@bigso/auth-sdk 0.4.7 → 0.5.1

package/dist/browser/index.js

@@ -1,343 +0,0 @@
-import {
-  verifySignedPayload
-} from "../chunk-LDDK6SJD.js";
-
-// src/utils/crypto.ts
-async function sha256Base64Url(input) {
-  const encoder = new TextEncoder();
-  const data = encoder.encode(input);
-  const digest = await crypto.subtle.digest("SHA-256", data);
-  return base64Url(new Uint8Array(digest));
-}
-function generateVerifier(length = 32) {
-  const array = new Uint8Array(length);
-  crypto.getRandomValues(array);
-  return base64Url(array);
-}
-function base64Url(bytes) {
-  return btoa(String.fromCharCode(...bytes)).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
-}
-function generateRandomId() {
-  return crypto.randomUUID();
-}
-
-// src/utils/events.ts
-var EventEmitter = class {
-  constructor() {
-    this.events = {};
-  }
-  on(event, handler) {
-    if (!this.events[event]) this.events[event] = [];
-    this.events[event].push(handler);
-  }
-  off(event, handler) {
-    if (!this.events[event]) return;
-    this.events[event] = this.events[event].filter((h) => h !== handler);
-  }
-  emit(event, data) {
-    this.events[event]?.forEach((fn) => fn(data));
-  }
-};
-
-// src/browser/auth.ts
-var BigsoAuth = class extends EventEmitter {
-  constructor(options) {
-    super();
-    this.authCompleted = false;
-    this.requestId = generateRandomId();
-    this.loginInProgress = false;
-    this.options = {
-      timeout: 5e3,
-      // por defecto 5s (estándar v2.3)
-      debug: false,
-      redirectUri: "",
-      tenantHint: "",
-      theme: "light",
-      ...options
-    };
-  }
-  /**
-   * Inicia el flujo de autenticación.
-   * @returns Promise que resuelve con el payload decodificado del JWS (solo para información; el backend debe validar)
-   */
-  async login() {
-    if (this.loginInProgress) {
-      this.debug("login() ya en curso, ignorando llamada duplicada");
-      return Promise.reject(new Error("Login already in progress"));
-    }
-    this.loginInProgress = true;
-    this.authCompleted = false;
-    const state = generateRandomId();
-    const nonce = generateRandomId();
-    const verifier = generateVerifier();
-    const requestId = this.requestId;
-    sessionStorage.setItem("sso_ctx", JSON.stringify({ state, nonce, verifier, requestId }));
-    this.createUI();
-    return new Promise((resolve, reject) => {
-      this.abortController = new AbortController();
-      const { signal } = this.abortController;
-      const cleanup = () => {
-        if (this.timeoutId) clearTimeout(this.timeoutId);
-        if (this.messageListener) window.removeEventListener("message", this.messageListener);
-        this.iframe?.remove();
-        this.iframe = void 0;
-        this.authCompleted = true;
-        this.loginInProgress = false;
-      };
-      this.messageListener = async (event) => {
-        if (event.origin !== this.options.ssoOrigin) {
-          this.debug("Ignorado mensaje de origen no autorizado:", event.origin);
-          return;
-        }
-        const msg = event.data;
-        this.debug("Mensaje recibido:", msg);
-        if (msg.requestId && msg.requestId !== requestId) {
-          this.debug("requestId no coincide, ignorado");
-          return;
-        }
-        if (msg.type === "sso-ready") {
-          this.debug("sso-ready recibido, iniciando timeout y enviando sso-init");
-          this.timeoutId = window.setTimeout(() => {
-            if (!this.authCompleted) {
-              this.debug("Timeout alcanzado, activando fallback");
-              this.closeUI();
-              cleanup();
-              this.emit("fallback");
-              window.location.href = this.buildFallbackUrl();
-              reject(new Error("Timeout"));
-            }
-          }, this.options.timeout);
-          const codeChallenge = await sha256Base64Url(verifier);
-          const initPayload = {
-            state,
-            nonce,
-            code_challenge: codeChallenge,
-            code_challenge_method: "S256",
-            origin: window.location.origin,
-            ...this.options.redirectUri && { redirect_uri: this.options.redirectUri },
-            ...this.options.tenantHint && { tenant_hint: this.options.tenantHint },
-            timeout_ms: this.options.timeout
-            // pasar el timeout configurado (opcional)
-          };
-          this.iframe?.contentWindow?.postMessage({
-            v: "2.3",
-            // versión del protocolo (estándar v2.3)
-            source: "@app/widget",
