@gauts/auth 0.1.2 → 0.2.0

package/README.md

@@ -4,16 +4,14 @@ Reusable password and opaque server-side session authentication for Node.js appl
 
 `@gauts/auth` validates sessions through Redis and records session history through an application-owned database adapter. It does not create endpoints, database models, users, or application authorization rules.
 
-The package is under active development and has not been published yet.
-
 ## Design
 
 - Argon2id by default, with explicit bcrypt support.
 - One stable 256-bit opaque browser token per session.
-- SHA-256 token hashes in Redis and the audit database.
+- SHA-256 token hashes in Redis and the session records database.
 - Redis-authoritative authentication with no database fallback.
 - Sliding inactivity expiration without an absolute lifetime.
-- Exact canonical IP and complete User-Agent session binding.
+- Configurable client validation, using the complete User-Agent by default.
 - Framework integrations through explicit package exports.
 
 ## Installation
@@ -22,21 +20,23 @@ The package is under active development and has not been published yet.
 npm install @gauts/auth redis hono
 ```
 
-The package is not on npm yet. During local development, use the tarball produced by `npm pack`.
-
 ## Setup
 
 ```ts
-import { createAuth, type SessionAudit } from "@gauts/auth";
+import { createAuth, type SessionRecords } from "@gauts/auth";
 import { createHonoAdapter } from "@gauts/auth/hono";
 import { createRedisStore } from "@gauts/auth/redis";
 
-const audit: SessionAudit = {
+const records: SessionRecords = {
   create: (session) => db.sessions.create(session),
-  findActive: (subjectId, now) => db.sessions.findActive(subjectId, now),
-  findForRevoke: (subjectId, sessionId) => db.sessions.findForRevoke(subjectId, sessionId),
-  revoke: (sessionIds, revokedAt) => db.sessions.revoke(sessionIds, revokedAt),
-  touch: (sessionId, expiresAt, updatedAt) => db.sessions.touch(sessionId, expiresAt, updatedAt),
+  find: ({ accountId, sessionId }) =>
+    db.sessions.find({ accountId, sessionId }),
+  findActive: ({ accountId, now }) =>
+    db.sessions.findActive({ accountId, now }),
+  revoke: ({ revokedAt, sessionIds }) =>
+    db.sessions.revoke({ revokedAt, sessionIds }),
+  updateExpiry: ({ expiresAt, sessionId, updatedAt }) =>
+    db.sessions.updateExpiry({ expiresAt, sessionId, updatedAt }),
 };
 
 type AccountSession = {
@@ -45,33 +45,56 @@ type AccountSession = {
 };
 
 const auth = createAuth<AccountSession>({
-  redis: createRedisStore(redis, { prefix: "my-app:auth" }),
-  audit,
+  redis: createRedisStore({ client: redis, config: { prefix: "my-app:auth" } }),
+  records,
   session: {
     ttl: 60 * 60 * 24 * 7,
-    touchAfter: 60 * 60 * 24,
+    renewInterval: 60 * 60 * 24,
     max: 10,
+    validation: ["userAgent"],
   },
 });
 
 const hono = createHonoAdapter({
   auth,
-  getClient: (c) => ({
-    ip: getTrustedClientIp(c),
-    userAgent: c.req.header("user-agent") ?? null,
-  }),
+  getIp: (c) => getTrustedClientIp(c),
 });
 ```
 
 The application must obtain the client IP according to its own trusted-proxy configuration. The package canonicalizes the supplied IPv4 or IPv6 value but never decides which forwarding headers are trusted.
 
+## Client information
+
+The application supplies `getIp` because only its deployment knows which proxies and forwarding
+headers are trusted. The Hono adapter reads User-Agent and platform directly from the request.
+
+The resulting client information has this shape:
+
+```ts
+type SessionClientInput = {
+  ip?: string | null;
+  userAgent?: string | null;
+  platform?: string | null;
+};
+```
+
+- `validation` selects which client fields are compared on authenticated requests.
+- `userAgent` is compared by default.
+- `ip` and `platform` are always stored as session metadata, even when they are not compared.
+- IPv4, IPv4-mapped IPv6, and IPv6 values are canonicalized by the package.
+- Platform is unquoted, trimmed, and limited to 255 characters.
+- User-Agent is stored and compared in full without truncation.
+
+`getIp` runs during session creation and on every authenticated request. It should only resolve the
+trusted request IP and must not perform unrelated account or database work.
+
 ## Passwords
 
 Argon2id is the default:
 
 ```ts
 const hash = await auth.password.hash(password);
-const valid = await auth.password.verify(password, hash);
+const valid = await auth.password.verify({ password, storedHash: hash });
 ```
 
 Applications whose database contains bcrypt hashes select bcrypt explicitly:
@@ -81,11 +104,21 @@ const auth = createAuth({
   password: {
     algorithm: "bcrypt",
   },
-  redis: createRedisStore(redis),
-  audit,
+  redis: createRedisStore({ client: redis }),
+  records,
 });
 ```
 
+New bcrypt hashes reject passwords above 72 bytes. Applications with historical hashes created from longer bcrypt input can opt into a larger verification-only boundary without permitting new truncated hashes:
+
+```ts
+password: {
+  algorithm: "bcrypt",
+  maxBytes: 72,
+  verifyMaxBytes: 1024,
+}
+```
+
 The configured algorithm is used for both hashing and verification. The package does not detect, convert, migrate, or fall back to another algorithm.
 
