@absolutejs/auth 0.55.2 → 0.55.3

package/dist/apikeys/routes.d.ts

@@ -46,9 +46,9 @@ export declare const apiKeysRoutes: ({ accessTokenStore, accessTokenTtlMs, apiCl
     [x: string]: {
         post: {
             body: {
-                client_id?: string | undefined;
-                scope?: string | undefined;
                 grant_type?: string | undefined;
+                scope?: string | undefined;
+                client_id?: string | undefined;
                 client_secret?: string | undefined;
             };
             params: {};

package/dist/authInstance.d.ts

@@ -1,12 +1,7 @@
-import type { Elysia } from 'elysia';
-import type { agentAuthContextPlugin } from './agents/context';
 import type { protectRoutePlugin } from './routes/protectRoute';
-import type { stepUpPlugin } from './routes/stepUp';
-/** Merge the stable context contributed by independent Auth plugins without
- * exposing the configurable route graph in consumer declarations. */
-type MergeAuthContext<Base, Extra> = Base extends Elysia<infer Path, infer Singleton, infer Definitions, infer Metadata, infer Routes, infer Ephemeral, infer Volatile> ? Extra extends Elysia<infer ExtraPath, infer ExtraSingleton, infer ExtraDefinitions, infer ExtraMetadata, infer ExtraRoutes, infer ExtraEphemeral, infer ExtraVolatile> ? Elysia<Path & ExtraPath, Singleton & ExtraSingleton, Definitions & ExtraDefinitions, Metadata & ExtraMetadata, Routes & ExtraRoutes, Ephemeral & ExtraEphemeral, Volatile & ExtraVolatile> : never : never;
 /** The consumer-facing context contributed by `auth()`. Configurable auth
  * routes are available at runtime but intentionally omitted from this type:
- * their user-defined paths cannot form useful literal route declarations. */
-export type AuthInstance<UserType> = MergeAuthContext<MergeAuthContext<ReturnType<typeof protectRoutePlugin<UserType>>, ReturnType<typeof stepUpPlugin<UserType>>>, ReturnType<typeof agentAuthContextPlugin>>;
-export {};
+ * their user-defined paths cannot form useful literal route declarations.
+ * Optional step-up and agent contexts remain available through their explicit
+ * plugins without multiplying the default application's Elysia type graph. */
+export type AuthInstance<UserType> = ReturnType<typeof protectRoutePlugin<UserType>>;

package/dist/credentials/login.d.ts

@@ -39,6 +39,10 @@ export declare const credentialsLogin: <UserType>({ authSessionStore, checkBreac
                     readonly passwordCompromised: boolean;
                     readonly status: "authenticated";
                 };
+                429: {
+                    readonly retryAfterMs: number | undefined;
+                    readonly status: "account_locked";
+                };
                 422: {
                     type: "validation";
                     on: string;
@@ -48,10 +52,6 @@ export declare const credentialsLogin: <UserType>({ authSessionStore, checkBreac
                     property?: string;
                     expected?: string;
                 };
-                429: {
-                    readonly retryAfterMs: number | undefined;
-                    readonly status: "account_locked";
-                };
             };
         };
     };

package/dist/credentials/routes.d.ts

@@ -107,6 +107,10 @@ export declare const credentialRoutes: <UserType>(config: CredentialRouteProps<U
                     readonly passwordCompromised: boolean;
                     readonly status: "authenticated";
                 };
+                429: {
+                    readonly retryAfterMs: number | undefined;
+                    readonly status: "account_locked";
+                };
                 422: {
                     type: "validation";
                     on: string;
@@ -116,10 +120,6 @@ export declare const credentialRoutes: <UserType>(config: CredentialRouteProps<U
                     property?: string;
                     expected?: string;
                 };
-                429: {
-                    readonly retryAfterMs: number | undefined;
-                    readonly status: "account_locked";
-                };
             };
         };
     };

