@crossauth/fastify 1.0.0 → 1.0.1

package/dist/index.js

@@ -3,8 +3,8 @@ var Pe = (S, e, o) => e in S ? ke(S, e, { enumerable: !0, configurable: !0, writ
 var u = (S, e, o) => Pe(S, typeof e != "symbol" ? e + "" : e, o);
 import Ee from "fastify";
 import Te from "@fastify/view";
-import be from "@fastify/formbody";
-import ye from "@fastify/cors";
+import ye from "@fastify/formbody";
+import be from "@fastify/cors";
 import _e from "@fastify/cookie";
 import ue from "nunjucks";
 import { setParameter as C, ParamType as k, Crypto as F, TokenEmailer as xe, OAuthClientManager as L, SessionManager as Ae, ApiKeyManager as Y, KeyStorage as Fe, OAuthAuthorizationServer as Ne, DoubleSubmitCsrfToken as Ue, OAuthClientBackend as Oe, OAuthResourceServer as Ie, OAuthTokenConsumer as Me } from "@crossauth/backend";
@@ -57,7 +57,7 @@ class De {
           ip: e.ip,
           user: (r = e.user) == null ? void 0 : r.username
         })), !e.user || !this.sessionServer.canEditUser(e))
-          return b.sendPageError(
+          return y.sendPageError(
             o,
             401,
             this.sessionServer.errorPage
@@ -82,7 +82,7 @@ class De {
           url: this.prefix + "updateuser",
           ip: e.ip,
           user: (r = e.user) == null ? void 0 : r.username
-        })), !this.sessionServer.canEditUser(e)) return b.sendPageError(
+        })), !this.sessionServer.canEditUser(e)) return y.sendPageError(
           o,
           401,
           this.sessionServer.errorPage
@@ -186,7 +186,7 @@ class De {
         })), !this.sessionServer.isSessionUser(e) || !e.user) {
           const n = await this.sessionServer.getSessionData(e, "factor2change");
           if (!(n != null && n.username) && !this.sessionServer.isSessionUser(e))
-            return b.sendPageError(
+            return y.sendPageError(
               o,
               401,
               this.sessionServer.errorPage
@@ -215,7 +215,7 @@ class De {
         })), !this.sessionServer.isSessionUser(e) || !e.user) {
           const t = await this.sessionServer.getSessionData(e, "factor2change");
           if (!(t != null && t.username) && !this.sessionServer.isSessionUser(e))
-            return b.sendPageError(
+            return y.sendPageError(
               o,
               401,
               this.sessionServer.errorPage
@@ -320,7 +320,7 @@ class De {
         })), !this.sessionServer.isSessionUser(e) || !e.user) {
           const t = await this.sessionServer.getSessionData(e, "passwordchange");
           if ((t == null ? void 0 : t.username) == null && !this.sessionServer.isSessionUser(e))
-            return b.sendPageError(
+            return y.sendPageError(
               o,
               401,
               this.sessionServer.errorPage
@@ -1306,7 +1306,7 @@ class He {
           method: "GET",
           url: this.adminPrefix + "createuser",
           ip: e.ip
-        })), !(e != null && e.user) || !b.isAdmin(e.user))
+        })), !(e != null && e.user) || !y.isAdmin(e.user))
           return this.accessDeniedPage(e, o);
         let r = {
           urlPrefix: this.adminPrefix,
@@ -1417,7 +1417,7 @@ class He {
           method: "GET",
           url: this.adminPrefix + "selectuser",
           ip: e.ip
-        })), !(e != null && e.user) || !b.isAdmin(e.user))
+        })), !(e != null && e.user) || !y.isAdmin(e.user))
           return this.accessDeniedPage(e, o);
         try {
           let r = [], s = Number(e.query.skip), t = Number(e.query.take);
@@ -1439,7 +1439,7 @@ class He {
           return e.query.next && (n.next = e.query.next), o.view(this.adminSelectUserPage, n);
         } catch (r) {
           const s = l.asCrossauthError(r);
-          return d.logger.error(c({ err: r })), b.sendPageError(
