@gatwech/auth 1.0.0-beta.18

package/dist/index-zjjNBRY2.d.mts

@@ -0,0 +1,95 @@
+import { f as InferSession, p as InferUser } from "./index-Cxi7TbLE.mjs";
+import * as _gatwech_core2 from "@gatwech/core";
+import { GenericEndpointContext, PayvoAuthOptions } from "@gatwech/core";
+import * as better_call16 from "better-call";
+import * as z$1 from "zod";
+
+//#region src/plugins/custom-session/index.d.ts
+type CustomSessionPluginOptions = {
+  /**
+   * This option is used to determine if the list-device-sessions endpoint should be mutated to the custom session data.
+   * @default false
+   */
+  shouldMutateListDeviceSessionsEndpoint?: boolean | undefined;
+};
+declare const customSession: <Returns extends Record<string, any>, O extends PayvoAuthOptions = PayvoAuthOptions>(fn: (session: {
+  user: InferUser<O>;
+  session: InferSession<O>;
+}, ctx: GenericEndpointContext) => Promise<Returns>, options?: O | undefined, pluginOptions?: CustomSessionPluginOptions | undefined) => {
+  id: "custom-session";
+  hooks: {
+    after: {
+      matcher: (ctx: _gatwech_core2.HookEndpointContext) => boolean;
+      handler: (inputContext: better_call16.MiddlewareInputContext<better_call16.MiddlewareOptions>) => Promise<Awaited<Returns>[] | undefined>;
+    }[];
+  };
+  endpoints: {
+    getSession: {
+      <AsResponse extends boolean = false, ReturnHeaders extends boolean = false>(inputCtx_0: {
+        body?: undefined;
+      } & {
+        method?: "GET" | undefined;
+      } & {
+        query?: {
+          disableCookieCache?: string | boolean | undefined;
+          disableRefresh?: boolean | undefined;
+        } | undefined;
+      } & {
+        params?: Record<string, any>;
+      } & {
+        request?: Request;
+      } & {
+        headers: HeadersInit;
+      } & {
+        asResponse?: boolean;
+        returnHeaders?: boolean;
+        use?: better_call16.Middleware[];
+        path?: string;
+      } & {
+        asResponse?: AsResponse | undefined;
+        returnHeaders?: ReturnHeaders | undefined;
+      }): Promise<[AsResponse] extends [true] ? Response : [ReturnHeaders] extends [true] ? {
+        headers: Headers;
+        response: Returns | null;
+      } : Returns | null>;
+      options: {
+        method: "GET";
+        query: z$1.ZodOptional<z$1.ZodObject<{
+          disableCookieCache: z$1.ZodOptional<z$1.ZodUnion<[z$1.ZodBoolean, z$1.ZodPipe<z$1.ZodString, z$1.ZodTransform<boolean, string>>]>>;
+          disableRefresh: z$1.ZodOptional<z$1.ZodBoolean>;
+        }, z$1.core.$strip>>;
+        metadata: {
+          CUSTOM_SESSION: boolean;
+          openapi: {
+            description: string;
+            responses: {
+              "200": {
+                description: string;
+                content: {
+                  "application/json": {
+                    schema: {
+                      type: "array";
+                      nullable: boolean;
+                      items: {
+                        $ref: string;
+                      };
+                    };
+                  };
+                };
+              };
+            };
+          };
+        };
+        requireHeaders: true;
+      } & {
+        use: any[];
+      };
+      path: "/get-session";
+    };
+  };
+  $Infer: {
+    Session: Awaited<ReturnType<typeof fn>>;
+  };
+};
+//#endregion
+export { customSession as n, CustomSessionPluginOptions as t };

