@cauthyhq/node 1.2.1 → 1.3.1

package/dist/hono.mjs

@@ -1,10 +1,9 @@
 // src/hono.ts
 function cauthyHono(auth) {
   const base = auth.options.basePath;
-  const key = auth.pact?.contract.jwksPath;
   return async (c, next) => {
     const path = new URL(c.req.url).pathname;
-    if (path === base || path.startsWith(`${base}/`) || path === key) return auth.handler(c.req.raw);
+    if (path === base || path.startsWith(`${base}/`)) return auth.handler(c.req.raw);
     const resolved = await auth.resolve(c.req.raw);
     c.set("session", resolved.session);
     await next();

package/dist/hono.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/hono.ts"],"sourcesContent":["// Hono: the routes, and who is signed in on every request.\n//\n//   const app = new Hono<{ Variables: CauthyVariables }>()\n//   app.use(cauthyHono(auth))\n//\n//   app.get('/api/me', (c) => {\n//     const session = c.get('session')\n//     return session ? c.json(session.user) : c.json({ error: 'unauthenticated' }, 401)\n//   })\n//\n//   app.get('/api/books', requireSession, (c) => { … })\n//\n// A session that needs renewing is renewed on the spot, and its new cookie\n// leaves with whatever the route answers. It runs wherever Hono does.\n\nimport type { MiddlewareHandler } from 'hono'\nimport type { Cauthy } from './cauthy'\nimport type { Session } from './types'\n\n/** What the middleware keeps on the context: `new Hono<{ Variables: CauthyVariables }>()`. */\nexport interface CauthyVariables {\n  /** Who is signed in, or null. */\n  session: Session | null\n}\n\ntype Env = { Variables: CauthyVariables }\n\n/**\n * Serves the routes under the handler's `basePath` (and, by contract, the\n * application's published key), and sets `session` for\n * every other request. Mount it once, before the routes that use it.\n */\nexport function cauthyHono(auth: Cauthy): MiddlewareHandler<Env> {\n  const base = auth.options.basePath\n  // By contract the application also publishes its key, outside basePath.\n  const key = auth.pact?.contract.jwksPath\n  return async (c, next) => {\n    const path = new URL(c.req.url).pathname\n    if (path === base || path.startsWith(`${base}/`) || path === key) return auth.handler(c.req.raw)\n\n    const resolved = await auth.resolve(c.req.raw)\n    c.set('session', resolved.session)\n    await next()\n    for (const cookie of resolved.cookies) c.header('set-cookie', cookie, { append: true })\n  }\n}\n\n/** For a route only a signed-in person may call: answers 401 otherwise. Needs `cauthyHono` mounted before it. */\nexport const requireSession: MiddlewareHandler<Env> = async (c, next) => {\n  if (c.get('session') === null || c.get('session') === undefined) {\n    c.header('x-cauthy-session', 'none')\n    return c.json({ error: 'unauthenticated' }, 401)\n  }\n  await next()\n}\n"],"mappings":";AAgCO,SAAS,WAAW,MAAsC;AAC/D,QAAM,OAAO,KAAK,QAAQ;AAE1B,QAAM,MAAM,KAAK,MAAM,SAAS;AAChC,SAAO,OAAO,GAAG,SAAS;AACxB,UAAM,OAAO,IAAI,IAAI,EAAE,IAAI,GAAG,EAAE;AAChC,QAAI,SAAS,QAAQ,KAAK,WAAW,GAAG,IAAI,GAAG,KAAK,SAAS,IAAK,QAAO,KAAK,QAAQ,EAAE,IAAI,GAAG;AAE/F,UAAM,WAAW,MAAM,KAAK,QAAQ,EAAE,IAAI,GAAG;AAC7C,MAAE,IAAI,WAAW,SAAS,OAAO;AACjC,UAAM,KAAK;AACX,eAAW,UAAU,SAAS,QAAS,GAAE,OAAO,cAAc,QAAQ,EAAE,QAAQ,KAAK,CAAC;AAAA,EACxF;AACF;AAGO,IAAM,iBAAyC,OAAO,GAAG,SAAS;AACvE,MAAI,EAAE,IAAI,SAAS,MAAM,QAAQ,EAAE,IAAI,SAAS,MAAM,QAAW;AAC/D,MAAE,OAAO,oBAAoB,MAAM;AACnC,WAAO,EAAE,KAAK,EAAE,OAAO,kBAAkB,GAAG,GAAG;AAAA,EACjD;AACA,QAAM,KAAK;AACb;","names":[]}
