@cedarjs/auth-dbauth-api 5.0.3 → 5.0.4-next.167

package/dist/DbAuthHandler.js

@@ -1,41 +1,25 @@
-"use strict";
-var __create = Object.create;
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __getProtoOf = Object.getPrototypeOf;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
-  // If the importer is in node compatibility mode or this is not an ESM
-  // file that has been converted to a CommonJS file using a Babel-
-  // compatible transform (i.e. "__esModule" has not been set), then set
-  // "default" to the CommonJS "module.exports" for node compatibility.
-  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
-  mod
-));
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var DbAuthHandler_exports = {};
-__export(DbAuthHandler_exports, {
-  DbAuthHandler: () => DbAuthHandler
-});
-module.exports = __toCommonJS(DbAuthHandler_exports);
-var import_md5 = __toESM(require("md5"));
-var import_uuid = require("uuid");
-var import_api = require("@cedarjs/api");
-var DbAuthError = __toESM(require("./errors.js"));
-var import_shared = require("./shared.js");
+import md5 from "md5";
+import { v4 as uuidv4 } from "uuid";
+import {
+  createCorsContext,
+  isFetchApiRequest,
+  normalizeRequest
+} from "@cedarjs/api";
+import * as DbAuthError from "./errors.js";
+import {
+  decryptSession,
+  encryptSession,
+  extractCookie,
+  extractHashingOptions,
+  generateCookieName,
+  getDbAuthResponseBuilder,
+  getSession,
+  hashPassword,
+  hashToken,
+  isLegacySession,
+  legacyHashPassword,
+  webAuthnSession
+} from "./shared.js";
 const DEFAULT_ALLOWED_USER_FIELDS = ["id", "email"];
 class DbAuthHandler {
   event;
@@ -101,7 +85,7 @@ class DbAuthHandler {
   }
   // generate a new token (standard UUID)
   static get CSRF_TOKEN() {
-    return (0, import_uuid.v4)();
+    return uuidv4();
   }
   static get AVAILABLE_WEBAUTHN_TRANSPORTS() {
     return ["usb", "ble", "nfc", "internal"];
@@ -120,7 +104,7 @@ class DbAuthHandler {
     deleteHeaders.append(
       "set-cookie",
       [
-        `${(0, import_shared.generateCookieName)(this.options.cookie?.name)}=`,
+        `${generateCookieName(this.options.cookie?.name)}=`,
         ...this._cookieAttributes({ expires: "now" })
       ].join(";")
     );
@@ -135,9 +119,9 @@ class DbAuthHandler {
   constructor(event, _context, options) {
     this.options = options;
     this.event = event;
-    this.httpMethod = (0, import_api.isFetchApiRequest)(event) ? event.method : event.httpMethod;
-    this.cookie = (0, import_shared.extractCookie)(event) || "";
-    this.createResponse = (0, import_shared.getDbAuthResponseBuilder)(event);
+    this.httpMethod = isFetchApiRequest(event) ? event.method : event.httpMethod;
+    this.cookie = extractCookie(event) || "";
+    this.createResponse = getDbAuthResponseBuilder(event);
     this._validateOptions();
     this.db = this.options.db;
     this.dbAccessor = this.db[this.options.authModelAccessor];
@@ -155,11 +139,11 @@ class DbAuthHandler {
     );
     this.webAuthnExpiresDate = webAuthnExpiresAt.toUTCString();
     if (options.cors) {
-      this.corsContext = (0, import_api.createCorsContext)(options.cors);
+      this.corsContext = createCorsContext(options.cors);
     }
     try {
-      this.encryptedSession = (0, import_shared.getSession)(this.cookie, this.options.cookie?.name);
-      const [session, csrfToken] = (0, import_shared.decryptSession)(this.encryptedSession);
+      this.encryptedSession = getSession(this.cookie, this.options.cookie?.name);
+      const [session, csrfToken] = decryptSession(this.encryptedSession);
       this.session = session;
       this.sessionCsrfToken = csrfToken;
     } catch (e) {
@@ -174,7 +158,7 @@ class DbAuthHandler {
   // is parsed async
   async init() {
     if (!this._normalizedRequest) {
-      this._normalizedRequest = await (0, import_api.normalizeRequest)(
+      this._normalizedRequest = await normalizeRequest(
         this.event
       );
     }
@@ -243,10 +227,10 @@ class DbAuthHandler {
       tokenExpires.setSeconds(
         tokenExpires.getSeconds() + this.options.forgotPassword.expires
       );
-      let token = (0, import_md5.default)((0, import_uuid.v4)());
+      let token = md5(uuidv4());
       const buffer = Buffer.from(token);
       token = buffer.toString("base64").replace("=", "").substring(0, 16);
-      const tokenHash = (0, import_shared.hashToken)(token);
