@antelopejs/interface-auth 0.0.2

package/LICENSE

@@ -0,0 +1,190 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   Copyright (c) 2025-present - AntelopeJS Team
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/README.md

@@ -0,0 +1,41 @@
+![Auth](.github/social-card.png)
+
+# Interface Auth
+
+<div align="center">
+<a href="./LICENSE"><img alt="License" src="https://img.shields.io/badge/License-Apache_2.0-blue.svg?style=for-the-badge&labelColor=000000"></a>
+<a href="https://discord.gg/sjK28QHrA7"><img src="https://img.shields.io/badge/Discord-18181B?logo=discord&style=for-the-badge&color=000000" alt="Discord"></a>
+<a href="./docs/1.introduction.md"><img src="https://img.shields.io/badge/Docs-18181B?style=for-the-badge&color=000000" alt="Documentation"></a>
+</div>
+
+A flexible, decorator-based framework for implementing authentication and authorization in TypeScript. Interface Auth simplifies securing API endpoints, validating user credentials, and managing user sessions with a clean, declarative syntax.
+
+## Installation
+
+```bash
+ajs module imports add auth@beta
+```
+
+## Documentation
+
+Detailed documentation is available in the `docs` directory:
+
+- [Introduction](./docs/1.introduction.md) - Overview and basic concepts
+- [Authentication Basics](./docs/2.authentication.md) - Core authentication concepts and usage
+- [Token Handling](./docs/3.token-handling.md) - Token generation and validation
+- [Parameter Decoration](./docs/4.parameter-decoration.md) - Authentication decorators and parameter validation
+
+## Current Status
+
+This is the development version (`beta`) of the Interface Auth. It is currently in pre-release stage and may undergo changes before the final release. The interface is not considered stable for production use without understanding that breaking changes may occur.
+
+## Versions
+
+| Version | Link                                                                                     | Status                                        |
+| ------- | ---------------------------------------------------------------------------------------- | --------------------------------------------- |
+| beta    | [auth@beta](https://github.com/AntelopeJS/auth-jwt/tree/main/.antelope/output/auth/beta) | Waiting validation from community to go in v1 |
+| 1       | _Not yet released_                                                                       | Planned stable release                        |
+
+## License
+
+This project is licensed under the Apache License 2.0 - see the [LICENSE](LICENSE) file for details.

package/dist/antelope.test.d.ts

@@ -0,0 +1,2 @@
+declare const _default: import("@antelopejs/interface-core/config").ConfigInput;
+export default _default;

package/dist/antelope.test.js

@@ -0,0 +1,60 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const config_1 = require("@antelopejs/interface-core/config");
+const mongodb_memory_server_core_1 = require("mongodb-memory-server-core");
+let mongod;
+exports.default = (0, config_1.defineConfig)({
+    name: "interface-auth-test",
+    cacheFolder: ".antelope/cache",
+    modules: {
+        "auth-jwt": {
+            source: {
+                type: "local",
+                path: "../auth-jwt",
+                installCommand: ["pnpm install", "npx tsc"],
+            },
+            config: { secret: "test-secret-key-for-jwt" },
+        },
+        mongodb: {
+            source: {
+                type: "local",
+                path: "../mongodb",
+                installCommand: ["pnpm install", "npx tsc"],
+            },
+        },
+        database_decorators: {
+            source: {
+                type: "local",
+                path: "../database-decorators",
+                installCommand: ["pnpm install", "npx tsc"],
+            },
+        },
+        api: {
+            source: {
+                type: "local",
+                path: "../api",
+                installCommand: ["pnpm install", "npx tsc"],
+            },
+            config: {
+                servers: [{ protocol: "http", host: "127.0.0.1", port: 5010 }],
+            },
+        },
+    },
+    test: {
+        folder: "dist/tests",
+        async setup() {
+            mongod = await mongodb_memory_server_core_1.MongoMemoryServer.create();
+            return {
+                modules: {
+                    mongodb: {
+                        config: { url: mongod.getUri() },
+                    },
+                },
+            };
+        },
+        async cleanup() {
+            await mongod.stop();
+        },
+    },
+});
+//# sourceMappingURL=antelope.test.js.map

