@absolutejs/auth 0.56.18 → 0.57.0

package/dist/manifest.json

@@ -49,12 +49,13 @@
 			},
 			"title": "Your Postgres database (recommended)",
 			"wiring": {
-				"code": "createNeonAuthSessionStore(${env.DATABASE_URL} ?? \"\")",
+				"code": "createNeonAuthSessionStore(${env.DATABASE_URL} ?? \"\", decodeSessionUserRecord)",
 				"imports": [
 					{
 						"from": "@absolutejs/auth",
 						"names": [
-							"createNeonAuthSessionStore"
+							"createNeonAuthSessionStore",
+							"decodeSessionUserRecord"
 						]
 					}
 				]

package/dist/oidc/clientIdMetadata.d.ts

@@ -17,12 +17,7 @@ export type ClientIdMetadataDocument = {
     };
     scope?: string;
 };
-export declare const validateClientIdMetadataDocument: (document: ClientIdMetadataDocument, expectedClientId: string) => string[];
 export declare const clientIdMetadataToOAuthClient: (document: ClientIdMetadataDocument) => OAuthClient;
-/** Resolve an HTTPS URL client_id into OAuth client metadata without prior
-    registration. Network access is injected so callers can enforce DNS/IP/redirect
-    policy with @absolutejs/egress. Redirects are forbidden and documents are capped
-    at 5 KiB per the IETF Client ID Metadata Document security guidance. */
 export declare const createClientIdMetadataResolver: ({ fetch: fetcher, allow, cacheTtlMs, maxBytes, now }: {
     fetch: (input: string | URL, init?: RequestInit) => Promise<Response>;
     allow?: (clientId: string) => boolean | Promise<boolean>;
@@ -30,3 +25,4 @@ export declare const createClientIdMetadataResolver: ({ fetch: fetcher, allow, c
     maxBytes?: number;
     now?: () => number;
 }) => (clientId: string) => Promise<OAuthClient | undefined>;
+export declare const validateClientIdMetadataDocument: (document: ClientIdMetadataDocument, expectedClientId: string) => string[];