-            type: "sso-init",
-            requestId: this.requestId,
-            payload: initPayload
-          }, this.options.ssoOrigin);
-          this.emit("ready");
-          return;
-        }
-        if (msg.type === "sso-success") {
-          this.debug("sso-success recibido");
-          clearTimeout(this.timeoutId);
-          try {
-            const payload = msg.payload;
-            const ctx = JSON.parse(sessionStorage.getItem("sso_ctx") || "{}");
-            if (payload.state !== ctx.state) {
-              throw new Error("Invalid state");
-            }
-            const decoded = await verifySignedPayload(
-              payload.signed_payload,
-              this.options.jwksUrl,
-              window.location.origin
-              // aud esperado
-            );
-            if (decoded.nonce !== ctx.nonce) {
-              throw new Error("Invalid nonce");
-            }
-            this.debug("JWS v\xE1lido, payload:", decoded);
-            this.closeUI();
-            cleanup();
-            const result = {
-              ...decoded,
-              signed_payload: payload.signed_payload
-            };
-            this.emit("success", result);
-            resolve(result);
-          } catch (err) {
-            this.debug("Error en sso-success:", err);
-            this.closeUI();
-            cleanup();
-            this.emit("error", err);
-            reject(err);
-          }
-          return;
-        }
-        if (msg.type === "sso-error") {
-          const errorPayload = msg.payload;
-          this.debug("sso-error recibido:", errorPayload);
-          clearTimeout(this.timeoutId);
-          this.closeUI();
-          cleanup();
-          if (errorPayload.code === "version_mismatch") {
-            this.emit("error", errorPayload);
-            window.location.href = this.buildFallbackUrl();
-            reject(new Error(`Version mismatch: expected ${errorPayload.expected_version}`));
-          } else {
-            this.emit("error", errorPayload);
-            reject(errorPayload);
-          }
-        }
-        if (msg.type === "sso-close") {
-          this.debug("sso-close recibido");
-          this.closeUI();
-          cleanup();
-          reject(new Error("Login cancelled by user"));
-        }
-      };
-      window.addEventListener("message", this.messageListener);
-      signal.addEventListener("abort", () => {
-        this.debug("Operaci\xF3n abortada");
-        this.closeUI();
-        cleanup();
-        reject(new Error("Login aborted"));
-      });
-    });
-  }
-  /** Cancela el flujo de autenticación en curso */
-  abort() {
-    this.abortController?.abort();
-  }
-  // ─── UI Management ───────────────────────────────────────────────
-  /**
-   * Crea (o reutiliza) el overlay con Shadow DOM y el iframe visible.
-   * Patrón tomado del CDN widget v1: Shadow DOM para aislar estilos.
-   */
-  createUI() {
-    if (!this.hostEl) {
-      this.hostEl = document.createElement("div");
-      this.hostEl.id = "bigso-auth-host";
-      this.shadowRoot = this.hostEl.attachShadow({ mode: "open" });
-      const style = document.createElement("style");
-      style.textContent = this.getOverlayStyles();
-      this.shadowRoot.appendChild(style);
-      this.overlayEl = document.createElement("div");
-      this.overlayEl.className = "sso-overlay";
-      const closeBtn = document.createElement("button");
-      closeBtn.className = "sso-close-btn";
-      closeBtn.innerHTML = "×";
-      closeBtn.setAttribute("aria-label", "Cerrar modal");
-      closeBtn.addEventListener("click", () => this.abort());
-      this.overlayEl.appendChild(closeBtn);
-      this.overlayEl.addEventListener("click", (event) => {
-        if (event.target === this.overlayEl) {
-          this.abort();
-        }
-      });
-      this.shadowRoot.appendChild(this.overlayEl);
-      document.body.appendChild(this.hostEl);
-    }
-    this.iframe = document.createElement("iframe");
-    this.iframe.className = "sso-frame";
-    this.iframe.src = `${this.options.ssoOrigin}/auth/sign-in?v=2.3&client_id=${this.options.clientId}`;
-    this.iframe.setAttribute("title", "SSO Login");
-    this.overlayEl.appendChild(this.iframe);
-    this.debug("Iframe creado", this.iframe.src);
-    this.overlayEl.classList.remove("sso-closing");
-    this.overlayEl.style.display = "flex";
-  }
-  /**
-   * Cierra el overlay con animación suave (fadeOut + slideDown).
-   * El overlay persiste en el DOM (solo se oculta).
