@aura-stack/auth 0.4.0-rc.5 → 0.5.0

package/dist/context.d.ts

@@ -0,0 +1,16 @@
+import { A as AuthConfig, I as InternalContext } from './index-_aXtxb_s.js';
+import 'zod';
+import './schemas.js';
+import 'zod/v4';
+import '@aura-stack/jose';
+import '@aura-stack/jose/jose';
+import '@aura-stack/jose/crypto';
+import '@aura-stack/router/cookie';
+import './@types/utility.js';
+import 'jose';
+import '@aura-stack/router';
+import 'zod/v4/core';
+
+declare const createContext: (config?: AuthConfig) => InternalContext;
+
+export { createContext };

package/dist/context.js

@@ -0,0 +1,28 @@
+import {
+  createContext
+} from "./chunk-2IR674WX.js";
+import "./chunk-PDP3PHB3.js";
+import "./chunk-LDU7A2JE.js";
+import "./chunk-PHYNROD4.js";
+import "./chunk-E6G5YCI6.js";
+import "./chunk-IPKO6UQN.js";
+import "./chunk-54CZPKR4.js";
+import "./chunk-2GQLSIJ2.js";
+import "./chunk-EEE7UM5T.js";
+import "./chunk-C3A37LQC.js";
+import "./chunk-4YHJ4IEQ.js";
+import "./chunk-OVHNRULD.js";
+import "./chunk-QQEKY4XP.js";
+import "./chunk-KMMAZFSJ.js";
+import "./chunk-FW4W3REU.js";
+import "./chunk-5LZ7TOM3.js";
+import "./chunk-U4RK4LKJ.js";
+import "./chunk-2A5B7GWR.js";
+import "./chunk-UZQJJD6A.js";
+import "./chunk-LX3TJ2TJ.js";
+import "./chunk-XY5R3EHH.js";
+import "./chunk-WHNDRO3N.js";
+import "./chunk-U5663F2U.js";
+export {
+  createContext
+};

package/dist/cookie.cjs

@@ -34,6 +34,37 @@ __export(cookie_exports, {
   setCookie: () => setCookie
 });
 module.exports = __toCommonJS(cookie_exports);
+
+// src/env.ts
+var import_meta = {};
+var env = new Proxy({}, {
+  get(_, prop) {
+    if (typeof prop !== "string") return void 0;
+    const hasProperty = (process2) => {
+      return process2 && Object.prototype.hasOwnProperty.call(process2, prop);
+    };
+    try {
+      if (typeof process !== "undefined" && hasProperty(process.env)) {
+        return process.env[prop];
+      }
+      if (typeof import_meta !== "undefined" && hasProperty(import_meta.env)) {
+        return import_meta.env[prop];
+      }
+      if (typeof Deno !== "undefined" && Deno.env?.get) {
+        return Deno.env.get(prop);
+      }
+      if (typeof Bun !== "undefined" && hasProperty(Bun.env)) {
+        return Bun.env[prop];
+      }
+      const globalValue = globalThis[prop];
+      return typeof globalValue === "string" ? globalValue : void 0;
+    } catch {
+      return void 0;
+    }
+  }
+});
+
+// src/cookie.ts
 var import_cookie = require("@aura-stack/router/cookie");
 
