@absolutejs/auth 0.55.6 → 0.55.7

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (215) hide show
  1. package/dist/index.d.ts +1 -0
  2. package/dist/index.js +120 -15
  3. package/dist/index.js.map +6 -5
  4. package/dist/server.js +119 -15
  5. package/dist/server.js.map +6 -5
  6. package/package.json +1 -1
  7. package/dist/abuse/captcha.d.ts +0 -11
  8. package/dist/abuse/config.d.ts +0 -29
  9. package/dist/actions.d.ts +0 -27
  10. package/dist/adaptive/config.d.ts +0 -34
  11. package/dist/adaptive/fingerprint.d.ts +0 -2
  12. package/dist/adaptive/inMemoryStores.d.ts +0 -3
  13. package/dist/adaptive/postgresStores.d.ts +0 -245
  14. package/dist/adaptive/types.d.ts +0 -62
  15. package/dist/agents/config.d.ts +0 -44
  16. package/dist/agents/context.d.ts +0 -46
  17. package/dist/agents/idJag.d.ts +0 -49
  18. package/dist/agents/inMemoryStores.d.ts +0 -4
  19. package/dist/agents/oidcAdapter.d.ts +0 -12
  20. package/dist/agents/postgresStores.d.ts +0 -569
  21. package/dist/agents/principal.d.ts +0 -4
  22. package/dist/agents/registration.d.ts +0 -162
  23. package/dist/agents/registrationClient.d.ts +0 -50
  24. package/dist/agents/routes.d.ts +0 -321
  25. package/dist/agents/types.d.ts +0 -129
  26. package/dist/apikeys/config.d.ts +0 -64
  27. package/dist/apikeys/inMemoryStores.d.ts +0 -4
  28. package/dist/apikeys/postgresStores.d.ts +0 -359
  29. package/dist/apikeys/routes.d.ts +0 -83
  30. package/dist/apikeys/types.d.ts +0 -53
  31. package/dist/audit/config.d.ts +0 -9
  32. package/dist/audit/export.d.ts +0 -2
  33. package/dist/audit/inMemoryAuditStore.d.ts +0 -2
  34. package/dist/audit/integrity.d.ts +0 -19
  35. package/dist/audit/postgresAuditStore.d.ts +0 -116
  36. package/dist/audit/siem.d.ts +0 -11
  37. package/dist/audit/types.d.ts +0 -19
  38. package/dist/audit/wrap.d.ts +0 -9
  39. package/dist/authContext.d.ts +0 -193
  40. package/dist/authorization/config.d.ts +0 -19
  41. package/dist/authorization/protectPermission.d.ts +0 -52
  42. package/dist/compliance/cipher.d.ts +0 -5
  43. package/dist/compliance/config.d.ts +0 -18
  44. package/dist/compliance/redaction.d.ts +0 -8
  45. package/dist/compliance/routes.d.ts +0 -89
  46. package/dist/constants.d.ts +0 -10
  47. package/dist/credentials/backgroundOps.d.ts +0 -45
  48. package/dist/credentials/config.d.ts +0 -68
  49. package/dist/credentials/emailValidation.d.ts +0 -9
  50. package/dist/credentials/emailVerification.d.ts +0 -83
  51. package/dist/credentials/import.d.ts +0 -34
  52. package/dist/credentials/inMemoryCredentialStore.d.ts +0 -2
  53. package/dist/credentials/legacyHashers.d.ts +0 -3
  54. package/dist/credentials/login.d.ts +0 -76
  55. package/dist/credentials/passwordPolicy.d.ts +0 -15
  56. package/dist/credentials/passwordReset.d.ts +0 -87
  57. package/dist/credentials/postgresCredentialStore.d.ts +0 -235
  58. package/dist/credentials/register.d.ts +0 -54
  59. package/dist/credentials/routes.d.ts +0 -201
  60. package/dist/credentials/types.d.ts +0 -26
  61. package/dist/crypto.d.ts +0 -32
  62. package/dist/errors.d.ts +0 -12
  63. package/dist/federation/tokenStore.d.ts +0 -29
  64. package/dist/fga/config.d.ts +0 -53
  65. package/dist/fga/inMemoryStores.d.ts +0 -3
  66. package/dist/fga/postgresStores.d.ts +0 -116
  67. package/dist/fga/redisCheckCache.d.ts +0 -11
  68. package/dist/fga/schema.d.ts +0 -2
  69. package/dist/fga/types.d.ts +0 -28
  70. package/dist/htmx/configuredRoutes.d.ts +0 -542
  71. package/dist/htmx/renderers.d.ts +0 -8
  72. package/dist/htmx/routes.d.ts +0 -514
  73. package/dist/htmx/types.d.ts +0 -129
  74. package/dist/linkedProviders/inMemoryStores.d.ts +0 -9
  75. package/dist/linkedProviders/neonStores.d.ts +0 -484
  76. package/dist/linkedProviders/oauthResolver.d.ts +0 -9
  77. package/dist/linkedProviders/resolver.d.ts +0 -22
  78. package/dist/lockout/config.d.ts +0 -17
  79. package/dist/lockout/inMemoryLockoutStore.d.ts +0 -2
  80. package/dist/lockout/postgresLockoutStore.d.ts +0 -71
  81. package/dist/lockout/redisLockoutStore.d.ts +0 -3
  82. package/dist/lockout/types.d.ts +0 -12
  83. package/dist/mfa/backupCodes.d.ts +0 -5
  84. package/dist/mfa/challenge.d.ts +0 -70
  85. package/dist/mfa/config.d.ts +0 -50
  86. package/dist/mfa/gate.d.ts +0 -2
  87. package/dist/mfa/inMemoryMfaStore.d.ts +0 -2
  88. package/dist/mfa/management.d.ts +0 -106
  89. package/dist/mfa/postgresMfaStore.d.ts +0 -206
  90. package/dist/mfa/rotation.d.ts +0 -17
  91. package/dist/mfa/routes.d.ts +0 -234
