@authhero/cloudflare-adapter 2.38.15 → 3.0.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/LICENSE +661 -21
- package/dist/cloudflare-adapter.cjs +5 -21
- package/dist/cloudflare-adapter.mjs +235 -269
- package/dist/{sync-defaults-errors-3BT2TYx9.mjs → sync-defaults-errors-BlLZh6Gt.mjs} +2 -2
- package/dist/sync-defaults-errors-Htp1NWTq.js +1 -0
- package/dist/tsconfig.types.tsbuildinfo +1 -1
- package/dist/wfp.cjs +1 -1
- package/dist/wfp.mjs +43 -34
- package/dist/workflows.cjs +1 -1
- package/dist/workflows.mjs +1 -1
- package/package.json +6 -5
- package/dist/sync-defaults-errors-BliFySmE.js +0 -1
package/dist/wfp.cjs
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});let e=require("@authhero/multi-tenancy"),t=require("hono"),n=require("authhero");var r=`tenant-{tenant_id}-auth`,i=3e4,a=`/internal/sync-defaults`;function o(e,t){return e.replace(/\{tenant_id\}/g,t)}function s(t){let{dispatcher:n,scriptNameTemplate:s=r,internalSecret:c,controlPlaneTenantId:l,controlPlaneAdapters:u,entities:d,timeoutMs:f=i}=t;return async t=>{let r=await(0,e.buildControlPlaneDefaultsPayload)(u,l,d,t),i=o(s,t),p=new AbortController,m=setTimeout(()=>p.abort(),f),h;try{h=await n.get(i).fetch(`https://tenant.internal${a}`,{method:`POST`,headers:{"content-type":`application/json`,authorization:`Bearer ${c}`},body:JSON.stringify(r),signal:p.signal})}finally{clearTimeout(m)}if(!h.ok){let e=await h.text().catch(()=>``),t=h.headers.get(`x-authhero-error`);throw Error(`sync-defaults push to "${i}" failed: ${h.status}${t?` (${t})`:``} ${e.slice(0,256)}`)}return await h.json()}}var c=`cp`,l=`/internal/sync-defaults`;function u(e,t,n,r){console.error(`[wfp-tenant] ${t}:`,n);let i=n instanceof Error?n.message:String(n);return e.header(`X-Authhero-Error`,t),e.json({error:t,detail:i,result:r},500)}function d(e){return({tenant_id:t})=>t===e.CONTROL_PLANE_TENANT_ID?[e.CONTROL_PLANE_ISSUER]:[]}async function f(r,i){let a=r.CONTROL_PLANE_TENANT_ID,o=await(0,n.loadEncryptionKey)(r.ENCRYPTION_KEY),s=r.CONTROL_PLANE_ENCRYPTION_KEY?{default:o,keys:{[c]:await(0,n.loadEncryptionKey)(r.CONTROL_PLANE_ENCRYPTION_KEY)}}:{default:o},f=(0,n.createEncryptedDataAdapterWithKeyRing)(i.createDataAdapter(r),s,{resolveEncryptKeyId:e=>e===a?c:void 0}),p={dataAdapter:(0,e.withRuntimeFallback)(f,{controlPlaneTenantId:a}),additionalIssuers:(i.additionalIssuers??d)(r)},{app:m}=(0,n.init)(i.configure?i.configure(p,r):p),h=new t.Hono;return h.post(l,async t=>{let
|
|
1
|
+
Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});let e=require("@authhero/multi-tenancy"),t=require("hono"),n=require("authhero");var r=`tenant-{tenant_id}-auth`,i=3e4,a=`/internal/sync-defaults`;function o(e,t){return e.replace(/\{tenant_id\}/g,t)}function s(t){let{dispatcher:n,scriptNameTemplate:s=r,internalSecret:c,controlPlaneTenantId:l,controlPlaneAdapters:u,entities:d,timeoutMs:f=i}=t;return async t=>{let r=await(0,e.buildControlPlaneDefaultsPayload)(u,l,d,t),i=o(s,t),p=new AbortController,m=setTimeout(()=>p.abort(),f),h;try{h=await n.get(i).fetch(`https://tenant.internal${a}`,{method:`POST`,headers:{"content-type":`application/json`,authorization:`Bearer ${c}`},body:JSON.stringify(r),signal:p.signal})}finally{clearTimeout(m)}if(!h.ok){let e=await h.text().catch(()=>``),t=h.headers.get(`x-authhero-error`);throw Error(`sync-defaults push to "${i}" failed: ${h.status}${t?