;
     /**
-     * Creates the passkey.
+     * Registers a passkey from `options.requestJson` (WebAuthn creation options).
+     * Resolves `PASSKEY` with the registration response JSON string in `data`, or `CANCELLED`.
      */
     createPassKey(options: Object): Promise<Object>;
     /**
-     * Gets the passkey
-     * @param options
+     * Asserts a passkey from `options.requestJson` (WebAuthn request options), with
+     * `options.mediation === 'autofill'` on iOS for QuickType bar AutoFill.
+     * Resolves `PASSKEY` with the authentication response JSON string in `data`, or `CANCELLED`.
      */
     getPassKey(options: Object): Promise<Object>;
+    /**
+     * iOS 16+: cancels a pending AutoFill `getPassKey` (which resolves `CANCELLED`) and resolves
+     * `true`, or resolves `false` when there is none. Android: resolves `false`.
+     */
+    cancelPassKeyAutoFill(): Promise<boolean>;
+    /**
+     * Resolves `{ codeVerifier, codeChallenge, state }`: a 32 byte random base64url verifier, its
+     * SHA-256 base64url challenge (PKCE S256) and a 16 byte random base64url state.
+     */
+    generatePkce(): Promise<Object>;
+    /**
+     * Opens `url` in `ASWebAuthenticationSession` (iOS, `options.callbackScheme`,
+     * `options.prefersEphemeralSession`) or a Custom Tab (Android, http/https only, `options`
+     * ignored). Resolves `{ type: 'REDIRECT', data: { url } }` with the redirect url, or `CANCELLED`.
+     * Does not emit events.
+     */
+    openAuthSession(url: string, options: Object): Promise<Object>;
 }
 declare const _default: Spec;
 export default _default;
@@ -57,4 +108,7 @@ type CredentialErrorEvent = {
     code: string;
     message: string;
 };
+type AppleIdCredentialRevokedEvent = {
+    type: string;
+};
 //# sourceMappingURL=NativeOauthEssentials.d.ts.map