  92. package/dist/mfa/secret.d.ts +0 -2
  93. package/dist/mfa/sms.d.ts +0 -105
  94. package/dist/mfa/totp.d.ts +0 -91
  95. package/dist/mfa/types.d.ts +0 -23
  96. package/dist/migrations/generate.d.ts +0 -2
  97. package/dist/migrations/index.d.ts +0 -5
  98. package/dist/migrations/runner.d.ts +0 -13
  99. package/dist/migrations/types.d.ts +0 -14
  100. package/dist/oidc/clientAuth.d.ts +0 -19
  101. package/dist/oidc/clientIdMetadata.d.ts +0 -32
  102. package/dist/oidc/config.d.ts +0 -295
  103. package/dist/oidc/dpop.d.ts +0 -23
  104. package/dist/oidc/inMemoryStores.d.ts +0 -11
  105. package/dist/oidc/inMemoryVciStores.d.ts +0 -3
  106. package/dist/oidc/jar.d.ts +0 -14
  107. package/dist/oidc/keys.d.ts +0 -25
  108. package/dist/oidc/logout.d.ts +0 -38
  109. package/dist/oidc/mtls.d.ts +0 -11
  110. package/dist/oidc/par.d.ts +0 -28
  111. package/dist/oidc/postgresStores.d.ts +0 -1187
  112. package/dist/oidc/registration.d.ts +0 -138
  113. package/dist/oidc/routes.d.ts +0 -568
  114. package/dist/oidc/types.d.ts +0 -143
  115. package/dist/oidc/userinfo.d.ts +0 -21
  116. package/dist/oidc/vci.d.ts +0 -159
  117. package/dist/oidc/vciRoutes.d.ts +0 -92
  118. package/dist/organizations/config.d.ts +0 -46
  119. package/dist/organizations/inMemoryOrganizationStore.d.ts +0 -2
  120. package/dist/organizations/operations.d.ts +0 -39
  121. package/dist/organizations/postgresOrganizationStore.d.ts +0 -340
  122. package/dist/organizations/routes.d.ts +0 -299
  123. package/dist/organizations/types.d.ts +0 -45
  124. package/dist/passwordless/config.d.ts +0 -43
  125. package/dist/passwordless/inMemoryPasswordlessTokenStore.d.ts +0 -2
  126. package/dist/passwordless/postgresPasswordlessTokenStore.d.ts +0 -56
  127. package/dist/passwordless/routes.d.ts +0 -163
  128. package/dist/passwordless/types.d.ts +0 -9
  129. package/dist/pluginIdentity.d.ts +0 -2
  130. package/dist/portal/config.d.ts +0 -34
  131. package/dist/portal/inMemorySetupSessionStore.d.ts +0 -2
  132. package/dist/portal/operations.d.ts +0 -10
  133. package/dist/portal/postgresSetupSessionStore.d.ts +0 -116
  134. package/dist/portal/routes.d.ts +0 -160
  135. package/dist/portal/types.d.ts +0 -16
  136. package/dist/providers/clients.d.ts +0 -1818
  137. package/dist/providersFromEnv.d.ts +0 -19
  138. package/dist/roles/config.d.ts +0 -27
  139. package/dist/roles/inMemoryRoleStore.d.ts +0 -2
  140. package/dist/roles/operations.d.ts +0 -8
  141. package/dist/roles/postgresRoleStore.d.ts +0 -86
  142. package/dist/roles/resolver.d.ts +0 -17
  143. package/dist/roles/routes.d.ts +0 -106
  144. package/dist/roles/types.d.ts +0 -14
  145. package/dist/routes/authorize.d.ts +0 -102
  146. package/dist/routes/callback.d.ts +0 -64
  147. package/dist/routes/profile.d.ts +0 -70
  148. package/dist/routes/protectRoute.d.ts +0 -51
  149. package/dist/routes/refresh.d.ts +0 -74
  150. package/dist/routes/revoke.d.ts +0 -73
  151. package/dist/routes/sessions.d.ts +0 -103
  152. package/dist/routes/signout.d.ts +0 -70
  153. package/dist/routes/stepUp.d.ts +0 -48
  154. package/dist/routes/userStatus.d.ts +0 -72
  155. package/dist/scim/config.d.ts +0 -57
  156. package/dist/scim/extensions.d.ts +0 -30
  157. package/dist/scim/inMemoryScimTokenStore.d.ts +0 -2
  158. package/dist/scim/postgresScimTokenStore.d.ts +0 -86
  159. package/dist/scim/routes.d.ts +0 -366
  160. package/dist/scim/serialize.d.ts +0 -83
  161. package/dist/scim/types.d.ts +0 -54
  162. package/dist/session/access.d.ts +0 -33
  163. package/dist/session/anonymous.d.ts +0 -12
  164. package/dist/session/cleanup.d.ts +0 -45
  165. package/dist/session/impersonation.d.ts +0 -34
  166. package/dist/session/inMemoryStore.d.ts +0 -7
  167. package/dist/session/multiSession.d.ts +0 -27
  168. package/dist/session/neonStore.d.ts +0 -513
  169. package/dist/session/promote.d.ts +0 -23
  170. package/dist/session/redisStore.d.ts +0 -6
  171. package/dist/session/sessionsConfig.d.ts +0 -9
  172. package/dist/session/state.d.ts +0 -33
  173. package/dist/session/types.d.ts +0 -21
  174. package/dist/session/userSessions.d.ts +0 -19
  175. package/dist/sso/config.d.ts +0 -149
  176. package/dist/sso/discoveryRoute.d.ts +0 -63
  177. package/dist/sso/inMemorySamlServiceProviderStore.d.ts +0 -2
  178. package/dist/sso/inMemorySsoConnectionStore.d.ts +0 -2
  179. package/dist/sso/oidcRoutes.d.ts +0 -98
  180. package/dist/sso/postgresSamlServiceProviderStore.d.ts +0 -101
  181. package/dist/sso/postgresSsoConnectionStore.d.ts +0 -116
