@absolutejs/auth 0.81.0 → 0.83.0

package/dist/oidc/routes.d.ts

@@ -24,17 +24,17 @@ export declare const oidcProviderRoutes: <UserType>(config: OidcProviderConfig<U
                 claims?: string | undefined;
                 resource?: string | undefined;
                 request?: string | undefined;
+                state?: string | undefined;
+                response_mode?: string | undefined;
+                code_challenge?: string | undefined;
                 redirect_uri?: string | undefined;
+                response_type?: string | undefined;
                 acr_values?: string | undefined;
-                code_challenge?: string | undefined;
                 code_challenge_method?: string | undefined;
                 id_token_hint?: string | undefined;
                 max_age?: string | undefined;
                 prompt?: string | undefined;
                 request_uri?: string | undefined;
-                response_mode?: string | undefined;
-                response_type?: string | undefined;
-                state?: string | undefined;
             };
             headers: unknown;
             response: {
@@ -68,8 +68,8 @@ export declare const oidcProviderRoutes: <UserType>(config: OidcProviderConfig<U
                 grant_type?: string | undefined;
                 claim_token?: string | undefined;
                 assertion?: string | undefined;
-                client_secret?: string | undefined;
                 redirect_uri?: string | undefined;
+                client_secret?: string | undefined;
                 client_assertion?: string | undefined;
                 client_assertion_type?: string | undefined;
                 code_verifier?: string | undefined;
@@ -106,13 +106,13 @@ export declare const oidcProviderRoutes: <UserType>(config: OidcProviderConfig<U
                 audience?: string | undefined;
                 claims?: string | undefined;
                 resource?: string | undefined;
-                client_secret?: string | undefined;
+                state?: string | undefined;
+                code_challenge?: string | undefined;
                 redirect_uri?: string | undefined;
+                response_type?: string | undefined;
+                client_secret?: string | undefined;
                 acr_values?: string | undefined;
-                code_challenge?: string | undefined;
                 code_challenge_method?: string | undefined;
-                response_type?: string | undefined;
-                state?: string | undefined;
                 client_assertion?: string | undefined;
                 client_assertion_type?: string | undefined;
             };
@@ -203,9 +203,9 @@ export declare const oidcProviderRoutes: <UserType>(config: OidcProviderConfig<U
             body: {
                 client_id?: string | undefined;
                 scope?: string | undefined;
-                client_secret?: string | undefined;
                 login_hint?: string | undefined;
                 binding_message?: string | undefined;
+                client_secret?: string | undefined;
             };
             params: {};
             query: unknown;
@@ -291,8 +291,8 @@ export declare const oidcProviderRoutes: <UserType>(config: OidcProviderConfig<U
             params: {};
             query: {
                 client_id?: string | undefined;
-                id_token_hint?: string | undefined;
                 state?: string | undefined;
+                id_token_hint?: string | undefined;
                 post_logout_redirect_uri?: string | undefined;
             };
             headers: unknown;
@@ -317,8 +317,8 @@ export declare const oidcProviderRoutes: <UserType>(config: OidcProviderConfig<U
         post: {
             body: {
                 client_id?: string | undefined;
-                id_token_hint?: string | undefined;
                 state?: string | undefined;
+                id_token_hint?: string | undefined;
                 post_logout_redirect_uri?: string | undefined;
             };
             params: {};
@@ -347,11 +347,11 @@ export declare const oidcProviderRoutes: <UserType>(config: OidcProviderConfig<U
                 jwks?: any;
                 scope?: string | undefined;
                 backchannel_logout_uri?: string | undefined;
-                client_name?: string | undefined;
-                grant_types?: string[] | undefined;
                 jwks_uri?: string | undefined;
                 post_logout_redirect_uris?: string[] | undefined;
                 redirect_uris?: string[] | undefined;
+                client_name?: string | undefined;
+                grant_types?: string[] | undefined;
             };
             params: {};
             query: unknown;
@@ -411,11 +411,11 @@ export declare const oidcProviderRoutes: <UserType>(config: OidcProviderConfig<U
                     jwks?: any;
                     scope?: string | undefined;
                     backchannel_logout_uri?: string | undefined;
-                    client_name?: string | undefined;
-                    grant_types?: string[] | undefined;
                     jwks_uri?: string | undefined;
                     post_logout_redirect_uris?: string[] | undefined;
                     redirect_uris?: string[] | undefined;
+                    client_name?: string | undefined;
+                    grant_types?: string[] | undefined;
                 };
                 params: {
                     clientId: string;

