@absolutejs/auth 0.55.2 → 0.55.4

package/dist/apikeys/routes.d.ts

@@ -46,9 +46,9 @@ export declare const apiKeysRoutes: ({ accessTokenStore, accessTokenTtlMs, apiCl
     [x: string]: {
         post: {
             body: {
-                client_id?: string | undefined;
-                scope?: string | undefined;
                 grant_type?: string | undefined;
+                scope?: string | undefined;
+                client_id?: string | undefined;
                 client_secret?: string | undefined;
             };
             params: {};

package/dist/authInstance.d.ts

@@ -1,12 +1,7 @@
-import type { Elysia } from 'elysia';
-import type { agentAuthContextPlugin } from './agents/context';
 import type { protectRoutePlugin } from './routes/protectRoute';
-import type { stepUpPlugin } from './routes/stepUp';
-/** Merge the stable context contributed by independent Auth plugins without
- * exposing the configurable route graph in consumer declarations. */
-type MergeAuthContext<Base, Extra> = Base extends Elysia<infer Path, infer Singleton, infer Definitions, infer Metadata, infer Routes, infer Ephemeral, infer Volatile> ? Extra extends Elysia<infer ExtraPath, infer ExtraSingleton, infer ExtraDefinitions, infer ExtraMetadata, infer ExtraRoutes, infer ExtraEphemeral, infer ExtraVolatile> ? Elysia<Path & ExtraPath, Singleton & ExtraSingleton, Definitions & ExtraDefinitions, Metadata & ExtraMetadata, Routes & ExtraRoutes, Ephemeral & ExtraEphemeral, Volatile & ExtraVolatile> : never : never;
 /** The consumer-facing context contributed by `auth()`. Configurable auth
  * routes are available at runtime but intentionally omitted from this type:
- * their user-defined paths cannot form useful literal route declarations. */
-export type AuthInstance<UserType> = MergeAuthContext<MergeAuthContext<ReturnType<typeof protectRoutePlugin<UserType>>, ReturnType<typeof stepUpPlugin<UserType>>>, ReturnType<typeof agentAuthContextPlugin>>;
-export {};
+ * their user-defined paths cannot form useful literal route declarations.
+ * Optional step-up and agent contexts remain available through their explicit
+ * plugins without multiplying the default application's Elysia type graph. */
+export type AuthInstance<UserType> = ReturnType<typeof protectRoutePlugin<UserType>>;

package/dist/authorization/protectPermission.d.ts

@@ -13,8 +13,8 @@ type PermissionFailError = {
 export declare const protectPermissionPlugin: <UserType>({ authSessionStore, emit, hasPermission }: AuthorizationPluginProps<UserType>) => Elysia<"", {
     decorator: {};
     store: {
-        session: import("..").SessionRecord<UserType>;
-        unregisteredSession: import("..").UnregisteredSessionRecord;
+        session: import("../session/internalData").InternalSessionRecord<UserType>;
+        unregisteredSession: import("../session/internalData").InternalUnregisteredSessionRecord;
     };
     derive: {
         readonly protectPermission: <AuthReturn, AuthFailReturn>(check: PermissionCheck, handleAuth: (user: UserType) => AuthReturn | Promise<AuthReturn>, handleAuthFail?: (error: PermissionFailError) => AuthFailReturn) => Promise<import("elysia").ElysiaCustomStatusResponse<"Bad Request", "Cookies are missing", 400> | import("elysia").ElysiaCustomStatusResponse<"Unauthorized", "User is not authenticated", 401> | AuthReturn | NonNullable<AuthFailReturn> | import("elysia").ElysiaCustomStatusResponse<"Forbidden", "Insufficient permissions", 403>>;

package/dist/compliance/routes.d.ts

@@ -3,8 +3,8 @@ import type { CompliancePluginProps } from './config';
 export declare const complianceRoutes: <UserType>({ authSessionStore, complianceRoute, deleteUserData, emit, exportUserData, getUserId }: CompliancePluginProps<UserType>) => Elysia<"", {
     decorator: {};
     store: {
-        session: import("..").SessionRecord<UserType>;
-        unregisteredSession: import("..").UnregisteredSessionRecord;
+        session: import("../session/internalData").InternalSessionRecord<UserType>;
+        unregisteredSession: import("../session/internalData").InternalUnregisteredSessionRecord;
     };
     derive: {};
     resolve: {};

