@absolutejs/auth 0.53.8 → 0.54.1

package/dist/index.js

@@ -1,5 +1,35 @@
 // @bun
+var __create = Object.create;
+var __getProtoOf = Object.getPrototypeOf;
 var __defProp = Object.defineProperty;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+function __accessProp(key) {
+  return this[key];
+}
+var __toESMCache_node;
+var __toESMCache_esm;
+var __toESM = (mod, isNodeMode, target) => {
+  var canCache = mod != null && typeof mod === "object";
+  if (canCache) {
+    var cache = isNodeMode ? __toESMCache_node ??= new WeakMap : __toESMCache_esm ??= new WeakMap;
+    var cached = cache.get(mod);
+    if (cached)
+      return cached;
+  }
+  target = mod != null ? __create(__getProtoOf(mod)) : {};
+  const to = isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target;
+  for (let key of __getOwnPropNames(mod))
+    if (!__hasOwnProp.call(to, key))
+      __defProp(to, key, {
+        get: __accessProp.bind(mod, key),
+        enumerable: true
+      });
+  if (canCache)
+    cache.set(mod, to);
+  return to;
+};
+var __commonJS = (cb, mod) => () => (mod || cb((mod = { exports: {} }).exports, mod), mod.exports);
 var __returnValue = (v) => v;
 function __exportSetter(name, newValue) {
   this[name] = __returnValue.bind(null, newValue);
@@ -27068,159 +27098,6 @@ var samlIdpRoutes = ({
     ssoUrl: ssoUrlFor(request.url)
   })));
 };
-// src/sso/nodeSamlAdapter.ts
-var STANDARD_PROFILE_KEYS = new Set([
-  "ID",
-  "getAssertion",
-  "getAssertionXml",
-  "getSamlResponseXml",
-  "issuer",
-  "mainAttributes",
-  "nameID",
-  "nameIDFormat",
-  "sessionIndex",
-  "spNameQualifier"
-]);
-var DEFAULT_NAMEID_FORMAT = "urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress";
-var siblingEndpoints = (urls) => {
-  const acsUrl = urls.acsUrl ?? urls.sloUrl?.replace(/\/slo(\?|$)/, "/acs$1");
-  const sloUrl = urls.sloUrl ?? urls.acsUrl?.replace(/\/acs(\?|$)/, "/slo$1");
-  return { acsUrl, sloUrl };
-};
-var createNodeSamlAdapter = async (options = {}) => {
-  const { SAML } = await import("@node-saml/node-saml");
-  const {
-    signatureAlgorithm = "sha256",
-    spCertificate,
-    spPrivateKey
-  } = options;
-  const canSign = spPrivateKey !== undefined;
-  const build = (connection, urls) => {
-    const { acsUrl, sloUrl } = siblingEndpoints(urls);
-    const baseUrl = acsUrl ?? sloUrl;
-    if (baseUrl === undefined) {
-      throw new Error("node-saml adapter requires an acsUrl or sloUrl to build a SAML client");
-    }
-    const spEntityId = new URL(baseUrl).origin;
-    return new SAML({
-      audience: spEntityId,
-      callbackUrl: acsUrl ?? baseUrl,
-      entryPoint: connection.config.idpSsoUrl,
-      idpCert: connection.config.idpX509Cert,
-      issuer: spEntityId,
-      logoutUrl: connection.config.idpSloUrl,
-      wantAssertionsSigned: true,
-      ...canSign ? {
-        logoutCallbackUrl: sloUrl ?? baseUrl,
-        privateKey: spPrivateKey,
-        signatureAlgorithm
-      } : {}
-    });
-  };
-  const adapter = {
-    createAuthorizationUrl: ({ acsUrl, connection, relayState }) => build(connection, { acsUrl }).getAuthorizeUrlAsync(relayState ?? "", undefined, {}),
-    getServiceProviderMetadata: ({ acsUrl, connection, sloUrl }) => build(connection, {
-      acsUrl,
-      sloUrl
-    }).generateServiceProviderMetadata(null, spCertificate ?? null),
-    validateAssertion: async ({ acsUrl, connection, samlResponse }) => {
-      const { profile: profile2 } = await build(connection, {
-        acsUrl
-      }).validatePostResponseAsync({ SAMLResponse: samlResponse });
-      if (!profile2) {
-        throw new Error("SAML response contained no assertion profile");
-      }
-      const attributes = {};
-      for (const [key, value] of Object.entries(profile2)) {
-        if (!STANDARD_PROFILE_KEYS.has(key))
-          attributes[key] = value;
-      }
-      const email = profile2.email ?? (profile2.nameID.includes("@") ? profile2.nameID : undefined);
-      const result = {
-        attributes,
-        email,
-        nameId: profile2.nameID,
-        sessionIndex: profile2.sessionIndex
-      };
-      return result;
-    }
-  };
-  if (!canSign)
-    return adapter;
-  return {
-    ...adapter,
-    createLogoutRequestUrl: ({
-      connection,
-      nameId,
-      relayState,
-      sessionIndex,
-      sloUrl
-    }) => {
-      const saml = build(connection, { sloUrl });
-      return saml.getLogoutUrlAsync({
-        issuer: new URL(sloUrl).origin,
-        nameID: nameId,
-        nameIDFormat: DEFAULT_NAMEID_FORMAT,
-        sessionIndex
-      }, relayState ?? "", {});
-    },
-    createLogoutResponseUrl: ({
-      connection,
-      inResponseTo,
-      nameId,
-      relayState,
-      sloUrl
-    }) => {
-      const saml = build(connection, { sloUrl });
-      return saml.getLogoutResponseUrlAsync({
-        ID: inResponseTo,
-        issuer: new URL(sloUrl).origin,
-        nameID: nameId ?? "",
-        nameIDFormat: DEFAULT_NAMEID_FORMAT
-      }, relayState ?? "", {}, true);
