@cedarjs/auth-dbauth-middleware 9.0.0-canary.1784 → 9.0.0-canary.3124

package/README.md

@@ -39,6 +39,27 @@ export const ServerEntry: React.FC<Props> = ({ css, meta }) => {
 }
 ```
 
+### OAuth routing
+
+Apps using [`@cedarjs/auth-dbauth-oauth`](../oauth) opt in by also passing an `oauthHandler`, built the same way `dbAuthHandler` is — by wrapping `OAuthHandler`'s `invoke()`:
+
+```tsx
+import { OAuthHandler } from '@cedarjs/auth-dbauth-oauth'
+
+import { handler as dbAuthHandler } from '$api/src/functions/auth'
+import { oauthOptions } from '$api/src/lib/auth'
+
+const authMw = initDbAuthMiddleware({
+  dbAuthHandler,
+  getCurrentUser,
+  oauthHandler: (req, context) =>
+    new OAuthHandler(req, context, oauthOptions).invoke(),
+  // oauthUrl? optional, defaults to '/auth/oauth' (OAuthHandlerOptions.basePath's default)
+})
+```
+
+Requests whose URL falls under `oauthUrl` (`authorize`/`callback`/`unlink`) are dispatched to `oauthHandler` instead of the normal dbAuth session-validation path; its 302 redirects, `Set-Cookie` headers (session, `auth-provider`, and the OAuth transaction cookie), and JSON bodies are carried over to the middleware response unchanged. Omitting `oauthHandler` entirely disables OAuth routing — requests under `oauthUrl` simply fall through to the normal dbAuth handling below.
+
 ### Roles handling
 
 By default the middleware assumes your roles will be in `currentUser.roles` - either as a string or an array of strings.

package/dist/index.d.ts

@@ -1,14 +1,38 @@
 import type { APIGatewayProxyEvent, Context } from 'aws-lambda';
-import type { DbAuthResponse } from '@cedarjs/auth-dbauth-api';
+import type { DbAuthResponse } from '@cedarjs/auth-dbauth-api' with {
+    'resolution-mode': 'import'
+};
 import type { GetCurrentUser } from '@cedarjs/graphql-server';
 import type { Middleware } from '@cedarjs/web/middleware';
 export interface DbAuthMiddlewareOptions {
     cookieName?: string;
     dbAuthUrl?: string;
     dbAuthHandler: (req: Request | APIGatewayProxyEvent, context?: Context) => DbAuthResponse;
-    getRoles?: (decoded: any) => string[];
+    /**
+     * Handler for dbAuth's OAuth routes (`/auth/oauth/...` by default),
+     * mirroring `dbAuthHandler`. Typically built by wrapping `OAuthHandler`
+     * from `@cedarjs/auth-dbauth-oauth`:
+     *
+     * ```ts
+     * oauthHandler: (req, context) =>
+     *   new OAuthHandler(req, context, oauthOptions).invoke()
+     * ```
+     *
+     * Omitting this option leaves OAuth routing disabled entirely — requests
+     * under `oauthUrl` simply fall through to the normal dbAuth handling
+     * below.
+     */
+    oauthHandler?: (req: Request | APIGatewayProxyEvent, context?: Context) => DbAuthResponse;
+    /**
+     * URL segment routed to `oauthHandler`. Defaults to `/auth/oauth`,
+     * matching `OAuthHandlerOptions.basePath`'s default in
+     * `@cedarjs/auth-dbauth-oauth`. Only takes effect when `oauthHandler` is
+     * set.
