@aura-stack/auth 0.5.0 → 0.6.0

package/dist/chunk-XY5R3EHH.js

@@ -1,204 +0,0 @@
-import {
-  env
-} from "./chunk-WHNDRO3N.js";
-import {
-  AuthInternalError
-} from "./chunk-U5663F2U.js";
-
-// src/cookie.ts
-import { parse, parseSetCookie, serialize } from "@aura-stack/router/cookie";
-var COOKIE_NAME = "aura-auth";
-var defaultCookieOptions = {
-  httpOnly: true,
-  sameSite: "lax",
-  path: "/",
-  maxAge: 60 * 60 * 24 * 15
-};
-var defaultStandardCookieConfig = {
-  secure: false,
-  httpOnly: true
-};
-var defaultSecureCookieConfig = {
-  secure: true,
-  httpOnly: true
-};
-var defaultHostCookieConfig = {
-  secure: true,
-  httpOnly: true,
-  path: "/",
-  domain: void 0
-};
-var oauthCookieOptions = {
-  httpOnly: true,
-  maxAge: 5 * 60,
-  sameSite: "lax",
-  expires: new Date(Date.now() + 5 * 60 * 1e3)
-};
-var setCookie = (cookieName, value, options) => {
-  return serialize(cookieName, value, options);
-};
-var expiredCookieAttributes = {
-  ...defaultCookieOptions,
-  expires: /* @__PURE__ */ new Date(0),
-  maxAge: 0,
-  secure: true
-};
-var getCookie = (request, cookieName) => {
-  const cookies = request instanceof Request ? request.headers.get("Cookie") : request.get("Cookie");
-  if (!cookies) {
-    throw new AuthInternalError("COOKIE_NOT_FOUND", "No cookies found. There is no active session");
-  }
-  const value = parse(cookies)[cookieName];
-  if (!value) {
-    throw new AuthInternalError("COOKIE_NOT_FOUND", `Cookie "${cookieName}" not found. There is no active session`);
-  }
-  return value;
-};
-var getSetCookie = (response, cookieName) => {
-  const cookies = response.headers.getSetCookie();
-  if (!cookies) {
-    throw new AuthInternalError("COOKIE_NOT_FOUND", "No cookies found in response.");
-  }
-  const strCookie = cookies.find((cookie) => cookie.startsWith(`${cookieName}=`));
-  if (!strCookie) {
-    throw new AuthInternalError("COOKIE_NOT_FOUND", `Cookie "${cookieName}" not found in response.`);
-  }
-  return parseSetCookie(strCookie).value;
-};
-var createSessionCookie = async (jose, session) => {
-  try {
-    const encoded = await jose.encodeJWT(session);
-    return encoded;
-  } catch (error) {
-    throw new AuthInternalError("INVALID_JWT_TOKEN", "Failed to create session cookie", { cause: error });
-  }
-};
-var defineSecureCookieOptions = (useSecure, attributes, strategy, logger) => {
-  if (!attributes.httpOnly) {
-    logger?.log("COOKIE_HTTPONLY_DISABLED");
-  }
-  if (attributes.domain === "*") {
-    attributes.domain = void 0;
-    logger?.log("COOKIE_WILDCARD_DOMAIN");
-  }
-  if (!useSecure) {
-    if (attributes.secure) {
-      logger?.log("COOKIE_SECURE_DISABLED");
-    }
-    if (attributes.sameSite == "none") {
-      attributes.sameSite = "lax";
-      logger?.log("COOKIE_SAMESITE_NONE_WITHOUT_SECURE");
-    }
-    if (env.NODE_ENV === "production") {
-      logger?.log("COOKIE_INSECURE_IN_PRODUCTION");
-    }
-    if (strategy === "host") {
-      logger?.log("COOKIE_HOST_STRATEGY_INSECURE");
-    }
-    return {
-      ...defaultCookieOptions,