package/dist/antelope.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"antelope.test.js","sourceRoot":"","sources":["../src/antelope.test.ts"],"names":[],"mappings":";;AAAA,8DAAiE;AACjE,2EAA+D;AAE/D,IAAI,MAAyB,CAAC;AAE9B,kBAAe,IAAA,qBAAY,EAAC;IAC1B,IAAI,EAAE,qBAAqB;IAC3B,WAAW,EAAE,iBAAiB;IAC9B,OAAO,EAAE;QACP,UAAU,EAAE;YACV,MAAM,EAAE;gBACN,IAAI,EAAE,OAAO;gBACb,IAAI,EAAE,aAAa;gBACnB,cAAc,EAAE,CAAC,cAAc,EAAE,SAAS,CAAC;aAC5C;YACD,MAAM,EAAE,EAAE,MAAM,EAAE,yBAAyB,EAAE;SAC9C;QACD,OAAO,EAAE;YACP,MAAM,EAAE;gBACN,IAAI,EAAE,OAAO;gBACb,IAAI,EAAE,YAAY;gBAClB,cAAc,EAAE,CAAC,cAAc,EAAE,SAAS,CAAC;aAC5C;SACF;QACD,mBAAmB,EAAE;YACnB,MAAM,EAAE;gBACN,IAAI,EAAE,OAAO;gBACb,IAAI,EAAE,wBAAwB;gBAC9B,cAAc,EAAE,CAAC,cAAc,EAAE,SAAS,CAAC;aAC5C;SACF;QACD,GAAG,EAAE;YACH,MAAM,EAAE;gBACN,IAAI,EAAE,OAAO;gBACb,IAAI,EAAE,QAAQ;gBACd,cAAc,EAAE,CAAC,cAAc,EAAE,SAAS,CAAC;aAC5C;YACD,MAAM,EAAE;gBACN,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;aAC/D;SACF;KACF;IACD,IAAI,EAAE;QACJ,MAAM,EAAE,YAAY;QACpB,KAAK,CAAC,KAAK;YACT,MAAM,GAAG,MAAM,8CAAiB,CAAC,MAAM,EAAE,CAAC;YAC1C,OAAO;gBACL,OAAO,EAAE;oBACP,OAAO,EAAE;wBACP,MAAM,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE;qBACjC;iBACF;aACF,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,OAAO;YACX,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACtB,CAAC;KACF;CACF,CAAC,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,275 @@
+import type { IncomingMessage, ServerResponse } from "node:http";
+/**
+ * Function type that extracts authentication data from HTTP request.
+ *
+ * @param req - The incoming HTTP request
+ * @param res - The server response object
+ * @returns The authentication token string or undefined if not found
+ *
+ * @example
+ * ```typescript
+ * const headerSource: AuthSource = (req) => req.headers['authorization']?.replace('Bearer ', '');
+ * ```
+ */
+export type AuthSource = (req: IncomingMessage, res: ServerResponse) => string | undefined;
+/**
+ * Function type that verifies authentication data and returns parsed content.
+ *
+ * @template T - The type of the verified data
+ * @param data - The authentication data to verify
+ * @param options - Optional verification parameters
+ * @returns The verified data or a Promise resolving to the verified data
+ *
+ * @example
+ * ```typescript
+ * const jwtVerifier: AuthVerifier<UserProfile> = (token) =>
+ *   jwt.verify(token, SECRET_KEY) as UserProfile;
+ * ```
+ */
+export type AuthVerifier<T = unknown> = (data?: string, options?: VerifyOptions) => Promise<T> | T;
+/**
+ * Function type that performs additional validation on verified authentication data.
+ *
+ * @template T - The type of input data to validate
+ * @template R - The type of the validation result
+ * @param data - The verified data to validate
+ * @returns The validation result or a Promise resolving to the validation result
+ *
+ * @example
+ * ```typescript
+ * const roleValidator: AuthValidator<UserProfile, boolean> = (profile) =>
+ *   profile.roles.includes('admin');
+ * ```
+ */
+export type AuthValidator<T = unknown, R = unknown> = (data: T) => Promise<R> | R;
+/**
+ * HTTP Cookie options for controlling how authentication cookies are set.
+ *
+ * @property maxAge - Number of milliseconds until the cookie expires
+ * @property signed - Whether the cookie should be signed
+ * @property expires - Specific date when the cookie expires
+ * @property httpOnly - Whether the cookie is only accessible via HTTP(S) and not client JavaScript
+ * @property path - URL path for which the cookie is valid
+ * @property domain - Domain for which the cookie is valid
+ * @property secure - Whether the cookie should only be sent over HTTPS
+ *
+ * @example
+ * ```typescript
+ * const secureOptions: CookieOptions = {
+ *   httpOnly: true,
+ *   secure: true,
+ *   maxAge: 3600000, // 1 hour
+ *   path: '/'
+ * };
+ * ```
+ */
+export interface CookieOptions {
+    maxAge?: number;
+    signed?: boolean;
+    expires?: Date;
+    httpOnly?: boolean;
+    path?: string;
+    domain?: string;
+    secure?: boolean;
+}
+/**
+ * Options for signing authentication tokens.
+ *
+ * @property expiresIn - Duration until the token expires, as seconds or timespan string (e.g. '1h', '2d')
+ * @property notBefore - Duration before which the token is not valid, as seconds or timespan string
+ *
+ * @example
+ * ```typescript
+ * const tokenOptions: SignOptions = {
+ *   expiresIn: '2h', // Token valid for 2 hours
+ *   notBefore: '5s'  // Token not valid until 5 seconds after issuance
+ * };
+ * ```
+ */
+export interface SignOptions {
+    /**
+     * Expiration as a number of seconds or a timespan string.
+     */
+    expiresIn?: string | number;
+    /**
+     * Not-before field as a number of seconds or a timespan string.
+     */
+    notBefore?: string | number;
+}
+/**
+ * Options for verifying authentication tokens.
+ *
+ * @property ignoreExpiration - If true, expired tokens will still be considered valid
+ * @property ignoreNotBefore - If true, tokens that are not yet valid will still be considered valid
+ * @property maxAge - Maximum age of the token, as seconds or timespan string
+ *
+ * @example
+ * ```typescript
+ * const verifyOptions: VerifyOptions = {
+ *   ignoreExpiration: false,
+ *   maxAge: '30m'  // Reject tokens older than 30 minutes
+ * };
+ * ```
+ */
+export interface VerifyOptions {
+    /**
+     * Ignore signature expiration.
+     */
+    ignoreExpiration?: boolean;
+    /**
+     * Ignore signature not-before field.
+     */
+    ignoreNotBefore?: boolean;
+    /**
+     * Maximum signature age as a number of seconds or a timespan string.
+     */
+    maxAge?: string | number;
+}
+type AuthPayload = string | Buffer | object;
+interface AuthDecoratorCallbacks<T, R> {
+    source?: AuthSource;
+    authenticator?: AuthVerifier<T>;
+    authenticatorOptions?: VerifyOptions;
+    validator?: AuthValidator<T, R>;
+}
+/**
+ * @internal
+ */
+export declare namespace internal {
+    const Verify: (data?: string | undefined, options?: VerifyOptions | undefined) => Promise<unknown>;
