@aura-stack/auth 0.5.0 → 0.6.0

package/dist/context.d.ts

@@ -1,16 +0,0 @@
-import { A as AuthConfig, I as InternalContext } from './index-_aXtxb_s.js';
-import 'zod';
-import './schemas.js';
-import 'zod/v4';
-import '@aura-stack/jose';
-import '@aura-stack/jose/jose';
-import '@aura-stack/jose/crypto';
-import '@aura-stack/router/cookie';
-import './@types/utility.js';
-import 'jose';
-import '@aura-stack/router';
-import 'zod/v4/core';
-
-declare const createContext: (config?: AuthConfig) => InternalContext;
-
-export { createContext };

package/dist/context.js

@@ -1,28 +0,0 @@
-import {
-  createContext
-} from "./chunk-2IR674WX.js";
-import "./chunk-PDP3PHB3.js";
-import "./chunk-LDU7A2JE.js";
-import "./chunk-PHYNROD4.js";
-import "./chunk-E6G5YCI6.js";
-import "./chunk-IPKO6UQN.js";
-import "./chunk-54CZPKR4.js";
-import "./chunk-2GQLSIJ2.js";
-import "./chunk-EEE7UM5T.js";
-import "./chunk-C3A37LQC.js";
-import "./chunk-4YHJ4IEQ.js";
-import "./chunk-OVHNRULD.js";
-import "./chunk-QQEKY4XP.js";
-import "./chunk-KMMAZFSJ.js";
-import "./chunk-FW4W3REU.js";
-import "./chunk-5LZ7TOM3.js";
-import "./chunk-U4RK4LKJ.js";
-import "./chunk-2A5B7GWR.js";
-import "./chunk-UZQJJD6A.js";
-import "./chunk-LX3TJ2TJ.js";
-import "./chunk-XY5R3EHH.js";
-import "./chunk-WHNDRO3N.js";
-import "./chunk-U5663F2U.js";
-export {
-  createContext
-};

