@absolutejs/auth 0.55.6 → 0.55.7

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (215) hide show
  1. package/dist/index.d.ts +1 -0
  2. package/dist/index.js +120 -15
  3. package/dist/index.js.map +6 -5
  4. package/dist/server.js +119 -15
  5. package/dist/server.js.map +6 -5
  6. package/package.json +1 -1
  7. package/dist/abuse/captcha.d.ts +0 -11
  8. package/dist/abuse/config.d.ts +0 -29
  9. package/dist/actions.d.ts +0 -27
  10. package/dist/adaptive/config.d.ts +0 -34
  11. package/dist/adaptive/fingerprint.d.ts +0 -2
  12. package/dist/adaptive/inMemoryStores.d.ts +0 -3
  13. package/dist/adaptive/postgresStores.d.ts +0 -245
  14. package/dist/adaptive/types.d.ts +0 -62
  15. package/dist/agents/config.d.ts +0 -44
  16. package/dist/agents/context.d.ts +0 -46
  17. package/dist/agents/idJag.d.ts +0 -49
  18. package/dist/agents/inMemoryStores.d.ts +0 -4
  19. package/dist/agents/oidcAdapter.d.ts +0 -12
  20. package/dist/agents/postgresStores.d.ts +0 -569
  21. package/dist/agents/principal.d.ts +0 -4
  22. package/dist/agents/registration.d.ts +0 -162
  23. package/dist/agents/registrationClient.d.ts +0 -50
  24. package/dist/agents/routes.d.ts +0 -321
  25. package/dist/agents/types.d.ts +0 -129
  26. package/dist/apikeys/config.d.ts +0 -64
  27. package/dist/apikeys/inMemoryStores.d.ts +0 -4
  28. package/dist/apikeys/postgresStores.d.ts +0 -359
  29. package/dist/apikeys/routes.d.ts +0 -83
  30. package/dist/apikeys/types.d.ts +0 -53
  31. package/dist/audit/config.d.ts +0 -9
  32. package/dist/audit/export.d.ts +0 -2
  33. package/dist/audit/inMemoryAuditStore.d.ts +0 -2
  34. package/dist/audit/integrity.d.ts +0 -19
  35. package/dist/audit/postgresAuditStore.d.ts +0 -116
  36. package/dist/audit/siem.d.ts +0 -11
  37. package/dist/audit/types.d.ts +0 -19
  38. package/dist/audit/wrap.d.ts +0 -9
  39. package/dist/authContext.d.ts +0 -193
  40. package/dist/authorization/config.d.ts +0 -19
  41. package/dist/authorization/protectPermission.d.ts +0 -52
  42. package/dist/compliance/cipher.d.ts +0 -5
  43. package/dist/compliance/config.d.ts +0 -18
  44. package/dist/compliance/redaction.d.ts +0 -8
  45. package/dist/compliance/routes.d.ts +0 -89
  46. package/dist/constants.d.ts +0 -10
  47. package/dist/credentials/backgroundOps.d.ts +0 -45
  48. package/dist/credentials/config.d.ts +0 -68
  49. package/dist/credentials/emailValidation.d.ts +0 -9
  50. package/dist/credentials/emailVerification.d.ts +0 -83
  51. package/dist/credentials/import.d.ts +0 -34
  52. package/dist/credentials/inMemoryCredentialStore.d.ts +0 -2
  53. package/dist/credentials/legacyHashers.d.ts +0 -3
  54. package/dist/credentials/login.d.ts +0 -76
  55. package/dist/credentials/passwordPolicy.d.ts +0 -15
  56. package/dist/credentials/passwordReset.d.ts +0 -87
  57. package/dist/credentials/postgresCredentialStore.d.ts +0 -235
  58. package/dist/credentials/register.d.ts +0 -54
  59. package/dist/credentials/routes.d.ts +0 -201
  60. package/dist/credentials/types.d.ts +0 -26
  61. package/dist/crypto.d.ts +0 -32
  62. package/dist/errors.d.ts +0 -12
  63. package/dist/federation/tokenStore.d.ts +0 -29
  64. package/dist/fga/config.d.ts +0 -53
  65. package/dist/fga/inMemoryStores.d.ts +0 -3
  66. package/dist/fga/postgresStores.d.ts +0 -116
