@antelopejs/interface-auth 0.0.7 → 0.2.0

package/README.md

@@ -1,20 +1,22 @@
-# @antelopejs/interface-auth
+# `@antelopejs/interface-auth`
 
 <div align="center">
-<a href="https://www.npmjs.com/package/@antelopejs/interface-auth"><img alt="npm" src="https://img.shields.io/npm/v/@antelopejs/interface-auth?style=for-the-badge&labelColor=000000&color=000000"></a>
-<a href="./LICENSE"><img alt="License" src="https://img.shields.io/npm/l/@antelopejs/interface-auth?style=for-the-badge&labelColor=000000&color=000000"></a>
-<a href="https://discord.gg/sjK28QHrA7"><img alt="Discord" src="https://img.shields.io/badge/Discord-18181B?logo=discord&style=for-the-badge&color=000000"></a>
-<a href="https://interfaces.antelopejs.com/docs/auth"><img alt="Docs" src="https://img.shields.io/badge/Docs-18181B?style=for-the-badge&color=000000"></a>
+<a href="https://www.npmjs.com/package/@antelopejs/interface-auth"><img data-illustration alt="npm" src="https://img.shields.io/npm/v/@antelopejs/interface-auth?style=for-the-badge&labelColor=000000&color=000000"></a>
+<a href="./LICENSE"><img data-illustration alt="License" src="https://img.shields.io/npm/l/@antelopejs/interface-auth?style=for-the-badge&labelColor=000000&color=000000"></a>
+<a href="https://discord.gg/g4pFt6eXqu"><img data-illustration alt="Discord" src="https://img.shields.io/badge/Discord-18181B?logo=discord&style=for-the-badge&color=000000"></a>
+<a href="https://interfaces.antelopejs.com/docs/auth"><img data-illustration alt="Docs" src="https://img.shields.io/badge/Docs-18181B?style=for-the-badge&color=000000"></a>
 </div>
 
 The AntelopeJS contract for token authentication: sign and verify tokens, and inject the verified payload into API handlers with a decorator.
 
+Part of [AntelopeJS](https://github.com/AntelopeJS/antelopejs), the TypeScript framework where modules depend on contracts and the application chooses the provider. Built by the team behind [AntelopeJS DMS](https://github.com/AntelopeJS/dms).
+
 ## What it offers
 
 - `SignRaw` and `ValidateRaw` sign a payload into a token and verify a token back into its payload.
 - `SignServerResponse` signs a payload and attaches the token to a response as a cookie.
-- `@Authentication()` reads the token from the `x-antelopejs-auth` header, falling back to the `ANTELOPEJS_AUTH` cookie when the header is absent, verifies it and injects the payload into a handler parameter.
-- `CreateAuthDecorator` builds your own decorator with a custom source, verifier and validator.
+- `@Authentication()` reads the token from the `x-antelopejs-auth` header, or from the `ANTELOPEJS_AUTH` cookie when the header is absent. It verifies the token and injects the payload into a handler parameter.
+- `CreateAuthDecorator` builds your own decorator with a custom source, verifier, and validator.
 
 ## Implementations
 
@@ -59,7 +61,9 @@ export class SessionController extends Controller("/session") {
 }
 ```
 
-A request to `GET /session/me` without a valid token fails before the handler runs. Send the token unchanged in `x-antelopejs-auth`, without a `Bearer ` prefix. The login method only demonstrates signing; validate credentials before issuing tokens in a real application.
+A request to `GET /session/me` without a valid token fails before the handler runs. Send the token unchanged in `x-antelopejs-auth`, without a `Bearer ` prefix. The `login` method only shows signing. In a real application, check the credentials before you issue a token.
+
+The `Session` annotation describes the payload the application expects. It does not check it, so `session.id` is whatever the verified token carries. Add a [shape-checking verifier](./docs/2.authentication.md#create-a-custom-verifier) before you rely on claims from tokens whose format nothing enforces.
 
 ## Documentation
 
@@ -70,14 +74,16 @@ A request to `GET /session/me` without a valid token fails before the handler ru
 
 ## Compatibility
 
-Use with `@antelopejs/core` 1.x and the following peer dependencies:
+The module declares these peer dependencies:
+
+<!-- antelopejs-docs-compat:start -->
 
-<!-- docs-compat: ./package.json#peerDependencies -->
+| Package                      | Supported         | Tested with |
+| ---------------------------- | ----------------- | ----------- |
+| `@antelopejs/interface-api`  | `>=0.0.15 <1.0.0` | `0.2.0`     |
+| `@antelopejs/interface-core` | `>=0.2.4 <1.0.0`  | `0.4.0`     |
 
-| Package                      | Range             |
-| ---------------------------- | ----------------- |
-| `@antelopejs/interface-api`  | `>=0.0.15 <1.0.0` |
-| `@antelopejs/interface-core` | `>=0.2.4 <1.0.0`  |
+<!-- antelopejs-docs-compat:end -->
 
 ## Contributing
 

package/dist/antelope.test.js

@@ -8,11 +8,7 @@ exports.default = (0, config_1.defineConfig)({
     cacheFolder: ".antelope/cache",
     modules: {
         "auth-jwt": {
-            source: {
-                type: "package",
