@aurabase/auth 0.5.3 → 0.6.0

package/README.md

@@ -192,7 +192,8 @@ await aura.auth.promoteAnonymous({ email: 'user@example.com', password: 'correct
 const { data: user } = await aura.auth.getUser()
 
 // Vérification locale JWKS (RS256/ES256) avec fallback getUser() (HS256 / JWKS vide).
-const { data: claims } = await aura.auth.getClaims()
+const { data } = await aura.auth.getClaims()
+console.log(data?.claims.sub, data?.header.alg)
 
 await aura.auth.updateUser({ data: { display_name: 'Ada' } })
 

package/dist/index.cjs

@@ -1132,7 +1132,7 @@ var AuthService = class extends core.BaseService {
           })
         };
       }
-      return { data: { claims, header: r.header }, error: null };
+      return { data: { ...claims, claims, header: r.header }, error: null };
     }
     if (r.code === "unsupported_alg" || r.code === "no_matching_key" || r.code === "jwks_fetch_failed") {
       let localPayload = {};
@@ -1160,11 +1160,11 @@ var AuthService = class extends core.BaseService {
           realAlg = decodeJwt(token).header.alg ?? "unknown";
         } catch {
         }
+        const claims = { ...u.data, sub: u.data.id };
         return {
           data: {
-            // Claims dérivées de getUser : PAS de `exp`/`iat` (voir JwtClaims/JSDoc).
-            // `exp`/`iat` étant optionnels, plus de `as unknown as` masquant l'absence.
-            claims: { ...u.data, sub: u.data.id },
+            ...claims,
+            claims,
             header: { alg: realAlg }
           },
           error: null

package/dist/index.js

@@ -1130,7 +1130,7 @@ var AuthService = class extends BaseService {
           })
         };
       }
-      return { data: { claims, header: r.header }, error: null };
+      return { data: { ...claims, claims, header: r.header }, error: null };
     }
     if (r.code === "unsupported_alg" || r.code === "no_matching_key" || r.code === "jwks_fetch_failed") {
       let localPayload = {};
@@ -1158,11 +1158,11 @@ var AuthService = class extends BaseService {
           realAlg = decodeJwt(token).header.alg ?? "unknown";
         } catch {
         }
+        const claims = { ...u.data, sub: u.data.id };
         return {
           data: {
-            // Claims dérivées de getUser : PAS de `exp`/`iat` (voir JwtClaims/JSDoc).
-            // `exp`/`iat` étant optionnels, plus de `as unknown as` masquant l'absence.
-            claims: { ...u.data, sub: u.data.id },
+            ...claims,
+            claims,
             header: { alg: realAlg }
           },
           error: null

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aurabase/auth",
-  "version": "0.5.3",
+  "version": "0.6.0",
   "description": "Service d'authentification du SDK Aurabase (sessions, OAuth/PKCE, MFA, magic link, OTP, admin)",
   "type": "module",
   "main": "dist/index.cjs",
@@ -46,7 +46,7 @@
     "authentication"
   ],
   "dependencies": {
-    "@aurabase/core": "0.5.3"
+    "@aurabase/core": "0.6.0"
   },
   "devDependencies": {
     "@types/node": "20.14.15",