-    },
-    validateLogoutRequest: async ({
-      connection,
-      relayState,
-      samlRequest,
-      signature,
-      signatureAlgorithm: sigAlg,
-      signedQueryString,
-      sloUrl
-    }) => {
-      const saml = build(connection, { sloUrl });
-      const { profile: profile2 } = await saml.validateRedirectAsync({
-        RelayState: relayState,
-        SAMLRequest: samlRequest,
-        SigAlg: sigAlg,
-        Signature: signature
-      }, signedQueryString ?? "");
-      return {
-        nameId: profile2?.nameID,
-        relayState,
-        requestId: profile2?.ID,
-        sessionIndex: profile2?.sessionIndex
-      };
-    },
-    validateLogoutResponse: async ({
-      connection,
-      relayState,
-      samlResponse,
-      signature,
-      signatureAlgorithm: sigAlg,
-      signedQueryString,
-      sloUrl
-    }) => {
-      const saml = build(connection, { sloUrl });
-      await saml.validateRedirectAsync({
-        RelayState: relayState,
-        SAMLResponse: samlResponse,
-        SigAlg: sigAlg,
-        Signature: signature
-      }, signedQueryString ?? "");
-    }
-  };
-};
 // src/sso/inMemorySamlServiceProviderStore.ts
 var createInMemorySamlServiceProviderStore = () => {
   const providers2 = new Map;
@@ -27265,105 +27142,6 @@ var createInMemorySsoConnectionStore = () => {
     }
   };
 };
-// src/webauthn/simpleWebAuthnAdapter.ts
-var createSimpleWebAuthnAdapter = async () => {
-  const {
-    generateAuthenticationOptions,
-    generateRegistrationOptions,
-    verifyAuthenticationResponse,
-    verifyRegistrationResponse
-  } = await import("@simplewebauthn/server");
-  const toBase64Url3 = (bytes) => Buffer.from(bytes).toString("base64url");
-  const fromBase64Url3 = (value) => new Uint8Array(Buffer.from(value, "base64url"));
-  return {
-    createAuthenticationOptions: async ({ allowCredentials, rpId }) => {
-      const options = await generateAuthenticationOptions({
-        allowCredentials: allowCredentials.map(({ id }) => ({
-          id
-        })),
-        rpID: rpId
-      });
-      return {
-        challenge: options.challenge,
-        options: { ...options }
-      };
-    },
-    createRegistrationOptions: async ({
-      excludeCredentials,
-      rpId,
-      rpName,
-      userDisplayName,
-      userId,
-      userName
-    }) => {
-      const options = await generateRegistrationOptions({
-        excludeCredentials: excludeCredentials.map(({ id }) => ({
-          id
-        })),
-        rpID: rpId,
-        rpName,
-        userDisplayName,
-        userID: Uint8Array.from(new TextEncoder().encode(userId)),
-        userName
-      });
-      return {
-        challenge: options.challenge,
-        options: { ...options }
-      };
-    },
-    verifyAuthentication: async ({
-      credential,
-      expectedChallenge,
-      expectedOrigin,
-      expectedRPID,
-      response
-    }) => {
-      const result = await verifyAuthenticationResponse({
-        credential: {
-          counter: credential.counter,
-          id: credential.credentialId,
-          publicKey: fromBase64Url3(credential.publicKey)
-        },
-        expectedChallenge,
-        expectedOrigin,
-        expectedRPID,
-        response
-      });
-      return {
-        newCounter: result.authenticationInfo?.newCounter,
-        verified: result.verified
-      };
-    },
-    verifyRegistration: async ({
-      expectedChallenge,
-      expectedOrigin,
-      expectedRPID,
-      response
-    }) => {
-      const result = await verifyRegistrationResponse({
-        expectedChallenge,
-        expectedOrigin,
-        expectedRPID,
-        response
-      });
-      if (!result.verified || !result.registrationInfo) {
-        return { verified: false };
-      }
-      const { credential, credentialBackedUp, credentialDeviceType } = result.registrationInfo;
-      return {
-        credential: {
-          backedUp: credentialBackedUp,
-          counter: credential.counter,
-          credentialId: credential.id,
-          deviceType: credentialDeviceType,
-          publicKey: toBase64Url3(credential.publicKey),
-          transports: credential.transports
-        },
-        verified: true
-      };
-    }
-  };
-};
 // src/webauthn/inMemoryWebAuthnCredentialStore.ts
 var cloneCredential2 = (value) => ({
   ...value,
@@ -27948,7 +27726,6 @@ export {
   createTotpKeyUri,
   createTamperEvidentSink,
   createStatusList,
-  createSimpleWebAuthnAdapter,
   createSiemLogStream,
   createSetupSession,
   createSecretCipher,
@@ -27993,7 +27770,6 @@ export {
   createPostgresAccessTokenStore,
   createOrganization,
   createOAuthLinkedProviderCredentialResolver,
-  createNodeSamlAdapter,
   createNeonWebhookDeliveryStore,
   createNeonWebAuthnCredentialStore,
   createNeonWarrantStore,
@@ -28156,5 +27932,5 @@ export {
   AuthIdentityConflictError
 };
 
-//# debugId=FD1EFED4A30A88E664756E2164756E21
+//# debugId=0E38321CEDEDD5AF64756E2164756E21
 //# sourceMappingURL=index.js.map