@cedarjs/auth-dbauth-api 9.0.0-canary.1784 → 9.0.0-canary.3124

package/dist/shared.js

@@ -1,71 +1,25 @@
-"use strict";
-var __create = Object.create;
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __getProtoOf = Object.getPrototypeOf;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
-  // If the importer is in node compatibility mode or this is not an ESM
-  // file that has been converted to a CommonJS file using a Babel-
-  // compatible transform (i.e. "__esModule" has not been set), then set
-  // "default" to the CommonJS "module.exports" for node compatibility.
-  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
-  mod
-));
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var shared_exports = {};
-__export(shared_exports, {
-  dbAuthSession: () => dbAuthSession,
-  decryptSession: () => decryptSession,
-  encryptSession: () => encryptSession,
-  extractCookie: () => extractCookie,
-  extractHashingOptions: () => extractHashingOptions,
-  generateCookieName: () => generateCookieName,
-  getDbAuthResponseBuilder: () => getDbAuthResponseBuilder,
-  getSession: () => getSession,
-  hashPassword: () => hashPassword,
-  hashToken: () => hashToken,
-  isLegacySession: () => isLegacySession,
-  legacyHashPassword: () => legacyHashPassword,
-  webAuthnSession: () => webAuthnSession
-});
-module.exports = __toCommonJS(shared_exports);
-var import_node_crypto = __toESM(require("node:crypto"));
-var import_api = require("@cedarjs/api");
-var import_project_config = require("@cedarjs/project-config");
-var DbAuthError = __toESM(require("./errors"));
+import crypto from "node:crypto";
+import { getEventHeader, isFetchApiRequest } from "@cedarjs/api";
+import { getConfig, getConfigPath } from "@cedarjs/project-config";
+import * as DbAuthError from "./errors.js";
 const DEFAULT_SCRYPT_OPTIONS = {
   cost: 2 ** 14,
   blockSize: 8,
   parallelization: 1
 };
 const getPort = () => {
-  let configPath;
   try {
-    configPath = (0, import_project_config.getConfigPath)();
+    getConfigPath();
   } catch {
     return 8911;
   }
-  return (0, import_project_config.getConfig)(configPath).api.port;
+  return getConfig().api.port;
 };
 const eventGraphiQLHeadersCookie = (event) => {
   if (process.env.NODE_ENV !== "development") {
     return;
   }
-  const impersationationHeader = (0, import_api.getEventHeader)(
+  const impersationationHeader = getEventHeader(
     event,
     "rw-studio-impersonation-cookie"
   );
@@ -73,7 +27,7 @@ const eventGraphiQLHeadersCookie = (event) => {
     return impersationationHeader;
   }
   try {
-    if (!(0, import_api.isFetchApiRequest)(event)) {
+    if (!isFetchApiRequest(event)) {
       const jsonBody = JSON.parse(event.body ?? "{}");
       return jsonBody?.extensions?.headers?.cookie || jsonBody?.extensions?.headers?.Cookie;
     }
@@ -91,17 +45,17 @@ const legacyDecryptSession = (encryptedText) => {
   const md5Hashes = [];
   let digest = password;
   for (let i = 0; i < 3; i++) {
-    md5Hashes[i] = import_node_crypto.default.createHash("md5").update(digest).digest();
+    md5Hashes[i] = crypto.createHash("md5").update(digest).digest();
     digest = Buffer.concat([md5Hashes[i], password]);
   }
   const key = Buffer.concat([md5Hashes[0], md5Hashes[1]]);
   const iv = md5Hashes[2];
   const contents = cypher.slice(16);
-  const decipher = import_node_crypto.default.createDecipheriv("aes-256-cbc", key, iv);
+  const decipher = crypto.createDecipheriv("aes-256-cbc", key, iv);
   return decipher.update(contents) + decipher.final("utf-8");
 };
 const extractCookie = (event) => {
-  return eventGraphiQLHeadersCookie(event) || (0, import_api.getEventHeader)(event, "Cookie");
+  return eventGraphiQLHeadersCookie(event) || getEventHeader(event, "Cookie");
 };
 const isLegacySession = (text) => {
   if (!text) {
@@ -118,7 +72,7 @@ const decryptSession = (text) => {
   const [encryptedText, iv] = text.split("|");
   try {
     if (iv) {
-      const decipher = import_node_crypto.default.createDecipheriv(
+      const decipher = crypto.createDecipheriv(
         "aes-256-cbc",
         process.env.SESSION_SECRET.substring(0, 32),
         Buffer.from(iv, "base64")
@@ -135,8 +89,8 @@ const decryptSession = (text) => {
   }
 };
 const encryptSession = (dataString) => {
-  const iv = import_node_crypto.default.randomBytes(16);
-  const cipher = import_node_crypto.default.createCipheriv(
+  const iv = crypto.randomBytes(16);
+  const cipher = crypto.createCipheriv(
     "aes-256-cbc",
     process.env.SESSION_SECRET.substring(0, 32),
     iv
@@ -183,13 +137,13 @@ const webAuthnSession = (event) => {
   return webAuthnCookie.split("=")[1].trim();
 };
 const hashToken = (token) => {
-  return import_node_crypto.default.createHash("sha256").update(token).digest("hex");
+  return crypto.createHash("sha256").update(token).digest("hex");
 };
 const hashPassword = (text, {
-  salt = import_node_crypto.default.randomBytes(32).toString("hex"),
+  salt = crypto.randomBytes(32).toString("hex"),
   options = DEFAULT_SCRYPT_OPTIONS
 } = {}) => {
-  const encryptedString = import_node_crypto.default.scryptSync(text.normalize("NFC"), salt, 32, options).toString("hex");
+  const encryptedString = crypto.scryptSync(text.normalize("NFC"), salt, 32, options).toString("hex");
   const optionsToString = [
     options.cost,
     options.blockSize,
@@ -198,9 +152,9 @@ const hashPassword = (text, {
   return [`${encryptedString}|${optionsToString.join("|")}`, salt];
 };
 const legacyHashPassword = (text, salt) => {
-  const useSalt = salt || import_node_crypto.default.randomBytes(32).toString("hex");
+  const useSalt = salt || crypto.randomBytes(32).toString("hex");
   return [
-    import_node_crypto.default.pbkdf2Sync(text, useSalt, 1, 32, "SHA1").toString("hex"),
+    crypto.pbkdf2Sync(text, useSalt, 1, 32, "SHA1").toString("hex"),
     useSalt
   ];
 };
@@ -251,8 +205,7 @@ const extractHashingOptions = (text) => {
     return {};
   }
 };
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
+export {
   dbAuthSession,
   decryptSession,
   encryptSession,
@@ -266,4 +219,4 @@ const extractHashingOptions = (text) => {
   isLegacySession,
   legacyHashPassword,
   webAuthnSession
-});
+};

