@adonis-agora/authkit-client 0.18.2 → 0.18.4

package/build/index.d.ts

@@ -1,36 +1,36 @@
-export { defineConfig, resolvers } from './src/define_config.js';
-export { Authenticator } from './src/authenticator.js';
-export { identityToUser, createUserinfoResolver, } from './src/user_resolvers.js';
-export type { ClaimsUser, ResolveUserContext, UserinfoResolverOptions, } from './src/user_resolvers.js';
-export { buildAuthorizeUrl, buildEndSessionUrl, exchangeCode, exchangeToken, refreshTokens, generatePkce, } from './src/oidc_login.js';
-export type { EndSessionParams, RefreshParams } from './src/oidc_login.js';
-export { discoverEndpoints, conventionEndpoints } from './src/discovery.js';
-export type { OidcEndpoints, DiscoverOptions } from './src/discovery.js';
-export { resilientFetch } from './src/http/resilient_fetch.js';
-export type { ResiliencePolicy } from './src/http/resilient_fetch.js';
+export type { Identity } from '@adonis-agora/authkit-core';
+export { configure } from './commands/configure.js';
 export { AuthkitClientManager } from './providers/authkit_client_provider.js';
-export type { ResolvedClientConfig, ClientConfigInput, BackchannelLogoutCallback, BackchannelLogoutInput, } from './src/define_config.js';
-export { lucidRevocationStore, DEFAULT_REVOCATION_TABLE, } from './src/revocation/revocation_store.js';
-export type { RevocationStore, LucidRevocationStoreOptions, } from './src/revocation/revocation_store.js';
-export { default as BackchannelRevocationMiddleware } from './src/middleware/backchannel_revocation_middleware.js';
-export { authkitClientGuard, AuthkitClientGuard } from './src/host/authkit_client_guard.js';
+export { Authenticator } from './src/authenticator.js';
+export type { SessionIndex, SessionIndexEntry, ValidatedLogoutToken, ValidateLogoutTokenOptions, } from './src/backchannel_logout.js';
+export { BACKCHANNEL_LOGOUT_EVENT, InMemorySessionIndex, InvalidLogoutTokenError, validateLogoutToken, } from './src/backchannel_logout.js';
+export type { BackchannelLogoutCallback, BackchannelLogoutInput, ClientConfigInput, ResolvedClientConfig, } from './src/define_config.js';
+export { defineConfig, resolvers } from './src/define_config.js';
+export type { DiscoverOptions, OidcEndpoints } from './src/discovery.js';
+export { conventionEndpoints, discoverEndpoints } from './src/discovery.js';
+export type { CreateDpopProofInput, DpopKeyPair } from './src/dpop.js';
+export { createDpopProof, dpopJwkThumbprint, generateDpopKeyPair, } from './src/dpop.js';
 export type { UnauthorizedAccessConstructor } from './src/host/authkit_client_guard.js';
-export { getAuthkit } from './src/host/request_authenticator.js';
-export { isAuthkitAdmin, authkitDashboardAuthorize, authkitDashboardMiddleware, } from './src/host/dashboard_guard.js';
+export { AuthkitClientGuard, authkitClientGuard } from './src/host/authkit_client_guard.js';
 export type { DashboardGuardOptions } from './src/host/dashboard_guard.js';