+          return d.logger.error(c({ err: r })), y.sendPageError(
             o,
             s.httpStatus,
             this.sessionServer.errorPage,
@@ -1463,7 +1463,7 @@ class He {
           method: "GET",
           url: this.adminPrefix + "updateuser",
           ip: e.ip
-        })), !(e != null && e.user) || !b.isAdmin(e.user))
+        })), !(e != null && e.user) || !y.isAdmin(e.user))
           return this.accessDeniedPage(e, o);
         try {
           const { user: r } = await this.sessionServer.userStorage.getUserById(e.params.id);
@@ -1477,7 +1477,7 @@ class He {
           return o.view(this.adminUpdateUserPage, s);
         } catch (r) {
           const s = l.asCrossauthError(r);
-          return d.logger.error(c({ err: r })), b.sendPageError(
+          return d.logger.error(c({ err: r })), y.sendPageError(
             o,
             s.httpStatus,
             this.sessionServer.errorPage,
@@ -1496,7 +1496,7 @@ class He {
           url: this.adminPrefix + "updateuser",
           ip: e.ip,
           user: (s = e.user) == null ? void 0 : s.username
-        })), !this.sessionServer.canEditUser(e)) return b.sendPageError(
+        })), !this.sessionServer.canEditUser(e)) return y.sendPageError(
           o,
           401,
           this.sessionServer.errorPage
@@ -1531,7 +1531,7 @@ class He {
             urlPrefix: this.adminPrefix,
             allowedFactor2: this.sessionServer.allowedFactor2Details(),
             ...e.body
-          }) : b.sendPageError(
+          }) : y.sendPageError(
             i,
             n.httpStatus,
             this.sessionServer.errorPage,
@@ -1556,7 +1556,7 @@ class He {
           ip: e.ip
         }));
         let r;
-        if (!(e != null && e.user) || !b.isAdmin(e.user))
+        if (!(e != null && e.user) || !y.isAdmin(e.user))
           return this.accessDeniedPage(e, o);
         try {
           if (!this.sessionServer.userStorage) throw new l(g.Configuration, "Cannot call deleteuser unless a user storage is provided");
@@ -1644,7 +1644,7 @@ class He {
           url: this.adminPrefix + "api/updateuser",
           ip: e.ip,
           user: (s = e.user) == null ? void 0 : s.username
-        })), !e.user || !b.isAdmin(e.user))
+        })), !e.user || !y.isAdmin(e.user))
           return this.sessionServer.sendJsonError(o, 401);
         let r;
         try {
@@ -1694,7 +1694,7 @@ class He {
           url: this.adminPrefix + "changepassword",
           ip: e.ip,
           user: (r = e.user) == null ? void 0 : r.username
-        })), !(e != null && e.user) || !b.isAdmin(e.user))
+        })), !(e != null && e.user) || !y.isAdmin(e.user))
           return this.accessDeniedPage(e, o);
         try {
           const { user: s } = await this.sessionServer.userStorage.getUserById(e.params.id);
@@ -1706,7 +1706,7 @@ class He {
           return o.view(this.adminChangePasswordPage, t);
         } catch (s) {
           const t = l.asCrossauthError(s);
-          return d.logger.error(c({ err: s })), b.sendPageError(
+          return d.logger.error(c({ err: s })), y.sendPageError(
             o,
             t.httpStatus,
             this.sessionServer.errorPage,
@@ -1776,7 +1776,7 @@ class He {
           url: this.adminPrefix + "api/changepassword",
           ip: e.ip,
           user: (s = e.user) == null ? void 0 : s.username
-        })), !e.user || !b.isAdmin(e.user))
+        })), !e.user || !y.isAdmin(e.user))
           return this.sessionServer.sendJsonError(o, 401);
         let r;
         try {
@@ -1859,7 +1859,7 @@ class He {
     if (!this.sessionServer.userStorage) throw new l(g.Configuration, "Cannot call createUser unless a user storage is provided");
     if (this.sessionServer.isSessionUser(e) && !e.csrfToken)
