@adonisjs/auth 9.3.2 → 9.4.0

package/build/modules/access_tokens_guard/guard.d.ts

@@ -64,6 +64,17 @@ export declare class AccessTokensGuard<UserProvider extends AccessTokensUserProv
     authenticate(): Promise<UserProvider[typeof PROVIDER_REAL_USER] & {
         currentAccessToken: AccessToken;
     }>;
+    /**
+     * Create a token for a user (sign in)
+     */
+    createToken(user: UserProvider[typeof PROVIDER_REAL_USER], abilities?: string[], options?: {
+        expiresIn?: string | number;
+        name?: string;
+    }): Promise<AccessToken>;
+    /**
+     * Invalidates the currently authenticated token (sign out)
+     */
+    invalidateToken(): Promise<boolean>;
     /**
      * Returns the Authorization header clients can use to authenticate
      * the request.

package/build/modules/access_tokens_guard/main.js

@@ -613,6 +613,19 @@ var AccessTokensGuard = class {
     });
     return this.user;
   }
+  /**
+   * Create a token for a user (sign in)
+   */
+  async createToken(user, abilities, options) {
+    return await this.#userProvider.createToken(user, abilities, options);
+  }
+  /**
+   * Invalidates the currently authenticated token (sign out)
+   */
+  async invalidateToken() {
+    const bearerToken = new Secret2(this.#getBearerToken());
+    return await this.#userProvider.invalidateToken(bearerToken);
+  }
   /**
    * Returns the Authorization header clients can use to authenticate
    * the request.
@@ -846,6 +859,18 @@ var DbAccessTokensProvider = class _DbAccessTokensProvider {
     }
     return accessToken;
   }
+  /**
+   * Invalidates a token identified by its publicly shared token
+   */
+  async invalidate(tokenValue) {
+    const decodedToken = AccessToken.decode(this.prefix, tokenValue.release());
+    if (!decodedToken) {
+      return false;
+    }
+    const db = await this.getDb();
+    const deleteCount = await db.query().from(this.table).where({ id: decodedToken.identifier, type: this.type }).del().exec();
+    return Boolean(deleteCount);
+  }
 };
 
 // modules/access_tokens_guard/user_providers/lucid.ts
@@ -913,6 +938,13 @@ var AccessTokensLucidUserProvider = class {
     const tokensProvider = await this.getTokensProvider();
     return tokensProvider.create(user, abilities, options);
   }
+  /**
+   * Invalidates a token identified by its publicly shared token
+   */
+  async invalidateToken(tokenValue) {
+    const tokensProvider = await this.getTokensProvider();
+    return tokensProvider.invalidate(tokenValue);
+  }
   /**
    * Finds a user by the user id
    */

package/build/modules/access_tokens_guard/token_providers/db.d.ts

@@ -73,4 +73,8 @@ export declare class DbAccessTokensProvider<TokenableModel extends LucidModel> i
      * inside the storage
      */
     verify(tokenValue: Secret<string>): Promise<AccessToken | null>;
+    /**
+     * Invalidates a token identified by its publicly shared token
+     */
+    invalidate(tokenValue: Secret<string>): Promise<boolean>;
 }

package/build/modules/access_tokens_guard/types.d.ts

@@ -118,6 +118,10 @@ export interface AccessTokensProviderContract<Tokenable extends LucidModel> {
      * access token for it.
      */
     verify(tokenValue: Secret<string>): Promise<AccessToken | null>;
+    /**
+     * Invalidates a token identified by its publicly shared token
+     */
+    invalidate(tokenValue: Secret<string>): Promise<boolean>;
 }
 /**
  * A lucid model with a tokens provider to verify tokens during
@@ -167,6 +171,10 @@ export interface AccessTokensUserProviderContract<RealUser> {
         name?: string;
         expiresIn?: string | number;
     }): Promise<AccessToken>;
+    /**
+     * Invalidates a token identified by its publicly shared token.
+     */
+    invalidateToken(tokenValue: Secret<string>): Promise<boolean>;
     /**
      * Find a user by the user id.
      */

package/build/modules/access_tokens_guard/user_providers/lucid.d.ts

@@ -41,6 +41,10 @@ export declare class AccessTokensLucidUserProvider<TokenableProperty extends str
         name?: string;
         expiresIn?: string | number;
     }): Promise<AccessToken>;
+    /**
+     * Invalidates a token identified by its publicly shared token
+     */
+    invalidateToken(tokenValue: Secret<string>): Promise<boolean>;
     /**
      * Finds a user by the user id
      */

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@adonisjs/auth",
   "description": "Official authentication provider for Adonis framework",
-  "version": "9.3.2",
+  "version": "9.4.0",
   "engines": {
     "node": ">=18.16.0"
   },