@aura-stack/express 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025 Auth Stack Js
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,101 @@
+<div align="center">
+  
+<h1><b>@aura-stack/express</b></h1>
+
+**Type-safe Express middleware and utilities for the Aura Stack authentication library**
+
+[![npm version](https://img.shields.io/npm/v/@aura-stack/express.svg)](https://www.npmjs.com/package/@aura-stack/express)
+[![JSR version](https://jsr.io/badges/@aura-stack/express)](https://jsr.io/@aura-stack/express)
+[![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](https://opensource.org/licenses/MIT)
+
+[Official Docs](https://aura-stack-auth.vercel.app/docs) · [Express Package Docs](https://aura-stack-auth.vercel.app/docs/packages/express)
+
+</div>
+
+## Overview
+
+`@aura-stack/express` provides a seamless integration layer for **Express** applications using **Aura Auth**. It encapsulates the core authentication logic into standard Express middlewares, ensuring that your session state is correctly typed and accessible throughout your application's middleware chain.
+
+By leveraging TypeScript's global augmentation and middleware inference, it provides a "zero-effort" typed experience for your protected routes.
+
+## Features
+
+- **Standard Middleware** — Use `withAuth` as a standard middleware in your route definitions.
+- **Deep Type Inference** — Automatically infers your custom `User` and `Session` shapes from the initial configuration.
+- **Global Augmentation** — Adds first-class support for `res.locals.session` directly to Express types.
+- **Framework-Agnostic Core** — Bridge Web Request/Response API handlers to Express without sacrificing performance.
+- **Typed Propagation** — Middleware correctly propagates types to subsequent handlers in the route chain.
+
+## Installation
+
+```bash
+pnpm add @aura-stack/express
+```
+
+## Quick Start
+
+### 1. Configure Auth
+
+Create your authentication instance. This typically goes in a shared file like `lib/auth.ts`.
+
+```tsx
+import { createAuth } from "@aura-stack/express"
+
+export const auth = createAuth({
+  oauth: ["github"],
+  session: {
+    strategy: "jwt",
+    maxAge: 30 * 24 * 60 * 60, // 30 days
+  },
+})
+
+export const { toHandler, withAuth } = auth
+```
+
+### 2. Mount Auth Endpoints
+
+Mount the authentication endpoints on your desired base path (default: `/api/auth`).
+
+```tsx
+import express from "express"
+import { toHandler } from "./lib/auth"
+
+const app = express()
+
+// All Aura Auth routes (sign-in, sign-out, session, etc.)
+app.all("/api/auth/*", toHandler)
+```
+
+### 3. Protect Your Routes
+
+Use the `withAuth` middleware to protect routes. The session will be automatically available and **fully typed** in `res.locals.session`.
+
+```tsx
+import { withAuth } from "./lib/auth"
+
+app.get("/api/protected", withAuth, (req, res) => {
+  // session is automatically available and typed!
+  const session = res.locals.session
+
+  if (!session) {
+    return res.status(401).json({ error: "Unauthorized" })
+  }
+
+  // TypeScript knows about session.user.name, email, etc.
+  res.json({ message: `Hello, ${session.user.name}!` })
+})
+```
+
+## Documentation
+
+Visit the [**official documentation website**](https://aura-stack-auth.vercel.app) for more detailed guides and API references.
+
+## License
+
+Licensed under the [MIT License](../../LICENSE). © [Aura Stack](https://github.com/aura-stack-ts)
+
+---
+
+<p align="center">
+  Made with ❤️ by <a href="https://github.com/aura-stack-ts">Aura Stack team</a>
+</p>

package/dist/_core/cookies.cjs

@@ -0,0 +1 @@
+var e=require(`@aura-stack/auth/cookies`);Object.keys(e).forEach(function(t){t!==`default`&&!Object.prototype.hasOwnProperty.call(exports,t)&&Object.defineProperty(exports,t,{enumerable:!0,get:function(){return e[t]}})});

package/dist/_core/cookies.d.ts

@@ -0,0 +1 @@
+export * from "@aura-stack/auth/cookies";

package/dist/_core/cookies.js

@@ -0,0 +1 @@
+export*from"@aura-stack/auth/cookies";

package/dist/_core/crypto.cjs

@@ -0,0 +1 @@
+var e=require(`@aura-stack/auth/crypto`);Object.keys(e).forEach(function(t){t!==`default`&&!Object.prototype.hasOwnProperty.call(exports,t)&&Object.defineProperty(exports,t,{enumerable:!0,get:function(){return e[t]}})});