package/dist/cookie.cjs

@@ -1,277 +0,0 @@
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-
-// src/cookie.ts
-var cookie_exports = {};
-__export(cookie_exports, {
-  COOKIE_NAME: () => COOKIE_NAME,
-  createCookieStore: () => createCookieStore,
-  createSessionCookie: () => createSessionCookie,
-  defaultCookieOptions: () => defaultCookieOptions,
-  defaultHostCookieConfig: () => defaultHostCookieConfig,
-  defaultSecureCookieConfig: () => defaultSecureCookieConfig,
-  defaultStandardCookieConfig: () => defaultStandardCookieConfig,
-  defineSecureCookieOptions: () => defineSecureCookieOptions,
-  expiredCookieAttributes: () => expiredCookieAttributes,
-  getCookie: () => getCookie,
-  getSetCookie: () => getSetCookie,
-  setCookie: () => setCookie
-});
-module.exports = __toCommonJS(cookie_exports);
-
-// src/env.ts
-var import_meta = {};
-var env = new Proxy({}, {
-  get(_, prop) {
-    if (typeof prop !== "string") return void 0;
-    const hasProperty = (process2) => {
-      return process2 && Object.prototype.hasOwnProperty.call(process2, prop);
-    };
-    try {
-      if (typeof process !== "undefined" && hasProperty(process.env)) {
-        return process.env[prop];
-      }
-      if (typeof import_meta !== "undefined" && hasProperty(import_meta.env)) {
-        return import_meta.env[prop];
-      }
-      if (typeof Deno !== "undefined" && Deno.env?.get) {
-        return Deno.env.get(prop);
-      }
-      if (typeof Bun !== "undefined" && hasProperty(Bun.env)) {
-        return Bun.env[prop];
-      }
-      const globalValue = globalThis[prop];
-      return typeof globalValue === "string" ? globalValue : void 0;
-    } catch {
-      return void 0;
-    }
-  }
-});
-
-// src/cookie.ts
-var import_cookie = require("@aura-stack/router/cookie");
-
-// src/errors.ts
-var AuthInternalError = class extends Error {
-  type = "AUTH_INTERNAL_ERROR";
-  code;
-  constructor(code, message, options) {
-    super(message, options);
-    this.code = code;
-    this.name = new.target.name;
-    Error.captureStackTrace(this, new.target);
-  }
-};
-
-// src/cookie.ts
-var COOKIE_NAME = "aura-auth";
-var defaultCookieOptions = {
-  httpOnly: true,
-  sameSite: "lax",
-  path: "/",
-  maxAge: 60 * 60 * 24 * 15
-};
-var defaultStandardCookieConfig = {
-  secure: false,
-  httpOnly: true
-};
-var defaultSecureCookieConfig = {
-  secure: true,
-  httpOnly: true
-};
-var defaultHostCookieConfig = {
-  secure: true,
-  httpOnly: true,
-  path: "/",
-  domain: void 0
-};
-var oauthCookieOptions = {
-  httpOnly: true,
-  maxAge: 5 * 60,
-  sameSite: "lax",
-  expires: new Date(Date.now() + 5 * 60 * 1e3)
-};
-var setCookie = (cookieName, value, options) => {
-  return (0, import_cookie.serialize)(cookieName, value, options);
-};
-var expiredCookieAttributes = {
-  ...defaultCookieOptions,
-  expires: /* @__PURE__ */ new Date(0),
-  maxAge: 0,
-  secure: true
-};
-var getCookie = (request, cookieName) => {
-  const cookies = request instanceof Request ? request.headers.get("Cookie") : request.get("Cookie");
-  if (!cookies) {
-    throw new AuthInternalError("COOKIE_NOT_FOUND", "No cookies found. There is no active session");
-  }
-  const value = (0, import_cookie.parse)(cookies)[cookieName];
-  if (!value) {
-    throw new AuthInternalError("COOKIE_NOT_FOUND", `Cookie "${cookieName}" not found. There is no active session`);
-  }
-  return value;
-};
-var getSetCookie = (response, cookieName) => {
-  const cookies = response.headers.getSetCookie();
-  if (!cookies) {
-    throw new AuthInternalError("COOKIE_NOT_FOUND", "No cookies found in response.");
-  }
-  const strCookie = cookies.find((cookie) => cookie.startsWith(`${cookieName}=`));
-  if (!strCookie) {
-    throw new AuthInternalError("COOKIE_NOT_FOUND", `Cookie "${cookieName}" not found in response.`);
-  }
-  return (0, import_cookie.parseSetCookie)(strCookie).value;
-};
-var createSessionCookie = async (jose, session) => {
-  try {
-    const encoded = await jose.encodeJWT(session);
-    return encoded;