 // src/errors.ts
@@ -82,10 +113,11 @@ var setCookie = (cookieName, value, options) => {
 var expiredCookieAttributes = {
   ...defaultCookieOptions,
   expires: /* @__PURE__ */ new Date(0),
-  maxAge: 0
+  maxAge: 0,
+  secure: true
 };
 var getCookie = (request, cookieName) => {
-  const cookies = request.headers.get("Cookie");
+  const cookies = request instanceof Request ? request.headers.get("Cookie") : request.get("Cookie");
   if (!cookies) {
     throw new AuthInternalError("COOKIE_NOT_FOUND", "No cookies found. There is no active session");
   }
@@ -114,31 +146,27 @@ var createSessionCookie = async (jose, session) => {
     throw new AuthInternalError("INVALID_JWT_TOKEN", "Failed to create session cookie", { cause: error });
   }
 };
-var defineSecureCookieOptions = (useSecure, attributes, strategy) => {
+var defineSecureCookieOptions = (useSecure, attributes, strategy, logger) => {
   if (!attributes.httpOnly) {
-    console.warn(
-      "[WARNING]: Cookie is configured without HttpOnly. This allows JavaScript access via document.cookie and increases XSS risk."
-    );
+    logger?.log("COOKIE_HTTPONLY_DISABLED");
   }
   if (attributes.domain === "*") {
     attributes.domain = void 0;
-    console.warn("[WARNING]: Cookie 'Domain' is set to '*', which is insecure. Avoid wildcard domains.");
+    logger?.log("COOKIE_WILDCARD_DOMAIN");
   }
   if (!useSecure) {
     if (attributes.secure) {
-      console.warn(
-        "[WARNING]: The 'Secure' attribute will be disabled for this cookie. Serve over HTTPS to enforce Secure cookies."
-      );
+      logger?.log("COOKIE_SECURE_DISABLED");
     }
     if (attributes.sameSite == "none") {
       attributes.sameSite = "lax";
-      console.warn("[WARNING]: SameSite=None requires Secure attribute. Changing SameSite to 'Lax'.");
+      logger?.log("COOKIE_SAMESITE_NONE_WITHOUT_SECURE");
     }
-    if (process.env.NODE_ENV === "production") {
-      console.warn("[WARNING]: In production, ensure cookies are served over HTTPS to maintain security.");
+    if (env.NODE_ENV === "production") {
+      logger?.log("COOKIE_INSECURE_IN_PRODUCTION");
     }
     if (strategy === "host") {
-      console.warn("[WARNING]: __Host- cookies require a secure context. Falling back to standard cookie settings.");
+      logger?.log("COOKIE_HOST_STRATEGY_INSECURE");
     }
     return {
       ...defaultCookieOptions,
@@ -152,7 +180,7 @@ var defineSecureCookieOptions = (useSecure, attributes, strategy) => {
     ...defaultHostCookieConfig
   } : { ...defaultCookieOptions, ...attributes, ...defaultSecureCookieConfig };
 };
-var createCookieStore = (useSecure, prefix, overrides) => {
+var createCookieStore = (useSecure, prefix, overrides, logger) => {
   prefix ??= COOKIE_NAME;
   const securePrefix = useSecure ? "__Secure-" : "";
   const hostPrefix = useSecure ? "__Host-" : "";
@@ -165,7 +193,8 @@ var createCookieStore = (useSecure, prefix, overrides) => {
           ...defaultCookieOptions,
           ...overrides?.sessionToken?.attributes
         },
-        overrides?.sessionToken?.attributes?.strategy ?? "secure"
+        overrides?.sessionToken?.attributes?.strategy ?? "secure",
+        logger
       )
     },
     state: {
@@ -176,7 +205,8 @@ var createCookieStore = (useSecure, prefix, overrides) => {
           ...oauthCookieOptions,
           ...overrides?.state?.attributes
         },
-        overrides?.state?.attributes?.strategy ?? "secure"
+        overrides?.state?.attributes?.strategy ?? "secure",
+        logger
       )
     },
     csrfToken: {
@@ -185,9 +215,11 @@ var createCookieStore = (useSecure, prefix, overrides) => {
         useSecure,
         {
           ...overrides?.csrfToken?.attributes,
-          ...defaultHostCookieConfig
+          ...defaultHostCookieConfig,
+          sameSite: "strict"
         },
-        overrides?.csrfToken?.attributes?.strategy ?? "host"
+        overrides?.csrfToken?.attributes?.strategy ?? "host",
+        logger
       )
     },
     redirectTo: {
@@ -198,7 +230,8 @@ var createCookieStore = (useSecure, prefix, overrides) => {
           ...oauthCookieOptions,
           ...overrides?.redirectTo?.attributes
         },
-        overrides?.redirectTo?.attributes?.strategy ?? "secure"
+        overrides?.redirectTo?.attributes?.strategy ?? "secure",
+        logger
       )
     },
     redirectURI: {
@@ -209,7 +242,8 @@ var createCookieStore = (useSecure, prefix, overrides) => {
           ...oauthCookieOptions,
           ...overrides?.redirectURI?.attributes
         },
-        overrides?.redirectURI?.attributes?.strategy ?? "secure"
+        overrides?.redirectURI?.attributes?.strategy ?? "secure",
+        logger
       )
     },
     codeVerifier: {
@@ -220,7 +254,8 @@ var createCookieStore = (useSecure, prefix, overrides) => {
           ...oauthCookieOptions,
           ...overrides?.codeVerifier?.attributes
         },
-        overrides?.codeVerifier?.attributes?.strategy ?? "secure"
+        overrides?.codeVerifier?.attributes?.strategy ?? "secure",
+        logger
       )
     }
   };

