@adonis-agora/authkit-server 0.61.2 → 0.61.4

package/build/src/host/bot_protection.d.ts

@@ -98,7 +98,7 @@ export interface BotProtectionWidget {
  *   - `g-recaptcha-response`  (Google reCAPTCHA)
  *   - `authkit-bot-token`     (genérico, p/ widgets custom)
  */
-export declare const DEFAULT_BOT_TOKEN_FIELDS: readonly ["cf-turnstile-response", "h-captcha-response", "g-recaptcha-response", "authkit-bot-token"];
+export declare const DEFAULT_BOT_TOKEN_FIELDS: readonly ['cf-turnstile-response', 'h-captcha-response', 'g-recaptcha-response', 'authkit-bot-token'];
 /** Config de entrada do bot protection (em `config/authkit.ts`). */
 export interface BotProtectionConfigInput {
     /**

package/build/src/host/config_locks.d.ts

@@ -27,7 +27,7 @@ export declare function deriveLockedSettingKeys(config: Record<string, any>): st
  * (onde as rotas moram). Ver `AuthHostOptions` e o docblock de
  * `registerAuthHost`.
  */
-export declare const POLICY_ROUTE_OPTIONS: readonly ["social", "rateLimit", "sudoMethods", "admin", "adminApi"];
+export declare const POLICY_ROUTE_OPTIONS: readonly ['social', 'rateLimit', 'sudoMethods', 'admin', 'adminApi'];
 /** Uma opção de política de `AuthHostOptions`. */
 export type PolicyRouteOption = (typeof POLICY_ROUTE_OPTIONS)[number];
 /**

package/build/src/host/controllers/account_confirm_controller.js

@@ -8,7 +8,7 @@
  * A tela está atrás do `accountGuard` (requer sessão de conta ativa).
  */
 import '../augmentations.js';
-import { LAST_METHOD_SESSION_KEY, configuredSudoMethods, isSudoMethodMounted, resolveAvailableMethods, sudoContextFrom, } from '../sudo/runtime.js';
+import { configuredSudoMethods, isSudoMethodMounted, LAST_METHOD_SESSION_KEY, resolveAvailableMethods, sudoContextFrom, } from '../sudo/runtime.js';
 /**
  * Reexport de compatibilidade. O construtor canônico do `SudoContext` vive em
  * `sudo/runtime.ts` (é runtime do SPI, não detalhe da tela); este caminho

package/build/src/host/controllers/account_security_controller.js

@@ -9,7 +9,7 @@ import { ACCOUNT_SESSION_KEY } from '../account_session_key.js';
 import { AdminSessionsService } from '../admin_sessions_service.js';
 import { syncAdonisAuthLogout } from '../adonis_auth_sync.js';
 import { AvatarUploadError, isAvatarUploadSupported, storeAvatar } from '../avatar_storage.js';
-import { sendEmailChangeConfirmationEmail, sendEmailChangeNoticeEmail, sendEmailChangedCompletedEmail, } from '../default_mailer.js';
+import { sendEmailChangeConfirmationEmail, sendEmailChangedCompletedEmail, sendEmailChangeNoticeEmail, } from '../default_mailer.js';
 import { translate } from '../i18n.js';
 import { authkitOrigin } from '../origin.js';
 import { resolveRuntimeSettings } from '../runtime_settings.js';