package/dist/index.d.mts

@@ -0,0 +1,12 @@
+import { h as UnionToIntersection, u as Prettify } from "./helper-tmxW3BHj.mjs";
+import { A as Where, An as generateId, B as InferPluginsFromClient, C as AdapterInstance, Cn as StandardSchemaV1, D as DBAdapterSchemaCreation, Dn as getTelemetryAuthConfig, E as DBAdapterInstance, En as getCurrentAdapter, F as ClientStore, G as PayvoAuthClientPlugin, H as InferUserFromClient, I as InferActions, K as SessionQueryParams, L as InferAdditionalFromClient, M as AtomListener, Mn as generateState, N as ClientAtomListener, Nn as parseState, O as DBTransactionAdapter, P as ClientOptions, Q as APIError, R as InferClientAPI, S as Adapter, T as DBAdapter, Tn as createTelemetry, U as IsSignal, V as InferSessionFromClient, W as PayvoAuthClientOptions, X as WithJsDoc, Y as Auth, Z as payvoAuth, _ as Verification, a as PayvoAuthRateLimitOptions, b as InferAPI, c as AdditionalSessionFieldsOutput, d as InferPluginTypes, f as InferSession, g as User, h as Session, i as PayvoAuthPlugin, j as init, jn as HIDE_METADATA, k as TransactionAdapter, kn as capitalizeFirstLetter, l as AdditionalUserFieldsInput, m as RateLimit, n as PayvoAuthCookies, o as Account, p as InferUser, q as Store, r as PayvoAuthOptions, s as AdditionalSessionFieldsInput, t as PayvoAuthAdvancedOptions, u as AdditionalUserFieldsOutput, v as FilterActions, w as AdapterSchemaCreation, wn as TelemetryEvent, x as InferSessionAPI, y as FilteredAPI, z as InferErrorCodes } from "./index-Cxi7TbLE.mjs";
+import "./types-B1OL7hyf.mjs";
+import "./index-65G5U5DB-DSdjzreF.mjs";
+import { n as InferPluginErrorCodes, t as InferOptionSchema } from "./plugins-hFZT3hmK.mjs";
+export * from "@gatwech/core";
+export * from "@gatwech/core/env";
+export * from "@gatwech/core/error";
+export * from "@gatwech/core/oauth2";
+export * from "@gatwech/core/utils";
+export * from "better-call";
+export { APIError, Account, Adapter, AdapterInstance, AdapterSchemaCreation, AdditionalSessionFieldsInput, AdditionalSessionFieldsOutput, AdditionalUserFieldsInput, AdditionalUserFieldsOutput, AtomListener, Auth, ClientAtomListener, ClientOptions, ClientStore, DBAdapter, DBAdapterInstance, DBAdapterSchemaCreation, DBTransactionAdapter, FilterActions, FilteredAPI, HIDE_METADATA, InferAPI, InferActions, InferAdditionalFromClient, InferClientAPI, InferErrorCodes, InferOptionSchema, InferPluginErrorCodes, InferPluginTypes, InferPluginsFromClient, InferSession, InferSessionAPI, InferSessionFromClient, InferUser, InferUserFromClient, IsSignal, PayvoAuthAdvancedOptions, PayvoAuthClientOptions, PayvoAuthClientPlugin, PayvoAuthCookies, PayvoAuthOptions, PayvoAuthPlugin, PayvoAuthRateLimitOptions, Prettify, RateLimit, Session, SessionQueryParams, StandardSchemaV1, Store, TelemetryEvent, TransactionAdapter, UnionToIntersection, User, Verification, Where, WithJsDoc, capitalizeFirstLetter, createTelemetry, generateId, generateState, getCurrentAdapter, getTelemetryAuthConfig, init, parseState, payvoAuth };

