@cedarjs/auth-dbauth-api 5.0.4-next.167 → 5.0.4

package/dist/DbAuthHandler.js

@@ -1,25 +1,41 @@
-import md5 from "md5";
-import { v4 as uuidv4 } from "uuid";
-import {
-  createCorsContext,
-  isFetchApiRequest,
-  normalizeRequest
-} from "@cedarjs/api";
-import * as DbAuthError from "./errors.js";
-import {
-  decryptSession,
-  encryptSession,
-  extractCookie,
-  extractHashingOptions,
-  generateCookieName,
-  getDbAuthResponseBuilder,
-  getSession,
-  hashPassword,
-  hashToken,
-  isLegacySession,
-  legacyHashPassword,
-  webAuthnSession
-} from "./shared.js";
+"use strict";
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var DbAuthHandler_exports = {};
+__export(DbAuthHandler_exports, {
+  DbAuthHandler: () => DbAuthHandler
+});
+module.exports = __toCommonJS(DbAuthHandler_exports);
+var import_md5 = __toESM(require("md5"));
+var import_uuid = require("uuid");
+var import_api = require("@cedarjs/api");
+var DbAuthError = __toESM(require("./errors.js"));
+var import_shared = require("./shared.js");
 const DEFAULT_ALLOWED_USER_FIELDS = ["id", "email"];
 class DbAuthHandler {
   event;
@@ -85,7 +101,7 @@ class DbAuthHandler {
   }
   // generate a new token (standard UUID)
   static get CSRF_TOKEN() {
-    return uuidv4();
+    return (0, import_uuid.v4)();
   }
   static get AVAILABLE_WEBAUTHN_TRANSPORTS() {
     return ["usb", "ble", "nfc", "internal"];
@@ -104,7 +120,7 @@ class DbAuthHandler {
     deleteHeaders.append(
       "set-cookie",
       [
-        `${generateCookieName(this.options.cookie?.name)}=`,
+        `${(0, import_shared.generateCookieName)(this.options.cookie?.name)}=`,
         ...this._cookieAttributes({ expires: "now" })
       ].join(";")
     );
@@ -119,9 +135,9 @@ class DbAuthHandler {
   constructor(event, _context, options) {
     this.options = options;
     this.event = event;
-    this.httpMethod = isFetchApiRequest(event) ? event.method : event.httpMethod;
-    this.cookie = extractCookie(event) || "";
-    this.createResponse = getDbAuthResponseBuilder(event);
+    this.httpMethod = (0, import_api.isFetchApiRequest)(event) ? event.method : event.httpMethod;
+    this.cookie = (0, import_shared.extractCookie)(event) || "";
+    this.createResponse = (0, import_shared.getDbAuthResponseBuilder)(event);
     this._validateOptions();
     this.db = this.options.db;
     this.dbAccessor = this.db[this.options.authModelAccessor];
@@ -139,11 +155,11 @@ class DbAuthHandler {
     );
     this.webAuthnExpiresDate = webAuthnExpiresAt.toUTCString();
     if (options.cors) {
-      this.corsContext = createCorsContext(options.cors);
+      this.corsContext = (0, import_api.createCorsContext)(options.cors);
     }
     try {
-      this.encryptedSession = getSession(this.cookie, this.options.cookie?.name);
-      const [session, csrfToken] = decryptSession(this.encryptedSession);
+      this.encryptedSession = (0, import_shared.getSession)(this.cookie, this.options.cookie?.name);
+      const [session, csrfToken] = (0, import_shared.decryptSession)(this.encryptedSession);
       this.session = session;
       this.sessionCsrfToken = csrfToken;
     } catch (e) {
@@ -158,7 +174,7 @@ class DbAuthHandler {
   // is parsed async
   async init() {
     if (!this._normalizedRequest) {
-      this._normalizedRequest = await normalizeRequest(
+      this._normalizedRequest = await (0, import_api.normalizeRequest)(
         this.event
       );
     }
@@ -227,10 +243,10 @@ class DbAuthHandler {
       tokenExpires.setSeconds(
         tokenExpires.getSeconds() + this.options.forgotPassword.expires
       );
-      let token = md5(uuidv4());
+      let token = (0, import_md5.default)((0, import_uuid.v4)());
       const buffer = Buffer.from(token);
       token = buffer.toString("base64").replace("=", "").substring(0, 16);
-      const tokenHash = hashToken(token);
+      const tokenHash = (0, import_shared.hashToken)(token);
       try {
         user = await this.dbAccessor.update({
           where: {
@@ -259,7 +275,7 @@ class DbAuthHandler {
     try {
       const user = await this._getCurrentUser();
       let headers = new Headers();