  182. package/dist/sso/samlIdpRoutes.d.ts +0 -139
  183. package/dist/sso/samlRoutes.d.ts +0 -179
  184. package/dist/sso/types.d.ts +0 -53
  185. package/dist/stores/postgres.d.ts +0 -5
  186. package/dist/stores/redis.d.ts +0 -5
  187. package/dist/telemetry/tracing.d.ts +0 -15
  188. package/dist/tenancy.d.ts +0 -9
  189. package/dist/typeGuards.d.ts +0 -6
  190. package/dist/typebox.d.ts +0 -4
  191. package/dist/types.d.ts +0 -421
  192. package/dist/utils.d.ts +0 -45
  193. package/dist/vault/config.d.ts +0 -20
  194. package/dist/vault/inMemoryVaultStore.d.ts +0 -2
  195. package/dist/vault/postgresVaultStore.d.ts +0 -86
  196. package/dist/vault/types.d.ts +0 -14
  197. package/dist/vc/inMemoryVpStores.d.ts +0 -2
  198. package/dist/vc/openid4vp.d.ts +0 -82
  199. package/dist/vc/postgresVcStores.d.ts +0 -300
  200. package/dist/vc/sdJwt.d.ts +0 -37
  201. package/dist/vc/statusList.d.ts +0 -29
  202. package/dist/vc/statusListRoutes.d.ts +0 -63
  203. package/dist/vc/vpRoutes.d.ts +0 -120
  204. package/dist/webauthn/adapter.d.ts +0 -59
  205. package/dist/webauthn/config.d.ts +0 -36
  206. package/dist/webauthn/inMemoryWebAuthnCredentialStore.d.ts +0 -2
  207. package/dist/webauthn/postgresWebAuthnCredentialStore.d.ts +0 -146
  208. package/dist/webauthn/routes.d.ts +0 -155
  209. package/dist/webauthn/types.d.ts +0 -17
  210. package/dist/webhooks/config.d.ts +0 -34
  211. package/dist/webhooks/dispatcher.d.ts +0 -3
  212. package/dist/webhooks/inMemoryStore.d.ts +0 -2
  213. package/dist/webhooks/postgresStore.d.ts +0 -116
  214. package/dist/webhooks/sign.d.ts +0 -11
  215. package/dist/webhooks/types.d.ts +0 -25
@@ -1,116 +0,0 @@
1
- import { type AnyPgDatabase } from '../stores/postgres';
2
- import type { AuditSink } from './types';
3
- export declare const auditEventsTable: import("drizzle-orm/pg-core").PgTableWithColumns<{
4
- name: "auth_audit_events";
5
- schema: undefined;
6
- columns: {
7
- at_ms: import("drizzle-orm/pg-core").PgBuildColumn<"auth_audit_events", import("drizzle-orm/pg-core").SetNotNull<import("drizzle-orm/pg-core").PgBigInt53Builder>, {
8
- name: string;
9
- tableName: "auth_audit_events";
10
- dataType: "number int53";
11
- data: number;
12
- driverParam: string | number;
13
- notNull: true;
14
- hasDefault: false;
15
- isPrimaryKey: false;
16
- isAutoincrement: false;
17
- hasRuntimeDefault: false;
18
- enumValues: undefined;
19
- identity: undefined;
20
- generated: undefined;
21
- }>;
22
- id: import("drizzle-orm/pg-core").PgBuildColumn<"auth_audit_events", import("drizzle-orm/pg-core").SetIsPrimaryKey<import("drizzle-orm/pg-core").PgVarcharBuilder<[string, ...string[]]>>, {
23
- name: string;
24
- tableName: "auth_audit_events";
25
- dataType: "string";
26
- data: string;
27
- driverParam: string;
28
- notNull: true;
29
- hasDefault: false;
30
- isPrimaryKey: false;
31
- isAutoincrement: false;
32
- hasRuntimeDefault: false;
33
- enumValues: undefined;
34
- identity: undefined;
35
- generated: undefined;
36
- }>;
37
- ip: import("drizzle-orm/pg-core").PgBuildColumn<"auth_audit_events", import("drizzle-orm/pg-core").PgVarcharBuilder<[string, ...string[]]>, {
38
- name: string;
39
- tableName: "auth_audit_events";
40
- dataType: "string";
41
- data: string;
42
- driverParam: string;
43
- notNull: false;
44
- hasDefault: false;
45
- isPrimaryKey: false;
46
- isAutoincrement: false;
47
- hasRuntimeDefault: false;
48
- enumValues: undefined;
49
- identity: undefined;
50
- generated: undefined;
51
- }>;
52
- metadata_json: import("drizzle-orm/pg-core").PgBuildColumn<"auth_audit_events", import("drizzle-orm/pg-core").Set$Type<import("drizzle-orm/pg-core").PgJsonbBuilder, Record<string, unknown>>, {
53
- name: string;
54
- tableName: "auth_audit_events";
55
- dataType: "object json";
56
- data: Record<string, unknown>;
57
- driverParam: unknown;
58
- notNull: false;
59
- hasDefault: false;
60
- isPrimaryKey: false;
61
- isAutoincrement: false;
62
- hasRuntimeDefault: false;
63
- enumValues: undefined;
64
- identity: undefined;
65
- generated: undefined;
66
- }>;
67
- organization_id: import("drizzle-orm/pg-core").PgBuildColumn<"auth_audit_events", import("drizzle-orm/pg-core").PgVarcharBuilder<[string, ...string[]]>, {
68
- name: string;
69
- tableName: "auth_audit_events";
70
- dataType: "string";
71
- data: string;
72
- driverParam: string;
73
- notNull: false;
74
- hasDefault: false;
75
- isPrimaryKey: false;
76
- isAutoincrement: false;
77
- hasRuntimeDefault: false;
78
- enumValues: undefined;
79
- identity: undefined;
80