-                package: "@antelopejs/auth-jwt",
-                version: "1.0.3",
-            },
+            source: { type: "local", path: "node_modules/@antelopejs/auth-jwt" },
             config: { secret: "test-secret-key-for-jwt" },
         },
         mongodb: {

package/dist/antelope.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"antelope.test.js","sourceRoot":"","sources":["../src/antelope.test.ts"],"names":[],"mappings":";;AAAA,2EAA+D;AAC/D,8DAAiE;AAEjE,IAAI,MAAyB,CAAC;AAE9B,kBAAe,IAAA,qBAAY,EAAC;IAC1B,IAAI,EAAE,qBAAqB;IAC3B,WAAW,EAAE,iBAAiB;IAC9B,OAAO,EAAE;QACP,UAAU,EAAE;YACV,MAAM,EAAE;gBACN,IAAI,EAAE,SAAS;gBACf,OAAO,EAAE,sBAAsB;gBAC/B,OAAO,EAAE,OAAO;aACjB;YACD,MAAM,EAAE,EAAE,MAAM,EAAE,yBAAyB,EAAE;SAC9C;QACD,OAAO,EAAE;YACP,MAAM,EAAE;gBACN,IAAI,EAAE,SAAS;gBACf,OAAO,EAAE,qBAAqB;gBAC9B,OAAO,EAAE,OAAO;aACjB;SACF;QACD,GAAG,EAAE;YACH,MAAM,EAAE;gBACN,IAAI,EAAE,SAAS;gBACf,OAAO,EAAE,iBAAiB;gBAC1B,OAAO,EAAE,OAAO;aACjB;YACD,MAAM,EAAE;gBACN,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;gBAC9D,aAAa,EAAE,uBAAuB;aACvC;SACF;KACF;IACD,IAAI,EAAE;QACJ,MAAM,EAAE,YAAY;QACpB,KAAK,CAAC,KAAK;YACT,MAAM,GAAG,MAAM,8CAAiB,CAAC,MAAM,EAAE,CAAC;YAC1C,OAAO;gBACL,OAAO,EAAE;oBACP,OAAO,EAAE;wBACP,MAAM,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,iBAAiB,EAAE;qBAC9D;iBACF;aACF,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,OAAO;YACX,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACtB,CAAC;KACF;CACF,CAAC,CAAC"}
+{"version":3,"file":"antelope.test.js","sourceRoot":"","sources":["../src/antelope.test.ts"],"names":[],"mappings":";;AAAA,2EAA+D;AAC/D,8DAAiE;AAEjE,IAAI,MAAyB,CAAC;AAE9B,kBAAe,IAAA,qBAAY,EAAC;IAC1B,IAAI,EAAE,qBAAqB;IAC3B,WAAW,EAAE,iBAAiB;IAC9B,OAAO,EAAE;QACP,UAAU,EAAE;YACV,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,mCAAmC,EAAE;YACpE,MAAM,EAAE,EAAE,MAAM,EAAE,yBAAyB,EAAE;SAC9C;QACD,OAAO,EAAE;YACP,MAAM,EAAE;gBACN,IAAI,EAAE,SAAS;gBACf,OAAO,EAAE,qBAAqB;gBAC9B,OAAO,EAAE,OAAO;aACjB;SACF;QACD,GAAG,EAAE;YACH,MAAM,EAAE;gBACN,IAAI,EAAE,SAAS;gBACf,OAAO,EAAE,iBAAiB;gBAC1B,OAAO,EAAE,OAAO;aACjB;YACD,MAAM,EAAE;gBACN,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;gBAC9D,aAAa,EAAE,uBAAuB;aACvC;SACF;KACF;IACD,IAAI,EAAE;QACJ,MAAM,EAAE,YAAY;QACpB,KAAK,CAAC,KAAK;YACT,MAAM,GAAG,MAAM,8CAAiB,CAAC,MAAM,EAAE,CAAC;YAC1C,OAAO;gBACL,OAAO,EAAE;oBACP,OAAO,EAAE;wBACP,MAAM,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,iBAAiB,EAAE;qBAC9D;iBACF;aACF,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,OAAO;YACX,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACtB,CAAC;KACF;CACF,CAAC,CAAC"}

package/dist/index.d.ts

@@ -1,4 +1,27 @@
 import type { IncomingMessage, ServerResponse } from "node:http";
+import { type Class } from "@antelopejs/interface-core/decorators";
+/**
+ * A value JSON can represent: a string, number, boolean, `null`, an array of
+ * JSON values, or a {@link JsonObject}. `Date`, `Buffer`, functions and class
+ * instances are not JSON values; convert them first (for example
+ * `date.toISOString()`).
+ */
+export type JsonValue = string | number | boolean | null | JsonValue[] | JsonObject;
+/**
+ * String keys mapped to JSON values. A key whose value is `undefined` is
+ * accepted so an optional field can be passed as is; `JSON.stringify` drops
+ * it. An object typed as an `interface` is not assignable (it has no index
+ * signature); declare it with a `type` alias or spread it into a literal.
+ */
+export type JsonObject = {
+    [key: string]: JsonValue | undefined;
+};
+/**
+ * What a verified token yields: the signed string, or the JSON object that was
+ * signed. The shape inside the object is not checked by the interface; read it
+ * through a parser of your own (see {@link AuthVerifier}).
+ */
+export type AuthClaims = string | JsonObject;
 /**
  * Function type that extracts authentication data from HTTP request.
  *
@@ -22,11 +45,11 @@ export type AuthSource = (req: IncomingMessage, res: ServerResponse) => string |
  *
  * @example
  * ```typescript
- * const jwtVerifier: AuthVerifier<UserProfile> = (token) =>
- *   jwt.verify(token, SECRET_KEY) as UserProfile;
+ * const sessionVerifier: AuthVerifier<UserProfile> = async (token, options) =>
+ *   parseUserProfile(await ValidateRaw(token, options));
  * ```
  */
-export type AuthVerifier<T = unknown> = (data?: string, options?: VerifyOptions) => Promise<T> | T;
+export type AuthVerifier<T = AuthClaims> = (data?: string, options?: VerifyOptions) => Promise<T> | T;
 /**
  * Function type that performs additional validation on verified authentication data.
  *
@@ -41,7 +64,7 @@ export type AuthVerifier<T = unknown> = (data?: string, options?: VerifyOptions)
  *   profile.roles.includes('admin');
  * ```
  */
-export type AuthValidator<T = unknown, R = unknown> = (data: T) => Promise<R> | R;
+export type AuthValidator<T = AuthClaims, R = unknown> = (data: T) => Promise<R> | R;
 /**
  * HTTP Cookie options for controlling how authentication cookies are set.