package/lib/typescript/src/NativeOauthEssentials.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"NativeOauthEssentials.d.ts","sourceRoot":"","sources":["../../../src/NativeOauthEssentials.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,YAAY,EACjB,KAAK,WAAW,EAEjB,MAAM,cAAc,CAAC;AAEtB,MAAM,WAAW,IAAK,SAAQ,WAAW;IAEvC,QAAQ,CAAC,mBAAmB,EAAE,YAAY,CAAC,YAAY,CAAC,sBAAsB,CAAC,CAAC;IAChF,QAAQ,CAAC,mBAAmB,EAAE,YAAY,CAAC,YAAY,CAAC,oBAAoB,CAAC,CAAC;IAE9E,YAAY,IAAI;QACd,QAAQ,CAAC,8BAA8B,EAAE,OAAO,CAAC;QACjD,QAAQ,CAAC,kBAAkB,EAAE,OAAO,CAAC;QACrC,QAAQ,CAAC,mBAAmB,EAAE,OAAO,CAAC;QACtC,QAAQ,CAAC,kBAAkB,EAAE,OAAO,CAAC;QACrC,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;QACnC,QAAQ,CAAC,kBAAkB,EAAE,OAAO,CAAC;KACtC,CAAC;IAEF;;;;OAIG;IACH,YAAY,CAAC,qBAAqB,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAE9E;;;OAGG;IACH,WAAW,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAErD;;;;OAIG;IACH,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAErE;;OAEG;IACH,WAAW,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IAE/B;;;;OAIG;IACH,YAAY,CAAC,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAEvE;;OAEG;IACH,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAEhD;;;OAGG;IACH,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CAC9C;;AAED,wBAAyE;AAEzE,KAAK,sBAAsB,GAAG;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,KAAK,oBAAoB,GAAG;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC"}
+{"version":3,"file":"NativeOauthEssentials.d.ts","sourceRoot":"","sources":["../../../src/NativeOauthEssentials.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,YAAY,EACjB,KAAK,WAAW,EAEjB,MAAM,cAAc,CAAC;AAGtB,MAAM,WAAW,IAAK,SAAQ,WAAW;IAEvC,kGAAkG;IAClG,QAAQ,CAAC,mBAAmB,EAAE,YAAY,CAAC,YAAY,CAAC,sBAAsB,CAAC,CAAC;IAChF,yEAAyE;IACzE,QAAQ,CAAC,mBAAmB,EAAE,YAAY,CAAC,YAAY,CAAC,oBAAoB,CAAC,CAAC;IAC9E,uFAAuF;IACvF,QAAQ,CAAC,0BAA0B,EAAE,YAAY,CAAC,YAAY,CAAC,6BAA6B,CAAC,CAAC;IAE9F;;OAEG;IACH,YAAY,IAAI;QACd,QAAQ,CAAC,8BAA8B,EAAE,OAAO,CAAC;QACjD,QAAQ,CAAC,kBAAkB,EAAE,OAAO,CAAC;QACrC,QAAQ,CAAC,mBAAmB,EAAE,OAAO,CAAC;QACtC,QAAQ,CAAC,kBAAkB,EAAE,OAAO,CAAC;QACrC,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;QACnC,QAAQ,CAAC,kBAAkB,EAAE,OAAO,CAAC;QACrC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;KACrC,CAAC;IAEF;;;;;;;;;;OAUG;IACH,YAAY,CAAC,qBAAqB,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAE9E;;;;OAIG;IACH,kBAAkB,CAChB,qBAAqB,EAAE,MAAM,EAC7B,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,MAAM,CAAC,CAAC;IAEnB;;;OAGG;IACH,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IAE5B;;;;;;OAMG;IACH,WAAW,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAE5E;;;OAGG;IACH,yBAAyB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAE3D;;;OAGG;IACH,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAErE;;;OAGG;IACH,WAAW,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IAE/B;;;OAGG;IACH,YAAY,CAAC,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAEvE;;;OAGG;IACH,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAEhD;;;;OAIG;IACH,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAE7C;;;OAGG;IACH,qBAAqB,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IAE1C;;;OAGG;IACH,YAAY,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IAEhC;;;;;OAKG;IACH,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CAChE;;AAWD,wBAAiC;AAEjC,KAAK,sBAAsB,GAAG;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,KAAK,oBAAoB,GAAG;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,KAAK,6BAA6B,GAAG;IACnC,IAAI,EAAE,MAAM,CAAC;CACd,CAAC"}

package/lib/typescript/src/errors.d.ts

@@ -0,0 +1,18 @@
+import { type CredentialErrorCode, type OauthEssentialsError } from './types';
+/**
+ * Narrows an unknown error (e.g. in a `catch`) to an error rejected by this library, optionally
+ * with a specific code.
+ *
+ * ```ts
+ * try {
+ *   await googleSignIn({ iosClientId, webClientId });
+ * } catch (e) {
+ *   if (isCredentialError(e, CredentialError.BROWSER_UNAVAILABLE)) retryLater();
+ *   else if (isCredentialError(e)) report(e.code, e.message);
+ *   else throw e;
+ * }
+ * ```
+ */
+export declare function isCredentialError<C extends CredentialErrorCode = CredentialErrorCode>(error: unknown, code?: C): error is OauthEssentialsError<C>;
+export declare function createCredentialError<C extends CredentialErrorCode>(code: C, message: string, cause?: unknown): OauthEssentialsError<C>;
+//# sourceMappingURL=errors.d.ts.map

package/lib/typescript/src/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../../src/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EAC1B,MAAM,SAAS,CAAC;AAIjB;;;;;;;;;;;;;GAaG;AACH,wBAAgB,iBAAiB,CAC/B,CAAC,SAAS,mBAAmB,GAAG,mBAAmB,EACnD,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC,GAAG,KAAK,IAAI,oBAAoB,CAAC,CAAC,CAAC,CAS5D;AAED,wBAAgB,qBAAqB,CAAC,CAAC,SAAS,mBAAmB,EACjE,IAAI,EAAE,CAAC,EACP,OAAO,EAAE,MAAM,EACf,KAAK,CAAC,EAAE,OAAO,GACd,oBAAoB,CAAC,CAAC,CAAC,CASzB"}