@cairs-npm/express-auth-2fa 0.1.0 → 0.1.1

package/dist/index.d.cts

@@ -551,12 +551,14 @@ declare class AuthService {
         tokens: {
             accessToken: string;
             expiresInSec: number;
+            csrfToken?: string;
         };
     }>;
     trustDevice(userId: string, res: Response, label: string): Promise<void>;
     refresh(req: Request, res: Response): Promise<{
         accessToken: string;
         expiresInSec: number;
+        csrfToken?: string;
     }>;
     logout(req: Request, res: Response, sid: string): Promise<void>;
     listActiveMethods(userId: string): Promise<Method[]>;

package/dist/index.d.ts

@@ -551,12 +551,14 @@ declare class AuthService {
         tokens: {
             accessToken: string;
             expiresInSec: number;
+            csrfToken?: string;
         };
     }>;
     trustDevice(userId: string, res: Response, label: string): Promise<void>;
     refresh(req: Request, res: Response): Promise<{
         accessToken: string;
         expiresInSec: number;
+        csrfToken?: string;
     }>;
     logout(req: Request, res: Response, sid: string): Promise<void>;
     listActiveMethods(userId: string): Promise<Method[]>;

package/dist/index.js

@@ -860,7 +860,8 @@ var AuthService = class {
     const bundle = await this.tokens.issueTokens(userId, amr, ctx);
     const refreshDays = opts.rememberMe ? this.config.ttl.refreshTokenDays : Math.min(this.config.ttl.refreshTokenDays, 1);
     setCookie(res, this.config, REFRESH_COOKIE, bundle.refreshToken, refreshDays * 864e5);
-    setCookie(res, this.config, CSRF_COOKIE, randomToken(), this.config.ttl.refreshTokenDays * 864e5, false);
+    const csrfToken = randomToken();
+    setCookie(res, this.config, CSRF_COOKIE, csrfToken, this.config.ttl.refreshTokenDays * 864e5, false);
     if (opts.rememberDevice) {
       await this.trustDevice(userId, res, opts.deviceLabel ?? "This device");
     }
@@ -868,7 +869,7 @@ var AuthService = class {
     return {
       status: "AUTHENTICATED",
       user: { id: userId, username: user?.username, email: user?.email },
-      tokens: { accessToken: bundle.accessToken, expiresInSec: bundle.expiresInSec }
+      tokens: { accessToken: bundle.accessToken, expiresInSec: bundle.expiresInSec, csrfToken }
     };
   }
   async trustDevice(userId, res, label) {
@@ -894,7 +895,7 @@ var AuthService = class {
     if (!raw) throw apiError(401, "INVALID_CREDENTIALS", "No refresh token.");
     const bundle = await this.tokens.rotateRefreshToken(raw, ctxOf(req));
     setCookie(res, this.config, REFRESH_COOKIE, bundle.refreshToken, this.config.ttl.refreshTokenDays * 864e5);
-    return { accessToken: bundle.accessToken, expiresInSec: bundle.expiresInSec };
+    return { accessToken: bundle.accessToken, expiresInSec: bundle.expiresInSec, csrfToken: csrfCookie };
   }
   async logout(req, res, sid) {
     await this.tokens.revokeSession(sid);