@adonis-agora/authkit-server 0.82.1 → 0.82.2

package/build/src/accounts/lucid_account_store.js

@@ -1,4 +1,3 @@
-import { generateAuthenticationOptions, generateRegistrationOptions, verifyAuthenticationResponse, verifyRegistrationResponse, } from '@simplewebauthn/server';
 import { PasswordManager } from '../password/password_manager.js';
 import { buildCore } from './lucid_store/core.js';
 import { buildLoginMethods, supportsLoginMethodsColumn } from './lucid_store/login_methods.js';
@@ -7,7 +6,7 @@ import { defaultOrganizationModels } from './lucid_store/organization_models.js'
 import { buildOrganizations } from './lucid_store/organizations.js';
 import { buildPasswordExpiration, buildPasswordHistory } from './lucid_store/password_hygiene.js';
 import { buildProviderIdentity } from './lucid_store/provider_identity.js';
-import { hasTable, } from './lucid_store/shared.js';
+import { defaultWebauthnCeremonies, hasTable, } from './lucid_store/shared.js';
 import { buildDeletion, buildEmailVerificationStatus, buildProfile, buildStatus, hasColumn, } from './lucid_store/status_profile.js';
 import { buildWebauthn } from './lucid_store/webauthn.js';
 export function resolveEmailTokens(input) {
@@ -147,10 +146,7 @@ export function lucidAccountStore(Model, options = {}) {
     };
     // Cerimônias WebAuthn: reais por default, injetáveis para testes.
     const ceremonies = {
-        generateRegistrationOptions,
-        verifyRegistrationResponse,
-        generateAuthenticationOptions,
-        verifyAuthenticationResponse,
+        ...defaultWebauthnCeremonies,
         ...options.webauthnCeremonies,
     };
     const passwords = new PasswordManager(options.password, {

package/build/src/accounts/lucid_store/shared.d.ts

@@ -1,4 +1,4 @@
-import { generateAuthenticationOptions, generateRegistrationOptions, verifyAuthenticationResponse, verifyRegistrationResponse } from '@simplewebauthn/server';
+import type { generateAuthenticationOptions, generateRegistrationOptions, verifyAuthenticationResponse, verifyRegistrationResponse } from '@simplewebauthn/server';
 import type { AuditSink } from '../../audit/audit_sink.js';
 import type { PasswordManager } from '../../password/password_manager.js';
 import type { AuthAccount } from '../account_store.js';
@@ -23,6 +23,12 @@ export interface WebauthnCeremonies {
     generateAuthenticationOptions: typeof generateAuthenticationOptions;
     verifyAuthenticationResponse: typeof verifyAuthenticationResponse;
 }
+/**
+ * As cerimônias reais (default de {@link WebauthnCeremonies}). Todas já são
+ * assíncronas no `@simplewebauthn/server`; cada uma só espera o import lazy antes
+ * de delegar.
+ */
+export declare const defaultWebauthnCeremonies: WebauthnCeremonies;
 /** RP (Relying Party) do WebAuthn usado nas cerimônias. */
 export interface ResolvedRp {
     rpName: string;

package/build/src/accounts/lucid_store/shared.js

@@ -1,4 +1,28 @@
 import { createHash, randomBytes, timingSafeEqual } from 'node:crypto';
+/**
+ * `@simplewebauthn/server` carregado na primeira cerimônia, não no boot: a maioria
+ * dos processos (workers, ace, apps sem passkeys) nunca faz uma. Um import por
+ * processo; uma falha não fica em cache (a próxima cerimônia tenta de novo).
+ */
+let simpleWebauthn;
+function loadSimpleWebauthn() {
+    simpleWebauthn ??= import('@simplewebauthn/server').catch((error) => {
+        simpleWebauthn = undefined;
+        throw error;
+    });
+    return simpleWebauthn;
+}
+/**
+ * As cerimônias reais (default de {@link WebauthnCeremonies}). Todas já são
+ * assíncronas no `@simplewebauthn/server`; cada uma só espera o import lazy antes
+ * de delegar.
+ */
+export const defaultWebauthnCeremonies = {
+    generateRegistrationOptions: async (options) => (await loadSimpleWebauthn()).generateRegistrationOptions(options),
+    verifyRegistrationResponse: async (options) => (await loadSimpleWebauthn()).verifyRegistrationResponse(options),
+    generateAuthenticationOptions: async (options) => (await loadSimpleWebauthn()).generateAuthenticationOptions(options),
+    verifyAuthenticationResponse: async (options) => (await loadSimpleWebauthn()).verifyAuthenticationResponse(options),
+};
 export const sha256 = (value) => createHash('sha256').update(value).digest('hex');
 /** Recovery code legível: 10 chars hex em duas metades (ex.: a1b2c-3d4e5). */
 export function generateRecoveryCode() {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@adonis-agora/authkit-server",
-  "version": "0.82.1",
+  "version": "0.82.2",
   "description": "AdonisJS OIDC/OAuth2 provider (Identity Provider) toolkit: ejectable auth server with sessions, rate-limiting, MFA/TOTP, audit log, federated logout and OpenTelemetry metrics.",
   "license": "MIT",
   "author": "dudousxd",