+      const tokenHash = hashToken(token);
       try {
         user = await this.dbAccessor.update({
           where: {
@@ -275,7 +259,7 @@ class DbAuthHandler {
     try {
       const user = await this._getCurrentUser();
       let headers = new Headers();
-      if ((0, import_shared.isLegacySession)(this.cookie)) {
+      if (isLegacySession(this.cookie)) {
         headers = this._loginResponse(user)[1];
       }
       return [user[this.options.authFields.id], headers];
@@ -326,10 +310,10 @@ class DbAuthHandler {
     ;
     this.options.signup.passwordValidation?.(password);
     let user = await this._findUserByToken(resetToken);
-    const [hashedPassword] = (0, import_shared.hashPassword)(password, {
+    const [hashedPassword] = hashPassword(password, {
       salt: user.salt
     });
-    const [legacyHashedPassword] = (0, import_shared.legacyHashPassword)(password, user.salt);
+    const [legacyHashedPassword] = legacyHashPassword(password, user.salt);
     if (!this.options.resetPassword.allowReusedPassword && user.hashedPassword === hashedPassword || user.hashedPassword === legacyHashedPassword) {
       throw new DbAuthError.ReusedPasswordError(
         this.options.resetPassword?.errors?.reusedPassword
@@ -456,7 +440,7 @@ class DbAuthHandler {
       throw new DbAuthError.WebAuthnError("WebAuthn is not enabled");
     }
     const webAuthnOptions = this.options.webAuthn;
-    const credentialId = (0, import_shared.webAuthnSession)(this.event);
+    const credentialId = webAuthnSession(this.event);
     let user;
     if (credentialId) {
       const credential = await this.dbCredentialAccessor.findUnique({
@@ -685,9 +669,9 @@ class DbAuthHandler {
   // creates the session)
   _createSessionCookieString(data, csrfToken) {
     const session = JSON.stringify(data) + ";" + csrfToken;
-    const encrypted = (0, import_shared.encryptSession)(session);
+    const encrypted = encryptSession(session);
     const sessionCookieString = [
-      `${(0, import_shared.generateCookieName)(this.options.cookie?.name)}=${encrypted}`,
+      `${generateCookieName(this.options.cookie?.name)}=${encrypted}`,
       ...this._cookieAttributes({ expires: this.sessionExpiresDate })
     ].join(";");
     return sessionCookieString;
@@ -705,7 +689,7 @@ class DbAuthHandler {
     tokenExpires.setSeconds(
       tokenExpires.getSeconds() - this.options.forgotPassword.expires
     );
-    const tokenHash = (0, import_shared.hashToken)(token);
+    const tokenHash = hashToken(token);
     const user = await this.dbAccessor.findFirst({
       where: {
         [this.options.authFields.resetToken]: tokenHash
@@ -771,11 +755,11 @@ class DbAuthHandler {
   // with the one in the database. Falls back to the legacy CryptoJS algorihtm
   // if no options are present.
   async _verifyPassword(user, password) {
-    const options = (0, import_shared.extractHashingOptions)(
+    const options = extractHashingOptions(
       user[this.options.authFields.hashedPassword]
     );
     if (Object.keys(options).length) {
-      const [hashedPassword] = (0, import_shared.hashPassword)(password, {
+      const [hashedPassword] = hashPassword(password, {
         salt: user[this.options.authFields.salt],
         options
       });
@@ -783,12 +767,12 @@ class DbAuthHandler {
         return user;
       }
     } else {
-      const [legacyHashedPassword] = (0, import_shared.legacyHashPassword)(
+      const [legacyHashedPassword] = legacyHashPassword(
         password,
         user[this.options.authFields.salt]
       );
       if (legacyHashedPassword === user[this.options.authFields.hashedPassword]) {
-        const [newHashedPassword] = (0, import_shared.hashPassword)(password, {
+        const [newHashedPassword] = hashPassword(password, {
           salt: user[this.options.authFields.salt]
         });
         await this.dbAccessor.update({
@@ -847,7 +831,7 @@ class DbAuthHandler {
           this.options.signup?.errors?.usernameTaken
         );
       }
-      const [hashedPassword, salt] = (0, import_shared.hashPassword)(password);
+      const [hashedPassword, salt] = hashPassword(password);
       const newUser = await this.options.signup.handler({
         username,
         hashedPassword,
@@ -925,7 +909,6 @@ class DbAuthHandler {
     return findUniqueUserMatchCriteriaOptions;
   }
 }
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
+export {
   DbAuthHandler
-});
+};