package/build/src/host/controllers/interaction_controller.js

@@ -3,8 +3,7 @@ import { supportsLoginMethodsPreference, supportsMagicLink, supportsOtpLogin, su
 import { AdminSessionsService } from '../admin_sessions_service.js';
 import { guardBotProtection, resolveEffectiveBotProtection } from '../bot_protection.js';
 import { brandFor, isFirstParty } from '../branding.js';
-import { sendMagicLinkEmail } from '../default_mailer.js';
-import { sendOtpUnlockEmail } from '../default_mailer.js';
+import { sendMagicLinkEmail, sendOtpUnlockEmail } from '../default_mailer.js';
 import { translate } from '../i18n.js';
 import { assertLoginAllowed, attemptPasswordLogin, isEmailUnverifiedBlock, } from '../login_attempt.js';
 import { magicChannelProp, normalizeLoginChannel } from '../login_channel.js';
@@ -13,7 +12,7 @@ import { authkitOrigin } from '../origin.js';
 import { createOtpLockout, generateOtpUnlockToken, rawToDbOtpUnlockToken, resolveEffectiveOtpLockout, } from '../otp_lockout.js';
 import { resolveRuntimeSettingsOrNoop } from '../runtime_settings.js';
 import { resolveEffectiveAuthMethods, resolveEffectiveMaintenanceMode, resolveEffectiveRegistration, resolveEffectiveSessionPolicy, } from '../runtime_toggles.js';
-import { TRUSTED_DEVICE_COOKIE, buildTrustedDevicePayload, isTrustedDeviceValid, } from '../trusted_device.js';
+import { buildTrustedDevicePayload, isTrustedDeviceValid, TRUSTED_DEVICE_COOKIE, } from '../trusted_device.js';
 import { normalizeUserLoginMethods, resolveEffectiveUserLoginMethods, } from '../user_login_methods.js';
 /**
  * Chave i18n do erro de status de conta (disabled/expired) compartilhada pelos

package/build/src/host/controllers/logout_asset_controller.d.ts

@@ -0,0 +1,27 @@
+import type { HttpContext } from '@adonisjs/core/http';
+/**
+ * GET /authkit/assets/logout.js
+ *
+ * Serve o script de auto-submit do splash de logout a partir do próprio host.
+ *
+ * O `logoutSource` (provider/logout_sources.ts) injeta este script VIA
+ * `<script src>` em vez de inline: hosts com CSP `script-src 'self'`
+ * bloqueiam script inline sem nonce/hash, e o auto-confirm do logout
+ * silenciosamente parava de rodar — a tela "Saindo / Encerrando sua
+ * sessão…" ficava presa para sempre. Um asset same-origin é permitido por
+ * `'self'` em qualquer CSP razoável, sem depender de nonce nem hash.
+ *
+ * SEM AUTENTICAÇÃO, e é intencional: é asset estático necessário na tela de
+ * logout, antes de a sessão SSO ser destruída. Também não pode viver sob o
+ * prefixo do console admin (que é opt-in).
+ */
+export default class LogoutAssetController {
+    handle(ctx: HttpContext): Promise<void>;
+}
+/**
+ * Limpa o cache do asset. Existe para os testes conseguirem exercitar tanto o
+ * caminho feliz quanto o 404 no mesmo processo.
+ *
+ * @internal
+ */
+export declare function resetLogoutAssetCache(): void;

