@absolutejs/auth 0.56.3 → 0.56.5

package/dist/webauthn/config.d.ts

@@ -0,0 +1,36 @@
+import type { AuditEmitter } from '../audit/config';
+import type { AuthSessionStore } from '../session/types';
+import type { RouteString, UserSessionId } from '../types';
+import type { WebAuthnAdapter } from './adapter';
+import type { WebAuthnCredentialStore } from './types';
+export declare const DEFAULT_WEBAUTHN_CHALLENGE_TTL_MS = 300000;
+export declare const DEFAULT_WEBAUTHN_ROUTE: RouteString;
+export declare const DEFAULT_WEBAUTHN_SESSION_TTL_MS: number;
+export declare const WEBAUTHN_CHALLENGE_COOKIE = "webauthn_challenge";
+export type WebAuthnConfig<UserType> = {
+    credentialStore: WebAuthnCredentialStore;
+    getUserId: (user: UserType) => string;
+    getWebAuthnUser: (userId: string) => Promise<UserType | null | undefined> | UserType | null | undefined;
+    origin: string;
+    rpId: string;
+    rpName: string;
+    webauthnAdapter: WebAuthnAdapter;
+    challengeDurationMs?: number;
+    getUserDisplayName?: (user: UserType) => string;
+    getUserName?: (user: UserType) => string;
+    onWebAuthnAuthenticated?: (context: {
+        user: UserType;
+        userSessionId: UserSessionId;
+    }) => void | Promise<void>;
+    onWebAuthnRegistered?: (context: {
+        credentialId: string;
+        userId: string;
+    }) => void | Promise<void>;
+    sessionDurationMs?: number;
+    webauthnRoute?: RouteString;
+};
+export type WebAuthnRouteProps<UserType> = WebAuthnConfig<UserType> & {
+    authSessionStore?: AuthSessionStore<UserType>;
+    cookieSecure?: boolean;
+    emit?: AuditEmitter;
+};

package/dist/webauthn/routes.d.ts

@@ -0,0 +1,155 @@
+import { Elysia } from 'elysia';
+import { type WebAuthnRouteProps } from './config';
+export declare const webauthnRoutes: <UserType>({ authSessionStore, challengeDurationMs, cookieSecure, credentialStore, emit, getUserDisplayName, getUserId, getUserName, getWebAuthnUser, onWebAuthnAuthenticated, onWebAuthnRegistered, origin, rpId, rpName, sessionDurationMs, webauthnAdapter, webauthnRoute }: WebAuthnRouteProps<UserType>) => Elysia<"", {
+    decorator: {};
+    store: {
+        session: import("..").SessionRecord<UserType>;
+        unregisteredSession: import("..").UnregisteredSessionRecord;
+    };
+    derive: {};
+    resolve: {};
+}, {
+    typebox: {};
+    error: {};
+}, {
+    schema: {};
+    standaloneSchema: {};
+    macro: {};
+    macroFn: {};
+    parser: {};
+    response: {};
+}, {
+    [x: string]: {
+        register: {
+            options: {
+                post: {
+                    body: unknown;
+                    params: {};
+                    query: unknown;
+                    headers: unknown;
+                    response: {
+                        401: "Authentication required";
+                        200: {
+                            [x: string]: unknown;
+                        };
+                        422: {
+                            type: "validation";
+                            on: string;
+                            summary?: string;
+                            message?: string;
+                            found?: unknown;
+                            property?: string;
+                            expected?: string;
+                        };
+                    };
+                };
+            };
+        };
+    };
+} & {
+    [x: string]: {
+        register: {
+            verify: {
+                post: {
+                    body: {};
+                    params: {};
+                    query: unknown;
+                    headers: unknown;
+                    response: {
+                        400: "No registration challenge in progress" | "WebAuthn registration failed";
+                        401: "Authentication required";
+                        200: {
+                            readonly credentialId: string;
+                            readonly verified: true;
+                        };
+                        422: {
+                            type: "validation";
+                            on: string;
+                            summary?: string;
+                            message?: string;
+                            found?: unknown;
+                            property?: string;
+                            expected?: string;
+                        };
+                    };
+                };
+            };
+        };
+    };
+} & {
+    [x: string]: {
+        authenticate: {
+            options: {
+                post: {
+                    body: unknown;
+                    params: {};
+                    query: unknown;
+                    headers: unknown;
+                    response: {
+                        200: {
+                            [x: string]: unknown;
+                        };
+                        422: {
+                            type: "validation";
+                            on: string;
+                            summary?: string;
+                            message?: string;
+                            found?: unknown;
+                            property?: string;
+                            expected?: string;
+                        };
+                    };
+                };
+            };
+        };
+    };
+} & {
+    [x: string]: {
+        authenticate: {
+            verify: {
+                post: {
+                    body: {
+                        id: string;
+                    };
+                    params: {};
+                    query: unknown;
+                    headers: unknown;
+                    response: {
+                        400: "No authentication challenge in progress";
+                        401: "Unknown credential" | "WebAuthn authentication failed";
+                        200: {
+                            readonly status: "authenticated";
+                        };
+                        422: {
+                            type: "validation";
+                            on: string;
+                            summary?: string;
+                            message?: string;
+                            found?: unknown;
+                            property?: string;
+                            expected?: string;
+                        };
+                    };
+                };
+            };
+        };
+    };
+}, {
+    derive: {};
+    resolve: {};
+    schema: {};
+    standaloneSchema: {};
+    response: {};
+}, {
+    derive: {};
+    resolve: {};
+    schema: {};
+    standaloneSchema: {};
+    response: {};
+} & {
+    derive: {};
+    resolve: {};
+    schema: {};
+    standaloneSchema: {};
+    response: {};
+}>;

