@absolutejs/auth 0.56.2 → 0.56.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (174) hide show
  1. package/dist/cli/migrate.js.map +1 -1
  2. package/dist/index.js +15 -1
  3. package/dist/index.js.map +4 -4
  4. package/dist/oidc/index.js +5 -1
  5. package/dist/oidc/index.js.map +3 -3
  6. package/dist/server.js +15 -1
  7. package/dist/server.js.map +4 -4
  8. package/package.json +1 -1
  9. package/dist/abuse/captcha.d.ts +0 -11
  10. package/dist/abuse/config.d.ts +0 -29
  11. package/dist/actions.d.ts +0 -27
  12. package/dist/agents/config.d.ts +0 -44
  13. package/dist/agents/context.d.ts +0 -46
  14. package/dist/agents/principal.d.ts +0 -4
  15. package/dist/agents/registration.d.ts +0 -162
  16. package/dist/agents/routes.d.ts +0 -321
  17. package/dist/agents/types.d.ts +0 -129
  18. package/dist/apikeys/config.d.ts +0 -64
  19. package/dist/apikeys/routes.d.ts +0 -83
  20. package/dist/apikeys/types.d.ts +0 -53
  21. package/dist/audit/config.d.ts +0 -9
  22. package/dist/audit/export.d.ts +0 -2
  23. package/dist/audit/inMemoryAuditStore.d.ts +0 -2
  24. package/dist/audit/integrity.d.ts +0 -19
  25. package/dist/audit/postgresAuditStore.d.ts +0 -116
  26. package/dist/audit/siem.d.ts +0 -11
  27. package/dist/audit/types.d.ts +0 -19
  28. package/dist/audit/wrap.d.ts +0 -9
  29. package/dist/authContext.d.ts +0 -193
  30. package/dist/authorization/config.d.ts +0 -19
  31. package/dist/authorization/protectPermission.d.ts +0 -52
  32. package/dist/compliance/cipher.d.ts +0 -11
  33. package/dist/compliance/config.d.ts +0 -18
  34. package/dist/compliance/redaction.d.ts +0 -8
  35. package/dist/compliance/routes.d.ts +0 -89
  36. package/dist/constants.d.ts +0 -10
  37. package/dist/credentials/backgroundOps.d.ts +0 -45
  38. package/dist/credentials/config.d.ts +0 -68
  39. package/dist/credentials/emailValidation.d.ts +0 -9
  40. package/dist/credentials/emailVerification.d.ts +0 -83
  41. package/dist/credentials/import.d.ts +0 -34
  42. package/dist/credentials/inMemoryCredentialStore.d.ts +0 -2
  43. package/dist/credentials/legacyHashers.d.ts +0 -3
  44. package/dist/credentials/login.d.ts +0 -76
  45. package/dist/credentials/passwordPolicy.d.ts +0 -15
  46. package/dist/credentials/passwordReset.d.ts +0 -87
  47. package/dist/credentials/postgresCredentialStore.d.ts +0 -235
  48. package/dist/credentials/register.d.ts +0 -54
  49. package/dist/credentials/routes.d.ts +0 -201
  50. package/dist/credentials/types.d.ts +0 -26
  51. package/dist/crypto.d.ts +0 -32
  52. package/dist/errors.d.ts +0 -12
  53. package/dist/federation/tokenStore.d.ts +0 -29
  54. package/dist/htmx/configuredRoutes.d.ts +0 -542
  55. package/dist/htmx/renderers.d.ts +0 -8
  56. package/dist/htmx/routes.d.ts +0 -514
  57. package/dist/htmx/types.d.ts +0 -129
  58. package/dist/linkedProviders/inMemoryStores.d.ts +0 -9
  59. package/dist/linkedProviders/neonStores.d.ts +0 -484
  60. package/dist/linkedProviders/oauthAccountResolver.d.ts +0 -28
  61. package/dist/linkedProviders/oauthResolver.d.ts +0 -9
  62. package/dist/linkedProviders/resolver.d.ts +0 -22
  63. package/dist/lockout/config.d.ts +0 -17
  64. package/dist/lockout/inMemoryLockoutStore.d.ts +0 -2
  65. package/dist/lockout/postgresLockoutStore.d.ts +0 -71
  66. package/dist/lockout/redisLockoutStore.d.ts +0 -3
  67. package/dist/lockout/types.d.ts +0 -12