package/dist/decoder.js

@@ -1,34 +1,10 @@
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var decoder_exports = {};
-__export(decoder_exports, {
-  authDecoder: () => authDecoder,
-  createAuthDecoder: () => createAuthDecoder
-});
-module.exports = __toCommonJS(decoder_exports);
-var import_shared = require("./shared.js");
+import { dbAuthSession } from "./shared.js";
 const createAuthDecoder = (cookieNameTemplate) => {
   return async (_token, type, req) => {
     if (type !== "dbAuth") {
       return null;
     }
-    const session = (0, import_shared.dbAuthSession)(req.event, cookieNameTemplate);
+    const session = dbAuthSession(req.event, cookieNameTemplate);
     return session;
   };
 };
@@ -36,11 +12,10 @@ const authDecoder = async (_authHeaderValue, type, req) => {
   if (type !== "dbAuth") {
     return null;
   }
-  const session = (0, import_shared.dbAuthSession)(req.event, void 0);
+  const session = dbAuthSession(req.event, void 0);
   return session;
 };
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
+export {
   authDecoder,
   createAuthDecoder
-});
+};

package/dist/errors.js

@@ -1,56 +1,3 @@
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var errors_exports = {};
-__export(errors_exports, {
-  CsrfTokenMismatchError: () => CsrfTokenMismatchError,
-  DuplicateUsernameError: () => DuplicateUsernameError,
-  FieldRequiredError: () => FieldRequiredError,
-  FlowNotEnabledError: () => FlowNotEnabledError,
-  GenericError: () => GenericError,
-  IncorrectPasswordError: () => IncorrectPasswordError,
-  MissingWebAuthnConfigError: () => MissingWebAuthnConfigError,
-  NoForgotPasswordHandlerError: () => NoForgotPasswordHandlerError,
-  NoLoginHandlerError: () => NoLoginHandlerError,
-  NoResetPasswordHandlerError: () => NoResetPasswordHandlerError,
-  NoSessionExpirationError: () => NoSessionExpirationError,
-  NoSessionSecretError: () => NoSessionSecretError,
-  NoSignupHandlerError: () => NoSignupHandlerError,
-  NoUserIdError: () => NoUserIdError,
-  NoWebAuthnConfigError: () => NoWebAuthnConfigError,
-  NoWebAuthnSessionError: () => NoWebAuthnSessionError,
-  NotLoggedInError: () => NotLoggedInError,
-  PasswordRequiredError: () => PasswordRequiredError,
-  PasswordValidationError: () => PasswordValidationError,
-  ResetTokenExpiredError: () => ResetTokenExpiredError,
-  ResetTokenInvalidError: () => ResetTokenInvalidError,
-  ResetTokenRequiredError: () => ResetTokenRequiredError,
-  ReusedPasswordError: () => ReusedPasswordError,
-  SessionDecryptionError: () => SessionDecryptionError,
-  UnknownAuthMethodError: () => UnknownAuthMethodError,
-  UserNotFoundError: () => UserNotFoundError,
-  UsernameAndPasswordRequiredError: () => UsernameAndPasswordRequiredError,
-  UsernameNotFoundError: () => UsernameNotFoundError,
-  UsernameRequiredError: () => UsernameRequiredError,
-  WebAuthnError: () => WebAuthnError,
-  WrongVerbError: () => WrongVerbError
-});
-module.exports = __toCommonJS(errors_exports);
 class NoSessionSecretError extends Error {
   constructor() {
     super(
@@ -249,8 +196,7 @@ class NoWebAuthnSessionError extends WebAuthnError {
     this.name = "NoWebAuthnSessionError";
   }
 }
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
+export {
   CsrfTokenMismatchError,
   DuplicateUsernameError,
   FieldRequiredError,
@@ -282,4 +228,4 @@ class NoWebAuthnSessionError extends WebAuthnError {
   UsernameRequiredError,
   WebAuthnError,
   WrongVerbError
-});
+};

package/dist/index.js

@@ -1,38 +1,9 @@
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __reExport = (target, mod, secondTarget) => (__copyProps(target, mod, "default"), secondTarget && __copyProps(secondTarget, mod, "default"));
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var index_exports = {};
-__export(index_exports, {
-  PasswordValidationError: () => import_errors.PasswordValidationError,
-  authDecoder: () => import_decoder.authDecoder,
-  createAuthDecoder: () => import_decoder.createAuthDecoder
-});
-module.exports = __toCommonJS(index_exports);
-__reExport(index_exports, require("./DbAuthHandler.js"), module.exports);
-var import_errors = require("./errors.js");
-__reExport(index_exports, require("./shared.js"), module.exports);
-var import_decoder = require("./decoder.js");
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
+export * from "./DbAuthHandler.js";
+import { PasswordValidationError } from "./errors.js";
+export * from "./shared.js";
+import { authDecoder, createAuthDecoder } from "./decoder.js";
+export {
   PasswordValidationError,
   authDecoder,
-  createAuthDecoder,
-  ...require("./DbAuthHandler.js"),
-  ...require("./shared.js")
-});
+  createAuthDecoder
+};