` (${t})`:``} ${e.slice(0,256)}`)}return await h.json()}}var c=`cp`,l=`/internal/sync-defaults`;function u(e,t,n,r){console.error(`[wfp-tenant] ${t}:`,n);let i=n instanceof Error?n.message:String(n);return e.header(`X-Authhero-Error`,t),e.json({error:t,detail:i,result:r},500)}function d(e){return({tenant_id:t})=>t===e.CONTROL_PLANE_TENANT_ID?[e.CONTROL_PLANE_ISSUER]:[]}async function f(r,i){let a=r.CONTROL_PLANE_TENANT_ID,o=await(0,n.loadEncryptionKey)(r.ENCRYPTION_KEY),s=r.CONTROL_PLANE_ENCRYPTION_KEY?{default:o,keys:{[c]:await(0,n.loadEncryptionKey)(r.CONTROL_PLANE_ENCRYPTION_KEY)}}:{default:o},f=(0,n.createEncryptedDataAdapterWithKeyRing)(i.createDataAdapter(r),s,{resolveEncryptKeyId:e=>e===a?c:void 0}),p={dataAdapter:(0,e.withRuntimeFallback)(f,{controlPlaneTenantId:a}),additionalIssuers:(i.additionalIssuers??d)(r)},{app:m}=(0,n.init)(i.configure?i.configure(p,r):p),h=new t.Hono;return h.post(l,async t=>{let o=r.WFP_INTERNAL_SYNC_SECRET,s=t.req.header(`authorization`);if(!o||s!==`Bearer ${o}`)return t.json({error:`unauthorized`},401);let c;try{c=await t.req.json()}catch{return t.json({error:`invalid JSON`},400)}let l;try{l=await(0,e.applyControlPlaneDefaultsPayload)(c,f,a,{continueOnError:i.continueOnError??!0})}catch(e){return u(t,`sync_defaults_apply_failed`,e)}let d;try{d={created:(await(0,n.ensureSigningKey)(f.keys,{name:r.ISSUER})).created}}catch(e){return u(t,`sync_defaults_signing_key_failed`,e,l)}if(i.onSyncResult)try{await i.onSyncResult(l,r)}catch(e){return u(t,`sync_defaults_on_result_failed`,e,l)}return t.json({...l,signingKey:d})}),h.route(`/`,m),h}function p(e){let t=new WeakMap;return{fetch(n,r,i){let a=t.get(r);return a||(a=f(r,e),t.set(r,a)),a.then(e=>e.fetch(n,r,i))}}}exports.createDispatchSyncDefaults=s,exports.createWfpTenantApp=p;
|
package/dist/wfp.mjs
CHANGED
|
@@ -1,23 +1,23 @@
|
|
|
1
1
|
import { applyControlPlaneDefaultsPayload as e, buildControlPlaneDefaultsPayload as t, withRuntimeFallback as n } from "@authhero/multi-tenancy";
|
|
2
2
|
import { Hono as r } from "hono";
|
|
3
|
-
import { createEncryptedDataAdapterWithKeyRing as i,
|
|
3
|
+
import { createEncryptedDataAdapterWithKeyRing as i, ensureSigningKey as a, init as o, loadEncryptionKey as s } from "authhero";
|
|
4
4
|
//#region src/wfp/dispatch-sync-defaults.ts
|
|
5
|
-
var
|
|
6
|
-
function
|
|
5
|
+
var c = "tenant-{tenant_id}-auth", l = 3e4, u = "/internal/sync-defaults";
|
|
6
|
+
function d(e, t) {
|
|
7
7
|
return e.replace(/\{tenant_id\}/g, t);
|
|
8
8
|
}
|
|
9
|
-
function
|
|
10
|
-
let { dispatcher: n, scriptNameTemplate: r =
|
|
9
|
+
function f(e) {
|
|
10
|
+
let { dispatcher: n, scriptNameTemplate: r = c, internalSecret: i, controlPlaneTenantId: a, controlPlaneAdapters: o, entities: s, timeoutMs: f = l } = e;
|
|
11
11
|
return async (e) => {
|
|
12
|
-
let
|
|
12
|
+
let c = await t(o, a, s, e), l = d(r, e), p = new AbortController(), m = setTimeout(() => p.abort(), f), h;
|
|
13
13
|
try {
|
|
14
|
-
h = await n.get(
|
|
14
|
+