  68. package/dist/mfa/backupCodes.d.ts +0 -5
  69. package/dist/mfa/challenge.d.ts +0 -70
  70. package/dist/mfa/config.d.ts +0 -50
  71. package/dist/mfa/gate.d.ts +0 -2
  72. package/dist/mfa/inMemoryMfaStore.d.ts +0 -2
  73. package/dist/mfa/management.d.ts +0 -106
  74. package/dist/mfa/postgresMfaStore.d.ts +0 -206
  75. package/dist/mfa/rotation.d.ts +0 -17
  76. package/dist/mfa/routes.d.ts +0 -234
  77. package/dist/mfa/secret.d.ts +0 -2
  78. package/dist/mfa/sms.d.ts +0 -105
  79. package/dist/mfa/totp.d.ts +0 -91
  80. package/dist/mfa/types.d.ts +0 -23
  81. package/dist/oidc/clientAuth.d.ts +0 -19
  82. package/dist/oidc/config.d.ts +0 -296
  83. package/dist/oidc/dpop.d.ts +0 -23
  84. package/dist/oidc/inMemoryVciStores.d.ts +0 -3
  85. package/dist/oidc/jar.d.ts +0 -14
  86. package/dist/oidc/keys.d.ts +0 -35
  87. package/dist/oidc/logout.d.ts +0 -38
  88. package/dist/oidc/mtls.d.ts +0 -11
  89. package/dist/oidc/par.d.ts +0 -28
  90. package/dist/oidc/registration.d.ts +0 -138
  91. package/dist/oidc/routes.d.ts +0 -569
  92. package/dist/oidc/types.d.ts +0 -145
  93. package/dist/oidc/userinfo.d.ts +0 -21
  94. package/dist/oidc/vci.d.ts +0 -159
  95. package/dist/oidc/vciRoutes.d.ts +0 -92
  96. package/dist/organizations/config.d.ts +0 -46
  97. package/dist/organizations/operations.d.ts +0 -39
  98. package/dist/organizations/routes.d.ts +0 -299
  99. package/dist/organizations/types.d.ts +0 -45
  100. package/dist/passwordless/config.d.ts +0 -43
  101. package/dist/passwordless/routes.d.ts +0 -163
  102. package/dist/passwordless/types.d.ts +0 -9
  103. package/dist/pluginIdentity.d.ts +0 -2
  104. package/dist/portal/config.d.ts +0 -34
  105. package/dist/portal/operations.d.ts +0 -10
  106. package/dist/portal/routes.d.ts +0 -160
  107. package/dist/portal/types.d.ts +0 -16
  108. package/dist/providers/clients.d.ts +0 -1818
  109. package/dist/providersFromEnv.d.ts +0 -19
  110. package/dist/roles/config.d.ts +0 -27
  111. package/dist/roles/operations.d.ts +0 -8
  112. package/dist/roles/routes.d.ts +0 -106
  113. package/dist/roles/types.d.ts +0 -14
  114. package/dist/routes/authorize.d.ts +0 -102
  115. package/dist/routes/callback.d.ts +0 -64
  116. package/dist/routes/profile.d.ts +0 -70
  117. package/dist/routes/protectRoute.d.ts +0 -51
  118. package/dist/routes/refresh.d.ts +0 -74
  119. package/dist/routes/revoke.d.ts +0 -73
  120. package/dist/routes/sessions.d.ts +0 -103
  121. package/dist/routes/signout.d.ts +0 -70
  122. package/dist/routes/stepUp.d.ts +0 -48
  123. package/dist/routes/userStatus.d.ts +0 -72
  124. package/dist/scim/config.d.ts +0 -57
  125. package/dist/scim/extensions.d.ts +0 -30
  126. package/dist/scim/inMemoryScimTokenStore.d.ts +0 -2
  127. package/dist/scim/routes.d.ts +0 -366
  128. package/dist/scim/serialize.d.ts +0 -83
  129. package/dist/scim/types.d.ts +0 -54
  130. package/dist/session/access.d.ts +0 -33
  131. package/dist/session/anonymous.d.ts +0 -12
  132. package/dist/session/cleanup.d.ts +0 -45
  133. package/dist/session/impersonation.d.ts +0 -34
  134. package/dist/session/inMemoryStore.d.ts +0 -7
  135. package/dist/session/multiSession.d.ts +0 -27
  136. package/dist/session/neonStore.d.ts +0 -513
  137. package/dist/session/promote.d.ts +0 -23
  138. package/dist/session/redisStore.d.ts +0 -6
  139. package/dist/session/sessionsConfig.d.ts +0 -9