 ## Login
@@ -97,22 +130,26 @@ app.post("/auth/login", async (c) => {
   const { email, password } = await c.req.json();
   const account = await findAccount(email);
 
-  if (!account || !(await auth.password.verify(password, account.passwordHash))) {
+  if (
+    !account ||
+    !(await auth.password.verify({
+      password,
+      storedHash: account.passwordHash,
+    }))
+  ) {
     return c.json({ error: "Invalid credentials." }, 401);
   }
 
-  const created = await auth.session.create({
-    subjectId: account.id,
+  const session = await hono.createSession({
+    accountId: account.id,
+    context: c,
     data: {
       email: account.email,
       role: account.role,
     },
-    client: await getClient(c),
   });
 
-  hono.setSession(c, created);
-
-  return c.json({ account: created.session.data });
+  return c.json({ account: session.data });
 });
 ```
 
@@ -122,14 +159,14 @@ Applications must apply their own login rate limiting and account-enumeration pr
 
 ```ts
 app.get("/account", hono.requireSession, async (c) => {
-  const session = c.get("authSession");
-  const account = await findAccountById(session.subjectId);
+  const session = c.get("session");
+  const account = await findAccountById(session.accountId);
 
   return c.json({ account });
 });
 ```
 
-The middleware reads the cookie, resolves Redis, compares IP and User-Agent, renews expiry when due, and places the typed session in the Hono context. It does not load application data from the database.
+The middleware reads the cookie, resolves Redis, compares the configured client fields, renews expiry when due, and places the typed session in the Hono context. It does not load application data from the database.
 
 Applications that need to populate additional Hono context variables can resolve through the same adapter without duplicating its cookie behavior:
 
@@ -146,54 +183,54 @@ const requireAccount = async (c, next) => {
 
 ```ts
 app.post("/auth/logout", async (c) => {
-  const token = hono.getToken(c);
-
-  if (token) {
-    await auth.session.revokeToken(token);
-  }
-
-  hono.clearSession(c);
+  await hono.revokeSession(c);
   return c.body(null, 204);
 });
 ```
 
+The adapter clears the cookie only after backend revocation succeeds. Infrastructure errors are
+propagated so the application can return its own service-error response.
+
 ## Active sessions
 
 ```ts
 const sessions = await auth.session.list(accountId);
 
 await auth.session.revoke({
-  subjectId: accountId,
+  accountId,
   sessionId,
 });
 
-await auth.session.revokeSubject(accountId);
+await auth.session.revokeAccount(accountId);
 ```
 
-The audit database supplies session history. Redis is checked in a batch before a session is reported as active. Token hashes are never returned by `list`.
+The records database supplies session history. Redis is checked in a batch before a session is reported as active. Token hashes are never returned by `list`.
 
 ## Synchronizing session data
 
 When cached session claims change:
 
 ```ts
-await auth.session.sync(accountId, {
-  email: account.email,
-  role: account.role,
+await auth.session.sync({
+  accountId,
+  data: {
+    email: account.email,
+    role: account.role,
+  },
 });
 ```
 
 Synchronization preserves the existing token and Redis TTL.
 
-## Session audit contract
+## Session records contract
 
-Each consuming application maps `SessionAudit` to its database. The durable record contains:
+Each consuming application maps `SessionRecords` to its database. The durable record contains:
 
 - Session ID.
-- Subject ID and relation owned by the application.
+- Account ID and relation owned by the application.
 - SHA-256 token hash.
 - Canonical IP.
-- Country and platform metadata.
+- Platform metadata.
 - Complete User-Agent.
 - Creation, current expiry, update, and revocation timestamps.
 
@@ -206,8 +243,9 @@ Defaults:
 ```ts
 session: {
   ttl: 7 * 24 * 60 * 60,
-  touchAfter: 24 * 60 * 60,
+  renewInterval: 24 * 60 * 60,
   max: 10,
+  validation: ["userAgent"],
 }
 ```
 
@@ -215,24 +253,31 @@ session: {
 - Active sessions renew at most once every 24 hours.
 - Renewal keeps the same browser token.
 - There is no absolute session lifetime.
+- Every successful `resolve` call counts as activity and renews the session when due.
 
-Consumers that validate sessions without being able to update the browser cookie, such as an established WebSocket connection, must disable renewal for that check:
+## Client validation
+
+The default compares only the complete User-Agent:
 
 ```ts
-await auth.session.resolve({
-  client,
-  renew: false,
-  token,
-});
+session: {
+  validation: ["userAgent"],
+}
 ```
 
-HTTP requests can then renew Redis, the audit record, and the cookie together.
+Applications can choose any combination of `ip`, `userAgent`, and `platform`:
+
+```ts
+session: {
+  validation: ["ip", "userAgent", "platform"],
+}
+```
 
-## Client mismatch
+An empty array disables client-field comparison and validates only the session token. Unknown or duplicate fields are rejected during startup.
 
-If the canonical IP or complete User-Agent differs, the package deletes the Redis session first and marks its audit record as revoked. Clearing the response cookie is client cleanup; Redis deletion is what removes access.
+If a configured field differs, the package deletes the Redis session first and marks its database record as revoked. Clearing the response cookie is client cleanup; Redis deletion is what removes access.
 
-Strict IP binding can log out legitimate users whose public IP changes. It is defense in depth and does not replace TLS, secure cookies, CSRF protection, XSS prevention, or re-authentication for sensitive actions.
+Exact IP validation is opt-in because VPN, mobile, and other networks can change a legitimate user's public IP. Platform validation is also opt-in because the client-hint header may be absent. Client-field validation is defense in depth and does not replace TLS, secure cookies, CSRF protection, XSS prevention, or re-authentication for sensitive actions.
 
 ## Package exports
 
@@ -241,5 +286,3 @@ Strict IP binding can log out legitimate users whose public IP changes. It is de
 @gauts/auth/redis  createRedisStore
 @gauts/auth/hono   createHonoAdapter
 ```
-
-See [`PLAN.md`](./PLAN.md) for the implementation phases and complete security decisions.