h = await n.get(l).fetch(`https://tenant.internal${u}`, {
|
|
15
15
|
method: "POST",
|
|
16
16
|
headers: {
|
|
17
17
|
"content-type": "application/json",
|
|
18
18
|
authorization: `Bearer ${i}`
|
|
19
19
|
},
|
|
20
|
-
body: JSON.stringify(
|
|
20
|
+
body: JSON.stringify(c),
|
|
21
21
|
signal: p.signal
|
|
22
22
|
});
|
|
23
23
|
} finally {
|
|
@@ -25,15 +25,15 @@ function d(e) {
|
|
|
25
25
|
}
|
|
26
26
|
if (!h.ok) {
|
|
27
27
|
let e = await h.text().catch(() => ""), t = h.headers.get("x-authhero-error");
|
|
28
|
-
throw Error(`sync-defaults push to "${
|
|
28
|
+
throw Error(`sync-defaults push to "${l}" failed: ${h.status}${t ? ` (${t})` : ""} ${e.slice(0, 256)}`);
|
|
29
29
|
}
|
|
30
30
|
return await h.json();
|
|
31
31
|
};
|
|
32
32
|
}
|
|
33
33
|
//#endregion
|
|
34
34
|
//#region src/wfp/tenant-app.ts
|
|
35
|
-
var
|
|
36
|
-
function
|
|
35
|
+
var p = "cp", m = "/internal/sync-defaults";
|
|
36
|
+
function h(e, t, n, r) {
|
|
37
37
|
console.error(`[wfp-tenant] ${t}:`, n);
|
|
38
38
|
let i = n instanceof Error ? n.message : String(n);
|
|
39
39
|
return e.header("X-Authhero-Error", t), e.json({
|
|
@@ -42,46 +42,55 @@ function m(e, t, n, r) {
|
|
|
42
42
|
result: r
|
|
43
43
|
}, 500);
|
|
44
44
|
}
|
|
45
|
-
function
|
|
45
|
+
function g(e) {
|
|
46
46
|
return ({ tenant_id: t }) => t === e.CONTROL_PLANE_TENANT_ID ? [e.CONTROL_PLANE_ISSUER] : [];
|
|
47
47
|
}
|
|
48
|
-
async function
|
|
49
|
-
let
|
|
50
|
-
default:
|
|
51
|
-
keys: { [
|
|
52
|
-
} : { default:
|
|
53
|
-
dataAdapter: n(
|
|
54
|
-
additionalIssuers: (
|
|
55
|
-
}, { app:
|
|
56
|
-
return
|
|
48
|
+
async function _(t, c) {
|
|
49
|
+
let l = t.CONTROL_PLANE_TENANT_ID, u = await s(t.ENCRYPTION_KEY), d = t.CONTROL_PLANE_ENCRYPTION_KEY ? {
|
|
50
|
+
default: u,
|
|
51
|
+
keys: { [p]: await s(t.CONTROL_PLANE_ENCRYPTION_KEY) }
|
|
52
|
+
} : { default: u }, f = i(c.createDataAdapter(t), d, { resolveEncryptKeyId: (e) => e === l ? p : void 0 }), _ = {
|
|
53
|
+
dataAdapter: n(f, { controlPlaneTenantId: l }),
|
|
54
|
+
additionalIssuers: (c.additionalIssuers ?? g)(t)
|
|
55
|
+
}, { app: v } = o(c.configure ? c.configure(_, t) : _), y = new r();
|
|
56
|
+
return y.post(m, async (n) => {
|
|
57
57
|
let r = t.WFP_INTERNAL_SYNC_SECRET, i = n.req.header("authorization");
|
|
58
58
|
if (!r || i !== `Bearer ${r}`) return n.json({ error: "unauthorized" }, 401);
|
|
59
|
-
let
|
|
59
|
+
let o;
|
|
60
60
|
try {
|
|
61
|
-
|
|
61
|
+
o = await n.req.json();
|
|
62
62
|
} catch {
|
|
63
63
|
return n.json({ error: "invalid JSON" }, 400);
|
|
64
64
|
}
|
|
65
|
-
let
|
|
65
|
+
let s;
|
|
66
|
+
try {
|
|
67
|
+
s = await e(o, f, l, { continueOnError: c.continueOnError ?? !0 });
|
|
68
|
+
} catch (e) {
|
|
69
|
+
return h(n, "sync_defaults_apply_failed", e);
|
|
70
|
+
}
|
|
71
|
+
let u;
|
|
66
72
|
try {
|
|
67
|
-
|
|
73
|
+
u = { created: (await a(f.keys, { name: t.ISSUER })).created };
|
|
68
74
|
} catch (e) {
|
|
69
|
-
return
|
|
75
|
+
return h(n, "sync_defaults_signing_key_failed", e, s);
|
|
70
76
|
}
|
|
71
|
-
if (
|
|
72
|
-
await
|
|
77
|
+
if (c.onSyncResult) try {
|
|
78
|
+
await c.onSyncResult(s, t);
|
|
73
79
|
} catch (e) {
|
|