package/build/src/host/controllers/logout_asset_controller.js

@@ -0,0 +1,71 @@
+import { readFile } from 'node:fs/promises';
+/**
+ * URL do script de auto-confirmação do RP-initiated logout, servido pelo
+ * próprio host.
+ *
+ * ⚠️ RESOLVIDO VIA `import.meta.url`, NUNCA relativo ao cwd. Os apps que
+ * consomem este pacote rodam `pnpm deploy --legacy`, que remonta a árvore de
+ * `node_modules` num diretório novo — um caminho relativo ao cwd do host
+ * apontaria para o lugar errado e a rota daria 404 em produção. Ancorado no
+ * módulo, o caminho segue o pacote para onde quer que ele seja copiado.
+ *
+ * Funciona nos dois layouts porque o asset é commitado em `src/host/assets/`
+ * e copiado para `build/src/host/assets/` pelo script `build`:
+ *   dev   → src/host/controllers/…       → src/host/assets/logout.js
+ *   build → build/src/host/controllers/… → build/src/host/assets/logout.js
+ */
+const ASSET_URL = new URL('../assets/logout.js', import.meta.url);
+/**
+ * Cache do conteúdo do asset. É imutável por versão do pacote — ler do disco
+ * a cada request de logout não compra nada.
+ *
+ * `null` = ainda não lido. `false` = lido e ausente (404 memoizado); sem isso
+ * um asset faltando viraria um `readFile` que falha por request.
+ */
+let cached = null;
+/**
+ * GET /authkit/assets/logout.js
+ *
+ * Serve o script de auto-submit do splash de logout a partir do próprio host.
+ *
+ * O `logoutSource` (provider/logout_sources.ts) injeta este script VIA
+ * `<script src>` em vez de inline: hosts com CSP `script-src 'self'`
+ * bloqueiam script inline sem nonce/hash, e o auto-confirm do logout
+ * silenciosamente parava de rodar — a tela "Saindo / Encerrando sua
+ * sessão…" ficava presa para sempre. Um asset same-origin é permitido por
+ * `'self'` em qualquer CSP razoável, sem depender de nonce nem hash.
+ *
+ * SEM AUTENTICAÇÃO, e é intencional: é asset estático necessário na tela de
+ * logout, antes de a sessão SSO ser destruída. Também não pode viver sob o
+ * prefixo do console admin (que é opt-in).
+ */
+export default class LogoutAssetController {
+    async handle(ctx) {
+        if (cached === null) {
+            try {
+                cached = await readFile(ASSET_URL);
+            }
+            catch {
+                cached = false;
+            }
+        }
+        if (cached === false) {
+            // 404 limpo: o asset não foi incluído no pacote. O splash degrada para o
+            // botão `<noscript>` (que continua funcionando sem JS) em vez de 500.
+            return ctx.response.notFound();
+        }
+        return ctx.response
+            .type('text/javascript')
+            .header('Cache-Control', 'public, max-age=31536000, immutable')
+            .send(cached);
+    }
+}
+/**
+ * Limpa o cache do asset. Existe para os testes conseguirem exercitar tanto o
+ * caminho feliz quanto o 404 no mesmo processo.
+ *
+ * @internal
+ */
+export function resetLogoutAssetCache() {
+    cached = null;
+}

package/build/src/host/durable/index.d.ts

@@ -29,8 +29,8 @@
 import type { DeletionActor } from '../account_deletion_service.js';
 import { type AccountDeleteWorkflowInput } from './account_deletion_workflow.js';
 import { type AccountExportWorkflowInput } from './account_export_workflow.js';
-export { defineAccountDeletionWorkflow, ACCOUNT_DELETE_WORKFLOW, type AccountDeleteWorkflowInput, type AccountDeletionWorkflowDeps, type DurableStepCtx, type WorkflowBody, } from './account_deletion_workflow.js';
-export { defineAccountExportWorkflow, ACCOUNT_EXPORT_WORKFLOW, type AccountExportWorkflowInput, type AccountExportWorkflowResult, type AccountExportWorkflowDeps, type PersistArtifact, type DeliverArtifact, } from './account_export_workflow.js';
+export { ACCOUNT_DELETE_WORKFLOW, type AccountDeleteWorkflowInput, type AccountDeletionWorkflowDeps, type DurableStepCtx, defineAccountDeletionWorkflow, type WorkflowBody, } from './account_deletion_workflow.js';
+export { ACCOUNT_EXPORT_WORKFLOW, type AccountExportWorkflowDeps, type AccountExportWorkflowInput, type AccountExportWorkflowResult, type DeliverArtifact, defineAccountExportWorkflow, type PersistArtifact, } from './account_export_workflow.js';
 /**
  * Superfície mínima do `WorkflowEngine` que o enqueue usa (`start` idempotente por
  * run-id). Tipada estruturalmente p/ NÃO acoplar o build ao peer opcional.

package/build/src/host/durable/index.js

@@ -28,8 +28,8 @@
  */
 import { ACCOUNT_DELETE_WORKFLOW, } from './account_deletion_workflow.js';
 import { ACCOUNT_EXPORT_WORKFLOW, } from './account_export_workflow.js';
-export { defineAccountDeletionWorkflow, ACCOUNT_DELETE_WORKFLOW, } from './account_deletion_workflow.js';
-export { defineAccountExportWorkflow, ACCOUNT_EXPORT_WORKFLOW, } from './account_export_workflow.js';
+export { ACCOUNT_DELETE_WORKFLOW, defineAccountDeletionWorkflow, } from './account_deletion_workflow.js';
+export { ACCOUNT_EXPORT_WORKFLOW, defineAccountExportWorkflow, } from './account_export_workflow.js';
 /**
  * Resolve o `WorkflowEngine` do container — SÓ no caminho durável. Importa
  * `@adonis-agora/durable` dinamicamente (peer opcional), então o barrel principal

