@absolutejs/auth 0.26.0-beta.2 → 0.26.0-beta.4

package/dist/roles/config.d.ts

@@ -0,0 +1,27 @@
+import type { AuditEmitter } from '../audit/config';
+import type { OrganizationMembership, OrganizationStore } from '../organizations/types';
+import type { AuthSessionStore } from '../session/types';
+import type { OrganizationId } from '../tenancy';
+import type { RouteString } from '../types';
+import type { RoleStore } from './types';
+export declare const DEFAULT_ROLES_ROUTE: RouteString;
+export type RolesConfig<UserType> = {
+    getUserId: (user: UserType) => string;
+    organizationStore: OrganizationStore;
+    roleStore: RoleStore;
+    canManageRoles?: (context: {
+        membership?: OrganizationMembership;
+        organizationId: OrganizationId;
+        user: UserType;
+    }) => boolean | Promise<boolean>;
+    onRolesAssigned?: (context: {
+        organizationId: OrganizationId;
+        roles: string[];
+        userId: string;
+    }) => void | Promise<void>;
+    rolesRoute?: RouteString;
+};
+export type RolesRouteProps<UserType> = RolesConfig<UserType> & {
+    authSessionStore?: AuthSessionStore<UserType>;
+    emit?: AuditEmitter;
+};

package/dist/roles/inMemoryRoleStore.d.ts

@@ -0,0 +1,2 @@
+import type { RoleStore } from './types';
+export declare const createInMemoryRoleStore: () => RoleStore;

package/dist/roles/operations.d.ts

@@ -0,0 +1,8 @@
+import type { OrganizationMembership, OrganizationStore } from '../organizations/types';
+import type { OrganizationId } from '../tenancy';
+export declare const setMemberRoles: ({ organizationId, organizationStore, roles, userId }: {
+    organizationId: OrganizationId;
+    organizationStore: OrganizationStore;
+    roles: string[];
+    userId: string;
+}) => Promise<OrganizationMembership | undefined>;

package/dist/roles/postgresRoleStore.d.ts

@@ -0,0 +1,102 @@
+import { type AnyPgDatabase } from '../stores/postgres';
+import type { RoleStore } from './types';
+export declare const rolesTable: import("drizzle-orm/pg-core").PgTableWithColumns<{
+    name: "auth_roles";
+    schema: undefined;
+    columns: {
+        created_at_ms: import("drizzle-orm/pg-core").PgColumn<{
+            name: "created_at_ms";
+            tableName: "auth_roles";
+            dataType: "number";
+            columnType: "PgBigInt53";
+            data: number;
+            driverParam: string | number;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        organization_id: import("drizzle-orm/pg-core").PgColumn<{
+            name: "organization_id";
+            tableName: "auth_roles";
+            dataType: "string";
+            columnType: "PgVarchar";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            length: 255;
+        }>;
+        permissions: import("drizzle-orm/pg-core").PgColumn<{
+            name: "permissions";
+            tableName: "auth_roles";
+            dataType: "json";
+            columnType: "PgJsonb";
+            data: string[];
+            driverParam: unknown;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            $type: string[];
+        }>;
+        slug: import("drizzle-orm/pg-core").PgColumn<{
+            name: "slug";
+            tableName: "auth_roles";
+            dataType: "string";
+            columnType: "PgVarchar";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            length: 128;
+        }>;
+        updated_at_ms: import("drizzle-orm/pg-core").PgColumn<{
+            name: "updated_at_ms";
+            tableName: "auth_roles";
+            dataType: "number";
+            columnType: "PgBigInt53";
+            data: number;
+            driverParam: string | number;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+    };
+    dialect: "pg";
+}>;
+export declare const createNeonRoleStore: (databaseUrl: string) => RoleStore;
+export declare const createPostgresRoleStore: (db: AnyPgDatabase) => RoleStore;

