@aura-stack/auth 0.5.0 → 0.6.0

package/dist/utils.cjs

@@ -1,329 +0,0 @@
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-
-// src/utils.ts
-var utils_exports = {};
-__export(utils_exports, {
-  AURA_AUTH_VERSION: () => AURA_AUTH_VERSION,
-  createBasicAuthHeader: () => createBasicAuthHeader,
-  createErrorHandler: () => createErrorHandler,
-  createStructuredData: () => createStructuredData,
-  equals: () => equals,
-  extractPath: () => extractPath,
-  formatZodError: () => formatZodError,
-  getBaseURL: () => getBaseURL,
-  getErrorName: () => getErrorName,
-  toCastCase: () => toCastCase,
-  toISOString: () => toISOString,
-  toSnakeCase: () => toSnakeCase,
-  toUpperCase: () => toUpperCase,
-  useSecureCookies: () => useSecureCookies,
-  validateRedirectTo: () => validateRedirectTo
-});
-module.exports = __toCommonJS(utils_exports);
-var import_router = require("@aura-stack/router");
-
-// src/errors.ts
-var OAuthProtocolError = class extends Error {
-  type = "OAUTH_PROTOCOL_ERROR";
-  error;
-  errorURI;
-  constructor(error, description, errorURI, options) {
-    super(description, options);
-    this.error = error;
-    this.errorURI = errorURI;
-    this.name = new.target.name;
-    Error.captureStackTrace(this, new.target);
-  }
-};
-var AuthInternalError = class extends Error {
-  type = "AUTH_INTERNAL_ERROR";
-  code;
-  constructor(code, message, options) {
-    super(message, options);
-    this.code = code;
-    this.name = new.target.name;
-    Error.captureStackTrace(this, new.target);
-  }
-};
-var AuthSecurityError = class extends Error {
-  type = "AUTH_SECURITY_ERROR";
-  code;
-  constructor(code, message, options) {
-    super(message, options);
-    this.code = code;
-    this.name = new.target.name;
-    Error.captureStackTrace(this, new.target);
-  }
-};
-var isOAuthProtocolError = (error) => {
-  return error instanceof OAuthProtocolError;
-};
-var isAuthInternalError = (error) => {
-  return error instanceof AuthInternalError;
-};
-var isAuthSecurityError = (error) => {
-  return error instanceof AuthSecurityError;
-};
-
-// src/env.ts
-var import_meta = {};
-var env = new Proxy({}, {
-  get(_, prop) {
-    if (typeof prop !== "string") return void 0;
-    const hasProperty = (process2) => {
-      return process2 && Object.prototype.hasOwnProperty.call(process2, prop);
-    };
-    try {
-      if (typeof process !== "undefined" && hasProperty(process.env)) {
-        return process.env[prop];
-      }
-      if (typeof import_meta !== "undefined" && hasProperty(import_meta.env)) {
-        return import_meta.env[prop];
-      }
-      if (typeof Deno !== "undefined" && Deno.env?.get) {
-        return Deno.env.get(prop);
-      }
-      if (typeof Bun !== "undefined" && hasProperty(Bun.env)) {
-        return Bun.env[prop];
-      }
-      const globalValue = globalThis[prop];
-      return typeof globalValue === "string" ? globalValue : void 0;
-    } catch {
-      return void 0;
-    }
-  }
-});
-var getEnv = (key) => {
-  const keys = [`AURA_AUTH_${key.toUpperCase()}`, `AURA_${key.toUpperCase()}`, `AUTH_${key.toUpperCase()}`, key.toUpperCase()];
-  return env[keys.find((k) => env[k]) ?? ""];
-};
-
-// src/assert.ts
-var import_crypto = require("@aura-stack/jose/crypto");
-var unsafeChars = [
-  "<",
-  ">",
-  '"',
-  "`",
-  " ",
-  "\r",
-  "\n",
-  "	",
-  "\\",
-  "%2F",
-  "%5C",
-  "%2f",
-  "%5c",
-  "\r\n",
-  "%0A",
-  "%0D",
-  "%0a",
-  "%0d",
-  "..",
-  "//",
-  "///",
-  "...",
-  "%20",
-  "\0"
-];
-var isValidURL = (value) => {
-  if (!new RegExp(/^https?:\/\/[^/]/).test(value)) {
-    return false;
-  }
-  const match = value.match(/^(https?:\/\/)(.*)$/);
-  if (!match) return false;
-  const rest = match[2];
-  for (const char of unsafeChars) {
-    if (rest.includes(char)) return false;
-  }
-  const regex = /^https?:\/\/(?:[a-zA-Z0-9._-]+|localhost|\[[0-9a-fA-F:]+\])(?::\d{1,5})?(?:\/[a-zA-Z0-9._~!$&'()?#*+,;=:@-]*)*\/?$/;
-  return regex.test(match[0]);
-};
-var isRelativeURL = (value) => {
-  if (value.length > 100) return false;
-  for (const char of unsafeChars) {
-    if (value.includes(char)) return false;
-  }
-  const regex = /^\/[a-zA-Z0-9\-_\/.?&=#]*\/?$/;
-  return regex.test(value);
-};
-
-// src/utils.ts
-var AURA_AUTH_VERSION = "0.4.0";
-var toSnakeCase = (str) => {
-  return str.replace(/([a-z0-9])([A-Z])/g, "$1_$2").replace(/([A-Z]+)([A-Z][a-z])/g, "$1_$2").toLowerCase().replace(/^_+/, "");
-};
-var toUpperCase = (str) => {
-  return str.toUpperCase();
-};
-var toCastCase = (obj, type = "snake") => {
-  return Object.entries(obj).reduce((previous, [key, value]) => {
-    const newKey = type === "snake" ? toSnakeCase(key) : toUpperCase(key);
