@absolutejs/auth 0.56.2 → 0.56.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (218) hide show
  1. package/dist/cli/migrate.js.map +1 -1
  2. package/dist/index.js +45 -1
  3. package/dist/index.js.map +4 -4
  4. package/dist/oidc/index.js +15 -1
  5. package/dist/oidc/index.js.map +3 -3
  6. package/dist/server.js +45 -1
  7. package/dist/server.js.map +4 -4
  8. package/package.json +1 -1
  9. package/dist/abuse/captcha.d.ts +0 -11
  10. package/dist/abuse/config.d.ts +0 -29
  11. package/dist/actions.d.ts +0 -27
  12. package/dist/adaptive/config.d.ts +0 -34
  13. package/dist/adaptive/fingerprint.d.ts +0 -2
  14. package/dist/adaptive/inMemoryStores.d.ts +0 -3
  15. package/dist/adaptive/postgresStores.d.ts +0 -245
  16. package/dist/adaptive/types.d.ts +0 -62
  17. package/dist/agents/config.d.ts +0 -44
  18. package/dist/agents/context.d.ts +0 -46
  19. package/dist/agents/idJag.d.ts +0 -49
  20. package/dist/agents/inMemoryStores.d.ts +0 -4
  21. package/dist/agents/oidcAdapter.d.ts +0 -12
  22. package/dist/agents/postgresStores.d.ts +0 -569
  23. package/dist/agents/principal.d.ts +0 -4
  24. package/dist/agents/registration.d.ts +0 -162
  25. package/dist/agents/registrationClient.d.ts +0 -50
  26. package/dist/agents/routes.d.ts +0 -321
  27. package/dist/agents/types.d.ts +0 -129
  28. package/dist/apikeys/config.d.ts +0 -64
  29. package/dist/apikeys/inMemoryStores.d.ts +0 -4
  30. package/dist/apikeys/postgresStores.d.ts +0 -359
  31. package/dist/apikeys/routes.d.ts +0 -83
  32. package/dist/apikeys/types.d.ts +0 -53
  33. package/dist/audit/config.d.ts +0 -9
  34. package/dist/audit/export.d.ts +0 -2
  35. package/dist/audit/inMemoryAuditStore.d.ts +0 -2
  36. package/dist/audit/integrity.d.ts +0 -19
  37. package/dist/audit/postgresAuditStore.d.ts +0 -116
  38. package/dist/audit/siem.d.ts +0 -11
  39. package/dist/audit/types.d.ts +0 -19
  40. package/dist/audit/wrap.d.ts +0 -9
  41. package/dist/authContext.d.ts +0 -193
  42. package/dist/authorization/config.d.ts +0 -19
  43. package/dist/authorization/protectPermission.d.ts +0 -52
  44. package/dist/compliance/cipher.d.ts +0 -11
  45. package/dist/compliance/config.d.ts +0 -18
  46. package/dist/compliance/redaction.d.ts +0 -8
  47. package/dist/compliance/routes.d.ts +0 -89
  48. package/dist/constants.d.ts +0 -10
  49. package/dist/credentials/backgroundOps.d.ts +0 -45
  50. package/dist/credentials/config.d.ts +0 -68
  51. package/dist/credentials/emailValidation.d.ts +0 -9
  52. package/dist/credentials/emailVerification.d.ts +0 -83
  53. package/dist/credentials/import.d.ts +0 -34
  54. package/dist/credentials/inMemoryCredentialStore.d.ts +0 -2
  55. package/dist/credentials/legacyHashers.d.ts +0 -3
  56. package/dist/credentials/login.d.ts +0 -76
  57. package/dist/credentials/passwordPolicy.d.ts +0 -15
  58. package/dist/credentials/passwordReset.d.ts +0 -87
  59. package/dist/credentials/postgresCredentialStore.d.ts +0 -235
  60. package/dist/credentials/register.d.ts +0 -54
  61. package/dist/credentials/routes.d.ts +0 -201
  62. package/dist/credentials/types.d.ts +0 -26
  63. package/dist/crypto.d.ts +0 -32
  64. package/dist/errors.d.ts +0 -12
  65. package/dist/federation/tokenStore.d.ts +0 -29
  66. package/dist/fga/config.d.ts +0 -53
  67. package/dist/fga/inMemoryStores.d.ts +0 -3
