@adaptive-ds/project-registry 0.2.3

package/dist/runtime/timeSecondsValidate.js

@@ -0,0 +1,5 @@
+const maximumUnixSeconds = Math.floor(Number.MAX_SAFE_INTEGER / 1000);
+export function timeSecondsValidate(value) {
+    return typeof value === "number" && Number.isSafeInteger(value) && value >= 0 && value <= maximumUnixSeconds;
+}
+//# sourceMappingURL=timeSecondsValidate.js.map

package/dist/runtime/timeSecondsValidate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"timeSecondsValidate.js","sourceRoot":"","sources":["../../src/runtime/timeSecondsValidate.ts"],"names":[],"mappings":"AAAA,MAAM,kBAAkB,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAA;AAErE,MAAM,UAAU,mBAAmB,CAAC,KAAc;IAChD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,KAAK,IAAI,kBAAkB,CAAA;AAC9G,CAAC"}

package/dist/session/Clock.d.ts

@@ -0,0 +1,2 @@
+export type Clock = () => number;
+//# sourceMappingURL=Clock.d.ts.map

package/dist/session/Clock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Clock.d.ts","sourceRoot":"","sources":["../../src/session/Clock.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,KAAK,GAAG,MAAM,MAAM,CAAA"}

package/dist/session/Clock.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=Clock.js.map

package/dist/session/Clock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Clock.js","sourceRoot":"","sources":["../../src/session/Clock.ts"],"names":[],"mappings":""}

package/dist/session/CsrfTokenStore.d.ts

@@ -0,0 +1,7 @@
+import type { PromiseResult } from "#result";
+export interface CsrfTokenStore {
+    issue(sessionId: string): PromiseResult<string>;
+    validate(sessionId: string, token: string): PromiseResult<true>;
+    revoke(sessionId: string): PromiseResult<true>;
+}
+//# sourceMappingURL=CsrfTokenStore.d.ts.map

package/dist/session/CsrfTokenStore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CsrfTokenStore.d.ts","sourceRoot":"","sources":["../../src/session/CsrfTokenStore.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AAE5C,MAAM,WAAW,cAAc;IAC7B,KAAK,CAAC,SAAS,EAAE,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,CAAA;IAC/C,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAA;IAC/D,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAA;CAC/C"}

package/dist/session/CsrfTokenStore.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=CsrfTokenStore.js.map

package/dist/session/CsrfTokenStore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CsrfTokenStore.js","sourceRoot":"","sources":["../../src/session/CsrfTokenStore.ts"],"names":[],"mappings":""}

package/dist/session/CsrfTokenStoreOptions.d.ts

@@ -0,0 +1,9 @@
+import type { Clock } from "./Clock.js";
+import type { RandomBytes } from "./RandomBytes.js";
+export type CsrfTokenStoreOptions = {
+    clock?: Clock;
+    randomBytes?: RandomBytes;
+    maxAgeSeconds?: number;
+    maxEntries?: number;
+};
+//# sourceMappingURL=CsrfTokenStoreOptions.d.ts.map

package/dist/session/CsrfTokenStoreOptions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CsrfTokenStoreOptions.d.ts","sourceRoot":"","sources":["../../src/session/CsrfTokenStoreOptions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,YAAY,CAAA;AACvC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAEnD,MAAM,MAAM,qBAAqB,GAAG;IAClC,KAAK,CAAC,EAAE,KAAK,CAAA;IACb,WAAW,CAAC,EAAE,WAAW,CAAA;IACzB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB,CAAA"}

package/dist/session/CsrfTokenStoreOptions.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=CsrfTokenStoreOptions.js.map

package/dist/session/CsrfTokenStoreOptions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CsrfTokenStoreOptions.js","sourceRoot":"","sources":["../../src/session/CsrfTokenStoreOptions.ts"],"names":[],"mappings":""}

package/dist/session/RandomBytes.d.ts

@@ -0,0 +1,3 @@
+import type { Result } from "#result";
+export type RandomBytes = (length: number) => Result<Uint8Array>;
+//# sourceMappingURL=RandomBytes.d.ts.map

package/dist/session/RandomBytes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"RandomBytes.d.ts","sourceRoot":"","sources":["../../src/session/RandomBytes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAErC,MAAM,MAAM,WAAW,GAAG,CAAC,MAAM,EAAE,MAAM,KAAK,MAAM,CAAC,UAAU,CAAC,CAAA"}

package/dist/session/RandomBytes.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=RandomBytes.js.map

package/dist/session/RandomBytes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RandomBytes.js","sourceRoot":"","sources":["../../src/session/RandomBytes.ts"],"names":[],"mappings":""}

package/dist/session/SessionActorResolveOptions.d.ts

@@ -0,0 +1,15 @@
+import type { IdentityDirectory } from "../identity/IdentityDirectory.js";
+import type { PosixUserDirectory } from "../identity/PosixUserDirectory.js";
+import type { Clock } from "./Clock.js";
+import type { SessionStore } from "./SessionStore.js";
+import type { TokenReferenceStore } from "./TokenReferenceStore.js";
+export type SessionActorResolveOptions = {
+    sessions: SessionStore;
+    tokenReferences: TokenReferenceStore;
+    identityDirectory: IdentityDirectory;
+    posixUsers: PosixUserDirectory;
+    clock?: Clock;
+    timeoutMs?: number;
+    signal?: AbortSignal;
+};
+//# sourceMappingURL=SessionActorResolveOptions.d.ts.map