  *
@@ -75,6 +98,13 @@ export interface CookieOptions {
     domain?: string;
     secure?: boolean;
 }
+type TimeSpanUnit = "Years" | "Year" | "Yrs" | "Yr" | "Y" | "Weeks" | "Week" | "W" | "Days" | "Day" | "D" | "Hours" | "Hour" | "Hrs" | "Hr" | "H" | "Minutes" | "Minute" | "Mins" | "Min" | "M" | "Seconds" | "Second" | "Secs" | "Sec" | "s" | "Milliseconds" | "Millisecond" | "Msecs" | "Msec" | "Ms";
+/**
+ * A timespan string in the grammar of the `ms` package: a number, optionally
+ * followed by a unit in any case, with or without a space (`"90"`, `"2h"`,
+ * `"7 days"`). A bare number string counts milliseconds.
+ */
+export type TimeSpan = `${number}` | `${number}${TimeSpanUnit | Uppercase<TimeSpanUnit> | Lowercase<TimeSpanUnit>}` | `${number} ${TimeSpanUnit | Uppercase<TimeSpanUnit> | Lowercase<TimeSpanUnit>}`;
 /**
  * Options for signing authentication tokens.
  *
@@ -91,13 +121,13 @@ export interface CookieOptions {
  */
 export interface SignOptions {
     /**
-     * Expiration as a number of seconds or a timespan string.
+     * Expiration as a number of seconds or a {@link TimeSpan}.
      */
-    expiresIn?: string | number;
+    expiresIn?: number | TimeSpan;
     /**
-     * Not-before field as a number of seconds or a timespan string.
+     * Not-before field as a number of seconds or a {@link TimeSpan}.
      */
-    notBefore?: string | number;
+    notBefore?: number | TimeSpan;
 }
 /**
  * Options for verifying authentication tokens.
@@ -128,21 +158,37 @@ export interface VerifyOptions {
      */
     maxAge?: string | number;
 }
-type AuthPayload = string | Buffer | object;
-interface AuthDecoratorCallbacks<T, R> {
+/**
+ * What a token signs: a string, a `Buffer`, or a {@link JsonObject}.
+ */
+export type AuthPayload = string | Buffer | JsonObject;
+interface AuthDecoratorOptions<T, R> {
     source?: AuthSource;
-    authenticator?: AuthVerifier<T>;
     authenticatorOptions?: VerifyOptions;
     validator?: AuthValidator<T, R>;
 }
+interface DefaultAuthDecoratorCallbacks<R> extends AuthDecoratorOptions<AuthClaims, R> {
+    authenticator?: undefined;
+}
+interface CustomAuthDecoratorCallbacks<T, R> extends AuthDecoratorOptions<T, R> {
+    authenticator: AuthVerifier<T>;
+}
+interface ResolvedAuthDecoratorCallbacks<T, R> {
+    source: AuthSource;
+    authenticator: AuthVerifier<T>;
+    authenticatorOptions: VerifyOptions;
+    validator: AuthValidator<T, R> | undefined;
+}
+declare function buildAuthDecorator<T, R>(callbacks: ResolvedAuthDecoratorCallbacks<T, R>): (validator?: AuthValidator<T, R> | undefined) => import("@antelopejs/interface-core/decorators").PropertyDecorator & import("@antelopejs/interface-core/decorators").ClassDecorator<Class<object, any[]>> & import("@antelopejs/interface-core/decorators").ParameterDecorator;
+type AuthDecoratorFactory<T, R> = ReturnType<typeof buildAuthDecorator<T, R>>;
 /**
  * @internal
  */
 export declare namespace internal {
-    const Verify: (data?: string | undefined, options?: VerifyOptions | undefined) => Promise<unknown>;
+    const Verify: (data?: string | undefined, options?: VerifyOptions | undefined) => Promise<AuthClaims>;
     const Sign: (data: AuthPayload, options?: SignOptions | undefined) => Promise<string>;
     function defaultSource(req: IncomingMessage, _res: ServerResponse): string | undefined;
-    const defaultAuthenticator: AuthVerifier<unknown>;
+    const defaultAuthenticator: AuthVerifier;
     /**
      * Verifies the signature of signed data attached to the HTTP request and returns the data contained therein.
      *
@@ -150,29 +196,29 @@ export declare namespace internal {
      * @template R - The type of data after validation
      * @param req - HTTP Request
      * @param res - HTTP Response
-     * @param source - Callback to retrieve the signed data from the request
-     * @param authenticator - Callback to verify the signature
-     * @param authenticatorOptions - Verifier options
-     * @param validator - Custom validator callback
+     * @param callbacks - The source, the authenticator with its options, and the optional validator, all already resolved
      * @returns The authenticated and validated data
      */
-    function CheckAuthentication<T = unknown, R = unknown>(req: IncomingMessage, res: ServerResponse, source?: AuthSource, authenticator?: AuthVerifier<T>, authenticatorOptions?: VerifyOptions, validator?: AuthValidator<T, R>): Promise<T | R>;
+    function CheckAuthentication<T = AuthClaims, R = unknown>(req: IncomingMessage, res: ServerResponse, callbacks: ResolvedAuthDecoratorCallbacks<T, R>): Promise<T | R>;
 }
 /**
  * Verifies the signature of some signed data and returns the data contained therein.
  *
- * @template T - The type of data expected after verification
+ * The result is the signed string or JSON object ({@link AuthClaims}). Its shape is
+ * not checked: parse it into the type you expect before relying on a field.
+ *
  * @param token - The signed data token to verify
  * @param options - Options for verification
  * @returns A promise resolving to the verified data
  *
  * @example
  * ```typescript
- * const userData = await ValidateRaw<UserProfile>(authToken, { maxAge: '1h' });
- * console.log(userData.name);
+ * const claims = await ValidateRaw(authToken, { maxAge: '1h' });
+ * const user = parseUserProfile(claims);
+ * console.log(user.name);
  * ```
  */
-export declare function ValidateRaw<T = unknown>(token?: string, options?: VerifyOptions): Promise<T>;
+export declare function ValidateRaw(token?: string, options?: VerifyOptions): Promise<AuthClaims>;
 /**
  * Signs some data to create an authentication token.