package/SECURITY.md

@@ -1,5 +1,3 @@
 # Security Policy
 
-`@gauts/auth` is not published yet and currently has no supported release.
-
-Do not open a public issue for a suspected vulnerability. Contact the package owner privately with a minimal reproduction and impact description.
+{}

package/dist/adapters/hono/index.d.ts

@@ -1,9 +1,8 @@
 import type { Context, Env, MiddlewareHandler } from "hono";
 import type { Auth } from "../../auth.js";
-import type { SessionClientInput } from "../../client/index.js";
-import type { CreatedSession, Session } from "../../session/types.js";
+import type { Session } from "../../session/types.js";
 export type HonoAuthVariables<TData extends object> = {
-    authSession: Session<TData>;
+    session: Session<TData>;
 };
 export type HonoAuthEnv<TData extends object> = Env & {
     Variables: HonoAuthVariables<TData>;
@@ -18,14 +17,21 @@ export type HonoCookieConfig = {
 export type HonoAdapterConfig<TData extends object> = {
     auth: Auth<TData>;
     cookie?: HonoCookieConfig;
-    getClient: (c: Context) => Promise<SessionClientInput> | SessionClientInput;
+    getIp: (c: Context) => Promise<string | null | undefined> | string | null | undefined;
+};
+type CreateSessionInput<TData extends object> = {
+    accountId: string;
+    context: Context;
+    data: TData;
 };
 export type HonoAdapter<TData extends object> = {
     clearSession(c: Context): void;
+    createSession(input: CreateSessionInput<TData>): Promise<Session<TData>>;
     getToken(c: Context): string | null;
     requireSession: MiddlewareHandler<HonoAuthEnv<TData>>;
     resolveSession(c: Context): Promise<Session<TData>>;
-    setSession(c: Context, created: CreatedSession<TData>): void;
+    revokeSession(c: Context): Promise<string[]>;
 };
-export declare const createHonoAdapter: <TData extends object>({ auth, cookie, getClient, }: HonoAdapterConfig<TData>) => HonoAdapter<TData>;
+export declare const createHonoAdapter: <TData extends object>({ auth, cookie, getIp, }: HonoAdapterConfig<TData>) => HonoAdapter<TData>;
+export {};
 //# sourceMappingURL=index.d.ts.map

package/dist/adapters/hono/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/adapters/hono/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,iBAAiB,EAAE,MAAM,MAAM,CAAC;AAG5D,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AAC1C,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAEhE,OAAO,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AAEtE,MAAM,MAAM,iBAAiB,CAAC,KAAK,SAAS,MAAM,IAAI;IACpD,WAAW,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;CAC7B,CAAC;AAEF,MAAM,MAAM,WAAW,CAAC,KAAK,SAAS,MAAM,IAAI,GAAG,GAAG;IACpD,SAAS,EAAE,iBAAiB,CAAC,KAAK,CAAC,CAAC;CACrC,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC;IACrC,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,iBAAiB,CAAC,KAAK,SAAS,MAAM,IAAI;IACpD,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAClB,MAAM,CAAC,EAAE,gBAAgB,CAAC;IAC1B,SAAS,EAAE,CAAC,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC,kBAAkB,CAAC,GAAG,kBAAkB,CAAC;CAC7E,CAAC;AAEF,MAAM,MAAM,WAAW,CAAC,KAAK,SAAS,MAAM,IAAI;IAC9C,YAAY,CAAC,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAAC;IACpC,cAAc,EAAE,iBAAiB,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;IACtD,cAAc,CAAC,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IACpD,UAAU,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,cAAc,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC;CAC9D,CAAC;AA6CF,eAAO,MAAM,iBAAiB,GAAI,KAAK,SAAS,MAAM,EAAE,8BAIrD,iBAAiB,CAAC,KAAK,CAAC,KAAG,WAAW,CAAC,KAAK,CAoE9C,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/adapters/hono/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,iBAAiB,EAAE,MAAM,MAAM,CAAC;AAE5D,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AAG1C,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AAEtD,MAAM,MAAM,iBAAiB,CAAC,KAAK,SAAS,MAAM,IAAI;IACpD,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,WAAW,CAAC,KAAK,SAAS,MAAM,IAAI,GAAG,GAAG;IACpD,SAAS,EAAE,iBAAiB,CAAC,KAAK,CAAC,CAAC;CACrC,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC;IACrC,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,iBAAiB,CAAC,KAAK,SAAS,MAAM,IAAI;IACpD,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAClB,MAAM,CAAC,EAAE,gBAAgB,CAAC;IAC1B,KAAK,EAAE,CACL,CAAC,EAAE,OAAO,KACP,OAAO,CAAC,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,GAAG,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;CACrE,CAAC;AAEF,KAAK,kBAAkB,CAAC,KAAK,SAAS,MAAM,IAAI;IAC9C,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,KAAK,CAAC;CACb,CAAC;AAEF,MAAM,MAAM,WAAW,CAAC,KAAK,SAAS,MAAM,IAAI;IAC9C,YAAY,CAAC,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IAC/B,aAAa,CAAC,KAAK,EAAE,kBAAkB,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IACzE,QAAQ,CAAC,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAAC;IACpC,cAAc,EAAE,iBAAiB,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;IACtD,cAAc,CAAC,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IACpD,aAAa,CAAC,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;CAC9C,CAAC;AA4DF,eAAO,MAAM,iBAAiB,GAAI,KAAK,SAAS,MAAM,EAAE,0BAIrD,iBAAiB,CAAC,KAAK,CAAC,KAAG,WAAW,CAAC,KAAK,CAkI9C,CAAC"}