package/dist/shared.js

@@ -1,52 +1,7 @@
-"use strict";
-var __create = Object.create;
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __getProtoOf = Object.getPrototypeOf;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
-  // If the importer is in node compatibility mode or this is not an ESM
-  // file that has been converted to a CommonJS file using a Babel-
-  // compatible transform (i.e. "__esModule" has not been set), then set
-  // "default" to the CommonJS "module.exports" for node compatibility.
-  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
-  mod
-));
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var shared_exports = {};
-__export(shared_exports, {
-  dbAuthSession: () => dbAuthSession,
-  decryptSession: () => decryptSession,
-  encryptSession: () => encryptSession,
-  extractCookie: () => extractCookie,
-  extractHashingOptions: () => extractHashingOptions,
-  generateCookieName: () => generateCookieName,
-  getDbAuthResponseBuilder: () => getDbAuthResponseBuilder,
-  getSession: () => getSession,
-  hashPassword: () => hashPassword,
-  hashToken: () => hashToken,
-  isLegacySession: () => isLegacySession,
-  legacyHashPassword: () => legacyHashPassword,
-  webAuthnSession: () => webAuthnSession
-});
-module.exports = __toCommonJS(shared_exports);
-var import_node_crypto = __toESM(require("node:crypto"));
-var import_api = require("@cedarjs/api");
-var import_project_config = require("@cedarjs/project-config");
-var DbAuthError = __toESM(require("./errors.js"));
+import crypto from "node:crypto";
+import { getEventHeader, isFetchApiRequest } from "@cedarjs/api";
+import { getConfig, getConfigPath } from "@cedarjs/project-config";
+import * as DbAuthError from "./errors.js";
 const DEFAULT_SCRYPT_OPTIONS = {
   cost: 2 ** 14,
   blockSize: 8,
@@ -54,17 +9,17 @@ const DEFAULT_SCRYPT_OPTIONS = {
 };
 const getPort = () => {
   try {
-    (0, import_project_config.getConfigPath)();
+    getConfigPath();
   } catch {
     return 8911;
   }
-  return (0, import_project_config.getConfig)().api.port;
+  return getConfig().api.port;
 };
 const eventGraphiQLHeadersCookie = (event) => {
   if (process.env.NODE_ENV !== "development") {
     return;
   }
-  const impersationationHeader = (0, import_api.getEventHeader)(
+  const impersationationHeader = getEventHeader(
     event,
     "rw-studio-impersonation-cookie"
   );
@@ -72,7 +27,7 @@ const eventGraphiQLHeadersCookie = (event) => {
     return impersationationHeader;
   }
   try {
-    if (!(0, import_api.isFetchApiRequest)(event)) {
+    if (!isFetchApiRequest(event)) {
       const jsonBody = JSON.parse(event.body ?? "{}");
       return jsonBody?.extensions?.headers?.cookie || jsonBody?.extensions?.headers?.Cookie;
     }
@@ -90,17 +45,17 @@ const legacyDecryptSession = (encryptedText) => {
   const md5Hashes = [];
   let digest = password;
   for (let i = 0; i < 3; i++) {
-    md5Hashes[i] = import_node_crypto.default.createHash("md5").update(digest).digest();
+    md5Hashes[i] = crypto.createHash("md5").update(digest).digest();