       throw new l(g.InvalidCsrf);
-    if (!e.user || !b.isAdmin(e.user))
+    if (!e.user || !y.isAdmin(e.user))
       throw new l(g.InsufficientPriviledges);
     if (e.body.factor2 || (e.body.factor2 = this.sessionServer.allowedFactor2[0]), e.body.factor2 && !this.sessionServer.allowedFactor2.includes(e.body.factor2 ?? "none"))
       throw new l(
@@ -1931,7 +1931,7 @@ class He {
   }
   async updateUser(e, o, r, s) {
     if (!this.sessionServer.userStorage) throw new l(g.Configuration, "Cannot call updateUser unless a user storage is provided");
-    if (!o.user || !b.isAdmin(o.user))
+    if (!o.user || !y.isAdmin(o.user))
       throw new l(g.Unauthorized);
     if (this.sessionServer.isSessionUser(o) && !o.csrfToken) throw new l(g.InvalidCsrf);
     const t = e.factor2, n = e.state;
@@ -1962,7 +1962,7 @@ class He {
   }
   async changePassword(e, o, r, s) {
     if (!this.sessionServer.userStorage) throw new l(g.Configuration, "Cannot call updateUser unless a user storage is provided");
-    if (!o.user || !b.isAdmin(o.user))
+    if (!o.user || !y.isAdmin(o.user))
       throw new l(g.Unauthorized);
     if (this.sessionServer.isSessionUser(o) && !o.csrfToken) throw new l(g.InvalidCsrf);
     const t = this.sessionServer.authenticators[e.factor1], n = t.secretNames();
@@ -1988,7 +1988,7 @@ class He {
     if (!this.sessionServer.userStorage) throw new l(g.Configuration, "Cannot call deleteUser unless a user storage is provided");
     if (this.sessionServer.isSessionUser(e) && !e.csrfToken)
       throw new l(g.InvalidCsrf);
-    if (!e.user || !b.isAdmin(e.user))
+    if (!e.user || !y.isAdmin(e.user))
       throw new l(g.InsufficientPriviledges);
     return await this.sessionServer.userStorage.deleteUserById(e.params.id), r(o);
   }
@@ -2046,7 +2046,7 @@ class Le {
           method: "GET",
           url: this.adminPrefix + "selectclient",
           ip: e.ip
-        })), !(e != null && e.user) || !b.isAdmin(e.user))
+        })), !(e != null && e.user) || !y.isAdmin(e.user))
           return this.accessDeniedPage(e, o);
         const r = e.query.next ?? encodeURIComponent(e.url);
         try {
@@ -2080,7 +2080,7 @@ class Le {
           return e.query.next && (h.next = e.query.next), o.view(this.selectClientPage, h);
         } catch (s) {
           const t = l.asCrossauthError(s);
-          return d.logger.error(c({ err: s })), b.sendPageError(
+          return d.logger.error(c({ err: s })), y.sendPageError(
             o,
             t.httpStatus,
             this.sessionServer.errorPage,
@@ -2103,7 +2103,7 @@ class Le {
           method: "GET",
           url: this.adminPrefix + "createclient",
           ip: e.ip
-        })), !(e != null && e.user) || !b.isAdmin(e.user))
+        })), !(e != null && e.user) || !y.isAdmin(e.user))
           return this.accessDeniedPage(e, o);
         let r = e.query.next;
         r || (e.query.userid ? r = this.adminPrefix + "selectuser" : r = this.adminPrefix + "selectclient");
@@ -2208,7 +2208,7 @@ class Le {
           method: "GET",
           url: this.adminPrefix + "updateclient",
           ip: e.ip
-        })), !(e != null && e.user) || !b.isAdmin(e.user))
+        })), !(e != null && e.user) || !y.isAdmin(e.user))
           return this.accessDeniedPage(e, o);
         let r;
         try {
@@ -2339,7 +2339,7 @@ class Le {
           ip: e.ip
         }));
         let r;
-        if (!(e != null && e.user) || !b.isAdmin(e.user))
+        if (!(e != null && e.user) || !y.isAdmin(e.user))
           return this.accessDeniedPage(e, o);
         try {
           r = await this.clientStorage.getClientById(e.params.client_id);
@@ -2567,7 +2567,7 @@ class Le {
   async createClient(e, o, r, s) {