  *
@@ -216,8 +262,12 @@ export declare function SignServerResponse(res: ServerResponse, data: AuthPayloa
  * A validator must throw to deny access; its return value is injected unchanged.
  * A validator passed to the decorator replaces the configured validator.
  *
- * @template R - The type of the final validator result
+ * Without `authenticator`, the default one calls {@link ValidateRaw} and the validator
+ * receives an {@link AuthClaims}. With an `authenticator`, `T` is whatever it returns,
+ * so a parser written there gives the validator a typed value.
+ *
  * @template T - The type of the authenticated data before validation
+ * @template R - The type of the final validator result
  * @param callbacks - Configuration object containing callback functions
  * @param callbacks.source - Extracts the signed data from the request
  * @param callbacks.authenticator - Verifies the signature
@@ -232,11 +282,11 @@ export declare function SignServerResponse(res: ServerResponse, data: AuthPayloa
  *
  * // Create a custom auth decorator
  * const RequireAdmin = CreateAuthDecorator({
- *   validator: (user: any) => {
- *     if (!user || user.role !== 'admin') {
+ *   validator: (claims) => {
+ *     if (typeof claims === 'string' || claims.role !== 'admin') {
  *       throw new Error('Admin access required');
  *     }
- *     return user;
+ *     return claims;
  *   }
  * });
  *
@@ -250,7 +300,8 @@ export declare function SignServerResponse(res: ServerResponse, data: AuthPayloa
  * }
  * ```
  */
-export declare function CreateAuthDecorator<R = unknown, T = unknown>(callbacks: AuthDecoratorCallbacks<T, R>): (validator?: AuthValidator<T, R> | undefined) => import("@antelopejs/interface-core/decorators").ClassDecorator<import("@antelopejs/interface-core/decorators").Class<any, any[]>> & import("@antelopejs/interface-core/decorators").PropertyDecorator & import("@antelopejs/interface-core/decorators").ParameterDecorator;
+export declare function CreateAuthDecorator<R = unknown>(callbacks: DefaultAuthDecoratorCallbacks<R>): AuthDecoratorFactory<AuthClaims, R>;
+export declare function CreateAuthDecorator<T, R = unknown>(callbacks: CustomAuthDecoratorCallbacks<T, R>): AuthDecoratorFactory<T, R>;
 /**
  * Parameter Provider using the default source and signature verification callbacks.
  * Reads the raw token from x-antelopejs-auth, falling back to ANTELOPEJS_AUTH
@@ -277,5 +328,5 @@ export declare function CreateAuthDecorator<R = unknown, T = unknown>(callbacks:
  *
  * @see {@link CreateAuthDecorator}
  */
-export declare const Authentication: (validator?: AuthValidator<unknown, unknown> | undefined) => import("@antelopejs/interface-core/decorators").ClassDecorator<import("@antelopejs/interface-core/decorators").Class<any, any[]>> & import("@antelopejs/interface-core/decorators").PropertyDecorator & import("@antelopejs/interface-core/decorators").ParameterDecorator;
+export declare const Authentication: (validator?: AuthValidator<AuthClaims, unknown> | undefined) => import("@antelopejs/interface-core/decorators").PropertyDecorator & import("@antelopejs/interface-core/decorators").ClassDecorator<Class<object, any[]>> & import("@antelopejs/interface-core/decorators").ParameterDecorator;
 export {};

package/dist/index.js

@@ -15,13 +15,10 @@ const CookieOptionSeparator = "; ";
 const ClassParameterProviderSymbolDescription = "authentication-class-provider";
 function readAuthHeader(req) {
     const header = req.headers[AuthHeaderName];
-    if (typeof header === "string") {
-        return header;
+    if (Array.isArray(header)) {
+        return header[0];
     }
-    if (!header || header.length === 0) {
-        return undefined;
-    }
-    return header[0];
+    return header;
 }
 function readCookieToken(req) {
     const cookieHeader = req.headers.cookie;
@@ -40,7 +37,7 @@ function serializeCookieOptions(cookieOptions) {
         return EmptyString;
     }
     return entries
-        .map(([key, value]) => typeof value === "boolean" ? key : `${key}=${String(value)}`)
+        .map(([key, value]) => (value === true ? key : `${key}=${String(value)}`))
         .join(CookieOptionSeparator);
 }
 function createSetCookieHeader(token, cookieOptions) {
@@ -50,20 +47,44 @@ function createSetCookieHeader(token, cookieOptions) {
     }
     return `${AuthCookieName}=${token}; ${serializedCookieOptions}`;
 }
-function resolveAuthDecoratorCallbacks(callbacks) {
+function resolveAuthDecoratorCallbacks(options, authenticator) {
     return {
-        source: callbacks.source ?? internal.defaultSource,
-        authenticator: callbacks.authenticator ??