  140. package/dist/session/state.d.ts +0 -33
  141. package/dist/session/types.d.ts +0 -21
  142. package/dist/session/userSessions.d.ts +0 -19
  143. package/dist/sso/config.d.ts +0 -149
  144. package/dist/sso/discoveryRoute.d.ts +0 -63
  145. package/dist/sso/oidcRoutes.d.ts +0 -98
  146. package/dist/sso/samlRoutes.d.ts +0 -179
  147. package/dist/sso/types.d.ts +0 -53
  148. package/dist/stores/postgres.d.ts +0 -5
  149. package/dist/stores/redis.d.ts +0 -5
  150. package/dist/telemetry/tracing.d.ts +0 -15
  151. package/dist/tenancy.d.ts +0 -9
  152. package/dist/typeGuards.d.ts +0 -6
  153. package/dist/typebox.d.ts +0 -4
  154. package/dist/types.d.ts +0 -421
  155. package/dist/utils.d.ts +0 -45
  156. package/dist/vault/config.d.ts +0 -20
  157. package/dist/vault/inMemoryVaultStore.d.ts +0 -2
  158. package/dist/vault/postgresVaultStore.d.ts +0 -86
  159. package/dist/vault/types.d.ts +0 -14
  160. package/dist/vc/inMemoryVpStores.d.ts +0 -2
  161. package/dist/vc/openid4vp.d.ts +0 -82
  162. package/dist/vc/postgresVcStores.d.ts +0 -300
  163. package/dist/vc/sdJwt.d.ts +0 -37
  164. package/dist/vc/statusList.d.ts +0 -29
  165. package/dist/vc/statusListRoutes.d.ts +0 -63
  166. package/dist/vc/vpRoutes.d.ts +0 -120
  167. package/dist/webauthn/adapter.d.ts +0 -59
  168. package/dist/webauthn/config.d.ts +0 -36
  169. package/dist/webauthn/routes.d.ts +0 -155
  170. package/dist/webauthn/types.d.ts +0 -17
  171. package/dist/webhooks/config.d.ts +0 -34
  172. package/dist/webhooks/dispatcher.d.ts +0 -3
  173. package/dist/webhooks/sign.d.ts +0 -11
  174. package/dist/webhooks/types.d.ts +0 -25
@@ -1,43 +0,0 @@
1
- import type { AuditEmitter } from '../audit/config';
2
- import type { AuthSessionStore } from '../session/types';
3
- import type { RouteString, UserSessionId } from '../types';
4
- import type { PasswordlessTokenStore } from './types';
5
- export declare const DEFAULT_MAGIC_LINK_TTL_MS: number;
6
- export declare const DEFAULT_OTP_LENGTH = 6;
7
- export declare const DEFAULT_OTP_TTL_MS: number;
8
- export declare const DEFAULT_PASSWORDLESS_ROUTE: RouteString;
9
- export declare const DEFAULT_PASSWORDLESS_SESSION_TTL_MS: number;
10
- export type MagicLinkMessage = {
11
- email: string;
12
- expiresAt: number;
13
- token: string;
14
- };
15
- export type PasswordlessOtpMessage = {
16
- code: string;
17
- email: string;
18
- expiresAt: number;
19
- };
20
- export type PasswordlessConfig<UserType> = {
21
- getUserByEmail: (email: string) => Promise<UserType | null | undefined> | UserType | null | undefined;
22
- passwordlessTokenStore: PasswordlessTokenStore;
23
- getUserId?: (user: UserType) => string;
24
- magicLinkTokenDurationMs?: number;
25
- onCreateUser?: (context: {
26
- email: string;
27
- }) => Promise<UserType> | UserType;
28
- onPasswordlessLogin?: (context: {
29
- user: UserType;
30
- userSessionId: UserSessionId;
31
- }) => void | Promise<void>;
32
- onSendMagicLink?: (message: MagicLinkMessage) => void | Promise<void>;
33
- onSendOtp?: (message: PasswordlessOtpMessage) => void | Promise<void>;
34
- otpDurationMs?: number;
35
- otpLength?: number;
36
- passwordlessRoute?: RouteString;
37
- sessionDurationMs?: number;
38
- };
39
- export type PasswordlessRouteProps<UserType> = PasswordlessConfig<UserType> & {
40
- authSessionStore?: AuthSessionStore<UserType>;
41
- cookieSecure?: boolean;