package/dist/index.d.ts

@@ -16,24 +16,6 @@ export declare const auth: <UserType>({ providersConfiguration, authorizeRoute,
         }) => AuthFailReturn) | undefined) => Promise<import("elysia").ElysiaCustomStatusResponse<"Bad Request", "Cookies are missing", 400> | import("elysia").ElysiaCustomStatusResponse<"Unauthorized", "User is not authenticated", 401> | AuthReturn | NonNullable<AuthFailReturn>>;
     };
     resolve: {};
-} & {
-    decorator: {};
-    store: {
-        session: import("./types").SessionRecord<UserType>;
-        unregisteredSession: import("./types").UnregisteredSessionRecord;
-    };
-    derive: {
-        readonly requireRecentAuth: <AuthReturn, AuthFailReturn_1>(maxAgeMs: number, handleAuth: (user: UserType) => AuthReturn | Promise<AuthReturn>, handleAuthFail?: ((error: {
-            readonly code: "Unauthorized";
-            readonly message: "Recent authentication required";
-        }) => AuthFailReturn_1) | undefined) => Promise<import("elysia").ElysiaCustomStatusResponse<"Unauthorized", "Recent authentication required", 401> | AuthReturn | NonNullable<AuthFailReturn_1>>;
-    };
-    resolve: {};
-} & {
-    decorator: {};
-    store: {};
-    derive: {};
-    resolve: {};
 }, {
     typebox: {};
     error: {};
@@ -56,63 +38,18 @@ export declare const auth: <UserType>({ providersConfiguration, authorizeRoute,
             readonly message: "User is not authenticated";
         }) => AuthFailReturn) | undefined) => Promise<import("elysia").ElysiaCustomStatusResponse<"Bad Request", "Cookies are missing", 400> | import("elysia").ElysiaCustomStatusResponse<"Unauthorized", "User is not authenticated", 401> | AuthReturn | NonNullable<AuthFailReturn>>;
     }>;
-} & {
-    schema: import("elysia").UnwrapRoute<{
-        cookie: import("@sinclair/typebox").TObject<{
-            user_session_id: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TTemplateLiteralSyntax<"${string}-${string}-${string}-${string}-${string}">>;
-        }>;
-    }, {}, "">;
-    standaloneSchema: {};
-    macro: {};
-    macroFn: {};
-    parser: {};
-    response: import("elysia").ExtractErrorFromHandle<{
-        readonly requireRecentAuth: <AuthReturn, AuthFailReturn_1>(maxAgeMs: number, handleAuth: (user: UserType) => AuthReturn | Promise<AuthReturn>, handleAuthFail?: ((error: {
-            readonly code: "Unauthorized";
-            readonly message: "Recent authentication required";
-        }) => AuthFailReturn_1) | undefined) => Promise<import("elysia").ElysiaCustomStatusResponse<"Unauthorized", "Recent authentication required", 401> | AuthReturn | NonNullable<AuthFailReturn_1>>;
-    }>;
-} & {
-    schema: {};
-    standaloneSchema: {};
-    macro: {};
-    macroFn: {};
-    parser: {};
-    response: {};
 }, {}, {
     derive: {};
     resolve: {};
     schema: {};
     standaloneSchema: {};
     response: {};
-} & {
-    derive: {};
-    resolve: {};
-    schema: {};
-    standaloneSchema: {};
-    response: {};
 }, {
     derive: {};
     resolve: {};
     schema: {};
     standaloneSchema: {};
     response: {};
-} & {
-    derive: {
-        readonly protectAgent: <AuthReturn, AuthFailReturn_2>(requiredScopes: string[], handleAuth: (principal: import(".").AgentPrincipal) => AuthReturn | Promise<AuthReturn>, handleAuthFail?: (error: {
-            code: "Forbidden" | "Unauthorized";
-            message: "Agent is not authenticated" | "Insufficient agent scopes";
-        }) => AuthFailReturn_2 | Promise<AuthFailReturn_2>) => Promise<Response | AuthReturn | NonNullable<Awaited<AuthFailReturn_2>>>;
-    };
-    resolve: {};
-    schema: {};
-    standaloneSchema: {};
-    response: import("elysia").ExtractErrorFromHandle<{
-        readonly protectAgent: <AuthReturn, AuthFailReturn_2>(requiredScopes: string[], handleAuth: (principal: import(".").AgentPrincipal) => AuthReturn | Promise<AuthReturn>, handleAuthFail?: (error: {
-            code: "Forbidden" | "Unauthorized";
-            message: "Agent is not authenticated" | "Insufficient agent scopes";
-        }) => AuthFailReturn_2 | Promise<AuthFailReturn_2>) => Promise<Response | AuthReturn | NonNullable<Awaited<AuthFailReturn_2>>>;
-    }>;
 }>>;
 export * from './actions';
 export type { AuthInstance } from './authInstance';