-   */
-  closeUI() {
-    if (!this.overlayEl || this.overlayEl.style.display === "none") return;
-    this.overlayEl.classList.add("sso-closing");
-    setTimeout(() => {
-      if (this.overlayEl) {
-        this.overlayEl.style.display = "none";
-        this.overlayEl.classList.remove("sso-closing");
-      }
-    }, 200);
-  }
-  /**
-   * Estilos CSS encapsulados dentro del Shadow DOM.
-   * Migrados del widget CDN v1 con las mismas animaciones y responsive.
-   */
-  getOverlayStyles() {
-    return `
-            .sso-overlay {
-                position: fixed;
-                inset: 0;
-                display: none;
-                justify-content: center;
-                align-items: center;
-                background: rgba(0, 0, 0, 0.6);
-                z-index: 999999;
-                backdrop-filter: blur(4px);
-                -webkit-backdrop-filter: blur(4px);
-                animation: fadeIn 0.2s ease;
-            }
-            .sso-frame {
-                width: 370px;
-                height: 350px;
-                border: none;
-                border-radius: 16px;
-                background: var(--card-bg, #fff);
-                box-shadow: 0 12px 40px rgba(0, 0, 0, 0.3);
-                animation: slideUp 0.3s ease;
-            }
-            @media (max-width: 480px), (max-height: 480px) {
-                .sso-frame {
-                    width: 100%;
-                    height: 100%;
-                    border-radius: 0;
-                }
-            }
-            .sso-close-btn {
-                position: absolute;
-                top: 12px;
-                right: 12px;
-                width: 32px;
-                height: 32px;
-                background: rgba(0, 0, 0, 0.4);
-                color: white;
-                border: none;
-                border-radius: 50%;
-                font-size: 24px;
-                line-height: 1;
-                cursor: pointer;
-                display: flex;
-                align-items: center;
-                justify-content: center;
-                z-index: 1000000;
-                transition: background 0.2s;
-            }
-            .sso-close-btn:hover {
-                background: rgba(0, 0, 0, 0.8);
-            }
-            .sso-overlay.sso-closing {
-                animation: fadeOut 0.2s ease forwards;
-            }
-            .sso-overlay.sso-closing .sso-frame {
-                animation: slideDown 0.2s ease forwards;
-            }
-            @keyframes fadeIn { from { opacity: 0; } to { opacity: 1; } }
-            @keyframes slideUp { from { transform: translateY(20px); opacity: 0; } to { transform: translateY(0); opacity: 1; } }
-            @keyframes fadeOut { from { opacity: 1; } to { opacity: 0; } }
-            @keyframes slideDown { from { transform: translateY(0); opacity: 1; } to { transform: translateY(20px); opacity: 0; } }
-        `;
-  }
-  // ─── Helpers ──────────────────────────────────────────────────────
-  buildFallbackUrl() {
-    const url = new URL(this.options.ssoOrigin);
-    url.searchParams.set("app_id", this.options.clientId);
-    url.searchParams.set("redirect_uri", this.options.redirectUri || window.location.origin);
-    url.searchParams.set("response_type", "code");
-    url.searchParams.set("state", generateRandomId());
-    url.searchParams.set("code_challenge_method", "S256");
-    url.searchParams.set("client_id", this.options.clientId);
-    return url.toString();
-  }
-  debug(...args) {
-    if (this.options.debug) {
-      console.log("[BigsoAuth]", ...args);
-    }
-  }
-};
-export {
-  BigsoAuth
-};

package/dist/chunk-LDDK6SJD.js

@@ -1,13 +0,0 @@
-// src/utils/jws.ts
-import { jwtVerify, createRemoteJWKSet } from "jose";
-async function verifySignedPayload(token, jwksUrl, expectedAudience) {
-  const JWKS = createRemoteJWKSet(new URL(jwksUrl));
-  const { payload } = await jwtVerify(token, JWKS, {
-    audience: expectedAudience
-  });
-  return payload;
-}
-
-export {
-  verifySignedPayload
-};

package/dist/express/index.cjs

@@ -1,287 +0,0 @@
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-
-// src/express/index.ts
-var express_exports = {};
-__export(express_exports, {