package/dist/adapters/hono/index.js

@@ -7,19 +7,35 @@ const resolveCookie = (config = {}) => {
     const sameSite = config.sameSite ?? "Lax";
     const secure = config.secure ?? true;
     if (!COOKIE_NAME_PATTERN.test(name)) {
-        throw createError("AUTH_CONFIG_INVALID", "Session cookie name is invalid.");
+        throw createError({
+            code: "AUTH_CONFIG_INVALID",
+            message: "Session cookie name is invalid.",
+        });
     }
     if (!path.startsWith("/")) {
-        throw createError("AUTH_CONFIG_INVALID", "Session cookie path must start with /.");
+        throw createError({
+            code: "AUTH_CONFIG_INVALID",
+            message: "Session cookie path must start with /.",
+        });
     }
-    if (name.startsWith("__Host-") && (!secure || path !== "/" || config.domain)) {
-        throw createError("AUTH_CONFIG_INVALID", "__Host- cookies require secure=true, path=/, and no domain.");
+    if (name.startsWith("__Host-") &&
+        (!secure || path !== "/" || config.domain)) {
+        throw createError({
+            code: "AUTH_CONFIG_INVALID",
+            message: "__Host- cookies require secure=true, path=/, and no domain.",
+        });
     }
     if (name.startsWith("__Secure-") && !secure) {
-        throw createError("AUTH_CONFIG_INVALID", "__Secure- cookies require secure=true.");
+        throw createError({
+            code: "AUTH_CONFIG_INVALID",
+            message: "__Secure- cookies require secure=true.",
+        });
     }
     if (sameSite === "None" && !secure) {
-        throw createError("AUTH_CONFIG_INVALID", "SameSite=None cookies require secure=true.");
+        throw createError({
+            code: "AUTH_CONFIG_INVALID",
+            message: "SameSite=None cookies require secure=true.",
+        });
     }
     return {
         name,
@@ -32,14 +48,25 @@ const resolveCookie = (config = {}) => {
         },
     };
 };
-export const createHonoAdapter = ({ auth, cookie, getClient, }) => {
+export const createHonoAdapter = ({ auth, cookie, getIp, }) => {
+    if (typeof getIp !== "function") {
+        throw createError({
+            code: "AUTH_CONFIG_INVALID",
+            message: "Hono getIp must be a function.",
+        });
+    }
     const resolved = resolveCookie(cookie);
+    const getSessionClient = async (c) => ({
+        ip: (await getIp(c)) ?? null,
+        platform: c.req.header("sec-ch-ua-platform") ?? null,
+        userAgent: c.req.header("user-agent") ?? null,
+    });
     const getToken = (c) => {
         const token = getCookie(c, resolved.name)?.trim();
         return token?.length ? token : null;
     };
-    const setToken = (c, token, expiresAt) => {
-        setCookie(c, resolved.name, token, {
+    const setToken = ({ context, expiresAt, token, }) => {
+        setCookie(context, resolved.name, token, {
             ...resolved.options,
             expires: expiresAt,
         });
@@ -47,15 +74,31 @@ export const createHonoAdapter = ({ auth, cookie, getClient, }) => {
     const clearSession = (c) => {
         deleteCookie(c, resolved.name, resolved.options);
     };
+    const createSession = async ({ accountId, context, data, }) => {
+        const created = await auth.session.create({
+            accountId,
+            client: await getSessionClient(context),
+            data,
+        });
+        setToken({
+            context,
+            expiresAt: created.session.expiresAt,
+            token: created.token,
+        });
+        return created.session;
+    };
     const resolveSession = async (c) => {
         const token = getToken(c);
         if (!token) {
-            throw createError("SESSION_INVALID", "Authentication required.");
+            throw createError({
+                code: "SESSION_INVALID",
+                message: "Authentication required.",
+            });
         }
         let resolvedSession;
         try {
             resolvedSession = await auth.session.resolve({
-                client: await getClient(c),
+                client: await getSessionClient(c),
                 token,
             });
         }
@@ -67,25 +110,37 @@ export const createHonoAdapter = ({ auth, cookie, getClient, }) => {
         }
         if (!resolvedSession) {
             clearSession(c);
-            throw createError("SESSION_INVALID", "Authentication required.");
+            throw createError({
+                code: "SESSION_INVALID",
+                message: "Authentication required.",
+            });
         }
         if (resolvedSession.renewed) {
-            setToken(c, token, resolvedSession.session.expiresAt);
+            setToken({
+                context: c,
+                expiresAt: resolvedSession.session.expiresAt,
+                token,
+            });
         }
         return resolvedSession.session;
     };
     const requireSession = async (c, next) => {
-        c.set("authSession", await resolveSession(c));
+        c.set("session", await resolveSession(c));
         await next();
     };
+    const revokeSession = async (c) => {
+        const token = getToken(c);
+        const revoked = token ? await auth.session.revokeToken(token) : [];
+        clearSession(c);
+        return revoked;
+    };
     return {
         clearSession,
+        createSession,
         getToken,
         requireSession,
         resolveSession,
-        setSession: (c, created) => {
-            setToken(c, created.token, created.session.expiresAt);
-        },
+        revokeSession,
     };
 };
 //# sourceMappingURL=index.js.map