+    const Sign: (data: AuthPayload, options?: SignOptions | undefined) => Promise<string>;
+    function defaultSource(req: IncomingMessage, _res: ServerResponse): string | undefined;
+    const defaultAuthenticator: AuthVerifier<unknown>;
+    /**
+     * Verifies the signature of signed data attached to the HTTP request and returns the data contained therein.
+     *
+     * @template T - The type of data after verification
+     * @template R - The type of data after validation
+     * @param req - HTTP Request
+     * @param res - HTTP Response
+     * @param source - Callback to retrieve the signed data from the request
+     * @param authenticator - Callback to verify the signature
+     * @param authenticatorOptions - Verifier options
+     * @param validator - Custom validator callback
+     * @returns The authenticated and validated data
+     */
+    function CheckAuthentication<T = unknown, R = unknown>(req: IncomingMessage, res: ServerResponse, source?: AuthSource, authenticator?: AuthVerifier<T>, authenticatorOptions?: VerifyOptions, validator?: AuthValidator<T, R>): Promise<T | R>;
+}
+/**
+ * Verifies the signature of some signed data and returns the data contained therein.
+ *
+ * @template T - The type of data expected after verification
+ * @param token - The signed data token to verify
+ * @param options - Options for verification
+ * @returns A promise resolving to the verified data
+ *
+ * @example
+ * ```typescript
+ * const userData = await ValidateRaw<UserProfile>(authToken, { maxAge: '1h' });
+ * console.log(userData.name);
+ * ```
+ */
+export declare function ValidateRaw<T = unknown>(token?: string, options?: VerifyOptions): Promise<T>;
+/**
+ * Signs some data to create an authentication token.
+ *
+ * @param data - The data to sign
+ * @param options - Options for signing
+ * @returns The signed data token
+ *
+ * @example
+ * ```typescript
+ * const token = SignRaw({ userId: 123, role: 'admin' }, { expiresIn: '24h' });
+ * ```
+ */
+export declare function SignRaw(data: AuthPayload, options?: SignOptions): Promise<string>;
+/**
+ * Signs some data and attaches it to an HTTP Response object as a cookie.
+ *
+ * @param res - HTTP Response object to set the cookie on
+ * @param data - Data to sign and attach
+ * @param signOptions - Options for signing the data
+ * @param cookieOptions - Options for the cookie
+ * @returns A promise that resolves when the cookie has been set
+ *
+ * @example
+ * ```typescript
+ * await SignServerResponse(
+ *   res,
+ *   { userId: 123, permissions: ['read', 'write'] },
+ *   { expiresIn: '8h' },
+ *   { httpOnly: true, secure: true }
+ * );
+ * ```
+ */
+export declare function SignServerResponse(res: ServerResponse, data: AuthPayload, signOptions?: SignOptions, cookieOptions?: CookieOptions): Promise<ServerResponse>;
+/**
+ * Creates a Parameter Provider using the specified source and signature verification callbacks.
+ *
+ * The callbacks are processed in the following order:
+ * `source(req, res)` => `authenticator(prev, authenticatorOptions)` => `validator(prev)` => Parameter
+ *
+ * @template R - The type of the final validator result
+ * @template T - The type of the authenticated data before validation
+ * @param callbacks - Configuration object containing callback functions
+ * @param callbacks.source - Extracts the signed data from the request
+ * @param callbacks.authenticator - Verifies the signature
+ * @param callbacks.authenticatorOptions - Options for verification
+ * @param callbacks.validator - Custom validation step (overrideable with decorator call)
+ * @returns A decorator for parameters, methods, properties, and classes
+ *
+ * @example
+ * ```typescript
+ * // Create a custom auth decorator
+ * const RequireAdmin = CreateAuthDecorator({
+ *   validator: (user: any) => {
+ *     if (!user || user.role !== 'admin') {
+ *       throw new Error('Admin access required');
+ *     }
+ *     return user;
+ *   }
+ * });
+ *
+ * // Use the decorator
+ * class AdminController {
+ *   @Route('/admin/settings')
+ *   getSettings(@RequireAdmin() user: UserProfile) {
+ *     // Only admin users can access this
+ *     return { settings: this.adminSettings };
+ *   }
+ * }
+ * ```
+ */
+export declare function CreateAuthDecorator<R = unknown, T = unknown>(callbacks: AuthDecoratorCallbacks<T, R>): (validator?: AuthValidator<T, R> | undefined) => import("@antelopejs/interface-core/decorators").ClassDecorator<import("@antelopejs/interface-core/decorators").Class<any, any[]>> & import("@antelopejs/interface-core/decorators").PropertyDecorator & import("@antelopejs/interface-core/decorators").ParameterDecorator;
+/**
+ * Parameter Provider using the default source and signature verification callbacks.
+ * This decorator can be applied to parameters, methods, properties, or classes to
+ * require authentication.
+ *
+ * @param validator - Optional custom validation callback
+ * @returns The authenticated user data
+ *
+ * @example
+ * ```typescript
+ * class UserController {
+ *   @Route('/profile')
+ *   getProfile(@Authentication user: UserProfile) {
+ *     // 'user' contains the authenticated user data
+ *     return { name: user.name, email: user.email };
+ *   }
+ *
+ *   @Route('/admin')
+ *   adminPage(@Authentication((user) => {
+ *     if (user.role !== 'admin') throw new Error('Admin only');
+ *     return user;
+ *   }) user: UserProfile) {
+ *     // Only admins will reach this code
+ *     return { adminData: this.sensitiveData };
+ *   }
+ * }
+ * ```
+ *
+ * @see {@link CreateAuthDecorator}
+ */
+export declare const Authentication: (validator?: AuthValidator<unknown, unknown> | undefined) => import("@antelopejs/interface-core/decorators").ClassDecorator<import("@antelopejs/interface-core/decorators").Class<any, any[]>> & import("@antelopejs/interface-core/decorators").PropertyDecorator & import("@antelopejs/interface-core/decorators").ParameterDecorator;
+export {};