-            internal.defaultAuthenticator,
-        authenticatorOptions: callbacks.authenticatorOptions ?? {},
-        validator: callbacks.validator,
+        source: options.source ?? internal.defaultSource,
+        authenticator,
+        authenticatorOptions: options.authenticatorOptions ?? {},
+        validator: options.validator,
     };
 }
 function createAuthParameterProvider(callbacks, validator) {
-    return (context) => internal.CheckAuthentication(context.rawRequest, context.rawResponse, callbacks.source, callbacks.authenticator, callbacks.authenticatorOptions, validator);
+    return (context) => internal.CheckAuthentication(context.rawRequest, context.rawResponse, {
+        ...callbacks,
+        validator,
+    });
 }
-function registerClassParameterProvider(target, provider) {
-    (0, interface_api_1.SetParameterProvider)(target.prototype, Symbol(ClassParameterProviderSymbolDescription), undefined, provider);
+function isDecoratorTarget(value) {
+    return (typeof value === "object" &&
+        value !== null &&
+        "constructor" in value &&
+        typeof value.constructor === "function");
+}
+/** The prototype of the class a class decorator receives, where its handlers' parameters live. */
+function classPrototype(target) {
+    const prototype = "prototype" in target ? target.prototype : undefined;
+    if (!isDecoratorTarget(prototype)) {
+        throw new TypeError("A class decorator applies to a class.");
+    }
+    return prototype;
+}
+function buildAuthDecorator(callbacks) {
+    return (0, decorators_1.MakeParameterAndPropertyAndClassDecorator)((target, key, index, validator) => {
+        const authValidator = validator ?? callbacks.validator;
+        const provider = createAuthParameterProvider(callbacks, authValidator);
+        if (key === undefined) {
+            (0, interface_api_1.SetParameterProvider)(classPrototype(target), Symbol(ClassParameterProviderSymbolDescription), undefined, provider);
+            return;
+        }
+        (0, interface_api_1.SetParameterProvider)(target, key, index, provider);
+    });
 }
 /**
  * @internal
@@ -84,13 +105,11 @@ var internal;
      * @template R - The type of data after validation
      * @param req - HTTP Request
      * @param res - HTTP Response
-     * @param source - Callback to retrieve the signed data from the request
-     * @param authenticator - Callback to verify the signature
-     * @param authenticatorOptions - Verifier options
-     * @param validator - Custom validator callback
+     * @param callbacks - The source, the authenticator with its options, and the optional validator, all already resolved
      * @returns The authenticated and validated data
      */
-    async function CheckAuthentication(req, res, source = defaultSource, authenticator = internal.defaultAuthenticator, authenticatorOptions = {}, validator) {
+    async function CheckAuthentication(req, res, callbacks) {
+        const { source, authenticator, authenticatorOptions, validator } = callbacks;
         const verifiedData = await authenticator(source(req, res), authenticatorOptions);
         if (!validator) {
             return verifiedData;
@@ -102,15 +121,18 @@ var internal;
 /**
  * Verifies the signature of some signed data and returns the data contained therein.
  *
- * @template T - The type of data expected after verification
+ * The result is the signed string or JSON object ({@link AuthClaims}). Its shape is
+ * not checked: parse it into the type you expect before relying on a field.
+ *
  * @param token - The signed data token to verify
  * @param options - Options for verification
  * @returns A promise resolving to the verified data
  *
  * @example
  * ```typescript
- * const userData = await ValidateRaw<UserProfile>(authToken, { maxAge: '1h' });
- * console.log(userData.name);
+ * const claims = await ValidateRaw(authToken, { maxAge: '1h' });
+ * const user = parseUserProfile(claims);
+ * console.log(user.name);
  * ```
  */
 function ValidateRaw(token, options) {
@@ -158,59 +180,11 @@ function SignServerResponse(res, data, signOptions, cookieOptions) {
         return res;
     });
 }
-/**
- * Creates a Parameter Provider using the specified source and signature verification callbacks.
- *
- * The callbacks are processed in the following order:
- * `source(req, res)` => `authenticator(prev, authenticatorOptions)` => `validator(prev)` => Parameter
- * A validator must throw to deny access; its return value is injected unchanged.
- * A validator passed to the decorator replaces the configured validator.
- *
- * @template R - The type of the final validator result
- * @template T - The type of the authenticated data before validation
- * @param callbacks - Configuration object containing callback functions
- * @param callbacks.source - Extracts the signed data from the request
- * @param callbacks.authenticator - Verifies the signature
- * @param callbacks.authenticatorOptions - Options for verification
- * @param callbacks.validator - Custom validation step (overrideable with decorator call)
- * @returns A decorator for parameters, properties, and classes
- *
- * @example
- * ```typescript
- * import { Controller, Get } from '@antelopejs/interface-api';
- * import { CreateAuthDecorator } from '@antelopejs/interface-auth';
- *
- * // Create a custom auth decorator
- * const RequireAdmin = CreateAuthDecorator({
- *   validator: (user: any) => {
- *     if (!user || user.role !== 'admin') {
- *       throw new Error('Admin access required');
- *     }
- *     return user;
- *   }
- * });
- *
- * // Use the decorator
- * class AdminController extends Controller('/admin') {
- *   @Get('settings')
- *   getSettings(@RequireAdmin() user: { role: string }) {
- *     // Only admin users can access this
- *     return { role: user.role };
- *   }
- * }
- * ```
- */
 function CreateAuthDecorator(callbacks) {
-    const resolvedCallbacks = resolveAuthDecoratorCallbacks(callbacks);
-    return (0, decorators_1.MakeParameterAndPropertyAndClassDecorator)((target, key, index, validator) => {
-        const authValidator = validator ?? resolvedCallbacks.validator;
-        const provider = createAuthParameterProvider(resolvedCallbacks, authValidator);
-        if (key === undefined) {
-            registerClassParameterProvider(target, provider);
-            return;
-        }
-        (0, interface_api_1.SetParameterProvider)(target, key, index, provider);
-    });
+    if (callbacks.authenticator) {
+        return buildAuthDecorator(resolveAuthDecoratorCallbacks(callbacks, callbacks.authenticator));
+    }
+    return buildAuthDecorator(resolveAuthDecoratorCallbacks(callbacks, ValidateRaw));
 }
 /**
  * Parameter Provider using the default source and signature verification callbacks.