package/dist/roles/resolver.d.ts

@@ -0,0 +1,17 @@
+import type { OrganizationStore } from '../organizations/types';
+import type { OrganizationId } from '../tenancy';
+import type { RoleStore } from './types';
+export declare const createMembershipPermissionResolver: <UserType>({ getUserId, organizationStore, roleStore }: {
+    getUserId: (user: UserType) => string;
+    organizationStore: OrganizationStore;
+    roleStore: RoleStore;
+}) => ({ organizationId, permission, user }: {
+    organizationId?: OrganizationId;
+    permission: string;
+    user: UserType;
+}) => Promise<boolean>;
+export declare const resolvePermissions: ({ organizationId, roleStore, roles }: {
+    organizationId?: OrganizationId;
+    roleStore: RoleStore;
+    roles: string[];
+}) => Promise<Set<string>>;

package/dist/roles/routes.d.ts

@@ -0,0 +1,106 @@
+import { Elysia } from 'elysia';
+import type { SessionRecord } from '../types';
+import { type RolesRouteProps } from './config';
+export declare const roleRoutes: <UserType>({ authSessionStore, canManageRoles, emit, getUserId, onRolesAssigned, organizationStore, roleStore, rolesRoute }: RolesRouteProps<UserType>) => Elysia<"", {
+    decorator: {};
+    store: {
+        session: SessionRecord<UserType>;
+        unregisteredSession: import("..").UnregisteredSessionRecord;
+    };
+    derive: {};
+    resolve: {};
+}, {
+    typebox: {};
+    error: {};
+}, {
+    schema: {};
+    standaloneSchema: {};
+    macro: {};
+    macroFn: {};
+    parser: {};
+    response: {};
+}, {
+    [x: string]: {
+        ":organizationId": {
+            get: {
+                body: unknown;
+                params: {
+                    organizationId: string;
+                };
+                query: unknown;
+                headers: unknown;
+                response: {
+                    200: {
+                        readonly roles: readonly import("./types").Role[];
+                    };
+                    401: "Authentication required";
+                    403: "Cannot manage roles";
+                    422: {
+                        type: "validation";
+                        on: string;
+                        summary?: string;
+                        message?: string;
+                        found?: unknown;
+                        property?: string;
+                        expected?: string;
+                    };
+                };
+            };
+        };
+    };
+} & {
+    [x: string]: {
+        ":organizationId": {
+            members: {
+                ":userId": {
+                    put: {
+                        body: {
+                            roles: string[];
+                        };
+                        params: {
+                            userId: string;
+                            organizationId: string;
+                        };
+                        query: unknown;
+                        headers: unknown;
+                        response: {
+                            200: {
+                                readonly roles: string[];
+                            };
+                            401: "Authentication required";
+                            403: "Cannot manage roles";
+                            404: "Membership not found";
+                            422: {
+                                type: "validation";
+                                on: string;
+                                summary?: string;
+                                message?: string;
+                                found?: unknown;
+                                property?: string;
+                                expected?: string;
+                            };
+                        };
+                    };
+                };
+            };
+        };
+    };
+}, {
+    derive: {};
+    resolve: {};
+    schema: {};
+    standaloneSchema: {};
+    response: {};
+}, {
+    derive: {};
+    resolve: {};
+    schema: {};
+    standaloneSchema: {};
+    response: {};
+} & {
+    derive: {};
+    resolve: {};
+    schema: {};
+    standaloneSchema: {};
+    response: {};
+}>;

package/dist/roles/types.d.ts

@@ -0,0 +1,14 @@
+import type { OrganizationId } from '../tenancy';
+export type Role = {
+    createdAt: number;
+    organizationId?: OrganizationId;
+    permissions: string[];
+    slug: string;
+    updatedAt: number;
+};
+export type RoleStore = {
+    deleteRole: (slug: string, organizationId?: OrganizationId) => Promise<void>;
+    getRole: (slug: string, organizationId?: OrganizationId) => Promise<Role | undefined>;
+    listRoles: (organizationId?: OrganizationId) => Promise<Role[]>;
+    saveRole: (role: Role) => Promise<void>;
+};