  67. package/dist/fga/redisCheckCache.d.ts +0 -11
  68. package/dist/fga/schema.d.ts +0 -2
  69. package/dist/fga/types.d.ts +0 -28
  70. package/dist/htmx/configuredRoutes.d.ts +0 -542
  71. package/dist/htmx/renderers.d.ts +0 -8
  72. package/dist/htmx/routes.d.ts +0 -514
  73. package/dist/htmx/types.d.ts +0 -129
  74. package/dist/linkedProviders/inMemoryStores.d.ts +0 -9
  75. package/dist/linkedProviders/neonStores.d.ts +0 -484
  76. package/dist/linkedProviders/oauthResolver.d.ts +0 -9
  77. package/dist/linkedProviders/resolver.d.ts +0 -22
  78. package/dist/lockout/config.d.ts +0 -17
  79. package/dist/lockout/inMemoryLockoutStore.d.ts +0 -2
  80. package/dist/lockout/postgresLockoutStore.d.ts +0 -71
  81. package/dist/lockout/redisLockoutStore.d.ts +0 -3
  82. package/dist/lockout/types.d.ts +0 -12
  83. package/dist/mfa/backupCodes.d.ts +0 -5
  84. package/dist/mfa/challenge.d.ts +0 -70
  85. package/dist/mfa/config.d.ts +0 -50
  86. package/dist/mfa/gate.d.ts +0 -2
  87. package/dist/mfa/inMemoryMfaStore.d.ts +0 -2
  88. package/dist/mfa/management.d.ts +0 -106
  89. package/dist/mfa/postgresMfaStore.d.ts +0 -206
  90. package/dist/mfa/rotation.d.ts +0 -17
  91. package/dist/mfa/routes.d.ts +0 -234
  92. package/dist/mfa/secret.d.ts +0 -2
  93. package/dist/mfa/sms.d.ts +0 -105
  94. package/dist/mfa/totp.d.ts +0 -91
  95. package/dist/mfa/types.d.ts +0 -23
  96. package/dist/migrations/generate.d.ts +0 -2
  97. package/dist/migrations/index.d.ts +0 -5
  98. package/dist/migrations/runner.d.ts +0 -13
  99. package/dist/migrations/types.d.ts +0 -14
  100. package/dist/oidc/clientAuth.d.ts +0 -19
  101. package/dist/oidc/clientIdMetadata.d.ts +0 -32
  102. package/dist/oidc/config.d.ts +0 -295
  103. package/dist/oidc/dpop.d.ts +0 -23
  104. package/dist/oidc/inMemoryStores.d.ts +0 -11
  105. package/dist/oidc/inMemoryVciStores.d.ts +0 -3
  106. package/dist/oidc/jar.d.ts +0 -14
  107. package/dist/oidc/keys.d.ts +0 -25
  108. package/dist/oidc/logout.d.ts +0 -38
  109. package/dist/oidc/mtls.d.ts +0 -11
  110. package/dist/oidc/par.d.ts +0 -28
  111. package/dist/oidc/postgresStores.d.ts +0 -1187
  112. package/dist/oidc/registration.d.ts +0 -138
  113. package/dist/oidc/routes.d.ts +0 -568
  114. package/dist/oidc/types.d.ts +0 -143
  115. package/dist/oidc/userinfo.d.ts +0 -21
  116. package/dist/oidc/vci.d.ts +0 -159
  117. package/dist/oidc/vciRoutes.d.ts +0 -92
  118. package/dist/organizations/config.d.ts +0 -46
  119. package/dist/organizations/inMemoryOrganizationStore.d.ts +0 -2
  120. package/dist/organizations/operations.d.ts +0 -39
  121. package/dist/organizations/postgresOrganizationStore.d.ts +0 -340
  122. package/dist/organizations/routes.d.ts +0 -299
  123. package/dist/organizations/types.d.ts +0 -45
  124. package/dist/passwordless/config.d.ts +0 -43
  125. package/dist/passwordless/inMemoryPasswordlessTokenStore.d.ts +0 -2
  126. package/dist/passwordless/postgresPasswordlessTokenStore.d.ts +0 -56
  127. package/dist/passwordless/routes.d.ts +0 -163
  128. package/dist/passwordless/types.d.ts +0 -9
  129. package/dist/pluginIdentity.d.ts +0 -2
  130. package/dist/portal/config.d.ts +0 -34
  131. package/dist/portal/inMemorySetupSessionStore.d.ts +0 -2
  132. package/dist/portal/operations.d.ts +0 -10