-  createSsoAuthRouter: () => createSsoAuthRouter,
-  createSsoSyncRouter: () => createSsoSyncRouter,
-  ssoAuthMiddleware: () => ssoAuthMiddleware,
-  ssoSyncGuardMiddleware: () => ssoSyncGuardMiddleware
-});
-module.exports = __toCommonJS(express_exports);
-
-// src/express/middlewares/ssoAuth.ts
-function ssoAuthMiddleware(options) {
-  const cookieName = options.cookieName || "sso_session";
-  const isProduction = options.isProduction ?? process.env.NODE_ENV === "production";
-  return async (req, res, next) => {
-    try {
-      let sessionToken = req.cookies?.[cookieName];
-      let session = null;
-      if (sessionToken) {
-        session = await options.ssoClient.validateSessionToken(sessionToken);
-      }
-      if (!session) {
-        const refreshToken = req.cookies?.[`${cookieName}_refresh`];
-        if (refreshToken) {
-          const newSessionData = await options.ssoClient.refreshAppSession(refreshToken);
-          if (newSessionData) {
-            const sessionMaxAge = new Date(newSessionData.expiresAt).getTime() - Date.now();
-            const refreshMaxAge = newSessionData.refreshExpiresAt ? new Date(newSessionData.refreshExpiresAt).getTime() - Date.now() : 7 * 24 * 60 * 60 * 1e3;
-            const sessionCookieOptions = {
-              httpOnly: true,
-              secure: isProduction,
-              sameSite: "lax",
-              path: "/",
-              maxAge: sessionMaxAge > 0 ? sessionMaxAge : 0,
-              ...isProduction && options.cookieDomain ? { domain: options.cookieDomain } : {}
-            };
-            const refreshCookieOptions = {
-              ...sessionCookieOptions,
-              maxAge: refreshMaxAge > 0 ? refreshMaxAge : 0
-            };
-            res.cookie(cookieName, newSessionData.sessionToken, sessionCookieOptions);
-            res.cookie(`${cookieName}_refresh`, newSessionData.refreshToken, refreshCookieOptions);
-            session = await options.ssoClient.validateSessionToken(newSessionData.sessionToken);
-          }
-        }
-        if (!session) {
-          res.clearCookie(cookieName);
-          res.clearCookie(`${cookieName}_refresh`);
-          res.status(401).json({ error: "Session expired or invalid" });
-          return;
-        }
-      }
-      if (options.onSessionValidated) {
-        await options.onSessionValidated(session, req);
-      }
-      req.user = session.user;
-      req.tenant = session.tenant;
-      req.ssoSession = session;
-      next();
-    } catch (error) {
-      console.error("\u274C [BigsoAuthSDK] Authentication Middleware Error:", error instanceof Error ? error.message : error);
-      res.status(500).json({ error: "Internal authentication error" });
-    }
-  };
-}
-
-// src/express/middlewares/ssoSyncGuard.ts
-var import_dns = require("dns");
-function ssoSyncGuardMiddleware(options) {
-  const isProduction = options.isProduction ?? process.env.NODE_ENV === "production";
-  return async (req, res, next) => {
-    try {
-      const isSecure = req.secure || req.headers["x-forwarded-proto"] === "https";
-      if (!isSecure && isProduction) {
-        console.warn("\u26A0\uFE0F  [BigsoAuthSDK] Blocked non-HTTPS sync request");
-        res.status(403).json({ error: "HTTPS required" });
-        return;
-      }
-      const clientIp = req.ip || req.socket.remoteAddress || "";
-      const isLoopback = clientIp === "::1" || clientIp === "127.0.0.1" || clientIp === "::ffff:127.0.0.1";
-      if (!isProduction && isLoopback) {
-        return next();
-      }
-      const ssoUrl = new URL(options.ssoBackendUrl);
-      const ssoHostname = ssoUrl.hostname;
-      const ssoIps = await import_dns.promises.resolve4(ssoHostname).catch(() => []);
-      const cleanClientIp = clientIp.replace(/^.*:/, "");
-      const isPrivateIp = cleanClientIp.startsWith("10.") || cleanClientIp.startsWith("192.168.") || cleanClientIp.startsWith("172.") && parseInt(cleanClientIp.split(".")[1], 10) >= 16 && parseInt(cleanClientIp.split(".")[1], 10) <= 31;
-      if (!ssoIps.includes(cleanClientIp) && !isPrivateIp) {
-        console.warn(`\u26D4\uFE0F [BigsoAuthSDK] Blocked sync request from unauthorized IP: ${clientIp}`);