74
|
-
return
|
|
80
|
+
return h(n, "sync_defaults_on_result_failed", e, s);
|
|
75
81
|
}
|
|
76
|
-
return n.json(
|
|
77
|
-
|
|
82
|
+
return n.json({
|
|
83
|
+
...s,
|
|
84
|
+
signingKey: u
|
|
85
|
+
});
|
|
86
|
+
}), y.route("/", v), y;
|
|
78
87
|
}
|
|
79
|
-
function
|
|
88
|
+
function v(e) {
|
|
80
89
|
let t = /* @__PURE__ */ new WeakMap();
|
|
81
90
|
return { fetch(n, r, i) {
|
|
82
91
|
let a = t.get(r);
|
|
83
|
-
return a || (a =
|
|
92
|
+
return a || (a = _(r, e), t.set(r, a)), a.then((e) => e.fetch(n, r, i));
|
|
84
93
|
} };
|
|
85
94
|
}
|
|
86
95
|
//#endregion
|
|
87
|
-
export {
|
|
96
|
+
export { f as createDispatchSyncDefaults, v as createWfpTenantApp };
|
package/dist/workflows.cjs
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});const e=require("./sync-defaults-errors-
|
|
1
|
+
Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});const e=require("./sync-defaults-errors-Htp1NWTq.js");let t=require("@authhero/multi-tenancy");var n={retries:{limit:5,delay:`5 seconds`,backoff:`exponential`},timeout:`2 minutes`},r={retries:{limit:8,delay:`10 seconds`,backoff:`exponential`},timeout:`1 minute`};function i(e){return e instanceof Error?e.message:String(e)}async function a(a,o,s){let c=(0,t.createOperationRecorder)(a.stores),l=a.shouldProvision??(e=>e.deployment_type===`wfp`),u=e=>a.stepConfig?.[e]??(e===`verify`?r:n),d=o.operation_id,f=o.tenant_id,p=await s.do(`mark-running`,u(`mark-running`),async()=>{let e=await a.tenants.get(f);if(!e||!l(e))return await c.appendEvent(d,{step:`mark-running`,outcome:`skipped`,detail:{reason:e?`tenant is not WFP-provisioned`:`tenant row missing (rolled back?)`}}),await c.markSucceeded(d),{skipped:!0,scriptName:``,databaseName:``};let t=a.steps.validate(),n=a.steps.names(f);return await c.markRunning(d,`mark-running`),await c.appendEvent(d,{step:`mark-running`,outcome:`succeeded`}),{skipped:!1,...n,...t}});if(p.skipped)return;let m={worker_script_name:p.scriptName,bundle_configuration:p.bundleConfiguration,worker_version:p.workerVersion,database_version:p.databaseVersion};try{let t=await s.do(`create-database`,u(`create-database`),async()=>{await c.setCurrentStep(d,`create-database`);let{id:e,created:t}=await a.steps.findOrCreateDatabase(p.databaseName);return await c.appendEvent(d,{step:`create-database`,outcome:`succeeded`,detail:{database_id:e,created:t}}),{databaseId:e,created:t}});if(m.d1_database_id=t.databaseId,await s.do(`apply-migrations`,u(`apply-migrations`),async()=>{await c.setCurrentStep(d,`apply-migrations`),await a.steps.applyMigrations(t.databaseId,t.created),await c.appendEvent(d,{step:`apply-migrations`,outcome:`succeeded`,detail:{database_version:p.databaseVersion}})}),await s.do(`upload-script`,u(`upload-script`),async()=>{await c.setCurrentStep(d,`upload-script`),await a.steps.uploadScript(p.scriptName,t.databaseId),await c.appendEvent(d,{step:`upload-script`,outcome:`succeeded`,detail:{worker_version:p.workerVersion}})}),await s.do(`upload-secrets`,u(`upload-secrets`),async()=>{await c.setCurrentStep(d,`upload-secrets`),await a.steps.uploadSecrets(p.scriptName,f),await c.appendEvent(d,{step:`upload-secrets`,outcome:`succeeded`})}),a.syncDefaults){let