+export { authkitDashboardAuthorize, authkitDashboardMiddleware, isAuthkitAdmin, } from './src/host/dashboard_guard.js';
+export { getAuthkit } from './src/host/request_authenticator.js';
+export type { ResiliencePolicy } from './src/http/resilient_fetch.js';
+export { resilientFetch } from './src/http/resilient_fetch.js';
+export type { LucidMirrorOptions } from './src/lucid_mirror.js';
+export { lucidMirror } from './src/lucid_mirror.js';
 export { default as AuthkitContextMiddleware } from './src/middleware/authkit_context_middleware.js';
-export { default as RequireOrgMiddleware } from './src/middleware/require_org_middleware.js';
+export { default as BackchannelRevocationMiddleware } from './src/middleware/backchannel_revocation_middleware.js';
 export type { RequireOrgMiddlewareOptions } from './src/middleware/require_org_middleware.js';
-export { lucidMirror } from './src/lucid_mirror.js';
-export type { LucidMirrorOptions } from './src/lucid_mirror.js';
+export { default as RequireOrgMiddleware } from './src/middleware/require_org_middleware.js';
+export type { EndSessionParams, RefreshParams } from './src/oidc_login.js';
+export { buildAuthorizeUrl, buildEndSessionUrl, exchangeCode, exchangeToken, generatePkce, refreshTokens, } from './src/oidc_login.js';
+export type { PostLoginRedirects, RegisterOidcClientOptions, } from './src/register_oidc_client.js';
 export { registerOidcClient } from './src/register_oidc_client.js';
-export type { RegisterOidcClientOptions, PostLoginRedirects, } from './src/register_oidc_client.js';
-export { validateLogoutToken, InvalidLogoutTokenError, InMemorySessionIndex, BACKCHANNEL_LOGOUT_EVENT, } from './src/backchannel_logout.js';
-export type { ValidateLogoutTokenOptions, ValidatedLogoutToken, SessionIndex, SessionIndexEntry, } from './src/backchannel_logout.js';
-export { generateDpopKeyPair, createDpopProof, dpopJwkThumbprint, } from './src/dpop.js';
-export type { DpopKeyPair, CreateDpopProofInput } from './src/dpop.js';
-export { verifyJwtAccessToken, clearJwksCache, } from './src/verify_access_token.js';
-export type { VerifyJwtAccessTokenOptions, JwtAccessTokenClaims, } from './src/verify_access_token.js';
+export type { LucidRevocationStoreOptions, RevocationStore, } from './src/revocation/revocation_store.js';
+export { DEFAULT_REVOCATION_TABLE, lucidRevocationStore, } from './src/revocation/revocation_store.js';
 export type { TokenSet } from './src/types.js';
-export type { Identity } from '@adonis-agora/authkit-core';
-export { configure } from './commands/configure.js';
+export type { ClaimsUser, ResolveUserContext, UserinfoResolverOptions, } from './src/user_resolvers.js';
+export { createUserinfoResolver, identityToUser, } from './src/user_resolvers.js';
+export type { JwtAccessTokenClaims, VerifyJwtAccessTokenOptions, } from './src/verify_access_token.js';
+export { clearJwksCache, verifyJwtAccessToken, } from './src/verify_access_token.js';