package/dist/credentials/login.d.ts

@@ -3,8 +3,8 @@ import { type CredentialRouteProps } from './config';
 export declare const credentialsLogin: <UserType>({ authSessionStore, checkBreachesOnLogin, cookieSecure, credentialStore, getUserByEmail, isMfaRequired, lockoutGuard, loginRoute, onCredentialsLoginError, onCredentialsLoginSuccess, passwordVerifier, rehashOnLogin, requireEmailVerification, sessionDurationMs }: CredentialRouteProps<UserType>) => Elysia<"", {
     decorator: {};
     store: {
-        session: import("..").SessionRecord<UserType>;
-        unregisteredSession: import("..").UnregisteredSessionRecord;
+        session: import("../session/internalData").InternalSessionRecord<UserType>;
+        unregisteredSession: import("../session/internalData").InternalUnregisteredSessionRecord;
     };
     derive: {};
     resolve: {};
@@ -39,6 +39,10 @@ export declare const credentialsLogin: <UserType>({ authSessionStore, checkBreac
                     readonly passwordCompromised: boolean;
                     readonly status: "authenticated";
                 };
+                429: {
+                    readonly retryAfterMs: number | undefined;
+                    readonly status: "account_locked";
+                };
                 422: {
                     type: "validation";
                     on: string;
@@ -48,10 +52,6 @@ export declare const credentialsLogin: <UserType>({ authSessionStore, checkBreac
                     property?: string;
                     expected?: string;
                 };
-                429: {
-                    readonly retryAfterMs: number | undefined;
-                    readonly status: "account_locked";
-                };
             };
         };
     };

package/dist/credentials/register.d.ts

@@ -3,8 +3,8 @@ import { type CredentialRouteProps } from './config';
 export declare const credentialsRegister: <UserType>({ authSessionStore, cookieSecure, credentialStore, onCreateCredentialUser, onCredentialsLoginSuccess, onRegistrationSuccess, onSendEmail, passwordPolicy, registerRoute, requireEmailVerification, sessionDurationMs, verificationTokenDurationMs }: CredentialRouteProps<UserType>) => Elysia<"", {
     decorator: {};
     store: {
-        session: import("..").SessionRecord<UserType>;
-        unregisteredSession: import("..").UnregisteredSessionRecord;
+        session: import("../session/internalData").InternalSessionRecord<UserType>;
+        unregisteredSession: import("../session/internalData").InternalUnregisteredSessionRecord;
     };
     derive: {};
     resolve: {};

package/dist/credentials/routes.d.ts

@@ -3,8 +3,8 @@ import type { CredentialRouteProps } from './config';
 export declare const credentialRoutes: <UserType>(config: CredentialRouteProps<UserType>) => Elysia<"", {
     decorator: {};
     store: {
-        session: import("..").SessionRecord<UserType>;
-        unregisteredSession: import("..").UnregisteredSessionRecord;
+        session: import("../session/internalData").InternalSessionRecord<UserType>;
+        unregisteredSession: import("../session/internalData").InternalUnregisteredSessionRecord;
     };
     derive: {};
     resolve: {};
@@ -107,6 +107,10 @@ export declare const credentialRoutes: <UserType>(config: CredentialRouteProps<U
                     readonly passwordCompromised: boolean;
                     readonly status: "authenticated";
                 };
+                429: {
+                    readonly retryAfterMs: number | undefined;
+                    readonly status: "account_locked";
+                };
                 422: {
                     type: "validation";
                     on: string;
@@ -116,10 +120,6 @@ export declare const credentialRoutes: <UserType>(config: CredentialRouteProps<U
                     property?: string;
                     expected?: string;
                 };
-                429: {
-                    readonly retryAfterMs: number | undefined;
-                    readonly status: "account_locked";
-                };
             };
         };
     };

package/dist/htmx/routes.d.ts

@@ -6,8 +6,8 @@ export declare const createAuthHtmxRoutes: <UserType extends AuthHtmxUser>(confi
 }) => Elysia<"", {
     decorator: {};
     store: {
-        session: import("..").SessionRecord<UserType>;
-        unregisteredSession: import("..").UnregisteredSessionRecord;
+        session: import("../session/internalData").InternalSessionRecord<UserType>;
+        unregisteredSession: import("../session/internalData").InternalUnregisteredSessionRecord;
     };
     derive: {
         readonly protectRoute: <AuthReturn, AuthFailReturn>(handleAuth: (user: UserType) => AuthReturn | Promise<AuthReturn>, handleAuthFail?: ((error: {

