@explita/cloud-auth-client 0.2.0 → 0.2.1

package/dist/lib/utils.d.ts

@@ -1,4 +1,4 @@
-import { AuthConfig, QueryOpts, User } from "../types";
+import { AuthConfig, QueryOpts, TokenSession, User } from "../types";
 export declare function cn(...classes: (string | false | null | undefined)[]): string;
 export declare function unstuckPointerEvents(): void;
 export declare function buildRouteContext(config?: AuthConfig, currentPath?: string): {
@@ -13,7 +13,7 @@ export declare function buildRouteContext(config?: AuthConfig, currentPath?: str
     isExcluded: boolean;
 };
 export declare function getClientToken(): string;
-export declare function hasPermission(user: User | null, permission: string): boolean;
+export declare function hasPermission(session: User | TokenSession | null, permission: string): boolean;
 export declare function parseMessage(message: string): string;
 export declare function parseGroupId(data?: QueryOpts["groupIds"]): string;
 export declare function parseJwt(token: string): any;

package/dist/lib/utils.js

@@ -102,10 +102,10 @@ function getClientToken() {
         ? localStorage.getItem(constants_1.AUTH_TOKEN_KEY) || ""
         : "";
 }
-function hasPermission(user, permission) {
-    if (!user)
+function hasPermission(session, permission) {
+    if (!session)
         return false;
-    return user.role.permissions?.includes(permission) || user.isSuperAdmin;
+    return session.role.permissions?.includes(permission) || session.isSuperAdmin;
 }
 function parseMessage(message) {
     return message == "fetch failed" || message == "Failed to fetch"

package/dist/server/index.d.ts

@@ -3,6 +3,7 @@ export * from "./reset-password";
 export * from "./user";
 export * from "./next-cookie-override";
 export * from "./server-session";
+export * from "./token-session";
 export * from "./server-token";
 export * from "./role";
 export { hasPermission } from "../lib/utils";

package/dist/server/index.js

@@ -20,6 +20,7 @@ __exportStar(require("./reset-password"), exports);
 __exportStar(require("./user"), exports);
 __exportStar(require("./next-cookie-override"), exports);
 __exportStar(require("./server-session"), exports);
+__exportStar(require("./token-session"), exports);
 __exportStar(require("./server-token"), exports);
 __exportStar(require("./role"), exports);
 var utils_1 = require("../lib/utils");

package/dist/server/token-session.d.ts

@@ -0,0 +1,7 @@
+import { TokenSession } from "../types";
+/**
+ * Reads session from JWT in cookies.
+ * No network call. No server validation.
+ * Intended for middleware / edge usage.
+ */
+export declare function getTokenSession<T extends Record<string, any>>(): Promise<TokenSession<T> | null>;

package/dist/server/token-session.js

@@ -0,0 +1,36 @@
+"use server";
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getTokenSession = getTokenSession;
+const utils_1 = require("../lib/utils");
+const server_token_1 = require("./server-token");
+/**
+ * Reads session from JWT in cookies.
+ * No network call. No server validation.
+ * Intended for middleware / edge usage.
+ */
+async function getTokenSession() {
+    try {
+        const token = await (0, server_token_1.getServerToken)();
+        if (!token)
+            return null;
+        const session = (0, utils_1.parseJwt)(token);
+        if (!session)
+            return null;
+        const now = Date.now();
+        if (now > session.exp * 1000 - 5000)
+            return null; // 5s buffer
+        return {
+            ...session.user,
+            meta: {
+                sessionId: session.sessionId,
+                exp: session.exp,
+                iat: session.iat,
+            },
+        };
+    }
+    catch (err) {
+        console.error("[getTokenSession] Failed:", err);
+        return null;
+    }
+}

package/dist/types.d.ts

@@ -232,6 +232,22 @@ export type ServerSession = User & {
         exp: number;
     };
 };
+export type TokenSession<T extends Record<string, any> = Record<string, any>> = {
+    id: string;
+    subId: string;
+    groupId: string;
+    role: {
+        label: string;
+        permissions: string[];
+    };
+    isSuperAdmin: boolean;
+    metadata: T;
+    meta: {
+        sessionId: string;
+        iat: number;
+        exp: number;
+    };
+};
 export type QueryOpts = {
     groupIds?: (string | number | null)[];
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@explita/cloud-auth-client",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "author": "Explita",
   "license": "MIT",
   "description": "A simple authentication library for React",