@gauts/auth 0.9.0 → 0.10.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +88 -78
- package/SECURITY.md +8 -4
- package/dist/adapters/express/index.d.ts +7 -13
- package/dist/adapters/express/index.d.ts.map +1 -1
- package/dist/adapters/express/index.js +6 -6
- package/dist/adapters/express/index.js.map +1 -1
- package/dist/adapters/fastify/index.d.ts +7 -13
- package/dist/adapters/fastify/index.d.ts.map +1 -1
- package/dist/adapters/fastify/index.js +5 -5
- package/dist/adapters/fastify/index.js.map +1 -1
- package/dist/adapters/hono/index.d.ts +7 -13
- package/dist/adapters/hono/index.d.ts.map +1 -1
- package/dist/adapters/hono/index.js +5 -5
- package/dist/adapters/hono/index.js.map +1 -1
- package/dist/adapters/next/index.d.ts +1 -1
- package/dist/adapters/next/index.d.ts.map +1 -1
- package/dist/adapters/next/index.js +7 -3
- package/dist/adapters/next/index.js.map +1 -1
- package/dist/adapters/utils/session.d.ts.map +1 -1
- package/dist/adapters/utils/session.js +70 -78
- package/dist/adapters/utils/session.js.map +1 -1
- package/dist/adapters/utils/types.d.ts +3 -9
- package/dist/adapters/utils/types.d.ts.map +1 -1
- package/dist/config.d.ts +1 -2
- package/dist/config.d.ts.map +1 -1
- package/dist/config.js +1 -2
- package/dist/config.js.map +1 -1
- package/dist/index.d.ts +1 -1
- package/dist/session/cookie.d.ts +6 -8
- package/dist/session/cookie.d.ts.map +1 -1
- package/dist/session/cookie.js +7 -24
- package/dist/session/cookie.js.map +1 -1
- package/dist/session/state.d.ts +41 -0
- package/dist/session/state.d.ts.map +1 -0
- package/dist/session/state.js +192 -0
- package/dist/session/state.js.map +1 -0
- package/package.json +1 -1
- package/dist/session/cache.d.ts +0 -32
- package/dist/session/cache.d.ts.map +0 -1
- package/dist/session/cache.js +0 -138
- package/dist/session/cache.js.map +0 -1
package/dist/config.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AA6D1C,MAAM,cAAc,GAAG;IACnB,SAAS,EAAE,UAAU;IACrB,UAAU,EAAE,EAAE;IACd,QAAQ,EAAE,IAAI;IACd,UAAU,EAAE,MAAM;IAClB,WAAW,EAAE,CAAC;IACd,QAAQ,EAAE,CAAC;CACL,CAAC;AAEX,MAAM,eAAe,GAAG;IACpB,SAAS,EAAE,QAAQ;IACnB,QAAQ,EAAE,EAAE;IACZ,MAAM,EAAE,EAAE;IACV,cAAc,EAAE,EAAE;CACZ,CAAC;AAEX,MAAM,CAAC,MAAM,eAAe,GAAG;IAC3B,
|
|
1
|
+
{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AA6D1C,MAAM,cAAc,GAAG;IACnB,SAAS,EAAE,UAAU;IACrB,UAAU,EAAE,EAAE;IACd,QAAQ,EAAE,IAAI;IACd,UAAU,EAAE,MAAM;IAClB,WAAW,EAAE,CAAC;IACd,QAAQ,EAAE,CAAC;CACL,CAAC;AAEX,MAAM,eAAe,GAAG;IACpB,SAAS,EAAE,QAAQ;IACnB,QAAQ,EAAE,EAAE;IACZ,MAAM,EAAE,EAAE;IACV,cAAc,EAAE,EAAE;CACZ,CAAC;AAEX,MAAM,CAAC,MAAM,eAAe,GAAG;IAC3B,WAAW,EAAE,OAAO;IACpB,WAAW,EAAE,OAAO;CACd,CAAC;AAEX,MAAM,gBAAgB,GAAG;IACrB,WAAW,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE;IAC9B,aAAa,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE;IAC3B,GAAG,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC;IACrB,UAAU,EAAE,CAAC,OAAO,CAAC;CACf,CAAC;AAEX,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAoB,CAAC,OAAO,