package/dist/_core/crypto.d.ts

@@ -0,0 +1 @@
+export * from "@aura-stack/auth/crypto";

package/dist/_core/crypto.js

@@ -0,0 +1 @@
+export*from"@aura-stack/auth/crypto";

package/dist/_core/identity.cjs

@@ -0,0 +1 @@
+var e=require(`@aura-stack/auth/identity`);Object.keys(e).forEach(function(t){t!==`default`&&!Object.prototype.hasOwnProperty.call(exports,t)&&Object.defineProperty(exports,t,{enumerable:!0,get:function(){return e[t]}})});

package/dist/_core/identity.d.ts

@@ -0,0 +1 @@
+export * from "@aura-stack/auth/identity";

package/dist/_core/identity.js

@@ -0,0 +1 @@
+export*from"@aura-stack/auth/identity";

package/dist/_core/shared.cjs

@@ -0,0 +1 @@
+var e=require(`@aura-stack/auth/shared`);Object.keys(e).forEach(function(t){t!==`default`&&!Object.prototype.hasOwnProperty.call(exports,t)&&Object.defineProperty(exports,t,{enumerable:!0,get:function(){return e[t]}})});

package/dist/_core/shared.d.ts

@@ -0,0 +1 @@
+export * from "@aura-stack/auth/shared";

package/dist/_core/shared.js

@@ -0,0 +1 @@
+export*from"@aura-stack/auth/shared";

package/dist/index.cjs

@@ -0,0 +1 @@
+Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});let e=require(`@aura-stack/auth`);const t=e=>e.split(/,(?=\s*[^;,\s]+=)/g).map(e=>e.trim()).filter(Boolean),n=e=>{let t=e.method??`GET`,n=`${e.protocol??`http`}://${e.get(`host`)??`localhost`}`,r=new URL(e.originalUrl??e.url,n),i=new Headers;for(let[t,n]of Object.entries(e.headers))if(Array.isArray(n))for(let e of n)i.append(t,e);else n!==void 0&&i.set(t,n);let a=t!==`GET`&&t!==`HEAD`?JSON.stringify(e.body):void 0;return a!==void 0&&i.set(`content-type`,`application/json`),new globalThis.Request(r,{method:t,headers:i,body:a})},r=async(e,n)=>{for(let[r,i]of e.headers.entries())if(r.toLowerCase()===`set-cookie`){let r=e.headers.getSetCookie?.()??t(i);for(let e of r)n.append(`Set-Cookie`,e)}else n.setHeader(r,i);if(n.status(e.status),e.status>=300&&e.status<400){let t=e.headers.get(`location`)??`/`;return n.json({message:`Redirecting`,location:t})}if(e.headers.get(`content-type`)?.includes(`application/json`)){let t=await e.json();return n.json(t)}let r=await e.text();return n.send(r)},i=async(e,t,i)=>r(await e.ALL(n(t)),i),a=({api:e})=>async(t,r,i)=>{try{let a=n(t),{session:o,headers:s}=await e.getSession({headers:a.headers});for(let[e,t]of s.entries())e.toLowerCase()===`set-cookie`?r.append(e,t):r.setHeader(e,t);return r.locals.session=o,i()}catch(e){return i(e)}},o=t=>{let n=(0,e.createAuth)(t);return{...n,toHandler:(e,t)=>i(n.handlers,e,t),withAuth:a(n)}};exports.createAuth=o,exports.toExpressResponse=r,exports.toWebRequest=n;

