@aura-stack/auth 0.4.0 → 0.6.0

package/dist/errors.cjs

@@ -1,85 +0,0 @@
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-
-// src/errors.ts
-var errors_exports = {};
-__export(errors_exports, {
-  AuthInternalError: () => AuthInternalError,
-  AuthSecurityError: () => AuthSecurityError,
-  OAuthProtocolError: () => OAuthProtocolError,
-  isAuthInternalError: () => isAuthInternalError,
-  isAuthSecurityError: () => isAuthSecurityError,
-  isNativeError: () => isNativeError,
-  isOAuthProtocolError: () => isOAuthProtocolError
-});
-module.exports = __toCommonJS(errors_exports);
-var OAuthProtocolError = class extends Error {
-  type = "OAUTH_PROTOCOL_ERROR";
-  error;
-  errorURI;
-  constructor(error, description, errorURI, options) {
-    super(description, options);
-    this.error = error;
-    this.errorURI = errorURI;
-    this.name = new.target.name;
-    Error.captureStackTrace(this, new.target);
-  }
-};
-var AuthInternalError = class extends Error {
-  type = "AUTH_INTERNAL_ERROR";
-  code;
-  constructor(code, message, options) {
-    super(message, options);
-    this.code = code;
-    this.name = new.target.name;
-    Error.captureStackTrace(this, new.target);
-  }
-};
-var AuthSecurityError = class extends Error {
-  type = "AUTH_SECURITY_ERROR";
-  code;
-  constructor(code, message, options) {
-    super(message, options);
-    this.code = code;
-    this.name = new.target.name;
-    Error.captureStackTrace(this, new.target);
-  }
-};
-var isNativeError = (error) => {
-  return error instanceof Error;
-};
-var isOAuthProtocolError = (error) => {
-  return error instanceof OAuthProtocolError;
-};
-var isAuthInternalError = (error) => {
-  return error instanceof AuthInternalError;
-};
-var isAuthSecurityError = (error) => {
-  return error instanceof AuthSecurityError;
-};
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  AuthInternalError,
-  AuthSecurityError,
-  OAuthProtocolError,
-  isAuthInternalError,
-  isAuthSecurityError,
-  isNativeError,
-  isOAuthProtocolError
-});

package/dist/errors.d.ts

@@ -1,50 +0,0 @@
-import { E as ErrorType, b as AuthInternalErrorCode, c as AuthSecurityErrorCode } from './index-CSyIJmCM.js';
-import { LiteralUnion } from './@types/utility.js';
-import 'zod';
-import './schemas.js';
-import './jose.js';
-import '@aura-stack/jose';
-import '@aura-stack/jose/jose';
-import '@aura-stack/router/cookie';
-
-/**
- * The object returned by the class to users its:
- *   - type: "OAUTH_PROTOCOL_ERROR" to identify the error type
- *   - error: A short error code
- *   - description: A human-readable description of the error. The description is obtained from the message property of the Error class
- *   - errorURI: A URI with more information about the error
- */
-declare class OAuthProtocolError extends Error {
-    readonly type = "OAUTH_PROTOCOL_ERROR";
-    readonly error: string;
-    readonly errorURI?: string;
-    constructor(error: LiteralUnion<Uppercase<ErrorType>>, description?: string, errorURI?: string, options?: ErrorOptions);
-}
-/**
- * The object returned when an internal error occurs in the Aura Auth library.
- *   - type: "AUTH_INTERNAL_ERROR" to identify the error type
- *   - message: A human-readable description of the error. The description is obtained from the message property of the Error class
- *   - code: An optional error code that can be used to identify the specific error, for example, LIKE "ERR_AUTH_INTERNAL_ERROR"
- */
-declare class AuthInternalError extends Error {
-    readonly type = "AUTH_INTERNAL_ERROR";
-    readonly code: string;
-    constructor(code: AuthInternalErrorCode, message?: string, options?: ErrorOptions);
-}
-/**
- * The object returned when a security error occurs in the Aura Auth library.
- *   - type: "AUTH_SECURITY_ERROR" to identify the error type
- *   - message: A human-readable description of the error. The description is obtained from the message property of the Error class
- *   - code: An optional error code that can be used to identify the specific error, for example, LIKE "ERR_AUTH_SECURITY_ERROR"
- */
-declare class AuthSecurityError extends Error {
-    readonly type = "AUTH_SECURITY_ERROR";
-    readonly code: string;
-    constructor(code: LiteralUnion<AuthSecurityErrorCode>, message?: string, options?: ErrorOptions);
-}
-declare const isNativeError: (error: unknown) => error is Error;
-declare const isOAuthProtocolError: (error: unknown) => error is OAuthProtocolError;
-declare const isAuthInternalError: (error: unknown) => error is AuthInternalError;
-declare const isAuthSecurityError: (error: unknown) => error is AuthSecurityError;
-
-export { AuthInternalError, AuthSecurityError, OAuthProtocolError, isAuthInternalError, isAuthSecurityError, isNativeError, isOAuthProtocolError };