42
- emit?: AuditEmitter;
43
- };
@@ -1,163 +0,0 @@
1
- import { Elysia } from 'elysia';
2
- import type { SessionRecord } from '../types';
3
- import { type PasswordlessRouteProps } from './config';
4
- export declare const passwordlessRoutes: <UserType>({ authSessionStore, cookieSecure, emit, getUserByEmail, getUserId, magicLinkTokenDurationMs, onCreateUser, onPasswordlessLogin, onSendMagicLink, onSendOtp, otpDurationMs, otpLength, passwordlessRoute, passwordlessTokenStore, sessionDurationMs }: PasswordlessRouteProps<UserType>) => Elysia<"", {
5
- decorator: {};
6
- store: {} | {
7
- session: SessionRecord<UserType>;
8
- unregisteredSession: import("..").UnregisteredSessionRecord;
9
- } | {
10
- session: SessionRecord<UserType>;
11
- unregisteredSession: import("..").UnregisteredSessionRecord;
12
- } | {
13
- session: SessionRecord<UserType>;
14
- unregisteredSession: import("..").UnregisteredSessionRecord;
15
- };
16
- derive: {};
17
- resolve: {};
18
- }, {
19
- typebox: {};
20
- error: {};
21
- }, {
22
- schema: {};
23
- standaloneSchema: {};
24
- macro: {};
25
- macroFn: {};
26
- parser: {};
27
- response: {};
28
- }, ({} | ({
29
- [x: string]: {
30
- "magic-link": {
31
- post: {
32
- body: {
33
- email: string;
34
- };
35
- params: {};
36
- query: unknown;
37
- headers: unknown;
38
- response: {
39
- 200: {
40
- readonly status: "magic_link_sent";
41
- };
42
- 422: {
43
- type: "validation";
44
- on: string;
45
- summary?: string;
46
- message?: string;
47
- found?: unknown;
48
- property?: string;
49
- expected?: string;
50
- };
51
- };
52
- };
53
- };
54
- };
55
- } & {
56
- [x: string]: {
57
- "magic-link": {
58
- verify: {
59
- post: {
60
- body: {
61
- token: string;
62
- };
63
- params: {};
64
- query: unknown;
65
- headers: unknown;
66
- response: {
67
- 400: "Invalid or expired link";
68
- 401: "No account for this email";
69
- 200: {
70
- readonly status: "authenticated";
71
- };
72
- 422: {
73
- type: "validation";
74
- on: string;
75
- summary?: string;
76
- message?: string;
77
- found?: unknown;
78
- property?: string;
79
- expected?: string;
80
- };
81
- };
82
- };
83
- };
84
- };
85
- };
86
- })) & ({} | ({
87
- [x: string]: {
88
- otp: {
89
- post: {
90
- body: {
91
- email: string;
92
- };
93
- params: {};
94
- query: unknown;
95
- headers: unknown;
96
- response: {
97
- 200: {
98
- readonly status: "otp_sent";
99
- };
100
- 422: {
101
- type: "validation";
102
- on: string;
103
- summary?: string;
104
- message?: string;
105
- found?: unknown;
106
- property?: string;
107
- expected?: string;
108
- };
109
- };
110
- };
111
- };
112
- };
113
- } & {
114
- [x: string]: {
115
- otp: {
116
- verify: {
117
- post: {
118
- body: {
119
- email: string;
120
- code: string;
121
- };
122
- params: {};
123
- query: unknown;
124
- headers: unknown;
125
- response: {
126
- 400: "Invalid or expired code";
127
- 401: "No account for this email";
128
- 200: {
129
- readonly status: "authenticated";
130
- };
131
- 422: {
132
- type: "validation";
133
- on: string;
134
- summary?: string;
135
- message?: string;
136
- found?: unknown;
137
- property?: string;
138
- expected?: string;
139
- };
140
- };
141
- };
142
- };
143
- };
144
- };
145
- })), {
146
- derive: {};
147
- resolve: {};
148
- schema: {};
149
- standaloneSchema: {};
150
- response: {};
151
- }, {
152
- derive: {};
153
- resolve: {};
154