package/dist/index.d.ts

@@ -0,0 +1,37 @@
+import { AuthConfig as AuthConfig$1, AuthInstance as AuthInstance$1, Session as Session$1, User as User$1 } from "@aura-stack/auth";
+import { FromShapeToObject, Identities } from "@aura-stack/auth/identity";
+import { Request, RequestHandler, Response } from "express";
+import { AuthConfig, AuthInstance, Session, User } from "@aura-stack/auth/types";
+
+//#region src/lib/with-auth.d.ts
+type LocalsWithSession<DefaultUser extends User$1 = User$1> = {
+  session?: Session$1<DefaultUser> | null;
+};
+//#endregion
+//#region src/@types/index.d.ts
+/**
+ * The ExpressInstance type represents the shape of the object returned by the `createAuth`
+ * function in the Express integration of Aura Auth. It was implemented due to errors related
+ * to unportable types from the `createAuth` function.
+ */
+type ExpressInstance<Identity extends Identities = Identities> = AuthInstance$1<FromShapeToObject<Identity>> & {
+  toHandler: (req: Request, res: Response) => Promise<Response>;
+  withAuth: RequestHandler<any, any, any, any, LocalsWithSession<FromShapeToObject<Identity>>>;
+};
+//#endregion
+//#region src/createAuth.d.ts
+declare const createAuth: <Identity extends Identities>(config: AuthConfig$1<Identity>) => ExpressInstance<Identity>;
+//#endregion
+//#region src/lib/handler.d.ts
+/**
+ * Convert an Express Request to a Web API Request so it can be handled
+ * by the framework-agnostic Aura Auth handlers.
+ */
+declare const toWebRequest: (req: Request) => globalThis.Request;
+/**
+ * Forward the Web API Response back to the Express Response.
+ * Handles redirects, multiple Set-Cookie headers, and JSON/text bodies.
+ */
+declare const toExpressResponse: (webResponse: globalThis.Response, res: Response) => Promise<Response<any, Record<string, any>>>;
+//#endregion
+export { type AuthConfig, type AuthInstance, type Session, type User, createAuth, toExpressResponse, toWebRequest };

package/dist/index.js

@@ -0,0 +1 @@
+import{createAuth as e}from"@aura-stack/auth";const t=e=>e.split(/,(?=\s*[^;,\s]+=)/g).map(e=>e.trim()).filter(Boolean),n=e=>{let t=e.method??`GET`,n=`${e.protocol??`http`}://${e.get(`host`)??`localhost`}`,r=new URL(e.originalUrl??e.url,n),i=new Headers;for(let[t,n]of Object.entries(e.headers))if(Array.isArray(n))for(let e of n)i.append(t,e);else n!==void 0&&i.set(t,n);let a=t!==`GET`&&t!==`HEAD`?JSON.stringify(e.body):void 0;return a!==void 0&&i.set(`content-type`,`application/json`),new globalThis.Request(r,{method:t,headers:i,body:a})},r=async(e,n)=>{for(let[r,i]of e.headers.entries())if(r.toLowerCase()===`set-cookie`){let r=e.headers.getSetCookie?.()??t(i);for(let e of r)n.append(`Set-Cookie`,e)}else n.setHeader(r,i);if(n.status(e.status),e.status>=300&&e.status<400){let t=e.headers.get(`location`)??`/`;return n.json({message:`Redirecting`,location:t})}if(e.headers.get(`content-type`)?.includes(`application/json`)){let t=await e.json();return n.json(t)}let r=await e.text();return n.send(r)},i=async(e,t,i)=>r(await e.ALL(n(t)),i),a=({api:e})=>async(t,r,i)=>{try{let a=n(t),{session:o,headers:s}=await e.getSession({headers:a.headers});for(let[e,t]of s.entries())e.toLowerCase()===`set-cookie`?r.append(e,t):r.setHeader(e,t);return r.locals.session=o,i()}catch(e){return i(e)}},o=t=>{let n=e(t);return{...n,toHandler:(e,t)=>i(n.handlers,e,t),withAuth:a(n)}};export{o as createAuth,r as toExpressResponse,n as toWebRequest};

package/dist/oauth/atlassian.cjs

@@ -0,0 +1 @@
+var e=require(`@aura-stack/auth/oauth/atlassian`);Object.keys(e).forEach(function(t){t!==`default`&&!Object.prototype.hasOwnProperty.call(exports,t)&&Object.defineProperty(exports,t,{enumerable:!0,get:function(){return e[t]}})});

package/dist/oauth/atlassian.d.ts

@@ -0,0 +1 @@
+export * from "@aura-stack/auth/oauth/atlassian";

package/dist/oauth/atlassian.js

@@ -0,0 +1 @@
+export*from"@aura-stack/auth/oauth/atlassian";

package/dist/oauth/bitbucket.cjs

@@ -0,0 +1 @@
+var e=require(`@aura-stack/auth/oauth/bitbucket`);Object.keys(e).forEach(function(t){t!==`default`&&!Object.prototype.hasOwnProperty.call(exports,t)&&Object.defineProperty(exports,t,{enumerable:!0,get:function(){return e[t]}})});

package/dist/oauth/bitbucket.d.ts

@@ -0,0 +1 @@
+export * from "@aura-stack/auth/oauth/bitbucket";