package/dist/routes/authorize.d.ts

@@ -27,7 +27,7 @@ export declare const authorize: ({ clientProviders, authorizeRoute, onAuthorizeS
             get: {
                 body: unknown;
                 params: {
-                    provider: "42" | "amazoncognito" | "anilist" | "apple" | "atlassian" | "auth0" | "authentik" | "autodesk" | "battlenet" | "bitbucket" | "box" | "bungie" | "coinbase" | "discord" | "donationalerts" | "dribbble" | "dropbox" | "epicgames" | "etsy" | "facebook" | "figma" | "gitea" | "github" | "gitlab" | "google" | "intuit" | "kakao" | "keycloak" | "kick" | "lichess" | "line" | "linear" | "linkedin" | "mastodon" | "mercadolibre" | "mercadopago" | "microsoftentraid" | "myanimelist" | "naver" | "notion" | "okta" | "osu" | "patreon" | "polar" | "polaraccesslink" | "polarteampro" | "reddit" | "roblox" | "salesforce" | "shikimori" | "slack" | "spotify" | "startgg" | "strava" | "synology" | "tiktok" | "tiltify" | "tumblr" | "twitch" | "twitter" | "vk" | "withings" | "workos" | "yahoo" | "yandex" | "zoom";
+                    provider: "42" | "amazoncognito" | "anilist" | "apple" | "atlassian" | "attio" | "auth0" | "authentik" | "autodesk" | "battlenet" | "bitbucket" | "box" | "bungie" | "close" | "coinbase" | "discord" | "donationalerts" | "dribbble" | "dropbox" | "epicgames" | "etsy" | "facebook" | "figma" | "gitea" | "github" | "gitlab" | "gohighlevel" | "google" | "hubspot" | "intuit" | "kakao" | "keycloak" | "kick" | "lichess" | "line" | "linear" | "linkedin" | "mastodon" | "mercadolibre" | "mercadopago" | "microsoftentraid" | "monday" | "myanimelist" | "naver" | "notion" | "okta" | "osu" | "patreon" | "pipedrive" | "polar" | "polaraccesslink" | "polarteampro" | "reddit" | "roblox" | "salesforce" | "shikimori" | "slack" | "spotify" | "startgg" | "strava" | "synology" | "tiktok" | "tiltify" | "tumblr" | "twitch" | "twitter" | "vk" | "withings" | "workos" | "yahoo" | "yandex" | "zoho" | "zoom";
                 };
                 query: {
                     client?: string | undefined;
@@ -59,7 +59,7 @@ export declare const authorize: ({ clientProviders, authorizeRoute, onAuthorizeS
                 get: {
                     body: unknown;
                     params: {
-                        provider: "42" | "amazoncognito" | "anilist" | "apple" | "atlassian" | "auth0" | "authentik" | "autodesk" | "battlenet" | "bitbucket" | "box" | "bungie" | "coinbase" | "discord" | "donationalerts" | "dribbble" | "dropbox" | "epicgames" | "etsy" | "facebook" | "figma" | "gitea" | "github" | "gitlab" | "google" | "intuit" | "kakao" | "keycloak" | "kick" | "lichess" | "line" | "linear" | "linkedin" | "mastodon" | "mercadolibre" | "mercadopago" | "microsoftentraid" | "myanimelist" | "naver" | "notion" | "okta" | "osu" | "patreon" | "polar" | "polaraccesslink" | "polarteampro" | "reddit" | "roblox" | "salesforce" | "shikimori" | "slack" | "spotify" | "startgg" | "strava" | "synology" | "tiktok" | "tiltify" | "tumblr" | "twitch" | "twitter" | "vk" | "withings" | "workos" | "yahoo" | "yandex" | "zoom";
+                        provider: "42" | "amazoncognito" | "anilist" | "apple" | "atlassian" | "attio" | "auth0" | "authentik" | "autodesk" | "battlenet" | "bitbucket" | "box" | "bungie" | "close" | "coinbase" | "discord" | "donationalerts" | "dribbble" | "dropbox" | "epicgames" | "etsy" | "facebook" | "figma" | "gitea" | "github" | "gitlab" | "gohighlevel" | "google" | "hubspot" | "intuit" | "kakao" | "keycloak" | "kick" | "lichess" | "line" | "linear" | "linkedin" | "mastodon" | "mercadolibre" | "mercadopago" | "microsoftentraid" | "monday" | "myanimelist" | "naver" | "notion" | "okta" | "osu" | "patreon" | "pipedrive" | "polar" | "polaraccesslink" | "polarteampro" | "reddit" | "roblox" | "salesforce" | "shikimori" | "slack" | "spotify" | "startgg" | "strava" | "synology" | "tiktok" | "tiltify" | "tumblr" | "twitch" | "twitter" | "vk" | "withings" | "workos" | "yahoo" | "yandex" | "zoho" | "zoom";
                     };
                     query: {
                         client?: string | undefined;