package/build/src/host/login_methods_state.js

@@ -1,8 +1,5 @@
-import { supportsMagicLink } from '../accounts/account_store.js';
-import { supportsPasskeys } from '../accounts/account_store.js';
-import { supportsLoginMethodsPreference } from '../accounts/account_store.js';
-import { resolveEffectiveAuthMethods } from './runtime_toggles.js';
-import { configLockedAuthMethods } from './runtime_toggles.js';
+import { supportsLoginMethodsPreference, supportsMagicLink, supportsPasskeys, } from '../accounts/account_store.js';
+import { configLockedAuthMethods, resolveEffectiveAuthMethods } from './runtime_toggles.js';
 import { normalizeUserLoginMethods, resolveEffectiveUserLoginMethods, } from './user_login_methods.js';
 /**
  * Métodos globais efetivos + pins de config — resolução compartilhada entre o

package/build/src/host/login_notify.js

@@ -1,5 +1,5 @@
 import { sendNewDeviceLoginEmail, sendNewLoginEmail } from './default_mailer.js';
-import { TRUSTED_DEVICE_COOKIE, isTrustedDeviceValid } from './trusted_device.js';
+import { isTrustedDeviceValid, TRUSTED_DEVICE_COOKIE } from './trusted_device.js';
 /**
  * Centraliza o pós-login bem-sucedido: registra o evento `login.success` e dispara
  * (best-effort) o alerta de NOVO acesso quando o IP nunca foi visto para a conta.

package/build/src/host/oidc_rp_guard.d.ts

@@ -75,7 +75,7 @@ export type OidcRpGuardEvents<User> = {
 export declare class OidcRpGuard<UserProvider extends SessionUserProviderContract<unknown>> implements GuardContract<RealUser<UserProvider>> {
     #private;
     [symbols.GUARD_KNOWN_EVENTS]: OidcRpGuardEvents<RealUser<UserProvider>>;
-    driverName: "oidc_rp";
+    driverName: 'oidc_rp';
     authenticationAttempted: boolean;
     isAuthenticated: boolean;
     isLoggedOut: boolean;

package/build/src/host/register_auth_host.js

@@ -181,6 +181,7 @@ const C = {
     accountOrgs: () => import('./controllers/account_orgs_controller.js'),
     accountConfirm: () => import('./controllers/account_confirm_controller.js'),
     webauthnAsset: () => import('./controllers/webauthn_asset_controller.js'),
+    logoutAsset: () => import('./controllers/logout_asset_controller.js'),
     // Console React JSON API (session-authed, under {prefix}/api/*).
     consoleShell: () => import('./admin_console/admin_shell_controller.js'),
     consoleOverview: () => import('./admin_console/console_overview_controller.js'),
@@ -386,6 +387,11 @@ export function registerAuthHost(router, opts = {}) {
     //  • registrado ANTES do wildcard `${mount}/*` para que nenhum mountPath
     //    agressivo (ex.: '/') consiga engolir o asset e quebrar o login.
     router.get('/authkit/assets/webauthn.js', [C.webauthnAsset]).as('authkit.assets.webauthn');
+    // Script de auto-confirmação do splash de logout (RP-initiated logout).
+    // Same-origin (permitido por CSP `script-src 'self'`) — o logoutSource NÃO
+    // pode usar script inline: o CSP bloqueia sem nonce/hash e o logout fica
+    // preso em "Saindo / Encerrando sua sessão…".
+    router.get('/authkit/assets/logout.js', [C.logoutAsset]).as('authkit.assets.logout');
     // Provider OIDC (wildcard + root) — o que registerOidcRoutes fazia.
     router.any(`${mount}/*`, [C.oidc]).as('authkit.oidc.wildcard');
     router.any(mount, [C.oidc]).as('authkit.oidc.root');

