@absolutejs/auth 0.56.2 → 0.56.4
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/cli/migrate.js.map +1 -1
- package/dist/index.js +45 -1
- package/dist/index.js.map +4 -4
- package/dist/oidc/index.js +15 -1
- package/dist/oidc/index.js.map +3 -3
- package/dist/server.js +45 -1
- package/dist/server.js.map +4 -4
- package/package.json +1 -1
- package/dist/abuse/captcha.d.ts +0 -11
- package/dist/abuse/config.d.ts +0 -29
- package/dist/actions.d.ts +0 -27
- package/dist/adaptive/config.d.ts +0 -34
- package/dist/adaptive/fingerprint.d.ts +0 -2
- package/dist/adaptive/inMemoryStores.d.ts +0 -3
- package/dist/adaptive/postgresStores.d.ts +0 -245
- package/dist/adaptive/types.d.ts +0 -62
- package/dist/agents/config.d.ts +0 -44
- package/dist/agents/context.d.ts +0 -46
- package/dist/agents/idJag.d.ts +0 -49
- package/dist/agents/inMemoryStores.d.ts +0 -4
- package/dist/agents/oidcAdapter.d.ts +0 -12
- package/dist/agents/postgresStores.d.ts +0 -569
- package/dist/agents/principal.d.ts +0 -4
- package/dist/agents/registration.d.ts +0 -162
- package/dist/agents/registrationClient.d.ts +0 -50
- package/dist/agents/routes.d.ts +0 -321
- package/dist/agents/types.d.ts +0 -129
- package/dist/apikeys/config.d.ts +0 -64
- package/dist/apikeys/inMemoryStores.d.ts +0 -4
- package/dist/apikeys/postgresStores.d.ts +0 -359
- package/dist/apikeys/routes.d.ts +0 -83
- package/dist/apikeys/types.d.ts +0 -53
- package/dist/audit/config.d.ts +0 -9
- package/dist/audit/export.d.ts +0 -2
- package/dist/audit/inMemoryAuditStore.d.ts +0 -2
- package/dist/audit/integrity.d.ts +0 -19
- package/dist/audit/postgresAuditStore.d.ts +0 -116
- package/dist/audit/siem.d.ts +0 -11
- package/dist/audit/types.d.ts +0 -19
- package/dist/audit/wrap.d.ts +0 -9
- package/dist/authContext.d.ts +0 -193
- package/dist/authorization/config.d.ts +0 -19
- package/dist/authorization/protectPermission.d.ts +0 -52
- package/dist/compliance/cipher.d.ts +0 -11
- package/dist/compliance/config.d.ts +0 -18
- package/dist/compliance/redaction.d.ts +0 -8
- package/dist/compliance/routes.d.ts +0 -89
- package/dist/constants.d.ts +0 -10
- package/dist/credentials/backgroundOps.d.ts +0 -45
- package/dist/credentials/config.d.ts +0 -68
- package/dist/credentials/emailValidation.d.ts +0 -9
- package/dist/credentials/emailVerification.d.ts +0 -83
- package/dist/credentials/import.d.ts +0 -34
- package/dist/credentials/inMemoryCredentialStore.d.ts +0 -2
- package/dist/credentials/legacyHashers.d.ts +0 -3
- package/dist/credentials/login.d.ts +0 -76
- package/dist/credentials/passwordPolicy.d.ts +0 -15
- package/dist/credentials/passwordReset.d.ts +0 -87
- package/dist/credentials/postgresCredentialStore.d.ts +0 -235
- package/dist/credentials/register.d.ts +0 -54
- package/dist/credentials/routes.d.ts +0 -201
- package/dist/credentials/types.d.ts +0 -26
- package/dist/crypto.d.ts +0 -32
- package/dist/errors.d.ts +0 -12
- package/dist/federation/tokenStore.d.ts +0 -29
- package/dist/fga/config.d.ts +0 -53
- package/dist/fga/inMemoryStores.d.ts +0 -3