package/dist/routes/protectRoute.d.ts

@@ -16,7 +16,7 @@ export declare const protectRoutePlugin: <UserType>({ authSessionStore }?: {
         unregisteredSession: import("..").UnregisteredSessionRecord;
     };
     derive: {
-        readonly protectRoute: <AuthReturn, AuthFailReturn>(handleAuth: (user: UserType) => AuthReturn | Promise<AuthReturn>, handleAuthFail?: (error: AuthFailError) => AuthFailReturn) => Promise<AuthReturn | import("elysia").ElysiaCustomStatusResponse<"Bad Request", "Cookies are missing", 400> | NonNullable<AuthFailReturn> | import("elysia").ElysiaCustomStatusResponse<"Unauthorized", "User is not authenticated", 401>>;
+        readonly protectRoute: <AuthReturn, AuthFailReturn>(handleAuth: (user: UserType) => AuthReturn | Promise<AuthReturn>, handleAuthFail?: (error: AuthFailError) => AuthFailReturn) => Promise<import("elysia").ElysiaCustomStatusResponse<"Bad Request", "Cookies are missing", 400> | import("elysia").ElysiaCustomStatusResponse<"Unauthorized", "User is not authenticated", 401> | AuthReturn | NonNullable<AuthFailReturn>>;
     };
     resolve: {};
 }, {
@@ -33,7 +33,7 @@ export declare const protectRoutePlugin: <UserType>({ authSessionStore }?: {
     macroFn: {};
     parser: {};
     response: import("elysia").ExtractErrorFromHandle<{
-        readonly protectRoute: <AuthReturn, AuthFailReturn>(handleAuth: (user: UserType) => AuthReturn | Promise<AuthReturn>, handleAuthFail?: (error: AuthFailError) => AuthFailReturn) => Promise<AuthReturn | import("elysia").ElysiaCustomStatusResponse<"Bad Request", "Cookies are missing", 400> | NonNullable<AuthFailReturn> | import("elysia").ElysiaCustomStatusResponse<"Unauthorized", "User is not authenticated", 401>>;
+        readonly protectRoute: <AuthReturn, AuthFailReturn>(handleAuth: (user: UserType) => AuthReturn | Promise<AuthReturn>, handleAuthFail?: (error: AuthFailError) => AuthFailReturn) => Promise<import("elysia").ElysiaCustomStatusResponse<"Bad Request", "Cookies are missing", 400> | import("elysia").ElysiaCustomStatusResponse<"Unauthorized", "User is not authenticated", 401> | AuthReturn | NonNullable<AuthFailReturn>>;
     }>;
 }, {}, {
     derive: {};

