@classic-homes/auth 0.1.25 → 0.1.26

package/dist/auth.svelte-PKMR4LYT.js

@@ -0,0 +1,3 @@
+export { authActions, authStore, currentUser, isAuthenticated } from './chunk-U2YM3E3Q.js';
+import './chunk-MI4B4ZRK.js';
+import './chunk-DCGC6CNV.js';

package/dist/chunk-DCGC6CNV.js

@@ -0,0 +1,98 @@
+// src/core/config.ts
+var config = null;
+function initAuth(options) {
+  config = {
+    ...options,
+    storageKey: options.storageKey ?? "classic_auth"
+  };
+}
+function getConfig() {
+  if (!config) {
+    throw new Error(
+      '@classic-homes/auth not initialized. Call initAuth({ baseUrl: "..." }) before using auth services.'
+    );
+  }
+  return config;
+}
+function isInitialized() {
+  return config !== null;
+}
+function resetConfig() {
+  config = null;
+}
+function getDefaultStorage() {
+  if (typeof window !== "undefined" && window.localStorage) {
+    return {
+      getItem: (key) => localStorage.getItem(key),
+      setItem: (key, value) => localStorage.setItem(key, value),
+      removeItem: (key) => localStorage.removeItem(key)
+    };
+  }
+  return {
+    getItem: () => null,
+    setItem: () => {
+    },
+    removeItem: () => {
+    }
+  };
+}
+function getStorage() {
+  const cfg = getConfig();
+  return cfg.storage ?? getDefaultStorage();
+}
+function getFetch() {
+  const cfg = getConfig();
+  return cfg.fetch ?? fetch;
+}
+
+// src/core/jwt.ts
+function decodeJWT(token) {
+  try {
+    const parts = token.split(".");
+    if (parts.length !== 3) {
+      return null;
+    }
+    const payload = parts[1];
+    const decoded = atob(payload.replace(/-/g, "+").replace(/_/g, "/"));
+    return JSON.parse(decoded);
+  } catch {
+    return null;
+  }
+}
+function isTokenExpired(token) {
+  const payload = decodeJWT(token);
+  if (!payload || !payload.exp) {
+    return true;
+  }
+  return payload.exp * 1e3 < Date.now();
+}
+function getTokenRemainingTime(token) {
+  const payload = decodeJWT(token);
+  if (!payload || !payload.exp) {
+    return 0;
+  }
+  const remainingMs = payload.exp * 1e3 - Date.now();
+  return Math.max(0, remainingMs);
+}
+function getTokenExpiration(token) {
+  const payload = decodeJWT(token);
+  if (!payload || !payload.exp) {
+    return null;
+  }
+  return new Date(payload.exp * 1e3);
+}
+function extractClaims(token, claims) {
+  const payload = decodeJWT(token);
+  if (!payload) {
+    return null;
+  }
+  const result = {};
+  for (const claim of claims) {
+    if (claim in payload) {
+      result[claim] = payload[claim];
+    }
+  }
+  return result;
+}
+
+export { decodeJWT, extractClaims, getConfig, getDefaultStorage, getFetch, getStorage, getTokenExpiration, getTokenRemainingTime, initAuth, isInitialized, isTokenExpired, resetConfig };

package/dist/chunk-IO2LIH4I.js

@@ -0,0 +1,66 @@
+import { authStore } from './chunk-U2YM3E3Q.js';
+
+// src/svelte/guards/auth-guard.ts
+function checkAuth(options = {}) {
+  const { roles, permissions, requireAllRoles, requireAllPermissions } = options;
+  if (!authStore.isAuthenticated) {
+    return {
+      allowed: false,
+      reason: "not_authenticated",
+      redirectTo: "/login"
+    };
+  }
+  if (roles && roles.length > 0) {
+    const hasRoles = requireAllRoles ? authStore.hasAllRoles(roles) : authStore.hasAnyRole(roles);
+    if (!hasRoles) {
+      return {
+        allowed: false,
+        reason: "missing_role",
+        redirectTo: "/unauthorized"
+      };
+    }
+  }
+  if (permissions && permissions.length > 0) {
+    const hasPermissions = requireAllPermissions ? authStore.hasAllPermissions(permissions) : authStore.hasAnyPermission(permissions);
+    if (!hasPermissions) {
+      return {
+        allowed: false,
+        reason: "missing_permission",
+        redirectTo: "/unauthorized"
+      };
+    }
+  }
+  return { allowed: true };
+}
+function createAuthGuard(options = {}) {
+  return (onDenied) => {
+    const result = checkAuth(options);
+    if (!result.allowed) {
+      onDenied(result.redirectTo ?? "/login", result.reason ?? "not_authenticated");
+      return false;
+    }
+    return true;
+  };
+}
+function requireAuth() {
+  return checkAuth();
+}
+function requireRole(roles, requireAll = false) {
+  const roleArray = Array.isArray(roles) ? roles : [roles];
+  return checkAuth({ roles: roleArray, requireAllRoles: requireAll });
+}
+function requirePermission(permissions, requireAll = false) {
+  const permArray = Array.isArray(permissions) ? permissions : [permissions];
+  return checkAuth({ permissions: permArray, requireAllPermissions: requireAll });
+}
+function protectedLoad(options, loadFn) {
+  return async (event) => {
+    const result = checkAuth(options);
+    if (!result.allowed) {
+      return { redirect: result.redirectTo ?? "/login" };
+    }
+    return loadFn(event);
+  };
+}
+
+export { checkAuth, createAuthGuard, protectedLoad, requireAuth, requirePermission, requireRole };