+     */
+    oauthUrl?: string;
+    getRoles?: (decoded: Parameters<GetCurrentUser>[0]) => string[];
     getCurrentUser: GetCurrentUser;
 }
-export declare const initDbAuthMiddleware: ({ dbAuthHandler, getCurrentUser, getRoles, cookieName, dbAuthUrl, }: DbAuthMiddlewareOptions) => [Middleware, "*"];
+export declare const initDbAuthMiddleware: ({ dbAuthHandler, oauthHandler, oauthUrl, getCurrentUser, getRoles, cookieName, dbAuthUrl, }: DbAuthMiddlewareOptions) => [Middleware, "*"];
 export default initDbAuthMiddleware;
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,OAAO,EAAE,MAAM,YAAY,CAAA;AAE/D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAA;AAI9D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAA;AAE7D,OAAO,KAAK,EAAE,UAAU,EAAqB,MAAM,yBAAyB,CAAA;AAI5E,MAAM,WAAW,uBAAuB;IACtC,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,SAAS,CAAC,EAAE,MAAM,CAAA;IAGlB,aAAa,EAAE,CACb,GAAG,EAAE,OAAO,GAAG,oBAAoB,EACnC,OAAO,CAAC,EAAE,OAAO,KACd,cAAc,CAAA;IACnB,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,KAAK,MAAM,EAAE,CAAA;IACrC,cAAc,EAAE,cAAc,CAAA;CAC/B;AAED,eAAO,MAAM,oBAAoB,GAAI,qEAMlC,uBAAuB,KAAG,CAAC,UAAU,EAAE,GAAG,CAkG5C,CAAA;AA8DD,eAAe,oBAAoB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,OAAO,EAAE,MAAM,YAAY,CAAA;AAE/D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;IAC7D,iBAAiB,EAAE,QAAQ;CAC5B,CAAA;AACD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAA;AAE7D,OAAO,KAAK,EAAE,UAAU,EAAqB,MAAM,yBAAyB,CAAA;AAI5E,MAAM,WAAW,uBAAuB;IACtC,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,SAAS,CAAC,EAAE,MAAM,CAAA;IAGlB,aAAa,EAAE,CACb,GAAG,EAAE,OAAO,GAAG,oBAAoB,EACnC,OAAO,CAAC,EAAE,OAAO,KACd,cAAc,CAAA;IACnB;;;;;;;;;;;;;OAaG;IACH,YAAY,CAAC,EAAE,CACb,GAAG,EAAE,OAAO,GAAG,oBAAoB,EACnC,OAAO,CAAC,EAAE,OAAO,KACd,cAAc,CAAA;IACnB;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,UAAU,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAA;IAC/D,cAAc,EAAE,cAAc,CAAA;CAC/B;AA6BD,eAAO,MAAM,oBAAoB,GAAI,6FAQlC,uBAAuB,KAAG,CAAC,UAAU,EAAE,GAAG,CA+G5C,CAAA;AA8DD,eAAe,oBAAoB,CAAA"}

package/dist/index.js

@@ -1,9 +1,23 @@
-import dbAuthApi from "@cedarjs/auth-dbauth-api";
-const { dbAuthSession, generateCookieName } = dbAuthApi;
 import { MiddlewareResponse } from "@cedarjs/web/middleware";
 import { defaultGetRoles } from "./defaultGetRoles.js";
+function toMiddlewareResponse(output) {
+  const finalHeaders = new Headers();
+  Object.entries(output.headers).forEach(([key, value]) => {
+    if (Array.isArray(value)) {
+      value.forEach((mvhHeader) => finalHeaders.append(key, mvhHeader));
+    } else {
+      finalHeaders.append(key, value);
+    }
+  });
+  return new MiddlewareResponse(output.body, {
+    headers: finalHeaders,
+    status: output.statusCode
+  });
+}
 const initDbAuthMiddleware = ({
   dbAuthHandler,
+  oauthHandler,
+  oauthUrl = "/auth/oauth",
   getCurrentUser,
   getRoles = defaultGetRoles,
   cookieName,
@@ -12,6 +26,15 @@ const initDbAuthMiddleware = ({
   const mw = async (req, res = MiddlewareResponse.next()) => {
     console.log("dbAuthUrl", dbAuthUrl);
     console.log("req.url", req.url);
+    const pathname = new URL(req.url).pathname;
+    let oauthBasePath = oauthUrl;
+    while (oauthBasePath.length > 1 && oauthBasePath.endsWith("/")) {
+      oauthBasePath = oauthBasePath.slice(0, -1);
+    }
+    if (oauthHandler && (pathname === oauthBasePath || pathname.startsWith(`${oauthBasePath}/`))) {
+      const output = await oauthHandler(req);
+      return toMiddlewareResponse(output);
+    }
     if (req.url.includes(dbAuthUrl)) {
       if (req.url.includes(`${dbAuthUrl}/currentUser`)) {
         const validatedSession2 = await validateSession({
@@ -29,18 +52,7 @@ const initDbAuthMiddleware = ({
       } else {
         const output = await dbAuthHandler(req);
         console.log("output", output);
-        const finalHeaders = new Headers();
-        Object.entries(output.headers).forEach(([key, value]) => {
-          if (Array.isArray(value)) {
-            value.forEach((mvhHeader) => finalHeaders.append(key, mvhHeader));