package/dist/adapters/hono/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/adapters/hono/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAIjE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAiC3D,MAAM,mBAAmB,GAAG,gCAAgC,CAAC;AAE7D,MAAM,aAAa,GAAG,CAAC,SAA2B,EAAE,EAAE,EAAE;IACtD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,gBAAgB,CAAC;IAC7C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,GAAG,CAAC;IAChC,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,KAAK,CAAC;IAC1C,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC;IAErC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,MAAM,WAAW,CAAC,qBAAqB,EAAE,iCAAiC,CAAC,CAAC;IAC9E,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,WAAW,CAAC,qBAAqB,EAAE,wCAAwC,CAAC,CAAC;IACrF,CAAC;IAED,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,IAAI,KAAK,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7E,MAAM,WAAW,CACf,qBAAqB,EACrB,6DAA6D,CAC9D,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QAC5C,MAAM,WAAW,CAAC,qBAAqB,EAAE,wCAAwC,CAAC,CAAC;IACrF,CAAC;IAED,IAAI,QAAQ,KAAK,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;QACnC,MAAM,WAAW,CAAC,qBAAqB,EAAE,4CAA4C,CAAC,CAAC;IACzF,CAAC;IAED,OAAO;QACL,IAAI;QACJ,OAAO,EAAE;YACP,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnD,QAAQ,EAAE,IAAa;YACvB,IAAI;YACJ,QAAQ;YACR,MAAM;SACP;KACF,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAuB,EACtD,IAAI,EACJ,MAAM,EACN,SAAS,GACgB,EAAsB,EAAE;IACjD,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IAEvC,MAAM,QAAQ,GAAG,CAAC,CAAU,EAAiB,EAAE;QAC7C,MAAM,KAAK,GAAG,SAAS,CAAC,CAAC,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC;QAElD,OAAO,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IACtC,CAAC,CAAC;IAEF,MAAM,QAAQ,GAAG,CAAC,CAAU,EAAE,KAAa,EAAE,SAAe,EAAQ,EAAE;QACpE,SAAS,CAAC,CAAC,EAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE;YACjC,GAAG,QAAQ,CAAC,OAAO;YACnB,OAAO,EAAE,SAAS;SACnB,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,MAAM,YAAY,GAAG,CAAC,CAAU,EAAQ,EAAE;QACxC,YAAY,CAAC,CAAC,EAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;IACnD,CAAC,CAAC;IAEF,MAAM,cAAc,GAAG,KAAK,EAAE,CAAU,EAA2B,EAAE;QACnE,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;QAE1B,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,WAAW,CAAC,iBAAiB,EAAE,0BAA0B,CAAC,CAAC;QACnE,CAAC;QAED,IAAI,eAAe,CAAC;QAEpB,IAAI,CAAC;YACH,eAAe,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;gBAC3C,MAAM,EAAE,MAAM,SAAS,CAAC,CAAC,CAAC;gBAC1B,KAAK;aACN,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,WAAW,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,yBAAyB,EAAE,CAAC;gBACnE,YAAY,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YAED,MAAM,KAAK,CAAC;QACd,CAAC;QAED,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,YAAY,CAAC,CAAC,CAAC,CAAC;YAChB,MAAM,WAAW,CAAC,iBAAiB,EAAE,0BAA0B,CAAC,CAAC;QACnE,CAAC;QAED,IAAI,eAAe,CAAC,OAAO,EAAE,CAAC;YAC5B,QAAQ,CAAC,CAAC,EAAE,KAAK,EAAE,eAAe,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACxD,CAAC;QAED,OAAO,eAAe,CAAC,OAAO,CAAC;IACjC,CAAC,CAAC;IAEF,MAAM,cAAc,GAA0C,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QAC9E,CAAC,CAAC,GAAG,CAAC,aAAa,EAAE,MAAM,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9C,MAAM,IAAI,EAAE,CAAC;IACf,CAAC,CAAC;IAEF,OAAO;QACL,YAAY;QACZ,QAAQ;QACR,cAAc;QACd,cAAc;QACd,UAAU,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE;YACzB,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACxD,CAAC;KACF,CAAC;AACJ,CAAC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/adapters/hono/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAGjE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AA0C3D,MAAM,mBAAmB,GAAG,gCAAgC,CAAC;AAE7D,MAAM,aAAa,GAAG,CAAC,SAA2B,EAAE,EAAE,EAAE;IACtD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,gBAAgB,CAAC;IAC7C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,GAAG,CAAC;IAChC,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,KAAK,CAAC;IAC1C,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC;IAErC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,MAAM,WAAW,CAAC;YAChB