@adonis-agora/authkit-server 0.58.2 → 0.58.3

package/build/index.d.ts

@@ -128,7 +128,7 @@ export type { SettingKey, RegistrationSetting, RequireVerifiedEmailSetting, Main
 export { resolveRegistration } from './src/define_config.js';
 export type { RegistrationConfigInput, ResolvedRegistrationConfig, } from './src/define_config.js';
 export { getAccountId, realAccountId, hasAccountSession, consoleLoginUrl, } from './src/host/console_session.js';
-export { ACCOUNT_SESSION_KEY } from './src/host/middleware/account_auth.js';
+export { ACCOUNT_SESSION_KEY } from './src/host/account_session_key.js';
 export { rememberAccessToken, rememberRefreshToken, refreshAccessToken, startImpersonation, impersonationState, stopImpersonation, } from './src/host/impersonation_session.js';
 export type { StartImpersonationParams, ImpersonationState, } from './src/host/impersonation_session.js';
 export { SUDO_SESSION_KEY, SUDO_ACCOUNT_SESSION_KEY, SUDO_MODE_DEFAULTS, requireSudo, isSudoActive, markSudo, resolveEffectiveSudoMode, } from './src/host/sudo_mode.js';

package/build/index.js

@@ -87,7 +87,7 @@ export { resolveEffectiveBotProtection } from './src/host/bot_protection.js';
 export { SETTING_KEYS, resolveEffectiveRegistration, resolveEffectiveRequireVerifiedEmail, resolveEffectiveMaintenanceMode, resolveEffectiveAuthMethods, configLockedAuthMethods, } from './src/host/runtime_toggles.js';
 export { resolveRegistration } from './src/define_config.js';
 export { getAccountId, realAccountId, hasAccountSession, consoleLoginUrl, } from './src/host/console_session.js';
-export { ACCOUNT_SESSION_KEY } from './src/host/middleware/account_auth.js';
+export { ACCOUNT_SESSION_KEY } from './src/host/account_session_key.js';
 // Session impersonation — RP-side glue that routes through the IdP's RFC 8693
 // token-exchange (the IdP validates the admin role + audits). See
 // src/host/impersonation_session.ts.

package/build/src/host/account_api/account_api_controller.js

@@ -31,13 +31,13 @@ import '../augmentations.js';
 import { supportsAccountSecurity, supportsOrganizations, supportsPasskeys, supportsProfile, } from '../../accounts/account_store.js';
 import { PasswordPolicyError } from '../../password/password_manager.js';
 import { accountPath } from '../account_paths.js';
+import { ACCOUNT_SESSION_KEY } from '../account_session_key.js';
 import { ACTIVE_ORG_COOKIE } from '../active_org_cookie.js';
 import { AdminSessionsService } from '../admin_sessions_service.js';
 import { syncAdonisAuthLogout } from '../adonis_auth_sync.js';
 import { AvatarUploadError, isAvatarUploadSupported, storeAvatar } from '../avatar_storage.js';
 import { sendEmailChangeConfirmationEmail, sendEmailChangeNoticeEmail } from '../default_mailer.js';
 import { translate } from '../i18n.js';
-import { ACCOUNT_SESSION_KEY } from '../middleware/account_auth.js';
 import { authkitOrigin } from '../origin.js';
 import { resolveRuntimeSettings } from '../runtime_settings.js';
 import { resolveEffectiveEmailChange, resolveEffectivePasswordHistory, } from '../runtime_toggles.js';