- generated: undefined;
81
- }>;
82
- type: import("drizzle-orm/pg-core").PgBuildColumn<"auth_audit_events", import("drizzle-orm/pg-core").SetNotNull<import("drizzle-orm/pg-core").PgVarcharBuilder<[string, ...string[]]>>, {
83
- name: string;
84
- tableName: "auth_audit_events";
85
- dataType: "string";
86
- data: string;
87
- driverParam: string;
88
- notNull: true;
89
- hasDefault: false;
90
- isPrimaryKey: false;
91
- isAutoincrement: false;
92
- hasRuntimeDefault: false;
93
- enumValues: undefined;
94
- identity: undefined;
95
- generated: undefined;
96
- }>;
97
- user_id: import("drizzle-orm/pg-core").PgBuildColumn<"auth_audit_events", import("drizzle-orm/pg-core").PgVarcharBuilder<[string, ...string[]]>, {
98
- name: string;
99
- tableName: "auth_audit_events";
100
- dataType: "string";
101
- data: string;
102
- driverParam: string;
103
- notNull: false;
104
- hasDefault: false;
105
- isPrimaryKey: false;
106
- isAutoincrement: false;
107
- hasRuntimeDefault: false;
108
- enumValues: undefined;
109
- identity: undefined;
110
- generated: undefined;
111
- }>;
112
- };
113
- dialect: "pg";
114
- }>;
115
- export declare const createNeonAuditSink: (databaseUrl: string) => AuditSink;
116
- export declare const createPostgresAuditSink: <DB extends AnyPgDatabase>(db: DB) => AuditSink;
@@ -1,11 +0,0 @@
1
- import type { AuditSink } from './types';
2
- export type SiemFormat = 'datadog' | 'generic' | 'splunk';
3
- export type SiemEndpoint = {
4
- format?: SiemFormat;
5
- headers?: Record<string, string>;
6
- token?: string;
7
- url: string;
8
- };
9
- export declare const createSiemLogStream: ({ endpoints }: {
10
- endpoints: SiemEndpoint[];
11
- }) => AuditSink;
@@ -1,19 +0,0 @@
1
- import type { OrganizationId } from '../tenancy';
2
- export type AuditEventType = 'account_deleted' | 'agent_credential_issued' | 'agent_delegated' | 'agent_registered' | 'agent_revoked' | 'authorization_denied' | 'credentials_login' | 'credentials_login_failed' | 'data_exported' | 'email_verified' | 'identity_conflict' | 'impersonation_ended' | 'impersonation_started' | 'invitation_accepted' | 'invitation_created' | 'logout' | 'membership_removed' | 'mfa_challenge' | 'mfa_challenge_failed' | 'mfa_enrolled' | 'oauth_login' | 'organization_created' | 'password_reset' | 'passwordless_login' | 'register' | 'role_assigned' | 'scim_provision' | 'scim_token_created' | 'session_revoked' | 'setup_session_created' | 'sso_connection_configured' | 'sso_login' | 'token_refreshed' | 'token_revoked' | 'webauthn_authenticated' | 'webauthn_registered';
3
- export type AuditEvent = {
4
- at: number;
5
- ip?: string;
6
- metadata?: Record<string, unknown>;
7
- organizationId?: OrganizationId;
8
- type: AuditEventType;
9
- userId?: string;
10
- };
11
- export type AuditEventFilter = {
12
- limit?: number;
13
- userId?: string;
14
- };
15
- export type AuditSink = {
16
- append: (event: AuditEvent) => Promise<void>;
17
- list?: (filter?: AuditEventFilter) => Promise<AuditEvent[]>;
18
- prune?: (before: number) => Promise<number>;
19
- };
@@ -1,9 +0,0 @@
1
- import type { CredentialsConfig } from '../credentials/config';
2
- import type { MfaConfig } from '../mfa/config';
3
- import type { OnCallbackSuccess, OnRevocationSuccess, OnSignOut } from '../types';
4
- import type { AuditEmitter } from './config';
5
- export declare const composeCallbackAudit: <UserType>(onCallbackSuccess: OnCallbackSuccess<UserType>, emit: AuditEmitter) => (context: Parameters<NonNullable<OnCallbackSuccess<UserType>>>[0]) => Promise<void | Response | import("..").StatusReturn>;
6
- export declare const composeCredentialsAudit: <UserType>(credentials: CredentialsConfig<UserType>, emit: AuditEmitter, getUserId?: (user: UserType) => string) => CredentialsConfig<UserType>;
7
- export declare const composeMfaAudit: <UserType>(mfa: MfaConfig<UserType>, emit: AuditEmitter) => MfaConfig<UserType>;
8
- export declare const composeRevocationAudit: (onRevocationSuccess: OnRevocationSuccess, emit: AuditEmitter) => (context: Parameters<NonNullable<OnRevocationSuccess>>[0]) => Promise<void | undefined>;
9
- export declare const composeSignOutAudit: <UserType>(onSignOut: OnSignOut<UserType>, emit: AuditEmitter) => (context: Parameters<NonNullable<OnSignOut<UserType>>>[0]) => Promise<void | undefined>;
@@ -1,193 +0,0 @@
1
- import { Elysia } from 'elysia';
2
- import type { AgentAuthConfig } from './agents/config';
3
- import type { AuditEmitter } from './audit/config';
4
- import type { AuthorizationConfig } from './authorization/config';
5