package/dist/index.mjs

@@ -0,0 +1,33 @@
+import { i as parseState, n as HIDE_METADATA, r as generateState, t as generateId } from "./utils-SOMB4Px5.mjs";
+import "./url-VB2gAbTI.mjs";
+import { t as APIError } from "./api-0pR_I-Nx.mjs";
+import "./get-request-ip-DSjrEpGo.mjs";
+import "./json-D0TBLy4q.mjs";
+import "./crypto-Bb42eMrH.mjs";
+import "./jwt-CmxZAGe2.mjs";
+import "./cookies-cJObLwn1.mjs";
+import "./date-Cx2yCiC4.mjs";
+import "./db-BrstmDhc.mjs";
+import "./dialect-CeddeGHf.mjs";
+import "./get-tables-BQP7YW9c.mjs";
+import "./types-Bjn15Uy6.mjs";
+import { t as capitalizeFirstLetter } from "./misc-beA1w3XV.mjs";
+import "./session-Dgp133Yt.mjs";
+import "./adapter-factory-BZ2Qiqpn.mjs";
+import "./kysely-adapter-DpzYO8Yf.mjs";
+import { t as payvoAuth } from "./auth-CBUoBX6o.mjs";
+import "./password-sVC4nePO.mjs";
+import { getCurrentAdapter } from "@gatwech/core/context";
+import { createTelemetry, getTelemetryAuthConfig } from "@gatwech/telemetry";
+
+export * from "@gatwech/core"
+
+export * from "@gatwech/core/env"
+
+export * from "@gatwech/core/error"
+
+export * from "@gatwech/core/oauth2"
+
+export * from "@gatwech/core/utils"
+
+export { APIError, HIDE_METADATA, capitalizeFirstLetter, createTelemetry, generateId, generateState, getCurrentAdapter, getTelemetryAuthConfig, parseState, payvoAuth };

package/dist/integrations/next-js.d.mts

@@ -0,0 +1,21 @@
+import * as _gatwech_core0 from "@gatwech/core";
+import * as better_call0 from "better-call";
+
+//#region src/integrations/next-js.d.ts
+declare function toNextJsHandler(auth: {
+  handler: (request: Request) => Promise<Response>;
+} | ((request: Request) => Promise<Response>)): {
+  GET: (request: Request) => Promise<Response>;
+  POST: (request: Request) => Promise<Response>;
+};
+declare const nextCookies: () => {
+  id: "next-cookies";
+  hooks: {
+    after: {
+      matcher(ctx: _gatwech_core0.HookEndpointContext): true;
+      handler: (inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<void>;
+    }[];
+  };
+};
+//#endregion
+export { nextCookies, toNextJsHandler };

package/dist/integrations/next-js.mjs

@@ -0,0 +1,62 @@
+import "../url-VB2gAbTI.mjs";
+import "../json-D0TBLy4q.mjs";
+import "../jwt-CmxZAGe2.mjs";
+import { l as parseSetCookieHeader } from "../cookies-cJObLwn1.mjs";
+import "../date-Cx2yCiC4.mjs";
+import { createAuthMiddleware } from "@gatwech/core/api";
+
+//#region src/integrations/next-js.ts
+function toNextJsHandler(auth) {
+	const handler = async (request) => {
+		return "handler" in auth ? auth.handler(request) : auth(request);
+	};
+	return {
+		GET: handler,
+		POST: handler
+	};
+}
+const nextCookies = () => {
+	return {
+		id: "next-cookies",
+		hooks: { after: [{
+			matcher(ctx) {
+				return true;
+			},
+			handler: createAuthMiddleware(async (ctx) => {
+				const returned = ctx.context.responseHeaders;
+				if ("_flag" in ctx && ctx._flag === "router") return;
+				if (returned instanceof Headers) {
+					const setCookies = returned?.get("set-cookie");
+					if (!setCookies) return;
+					const parsed = parseSetCookieHeader(setCookies);
+					const { cookies } = await import("next/headers");
+					let cookieHelper;
+					try {
+						cookieHelper = await cookies();
+					} catch (error) {
+						if (error instanceof Error && error.message.startsWith("`cookies` was called outside a request scope.")) return;
+						throw error;
+					}
+					parsed.forEach((value, key) => {
+						if (!key) return;
+						const opts = {
+							sameSite: value.samesite,
+							secure: value.secure,
+							maxAge: value["max-age"],
+							httpOnly: value.httponly,
+							domain: value.domain,
+							path: value.path
+						};
+						try {
+							cookieHelper.set(key, decodeURIComponent(value.value), opts);
+						} catch (e) {}
+					});
+					return;
+				}
+			})
+		}] }
+	};
+};
+
+//#endregion
+export { nextCookies, toNextJsHandler };