package/dist/routes/signout.d.ts

@@ -5,7 +5,198 @@ type SignOutProps<UserType> = {
     signoutRoute?: RouteString;
     onSignOut: OnSignOut<UserType>;
 };
-export declare const signout: <UserType>({ authSessionStore, signoutRoute, onSignOut }: SignOutProps<UserType>) => import("elysia/types").AddRoute<"", "local", {
+/** Fixed path for directly typed Eden clients; the same session revocation and
+ * cookie-clearing implementation as auth's configurable sign-out route. */
+export declare const createSignoutApi: <UserType>(configuration: {
+    authSessionStore: AuthSessionStore<UserType>;
+    onSignOut?: OnSignOut<UserType>;
+}) => import("elysia/types").AddRoute<"", "local", {
+    decorator: {};
+    store: {
+        session: SessionRecord<UserType>;
+        unregisteredSession: import("..").UnregisteredSessionRecord;
+    };
+    derive: {};
+}, {
+    typebox: {};
+    error: [];
+}, import("elysia/types").DefaultMetadata, {}, import("elysia/types").DefaultEphemeral, {
+    derive: {};
+    schema: {};
+    schemas: {};
+    response: {};
+    error: [];
+}, "delete", "/oauth2/signout", import("elysia/types").IntersectIfObjectSchema<import("elysia").UnwrapRoute<{
+    cookie: import("elysia").TCookieObject<{
+        auth_provider: import("typebox").TOptional<import("typebox").TString>;
+        user_session_id: import("typebox").TOptional<import("typebox").TTemplateLiteral<"^.*-.*-.*-.*-.*$">>;
+    }>;
+}, {}, "/oauth2/signout">, import("elysia/types").MergeScopedSchemas<{}, {}, {}>>, {}, ({ status, store: { session }, cookie: { user_session_id, auth_provider } }: {
+    body: unknown;
+    query: Record<string, string | undefined>;
+    params: {};
+    headers: Record<string, string | undefined>;
+    cookie: Record<string, import("elysia").Cookie<unknown>> & {
+        user_session_id: import("elysia").Cookie<`${string}-${string}-${string}-${string}-${string}` | undefined>;
+        auth_provider: import("elysia").Cookie<string | undefined>;
+    };
+    server: import("elysia").Server | null;
+    redirect: import("elysia").redirect;
+    set: {
+        headers: import("elysia").HTTPHeaders;
+        status?: number | keyof import("elysia").StatusMap;
+        cookie?: Record<string, import("elysia").BaseCookie>;
+    };
+    status: <const Code extends number | keyof import("elysia").StatusMap, const T = Code extends 400 | 401 | 403 | 501 | 204 | 404 | 200 | 301 | 302 | 303 | 307 | 308 | 409 | 100 | 101 | 102 | 103 | 201 | 202 | 203 | 205 | 206 | 207 | 208 | 300 | 304 | 402 | 405 | 406 | 407 | 408 | 410 | 411 | 412 | 413 | 414 | 415 | 416 | 417 | 418 | 420 | 421 | 422 | 423 | 424 | 425 | 426 | 428 | 429 | 431 | 451 | 500 | 502 | 503 | 504 | 505 | 506 | 507 | 508 | 510 | 511 ? {
+        readonly 100: "Continue";
+        readonly 101: "Switching Protocols";
+        readonly 102: "Processing";
+        readonly 103: "Early Hints";
+        readonly 200: "OK";
+        readonly 201: "Created";
+        readonly 202: "Accepted";
+        readonly 203: "Non-Authoritative Information";
+        readonly 204: "No Content";
+        readonly 205: "Reset Content";
+        readonly 206: "Partial Content";
+        readonly 207: "Multi-Status";
+        readonly 208: "Already Reported";
+        readonly 300: "Multiple Choices";
+        readonly 301: "Moved Permanently";
+        readonly 302: "Found";
+        readonly 303: "See Other";
+        readonly 304: "Not Modified";
+        readonly 307: "Temporary Redirect";
+        readonly 308: "Permanent Redirect";
+        readonly 400: "Bad Request";
+        readonly 401: "Unauthorized";
+        readonly 402: "Payment Required";
+        readonly 403: "Forbidden";
+        readonly 404: "Not Found";
+        readonly 405: "Method Not Allowed";
+        readonly 406: "Not Acceptable";
+        readonly 407: "Proxy Authentication Required";
+        readonly 408: "Request Timeout";
+        readonly 409: "Conflict";
+        readonly 410: "Gone";
+        readonly 411: "Length Required";
+        readonly 412: "Precondition Failed";
+        readonly 413: "Payload Too Large";
+        readonly 414: "URI Too Long";
+        readonly 415: "Unsupported Media Type";
+        readonly 416: "Range Not Satisfiable";
+        readonly 417: "Expectation Failed";
+        readonly 418: "I'm a teapot";
+        readonly 420: "Enhance Your Calm";
+        readonly 421: "Misdirected Request";
+        readonly 422: "Unprocessable Content";
+        readonly 423: "Locked";
+        readonly 424: "Failed Dependency";
+        readonly 425: "Too Early";
+        readonly 426: "Upgrade Required";
+        readonly 428: "Precondition Required";
+        readonly 429: "Too Many Requests";
+        readonly 431: "Request Header Fields Too Large";
+        readonly 451: "Unavailable For Legal Reasons";
+        readonly 500: "Internal Server Error";
+        readonly 501: "Not Implemented";
+        readonly 502: "Bad Gateway";
+        readonly 503: "Service Unavailable";
+        readonly 504: "Gateway Timeout";
+        readonly 505: "HTTP Version Not Supported";
+        readonly 506: "Variant Also Negotiates";
+        readonly 507: "Insufficient Storage";
+        readonly 508: "Loop Detected";
+        readonly 510: "Not Extended";
+        readonly 511: "Network Authentication Required";