+{"version":3,"sources":["../src/hono.ts"],"sourcesContent":["// Hono: the routes, and who is signed in on every request.\n//\n//   const app = new Hono<{ Variables: CauthyVariables }>()\n//   app.use(cauthyHono(auth))\n//\n//   app.get('/api/me', (c) => {\n//     const session = c.get('session')\n//     return session ? c.json(session.user) : c.json({ error: 'unauthenticated' }, 401)\n//   })\n//\n//   app.get('/api/books', requireSession, (c) => { … })\n//\n// A session that needs renewing is renewed on the spot, and its new cookie\n// leaves with whatever the route answers. It runs wherever Hono does.\n\nimport type { MiddlewareHandler } from 'hono'\nimport type { Cauthy } from './cauthy'\nimport type { Session } from './types'\n\n/** What the middleware keeps on the context: `new Hono<{ Variables: CauthyVariables }>()`. */\nexport interface CauthyVariables {\n  /** Who is signed in, or null. */\n  session: Session | null\n}\n\ntype Env = { Variables: CauthyVariables }\n\n/**\n * Serves the routes under the handler's `basePath`, and sets `session` for\n * every other request. Mount it once, before the routes that use it.\n */\nexport function cauthyHono(auth: Cauthy): MiddlewareHandler<Env> {\n  const base = auth.options.basePath\n  return async (c, next) => {\n    const path = new URL(c.req.url).pathname\n    if (path === base || path.startsWith(`${base}/`)) return auth.handler(c.req.raw)\n\n    const resolved = await auth.resolve(c.req.raw)\n    c.set('session', resolved.session)\n    await next()\n    for (const cookie of resolved.cookies) c.header('set-cookie', cookie, { append: true })\n  }\n}\n\n/** For a route only a signed-in person may call: answers 401 otherwise. Needs `cauthyHono` mounted before it. */\nexport const requireSession: MiddlewareHandler<Env> = async (c, next) => {\n  if (c.get('session') === null || c.get('session') === undefined) {\n    c.header('x-cauthy-session', 'none')\n    return c.json({ error: 'unauthenticated' }, 401)\n  }\n  await next()\n}\n"],"mappings":";AA+BO,SAAS,WAAW,MAAsC;AAC/D,QAAM,OAAO,KAAK,QAAQ;AAC1B,SAAO,OAAO,GAAG,SAAS;AACxB,UAAM,OAAO,IAAI,IAAI,EAAE,IAAI,GAAG,EAAE;AAChC,QAAI,SAAS,QAAQ,KAAK,WAAW,GAAG,IAAI,GAAG,EAAG,QAAO,KAAK,QAAQ,EAAE,IAAI,GAAG;AAE/E,UAAM,WAAW,MAAM,KAAK,QAAQ,EAAE,IAAI,GAAG;AAC7C,MAAE,IAAI,WAAW,SAAS,OAAO;AACjC,UAAM,KAAK;AACX,eAAW,UAAU,SAAS,QAAS,GAAE,OAAO,cAAc,QAAQ,EAAE,QAAQ,KAAK,CAAC;AAAA,EACxF;AACF;AAGO,IAAM,iBAAyC,OAAO,GAAG,SAAS;AACvE,MAAI,EAAE,IAAI,SAAS,MAAM,QAAQ,EAAE,IAAI,SAAS,MAAM,QAAW;AAC/D,MAAE,OAAO,oBAAoB,MAAM;AACnC,WAAO,EAAE,KAAK,EAAE,OAAO,kBAAkB,GAAG,GAAG;AAAA,EACjD;AACA,QAAM,KAAK;AACb;","names":[]}