-    return { ...previous, [newKey]: value };
-  }, {});
-};
-var equals = (a, b) => {
-  if (a === null || b === null || a === void 0 || b === void 0) return false;
-  return a === b;
-};
-var createErrorHandler = (logger) => {
-  return (error) => {
-    if ((0, import_router.isRouterError)(error)) {
-      const { message, status, statusText } = error;
-      logger?.log("ROUTER_INTERNAL_ERROR");
-      return Response.json({ type: "ROUTER_ERROR", code: "ROUTER_INTERNAL_ERROR", message }, { status, statusText });
-    }
-    if ((0, import_router.isInvalidZodSchemaError)(error)) {
-      logger?.log("INVALID_REQUEST");
-      return Response.json({ type: "ROUTER_ERROR", code: "INVALID_REQUEST", message: error.errors }, { status: 422 });
-    }
-    if (isOAuthProtocolError(error)) {
-      const { error: errorCode, message, type, errorURI } = error;
-      logger?.log("OAUTH_PROTOCOL_ERROR", {
-        structuredData: {
-          error: errorCode,
-          error_description: message,
-          error_uri: errorURI ?? ""
-        }
-      });
-      return Response.json(
-        {
-          type,
-          message
-        },
-        { status: 400 }
-      );
-    }
-    if (isAuthInternalError(error)) {
-      const { type, code, message } = error;
-      logger?.log("INVALID_OAUTH_CONFIGURATION", {
-        structuredData: {
-          error: code,
-          error_description: message
-        }
-      });
-      return Response.json(
-        {
-          type,
-          message
-        },
-        { status: 400 }
-      );
-    }
-    if (isAuthSecurityError(error)) {
-      const { type, code, message } = error;
-      logger?.log("INVALID_OAUTH_CONFIGURATION", {
-        structuredData: {
-          error: code,
-          error_description: message
-        }
-      });
-      return Response.json(
-        {
-          type,
-          code,
-          message
-        },
-        { status: 400 }
-      );
-    }
-    logger?.log("SERVER_ERROR");
-    return Response.json(
-      { type: "SERVER_ERROR", code: "SERVER_ERROR", message: "An unexpected error occurred" },
-      { status: 500 }
-    );
-  };
-};
-var getBaseURL = (request) => {
-  const url = new URL(request.url);
-  return `${url.origin}${url.pathname}`;
-};
-var toISOString = (date) => {
-  return new Date(date).toISOString();
-};
-var useSecureCookies = (request, trustedProxyHeaders) => {
-  const headers = request instanceof Headers ? request : request.headers;
-  const url = request instanceof Headers ? null : request.url;
-  return trustedProxyHeaders ? url?.startsWith("https://") || headers.get("X-Forwarded-Proto") === "https" || (headers.get("Forwarded")?.includes("proto=https") ?? false) : url?.startsWith("https://") ?? false;
-};
-var formatZodError = (error) => {
-  if (!error.issues || error.issues.length === 0) {
-    return {};
-  }
-  return error.issues.reduce((previous, issue) => {
-    const key = issue.path.join(".");
-    return {
-      ...previous,
-      [key]: {
-        code: issue.code,
-        message: issue.message
-      }
-    };
-  }, {});
-};
-var extractPath = (url) => {
-  const pathRegex = /^https?:\/\/[a-zA-Z0-9_\-\.]+(:\d+)?(\/.*)$/;
-  const match = url.match(pathRegex);
-  return match && match[2] ? match[2] : "/";
-};
-var createStructuredData = (data, sdID = "metadata") => {
-  const entries = Object.entries(data);
-  if (entries.length === 0) return `[${sdID}]`;
-  const values = entries.map(([key, value]) => `${key}="${String(value).replace(/(["\\\]])/g, "\\$1")}"`).join(" ");
-  return `[${sdID} ${values}]`;
-};
-var getErrorName = (error) => {
-  if (error instanceof Error) {
-    return error.name;
-  }
-  return typeof error === "string" ? error : "UnknownError";
-};
-var createBasicAuthHeader = (username, password) => {
-  const getUsername = getEnv(username.toUpperCase()) ?? username;
-  const getPassword = getEnv(password.toUpperCase()) ?? password;
-  if (!getUsername || !getPassword) {
-    throw new AuthInternalError("INVALID_OAUTH_CONFIGURATION", "Missing client credentials for OAuth provider configuration.");
-  }
-  const credentials = `${getUsername}:${getPassword}`;
-  return `Basic ${btoa(credentials)}`;
-};
-var validateRedirectTo = (url) => {
-  if (!isRelativeURL(url) && !isValidURL(url)) return "/";
-  if (isRelativeURL(url)) return url;
-  return "/";
-};
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  AURA_AUTH_VERSION,
-  createBasicAuthHeader,
-  createErrorHandler,
-  createStructuredData,
-  equals,
-  extractPath,
-  formatZodError,
-  getBaseURL,
-  getErrorName,
-  toCastCase,
-  toISOString,
-  toSnakeCase,
-  toUpperCase,
-  useSecureCookies,
-  validateRedirectTo
-});