t=a.syncDefaults;await s.do(`seed-defaults`,u(`seed-defaults`),async()=>{await c.setCurrentStep(d,`seed-defaults`);let n=e.t(await t(f));if(n.length>0)throw Error(`sync-defaults seed reported ${n.length} error(s): ${n.join(`; `)}`);await c.appendEvent(d,{step:`seed-defaults`,outcome:`succeeded`})})}if(a.verify){let e=a.verify;await s.do(`verify`,u(`verify`),async()=>{await c.setCurrentStep(d,`verify`),await e(t.databaseId,f),await c.appendEvent(d,{step:`verify`,outcome:`succeeded`})})}await s.do(`mark-ready`,u(`mark-ready`),async()=>{await c.setCurrentStep(d,`mark-ready`),await a.tenants.update(f,{...m,provisioning_state:`ready`,provisioning_error:void 0,provisioning_state_changed_at:new Date().toISOString()}),await c.appendEvent(d,{step:`mark-ready`,outcome:`succeeded`}),await c.markSucceeded(d)})}catch(e){throw await s.do(`mark-failed`,u(`mark-failed`),async()=>{let t=i(e);try{await a.tenants.update(f,{...m,provisioning_state:`failed`,provisioning_error:t.slice(0,2048),provisioning_state_changed_at:new Date().toISOString()})}catch(e){a.logger?.warn(`Failed to write provisioning_state="failed" for tenant ${f}:`,e)}await c.appendEvent(d,{step:`mark-failed`,outcome:`failed`,detail:{message:t}}),await c.markFailed(d,e)}),e}}var o=class extends Error{checks;constructor(e,t){super(e),this.name=`TenantProvisionVerificationError`,this.checks=t}};function s(e,t){for(let n of e)for(let e of n.results??[])if(!(!e||typeof e!=`object`)){for(let[n,r]of Object.entries(e))if(n===t){if(typeof r==`number`)return r;if(typeof r==`string`&&r!==``&&!isNaN(Number(r)))return Number(r)}}return 0}function c(t){let n=t.minKeys??1;return async(r,i)=>{let a=await t.client.execD1(r,`SELECT (SELECT COUNT(*) FROM keys) AS key_count, (SELECT COUNT(*) FROM tenants WHERE id = '${e.r(i)}') AS tenant_count;`),c=s(a,`key_count`),l=s(a,`tenant_count`),u=[];if(c<n&&u.push(`expected at least ${n} signing key(s) in "keys", found ${c}`),l<1&&u.push(`tenant row "${i}" missing from "tenants"`),u.length>0)throw new o(`Tenant D1 verification failed for "${i}": ${u.join(`; `)}`,{keyCount:c,tenantRowCount:l})}}function l(e){let t=e instanceof Error?e.message:String(e??``);return/already exists|already been created|duplicate/i.test(t)}function u(e){return{engine:`cloudflare-workflows`,async start(n){if(n.kind!==`provision`)throw Error(`The Cloudflare Workflows executor does not support "${n.kind}" operations yet (phase 2 covers provision only)`);if(!n.tenant_id)throw Error(`provision operations require a tenant_id`);let r=n.engine_instance_id??(0,t.buildEngineInstanceId)(n);try{await e.binding.create({id:r,params:{operation_id:n.id,tenant_id:n.tenant_id,kind:n.kind}})}catch(e){if(!l(e))throw e}}}}var d=`cloudflare-workflows`;async function f(e){let{stores:n,tenants:r,binding:i}=e,a=(0,t.createOperationRecorder)(n),o=e.minAgeMs??600*1e3,s=e.limit??100,c=new Date(Date.now()-o).toISOString(),{operations:l}=await n.tenantOperations.list({status:[`pending`,`running`],engine:d,updated_before:c,per_page:s}),u={scanned:l.length,markedFailed:0,markedSucceeded:0,stillRunning:0,instanceMissing:0,errors:0};for(let t of l)try{await p(t)}catch(n){u.errors++,e.logger?.warn(`Failed to reconcile tenant operation ${t.id}:`,n)}return u;async function f(e,t){await a.appendEvent(e.id,{step:e.current_step??