@atlasauth/capacitor 0.1.0

package/dist/token-store.js

@@ -0,0 +1,70 @@
+"use strict";
+/**
+ * The Capacitor session token store.
+ *
+ * The web SDK keeps its short-lived JWT in memory and lets the browser carry the
+ * refresh token in an HttpOnly cookie. A Capacitor app — a WebView with no cookie
+ * jar against the FAPI origin — has to put the session somewhere the app chooses,
+ * and WHERE it lives is a security decision this SDK must not make for the app.
+ *
+ * So the SDK depends only on the small {@link TokenStore} interface below (the
+ * same three-method shape the `@atlasauth/js` native-session manager persists
+ * through) and ships two adapters: an in-memory default and a
+ * `@capacitor/preferences` one. `@capacitor/preferences` is an OPTIONAL peer, so
+ * its surface is declared structurally ({@link PreferencesPlugin}) and the app
+ * passes the real plugin in — the package compiles, typechecks and tests without
+ * it installed.
+ *
+ * ⚠️ `@capacitor/preferences` is NOT encrypted at rest (UserDefaults /
+ * SharedPreferences). For production, back the store with a secure-storage
+ * community plugin — e.g. `@capacitor-community/secure-storage` or
+ * `capacitor-secure-storage-plugin` — behind this same {@link TokenStore}
+ * interface. See {@link createPreferencesTokenStore} for the drop-in shape.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEFAULT_SESSION_KEY = void 0;
+exports.createPreferencesTokenStore = createPreferencesTokenStore;
+exports.createInMemoryTokenStore = createInMemoryTokenStore;
+/** The default key the serialized native session is stored under. */
+exports.DEFAULT_SESSION_KEY = 'atlas.native_session';
+/**
+ * Build a {@link TokenStore} backed by `@capacitor/preferences`, keyed by `key`.
+ * The app imports the plugin and passes it in — the SDK never imports
+ * `@capacitor/preferences` itself, so it stays an optional peer:
+ *
+ * ```ts
+ * import { Preferences } from '@capacitor/preferences';
+ * import { createPreferencesTokenStore } from '@atlasauth/capacitor';
+ *
+ * const store = createPreferencesTokenStore(Preferences);
+ * ```
+ *
+ * Preferences is plaintext at rest; swap a secure-storage plugin behind this same
+ * interface for production (see the module header).
+ */
+function createPreferencesTokenStore(preferences, key = exports.DEFAULT_SESSION_KEY) {
+    return {
+        getToken: async () => (await preferences.get({ key })).value ?? null,
+        setToken: (value) => preferences.set({ key, value }),
+        clearToken: () => preferences.remove({ key }),
+    };
+}
+/**
+ * A process-memory {@link TokenStore}. The zero-config default so the SDK runs
+ * out of the box in tests and prototypes — but it does NOT survive an app
+ * restart, so ship {@link createPreferencesTokenStore} (or a secure-storage
+ * adapter) in production.
+ */
+function createInMemoryTokenStore() {
+    let token = null;
+    return {
+        getToken: () => token,
+        setToken: (next) => {
+            token = next;
+        },
+        clearToken: () => {
+            token = null;
+        },
+    };
+}
+//# sourceMappingURL=token-store.js.map

package/dist/token-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-store.js","sourceRoot":"","sources":["../src/token-store.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;;;AAsCH,kEASC;AAQD,4DAWC;AA9CD,qEAAqE;AACxD,QAAA,mBAAmB,GAAG,sBAAsB,CAAC;AAE1D;;;;;;;;;;;;;;GAcG;AACH,SAAgB,2BAA2B,CACzC,WAA8B,EAC9B,MAAc,2BAAmB;IAEjC,OAAO;QACL,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,WAAW,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI;QACpE,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;QACpD,UAAU,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC;KAC9C,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAgB,wBAAwB;IACtC,IAAI,KAAK,GAAkB,IAAI,CAAC;IAChC,OAAO;QACL,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK;QACrB,QAAQ,EAAE,CAAC,IAAY,EAAE,EAAE;YACzB,KAAK,GAAG,IAAI,CAAC;QACf,CAAC;QACD,UAAU,EAAE,GAAG,EAAE;YACf,KAAK,GAAG,IAAI,CAAC;QACf,CAAC;KACF,CAAC;AACJ,CAAC"}

package/package.json

@@ -0,0 +1,56 @@
+{
+  "name": "@atlasauth/capacitor",
+  "version": "0.1.0",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "dependencies": {
+    "@atlasauth/js": "0.2.0"
+  },
+  "peerDependencies": {
+    "@capacitor/core": ">=6",
+    "@capacitor/browser": ">=6",
+    "@capacitor/app": ">=6",
+    "@capacitor/preferences": ">=6"
+  },
+  "peerDependenciesMeta": {
+    "@capacitor/core": {
+      "optional": true
+    },
+    "@capacitor/browser": {
+      "optional": true
+    },
+    "@capacitor/app": {
+      "optional": true
+    },
+    "@capacitor/preferences": {
+      "optional": true
+    }
+  },
+  "devDependencies": {
+    "@capacitor/app": "^6.0.2",
+    "@capacitor/browser": "^6.0.5",
+    "@capacitor/core": "^6.2.1",
+    "@capacitor/preferences": "^6.0.3",
+    "typescript": "^5.6.3",
+    "vitest": "^2.1.4"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "test": "vitest run"
+  }
+}