package/dist/index.js

@@ -0,0 +1,239 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Authentication = exports.internal = void 0;
+exports.ValidateRaw = ValidateRaw;
+exports.SignRaw = SignRaw;
+exports.SignServerResponse = SignServerResponse;
+exports.CreateAuthDecorator = CreateAuthDecorator;
+const interface_api_1 = require("@antelopejs/interface-api");
+const interface_core_1 = require("@antelopejs/interface-core");
+const decorators_1 = require("@antelopejs/interface-core/decorators");
+const AuthHeaderName = "x-antelopejs-auth";
+const AuthCookieName = "ANTELOPEJS_AUTH";
+const EmptyString = "";
+const CookieOptionSeparator = "; ";
+const ClassParameterProviderSymbolDescription = "authentication-class-provider";
+function readAuthHeader(req) {
+    const header = req.headers[AuthHeaderName];
+    if (typeof header === "string") {
+        return header;
+    }
+    if (!header || header.length === 0) {
+        return undefined;
+    }
+    return header[0];
+}
+function readCookieToken(req) {
+    const cookieHeader = req.headers.cookie;
+    if (!cookieHeader) {
+        return undefined;
+    }
+    const cookieMatch = ` ${cookieHeader}`.match(/ ANTELOPEJS_AUTH=([^;]*)/);
+    return cookieMatch?.[1];
+}
+function serializeCookieOptions(cookieOptions) {
+    if (!cookieOptions) {
+        return EmptyString;
+    }
+    const entries = Object.entries(cookieOptions).filter(([, value]) => value !== undefined && value !== false);
+    if (entries.length === 0) {
+        return EmptyString;
+    }
+    return entries
+        .map(([key, value]) => typeof value === "boolean" ? key : `${key}=${String(value)}`)
+        .join(CookieOptionSeparator);
+}
+function createSetCookieHeader(token, cookieOptions) {
+    const serializedCookieOptions = serializeCookieOptions(cookieOptions);
+    if (!serializedCookieOptions) {
+        return `${AuthCookieName}=${token}`;
+    }
+    return `${AuthCookieName}=${token}; ${serializedCookieOptions}`;
+}
+function resolveAuthDecoratorCallbacks(callbacks) {
+    return {
+        source: callbacks.source ?? internal.defaultSource,
+        authenticator: callbacks.authenticator ??
+            internal.defaultAuthenticator,
+        authenticatorOptions: callbacks.authenticatorOptions ?? {},
+        validator: callbacks.validator,
+    };
+}
+function createAuthParameterProvider(callbacks, validator) {
+    return (context) => internal.CheckAuthentication(context.rawRequest, context.rawResponse, callbacks.source, callbacks.authenticator, callbacks.authenticatorOptions, validator);
+}
+function registerClassParameterProvider(target, provider) {
+    (0, interface_api_1.SetParameterProvider)(target.prototype, Symbol(ClassParameterProviderSymbolDescription), undefined, provider);
+}
+/**
+ * @internal
+ */
+var internal;
+(function (internal) {
+    internal.Verify = (0, interface_core_1.InterfaceFunction)();
+    internal.Sign = (0, interface_core_1.InterfaceFunction)();
+    function defaultSource(req, _res) {
+        return readAuthHeader(req) ?? readCookieToken(req);
+    }
+    internal.defaultSource = defaultSource;
+    internal.defaultAuthenticator = ValidateRaw;
+    /**
+     * Verifies the signature of signed data attached to the HTTP request and returns the data contained therein.
+     *
+     * @template T - The type of data after verification
+     * @template R - The type of data after validation
+     * @param req - HTTP Request
+     * @param res - HTTP Response
+     * @param source - Callback to retrieve the signed data from the request
+     * @param authenticator - Callback to verify the signature
+     * @param authenticatorOptions - Verifier options
+     * @param validator - Custom validator callback
+     * @returns The authenticated and validated data
+     */
+    async function CheckAuthentication(req, res, source = defaultSource, authenticator = internal.defaultAuthenticator, authenticatorOptions = {}, validator) {
+        const verifiedData = await authenticator(source(req, res), authenticatorOptions);
+        if (!validator) {
+            return verifiedData;
+        }
+        return validator(verifiedData);
+    }
+    internal.CheckAuthentication = CheckAuthentication;
+})(internal || (exports.internal = internal = {}));
+/**
+ * Verifies the signature of some signed data and returns the data contained therein.