package/dist/index.d.mts

@@ -1,6 +1,4 @@
-export { A as AttributeType, a as CatalogResource, C as Cauthy, b as CauthyApiError, c as CauthyConfigError, d as CauthyEvent, e as CauthyKeyError, f as CauthyKeyReason, g as CauthyOptions, h as CauthyPact, i as CauthySystem, j as CauthyTokenError, k as CauthyUnavailableError, l as CauthyWebhookError, m as CheckOf, n as CheckQuestion, o as CheckResult, p as CheckRule, q as ConditionalPermission, r as ContractOptions, J as JsonValue, M as MountTarget, N as NewMember, O as Organization, s as OrganizationMember, t as OrganizationRef, P as PactItem, u as PactStatus, v as PermissionOf, w as Permitted, x as Policy, y as PolicyDefinition, z as PolicyPermission, B as PolicyRole, D as PublicSession, E as PushPolicyOptions, R as ReplayStore, F as Resolved, G as ResolvedContract, H as RoleOf, I as STANDARD_VARIABLES, S as Session, K as SessionOrganization, L as SessionStatus, Q as SessionUser, T as SystemKey, U as SystemOptions, V as SystemPolicy, W as TokenIdentity, X as TokenRefusal, Y as VerifyTokenOptions, Z as VerifyWebhookOptions, _ as can, $ as createCauthy, a0 as createSystem, a1 as createTokenVerifier, a2 as createVerifierFromEnv, a3 as definePolicy, a4 as failClosed, a5 as memoryReplayStore, a6 as policySource, a7 as pullCatalog, a8 as pullPolicy, a9 as pushCatalog, aa as pushPolicy, ab as readContract, ac as remoteKeys, ad as verifyToken, ae as verifyWebhook } from './cauthy-CCSSj3Lg.mjs';
-export { I as Identity } from './identity-BTJ8NB_w.mjs';
-export { K as KeyStore, P as PactKeys, S as StoredKey } from './keys-D5k0omTb.mjs';
+export { A as AttributeType, a as CatalogResource, C as Cauthy, b as CauthyApiError, c as CauthyConfigError, d as CauthyEvent, e as CauthyKeyError, f as CauthyKeyReason, g as CauthyOptions, h as CauthySystem, i as CauthyTokenError, j as CauthyUnavailableError, k as CauthyWebhookError, l as CheckOf, m as CheckQuestion, n as CheckResult, o as CheckRule, p as ConditionalPermission, I as Identity, J as JsonValue, M as MountTarget, N as NewMember, O as Organization, q as OrganizationMember, r as OrganizationRef, P as PermissionOf, s as Permitted, t as Policy, u as PolicyDefinition, v as PolicyPermission, w as PolicyRole, x as PublicSession, y as PushPolicyOptions, R as ReplayStore, z as Resolved, B as RoleOf, S as Session, D as SessionOrganization, E as SessionStatus, F as SessionUser, G as SystemKey, H as SystemOptions, K as SystemPolicy, T as TokenIdentity, L as TokenRefusal, V as VerifyTokenOptions, Q as VerifyWebhookOptions, U as can, W as createCauthy, X as createSystem, Y as createTokenVerifier, Z as createVerifierFromEnv, _ as definePolicy, $ as memoryReplayStore, a0 as policySource, a1 as pullCatalog, a2 as pullPolicy, a3 as pushCatalog, a4 as pushPolicy, a5 as remoteKeys, a6 as verifyToken, a7 as verifyWebhook } from './cauthy-DHRZLndK.mjs';
 export { CauthyTheme, ImportedTheme, PushThemeOptions, StackmythThemeOptions, StackmythTokens, ThemeFont, ThemeTexts, pushTheme, themeFromStackmyth, tokensFromStackmyth } from './theme.mjs';
 import 'jose';
 

