@absolutejs/auth 0.63.0 → 0.65.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/credentials/config.d.ts +11 -0
- package/dist/credentials/login.d.ts +1 -1
- package/dist/credentials/register.d.ts +1 -1
- package/dist/csrf.d.ts +9 -0
- package/dist/index.d.ts +1 -0
- package/dist/index.js +50 -3
- package/dist/index.js.map +9 -8
- package/dist/server.d.ts +1 -0
- package/dist/server.js +49 -3
- package/dist/server.js.map +10 -9
- package/dist/session/cookieReader.d.ts +10 -0
- package/package.json +1 -1
|
@@ -0,0 +1,10 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Read the raw `user_session_id` cookie value from a request's Cookie header.
|
|
3
|
+
* Returns the (URL-decoded) value, or null when absent. Anchored so decoy
|
|
4
|
+
* cookies cannot shadow the real one. Validate the result with `isUserSessionId`
|
|
5
|
+
* before trusting it — this only parses, it does not vouch for the format.
|
|
6
|
+
*
|
|
7
|
+
* Use this instead of hand-rolling a Cookie-header regex in each consumer, so
|
|
8
|
+
* the anchoring lives in exactly one place.
|
|
9
|
+
*/
|
|
10
|
+
export declare const readSessionCookie: (request: Request) => string | null;
|
package/package.json
CHANGED