,IAAI,EAAE,qBAAqB;YAC3B,OAAO,EAAE,iCAAiC;SAC3C,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,WAAW,CAAC;YAChB,IAAI,EAAE,qBAAqB;YAC3B,OAAO,EAAE,wCAAwC;SAClD,CAAC,CAAC;IACL,CAAC;IAED,IACE,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;QAC1B,CAAC,CAAC,MAAM,IAAI,IAAI,KAAK,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,EAC1C,CAAC;QACD,MAAM,WAAW,CAAC;YAChB,IAAI,EAAE,qBAAqB;YAC3B,OAAO,EAAE,6DAA6D;SACvE,CAAC,CAAC;IACL,CAAC;IAED,IAAI,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QAC5C,MAAM,WAAW,CAAC;YAChB,IAAI,EAAE,qBAAqB;YAC3B,OAAO,EAAE,wCAAwC;SAClD,CAAC,CAAC;IACL,CAAC;IAED,IAAI,QAAQ,KAAK,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;QACnC,MAAM,WAAW,CAAC;YAChB,IAAI,EAAE,qBAAqB;YAC3B,OAAO,EAAE,4CAA4C;SACtD,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,IAAI;QACJ,OAAO,EAAE;YACP,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnD,QAAQ,EAAE,IAAa;YACvB,IAAI;YACJ,QAAQ;YACR,MAAM;SACP;KACF,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAuB,EACtD,IAAI,EACJ,MAAM,EACN,KAAK,GACoB,EAAsB,EAAE;IACjD,IAAI,OAAO,KAAK,KAAK,UAAU,EAAE,CAAC;QAChC,MAAM,WAAW,CAAC;YAChB,IAAI,EAAE,qBAAqB;YAC3B,OAAO,EAAE,gCAAgC;SAC1C,CAAC,CAAC;IACL,CAAC;IAED,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IAEvC,MAAM,gBAAgB,GAAG,KAAK,EAAE,CAAU,EAA+B,EAAE,CAAC,CAAC;QAC3E,EAAE,EAAE,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI;QAC5B,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,oBAAoB,CAAC,IAAI,IAAI;QACpD,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,IAAI;KAC9C,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,CAAC,CAAU,EAAiB,EAAE;QAC7C,MAAM,KAAK,GAAG,SAAS,CAAC,CAAC,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC;QAElD,OAAO,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IACtC,CAAC,CAAC;IAEF,MAAM,QAAQ,GAAG,CAAC,EAChB,OAAO,EACP,SAAS,EACT,KAAK,GAKN,EAAQ,EAAE;QACT,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE;YACvC,GAAG,QAAQ,CAAC,OAAO;YACnB,OAAO,EAAE,SAAS;SACnB,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,MAAM,YAAY,GAAG,CAAC,CAAU,EAAQ,EAAE;QACxC,YAAY,CAAC,CAAC,EAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;IACnD,CAAC,CAAC;IAEF,MAAM,aAAa,GAAG,KAAK,EAAE,EAC3B,SAAS,EACT,OAAO,EACP,IAAI,GACsB,EAA2B,EAAE;QACvD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;YACxC,SAAS;YACT,MAAM,EAAE,MAAM,gBAAgB,CAAC,OAAO,CAAC;YACvC,IAAI;SACL,CAAC,CAAC;QAEH,QAAQ,CAAC;YACP,OAAO;YACP,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,SAAS;YACpC,KAAK,EAAE,OAAO,CAAC,KAAK;SACrB,CAAC,CAAC;QAEH,OAAO,OAAO,CAAC,OAAO,CAAC;IACzB,CAAC,CAAC;IAEF,MAAM,cAAc,GAAG,KAAK,EAAE,CAAU,EAA2B,EAAE;QACnE,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;QAE1B,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,WAAW,CAAC;gBAChB,IAAI,EAAE,iBAAiB;gBACvB,OAAO,EAAE,0BAA0B;aACpC,CAAC,CAAC;QACL,CAAC;QAED,IAAI,eAAe,CAAC;QAEpB,IAAI,CAAC;YACH,eAAe,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;gBAC3C,MAAM,EAAE,MAAM,gBAAgB,CAAC,CAAC,CAAC;gBACjC,KAAK;aACN,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,WAAW,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,yBAAyB,EAAE,CAAC;gBACnE,YAAY,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YAED,MAAM,KAAK,CAAC;QACd,CAAC;QAED,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,YAAY,CAAC,CAAC,CAAC,CAAC;YAChB,MAAM,WAAW,CAAC;gBAChB,IAAI,EAAE,iBAAiB;gBACvB,OAAO,EAAE,0BAA0B;aACpC,CAAC,CAAC;QACL,CAAC;QAED,IAAI,eAAe,CAAC,OAAO,EAAE,CAAC;YAC5B,QAAQ,CAAC;gBACP,OAAO,EAAE,CAAC;gBACV,SAAS,EAAE,eAAe,CAAC,OAAO,CAAC,SAAS;gBAC5C,KAAK;aACN,CAAC,CAAC;QACL,CAAC;QAED,OAAO,eAAe,CAAC,OAAO,CAAC;IACjC,CAAC,CAAC;IAEF,MAAM,cAAc,GAA0C,KAAK,EACjE,CAAC,EACD,IAAI,EACJ,EAAE;QACF,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1C,MAAM,IAAI,EAAE,CAAC;IACf,CAAC,CAAC;IAEF,MAAM,aAAa,GAAG,KAAK,EAAE,CAAU,EAAqB,EAAE;QAC5D,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC1B,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAEnE,YAAY,CAAC,CAAC,CAAC,CAAC;QAEhB,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC;IAEF,OAAO;QACL,YAAY;QACZ,aAAa;QACb,QAAQ;QACR,cAAc;QACd,cAAc;QACd,aAAa;KACd,CAAC;AACJ,CAAC,CAAC"}