  68. package/dist/fga/postgresStores.d.ts +0 -116
  69. package/dist/fga/redisCheckCache.d.ts +0 -11
  70. package/dist/fga/schema.d.ts +0 -2
  71. package/dist/fga/types.d.ts +0 -28
  72. package/dist/htmx/configuredRoutes.d.ts +0 -542
  73. package/dist/htmx/renderers.d.ts +0 -8
  74. package/dist/htmx/routes.d.ts +0 -514
  75. package/dist/htmx/types.d.ts +0 -129
  76. package/dist/linkedProviders/inMemoryStores.d.ts +0 -9
  77. package/dist/linkedProviders/neonStores.d.ts +0 -484
  78. package/dist/linkedProviders/oauthAccountResolver.d.ts +0 -28
  79. package/dist/linkedProviders/oauthResolver.d.ts +0 -9
  80. package/dist/linkedProviders/resolver.d.ts +0 -22
  81. package/dist/lockout/config.d.ts +0 -17
  82. package/dist/lockout/inMemoryLockoutStore.d.ts +0 -2
  83. package/dist/lockout/postgresLockoutStore.d.ts +0 -71
  84. package/dist/lockout/redisLockoutStore.d.ts +0 -3
  85. package/dist/lockout/types.d.ts +0 -12
  86. package/dist/mfa/backupCodes.d.ts +0 -5
  87. package/dist/mfa/challenge.d.ts +0 -70
  88. package/dist/mfa/config.d.ts +0 -50
  89. package/dist/mfa/gate.d.ts +0 -2
  90. package/dist/mfa/inMemoryMfaStore.d.ts +0 -2
  91. package/dist/mfa/management.d.ts +0 -106
  92. package/dist/mfa/postgresMfaStore.d.ts +0 -206
  93. package/dist/mfa/rotation.d.ts +0 -17
  94. package/dist/mfa/routes.d.ts +0 -234
  95. package/dist/mfa/secret.d.ts +0 -2
  96. package/dist/mfa/sms.d.ts +0 -105
  97. package/dist/mfa/totp.d.ts +0 -91
  98. package/dist/mfa/types.d.ts +0 -23
  99. package/dist/migrations/generate.d.ts +0 -2
  100. package/dist/migrations/index.d.ts +0 -5
  101. package/dist/migrations/runner.d.ts +0 -13
  102. package/dist/migrations/types.d.ts +0 -14
  103. package/dist/oidc/clientAuth.d.ts +0 -19
  104. package/dist/oidc/clientIdMetadata.d.ts +0 -32
  105. package/dist/oidc/config.d.ts +0 -296
  106. package/dist/oidc/dpop.d.ts +0 -23
  107. package/dist/oidc/inMemoryStores.d.ts +0 -11
  108. package/dist/oidc/inMemoryVciStores.d.ts +0 -3
  109. package/dist/oidc/jar.d.ts +0 -14
  110. package/dist/oidc/keys.d.ts +0 -35
  111. package/dist/oidc/logout.d.ts +0 -38
  112. package/dist/oidc/mtls.d.ts +0 -11
  113. package/dist/oidc/par.d.ts +0 -28
  114. package/dist/oidc/postgresStores.d.ts +0 -1217
  115. package/dist/oidc/registration.d.ts +0 -138
  116. package/dist/oidc/routes.d.ts +0 -569
  117. package/dist/oidc/types.d.ts +0 -145
  118. package/dist/oidc/userinfo.d.ts +0 -21
  119. package/dist/oidc/vci.d.ts +0 -159
  120. package/dist/oidc/vciRoutes.d.ts +0 -92
  121. package/dist/organizations/config.d.ts +0 -46
  122. package/dist/organizations/inMemoryOrganizationStore.d.ts +0 -2
  123. package/dist/organizations/operations.d.ts +0 -39
  124. package/dist/organizations/postgresOrganizationStore.d.ts +0 -340
  125. package/dist/organizations/routes.d.ts +0 -299
  126. package/dist/organizations/types.d.ts +0 -45
  127. package/dist/passwordless/config.d.ts +0 -43
  128. package/dist/passwordless/inMemoryPasswordlessTokenStore.d.ts +0 -2
  129. package/dist/passwordless/postgresPasswordlessTokenStore.d.ts +0 -56
  130. package/dist/passwordless/routes.d.ts +0 -163
  131. package/dist/passwordless/types.d.ts +0 -9
  132. package/dist/pluginIdentity.d.ts +0 -2
  133. package/dist/portal/config.d.ts +0 -34
  134. package/dist/portal/inMemorySetupSessionStore.d.ts +0 -2
