@aura-stack/auth 0.1.0-rc.9 → 0.2.0

package/dist/actions/index.d.ts

@@ -1,13 +1,12 @@
-export { signInAction } from "./signIn/signIn.js"
-export { callbackAction } from "./callback/callback.js"
-export { sessionAction } from "./session/session.js"
-export { signOutAction } from "./signOut/signOut.js"
-export { csrfTokenAction } from "./csrfToken/csrfToken.js"
-import "@aura-stack/router"
-import "../index-DpfbvTZ_.js"
-import "zod/v4"
-import "@aura-stack/jose/jose"
-import "../schemas.js"
-import "zod/v4/core"
-import "cookie"
-import "../@types/utility.js"
+export { signInAction } from './signIn/signIn.js';
+export { callbackAction } from './callback/callback.js';
+export { sessionAction } from './session/session.js';
+export { signOutAction } from './signOut/signOut.js';
+export { csrfTokenAction } from './csrfToken/csrfToken.js';
+import '@aura-stack/router';
+import '../index-EqsoyjrF.js';
+import 'zod/v4';
+import '../schemas.js';
+import '@aura-stack/router/cookie';
+import '@aura-stack/jose/jose';
+import '../@types/utility.js';

package/dist/actions/index.js

@@ -1,18 +1,33 @@
-import "../chunk-ITQ7352M.js"
-import { csrfTokenAction } from "../chunk-SMQO5WD7.js"
-import { sessionAction } from "../chunk-XXJKNKGQ.js"
-import { signInAction } from "../chunk-LLR722CL.js"
-import { signOutAction } from "../chunk-SJPDVKUS.js"
-import "../chunk-CAKJT3KS.js"
-import { callbackAction } from "../chunk-HGJ4TXY4.js"
-import "../chunk-RLT4RFKV.js"
-import "../chunk-UJJ7R56J.js"
-import "../chunk-ZV4BH47P.js"
-import "../chunk-6SM22VVJ.js"
-import "../chunk-STHEPPUZ.js"
-import "../chunk-GZU3RBTB.js"
-import "../chunk-256KIVJL.js"
-import "../chunk-FJUDBLCP.js"
-import "../chunk-JAPMIE6S.js"
-import "../chunk-HMRKN75I.js"
-export { callbackAction, csrfTokenAction, sessionAction, signInAction, signOutAction }
+import "../chunk-ITQ7352M.js";
+import {
+  csrfTokenAction
+} from "../chunk-QDO2KSRJ.js";
+import {
+  signInAction
+} from "../chunk-2RXNXMCZ.js";
+import {
+  sessionAction
+} from "../chunk-PTJUYB33.js";
+import {
+  signOutAction
+} from "../chunk-NEVKX6K2.js";
+import "../chunk-QEZL7EYN.js";
+import {
+  callbackAction
+} from "../chunk-UEH3LVON.js";
+import "../chunk-ZLR3LI6X.js";
+import "../chunk-4V4JNXVF.js";
+import "../chunk-IMICRJ5U.js";
+import "../chunk-STHEPPUZ.js";
+import "../chunk-WD7AUHQ5.js";
+import "../chunk-N2APGLXA.js";
+import "../chunk-CXLATHS5.js";
+import "../chunk-EIL2FPSS.js";
+import "../chunk-RRLIF4PQ.js";
+export {
+  callbackAction,
+  csrfTokenAction,
+  sessionAction,
+  signInAction,
+  signOutAction
+};

package/dist/actions/session/session.cjs

@@ -1,197 +1,107 @@
-"use strict"
-var __defProp = Object.defineProperty
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor
-var __getOwnPropNames = Object.getOwnPropertyNames
-var __hasOwnProp = Object.prototype.hasOwnProperty
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
 var __export = (target, all) => {
-    for (var name in all) __defProp(target, name, { get: all[name], enumerable: true })
-}
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
 var __copyProps = (to, from, except, desc) => {
-    if ((from && typeof from === "object") || typeof from === "function") {
-        for (let key of __getOwnPropNames(from))
-            if (!__hasOwnProp.call(to, key) && key !== except)
-                __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable })
-    }
-    return to
-}
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod)
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 
 // src/actions/session/session.ts
-var session_exports = {}
+var session_exports = {};
 __export(session_exports, {
-    sessionAction: () => sessionAction,
-})
-module.exports = __toCommonJS(session_exports)
-var import_router2 = require("@aura-stack/router")
+  sessionAction: () => sessionAction
+});
+module.exports = __toCommonJS(session_exports);
+var import_router2 = require("@aura-stack/router");
 
 // src/utils.ts
-var import_router = require("@aura-stack/router")
+var import_router = require("@aura-stack/router");
 
