@absolutejs/auth 0.54.9 → 0.55.1

package/dist/index.d.ts

@@ -1,18 +1,5 @@
 import { Elysia } from 'elysia';
-import { agentAuthPlugin } from './agents/routes';
-import { protectRoutePlugin } from './routes/protectRoute';
-import { stepUpPlugin } from './routes/stepUp';
 import { AuthConfig } from './types';
-/** The minimal reference instance capturing ONLY the global, consumer-facing
- *  context `auth()` contributes: the `protectRoute` + step-up derives, typed by
- *  `UserType`. `auth()` also mounts ~28 route plugins, but their paths are
- *  CONFIGURABLE (`authorizeRoute`, `callbackRoute`, …), so Elysia keys those
- *  routes by `string` — there is no literal route type to expose, and inferring
- *  the whole chain trips TS7056 / a 2^N union blow-up. This typed context is the
- *  precise surface consumers actually use (`protectRoute((user) => …)` yields
- *  `UserType`); the routes are reached by path at runtime / direct fetch. */
-type MergeAuthContext<Base, Extra> = Base extends Elysia<infer Path, infer Singleton, infer Definitions, infer Metadata, infer Routes, infer Ephemeral, infer Volatile> ? Extra extends Elysia<infer ExtraPath, infer ExtraSingleton, infer ExtraDefinitions, infer ExtraMetadata, infer ExtraRoutes, infer ExtraEphemeral, infer ExtraVolatile> ? Elysia<Path & ExtraPath, Singleton & ExtraSingleton, Definitions & ExtraDefinitions, Metadata & ExtraMetadata, Routes & ExtraRoutes, Ephemeral & ExtraEphemeral, Volatile & ExtraVolatile> : never : never;
-export type AuthInstance<UserType> = MergeAuthContext<MergeAuthContext<ReturnType<typeof protectRoutePlugin<UserType>>, ReturnType<typeof stepUpPlugin<UserType>>>, ReturnType<typeof agentAuthPlugin>>;
 export declare const auth: <UserType>({ providersConfiguration, authorizeRoute, cookieSecure, callbackRoute, profileRoute, signoutRoute, statusRoute, refreshRoute, revokeRoute, cleanupIntervalMs, maxSessions, sessionDurationMs, authSessionStore, audit, credentials, customProviders, mfa, passwordless, lockout, sessions, sso, scim, apikeys, agentAuth, oidc, organizations, roles, portal, authorization, compliance, webauthn, webhooks, htmx, tracing, resolveAuthIntent, onAuthorizeSuccess, onAuthorizeError, onProfileSuccess, onProfileError, onCallbackSuccess, onLinkIdentity, onLinkIdentityConflict, onLinkConnector, onCallbackError, onStatus, onRefreshSuccess, onRefreshError, onSignOut, onRevocationSuccess, onRevocationError, onSessionCleanup }: AuthConfig<UserType>) => Promise<Elysia<"", {
     decorator: {};
     store: {
@@ -45,12 +32,7 @@ export declare const auth: <UserType>({ providersConfiguration, authorizeRoute,
 } & {
     decorator: {};
     store: {};
-    derive: {
-        readonly protectAgent: <AuthReturn, AuthFailReturn_2>(requiredScopes: string[], handleAuth: (principal: import(".").AgentPrincipal) => AuthReturn | Promise<AuthReturn>, handleAuthFail?: (error: {
-            code: "Forbidden" | "Unauthorized";
-            message: "Agent is not authenticated" | "Insufficient agent scopes";
-        }) => AuthFailReturn_2 | Promise<AuthFailReturn_2>) => Promise<Response | AuthReturn | NonNullable<Awaited<AuthFailReturn_2>>>;
-    };
+    derive: {};
     resolve: {};
 }, {
     typebox: {};
@@ -96,56 +78,26 @@ export declare const auth: <UserType>({ providersConfiguration, authorizeRoute,
     macro: {};
     macroFn: {};
     parser: {};
-    response: import("elysia").ExtractErrorFromHandle<{
-        readonly protectAgent: <AuthReturn, AuthFailReturn_2>(requiredScopes: string[], handleAuth: (principal: import(".").AgentPrincipal) => AuthReturn | Promise<AuthReturn>, handleAuthFail?: (error: {
-            code: "Forbidden" | "Unauthorized";
-            message: "Agent is not authenticated" | "Insufficient agent scopes";
-        }) => AuthFailReturn_2 | Promise<AuthFailReturn_2>) => Promise<Response | AuthReturn | NonNullable<Awaited<AuthFailReturn_2>>>;
-    }>;
+    response: {};
 }, {}, {
     derive: {};