     if (this.sessionServer.isSessionUser(e) && !e.csrfToken)
       throw new l(g.InvalidCsrf);
-    if (!e.user || !b.isAdmin(e.user))
+    if (!e.user || !y.isAdmin(e.user))
       throw new l(g.InsufficientPriviledges);
     const t = e.body.confidential == "true", n = e.body.client_name, i = e.body.redirect_uris.trim().length == 0 ? [] : e.body.redirect_uris.trim().split(/[, ][ \t\n]*/);
     let a = [];
@@ -2597,7 +2597,7 @@ class Le {
   async updateClient(e, o, r) {
     if (this.sessionServer.isSessionUser(e) && !e.csrfToken)
       throw new l(g.InvalidCsrf);
-    if (!e.user || !b.isAdmin(e.user))
+    if (!e.user || !y.isAdmin(e.user))
       throw new l(g.InsufficientPriviledges);
     const s = e.body.redirect_uris.trim().length == 0 ? [] : e.body.redirect_uris.trim().split(/[, ][ \t\n]*/);
     let t = [];
@@ -2627,7 +2627,7 @@ class Le {
   async deleteClient(e, o, r) {
     if (this.sessionServer.isSessionUser(e) && !e.csrfToken)
       throw new l(g.InvalidCsrf);
-    if (!e.user || !b.isAdmin(e.user))
+    if (!e.user || !y.isAdmin(e.user))
       throw new l(g.InsufficientPriviledges);
     return await this.clientStorage.deleteClient(e.params.client_id), r(o);
   }
@@ -2699,7 +2699,7 @@ class Ge {
           return e.query.next && (i.next = e.query.next), o.view(this.selectClientPage, i);
         } catch (r) {
           const s = l.asCrossauthError(r);
-          return d.logger.error(c({ err: r })), b.sendPageError(
+          return d.logger.error(c({ err: r })), y.sendPageError(
             o,
             s.httpStatus,
             this.sessionServer.errorPage,
@@ -3333,7 +3333,7 @@ function We(S, e, o) {
     username: S.body.username,
     state: "active"
   };
-  const t = S.user && b.isAdmin(S.user);
+  const t = S.user && y.isAdmin(S.user);
   for (let n in S.body) {
     let i = n.replace(/^user_/, "");
     n.startsWith("user_") && (t || e.includes(i)) && (s[i] = S.body[n]);
@@ -3341,7 +3341,7 @@ function We(S, e, o) {
   return s.factor1 = "localpassword", o.includes(s.factor1) && (s.factor1 = S.body.factor1), s.factor2 = S.body.factor2, s;
 }
 function Je(S, e, o) {
-  const r = e.user && b.isAdmin(e.user);
+  const r = e.user && y.isAdmin(e.user);
   for (let s in e.body) {
     let t = s.replace(/^user_/, "");
     s.startsWith("user_") && (r || o.includes(t)) && (S[t] = e.body[s]);
@@ -3463,7 +3463,7 @@ class Ke {
     u(this, "enableCsrfProtection", !0);
     u(this, "userAllowedFactor1", ["localpassword"]);
     u(this, "adminAllowedFactor1", ["localpassword"]);
-    this.app = e, this.userEndpoints = new De(this, s), this.adminEndpoints = new He(this, s), C("prefix", k.String, this, s, "PREFIX"), this.prefix.endsWith("/") || (this.prefix += "/"), this.prefix.startsWith("/") || "" + this.prefix, this.loginUrl = this.prefix + "login", C("signupPage", k.String, this, s, "SIGNUP_PAGE"), C("loginPage", k.String, this, s, "LOGIN_PAGE"), C("factor2Page", k.String, this, s, "FACTOR2_PAGE"), C("configureFactor2Page", k.String, this, s, "SIGNUP_FACTOR2_PAGE"), C("errorPage", k.String, this, s, "ERROR_PAGE"), C("emailFrom", k.String, this, s, "EMAIL_FROM"), C("allowedFactor2", k.JsonArray, this, s, "ALLOWED_FACTOR2"), C("enableEmailVerification", k.Boolean, this, s, "ENABLE_EMAIL_VERIFICATION"), C("enablePasswordReset", k.Boolean, this, s, "ENABLE_PASSWORD_RESET"), C("factor2ProtectedPageEndpoints", k.JsonArray, this, s, "FACTOR2_PROTECTED_PAGE_ENDPOINTS"), C("factor2ProtectedApiEndpoints", k.JsonArray, this, s, "FACTOR2_PROTECTED_API_ENDPOINTS"), C("enableAdminEndpoints", k.Boolean, this, s, "ENABLE_ADMIN_ENDPOINTS"), C("enableOAuthClientManagement", k.Boolean, this, s, "ENABLE_OAUTH_CLIENT_MANAGEMENT"), C("editUserScope", k.String, this, s, "EDIT_USER_SCOPE"), C("userAllowedFactor1", k.JsonArray, this, s, "USER_ALLOWED_FACTOR1"), C("adminAllowedFactor1", k.JsonArray, this, s, "ADMIN_ALLOWED_FACTOR1"), s.validateUserFn && (this.validateUserFn = s.validateUserFn), s.createUserFn && (this.createUserFn = s.createUserFn), s.updateUserFn && (this.updateUserFn = s.updateUserFn), s.addToSession && (this.addToSession = s.addToSession), s.validateSession && (this.validateSession = s.validateSession), this.endpoints = [...he, ...le], this.endpoints = [...this.endpoints, ...re, ...ie], this.enableAdminEndpoints && (this.endpoints = [...this.endpoints, ...se, ...te]), this.enableOAuthClientManagement && (this.endpoints = [...this.endpoints, ...Z, ...ee, ...Q, ...q]), this.enableEmailVerification && (this.endpoints = [...this.endpoints, ...ae, ...ne]), this.enablePasswordReset && (this.endpoints = [...this.endpoints, ...de, ...ce]), s.endpoints && (C("endpoints", k.JsonArray, this, s, "SESSION_ENDPOINTS"), this.endpoints.length == 1 && this.endpoints[0] == "all" && (this.endpoints = je), this.endpoints.length == 1 && this.endpoints[0] == "allMinusOAuth" && (this.endpoints = Be)), this.allowedFactor2.length > 0 && (this.endpoints = [...this.endpoints, ...ge, ...oe]);
+    this.app = e, this.userEndpoints = new De(this, s), this.adminEndpoints = new He(this, s), C("prefix", k.String, this, s, "PREFIX"), this.prefix.endsWith("/") || (this.prefix += "/"), this.prefix.startsWith("/") || "" + this.prefix, this.loginUrl = this.prefix + "login", C("signupPage", k.String, this, s, "SIGNUP_PAGE"), C("loginPage", k.String, this, s, "LOGIN_PAGE"), C("factor2Page", k.String, this, s, "FACTOR2_PAGE"), C("configureFactor2Page", k.String, this, s, "SIGNUP_FACTOR2_PAGE"), C("errorPage", k.String, this, s, "ERROR_PAGE"), C("allowedFactor2", k.JsonArray, this, s, "ALLOWED_FACTOR2"), C("enableEmailVerification", k.Boolean, this, s, "ENABLE_EMAIL_VERIFICATION"), C("enablePasswordReset", k.Boolean, this, s, "ENABLE_PASSWORD_RESET"), C("factor2ProtectedPageEndpoints", k.JsonArray, this, s, "FACTOR2_PROTECTED_PAGE_ENDPOINTS"), C("factor2ProtectedApiEndpoints", k.JsonArray, this, s, "FACTOR2_PROTECTED_API_ENDPOINTS"), C("enableAdminEndpoints", k.Boolean, this, s, "ENABLE_ADMIN_ENDPOINTS"), C("enableOAuthClientManagement", k.Boolean, this, s, "ENABLE_OAUTH_CLIENT_MANAGEMENT"), C("editUserScope", k.String, this, s, "EDIT_USER_SCOPE"), C("userAllowedFactor1", k.JsonArray, this, s, "USER_ALLOWED_FACTOR1"), C("adminAllowedFactor1", k.JsonArray, this, s, "ADMIN_ALLOWED_FACTOR1"), C("loginRedirect", k.JsonArray, this, s, "LOGIN_REDIRECT"), C("logoutRedirect", k.JsonArray, this, s, "LOGOUT_REDIRECT"), s.validateUserFn && (this.validateUserFn = s.validateUserFn), s.createUserFn && (this.createUserFn = s.createUserFn), s.updateUserFn && (this.updateUserFn = s.updateUserFn), s.addToSession && (this.addToSession = s.addToSession), s.validateSession && (this.validateSession = s.validateSession), this.endpoints = [...he, ...le], this.endpoints = [...this.endpoints, ...re, ...ie], this.enableAdminEndpoints && (this.endpoints = [...this.endpoints, ...se, ...te]), this.enableOAuthClientManagement && (this.endpoints = [...this.endpoints, ...Z, ...ee, ...Q, ...q]), this.enableEmailVerification && (this.endpoints = [...this.endpoints, ...ae, ...ne]), this.enablePasswordReset && (this.endpoints = [...this.endpoints, ...de, ...ce]), s.endpoints && (C("endpoints", k.JsonArray, this, s, "SESSION_ENDPOINTS"), this.endpoints.length == 1 && this.endpoints[0] == "all" && (this.endpoints = je), this.endpoints.length == 1 && this.endpoints[0] == "allMinusOAuth" && (this.endpoints = Be)), this.allowedFactor2.length > 0 && (this.endpoints = [...this.endpoints, ...ge, ...oe]);
     let t = !1;
     for (let i of this.endpoints)
       if (q.includes(i) || Q.includes(i)) {