package/build/index.js

@@ -1,20 +1,20 @@
-export { defineConfig, resolvers } from './src/define_config.js';
-export { Authenticator } from './src/authenticator.js';
-export { identityToUser, createUserinfoResolver, } from './src/user_resolvers.js';
-export { buildAuthorizeUrl, buildEndSessionUrl, exchangeCode, exchangeToken, refreshTokens, generatePkce, } from './src/oidc_login.js';
-export { discoverEndpoints, conventionEndpoints } from './src/discovery.js';
-export { resilientFetch } from './src/http/resilient_fetch.js';
+export { configure } from './commands/configure.js';
 export { AuthkitClientManager } from './providers/authkit_client_provider.js';
-export { lucidRevocationStore, DEFAULT_REVOCATION_TABLE, } from './src/revocation/revocation_store.js';
-export { default as BackchannelRevocationMiddleware } from './src/middleware/backchannel_revocation_middleware.js';
-export { authkitClientGuard, AuthkitClientGuard } from './src/host/authkit_client_guard.js';
+export { Authenticator } from './src/authenticator.js';
+export { BACKCHANNEL_LOGOUT_EVENT, InMemorySessionIndex, InvalidLogoutTokenError, validateLogoutToken, } from './src/backchannel_logout.js';
+export { defineConfig, resolvers } from './src/define_config.js';
+export { conventionEndpoints, discoverEndpoints } from './src/discovery.js';
+export { createDpopProof, dpopJwkThumbprint, generateDpopKeyPair, } from './src/dpop.js';
+export { AuthkitClientGuard, authkitClientGuard } from './src/host/authkit_client_guard.js';
+export { authkitDashboardAuthorize, authkitDashboardMiddleware, isAuthkitAdmin, } from './src/host/dashboard_guard.js';
 export { getAuthkit } from './src/host/request_authenticator.js';
-export { isAuthkitAdmin, authkitDashboardAuthorize, authkitDashboardMiddleware, } from './src/host/dashboard_guard.js';
+export { resilientFetch } from './src/http/resilient_fetch.js';
+export { lucidMirror } from './src/lucid_mirror.js';
 export { default as AuthkitContextMiddleware } from './src/middleware/authkit_context_middleware.js';
+export { default as BackchannelRevocationMiddleware } from './src/middleware/backchannel_revocation_middleware.js';
 export { default as RequireOrgMiddleware } from './src/middleware/require_org_middleware.js';
-export { lucidMirror } from './src/lucid_mirror.js';
+export { buildAuthorizeUrl, buildEndSessionUrl, exchangeCode, exchangeToken, generatePkce, refreshTokens, } from './src/oidc_login.js';
 export { registerOidcClient } from './src/register_oidc_client.js';
-export { validateLogoutToken, InvalidLogoutTokenError, InMemorySessionIndex, BACKCHANNEL_LOGOUT_EVENT, } from './src/backchannel_logout.js';
-export { generateDpopKeyPair, createDpopProof, dpopJwkThumbprint, } from './src/dpop.js';
-export { verifyJwtAccessToken, clearJwksCache, } from './src/verify_access_token.js';
-export { configure } from './commands/configure.js';
+export { DEFAULT_REVOCATION_TABLE, lucidRevocationStore, } from './src/revocation/revocation_store.js';
+export { createUserinfoResolver, identityToUser, } from './src/user_resolvers.js';
+export { clearJwksCache, verifyJwtAccessToken, } from './src/verify_access_token.js';

package/build/src/dpop.d.ts

@@ -1,12 +1,13 @@
-import { type JWK, type KeyLike } from 'jose';
+import type { KeyObject } from 'node:crypto';
+import { type JWK } from 'jose';
 /**
- * Par de chaves DPoP (RFC 9449). `privateKey`/`publicKey` são KeyLike do jose,
+ * Par de chaves DPoP (RFC 9449). `privateKey`/`publicKey` são CryptoKey/KeyObject (aceitos pelo jose),
  * usáveis direto em {@link createDpopProof}. As versões JWK são exportáveis para
  * persistir/restaurar o par entre requests (ex.: sessão do client).
  */
 export interface DpopKeyPair {
-    privateKey: KeyLike;
-    publicKey: KeyLike;
+    privateKey: CryptoKey | KeyObject;
+    publicKey: CryptoKey | KeyObject;
     /** JWK pública (vai no header `jwk` da prova). */
     publicJwk: JWK;
     /** JWK privada — guarde com cuidado (só o client a possui). */

package/build/src/dpop.js

@@ -1,5 +1,5 @@
 import { createHash, randomUUID } from 'node:crypto';
-import { SignJWT, base64url, calculateJwkThumbprint, exportJWK, generateKeyPair, } from 'jose';
+import { base64url, calculateJwkThumbprint, exportJWK, generateKeyPair, SignJWT, } from 'jose';
 /**
  * Gera um par de chaves DPoP ES256 (P-256), exportável como JWK. ES256 é o alg
  * recomendado pelo RFC 9449 e o que o oidc-provider do authkit-server aceita.

