@absolutejs/auth 0.52.1 → 0.53.1

package/dist/index.d.ts

@@ -107,6 +107,7 @@ export { AuthIdentityConflictError } from './errors';
 export { sessionStore } from './session/state';
 export { createInMemoryAuthSessionStore } from './session/inMemoryStore';
 export { createNeonAuthSessionStore } from './session/neonStore';
+export { providersFromEnv, type ProviderSelection } from './providersFromEnv';
 export { createRedisAuthSessionStore, type RedisSessionClient } from './session/redisStore';
 export { createLinkedProviderCredentialResolver } from './linkedProviders/resolver';
 export { createOAuthLinkedProviderCredentialResolver } from './linkedProviders/oauthResolver';

package/dist/index.js

@@ -4868,6 +4868,11 @@ var REFRESH_TTL_DAYS = 30;
 var DEFAULT_ACCESS_TOKEN_TTL_MS2 = MILLISECONDS_IN_AN_HOUR;
 var DEFAULT_ID_TOKEN_TTL_MS = MILLISECONDS_IN_AN_HOUR;
 var DEFAULT_REFRESH_TOKEN_TTL_MS = MILLISECONDS_IN_A_DAY * REFRESH_TTL_DAYS;
+var resolveAccessTtl = (ttl, scopes) => {
+  if (typeof ttl === "function")
+    return ttl({ scopes });
+  return ttl ?? DEFAULT_ACCESS_TOKEN_TTL_MS2;
+};
 var nowSeconds = (milliseconds) => Math.floor(milliseconds / MS_PER_SECOND);
 var narrowScopes = (available, requested) => requested === undefined || requested.length === 0 ? available : requested.filter((scope) => available.includes(scope));
 var RESERVED_ACCESS_CLAIMS = new Set([
@@ -4941,7 +4946,7 @@ var exchangeToken = async ({
     return { error: "invalid_scope", ok: false };
   }
   const scopes = narrowScopes(available, requestedScopes);
-  const ttl = config.accessTokenTtlMs ?? DEFAULT_ACCESS_TOKEN_TTL_MS2;
+  const ttl = resolveAccessTtl(config.accessTokenTtlMs, scopes);
   const extraClaims = await config.getAccessTokenClaims?.({
     audience,
     clientId: actorClientId,
@@ -4978,7 +4983,7 @@ var issueTokenSet = async ({
   scopes,
   sub
 }) => {
-  const accessTtl = config.accessTokenTtlMs ?? DEFAULT_ACCESS_TOKEN_TTL_MS2;
+  const accessTtl = resolveAccessTtl(config.accessTokenTtlMs, scopes);
   const idTtl = config.idTokenTtlMs ?? DEFAULT_ID_TOKEN_TTL_MS;
   const refreshTtl = config.refreshTokenTtlMs ?? DEFAULT_REFRESH_TOKEN_TTL_MS;
   const accessExtra = await config.getAccessTokenClaims?.({
@@ -22184,6 +22189,21 @@ var createNeonAuthSessionStore = (databaseUrl) => {
     }
   };
 };
+// src/providersFromEnv.ts
+var envKey = (provider, suffix) => `${provider.replace(/[^a-zA-Z0-9]/g, "_").toUpperCase()}_${suffix}`;
+var providersFromEnv = (selection, env = process.env) => {
+  const configured = Object.fromEntries(Object.entries(selection).map(([provider, options]) => [
+    provider,
+    {
+      ...options,
+      credentials: {
+        clientId: env[envKey(provider, "CLIENT_ID")] ?? "",
+        clientSecret: env[envKey(provider, "CLIENT_SECRET")] ?? ""
+      }
+    }
+  ]));
+  return configured;
+};
 // src/session/redisStore.ts
 var SESSION_SEGMENT = "sess:";
 var UNREGISTERED_SEGMENT = "unreg:";
@@ -27709,6 +27729,7 @@ export {
   readSessionRing,
   pushAuthorizationRequest,
   pruneInactiveUsers,
+  providersFromEnv,
   providers,
   providerOptions,
   protectRoutePlugin,
@@ -28054,5 +28075,5 @@ export {
   AuthIdentityConflictError
 };
 
-//# debugId=9E1C46257073267B64756E2164756E21
+//# debugId=02EB747B81877D6664756E2164756E21
 //# sourceMappingURL=index.js.map