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AAgWA,kCAKC;AAcD,0BAKC;AAuBD,gDAUC;AA4CD,kDA6BC;AAleD,+DAA+D;AAE/D,6DAAiE;AACjE,sEAAkG;AAElG,MAAM,cAAc,GAAG,mBAAmB,CAAC;AAC3C,MAAM,cAAc,GAAG,iBAAiB,CAAC;AACzC,MAAM,WAAW,GAAG,EAAE,CAAC;AACvB,MAAM,qBAAqB,GAAG,IAAI,CAAC;AACnC,MAAM,uCAAuC,GAAG,+BAA+B,CAAC;AA0LhF,SAAS,cAAc,CAAC,GAAoB;IAC1C,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IAC3C,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC/B,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;AACnB,CAAC;AAED,SAAS,eAAe,CAAC,GAAoB;IAC3C,MAAM,YAAY,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;IACxC,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,YAAY,EAAE,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;IACzE,OAAO,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,sBAAsB,CAAC,aAA6B;IAC3D,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,MAAM,CAClD,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,KAAK,CACtD,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,OAAO,OAAO;SACX,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CACpB,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,CAC7D;SACA,IAAI,CAAC,qBAAqB,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,qBAAqB,CAC5B,KAAa,EACb,aAA6B;IAE7B,MAAM,uBAAuB,GAAG,sBAAsB,CAAC,aAAa,CAAC,CAAC;IACtE,IAAI,CAAC,uBAAuB,EAAE,CAAC;QAC7B,OAAO,GAAG,cAAc,IAAI,KAAK,EAAE,CAAC;IACtC,CAAC;IAED,OAAO,GAAG,cAAc,IAAI,KAAK,KAAK,uBAAuB,EAAE,CAAC;AAClE,CAAC;AAED,SAAS,6BAA6B,CACpC,SAAuC;IAEvC,OAAO;QACL,MAAM,EAAE,SAAS,CAAC,MAAM,IAAI,QAAQ,CAAC,aAAa;QAClD,aAAa,EACX,SAAS,CAAC,aAAa;YACtB,QAAQ,CAAC,oBAAwC;QACpD,oBAAoB,EAAE,SAAS,CAAC,oBAAoB,IAAI,EAAE;QAC1D,SAAS,EAAE,SAAS,CAAC,SAAS;KAC/B,CAAC;AACJ,CAAC;AAED,SAAS,2BAA2B,CAClC,SAA+C,EAC/C,SAA+B;IAE/B,OAAO,CAAC,OAA8B,EAAE,EAAE,CACxC,QAAQ,CAAC,mBAAmB,CAC1B,OAAO,CAAC,UAAU,EAClB,OAAO,CAAC,WAAW,EACnB,SAAS,CAAC,MAAM,EAChB,SAAS,CAAC,aAAa,EACvB,SAAS,CAAC,oBAAoB,EAC9B,SAAS,CACV,CAAC;AACN,CAAC;AAED,SAAS,8BAA8B,CACrC,MAA4B,EAC5B,QAAqC;IAErC,IAAA,oCAAoB,EAClB,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,uCAAuC,CAAC,EAC/C,SAAS,EACT,QAAQ,CACT,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,IAAiB,QAAQ,CA4CxB;AA5CD,WAAiB,QAAQ;IACV,eAAM,GAAG,IAAA,kCAAiB,GAA0B,CAAC;IACrD,aAAI,GAAG,IAAA,kCAAiB,GAAwB,CAAC;IAE9D,SAAgB,aAAa,CAC3B,GAAoB,EACpB,IAAoB;QAEpB,OAAO,cAAc,CAAC,GAAG,CAAC,IAAI,eAAe,CAAC,GAAG,CAAC,CAAC;IACrD,CAAC;IALe,sBAAa,gBAK5B,CAAA;IAEY,6BAAoB,GAA0B,WAAW,CAAC;IAEvE;;;;;;;;;;;;OAYG;IACI,KAAK,UAAU,mBAAmB,CACvC,GAAoB,EACpB,GAAmB,EACnB,SAAqB,aAAa,EAClC,gBAAiC,SAAA,oBAAuC,EACxE,uBAAsC,EAAE,EACxC,SAA+B;QAE/B,MAAM,YAAY,GAAG,MAAM,aAAa,CACtC,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,EAChB,oBAAoB,CACrB,CAAC;QACF,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,YAAY,CAAC;QACtB,CAAC;QAED,OAAO,SAAS,CAAC,YAAY,CAAC,CAAC;IACjC,CAAC;IAjBqB,4BAAmB,sBAiBxC,CAAA;AACH,CAAC,EA5CgB,QAAQ,wBAAR,QAAQ,QA4CxB;AAED;;;;;;;;;;;;;GAaG;AACH,SAAgB,WAAW,CACzB,KAAc,EACd,OAAuB;IAEvB,OAAO,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAe,CAAC;AACvD,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAgB,OAAO,CACrB,IAAiB,EACjB,OAAqB;IAErB,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AACtC,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,SAAgB,kBAAkB,CAChC,GAAmB,EACnB,IAAiB,EACjB,WAAyB,EACzB,aAA6B;IAE7B,OAAO,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;QAC/C,GAAG,CAAC,SAAS,CAAC,YAAY,EAAE,qBAAqB,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC,CAAC;QACzE,OAAO,GAAG,CAAC;IACb,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AACH,SAAgB,mBAAmB,CACjC,SAAuC;IAEvC,MAAM,iBAAiB,GAAG,6BAA6B,CAAC,SAAS,CAAC,CAAC;IAEnE,OAAO,IAAA,sDAAyC,EAC9C,CACE,MAAuB,EACvB,GAAiB,EACjB,KAAqB,EACrB,SAA+B,EAC/B,EAAE;QACF,MAAM,aAAa,GAAG,SAAS,IAAI,iBAAiB,CAAC,SAAS,CAAC;QAC/D,MAAM,QAAQ,GAAG,2BAA2B,CAC1C,iBAAiB,EACjB,aAAa,CACd,CAAC;QAEF,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,8BAA8B,CAC5B,MAA8B,EAC9B,QAAQ,CACT,CAAC;YACF,OAAO;QACT,CAAC;QAED,IAAA,oCAAoB,EAAC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;IACrD,CAAC,CACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACU,QAAA,cAAc,GAAG,mBAAmB,CAAC,EAAE,CAAC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AAwcA,kCAKC;AAcD,0BAKC;AAuBD,gDAUC;AAsDD,kDAcC;AArkBD,+DAA+D;AAE/D,6DAAiE;AACjE,sEAI+C;AAE/C,MAAM,cAAc,GAAG,mBAAmB,CAAC;AAC3C,MAAM,cAAc,GAAG,iBAAiB,CAAC;AACzC,MAAM,WAAW,GAAG,EAAE,CAAC;AACvB,MAAM,qBAAqB,GAAG,IAAI,CAAC;AACnC,MAAM,uCAAuC,GAAG,+BAA+B,CAAC;AA0QhF,SAAS,cAAc,CAAC,GAAoB;IAC1C,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IAC3C,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1B,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;IACnB,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,eAAe,CAAC,GAAoB;IAC3C,MAAM,YAAY,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;IACxC,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,YAAY,EAAE,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;IACzE,OAAO,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