@crossauth/sveltekit 1.1.4 → 1.1.6

package/dist/sveltekitoauthclient.js

@@ -2145,7 +2145,8 @@ export class SvelteKitOAuthClient extends OAuthClientBackend {
                 const ce = new CrossauthError(ErrorCode.Configuration, "If tokenResponseType is " + this.tokenResponseType + ", use actions not post");
                 return this.errorFn(this.server, event, ce);
             }
-            return this.pack(await this.refreshTokens(event, "post", true));
+            const ret = await this.refreshTokens(event, "post", true);
+            return this.pack(ret);
         },
         actions: {
             default: async (event) => {
@@ -2163,7 +2164,8 @@ export class SvelteKitOAuthClient extends OAuthClientBackend {
                 const ce = new CrossauthError(ErrorCode.Configuration, "If tokenResponseType is " + this.tokenResponseType + ", use actions not post");
                 return this.errorFn(this.server, event, ce);
             }
-            return this.pack(await this.refreshTokens(event, "silent", true));
+            const ret = await this.refreshTokens(event, "silent", true);
+            return this.pack(ret);
         },
     };
     autoRefreshTokensEndpoint = {
@@ -2377,6 +2379,12 @@ export class SvelteKitOAuthClient extends OAuthClientBackend {
         },
     };
     errorIfIdTokenInvalid(oauthResponse) {
+        if (!oauthResponse) {
+            return {
+                error: "access_denied",
+                error_description: "Invalid OAuth response"
+            };
+        }
         if (oauthResponse["id_token"] && this.jwtTokens.includes("id")) {
             /*const payload = this.validateIdToken(oauthResponse["id_token"]);
             if (payload == undefined) {

package/dist/sveltekitoauthserver.js

@@ -251,8 +251,12 @@ export class SvelteKitAuthorizationServer {
             cookieParams.domain = this.refreshTokenCookieDomain;
         if (this.refreshTokenCookieHttpOnly == true)
             cookieParams.httpOnly = true;
+        else
+            cookieParams.httpOnly = false;
         if (this.refreshTokenCookieSecure == true)
             cookieParams.secure = true;
+        else
+            cookieParams.secure = false;
         event.cookies.set(this.refreshTokenCookieName, token, cookieParams);
     }
     requireGetParam(url, name) {
@@ -1220,7 +1224,7 @@ export class SvelteKitAuthorizationServer {
                 }
                 else if (this.authServer.upstreamClients && this.authServer.upstreamClientOptionss) {
                     if (!upstream) {
-                        CrossauthLogger.logger.error(j({ msg: "Have multiple upstream clients but upstream redirect uri not passed the upstream identifier" }));
+                        CrossauthLogger.logger.warn(j({ msg: "Have multiple upstream clients but upstream redirect uri not passed the upstream identifier" }));
                         return this.redirectError(oauthData.orig_redirect_uri, "server_error", "Have multiple upstream clients but upstream redirect uri not passed the upstream identifier");
                     }
                     upstreamClient = this.authServer.upstreamClients[upstream];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@crossauth/sveltekit",
-  "version": "1.1.4",
+  "version": "1.1.6",
   "license": "Apache-2.0",
   "description": "Sveltekit adapter for Crossauth authentication package",
   "private": false,
@@ -54,8 +54,8 @@
     "minimatch": "^10.0.1",
     "publint": "0.3.15",
     "qrcode": "^1.5.4",
-    "@crossauth/backend": "^1.1.4",
-    "@crossauth/common": "^1.1.4"
+    "@crossauth/backend": "^1.1.6",
+    "@crossauth/common": "^1.1.6"
   },
   "scripts": {
     "preparex": "svelte-kit sync",