-      ...attributes,
-      ...defaultStandardCookieConfig
-    };
-  }
-  return strategy === "host" ? {
-    ...defaultCookieOptions,
-    ...attributes,
-    ...defaultHostCookieConfig
-  } : { ...defaultCookieOptions, ...attributes, ...defaultSecureCookieConfig };
-};
-var createCookieStore = (useSecure, prefix, overrides, logger) => {
-  prefix ??= COOKIE_NAME;
-  const securePrefix = useSecure ? "__Secure-" : "";
-  const hostPrefix = useSecure ? "__Host-" : "";
-  return {
-    sessionToken: {
-      name: `${securePrefix}${prefix}.${overrides?.sessionToken?.name ?? "session_token"}`,
-      attributes: defineSecureCookieOptions(
-        useSecure,
-        {
-          ...defaultCookieOptions,
-          ...overrides?.sessionToken?.attributes
-        },
-        overrides?.sessionToken?.attributes?.strategy ?? "secure",
-        logger
-      )
-    },
-    state: {
-      name: `${securePrefix}${prefix}.${overrides?.state?.name ?? "state"}`,
-      attributes: defineSecureCookieOptions(
-        useSecure,
-        {
-          ...oauthCookieOptions,
-          ...overrides?.state?.attributes
-        },
-        overrides?.state?.attributes?.strategy ?? "secure",
-        logger
-      )
-    },
-    csrfToken: {
-      name: `${hostPrefix}${prefix}.${overrides?.csrfToken?.name ?? "csrf_token"}`,
-      attributes: defineSecureCookieOptions(
-        useSecure,
-        {
-          ...overrides?.csrfToken?.attributes,
-          ...defaultHostCookieConfig,
-          sameSite: "strict"
-        },
-        overrides?.csrfToken?.attributes?.strategy ?? "host",
-        logger
-      )
-    },
-    redirectTo: {
-      name: `${securePrefix}${prefix}.${overrides?.redirectTo?.name ?? "redirect_to"}`,
-      attributes: defineSecureCookieOptions(
-        useSecure,
-        {
-          ...oauthCookieOptions,
-          ...overrides?.redirectTo?.attributes
-        },
-        overrides?.redirectTo?.attributes?.strategy ?? "secure",
-        logger
-      )
-    },
-    redirectURI: {
-      name: `${securePrefix}${prefix}.${overrides?.redirectURI?.name ?? "redirect_uri"}`,
-      attributes: defineSecureCookieOptions(
-        useSecure,
-        {
-          ...oauthCookieOptions,
-          ...overrides?.redirectURI?.attributes
-        },
-        overrides?.redirectURI?.attributes?.strategy ?? "secure",
-        logger
-      )
-    },
-    codeVerifier: {
-      name: `${securePrefix}${prefix}.${overrides?.codeVerifier?.name ?? "code_verifier"}`,
-      attributes: defineSecureCookieOptions(
-        useSecure,
-        {
-          ...oauthCookieOptions,
-          ...overrides?.codeVerifier?.attributes
-        },
-        overrides?.codeVerifier?.attributes?.strategy ?? "secure",
-        logger
-      )
-    }
-  };
-};
-
-export {
-  COOKIE_NAME,
-  defaultCookieOptions,
-  defaultStandardCookieConfig,
-  defaultSecureCookieConfig,
-  defaultHostCookieConfig,
-  setCookie,
-  expiredCookieAttributes,
-  getCookie,
-  getSetCookie,
-  createSessionCookie,
-  defineSecureCookieOptions,
-  createCookieStore
-};

