@absolutejs/auth 0.54.3 → 0.54.5

package/dist/index.js

@@ -1946,6 +1946,7 @@ var providers = defineProviders({
     }
   },
   withings: {
+    accessTokenPath: ["body", "access_token"],
     authorizationUrl: "https://account.withings.com/oauth2_user/authorize2",
     isOIDC: false,
     isRefreshable: true,
@@ -2800,10 +2801,21 @@ var buildOAuth2Client = async (meta, config) => {
       if (!response.ok)
         throw await createOAuth2FetchError(response);
       const tokenResponse = await response.json();
+      if (!tokenResponse || typeof tokenResponse !== "object") {
+        throw new Error("OAuth token endpoint returned a non-object response");
+      }
+      const oauthError = Reflect.get(tokenResponse, "error");
+      if (typeof oauthError === "string" && oauthError.length > 0) {
+        throw new Error(`OAuth token exchange failed: ${oauthError}`);
+      }
       const nestedToken = meta.accessTokenPath ? readPath(tokenResponse, meta.accessTokenPath) : undefined;
       if (typeof nestedToken === "string" && nestedToken.length > 0 && tokenResponse && typeof tokenResponse === "object") {
         tokenResponse.access_token = nestedToken;
       }
+      const accessToken = Reflect.get(tokenResponse, "access_token");
+      if (typeof accessToken !== "string" || accessToken.length === 0) {
+        throw new Error("OAuth token endpoint returned no access_token");
+      }
       return tokenResponse;
     }
   };
@@ -3427,6 +3439,18 @@ var resolveOAuthAuthorization = async ({
   let userIdentity;
   let accessToken = tokenResponse.access_token;
   let refreshToken = tokenResponse.refresh_token;
+  if (authProvider === "withings" && !accessToken) {
+    const body = Reflect.get(tokenResponse, "body");
+    if (body && typeof body === "object") {
+      const nestedAccessToken = Reflect.get(body, "access_token");
+      if (typeof nestedAccessToken === "string") {
+        accessToken = nestedAccessToken;
+      }
+    }
+  }
+  if (typeof accessToken !== "string" || accessToken.length === 0) {
+    throw new Error("OAuth authorization response contains no access_token");
+  }
   if (tokenResponse.id_token) {
     userIdentity = normalizeProviderIdentity({
       identity: decodeJWT(tokenResponse.id_token),
@@ -3445,7 +3469,7 @@ var resolveOAuthAuthorization = async ({
     refreshToken = tokenResponse.body.refresh_token;
   } else {
     userIdentity = normalizeProviderIdentity({
-      identity: await providerInstance.fetchUserProfile(tokenResponse.access_token),
+      identity: await providerInstance.fetchUserProfile(accessToken),
       providerConfiguration: meta,
       source: "profile"
     });
@@ -9245,6 +9269,18 @@ var stepUpPlugin = ({
 
 // src/routes/signout.ts
 import { Elysia as Elysia29, t as t26 } from "elysia";
+var sessionForSignOut = ({
+  authSessionStore,
+  currentSession,
+  session,
+  userSessionId
+}) => {
+  if (!authSessionStore)
+    return session;
+  if (!currentSession)
+    return {};
+  return { [userSessionId]: currentSession };
+};
 var runSignOut = async (onSignOut, args) => {
   try {
     await onSignOut?.(args);
@@ -9274,7 +9310,12 @@ var signout = ({
     return status("Unauthorized", "No user session id found");
   }
   const currentSession = authSessionStore ? await authSessionStore.getSession(user_session_id.value) : session[user_session_id.value];
-  const signoutSession = currentSession === undefined ? {} : { [user_session_id.value]: currentSession };
+  const signoutSession = sessionForSignOut({
+    authSessionStore,
+    currentSession,
+    session,
+    userSessionId: user_session_id.value
+  });
   if (currentSession !== undefined) {
     const signedOut = await runSignOut(onSignOut, {
       authProvider: auth_provider?.value,
@@ -27928,5 +27969,5 @@ export {
   AuthIdentityConflictError
 };
 
-//# debugId=8FD44B77059462F264756E2164756E21
+//# debugId=D2040C8440D411EC64756E2164756E21
 //# sourceMappingURL=index.js.map