package/build/src/host/account_session_key.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Session key holding the signed-in account id for the account console.
+ *
+ * A module of its own, deliberately, and it must stay free of imports.
+ *
+ * The constant is re-exported from the package barrel, and it used to live in
+ * `middleware/account_auth.ts` — which side-effect-imports `../augmentations.js`
+ * to type `ctx.session` for its own body. That made every consumer of the barrel
+ * load `augmentations.d.ts`, and with it this package's
+ * `declare module '@adonisjs/core/http' { adminApiKeyId?: string }`.
+ *
+ * `adminApiKeyId` is a name only this library claims, so the blast radius was
+ * small — but that is nomenclature luck, not design. The sibling client package
+ * shipped the identical shape over `auth`, a name every app declares, and
+ * consumers went from 24 type errors to 351 with nothing pointing at the cause.
+ * A constant that hosts import should not be able to carry a `HttpContext`
+ * augmentation in with it.
+ *
+ * Keep this file import-free: anything it imports, the barrel inherits.
+ */
+export declare const ACCOUNT_SESSION_KEY = "account_user_id";

package/build/src/host/account_session_key.js

@@ -0,0 +1,21 @@
+/**
+ * Session key holding the signed-in account id for the account console.
+ *
+ * A module of its own, deliberately, and it must stay free of imports.
+ *
+ * The constant is re-exported from the package barrel, and it used to live in
+ * `middleware/account_auth.ts` — which side-effect-imports `../augmentations.js`
+ * to type `ctx.session` for its own body. That made every consumer of the barrel
+ * load `augmentations.d.ts`, and with it this package's
+ * `declare module '@adonisjs/core/http' { adminApiKeyId?: string }`.
+ *
+ * `adminApiKeyId` is a name only this library claims, so the blast radius was
+ * small — but that is nomenclature luck, not design. The sibling client package
+ * shipped the identical shape over `auth`, a name every app declares, and
+ * consumers went from 24 type errors to 351 with nothing pointing at the cause.
+ * A constant that hosts import should not be able to carry a `HttpContext`
+ * augmentation in with it.
+ *
+ * Keep this file import-free: anything it imports, the barrel inherits.
+ */
+export const ACCOUNT_SESSION_KEY = 'account_user_id';

package/build/src/host/admin_console/console_impersonation_controller.js

@@ -1,8 +1,8 @@
 import '../augmentations.js';
+import { ACCOUNT_SESSION_KEY } from '../account_session_key.js';
 import { apiError } from '../admin_api/dto.js';
 import { AdminClientsService } from '../admin_clients_service.js';
 import { buildImpersonationPanel } from '../impersonation.js';
-import { ACCOUNT_SESSION_KEY } from '../middleware/account_auth.js';
 import { resolveRuntimeSettingsOrNoop } from '../runtime_settings.js';
 import { resolveEffectiveAdminImpersonation } from '../runtime_toggles.js';
 /**

package/build/src/host/admin_console/console_orgs_controller.js

@@ -1,8 +1,8 @@
 import '../augmentations.js';
+import { ACCOUNT_SESSION_KEY } from '../account_session_key.js';
 import { AdminOrgsService } from '../admin_api/admin_orgs_service.js';
 import { apiError, orgDetailDto, orgDto } from '../admin_api/dto.js';
 import { orgAddMemberValidator, orgCreateValidator, orgInvitationValidator, orgMemberRoleValidator, orgUpdateValidator, } from '../admin_validators.js';
-import { ACCOUNT_SESSION_KEY } from '../middleware/account_auth.js';
 import { authkitOrigin } from '../origin.js';
 import { resolveRuntimeSettings } from '../runtime_settings.js';
 /**

package/build/src/host/admin_console/console_roles_controller.js

@@ -1,7 +1,7 @@
 import '../augmentations.js';
+import { ACCOUNT_SESSION_KEY } from '../account_session_key.js';
 import { apiError } from '../admin_api/dto.js';
 import { roleCreateValidator, roleUpdateValidator } from '../admin_validators.js';
-import { ACCOUNT_SESSION_KEY } from '../middleware/account_auth.js';
 import { resolveRuntimeSettings } from '../runtime_settings.js';
 import { SETTING_KEYS, resolveEffectiveRolesCatalog, } from '../runtime_toggles.js';
 /** Regex de validação: nome de role — letras maiúsculas, dígitos e underscore. */