+ *
+ * @template T - The type of data expected after verification
+ * @param token - The signed data token to verify
+ * @param options - Options for verification
+ * @returns A promise resolving to the verified data
+ *
+ * @example
+ * ```typescript
+ * const userData = await ValidateRaw<UserProfile>(authToken, { maxAge: '1h' });
+ * console.log(userData.name);
+ * ```
+ */
+function ValidateRaw(token, options) {
+    return internal.Verify(token, options);
+}
+/**
+ * Signs some data to create an authentication token.
+ *
+ * @param data - The data to sign
+ * @param options - Options for signing
+ * @returns The signed data token
+ *
+ * @example
+ * ```typescript
+ * const token = SignRaw({ userId: 123, role: 'admin' }, { expiresIn: '24h' });
+ * ```
+ */
+function SignRaw(data, options) {
+    return internal.Sign(data, options);
+}
+/**
+ * Signs some data and attaches it to an HTTP Response object as a cookie.
+ *
+ * @param res - HTTP Response object to set the cookie on
+ * @param data - Data to sign and attach
+ * @param signOptions - Options for signing the data
+ * @param cookieOptions - Options for the cookie
+ * @returns A promise that resolves when the cookie has been set
+ *
+ * @example
+ * ```typescript
+ * await SignServerResponse(
+ *   res,
+ *   { userId: 123, permissions: ['read', 'write'] },
+ *   { expiresIn: '8h' },
+ *   { httpOnly: true, secure: true }
+ * );
+ * ```
+ */
+function SignServerResponse(res, data, signOptions, cookieOptions) {
+    return SignRaw(data, signOptions).then((token) => {
+        res.setHeader("Set-Cookie", createSetCookieHeader(token, cookieOptions));
+        return res;
+    });
+}
+/**
+ * Creates a Parameter Provider using the specified source and signature verification callbacks.
+ *
+ * The callbacks are processed in the following order:
+ * `source(req, res)` => `authenticator(prev, authenticatorOptions)` => `validator(prev)` => Parameter
+ *
+ * @template R - The type of the final validator result
+ * @template T - The type of the authenticated data before validation
+ * @param callbacks - Configuration object containing callback functions
+ * @param callbacks.source - Extracts the signed data from the request
+ * @param callbacks.authenticator - Verifies the signature
+ * @param callbacks.authenticatorOptions - Options for verification
+ * @param callbacks.validator - Custom validation step (overrideable with decorator call)
+ * @returns A decorator for parameters, methods, properties, and classes
+ *
+ * @example
+ * ```typescript
+ * // Create a custom auth decorator
+ * const RequireAdmin = CreateAuthDecorator({
+ *   validator: (user: any) => {
+ *     if (!user || user.role !== 'admin') {
+ *       throw new Error('Admin access required');
+ *     }
+ *     return user;
+ *   }
+ * });
+ *
+ * // Use the decorator
+ * class AdminController {
+ *   @Route('/admin/settings')
+ *   getSettings(@RequireAdmin() user: UserProfile) {
+ *     // Only admin users can access this
+ *     return { settings: this.adminSettings };
+ *   }
+ * }
+ * ```
+ */
+function CreateAuthDecorator(callbacks) {
+    const resolvedCallbacks = resolveAuthDecoratorCallbacks(callbacks);
+    return (0, decorators_1.MakeParameterAndPropertyAndClassDecorator)((target, key, index, validator) => {
+        const authValidator = validator ?? resolvedCallbacks.validator;
+        const provider = createAuthParameterProvider(resolvedCallbacks, authValidator);
+        if (key === undefined) {
+            registerClassParameterProvider(target, provider);
+            return;
+        }
+        (0, interface_api_1.SetParameterProvider)(target, key, index, provider);
+    });
+}
+/**
+ * Parameter Provider using the default source and signature verification callbacks.
+ * This decorator can be applied to parameters, methods, properties, or classes to
+ * require authentication.
+ *
+ * @param validator - Optional custom validation callback
+ * @returns The authenticated user data
+ *
+ * @example
+ * ```typescript
+ * class UserController {
+ *   @Route('/profile')
+ *   getProfile(@Authentication user: UserProfile) {
+ *     // 'user' contains the authenticated user data
+ *     return { name: user.name, email: user.email };
+ *   }
+ *
+ *   @Route('/admin')
+ *   adminPage(@Authentication((user) => {
+ *     if (user.role !== 'admin') throw new Error('Admin only');
