@absolutejs/auth 0.77.0 → 0.78.0

package/dist/index.js

@@ -3372,8 +3372,8 @@ var failureResponse = (config, failure, requiredScopes) => new Response(JSON.str
 var agentAuthContextPlugin = (config) => new Elysia2({
   name: "@absolutejs/auth/agent-context",
   seed: pluginDependencySeed(config)
-}).derive(({ request }) => ({
-  protectAgent: async (requiredScopes, handleAuth, handleAuthFail) => {
+}).derive(({ request }) => {
+  const protectAgent = async (requiredScopes, handleAuth, handleAuthFail) => {
     if (config === undefined) {
       const failure = {
         code: "Unauthorized",
@@ -3399,8 +3399,9 @@ var agentAuthContextPlugin = (config) => new Elysia2({
       return await handleAuthFail?.(failure) ?? failureResponse(config, failure, requiredScopes);
     }
     return handleAuth(principal);
-  }
-})).as("global");
+  };
+  return { protectAgent };
+}).as("global");
 
 // src/agents/oauthGuide.ts
 var DEFAULT_GUIDE_ROUTE = "/auth.md";
@@ -4611,17 +4612,17 @@ var protectPermissionPlugin = ({
 }).use(sessionStore()).guard({
   cookie: t3.Cookie({ user_session_id: userSessionIdTypebox }),
   schema: "merge"
-}).derive(({ store: { session }, cookie: { user_session_id }, status }) => ({
-  protectPermission: (check, handleAuth, handleAuthFail) => getStatusFromSource({
+}).derive(({ store: { session }, cookie: { user_session_id }, status }) => {
+  const protectPermission = (check, handleAuth, handleAuthFail) => getStatusFromSource({
     authSessionStore,
     session,
     user_session_id
   }).then(async ({ user, error }) => {
     if (error) {
-      return handleAuthFail?.(error) ?? status(error.code, error.message);
+      return await handleAuthFail?.(error) ?? status(error.code, error.message);
     }
     if (!user) {
-      return handleAuthFail?.({
+      return await handleAuthFail?.({
         code: "Unauthorized",
         message: "User is not authenticated"
       }) ?? status("Unauthorized", "User is not authenticated");
@@ -4638,14 +4639,15 @@ var protectPermissionPlugin = ({
         organizationId: check.organizationId,
         type: "authorization_denied"
       });
-      return handleAuthFail?.({
+      return await handleAuthFail?.({
         code: "Forbidden",
         message: "Insufficient permissions"
       }) ?? status("Forbidden", "Insufficient permissions");
     }
     return handleAuth(user);
-  })
-})).as("global");
+  });
+  return { protectPermission };
+}).as("global");
 
 // src/routes/protectRoute.ts
 import { Elysia as Elysia6, t as t4 } from "elysia";
@@ -4709,8 +4711,7 @@ var protectRoutePlugin = ({
 }).derive(async ({
   store: { session },
   cookie: { user_session_id },
-  headers,
-  status
+  headers
 }) => {
   const sessionStatus = await getStatusFromSource({
     authSessionStore,
@@ -4729,25 +4730,30 @@ var protectRoutePlugin = ({
       authorization: headers.authorization,
       config: accessTokens
     });
-  return {
-    authPrincipal,
-    protectRoute: (handleAuth, handleAuthFail) => {
-      const user = authPrincipal?.user;
-      const { error } = sessionStatus;
-      if (error) {
-        if (user)
-          return handleAuth(user);
-        return handleAuthFail?.(error) ?? status(error.code, error.message);
-      }
-      if (!user) {
-        return handleAuthFail?.({
-          code: "Unauthorized",
-          message: "User is not authenticated"
-        }) ?? status("Unauthorized", "User is not authenticated");
-      }
-      return handleAuth(user);
+  return { absoluteAuthStatus: sessionStatus, authPrincipal };
+}).derive(({ absoluteAuthStatus, authPrincipal, status }) => {
+  const protectRoute = async (handleAuth, handleAuthFail) => {
+    if (!absoluteAuthStatus)
+      return await handleAuthFail?.({
+        code: "Unauthorized",
+        message: "User is not authenticated"
+      }) ?? status("Unauthorized", "User is not authenticated");
+    const user = authPrincipal?.user;
+    const { error } = absoluteAuthStatus;
+    if (error) {
+      if (user)
+        return handleAuth(user);
+      return await handleAuthFail?.(error) ?? status(error.code, error.message);
+    }
+    if (!user) {
+      return await handleAuthFail?.({
+        code: "Unauthorized",
+        message: "User is not authenticated"
+      }) ?? status("Unauthorized", "User is not authenticated");
     }
+    return handleAuth(user);
   };
+  return { protectRoute };
 }).as("global");
 
 // src/routes/stepUp.ts
@@ -4760,23 +4766,24 @@ var stepUpPlugin = ({
 }).use(sessionStore()).guard({
   cookie: t5.Cookie({ user_session_id: userSessionIdTypebox }),
   schema: "merge"
-}).derive(({ store: { session }, cookie: { user_session_id }, status }) => ({
-  requireRecentAuth: (maxAgeMs, handleAuth, handleAuthFail) => loadSessionFromSource({
+}).derive(({ store: { session }, cookie: { user_session_id }, status }) => {
+  const requireRecentAuth = (maxAgeMs, handleAuth, handleAuthFail) => loadSessionFromSource({
     authSessionStore,
     session,
     userSessionId: user_session_id.value
-  }).then((userSession) => {
+  }).then(async (userSession) => {
     const authenticatedAt = userSession?.authenticatedAt;
     const isRecent = authenticatedAt !== undefined && Date.now() - authenticatedAt <= maxAgeMs;
     if (!userSession || !isRecent) {
-      return handleAuthFail?.({
+      return await handleAuthFail?.({
         code: "Unauthorized",
         message: "Recent authentication required"
       }) ?? status("Unauthorized", "Recent authentication required");
     }
     return handleAuth(userSession.user);
-  })
-})).as("global");
+  });
+  return { requireRecentAuth };
+}).as("global");
 