  135. package/dist/portal/operations.d.ts +0 -10
  136. package/dist/portal/postgresSetupSessionStore.d.ts +0 -116
  137. package/dist/portal/routes.d.ts +0 -160
  138. package/dist/portal/types.d.ts +0 -16
  139. package/dist/providers/clients.d.ts +0 -1818
  140. package/dist/providersFromEnv.d.ts +0 -19
  141. package/dist/roles/config.d.ts +0 -27
  142. package/dist/roles/inMemoryRoleStore.d.ts +0 -2
  143. package/dist/roles/operations.d.ts +0 -8
  144. package/dist/roles/postgresRoleStore.d.ts +0 -86
  145. package/dist/roles/resolver.d.ts +0 -17
  146. package/dist/roles/routes.d.ts +0 -106
  147. package/dist/roles/types.d.ts +0 -14
  148. package/dist/routes/authorize.d.ts +0 -102
  149. package/dist/routes/callback.d.ts +0 -64
  150. package/dist/routes/profile.d.ts +0 -70
  151. package/dist/routes/protectRoute.d.ts +0 -51
  152. package/dist/routes/refresh.d.ts +0 -74
  153. package/dist/routes/revoke.d.ts +0 -73
  154. package/dist/routes/sessions.d.ts +0 -103
  155. package/dist/routes/signout.d.ts +0 -70
  156. package/dist/routes/stepUp.d.ts +0 -48
  157. package/dist/routes/userStatus.d.ts +0 -72
  158. package/dist/scim/config.d.ts +0 -57
  159. package/dist/scim/extensions.d.ts +0 -30
  160. package/dist/scim/inMemoryScimTokenStore.d.ts +0 -2
  161. package/dist/scim/postgresScimTokenStore.d.ts +0 -86
  162. package/dist/scim/routes.d.ts +0 -366
  163. package/dist/scim/serialize.d.ts +0 -83
  164. package/dist/scim/types.d.ts +0 -54
  165. package/dist/session/access.d.ts +0 -33
  166. package/dist/session/anonymous.d.ts +0 -12
  167. package/dist/session/cleanup.d.ts +0 -45
  168. package/dist/session/impersonation.d.ts +0 -34
  169. package/dist/session/inMemoryStore.d.ts +0 -7
  170. package/dist/session/multiSession.d.ts +0 -27
  171. package/dist/session/neonStore.d.ts +0 -513
  172. package/dist/session/promote.d.ts +0 -23
  173. package/dist/session/redisStore.d.ts +0 -6
  174. package/dist/session/sessionsConfig.d.ts +0 -9
  175. package/dist/session/state.d.ts +0 -33
  176. package/dist/session/types.d.ts +0 -21
  177. package/dist/session/userSessions.d.ts +0 -19
  178. package/dist/sso/config.d.ts +0 -149
  179. package/dist/sso/discoveryRoute.d.ts +0 -63
  180. package/dist/sso/inMemorySamlServiceProviderStore.d.ts +0 -2
  181. package/dist/sso/inMemorySsoConnectionStore.d.ts +0 -2
  182. package/dist/sso/oidcRoutes.d.ts +0 -98
  183. package/dist/sso/postgresSamlServiceProviderStore.d.ts +0 -101
  184. package/dist/sso/postgresSsoConnectionStore.d.ts +0 -116
  185. package/dist/sso/samlIdpRoutes.d.ts +0 -139
  186. package/dist/sso/samlRoutes.d.ts +0 -179
  187. package/dist/sso/types.d.ts +0 -53
  188. package/dist/stores/postgres.d.ts +0 -5
  189. package/dist/stores/redis.d.ts +0 -5
  190. package/dist/telemetry/tracing.d.ts +0 -15
  191. package/dist/tenancy.d.ts +0 -9
  192. package/dist/typeGuards.d.ts +0 -6
  193. package/dist/typebox.d.ts +0 -4
  194. package/dist/types.d.ts +0 -421
  195. package/dist/utils.d.ts +0 -45
  196. package/dist/vault/config.d.ts +0 -20
  197. package/dist/vault/inMemoryVaultStore.d.ts +0 -2
  198. package/dist/vault/postgresVaultStore.d.ts +0 -86
  199. package/dist/vault/types.d.ts +0 -14
  200. package/dist/vc/inMemoryVpStores.d.ts +0 -2
  201. package/dist/vc/openid4vp.d.ts +0 -82