package/dist/errors.js

@@ -1,18 +0,0 @@
-import {
-  AuthInternalError,
-  AuthSecurityError,
-  OAuthProtocolError,
-  isAuthInternalError,
-  isAuthSecurityError,
-  isNativeError,
-  isOAuthProtocolError
-} from "./chunk-RRLIF4PQ.js";
-export {
-  AuthInternalError,
-  AuthSecurityError,
-  OAuthProtocolError,
-  isAuthInternalError,
-  isAuthSecurityError,
-  isNativeError,
-  isOAuthProtocolError
-};

package/dist/headers.cjs

@@ -1,61 +0,0 @@
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-
-// src/headers.ts
-var headers_exports = {};
-__export(headers_exports, {
-  cacheControl: () => cacheControl,
-  contentSecurityPolicy: () => contentSecurityPolicy,
-  secureApiHeaders: () => secureApiHeaders,
-  secureHeaders: () => secureHeaders
-});
-module.exports = __toCommonJS(headers_exports);
-var cacheControl = {
-  "Cache-Control": "no-store",
-  Pragma: "no-cache",
-  Expires: "0",
-  Vary: "Cookie"
-};
-var contentSecurityPolicy = {
-  "Content-Security-Policy": [
-    "default-src 'none'",
-    "script-src 'self'",
-    "frame-src 'none'",
-    "object-src 'none'",
-    "frame-ancestors 'none'",
-    "base-uri 'none'"
-  ].join("; ")
-};
-var secureHeaders = {
-  "X-Content-Type-Options": "nosniff",
-  "X-Frame-Options": "DENY",
-  "Referrer-Policy": "strict-origin-when-cross-origin"
-};
-var secureApiHeaders = {
-  ...cacheControl,
-  ...contentSecurityPolicy,
-  ...secureHeaders
-};
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  cacheControl,
-  contentSecurityPolicy,
-  secureApiHeaders,
-  secureHeaders
-});

package/dist/headers.d.ts

@@ -1,33 +0,0 @@
-/**
- * Headers to prevent caching of responses. It includes Pragma header for HTTP/1.0 compatibility.
- * @see https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Cache-Control
- * @see https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Pragma
- * @see https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Vary
- */
-declare const cacheControl: HeadersInit;
-/**
- * Content Security Policy headers optimized for JSON API endpoints.
- * Provides protection against XSS, clickjacking, and code injection attacks.
- * @see https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP
- * @see https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Content-Security-Policy
- */
-declare const contentSecurityPolicy: HeadersInit;
-/**
- * X-Frame-Options is overridden by the frame-ancestors directive in CSP.
- * However, it's included here for compatibility with older browsers that do not support CSP.
- * @see https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/X-Content-Type-Options
- * @see https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/X-Frame-Options
- * @see https://developer.mozilla.org/es/docs/Web/HTTP/Reference/Headers/Referrer-Policy
- */
-declare const secureHeaders: {
-    "X-Content-Type-Options": string;
-    "X-Frame-Options": string;
-    "Referrer-Policy": string;
-};
-/**
- * Combined security headers for JSON API responses.
- * Includes cache control, CSP, and other security headers.
- */
-declare const secureApiHeaders: HeadersInit;
-
-export { cacheControl, contentSecurityPolicy, secureApiHeaders, secureHeaders };

package/dist/headers.js

@@ -1,12 +0,0 @@
-import {
-  cacheControl,
-  contentSecurityPolicy,
-  secureApiHeaders,
-  secureHeaders
-} from "./chunk-EBAMFRB7.js";
-export {
-  cacheControl,
-  contentSecurityPolicy,
-  secureApiHeaders,
-  secureHeaders
-};