package/dist/mfa/routes.d.ts

@@ -138,10 +138,10 @@ export declare const mfaRoutes: <UserType>(config: MfaRouteProps<UserType>) => E
             response: {
                 400: "Phone must be in E.164 format";
                 401: "Authentication required";
-                501: "SMS MFA is not configured";
                 200: {
                     readonly phone: string;
                 };
+                501: "SMS MFA is not configured";
                 422: {
                     type: "validation";
                     on: string;
@@ -169,6 +169,7 @@ export declare const mfaRoutes: <UserType>(config: MfaRouteProps<UserType>) => E
                 200: {
                     readonly status: "enrolled";
                 };
+                429: "Too many attempts";
                 422: {
                     type: "validation";
                     on: string;
@@ -178,7 +179,6 @@ export declare const mfaRoutes: <UserType>(config: MfaRouteProps<UserType>) => E
                     property?: string;
                     expected?: string;
                 };
-                429: "Too many attempts";
             };
         };
     };

package/dist/mfa/sms.d.ts

@@ -40,10 +40,10 @@ export declare const mfaSmsRoutes: <UserType>({ authSessionStore, getUserId, mfa
             response: {
                 400: "Phone must be in E.164 format";
                 401: "Authentication required";
-                501: "SMS MFA is not configured";
                 200: {
                     readonly phone: string;
                 };
+                501: "SMS MFA is not configured";
                 422: {
                     type: "validation";
                     on: string;
@@ -71,6 +71,7 @@ export declare const mfaSmsRoutes: <UserType>({ authSessionStore, getUserId, mfa
                 200: {
                     readonly status: "enrolled";
                 };
+                429: "Too many attempts";
                 422: {
                     type: "validation";
                     on: string;
@@ -80,7 +81,6 @@ export declare const mfaSmsRoutes: <UserType>({ authSessionStore, getUserId, mfa
                     property?: string;
                     expected?: string;
                 };
-                429: "Too many attempts";
             };
         };
     };

package/dist/oidc/routes.d.ts

@@ -27,8 +27,8 @@ export declare const oidcProviderRoutes: <UserType>(config: OidcProviderConfig<U
             body: unknown;
             params: {};
             query: {
-                client_id?: string | undefined;
                 scope?: string | undefined;
+                client_id?: string | undefined;
                 nonce?: string | undefined;
                 claims?: string | undefined;
                 request?: string | undefined;
@@ -63,18 +63,18 @@ export declare const oidcProviderRoutes: <UserType>(config: OidcProviderConfig<U
     [x: string]: {
         post: {
             body: {
-                client_id?: string | undefined;
+                grant_type?: string | undefined;
+                claim_token?: string | undefined;
                 scope?: string | undefined;
-                audience?: string | undefined;
+                assertion?: string | undefined;
                 resource?: string | undefined;
+                client_id?: string | undefined;
+                audience?: string | undefined;
                 refresh_token?: string | undefined;
                 device_code?: string | undefined;
                 auth_req_id?: string | undefined;
-                grant_type?: string | undefined;
-                claim_token?: string | undefined;
-                assertion?: string | undefined;
-                code?: string | undefined;
                 client_secret?: string | undefined;
+                code?: string | undefined;
                 redirect_uri?: string | undefined;
                 client_assertion?: string | undefined;
                 client_assertion_type?: string | undefined;
@@ -104,12 +104,12 @@ export declare const oidcProviderRoutes: <UserType>(config: OidcProviderConfig<U
     [x: string]: {
         post: {
             body: {
-                client_id?: string | undefined;
                 scope?: string | undefined;
+                resource?: string | undefined;
+                client_id?: string | undefined;
                 nonce?: string | undefined;
                 audience?: string | undefined;
                 claims?: string | undefined;
-                resource?: string | undefined;
                 client_secret?: string | undefined;
                 redirect_uri?: string | undefined;
                 acr_values?: string | undefined;
@@ -199,8 +199,8 @@ export declare const oidcProviderRoutes: <UserType>(config: OidcProviderConfig<U
     [x: string]: {
         post: {
             body: {
-                client_id?: string | undefined;
                 scope?: string | undefined;
+                client_id?: string | undefined;
                 client_secret?: string | undefined;
                 login_hint?: string | undefined;
                 binding_message?: string | undefined;
@@ -228,8 +228,8 @@ export declare const oidcProviderRoutes: <UserType>(config: OidcProviderConfig<U
     [x: string]: {
         post: {
             body: {
-                client_id?: string | undefined;
                 scope?: string | undefined;
+                client_id?: string | undefined;
                 client_secret?: string | undefined;
             };
             params: {};
@@ -331,8 +331,8 @@ export declare const oidcProviderRoutes: <UserType>(config: OidcProviderConfig<U
     [x: string]: {
         post: {
             body: {
-                jwks?: any;
                 scope?: string | undefined;
+                jwks?: any;
                 backchannel_logout_uri?: string | undefined;
                 client_name?: string | undefined;
                 grant_types?: string[] | undefined;
@@ -391,8 +391,8 @@ export declare const oidcProviderRoutes: <UserType>(config: OidcProviderConfig<U
         ":clientId": {
             put: {
                 body: {
-                    jwks?: any;
                     scope?: string | undefined;
+                    jwks?: any;
                     backchannel_logout_uri?: string | undefined;
                     client_name?: string | undefined;
                     grant_types?: string[] | undefined;

