@absolutejs/auth 0.57.7 → 0.57.9

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -78,6 +78,21 @@ export declare const authSessionsTable: import("drizzle-orm/pg-core").PgTableWit
78
78
  identity: undefined;
79
79
  generated: undefined;
80
80
  }>;
81
+ oauth_subject_json: import("drizzle-orm/pg-core").PgBuildColumn<"auth_sessions", import("drizzle-orm/pg-core").Set$Type<import("drizzle-orm/pg-core").PgJsonbBuilder, string | number>, {
82
+ name: string;
83
+ tableName: "auth_sessions";
84
+ dataType: "object json";
85
+ data: string | number;
86
+ driverParam: unknown;
87
+ notNull: false;
88
+ hasDefault: false;
89
+ isPrimaryKey: false;
90
+ isAutoincrement: false;
91
+ hasRuntimeDefault: false;
92
+ enumValues: undefined;
93
+ identity: undefined;
94
+ generated: undefined;
95
+ }>;
81
96
  refresh_token: import("drizzle-orm/pg-core").PgBuildColumn<"auth_sessions", import("drizzle-orm/pg-core").PgTextBuilder<[string, ...string[]]>, {
82
97
  name: string;
83
98
  tableName: "auth_sessions";
@@ -190,6 +205,21 @@ export declare const authUnregisteredSessionsTable: import("drizzle-orm/pg-core"
190
205
  identity: undefined;
191
206
  generated: undefined;
192
207
  }>;
208
+ oauth_subject_json: import("drizzle-orm/pg-core").PgBuildColumn<"auth_unregistered_sessions", import("drizzle-orm/pg-core").Set$Type<import("drizzle-orm/pg-core").PgJsonbBuilder, string | number>, {
209
+ name: string;
210
+ tableName: "auth_unregistered_sessions";
211
+ dataType: "object json";
212
+ data: string | number;
213
+ driverParam: unknown;
214
+ notNull: false;
215
+ hasDefault: false;
216
+ isPrimaryKey: false;
217
+ isAutoincrement: false;
218
+ hasRuntimeDefault: false;
219
+ enumValues: undefined;
220
+ identity: undefined;
221
+ generated: undefined;
222
+ }>;
193
223
  refresh_token: import("drizzle-orm/pg-core").PgBuildColumn<"auth_unregistered_sessions", import("drizzle-orm/pg-core").PgTextBuilder<[string, ...string[]]>, {
194
224
  name: string;
195
225
  tableName: "auth_unregistered_sessions";
@@ -333,6 +363,21 @@ export declare const authSessionSchema: {
333
363
  identity: undefined;
334
364
  generated: undefined;
335
365
  }>;
366
+ oauth_subject_json: import("drizzle-orm/pg-core").PgBuildColumn<"auth_sessions", import("drizzle-orm/pg-core").Set$Type<import("drizzle-orm/pg-core").PgJsonbBuilder, string | number>, {
367
+ name: string;
368
+ tableName: "auth_sessions";
369
+ dataType: "object json";
370
+ data: string | number;
371
+ driverParam: unknown;
372
+ notNull: false;
373
+ hasDefault: false;
374
+ isPrimaryKey: false;
375
+ isAutoincrement: false;
376
+ hasRuntimeDefault: false;
377
+ enumValues: undefined;
378
+ identity: undefined;
379
+ generated: undefined;
380
+ }>;
336
381
  refresh_token: import("drizzle-orm/pg-core").PgBuildColumn<"auth_sessions", import("drizzle-orm/pg-core").PgTextBuilder<[string, ...string[]]>, {
337
382
  name: string;
338
383
  tableName: "auth_sessions";
@@ -445,6 +490,21 @@ export declare const authSessionSchema: {
445
490
  identity: undefined;
446
491
  generated: undefined;
447
492
  }>;
493
+ oauth_subject_json: import("drizzle-orm/pg-core").PgBuildColumn<"auth_unregistered_sessions", import("drizzle-orm/pg-core").Set$Type<import("drizzle-orm/pg-core").PgJsonbBuilder, string | number>, {
494
+ name: string;
495