  202. package/dist/vc/postgresVcStores.d.ts +0 -300
  203. package/dist/vc/sdJwt.d.ts +0 -37
  204. package/dist/vc/statusList.d.ts +0 -29
  205. package/dist/vc/statusListRoutes.d.ts +0 -63
  206. package/dist/vc/vpRoutes.d.ts +0 -120
  207. package/dist/webauthn/adapter.d.ts +0 -59
  208. package/dist/webauthn/config.d.ts +0 -36
  209. package/dist/webauthn/inMemoryWebAuthnCredentialStore.d.ts +0 -2
  210. package/dist/webauthn/postgresWebAuthnCredentialStore.d.ts +0 -146
  211. package/dist/webauthn/routes.d.ts +0 -155
  212. package/dist/webauthn/types.d.ts +0 -17
  213. package/dist/webhooks/config.d.ts +0 -34
  214. package/dist/webhooks/dispatcher.d.ts +0 -3
  215. package/dist/webhooks/inMemoryStore.d.ts +0 -2
  216. package/dist/webhooks/postgresStore.d.ts +0 -116
  217. package/dist/webhooks/sign.d.ts +0 -11
  218. package/dist/webhooks/types.d.ts +0 -25
@@ -1,179 +0,0 @@
1
- import { Elysia } from 'elysia';
2
- import type { AuthSessionStore } from '../session/types';
3
- import type { SessionRecord } from '../types';
4
- import { type SamlAdapter, type SSOConfig } from './config';
5
- type SamlRoutesProps<UserType> = SSOConfig<UserType> & {
6
- authSessionStore?: AuthSessionStore<UserType>;
7
- cookieSecure?: boolean;
8
- samlAdapter: SamlAdapter;
9
- };
10
- export declare const samlSsoRoutes: <UserType>({ authSessionStore, cookieSecure, getSsoUser, onSsoCallbackError, onSsoCallbackSuccess, samlAdapter, sessionDurationMs, ssoConnectionStore, ssoRoute }: SamlRoutesProps<UserType>) => Elysia<"", {
11
- decorator: {};
12
- store: {
13
- session: SessionRecord<UserType>;
14
- unregisteredSession: import("..").UnregisteredSessionRecord;
15
- };
16
- derive: {};
17
- resolve: {};
18
- }, {
19
- typebox: {};
20
- error: {};
21
- }, {
22
- schema: {};
23
- standaloneSchema: {};
24
- macro: {};
25
- macroFn: {};
26
- parser: {};
27
- response: {};
28
- }, {
29
- [x: string]: {
30
- get: {
31
- body: unknown;
32
- params: {
33
- organizationId: string;
34
- };
35
- query: unknown;
36
- headers: unknown;
37
- response: {
38
- 404: "No SAML connection is configured for this organization";
39
- 200: Response;
40
- 422: {
41
- type: "validation";
42
- on: string;
43
- summary?: string;
44
- message?: string;
45
- found?: unknown;
46
- property?: string;
47
- expected?: string;
48
- };
49
- };
50
- };
51
- };
52
- } & {
53
- [x: string]: {
54
- post: {
55
- body: {
56
- RelayState?: string | undefined;
57
- SAMLResponse: string;
58
- };
59
- params: {
60
- organizationId: string;
61
- };
62
- query: unknown;
63
- headers: unknown;
64
- response: {
65
- 404: "No SAML connection is configured for this organization";
66
- 200: Response;
67
- 422: {
68
- type: "validation";
69
- on: string;
70
- summary?: string;
71
- message?: string;
72
- found?: unknown;
73
- property?: string;
74
- expected?: string;
75
- };
76
- 500: "SAML sign-in failed";
77
- };
78
- };
79
- };
80
- } & {
81
- [x: string]: {
82
- get: {
83
- body: unknown;
84
- params: {
85
- organizationId: string;
86
- };
87
- query: unknown;
88
- headers: unknown;
89
- response: {
90
- 404: "No SAML connection is configured for this organization";
91
- 200: Response;
92
- 422: {
93
- type: "validation";
94
- on: string;
95
- summary?: string;
96
- message?: string;
97
- found?: unknown;
98
- property?: string;