+ *     return user;
+ *   }) user: UserProfile) {
+ *     // Only admins will reach this code
+ *     return { adminData: this.sensitiveData };
+ *   }
+ * }
+ * ```
+ *
+ * @see {@link CreateAuthDecorator}
+ */
+exports.Authentication = CreateAuthDecorator({});
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AA6VA,kCAKC;AAcD,0BAKC;AAqBD,gDAUC;AAuCD,kDA6BC;AAvdD,6DAAiE;AACjE,+DAA+D;AAC/D,sEAAkG;AAElG,MAAM,cAAc,GAAG,mBAAmB,CAAC;AAC3C,MAAM,cAAc,GAAG,iBAAiB,CAAC;AACzC,MAAM,WAAW,GAAG,EAAE,CAAC;AACvB,MAAM,qBAAqB,GAAG,IAAI,CAAC;AACnC,MAAM,uCAAuC,GAAG,+BAA+B,CAAC;AAuLhF,SAAS,cAAc,CAAC,GAAoB;IAC1C,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IAC3C,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC/B,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;AACnB,CAAC;AAED,SAAS,eAAe,CAAC,GAAoB;IAC3C,MAAM,YAAY,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;IACxC,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,YAAY,EAAE,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;IACzE,OAAO,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,sBAAsB,CAAC,aAA6B;IAC3D,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,MAAM,CAClD,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,KAAK,CACtD,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,OAAO,OAAO;SACX,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CACpB,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,CAC7D;SACA,IAAI,CAAC,qBAAqB,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,qBAAqB,CAC5B,KAAa,EACb,aAA6B;IAE7B,MAAM,uBAAuB,GAAG,sBAAsB,CAAC,aAAa,CAAC,CAAC;IACtE,IAAI,CAAC,uBAAuB,EAAE,CAAC;QAC7B,OAAO,GAAG,cAAc,IAAI,KAAK,EAAE,CAAC;IACtC,CAAC;IAED,OAAO,GAAG,cAAc,IAAI,KAAK,KAAK,uBAAuB,EAAE,CAAC;AAClE,CAAC;AAED,SAAS,6BAA6B,CACpC,SAAuC;IAEvC,OAAO;QACL,MAAM,EAAE,SAAS,CAAC,MAAM,IAAI,QAAQ,CAAC,aAAa;QAClD,aAAa,EACX,SAAS,CAAC,aAAa;YACtB,QAAQ,CAAC,oBAAwC;QACpD,oBAAoB,EAAE,SAAS,CAAC,oBAAoB,IAAI,EAAE;QAC1D,SAAS,EAAE,SAAS,CAAC,SAAS;KAC/B,CAAC;AACJ,CAAC;AAED,SAAS,2BAA2B,CAClC,SAA+C,EAC/C,SAA+B;IAE/B,OAAO,CAAC,OAA8B,EAAE,EAAE,CACxC,QAAQ,CAAC,mBAAmB,CAC1B,OAAO,CAAC,UAAU,EAClB,OAAO,CAAC,WAAW,EACnB,SAAS,CAAC,MAAM,EAChB,SAAS,CAAC,aAAa,EACvB,SAAS,CAAC,oBAAoB,EAC9B,SAAS,CACV,CAAC;AACN,CAAC;AAED,SAAS,8BAA8B,CACrC,MAA4B,EAC5B,QAAqC;IAErC,IAAA,oCAAoB,EAClB,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,uCAAuC,CAAC,EAC/C,SAAS,EACT,QAAQ,CACT,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,IAAiB,QAAQ,CA4CxB;AA5CD,WAAiB,QAAQ;IACV,eAAM,GAAG,IAAA,kCAAiB,GAA0B,CAAC;IACrD,aAAI,GAAG,IAAA,kCAAiB,GAAwB,CAAC;IAE9D,SAAgB,aAAa,CAC3B,GAAoB,EACpB,IAAoB;QAEpB,OAAO,cAAc,CAAC,GAAG,CAAC,IAAI,eAAe,CAAC,GAAG,CAAC,CAAC;IACrD,CAAC;IALe,sBAAa,gBAK5B,CAAA;IAEY,6BAAoB,GAA0B,WAAW,CAAC;IAEvE;;;;;;;;;;;;OAYG;IACI,KAAK,UAAU,mBAAmB,CACvC,GAAoB,EACpB,GAAmB,EACnB,SAAqB,aAAa,EAClC,gBAAiC,SAAA,oBAAuC,EACxE,uBAAsC,EAAE,EACxC,SAA+B;QAE/B,MAAM,YAAY,GAAG,MAAM,aAAa,CACtC,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,EAChB,oBAAoB,CACrB,CAAC;QACF,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,YAAY,CAAC;QACtB,CAAC;QAED,OAAO,SAAS,CAAC,YAAY,CAAC,CAAC;IACjC,CAAC;IAjBqB,4BAAmB,sBAiBxC,CAAA;AACH,CAAC,EA5CgB,QAAQ,wBAAR,QAAQ,QA4CxB;AAED;;;;;;;;;;;;;GAaG;AACH,SAAgB,WAAW,CACzB,KAAc,EACd,OAAuB;IAEvB,OAAO,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAe,CAAC;AACvD,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAgB,OAAO,CACrB,IAAiB,EACjB,OAAqB;IAErB,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AACtC,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,SAAgB,kBAAkB,CAChC,GAAmB,EACnB,IAAiB,EACjB,WAAyB,EACzB,aAA6B;IAE7B,OAAO,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;QAC/C,GAAG,CAAC,SAAS,CAAC,YAAY,EAAE,qBAAqB,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC,CAAC;QACzE,OAAO,GAAG,CAAC;IACb,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,SAAgB,mBAAmB,CACjC,SAAuC;IAEvC,MAAM,iBAAiB,GAAG,6BAA6B,CAAC,SAAS,CAAC,CAAC;IAEnE,OAAO,IAAA,sDAAyC,EAC9C,CACE,MAAuB,EACvB,GAAiB,EACjB,KAAqB,EACrB,SAA+B,EAC/B,EAAE;QACF,MAAM,aAAa,GAAG,SAAS,IAAI,iBAAiB,CAAC,SAAS,CAAC;QAC/D,MAAM,QAAQ,GAAG,2BAA2B,CAC1C,iBAAiB,EACjB,aAAa,CACd,CAAC;QAEF,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,8BAA8B,CAC5B,MAA8B,EAC9B,QAAQ,CACT,CAAC;YACF,OAAO;QACT,CAAC;QAED,IAAA,oCAAoB,EAAC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;IACrD,CAAC,CACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACU,QAAA,cAAc,GAAG,mBAAmB,CAAC,EAAE,CAAC,CAAC"}