-  } catch (error) {
-    throw new AuthInternalError("INVALID_JWT_TOKEN", "Failed to create session cookie", { cause: error });
-  }
-};
-var defineSecureCookieOptions = (useSecure, attributes, strategy, logger) => {
-  if (!attributes.httpOnly) {
-    logger?.log("COOKIE_HTTPONLY_DISABLED");
-  }
-  if (attributes.domain === "*") {
-    attributes.domain = void 0;
-    logger?.log("COOKIE_WILDCARD_DOMAIN");
-  }
-  if (!useSecure) {
-    if (attributes.secure) {
-      logger?.log("COOKIE_SECURE_DISABLED");
-    }
-    if (attributes.sameSite == "none") {
-      attributes.sameSite = "lax";
-      logger?.log("COOKIE_SAMESITE_NONE_WITHOUT_SECURE");
-    }
-    if (env.NODE_ENV === "production") {
-      logger?.log("COOKIE_INSECURE_IN_PRODUCTION");
-    }
-    if (strategy === "host") {
-      logger?.log("COOKIE_HOST_STRATEGY_INSECURE");
-    }
-    return {
-      ...defaultCookieOptions,
-      ...attributes,
-      ...defaultStandardCookieConfig
-    };
-  }
-  return strategy === "host" ? {
-    ...defaultCookieOptions,
-    ...attributes,
-    ...defaultHostCookieConfig
-  } : { ...defaultCookieOptions, ...attributes, ...defaultSecureCookieConfig };
-};
-var createCookieStore = (useSecure, prefix, overrides, logger) => {
-  prefix ??= COOKIE_NAME;
-  const securePrefix = useSecure ? "__Secure-" : "";
-  const hostPrefix = useSecure ? "__Host-" : "";
-  return {
-    sessionToken: {
-      name: `${securePrefix}${prefix}.${overrides?.sessionToken?.name ?? "session_token"}`,
-      attributes: defineSecureCookieOptions(
-        useSecure,
-        {
-          ...defaultCookieOptions,
-          ...overrides?.sessionToken?.attributes
-        },
-        overrides?.sessionToken?.attributes?.strategy ?? "secure",
-        logger
-      )
-    },
-    state: {
-      name: `${securePrefix}${prefix}.${overrides?.state?.name ?? "state"}`,
-      attributes: defineSecureCookieOptions(
-        useSecure,
-        {
-          ...oauthCookieOptions,
-          ...overrides?.state?.attributes
-        },
-        overrides?.state?.attributes?.strategy ?? "secure",
-        logger
-      )
-    },
-    csrfToken: {
-      name: `${hostPrefix}${prefix}.${overrides?.csrfToken?.name ?? "csrf_token"}`,
-      attributes: defineSecureCookieOptions(
-        useSecure,
-        {
-          ...overrides?.csrfToken?.attributes,
-          ...defaultHostCookieConfig,
-          sameSite: "strict"
-        },
-        overrides?.csrfToken?.attributes?.strategy ?? "host",
-        logger
-      )
-    },
-    redirectTo: {
-      name: `${securePrefix}${prefix}.${overrides?.redirectTo?.name ?? "redirect_to"}`,
-      attributes: defineSecureCookieOptions(
-        useSecure,
-        {
-          ...oauthCookieOptions,
-          ...overrides?.redirectTo?.attributes
-        },
-        overrides?.redirectTo?.attributes?.strategy ?? "secure",
-        logger
-      )
-    },
-    redirectURI: {
-      name: `${securePrefix}${prefix}.${overrides?.redirectURI?.name ?? "redirect_uri"}`,
-      attributes: defineSecureCookieOptions(
-        useSecure,
-        {
-          ...oauthCookieOptions,
-          ...overrides?.redirectURI?.attributes
-        },
-        overrides?.redirectURI?.attributes?.strategy ?? "secure",
-        logger
-      )
-    },
-    codeVerifier: {
-      name: `${securePrefix}${prefix}.${overrides?.codeVerifier?.name ?? "code_verifier"}`,
-      attributes: defineSecureCookieOptions(
-        useSecure,
-        {
-          ...oauthCookieOptions,
-          ...overrides?.codeVerifier?.attributes
-        },
-        overrides?.codeVerifier?.attributes?.strategy ?? "secure",
-        logger
-      )
-    }
-  };
-};
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  COOKIE_NAME,
-  createCookieStore,
-  createSessionCookie,
-  defaultCookieOptions,
-  defaultHostCookieConfig,
-  defaultSecureCookieConfig,
-  defaultStandardCookieConfig,
-  defineSecureCookieOptions,
-  expiredCookieAttributes,
-  getCookie,
-  getSetCookie,
-  setCookie
-});