     digest = Buffer.concat([md5Hashes[i], password]);
   }
   const key = Buffer.concat([md5Hashes[0], md5Hashes[1]]);
   const iv = md5Hashes[2];
   const contents = cypher.slice(16);
-  const decipher = import_node_crypto.default.createDecipheriv("aes-256-cbc", key, iv);
+  const decipher = crypto.createDecipheriv("aes-256-cbc", key, iv);
   return decipher.update(contents) + decipher.final("utf-8");
 };
 const extractCookie = (event) => {
-  return eventGraphiQLHeadersCookie(event) || (0, import_api.getEventHeader)(event, "Cookie");
+  return eventGraphiQLHeadersCookie(event) || getEventHeader(event, "Cookie");
 };
 const isLegacySession = (text) => {
   if (!text) {
@@ -117,7 +72,7 @@ const decryptSession = (text) => {
   const [encryptedText, iv] = text.split("|");
   try {
     if (iv) {
-      const decipher = import_node_crypto.default.createDecipheriv(
+      const decipher = crypto.createDecipheriv(
         "aes-256-cbc",
         process.env.SESSION_SECRET.substring(0, 32),
         Buffer.from(iv, "base64")
@@ -134,8 +89,8 @@ const decryptSession = (text) => {
   }
 };
 const encryptSession = (dataString) => {
-  const iv = import_node_crypto.default.randomBytes(16);
-  const cipher = import_node_crypto.default.createCipheriv(
+  const iv = crypto.randomBytes(16);
+  const cipher = crypto.createCipheriv(
     "aes-256-cbc",
     process.env.SESSION_SECRET.substring(0, 32),
     iv
@@ -182,13 +137,13 @@ const webAuthnSession = (event) => {
   return webAuthnCookie.split("=")[1].trim();
 };
 const hashToken = (token) => {
-  return import_node_crypto.default.createHash("sha256").update(token).digest("hex");
+  return crypto.createHash("sha256").update(token).digest("hex");
 };
 const hashPassword = (text, {
-  salt = import_node_crypto.default.randomBytes(32).toString("hex"),
+  salt = crypto.randomBytes(32).toString("hex"),
   options = DEFAULT_SCRYPT_OPTIONS
 } = {}) => {
-  const encryptedString = import_node_crypto.default.scryptSync(text.normalize("NFC"), salt, 32, options).toString("hex");
+  const encryptedString = crypto.scryptSync(text.normalize("NFC"), salt, 32, options).toString("hex");
   const optionsToString = [
     options.cost,
     options.blockSize,
@@ -197,9 +152,9 @@ const hashPassword = (text, {
   return [`${encryptedString}|${optionsToString.join("|")}`, salt];
 };
 const legacyHashPassword = (text, salt) => {
-  const useSalt = salt || import_node_crypto.default.randomBytes(32).toString("hex");
+  const useSalt = salt || crypto.randomBytes(32).toString("hex");
   return [
-    import_node_crypto.default.pbkdf2Sync(text, useSalt, 1, 32, "SHA1").toString("hex"),
+    crypto.pbkdf2Sync(text, useSalt, 1, 32, "SHA1").toString("hex"),
     useSalt
   ];
 };
@@ -250,8 +205,7 @@ const extractHashingOptions = (text) => {
     return {};
   }
 };
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
+export {
   dbAuthSession,
   decryptSession,
   encryptSession,
@@ -265,4 +219,4 @@ const extractHashingOptions = (text) => {
   isLegacySession,
   legacyHashPassword,
   webAuthnSession
-});
+};