- package/dist/fga/postgresStores.d.ts +0 -116
- package/dist/fga/redisCheckCache.d.ts +0 -11
- package/dist/fga/schema.d.ts +0 -2
- package/dist/fga/types.d.ts +0 -28
- package/dist/htmx/configuredRoutes.d.ts +0 -542
- package/dist/htmx/renderers.d.ts +0 -8
- package/dist/htmx/routes.d.ts +0 -514
- package/dist/htmx/types.d.ts +0 -129
- package/dist/linkedProviders/inMemoryStores.d.ts +0 -9
- package/dist/linkedProviders/neonStores.d.ts +0 -484
- package/dist/linkedProviders/oauthAccountResolver.d.ts +0 -28
- package/dist/linkedProviders/oauthResolver.d.ts +0 -9
- package/dist/linkedProviders/resolver.d.ts +0 -22
- package/dist/lockout/config.d.ts +0 -17
- package/dist/lockout/inMemoryLockoutStore.d.ts +0 -2
- package/dist/lockout/postgresLockoutStore.d.ts +0 -71
- package/dist/lockout/redisLockoutStore.d.ts +0 -3
- package/dist/lockout/types.d.ts +0 -12
- package/dist/mfa/backupCodes.d.ts +0 -5
- package/dist/mfa/challenge.d.ts +0 -70
- package/dist/mfa/config.d.ts +0 -50
- package/dist/mfa/gate.d.ts +0 -2
- package/dist/mfa/inMemoryMfaStore.d.ts +0 -2
- package/dist/mfa/management.d.ts +0 -106
- package/dist/mfa/postgresMfaStore.d.ts +0 -206
- package/dist/mfa/rotation.d.ts +0 -17
- package/dist/mfa/routes.d.ts +0 -234
- package/dist/mfa/secret.d.ts +0 -2
- package/dist/mfa/sms.d.ts +0 -105
- package/dist/mfa/totp.d.ts +0 -91
- package/dist/mfa/types.d.ts +0 -23
- package/dist/migrations/generate.d.ts +0 -2
- package/dist/migrations/index.d.ts +0 -5
- package/dist/migrations/runner.d.ts +0 -13
- package/dist/migrations/types.d.ts +0 -14
- package/dist/oidc/clientAuth.d.ts +0 -19
- package/dist/oidc/clientIdMetadata.d.ts +0 -32
- package/dist/oidc/config.d.ts +0 -296
- package/dist/oidc/dpop.d.ts +0 -23
- package/dist/oidc/inMemoryStores.d.ts +0 -11
- package/dist/oidc/inMemoryVciStores.d.ts +0 -3
- package/dist/oidc/jar.d.ts +0 -14
- package/dist/oidc/keys.d.ts +0 -35
- package/dist/oidc/logout.d.ts +0 -38
- package/dist/oidc/mtls.d.ts +0 -11
- package/dist/oidc/par.d.ts +0 -28
- package/dist/oidc/postgresStores.d.ts +0 -1217
- package/dist/oidc/registration.d.ts +0 -138
- package/dist/oidc/routes.d.ts +0 -569
- package/dist/oidc/types.d.ts +0 -145
- package/dist/oidc/userinfo.d.ts +0 -21
- package/dist/oidc/vci.d.ts +0 -159
- package/dist/oidc/vciRoutes.d.ts +0 -92
- package/dist/organizations/config.d.ts +0 -46
- package/dist/organizations/inMemoryOrganizationStore.d.ts +0 -2
- package/dist/organizations/operations.d.ts +0 -39
- package/dist/organizations/postgresOrganizationStore.d.ts +0 -340
- package/dist/organizations/routes.d.ts +0 -299
- package/dist/organizations/types.d.ts +0 -45
- package/dist/passwordless/config.d.ts +0 -43
- package/dist/passwordless/inMemoryPasswordlessTokenStore.d.ts +0 -2
- package/dist/passwordless/postgresPasswordlessTokenStore.d.ts +0 -56
- package/dist/passwordless/routes.d.ts +0 -163
- package/dist/passwordless/types.d.ts +0 -9
- package/dist/pluginIdentity.d.ts +0 -2
- package/dist/portal/config.d.ts +0 -34