-      if (isLegacySession(this.cookie)) {
+      if ((0, import_shared.isLegacySession)(this.cookie)) {
         headers = this._loginResponse(user)[1];
       }
       return [user[this.options.authFields.id], headers];
@@ -310,10 +326,10 @@ class DbAuthHandler {
     ;
     this.options.signup.passwordValidation?.(password);
     let user = await this._findUserByToken(resetToken);
-    const [hashedPassword] = hashPassword(password, {
+    const [hashedPassword] = (0, import_shared.hashPassword)(password, {
       salt: user.salt
     });
-    const [legacyHashedPassword] = legacyHashPassword(password, user.salt);
+    const [legacyHashedPassword] = (0, import_shared.legacyHashPassword)(password, user.salt);
     if (!this.options.resetPassword.allowReusedPassword && user.hashedPassword === hashedPassword || user.hashedPassword === legacyHashedPassword) {
       throw new DbAuthError.ReusedPasswordError(
         this.options.resetPassword?.errors?.reusedPassword
@@ -440,7 +456,7 @@ class DbAuthHandler {
       throw new DbAuthError.WebAuthnError("WebAuthn is not enabled");
     }
     const webAuthnOptions = this.options.webAuthn;
-    const credentialId = webAuthnSession(this.event);
+    const credentialId = (0, import_shared.webAuthnSession)(this.event);
     let user;
     if (credentialId) {
       const credential = await this.dbCredentialAccessor.findUnique({
@@ -669,9 +685,9 @@ class DbAuthHandler {
   // creates the session)
   _createSessionCookieString(data, csrfToken) {
     const session = JSON.stringify(data) + ";" + csrfToken;
-    const encrypted = encryptSession(session);
+    const encrypted = (0, import_shared.encryptSession)(session);
     const sessionCookieString = [
-      `${generateCookieName(this.options.cookie?.name)}=${encrypted}`,
+      `${(0, import_shared.generateCookieName)(this.options.cookie?.name)}=${encrypted}`,
       ...this._cookieAttributes({ expires: this.sessionExpiresDate })
     ].join(";");
     return sessionCookieString;
@@ -689,7 +705,7 @@ class DbAuthHandler {
     tokenExpires.setSeconds(
       tokenExpires.getSeconds() - this.options.forgotPassword.expires
     );
-    const tokenHash = hashToken(token);
+    const tokenHash = (0, import_shared.hashToken)(token);
     const user = await this.dbAccessor.findFirst({
       where: {
         [this.options.authFields.resetToken]: tokenHash
@@ -755,11 +771,11 @@ class DbAuthHandler {
   // with the one in the database. Falls back to the legacy CryptoJS algorihtm
   // if no options are present.
   async _verifyPassword(user, password) {
-    const options = extractHashingOptions(
+    const options = (0, import_shared.extractHashingOptions)(
       user[this.options.authFields.hashedPassword]
     );
     if (Object.keys(options).length) {
-      const [hashedPassword] = hashPassword(password, {
+      const [hashedPassword] = (0, import_shared.hashPassword)(password, {
         salt: user[this.options.authFields.salt],
         options
       });
@@ -767,12 +783,12 @@ class DbAuthHandler {
         return user;
       }
     } else {
-      const [legacyHashedPassword] = legacyHashPassword(
+      const [legacyHashedPassword] = (0, import_shared.legacyHashPassword)(
         password,
         user[this.options.authFields.salt]
       );
       if (legacyHashedPassword === user[this.options.authFields.hashedPassword]) {
-        const [newHashedPassword] = hashPassword(password, {
+        const [newHashedPassword] = (0, import_shared.hashPassword)(password, {
           salt: user[this.options.authFields.salt]
         });
         await this.dbAccessor.update({
@@ -831,7 +847,7 @@ class DbAuthHandler {
           this.options.signup?.errors?.usernameTaken
         );
       }
-      const [hashedPassword, salt] = hashPassword(password);
+      const [hashedPassword, salt] = (0, import_shared.hashPassword)(password);
       const newUser = await this.options.signup.handler({
         username,
         hashedPassword,
@@ -909,6 +925,7 @@ class DbAuthHandler {
     return findUniqueUserMatchCriteriaOptions;
   }
 }
-export {
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
   DbAuthHandler
-};
+});