  133. package/dist/portal/postgresSetupSessionStore.d.ts +0 -116
  134. package/dist/portal/routes.d.ts +0 -160
  135. package/dist/portal/types.d.ts +0 -16
  136. package/dist/providers/clients.d.ts +0 -1818
  137. package/dist/providersFromEnv.d.ts +0 -19
  138. package/dist/roles/config.d.ts +0 -27
  139. package/dist/roles/inMemoryRoleStore.d.ts +0 -2
  140. package/dist/roles/operations.d.ts +0 -8
  141. package/dist/roles/postgresRoleStore.d.ts +0 -86
  142. package/dist/roles/resolver.d.ts +0 -17
  143. package/dist/roles/routes.d.ts +0 -106
  144. package/dist/roles/types.d.ts +0 -14
  145. package/dist/routes/authorize.d.ts +0 -102
  146. package/dist/routes/callback.d.ts +0 -64
  147. package/dist/routes/profile.d.ts +0 -70
  148. package/dist/routes/protectRoute.d.ts +0 -51
  149. package/dist/routes/refresh.d.ts +0 -74
  150. package/dist/routes/revoke.d.ts +0 -73
  151. package/dist/routes/sessions.d.ts +0 -103
  152. package/dist/routes/signout.d.ts +0 -70
  153. package/dist/routes/stepUp.d.ts +0 -48
  154. package/dist/routes/userStatus.d.ts +0 -72
  155. package/dist/scim/config.d.ts +0 -57
  156. package/dist/scim/extensions.d.ts +0 -30
  157. package/dist/scim/inMemoryScimTokenStore.d.ts +0 -2
  158. package/dist/scim/postgresScimTokenStore.d.ts +0 -86
  159. package/dist/scim/routes.d.ts +0 -366
  160. package/dist/scim/serialize.d.ts +0 -83
  161. package/dist/scim/types.d.ts +0 -54
  162. package/dist/session/access.d.ts +0 -33
  163. package/dist/session/anonymous.d.ts +0 -12
  164. package/dist/session/cleanup.d.ts +0 -45
  165. package/dist/session/impersonation.d.ts +0 -34
  166. package/dist/session/inMemoryStore.d.ts +0 -7
  167. package/dist/session/multiSession.d.ts +0 -27
  168. package/dist/session/neonStore.d.ts +0 -513
  169. package/dist/session/promote.d.ts +0 -23
  170. package/dist/session/redisStore.d.ts +0 -6
  171. package/dist/session/sessionsConfig.d.ts +0 -9
  172. package/dist/session/state.d.ts +0 -33
  173. package/dist/session/types.d.ts +0 -21
  174. package/dist/session/userSessions.d.ts +0 -19
  175. package/dist/sso/config.d.ts +0 -149
  176. package/dist/sso/discoveryRoute.d.ts +0 -63
  177. package/dist/sso/inMemorySamlServiceProviderStore.d.ts +0 -2
  178. package/dist/sso/inMemorySsoConnectionStore.d.ts +0 -2
  179. package/dist/sso/oidcRoutes.d.ts +0 -98
  180. package/dist/sso/postgresSamlServiceProviderStore.d.ts +0 -101
  181. package/dist/sso/postgresSsoConnectionStore.d.ts +0 -116
  182. package/dist/sso/samlIdpRoutes.d.ts +0 -139
  183. package/dist/sso/samlRoutes.d.ts +0 -179
  184. package/dist/sso/types.d.ts +0 -53
  185. package/dist/stores/postgres.d.ts +0 -5
  186. package/dist/stores/redis.d.ts +0 -5
  187. package/dist/telemetry/tracing.d.ts +0 -15
  188. package/dist/tenancy.d.ts +0 -9
  189. package/dist/typeGuards.d.ts +0 -6
  190. package/dist/typebox.d.ts +0 -4
  191. package/dist/types.d.ts +0 -421
  192. package/dist/utils.d.ts +0 -45
  193. package/dist/vault/config.d.ts +0 -20
  194. package/dist/vault/inMemoryVaultStore.d.ts +0 -2
  195. package/dist/vault/postgresVaultStore.d.ts +0 -86
  196. package/dist/vault/types.d.ts +0 -14
  197. package/dist/vc/inMemoryVpStores.d.ts +0 -2
  198. package/dist/vc/openid4vp.d.ts +0 -82
  199. package/dist/vc/postgresVcStores.d.ts +0 -300