- import type { AuthSessionStore } from './session/types';
6
- export declare const createAuthContext: <UserType>({ agentAuth, authSessionStore, authorization, emit, seedSource }: {
7
- agentAuth?: AgentAuthConfig;
8
- authSessionStore?: AuthSessionStore<UserType>;
9
- authorization?: AuthorizationConfig<UserType>;
10
- emit?: AuditEmitter;
11
- seedSource?: object;
12
- }) => Elysia<"", {
13
- decorator: {};
14
- store: {
15
- session: import("./types").SessionRecord<UserType>;
16
- unregisteredSession: import("./types").UnregisteredSessionRecord;
17
- };
18
- derive: ({
19
- readonly protectRoute: <AuthReturn, AuthFailReturn>(handleAuth: (user: UserType) => AuthReturn | Promise<AuthReturn>, handleAuthFail?: ((error: {
20
- readonly code: "Bad Request";
21
- readonly message: "Cookies are missing";
22
- } | {
23
- readonly code: "Unauthorized";
24
- readonly message: "User is not authenticated";
25
- }) => AuthFailReturn) | undefined) => Promise<import("elysia").ElysiaCustomStatusResponse<"Bad Request", "Cookies are missing", 400> | import("elysia").ElysiaCustomStatusResponse<"Unauthorized", "User is not authenticated", 401> | AuthReturn | NonNullable<AuthFailReturn>>;
26
- } & {
27
- readonly requireRecentAuth: <AuthReturn, AuthFailReturn_1>(maxAgeMs: number, handleAuth: (user: UserType) => AuthReturn | Promise<AuthReturn>, handleAuthFail?: ((error: {
28
- readonly code: "Unauthorized";
29
- readonly message: "Recent authentication required";
30
- }) => AuthFailReturn_1) | undefined) => Promise<import("elysia").ElysiaCustomStatusResponse<"Unauthorized", "Recent authentication required", 401> | AuthReturn | NonNullable<AuthFailReturn_1>>;
31
- } & {
32
- readonly protectAgent: <AuthReturn, AuthFailReturn_2>(requiredScopes: string[], handleAuth: (principal: import(".").AgentPrincipal) => AuthReturn | Promise<AuthReturn>, handleAuthFail?: (error: {
33
- code: "Forbidden" | "Unauthorized";
34
- message: "Agent is not authenticated" | "Insufficient agent scopes";
35
- }) => AuthFailReturn_2 | Promise<AuthFailReturn_2>) => Promise<Response | AuthReturn | NonNullable<Awaited<AuthFailReturn_2>>>;
36
- }) | ({
37
- readonly protectRoute: <AuthReturn, AuthFailReturn>(handleAuth: (user: UserType) => AuthReturn | Promise<AuthReturn>, handleAuthFail?: ((error: {
38
- readonly code: "Bad Request";
39
- readonly message: "Cookies are missing";
40
- } | {
41
- readonly code: "Unauthorized";
42
- readonly message: "User is not authenticated";
43
- }) => AuthFailReturn) | undefined) => Promise<import("elysia").ElysiaCustomStatusResponse<"Bad Request", "Cookies are missing", 400> | import("elysia").ElysiaCustomStatusResponse<"Unauthorized", "User is not authenticated", 401> | AuthReturn | NonNullable<AuthFailReturn>>;
44
- } & {
45
- readonly requireRecentAuth: <AuthReturn, AuthFailReturn_1>(maxAgeMs: number, handleAuth: (user: UserType) => AuthReturn | Promise<AuthReturn>, handleAuthFail?: ((error: {
46
- readonly code: "Unauthorized";
47
- readonly message: "Recent authentication required";
48
- }) => AuthFailReturn_1) | undefined) => Promise<import("elysia").ElysiaCustomStatusResponse<"Unauthorized", "Recent authentication required", 401> | AuthReturn | NonNullable<AuthFailReturn_1>>;
49
- } & {
50
- readonly protectPermission: <AuthReturn, AuthFailReturn_3>(check: import(".").PermissionCheck, handleAuth: (user: UserType) => AuthReturn | Promise<AuthReturn>, handleAuthFail?: ((error: {
51
- readonly code: "Bad Request";
52
- readonly message: "Cookies are missing";
53
- } | {
54
- readonly code: "Forbidden";
55
- readonly message: "Insufficient permissions";
56
- } | {
57
- readonly code: "Unauthorized";
58
- readonly message: "User is not authenticated";
59
- }) => AuthFailReturn_3) | undefined) => Promise<import("elysia").ElysiaCustomStatusResponse<"Bad Request", "Cookies are missing", 400> | import("elysia").ElysiaCustomStatusResponse<"Unauthorized", "User is not authenticated", 401> | import("elysia").ElysiaCustomStatusResponse<"Forbidden", "Insufficient permissions", 403> | AuthReturn | NonNullable<AuthFailReturn_3>>;
60
- } & {
61
- readonly protectAgent: <AuthReturn, AuthFailReturn_2>(requiredScopes: string[], handleAuth: (principal: import(".").AgentPrincipal) => AuthReturn | Promise<AuthReturn>, handleAuthFail?: (error: {
62
- code: "Forbidden" | "Unauthorized";
63
- message: "Agent is not authenticated" | "Insufficient agent scopes";
64
- }) => AuthFailReturn_2 | Promise<AuthFailReturn_2>) => Promise<Response | AuthReturn | NonNullable<Awaited<AuthFailReturn_2>>>;