99
- expected?: string;
100
- };
101
- };
102
- };
103
- };
104
- } & {
105
- [x: string]: {
106
- get: {
107
- body: unknown;
108
- params: {
109
- organizationId: string;
110
- };
111
- query: unknown;
112
- headers: unknown;
113
- response: {
114
- 200: Response;
115
- 422: {
116
- type: "validation";
117
- on: string;
118
- summary?: string;
119
- message?: string;
120
- found?: unknown;
121
- property?: string;
122
- expected?: string;
123
- };
124
- };
125
- };
126
- };
127
- } & {
128
- [x: string]: {
129
- get: {
130
- body: unknown;
131
- params: {
132
- organizationId: string;
133
- };
134
- query: {
135
- RelayState?: string | undefined;
136
- SAMLResponse?: string | undefined;
137
- SAMLRequest?: string | undefined;
138
- SigAlg?: string | undefined;
139
- Signature?: string | undefined;
140
- };
141
- headers: unknown;
142
- response: {
143
- 400: "Missing SAMLRequest or SAMLResponse" | "Invalid SAML LogoutRequest";
144
- 501: "SAML Single Logout is not configured";
145
- 404: "No SAML connection is configured for this organization";
146
- 200: Response;
147
- 422: {
148
- type: "validation";
149
- on: string;
150
- summary?: string;
151
- message?: string;
152
- found?: unknown;
153
- property?: string;
154
- expected?: string;
155
- };
156
- 500: "SAML logout failed";
157
- };
158
- };
159
- };
160
- }, {
161
- derive: {};
162
- resolve: {};
163
- schema: {};
164
- standaloneSchema: {};
165
- response: {};
166
- }, {
167
- derive: {};
168
- resolve: {};
169
- schema: {};
170
- standaloneSchema: {};
171
- response: {};
172
- } & {
173
- derive: {};
174
- resolve: {};
175
- schema: {};
176
- standaloneSchema: {};
177
- response: {};
178
- }>;
179
- export {};
@@ -1,53 +0,0 @@
1
- import type { OrganizationId } from '../tenancy';
2
- export type SSOConnectionType = 'oidc' | 'saml';
3
- export type OidcConnectionConfig = {
4
- clientId: string;
5
- clientSecret: string;
6
- issuer: string;
7
- redirectUri: string;
8
- scopes: string[];
9
- };
10
- export type SamlConnectionConfig = {
11
- idpEntityId: string;
12
- idpSloUrl?: string;
13
- idpSsoUrl: string;
14
- idpX509Cert: string;
15
- };
16
- type SSOConnectionBase = {
17
- connectionId: string;
18
- createdAt: number;
19
- enabled: boolean;
20
- organizationId: OrganizationId;
21
- updatedAt: number;
22
- };
23
- export type OidcConnection = SSOConnectionBase & {
24
- config: OidcConnectionConfig;
25
- type: 'oidc';
26
- };
27
- export type SamlConnection = SSOConnectionBase & {
28
- config: SamlConnectionConfig;
29
- type: 'saml';
30
- };
31
- export type SSOConnection = OidcConnection | SamlConnection;
32
- export type SamlServiceProvider = {
33
- acsUrl: string;
34
- createdAt: number;
35
- entityId: string;
36
- nameIdFormat?: string;
37
- signingCert?: string;
38
- updatedAt: number;
39
- };
40
- export type SamlServiceProviderStore = {
41
- deleteServiceProvider: (entityId: string) => Promise<void>;
42
- findServiceProvider: (entityId: string) => Promise<SamlServiceProvider | undefined>;
43
- listServiceProviders: () => Promise<SamlServiceProvider[]>;
44
- saveServiceProvider: (sp: SamlServiceProvider) => Promise<void>;
45
- };
46
- export type SSOConnectionStore = {
47
- deleteConnection: (connectionId: string) => Promise<void>;
48
- getConnection: (connectionId: string) => Promise<SSOConnection | undefined>;