`reconcile`,outcome:`reconciled`,detail:{resolution:`failed`,reason:t}}),await a.markFailed(e.id,t),e.kind===`provision`&&e.tenant_id&&(await r.get(e.tenant_id))?.provisioning_state===`pending`&&await r.update(e.tenant_id,{provisioning_state:`failed`,provisioning_error:t.slice(0,2048),provisioning_state_changed_at:new Date().toISOString()})}async function p(e){let o=await n.tenantOperations.get(e.id);if(!o||(0,t.isTerminalStatus)(o.status))return;let s=o.engine_instance_id??(0,t.buildEngineInstanceId)(o),c;try{c=await i.get(s)}catch{u.instanceMissing++,u.markedFailed++,await f(o,`engine instance "${s}" not found (expired past retention or never started)`);return}let l=await c.status();if(l.status===`errored`||l.status===`terminated`){let e=typeof l.error==`string`?l.error:l.error?.message??`engine reported ${l.status}`;u.markedFailed++,await f(o,e);return}if(l.status===`complete`){(o.tenant_id?await r.get(o.tenant_id):null)?.provisioning_state===`ready`?(u.markedSucceeded++,await a.appendEvent(o.id,{step:o.current_step??`reconcile`,outcome:`reconciled`,detail:{resolution:`succeeded`}}),await a.markSucceeded(o.id)):(u.markedFailed++,await f(o,`engine instance completed but the operation was never finalized and the tenant is not ready`));return}u.stillRunning++}}function p(e){let t=e.shouldProvision??(e=>e.deployment_type===`wfp`);return{async onProvision(n,r){let i=await e.tenants.get(n);i&&t(i)&&await e.enqueueOperation({kind:`provision`,tenant_id:n})},async onUpgrade(t,n){await e.inline.onUpgrade(t,n)},async onDeprovision(t){await e.inline.onDeprovision(t)}}}exports.TENANT_OPERATION_ENGINE=d,exports.TenantProvisionVerificationError=o,exports.createCloudflareWorkflowsExecutor=u,exports.createProvisionVerifier=c,exports.createWfpWorkflowProvisioningHook=p,exports.reconcileTenantOperations=f,exports.runProvisionOperation=a;
|
package/dist/workflows.mjs
CHANGED
|
@@ -1,4 +1,4 @@
|
|
|
1
|
-
import { r as e, t } from "./sync-defaults-errors-
|
|
1
|
+
import { r as e, t } from "./sync-defaults-errors-BlLZh6Gt.mjs";
|
|
2
2
|
import { buildEngineInstanceId as n, createOperationRecorder as r, isTerminalStatus as i } from "@authhero/multi-tenancy";
|
|
3
3
|
//#region src/workflows/provision-operation.ts
|
|
4
4
|
var a = {
|
package/package.json
CHANGED
|
@@ -11,7 +11,7 @@
|
|
|
11
11
|
"type": "git",
|
|
12
12
|
"url": "https://github.com/markusahlstrand/authhero"
|
|
13
13
|
},
|
|
14
|
-
"version": "
|
|
14
|
+
"version": "3.0.1",
|
|
15
15
|
"files": [
|
|
16
16
|
"dist"
|
|
17
17
|
],
|
|
@@ -47,8 +47,8 @@
|
|
|
47
47
|
"typescript": "^5.9.3",
|
|
48
48
|
"vite": "^8.0.14",
|
|
49
49
|
"vitest": "^4.1.7",
|
|
50
|
-
"@authhero/multi-tenancy": "
|
|
51
|
-
"authhero": "
|
|
50
|
+
"@authhero/multi-tenancy": "15.0.0",
|
|
51
|
+
"authhero": "9.1.0"
|
|
52
52
|
},
|
|
53
53
|
"peerDependencies": {
|
|
54
54
|
"@authhero/multi-tenancy": "^14.0.0",
|
|
@@ -67,9 +67,10 @@
|
|
|
67
67
|
"dependencies": {
|
|
68
68
|
"nanoid": "^5.1.11",
|
|
69
69
|
"wretch": "^3.0.8",
|
|
70
|
-
"@authhero/adapter-interfaces": "4.