65
- });
66
- resolve: {};
67
- }, {
68
- typebox: {};
69
- error: {};
70
- } & {
71
- typebox: {};
72
- error: {};
73
- }, ({
74
- schema: {};
75
- standaloneSchema: {};
76
- macro: {};
77
- macroFn: {};
78
- parser: {};
79
- response: {};
80
- } & {
81
- schema: import("elysia").UnwrapRoute<{
82
- cookie: import("@sinclair/typebox").TObject<{
83
- user_session_id: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TTemplateLiteralSyntax<"${string}-${string}-${string}-${string}-${string}">>;
84
- }>;
85
- }, {}, "">;
86
- standaloneSchema: {};
87
- macro: {};
88
- macroFn: {};
89
- parser: {};
90
- response: import("elysia").ExtractErrorFromHandle<{
91
- readonly protectRoute: <AuthReturn, AuthFailReturn>(handleAuth: (user: UserType) => AuthReturn | Promise<AuthReturn>, handleAuthFail?: ((error: {
92
- readonly code: "Bad Request";
93
- readonly message: "Cookies are missing";
94
- } | {
95
- readonly code: "Unauthorized";
96
- readonly message: "User is not authenticated";
97
- }) => AuthFailReturn) | undefined) => Promise<import("elysia").ElysiaCustomStatusResponse<"Bad Request", "Cookies are missing", 400> | import("elysia").ElysiaCustomStatusResponse<"Unauthorized", "User is not authenticated", 401> | AuthReturn | NonNullable<AuthFailReturn>>;
98
- }>;
99
- } & {
100
- schema: import("elysia").UnwrapRoute<{
101
- cookie: import("@sinclair/typebox").TObject<{
102
- user_session_id: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TTemplateLiteralSyntax<"${string}-${string}-${string}-${string}-${string}">>;
103
- }>;
104
- }, {}, "">;
105
- standaloneSchema: {};
106
- macro: {};
107
- macroFn: {};
108
- parser: {};
109
- response: import("elysia").ExtractErrorFromHandle<{
110
- readonly requireRecentAuth: <AuthReturn, AuthFailReturn_1>(maxAgeMs: number, handleAuth: (user: UserType) => AuthReturn | Promise<AuthReturn>, handleAuthFail?: ((error: {
111
- readonly code: "Unauthorized";
112
- readonly message: "Recent authentication required";
113
- }) => AuthFailReturn_1) | undefined) => Promise<import("elysia").ElysiaCustomStatusResponse<"Unauthorized", "Recent authentication required", 401> | AuthReturn | NonNullable<AuthFailReturn_1>>;
114
- }>;
115
- } & ({
116
- schema: {};
117
- standaloneSchema: {};
118
- macro: {};
119
- macroFn: {};
120
- parser: {};
121
- response: {};
122
- } | {
123
- schema: import("elysia").UnwrapRoute<{
124
- cookie: import("@sinclair/typebox").TObject<{
125
- user_session_id: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TTemplateLiteralSyntax<"${string}-${string}-${string}-${string}-${string}">>;
126
- }>;
127
- }, {}, "">;
128
- standaloneSchema: {};
129
- macro: {};
130
- macroFn: {};
131
- parser: {};
132
- response: import("elysia").ExtractErrorFromHandle<{
133
- readonly protectPermission: <AuthReturn, AuthFailReturn_3>(check: import(".").PermissionCheck, handleAuth: (user: UserType) => AuthReturn | Promise<AuthReturn>, handleAuthFail?: ((error: {
134
- readonly code: "Bad Request";
135
- readonly message: "Cookies are missing";
136
- } | {
137
- readonly code: "Forbidden";
138
- readonly message: "Insufficient permissions";
139
- } | {
140
- readonly code: "Unauthorized";
141
- readonly message: "User is not authenticated";
142
- }) => AuthFailReturn_3) | undefined) => Promise<import("elysia").ElysiaCustomStatusResponse<"Bad Request", "Cookies are missing", 400> | import("elysia").ElysiaCustomStatusResponse<"Unauthorized", "User is not authenticated", 401> | import("elysia").ElysiaCustomStatusResponse<"Forbidden", "Insufficient permissions", 403> | AuthReturn | NonNullable<AuthFailReturn_3>>;
143
- }>;
144
- })) & {
145
- schema: {};
146
- standaloneSchema: {};
147
- macro: {};
148
- macroFn: {};
149
- parser: {};
150
- response: import("elysia").ExtractErrorFromHandle<{
151
- readonly protectAgent: <AuthReturn, AuthFailReturn_2>(requiredScopes: string[], handleAuth: (principal: import(".").AgentPrincipal) => AuthReturn | Promise<AuthReturn>, handleAuthFail?: (error: {
152
- code: "Forbidden" | "Unauthorized";
153
- message: "Agent is not authenticated" | "Insufficient agent scopes";
154
- }) => AuthFailReturn_2 | Promise<AuthFailReturn_2>) => Promise<Response | AuthReturn | NonNullable<Awaited<AuthFailReturn_2>>>;
155
- }>;
156
- }, {}, {
157
- derive: {};
158
- resolve: {};
159
- schema: {};
160
- standaloneSchema: {};
161
- response: {};
162
- }, ({
163
- derive: {};
164
- resolve: {};
165
- schema: {};
166
- standaloneSchema: {};
167
- response: {};
168
- } & {
169
- derive: {};
170
- resolve: {};
171