package/dist/session/SessionActorResolveOptions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SessionActorResolveOptions.d.ts","sourceRoot":"","sources":["../../src/session/SessionActorResolveOptions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAA;AACzE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAA;AAC3E,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,YAAY,CAAA;AACvC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AACrD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAEnE,MAAM,MAAM,0BAA0B,GAAG;IACvC,QAAQ,EAAE,YAAY,CAAA;IACtB,eAAe,EAAE,mBAAmB,CAAA;IACpC,iBAAiB,EAAE,iBAAiB,CAAA;IACpC,UAAU,EAAE,kBAAkB,CAAA;IAC9B,KAAK,CAAC,EAAE,KAAK,CAAA;IACb,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,MAAM,CAAC,EAAE,WAAW,CAAA;CACrB,CAAA"}

package/dist/session/SessionActorResolveOptions.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=SessionActorResolveOptions.js.map

package/dist/session/SessionActorResolveOptions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SessionActorResolveOptions.js","sourceRoot":"","sources":["../../src/session/SessionActorResolveOptions.ts"],"names":[],"mappings":""}

package/dist/session/SessionCookieOptions.d.ts

@@ -0,0 +1,5 @@
+export type SessionCookieOptions = {
+    name?: string;
+    maxAgeSeconds?: number;
+};
+//# sourceMappingURL=SessionCookieOptions.d.ts.map

package/dist/session/SessionCookieOptions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SessionCookieOptions.d.ts","sourceRoot":"","sources":["../../src/session/SessionCookieOptions.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,oBAAoB,GAAG;IACjC,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB,CAAA"}

package/dist/session/SessionCookieOptions.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=SessionCookieOptions.js.map

package/dist/session/SessionCookieOptions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SessionCookieOptions.js","sourceRoot":"","sources":["../../src/session/SessionCookieOptions.ts"],"names":[],"mappings":""}

package/dist/session/SessionCreateInput.d.ts

@@ -0,0 +1,6 @@
+export type SessionCreateInput = {
+    subject: string;
+    username: string;
+    tokenReference: string;
+};
+//# sourceMappingURL=SessionCreateInput.d.ts.map

package/dist/session/SessionCreateInput.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SessionCreateInput.d.ts","sourceRoot":"","sources":["../../src/session/SessionCreateInput.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,kBAAkB,GAAG;IAC/B,OAAO,EAAE,MAAM,CAAA;IACf,QAAQ,EAAE,MAAM,CAAA;IAChB,cAAc,EAAE,MAAM,CAAA;CACvB,CAAA"}

package/dist/session/SessionCreateInput.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=SessionCreateInput.js.map

package/dist/session/SessionCreateInput.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SessionCreateInput.js","sourceRoot":"","sources":["../../src/session/SessionCreateInput.ts"],"names":[],"mappings":""}

package/dist/session/SessionLogoutOptions.d.ts

@@ -0,0 +1,12 @@
+import type { CsrfTokenStore } from "./CsrfTokenStore.js";
+import type { SessionCookieOptions } from "./SessionCookieOptions.js";
+import type { TokenReferenceStore } from "./TokenReferenceStore.js";
+export type SessionLogoutOptions = {
+    cookie?: SessionCookieOptions;
+    csrf?: CsrfTokenStore;
+    csrfToken?: string;
+    tokenReferences?: TokenReferenceStore;
+    timeoutMs?: number;
+    signal?: AbortSignal;
+};
+//# sourceMappingURL=SessionLogoutOptions.d.ts.map

package/dist/session/SessionLogoutOptions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SessionLogoutOptions.d.ts","sourceRoot":"","sources":["../../src/session/SessionLogoutOptions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AACzD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAA;AACrE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAEnE,MAAM,MAAM,oBAAoB,GAAG;IACjC,MAAM,CAAC,EAAE,oBAAoB,CAAA;IAC7B,IAAI,CAAC,EAAE,cAAc,CAAA;IACrB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,eAAe,CAAC,EAAE,mBAAmB,CAAA;IACrC,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,MAAM,CAAC,EAAE,WAAW,CAAA;CACrB,CAAA"}

package/dist/session/SessionLogoutOptions.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=SessionLogoutOptions.js.map

package/dist/session/SessionLogoutOptions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SessionLogoutOptions.js","sourceRoot":"","sources":["../../src/session/SessionLogoutOptions.ts"],"names":[],"mappings":""}

package/dist/session/SessionRecord.d.ts

@@ -0,0 +1,9 @@
+export type SessionRecord = {
+    id: string;
+    subject: string;
+    username: string;
+    tokenReference: string;
+    createdAt: number;
+    expiresAt: number;
+};
+//# sourceMappingURL=SessionRecord.d.ts.map

package/dist/session/SessionRecord.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SessionRecord.d.ts","sourceRoot":"","sources":["../../src/session/SessionRecord.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,aAAa,GAAG;IAC1B,EAAE,EAAE,MAAM,CAAA;IACV,OAAO,EAAE,MAAM,CAAA;IACf,QAAQ,EAAE,MAAM,CAAA;IAChB,cAAc,EAAE,MAAM,CAAA;IACtB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;CAClB,CAAA"}