- schema: {};
155
- standaloneSchema: {};
156
- response: {};
157
- } & {
158
- derive: {};
159
- resolve: {};
160
- schema: {};
161
- standaloneSchema: {};
162
- response: {};
163
- }>;
@@ -1,9 +0,0 @@
1
- export type PasswordlessToken = {
2
- email: string;
3
- expiresAt: number;
4
- tokenHash: string;
5
- };
6
- export type PasswordlessTokenStore = {
7
- consumeToken: (tokenHash: string) => Promise<PasswordlessToken | undefined>;
8
- saveToken: (token: PasswordlessToken) => Promise<void>;
9
- };
@@ -1,2 +0,0 @@
1
- /** Stable process-local seed for configured Elysia dependencies. */
2
- export declare const pluginDependencySeed: (dependency?: object) => number | "default";
@@ -1,34 +0,0 @@
1
- import type { AuditEmitter } from '../audit/config';
2
- import type { ScimTokenStore } from '../scim/types';
3
- import type { SSOConnectionStore, SSOConnectionType } from '../sso/types';
4
- import type { OrganizationId } from '../tenancy';
5
- import type { RouteString } from '../types';
6
- import type { SetupCapability, SetupSessionStore } from './types';
7
- export declare const DEFAULT_PORTAL_ROUTE: RouteString;
8
- export declare const DEFAULT_SETUP_SESSION_TTL_MS: number;
9
- export type PortalConfig = {
10
- setupSessionStore: SetupSessionStore;
11
- onScimTokenCreated?: (context: {
12
- organizationId: OrganizationId;
13
- tokenId: string;
14
- }) => void | Promise<void>;
15
- onSsoConnectionConfigured?: (context: {
16
- organizationId: OrganizationId;
17
- type: SSOConnectionType;
18
- }) => void | Promise<void>;
19
- portalRoute?: RouteString;
20
- scimRoute?: RouteString;
21
- scimTokenStore?: ScimTokenStore;
22
- ssoConnectionStore?: SSOConnectionStore;
23
- ssoRoute?: RouteString;
24
- };
25
- export type PortalRouteProps = PortalConfig & {
26
- emit?: AuditEmitter;
27
- };
28
- export type SetupSessionRequest = {
29
- capabilities: SetupCapability[];
30
- createdBy?: string;
31
- organizationId: OrganizationId;
32
- setupSessionDurationMs?: number;
33
- setupSessionStore: SetupSessionStore;
34
- };
@@ -1,10 +0,0 @@
1
- import { type SetupSessionRequest } from './config';
2
- import type { SetupSession, SetupSessionStore } from './types';
3
- export declare const createSetupSession: ({ capabilities, createdBy, organizationId, setupSessionDurationMs, setupSessionStore }: SetupSessionRequest) => Promise<{
4
- setupSession: SetupSession;
5
- token: string;
6
- }>;
7
- export declare const resolveSetupSession: ({ authorization, setupSessionStore }: {
8
- authorization: string | undefined;
9
- setupSessionStore: SetupSessionStore;
10
- }) => Promise<SetupSession | undefined>;
@@ -1,160 +0,0 @@
1
- import { Elysia } from 'elysia';
2
- import { type PortalRouteProps } from './config';
3
- export declare const portalRoutes: ({ emit, onScimTokenCreated, onSsoConnectionConfigured, portalRoute, scimRoute, scimTokenStore, setupSessionStore, ssoConnectionStore, ssoRoute }: PortalRouteProps) => Elysia<"", {
4
- decorator: {};
5
- store: {};
6
- derive: {};
7
- resolve: {};
8
- }, {
9
- typebox: {};
10
- error: {};
11
- }, {
12
- schema: {};
13
- standaloneSchema: {};
14
- macro: {};
15
- macroFn: {};
16
- parser: {};
17
- response: {};
18
- }, {
19
- [x: string]: {
20
- session: {
21
- get: {
22
- body: unknown;
23
- params: {};
24
- query: unknown;
25
- headers: unknown;
26
- response: {
27
- 401: "Invalid or expired setup link";
