Edit: /tmp/tsx-0/17887-293957e2eed4a268b5b65d419800893b96a7166d (6939B)
{"code":"__filename=\"/opt/canhelp/node_modules/better-auth/node_modules/@better-auth/core/dist/oauth2/verify.mjs\";(()=>{\nvar __defProp=Object.defineProperty;var __getOwnPropDesc=Object.getOwnPropertyDescriptor;var __getOwnPropNames=Object.getOwnPropertyNames;var __hasOwnProp=Object.prototype.hasOwnProperty;var __name=(target,value)=>__defProp(target,\"name\",{value,configurable:true});var __export=(target,all)=>{for(var name in all)__defProp(target,name,{get:all[name],enumerable:true})};var __copyProps=(to,from,except,desc)=>{if(from&&typeof from===\"object\"||typeof from===\"function\"){for(let key of __getOwnPropNames(from))if(!__hasOwnProp.call(to,key)&&key!==except)__defProp(to,key,{get:()=>from[key],enumerable:!(desc=__getOwnPropDesc(from,key))||desc.enumerable})}return to};var __toCommonJS=mod=>__copyProps(__defProp({},\"__esModule\",{value:true}),mod);var verify_exports={};__export(verify_exports,{getJwks:()=>getJwks,verifyAccessToken:()=>verifyAccessToken,verifyJwsAccessToken:()=>verifyJwsAccessToken});module.exports=__toCommonJS(verify_exports);var import_logger=require(\"../env/logger.mjs\");var import_env=require(\"../env/index.mjs\");var import_better_call=require(\"better-call\");var import_fetch=require(\"@better-fetch/fetch\");var import_jose=require(\"jose\");let jwks;async function verifyJwsAccessToken(token,opts){try{const jwt=await(0,import_jose.jwtVerify)(token,(0,import_jose.createLocalJWKSet)(await getJwks(token,opts)),opts.verifyOptions);if(jwt.payload.azp)jwt.payload.client_id=jwt.payload.azp;return jwt.payload}catch(error){if(error instanceof Error)throw error;throw new Error(error)}}__name(verifyJwsAccessToken,\"verifyJwsAccessToken\");async function getJwks(token,opts){let jwtHeaders;try{jwtHeaders=(0,import_jose.decodeProtectedHeader)(token)}catch(error){if(error instanceof Error)throw error;throw new Error(error)}if(!jwtHeaders.kid)throw new Error(\"Missing jwt kid\");if(!jwks||!jwks.keys.find(jwk=>jwk.kid===jwtHeaders.kid)){jwks=typeof opts.jwksFetch===\"string\"?await(0,import_fetch.betterFetch)(opts.jwksFetch,{headers:{Accept:\"application/json\"}}).then(async res=>{if(res.error)throw new Error(`Jwks failed: ${res.error.message??res.error.statusText}`);return res.data}):await opts.jwksFetch();if(!jwks)throw new Error(\"No jwks found\")}return jwks}__name(getJwks,\"getJwks\");async function verifyAccessToken(token,opts){let payload;if(opts.jwksUrl&&!opts?.remoteVerify?.force)try{payload=await verifyJwsAccessToken(token,{jwksFetch:opts.jwksUrl,verifyOptions:opts.verifyOptions})}catch(error){if(error instanceof Error)if(error.name===\"TypeError\"||error.name===\"JWSInvalid\"){}else if(error.name===\"JWTExpired\")throw new import_better_call.APIError(\"UNAUTHORIZED\",{message:\"token expired\"});else if(error.name===\"JWTInvalid\")throw new import_better_call.APIError(\"UNAUTHORIZED\",{message:\"token invalid\"});else throw error;else throw new Error(error)}if(opts?.remoteVerify){const{data:introspect,error:introspectError}=await(0,import_fetch.betterFetch)(opts.remoteVerify.introspectUrl,{method:\"POST\",headers:{Accept:\"application/json\",\"Content-Type\":\"application/x-www-form-urlencoded\"},body:new URLSearchParams({client_id:opts.remoteVerify.clientId,client_secret:opts.remoteVerify.clientSecret,token,token_type_hint:\"access_token\"}).toString()});if(introspectError)import_logger.logger.error(`Introspection failed: ${introspectError.message??introspectError.statusText}`);if(!introspect)throw new import_better_call.APIError(\"INTERNAL_SERVER_ERROR\",{message:\"introspection failed\"});if(!introspect.active)throw new import_better_call.APIError(\"UNAUTHORIZED\",{message:\"token inactive\"});try{const unsecuredJwt=new import_jose.UnsecuredJWT(introspect).encode();const{audience:_audience,...verifyOptions}=opts.verifyOptions;payload=(introspect.aud?import_jose.UnsecuredJWT.decode(unsecuredJwt,opts.verifyOptions):import_jose.UnsecuredJWT.decode(unsecuredJwt,verifyOptions)).payload}catch(error){throw new Error(error)}}if(!payload)throw new import_better_call.APIError(\"UNAUTHORIZED\",{message:`no token payload`});if(opts.scopes){const validScopes=new Set(payload.scope?.split(\" \"));for(const sc of opts.scopes)if(!validScopes.has(sc))throw new import_better_call.APIError(\"FORBIDDEN\",{message:`invalid scope ${sc}`})}return payload}__name(verifyAccessToken,\"verifyAccessToken\");0&&(module.exports={getJwks,verifyAccessToken,verifyJwsAccessToken});\n})()\n","warnings":[],"map":{"version":3,"mappings":";suBAAA,yNAAuB,6BACvB,eAAO,4BACP,uBAAyB,uBACzB,iBAA4B,+BAC5B,gBAAkF,gBAIlF,IAAI,KAMJ,eAAe,qBAAqB,MAAO,KAAM,CAChD,GAAI,CACH,MAAM,IAAM,QAAM,uBAAU,SAAO,+BAAkB,MAAM,QAAQ,MAAO,IAAI,CAAC,EAAG,KAAK,aAAa,EACpG,GAAI,IAAI,QAAQ,IAAK,IAAI,QAAQ,UAAY,IAAI,QAAQ,IACzD,OAAO,IAAI,OACZ,OAAS,MAAO,CACf,GAAI,iBAAiB,MAAO,MAAM,MAClC,MAAM,IAAI,MAAM,KAAK,CACtB,CACD,CATe,oDAUf,eAAe,QAAQ,MAAO,KAAM,CACnC,IAAI,WACJ,GAAI,CACH,cAAa,mCAAsB,KAAK,CACzC,OAAS,MAAO,CACf,GAAI,iBAAiB,MAAO,MAAM,MAClC,MAAM,IAAI,MAAM,KAAK,CACtB,CACA,GAAI,CAAC,WAAW,IAAK,MAAM,IAAI,MAAM,iBAAiB,EACtD,GAAI,CAAC,MAAQ,CAAC,KAAK,KAAK,KAAM,KAAQ,IAAI,MAAQ,WAAW,GAAG,EAAG,CAClE,KAAO,OAAO,KAAK,YAAc,SAAW,QAAM,0BAAY,KAAK,UAAW,CAAE,QAAS,CAAE,OAAQ,kBAAmB,CAAE,CAAC,EAAE,KAAK,MAAO,KAAQ,CAC9I,GAAI,IAAI,MAAO,MAAM,IAAI,MAAM,gBAAgB,IAAI,MAAM,SAAW,IAAI,MAAM,UAAU,EAAE,EAC1F,OAAO,IAAI,IACZ,CAAC,EAAI,MAAM,KAAK,UAAU,EAC1B,GAAI,CAAC,KAAM,MAAM,IAAI,MAAM,eAAe,CAC3C,CACA,OAAO,IACR,CAjBe,0BAuBf,eAAe,kBAAkB,MAAO,KAAM,CAC7C,IAAI,QACJ,GAAI,KAAK,SAAW,CAAC,MAAM,cAAc,MAAO,GAAI,CACnD,QAAU,MAAM,qBAAqB,MAAO,CAC3C,UAAW,KAAK,QAChB,cAAe,KAAK,aACrB,CAAC,CACF,OAAS,MAAO,CACf,GAAI,iBAAiB,MAAO,GAAI,MAAM,OAAS,aAAe,MAAM,OAAS,aAAc,CAAC,SAAW,MAAM,OAAS,aAAc,MAAM,IAAI,4BAAS,eAAgB,CAAE,QAAS,eAAgB,CAAC,UAC1L,MAAM,OAAS,aAAc,MAAM,IAAI,4BAAS,eAAgB,CAAE,QAAS,eAAgB,CAAC,MAChG,OAAM,UACN,OAAM,IAAI,MAAM,KAAK,CAC3B,CACA,GAAI,MAAM,aAAc,CACvB,KAAM,CAAE,KAAM,WAAY,MAAO,eAAgB,EAAI,QAAM,0BAAY,KAAK,aAAa,cAAe,CACvG,OAAQ,OACR,QAAS,CACR,OAAQ,mBACR,eAAgB,mCACjB,EACA,KAAM,IAAI,gBAAgB,CACzB,UAAW,KAAK,aAAa,SAC7B,cAAe,KAAK,aAAa,aACjC,MACA,gBAAiB,cAClB,CAAC,EAAE,SAAS,CACb,CAAC,EACD,GAAI,gBAAiB,qBAAO,MAAM,yBAAyB,gBAAgB,SAAW,gBAAgB,UAAU,EAAE,EAClH,GAAI,CAAC,WAAY,MAAM,IAAI,4BAAS,wBAAyB,CAAE,QAAS,sBAAuB,CAAC,EAChG,GAAI,CAAC,WAAW,OAAQ,MAAM,IAAI,4BAAS,eAAgB,CAAE,QAAS,gBAAiB,CAAC,EACxF,GAAI,CACH,MAAM,aAAe,IAAI,yBAAa,UAAU,EAAE,OAAO,EACzD,KAAM,CAAE,SAAU,UAAW,GAAG,aAAc,EAAI,KAAK,cACvD,SAAW,WAAW,IAAM,yBAAa,OAAO,aAAc,KAAK,aAAa,EAAI,yBAAa,OAAO,aAAc,aAAa,GAAG,OACvI,OAAS,MAAO,CACf,MAAM,IAAI,MAAM,KAAK,CACtB,CACD,CACA,GAAI,CAAC,QAAS,MAAM,IAAI,4BAAS,eAAgB,CAAE,QAAS,kBAAmB,CAAC,EAChF,GAAI,KAAK,OAAQ,CAChB,MAAM,YAAc,IAAI,IAAI,QAAQ,OAAO,MAAM,GAAG,CAAC,EACrD,UAAW,MAAM,KAAK,OAAQ,GAAI,CAAC,YAAY,IAAI,EAAE,EAAG,MAAM,IAAI,4BAAS,YAAa,CAAE,QAAS,iBAAiB,EAAE,EAAG,CAAC,CAC3H,CACA,OAAO,OACR,CA5Ce","names":[],"ignoreList":[],"sources":["/opt/canhelp/node_modules/better-auth/node_modules/@better-auth/core/dist/oauth2/verify.mjs"],"sourcesContent":[null]}}