package/dist/oauth/bitbucket.js

@@ -0,0 +1 @@
+export*from"@aura-stack/auth/oauth/bitbucket";

package/dist/oauth/click-up.cjs

@@ -0,0 +1 @@
+var e=require(`@aura-stack/auth/oauth/click-up`);Object.keys(e).forEach(function(t){t!==`default`&&!Object.prototype.hasOwnProperty.call(exports,t)&&Object.defineProperty(exports,t,{enumerable:!0,get:function(){return e[t]}})});

package/dist/oauth/click-up.d.ts

@@ -0,0 +1 @@
+export * from "@aura-stack/auth/oauth/click-up";

package/dist/oauth/click-up.js

@@ -0,0 +1 @@
+export*from"@aura-stack/auth/oauth/click-up";

package/dist/oauth/discord.cjs

@@ -0,0 +1 @@
+var e=require(`@aura-stack/auth/oauth/discord`);Object.keys(e).forEach(function(t){t!==`default`&&!Object.prototype.hasOwnProperty.call(exports,t)&&Object.defineProperty(exports,t,{enumerable:!0,get:function(){return e[t]}})});

package/dist/oauth/discord.d.ts

@@ -0,0 +1 @@
+export * from "@aura-stack/auth/oauth/discord";

package/dist/oauth/discord.js

@@ -0,0 +1 @@
+export*from"@aura-stack/auth/oauth/discord";

package/dist/oauth/dribbble.cjs

@@ -0,0 +1 @@
+var e=require(`@aura-stack/auth/oauth/dribbble`);Object.keys(e).forEach(function(t){t!==`default`&&!Object.prototype.hasOwnProperty.call(exports,t)&&Object.defineProperty(exports,t,{enumerable:!0,get:function(){return e[t]}})});

package/dist/oauth/dribbble.d.ts

@@ -0,0 +1 @@
+export * from "@aura-stack/auth/oauth/dribbble";

package/dist/oauth/dribbble.js

@@ -0,0 +1 @@
+export*from"@aura-stack/auth/oauth/dribbble";

package/dist/oauth/dropbox.cjs

@@ -0,0 +1 @@
+var e=require(`@aura-stack/auth/oauth/dropbox`);Object.keys(e).forEach(function(t){t!==`default`&&!Object.prototype.hasOwnProperty.call(exports,t)&&Object.defineProperty(exports,t,{enumerable:!0,get:function(){return e[t]}})});

package/dist/oauth/dropbox.d.ts

@@ -0,0 +1 @@
+export * from "@aura-stack/auth/oauth/dropbox";

package/dist/oauth/dropbox.js

@@ -0,0 +1 @@
+export*from"@aura-stack/auth/oauth/dropbox";

package/dist/oauth/figma.cjs

@@ -0,0 +1 @@
+var e=require(`@aura-stack/auth/oauth/figma`);Object.keys(e).forEach(function(t){t!==`default`&&!Object.prototype.hasOwnProperty.call(exports,t)&&Object.defineProperty(exports,t,{enumerable:!0,get:function(){return e[t]}})});

package/dist/oauth/figma.d.ts

@@ -0,0 +1 @@
+export * from "@aura-stack/auth/oauth/figma";

package/dist/oauth/figma.js

@@ -0,0 +1 @@
+export*from"@aura-stack/auth/oauth/figma";

package/dist/oauth/github.cjs

@@ -0,0 +1 @@
+var e=require(`@aura-stack/auth/oauth/github`);Object.keys(e).forEach(function(t){t!==`default`&&!Object.prototype.hasOwnProperty.call(exports,t)&&Object.defineProperty(exports,t,{enumerable:!0,get:function(){return e[t]}})});

package/dist/oauth/github.d.ts

@@ -0,0 +1 @@
+export * from "@aura-stack/auth/oauth/github";

package/dist/oauth/github.js

@@ -0,0 +1 @@
+export*from"@aura-stack/auth/oauth/github";

package/dist/oauth/gitlab.cjs

@@ -0,0 +1 @@
+var e=require(`@aura-stack/auth/oauth/gitlab`);Object.keys(e).forEach(function(t){t!==`default`&&!Object.prototype.hasOwnProperty.call(exports,t)&&Object.defineProperty(exports,t,{enumerable:!0,get:function(){return e[t]}})});

package/dist/oauth/gitlab.d.ts

@@ -0,0 +1 @@
+export * from "@aura-stack/auth/oauth/gitlab";

