@absolutejs/auth 0.65.2 → 0.65.4

package/dist/index.js

@@ -4687,6 +4687,26 @@ import { Elysia as Elysia9, t as t6 } from "elysia";
 
 // src/utils.ts
 init_constants();
+
+// src/types.ts
+function isJsonValue(value) {
+  if (value === null || typeof value === "boolean" || typeof value === "string")
+    return true;
+  if (typeof value === "number")
+    return Number.isFinite(value);
+  if (Array.isArray(value))
+    return value.every(isJsonValue);
+  if (typeof value !== "object")
+    return false;
+  return Object.values(value).every(isJsonValue);
+}
+var parseJsonObject = (value) => {
+  if (!isJsonValue(value) || value === null || Array.isArray(value) || typeof value !== "object")
+    throw new TypeError("Expected a JSON object");
+  return value;
+};
+
+// src/utils.ts
 var MILLISECONDS_IN_A_SECOND2 = 1000;
 var readOptionalString = (value, property) => {
   const candidate = Reflect.get(value, property);
@@ -4846,7 +4866,7 @@ var resolveOAuthAuthorization = async ({
     oauthSubject,
     refreshToken,
     tokenType: typeof tokenType === "string" ? tokenType : undefined,
-    userIdentity
+    userIdentity: parseJsonObject(userIdentity)
   };
 };
 var parseExpiresInSeconds = (expiresIn) => {
@@ -30868,6 +30888,14 @@ __export(exports_value2, {
 // src/session/redisStore.ts
 var SESSION_SEGMENT = "sess:";
 var UNREGISTERED_SEGMENT = "unreg:";
+var jsonValueSchema = Type.Recursive((self) => Type.Union([
+  Type.String(),
+  Type.Number(),
+  Type.Boolean(),
+  Type.Null(),
+  Type.Array(self),
+  Type.Record(Type.String(), self)
+]));
 var impersonatorSchema = Type.Object({
   actorEmail: Type.Optional(Type.String()),
   actorId: Type.String(),
@@ -30897,8 +30925,8 @@ var unregisteredSessionSchema = Type.Object({
   expiresAt: Type.Number(),
   oauthSubject: Type.Optional(Type.Union([Type.String(), Type.Number()])),
   refreshToken: Type.Optional(Type.String()),
-  sessionInformation: Type.Optional(Type.Record(Type.String(), Type.Unknown())),
-  userIdentity: Type.Optional(Type.Record(Type.String(), Type.Unknown()))
+  sessionInformation: Type.Optional(Type.Record(Type.String(), jsonValueSchema)),
+  userIdentity: Type.Optional(Type.Record(Type.String(), jsonValueSchema))
 });
 var parseJson = (raw) => {
   if (raw === null)
@@ -31016,8 +31044,8 @@ var annotateFailureMetadata = (metadata, report, now) => ({
   ...metadata ?? {},
   lastCredentialFailureAt: now,
   lastCredentialFailureCode: report.code,
-  lastCredentialFailureMessage: report.message,
-  lastCredentialFailureRetryAt: report.retryAt
+  ...report.message === undefined ? {} : { lastCredentialFailureMessage: report.message },
+  ...report.retryAt === undefined ? {} : { lastCredentialFailureRetryAt: report.retryAt }
 });
 var sortNewestFirst = (items) => [...items].sort((left, right) => right.updatedAt - left.updatedAt);
 var resolveGrantFailureStatus = (grant, report) => {
@@ -37763,6 +37791,7 @@ export {
   parseSdJwtVc,
   parseSchema,
   parsePresentationToken,
+  parseJsonObject,
   organizationsTable,
   organizationRoutes,
   organizationMembershipsTable,
@@ -37820,6 +37849,7 @@ export {
   isOIDCProviderOption,
   isMfaEnrolled,
   isLegacyHash,
+  isJsonValue,
   isImpersonating,
   isE164Phone,
   isDisposableEmail,
@@ -38151,5 +38181,5 @@ export {
   AGENT_CLAIM_GRANT_TYPE
 };
 
-//# debugId=0ABB16F4AD8BF1CD64756E2164756E21
+//# debugId=C6EA4E2761E1FA9664756E2164756E21
 //# sourceMappingURL=index.js.map