package/dist/organizations/routes.d.ts

@@ -162,10 +162,10 @@ export declare const organizationRoutes: <UserType>({ authSessionStore, canCreat
                         response: {
                             401: "Authentication required";
                             403: "Cannot manage members";
-                            404: "Invitation not found";
                             200: {
                                 readonly revoked: string;
                             };
+                            404: "Invitation not found";
                             422: {
                                 type: "validation";
                                 on: string;

package/dist/portal/routes.d.ts

@@ -66,11 +66,11 @@ export declare const portalRoutes: ({ emit, onScimTokenCreated, onSsoConnectionC
                     response: {
                         401: "Invalid or expired setup link";
                         403: "This setup link cannot configure SAML";
-                        501: "SSO is not configured";
                         200: {
                             readonly configured: true;
                             readonly type: "saml";
                         };
+                        501: "SSO is not configured";
                         422: {
                             type: "validation";
                             on: string;
@@ -103,11 +103,11 @@ export declare const portalRoutes: ({ emit, onScimTokenCreated, onSsoConnectionC
                     response: {
                         401: "Invalid or expired setup link";
                         403: "This setup link cannot configure OIDC";
-                        501: "SSO is not configured";
                         200: {
                             readonly configured: true;
                             readonly type: "oidc";
                         };
+                        501: "SSO is not configured";
                         422: {
                             type: "validation";
                             on: string;
@@ -134,12 +134,12 @@ export declare const portalRoutes: ({ emit, onScimTokenCreated, onSsoConnectionC
                     response: {
                         401: "Invalid or expired setup link";
                         403: "This setup link cannot configure SCIM";
-                        501: "SCIM is not configured";
                         200: {
                             readonly baseUrl: `${string}/${string}`;
                             readonly token: string;
                             readonly tokenId: string;
                         };
+                        501: "SCIM is not configured";
                     };
                 };
             };

package/dist/roles/routes.d.ts

@@ -66,10 +66,10 @@ export declare const roleRoutes: <UserType>({ authSessionStore, canManageRoles,
                         response: {
                             401: "Authentication required";
                             403: "Cannot manage roles";
-                            404: "Membership not found";
                             200: {
                                 readonly roles: string[];
                             };
+                            404: "Membership not found";
                             422: {
                                 type: "validation";
                                 on: string;

package/dist/routes/refresh.d.ts

@@ -37,8 +37,8 @@ export declare const refresh: <UserType>({ authSessionStore, clientProviders, re
             response: {
                 400: "Cookies are missing" | "Invalid provider" | "No refresh token found";
                 401: "Provider is required" | "Client provider not found" | "Client variant is required" | "Client variant not found" | "No auth provider found" | "No user session found";
-                501: "Provider is not refreshable";
                 200: Response;
+                501: "Provider is not refreshable";
                 422: {
                     type: "validation";
                     on: string;

package/dist/routes/revoke.d.ts

@@ -36,8 +36,8 @@ export declare const revoke: <UserType>({ authSessionStore, clientProviders, rev
             response: {
                 400: "Cookies are missing" | "Invalid provider" | "Session has no access token to revoke";
                 401: "Provider is required" | "Client provider not found" | "Client variant is required" | "Client variant not found" | "No auth provider found" | "No user session found";
-                501: "Provider does not support revocation";
                 200: Response;
+                501: "Provider does not support revocation";
                 422: {
                     type: "validation";
                     on: string;