package/dist/decoder.js

@@ -1,10 +1,34 @@
-import { dbAuthSession } from "./shared.js";
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var decoder_exports = {};
+__export(decoder_exports, {
+  authDecoder: () => authDecoder,
+  createAuthDecoder: () => createAuthDecoder
+});
+module.exports = __toCommonJS(decoder_exports);
+var import_shared = require("./shared.js");
 const createAuthDecoder = (cookieNameTemplate) => {
   return async (_token, type, req) => {
     if (type !== "dbAuth") {
       return null;
     }
-    const session = dbAuthSession(req.event, cookieNameTemplate);
+    const session = (0, import_shared.dbAuthSession)(req.event, cookieNameTemplate);
     return session;
   };
 };
@@ -12,10 +36,11 @@ const authDecoder = async (_authHeaderValue, type, req) => {
   if (type !== "dbAuth") {
     return null;
   }
-  const session = dbAuthSession(req.event, void 0);
+  const session = (0, import_shared.dbAuthSession)(req.event, void 0);
   return session;
 };
-export {
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
   authDecoder,
   createAuthDecoder
-};
+});

package/dist/errors.js

@@ -1,3 +1,56 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var errors_exports = {};
+__export(errors_exports, {
+  CsrfTokenMismatchError: () => CsrfTokenMismatchError,
+  DuplicateUsernameError: () => DuplicateUsernameError,
+  FieldRequiredError: () => FieldRequiredError,
+  FlowNotEnabledError: () => FlowNotEnabledError,
+  GenericError: () => GenericError,
+  IncorrectPasswordError: () => IncorrectPasswordError,
+  MissingWebAuthnConfigError: () => MissingWebAuthnConfigError,
+  NoForgotPasswordHandlerError: () => NoForgotPasswordHandlerError,
+  NoLoginHandlerError: () => NoLoginHandlerError,
+  NoResetPasswordHandlerError: () => NoResetPasswordHandlerError,
+  NoSessionExpirationError: () => NoSessionExpirationError,
+  NoSessionSecretError: () => NoSessionSecretError,
+  NoSignupHandlerError: () => NoSignupHandlerError,
+  NoUserIdError: () => NoUserIdError,
+  NoWebAuthnConfigError: () => NoWebAuthnConfigError,
+  NoWebAuthnSessionError: () => NoWebAuthnSessionError,
+  NotLoggedInError: () => NotLoggedInError,
+  PasswordRequiredError: () => PasswordRequiredError,
+  PasswordValidationError: () => PasswordValidationError,
+  ResetTokenExpiredError: () => ResetTokenExpiredError,
+  ResetTokenInvalidError: () => ResetTokenInvalidError,
+  ResetTokenRequiredError: () => ResetTokenRequiredError,
+  ReusedPasswordError: () => ReusedPasswordError,
+  SessionDecryptionError: () => SessionDecryptionError,
+  UnknownAuthMethodError: () => UnknownAuthMethodError,
+  UserNotFoundError: () => UserNotFoundError,
+  UsernameAndPasswordRequiredError: () => UsernameAndPasswordRequiredError,
+  UsernameNotFoundError: () => UsernameNotFoundError,
+  UsernameRequiredError: () => UsernameRequiredError,
+  WebAuthnError: () => WebAuthnError,
+  WrongVerbError: () => WrongVerbError
+});
+module.exports = __toCommonJS(errors_exports);
 class NoSessionSecretError extends Error {
   constructor() {
     super(
@@ -196,7 +249,8 @@ class NoWebAuthnSessionError extends WebAuthnError {
     this.name = "NoWebAuthnSessionError";
   }
 }
-export {
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
   CsrfTokenMismatchError,
   DuplicateUsernameError,
   FieldRequiredError,
@@ -228,4 +282,4 @@ export {
   UsernameRequiredError,
   WebAuthnError,
   WrongVerbError
-};
+});

package/dist/index.js

@@ -1,9 +1,38 @@
-export * from "./DbAuthHandler.js";
-import { PasswordValidationError } from "./errors.js";
-export * from "./shared.js";
-import { authDecoder, createAuthDecoder } from "./decoder.js";
-export {
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __reExport = (target, mod, secondTarget) => (__copyProps(target, mod, "default"), secondTarget && __copyProps(secondTarget, mod, "default"));
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var index_exports = {};
+__export(index_exports, {
+  PasswordValidationError: () => import_errors.PasswordValidationError,
+  authDecoder: () => import_decoder.authDecoder,
+  createAuthDecoder: () => import_decoder.createAuthDecoder
+});
+module.exports = __toCommonJS(index_exports);
+__reExport(index_exports, require("./DbAuthHandler.js"), module.exports);
+var import_errors = require("./errors.js");
+__reExport(index_exports, require("./shared.js"), module.exports);
+var import_decoder = require("./decoder.js");
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
   PasswordValidationError,
   authDecoder,
-  createAuthDecoder
-};
+  createAuthDecoder,
+  ...require("./DbAuthHandler.js"),
+  ...require("./shared.js")
+});