-          } else {
-            finalHeaders.append(key, value);
-          }
-        });
-        return new MiddlewareResponse(output.body, {
-          headers: finalHeaders,
-          status: output.statusCode
-        });
+        return toMiddlewareResponse(output);
       }
     }
     const cookieHeader = req.headers.get("Cookie");
@@ -66,6 +78,7 @@ const initDbAuthMiddleware = ({
       });
     } else {
       req.serverAuthState.clear();
+      const { generateCookieName } = await import("@cedarjs/auth-dbauth-api");
       res.cookies.unset(generateCookieName(cookieName));
       res.cookies.unset("auth-provider");
     }
@@ -79,11 +92,9 @@ async function validateSession({
   getCurrentUser
 }) {
   let decryptedSession;
+  const { dbAuthSession, generateCookieName } = await import("@cedarjs/auth-dbauth-api");
   try {
-    decryptedSession = dbAuthSession(
-      req,
-      generateCookieName(cookieName)
-    );
+    decryptedSession = dbAuthSession(req, generateCookieName(cookieName));
   } catch (e) {
     if (process.env.NODE_ENV === "development") {
       console.debug("Could not decrypt dbAuth session", e);
@@ -111,14 +122,14 @@ async function validateSession({
       token: req.headers.get("Cookie")
     },
     {
-      // MWRequest is a superset of Request
-      event: req
+      event: req,
+      request: req
     }
   );
   return { currentUser, decryptedSession };
 }
-var src_default = initDbAuthMiddleware;
+var index_default = initDbAuthMiddleware;
 export {
-  src_default as default,
+  index_default as default,
   initDbAuthMiddleware
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cedarjs/auth-dbauth-middleware",
-  "version": "9.0.0-canary.1784+baa47810a",
+  "version": "9.0.0-canary.3124",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/cedarjs/cedar.git",
@@ -10,13 +10,9 @@
   "type": "module",
   "exports": {
     ".": {
-      "import": {
+      "default": {
         "types": "./dist/index.d.ts",
         "default": "./dist/index.js"
-      },
-      "require": {
-        "types": "./dist/cjs/index.d.ts",
-        "default": "./dist/cjs/index.js"
       }
     }
   },
@@ -26,35 +22,36 @@
     "dist"
   ],
   "scripts": {
-    "build": "tsx ./build.mts",
+    "build": "node ./build.mts",
     "build:pack": "yarn pack -o cedarjs-auth-dbauth-middleware.tgz",
     "build:types": "tsc --build --verbose ./tsconfig.build.json",
-    "build:types-cjs": "tsc --build --verbose tsconfig.cjs.json",
-    "check:attw": "yarn attw -P",
+    "check:attw": "yarn cedar-fwtools-attw",
     "check:package": "concurrently npm:check:attw yarn:publint",
     "prepublishOnly": "NODE_ENV=production yarn build",
     "test": "vitest run",
     "test:watch": "vitest watch"
   },
   "dependencies": {
-    "@cedarjs/auth-dbauth-api": "9.0.0-canary.1784",
-    "@cedarjs/web": "9.0.0-canary.1784"
+    "@cedarjs/auth-dbauth-api": "9.0.0-canary.3124",
+    "@cedarjs/web": "9.0.0-canary.3124"
   },
   "devDependencies": {
-    "@arethetypeswrong/cli": "0.18.2",
-    "@cedarjs/api": "9.0.0-canary.1784",
-    "@cedarjs/framework-tools": "9.0.0-canary.1784",
-    "@cedarjs/graphql-server": "9.0.0-canary.1784",
-    "@types/aws-lambda": "8.10.160",
-    "concurrently": "9.2.1",
-    "publint": "0.3.17",
+    "@cedarjs/api": "9.0.0-canary.3124",
+    "@cedarjs/auth-dbauth-oauth": "9.0.0-canary.3124",
+    "@cedarjs/framework-tools": "9.0.0-canary.3124",
+    "@cedarjs/graphql-server": "9.0.0-canary.3124",
+    "@types/aws-lambda": "8.10.163",
+    "concurrently": "9.2.4",
+    "publint": "0.3.24",
     "ts-toolbelt": "9.6.0",
-    "tsx": "4.21.0",
     "typescript": "5.9.3",
-    "vitest": "3.2.4"
+    "vitest": "4.1.11"
+  },
+  "engines": {
+    "node": ">=24"
   },
   "publishConfig": {
     "access": "public"
   },
-  "gitHead": "baa47810a7defb73de27fdf513b815d679509b5e"
+  "gitHead": "3905ed045508b861b495f8d5630d76c7a157d8f1"
 }

package/LICENSE

@@ -1,21 +0,0 @@
-MIT License
-
-Copyright (c) 2025 Cedar
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.

