@absolutejs/auth 0.27.0-beta.9 → 0.27.0

package/dist/oidc/config.d.ts

@@ -6,6 +6,12 @@ export type OidcProviderConfig<UserType> = {
     accessTokenTtlMs?: number;
     authorizationCodeStore: AuthorizationCodeStore;
     clientStore: OAuthClientStore;
+    getAccessTokenClaims?: (context: {
+        audience?: string;
+        clientId: string;
+        scopes: string[];
+        sub: string;
+    }) => Record<string, unknown> | Promise<Record<string, unknown>>;
     getClaims?: (user: UserType) => Record<string, unknown>;
     getGrantedScopes?: (context: {
         client: {

package/dist/oidc/routes.d.ts

@@ -27,9 +27,9 @@ export declare const oidcProviderRoutes: <UserType>(config: OidcProviderConfig<U
             body: unknown;
             params: {};
             query: {
-                nonce?: string | undefined;
                 client_id?: string | undefined;
                 scope?: string | undefined;
+                nonce?: string | undefined;
                 code_challenge?: string | undefined;
                 code_challenge_method?: string | undefined;
                 redirect_uri?: string | undefined;
@@ -55,10 +55,10 @@ export declare const oidcProviderRoutes: <UserType>(config: OidcProviderConfig<U
     [x: string]: {
         post: {
             body: {
-                audience?: string | undefined;
-                resource?: string | undefined;
                 client_id?: string | undefined;
                 scope?: string | undefined;
+                audience?: string | undefined;
+                resource?: string | undefined;
                 refresh_token?: string | undefined;
                 client_secret?: string | undefined;
                 grant_type?: string | undefined;

package/dist/organizations/operations.d.ts

@@ -5,6 +5,13 @@ export declare const acceptInvitation: ({ organizationStore, token, userId }: {
     token: string;
     userId: string;
 }) => Promise<OrganizationMembership | undefined>;
+export declare const autoAssignOrgsByEmail: ({ email, getOrgsForDomain, organizationStore, roles, userId }: {
+    email: string;
+    getOrgsForDomain: (domain: string) => Promise<OrganizationId[]> | OrganizationId[];
+    organizationStore: OrganizationStore;
+    roles?: string[];
+    userId: string;
+}) => Promise<string[]>;
 export declare const createOrganization: ({ metadata, name, organizationStore, ownerRoles, ownerUserId }: {
     metadata?: Record<string, unknown>;
     name: string;

package/dist/vault/config.d.ts

@@ -0,0 +1,20 @@
+import { type SecretCipher } from '../compliance/cipher';
+import type { VaultStore } from './types';
+export type Vault = {
+    delete: (ownerId: string, name: string) => Promise<void>;
+    get: (ownerId: string, name: string) => Promise<string | undefined>;
+    list: (ownerId: string) => Promise<string[]>;
+    put: (ownerId: string, name: string, value: string) => Promise<void>;
+};
+export declare const createVault: ({ cipher, store }: {
+    cipher: SecretCipher;
+    store: VaultStore;
+}) => Vault;
+export type VaultKeyRotationResult = {
+    rotated: number;
+};
+export declare const rotateVaultKey: ({ newKey, oldKey, store }: {
+    newKey: string;
+    oldKey: string;
+    store: VaultStore;
+}) => Promise<VaultKeyRotationResult>;

package/dist/vault/inMemoryVaultStore.d.ts

@@ -0,0 +1,2 @@
+import type { VaultStore } from './types';
+export declare const createInMemoryVaultStore: () => VaultStore;