package/dist/session/SessionRecord.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=SessionRecord.js.map

package/dist/session/SessionRecord.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SessionRecord.js","sourceRoot":"","sources":["../../src/session/SessionRecord.ts"],"names":[],"mappings":""}

package/dist/session/SessionStore.d.ts

@@ -0,0 +1,11 @@
+import type { PromiseResult } from "#result";
+import type { SessionCreateInput } from "./SessionCreateInput.js";
+import type { SessionRecord } from "./SessionRecord.js";
+export interface SessionStore {
+    create(input: SessionCreateInput, options?: {
+        signal?: AbortSignal;
+    }): PromiseResult<SessionRecord>;
+    resolve(id: string): PromiseResult<SessionRecord>;
+    revoke(id: string): PromiseResult<true>;
+}
+//# sourceMappingURL=SessionStore.d.ts.map

package/dist/session/SessionStore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SessionStore.d.ts","sourceRoot":"","sources":["../../src/session/SessionStore.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AAC5C,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AACjE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAEvD,MAAM,WAAW,YAAY;IAC3B,MAAM,CAAC,KAAK,EAAE,kBAAkB,EAAE,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,aAAa,CAAC,aAAa,CAAC,CAAA;IACnG,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,aAAa,CAAC,aAAa,CAAC,CAAA;IACjD,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAA;CACxC"}

package/dist/session/SessionStore.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=SessionStore.js.map

package/dist/session/SessionStore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SessionStore.js","sourceRoot":"","sources":["../../src/session/SessionStore.ts"],"names":[],"mappings":""}

package/dist/session/SessionStoreOptions.d.ts

@@ -0,0 +1,11 @@
+import type { Clock } from "./Clock.js";
+import type { RandomBytes } from "./RandomBytes.js";
+import type { TokenReferenceStore } from "./TokenReferenceStore.js";
+export type SessionStoreOptions = {
+    maxAgeSeconds?: number;
+    maxEntries?: number;
+    clock?: Clock;
+    randomBytes?: RandomBytes;
+    tokenReferences: TokenReferenceStore;
+};
+//# sourceMappingURL=SessionStoreOptions.d.ts.map

package/dist/session/SessionStoreOptions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SessionStoreOptions.d.ts","sourceRoot":"","sources":["../../src/session/SessionStoreOptions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,YAAY,CAAA;AACvC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AACnD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAEnE,MAAM,MAAM,mBAAmB,GAAG;IAChC,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,KAAK,CAAC,EAAE,KAAK,CAAA;IACb,WAAW,CAAC,EAAE,WAAW,CAAA;IACzB,eAAe,EAAE,mBAAmB,CAAA;CACrC,CAAA"}

package/dist/session/SessionStoreOptions.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=SessionStoreOptions.js.map

package/dist/session/SessionStoreOptions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SessionStoreOptions.js","sourceRoot":"","sources":["../../src/session/SessionStoreOptions.ts"],"names":[],"mappings":""}

package/dist/session/TokenReferenceStore.d.ts

@@ -0,0 +1,10 @@
+import type { PromiseResult } from "#result";
+import type { TokenReferenceTokens } from "./TokenReferenceTokens.js";
+export interface TokenReferenceStore {
+    save(tokens: TokenReferenceTokens, options?: {
+        signal?: AbortSignal;
+    }): PromiseResult<string>;
+    resolve(reference: string): PromiseResult<TokenReferenceTokens>;
+    remove(reference: string): PromiseResult<true>;
+}
+//# sourceMappingURL=TokenReferenceStore.d.ts.map

package/dist/session/TokenReferenceStore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"TokenReferenceStore.d.ts","sourceRoot":"","sources":["../../src/session/TokenReferenceStore.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AAC5C,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAA;AAErE,MAAM,WAAW,mBAAmB;IAClC,IAAI,CAAC,MAAM,EAAE,oBAAoB,EAAE,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,aAAa,CAAC,MAAM,CAAC,CAAA;IAC7F,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,aAAa,CAAC,oBAAoB,CAAC,CAAA;IAC/D,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAA;CAC/C"}

package/dist/session/TokenReferenceStore.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=TokenReferenceStore.js.map

package/dist/session/TokenReferenceStore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"TokenReferenceStore.js","sourceRoot":"","sources":["../../src/session/TokenReferenceStore.ts"],"names":[],"mappings":""}

package/dist/session/TokenReferenceStoreOptions.d.ts

@@ -0,0 +1,8 @@
+import type { Clock } from "./Clock.js";
+import type { RandomBytes } from "./RandomBytes.js";
+export type TokenReferenceStoreOptions = {
+    maxEntries?: number;
+    clock?: Clock;
+    randomBytes?: RandomBytes;
+};
+//# sourceMappingURL=TokenReferenceStoreOptions.d.ts.map

package/dist/session/TokenReferenceStoreOptions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"TokenReferenceStoreOptions.d.ts","sourceRoot":"","sources":["../../src/session/TokenReferenceStoreOptions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,YAAY,CAAA;AACvC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAEnD,MAAM,MAAM,0BAA0B,GAAG;IACvC,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,KAAK,CAAC,EAAE,KAAK,CAAA;IACb,WAAW,CAAC,EAAE,WAAW,CAAA;CAC1B,CAAA"}