package/dist/oauth/gitlab.js

@@ -0,0 +1 @@
+export*from"@aura-stack/auth/oauth/gitlab";

package/dist/oauth/index.cjs

@@ -0,0 +1 @@
+var e=require(`@aura-stack/auth/oauth/index`);Object.keys(e).forEach(function(t){t!==`default`&&!Object.prototype.hasOwnProperty.call(exports,t)&&Object.defineProperty(exports,t,{enumerable:!0,get:function(){return e[t]}})});

package/dist/oauth/index.d.ts

@@ -0,0 +1 @@
+export * from "@aura-stack/auth/oauth/index";

package/dist/oauth/index.js

@@ -0,0 +1 @@
+export*from"@aura-stack/auth/oauth/index";

package/dist/oauth/mailchimp.cjs

@@ -0,0 +1 @@
+var e=require(`@aura-stack/auth/oauth/mailchimp`);Object.keys(e).forEach(function(t){t!==`default`&&!Object.prototype.hasOwnProperty.call(exports,t)&&Object.defineProperty(exports,t,{enumerable:!0,get:function(){return e[t]}})});

package/dist/oauth/mailchimp.d.ts

@@ -0,0 +1 @@
+export * from "@aura-stack/auth/oauth/mailchimp";

package/dist/oauth/mailchimp.js

@@ -0,0 +1 @@
+export*from"@aura-stack/auth/oauth/mailchimp";

package/dist/oauth/notion.cjs

@@ -0,0 +1 @@
+var e=require(`@aura-stack/auth/oauth/notion`);Object.keys(e).forEach(function(t){t!==`default`&&!Object.prototype.hasOwnProperty.call(exports,t)&&Object.defineProperty(exports,t,{enumerable:!0,get:function(){return e[t]}})});

package/dist/oauth/notion.d.ts

@@ -0,0 +1 @@
+export * from "@aura-stack/auth/oauth/notion";

package/dist/oauth/notion.js

@@ -0,0 +1 @@
+export*from"@aura-stack/auth/oauth/notion";

package/dist/oauth/pinterest.cjs

@@ -0,0 +1 @@
+var e=require(`@aura-stack/auth/oauth/pinterest`);Object.keys(e).forEach(function(t){t!==`default`&&!Object.prototype.hasOwnProperty.call(exports,t)&&Object.defineProperty(exports,t,{enumerable:!0,get:function(){return e[t]}})});

package/dist/oauth/pinterest.d.ts

@@ -0,0 +1 @@
+export * from "@aura-stack/auth/oauth/pinterest";

package/dist/oauth/pinterest.js

@@ -0,0 +1 @@
+export*from"@aura-stack/auth/oauth/pinterest";

package/dist/oauth/spotify.cjs

@@ -0,0 +1 @@
+var e=require(`@aura-stack/auth/oauth/spotify`);Object.keys(e).forEach(function(t){t!==`default`&&!Object.prototype.hasOwnProperty.call(exports,t)&&Object.defineProperty(exports,t,{enumerable:!0,get:function(){return e[t]}})});

package/dist/oauth/spotify.d.ts

@@ -0,0 +1 @@
+export * from "@aura-stack/auth/oauth/spotify";

package/dist/oauth/spotify.js

@@ -0,0 +1 @@
+export*from"@aura-stack/auth/oauth/spotify";

package/dist/oauth/strava.cjs

@@ -0,0 +1 @@
+var e=require(`@aura-stack/auth/oauth/strava`);Object.keys(e).forEach(function(t){t!==`default`&&!Object.prototype.hasOwnProperty.call(exports,t)&&Object.defineProperty(exports,t,{enumerable:!0,get:function(){return e[t]}})});

package/dist/oauth/strava.d.ts

@@ -0,0 +1 @@
+export * from "@aura-stack/auth/oauth/strava";

package/dist/oauth/strava.js

@@ -0,0 +1 @@
+export*from"@aura-stack/auth/oauth/strava";

package/dist/oauth/twitch.cjs

@@ -0,0 +1 @@
+var e=require(`@aura-stack/auth/oauth/twitch`);Object.keys(e).forEach(function(t){t!==`default`&&!Object.prototype.hasOwnProperty.call(exports,t)&&Object.defineProperty(exports,t,{enumerable:!0,get:function(){return e[t]}})});

package/dist/oauth/twitch.d.ts

@@ -0,0 +1 @@
+export * from "@aura-stack/auth/oauth/twitch";