package/build/src/host/admin_console/console_sessions_controller.js

@@ -1,8 +1,8 @@
 import '../augmentations.js';
+import { ACCOUNT_SESSION_KEY } from '../account_session_key.js';
 import { apiError, grantDto, sessionDto } from '../admin_api/dto.js';
 import { AdminSessionsService } from '../admin_sessions_service.js';
 import { sessionAccountValidator } from '../admin_validators.js';
-import { ACCOUNT_SESSION_KEY } from '../middleware/account_auth.js';
 import { enrichSessionsWithContext } from '../session_context.js';
 /**
  * Endpoints JSON de sessões/grants do console admin React.

package/build/src/host/admin_console/console_users_controller.js

@@ -1,10 +1,10 @@
 import '../augmentations.js';
 import { supportsAccountDeletion, supportsAccountStatus } from '../../accounts/account_store.js';
+import { ACCOUNT_SESSION_KEY } from '../account_session_key.js';
 import { AdminUsersService } from '../admin_api/admin_users_service.js';
 import { apiError, grantDto, sessionDto, userDto } from '../admin_api/dto.js';
 import { AdminSessionsService } from '../admin_sessions_service.js';
 import { adminUserCreateValidator, adminUserRolesValidator } from '../admin_validators.js';
-import { ACCOUNT_SESSION_KEY } from '../middleware/account_auth.js';
 import { resolveRuntimeSettings } from '../runtime_settings.js';
 import { resolveEffectiveRolesCatalog } from '../runtime_toggles.js';
 import { enrichSessionsWithContext } from '../session_context.js';

package/build/src/host/console_session.js

@@ -1,6 +1,6 @@
 import { getAccountLoginUrl } from './account_login_url.js';
+import { ACCOUNT_SESSION_KEY } from './account_session_key.js';
 import { impersonationState } from './impersonation_session.js';
-import { ACCOUNT_SESSION_KEY } from './middleware/account_auth.js';
 /**
  * Helpers públicos para integrar a sessão do console do AuthKit com
  * qualquer coisa fora do pacote (ex.: proteger o dashboard do

package/build/src/host/controllers/account_apps_controller.js

@@ -1,7 +1,7 @@
 import '../augmentations.js';
 import { accountPath } from '../account_paths.js';
+import { ACCOUNT_SESSION_KEY } from '../account_session_key.js';
 import { AdminSessionsService } from '../admin_sessions_service.js';
-import { ACCOUNT_SESSION_KEY } from '../middleware/account_auth.js';
 /**
  * Self-service de consentimento ("apps com acesso") no console de conta. Lista os
  * Grants da própria conta agrupados por client (resolvendo o nome do client da

package/build/src/host/controllers/account_mfa_controller.js

@@ -2,8 +2,8 @@ import '../augmentations.js';
 import QRCode from 'qrcode';
 import { supportsPasskeys } from '../../accounts/account_store.js';
 import { accountPath } from '../account_paths.js';
+import { ACCOUNT_SESSION_KEY } from '../account_session_key.js';
 import { translate } from '../i18n.js';
-import { ACCOUNT_SESSION_KEY } from '../middleware/account_auth.js';
 import { resolveRuntimeSettings } from '../runtime_settings.js';
 import { dispatchSecurityNotice } from '../security_notice_service.js';
 import { requireSudo } from '../sudo_mode.js';