-// src/error.ts
-var AuthError = class extends Error {
-    constructor(type, message) {
-        super(message)
-        this.type = type
-        this.name = "AuthError"
-    }
-}
+// src/errors.ts
+var AuthInternalError = class extends Error {
+  type = "AUTH_INTERNAL_ERROR";
+  code;
+  constructor(code, message, options) {
+    super(message, options);
+    this.code = code;
+    this.name = new.target.name;
+    Error.captureStackTrace(this, new.target);
+  }
+};
 
 // src/utils.ts
 var toISOString = (date) => {
-    return new Date(date).toISOString()
-}
+  return new Date(date).toISOString();
+};
 
 // src/headers.ts
 var cacheControl = {
-    "Cache-Control": "no-store",
-    Pragma: "no-cache",
-    Expires: "0",
-    Vary: "Cookie",
-}
+  "Cache-Control": "no-store",
+  Pragma: "no-cache",
+  Expires: "0",
+  Vary: "Cookie"
+};
 
 // src/cookie.ts
-var import_cookie = require("cookie")
-
-// src/assert.ts
-var isRequest = (value) => {
-    return typeof Request !== "undefined" && value instanceof Request
-}
-
-// src/cookie.ts
-var import_cookie2 = require("cookie")
-var COOKIE_NAME = "aura-auth"
+var import_cookie = require("@aura-stack/router/cookie");
 var defaultCookieOptions = {
-    httpOnly: true,
-    sameSite: "lax",
-    path: "/",
-    maxAge: 60 * 60 * 24 * 15,
-}
-var defaultStandardCookieConfig = {
-    secure: false,
-    httpOnly: true,
-    prefix: "",
-}
-var defaultSecureCookieConfig = {
-    secure: true,
-    prefix: "__Secure-",
-}
-var defaultHostCookieConfig = {
-    secure: true,
-    prefix: "__Host-",
-    path: "/",
-    domain: void 0,
-}
-var expiredCookieOptions = {
-    ...defaultCookieOptions,
-    expires: /* @__PURE__ */ new Date(0),
-    maxAge: 0,
-}
-var defineDefaultCookieOptions = (options) => {
-    return {
-        name: options?.name ?? COOKIE_NAME,
-        prefix: options?.prefix ?? (options?.secure ? "__Secure-" : ""),
-        ...defaultCookieOptions,
-        ...options,
-    }
-}
-var setCookie = (cookieName, value, options) => {
-    const { prefix, name } = defineDefaultCookieOptions(options)
-    const cookieNameWithPrefix = `${prefix}${name}.${cookieName}`
-    return (0, import_cookie.serialize)(cookieNameWithPrefix, value, {
-        ...defaultCookieOptions,
-        ...options,
-    })
-}
-var getCookie = (petition, cookie, options, optional = false) => {
-    const cookies = isRequest(petition) ? petition.headers.get("Cookie") : petition.headers.getSetCookie().join("; ")
-    if (!cookies) {
-        if (optional) {
-            return ""
-        }
-        throw new AuthError("invalid_request", "No cookies found. There is no active session")
-    }
-    const { name, prefix } = defineDefaultCookieOptions(options)
-    const parsedCookies = (0, import_cookie.parse)(cookies)
-    const value = parsedCookies[`${prefix}${name}.${cookie}`]
-    if (value === void 0) {
-        if (optional) {
-            return ""
-        }
-        throw new AuthError("invalid_request", `Cookie "${cookie}" not found. There is no active session`)
-    }
-    return value
-}
-var secureCookieOptions = (request, cookieOptions, trustedProxyHeaders) => {
-    const name = cookieOptions.name ?? COOKIE_NAME
-    const isSecure = trustedProxyHeaders
-        ? request.url.startsWith("https://") ||
-          request.headers.get("X-Forwarded-Proto") === "https" ||
-          request.headers.get("Forwarded")?.includes("proto=https")
-        : request.url.startsWith("https://")
-    if (!cookieOptions.options?.httpOnly) {
-        console.warn(
-            "[WARNING]: Cookie is configured without HttpOnly. This allows JavaScript access via document.cookie and increases XSS risk."
-        )
-    }
-    if (cookieOptions.options?.domain === "*") {
-        console.warn("[WARNING]: Cookie 'Domain' is set to '*', which is insecure. Avoid wildcard domains.")
-    }
-    if (!isSecure) {
-        const options = cookieOptions.options
-        if (options?.secure) {
-            console.warn(
-                "[WARNING]: The 'Secure' attribute will be disabled for this cookie. Serve over HTTPS to enforce Secure cookies."
-            )
-        }
-        if (options?.sameSite == "none") {
-            console.warn("[WARNING]: SameSite=None without a secure connection can be blocked by browsers.")
-        }
-        if (process.env.NODE_ENV === "production") {
-            console.warn("[WARNING]: In production, ensure cookies are served over HTTPS to maintain security.")
-        }
-        return {
-            ...defaultCookieOptions,
-            ...cookieOptions.options,
-            sameSite: options?.sameSite === "none" ? "lax" : (options?.sameSite ?? "lax"),
-            ...defaultStandardCookieConfig,
-            name,
-        }
-    }
-    return cookieOptions.strategy === "host"
-        ? {
-              ...defaultCookieOptions,
-              ...cookieOptions.options,
-              ...defaultHostCookieConfig,
-              name,
-          }
-        : { ...defaultCookieOptions, ...cookieOptions.options, ...defaultSecureCookieConfig, name }
-}
-var expireCookie = (name, options) => {
-    return setCookie(name, "", { ...options, ...expiredCookieOptions })
-}
+  httpOnly: true,
+  sameSite: "lax",
+  path: "/",
+  maxAge: 60 * 60 * 24 * 15
+};
+var oauthCookieOptions = {
+  httpOnly: true,
+  maxAge: 5 * 60,
+  sameSite: "lax",
+  expires: new Date(Date.now() + 5 * 60 * 1e3)
+};
+var expiredCookieAttributes = {
+  ...defaultCookieOptions,
+  expires: /* @__PURE__ */ new Date(0),
+  maxAge: 0
+};
+var getCookie = (request, cookieName) => {
+  const cookies = request.headers.get("Cookie");
+  if (!cookies) {
+    throw new AuthInternalError("COOKIE_NOT_FOUND", "No cookies found. There is no active session");
+  }
+  const value = (0, import_cookie.parse)(cookies)[cookieName];
+  if (!value) {
+    throw new AuthInternalError("COOKIE_NOT_FOUND", `Cookie "${cookieName}" not found. There is no active session`);
+  }
+  return value;
+};
 