  200. package/dist/vc/sdJwt.d.ts +0 -37
  201. package/dist/vc/statusList.d.ts +0 -29
  202. package/dist/vc/statusListRoutes.d.ts +0 -63
  203. package/dist/vc/vpRoutes.d.ts +0 -120
  204. package/dist/webauthn/adapter.d.ts +0 -59
  205. package/dist/webauthn/config.d.ts +0 -36
  206. package/dist/webauthn/inMemoryWebAuthnCredentialStore.d.ts +0 -2
  207. package/dist/webauthn/postgresWebAuthnCredentialStore.d.ts +0 -146
  208. package/dist/webauthn/routes.d.ts +0 -155
  209. package/dist/webauthn/types.d.ts +0 -17
  210. package/dist/webhooks/config.d.ts +0 -34
  211. package/dist/webhooks/dispatcher.d.ts +0 -3
  212. package/dist/webhooks/inMemoryStore.d.ts +0 -2
  213. package/dist/webhooks/postgresStore.d.ts +0 -116
  214. package/dist/webhooks/sign.d.ts +0 -11
  215. package/dist/webhooks/types.d.ts +0 -25
@@ -1,179 +0,0 @@
1
- import { Elysia } from 'elysia';
2
- import type { AuthSessionStore } from '../session/types';
3
- import type { SessionRecord } from '../types';
4
- import { type SamlAdapter, type SSOConfig } from './config';
5
- type SamlRoutesProps<UserType> = SSOConfig<UserType> & {
6
- authSessionStore?: AuthSessionStore<UserType>;
7
- cookieSecure?: boolean;
8
- samlAdapter: SamlAdapter;
9
- };
10
- export declare const samlSsoRoutes: <UserType>({ authSessionStore, cookieSecure, getSsoUser, onSsoCallbackError, onSsoCallbackSuccess, samlAdapter, sessionDurationMs, ssoConnectionStore, ssoRoute }: SamlRoutesProps<UserType>) => Elysia<"", {
11
- decorator: {};
12
- store: {
13
- session: SessionRecord<UserType>;
14
- unregisteredSession: import("..").UnregisteredSessionRecord;
15
- };
16
- derive: {};
17
- resolve: {};
18
- }, {
19
- typebox: {};
20
- error: {};
21
- }, {
22
- schema: {};
23
- standaloneSchema: {};
24
- macro: {};
25
- macroFn: {};
26
- parser: {};
27
- response: {};
28
- }, {
29
- [x: string]: {
30
- get: {
31
- body: unknown;
32
- params: {
33
- organizationId: string;
34
- };
35
- query: unknown;
36
- headers: unknown;
37
- response: {
38
- 404: "No SAML connection is configured for this organization";
39
- 200: Response;
40
- 422: {
41
- type: "validation";
42
- on: string;
43
- summary?: string;
44
- message?: string;
45
- found?: unknown;
46
- property?: string;
47
- expected?: string;
48
- };
49
- };
50
- };
51
- };
52
- } & {
53
- [x: string]: {
54
- post: {
55
- body: {
56
- RelayState?: string | undefined;
57
- SAMLResponse: string;
58
- };
59
- params: {
60
- organizationId: string;
61
- };
62
- query: unknown;
63
- headers: unknown;
64
- response: {
65
- 404: "No SAML connection is configured for this organization";
66
- 200: Response;
67
- 422: {
68
- type: "validation";
69
- on: string;
70
- summary?: string;
71
- message?: string;
72
- found?: unknown;
73
- property?: string;
74
- expected?: string;
75
- };
76
- 500: "SAML sign-in failed";
77
- };
78
- };
79
- };
80
- } & {
81
- [x: string]: {
82
- get: {
83
- body: unknown;
84
- params: {
85
- organizationId: string;
86
- };
87
- query: unknown;
88
- headers: unknown;
89
- response: {
90
- 404: "No SAML connection is configured for this organization";
91
- 200: Response;
92
- 422: {
93
- type: "validation";
94
- on: string;
95
- summary?: string;
96
- message?: string;
97
- found?: unknown;
98
- property?: string;
99
- expected?: string;
100
- };
101
- };
102
- };