package/build/src/host/controllers/account_orgs_controller.js

@@ -2,9 +2,9 @@ import '../augmentations.js';
 import { supportsOrganizations } from '../../accounts/account_store.js';
 import { getAccountLoginUrl } from '../account_login_url.js';
 import { accountPath } from '../account_paths.js';
+import { ACCOUNT_SESSION_KEY } from '../account_session_key.js';
 import { ACTIVE_ORG_COOKIE, ACTIVE_ORG_COOKIE_TTL, encodeActiveOrgCookie, } from '../active_org_cookie.js';
 import { sendOrgInvitationEmail } from '../default_mailer.js';
-import { ACCOUNT_SESSION_KEY } from '../middleware/account_auth.js';
 import { authkitOrigin } from '../origin.js';
 import { resolveRuntimeSettings } from '../runtime_settings.js';
 import { isRoleInCatalog } from '../runtime_toggles.js';

package/build/src/host/controllers/account_security_controller.js

@@ -5,12 +5,12 @@ import { AccountDeletionService } from '../account_deletion_service.js';
 import { AccountExportService } from '../account_export_service.js';
 import { getAccountLoginUrl } from '../account_login_url.js';
 import { accountPath } from '../account_paths.js';
+import { ACCOUNT_SESSION_KEY } from '../account_session_key.js';
 import { AdminSessionsService } from '../admin_sessions_service.js';
 import { syncAdonisAuthLogout } from '../adonis_auth_sync.js';
 import { AvatarUploadError, isAvatarUploadSupported, storeAvatar } from '../avatar_storage.js';
 import { sendEmailChangeConfirmationEmail, sendEmailChangeNoticeEmail, sendEmailChangedCompletedEmail, } from '../default_mailer.js';
 import { translate } from '../i18n.js';
-import { ACCOUNT_SESSION_KEY } from '../middleware/account_auth.js';
 import { authkitOrigin } from '../origin.js';
 import { resolveRuntimeSettings } from '../runtime_settings.js';
 import { resolveEffectiveEmailChange, resolveEffectivePasswordHistory, } from '../runtime_toggles.js';

package/build/src/host/controllers/account_session_controller.js

@@ -1,11 +1,11 @@
 import '../augmentations.js';
 import { accountHome } from '../account_home.js';
 import { getAccountLoginUrl } from '../account_login_url.js';
+import { ACCOUNT_SESSION_KEY } from '../account_session_key.js';
 import { syncAdonisAuthLogin, syncAdonisAuthLogout } from '../adonis_auth_sync.js';
 import { translate } from '../i18n.js';
 import { attemptPasswordLogin } from '../login_attempt.js';
 import { notifyLoginSuccess } from '../login_notify.js';
-import { ACCOUNT_SESSION_KEY } from '../middleware/account_auth.js';
 import { resolveRuntimeSettings } from '../runtime_settings.js';
 import { markSudo } from '../sudo_mode.js';
 /**

package/build/src/host/controllers/account_tokens_controller.js

@@ -1,6 +1,6 @@
 import '../augmentations.js';
 import { accountPath } from '../account_paths.js';
-import { ACCOUNT_SESSION_KEY } from '../middleware/account_auth.js';
+import { ACCOUNT_SESSION_KEY } from '../account_session_key.js';
 import { resolveRuntimeSettings } from '../runtime_settings.js';
 import { requireSudo } from '../sudo_mode.js';
 export default class AccountTokensController {

package/build/src/host/impersonation_session.js

@@ -1,4 +1,4 @@
-import { ACCOUNT_SESSION_KEY } from './middleware/account_auth.js';
+import { ACCOUNT_SESSION_KEY } from './account_session_key.js';
 /**
  * Ergonômico de SESSÃO de browser no RP para "personificar" (impersonate) um
  * usuário e navegar como ele — roteado pelo token-exchange RFC 8693 que o IdP já

package/build/src/host/middleware/account_auth.d.ts

@@ -1,7 +1,8 @@
 import '../augmentations.js';
 import type { HttpContext } from '@adonisjs/core/http';
 import type { NextFn } from '@adonisjs/core/types/http';
-export declare const ACCOUNT_SESSION_KEY = "account_user_id";
+import { ACCOUNT_SESSION_KEY } from '../account_session_key.js';
+export { ACCOUNT_SESSION_KEY };
 export default class AccountAuthMiddleware {
     handle(ctx: HttpContext, next: NextFn): Promise<any>;
 }