- schema: {};
172
- standaloneSchema: {};
173
- response: {};
174
- }) | ({
175
- derive: {};
176
- resolve: {};
177
- schema: {};
178
- standaloneSchema: {};
179
- response: {};
180
- } & {
181
- derive: {};
182
- resolve: {};
183
- schema: {};
184
- standaloneSchema: {};
185
- response: {};
186
- } & {
187
- derive: {};
188
- resolve: {};
189
- schema: {};
190
- standaloneSchema: {};
191
- response: {};
192
- })>;
193
- export type AuthInstance<UserType> = ReturnType<typeof createAuthContext<UserType>>;
@@ -1,19 +0,0 @@
1
- import type { AuditEmitter } from '../audit/config';
2
- import type { AuthSessionStore } from '../session/types';
3
- import type { OrganizationId } from '../tenancy';
4
- export type PermissionContext<UserType> = {
5
- organizationId?: OrganizationId;
6
- permission: string;
7
- user: UserType;
8
- };
9
- export type AuthorizationConfig<UserType> = {
10
- hasPermission: (context: PermissionContext<UserType>) => boolean | Promise<boolean>;
11
- };
12
- export type PermissionCheck = {
13
- organizationId?: OrganizationId;
14
- permission: string;
15
- };
16
- export type AuthorizationPluginProps<UserType> = AuthorizationConfig<UserType> & {
17
- authSessionStore?: AuthSessionStore<UserType>;
18
- emit?: AuditEmitter;
19
- };
@@ -1,52 +0,0 @@
1
- import { Elysia } from 'elysia';
2
- import type { AuthorizationPluginProps, PermissionCheck } from './config';
3
- type PermissionFailError = {
4
- readonly code: 'Bad Request';
5
- readonly message: 'Cookies are missing';
6
- } | {
7
- readonly code: 'Forbidden';
8
- readonly message: 'Insufficient permissions';
9
- } | {
10
- readonly code: 'Unauthorized';
11
- readonly message: 'User is not authenticated';
12
- };
13
- export declare const protectPermissionPlugin: <UserType>({ authSessionStore, emit, hasPermission }: AuthorizationPluginProps<UserType>) => Elysia<"", {
14
- decorator: {};
15
- store: {
16
- session: import("..").SessionRecord<UserType>;
17
- unregisteredSession: import("..").UnregisteredSessionRecord;
18
- };
19
- derive: {
20
- readonly protectPermission: <AuthReturn, AuthFailReturn>(check: PermissionCheck, handleAuth: (user: UserType) => AuthReturn | Promise<AuthReturn>, handleAuthFail?: (error: PermissionFailError) => AuthFailReturn) => Promise<AuthReturn | import("elysia").ElysiaCustomStatusResponse<"Bad Request", "Cookies are missing", 400> | NonNullable<AuthFailReturn> | import("elysia").ElysiaCustomStatusResponse<"Unauthorized", "User is not authenticated", 401> | import("elysia").ElysiaCustomStatusResponse<"Forbidden", "Insufficient permissions", 403>>;
21
- };
22
- resolve: {};
23
- }, {
24
- typebox: {};
25
- error: {};
26
- }, {
27
- schema: import("elysia").UnwrapRoute<{
28
- cookie: import("@sinclair/typebox").TObject<{
29
- user_session_id: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TTemplateLiteralSyntax<"${string}-${string}-${string}-${string}-${string}">>;
30
- }>;
31
- }, {}, "">;
32
- standaloneSchema: {};
33
- macro: {};
34
- macroFn: {};
35
- parser: {};
36
- response: import("elysia").ExtractErrorFromHandle<{
37
- readonly protectPermission: <AuthReturn, AuthFailReturn>(check: PermissionCheck, handleAuth: (user: UserType) => AuthReturn | Promise<AuthReturn>, handleAuthFail?: (error: PermissionFailError) => AuthFailReturn) => Promise<AuthReturn | import("elysia").ElysiaCustomStatusResponse<"Bad Request", "Cookies are missing", 400> | NonNullable<AuthFailReturn> | import("elysia").ElysiaCustomStatusResponse<"Unauthorized", "User is not authenticated", 401> | import("elysia").ElysiaCustomStatusResponse<"Forbidden", "Insufficient permissions", 403>>;
38
- }>;
39
- }, {}, {
40
- derive: {};
41
- resolve: {};
42
- schema: {};
43
- standaloneSchema: {};
44
- response: {};
45
- }, {
46
- derive: {};
47
- resolve: {};
48
- schema: {};
49
- standaloneSchema: {};
50
- response: {};
51
- }>;
52
- export {};
@@ -1,5 +0,0 @@
1
- export type SecretCipher = {
2
- decrypt: (ciphertext: string) => Promise<string>;
3
- encrypt: (plaintext: string) => Promise<string>;
4
- };
5
- export declare const createSecretCipher: (keyMaterial: string) => SecretCipher;
@@ -1,18 +0,0 @@
1
- import type { AuditEmitter } from '../audit/config';
2
- import type { AuthSessionStore } from '../session/types';
3
- import type { RouteString } from '../types';
4
- export type ComplianceConfig<UserType> = {
5
- complianceRoute?: RouteString;
6
- deleteUserData: (context: {
7
- user: UserType;
8
- userId?: string;
9
- }) => void | Promise<void>;
10
- exportUserData: (context: {
11
- user: UserType;