package/dist/session/TokenReferenceStoreOptions.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=TokenReferenceStoreOptions.js.map

package/dist/session/TokenReferenceStoreOptions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"TokenReferenceStoreOptions.js","sourceRoot":"","sources":["../../src/session/TokenReferenceStoreOptions.ts"],"names":[],"mappings":""}

package/dist/session/TokenReferenceTokens.d.ts

@@ -0,0 +1,6 @@
+export type TokenReferenceTokens = {
+    accessToken: string;
+    refreshToken?: string;
+    expiresAt: number;
+};
+//# sourceMappingURL=TokenReferenceTokens.d.ts.map

package/dist/session/TokenReferenceTokens.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"TokenReferenceTokens.d.ts","sourceRoot":"","sources":["../../src/session/TokenReferenceTokens.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,oBAAoB,GAAG;IACjC,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,SAAS,EAAE,MAAM,CAAA;CAClB,CAAA"}

package/dist/session/TokenReferenceTokens.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=TokenReferenceTokens.js.map

package/dist/session/TokenReferenceTokens.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"TokenReferenceTokens.js","sourceRoot":"","sources":["../../src/session/TokenReferenceTokens.ts"],"names":[],"mappings":""}

package/dist/session/csrfTokenIssue.d.ts

@@ -0,0 +1,4 @@
+import type { PromiseResult } from "#result";
+import type { CsrfTokenStore } from "./CsrfTokenStore.js";
+export declare function csrfTokenIssue(sessionId: string, store: CsrfTokenStore): PromiseResult<string>;
+//# sourceMappingURL=csrfTokenIssue.d.ts.map

package/dist/session/csrfTokenIssue.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"csrfTokenIssue.d.ts","sourceRoot":"","sources":["../../src/session/csrfTokenIssue.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AAC5C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AAEzD,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,GAAG,aAAa,CAAC,MAAM,CAAC,CAE9F"}

package/dist/session/csrfTokenIssue.js

@@ -0,0 +1,4 @@
+export function csrfTokenIssue(sessionId, store) {
+    return store.issue(sessionId);
+}
+//# sourceMappingURL=csrfTokenIssue.js.map

package/dist/session/csrfTokenIssue.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"csrfTokenIssue.js","sourceRoot":"","sources":["../../src/session/csrfTokenIssue.ts"],"names":[],"mappings":"AAGA,MAAM,UAAU,cAAc,CAAC,SAAiB,EAAE,KAAqB;IACrE,OAAO,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;AAC/B,CAAC"}

package/dist/session/csrfTokenStoreCreate.d.ts

@@ -0,0 +1,4 @@
+import type { CsrfTokenStore } from "./CsrfTokenStore.js";
+import type { CsrfTokenStoreOptions } from "./CsrfTokenStoreOptions.js";
+export declare function csrfTokenStoreCreate(options?: CsrfTokenStoreOptions): CsrfTokenStore;
+//# sourceMappingURL=csrfTokenStoreCreate.d.ts.map

package/dist/session/csrfTokenStoreCreate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"csrfTokenStoreCreate.d.ts","sourceRoot":"","sources":["../../src/session/csrfTokenStoreCreate.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AACzD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAA;AA8CvE,wBAAgB,oBAAoB,CAAC,OAAO,GAAE,qBAA0B,GAAG,cAAc,CA8HxF"}