package/dist/shared.js

@@ -1,7 +1,52 @@
-import crypto from "node:crypto";
-import { getEventHeader, isFetchApiRequest } from "@cedarjs/api";
-import { getConfig, getConfigPath } from "@cedarjs/project-config";
-import * as DbAuthError from "./errors.js";
+"use strict";
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var shared_exports = {};
+__export(shared_exports, {
+  dbAuthSession: () => dbAuthSession,
+  decryptSession: () => decryptSession,
+  encryptSession: () => encryptSession,
+  extractCookie: () => extractCookie,
+  extractHashingOptions: () => extractHashingOptions,
+  generateCookieName: () => generateCookieName,
+  getDbAuthResponseBuilder: () => getDbAuthResponseBuilder,
+  getSession: () => getSession,
+  hashPassword: () => hashPassword,
+  hashToken: () => hashToken,
+  isLegacySession: () => isLegacySession,
+  legacyHashPassword: () => legacyHashPassword,
+  webAuthnSession: () => webAuthnSession
+});
+module.exports = __toCommonJS(shared_exports);
+var import_node_crypto = __toESM(require("node:crypto"));
+var import_api = require("@cedarjs/api");
+var import_project_config = require("@cedarjs/project-config");
+var DbAuthError = __toESM(require("./errors.js"));
 const DEFAULT_SCRYPT_OPTIONS = {
   cost: 2 ** 14,
   blockSize: 8,
@@ -9,17 +54,17 @@ const DEFAULT_SCRYPT_OPTIONS = {
 };
 const getPort = () => {
   try {
-    getConfigPath();
+    (0, import_project_config.getConfigPath)();
   } catch {
     return 8911;
   }
-  return getConfig().api.port;
+  return (0, import_project_config.getConfig)().api.port;
 };
 const eventGraphiQLHeadersCookie = (event) => {
   if (process.env.NODE_ENV !== "development") {
     return;
   }
-  const impersationationHeader = getEventHeader(
+  const impersationationHeader = (0, import_api.getEventHeader)(
     event,
     "rw-studio-impersonation-cookie"
   );
@@ -27,7 +72,7 @@ const eventGraphiQLHeadersCookie = (event) => {
     return impersationationHeader;
   }
   try {
-    if (!isFetchApiRequest(event)) {
+    if (!(0, import_api.isFetchApiRequest)(event)) {
       const jsonBody = JSON.parse(event.body ?? "{}");
       return jsonBody?.extensions?.headers?.cookie || jsonBody?.extensions?.headers?.Cookie;
     }
@@ -45,17 +90,17 @@ const legacyDecryptSession = (encryptedText) => {
   const md5Hashes = [];
   let digest = password;
   for (let i = 0; i < 3; i++) {
-    md5Hashes[i] = crypto.createHash("md5").update(digest).digest();
+    md5Hashes[i] = import_node_crypto.default.createHash("md5").update(digest).digest();
     digest = Buffer.concat([md5Hashes[i], password]);
   }
   const key = Buffer.concat([md5Hashes[0], md5Hashes[1]]);
   const iv = md5Hashes[2];
   const contents = cypher.slice(16);
-  const decipher = crypto.createDecipheriv("aes-256-cbc", key, iv);
+  const decipher = import_node_crypto.default.createDecipheriv("aes-256-cbc", key, iv);
   return decipher.update(contents) + decipher.final("utf-8");
 };
 const extractCookie = (event) => {
-  return eventGraphiQLHeadersCookie(event) || getEventHeader(event, "Cookie");
+  return eventGraphiQLHeadersCookie(event) || (0, import_api.getEventHeader)(event, "Cookie");
 };
 const isLegacySession = (text) => {
   if (!text) {
@@ -72,7 +117,7 @@ const decryptSession = (text) => {
   const [encryptedText, iv] = text.split("|");
   try {
     if (iv) {
-      const decipher = crypto.createDecipheriv(
+      const decipher = import_node_crypto.default.createDecipheriv(
         "aes-256-cbc",
         process.env.SESSION_SECRET.substring(0, 32),
         Buffer.from(iv, "base64")
@@ -89,8 +134,8 @@ const decryptSession = (text) => {
   }
 };
 const encryptSession = (dataString) => {
-  const iv = crypto.randomBytes(16);
-  const cipher = crypto.createCipheriv(
+  const iv = import_node_crypto.default.randomBytes(16);
+  const cipher = import_node_crypto.default.createCipheriv(
     "aes-256-cbc",
     process.env.SESSION_SECRET.substring(0, 32),
     iv
@@ -137,13 +182,13 @@ const webAuthnSession = (event) => {
   return webAuthnCookie.split("=")[1].trim();
 };
 const hashToken = (token) => {
-  return crypto.createHash("sha256").update(token).digest("hex");
+  return import_node_crypto.default.createHash("sha256").update(token).digest("hex");
 };
 const hashPassword = (text, {
-  salt = crypto.randomBytes(32).toString("hex"),
+  salt = import_node_crypto.default.randomBytes(32).toString("hex"),
   options = DEFAULT_SCRYPT_OPTIONS
 } = {}) => {
-  const encryptedString = crypto.scryptSync(text.normalize("NFC"), salt, 32, options).toString("hex");
+  const encryptedString = import_node_crypto.default.scryptSync(text.normalize("NFC"), salt, 32, options).toString("hex");
   const optionsToString = [
     options.cost,
     options.blockSize,
@@ -152,9 +197,9 @@ const hashPassword = (text, {
   return [`${encryptedString}|${optionsToString.join("|")}`, salt];
 };
 const legacyHashPassword = (text, salt) => {
-  const useSalt = salt || crypto.randomBytes(32).toString("hex");
+  const useSalt = salt || import_node_crypto.default.randomBytes(32).toString("hex");
   return [
-    crypto.pbkdf2Sync(text, useSalt, 1, 32, "SHA1").toString("hex"),
+    import_node_crypto.default.pbkdf2Sync(text, useSalt, 1, 32, "SHA1").toString("hex"),
     useSalt
   ];
 };
@@ -205,7 +250,8 @@ const extractHashingOptions = (text) => {
     return {};
   }
 };
-export {
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
   dbAuthSession,
   decryptSession,
   encryptSession,
@@ -219,4 +265,4 @@ export {
   isLegacySession,
   legacyHashPassword,
   webAuthnSession
-};
+});