package/build/src/host/runtime_settings.js

@@ -50,7 +50,7 @@
  * );
  * ```
  */
-import { SettingLockedError, isSettingLocked } from './config_locks.js';
+import { isSettingLocked, SettingLockedError } from './config_locks.js';
 /**
  * Type guard: o objeto (store ou serviço) expõe SettingsCapability?
  */

package/build/src/host/runtime_toggles.d.ts

@@ -17,29 +17,29 @@ import type { SettingsCapability } from './runtime_settings.js';
  * que qualquer code-path possa importar a constante e não depender de strings.
  */
 export declare const SETTING_KEYS: {
-    readonly BOT_PROTECTION: "bot_protection";
-    readonly REGISTRATION: "registration";
-    readonly REQUIRE_VERIFIED_EMAIL: "require_verified_email";
-    readonly MAINTENANCE_MODE: "maintenance_mode";
-    readonly AUTH_METHODS: "auth_methods";
-    readonly EMAIL_CHANGE: "email_change";
-    readonly SECURITY_NOTIFICATIONS: "security_notifications";
-    readonly PASSWORD_HISTORY: "password_history";
-    readonly PASSWORD_EXPIRATION: "password_expiration";
-    readonly SESSION_POLICY: "session_policy";
-    readonly LOCKOUT: "lockout";
-    readonly RATE_LIMIT: "rate_limit";
-    readonly PASSWORD_POLICY: "password_policy";
-    readonly NOTIFICATIONS: "notifications";
-    readonly TRUSTED_DEVICES: "trusted_devices";
-    readonly TOKEN_TTL: "token_ttl";
-    readonly ADMIN_IMPERSONATION: "admin_impersonation";
-    readonly ORGANIZATIONS_POLICY: "organizations_policy";
-    readonly ROLES_CATALOG: "roles_catalog";
-    readonly OTP_LOCKOUT: "otp_lockout";
-    readonly SUDO_MODE: "sudo_mode";
-    readonly ACCOUNT_EXPIRATION: "account_expiration";
-    readonly KEY_ROTATION: "key_rotation";
+    readonly BOT_PROTECTION: 'bot_protection';
+    readonly REGISTRATION: 'registration';
+    readonly REQUIRE_VERIFIED_EMAIL: 'require_verified_email';
+    readonly MAINTENANCE_MODE: 'maintenance_mode';
+    readonly AUTH_METHODS: 'auth_methods';
+    readonly EMAIL_CHANGE: 'email_change';
+    readonly SECURITY_NOTIFICATIONS: 'security_notifications';
+    readonly PASSWORD_HISTORY: 'password_history';
+    readonly PASSWORD_EXPIRATION: 'password_expiration';
+    readonly SESSION_POLICY: 'session_policy';
+    readonly LOCKOUT: 'lockout';
+    readonly RATE_LIMIT: 'rate_limit';
+    readonly PASSWORD_POLICY: 'password_policy';
+    readonly NOTIFICATIONS: 'notifications';
+    readonly TRUSTED_DEVICES: 'trusted_devices';
+    readonly TOKEN_TTL: 'token_ttl';
+    readonly ADMIN_IMPERSONATION: 'admin_impersonation';
+    readonly ORGANIZATIONS_POLICY: 'organizations_policy';
+    readonly ROLES_CATALOG: 'roles_catalog';
+    readonly OTP_LOCKOUT: 'otp_lockout';
+    readonly SUDO_MODE: 'sudo_mode';
+    readonly ACCOUNT_EXPIRATION: 'account_expiration';
+    readonly KEY_ROTATION: 'key_rotation';
 };
 export type SettingKey = (typeof SETTING_KEYS)[keyof typeof SETTING_KEYS];
 /**

package/build/src/host/sudo/index.d.ts

@@ -46,10 +46,10 @@ export declare const sudoMethods: {
     oidcStepUp: typeof oidcStepUp;
     magicLink: typeof magicLink;
 };
-export type { SudoMethod, SudoContext, SudoMethodDescriptor, SudoRouteHelpers } from './types.js';
 /**
  * Montagem do `SudoContext` a partir do `HttpContext`. Reexportado aqui por
  * simetria com `sudoMethods` e os tipos: quem escreve um método (ou a rota de
  * callback do `oidcStepUp`) precisa dos três.
  */
 export { sudoContextFrom } from './runtime.js';
+export type { SudoContext, SudoMethod, SudoMethodDescriptor, SudoRouteHelpers } from './types.js';