package/dist/adapters/redis/index.d.ts

@@ -3,5 +3,9 @@ import type { RedisSessionStore } from "../../session/types.js";
 export type RedisStoreConfig = {
     prefix?: string;
 };
-export declare const createRedisStore: (client: RedisClientType, config?: RedisStoreConfig) => RedisSessionStore;
+export type RedisStoreInput = {
+    client: RedisClientType;
+    config?: RedisStoreConfig;
+};
+export declare const createRedisStore: ({ client, config, }: RedisStoreInput) => RedisSessionStore;
 //# sourceMappingURL=index.d.ts.map

package/dist/adapters/redis/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/adapters/redis/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,OAAO,CAAC;AAG7C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAEhE,MAAM,MAAM,gBAAgB,GAAG;IAC7B,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAaF,eAAO,MAAM,gBAAgB,GAC3B,QAAQ,eAAe,EACvB,SAAQ,gBAAqB,KAC5B,iBAsDF,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/adapters/redis/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,OAAO,CAAC;AAE7C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAEhE,MAAM,MAAM,gBAAgB,GAAG;IAC7B,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,MAAM,EAAE,eAAe,CAAC;IACxB,MAAM,CAAC,EAAE,gBAAgB,CAAC;CAC3B,CAAC;AAgBF,eAAO,MAAM,gBAAgB,GAAI,qBAG9B,eAAe,KAAG,iBA8DpB,CAAC"}

package/dist/adapters/redis/index.js

@@ -3,16 +3,22 @@ const getPrefix = (input) => {
     const candidate = input?.trim();
     const prefix = candidate?.length ? candidate : "gauts:auth";
     if (prefix.length > 128 || !/^[A-Za-z0-9:_-]+$/.test(prefix)) {
-        throw createError("AUTH_CONFIG_INVALID", "Redis key prefix is invalid.");
+        throw createError({
+            code: "AUTH_CONFIG_INVALID",
+            message: "Redis key prefix is invalid.",
+        });
     }
     return prefix.replace(/:+$/g, "");
 };
-export const createRedisStore = (client, config = {}) => {
+export const createRedisStore = ({ client, config = {}, }) => {
     const prefix = getPrefix(config.prefix);
     const getKey = (tokenHash) => `${prefix}:session:${tokenHash}`;
     return {
-        create: async (tokenHash, value, ttl) => {
-            const result = await client.set(getKey(tokenHash), value, { EX: ttl, NX: true });
+        create: async ({ tokenHash, ttl, value }) => {
+            const result = await client.set(getKey(tokenHash), value, {
+                EX: ttl,
+                NX: true,
+            });
             if (result !== "OK") {
                 throw new Error("Redis session key already exists.");
             }
@@ -25,11 +31,14 @@ export const createRedisStore = (client, config = {}) => {
                 ? []
                 : client.mGet(tokenHashes.map((tokenHash) => getKey(tokenHash)));
         },
-        update: async (tokenHash, value, ttl) => {
-            const result = await client.set(getKey(tokenHash), value, { EX: ttl, XX: true });
+        update: async ({ tokenHash, ttl, value }) => {
+            const result = await client.set(getKey(tokenHash), value, {
+                EX: ttl,
+                XX: true,
+            });
             return result === "OK";
         },
-        keep: async (tokenHash, value) => {
+        keep: async ({ tokenHash, value }) => {
             const result = await client.set(getKey(tokenHash), value, {
                 KEEPTTL: true,
                 XX: true,

