@absolutejs/auth 0.71.0 → 0.73.0

package/dist/server.d.ts

@@ -17,6 +17,7 @@ export { protectRoutePlugin } from './routes/protectRoute';
 export { readSessionCookie } from './session/cookieReader';
 export { requireAuthPlugin } from './routes/requireAuth';
 export { createAbsoluteAuthSyncBridge, type AbsoluteAuthSyncBridge, type AbsoluteAuthSyncContext } from './syncBridge';
+export { deriveAuthSyncNamespace } from './syncNamespace';
 export type { ScimConfig } from './scim/config';
 export type { ScimFilter, ScimGroup, ScimGroupInput, ScimTokenStore, ScimUser, ScimUserInput } from './scim/types';
 export { createPostgresScimTokenStore } from './scim/postgresScimTokenStore';

package/dist/server.js

@@ -5820,8 +5820,35 @@ var issueSocketTicket = async ({
   return { expiresInMs: ttlMs, ticket };
 };
 
+// src/syncNamespace.ts
+var base64Url2 = (value) => {
+  let binary = "";
+  for (const byte of value)
+    binary += String.fromCharCode(byte);
+  return btoa(binary).replaceAll("+", "-").replaceAll("/", "_").replace(/=+$/u, "");
+};
+var deriveAuthSyncNamespace = async ({
+  clientId,
+  issuer,
+  partition,
+  subject
+}) => {
+  if (clientId.length === 0 || issuer.length === 0 || subject.length === 0)
+    throw new TypeError("Auth Sync namespace requires issuer, clientId, and subject.");
+  const digest = await crypto.subtle.digest("SHA-256", new TextEncoder().encode(JSON.stringify([issuer, clientId, subject, partition ?? null])));
+  return `auth:v1:${base64Url2(new Uint8Array(digest))}`;
+};
+var readAuthSyncPartition = (user) => {
+  if (typeof user !== "object" || user === null)
+    return;
+  const value = Reflect.get(user, "absolutejs_sync_partition");
+  return typeof value === "string" && value.length > 0 ? value : undefined;
+};
+
 // src/syncBridge.ts
+var PWA_SYNC_CLIENT_ID = "@absolutejs/pwa";
 var toSyncContext = (authPrincipal) => authPrincipal ? { authPrincipal, user: authPrincipal.user } : undefined;
+var isSessionAuthPrincipal = (value) => typeof value === "object" && value !== null && Reflect.get(value, "kind") === "session" && typeof Reflect.get(value, "subject") === "string" && Reflect.get(value, "subject").length > 0 && Reflect.has(value, "user");
 var createAbsoluteAuthSyncBridge = (accessTokens) => ({
   consumeSocketTicket: async ({ audience, ticket }) => {
     const store = accessTokens.oidc.socketTicketStore;
@@ -5837,7 +5864,23 @@ var createAbsoluteAuthSyncBridge = (accessTokens) => ({
   resolveBearer: async ({ authorization }) => toSyncContext(await resolveAccessTokenPrincipal({
     authorization,
     config: accessTokens
-  }))
+  })),
+  resolveSession: async ({ authPrincipal }) => {
+    if (!isSessionAuthPrincipal(authPrincipal))
+      return;
+    const context = toSyncContext(authPrincipal);
+    if (!context)
+      return;
+    return {
+      context,
+      namespace: await deriveAuthSyncNamespace({
+        clientId: PWA_SYNC_CLIENT_ID,
+        issuer: accessTokens.oidc.issuer,
+        partition: readAuthSyncPartition(authPrincipal.user),
+        subject: authPrincipal.subject
+      })
+    };
+  }
 });
 
 // src/authContext.ts
@@ -41403,6 +41446,7 @@ export {
   isUserSessionId,
   instantiateUserSession,
   extractPropFromIdentity,
+  deriveAuthSyncNamespace,
   createSetupSession,
   createPostgresSsoConnectionStore,
   createPostgresSetupSessionStore,
@@ -41414,5 +41458,5 @@ export {
   VerificationProviderError
 };
 
-//# debugId=A98DDD902DA1838664756E2164756E21
+//# debugId=34B819C8B800408C64756E2164756E21
 //# sourceMappingURL=server.js.map