 // src/actions/session/session.ts
 var sessionAction = (0, import_router2.createEndpoint)("GET", "/session", async (ctx) => {
-    const {
-        request,
-        context: { cookies, jose, trustedProxyHeaders },
-    } = ctx
-    const cookieOptions = secureCookieOptions(request, cookies, trustedProxyHeaders)
-    try {
-        const session = getCookie(request, "sessionToken", cookieOptions)
-        const decoded = await jose.decodeJWT(session)
-        const { exp, iat, jti, nbf, ...user } = decoded
-        const headers = new Headers(cacheControl)
-        return Response.json({ user, expires: toISOString(exp * 1e3) }, { headers })
-    } catch {
-        const headers = new Headers(cacheControl)
-        const sessionCookie = expireCookie("sessionToken", cookieOptions)
-        headers.set("Set-Cookie", sessionCookie)
-        return Response.json({ authenticated: false, message: "Unauthorized" }, { status: 401, headers })
-    }
-})
+  const {
+    request,
+    context: { jose, cookies }
+  } = ctx;
+  try {
+    const session = getCookie(request, cookies.sessionToken.name);
+    const decoded = await jose.decodeJWT(session);
+    const { exp, iat, jti, nbf, ...user } = decoded;
+    const headers = new Headers(cacheControl);
+    return Response.json({ user, expires: toISOString(exp * 1e3) }, { headers });
+  } catch (error) {
+    const headers = new import_router2.HeadersBuilder(cacheControl).setCookie(cookies.sessionToken.name, "", expiredCookieAttributes).toHeaders();
+    return Response.json({ authenticated: false, message: "Unauthorized" }, { status: 401, headers });
+  }
+});
 // Annotate the CommonJS export names for ESM import in node:
-0 &&
-    (module.exports = {
-        sessionAction,
-    })
+0 && (module.exports = {
+  sessionAction
+});

package/dist/actions/session/session.d.ts

@@ -1,5 +1,5 @@
-import * as _aura_stack_router from "@aura-stack/router"
+import * as _aura_stack_router from '@aura-stack/router';
 
-declare const sessionAction: _aura_stack_router.RouteEndpoint<"GET", "/session", {}>
+declare const sessionAction: _aura_stack_router.RouteEndpoint<"GET", "/session", {}>;
 
-export { sessionAction }
+export { sessionAction };

package/dist/actions/session/session.js

@@ -1,7 +1,10 @@
-import { sessionAction } from "../../chunk-XXJKNKGQ.js"
-import "../../chunk-ZV4BH47P.js"
-import "../../chunk-6SM22VVJ.js"
-import "../../chunk-STHEPPUZ.js"
-import "../../chunk-256KIVJL.js"
-import "../../chunk-FJUDBLCP.js"
-export { sessionAction }
+import {
+  sessionAction
+} from "../../chunk-PTJUYB33.js";
+import "../../chunk-IMICRJ5U.js";
+import "../../chunk-STHEPPUZ.js";
+import "../../chunk-CXLATHS5.js";
+import "../../chunk-RRLIF4PQ.js";
+export {
+  sessionAction
+};