12
- }) => Record<string, unknown> | Promise<Record<string, unknown>>;
13
- getUserId?: (user: UserType) => string;
14
- };
15
- export type CompliancePluginProps<UserType> = ComplianceConfig<UserType> & {
16
- authSessionStore?: AuthSessionStore<UserType>;
17
- emit?: AuditEmitter;
18
- };
@@ -1,8 +0,0 @@
1
- import type { AuditEvent } from '../audit/types';
2
- type AuditRedactorOptions = {
3
- dropFields?: string[];
4
- hashFields?: string[];
5
- redactIp?: boolean;
6
- };
7
- export declare const createAuditRedactor: ({ dropFields, hashFields, redactIp }: AuditRedactorOptions) => (event: AuditEvent) => Promise<AuditEvent>;
8
- export {};
@@ -1,89 +0,0 @@
1
- import { Elysia } from 'elysia';
2
- import type { CompliancePluginProps } from './config';
3
- export declare const complianceRoutes: <UserType>({ authSessionStore, complianceRoute, deleteUserData, emit, exportUserData, getUserId }: CompliancePluginProps<UserType>) => Elysia<"", {
4
- decorator: {};
5
- store: {
6
- session: import("..").SessionRecord<UserType>;
7
- unregisteredSession: import("..").UnregisteredSessionRecord;
8
- };
9
- derive: {};
10
- resolve: {};
11
- }, {
12
- typebox: {};
13
- error: {};
14
- }, {
15
- schema: {};
16
- standaloneSchema: {};
17
- macro: {};
18
- macroFn: {};
19
- parser: {};
20
- response: {};
21
- }, {
22
- [x: string]: {
23
- export: {
24
- get: {
25
- body: unknown;
26
- params: {};
27
- query: unknown;
28
- headers: unknown;
29
- response: {
30
- 401: "Authentication required";
31
- 200: {
32
- [x: string]: unknown;
33
- };
34
- 422: {
35
- type: "validation";
36
- on: string;
37
- summary?: string;
38
- message?: string;
39
- found?: unknown;
40
- property?: string;
41
- expected?: string;
42
- };
43
- };
44
- };
45
- };
46
- };
47
- } & {
48
- [x: string]: {
49
- delete: {
50
- body: unknown;
51
- params: {};
52
- query: unknown;
53
- headers: unknown;
54
- response: {
55
- 401: "Authentication required";
56
- 200: {
57
- readonly deleted: true;
58
- };
59
- 422: {
60
- type: "validation";
61
- on: string;
62
- summary?: string;
63
- message?: string;
64
- found?: unknown;
65
- property?: string;
66
- expected?: string;
67
- };
68
- };
69
- };
70
- };
71
- }, {
72
- derive: {};
73
- resolve: {};
74
- schema: {};
75
- standaloneSchema: {};
76
- response: {};
77
- }, {
78
- derive: {};
79
- resolve: {};
80
- schema: {};
81
- standaloneSchema: {};
82
- response: {};
83
- } & {
84
- derive: {};
85
- resolve: {};
86
- schema: {};
87
- standaloneSchema: {};
88
- response: {};
89
- }>;
@@ -1,10 +0,0 @@
1
- export declare const SECONDS_IN_A_MINUTE = 60;
2
- export declare const MILLISECONDS_IN_A_SECOND = 1000;
3
- export declare const MILLISECONDS_IN_A_MINUTE: number;
4
- export declare const MINUTES_IN_AN_HOUR = 60;
5
- export declare const HOURS_IN_A_DAY = 24;
6
- export declare const MILLISECONDS_IN_A_DAY: number;
7
- export declare const MILLISECONDS_IN_AN_HOUR: number;
8
- export declare const COOKIE_MINUTES = 30;
9
- export declare const COOKIE_DURATION: number;
10
- export declare const DEFAULT_MAX_SESSIONS = 10000;
@@ -1,45 +0,0 @@
1
- export type BreachRecord = {
2
- addedDate: string;
3
- dataClasses?: string[];
4
- name: string;
5
- };
6
- export type EmailBreachEvent = {
7
- breaches: BreachRecord[];
8
- email: string;
9
- };
10
- export type EmailBreachScanInput = {
11
- hibpApiKey: string;
12
- iterateEmails: (cursor: string | undefined) => Promise<{
13
- emails: string[];
14
- nextCursor: string | undefined;
15
- }>;
16
- onBreachFound: (event: EmailBreachEvent) => Promise<void> | void;
17
- pauseMs?: number;
18
- truncateResponse?: boolean;
19
- };
20
- export type EmailBreachScanResult = {
21
- breached: number;
22
- scanned: number;
23
- };
24
- export declare const runEmailBreachScan: (input: EmailBreachScanInput) => Promise<EmailBreachScanResult>;
25
- export type InactiveUserCandidate = {
26
- createdAt?: number;
27
- lastLoginAt: number | null;
28
- userId: string;
29
- };
30
- export type PruneInactiveUsersInput = {
31
- dryRun?: boolean;
32
- iterateUsers: (cursor: string | undefined) => Promise<{
33
- nextCursor: string | undefined;
34
- users: InactiveUserCandidate[];
35
- }>;
36
- now?: () => number;
37
- olderThanDays: number;
38
- onDelete: (userId: string) => Promise<void> | void;
39
- };
40
- export type PruneInactiveUsersResult = {
41
- dryRun: boolean;
42
- prunedUserIds: string[];
43
- scanned: number;
44
- };
45
- export declare const pruneInactiveUsers: (input: PruneInactiveUsersInput) => Promise<PruneInactiveUsersResult>;