 // src/oidc/socketTickets.ts
 init_crypto();
@@ -34330,7 +34337,7 @@ var linkedProviderBindingsTable = pgTable("linked_provider_bindings", {
   available_scopes: jsonb("available_scopes").$type().notNull().default([]),
   capabilities: jsonb("capabilities").$type().default([]),
   connector_provider: varchar("connector_provider", { length: 64 }).notNull(),
-  created_at: timestamp("created_at").notNull().defaultNow(),
+  created_at: timestamp("created_at", { withTimezone: true }).notNull().defaultNow(),
   email: varchar("email", { length: 320 }),
   external_account_id: varchar("external_account_id", {
     length: 255
@@ -34343,18 +34350,18 @@ var linkedProviderBindingsTable = pgTable("linked_provider_bindings", {
   label: varchar("label", { length: 255 }),
   metadata: jsonb("metadata").$type().default({}),
   status: varchar("status", { length: 64 }).$type().notNull(),
-  updated_at: timestamp("updated_at").notNull().defaultNow(),
+  updated_at: timestamp("updated_at", { withTimezone: true }).notNull().defaultNow(),
   username: varchar("username", { length: 255 })
 });
 var linkedProviderGrantsTable = pgTable("linked_provider_grants", {
   access_token_ciphertext: text("access_token_ciphertext"),
   auth_provider_key: varchar("auth_provider_key", { length: 64 }).notNull(),
-  created_at: timestamp("created_at").notNull().defaultNow(),
-  expires_at: timestamp("expires_at"),
+  created_at: timestamp("created_at", { withTimezone: true }).notNull().defaultNow(),
+  expires_at: timestamp("expires_at", { withTimezone: true }),
   granted_scopes: jsonb("granted_scopes").$type().notNull().default([]),
   id: varchar("id", { length: 255 }).primaryKey(),
   last_refresh_error: text("last_refresh_error"),
-  last_refreshed_at: timestamp("last_refreshed_at"),
+  last_refreshed_at: timestamp("last_refreshed_at", { withTimezone: true }),
   metadata: jsonb("metadata").$type().default({}),
   owner_ref: varchar("owner_ref", { length: 255 }).notNull(),
   provider_family: varchar("provider_family", { length: 64 }).notNull(),
@@ -34362,7 +34369,7 @@ var linkedProviderGrantsTable = pgTable("linked_provider_grants", {
   refresh_token_ciphertext: text("refresh_token_ciphertext"),
   status: varchar("status", { length: 64 }).$type().notNull(),
   token_type: varchar("token_type", { length: 64 }),
-  updated_at: timestamp("updated_at").notNull().defaultNow()
+  updated_at: timestamp("updated_at", { withTimezone: true }).notNull().defaultNow()
 });
 var toTimestamp = (value) => value === undefined ? null : new Date(value);
 var fromTimestamp = (value) => value === null ? undefined : value.getTime();
@@ -39797,7 +39804,12 @@ var renderChunk = (chunk) => {
   return "";
 };
 var formatSqlTemplate = (value) => value.queryChunks.map(renderChunk).join("");
-var formatDefault = (value) => {
+var columnSqlType = (column) => {
+  const dimensions = Reflect.get(column, "dimensions");
+  const elementType = column.getSQLType();
+  return typeof dimensions === "number" && dimensions > 0 ? `${elementType}${"[]".repeat(dimensions)}` : elementType;
+};
+var formatScalarDefault = (value) => {
   if (value === null || value === undefined)
     return "NULL";
   if (is(value, SQL))
@@ -39808,15 +39820,17 @@ var formatDefault = (value) => {
     return value ? "true" : "false";
   if (typeof value === "number")
     return String(value);
-  if (Array.isArray(value) || typeof value === "object") {
+  if (typeof value === "object") {
     return `'${JSON.stringify(value)}'::jsonb`;
   }
   return String(value);
 };
-var columnSqlType = (column) => {
+var formatArrayDefault = (values) => `ARRAY[${values.map((value) => Array.isArray(value) ? formatArrayDefault(value) : formatScalarDefault(value)).join(", ")}]`;
+var formatDefault = (column, value) => {
   const dimensions = Reflect.get(column, "dimensions");
-  const elementType = column.getSQLType();
-  return typeof dimensions === "number" && dimensions > 0 ? `${elementType}${"[]".repeat(dimensions)}` : elementType;
+  if (Array.isArray(value) && typeof dimensions === "number" && dimensions > 0)
+    return `${formatArrayDefault(value)}::${columnSqlType(column)}`;
+  return formatScalarDefault(value);
 };
 var columnSql = (column) => {
   const parts = [`"${column.name}"`, columnSqlType(column)];
@@ -39825,7 +39839,7 @@ var columnSql = (column) => {
   if (column.notNull && !column.primary)
     parts.push("NOT NULL");
   if (column.hasDefault && column.default !== undefined) {
-    parts.push(`DEFAULT ${formatDefault(column.default)}`);
+    parts.push(`DEFAULT ${formatDefault(column, column.default)}`);
   }
   if (column.isUnique)
     parts.push("UNIQUE");
@@ -41431,5 +41445,5 @@ export {
   writeWarrant
 };
 
-//# debugId=D2745F53605E4E1E64756E2164756E21
+//# debugId=ED19DD93253BFAE664756E2164756E21
 //# sourceMappingURL=index.js.map