,sBAAsB,CAAC,aAA6B;IAC3D,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,MAAM,CAClD,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,KAAK,CACtD,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,OAAO,OAAO;SACX,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;SACzE,IAAI,CAAC,qBAAqB,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,qBAAqB,CAC5B,KAAa,EACb,aAA6B;IAE7B,MAAM,uBAAuB,GAAG,sBAAsB,CAAC,aAAa,CAAC,CAAC;IACtE,IAAI,CAAC,uBAAuB,EAAE,CAAC;QAC7B,OAAO,GAAG,cAAc,IAAI,KAAK,EAAE,CAAC;IACtC,CAAC;IAED,OAAO,GAAG,cAAc,IAAI,KAAK,KAAK,uBAAuB,EAAE,CAAC;AAClE,CAAC;AAED,SAAS,6BAA6B,CACpC,OAAmC,EACnC,aAA8B;IAE9B,OAAO;QACL,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,QAAQ,CAAC,aAAa;QAChD,aAAa;QACb,oBAAoB,EAAE,OAAO,CAAC,oBAAoB,IAAI,EAAE;QACxD,SAAS,EAAE,OAAO,CAAC,SAAS;KAC7B,CAAC;AACJ,CAAC;AAED,SAAS,2BAA2B,CAClC,SAA+C,EAC/C,SAA+B;IAE/B,OAAO,CAAC,OAA8B,EAAE,EAAE,CACxC,QAAQ,CAAC,mBAAmB,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,WAAW,EAAE;QACpE,GAAG,SAAS;QACZ,SAAS;KACV,CAAC,CAAC;AACP,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,aAAa,IAAI,KAAK;QACtB,OAAO,KAAK,CAAC,WAAW,KAAK,UAAU,CACxC,CAAC;AACJ,CAAC;AAED,kGAAkG;AAClG,SAAS,cAAc,CAAC,MAA+B;IACrD,MAAM,SAAS,GACb,WAAW,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;IACvD,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,SAAS,CAAC,uCAAuC,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,kBAAkB,CACzB,SAA+C;IAE/C,OAAO,IAAA,sDAAyC,EAC9C,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,SAA+B,EAAE,EAAE;QACtD,MAAM,aAAa,GAAG,SAAS,IAAI,SAAS,CAAC,SAAS,CAAC;QACvD,MAAM,QAAQ,GAAG,2BAA2B,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QAEvE,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,IAAA,oCAAoB,EAClB,cAAc,CAAC,MAAM,CAAC,EACtB,MAAM,CAAC,uCAAuC,CAAC,EAC/C,SAAS,EACT,QAAQ,CACT,CAAC;YACF,OAAO;QACT,CAAC;QAED,IAAA,oCAAoB,EAAC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;IACrD,CAAC,CACF,CAAC;AACJ,CAAC;AAID;;GAEG;AACH,IAAiB,QAAQ,CAwCxB;AAxCD,WAAiB,QAAQ;IACV,eAAM,GAAG,IAAA,kCAAiB,GAA0B,CAAC;IACrD,aAAI,GAAG,IAAA,kCAAiB,GAAwB,CAAC;IAE9D,SAAgB,aAAa,CAC3B,GAAoB,EACpB,IAAoB;QAEpB,OAAO,cAAc,CAAC,GAAG,CAAC,IAAI,eAAe,CAAC,GAAG,CAAC,CAAC;IACrD,CAAC;IALe,sBAAa,gBAK5B,CAAA;IAEY,6BAAoB,GAAiB,WAAW,CAAC;IAE9D;;;;;;;;;OASG;IACI,KAAK,UAAU,mBAAmB,CACvC,GAAoB,EACpB,GAAmB,EACnB,SAA+C;QAE/C,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,oBAAoB,EAAE,SAAS,EAAE,GAC9D,SAAS,CAAC;QACZ,MAAM,YAAY,GAAG,MAAM,aAAa,CACtC,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,EAChB,oBAAoB,CACrB,CAAC;QACF,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,YAAY,CAAC;QACtB,CAAC;QAED,OAAO,SAAS,CAAC,YAAY,CAAC,CAAC;IACjC,CAAC;IAhBqB,4BAAmB,sBAgBxC,CAAA;AACH,CAAC,EAxCgB,QAAQ,wBAAR,QAAQ,QAwCxB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,SAAgB,WAAW,CACzB,KAAc,EACd,OAAuB;IAEvB,OAAO,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;AACzC,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAgB,OAAO,CACrB,IAAiB,EACjB,OAAqB;IAErB,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AACtC,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,SAAgB,kBAAkB,CAChC,GAAmB,EACnB,IAAiB,EACjB,WAAyB,EACzB,aAA6B;IAE7B,OAAO,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;QAC/C,GAAG,CAAC,SAAS,CAAC,YAAY,EAAE,qBAAqB,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC,CAAC;QACzE,OAAO,GAAG,CAAC;IACb,CAAC,CAAC,CAAC;AACL,CAAC;AAsDD,SAAgB,mBAAmB,CACjC,SAEsC;IAEtC,IAAI,SAAS,CAAC,aAAa,EAAE,CAAC;QAC5B,OAAO,kBAAkB,CACvB,6BAA6B,CAAC,SAAS,EAAE,SAAS,CAAC,aAAa,CAAC,CAClE,CAAC;IACJ,CAAC;IAED,OAAO,kBAAkB,CACvB,6BAA6B,CAAC,SAAS,EAAE,WAAW,CAAC,CACtD,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACU,QAAA,cAAc,GAAG,mBAAmB,CAAC,EAAE,CAAC,CAAC"}

package/dist/tests/class-decorator.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/tests/class-decorator.test.js

@@ -0,0 +1,20 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const chai_1 = require("chai");
+const __1 = require("..");
+class Guarded {
+}
+const WITHOUT_PROTOTYPE = Guarded.bind(null);
+describe("class decorator target", () => {
+    it("refuses a class that has no prototype object", () => {
+        (0, chai_1.expect)(() => {
+            (0, __1.Authentication)()(WITHOUT_PROTOTYPE);
+        }).to.throw(TypeError, "A class decorator applies to a class.");
+    });
+    it("accepts a class with a prototype object", () => {
+        (0, chai_1.expect)(() => {
+            (0, __1.Authentication)()(Guarded);
+        }).not.to.throw();
+    });
+});
+//# sourceMappingURL=class-decorator.test.js.map

package/dist/tests/class-decorator.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"class-decorator.test.js","sourceRoot":"","sources":["../../src/tests/class-decorator.test.ts"],"names":[],"mappings":";;AAAA,+BAA8B;AAC9B,0BAAoC;AAEpC,MAAM,OAAO;CAAG;AAEhB,MAAM,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAE7C,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACtC,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,IAAA,aAAM,EAAC,GAAG,EAAE;YACV,IAAA,kBAAc,GAAE,CAAC,iBAAiB,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,uCAAuC,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,IAAA,aAAM,EAAC,GAAG,EAAE;YACV,IAAA,kBAAc,GAAE,CAAC,OAAO,CAAC,CAAC;QAC5B,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;IACpB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/tests/index.test.js