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC;AAEnF,MAAM,cAAc,GAAG,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAsB,EAAE,EAAE;IACrE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,GAAG,IAAI,KAAK,GAAG,GAAG,EAAE,CAAC;QACzD,MAAM,WAAW,CAAC;YACd,IAAI,EAAE,qBAAqB;YAC3B,OAAO,EAAE,GAAG,IAAI,+BAA+B,MAAM,CAAC,GAAG,CAAC,QAAQ,MAAM,CAAC,GAAG,CAAC,GAAG;SACnF,CAAC,CAAC;IACP,CAAC;IAED,OAAO,KAAK,CAAC;AACjB,CAAC,CAAC;AAEF,MAAM,wBAAwB,GAAG,CAAC,KAAc,EAAuB,EAAE;IACrE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,WAAW,CAAC;YACd,IAAI,EAAE,qBAAqB;YAC3B,OAAO,EAAE,+CAA+C;SAC3D,CAAC,CAAC;IACP,CAAC;IAED,MAAM,MAAM,GAAc,KAAK,CAAC;IAEhC,IACI,MAAM,CAAC,IAAI,CACP,CAAC,KAAK,EAAE,EAAE,CACN,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,KAA0B,CAAC,CACvF,EACH,CAAC;QACC,MAAM,WAAW,CAAC;YACd,IAAI,EAAE,qBAAqB;YAC3B,OAAO,EAAE,+CAA+C;SAC3D,CAAC,CAAC;IACP,CAAC;IAED,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;QACzC,MAAM,WAAW,CAAC;YACd,IAAI,EAAE,qBAAqB;YAC3B,OAAO,EAAE,+CAA+C;SAC3D,CAAC,CAAC;IACP,CAAC;IAED,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAA0B,CAAC,CAAC;AAC7D,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,SAAyB,EAAE,EAA0B,EAAE;IACzF,MAAM,KAAK,GAAY,MAAM,CAAC;IAE9B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAC9C,MAAM,WAAW,CAAC;YACd,IAAI,EAAE,qBAAqB;YAC3B,OAAO,EAAE,oCAAoC;SAChD,CAAC,CAAC;IACP,CAAC;IAED,MAAM,SAAS,GAAI,MAAkC,CAAC,SAAS,CAAC;IAEhE,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,UAAU,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;QAChF,MAAM,WAAW,CAAC;YACd,IAAI,EAAE,qBAAqB;YAC3B,OAAO,EAAE,gCAAgC;SAC5C,CAAC,CAAC;IACP,CAAC;IAED,IAAI,MAAM,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;QAChC,MAAM,QAAQ,GAAG,EAAE,GAAG,eAAe,EAAE,GAAG,MAAM,EAAE,CAAC;QAEnD,OAAO;YACH,SAAS,EAAE,QAAQ;YACnB,QAAQ,EAAE,cAAc,CAAC;gBACrB,GAAG,EAAE,EAAE;gBACP,GAAG,EAAE,CAAC;gBACN,IAAI,EAAE,mBAAmB;gBACzB,KAAK,EAAE,QAAQ,CAAC,QAAQ;aAC3B,CAAC;YACF,MAAM,EAAE,cAAc,CAAC;gBACnB,GAAG,EAAE,EAAE;gBACP,GAAG,EAAE,CAAC;gBACN,IAAI,EAAE,iBAAiB;gBACvB,KAAK,EAAE,QAAQ,CAAC,MAAM;aACzB,CAAC;YACF,cAAc,EAAE,cAAc,CAAC;gBAC3B,GAAG,EAAE,SAAS;gBACd,GAAG,EAAE,QAAQ,CAAC,QAAQ;gBACtB,IAAI,EAAE,yBAAyB;gBAC/B,KAAK,EAAE,QAAQ,CAAC,cAAc;aACjC,CAAC;SACL,CAAC;IACN,CAAC;IAED,MAAM,QAAQ,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,MAAM,EAAE,CAAC;IAElD,OAAO;QACH,SAAS,EAAE,UAAU;QACrB,UAAU,EAAE,cAAc,CAAC;YACvB,GAAG,EAAE,EAAE;YACP,GAAG,EAAE,EAAE;YACP,IAAI,EAAE,qBAAqB;YAC3B,KAAK,EAAE,QAAQ,CAAC,UAAU;SAC7B,CAAC;QACF,QAAQ,EAAE,cAAc,CAAC;YACrB,GAAG,EAAE,SAAS;YACd,GAAG,EAAE,CAAC;YACN,IAAI,EAAE,mBAAmB;YACzB,KAAK,EAAE,QAAQ,CAAC,QAAQ;SAC3B,CAAC;QACF,UAAU,EAAE,cAAc,CAAC;YACvB,GAAG,EAAE,SAAS;YACd,GAAG,EAAE,KAAK;YACV,IAAI,EAAE,qBAAqB;YAC3B,KAAK,EAAE,QAAQ,CAAC,UAAU;SAC7B,CAAC;QACF,WAAW,EAAE,cAAc,CAAC;YACxB,GAAG,EAAE,EAAE;YACP,GAAG,EAAE,CAAC;YACN,IAAI,EAAE,sBAAsB;YAC5B,KAAK,EAAE,QAAQ,CAAC,WAAW;SAC9B,CAAC;QACF,QAAQ,EAAE,cAAc,CAAC;YACrB,GAAG,EAAE,EAAE;YACP,GAAG,EAAE,CAAC;YACN,IAAI,EAAE,mBAAmB;YACzB,KAAK,EAAE,QAAQ,CAAC,QAAQ;SAC3B,CAAC;KACL,CAAC;AACN,