103
- };
104
- } & {
105
- [x: string]: {
106
- get: {
107
- body: unknown;
108
- params: {
109
- organizationId: string;
110
- };
111
- query: unknown;
112
- headers: unknown;
113
- response: {
114
- 200: Response;
115
- 422: {
116
- type: "validation";
117
- on: string;
118
- summary?: string;
119
- message?: string;
120
- found?: unknown;
121
- property?: string;
122
- expected?: string;
123
- };
124
- };
125
- };
126
- };
127
- } & {
128
- [x: string]: {
129
- get: {
130
- body: unknown;
131
- params: {
132
- organizationId: string;
133
- };
134
- query: {
135
- RelayState?: string | undefined;
136
- SAMLResponse?: string | undefined;
137
- SAMLRequest?: string | undefined;
138
- SigAlg?: string | undefined;
139
- Signature?: string | undefined;
140
- };
141
- headers: unknown;
142
- response: {
143
- 400: "Missing SAMLRequest or SAMLResponse" | "Invalid SAML LogoutRequest";
144
- 501: "SAML Single Logout is not configured";
145
- 404: "No SAML connection is configured for this organization";
146
- 200: Response;
147
- 422: {
148
- type: "validation";
149
- on: string;
150
- summary?: string;
151
- message?: string;
152
- found?: unknown;
153
- property?: string;
154
- expected?: string;
155
- };
156
- 500: "SAML logout failed";
157
- };
158
- };
159
- };
160
- }, {
161
- derive: {};
162
- resolve: {};
163
- schema: {};
164
- standaloneSchema: {};
165
- response: {};
166
- }, {
167
- derive: {};
168
- resolve: {};
169
- schema: {};
170
- standaloneSchema: {};
171
- response: {};
172
- } & {
173
- derive: {};
174
- resolve: {};
175
- schema: {};
176
- standaloneSchema: {};
177
- response: {};
178
- }>;
179
- export {};
@@ -1,53 +0,0 @@
1
- import type { OrganizationId } from '../tenancy';
2
- export type SSOConnectionType = 'oidc' | 'saml';
3
- export type OidcConnectionConfig = {
4
- clientId: string;
5
- clientSecret: string;
6
- issuer: string;
7
- redirectUri: string;
8
- scopes: string[];
9
- };
10
- export type SamlConnectionConfig = {
11
- idpEntityId: string;
12
- idpSloUrl?: string;
13
- idpSsoUrl: string;
14
- idpX509Cert: string;
15
- };
16
- type SSOConnectionBase = {
17
- connectionId: string;
18
- createdAt: number;
19
- enabled: boolean;
20
- organizationId: OrganizationId;
21
- updatedAt: number;
22
- };
23
- export type OidcConnection = SSOConnectionBase & {
24
- config: OidcConnectionConfig;
25
- type: 'oidc';
26
- };
27
- export type SamlConnection = SSOConnectionBase & {
28
- config: SamlConnectionConfig;
29
- type: 'saml';
30
- };
31
- export type SSOConnection = OidcConnection | SamlConnection;
32
- export type SamlServiceProvider = {
33
- acsUrl: string;
34
- createdAt: number;
35
- entityId: string;
36
- nameIdFormat?: string;
37
- signingCert?: string;
38
- updatedAt: number;
39
- };
40
- export type SamlServiceProviderStore = {
41
- deleteServiceProvider: (entityId: string) => Promise<void>;
42
- findServiceProvider: (entityId: string) => Promise<SamlServiceProvider | undefined>;
43
- listServiceProviders: () => Promise<SamlServiceProvider[]>;
44
- saveServiceProvider: (sp: SamlServiceProvider) => Promise<void>;
45
- };
46
- export type SSOConnectionStore = {
47
- deleteConnection: (connectionId: string) => Promise<void>;
48
- getConnection: (connectionId: string) => Promise<SSOConnection | undefined>;
49
