@absolutejs/auth 0.81.0 → 0.83.0

package/docs/PERSISTENT-CREDENTIALS.md

@@ -12,7 +12,8 @@ The application owns user records. The auth package owns credentials and session
 
 ```ts
 import { auth } from '@absolutejs/auth/server';
-import { createPostgresAuthSessionStore, createPostgresCredentialStore, runMigrations } from '@absolutejs/auth';
+import { runBunMigrations } from '@absolutejs/auth/bun';
+import { createPostgresAuthSessionStore, createPostgresCredentialStore } from '@absolutejs/auth';
 import { SQL } from 'bun';
 import { Database } from 'bun:sqlite';
 import { drizzle } from 'drizzle-orm/bun-sql';
@@ -25,20 +26,11 @@ if (!databaseUrl)
   throw new Error(
     "AUTH_DATABASE_URL must point to the isolated acceptance database",
   );
-const migrationClient = new SQL({ url: databaseUrl, max: 1, prepare: false });
-try {
-  await runMigrations({
-    blocks: ["sessions", "credentials"],
-    client: {
-      query: async (text, values) => ({
-        rows: await migrationClient.unsafe(text, values ? [...values] : []),
-      }),
-    },
-    log: () => undefined,
-  });
-} finally {
-  await migrationClient.close();
-}
+await runBunMigrations({
+  databaseUrl,
+  blocks: ['sessions', 'credentials'],
+  log: () => undefined,
+});
 const authDb = drizzle({ client: new SQL(databaseUrl) });
 const decodeCustomer = (value: unknown): Customer => {
   if (typeof value !== "object" || value === null)
@@ -129,3 +121,18 @@ when absent, and scope database access to that user. Export the narrow business
 subapp type for its own Eden client inside React Query. A compiler pass is
 necessary, but real signup, login, reset, authorization and persistence tests
 are still required.
+
+## Typed sign-out (0.82.0+)
+
+For a credentials-only application, mount `createSignoutApi({ authSessionStore })`
+from `@absolutejs/auth/server` alongside `createCredentialsApi`. This provides
+DELETE `/oauth2/signout` with the package's existing revocation and cookie policy.
+Export that narrow subapp and call `treaty<typeof sessionApi>(origin).oauth2.signout.delete()`
+inside a React Query mutation. Check errors before clearing client state. Do not
+create a raw fetch fallback or a forwarding endpoint. When also mounting full
+`auth` for OAuth, its default sign-out path is already present; do not register
+duplicate sign-out handlers with different stores or hooks.
+
+Elysia 2 business routes with request schemas use
+`.post('/api/bookings', { body: t.Object({ classId: t.String() }) }, ({ body }) => ...)`.
+The schema/options argument precedes the handler.

package/package.json

@@ -1,5 +1,5 @@
 {
-	"version": "0.81.0",
+	"version": "0.83.0",
 	"name": "@absolutejs/auth",
 	"description": "An authorization library for absolutejs",
 	"repository": {
@@ -17,7 +17,7 @@
 	"license": "BSL-1.1",
 	"author": "Alex Kahn",
 	"scripts": {
-		"build": "rm -rf dist && bun build src/index.ts src/server.ts src/agents/index.ts src/oidc/index.ts src/saml.ts src/webauthn.ts src/htmx/index.ts src/client/index.ts src/client/mobile.ts src/client/react.ts src/client/vue.ts src/client/solid.ts src/client/svelte.ts src/plugins/index.ts src/providers/index.ts src/linkedProviders/index.ts src/vault/index.ts src/manifest.ts --root src --outdir dist --sourcemap --target=bun --external elysia --external react --external vue --external solid-js --external svelte --external @opentelemetry/api --external @simplewebauthn/browser --external @simplewebauthn/server --external @node-saml/node-saml && bun build src/cli/migrate.ts --outdir dist/cli --sourcemap --target=bun --external @neondatabase/serverless --external drizzle-orm && bun build src/fingerprint-client/index.ts --outdir dist/fingerprint-client --sourcemap --target=browser && bun run scripts/emitDeclarations.ts && chmod +x dist/cli/migrate.js && absolute-manifest emit",
+		"build": "rm -rf dist && bun build src/bun.ts src/index.ts src/server.ts src/agents/index.ts src/oidc/index.ts src/saml.ts src/webauthn.ts src/htmx/index.ts src/client/index.ts src/client/mobile.ts src/client/react.ts src/client/vue.ts src/client/solid.ts src/client/svelte.ts src/plugins/index.ts src/providers/index.ts src/linkedProviders/index.ts src/vault/index.ts src/manifest.ts --root src --outdir dist --sourcemap --target=bun --external elysia --external react --external vue --external solid-js --external svelte --external @opentelemetry/api --external @simplewebauthn/browser --external @simplewebauthn/server --external @node-saml/node-saml && bun build src/cli/migrate.ts --outdir dist/cli --sourcemap --target=bun --external @neondatabase/serverless --external drizzle-orm && bun build src/fingerprint-client/index.ts --outdir dist/fingerprint-client --sourcemap --target=browser && bun run scripts/emitDeclarations.ts && chmod +x dist/cli/migrate.js && absolute-manifest emit",
 		"config": "absolute config",
 		"test": "bun test",
 		"format": "absolute prettier --write",
@@ -201,7 +201,12 @@
 			"import": "./dist/manifest.js",
 			"default": "./dist/manifest.js"
 		},
-		"./manifest.json": "./dist/manifest.json"
+		"./manifest.json": "./dist/manifest.json",
+		"./bun": {
+			"types": "./dist/bun.d.ts",
+			"import": "./dist/bun.js",
+			"require": "./dist/bun.js"
+		}
 	},
 	"type": "module",
 	"files": [