-        res.status(403).json({ error: "Unauthorized origin" });
-        return;
-      }
-      next();
-    } catch (error) {
-      console.error("\u274C [BigsoAuthSDK] Sync Guard Validation Error:", error instanceof Error ? error.message : error);
-      res.status(500).json({ error: "Security validation failed" });
-    }
-  };
-}
-
-// src/express/routes/createSsoAuthRouter.ts
-var import_express = require("express");
-function createSsoAuthRouter(options) {
-  const router = (0, import_express.Router)();
-  const cookieName = options.cookieName || "sso_session";
-  const isProduction = options.isProduction ?? process.env.NODE_ENV === "production";
-  const getCookieOptions = (customOptions = {}) => {
-    const base = {
-      httpOnly: true,
-      secure: isProduction,
-      sameSite: "lax",
-      path: "/",
-      ...customOptions
-    };
-    if (isProduction && options.cookieDomain) {
-      base.domain = options.cookieDomain;
-    }
-    return base;
-  };
-  router.post("/exchange", async (req, res) => {
-    try {
-      const { code } = req.body;
-      if (!code) {
-        res.status(400).json({ error: "Authorization code is required" });
-        return;
-      }
-      const ssoResponse = await options.ssoClient.exchangeCodeForToken(code);
-      if (!ssoResponse.success) {
-        res.status(401).json({ error: "Invalid authorization code" });
-        return;
-      }
-      const sessionMaxAge = new Date(ssoResponse.expiresAt).getTime() - Date.now();
-      const refreshMaxAge = ssoResponse.refreshExpiresAt ? new Date(ssoResponse.refreshExpiresAt).getTime() - Date.now() : 7 * 24 * 60 * 60 * 1e3;
-      const sessionCookieOptions = getCookieOptions({
-        maxAge: sessionMaxAge > 0 ? sessionMaxAge : 0
-      });
-      const refreshCookieOptions = getCookieOptions({
-        maxAge: refreshMaxAge > 0 ? refreshMaxAge : 0
-      });
-      res.cookie(cookieName, ssoResponse.sessionToken, sessionCookieOptions);
-      if (ssoResponse.refreshToken) {
-        res.cookie(`${cookieName}_refresh`, ssoResponse.refreshToken, refreshCookieOptions);
-      }
-      if (options.onLoginSuccess) {
-        await options.onLoginSuccess(ssoResponse);
-      }
-      res.json({
-        success: true,
-        user: ssoResponse.user,
-        tenant: ssoResponse.tenant,
-        expiresAt: ssoResponse.expiresAt
-      });
-    } catch (error) {
-      console.error("\u274C [BigsoAuthSDK] Error exchanging code:", error.message);
-      res.status(500).json({
-        error: error.message || "Failed to exchange authorization code"
-      });
-    }
-  });
-  router.post("/exchange-v2", async (req, res) => {
-    try {
-      const { payload } = req.body;
-      if (!payload) {
-        res.status(400).json({ error: "Signed payload is required" });
-        return;
-      }
-      const verified = await options.ssoClient.verifySignedPayload(payload, options.frontendUrl);
-      if (!verified.code) {
-        res.status(400).json({ error: "No authorization code found in payload" });
-        return;
-      }
-      const ssoResponse = await options.ssoClient.exchangeCodeForToken(verified.code);
-      if (!ssoResponse.success) {
-        res.status(401).json({ error: "Invalid authorization code" });
-        return;
-      }
-      const sessionMaxAge = new Date(ssoResponse.expiresAt).getTime() - Date.now();
-      const refreshMaxAge = ssoResponse.refreshExpiresAt ? new Date(ssoResponse.refreshExpiresAt).getTime() - Date.now() : 7 * 24 * 60 * 60 * 1e3;
-      const sessionCookieOptions = getCookieOptions({
-        maxAge: sessionMaxAge > 0 ? sessionMaxAge : 0
-      });
-      const refreshCookieOptions = getCookieOptions({
-        maxAge: refreshMaxAge > 0 ? refreshMaxAge : 0
-      });
-      res.cookie(cookieName, ssoResponse.sessionToken, sessionCookieOptions);
-      if (ssoResponse.refreshToken) {
-        res.cookie(`${cookieName}_refresh`, ssoResponse.refreshToken, refreshCookieOptions);
-      }
-      if (options.onLoginSuccess) {
-        await options.onLoginSuccess(ssoResponse);
-      }
-      res.json({
-        success: true,
-        user: ssoResponse.user,
-        tenant: ssoResponse.tenant,
-        expiresAt: ssoResponse.expiresAt