package/dist/webauthn/types.d.ts

@@ -0,0 +1,17 @@
+export type WebAuthnCredential = {
+    backedUp?: boolean;
+    counter: number;
+    createdAt: number;
+    credentialId: string;
+    deviceType?: string;
+    lastUsedAt?: number;
+    publicKey: string;
+    transports?: string[];
+    userId: string;
+};
+export type WebAuthnCredentialStore = {
+    getCredential: (credentialId: string) => Promise<WebAuthnCredential | undefined>;
+    listCredentialsByUser: (userId: string) => Promise<WebAuthnCredential[]>;
+    removeCredential: (credentialId: string) => Promise<void>;
+    saveCredential: (credential: WebAuthnCredential) => Promise<void>;
+};

package/dist/webhooks/config.d.ts

@@ -0,0 +1,34 @@
+import type { WebhookDeliveryStore, WebhookEndpoint, WebhookEvent } from './types';
+export declare const DEFAULT_WEBHOOK_RETRY: {
+    readonly attempts: 3;
+    readonly backoffMultiplier: 2;
+    readonly initialDelayMs: 1000;
+};
+export declare const DEFAULT_WEBHOOK_TIMEOUT_MS: number;
+export type WebhookRetryConfig = {
+    attempts?: number;
+    backoffMultiplier?: number;
+    initialDelayMs?: number;
+};
+export type WebhookFetch = (url: string, init: {
+    body: string;
+    headers: Record<string, string>;
+    method: string;
+    signal: AbortSignal;
+}) => Promise<{
+    ok: boolean;
+    status: number;
+}>;
+export type WebhooksConfig = {
+    deliveryStore?: WebhookDeliveryStore;
+    endpoints: WebhookEndpoint[];
+    fetch?: WebhookFetch;
+    onDeliveryError?: (context: {
+        endpoint: WebhookEndpoint;
+        error: unknown;
+        event: WebhookEvent;
+    }) => void | Promise<void>;
+    retry?: WebhookRetryConfig;
+    sleep?: (ms: number) => Promise<void>;
+    timeoutMs?: number;
+};

package/dist/webhooks/dispatcher.d.ts

@@ -0,0 +1,3 @@
+import type { AuditEvent } from '../audit/types';
+import { type WebhooksConfig } from './config';
+export declare const createWebhookDispatcher: ({ deliveryStore, endpoints, fetch: fetchImpl, onDeliveryError, retry, sleep, timeoutMs }: WebhooksConfig) => (event: AuditEvent) => Promise<void>;

package/dist/webhooks/sign.d.ts

@@ -0,0 +1,11 @@
+export declare const signWebhook: ({ id, payload, secret, timestamp }: {
+    id: string;
+    payload: string;
+    secret: string;
+    timestamp: string;
+}) => Promise<string>;
+export declare const verifyWebhookSignature: ({ headers, payload, secret }: {
+    headers: Record<string, string | undefined>;
+    payload: string;
+    secret: string;
+}) => Promise<boolean>;

package/dist/webhooks/types.d.ts

@@ -0,0 +1,25 @@
+import type { AuditEvent, AuditEventType } from '../audit/types';
+export type WebhookEndpoint = {
+    events?: readonly AuditEventType[];
+    secret: string;
+    url: string;
+};
+export type WebhookEvent = {
+    createdAt: number;
+    data: AuditEvent;
+    id: string;
+    type: AuditEventType;
+};
+export type WebhookDelivery = {
+    attempts: number;
+    createdAt: number;
+    endpointUrl: string;
+    envelope: WebhookEvent;
+    lastError?: string;
+    lastStatus?: number;
+};
+export type WebhookDeliveryStore = {
+    listFailed: (limit?: number) => Promise<WebhookDelivery[]>;
+    recordFailure: (delivery: WebhookDelivery) => Promise<void>;
+    removeFailure: (envelopeId: string) => Promise<void>;
+};

package/package.json

@@ -1,5 +1,5 @@
 {
-	"version": "0.56.3",
+	"version": "0.56.5",
 	"name": "@absolutejs/auth",
 	"description": "An authorization library for absolutejs",
 	"repository": {
@@ -22,9 +22,9 @@
 		"test": "bun test",
 		"format": "absolute prettier --write",
 		"lint": "absolute eslint",
-		"prepublishOnly": "bun run build",
+		"prepack": "bun -e \"for (const path of ['dist/oidc/config.d.ts','dist/oidc/types.d.ts','dist/oidc/postgresStores.d.ts']) if (!(await Bun.file(path).exists())) throw new Error('Run bun run build before packing: missing ' + path)\"",
 		"typecheck": "absolute typecheck",
-		"release": "bun run format && bun run build && bun publish"
+		"release": "bun run format && bun run build && npm publish"
 	},
 	"keywords": [
 		"authorization",