@absolutejs/auth 0.55.0 → 0.55.1

package/README.md

@@ -1,5 +1,12 @@
 # Absolute Auth
 
+Server applications should import the primary authentication contract from
+`@absolutejs/auth/server`. This declaration-stable entry point exposes `auth`,
+session types, route protection, provider configuration, and the other core
+server utilities without loading declarations for every optional Auth feature.
+The root entry point remains available for applications that need the complete
+feature export surface.
+
 ## Overview
 
 Absolute Auth is a TypeScript-based authentication system that provides a comprehensive solution for handling user authentication in web applications. It supports multiple authentication providers and offers features such as authorization, callback handling, token refresh, token revocation, and session management.

package/dist/agents/index.js

@@ -1425,10 +1425,16 @@ var resolveAgentPrincipal = async (request, config) => {
 };
 // src/agents/routes.ts
 import { Elysia } from "elysia";
+var DELETE_CODE_POINT = 127;
+var HTTP_BAD_REQUEST = 400;
+var HTTP_FORBIDDEN = 403;
+var HTTP_OK = 200;
+var HTTP_UNAUTHORIZED = 401;
+var MINIMUM_PRINTABLE_CODE_POINT = 32;
 var quoteHeaderValue = (value) => {
   const printable = [...value].filter((character) => {
     const codePoint = character.codePointAt(0) ?? 0;
-    return codePoint >= 32 && codePoint !== 127;
+    return codePoint >= MINIMUM_PRINTABLE_CODE_POINT && codePoint !== DELETE_CODE_POINT;
   }).join("");
   return `"${printable.replace(/[\\"]/g, "\\$&")}"`;
 };
@@ -1461,9 +1467,9 @@ var failureResponse = (config, failure, requiredScopes) => new Response(JSON.str
       requiredScopes
     })
   },
-  status: failure.code === "Forbidden" ? 403 : 401
+  status: failure.code === "Forbidden" ? HTTP_FORBIDDEN : HTTP_UNAUTHORIZED
 });
-var json = (value, status = 200) => new Response(JSON.stringify(value), {
+var json = (value, status = HTTP_OK) => new Response(JSON.stringify(value), {
   headers: {
     "cache-control": "no-store",
     "content-type": "application/json"
@@ -1497,7 +1503,7 @@ var registrationResponse = (result) => {
       ...body,
       error: "interaction_required",
       error_description: "Authenticate at the service and confirm the account link."
-    }, 401);
+    }, HTTP_UNAUTHORIZED);
   }
   return json(body);
 };
@@ -1524,34 +1530,35 @@ var parseRegistrationInput = (value) => {
   return input;
 };
 var escapeHtml = (value) => value.replaceAll("&", "&amp;").replaceAll("<", "&lt;").replaceAll(">", "&gt;").replaceAll('"', "&quot;");
-var agentAuthPlugin = (config) => {
-  const plugin = new Elysia().derive(({ request }) => ({
-    protectAgent: async (requiredScopes, handleAuth, handleAuthFail) => {
-      if (config === undefined) {
-        const failure = {
-          code: "Unauthorized",
-          message: "Agent is not authenticated"
-        };
-        return await handleAuthFail?.(failure) ?? new Response(failure.message, { status: 401 });
-      }
-      const principal = await resolveAgentPrincipal(request, config);
-      if (principal === undefined) {
-        const failure = {
-          code: "Unauthorized",
-          message: "Agent is not authenticated"
-        };
-        return await handleAuthFail?.(failure) ?? failureResponse(config, failure, requiredScopes);
-      }
-      if (!agentHasScopes(principal, requiredScopes)) {
-        const failure = {
-          code: "Forbidden",
-          message: "Insufficient agent scopes"
-        };
-        return await handleAuthFail?.(failure) ?? failureResponse(config, failure, requiredScopes);
-      }
-      return handleAuth(principal);
+var agentAuthContextPlugin = (config) => new Elysia().derive(({ request }) => ({
+  protectAgent: async (requiredScopes, handleAuth, handleAuthFail) => {
+    if (config === undefined) {
+      const failure = {
+        code: "Unauthorized",
+        message: "Agent is not authenticated"
+      };
+      return await handleAuthFail?.(failure) ?? new Response(failure.message, { status: 401 });
     }
-  }));
+    const principal = await resolveAgentPrincipal(request, config);
+    if (principal === undefined) {
+      const failure = {
+        code: "Unauthorized",
+        message: "Agent is not authenticated"
+      };
+      return await handleAuthFail?.(failure) ?? failureResponse(config, failure, requiredScopes);
+    }
+    if (!agentHasScopes(principal, requiredScopes)) {
+      const failure = {
+        code: "Forbidden",
+        message: "Insufficient agent scopes"
+      };
+      return await handleAuthFail?.(failure) ?? failureResponse(config, failure, requiredScopes);
+    }
+    return handleAuth(principal);
+  }
+}));
+var agentAuthPlugin = (config) => {
+  const plugin = agentAuthContextPlugin(config);
   if (config === undefined)
     return plugin.as("global");
   if (config.agentRegistration === undefined) {
@@ -1582,11 +1589,11 @@ var agentAuthPlugin = (config) => {
   }).post(identityRoute, async ({ body }) => {
     const value = recordBody(body);
     if (value === undefined || typeof value.type !== "string") {
-      return json({ error: "invalid_request" }, 400);
+      return json({ error: "invalid_request" }, HTTP_BAD_REQUEST);
     }
     const input = parseRegistrationInput(value);
     if (input === undefined)
-      return json({ error: "invalid_request" }, 400);
+      return json({ error: "invalid_request" }, HTTP_BAD_REQUEST);
     const result = await startAgentRegistration(config, input);
     if ("error" in result) {
       return json({
@@ -1598,7 +1605,7 @@ var agentAuthPlugin = (config) => {
   }).post(claimRoute, async ({ body }) => {
     const value = recordBody(body);
     if (value === undefined || typeof value.claim_token !== "string" || typeof value.email !== "string") {
-      return json({ error: "invalid_request" }, 400);
+      return json({ error: "invalid_request" }, HTTP_BAD_REQUEST);
     }
     const result = await beginAgentClaim(config, {
       claimToken: value.claim_token,
@@ -1613,7 +1620,7 @@ var agentAuthPlugin = (config) => {
       value = Object.fromEntries(new URLSearchParams(body));
     }
     if (value === undefined || typeof value.claim_attempt_token !== "string" || typeof value.user_code !== "string") {
-      return json({ error: "invalid_request" }, 400);
+      return json({ error: "invalid_request" }, HTTP_BAD_REQUEST);
     }
     const result = await completeAgentClaim(config, {
       attemptToken: value.claim_attempt_token,
@@ -12826,5 +12833,5 @@ export {
   AGENT_CLAIM_GRANT_TYPE
 };
 
-//# debugId=4AABAB4CBDEE339264756E2164756E21
+//# debugId=05CB90C7C290284064756E2164756E21
 //# sourceMappingURL=index.js.map