49
- getConnectionByOrganization: (organizationId: OrganizationId, type?: SSOConnectionType) => Promise<SSOConnection | undefined>;
50
- listConnectionsByOrganization: (organizationId: OrganizationId) => Promise<SSOConnection[]>;
51
- saveConnection: (connection: SSOConnection) => Promise<void>;
52
- };
53
- export {};
@@ -1,5 +0,0 @@
1
- import type { PgAsyncDatabase } from 'drizzle-orm/pg-core';
2
- export type AnyPgDatabase = PgAsyncDatabase<any, any>;
3
- export declare const createNeonDatabase: (databaseUrl: string) => import("drizzle-orm/neon-http").NeonHttpDatabase<import("drizzle-orm").EmptyRelations> & {
4
- $client: import("@neondatabase/serverless").NeonQueryFunction<false, false>;
5
- };
@@ -1,5 +0,0 @@
1
- export type RedisLike = {
2
- del: (key: string) => Promise<unknown>;
3
- get: (key: string) => Promise<string | null>;
4
- set: (key: string, value: string, ttlMs: number) => Promise<unknown>;
5
- };
@@ -1,15 +0,0 @@
1
- import type { Attributes, Span, TracerProvider } from '@opentelemetry/api';
2
- export type TracingConfig = {
3
- /** Plug in your `@opentelemetry/sdk-trace-node` (or `-web` / `-bun`) TracerProvider
4
- * here. When omitted, every `withSpan` call short-circuits and the package never
5
- * loads `@opentelemetry/api`. */
6
- tracerProvider: TracerProvider;
7
- /** Service name attribute attached to every span. Defaults to `@absolutejs/auth`. */
8
- serviceName?: string;
9
- };
10
- type SpanWork<Result> = (span: Span | undefined) => Promise<Result>;
11
- type WithSpanFn = <Result>(name: string, attributes: Attributes | undefined, work: SpanWork<Result>) => Promise<Result>;
12
- export declare const __resetTracingForTests: () => void;
13
- export declare const initTracing: (config: TracingConfig) => Promise<void>;
14
- export declare const withSpan: WithSpanFn;
15
- export {};
package/dist/tenancy.d.ts DELETED
@@ -1,9 +0,0 @@
1
- export type OrganizationId = string;
2
- export type WithOrganization<Resource> = Resource & {
3
- organizationId?: OrganizationId;
4
- };
5
- export declare const hasOrganizationScope: (value: {
6
- organizationId?: OrganizationId;
7
- }) => value is {
8
- organizationId: OrganizationId;
9
- };
@@ -1,6 +0,0 @@
1
- import { AuthIntent, StatusReturn, UserSessionId } from './types';
2
- export declare const isValidUser: <UserType>(user: unknown) => user is UserType;
3
- export declare const isAuthIntent: (value: unknown) => value is AuthIntent;
4
- export declare const isNonEmptyString: (str: string | null | undefined) => str is string;
5
- export declare const isStatusResponse: (value: unknown) => value is StatusReturn;
6
- export declare const isUserSessionId: (key: string) => key is UserSessionId;
package/dist/typebox.d.ts DELETED
@@ -1,4 +0,0 @@
1
- export declare const authClientOption: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
2
- export declare const authIntentOption: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"login">, import("@sinclair/typebox").TLiteral<"link_identity">, import("@sinclair/typebox").TLiteral<"link_connector">]>>;
3
- export declare const authProviderOption: import("@sinclair/typebox").TString;
4
- export declare const userSessionIdTypebox: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TTemplateLiteralSyntax<"${string}-${string}-${string}-${string}-${string}">>;