package/dist/cookie.d.ts

@@ -1,10 +1,15 @@
 import { SerializeOptions } from '@aura-stack/router/cookie';
-import { JWTPayload } from '@aura-stack/jose/jose';
-import { A as AuthRuntimeConfig, C as CookieConfig, a as CookieStoreConfig } from './index-B8jeIElf.js';
+import { C as CookieConfig, a as InternalLogger, b as CookieStoreConfig, c as AuthRuntimeConfig, U as User } from './index-_aXtxb_s.js';
 import 'zod';
 import './schemas.js';
+import 'zod/v4';
 import '@aura-stack/jose';
+import '@aura-stack/jose/jose';
+import '@aura-stack/jose/crypto';
 import './@types/utility.js';
+import 'jose';
+import '@aura-stack/router';
+import 'zod/v4/core';
 
 /**
  * Prefix for all cookies set by Aura Auth.
@@ -41,7 +46,7 @@ declare const expiredCookieAttributes: SerializeOptions;
  * @param cookie Cookie name to retrieve
  * @returns The value of the cookie or throw an error if not found
  */
-declare const getCookie: (request: Request, cookieName: string) => string;
+declare const getCookie: (request: Request | Headers, cookieName: string) => string;
 /**
  * Get a Set-Cookie header value by cookie name from the response.
  *
@@ -58,7 +63,7 @@ declare const getSetCookie: (response: Response, cookieName: string) => string |
  * @param session - The JWT payload to be encoded in the session cookie
  * @returns The serialized session cookie string
  */
-declare const createSessionCookie: (jose: AuthRuntimeConfig["jose"], session: JWTPayload) => Promise<string>;
+declare const createSessionCookie: (jose: AuthRuntimeConfig["jose"], session: User) => Promise<string>;
 /**
  * Defines the cookie configuration based on the request security and cookie options passed
  * in the Aura Auth configuration (`createAuth` function). This function ensures the correct
@@ -72,13 +77,13 @@ declare const createSessionCookie: (jose: AuthRuntimeConfig["jose"], session: JW
  * @param strategy The cookie strategy: "host", "secure", or "standard"
  * @returns The finalized cookie options to be used for setting cookies
  */
-declare const defineSecureCookieOptions: (useSecure: boolean, attributes: SerializeOptions, strategy: "host" | "secure" | "standard") => SerializeOptions;
+declare const defineSecureCookieOptions: (useSecure: boolean, attributes: SerializeOptions, strategy: "host" | "secure" | "standard", logger?: InternalLogger) => SerializeOptions;
 /**
  * @param useSecure Whether the request is secure (HTTPS)
  * @param prefix Optional prefix added to all cookie names
  * @param overrides Optional overrides for individual cookie configurations
  * @returns The complete cookie store configuration
  */
-declare const createCookieStore: (useSecure: boolean, prefix?: string, overrides?: CookieConfig["overrides"]) => CookieStoreConfig;
+declare const createCookieStore: (useSecure: boolean, prefix?: string, overrides?: CookieConfig["overrides"], logger?: InternalLogger) => CookieStoreConfig;
 
 export { COOKIE_NAME, createCookieStore, createSessionCookie, defaultCookieOptions, defaultHostCookieConfig, defaultSecureCookieConfig, defaultStandardCookieConfig, defineSecureCookieOptions, expiredCookieAttributes, getCookie, getSetCookie, setCookie };

package/dist/cookie.js

@@ -11,8 +11,9 @@ import {
   getCookie,
   getSetCookie,
   setCookie
-} from "./chunk-W6LG7BFW.js";
-import "./chunk-RRLIF4PQ.js";
+} from "./chunk-XY5R3EHH.js";
+import "./chunk-WHNDRO3N.js";
+import "./chunk-U5663F2U.js";
 export {
   COOKIE_NAME,
   createCookieStore,