package/dist/session/csrfTokenStoreCreate.js

@@ -0,0 +1,179 @@
+import { createResult, createResultError } from "#result";
+import { clockNowResolve } from "../runtime/clockNowResolve.js";
+import { randomBytesResultResolve } from "../runtime/randomBytesResultResolve.js";
+import { timeExpiryResolve } from "../runtime/timeExpiryResolve.js";
+import { timeMillisecondsValidate } from "../runtime/timeMillisecondsValidate.js";
+import { randomBytesGenerate } from "./randomBytesGenerate.js";
+function csrfTokenEncode(bytes) {
+    let binary = "";
+    for (const byte of bytes)
+        binary += String.fromCharCode(byte);
+    return btoa(binary).replaceAll("+", "-").replaceAll("/", "_").replace(/=+$/, "");
+}
+async function csrfTokenHash(token) {
+    try {
+        return new Uint8Array(await crypto.subtle.digest("SHA-256", new TextEncoder().encode(token)));
+    }
+    catch {
+        return undefined;
+    }
+}
+function csrfTokenHashEqual(left, right) {
+    if (left.length !== right.length)
+        return false;
+    let difference = 0;
+    for (let index = 0; index < left.length; index += 1)
+        difference |= left[index] ^ right[index];
+    return difference === 0;
+}
+const defaultMaxEntries = 10_000;
+const maximumMaxEntries = 100_000;
+const maximumSessionIdLength = 256;
+const maximumTokenInputLength = 256;
+function maxEntriesResolve(value) {
+    const maxEntries = value ?? defaultMaxEntries;
+    if (!Number.isSafeInteger(maxEntries) || maxEntries < 1 || maxEntries > maximumMaxEntries)
+        return undefined;
+    return maxEntries;
+}
+function storedTokenIsValid(value) {
+    if (typeof value !== "object" || value === null || Array.isArray(value))
+        return false;
+    const token = value;
+    return token.hash instanceof Uint8Array && token.hash.length === 32 && timeMillisecondsValidate(token.expiresAt);
+}
+export function csrfTokenStoreCreate(options = {}) {
+    const clock = options.clock ?? Date.now;
+    const randomBytes = options.randomBytes ?? randomBytesGenerate;
+    const maxAgeSeconds = options.maxAgeSeconds ?? 3600;
+    const tokens = new Map();
+    const maxEntries = maxEntriesResolve(options.maxEntries);
+    const generations = new Map();
+    const generationStart = (sessionId) => {
+        const state = generations.get(sessionId);
+        if (state !== undefined) {
+            state.inFlight += 1;
+            return state;
+        }
+        const nextState = { generation: {}, inFlight: 1 };
+        generations.set(sessionId, nextState);
+        return nextState;
+    };
+    const generationFinish = (sessionId, state) => {
+        const current = generations.get(sessionId);
+        if (current !== state)
+            return;
+        state.inFlight -= 1;
+        if (state.inFlight <= 0 && !tokens.has(sessionId))
+            generations.delete(sessionId);
+    };
+    const generationAdvance = (sessionId, state) => {
+        if (generations.get(sessionId) === state)
+            state.generation = {};
+    };
+    const expiredEntriesClean = (now) => {
+        for (const [sessionId, token] of tokens) {
+            if (token.expiresAt <= now) {
+                tokens.delete(sessionId);
+                const state = generations.get(sessionId);
+                if (state !== undefined && state.inFlight <= 0)
+                    generations.delete(sessionId);
+            }
+        }
+    };
+    return {
+        async issue(sessionId) {
+            const op = "csrfTokenIssue";
+            const initialNowR = clockNowResolve(clock);
+            if (!initialNowR.success)
+                return createResultError(op, "CSRF token lifetime is invalid");
+            expiredEntriesClean(initialNowR.data);
+            if (maxEntries === undefined)
+                return createResultError(op, "CSRF token capacity is invalid");
+            if (typeof sessionId !== "string" || sessionId.length === 0 || sessionId.length > maximumSessionIdLength)
+                return createResultError(op, "CSRF session is invalid");
+            if (!Number.isSafeInteger(maxAgeSeconds) || maxAgeSeconds < 1 || maxAgeSeconds > 31_536_000) {
+                return createResultError(op, "CSRF token lifetime is invalid");
+            }
+            const state = generationStart(sessionId);
+            const generation = state.generation;
+            try {
+                const randomR = randomBytesResultResolve(randomBytes, 32);
+                if (!randomR.success)
+                    return createResultError(op, "CSRF token could not be created");
+                const token = csrfTokenEncode(randomR.data);
+                const hash = await csrfTokenHash(token);
+                if (hash === undefined)
+                    return createResultError(op, "CSRF token could not be created");
+                const nowR = clockNowResolve(clock);
+                if (!nowR.success || generations.get(sessionId) !== state || state.generation !== generation) {
+                    return createResultError(op, "CSRF token could not be created");
+                }
+                const now = nowR.data;
+                expiredEntriesClean(now);
+                if (!tokens.has(sessionId) && tokens.size >= maxEntries)
+                    return createResultError(op, "CSRF token store is full");
+                const expiresAtR = timeExpiryResolve(now, maxAgeSeconds);
+                if (!expiresAtR.success)
+                    return createResultError(op, "CSRF token lifetime is invalid");
+                tokens.set(sessionId, { hash, expiresAt: expiresAtR.data });
+                generationAdvance(sessionId, state);
+                return createResult(token);
+            }
+            finally {
+                generationFinish(sessionId, state);
+            }
+        },
+        async validate(sessionId, token) {
+            const op = "csrfTokenValidate";
+            if (maxEntries === undefined)
+                return createResultError(op, "CSRF token capacity is invalid");
+            if (typeof sessionId !== "string" ||
+                sessionId.length === 0 ||
+                sessionId.length > maximumSessionIdLength ||
+                typeof token !== "string" ||
+                token.length === 0 ||
+                token.length > maximumTokenInputLength) {
+                return createResultError(op, "CSRF token is invalid");
+            }
+            const initialNowR = clockNowResolve(clock);
+            if (!initialNowR.success)
+                return createResultError(op, "CSRF token is invalid");
+            expiredEntriesClean(initialNowR.data);
+            const state = generations.get(sessionId);
+            if (state === undefined)
+                return createResultError(op, "CSRF token is invalid");
+            const generation = state.generation;
+            const hash = await csrfTokenHash(token);
+            if (hash === undefined)
+                return createResultError(op, "CSRF token is invalid");
+            const nowR = clockNowResolve(clock);
+            if (!nowR.success || generations.get(sessionId)?.generation !== generation)
+                return createResultError(op, "CSRF token is invalid");
+            const now = nowR.data;
+            expiredEntriesClean(now);
+            const stored = tokens.get(sessionId);
+            if (stored === undefined ||
+                !storedTokenIsValid(stored) ||
+                now >= stored.expiresAt ||
+                !csrfTokenHashEqual(stored.hash, hash)) {
+                return createResultError(op, "CSRF token is invalid");
+            }
+            return createResult(true);
+        },
+        async revoke(sessionId) {
+            const op = "csrfTokenRevoke";
+            if (typeof sessionId !== "string" || sessionId.length === 0 || sessionId.length > maximumSessionIdLength)
+                return createResultError(op, "CSRF session is invalid");
+            tokens.delete(sessionId);
+            const state = generations.get(sessionId);
+            if (state === undefined)
+                return createResult(true);
+            state.generation = {};
+            if (state.inFlight <= 0)
+                generations.delete(sessionId);
+            return createResult(true);
+        },
+    };
+}
+//# sourceMappingURL=csrfTokenStoreCreate.js.map