package/build/src/host/middleware/account_auth.js

@@ -1,6 +1,7 @@
 import '../augmentations.js';
 import { getAccountLoginUrl } from '../account_login_url.js';
-export const ACCOUNT_SESSION_KEY = 'account_user_id';
+import { ACCOUNT_SESSION_KEY } from '../account_session_key.js';
+export { ACCOUNT_SESSION_KEY };
 export default class AccountAuthMiddleware {
     async handle(ctx, next) {
         const userId = ctx.session.get(ACCOUNT_SESSION_KEY);

package/build/src/host/oidc_rp_guard.js

@@ -1,5 +1,5 @@
 import { RuntimeException } from '@adonisjs/core/exceptions';
-import { ACCOUNT_SESSION_KEY } from './middleware/account_auth.js';
+import { ACCOUNT_SESSION_KEY } from './account_session_key.js';
 /** Memo do construtor entre instâncias — o `import()` só paga o custo uma vez. */
 let cachedUnauthorizedAccess;
 /**

package/build/src/host/register_auth_host.js

@@ -3,10 +3,10 @@ import { accountHome } from './account_home.js';
 import { getAccountLoginUrl, setAccountLoginUrl } from './account_login_url.js';
 import { accountPath, accountPathsMap, accountPrefix, joinAccountPath, setAccountPaths, } from './account_paths.js';
 import { resolveAccountRoles } from './account_roles.js';
+import { ACCOUNT_SESSION_KEY } from './account_session_key.js';
 import { adminApiGuard } from './admin_api/admin_api_guard.js';
 import { normalizeAdminApiPrefix, normalizeAdminPrefix, setAdminApiPrefix, setAdminPrefix, } from './admin_prefix.js';
 import { getAuthHostConfig, markAuthHostAutoMounted, wasAuthHostAutoMounted, } from './auth_host_config.js';
-import { ACCOUNT_SESSION_KEY } from './middleware/account_auth.js';
 import { createAuthThrottles } from './rate_limit.js';
 import { resolveRuntimeSettings } from './runtime_settings.js';
 import { resolveEffectiveSessionPolicy } from './runtime_toggles.js';

package/build/src/host/sudo/runtime.js

@@ -1,8 +1,8 @@
 import { accountHome } from '../account_home.js';
 import { accountPath } from '../account_paths.js';
+import { ACCOUNT_SESSION_KEY } from '../account_session_key.js';
 import { validateReturnTo } from '../controllers/account_session_controller.js';
 import { translate } from '../i18n.js';
-import { ACCOUNT_SESSION_KEY } from '../middleware/account_auth.js';
 import { markSudo } from '../sudo_mode.js';
 /** Último método usado com sucesso — só ordena a tela, não restringe nada. */
 export const LAST_METHOD_SESSION_KEY = 'authkit_sudo_last_method';

package/build/src/host/sudo_mode.js

@@ -14,7 +14,7 @@
  * `SUDO_ACCOUNT_SESSION_KEY`.
  */
 import { accountPath } from './account_paths.js';
-import { ACCOUNT_SESSION_KEY } from './middleware/account_auth.js';
+import { ACCOUNT_SESSION_KEY } from './account_session_key.js';
 import { SETTING_KEYS } from './runtime_toggles.js';
 export const SUDO_MODE_DEFAULTS = {
     enabled: true,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@adonis-agora/authkit-server",
-  "version": "0.58.2",
+  "version": "0.58.3",
   "description": "AdonisJS OIDC/OAuth2 provider (Identity Provider) toolkit: ejectable auth server with sessions, rate-limiting, MFA/TOTP, audit log, federated logout and OpenTelemetry metrics.",
   "license": "MIT",
   "author": "dudousxd",