package/package.json

@@ -1,13 +1,13 @@
 {
   "name": "@cedarjs/auth-dbauth-api",
-  "version": "5.0.3",
+  "version": "5.0.4-next.167",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/cedarjs/cedar.git",
     "directory": "packages/auth-providers/dbAuth/api"
   },
   "license": "MIT",
-  "type": "commonjs",
+  "type": "module",
   "exports": {
     ".": {
       "default": {
@@ -46,9 +46,9 @@
     "dist"
   ],
   "scripts": {
-    "build": "node ./build.mts && yarn build:types",
+    "build": "node ./build.mts",
     "build:pack": "yarn pack -o cedarjs-auth-dbauth-api.tgz",
-    "build:types": "tsc --build --verbose ./tsconfig.json",
+    "build:types": "tsc --build --verbose ./tsconfig.build.json",
     "build:watch": "nodemon --watch src --ext \"js,jsx,ts,tsx,template\" --ignore dist --exec \"yarn build\"",
     "check:attw": "yarn cedar-fwtools-attw",
     "check:package": "concurrently npm:check:attw yarn:publint",
@@ -57,20 +57,21 @@
     "test:watch": "vitest watch"
   },
   "dependencies": {
-    "@cedarjs/project-config": "5.0.3",
+    "@cedarjs/project-config": "5.0.4-next.167",
     "md5": "2.3.0",
     "uuid": "11.1.0"
   },
   "devDependencies": {
-    "@arethetypeswrong/cli": "0.18.4",
-    "@cedarjs/api": "5.0.3",
-    "@cedarjs/framework-tools": "5.0.3",
+    "@cedarjs/api": "5.0.4-next.167",
+    "@cedarjs/framework-tools": "5.0.4-next.167",
     "@simplewebauthn/server": "10.0.1",
+    "@simplewebauthn/types": "10.0.0",
+    "@types/aws-lambda": "8.10.162",
     "@types/md5": "2.3.6",
     "concurrently": "9.2.4",
-    "publint": "0.3.21",
+    "publint": "0.3.22",
     "typescript": "5.9.3",
-    "vitest": "3.2.6"
+    "vitest": "4.1.10"
   },
   "engines": {
     "node": ">=24"