- package/dist/portal/inMemorySetupSessionStore.d.ts +0 -2
- package/dist/portal/operations.d.ts +0 -10
- package/dist/portal/postgresSetupSessionStore.d.ts +0 -116
- package/dist/portal/routes.d.ts +0 -160
- package/dist/portal/types.d.ts +0 -16
- package/dist/providers/clients.d.ts +0 -1818
- package/dist/providersFromEnv.d.ts +0 -19
- package/dist/roles/config.d.ts +0 -27
- package/dist/roles/inMemoryRoleStore.d.ts +0 -2
- package/dist/roles/operations.d.ts +0 -8
- package/dist/roles/postgresRoleStore.d.ts +0 -86
- package/dist/roles/resolver.d.ts +0 -17
- package/dist/roles/routes.d.ts +0 -106
- package/dist/roles/types.d.ts +0 -14
- package/dist/routes/authorize.d.ts +0 -102
- package/dist/routes/callback.d.ts +0 -64
- package/dist/routes/profile.d.ts +0 -70
- package/dist/routes/protectRoute.d.ts +0 -51
- package/dist/routes/refresh.d.ts +0 -74
- package/dist/routes/revoke.d.ts +0 -73
- package/dist/routes/sessions.d.ts +0 -103
- package/dist/routes/signout.d.ts +0 -70
- package/dist/routes/stepUp.d.ts +0 -48
- package/dist/routes/userStatus.d.ts +0 -72
- package/dist/scim/config.d.ts +0 -57
- package/dist/scim/extensions.d.ts +0 -30
- package/dist/scim/inMemoryScimTokenStore.d.ts +0 -2
- package/dist/scim/postgresScimTokenStore.d.ts +0 -86
- package/dist/scim/routes.d.ts +0 -366
- package/dist/scim/serialize.d.ts +0 -83
- package/dist/scim/types.d.ts +0 -54
- package/dist/session/access.d.ts +0 -33
- package/dist/session/anonymous.d.ts +0 -12
- package/dist/session/cleanup.d.ts +0 -45
- package/dist/session/impersonation.d.ts +0 -34
- package/dist/session/inMemoryStore.d.ts +0 -7
- package/dist/session/multiSession.d.ts +0 -27
- package/dist/session/neonStore.d.ts +0 -513
- package/dist/session/promote.d.ts +0 -23
- package/dist/session/redisStore.d.ts +0 -6
- package/dist/session/sessionsConfig.d.ts +0 -9
- package/dist/session/state.d.ts +0 -33
- package/dist/session/types.d.ts +0 -21
- package/dist/session/userSessions.d.ts +0 -19
- package/dist/sso/config.d.ts +0 -149
- package/dist/sso/discoveryRoute.d.ts +0 -63
- package/dist/sso/inMemorySamlServiceProviderStore.d.ts +0 -2
- package/dist/sso/inMemorySsoConnectionStore.d.ts +0 -2
- package/dist/sso/oidcRoutes.d.ts +0 -98
- package/dist/sso/postgresSamlServiceProviderStore.d.ts +0 -101
- package/dist/sso/postgresSsoConnectionStore.d.ts +0 -116
- package/dist/sso/samlIdpRoutes.d.ts +0 -139
- package/dist/sso/samlRoutes.d.ts +0 -179
- package/dist/sso/types.d.ts +0 -53
- package/dist/stores/postgres.d.ts +0 -5
- package/dist/stores/redis.d.ts +0 -5
- package/dist/telemetry/tracing.d.ts +0 -15
- package/dist/tenancy.d.ts +0 -9
- package/dist/typeGuards.d.ts +0 -6
- package/dist/typebox.d.ts +0 -4
- package/dist/types.d.ts +0 -421
- package/dist/utils.d.ts +0 -45
- package/dist/vault/config.d.ts +0 -20
- package/dist/vault/inMemoryVaultStore.d.ts +0 -2
- package/dist/vault/postgresVaultStore.d.ts +0 -86
- package/dist/vault/types.d.ts +0 -14
- package/dist/vc/inMemoryVpStores.d.ts +0 -2
- package/dist/vc/openid4vp.d.ts +0 -82