|
|
71
|
-
"@authhero/kysely-adapter": "
|
|
70
|
+
"@authhero/adapter-interfaces": "4.4.0",
|
|
71
|
+
"@authhero/kysely-adapter": "12.1.0"
|
|
72
72
|
},
|
|
73
|
+
"license": "AGPL-3.0-only",
|
|
73
74
|
"scripts": {
|
|
74
75
|
"build": "vite build && tsc -p tsconfig.types.json && rollup -c rollup.dts.config.mjs",
|
|
75
76
|
"test": "vitest run"
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
var e=class extends Error{status;endpoint;errors;body;constructor(e,n,r,i=[]){super(`Cloudflare API ${e} ${n}: ${t(r,256)}`),this.name=`CloudflareApiError`,this.status=e,this.endpoint=n,this.body=r,this.errors=i}};function t(e,t){return e.length<=t?e:`${e.slice(0,t)}…`}var n=class{accountId;apiToken;fetchImpl;timeoutMs;baseUrl;constructor(e){this.accountId=e.accountId,this.apiToken=e.apiToken,this.fetchImpl=e.fetch??((...e)=>fetch(...e)),this.timeoutMs=e.timeoutMs??3e4,this.baseUrl=(e.baseUrl??`https://api.cloudflare.com/client/v4`).replace(/\/+$/,``)}async createD1Database(e){let t=`/accounts/${encodeURIComponent(this.accountId)}/d1/database`;return(await this.request(`POST`,t,{body:JSON.stringify({name:e})})).result}async listD1Databases(e){let t=e?`?name=${encodeURIComponent(e)}`:``,n=`/accounts/${encodeURIComponent(this.accountId)}/d1/database${t}`;return(await this.request(`GET`,n)).result??[]}async deleteD1Database(e){let t=`/accounts/${encodeURIComponent(this.accountId)}/d1/database/${encodeURIComponent(e)}`;await this.request(`DELETE`,t)}async execD1(e,t){let n=`/accounts/${encodeURIComponent(this.accountId)}/d1/database/${encodeURIComponent(e)}/query`;return(await this.request(`POST`,n,{body:JSON.stringify({sql:t})})).result??[]}async uploadNamespacedScript(e,t,n){let r=`/accounts/${this.accountId}/workers/dispatch/namespaces/${encodeURIComponent(e)}/scripts/${encodeURIComponent(t)}`,i={main_module:n.mainModule,compatibility_date:n.compatibilityDate,compatibility_flags:n.compatibilityFlags??[],bindings:n.bindings??[],tags:n.tags},a=new FormData;a.append(`metadata`,new Blob([JSON.stringify(i)],{type:`application/json`})),a.append(n.mainModule,new Blob([n.script],{type:`application/javascript+module`}),n.mainModule),await this.request(`PUT`,r,{body:a})}async deleteNamespacedScript(e,t){let n=`/accounts/${this.accountId}/workers/dispatch/namespaces/${encodeURIComponent(e)}/scripts/${encodeURIComponent(t)}`;await this.request(`DELETE`,n)}async setNamespacedScriptSecret(e,t,n,r){let i=`/accounts/${this.accountId}/workers/dispatch/namespaces/${encodeURIComponent(e)}/scripts/${encodeURIComponent(t)}/secrets`;await this.request(`PUT`,i,{body:JSON.stringify({name:n,text:r,type:`secret_text`})})}async request(t,n,r){let i=`${this.baseUrl}${n}`,a=new AbortController,o=setTimeout(()=>a.abort(),this.timeoutMs),s={Authorization:`Bearer ${this.apiToken}`,...r?.headers??{}};r?.body&&!(r.body instanceof FormData)&&!s[`Content-Type`]&&(s[`Content-Type`]=`application/json`);let c;try{c=await this.fetchImpl(i,{method:t,headers:s,body:r?.body,signal:a.signal})}finally{clearTimeout(o)}let l=await c.text();if(!c.ok){let t=[];try{let e=JSON.parse(l);Array.isArray(e.errors)&&(t=e.errors)}catch{}throw new e(c.status,n,l,t)}if(!(l===``||c.status===204))return JSON.parse(l)}},r=`{tenant_id}`,i=`tenant-{tenant_id}`,a=`index.js`,o=`2026-05-01`,s=64;function c(e,t){return e.replace(/\{tenant_id\}/g,t)}function l(t){if(!(t instanceof e))return!1;let n=t.body.toLowerCase();return t.status===409||n.includes(`already exists`)||n.includes(`name is already taken`)||n.includes(`already in use`)}function u(t){return t instanceof e&&t.status===404}function d(e){return e.replace(/'/g,`''`)}function f(e){let t=new n({accountId:e.accountId,apiToken:e.apiToken,fetch:e.fetch,timeoutMs:e.timeoutMs}),f=e.scriptNameTemplate??r,p=e.d1NameTemplate??i,m=e.scriptMetadata?.main_module??a,h=e.scriptMetadata?.compatibility_date??o,g=e.scriptMetadata?.compatibility_flags??