@abtnode/auth 1.17.3-beta-20251127-063055-94957209 → 1.17.3

package/lib/lost-passport.js

@@ -29,6 +29,8 @@ const { getSourceAppPid, getLoginProvider } = require('@blocklet/sdk/lib/util/lo
 const isArray = require('lodash/isArray');
 const { getDeviceData } = require('@abtnode/util/lib/device');
 
+const { getAccessWallet } = require('@abtnode/util/lib/blocklet');
+const { sign } = require('@blocklet/sdk/lib/util/csrf');
 const {
   getFederatedMaster,
   shouldSyncFederated,
@@ -492,14 +494,31 @@ const createLostPassportIssueRoute = ({ node, type, authServicePrefix, createTok
           },
           { ...sessionConfig, didConnectVersion: getDidConnectVersion(req) }
         );
-        await updateSession({ sessionToken, refreshToken }, true);
+
+        const nodeInfo = await node.getNodeInfo();
+        const accessWallet = getAccessWallet({
+          blockletAppDid: blocklet.appDid || blocklet.meta.did,
+          serverSecretKey: nodeInfo.sk,
+        });
+        const csrfToken = sign(accessWallet.secretKey, sessionToken);
+
+        await updateSession({ sessionToken, refreshToken, csrfToken }, true);
       } else if (type === TEAM_TYPES.NODE) {
         const { sessionToken, refreshToken } = await createToken(userPid, {
           passport,
           role,
           elevated: canSessionBeElevated(role, info),
         });
-        await updateSession({ sessionToken, refreshToken }, true);
+
+        const blocklet = await request.getBlocklet();
+        const nodeInfo = await node.getNodeInfo();
+        const accessWallet = getAccessWallet({
+          blockletAppDid: blocklet.appDid || blocklet.meta.did,
+          serverSecretKey: nodeInfo.sk,
+        });
+        const csrfToken = sign(accessWallet.secretKey, sessionToken);
+
+        await updateSession({ sessionToken, refreshToken, csrfToken }, true);
       }
     }
 

package/lib/oauth.js

@@ -8,6 +8,8 @@ const { getBlockletAppIdList } = require('@blocklet/meta/lib/util');
 const { LOGIN_PROVIDER } = require('@blocklet/constant');
 const getOrigin = require('@abtnode/util/lib/get-origin');
 
+const { getAccessWallet } = require('@abtnode/util/lib/blocklet');
+const { sign } = require('@blocklet/sdk/lib/util/csrf');
 const { getApplicationInfo } = require('./auth');
 
 const getSessionConfig = async (req) => {
@@ -135,7 +137,15 @@ function createPassportSwitcher(node, createToken, mode = 'server') {
       { ...(await getSessionConfig(req)) }
     );
 
-    res.status(200).json({ sessionToken, refreshToken });
+    // 生成 csrf token
+    const blocklet = await req.getBlocklet();
+    const accessWallet = getAccessWallet({
+      blockletAppDid: blocklet.appDid || blocklet.meta.did,
+      serverSecretKey: info.sk,
+    });
+    const csrfToken = sign(accessWallet.secretKey, sessionToken);
+
+    res.status(200).json({ sessionToken, refreshToken, csrfToken });
   };
 }
 

package/package.json

@@ -3,7 +3,7 @@
   "publishConfig": {
     "access": "public"
   },
-  "version": "1.17.3-beta-20251127-063055-94957209",
+  "version": "1.17.3",
   "description": "Simple lib to manage auth in ABT Node",
   "main": "lib/index.js",
   "files": [
@@ -18,21 +18,21 @@
   "author": "linchen <linchen1987@foxmail.com> (http://github.com/linchen1987)",
   "license": "Apache-2.0",
   "dependencies": {
-    "@abtnode/constant": "1.17.3-beta-20251127-063055-94957209",
-    "@abtnode/logger": "1.17.3-beta-20251127-063055-94957209",
-    "@abtnode/util": "1.17.3-beta-20251127-063055-94957209",
+    "@abtnode/constant": "1.17.3",
+    "@abtnode/logger": "1.17.3",
+    "@abtnode/util": "1.17.3",
     "@arcblock/did": "^1.27.12",
     "@arcblock/did-connect-js": "^1.27.12",
     "@arcblock/did-ext": "^1.27.12",
     "@arcblock/did-util": "^1.27.12",
     "@arcblock/jwt": "^1.27.12",
-    "@arcblock/nft-display": "^3.2.10",
+    "@arcblock/nft-display": "^3.2.11",
     "@arcblock/validator": "^1.27.12",
     "@arcblock/vc": "^1.27.12",
-    "@blocklet/constant": "1.17.3-beta-20251127-063055-94957209",
+    "@blocklet/constant": "1.17.3",
     "@blocklet/error": "^0.3.3",
-    "@blocklet/meta": "1.17.3-beta-20251127-063055-94957209",
-    "@blocklet/sdk": "1.17.3-beta-20251127-063055-94957209",
+    "@blocklet/meta": "1.17.3",
+    "@blocklet/sdk": "1.17.3",
     "@ocap/client": "^1.27.12",
     "@ocap/mcrypto": "^1.27.12",
     "@ocap/util": "^1.27.12",
@@ -55,5 +55,5 @@
   "devDependencies": {
     "axios-mock-adapter": "^2.1.0"
   },
-  "gitHead": "80dac020e9642b7e51c6a142c526cdecb75217a9"
+  "gitHead": "20fc4c3b0c0fdf05a91d995e3f6fda0f38fa1133"
 }