- getConnectionByOrganization: (organizationId: OrganizationId, type?: SSOConnectionType) => Promise<SSOConnection | undefined>;
50
- listConnectionsByOrganization: (organizationId: OrganizationId) => Promise<SSOConnection[]>;
51
- saveConnection: (connection: SSOConnection) => Promise<void>;
52
- };
53
- export {};
@@ -1,5 +0,0 @@
1
- import type { PgAsyncDatabase } from 'drizzle-orm/pg-core';
2
- export type AnyPgDatabase = PgAsyncDatabase<any, any>;
3
- export declare const createNeonDatabase: (databaseUrl: string) => import("drizzle-orm/neon-http").NeonHttpDatabase<import("drizzle-orm").EmptyRelations> & {
4
- $client: import("@neondatabase/serverless").NeonQueryFunction<false, false>;
5
- };
@@ -1,5 +0,0 @@
1
- export type RedisLike = {
2
- del: (key: string) => Promise<unknown>;
3
- get: (key: string) => Promise<string | null>;
4
- set: (key: string, value: string, ttlMs: number) => Promise<unknown>;
5
- };
@@ -1,15 +0,0 @@
1
- import type { Attributes, Span, TracerProvider } from '@opentelemetry/api';
2
- export type TracingConfig = {
3
- /** Plug in your `@opentelemetry/sdk-trace-node` (or `-web` / `-bun`) TracerProvider
4
- * here. When omitted, every `withSpan` call short-circuits and the package never
5
- * loads `@opentelemetry/api`. */
6
- tracerProvider: TracerProvider;
7
- /** Service name attribute attached to every span. Defaults to `@absolutejs/auth`. */
8
- serviceName?: string;
9
- };
10
- type SpanWork<Result> = (span: Span | undefined) => Promise<Result>;
11
- type WithSpanFn = <Result>(name: string, attributes: Attributes | undefined, work: SpanWork<Result>) => Promise<Result>;
12
- export declare const __resetTracingForTests: () => void;
13
- export declare const initTracing: (config: TracingConfig) => Promise<void>;
14
- export declare const withSpan: WithSpanFn;
15
- export {};
package/dist/tenancy.d.ts DELETED
@@ -1,9 +0,0 @@
1
- export type OrganizationId = string;
2
- export type WithOrganization<Resource> = Resource & {
3
- organizationId?: OrganizationId;
4
- };
5
- export declare const hasOrganizationScope: (value: {
6
- organizationId?: OrganizationId;
7
- }) => value is {
8
- organizationId: OrganizationId;
9
- };
@@ -1,6 +0,0 @@
1
- import { AuthIntent, StatusReturn, UserSessionId } from './types';
2
- export declare const isValidUser: <UserType>(user: unknown) => user is UserType;
3
- export declare const isAuthIntent: (value: unknown) => value is AuthIntent;
4
- export declare const isNonEmptyString: (str: string | null | undefined) => str is string;
5
- export declare const isStatusResponse: (value: unknown) => value is StatusReturn;
6
- export declare const isUserSessionId: (key: string) => key is UserSessionId;
package/dist/typebox.d.ts DELETED
@@ -1,4 +0,0 @@
1
- export declare const authClientOption: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
2
- export declare const authIntentOption: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"login">, import("@sinclair/typebox").TLiteral<"link_identity">, import("@sinclair/typebox").TLiteral<"link_connector">]>>;
3
- export declare const authProviderOption: import("@sinclair/typebox").TString;
4
- export declare const userSessionIdTypebox: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TTemplateLiteralSyntax<"${string}-${string}-${string}-${string}-${string}">>;