package/dist/session/csrfTokenStoreCreate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"csrfTokenStoreCreate.js","sourceRoot":"","sources":["../../src/session/csrfTokenStoreCreate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAA;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAA;AAC/D,OAAO,EAAE,wBAAwB,EAAE,MAAM,wCAAwC,CAAA;AACjF,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAA;AACnE,OAAO,EAAE,wBAAwB,EAAE,MAAM,wCAAwC,CAAA;AAGjF,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAO9D,SAAS,eAAe,CAAC,KAAiB;IACxC,IAAI,MAAM,GAAG,EAAE,CAAA;IACf,KAAK,MAAM,IAAI,IAAI,KAAK;QAAE,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAA;IAC7D,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;AAClF,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,KAAa;IACxC,IAAI,CAAC;QACH,OAAO,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;IAC/F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAgB,EAAE,KAAiB;IAC7D,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;QAAE,OAAO,KAAK,CAAA;IAC9C,IAAI,UAAU,GAAG,CAAC,CAAA;IAClB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC;QAAE,UAAU,IAAI,IAAI,CAAC,KAAK,CAAE,GAAG,KAAK,CAAC,KAAK,CAAE,CAAA;IAC/F,OAAO,UAAU,KAAK,CAAC,CAAA;AACzB,CAAC;AAED,MAAM,iBAAiB,GAAG,MAAM,CAAA;AAChC,MAAM,iBAAiB,GAAG,OAAO,CAAA;AACjC,MAAM,sBAAsB,GAAG,GAAG,CAAA;AAClC,MAAM,uBAAuB,GAAG,GAAG,CAAA;AAEnC,SAAS,iBAAiB,CAAC,KAAyB;IAClD,MAAM,UAAU,GAAG,KAAK,IAAI,iBAAiB,CAAA;IAC7C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,CAAC,IAAI,UAAU,GAAG,iBAAiB;QAAE,OAAO,SAAS,CAAA;IAC3G,OAAO,UAAU,CAAA;AACnB,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IACrF,MAAM,KAAK,GAAG,KAAgC,CAAA;IAC9C,OAAO,KAAK,CAAC,IAAI,YAAY,UAAU,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,KAAK,EAAE,IAAI,wBAAwB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;AAClH,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,UAAiC,EAAE;IACtE,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,CAAA;IACvC,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,mBAAmB,CAAA;IAC9D,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,IAAI,CAAA;IACnD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAuB,CAAA;IAC7C,MAAM,UAAU,GAAG,iBAAiB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;IACxD,MAAM,WAAW,GAAG,IAAI,GAAG,EAAoD,CAAA;IAE/E,MAAM,eAAe,GAAG,CAAC,SAAiB,EAA4C,EAAE;QACtF,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QACxC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,KAAK,CAAC,QAAQ,IAAI,CAAC,CAAA;YACnB,OAAO,KAAK,CAAA;QACd,CAAC;QACD,MAAM,SAAS,GAAG,EAAE,UAAU,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAA;QACjD,WAAW,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC,CAAA;QACrC,OAAO,SAAS,CAAA;IAClB,CAAC,CAAA;IAED,MAAM,gBAAgB,GAAG,CAAC,SAAiB,EAAE,KAA+C,EAAQ,EAAE;QACpG,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QAC1C,IAAI,OAAO,KAAK,KAAK;YAAE,OAAM;QAC7B,KAAK,CAAC,QAAQ,IAAI,CAAC,CAAA;QACnB,IAAI,KAAK,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC;YAAE,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;IAClF,CAAC,CAAA;IAED,MAAM,iBAAiB,GAAG,CAAC,SAAiB,EAAE,KAA+C,EAAQ,EAAE;QACrG,IAAI,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,KAAK;YAAE,KAAK,CAAC,UAAU,GAAG,EAAE,CAAA;IACjE,CAAC,CAAA;IAED,MAAM,mBAAmB,GAAG,CAAC,GAAW,EAAQ,EAAE;QAChD,KAAK,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,MAAM,EAAE,CAAC;YACxC,IAAI,KAAK,CAAC,SAAS,IAAI,GAAG,EAAE,CAAC;gBAC3B,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;gBACxB,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;gBACxC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,QAAQ,IAAI,CAAC;oBAAE,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;YAC/E,CAAC;QACH,CAAC;IACH,CAAC,CAAA;IAED,OAAO;QACL,KAAK,CAAC,KAAK,CAAC,SAAS;YACnB,MAAM,EAAE,GAAG,gBAAgB,CAAA;YAC3B,MAAM,WAAW,GAAG,eAAe,CAAC,KAAK,CAAC,CAAA;YAC1C,IAAI,CAAC,WAAW,CAAC,OAAO;gBAAE,OAAO,iBAAiB,CAAC,EAAE,EAAE,gCAAgC,CAAC,CAAA;YACxF,mBAAmB,CAAC,WAAW,CAAC,IAAI,CAAC,CAAA;YACrC,IAAI,UAAU,KAAK,SAAS;gBAAE,OAAO,iBAAiB,CAAC,EAAE,EAAE,gCAAgC,CAAC,CAAA;YAC5F