+    }[Code] : Code>(code: Code, response?: T) => import("elysia").ElysiaStatus<Code, T, Code extends "Continue" | "Switching Protocols" | "Processing" | "Early Hints" | "OK" | "Created" | "Accepted" | "Non-Authoritative Information" | "No Content" | "Reset Content" | "Partial Content" | "Multi-Status" | "Already Reported" | "Multiple Choices" | "Moved Permanently" | "Found" | "See Other" | "Not Modified" | "Temporary Redirect" | "Permanent Redirect" | "Bad Request" | "Unauthorized" | "Payment Required" | "Forbidden" | "Not Found" | "Method Not Allowed" | "Not Acceptable" | "Proxy Authentication Required" | "Request Timeout" | "Conflict" | "Gone" | "Length Required" | "Precondition Failed" | "Payload Too Large" | "URI Too Long" | "Unsupported Media Type" | "Range Not Satisfiable" | "Expectation Failed" | "I'm a teapot" | "Enhance Your Calm" | "Misdirected Request" | "Unprocessable Content" | "Locked" | "Failed Dependency" | "Too Early" | "Upgrade Required" | "Precondition Required" | "Too Many Requests" | "Request Header Fields Too Large" | "Unavailable For Legal Reasons" | "Internal Server Error" | "Not Implemented" | "Bad Gateway" | "Service Unavailable" | "Gateway Timeout" | "HTTP Version Not Supported" | "Variant Also Negotiates" | "Insufficient Storage" | "Loop Detected" | "Not Extended" | "Network Authentication Required" ? {
+        readonly Continue: 100;
+        readonly "Switching Protocols": 101;
+        readonly Processing: 102;
+        readonly "Early Hints": 103;
+        readonly OK: 200;
+        readonly Created: 201;
+        readonly Accepted: 202;
+        readonly "Non-Authoritative Information": 203;
+        readonly "No Content": 204;
+        readonly "Reset Content": 205;
+        readonly "Partial Content": 206;
+        readonly "Multi-Status": 207;
+        readonly "Already Reported": 208;
+        readonly "Multiple Choices": 300;
+        readonly "Moved Permanently": 301;
+        readonly Found: 302;
+        readonly "See Other": 303;
+        readonly "Not Modified": 304;
+        readonly "Temporary Redirect": 307;
+        readonly "Permanent Redirect": 308;
+        readonly "Bad Request": 400;
+        readonly Unauthorized: 401;
+        readonly "Payment Required": 402;
+        readonly Forbidden: 403;
+        readonly "Not Found": 404;
+        readonly "Method Not Allowed": 405;
+        readonly "Not Acceptable": 406;
+        readonly "Proxy Authentication Required": 407;
+        readonly "Request Timeout": 408;
+        readonly Conflict: 409;
+        readonly Gone: 410;
+        readonly "Length Required": 411;
+        readonly "Precondition Failed": 412;
+        readonly "Payload Too Large": 413;
+        readonly "URI Too Long": 414;
+        readonly "Unsupported Media Type": 415;
+        readonly "Range Not Satisfiable": 416;
+        readonly "Expectation Failed": 417;
+        readonly "I'm a teapot": 418;
+        readonly "Enhance Your Calm": 420;
+        readonly "Misdirected Request": 421;
+        readonly "Unprocessable Content": 422;
+        readonly Locked: 423;
+        readonly "Failed Dependency": 424;
+        readonly "Too Early": 425;
+        readonly "Upgrade Required": 426;
+        readonly "Precondition Required": 428;
+        readonly "Too Many Requests": 429;
+        readonly "Request Header Fields Too Large": 431;
+        readonly "Unavailable For Legal Reasons": 451;
+        readonly "Internal Server Error": 500;
+        readonly "Not Implemented": 501;
+        readonly "Bad Gateway": 502;
+        readonly "Service Unavailable": 503;
+        readonly "Gateway Timeout": 504;
+        readonly "HTTP Version Not Supported": 505;
+        readonly "Variant Also Negotiates": 506;
+        readonly "Insufficient Storage": 507;
+        readonly "Loop Detected": 508;
+        readonly "Not Extended": 510;
+        readonly "Network Authentication Required": 511;
+    }[Code] : Code>;
+    defer: (fn: import("elysia/types").AfterResponseHandler<NoInfer<import("elysia/types").IntersectIfObjectSchema<import("elysia").UnwrapRoute<{
+        cookie: import("elysia").TCookieObject<{
+            auth_provider: import("typebox").TOptional<import("typebox").TString>;
+            user_session_id: import("typebox").TOptional<import("typebox").TTemplateLiteral<"^.*-.*-.*-.*-.*$">>;
+        }>;
+    }, {}, "/oauth2/signout">, import("elysia/types").MergeScopedSchemas<{}, {}, {}>>>, NoInfer<{
+        decorator: {};
+        store: {
+            session: SessionRecord<UserType>;
+            unregisteredSession: import("..").UnregisteredSessionRecord;
+        };
+        derive: {};
+    } & {
+        derive: {};
+    }>>) => import("elysia/types").MaybePromise<void>;
+    readonly path: string;
+    route?: string | undefined;
+    rid?: string | undefined;
+    request: Request;
+    store: {
+        session: SessionRecord<UserType>;
+        unregisteredSession: import("..").UnregisteredSessionRecord;
+    };
+}) => Promise<Response | import("elysia").ElysiaStatus<"Bad Request", "Cookies are missing", 400> | import("elysia").ElysiaStatus<"Unauthorized", "No user session id found", 401> | import("elysia").ElysiaStatus<"Internal Server Error", "Sign out operation failed", 500>>>;
+export declare const signout: <UserType>(configuration: SignOutProps<UserType>) => import("elysia/types").AddRoute<"", "local", {
     decorator: {};
     store: {
         session: SessionRecord<UserType>;