package/dist/chunk-ZNCZVF6U.js

@@ -1,14 +0,0 @@
-// src/request.ts
-var fetchAsync = async (url, options = {}, timeout = 5e3) => {
-  const controller = new AbortController();
-  const timeoutId = setTimeout(() => controller.abort(), timeout);
-  const response = await fetch(url, {
-    ...options,
-    signal: controller.signal
-  }).finally(() => clearTimeout(timeoutId));
-  return response;
-};
-
-export {
-  fetchAsync
-};

package/dist/client/client.cjs

@@ -1,135 +0,0 @@
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-
-// src/client/client.ts
-var client_exports = {};
-__export(client_exports, {
-  createAuthClient: () => createAuthClient,
-  createClient: () => createClient
-});
-module.exports = __toCommonJS(client_exports);
-
-// src/errors.ts
-var AuthClientError = class extends Error {
-  type = "AUTH_CLIENT_ERROR";
-  code;
-  constructor(code, message, options) {
-    super(message, options);
-    this.code = code;
-    this.name = new.target.name;
-    Error.captureStackTrace(this, new.target);
-  }
-};
-var isNativeError = (error) => {
-  return error instanceof Error;
-};
-
-// src/client/client.ts
-var import_router = require("@aura-stack/router");
-var createClient = import_router.createClient;
-var createAuthClient = (options) => {
-  if (typeof window === "undefined" && !options.baseURL) {
-    throw new AuthClientError("`baseURL` is required when createAuthClient is used outside the browser.");
-  }
-  const client = createClient({
-    cache: "no-store",
-    credentials: "include",
-    baseURL: options.baseURL ?? window.location.origin,
-    ...options
-  });
-  const getCSRFToken = async () => {
-    try {
-      const response = await client.get("/csrfToken");
-      if (!response.ok) return null;
-      const data = await response.json();
-      return data.csrfToken;
-    } catch (error) {
-      console.error("Error fetching CSRF token:", error);
-      return null;
-    }
-  };
-  const getSession = async () => {
-    try {
-      const response = await client.get("/session");
-      if (!response.ok) return null;
-      const session = await response.json();
-      if (!session?.authenticated) return null;
-      return session.session;
-    } catch (error) {
-      console.error("Error fetching session:", error);
-      return null;
-    }
-  };
-  const signIn = async (oauth, options2) => {
-    try {
-      const response = await client.get("/signIn/:oauth", {
-        params: {
-          oauth
-        },
-        searchParams: {
-          ...options2,
-          redirect: false
-        }
-      });
-      const json = await response.json();
-      if ((options2?.redirect ?? true) && typeof window !== "undefined" && json?.signInURL) {
-        window.location.assign(json.signInURL);
-      }
-      return json;
-    } catch (error) {
-      console.error("Error during sign-in:", error);
-      return { redirect: false, signInURL: "/" };
-    }
-  };
-  const signOut = async (options2) => {
-    try {
-      const csrfToken = await getCSRFToken();
-      if (!csrfToken) {
-        throw new AuthClientError("Failed to fetch CSRF token for sign-out.");
-      }
-      const response = await client.post("/signOut", {
-        searchParams: {
-          redirectTo: options2?.redirectTo ?? "/",
-          token_type_hint: "session_token"
-        },
-        headers: {
-          "X-CSRF-Token": csrfToken
-        }
-      });
-      const json = await response.json();
-      if ((options2?.redirect ?? true) && typeof window !== "undefined" && json?.url) {
-        window.location.assign(json.url);
-      }
-      return json;
-    } catch (error) {
-      console.error("Error during sign-out:", error);
-      throw isNativeError(error) ? error : new AuthClientError("Sign-out failed.", "The sign-out request failed.", { cause: error });
-    }
-  };
-  return {
-    getSession,
-    signIn,
-    signOut
-  };
-};
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  createAuthClient,
-  createClient
-});