package/dist/integrations/node.d.mts

@@ -0,0 +1,15 @@
+import "../helper-tmxW3BHj.mjs";
+import { Y as Auth } from "../index-Cxi7TbLE.mjs";
+import "../types-B1OL7hyf.mjs";
+import "../index-65G5U5DB-DSdjzreF.mjs";
+import "../plugins-hFZT3hmK.mjs";
+import * as http0 from "http";
+import { IncomingHttpHeaders } from "http";
+
+//#region src/integrations/node.d.ts
+declare const toNodeHandler: (auth: {
+  handler: Auth["handler"];
+} | Auth["handler"]) => (req: http0.IncomingMessage, res: http0.ServerResponse) => Promise<void>;
+declare function fromNodeHeaders(nodeHeaders: IncomingHttpHeaders): Headers;
+//#endregion
+export { fromNodeHeaders, toNodeHandler };

package/dist/integrations/node.mjs

@@ -0,0 +1,15 @@
+import { toNodeHandler as toNodeHandler$1 } from "better-call/node";
+
+//#region src/integrations/node.ts
+const toNodeHandler = (auth) => {
+	return "handler" in auth ? toNodeHandler$1(auth.handler) : toNodeHandler$1(auth);
+};
+function fromNodeHeaders(nodeHeaders) {
+	const webHeaders = new Headers();
+	for (const [key, value] of Object.entries(nodeHeaders)) if (value !== void 0) if (Array.isArray(value)) value.forEach((v) => webHeaders.append(key, v));
+	else webHeaders.set(key, value);
+	return webHeaders;
+}
+
+//#endregion
+export { fromNodeHeaders, toNodeHandler };

package/dist/integrations/react-start.d.mts

@@ -0,0 +1,15 @@
+import * as _gatwech_core0 from "@gatwech/core";
+import * as better_call5 from "better-call";
+
+//#region src/integrations/react-start.d.ts
+declare const reactStartCookies: () => {
+  id: "react-start-cookies";
+  hooks: {
+    after: {
+      matcher(ctx: _gatwech_core0.HookEndpointContext): true;
+      handler: (inputContext: better_call5.MiddlewareInputContext<better_call5.MiddlewareOptions>) => Promise<void>;
+    }[];
+  };
+};
+//#endregion
+export { reactStartCookies };

package/dist/integrations/react-start.mjs

@@ -0,0 +1,46 @@
+import "../url-VB2gAbTI.mjs";
+import "../json-D0TBLy4q.mjs";
+import "../jwt-CmxZAGe2.mjs";
+import { l as parseSetCookieHeader } from "../cookies-cJObLwn1.mjs";
+import "../date-Cx2yCiC4.mjs";
+import { createAuthMiddleware } from "@gatwech/core/api";
+
+//#region src/integrations/react-start.ts
+const reactStartCookies = () => {
+	return {
+		id: "react-start-cookies",
+		hooks: { after: [{
+			matcher(ctx) {
+				return true;
+			},
+			handler: createAuthMiddleware(async (ctx) => {
+				const returned = ctx.context.responseHeaders;
+				if ("_flag" in ctx && ctx._flag === "router") return;
+				if (returned instanceof Headers) {
+					const setCookies = returned?.get("set-cookie");
+					if (!setCookies) return;
+					const parsed = parseSetCookieHeader(setCookies);
+					const { setCookie } = await import("@tanstack/start-server-core");
+					parsed.forEach((value, key) => {
+						if (!key) return;
+						const opts = {
+							sameSite: value.samesite,
+							secure: value.secure,
+							maxAge: value["max-age"],
+							httpOnly: value.httponly,
+							domain: value.domain,
+							path: value.path
+						};
+						try {
+							setCookie(key, decodeURIComponent(value.value), opts);
+						} catch (e) {}
+					});
+					return;
+				}
+			})
+		}] }
+	};
+};
+
+//#endregion
+export { reactStartCookies };