package/package.json

@@ -1,13 +1,13 @@
 {
   "name": "@cedarjs/auth-dbauth-api",
-  "version": "5.0.4-next.167",
+  "version": "5.0.4",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/cedarjs/cedar.git",
     "directory": "packages/auth-providers/dbAuth/api"
   },
   "license": "MIT",
-  "type": "module",
+  "type": "commonjs",
   "exports": {
     ".": {
       "default": {
@@ -46,9 +46,9 @@
     "dist"
   ],
   "scripts": {
-    "build": "node ./build.mts",
+    "build": "node ./build.mts && yarn build:types",
     "build:pack": "yarn pack -o cedarjs-auth-dbauth-api.tgz",
-    "build:types": "tsc --build --verbose ./tsconfig.build.json",
+    "build:types": "tsc --build --verbose ./tsconfig.json",
     "build:watch": "nodemon --watch src --ext \"js,jsx,ts,tsx,template\" --ignore dist --exec \"yarn build\"",
     "check:attw": "yarn cedar-fwtools-attw",
     "check:package": "concurrently npm:check:attw yarn:publint",
@@ -57,21 +57,20 @@
     "test:watch": "vitest watch"
   },
   "dependencies": {
-    "@cedarjs/project-config": "5.0.4-next.167",
+    "@cedarjs/project-config": "5.0.4",
     "md5": "2.3.0",
     "uuid": "11.1.0"
   },
   "devDependencies": {
-    "@cedarjs/api": "5.0.4-next.167",
-    "@cedarjs/framework-tools": "5.0.4-next.167",
+    "@arethetypeswrong/cli": "0.18.4",
+    "@cedarjs/api": "5.0.4",
+    "@cedarjs/framework-tools": "5.0.4",
     "@simplewebauthn/server": "10.0.1",
-    "@simplewebauthn/types": "10.0.0",
-    "@types/aws-lambda": "8.10.162",
     "@types/md5": "2.3.6",
     "concurrently": "9.2.4",
-    "publint": "0.3.22",
+    "publint": "0.3.21",
     "typescript": "5.9.3",
-    "vitest": "4.1.10"
+    "vitest": "3.2.6"
   },
   "engines": {
     "node": ">=24"