- package/dist/vc/postgresVcStores.d.ts +0 -300
- package/dist/vc/sdJwt.d.ts +0 -37
- package/dist/vc/statusList.d.ts +0 -29
- package/dist/vc/statusListRoutes.d.ts +0 -63
- package/dist/vc/vpRoutes.d.ts +0 -120
- package/dist/webauthn/adapter.d.ts +0 -59
- package/dist/webauthn/config.d.ts +0 -36
- package/dist/webauthn/inMemoryWebAuthnCredentialStore.d.ts +0 -2
- package/dist/webauthn/postgresWebAuthnCredentialStore.d.ts +0 -146
- package/dist/webauthn/routes.d.ts +0 -155
- package/dist/webauthn/types.d.ts +0 -17
- package/dist/webhooks/config.d.ts +0 -34
- package/dist/webhooks/dispatcher.d.ts +0 -3
- package/dist/webhooks/inMemoryStore.d.ts +0 -2
- package/dist/webhooks/postgresStore.d.ts +0 -116
- package/dist/webhooks/sign.d.ts +0 -11
- package/dist/webhooks/types.d.ts +0 -25
package/dist/oidc/keys.d.ts
DELETED
|
@@ -1,35 +0,0 @@
|
|
|
1
|
-
type SigningKeyIdentity = {
|
|
2
|
-
kid: string;
|
|
3
|
-
publicJwk: JsonWebKey;
|
|
4
|
-
};
|
|
5
|
-
/** ES256 signing material can remain local for development or be delegated to
|
|
6
|
-
* a non-exportable KMS/HSM adapter. External signers return the 64-byte JOSE
|
|
7
|
-
* ECDSA signature (r || s), not an ASN.1 DER envelope. */
|
|
8
|
-
export type SigningKey = SigningKeyIdentity & ({
|
|
9
|
-
privateJwk: JsonWebKey;
|
|
10
|
-
sign?: never;
|
|
11
|
-
} | {
|
|
12
|
-
privateJwk?: never;
|
|
13
|
-
sign: (input: Uint8Array) => Promise<Uint8Array>;
|
|
14
|
-
});
|
|
15
|
-
export declare const generateSigningKey: () => Promise<SigningKey>;
|
|
16
|
-
export declare const jwkThumbprint: (jwk: JsonWebKey) => Promise<string>;
|
|
17
|
-
export declare const signJwt: (payload: Record<string, unknown>, signing: SigningKey, typ?: string) => Promise<string>;
|
|
18
|
-
export declare const toPublicJwk: (key: SigningKey) => {
|
|
19
|
-
alg: string;
|
|
20
|
-
crv: string | undefined;
|
|
21
|
-
kid: string;
|
|
22
|
-
kty: string | undefined;
|
|
23
|
-
use: string;
|
|
24
|
-
x: string | undefined;
|
|
25
|
-
y: string | undefined;
|
|
26
|
-
};
|
|
27
|
-
export declare const verifyJwt: (token: string, publicJwk: JsonWebKey) => Promise<{
|
|
28
|
-
header: {
|
|
29
|
-
[k: string]: any;
|
|
30
|
-
};
|
|
31
|
-
payload: {
|
|
32
|
-
[k: string]: any;
|
|
33
|
-
};
|
|
34
|
-
} | undefined>;
|
|
35
|
-
export {};
|
package/dist/oidc/logout.d.ts
DELETED
|
@@ -1,38 +0,0 @@
|
|
|
1
|
-
import type { OidcProviderConfig } from './config';
|
|
2
|
-
import type { LogoutDelivery, OAuthClient } from './types';
|
|
3
|
-
export declare const resolvePostLogoutRedirect: ({ client, requestedUri }: {
|
|
4
|
-
client: OAuthClient;
|
|
5
|
-
requestedUri: string | undefined;
|
|
6
|
-
}) => string | undefined;
|
|
7
|
-
export declare const verifyIdTokenHint: <UserType>({ config, idTokenHint }: {
|
|
8
|
-
config: OidcProviderConfig<UserType>;
|
|
9
|
-
idTokenHint: string;
|
|
10
|
-
}) => Promise<{
|
|
11
|
-
audClientId: string;
|
|
12
|
-
sub: string;
|
|
13
|
-
} | undefined>;
|
|
14
|
-
type DeliveryFetch = (url: string, init: {