package/dist/tests/index.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/tests/index.test.js

@@ -0,0 +1,76 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const interface_api_1 = require("@antelopejs/interface-api");
+const interface_auth_1 = require("@antelopejs/interface-auth");
+const chai_1 = require("chai");
+const testUsers = {
+    default: {
+        name: "Bob",
+        email: "bob@email.com",
+        password: "very-secure-qwerty123",
+    },
+    alternate: {
+        name: "Alice",
+        email: "alice@email.com",
+        password: "very-secure-qwerty123",
+    },
+};
+describe("JWT Authentication Tests", () => {
+    it("jwt token is valid", async () => await jwtTokenIsValid());
+    it("jwt token is invalid", async () => await jwtTokenIsInvalid());
+    it("jwt token is expired", async () => await jwtTokenIsExpired());
+    it("set-cookie uses standalone boolean directives", async () => await setCookieUsesStandaloneBooleanDirectives());
+});
+async function jwtTokenIsValid() {
+    const userData = testUsers.default;
+    const token = await (0, interface_auth_1.SignRaw)(userData, { expiresIn: "1h" });
+    const verifiedData = await (0, interface_auth_1.ValidateRaw)(token);
+    (0, chai_1.expect)(verifiedData).to.be.an("object");
+    (0, chai_1.expect)(verifiedData).to.have.property("name", userData.name);
+    (0, chai_1.expect)(verifiedData).to.have.property("email", userData.email);
+    (0, chai_1.expect)(verifiedData).to.have.property("password", userData.password);
+}
+async function jwtTokenIsInvalid() {
+    const invalidToken = "invalid.jwt.token";
+    try {
+        await (0, interface_auth_1.ValidateRaw)(invalidToken);
+        chai_1.expect.fail("Should have thrown an error for invalid token");
+    }
+    catch (error) {
+        (0, chai_1.expect)(error).to.be.instanceOf(interface_api_1.HTTPResult);
+    }
+}
+async function jwtTokenIsExpired() {
+    const userData = testUsers.default;
+    const token = await (0, interface_auth_1.SignRaw)(userData, { expiresIn: "1ms" });
+    await new Promise((resolve) => setTimeout(resolve, 10));
+    try {
+        await (0, interface_auth_1.ValidateRaw)(token);
+        chai_1.expect.fail("Should have thrown an error for expired token");
+    }
+    catch (error) {
+        (0, chai_1.expect)(error).to.be.instanceOf(interface_api_1.HTTPResult);
+    }
+}
+async function setCookieUsesStandaloneBooleanDirectives() {
+    const headers = {};
+    const responseLike = {
+        setHeader(name, value) {
+            headers[name.toLowerCase()] = normalizeHeaderValue(value);
+            return responseLike;
+        },
+    };
+    await (0, interface_auth_1.SignServerResponse)(responseLike, { userId: "user-7" }, { expiresIn: "1h" }, { httpOnly: true });
+    const setCookieHeader = headers["set-cookie"];
+    (0, chai_1.expect)(setCookieHeader).to.be.a("string");
+    (0, chai_1.expect)(setCookieHeader).to.match(/^ANTELOPEJS_AUTH=/);
+    (0, chai_1.expect)(setCookieHeader).to.match(/httpOnly/);
+    (0, chai_1.expect)(setCookieHeader).to.not.match(/httpOnly=true/);
+}
+function normalizeHeaderValue(value) {
+    if (Array.isArray(value)) {
+        return value.join(",");
+    }
+    return String(value);
+}
+//# sourceMappingURL=index.test.js.map

