@absolutejs/auth 0.52.1 → 0.53.0

package/dist/index.js

@@ -4868,6 +4868,11 @@ var REFRESH_TTL_DAYS = 30;
 var DEFAULT_ACCESS_TOKEN_TTL_MS2 = MILLISECONDS_IN_AN_HOUR;
 var DEFAULT_ID_TOKEN_TTL_MS = MILLISECONDS_IN_AN_HOUR;
 var DEFAULT_REFRESH_TOKEN_TTL_MS = MILLISECONDS_IN_A_DAY * REFRESH_TTL_DAYS;
+var resolveAccessTtl = (ttl, scopes) => {
+  if (typeof ttl === "function")
+    return ttl({ scopes });
+  return ttl ?? DEFAULT_ACCESS_TOKEN_TTL_MS2;
+};
 var nowSeconds = (milliseconds) => Math.floor(milliseconds / MS_PER_SECOND);
 var narrowScopes = (available, requested) => requested === undefined || requested.length === 0 ? available : requested.filter((scope) => available.includes(scope));
 var RESERVED_ACCESS_CLAIMS = new Set([
@@ -4941,7 +4946,7 @@ var exchangeToken = async ({
     return { error: "invalid_scope", ok: false };
   }
   const scopes = narrowScopes(available, requestedScopes);
-  const ttl = config.accessTokenTtlMs ?? DEFAULT_ACCESS_TOKEN_TTL_MS2;
+  const ttl = resolveAccessTtl(config.accessTokenTtlMs, scopes);
   const extraClaims = await config.getAccessTokenClaims?.({
     audience,
     clientId: actorClientId,
@@ -4978,7 +4983,7 @@ var issueTokenSet = async ({
   scopes,
   sub
 }) => {
-  const accessTtl = config.accessTokenTtlMs ?? DEFAULT_ACCESS_TOKEN_TTL_MS2;
+  const accessTtl = resolveAccessTtl(config.accessTokenTtlMs, scopes);
   const idTtl = config.idTokenTtlMs ?? DEFAULT_ID_TOKEN_TTL_MS;
   const refreshTtl = config.refreshTokenTtlMs ?? DEFAULT_REFRESH_TOKEN_TTL_MS;
   const accessExtra = await config.getAccessTokenClaims?.({
@@ -28054,5 +28059,5 @@ export {
   AuthIdentityConflictError
 };
 
-//# debugId=9E1C46257073267B64756E2164756E21
+//# debugId=1AA6ADB109ED877964756E2164756E21
 //# sourceMappingURL=index.js.map