|
|
15
|
-
body: string;
|
|
16
|
-
headers: Record<string, string>;
|
|
17
|
-
method: string;
|
|
18
|
-
signal: AbortSignal;
|
|
19
|
-
}) => Promise<{
|
|
20
|
-
ok: boolean;
|
|
21
|
-
status: number;
|
|
22
|
-
}>;
|
|
23
|
-
export declare const mintLogoutToken: <UserType>({ clientId, config, now, sub }: {
|
|
24
|
-
clientId: string;
|
|
25
|
-
config: OidcProviderConfig<UserType>;
|
|
26
|
-
now?: number;
|
|
27
|
-
sub: string;
|
|
28
|
-
}) => Promise<string>;
|
|
29
|
-
export declare const fanOutBackchannelLogout: <UserType>({ config, fetchImpl, now, onError, skipClientId, timeoutMs, userId }: {
|
|
30
|
-
config: OidcProviderConfig<UserType>;
|
|
31
|
-
fetchImpl?: DeliveryFetch;
|
|
32
|
-
now?: number;
|
|
33
|
-
onError?: (delivery: LogoutDelivery) => void | Promise<void>;
|
|
34
|
-
skipClientId?: string;
|
|
35
|
-
timeoutMs?: number;
|
|
36
|
-
userId: string;
|
|
37
|
-
}) => Promise<string[]>;
|
|
38
|
-
export {};
|
package/dist/oidc/mtls.d.ts
DELETED
|
@@ -1,11 +0,0 @@
|
|
|
1
|
-
export declare const computeCertThumbprint: (derBytes: Uint8Array) => Promise<string>;
|
|
2
|
-
export declare const extractRfc9440ClientCert: (headers: Headers) => Uint8Array<ArrayBuffer> | undefined;
|
|
3
|
-
export declare const resolveClientCert: ({ extract, headers }: {
|
|
4
|
-
extract: ((headers: Headers) => Promise<Uint8Array | undefined> | Uint8Array | undefined) | undefined;
|
|
5
|
-
headers: Headers;
|
|
6
|
-
}) => Promise<Uint8Array<ArrayBufferLike> | undefined>;
|
|
7
|
-
export declare const verifyCertificateBoundToken: ({ cnfThumbprint, extract, headers }: {
|
|
8
|
-
cnfThumbprint: string | undefined;
|
|
9
|
-
extract: ((headers: Headers) => Promise<Uint8Array | undefined> | Uint8Array | undefined) | undefined;
|
|
10
|
-
headers: Headers;
|
|
11
|
-
}) => Promise<boolean>;
|
package/dist/oidc/par.d.ts
DELETED
|
@@ -1,28 +0,0 @@
|
|
|
1
|
-
import type { OAuthClient, PushedAuthorizationRequestStore } from './types';
|
|
2
|
-
export declare const DEFAULT_PAR_TTL_MS: number;
|
|
3
|
-
export declare const REQUEST_URI_PREFIX = "urn:ietf:params:oauth:request_uri:";
|
|
4
|
-
export type PushAuthorizationResult = {
|
|
5
|
-
body: {
|
|
6
|
-
expires_in: number;
|
|
7
|
-
request_uri: string;
|
|
8
|
-
};
|
|
9
|
-
ok: true;
|
|
10
|
-
} | {
|
|
11
|
-
body: {
|
|
12
|
-
error: string;
|
|
13
|
-
};
|
|
14
|
-
ok: false;
|
|
15
|
-
status: 400 | 401;
|
|
16
|
-
};
|
|
17
|
-
export declare const consumePushedRequest: ({ clientId, requestUri, store }: {
|
|
18
|
-
clientId: string;
|
|
19
|
-
requestUri: string;
|
|
20
|
-
store: PushedAuthorizationRequestStore;
|
|
21
|
-
}) => Promise<Record<string, string> | undefined>;
|
|
22
|
-
export declare const pushAuthorizationRequest: ({ client, now, params, store, ttlMs }: {
|
|
23
|
-
client: OAuthClient;
|
|
24
|
-
now?: number;
|
|
25
|
-
params: Record<string, string>;
|
|
26
|
-
store: PushedAuthorizationRequestStore;
|
|
27
|
-
ttlMs?: number;
|
|
28
|
-
}) => Promise<PushAuthorizationResult>;
|