package/dist/vault/postgresVaultStore.d.ts

@@ -0,0 +1,100 @@
+import { type AnyPgDatabase } from '../stores/postgres';
+import type { VaultStore } from './types';
+export declare const vaultEntriesTable: import("drizzle-orm/pg-core").PgTableWithColumns<{
+    name: "auth_vault_entries";
+    schema: undefined;
+    columns: {
+        created_at_ms: import("drizzle-orm/pg-core").PgColumn<{
+            name: "created_at_ms";
+            tableName: "auth_vault_entries";
+            dataType: "number";
+            columnType: "PgBigInt53";
+            data: number;
+            driverParam: string | number;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        encrypted_value: import("drizzle-orm/pg-core").PgColumn<{
+            name: "encrypted_value";
+            tableName: "auth_vault_entries";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        name: import("drizzle-orm/pg-core").PgColumn<{
+            name: "name";
+            tableName: "auth_vault_entries";
+            dataType: "string";
+            columnType: "PgVarchar";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            length: 255;
+        }>;
+        owner_id: import("drizzle-orm/pg-core").PgColumn<{
+            name: "owner_id";
+            tableName: "auth_vault_entries";
+            dataType: "string";
+            columnType: "PgVarchar";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            length: 255;
+        }>;
+        updated_at_ms: import("drizzle-orm/pg-core").PgColumn<{
+            name: "updated_at_ms";
+            tableName: "auth_vault_entries";
+            dataType: "number";
+            columnType: "PgBigInt53";
+            data: number;
+            driverParam: string | number;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+    };
+    dialect: "pg";
+}>;
+export declare const createNeonVaultStore: (databaseUrl: string) => VaultStore;
+export declare const createPostgresVaultStore: (db: AnyPgDatabase) => VaultStore;

package/dist/vault/types.d.ts

@@ -0,0 +1,14 @@
+export type VaultEntry = {
+    createdAt: number;
+    encryptedValue: string;
+    name: string;
+    ownerId: string;
+    updatedAt: number;
+};
+export type VaultStore = {
+    deleteEntry: (ownerId: string, name: string) => Promise<void>;
+    getEntry: (ownerId: string, name: string) => Promise<VaultEntry | undefined>;
+    listAllEntries: () => Promise<VaultEntry[]>;
+    listEntries: (ownerId: string) => Promise<VaultEntry[]>;
+    saveEntry: (entry: VaultEntry) => Promise<void>;
+};

package/package.json

@@ -1,5 +1,5 @@
 {
-	"version": "0.27.0-beta.9",
+	"version": "0.27.0",
 	"name": "@absolutejs/auth",
 	"description": "An authorization library for absolutejs",
 	"repository": {
@@ -10,7 +10,7 @@
 	"license": "CC BY-NC 4.0",
 	"author": "Alex Kahn",
 	"scripts": {
-		"build": "rm -rf dist && bun build src/index.ts src/htmx/index.ts --outdir dist --sourcemap --target=bun --external elysia && tsc --emitDeclarationOnly --project tsconfig.json",
+		"build": "rm -rf dist && bun build src/index.ts src/htmx/index.ts src/client/index.ts src/client/react.ts --outdir dist --sourcemap --target=bun --external elysia --external react && tsc --emitDeclarationOnly --project tsconfig.json",
 		"config": "absolute config",
 		"test": "bun test",
 		"format": "absolute prettier --write",
@@ -27,7 +27,13 @@
 	],
 	"types": "./dist/index.d.ts",
 	"peerDependencies": {
-		"elysia": ">= 1.4.26"
+		"elysia": ">= 1.4.26",
+		"react": ">=18 <20"
+	},
+	"peerDependenciesMeta": {
+		"react": {
+			"optional": true
+		}
 	},
 	"dependencies": {
 		"@absolutejs/linked-providers": "0.0.2",
@@ -40,6 +46,7 @@
 		"@eslint/js": "^10.0.1",
 		"@stylistic/eslint-plugin": "^5.10.0",
 		"@types/bun": "1.2.9",
+		"@types/react": "^19.0.0",
 		"@typescript-eslint/parser": "^8.57.2",
 		"elysia": "1.4.26",
 		"eslint": "^10.1.0",
@@ -57,9 +64,17 @@
 			"import": "./dist/index.js",
 			"types": "./dist/index.d.ts"
 		},
+		"./client": {
+			"import": "./dist/client/index.js",
+			"types": "./dist/client/index.d.ts"
+		},
 		"./htmx": {
 			"import": "./dist/htmx/index.js",
 			"types": "./dist/htmx/index.d.ts"
+		},
+		"./react": {
+			"import": "./dist/client/react.js",
+			"types": "./dist/client/react.d.ts"
 		}
 	},
 	"type": "module",