@@ -2,7 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 const chai_1 = require("chai");
 const interface_api_1 = require("@antelopejs/interface-api");
-const interface_auth_1 = require("@antelopejs/interface-auth");
+const __1 = require("..");
 const testUsers = {
     default: {
         name: "Bob",
@@ -16,61 +16,36 @@ const testUsers = {
     },
 };
 describe("JWT Authentication Tests", () => {
-    it("jwt token is valid", async () => await jwtTokenIsValid());
-    it("jwt token is invalid", async () => await jwtTokenIsInvalid());
-    it("jwt token is expired", async () => await jwtTokenIsExpired());
-    it("set-cookie uses standalone boolean directives", async () => await setCookieUsesStandaloneBooleanDirectives());
+    it("jwt token is valid", async () => {
+        const userData = testUsers.default;
+        const token = await (0, __1.SignRaw)(userData, { expiresIn: "1h" });
+        const verifiedData = await (0, __1.ValidateRaw)(token);
+        (0, chai_1.expect)(verifiedData).to.be.an("object");
+        (0, chai_1.expect)(verifiedData).to.have.property("name", userData.name);
+        (0, chai_1.expect)(verifiedData).to.have.property("email", userData.email);
+        (0, chai_1.expect)(verifiedData).to.have.property("password", userData.password);
+    });
+    it("jwt token is invalid", async () => {
+        const invalidToken = "invalid.jwt.token";
+        try {
+            await (0, __1.ValidateRaw)(invalidToken);
+            chai_1.expect.fail("Should have thrown an error for invalid token");
+        }
+        catch (error) {
+            (0, chai_1.expect)(error).to.be.instanceOf(interface_api_1.HTTPResult);
+        }
+    });
+    it("jwt token is expired", async () => {
+        const userData = testUsers.default;
+        const token = await (0, __1.SignRaw)(userData, { expiresIn: "1ms" });
+        await new Promise((resolve) => setTimeout(resolve, 10));
+        try {
+            await (0, __1.ValidateRaw)(token);
+            chai_1.expect.fail("Should have thrown an error for expired token");
+        }
+        catch (error) {
+            (0, chai_1.expect)(error).to.be.instanceOf(interface_api_1.HTTPResult);
+        }
+    });
 });
-async function jwtTokenIsValid() {
-    const userData = testUsers.default;
-    const token = await (0, interface_auth_1.SignRaw)(userData, { expiresIn: "1h" });
-    const verifiedData = await (0, interface_auth_1.ValidateRaw)(token);
-    (0, chai_1.expect)(verifiedData).to.be.an("object");
-    (0, chai_1.expect)(verifiedData).to.have.property("name", userData.name);
-    (0, chai_1.expect)(verifiedData).to.have.property("email", userData.email);
-    (0, chai_1.expect)(verifiedData).to.have.property("password", userData.password);
-}
-async function jwtTokenIsInvalid() {
-    const invalidToken = "invalid.jwt.token";
-    try {
-        await (0, interface_auth_1.ValidateRaw)(invalidToken);
-        chai_1.expect.fail("Should have thrown an error for invalid token");
-    }
-    catch (error) {
-        (0, chai_1.expect)(error).to.be.instanceOf(interface_api_1.HTTPResult);
-    }
-}
-async function jwtTokenIsExpired() {
-    const userData = testUsers.default;
-    const token = await (0, interface_auth_1.SignRaw)(userData, { expiresIn: "1ms" });
-    await new Promise((resolve) => setTimeout(resolve, 10));
-    try {
-        await (0, interface_auth_1.ValidateRaw)(token);
-        chai_1.expect.fail("Should have thrown an error for expired token");
-    }
-    catch (error) {
-        (0, chai_1.expect)(error).to.be.instanceOf(interface_api_1.HTTPResult);
-    }
-}
-async function setCookieUsesStandaloneBooleanDirectives() {
-    const headers = {};
-    const responseLike = {
-        setHeader(name, value) {
-            headers[name.toLowerCase()] = normalizeHeaderValue(value);
-            return responseLike;
-        },
-    };
-    await (0, interface_auth_1.SignServerResponse)(responseLike, { userId: "user-7" }, { expiresIn: "1h" }, { httpOnly: true });
-    const setCookieHeader = headers["set-cookie"];
-    (0, chai_1.expect)(setCookieHeader).to.be.a("string");
-    (0, chai_1.expect)(setCookieHeader).to.match(/^ANTELOPEJS_AUTH=/);
-    (0, chai_1.expect)(setCookieHeader).to.match(/httpOnly/);
-    (0, chai_1.expect)(setCookieHeader).to.not.match(/httpOnly=true/);
-}
-function normalizeHeaderValue(value) {
-    if (Array.isArray(value)) {
-        return value.join(",");
-    }
-    return String(value);
-}
 //# sourceMappingURL=index.test.js.map