package/dist/server.d.ts

@@ -35,3 +35,4 @@ export { instantiateUserSession } from './utils';
 export type { OAuth2TokenResponse, ProviderOption } from 'citra';
 export { extractPropFromIdentity, isValidProviderOption, providers } from 'citra';
 export { createCredentialsApi } from './credentials/api';
+export { createSignoutApi } from './routes/signout';

package/dist/server.js

@@ -12866,9 +12866,18 @@ var runSignOut = async (onSignOut, args) => {
     return false;
   }
 };
-var signout = ({
+var createSignoutApi = (configuration) => createSignoutRoute({
+  ...configuration,
+  onSignOut: configuration.onSignOut,
+  signoutRoute: "/oauth2/signout"
+});
+var signout = (configuration) => createSignoutRoute({
+  ...configuration,
+  signoutRoute: configuration.signoutRoute ?? "/oauth2/signout"
+});
+var createSignoutRoute = ({
   authSessionStore,
-  signoutRoute = "/oauth2/signout",
+  signoutRoute,
   onSignOut
 }) => new Elysia35().use(sessionStore()).delete(signoutRoute, {
   cookie: t28.Cookie({
@@ -42164,6 +42173,7 @@ export {
   createPostgresSetupSessionStore,
   createPostgresSsoConnectionStore,
   createSetupSession,
+  createSignoutApi,
   deriveAuthSyncNamespace,
   extractPropFromIdentity,
   instantiateUserSession,
@@ -42176,5 +42186,5 @@ export {
   userSessionIdTypebox
 };
 
-//# debugId=57C7A1ECE15922C664756E2164756E21
+//# debugId=B801BF9A602847F164756E2164756E21
 //# sourceMappingURL=server.js.map