@dudousxd/nestjs-agent-dashboard 0.10.0 → 0.10.1

package/dist/server/index.cjs

@@ -303,6 +303,30 @@ function clearSessionCookie(context) {
   appendSetCookie(context.response, cookie);
 }
 __name(clearSessionCookie, "clearSessionCookie");
+var inFlightRevalidations = /* @__PURE__ */ new Map();
+function revalidationKey(session) {
+  return `${session.sub}:${session.iat}`;
+}
+__name(revalidationKey, "revalidationKey");
+function getOrStartRevalidation(auth, session, user) {
+  const hook = auth.revalidate;
+  if (!hook) return Promise.resolve(true);
+  const key = revalidationKey(session);
+  const inFlight = inFlightRevalidations.get(key);
+  if (inFlight) return inFlight;
+  const outcome = (async () => {
+    try {
+      return await hook(user);
+    } catch {
+      return false;
+    }
+  })().finally(() => {
+    inFlightRevalidations.delete(key);
+  });
+  inFlightRevalidations.set(key, outcome);
+  return outcome;
+}
+__name(getOrStartRevalidation, "getOrStartRevalidation");
 async function maybeRenewSession(auth, session, request, response, now = Date.now()) {
   if (now - session.iat <= auth.ttlMs / 2) return true;
   const user = {
@@ -312,20 +336,13 @@ async function maybeRenewSession(auth, session, request, response, now = Date.no
     } : {},
     roles: session.roles
   };
-  if (auth.revalidate) {
-    let allowed;
-    try {
-      allowed = await auth.revalidate(user);
-    } catch {
-      allowed = false;
-    }
-    if (!allowed) {
-      clearSessionCookie({
-        request,
-        response
-      });
-      return false;
-    }
+  const allowed = await getOrStartRevalidation(auth, session, user);
+  if (!allowed) {
+    clearSessionCookie({
+      request,
+      response
+    });
+    return false;
   }
   issueSessionCookie(user, {
     auth,
@@ -1347,7 +1364,7 @@ var AgentDashboardAuthController = class _AgentDashboardAuthController {
   }
   loginPage(req, res, returnToQuery, error) {
     const auth = this.requireAuth();
-    if (!auth.login) throw new import_common7.NotFoundException();
+    if (!auth.modes.includes("login")) throw new import_common7.NotFoundException();
     const returnTo = sanitizeReturnTo(this.basePath, returnToQuery);
     if (this.currentSession(req)) {
       res.status(302);
@@ -1362,7 +1379,7 @@ var AgentDashboardAuthController = class _AgentDashboardAuthController {
   }
   async login(body, req, res) {
     const auth = this.requireAuth();
-    if (!auth.login) throw new import_common7.NotFoundException();
+    if (!auth.modes.includes("login")) throw new import_common7.NotFoundException();
     const returnTo = sanitizeReturnTo(this.basePath, body?.returnTo);
     const username = body?.username;
     const password = body?.password;
@@ -1390,14 +1407,14 @@ var AgentDashboardAuthController = class _AgentDashboardAuthController {
       response: res
     });
     res.status(302);
-    res.setHeader("Location", this.auth && !this.auth.login ? `${this.basePath}/auth/session-required` : `${this.basePath}/auth/login`);
+    res.setHeader("Location", this.auth && !this.auth.modes.includes("login") ? `${this.basePath}/auth/session-required` : `${this.basePath}/auth/login`);
     return "";
   }
   // Mode A: the host frontend (carrying its own auth) POSTs here; the host hook validates the raw
   // request and returns the session user, or `null` to deny. No credential reaches this library.
   async session(request, response) {
     const auth = this.requireAuth();
-    if (!auth.session) throw new import_common7.NotFoundException();
+    if (!auth.modes.includes("session")) throw new import_common7.NotFoundException();
     const user = await this.runHook("session", () => auth.session?.(request) ?? null);
     if (!user) throw new import_common7.UnauthorizedException();
     issueSessionCookie(user, {
@@ -1411,7 +1428,7 @@ var AgentDashboardAuthController = class _AgentDashboardAuthController {
   // 404s under Mode A (see `loginPage` above).
   sessionRequiredPage() {
     const auth = this.requireAuth();
-    if (auth.login) throw new import_common7.NotFoundException();
+    if (auth.modes.includes("login")) throw new import_common7.NotFoundException();
     return renderSessionRequiredPage();
   }
   /** Uniform failure: same redirect (generic error flag) whether the user is unknown or the password is wrong. */
@@ -1657,7 +1674,7 @@ var DashboardAuthPageGuard = class {
   * asserting away) the nullability.
   */
   deny(auth, request) {
-    if (!auth.login) {
+    if (!auth.modes.includes("login")) {
       throw new DashboardAuthRedirect(`${this.basePath}/auth/session-required`);
     }
     const returnTo = readOriginalUrl(request);