@adonis-agora/authkit-client 0.14.0 → 0.16.0

package/build/src/resolvers/jwt_resolver.js

@@ -1,6 +1,17 @@
 import { createRemoteJWKSet, jwtVerify } from 'jose';
 import { buildIdentityFromClaims } from './identity.js';
-const DEFAULT_ALGS = ['RS256', 'RS384', 'RS512', 'PS256', 'PS384', 'PS512', 'ES256', 'ES384', 'ES512', 'EdDSA'];
+const DEFAULT_ALGS = [
+    'RS256',
+    'RS384',
+    'RS512',
+    'PS256',
+    'PS384',
+    'PS512',
+    'ES256',
+    'ES384',
+    'ES512',
+    'EdDSA',
+];
 export class JwtResolver {
     config;
     #jwks;

package/build/src/resolvers/opaque_resolver.d.ts

@@ -1,5 +1,5 @@
-import type { HttpContext } from '@adonisjs/core/http';
 import type { Identity, SessionResolver } from '@adonis-agora/authkit-core';
+import type { HttpContext } from '@adonisjs/core/http';
 import { type TokenSource } from '../token_source.js';
 type FetchImpl = (url: string, init: any) => Promise<{
     ok: boolean;

package/build/src/resolvers/pat_resolver.d.ts

@@ -1,5 +1,5 @@
-import type { HttpContext } from '@adonisjs/core/http';
 import type { Identity, SessionResolver } from '@adonis-agora/authkit-core';
+import type { HttpContext } from '@adonisjs/core/http';
 type FetchImpl = (url: string, init: any) => Promise<{
     ok: boolean;
     json: () => Promise<any>;

package/build/src/types.d.ts

@@ -3,4 +3,13 @@ export interface TokenSet {
     accessToken: string;
     refreshToken?: string;
     expiresAt?: number;
+    /**
+     * Nonce opaco que amarra ESTE token set à credencial de impersonação parqueada
+     * em `${sessionKey}_impersonator`. Escrito só por `impersonate()`; preservado
+     * pelo `maybeRefresh`; conferido pelo `stopImpersonating()`. Qualquer outra
+     * escrita no slot da sessão (login novo, logout+login) nasce sem ele — que é
+     * exatamente o sinal de que a sessão deixou de ser aquela p/ a qual a
+     * credencial foi guardada. Não é segredo de autenticação: é um vínculo.
+     */
+    impersonationBinding?: string;
 }

package/build/types.d.ts

@@ -1,5 +1,5 @@
-import type { Authenticator } from './src/authenticator.js';
 import type { AuthkitClientManager } from './providers/authkit_client_provider.js';
+import type { Authenticator } from './src/authenticator.js';
 declare module '@adonisjs/core/http' {
     interface HttpContext {
         auth: Authenticator;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@adonis-agora/authkit-client",
-  "version": "0.14.0",
+  "version": "0.16.0",
   "description": "AdonisJS OIDC/OAuth2 relying-party (client) toolkit: session-based authentication against an OpenID Connect identity provider, with JWT/PAT user resolvers and OpenTelemetry metrics.",
   "license": "MIT",
   "author": "dudousxd",
@@ -38,7 +38,9 @@
     "./types": "./build/index.js",
     "./services/main": "./build/services/main.js",
     "./authkit_client_provider": "./build/providers/authkit_client_provider.js",
+    "./auth": "./build/src/host/authkit_client_guard.js",
     "./authkit_middleware": "./build/src/middleware/authkit_middleware.js",
+    "./authkit_context_middleware": "./build/src/middleware/authkit_context_middleware.js",
     "./backchannel_revocation_middleware": "./build/src/middleware/backchannel_revocation_middleware.js",
     "./auth_middleware": "./build/src/middleware/auth_middleware.js",
     "./silent_auth_middleware": "./build/src/middleware/silent_auth_middleware.js",
@@ -54,12 +56,16 @@
     ]
   },
   "peerDependencies": {
+    "@adonisjs/auth": "^10.1.0",
     "@adonisjs/core": "^7.3.3",
     "@adonisjs/session": "^8.1.0",
     "@adonisjs/lucid": "^22.4.2",
     "@adonis-agora/resilience": "^0.1.0"
   },
   "peerDependenciesMeta": {
+    "@adonisjs/auth": {
+      "optional": true
+    },
     "@adonisjs/lucid": {
       "optional": true
     },
@@ -72,6 +78,7 @@
     "@adonis-agora/authkit-core": "0.7.0"
   },
   "devDependencies": {
+    "@adonisjs/auth": "10.1.0",
     "@adonisjs/core": "7.3.5",
     "@adonis-agora/resilience": "^0.1.0",
     "@adonisjs/session": "8.1.0",
@@ -83,11 +90,11 @@
     "ioredis-mock": "^8.9.0",
     "@types/node": "25.9.1",
     "typescript": "6.0.3",
-    "@adonis-agora/authkit-server": "0.36.0"
+    "@adonis-agora/authkit-server": "0.55.0"
   },
   "scripts": {
     "build": "tsc && node -e \"require('node:fs').cpSync('stubs','build/stubs',{recursive:true,filter:(s)=>!s.endsWith('.ts')})\"",
-    "typecheck": "tsc --noEmit",
+    "typecheck": "tsc --noEmit && tsc -p tsconfig.tests.json",
     "test": "node --import=@poppinss/ts-exec bin/test.ts"
   }
 }

package/stubs/main.ts

@@ -1,2 +1,2 @@
-import { fileURLToPath } from 'node:url'
-export const stubsRoot = fileURLToPath(new URL('./', import.meta.url))
+import { fileURLToPath } from 'node:url';
+export const stubsRoot = fileURLToPath(new URL('./', import.meta.url));