package/dist/tests/index.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.test.js","sourceRoot":"","sources":["../../src/tests/index.test.ts"],"names":[],"mappings":";;AACA,6DAAuD;AACvD,+DAIoC;AACpC,+BAA8B;AAc9B,MAAM,SAAS,GAAc;IAC3B,OAAO,EAAE;QACP,IAAI,EAAE,KAAK;QACX,KAAK,EAAE,eAAe;QACtB,QAAQ,EAAE,uBAAuB;KAClC;IACD,SAAS,EAAE;QACT,IAAI,EAAE,OAAO;QACb,KAAK,EAAE,iBAAiB;QACxB,QAAQ,EAAE,uBAAuB;KAClC;CACF,CAAC;AAEF,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE;IACxC,EAAE,CAAC,oBAAoB,EAAE,KAAK,IAAI,EAAE,CAAC,MAAM,eAAe,EAAE,CAAC,CAAC;IAC9D,EAAE,CAAC,sBAAsB,EAAE,KAAK,IAAI,EAAE,CAAC,MAAM,iBAAiB,EAAE,CAAC,CAAC;IAClE,EAAE,CAAC,sBAAsB,EAAE,KAAK,IAAI,EAAE,CAAC,MAAM,iBAAiB,EAAE,CAAC,CAAC;IAClE,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE,CAC7D,MAAM,wCAAwC,EAAE,CAAC,CAAC;AACtD,CAAC,CAAC,CAAC;AAEH,KAAK,UAAU,eAAe;IAC5B,MAAM,QAAQ,GAAG,SAAS,CAAC,OAAO,CAAC;IACnC,MAAM,KAAK,GAAG,MAAM,IAAA,wBAAO,EAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE3D,MAAM,YAAY,GAAG,MAAM,IAAA,4BAAW,EAAW,KAAK,CAAC,CAAC;IAExD,IAAA,aAAM,EAAC,YAAY,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC;IACxC,IAAA,aAAM,EAAC,YAAY,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC7D,IAAA,aAAM,EAAC,YAAY,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC/D,IAAA,aAAM,EAAC,YAAY,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;AACvE,CAAC;AAED,KAAK,UAAU,iBAAiB;IAC9B,MAAM,YAAY,GAAG,mBAAmB,CAAC;IAEzC,IAAI,CAAC;QACH,MAAM,IAAA,4BAAW,EAAW,YAAY,CAAC,CAAC;QAC1C,aAAM,CAAC,IAAI,CAAC,+CAA+C,CAAC,CAAC;IAC/D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAA,aAAM,EAAC,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,0BAAU,CAAC,CAAC;IAC7C,CAAC;AACH,CAAC;AAED,KAAK,UAAU,iBAAiB;IAC9B,MAAM,QAAQ,GAAG,SAAS,CAAC,OAAO,CAAC;IACnC,MAAM,KAAK,GAAG,MAAM,IAAA,wBAAO,EAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;IAE5D,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;IAExD,IAAI,CAAC;QACH,MAAM,IAAA,4BAAW,EAAW,KAAK,CAAC,CAAC;QACnC,aAAM,CAAC,IAAI,CAAC,+CAA+C,CAAC,CAAC;IAC/D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAA,aAAM,EAAC,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,0BAAU,CAAC,CAAC;IAC7C,CAAC;AACH,CAAC;AAED,KAAK,UAAU,wCAAwC;IACrD,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,MAAM,YAAY,GAAG;QACnB,SAAS,CAAC,IAAY,EAAE,KAA0C;YAChE,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;YAC1D,OAAO,YAAyC,CAAC;QACnD,CAAC;KACF,CAAC;IAEF,MAAM,IAAA,mCAAkB,EACtB,YAAyC,EACzC,EAAE,MAAM,EAAE,QAAQ,EAAE,EACpB,EAAE,SAAS,EAAE,IAAI,EAAE,EACnB,EAAE,QAAQ,EAAE,IAAI,EAAE,CACnB,CAAC;IAEF,MAAM,eAAe,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IAC9C,IAAA,aAAM,EAAC,eAAe,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IAC1C,IAAA,aAAM,EAAC,eAAe,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACtD,IAAA,aAAM,EAAC,eAAe,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC7C,IAAA,aAAM,EAAC,eAAe,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,oBAAoB,CAC3B,KAA0C;IAE1C,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IAED,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC"}

package/package.json

@@ -0,0 +1,61 @@
+{
+  "name": "@antelopejs/interface-auth",
+  "version": "0.0.2",
+  "description": "AntelopeJS interface for JWT authentication and session management",
+  "keywords": [
+    "antelopejs",
+    "interface",
+    "auth",
+    "jwt"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/AntelopeJS/interface-auth.git"
+  },
+  "license": "Apache-2.0",
+  "packageManager": "pnpm@10.6.5",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "files": [
+    "dist"
+  ],
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "scripts": {
+    "build": "rimraf dist && tsc",
+    "format": "biome format --write .",
+    "lint:fix": "biome check --write .",
+    "lint": "biome check .",
+    "prepack": "pnpm run build",
+    "release": "pnpm run lint && pnpm run prepack && release-it",
+    "test": "pnpm run build && ajs module test ."
+  },
+  "dependencies": {
+    "@antelopejs/interface-api": "^0.0.2",
+    "@antelopejs/interface-core": "^0.0.2"
+  },
+  "devDependencies": {
+    "@types/chai": "^4.3.20",
+    "@types/mocha": "^10.0.10",
+    "@types/node": "^22.14.1",
+    "@biomejs/biome": "2.3.2",
+    "chai": "^4.5.0",
+    "release-it": "^19.0.2",
+    "release-it-changelogen": "^0.1.0",
+    "rimraf": "^6.0.1",
+    "typescript": "^5.8.3",
+    "mongodb-memory-server-core": "^10.1.4",
+    "@types/semver": "^7.7.0"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "antelopeJs": {
+    "test": "src/antelope.test.ts"
+  }
+}