-      });
-    } catch (error) {
-      console.error("\u274C [BigsoAuthSDK] Error exchanging v2 payload:", error.message);
-      res.status(401).json({
-        error: error.message || "Failed to verify signed payload"
-      });
-    }
-  });
-  router.get("/session", ssoAuthMiddleware(options), (req, res) => {
-    res.set("Cache-Control", "no-store, no-cache, must-revalidate, private");
-    res.set("Pragma", "no-cache");
-    res.set("Expires", "0");
-    res.json({
-      success: true,
-      user: req.user,
-      tenant: req.tenant,
-      expiresAt: req.ssoSession?.expiresAt
-    });
-  });
-  router.post("/logout", async (req, res) => {
-    const sessionToken = req.cookies?.[cookieName];
-    if (sessionToken) {
-      try {
-        await options.ssoClient.revokeSession(sessionToken);
-      } catch (error) {
-        console.warn("\u26A0\uFE0F [BigsoAuthSDK] Failed to revoke session in SSO Backend. Clearing local anyway.", error.message);
-      }
-    }
-    const cookieOptions = getCookieOptions({ maxAge: 0 });
-    res.clearCookie(cookieName, cookieOptions);
-    res.clearCookie(`${cookieName}_refresh`, cookieOptions);
-    if (options.onLogout && sessionToken) {
-      await options.onLogout(sessionToken);
-    }
-    res.json({ success: true, message: "Logged out" });
-  });
-  return router;
-}
-
-// src/express/routes/createSsoSyncRouter.ts
-var import_express2 = require("express");
-function createSsoSyncRouter(options) {
-  const router = (0, import_express2.Router)();
-  router.get("/resources", ssoSyncGuardMiddleware({
-    ssoBackendUrl: options.ssoBackendUrl,
-    isProduction: options.isProduction
-  }), (req, res) => {
-    try {
-      res.json({
-        success: true,
-        resources: options.resources,
-        meta: {
-          appId: options.appId,
-          count: options.resources.length,
-          timestamp: (/* @__PURE__ */ new Date()).toISOString()
-        }
-      });
-    } catch (error) {
-      console.error("\u274C [BigsoAuthSDK] Error in sync endpoint:", error.message);
-      res.status(500).json({ error: error.message });
-    }
-  });
-  return router;
-}
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  createSsoAuthRouter,
-  createSsoSyncRouter,
-  ssoAuthMiddleware,
-  ssoSyncGuardMiddleware
-});

package/dist/express/index.d.cts

@@ -1,48 +0,0 @@
-import { Request, Response, NextFunction, Router } from 'express';
-import { BigsoSsoClient } from '../node/index.cjs';
-import { S as SsoSessionData } from '../types-CoXgtTry.cjs';
-
-interface SsoAuthMiddlewareOptions {
-    ssoClient: BigsoSsoClient;
-    cookieName?: string;
-    cookieDomain?: string;
-    isProduction?: boolean;
-    onSessionValidated?: (session: SsoSessionData, req: Request) => Promise<void> | void;
-}
-declare global {
-    namespace Express {
-        interface Request {
-            user?: SsoSessionData['user'];
-            tenant?: SsoSessionData['tenant'];
-            ssoSession?: SsoSessionData;
-        }
-    }
-}
-declare function ssoAuthMiddleware(options: SsoAuthMiddlewareOptions): (req: Request, res: Response, next: NextFunction) => Promise<void>;
-
-interface SsoSyncGuardOptions {
-    ssoBackendUrl: string;
-    isProduction?: boolean;
-}
-declare function ssoSyncGuardMiddleware(options: SsoSyncGuardOptions): (req: Request, res: Response, next: NextFunction) => Promise<void>;
-
-interface CreateSsoAuthRouterOptions {
-    ssoClient: BigsoSsoClient;
-    frontendUrl: string;
-    cookieName?: string;
-    cookieDomain?: string;
-    isProduction?: boolean;
-    onLoginSuccess?: (session: SsoSessionData) => void | Promise<void>;
-    onLogout?: (sessionToken: string) => void | Promise<void>;
-}
-declare function createSsoAuthRouter(options: CreateSsoAuthRouterOptions): Router;
-
-interface SsoSyncRouterOptions {
-    resources: any[];
-    appId: string;
-    ssoBackendUrl: string;
-    isProduction?: boolean;
-}
-declare function createSsoSyncRouter(options: SsoSyncRouterOptions): Router;
-
-export { type CreateSsoAuthRouterOptions, type SsoAuthMiddlewareOptions, type SsoSyncGuardOptions, type SsoSyncRouterOptions, createSsoAuthRouter, createSsoSyncRouter, ssoAuthMiddleware, ssoSyncGuardMiddleware };