package/dist/client/client.d.ts

@@ -1,85 +0,0 @@
-import { l as AuthClientOptions, m as Session, B as BuiltInOAuthProvider, n as SignInOptions, o as SignOutOptions } from '../index-_aXtxb_s.js';
-import '@aura-stack/router/types';
-import * as zod_v4_core from 'zod/v4/core';
-import * as zod from 'zod';
-import * as _aura_stack_router from '@aura-stack/router';
-import { LiteralUnion } from '../@types/utility.js';
-import '../schemas.js';
-import 'zod/v4';
-import '@aura-stack/jose';
-import '@aura-stack/jose/jose';
-import '@aura-stack/jose/crypto';
-import '@aura-stack/router/cookie';
-import 'jose';
-
-declare const createClient: (options: _aura_stack_router.ClientOptions) => _aura_stack_router.Client<[_aura_stack_router.RouteEndpoint<"GET", "/signIn/:oauth", {
-    schemas?: {
-        params: zod.ZodObject<{
-            oauth: zod.ZodEnum<{
-                [x: string & Record<never, never>]: string & Record<never, never>;
-                github: "github";
-                bitbucket: "bitbucket";
-                figma: "figma";
-                discord: "discord";
-                gitlab: "gitlab";
-                spotify: "spotify";
-                x: "x";
-                strava: "strava";
-                mailchimp: "mailchimp";
-                pinterest: "pinterest";
-                twitch: "twitch";
-                notion: "notion";
-                dropbox: "dropbox";
-                atlassian: "atlassian";
-            }>;
-        }, zod_v4_core.$strip>;
-        searchParams: zod.ZodObject<{
-            redirect: zod.ZodDefault<zod.ZodOptional<zod.ZodCodec<zod.ZodString, zod.ZodBoolean>>>;
-            redirectTo: zod.ZodOptional<zod.ZodString>;
-        }, zod_v4_core.$strip>;
-    } | undefined;
-}>, _aura_stack_router.RouteEndpoint<"GET", "/callback/:oauth", {
-    schemas?: {
-        params: zod.ZodObject<{
-            oauth: zod.ZodEnum<{
-                [x: string & Record<never, never>]: string & Record<never, never>;
-                github: "github";
-                bitbucket: "bitbucket";
-                figma: "figma";
-                discord: "discord";
-                gitlab: "gitlab";
-                spotify: "spotify";
-                x: "x";
-                strava: "strava";
-                mailchimp: "mailchimp";
-                pinterest: "pinterest";
-                twitch: "twitch";
-                notion: "notion";
-                dropbox: "dropbox";
-                atlassian: "atlassian";
-            }>;
-        }, zod_v4_core.$strip>;
-        searchParams: zod.ZodObject<{
-            code: zod.ZodString;
-            state: zod.ZodString;
-        }, zod_v4_core.$strip>;
-    } | undefined;
-}>, _aura_stack_router.RouteEndpoint<"GET", "/session", {
-    schemas?: _aura_stack_router.EndpointSchemas | undefined;
-}>, _aura_stack_router.RouteEndpoint<"POST", "/signOut", {
-    schemas?: {
-        searchParams: zod.ZodObject<{
-            token_type_hint: zod.ZodLiteral<"session_token">;
-            redirectTo: zod.ZodOptional<zod.ZodString>;
-        }, zod_v4_core.$strip>;
-    } | undefined;
-}>, _aura_stack_router.RouteEndpoint<"GET", "/csrfToken", {
-    schemas?: _aura_stack_router.EndpointSchemas | undefined;
-}>]>;
-declare const createAuthClient: (options: AuthClientOptions) => {
-    getSession: () => Promise<Session | null>;
-    signIn: (oauth: LiteralUnion<BuiltInOAuthProvider>, options?: SignInOptions) => Promise<any>;
-    signOut: (options?: SignOutOptions) => Promise<any>;
-};
-
-export { createAuthClient, createClient };

package/dist/client/client.js

@@ -1,9 +0,0 @@
-import {
-  createAuthClient,
-  createClient
-} from "../chunk-4RWSYUKX.js";
-import "../chunk-U5663F2U.js";
-export {
-  createAuthClient,
-  createClient
-};