package/dist/scim/config.d.ts

@@ -0,0 +1,55 @@
+import type { OrganizationId } from '../tenancy';
+import type { RouteString } from '../types';
+import type { ScimFilter, ScimGroup, ScimGroupInput, ScimTokenStore, ScimUser, ScimUserInput } from './types';
+export declare const DEFAULT_SCIM_ROUTE = "/scim/v2";
+export type ScimConfig = {
+    getScimGroup?: (context: {
+        id: string;
+        organizationId: OrganizationId;
+    }) => ScimGroup | undefined | Promise<ScimGroup | undefined>;
+    getScimUser: (context: {
+        id: string;
+        organizationId: OrganizationId;
+    }) => ScimUser | undefined | Promise<ScimUser | undefined>;
+    listScimGroups?: (context: {
+        filter?: ScimFilter;
+        organizationId: OrganizationId;
+    }) => ScimGroup[] | Promise<ScimGroup[]>;
+    listScimUsers: (context: {
+        filter?: ScimFilter;
+        organizationId: OrganizationId;
+    }) => ScimUser[] | Promise<ScimUser[]>;
+    onScimGroupCreate?: (context: {
+        input: ScimGroupInput;
+        organizationId: OrganizationId;
+    }) => ScimGroup | Promise<ScimGroup>;
+    onScimGroupDelete?: (context: {
+        id: string;
+        organizationId: OrganizationId;
+    }) => void | Promise<void>;
+    onScimGroupReplace?: (context: {
+        id: string;
+        input: ScimGroupInput;
+        organizationId: OrganizationId;
+    }) => ScimGroup | undefined | Promise<ScimGroup | undefined>;
+    onScimUserCreate: (context: {
+        input: ScimUserInput;
+        organizationId: OrganizationId;
+    }) => ScimUser | Promise<ScimUser>;
+    onScimUserDeactivate: (context: {
+        id: string;
+        organizationId: OrganizationId;
+    }) => void | Promise<void>;
+    onScimUserReplace: (context: {
+        id: string;
+        input: ScimUserInput;
+        organizationId: OrganizationId;
+    }) => ScimUser | undefined | Promise<ScimUser | undefined>;
+    scimRoute?: RouteString;
+    scimTokenStore: ScimTokenStore;
+};
+export declare const createScimToken: (scimTokenStore: ScimTokenStore, organizationId: OrganizationId) => Promise<{
+    token: string;
+    tokenId: string;
+}>;
+export declare const resolveScimOrganization: (scimTokenStore: ScimTokenStore, authorization: string | undefined) => Promise<string | undefined>;

package/dist/scim/inMemoryScimTokenStore.d.ts

@@ -0,0 +1,2 @@
+import type { ScimTokenStore } from './types';
+export declare const createInMemoryScimTokenStore: () => ScimTokenStore;

package/dist/scim/postgresScimTokenStore.d.ts

@@ -0,0 +1,102 @@
+import { type AnyPgDatabase } from '../stores/postgres';
+import type { ScimTokenStore } from './types';
+export declare const scimTokensTable: import("drizzle-orm/pg-core").PgTableWithColumns<{
+    name: "auth_scim_tokens";
+    schema: undefined;
+    columns: {
+        created_at_ms: import("drizzle-orm/pg-core").PgColumn<{
+            name: "created_at_ms";
+            tableName: "auth_scim_tokens";
+            dataType: "number";
+            columnType: "PgBigInt53";
+            data: number;
+            driverParam: string | number;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        hashed_token: import("drizzle-orm/pg-core").PgColumn<{
+            name: "hashed_token";
+            tableName: "auth_scim_tokens";
+            dataType: "string";
+            columnType: "PgVarchar";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            length: 255;
+        }>;
+        last_used_at_ms: import("drizzle-orm/pg-core").PgColumn<{
+            name: "last_used_at_ms";
+            tableName: "auth_scim_tokens";
+            dataType: "number";
+            columnType: "PgBigInt53";
+            data: number;
+            driverParam: string | number;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        organization_id: import("drizzle-orm/pg-core").PgColumn<{
+            name: "organization_id";
+            tableName: "auth_scim_tokens";
+            dataType: "string";
+            columnType: "PgVarchar";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            length: 255;
+        }>;
+        token_id: import("drizzle-orm/pg-core").PgColumn<{
+            name: "token_id";
+            tableName: "auth_scim_tokens";
+            dataType: "string";
+            columnType: "PgVarchar";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: true;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            length: 255;
+        }>;
+    };
+    dialect: "pg";
+}>;
+export declare const createNeonScimTokenStore: (databaseUrl: string) => ScimTokenStore;
+export declare const createPostgresScimTokenStore: (db: AnyPgDatabase) => ScimTokenStore;