package/dist/cjs/defaultGetRoles.d.ts

@@ -1,2 +0,0 @@
-export declare const defaultGetRoles: (decoded: Record<string, any> | undefined | null) => string[];
-//# sourceMappingURL=defaultGetRoles.d.ts.map

package/dist/cjs/defaultGetRoles.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"defaultGetRoles.d.ts","sourceRoot":"","sources":["../../src/defaultGetRoles.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,eAAe,GAC1B,SAAS,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,SAAS,GAAG,IAAI,KAC9C,MAAM,EAYR,CAAA"}

package/dist/cjs/defaultGetRoles.js

@@ -1,39 +0,0 @@
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var defaultGetRoles_exports = {};
-__export(defaultGetRoles_exports, {
-  defaultGetRoles: () => defaultGetRoles
-});
-module.exports = __toCommonJS(defaultGetRoles_exports);
-const defaultGetRoles = (decoded) => {
-  try {
-    const roles = decoded?.currentUser?.roles;
-    if (Array.isArray(roles)) {
-      return roles;
-    } else {
-      return roles ? [roles] : [];
-    }
-  } catch {
-    return [];
-  }
-};
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  defaultGetRoles
-});

package/dist/cjs/index.d.ts

@@ -1,14 +0,0 @@
-import type { APIGatewayProxyEvent, Context } from 'aws-lambda';
-import type { DbAuthResponse } from '@cedarjs/auth-dbauth-api';
-import type { GetCurrentUser } from '@cedarjs/graphql-server';
-import type { Middleware } from '@cedarjs/web/middleware';
-export interface DbAuthMiddlewareOptions {
-    cookieName?: string;
-    dbAuthUrl?: string;
-    dbAuthHandler: (req: Request | APIGatewayProxyEvent, context?: Context) => DbAuthResponse;
-    getRoles?: (decoded: any) => string[];
-    getCurrentUser: GetCurrentUser;
-}
-export declare const initDbAuthMiddleware: ({ dbAuthHandler, getCurrentUser, getRoles, cookieName, dbAuthUrl, }: DbAuthMiddlewareOptions) => [Middleware, "*"];
-export default initDbAuthMiddleware;
-//# sourceMappingURL=index.d.ts.map

package/dist/cjs/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,OAAO,EAAE,MAAM,YAAY,CAAA;AAE/D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAA;AAI9D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAA;AAE7D,OAAO,KAAK,EAAE,UAAU,EAAqB,MAAM,yBAAyB,CAAA;AAI5E,MAAM,WAAW,uBAAuB;IACtC,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,SAAS,CAAC,EAAE,MAAM,CAAA;IAGlB,aAAa,EAAE,CACb,GAAG,EAAE,OAAO,GAAG,oBAAoB,EACnC,OAAO,CAAC,EAAE,OAAO,KACd,cAAc,CAAA;IACnB,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,KAAK,MAAM,EAAE,CAAA;IACrC,cAAc,EAAE,cAAc,CAAA;CAC/B;AAED,eAAO,MAAM,oBAAoB,GAAI,qEAMlC,uBAAuB,KAAG,CAAC,UAAU,EAAE,GAAG,CAkG5C,CAAA;AA8DD,eAAe,oBAAoB,CAAA"}

package/dist/cjs/index.js

@@ -1,158 +0,0 @@
-"use strict";
-var __create = Object.create;
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __getProtoOf = Object.getPrototypeOf;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
-  // If the importer is in node compatibility mode or this is not an ESM
-  // file that has been converted to a CommonJS file using a Babel-
-  // compatible transform (i.e. "__esModule" has not been set), then set
-  // "default" to the CommonJS "module.exports" for node compatibility.