,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,SAAS,CAAC,MAAM,GAAG,sBAAsB;gBACtG,OAAO,iBAAiB,CAAC,EAAE,EAAE,yBAAyB,CAAC,CAAA;YACzD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,aAAa,CAAC,IAAI,aAAa,GAAG,CAAC,IAAI,aAAa,GAAG,UAAU,EAAE,CAAC;gBAC5F,OAAO,iBAAiB,CAAC,EAAE,EAAE,gCAAgC,CAAC,CAAA;YAChE,CAAC;YACD,MAAM,KAAK,GAAG,eAAe,CAAC,SAAS,CAAC,CAAA;YACxC,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,CAAA;YACnC,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,wBAAwB,CAAC,WAAW,EAAE,EAAE,CAAC,CAAA;gBACzD,IAAI,CAAC,OAAO,CAAC,OAAO;oBAAE,OAAO,iBAAiB,CAAC,EAAE,EAAE,iCAAiC,CAAC,CAAA;gBACrF,MAAM,KAAK,GAAG,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;gBAC3C,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,CAAA;gBACvC,IAAI,IAAI,KAAK,SAAS;oBAAE,OAAO,iBAAiB,CAAC,EAAE,EAAE,iCAAiC,CAAC,CAAA;gBACvF,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,CAAC,CAAA;gBACnC,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,KAAK,IAAI,KAAK,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;oBAC7F,OAAO,iBAAiB,CAAC,EAAE,EAAE,iCAAiC,CAAC,CAAA;gBACjE,CAAC;gBACD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAA;gBACrB,mBAAmB,CAAC,GAAG,CAAC,CAAA;gBACxB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,IAAI,IAAI,UAAU;oBACrD,OAAO,iBAAiB,CAAC,EAAE,EAAE,0BAA0B,CAAC,CAAA;gBAC1D,MAAM,UAAU,GAAG,iBAAiB,CAAC,GAAG,EAAE,aAAa,CAAC,CAAA;gBACxD,IAAI,CAAC,UAAU,CAAC,OAAO;oBAAE,OAAO,iBAAiB,CAAC,EAAE,EAAE,gCAAgC,CAAC,CAAA;gBACvF,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,CAAC,IAAI,EAAE,CAAC,CAAA;gBAC3D,iBAAiB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAA;gBACnC,OAAO,YAAY,CAAC,KAAK,CAAC,CAAA;YAC5B,CAAC;oBAAS,CAAC;gBACT,gBAAgB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAA;YACpC,CAAC;QACH,CAAC;QACD,KAAK,CAAC,QAAQ,CAAC,SAAS,EAAE,KAAK;YAC7B,MAAM,EAAE,GAAG,mBAAmB,CAAA;YAC9B,IAAI,UAAU,KAAK,SAAS;gBAAE,OAAO,iBAAiB,CAAC,EAAE,EAAE,gCAAgC,CAAC,CAAA;YAC5F,IACE,OAAO,SAAS,KAAK,QAAQ;gBAC7B,SAAS,CAAC,MAAM,KAAK,CAAC;gBACtB,SAAS,CAAC,MAAM,GAAG,sBAAsB;gBACzC,OAAO,KAAK,KAAK,QAAQ;gBACzB,KAAK,CAAC,MAAM,KAAK,CAAC;gBAClB,KAAK,CAAC,MAAM,GAAG,uBAAuB,EACtC,CAAC;gBACD,OAAO,iBAAiB,CAAC,EAAE,EAAE,uBAAuB,CAAC,CAAA;YACvD,CAAC;YACD,MAAM,WAAW,GAAG,eAAe,CAAC,KAAK,CAAC,CAAA;YAC1C,IAAI,CAAC,WAAW,CAAC,OAAO;gBAAE,OAAO,iBAAiB,CAAC,EAAE,EAAE,uBAAuB,CAAC,CAAA;YAC/E,mBAAmB,CAAC,WAAW,CAAC,IAAI,CAAC,CAAA;YACrC,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;YACxC,IAAI,KAAK,KAAK,SAAS;gBAAE,OAAO,iBAAiB,CAAC,EAAE,EAAE,uBAAuB,CAAC,CAAA;YAC9E,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,CAAA;YACnC,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,CAAA;YACvC,IAAI,IAAI,KAAK,SAAS;gBAAE,OAAO,iBAAiB,CAAC,EAAE,EAAE,uBAAuB,CAAC,CAAA;YAC7E,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,CAAC,CAAA;YACnC,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,UAAU,KAAK,UAAU;gBACxE,OAAO,iBAAiB,CAAC,EAAE,EAAE,uBAAuB,CAAC,CAAA;YACvD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAA;YACrB,mBAAmB,CAAC,GAAG,CAAC,CAAA;YACxB,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;YACpC,IACE,MAAM,KAAK,SAAS;gBACpB,CAAC,kBAAkB,CAAC,MAAM,CAAC;gBAC3B,GAAG,IAAI,MAAM,CAAC,SAAS;gBACvB,CAAC,kBAAkB,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,EACtC,CAAC;gBACD,OAAO,iBAAiB,CAAC,EAAE,EAAE,uBAAuB,CAAC,CAAA;YACvD,CAAC;YACD,OAAO,YAAY,CAAC,IAAI,CAAC,CAAA;QAC3B,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,SAAS;YACpB,MAAM,EAAE,GAAG,iBAAiB,CAAA;YAC5B,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,SAAS,CAAC,MAAM,GAAG,sBAAsB;gBACtG,OAAO,iBAAiB,CAAC,EAAE,EAAE,yBAAyB,CAAC,CAAA;YACzD,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;YACxB,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;YACxC,IAAI,KAAK,KAAK,SAAS;gBAAE,OAAO,YAAY,CAAC,IAAI,CAAC,CAAA;YAClD,KAAK,CAAC,UAAU,GAAG,EAAE,CAAA;YACrB,IAAI,KAAK,CAAC,QAAQ,IAAI,CAAC;gBAAE,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;YACtD,OAAO,YAAY,CAAC,IAAI,CAAC,CAAA;QAC3B,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/session/csrfTokenValidate.d.ts