package/dist/index.d.ts

@@ -3,8 +3,8 @@ import { AuthConfig } from './types';
 export declare const auth: <UserType>({ providersConfiguration, authorizeRoute, cookieSecure, callbackRoute, profileRoute, signoutRoute, statusRoute, refreshRoute, revokeRoute, cleanupIntervalMs, maxSessions, sessionDurationMs, authSessionStore, audit, credentials, customProviders, mfa, passwordless, lockout, sessions, sso, scim, apikeys, agentAuth, oidc, organizations, roles, portal, authorization, compliance, webauthn, webhooks, htmx, tracing, resolveAuthIntent, onAuthorizeSuccess, onAuthorizeError, onProfileSuccess, onProfileError, onCallbackSuccess, onLinkIdentity, onLinkIdentityConflict, onLinkConnector, onCallbackError, onStatus, onRefreshSuccess, onRefreshError, onSignOut, onRevocationSuccess, onRevocationError, onSessionCleanup }: AuthConfig<UserType>) => Promise<Elysia<"", {
     decorator: {};
     store: {
-        session: import("./types").SessionRecord<UserType>;
-        unregisteredSession: import("./types").UnregisteredSessionRecord;
+        session: import("./session/internalData").InternalSessionRecord<UserType>;
+        unregisteredSession: import("./session/internalData").InternalUnregisteredSessionRecord;
     };
     derive: {
         readonly protectRoute: <AuthReturn, AuthFailReturn>(handleAuth: (user: UserType) => AuthReturn | Promise<AuthReturn>, handleAuthFail?: ((error: {
@@ -16,24 +16,6 @@ export declare const auth: <UserType>({ providersConfiguration, authorizeRoute,
         }) => AuthFailReturn) | undefined) => Promise<import("elysia").ElysiaCustomStatusResponse<"Bad Request", "Cookies are missing", 400> | import("elysia").ElysiaCustomStatusResponse<"Unauthorized", "User is not authenticated", 401> | AuthReturn | NonNullable<AuthFailReturn>>;
     };
     resolve: {};
-} & {
-    decorator: {};
-    store: {
-        session: import("./types").SessionRecord<UserType>;
-        unregisteredSession: import("./types").UnregisteredSessionRecord;
-    };
-    derive: {
-        readonly requireRecentAuth: <AuthReturn, AuthFailReturn_1>(maxAgeMs: number, handleAuth: (user: UserType) => AuthReturn | Promise<AuthReturn>, handleAuthFail?: ((error: {
-            readonly code: "Unauthorized";
-            readonly message: "Recent authentication required";
-        }) => AuthFailReturn_1) | undefined) => Promise<import("elysia").ElysiaCustomStatusResponse<"Unauthorized", "Recent authentication required", 401> | AuthReturn | NonNullable<AuthFailReturn_1>>;
-    };
-    resolve: {};
-} & {
-    decorator: {};
-    store: {};
-    derive: {};
-    resolve: {};
 }, {
     typebox: {};
     error: {};
@@ -56,63 +38,18 @@ export declare const auth: <UserType>({ providersConfiguration, authorizeRoute,
             readonly message: "User is not authenticated";
         }) => AuthFailReturn) | undefined) => Promise<import("elysia").ElysiaCustomStatusResponse<"Bad Request", "Cookies are missing", 400> | import("elysia").ElysiaCustomStatusResponse<"Unauthorized", "User is not authenticated", 401> | AuthReturn | NonNullable<AuthFailReturn>>;
     }>;
-} & {
-    schema: import("elysia").UnwrapRoute<{
-        cookie: import("@sinclair/typebox").TObject<{
-            user_session_id: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TTemplateLiteralSyntax<"${string}-${string}-${string}-${string}-${string}">>;
-        }>;
-    }, {}, "">;
-    standaloneSchema: {};
-    macro: {};
-    macroFn: {};
-    parser: {};
-    response: import("elysia").ExtractErrorFromHandle<{
-        readonly requireRecentAuth: <AuthReturn, AuthFailReturn_1>(maxAgeMs: number, handleAuth: (user: UserType) => AuthReturn | Promise<AuthReturn>, handleAuthFail?: ((error: {
-            readonly code: "Unauthorized";
-            readonly message: "Recent authentication required";
-        }) => AuthFailReturn_1) | undefined) => Promise<import("elysia").ElysiaCustomStatusResponse<"Unauthorized", "Recent authentication required", 401> | AuthReturn | NonNullable<AuthFailReturn_1>>;
-    }>;
-} & {
-    schema: {};
-    standaloneSchema: {};
-    macro: {};
-    macroFn: {};
-    parser: {};
-    response: {};
 }, {}, {
     derive: {};
     resolve: {};
     schema: {};
     standaloneSchema: {};
     response: {};
-} & {
-    derive: {};
-    resolve: {};
-    schema: {};
-    standaloneSchema: {};
-    response: {};
 }, {
     derive: {};
     resolve: {};
     schema: {};
     standaloneSchema: {};
     response: {};
-} & {
-    derive: {
-        readonly protectAgent: <AuthReturn, AuthFailReturn_2>(requiredScopes: string[], handleAuth: (principal: import(".").AgentPrincipal) => AuthReturn | Promise<AuthReturn>, handleAuthFail?: (error: {
-            code: "Forbidden" | "Unauthorized";
-            message: "Agent is not authenticated" | "Insufficient agent scopes";
-        }) => AuthFailReturn_2 | Promise<AuthFailReturn_2>) => Promise<Response | AuthReturn | NonNullable<Awaited<AuthFailReturn_2>>>;
-    };
-    resolve: {};
-    schema: {};
-    standaloneSchema: {};
-    response: import("elysia").ExtractErrorFromHandle<{
-        readonly protectAgent: <AuthReturn, AuthFailReturn_2>(requiredScopes: string[], handleAuth: (principal: import(".").AgentPrincipal) => AuthReturn | Promise<AuthReturn>, handleAuthFail?: (error: {
-            code: "Forbidden" | "Unauthorized";
-            message: "Agent is not authenticated" | "Insufficient agent scopes";
-        }) => AuthFailReturn_2 | Promise<AuthFailReturn_2>) => Promise<Response | AuthReturn | NonNullable<Awaited<AuthFailReturn_2>>>;
-    }>;
 }>>;
 export * from './actions';
 export type { AuthInstance } from './authInstance';