package/dist/cookie.d.ts

@@ -1,89 +0,0 @@
-import { SerializeOptions } from '@aura-stack/router/cookie';
-import { C as CookieConfig, a as InternalLogger, b as CookieStoreConfig, c as AuthRuntimeConfig, U as User } from './index-_aXtxb_s.js';
-import 'zod';
-import './schemas.js';
-import 'zod/v4';
-import '@aura-stack/jose';
-import '@aura-stack/jose/jose';
-import '@aura-stack/jose/crypto';
-import './@types/utility.js';
-import 'jose';
-import '@aura-stack/router';
-import 'zod/v4/core';
-
-/**
- * Prefix for all cookies set by Aura Auth.
- */
-declare const COOKIE_NAME = "aura-auth";
-/**
- * Default cookie options used by Aura Auth.
- */
-declare const defaultCookieOptions: SerializeOptions;
-declare const defaultStandardCookieConfig: SerializeOptions;
-/**
- * Default cookie options for "__Secure-" cookies.
- * @see https://httpwg.org/http-extensions/draft-ietf-httpbis-rfc6265bis.html#name-the-__secure-prefix
- */
-declare const defaultSecureCookieConfig: SerializeOptions;
-/**
- * Default cookie options for "__Host-" cookies.
- * @see https://httpwg.org/http-extensions/draft-ietf-httpbis-rfc6265bis.html#name-the-__host-prefix
- */
-declare const defaultHostCookieConfig: SerializeOptions;
-/**
- * Set a cookie with the given name, value and `SerializeOptions`; supports secure
- * cookies with the `__Secure-` and `__Host-` prefixes.
- *
- * Cookie attributes are serialized in the following order:
- * Expires, Max-Age, Domain, Path, Secure, HttpOnly, SameSite, Partitioned, Priority.
- */
-declare const setCookie: (cookieName: string, value: string, options?: SerializeOptions) => string;
-declare const expiredCookieAttributes: SerializeOptions;
-/**
- * Get a cookie by name from the request.
- *
- * @param request The incoming request object
- * @param cookie Cookie name to retrieve
- * @returns The value of the cookie or throw an error if not found
- */
-declare const getCookie: (request: Request | Headers, cookieName: string) => string;
-/**
- * Get a Set-Cookie header value by cookie name from the response.
- *
- * @param response The response object
- * @param cookieName Cookie name to retrieve
- * @returns The value of the Set-Cookie header or throw an error if not found
- */
-declare const getSetCookie: (response: Response, cookieName: string) => string | undefined;
-/**
- * Create a session cookie containing a signed and encrypted JWT, using the
- * `@aura-stack/jose` package for the encoding.
- *
- * @param jose - Jose Instance
- * @param session - The JWT payload to be encoded in the session cookie
- * @returns The serialized session cookie string
- */
-declare const createSessionCookie: (jose: AuthRuntimeConfig["jose"], session: User) => Promise<string>;
-/**
- * Defines the cookie configuration based on the request security and cookie options passed
- * in the Aura Auth configuration (`createAuth` function). This function ensures the correct
- * cookie prefixes and security attributes are applied based on whether the request is secure
- * (HTTPS) or not.
- *
- * @see https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/X-Forwarded-Proto
- * @see https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Forwarded
- * @param useSecure Whether the request is secure (HTTPS)
- * @param attributes The cookie attributes to be applied
- * @param strategy The cookie strategy: "host", "secure", or "standard"
- * @returns The finalized cookie options to be used for setting cookies
- */
-declare const defineSecureCookieOptions: (useSecure: boolean, attributes: SerializeOptions, strategy: "host" | "secure" | "standard", logger?: InternalLogger) => SerializeOptions;
-/**
- * @param useSecure Whether the request is secure (HTTPS)
- * @param prefix Optional prefix added to all cookie names
- * @param overrides Optional overrides for individual cookie configurations
- * @returns The complete cookie store configuration
- */
-declare const createCookieStore: (useSecure: boolean, prefix?: string, overrides?: CookieConfig["overrides"], logger?: InternalLogger) => CookieStoreConfig;
-
-export { COOKIE_NAME, createCookieStore, createSessionCookie, defaultCookieOptions, defaultHostCookieConfig, defaultSecureCookieConfig, defaultStandardCookieConfig, defineSecureCookieOptions, expiredCookieAttributes, getCookie, getSetCookie, setCookie };

package/dist/cookie.js

@@ -1,30 +0,0 @@
-import {
-  COOKIE_NAME,
-  createCookieStore,
-  createSessionCookie,
-  defaultCookieOptions,
-  defaultHostCookieConfig,
-  defaultSecureCookieConfig,
-  defaultStandardCookieConfig,
-  defineSecureCookieOptions,
-  expiredCookieAttributes,
-  getCookie,
-  getSetCookie,
-  setCookie
-} from "./chunk-XY5R3EHH.js";
-import "./chunk-WHNDRO3N.js";
-import "./chunk-U5663F2U.js";
-export {
-  COOKIE_NAME,
-  createCookieStore,
-  createSessionCookie,
-  defaultCookieOptions,
-  defaultHostCookieConfig,
-  defaultSecureCookieConfig,
-  defaultStandardCookieConfig,
-  defineSecureCookieOptions,
-  expiredCookieAttributes,
-  getCookie,
-  getSetCookie,
-  setCookie
-};