OAuth Provider Integration Pack

{
  "schemaVersion": "1.0",
  "capabilityId": "00000000-0000-4000-8000-00000000000c",
  "name": "OAuth Provider Integration Pack",
  "slug": "oauth-provider-integration-pack",
  "summary": "Adds tested OAuth and OIDC provider adapters with state validation, PKCE, token rotation, and account linking.",
  "granularity": "module",
  "purposes": [
    "oauth",
    "oidc",
    "authentication",
    "account linking"
  ],
  "features": [
    "PKCE",
    "state validation",
    "token rotation",
    "provider adapters"
  ],
  "functionalDescription": "Adds tested OAuth and OIDC provider adapters with state validation, PKCE, token rotation, and account linking. The versioned contract documents deterministic behavior, failure modes, configuration, and integration boundaries for production teams.",
  "inputs": [
    {
      "name": "request",
      "contentType": "application/json",
      "description": "Validated application/json request payload",
      "required": true
    }
  ],
  "outputs": [
    {
      "name": "result",
      "contentType": "application/json",
      "description": "Typed application/json response with trace metadata",
      "required": true
    }
  ],
  "runtimes": [
    {
      "language": "TypeScript",
      "runtime": "node",
      "versions": [
        "20",
        "22"
      ]
    }
  ],
  "frameworks": [
    "Next.js",
    "Express"
  ],
  "deploymentTargets": [
    "node-service",
    "aws-lambda",
    "vercel"
  ],
  "dependencies": [
    {
      "name": "zod",
      "version": ">=2",
      "optional": false
    }
  ],
  "permissions": [
    {
      "resource": "temporary-storage",
      "access": "read-write",
      "reason": "Bounded request processing"
    }
  ],
  "dataClassifications": [
    "internal"
  ],
  "complianceClaims": [
    "SBOM available",
    "Dependency scan recorded"
  ],
  "testEvidence": {
    "coveragePercent": 82,
    "tests": 221,
    "lastRun": "2026-07-20T14:00:00.000Z",
    "status": "partial"
  },
  "securityEvidence": {
    "criticalFindings": 1,
    "highFindings": 2,
    "score": 72,
    "scannedAt": "2026-07-19T09:30:00.000Z",
    "scanner": "FixtureScan 1.4"
  },
  "benchmarks": [
    {
      "name": "p95 latency",
      "value": 177,
      "unit": "ms",
      "environment": "2 vCPU / 2 GB fixture runner"
    }
  ],
  "buildBenchmark": {
    "basis": "fixture-directional",
    "sampleSize": 0,
    "referenceTask": "Reimplement the declared oauth-provider-integration-pack contract in a compatible greenfield repository",
    "tokenEstimate": {
      "low": 51000,
      "high": 125000
    },
    "agentTimeMinutes": {
      "low": 49,
      "high": 130
    },
    "humanReviewHours": {
      "low": 0.5,
      "high": 2.9
    },
    "observedAt": null,
    "methodology": "Directional fixture derived from declared granularity and integration effort; no coding-agent replay was run.",
    "confidence": "low",
    "disclosure": "Prototype estimate only. It is not an empirical benchmark and must not be presented as measured savings."
  },
  "integration": {
    "estimatedHours": 5,
    "packageManager": "pnpm",
    "configurationNotes": [
      "Pin the immutable artifact digest",
      "Configure scoped service credentials"
    ]
  },
  "composition": {
    "composable": true,
    "interface": "package-library",
    "compatibleWith": [],
    "requires": [],
    "contractStability": "stable",
    "evidence": "fixture-declared",
    "notes": [
      "Compatibility links are declared fixture metadata and have not been independently integration-tested"
    ]
  },
  "commercialModels": [
    "licensed-artifact",
    "source-license"
  ],
  "licenseOptions": [
    {
      "id": "evaluation",
      "name": "Private evaluation",
      "scope": "evaluation",
      "priceCents": 5,
      "unit": "evaluation",
      "rights": [
        "evaluation"
      ],
      "developerSeats": null,
      "restrictions": [
        "Non-production use only",
        "Results retained for 30 days"
      ]
    },
    {
      "id": "developer",
      "name": "Developer artifact",
      "scope": "individual",
      "priceCents": 19900,
      "unit": "one-time",
      "rights": [
        "artifact-access",
        "commercial-use"
      ],
      "developerSeats": 1,
      "restrictions": [
        "No redistribution",
        "One named developer"
      ]
    },
    {
      "id": "commercial-source",
      "name": "Commercial source",
      "scope": "commercial-source",
      "priceCents": 79900,
      "unit": "one-time",
      "rights": [
        "artifact-access",
        "source-access",
        "modification",
        "commercial-use"
      ],
      "developerSeats": 10,
      "restrictions": [
        "No standalone redistribution",
        "One production application"
      ]
    }
  ],
  "artifactDigests": [
    {
      "algorithm": "sha256",
      "digest": "4f4cc6e0c980b6428da2a8dd5551a281848b5ca91f573f1a50f9e423e755b857",
      "artifactType": "source"
    }
  ],
  "provenance": {
    "builder": "FunctionFoundry demo build service",
    "sourceRevision": "fixture-oauth-provider-integration-pack-v1",
    "builtAt": "2026-07-18T12:00:00.000Z",
    "signed": true
  },
  "maintenanceStatus": "maintenance",
  "version": "1.12.0",
  "seller": {
    "name": "Identity Foundry",
    "verified": false,
    "reputation": 4
  },
  "verificationBadges": [
    "SBOM verified"
  ]
}