28
- 200: {
29
- readonly capabilities: import("./types").SetupCapability[];
30
- readonly configured: {
31
- readonly oidc: boolean;
32
- readonly saml: boolean;
33
- };
34
- readonly expiresAt: number;
35
- readonly oidc: {
36
- redirectUri: string;
37
- } | undefined;
38
- readonly organizationId: string;
39
- readonly saml: {
40
- acsUrl: string;
41
- entityId: string;
42
- metadataUrl: string;
43
- } | undefined;
44
- readonly scim: {
45
- baseUrl: string;
46
- } | undefined;
47
- };
48
- };
49
- };
50
- };
51
- };
52
- } & {
53
- [x: string]: {
54
- connection: {
55
- saml: {
56
- put: {
57
- body: {
58
- idpSloUrl?: string | undefined;
59
- idpEntityId: string;
60
- idpSsoUrl: string;
61
- idpX509Cert: string;
62
- };
63
- params: {};
64
- query: unknown;
65
- headers: unknown;
66
- response: {
67
- 401: "Invalid or expired setup link";
68
- 403: "This setup link cannot configure SAML";
69
- 501: "SSO is not configured";
70
- 200: {
71
- readonly configured: true;
72
- readonly type: "saml";
73
- };
74
- 422: {
75
- type: "validation";
76
- on: string;
77
- summary?: string;
78
- message?: string;
79
- found?: unknown;
80
- property?: string;
81
- expected?: string;
82
- };
83
- };
84
- };
85
- };
86
- };
87
- };
88
- } & {
89
- [x: string]: {
90
- connection: {
91
- oidc: {
92
- put: {
93
- body: {
94
- scopes?: string[] | undefined;
95
- redirectUri?: string | undefined;
96
- issuer: string;
97
- clientId: string;
98
- clientSecret: string;
99
- };
100
- params: {};
101
- query: unknown;
102
- headers: unknown;
103
- response: {
104
- 401: "Invalid or expired setup link";
105
- 403: "This setup link cannot configure OIDC";
106
- 501: "SSO is not configured";
107
- 200: {
108
- readonly configured: true;
109
- readonly type: "oidc";
110
- };
111
- 422: {
112
- type: "validation";
113
- on: string;
114
- summary?: string;
115
- message?: string;
116
- found?: unknown;
117
- property?: string;
118
- expected?: string;
119
- };
120
- };
121
- };
122
- };
123
- };
124
- };
125
- } & {
126
- [x: string]: {
127
- scim: {
128
- token: {
129
- post: {
130
- body: unknown;
131
- params: {};
132
- query: unknown;
133
- headers: unknown;
134
- response: {
135
- 401: "Invalid or expired setup link";
136
- 403: "This setup link cannot configure SCIM";
137
- 501: "SCIM is not configured";
138
- 200: {
139
- readonly baseUrl: `${string}/${string}`;
140
- readonly token: string;
141
- readonly tokenId: string;
142
- };
143
- };
144
- };
145
- };
146
- };
147
- };
148
- }, {
149
- derive: {};
150
- resolve: {};
151
- schema: {};
152
- standaloneSchema: {};
153
- response: {};
154
- }, {
155
- derive: {};
156
- resolve: {};
157
- schema: {};
158
- standaloneSchema: {};
159
- response: {};
160
- }>;
@@ -1,16 +0,0 @@
1
- import type { OrganizationId } from '../tenancy';
2
- export type SetupCapability = 'scim' | 'sso_oidc' | 'sso_saml';
3
- export type SetupSession = {
4
- capabilities: SetupCapability[];
5
- createdAt: number;
6
- createdBy?: string;
7
- expiresAt: number;
8
- organizationId: OrganizationId;
9
- setupSessionId: string;
10
- tokenHash: string;
11
- };
12
- export type SetupSessionStore = {
13
- deleteSetupSession: (setupSessionId: string) => Promise<void>;
14
- getSetupSessionByTokenHash: (tokenHash: string) => Promise<SetupSession | undefined>;
15
- saveSetupSession: (session: SetupSession) => Promise<void>;
16
- };