package/dist/json-D0TBLy4q.mjs

@@ -0,0 +1,24 @@
+import { logger } from "@gatwech/core/env";
+
+//#region src/utils/json.ts
+function safeJSONParse(data) {
+	function reviver(_, value) {
+		if (typeof value === "string") {
+			if (/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d+)?Z$/.test(value)) {
+				const date = new Date(value);
+				if (!isNaN(date.getTime())) return date;
+			}
+		}
+		return value;
+	}
+	try {
+		if (typeof data !== "string") return data;
+		return JSON.parse(data, reviver);
+	} catch (e) {
+		logger.error("Error parsing JSON", { error: e });
+		return null;
+	}
+}
+
+//#endregion
+export { safeJSONParse as t };

package/dist/jwt-CmxZAGe2.mjs

@@ -0,0 +1,94 @@
+import { hkdf } from "@noble/hashes/hkdf.js";
+import { sha256 } from "@noble/hashes/sha2.js";
+import { EncryptJWT, SignJWT, base64url, calculateJwkThumbprint, jwtDecrypt, jwtVerify } from "jose";
+
+//#region src/crypto/jwt.ts
+async function signJWT(payload, secret, expiresIn = 3600) {
+	return await new SignJWT(payload).setProtectedHeader({ alg: "HS256" }).setIssuedAt().setExpirationTime(Math.floor(Date.now() / 1e3) + expiresIn).sign(new TextEncoder().encode(secret));
+}
+async function verifyJWT(token, secret) {
+	try {
+		return (await jwtVerify(token, new TextEncoder().encode(secret))).payload;
+	} catch (error) {
+		return null;
+	}
+}
+const info = new Uint8Array([
+	66,
+	101,
+	116,
+	116,
+	101,
+	114,
+	65,
+	117,
+	116,
+	104,
+	46,
+	106,
+	115,
+	32,
+	71,
+	101,
+	110,
+	101,
+	114,
+	97,
+	116,
+	101,
+	100,
+	32,
+	69,
+	110,
+	99,
+	114,
+	121,
+	112,
+	116,
+	105,
+	111,
+	110,
+	32,
+	75,
+	101,
+	121
+]);
+const now = () => Date.now() / 1e3 | 0;
+const alg = "dir";
+const enc = "A256CBC-HS512";
+async function symmetricEncodeJWT(payload, secret, salt, expiresIn = 3600) {
+	const encryptionSecret = hkdf(sha256, new TextEncoder().encode(secret), new TextEncoder().encode(salt), info, 64);
+	const thumbprint = await calculateJwkThumbprint({
+		kty: "oct",
+		k: base64url.encode(encryptionSecret)
+	}, "sha256");
+	return await new EncryptJWT(payload).setProtectedHeader({
+		alg,
+		enc,
+		kid: thumbprint
+	}).setIssuedAt().setExpirationTime(now() + expiresIn).setJti(crypto.randomUUID()).encrypt(encryptionSecret);
+}
+async function symmetricDecodeJWT(token, secret, salt) {
+	if (!token) return null;
+	try {
+		const { payload } = await jwtDecrypt(token, async ({ kid }) => {
+			const encryptionSecret = hkdf(sha256, new TextEncoder().encode(secret), new TextEncoder().encode(salt), info, 64);
+			if (kid === void 0) return encryptionSecret;
+			if (kid === await calculateJwkThumbprint({
+				kty: "oct",
+				k: base64url.encode(encryptionSecret)
+			}, "sha256")) return encryptionSecret;
+			throw new Error("no matching decryption secret");
+		}, {
+			clockTolerance: 15,
+			keyManagementAlgorithms: [alg],
+			contentEncryptionAlgorithms: [enc, "A256GCM"]
+		});
+		return payload;
+	} catch (error) {
+		return null;
+	}
+}
+
+//#endregion
+export { verifyJWT as i, symmetricDecodeJWT as n, symmetricEncodeJWT as r, signJWT as t };