+ tableName: "auth_unregistered_sessions";
496
+ dataType: "object json";
497
+ data: string | number;
498
+ driverParam: unknown;
499
+ notNull: false;
500
+ hasDefault: false;
501
+ isPrimaryKey: false;
502
+ isAutoincrement: false;
503
+ hasRuntimeDefault: false;
504
+ enumValues: undefined;
505
+ identity: undefined;
506
+ generated: undefined;
507
+ }>;
448
508
  refresh_token: import("drizzle-orm/pg-core").PgBuildColumn<"auth_unregistered_sessions", import("drizzle-orm/pg-core").PgTextBuilder<[string, ...string[]]>, {
449
509
  name: string;
450
510
  tableName: "auth_unregistered_sessions";
package/dist/types.d.ts CHANGED
@@ -89,6 +89,9 @@ export type SessionData<UserType> = {
89
89
  * revoke) read it, and they are all gated on an `auth_provider`. */
90
90
  accessToken?: string;
91
91
  refreshToken?: string;
92
+ /** Normalized OAuth subject retained for provider operations that target an
93
+ * account identifier instead of a token, such as Withings revocation. */
94
+ oauthSubject?: string | number;
92
95
  expiresAt: number;
93
96
  /** When the session was last established by an actual authentication (login, OAuth
94
97
  * callback, or MFA challenge — NOT a token refresh). Drives step-up `requireRecentAuth`. */
@@ -114,11 +117,13 @@ export type UnregisteredSessionData = {
114
117
  expiresAt: number;
115
118
  accessToken?: string;
116
119
  refreshToken?: string;
120
+ oauthSubject?: string | number;
117
121
  };
118
122
  export type UnregisteredSessionRecord = Record<UserSessionId, UnregisteredSessionData>;
119
123
  export type ResolvedOAuthAuthorization = {
120
124
  userIdentity: Record<string, unknown>;
121
125
  accessToken: string;
126
+ oauthSubject?: string | number;
122
127
  refreshToken?: string;
123
128
  expiresAt?: number;
124
129
  tokenType?: string;
@@ -202,7 +207,7 @@ export type OnProfileError = (({ error, authProvider }: {
202
207
  error: unknown;
203
208
  }) => void | Promise<void>) | undefined;
204
209
  export type OnRevocationSuccess = (({ tokenToRevoke, authProvider }: {
205
- tokenToRevoke: string;
210
+ tokenToRevoke: string | number;
206
211
  authProvider: string;
207
212
  authClient?: string;
208
213
  }) => void | Promise<void>) | undefined;
package/dist/utils.d.ts CHANGED
@@ -21,7 +21,7 @@ export declare const resolveCookieSecure: (override?: boolean) => boolean;
21
21
  export declare const resolveOAuthAuthorization: ({ authProvider, providerConfiguration, providerInstance, tokenResponse, now }: {
22
22
  authProvider: string;
23
23
  providerConfiguration?: ProviderConfig;
24
- providerInstance: Pick<OAuth2Client<ProviderOption>, "fetchUserProfile">;
24
+ providerInstance: OAuth2Client<ProviderOption>;
25
25
  tokenResponse: OAuth2TokenResponse;
26
26
  now?: number;
27
27
  }) => Promise<ResolvedOAuthAuthorization>;
package/package.json CHANGED
@@ -1,5 +1,5 @@
1
1
  {
2
- "version": "0.57.7",
2
+ "version": "0.57.9",
3
3
  "name": "@absolutejs/auth",
4
4
  "description": "An authorization library for absolutejs",
5
5
  "repository": {
@@ -81,7 +81,7 @@
81
81
  "@absolutejs/manifest": "^0.7.2",
82
82
  "@neondatabase/serverless": "1.0.0",
83
83
  "@sinclair/typebox": "^0.34.0",
84
- "citra": "0.29.7"
84
+ "citra": "0.29.10"
85
85
  },
86
86
  "devDependencies": {
87
87
  "@absolutejs/absolute": "^0.19.0-beta.1023",