     resolve: {};
     schema: {};
     standaloneSchema: {};
     response: {};
-}, {
+} & {
     derive: {};
     resolve: {};
     schema: {};
     standaloneSchema: {};
     response: {};
-}> | Elysia<"", {
-    decorator: {};
-    store: {
-        session: import("./types").SessionRecord<UserType>;
-        unregisteredSession: import("./types").UnregisteredSessionRecord;
-    };
-    derive: {
-        readonly protectRoute: <AuthReturn, AuthFailReturn>(handleAuth: (user: UserType) => AuthReturn | Promise<AuthReturn>, handleAuthFail?: ((error: {
-            readonly code: "Bad Request";
-            readonly message: "Cookies are missing";
-        } | {
-            readonly code: "Unauthorized";
-            readonly message: "User is not authenticated";
-        }) => AuthFailReturn) | undefined) => Promise<import("elysia").ElysiaCustomStatusResponse<"Bad Request", "Cookies are missing", 400> | import("elysia").ElysiaCustomStatusResponse<"Unauthorized", "User is not authenticated", 401> | AuthReturn | NonNullable<AuthFailReturn>>;
-    };
-    resolve: {};
-} & {
-    decorator: {};
-    store: {
-        session: import("./types").SessionRecord<UserType>;
-        unregisteredSession: import("./types").UnregisteredSessionRecord;
-    };
-    derive: {
-        readonly requireRecentAuth: <AuthReturn, AuthFailReturn_1>(maxAgeMs: number, handleAuth: (user: UserType) => AuthReturn | Promise<AuthReturn>, handleAuthFail?: ((error: {
-            readonly code: "Unauthorized";
-            readonly message: "Recent authentication required";
-        }) => AuthFailReturn_1) | undefined) => Promise<import("elysia").ElysiaCustomStatusResponse<"Unauthorized", "Recent authentication required", 401> | AuthReturn | NonNullable<AuthFailReturn_1>>;
-    };
+}, {
+    derive: {};
     resolve: {};
+    schema: {};
+    standaloneSchema: {};
+    response: {};
 } & {
-    decorator: {};
-    store: {};
     derive: {
         readonly protectAgent: <AuthReturn, AuthFailReturn_2>(requiredScopes: string[], handleAuth: (principal: import(".").AgentPrincipal) => AuthReturn | Promise<AuthReturn>, handleAuthFail?: (error: {
             code: "Forbidden" | "Unauthorized";
@@ -153,89 +105,17 @@ export declare const auth: <UserType>({ providersConfiguration, authorizeRoute,
         }) => AuthFailReturn_2 | Promise<AuthFailReturn_2>) => Promise<Response | AuthReturn | NonNullable<Awaited<AuthFailReturn_2>>>;
     };
     resolve: {};
-}, {
-    typebox: {};
-    error: {};
-}, {
-    schema: import("elysia").UnwrapRoute<{
-        cookie: import("@sinclair/typebox").TObject<{
-            user_session_id: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TTemplateLiteralSyntax<"${string}-${string}-${string}-${string}-${string}">>;
-        }>;
-    }, {}, "">;
-    standaloneSchema: {};
-    macro: {};
-    macroFn: {};
-    parser: {};
-    response: import("elysia").ExtractErrorFromHandle<{
-        readonly protectRoute: <AuthReturn, AuthFailReturn>(handleAuth: (user: UserType) => AuthReturn | Promise<AuthReturn>, handleAuthFail?: ((error: {
-            readonly code: "Bad Request";
-            readonly message: "Cookies are missing";
-        } | {
-            readonly code: "Unauthorized";
-            readonly message: "User is not authenticated";
-        }) => AuthFailReturn) | undefined) => Promise<import("elysia").ElysiaCustomStatusResponse<"Bad Request", "Cookies are missing", 400> | import("elysia").ElysiaCustomStatusResponse<"Unauthorized", "User is not authenticated", 401> | AuthReturn | NonNullable<AuthFailReturn>>;
-    }>;
-} & {
-    schema: import("elysia").UnwrapRoute<{
-        cookie: import("@sinclair/typebox").TObject<{
-            user_session_id: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TTemplateLiteralSyntax<"${string}-${string}-${string}-${string}-${string}">>;
-        }>;
-    }, {}, "">;
-    standaloneSchema: {};
-    macro: {};
-    macroFn: {};
-    parser: {};