package/dist/adapters/redis/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/adapters/redis/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAO9C,MAAM,SAAS,GAAG,CAAC,KAAc,EAAU,EAAE;IAC3C,MAAM,SAAS,GAAG,KAAK,EAAE,IAAI,EAAE,CAAC;IAChC,MAAM,MAAM,GAAG,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC;IAE5D,IAAI,MAAM,CAAC,MAAM,GAAG,GAAG,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7D,MAAM,WAAW,CAAC,qBAAqB,EAAE,8BAA8B,CAAC,CAAC;IAC3E,CAAC;IAED,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACpC,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAC9B,MAAuB,EACvB,SAA2B,EAAE,EACV,EAAE;IACrB,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,CAAC,SAAiB,EAAE,EAAE,CAAC,GAAG,MAAM,YAAY,SAAS,EAAE,CAAC;IAEvE,OAAO;QACL,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YACtC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YAEjF,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;gBACpB,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;YACvD,CAAC;QACH,CAAC;QAED,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE;YACvB,OAAO,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;QACvC,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE;YAC7B,OAAO,WAAW,CAAC,MAAM,KAAK,CAAC;gBAC7B,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QACrE,CAAC;QAED,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YACtC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YAEjF,OAAO,MAAM,KAAK,IAAI,CAAC;QACzB,CAAC;QAED,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE;YAC/B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE;gBACxD,OAAO,EAAE,IAAI;gBACb,EAAE,EAAE,IAAI;aACT,CAAC,CAAC;YAEH,OAAO,MAAM,KAAK,IAAI,CAAC;QACzB,CAAC;QAED,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE;YAC5B,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC3B,MAAM,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YACtE,CAAC;QACH,CAAC;QAED,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE;YAC5B,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC7B,OAAO,EAAE,CAAC;YACZ,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YAEpF,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC;QAC/C,CAAC;KACF,CAAC;AACJ,CAAC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/adapters/redis/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAY9C,MAAM,SAAS,GAAG,CAAC,KAAc,EAAU,EAAE;IAC3C,MAAM,SAAS,GAAG,KAAK,EAAE,IAAI,EAAE,CAAC;IAChC,MAAM,MAAM,GAAG,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC;IAE5D,IAAI,MAAM,CAAC,MAAM,GAAG,GAAG,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7D,MAAM,WAAW,CAAC;YAChB,IAAI,EAAE,qBAAqB;YAC3B,OAAO,EAAE,8BAA8B;SACxC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACpC,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,EAC/B,MAAM,EACN,MAAM,GAAG,EAAE,GACK,EAAqB,EAAE;IACvC,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,CAAC,SAAiB,EAAE,EAAE,CAAC,GAAG,MAAM,YAAY,SAAS,EAAE,CAAC;IAEvE,OAAO;QACL,MAAM,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE;YAC1C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE;gBACxD,EAAE,EAAE,GAAG;gBACP,EAAE,EAAE,IAAI;aACT,CAAC,CAAC;YAEH,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;gBACpB,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;YACvD,CAAC;QACH,CAAC;QAED,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE;YACvB,OAAO,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;QACvC,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE;YAC7B,OAAO,WAAW,CAAC,MAAM,KAAK,CAAC;gBAC7B,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QACrE,CAAC;QAED,MAAM,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE;YAC1C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE;gBACxD,EAAE,EAAE,GAAG;gBACP,EAAE,EAAE,IAAI;aACT,CAAC,CAAC;YAEH,OAAO,MAAM,KAAK,IAAI,CAAC;QACzB,CAAC;QAED,IAAI,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,EAAE;YACnC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE;gBACxD,OAAO,EAAE,IAAI;gBACb,EAAE,EAAE,IAAI;aACT,CAAC,CAAC;YAEH,OAAO,MAAM,KAAK,IAAI,CAAC;QACzB,CAAC;QAED,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE;YAC5B,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC3B,MAAM,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YACtE,CAAC;QACH,CAAC;QAED,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE;YAC5B,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC7B,OAAO,EAAE,CAAC;YACZ,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAC9B,WAAW,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAClD,CAAC;YAEF,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC;QAC/C,CAAC;KACF,CAAC;AACJ,CAAC,CAAC"}

package/dist/auth.d.ts

@@ -1,17 +1,17 @@
 import type { PasswordConfig, SessionConfig } from "./config.js";
 import { type PasswordService } from "./password/index.js";
-import type { RedisSessionStore, SessionAudit, SessionService } from "./session/types.js";
+import type { RedisSessionStore, SessionRecords, SessionService } from "./session/types.js";
 export type AuthConfig = {
     password?: PasswordConfig;
     session?: SessionConfig;
 };
 export type AuthDeps = AuthConfig & {
-    audit: SessionAudit;
+    records: SessionRecords;
     redis: RedisSessionStore;
 };
 export type Auth<TData extends object> = {
     password: PasswordService;
     session: SessionService<TData>;
 };
-export declare const createAuth: <TData extends object = Record<string, unknown>>({ audit, password, redis, session, }: AuthDeps) => Auth<TData>;
+export declare const createAuth: <TData extends object = Record<string, unknown>>({ password, records, redis, session, }: AuthDeps) => Auth<TData>;
 //# sourceMappingURL=auth.d.ts.map

package/dist/auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAGjE,OAAO,EAAkB,KAAK,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAE3E,OAAO,KAAK,EAAE,iBAAiB,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAE1F,MAAM,MAAM,UAAU,GAAG;IACvB,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B,OAAO,CAAC,EAAE,aAAa,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,QAAQ,GAAG,UAAU,GAAG;IAClC,KAAK,EAAE,YAAY,CAAC;IACpB,KAAK,EAAE,iBAAiB,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,IAAI,CAAC,KAAK,SAAS,MAAM,IAAI;IACvC,QAAQ,EAAE,eAAe,CAAC;IAC1B,OAAO,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC;CAChC,CAAC;AAcF,eAAO,MAAM,UAAU,GAAI,KAAK,SAAS,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,sCAKxE,QAAQ,KAAG,IAAI,CAAC,KAAK,CAoBvB,CAAC"}
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAGjE,OAAO,EAAkB,KAAK,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAE3E,OAAO,KAAK,EACV,iBAAiB,EACjB,cAAc,EACd,cAAc,EACf,MAAM,oBAAoB,CAAC;AAE5B,MAAM,MAAM,UAAU,GAAG;IACvB,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B,OAAO,CAAC,EAAE,aAAa,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,QAAQ,GAAG,UAAU,GAAG;IAClC,OAAO,EAAE,cAAc,CAAC;IACxB,KAAK,EAAE,iBAAiB,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,IAAI,CAAC,KAAK,SAAS,MAAM,IAAI;IACvC,QAAQ,EAAE,eAAe,CAAC;IAC1B,OAAO,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC;CAChC,CAAC;AA8BF,eAAO,MAAM,UAAU,GAAI,KAAK,SAAS,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,wCAKxE,QAAQ,KAAG,IAAI,CAAC,KAAK,CAoBvB,CAAC"}