package/dist/utils.d.ts

@@ -1,35 +0,0 @@
-import { RouterConfig } from '@aura-stack/router';
-import { ZodError } from 'zod';
-import { a as InternalLogger, f as APIErrorMap } from './index-_aXtxb_s.js';
-import './schemas.js';
-import 'zod/v4';
-import '@aura-stack/jose';
-import '@aura-stack/jose/jose';
-import '@aura-stack/jose/crypto';
-import '@aura-stack/router/cookie';
-import './@types/utility.js';
-import 'jose';
-import 'zod/v4/core';
-
-declare const AURA_AUTH_VERSION = "0.4.0";
-declare const toSnakeCase: (str: string) => string;
-declare const toUpperCase: (str: string) => string;
-declare const toCastCase: <Obj extends Record<string, string>, Type extends "snake" | "upper">(obj: Obj, type?: Type) => Type extends "snake" ? { [K in keyof Obj as `${string & K}`]: Obj[K]; } : { [K in keyof Obj as Uppercase<string & K>]: Obj[K]; };
-declare const equals: (a: string | number | undefined | null, b: string | number | undefined | null) => boolean;
-declare const createErrorHandler: (logger?: InternalLogger) => RouterConfig["onError"];
-declare const getBaseURL: (request: Request) => string;
-declare const toISOString: (date: Date | string | number) => string;
-declare const useSecureCookies: (request: Request | Headers, trustedProxyHeaders: boolean) => boolean;
-declare const formatZodError: <T extends Record<string, unknown> = Record<string, unknown>>(error: ZodError<T>) => APIErrorMap;
-declare const extractPath: (url: string) => string;
-declare const createStructuredData: (data: Record<string, string | number | boolean>, sdID?: string) => string;
-declare const getErrorName: (error: unknown) => string;
-declare const createBasicAuthHeader: (username: string, password: string) => string;
-/**
- * Validates and sanitizes redirect URLs to prevent open redirect attacks.
- * Only relative URLs (starting with /) are allowed; absolute URLs are
- * rejected and replaced with "/" to enforce same-origin redirects.
- */
-declare const validateRedirectTo: (url: string) => string;
-
-export { AURA_AUTH_VERSION, createBasicAuthHeader, createErrorHandler, createStructuredData, equals, extractPath, formatZodError, getBaseURL, getErrorName, toCastCase, toISOString, toSnakeCase, toUpperCase, useSecureCookies, validateRedirectTo };

package/dist/utils.js

@@ -1,36 +0,0 @@
-import {
-  AURA_AUTH_VERSION,
-  createBasicAuthHeader,
-  createErrorHandler,
-  createStructuredData,
-  equals,
-  extractPath,
-  formatZodError,
-  getBaseURL,
-  getErrorName,
-  toCastCase,
-  toISOString,
-  toSnakeCase,
-  toUpperCase,
-  useSecureCookies,
-  validateRedirectTo
-} from "./chunk-LX3TJ2TJ.js";
-import "./chunk-WHNDRO3N.js";
-import "./chunk-U5663F2U.js";
-export {
-  AURA_AUTH_VERSION,
-  createBasicAuthHeader,
-  createErrorHandler,
-  createStructuredData,
-  equals,
-  extractPath,
-  formatZodError,
-  getBaseURL,
-  getErrorName,
-  toCastCase,
-  toISOString,
-  toSnakeCase,
-  toUpperCase,
-  useSecureCookies,
-  validateRedirectTo
-};