@@ -3571,22 +3571,22 @@ class Ke {
               let N = {};
               for (let M in i.body)
                 T.includes(M) && (N[M] = i.body[M]);
-              let y;
+              let b;
               try {
                 await this.sessionManager.completeTwoFactorPageVisit(N, m);
               } catch (M) {
-                y = l.asCrossauthError(M), d.logger.debug(c({ err: M }));
+                b = l.asCrossauthError(M), d.logger.debug(c({ err: M }));
                 const I = l.asCrossauthError(M);
                 d.logger.error(c({
-                  msg: y.message,
+                  msg: b.message,
                   cerr: M,
                   user: i.body.username,
                   errorCode: I.code,
                   errorCodeName: I.codeName
                 }));
               }
-              if (i.body = w.pre2fa.body, y)
-                if (y.code == g.Expired) {
+              if (i.body = w.pre2fa.body, b)
+                if (b.code == g.Expired) {
                   d.logger.debug("Error - cancelling 2FA");
                   try {
                     await this.sessionManager.cancelTwoFactorPageVisit(m);
@@ -3595,21 +3595,21 @@ class Ke {
                   }
                   i.body = {
                     ...i.body,
-                    errorMessage: y.message,
-                    errorMessages: y.message,
-                    errorCode: "" + y.code,
-                    errorCodeName: g[y.code]
+                    errorMessage: b.message,
+                    errorMessages: b.message,
+                    errorCode: "" + b.code,
+                    errorCodeName: g[b.code]
                   };
                 } else
-                  return this.factor2ProtectedPageEndpoints.includes(i.url) ? a.redirect(this.prefix + "factor2?error=" + g[y.code]) : a.status(y.httpStatus).send(JSON.stringify({
+                  return this.factor2ProtectedPageEndpoints.includes(i.url) ? a.redirect(this.prefix + "factor2?error=" + g[b.code]) : a.status(b.httpStatus).send(JSON.stringify({
                     ok: !1,
-                    errorMessage: y.message,
-                    errorMessages: y.messages,
-                    errorCode: y.code,
-                    errorCodeName: g[y.code]
+                    errorMessage: b.message,
+                    errorMessages: b.messages,
+                    errorCode: b.code,
+                    errorCodeName: g[b.code]
                   }));
             } else
-              return this.validateCsrfToken(i), d.logger.debug("Starting 2FA"), this.sessionManager.initiateTwoFactorPageVisit(i.user, m, i.body, i.url.replace(/\?.*$/, "")), this.factor2ProtectedPageEndpoints.includes(i.url) ? a.redirect(this.prefix + "factor2") : a.send(JSON.stringify({
+              return this.validateCsrfToken(i), d.logger.debug("Starting 2FA"), await this.sessionManager.initiateTwoFactorPageVisit(i.user, m, i.body, i.url.replace(/\?.*$/, "")), this.factor2ProtectedPageEndpoints.includes(i.url) ? a.redirect(this.prefix + "factor2") : a.send(JSON.stringify({
                 ok: !0,
                 factor2Required: !0
               }));
@@ -4837,7 +4837,7 @@ class $e {
       this.prefix + "userauthorize",
       async (i, a) => {
         var p, v;
-        if (d.logger.info(c({ msg: "Page visit", method: "POST", url: this.prefix + "authorize", ip: i.ip, user: (p = i.user) == null ? void 0 : p.username })), !i.user) return b.sendPageError(
+        if (d.logger.info(c({ msg: "Page visit", method: "POST", url: this.prefix + "authorize", ip: i.ip, user: (p = i.user) == null ? void 0 : p.username })), !i.user) return y.sendPageError(
           a,
           401,
           this.errorPage
@@ -4906,8 +4906,8 @@ class $e {