package/dist/routes/sessions.d.ts

@@ -34,10 +34,10 @@ export declare const sessionRoutes: <UserType>({ authSessionStore, getUserId, se
             headers: unknown;
             response: {
                 401: "Authentication required";
-                501: "Session management requires an authSessionStore";
                 200: {
                     readonly sessions: SessionSummary[];
                 };
+                501: "Session management requires an authSessionStore";
                 422: {
                     type: "validation";
                     on: string;
@@ -63,11 +63,11 @@ export declare const sessionRoutes: <UserType>({ authSessionStore, getUserId, se
                 response: {
                     400: "Invalid session id";
                     401: "Authentication required";
-                    501: "Session management requires an authSessionStore";
-                    404: "Session not found";
                     200: {
                         readonly revoked: `${string}-${string}-${string}-${string}-${string}`;
                     };
+                    501: "Session management requires an authSessionStore";
+                    404: "Session not found";
                     422: {
                         type: "validation";
                         on: string;

package/dist/sso/discoveryRoute.d.ts

@@ -33,8 +33,8 @@ export declare const ssoDiscoveryRoute: ({ getOrganizationByEmailDomain, ssoConn
             headers: unknown;
             response: {
                 400: "An \"email\" query parameter is required" | "A valid email address is required";
-                404: "No SSO organization is configured for this email domain" | "No SSO connection is configured for this organization";
                 200: Response;
+                404: "No SSO organization is configured for this email domain" | "No SSO connection is configured for this organization";
                 422: {
                     type: "validation";
                     on: string;

package/dist/sso/oidcRoutes.d.ts

@@ -33,8 +33,8 @@ export declare const oidcSsoRoutes: <UserType>({ authSessionStore, cookieSecure,
             query: unknown;
             headers: unknown;
             response: {
-                404: "No OIDC connection is configured for this organization";
                 200: Response;
+                404: "No OIDC connection is configured for this organization";
                 422: {
                     type: "validation";
                     on: string;
@@ -61,8 +61,8 @@ export declare const oidcSsoRoutes: <UserType>({ authSessionStore, cookieSecure,
             headers: unknown;
             response: {
                 400: "SSO session cookies are missing" | "Invalid SSO callback request" | "SSO organization mismatch" | "OIDC token response is missing an id_token";
-                404: "No OIDC connection is configured for this organization";
                 200: Response;
+                404: "No OIDC connection is configured for this organization";
                 422: {
                     type: "validation";
                     on: string;

package/dist/sso/samlRoutes.d.ts

@@ -35,8 +35,8 @@ export declare const samlSsoRoutes: <UserType>({ authSessionStore, cookieSecure,
             query: unknown;
             headers: unknown;
             response: {
-                404: "No SAML connection is configured for this organization";
                 200: Response;
+                404: "No SAML connection is configured for this organization";
                 422: {
                     type: "validation";
                     on: string;
@@ -62,8 +62,8 @@ export declare const samlSsoRoutes: <UserType>({ authSessionStore, cookieSecure,
             query: unknown;
             headers: unknown;
             response: {
-                404: "No SAML connection is configured for this organization";
                 200: Response;
+                404: "No SAML connection is configured for this organization";
                 422: {
                     type: "validation";
                     on: string;
@@ -87,8 +87,8 @@ export declare const samlSsoRoutes: <UserType>({ authSessionStore, cookieSecure,
             query: unknown;
             headers: unknown;
             response: {
-                404: "No SAML connection is configured for this organization";
                 200: Response;
+                404: "No SAML connection is configured for this organization";
                 422: {
                     type: "validation";
                     on: string;
@@ -141,9 +141,9 @@ export declare const samlSsoRoutes: <UserType>({ authSessionStore, cookieSecure,
             headers: unknown;
             response: {
                 400: "Missing SAMLRequest or SAMLResponse" | "Invalid SAML LogoutRequest";
+                200: Response;
                 501: "SAML Single Logout is not configured";
                 404: "No SAML connection is configured for this organization";
-                200: Response;
                 422: {
                     type: "validation";
                     on: string;

package/package.json

@@ -1,5 +1,5 @@
 {
-	"version": "0.55.2",
+	"version": "0.55.3",
 	"name": "@absolutejs/auth",
 	"description": "An authorization library for absolutejs",
 	"repository": {