-  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
-  mod
-));
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var src_exports = {};
-__export(src_exports, {
-  default: () => src_default,
-  initDbAuthMiddleware: () => initDbAuthMiddleware
-});
-module.exports = __toCommonJS(src_exports);
-var import_auth_dbauth_api = __toESM(require("@cedarjs/auth-dbauth-api"), 1);
-var import_middleware = require("@cedarjs/web/middleware");
-var import_defaultGetRoles = require("./defaultGetRoles.js");
-const { dbAuthSession, generateCookieName } = import_auth_dbauth_api.default;
-const initDbAuthMiddleware = ({
-  dbAuthHandler,
-  getCurrentUser,
-  getRoles = import_defaultGetRoles.defaultGetRoles,
-  cookieName,
-  dbAuthUrl = "/middleware/dbauth"
-}) => {
-  const mw = async (req, res = import_middleware.MiddlewareResponse.next()) => {
-    console.log("dbAuthUrl", dbAuthUrl);
-    console.log("req.url", req.url);
-    if (req.url.includes(dbAuthUrl)) {
-      if (req.url.includes(`${dbAuthUrl}/currentUser`)) {
-        const validatedSession2 = await validateSession({
-          req,
-          cookieName,
-          getCurrentUser
-        });
-        if (validatedSession2) {
-          return new import_middleware.MiddlewareResponse(
-            JSON.stringify({ currentUser: validatedSession2.currentUser })
-          );
-        } else {
-          return new import_middleware.MiddlewareResponse(JSON.stringify({ currentUser: null }));
-        }
-      } else {
-        const output = await dbAuthHandler(req);
-        console.log("output", output);
-        const finalHeaders = new Headers();
-        Object.entries(output.headers).forEach(([key, value]) => {
-          if (Array.isArray(value)) {
-            value.forEach((mvhHeader) => finalHeaders.append(key, mvhHeader));
-          } else {
-            finalHeaders.append(key, value);
-          }
-        });
-        return new import_middleware.MiddlewareResponse(output.body, {
-          headers: finalHeaders,
-          status: output.statusCode
-        });
-      }
-    }
-    const cookieHeader = req.headers.get("Cookie");
-    if (!cookieHeader?.includes("auth-provider")) {
-      return res;
-    }
-    const validatedSession = await validateSession({
-      req,
-      cookieName,
-      getCurrentUser
-    });
-    if (validatedSession) {
-      const { currentUser, decryptedSession } = validatedSession;
-      req.serverAuthState.set({
-        currentUser,
-        loading: false,
-        isAuthenticated: !!currentUser,
-        hasError: false,
-        userMetadata: currentUser,
-        // dbAuth doesn't have userMetadata
-        cookieHeader,
-        roles: getRoles(decryptedSession)
-      });
-    } else {
-      req.serverAuthState.clear();
-      res.cookies.unset(generateCookieName(cookieName));
-      res.cookies.unset("auth-provider");
-    }
-    return res;
-  };
-  return [mw, "*"];
-};
-async function validateSession({
-  req,
-  cookieName,
-  getCurrentUser
-}) {
-  let decryptedSession;
-  try {
-    decryptedSession = dbAuthSession(
-      req,
-      generateCookieName(cookieName)
-    );
-  } catch (e) {
-    if (process.env.NODE_ENV === "development") {
-      console.debug("Could not decrypt dbAuth session", e);
-    }
-    return void 0;
-  }
-  if (!decryptedSession) {
-    if (process.env.NODE_ENV === "development") {
-      console.debug(
-        "No dbAuth session cookie found. Looking for a cookie named:",
-        cookieName
-      );
-    }
-    return void 0;
-  }
-  const currentUser = await getCurrentUser(
-    decryptedSession,
-    {
-      type: "dbAuth",
-      schema: "cookie",
-      // @MARK: We pass the entire cookie header as a token. This isn't
-      // actually the token!
-      // At this point the Cookie header is guaranteed, because otherwise a
-      // decryptionError would have been thrown
-      token: req.headers.get("Cookie")
-    },
-    {
-      // MWRequest is a superset of Request
-      event: req
-    }
-  );
-  return { currentUser, decryptedSession };
-}
-var src_default = initDbAuthMiddleware;
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  initDbAuthMiddleware
-});

package/dist/cjs/package.json

@@ -1 +0,0 @@
-{"type":"commonjs"}