-    response: import("elysia").ExtractErrorFromHandle<{
-        readonly requireRecentAuth: <AuthReturn, AuthFailReturn_1>(maxAgeMs: number, handleAuth: (user: UserType) => AuthReturn | Promise<AuthReturn>, handleAuthFail?: ((error: {
-            readonly code: "Unauthorized";
-            readonly message: "Recent authentication required";
-        }) => AuthFailReturn_1) | undefined) => Promise<import("elysia").ElysiaCustomStatusResponse<"Unauthorized", "Recent authentication required", 401> | AuthReturn | NonNullable<AuthFailReturn_1>>;
-    }>;
-} & {
     schema: {};
     standaloneSchema: {};
-    macro: {};
-    macroFn: {};
-    parser: {};
     response: import("elysia").ExtractErrorFromHandle<{
         readonly protectAgent: <AuthReturn, AuthFailReturn_2>(requiredScopes: string[], handleAuth: (principal: import(".").AgentPrincipal) => AuthReturn | Promise<AuthReturn>, handleAuthFail?: (error: {
             code: "Forbidden" | "Unauthorized";
             message: "Agent is not authenticated" | "Insufficient agent scopes";
         }) => AuthFailReturn_2 | Promise<AuthFailReturn_2>) => Promise<Response | AuthReturn | NonNullable<Awaited<AuthFailReturn_2>>>;
     }>;
-}, {
-    [x: string]: {
-        get: {
-            body: unknown;
-            params: {};
-            query: unknown;
-            headers: unknown;
-            response: {
-                200: {
-                    resource: string;
-                    scopes_supported: string[];
-                    resource_name?: string | undefined;
-                    resource_logo_uri?: string | undefined;
-                    authorization_servers: string[];
-                    bearer_methods_supported: string[];
-                };
-            };
-        };
-    };
-}, {
-    derive: {};
-    resolve: {};
-    schema: {};
-    standaloneSchema: {};
-    response: {};
-}, {
-    derive: {};
-    resolve: {};
-    schema: {};
-    standaloneSchema: {};
-    response: {};
 }>>;
 export * from './actions';
+export type { AuthInstance } from './authInstance';
 export * from './types';
 export * from './typebox';
 export * from './vault/config';
@@ -355,11 +235,14 @@ export * from './apikeys/types';
 export { apiKeysRoutes } from './apikeys/routes';
 export * from './agents/config';
 export * from './agents/types';
+export * from './agents/registration';
+export * from './agents/registrationClient';
+export * from './agents/idJag';
 export { agentAuthPlugin, agentAuthChallenge } from './agents/routes';
 export { resolveAgentPrincipal, agentHasScopes } from './agents/principal';
 export { createOidcAgentCredentialVerifier } from './agents/oidcAdapter';
-export { createInMemoryAgentDelegationStore, createInMemoryAgentRegistrationStore } from './agents/inMemoryStores';
-export { agentDelegationsTable, agentRegistrationsTable, createNeonAgentDelegationStore, createNeonAgentRegistrationStore, createPostgresAgentDelegationStore, createPostgresAgentRegistrationStore } from './agents/postgresStores';
+export { createInMemoryAgentDelegationStore, createInMemoryAgentIdentityRegistrationStore, createInMemoryAgentRegistrationStore } from './agents/inMemoryStores';
+export { agentDelegationsTable, agentIdentityRegistrationsTable, agentRegistrationsTable, createNeonAgentDelegationStore, createNeonAgentIdentityRegistrationStore, createNeonAgentRegistrationStore, createPostgresAgentDelegationStore, createPostgresAgentIdentityRegistrationStore, createPostgresAgentRegistrationStore } from './agents/postgresStores';
 export { createInMemoryAccessTokenStore, createInMemoryApiClientStore, createInMemoryApiKeyStore } from './apikeys/inMemoryStores';
 export { accessTokensTable, apiClientsTable, apiKeysTable, createNeonAccessTokenStore, createNeonApiClientStore, createNeonApiKeyStore, createPostgresAccessTokenStore, createPostgresApiClientStore, createPostgresApiKeyStore } from './apikeys/postgresStores';
 export * from './oidc/config';