[`nodejs_compat`],_=e.dispatchNamespace,v=e.logger,y=`_authhero_provisioner_migrations`;function b(e,t){let n=[];for(let r of e)for(let e of r.results??[])if(e&&typeof e==`object`&&t in e){let r=e[t];typeof r==`string`&&n.push(r)}return n}async function x(e){return b(await t.execD1(e,`SELECT name FROM sqlite_master WHERE type='table' AND name='${y}';`),`name`).length>0}async function S(e){await t.execD1(e,`CREATE TABLE IF NOT EXISTS ${y} (name TEXT PRIMARY KEY, applied_at TEXT NOT NULL);`)}async function C(e){let n=await t.execD1(e,`SELECT name FROM ${y};`);return new Set(b(n,`name`))}async function w(e,n){let r=new Date().toISOString();await t.execD1(e,`INSERT OR IGNORE INTO ${y} (name, applied_at) VALUES ('${d(n)}', '${d(r)}');`)}async function T(n){let r=await C(n);for(let i of e.migrations)if(!r.has(i.name)){try{await t.execD1(n,i.sql)}catch(e){throw e instanceof Error?Error(`Failed to apply migration "${i.name}" to D1 ${n}: ${e.message}`,{cause:e}):e}await w(n,i.name)}}return{client:t,names(e){return{scriptName:c(f,e),databaseName:c(p,e)}},validate(){let t=e.migrations[e.migrations.length-1]?.name;if(t!==void 0&&t.length>s)throw Error(`Migration name "${t}" exceeds the ${s}-character database_version limit.`);return{databaseVersion:t,bundleConfiguration:e.bundleConfiguration,workerVersion:e.workerVersion}},async findOrCreateDatabase(e){let n=(await t.listD1Databases(e)).find(t=>t.name===e);if(n)return{id:n.uuid,created:!1};try{return{id:(await t.createD1Database(e)).uuid,created:!0}}catch(n){if(!l(n))throw n;let r=(await t.listD1Databases(e)).find(t=>t.name===e);if(r)return{id:r.uuid,created:!1};throw n}},async applyMigrations(t,n){let r=!n&&await x(t);if(n||r)await S(t),await T(t);else{v?.warn(`D1 ${t} has no migration-tracking table — assuming it predates tracking and is fully migrated; backfilling the tracking table and skipping migrations.`),await S(t);for(let n of e.migrations)await w(t,n.name)}},async uploadScript(n,r){let i=[{type:`d1`,name:`AUTH_DB`,id:r},{type:`plain_text`,name:`CONTROL_PLANE_BASE_URL`,text:e.controlPlaneBaseUrl},...e.extraBindings??[]];await t.uploadNamespacedScript(_,n,{script:e.tenantWorkerScript,mainModule:m,compatibilityDate:h,compatibilityFlags:g,bindings:i,tags:[`authhero-tenant`,`tenant:${n}`]})},async uploadSecrets(n,r){let i=await e.secrets(r);for(let[e,r]of Object.entries(i))await t.setNamespacedScriptSecret(_,n,e,r)},async deprovision(e){let n=c(f,e),r=c(p,e),i=[];try{await t.deleteNamespacedScript(_,n)}catch(e){u(e)||i.push(e)}try{let e=(await t.listD1Databases(r)).find(e=>e.name===r);if(e)try{await t.deleteD1Database(e.uuid)}catch(e){u(e)||i.push(e)}}catch(e){i.push(e)}if(i.length>0){let t=i.map(e=>e instanceof Error?e.message:String(e)).join(`; `);throw Error(`Deprovision of tenant "${e}" had ${i.length} failure(s): ${t}`,{cause:i[0]})}}}}function p(e){if(typeof e!=`object`||!e)return[];let t=[];for(let n of Object.values(e))if(typeof n==`object`&&n&&`errors`in n&&Array.isArray(n.errors))for(let e of n.errors)typeof e==`string`&&t.push(e);return t}Object.defineProperty(exports,"a",{enumerable:!0,get:function(){return e}}),Object.defineProperty(exports,"i",{enumerable:!0,get:function(){return n}}),Object.defineProperty(exports,"n",{enumerable:!0,get:function(){return f}}),Object.defineProperty(exports,"r",{enumerable:!0,get:function(){return d}}),Object.defineProperty(exports,"t",{enumerable:!0,get:function(){return p}});
|