@aura-stack/auth 0.2.0 → 0.4.0-rc.1

package/dist/schemas.d.ts

@@ -1,16 +1,16 @@
-import { z } from 'zod/v4';
+import { z } from 'zod';
 
 /**
  * Schema for OAuth Provider Configuration
  */
 declare const OAuthProviderConfigSchema: z.ZodObject<{
-    authorizeURL: z.ZodURL;
-    accessToken: z.ZodURL;
+    authorizeURL: z.ZodString;
+    accessToken: z.ZodString;
     scope: z.ZodOptional<z.ZodString>;
-    userInfo: z.ZodURL;
+    userInfo: z.ZodString;
     responseType: z.ZodEnum<{
-        code: "code";
         token: "token";
+        code: "code";
         id_token: "id_token";
     }>;
     clientId: z.ZodString;
@@ -22,13 +22,13 @@ declare const OAuthProviderConfigSchema: z.ZodObject<{
  * @see https://datatracker.ietf.org/doc/html/rfc6749#section-4.1.1
  */
 declare const OAuthAuthorization: z.ZodObject<{
-    authorizeURL: z.ZodURL;
-    accessToken: z.ZodURL;
+    authorizeURL: z.ZodString;
+    accessToken: z.ZodString;
     scope: z.ZodOptional<z.ZodString>;
-    userInfo: z.ZodURL;
+    userInfo: z.ZodString;
     responseType: z.ZodEnum<{
-        code: "code";
         token: "token";
+        code: "code";
         id_token: "id_token";
     }>;
     clientId: z.ZodString;
@@ -74,13 +74,13 @@ declare const OAuthAuthorizationErrorResponse: z.ZodObject<{
  * @see https://datatracker.ietf.org/doc/html/rfc6749#section-4.1.3
  */
 declare const OAuthAccessToken: z.ZodObject<{
-    authorizeURL: z.ZodURL;
-    accessToken: z.ZodURL;
+    authorizeURL: z.ZodString;
+    accessToken: z.ZodString;
     scope: z.ZodOptional<z.ZodString>;
-    userInfo: z.ZodURL;
+    userInfo: z.ZodString;
     responseType: z.ZodEnum<{
-        code: "code";
         token: "token";
+        code: "code";
         id_token: "id_token";
     }>;
     clientId: z.ZodString;
@@ -96,10 +96,10 @@ declare const OAuthAccessToken: z.ZodObject<{
  */
 declare const OAuthAccessTokenResponse: z.ZodObject<{
     access_token: z.ZodString;
-    token_type: z.ZodString;
+    token_type: z.ZodOptional<z.ZodString>;
     expires_in: z.ZodOptional<z.ZodNumber>;
     refresh_token: z.ZodOptional<z.ZodString>;
-    scope: z.ZodOptional<z.ZodString>;
+    scope: z.ZodUnion<[z.ZodOptional<z.ZodString>, z.ZodNull]>;
 }, z.core.$strip>;
 /**
  * Schema for OAuth Access Token Error Response

package/dist/schemas.js

@@ -8,7 +8,7 @@ import {
   OAuthEnvSchema,
   OAuthErrorResponse,
   OAuthProviderConfigSchema
-} from "./chunk-WD7AUHQ5.js";
+} from "./chunk-YRCB5FLE.js";
 export {
   OAuthAccessToken,
   OAuthAccessTokenErrorResponse,

package/dist/secure.cjs

@@ -38,7 +38,7 @@ __export(secure_exports, {
   verifyCSRF: () => verifyCSRF
 });
 module.exports = __toCommonJS(secure_exports);
-var import_node_crypto = __toESM(require("crypto"), 1);
+var import_crypto = __toESM(require("crypto"), 1);
 
 // src/utils.ts
 var import_router = require("@aura-stack/router");
@@ -68,10 +68,10 @@ var isJWTPayloadWithToken = (payload) => {
 
 // src/secure.ts
 var generateSecure = (length = 32) => {
-  return import_node_crypto.default.randomBytes(length).toString("base64url");
+  return import_crypto.default.randomBytes(length).toString("base64url");
 };
 var createHash = (data, base = "hex") => {
-  return import_node_crypto.default.createHash("sha256").update(data).digest().toString(base);
+  return import_crypto.default.createHash("sha256").update(data).digest().toString(base);
 };
 var createPKCE = async (verifier) => {
   const codeVerifier = verifier ?? generateSecure(86);
@@ -106,7 +106,7 @@ var verifyCSRF = async (jose, cookie, header) => {
     if (!equals(headerBuffer.length, cookieBuffer.length)) {
       throw new AuthSecurityError("CSRF_TOKEN_INVALID", "The CSRF tokens do not match.");
     }
-    if (!import_node_crypto.default.timingSafeEqual(cookieBuffer, headerBuffer)) {
+    if (!import_crypto.default.timingSafeEqual(cookieBuffer, headerBuffer)) {
       throw new AuthSecurityError("CSRF_TOKEN_INVALID", "The CSRF tokens do not match.");
     }
     return true;
@@ -115,7 +115,7 @@ var verifyCSRF = async (jose, cookie, header) => {
   }
 };
 var createDerivedSalt = (secret) => {
-  return import_node_crypto.default.createHash("sha256").update(secret).update("aura-auth-salt").digest("hex");
+  return import_crypto.default.createHash("sha256").update(secret).update("aura-auth-salt").digest("hex");
 };
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {

package/dist/secure.d.ts

@@ -1,7 +1,8 @@
-import { A as AuthRuntimeConfig } from './index-EqsoyjrF.js';
-import 'zod/v4';
+import { A as AuthRuntimeConfig } from './index-B8jeIElf.js';
+import 'zod';
 import './schemas.js';
 import '@aura-stack/router/cookie';
+import '@aura-stack/jose';
 import '@aura-stack/jose/jose';
 import './@types/utility.js';
 

package/dist/utils.d.ts

@@ -1,9 +1,9 @@
-import { ZodError } from 'zod';
 import { RouterConfig } from '@aura-stack/router';
-import { i as APIErrorMap } from './index-EqsoyjrF.js';
-import 'zod/v4';
+import { i as APIErrorMap } from './index-B8jeIElf.js';
+import { ZodError } from 'zod';
 import './schemas.js';
 import '@aura-stack/router/cookie';
+import '@aura-stack/jose';
 import '@aura-stack/jose/jose';
 import './@types/utility.js';
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aura-stack/auth",
-  "version": "0.2.0",
+  "version": "0.4.0-rc.1",
   "private": false,
   "type": "module",
   "description": "Core auth for @aura-stack/auth",
@@ -44,14 +44,16 @@
   },
   "license": "MIT",
   "dependencies": {
-    "@aura-stack/router": "^0.5.0",
+    "@aura-stack/router": "0.6.0-rc.1",
     "dotenv": "^17.2.3",
-    "zod": "^4.1.12",
+    "zod": "^4.3.5",
     "@aura-stack/jose": "0.2.0"
   },
   "devDependencies": {
-    "@aura-stack/tsup-config": "0.0.0",
-    "@aura-stack/tsconfig": "0.0.0"
+    "@types/node": "^24.9.2",
+    "typescript": "^5.9.2",
+    "@aura-stack/tsconfig": "0.0.0",
+    "@aura-stack/tsup-config": "0.0.0"
   },
   "scripts": {
     "dev": "tsup --watch",