package/dist/index.d.ts

@@ -1,6 +1,4 @@
-export { A as AttributeType, a as CatalogResource, C as Cauthy, b as CauthyApiError, c as CauthyConfigError, d as CauthyEvent, e as CauthyKeyError, f as CauthyKeyReason, g as CauthyOptions, h as CauthyPact, i as CauthySystem, j as CauthyTokenError, k as CauthyUnavailableError, l as CauthyWebhookError, m as CheckOf, n as CheckQuestion, o as CheckResult, p as CheckRule, q as ConditionalPermission, r as ContractOptions, J as JsonValue, M as MountTarget, N as NewMember, O as Organization, s as OrganizationMember, t as OrganizationRef, P as PactItem, u as PactStatus, v as PermissionOf, w as Permitted, x as Policy, y as PolicyDefinition, z as PolicyPermission, B as PolicyRole, D as PublicSession, E as PushPolicyOptions, R as ReplayStore, F as Resolved, G as ResolvedContract, H as RoleOf, I as STANDARD_VARIABLES, S as Session, K as SessionOrganization, L as SessionStatus, Q as SessionUser, T as SystemKey, U as SystemOptions, V as SystemPolicy, W as TokenIdentity, X as TokenRefusal, Y as VerifyTokenOptions, Z as VerifyWebhookOptions, _ as can, $ as createCauthy, a0 as createSystem, a1 as createTokenVerifier, a2 as createVerifierFromEnv, a3 as definePolicy, a4 as failClosed, a5 as memoryReplayStore, a6 as policySource, a7 as pullCatalog, a8 as pullPolicy, a9 as pushCatalog, aa as pushPolicy, ab as readContract, ac as remoteKeys, ad as verifyToken, ae as verifyWebhook } from './cauthy-C7gZ-pbv.js';
-export { I as Identity } from './identity-BTJ8NB_w.js';
-export { K as KeyStore, P as PactKeys, S as StoredKey } from './keys-D5k0omTb.js';
+export { A as AttributeType, a as CatalogResource, C as Cauthy, b as CauthyApiError, c as CauthyConfigError, d as CauthyEvent, e as CauthyKeyError, f as CauthyKeyReason, g as CauthyOptions, h as CauthySystem, i as CauthyTokenError, j as CauthyUnavailableError, k as CauthyWebhookError, l as CheckOf, m as CheckQuestion, n as CheckResult, o as CheckRule, p as ConditionalPermission, I as Identity, J as JsonValue, M as MountTarget, N as NewMember, O as Organization, q as OrganizationMember, r as OrganizationRef, P as PermissionOf, s as Permitted, t as Policy, u as PolicyDefinition, v as PolicyPermission, w as PolicyRole, x as PublicSession, y as PushPolicyOptions, R as ReplayStore, z as Resolved, B as RoleOf, S as Session, D as SessionOrganization, E as SessionStatus, F as SessionUser, G as SystemKey, H as SystemOptions, K as SystemPolicy, T as TokenIdentity, L as TokenRefusal, V as VerifyTokenOptions, Q as VerifyWebhookOptions, U as can, W as createCauthy, X as createSystem, Y as createTokenVerifier, Z as createVerifierFromEnv, _ as definePolicy, $ as memoryReplayStore, a0 as policySource, a1 as pullCatalog, a2 as pullPolicy, a3 as pushCatalog, a4 as pushPolicy, a5 as remoteKeys, a6 as verifyToken, a7 as verifyWebhook } from './cauthy-JSYh7J2o.js';
 export { CauthyTheme, ImportedTheme, PushThemeOptions, StackmythThemeOptions, StackmythTokens, ThemeFont, ThemeTexts, pushTheme, themeFromStackmyth, tokensFromStackmyth } from './theme.js';
 import 'jose';