package/dist/oauth/twitch.js

@@ -0,0 +1 @@
+export*from"@aura-stack/auth/oauth/twitch";

package/dist/oauth/x.cjs

@@ -0,0 +1 @@
+var e=require(`@aura-stack/auth/oauth/x`);Object.keys(e).forEach(function(t){t!==`default`&&!Object.prototype.hasOwnProperty.call(exports,t)&&Object.defineProperty(exports,t,{enumerable:!0,get:function(){return e[t]}})});

package/dist/oauth/x.d.ts

@@ -0,0 +1 @@
+export * from "@aura-stack/auth/oauth/x";

package/dist/oauth/x.js

@@ -0,0 +1 @@
+export*from"@aura-stack/auth/oauth/x";

package/package.json

@@ -0,0 +1,110 @@
+{
+  "name": "@aura-stack/express",
+  "version": "0.1.0",
+  "private": false,
+  "type": "module",
+  "description": "Authentication integration for Express applications. Provides middleware, route handlers and session verification powered by Aura Auth.",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/aura-stack-ts/auth"
+  },
+  "sideEffects": false,
+  "files": [
+    "dist"
+  ],
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "require": "./dist/index.cjs"
+    },
+    "./oauth": {
+      "types": "./dist/oauth/index.d.ts",
+      "import": "./dist/oauth/index.js",
+      "require": "./dist/oauth/index.cjs"
+    },
+    "./oauth/*": {
+      "types": "./dist/oauth/*.d.ts",
+      "import": "./dist/oauth/*.js",
+      "require": "./dist/oauth/*.cjs"
+    },
+    "./identity": {
+      "types": "./dist/_core/identity.d.ts",
+      "import": "./dist/_core/identity.js",
+      "require": "./dist/_core/identity.cjs"
+    },
+    "./crypto": {
+      "types": "./dist/_core/crypto.d.ts",
+      "import": "./dist/_core/crypto.js",
+      "require": "./dist/_core/crypto.cjs"
+    },
+    "./shared": {
+      "types": "./dist/_core/shared.d.ts",
+      "import": "./dist/_core/shared.js",
+      "require": "./dist/_core/shared.cjs"
+    },
+    "./cookies": {
+      "types": "./dist/_core/cookies.d.ts",
+      "import": "./dist/_core/cookies.js",
+      "require": "./dist/_core/cookies.cjs"
+    }
+  },
+  "keywords": [
+    "auth",
+    "oauth",
+    "oauth2",
+    "security",
+    "session",
+    "authentication",
+    "authorization",
+    "express",
+    "expressjs",
+    "node",
+    "bun",
+    "deno",
+    "middleware",
+    "typescript",
+    "javascript",
+    "web-api",
+    "aura-stack",
+    "aura-stack-ts",
+    "aura auth",
+    "aura-auth"
+  ],
+  "author": "Aura Stack <aurastackjs@gmail.com> | Hernan Alvarado <halvaradop.dev@gmail.com>",
+  "homepage": "https://aura-stack-auth.vercel.app",
+  "bugs": {
+    "url": "https://github.com/aura-stack-ts/auth/issues"
+  },
+  "license": "MIT",
+  "dependencies": {
+    "@aura-stack/auth": "0.7.1"
+  },
+  "devDependencies": {
+    "@types/supertest": "^6.0.3",
+    "supertest": "^7.2.2",
+    "express": "^4.18.2",
+    "@types/express": "^4.17.17",
+    "vitest": "4.1.4",
+    "@aura-stack/tsdown-config": "0.0.0",
+    "@aura-stack/tsconfig": "0.0.0"
+  },
+  "peerDependencies": {
+    "express": ">=4.0.0"
+  },
+  "scripts": {
+    "dev": "tsdown --watch",
+    "build": "pnpm sync:modules && tsdown",
+    "lint": "oxlint",
+    "lint:fix": "oxlint --fix",
+    "test": "vitest --run",
+    "test:watch": "vitest",
+    "test:coverage": "vitest --run --coverage",
+    "format": "oxfmt",
+    "format:check": "oxfmt --check",
+    "type-check": "tsc --noEmit",
+    "clean": "rm -rf dist src/_core src/oauth",
+    "clean:cts": "[ -d dist ] && find dist -type f -name \"*.cts\" -delete || true",
+    "sync:modules": "node ../shared/scripts/modules.js"
+  }
+}