package/build/src/oidc_login.d.ts

@@ -11,7 +11,7 @@ import type { TokenSet } from './types.js';
 export declare function generatePkce(): Promise<{
     verifier: string;
     challenge: string;
-    method: "S256";
+    method: 'S256';
 }>;
 export interface AuthorizeParams {
     issuer: string;

package/build/stubs/config/authkit_client.stub

@@ -11,7 +11,7 @@ const authkitClientConfig = defineConfig({
   redirectUri: env.get('AUTHKIT_REDIRECT_URI'),
   resolver: resolvers.jwt({ tokenSource: 'session' }),
   // resolveUser: async (identity) => User.find(identity.userId),
-  // Roles do app? Configure `resolveRoles` no @adonis-agora/authz (não aqui — o AuthKit só autentica).
+  // Roles do app? Configure resolveRoles no @adonis-agora/authz (não aqui — o AuthKit só autentica).
 })
 
 export default authkitClientConfig

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@adonis-agora/authkit-client",
-  "version": "0.18.2",
+  "version": "0.18.4",
   "description": "AdonisJS OIDC/OAuth2 relying-party (client) toolkit: session-based authentication against an OpenID Connect identity provider, with JWT/PAT user resolvers and OpenTelemetry metrics.",
   "license": "MIT",
   "author": "dudousxd",
@@ -61,11 +61,11 @@
     ]
   },
   "peerDependencies": {
+    "@adonis-agora/resilience": ">=0.1.0 <1.0.0",
     "@adonisjs/auth": "^10.1.0",
-    "@adonisjs/core": "^7.3.3",
-    "@adonisjs/session": "^8.1.0",
+    "@adonisjs/core": "^7.5.0",
     "@adonisjs/lucid": "^22.4.2",
-    "@adonis-agora/resilience": ">=0.1.0 <1.0.0"
+    "@adonisjs/session": "^8.1.0"
   },
   "peerDependenciesMeta": {
     "@adonisjs/auth": {
@@ -79,24 +79,25 @@
     }
   },
   "dependencies": {
-    "jose": "5.10.0",
-    "@adonis-agora/authkit-core": "0.8.0"
+    "@adonis-agora/authkit-core": "0.8.0",
+    "jose": "6.2.12"
   },
   "devDependencies": {
+    "@adonis-agora/authkit-server": "0.66.0",
+    "@adonis-agora/resilience": "0.3.6",
     "@adonisjs/auth": "10.1.0",
-    "@adonisjs/core": "7.4.0",
-    "@adonis-agora/resilience": "0.3.1",
-    "@adonisjs/session": "8.1.0",
+    "@adonisjs/core": "7.5.0",
     "@adonisjs/lucid": "22.4.2",
+    "@adonisjs/session": "8.1.0",
     "@adonisjs/tsconfig": "2.0.0",
     "@japa/assert": "4.2.0",
     "@japa/runner": "5.3.0",
     "@poppinss/ts-exec": "1.4.4",
-    "@tanstack/intent": "^0.3.2",
+    "@tanstack/intent": "^0.4.0",
+    "@types/node": "26.5.0",
     "ioredis-mock": "8.13.1",
-    "@types/node": "25.9.1",
-    "typescript": "6.0.3",
-    "@adonis-agora/authkit-server": "0.61.3"
+    "tempura": "0.4.1",
+    "typescript": "7.0.2"
   },
   "scripts": {
     "build": "tsc && node -e \"require('node:fs').cpSync('stubs','build/stubs',{recursive:true,filter:(s)=>!s.endsWith('.ts')})\"",

package/stubs/config/authkit_client.stub

@@ -11,7 +11,7 @@ const authkitClientConfig = defineConfig({
   redirectUri: env.get('AUTHKIT_REDIRECT_URI'),
   resolver: resolvers.jwt({ tokenSource: 'session' }),
   // resolveUser: async (identity) => User.find(identity.userId),
-  // Roles do app? Configure `resolveRoles` no @adonis-agora/authz (não aqui — o AuthKit só autentica).
+  // Roles do app? Configure resolveRoles no @adonis-agora/authz (não aqui — o AuthKit só autentica).
 })
 
 export default authkitClientConfig