           let w, P;
           const T = i.headers.authorization.split(" ");
           if (T.length == 2 && T[0].toLocaleLowerCase() == "basic") {
-            const y = F.base64Decode(T[1]).split(":", 2);
-            y.length == 2 && (w = y[0], P = y[1]);
+            const b = F.base64Decode(T[1]).split(":", 2);
+            b.length == 2 && (w = b[0], P = b[1]);
           }
           w == null || P == null ? d.logger.warn(c({
             msg: "Ignoring malform authenization header " + i.headers.authorization
@@ -5923,11 +5923,11 @@ class we extends Oe {
           !0
         );
         if (P || !w) {
-          const y = l.fromOAuthError(
+          const b = l.fromOAuthError(
             P ?? "server_error",
             T
           );
-          return await this.errorFn(this.server, a, h, y);
+          return await this.errorFn(this.server, a, h, b);
         }
         return this.oauthLogFetch ? d.logger.debug(c({ msg: "OAuth redirect", url: w })) : d.logger.debug(c({
           msg: "OAuth redirect"
@@ -6379,8 +6379,8 @@ class we extends Oe {
           m.startsWith("have_") && (P = m.replace("have_", ""), w = !0);
           let T = P.replace("_token", ""), N = !1;
           if (this.jwtTokens.includes(T) && (N = a.body.decode ?? !0), P in f) {
-            let y = f[P];
-            N && (y = j(f[P])), y && (p[m] = w ? !0 : y);
+            let b = f[P];
+            N && (b = j(f[P])), b && (p[m] = w ? !0 : b);
           } else w && (p[m] = !1);
         }
         return h.header(..._).status(200).send({ ...p });
@@ -6403,13 +6403,13 @@ class we extends Oe {
           url: this.prefix + this.bffEndpointName + v,
           // was url
           handler: async (w, P) => {
-            var y, M;
+            var b, M;
             d.logger.info(c({
               msg: "Page visit",
               method: w.method,
               url: w.url,
               ip: w.ip,
-              user: (y = w.user) == null ? void 0 : y.username
+              user: (b = w.user) == null ? void 0 : b.username
             }));
             const T = w.url.substring(this.prefix.length + this.bffEndpointName.length);
             d.logger.debug(c({ msg: "Resource server URL " + T }));
@@ -7160,11 +7160,11 @@ const K = class K {
         "node_modules/shared-components",
         this.views
       ]
-    })), this.cors && this.app.register(ye, this.cors), this.app.addContentTypeParser(
+    })), this.cors && this.app.register(be, this.cors), this.app.addContentTypeParser(
       "text/json",
       { parseAs: "string" },
       this.app.getDefaultJsonParser("ignore", "ignore")
-    ), this.app.register(be), this.app.register(_e, {
+    ), this.app.register(ye), this.app.register(_e, {
       // secret: "my-secret", // for cookies signature
       parseOptions: {}
       // options for parsing cookies
@@ -7455,7 +7455,7 @@ const K = class K {
   }
 };
 u(K, "isAdminFn", sr);
-let b = K;
+let y = K;
 class ur {
 }
 export {
@@ -7465,7 +7465,7 @@ export {
   $e as FastifyAuthorizationServer,
   we as FastifyOAuthClient,
   er as FastifyOAuthResourceServer,
-  b as FastifyServer,
+  y as FastifyServer,
   ur as FastifySessionAdapter,
   Ke as FastifySessionServer,
   Ge as FastifyUserClientEndpoints,

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@crossauth/fastify",
   "private": false,
-  "version": "1.0.0",
+  "version": "1.0.1",
   "license": "Apache-2.0",
   "type": "module",
   "main": "./dist/index.cjs",
@@ -56,8 +56,8 @@
     "prisma": "^5.9.1",
     "qrcode": "^1.5.3",
     "sonic-boom": "^3.7.0",
-    "@crossauth/backend": "^1.0.0",
-    "@crossauth/common": "^1.0.0"
+    "@crossauth/backend": "^1.0.1",
+    "@crossauth/common": "^1.0.1"
   },
   "scripts": {
     "dev": "vite",