package/package.json

@@ -1,13 +1,13 @@
 {
   "name": "@cedarjs/auth-dbauth-api",
-  "version": "9.0.0-canary.1784+baa47810a",
+  "version": "9.0.0-canary.3124",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/cedarjs/cedar.git",
     "directory": "packages/auth-providers/dbAuth/api"
   },
   "license": "MIT",
-  "type": "commonjs",
+  "type": "module",
   "exports": {
     ".": {
       "default": {
@@ -46,36 +46,45 @@
     "dist"
   ],
   "scripts": {
-    "build": "tsx ./build.mts && yarn build:types",
+    "build": "node ./build.mts",
     "build:pack": "yarn pack -o cedarjs-auth-dbauth-api.tgz",
-    "build:types": "tsc --build --verbose ./tsconfig.json",
+    "build:types": "tsc --build --verbose ./tsconfig.build.json",
     "build:watch": "nodemon --watch src --ext \"js,jsx,ts,tsx,template\" --ignore dist --exec \"yarn build\"",
-    "check:attw": "yarn attw -P",
+    "check:attw": "yarn cedar-fwtools-attw",
     "check:package": "concurrently npm:check:attw yarn:publint",
     "prepublishOnly": "NODE_ENV=production yarn build",
     "test": "vitest run",
     "test:watch": "vitest watch"
   },
   "dependencies": {
-    "@cedarjs/project-config": "9.0.0-canary.1784",
-    "base64url": "3.0.1",
+    "@cedarjs/project-config": "9.0.0-canary.3124",
     "md5": "2.3.0",
     "uuid": "11.1.0"
   },
   "devDependencies": {
-    "@arethetypeswrong/cli": "0.18.2",
-    "@cedarjs/api": "9.0.0-canary.1784",
-    "@cedarjs/framework-tools": "9.0.0-canary.1784",
-    "@simplewebauthn/server": "9.0.3",
+    "@cedarjs/api": "9.0.0-canary.3124",
+    "@cedarjs/framework-tools": "9.0.0-canary.3124",
+    "@simplewebauthn/server": "13.3.3",
+    "@types/aws-lambda": "8.10.163",
     "@types/md5": "2.3.6",
-    "concurrently": "9.2.1",
-    "publint": "0.3.17",
-    "tsx": "4.21.0",
+    "concurrently": "9.2.4",
+    "publint": "0.3.24",
     "typescript": "5.9.3",
-    "vitest": "3.2.4"
+    "vitest": "4.1.11"
+  },
+  "peerDependencies": {
+    "@simplewebauthn/server": "^13.0.0"
+  },
+  "peerDependenciesMeta": {
+    "@simplewebauthn/server": {
+      "optional": true
+    }
+  },
+  "engines": {
+    "node": ">=24"
   },
   "publishConfig": {
     "access": "public"
   },
-  "gitHead": "baa47810a7defb73de27fdf513b815d679509b5e"
+  "gitHead": "3905ed045508b861b495f8d5630d76c7a157d8f1"
 }

package/LICENSE

@@ -1,21 +0,0 @@
-MIT License
-
-Copyright (c) 2025 Cedar
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.