@@ -0,0 +1,4 @@
+import { type PromiseResult } from "#result";
+import type { CsrfTokenStore } from "./CsrfTokenStore.js";
+export declare function csrfTokenValidate(sessionId: string, token: string, store: CsrfTokenStore): PromiseResult<true>;
+//# sourceMappingURL=csrfTokenValidate.d.ts.map

package/dist/session/csrfTokenValidate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"csrfTokenValidate.d.ts","sourceRoot":"","sources":["../../src/session/csrfTokenValidate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAmC,KAAK,aAAa,EAAE,MAAM,SAAS,CAAA;AAC7E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AAEzD,wBAAsB,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,GAAG,aAAa,CAAC,IAAI,CAAC,CAUpH"}

package/dist/session/csrfTokenValidate.js

@@ -0,0 +1,16 @@
+import { createResult, createResultError } from "#result";
+export async function csrfTokenValidate(sessionId, token, store) {
+    const op = "csrfTokenValidate";
+    try {
+        const result = await store.validate(sessionId, token);
+        if (!result.success)
+            return result;
+        if (result.success !== true || result.data !== true)
+            return createResultError(op, "CSRF token is invalid");
+        return createResult(true);
+    }
+    catch {
+        return createResultError(op, "CSRF token is invalid");
+    }
+}
+//# sourceMappingURL=csrfTokenValidate.js.map

package/dist/session/csrfTokenValidate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"csrfTokenValidate.js","sourceRoot":"","sources":["../../src/session/csrfTokenValidate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAsB,MAAM,SAAS,CAAA;AAG7E,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,SAAiB,EAAE,KAAa,EAAE,KAAqB;IAC7F,MAAM,EAAE,GAAG,mBAAmB,CAAA;IAC9B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC,CAAA;QACrD,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,MAAM,CAAA;QAClC,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI;YAAE,OAAO,iBAAiB,CAAC,EAAE,EAAE,uBAAuB,CAAC,CAAA;QAC1G,OAAO,YAAY,CAAC,IAAI,CAAC,CAAA;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,iBAAiB,CAAC,EAAE,EAAE,uBAAuB,CAAC,CAAA;IACvD,CAAC;AACH,CAAC"}

package/dist/session/randomBytesGenerate.d.ts

@@ -0,0 +1,3 @@
+import { type Result } from "#result";
+export declare function randomBytesGenerate(length: number): Result<Uint8Array>;
+//# sourceMappingURL=randomBytesGenerate.d.ts.map

package/dist/session/randomBytesGenerate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"randomBytesGenerate.d.ts","sourceRoot":"","sources":["../../src/session/randomBytesGenerate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAmC,KAAK,MAAM,EAAE,MAAM,SAAS,CAAA;AAEtE,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,CAYtE"}

package/dist/session/randomBytesGenerate.js

@@ -0,0 +1,16 @@
+import { createResult, createResultError } from "#result";
+export function randomBytesGenerate(length) {
+    const op = "randomBytesGenerate";
+    if (!Number.isInteger(length) || length < 1 || length > 4096) {
+        return createResultError(op, "random byte length is invalid");
+    }
+    try {
+        const bytes = new Uint8Array(length);
+        crypto.getRandomValues(bytes);
+        return createResult(bytes);
+    }
+    catch {
+        return createResultError(op, "secure random generation failed");
+    }
+}
+//# sourceMappingURL=randomBytesGenerate.js.map

package/dist/session/randomBytesGenerate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"randomBytesGenerate.js","sourceRoot":"","sources":["../../src/session/randomBytesGenerate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAe,MAAM,SAAS,CAAA;AAEtE,MAAM,UAAU,mBAAmB,CAAC,MAAc;IAChD,MAAM,EAAE,GAAG,qBAAqB,CAAA;IAChC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,IAAI,MAAM,GAAG,IAAI,EAAE,CAAC;QAC7D,OAAO,iBAAiB,CAAC,EAAE,EAAE,+BAA+B,CAAC,CAAA;IAC/D,CAAC;IACD,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAA;QACpC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAA;QAC7B,OAAO,YAAY,CAAC,KAAK,CAAC,CAAA;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,iBAAiB,CAAC,EAAE,EAAE,iCAAiC,CAAC,CAAA;IACjE,CAAC;AACH,CAAC"}