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,SAAwB,EAAE,EAAyB,EAAE;IACtF,MAAM,KAAK,GAAY,MAAM,CAAC;IAE9B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAC9C,MAAM,WAAW,CAAC;YACd,IAAI,EAAE,qBAAqB;YAC3B,OAAO,EAAE,mCAAmC;SAC/C,CAAC,CAAC;IACP,CAAC;IAED,MAAM,QAAQ,GAAG,EAAE,GAAG,gBAAgB,EAAE,GAAG,MAAM,EAAE,CAAC;IAEpD,MAAM,GAAG,GAAG,cAAc,CAAC;QACvB,GAAG,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,GAAG;QACvB,GAAG,EAAE,EAAE;QACP,IAAI,EAAE,aAAa;QACnB,KAAK,EAAE,QAAQ,CAAC,GAAG;KACtB,CAAC,CAAC;IAEH,MAAM,aAAa,GAAG,cAAc,CAAC;QACjC,GAAG,EAAE,GAAG,GAAG,CAAC;QACZ,GAAG,EAAE,CAAC;QACN,IAAI,EAAE,uBAAuB;QAC7B,KAAK,EAAE,QAAQ,CAAC,aAAa;KAChC,CAAC,CAAC;IAEH,MAAM,WAAW,GAAG,cAAc,CAAC;QAC/B,GAAG,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,GAAG;QACvB,GAAG,EAAE,GAAG;QACR,IAAI,EAAE,qBAAqB;QAC3B,KAAK,EAAE,QAAQ,CAAC,WAAW;KAC9B,CAAC,CAAC;IAEH,OAAO;QACH,WAAW;QACX,aAAa;QACb,GAAG;QACH,UAAU,EAAE,wBAAwB,CAAC,MAAM,CAAC,UAAU,IAAI,gBAAgB,CAAC,UAAU,CAAC;KACzF,CAAC;AACN,CAAC,CAAC"}
|
package/dist/index.d.ts
CHANGED
|
@@ -6,6 +6,6 @@ export type { AuthError, AuthErrorCode } from "./errors.js";
|
|
|
6
6
|
export type { PasswordService } from "./password/index.js";
|
|
7
7
|
export type { ActiveSession, AuthAccount, AuthAccountOf, AuthData, AuthScalar, AuthSessionRecord, AuthUser, AuthValue, CreateSessionRecord, CreatedSession, DbAdapter, RenewedSession, ResolvedSession, Session, SessionInput, SessionRecord, SessionService, } from "./session/types.js";
|
|
8
8
|
export type { SessionClient, SessionClientInput } from "./client/index.js";
|
|
9
|
-
export type { SessionCacheConfig } from "./session/
|
|
9
|
+
export type { SessionCacheConfig } from "./session/state.js";
|
|
10
10
|
export type { CreateSocialRecord, SocialAccountRecord, SocialAuthenticated, SocialAuthorizationInput, SocialCallbackInput, SocialConfig, SocialDbAdapter, SocialIdentity, SocialIntent, SocialNavigation, SocialProvider, SocialProviderId, SocialRegistrationConfig, SocialRegistrationInput, SocialRegistrationResult, } from "./social/types.js";
|
|
11
11
|
//# sourceMappingURL=index.d.ts.map
|
package/dist/session/cookie.d.ts
CHANGED
|
@@ -1,20 +1,18 @@
|
|
|
1
1
|
export type SessionCookieNamesInput = {
|
|
2
|
-
|
|
3
|
-
renewName?: string;
|
|
2
|
+
contextName?: string;
|
|
4
3
|
sessionName?: string;
|
|
5
4
|
};
|
|
6
5
|
export type SessionCookieNames = {
|
|
7
|
-
|
|
8
|
-
renewName: string;
|
|
6
|
+
contextName: string;
|
|
9
7
|
sessionName: string;
|
|
10
8
|
};
|
|
11
|
-
|
|
12
|
-
export declare const parseRenewAt: (value?: string | null) => number | null;
|
|
13
|
-
export declare const resolveCookieName: ({ input, label, }: {
|
|
9
|
+
type ResolveCookieNameInput = {
|
|
14
10
|
input: string;
|
|
15
11
|
label: string;
|
|
16
|
-
}
|
|
12
|
+
};
|
|
13
|
+
export declare const resolveCookieName: ({ input, label }: ResolveCookieNameInput) => string;
|
|
17
14
|
export declare const resolveSessionCookieName: (input?: string) => string;
|
|
18
15
|
export declare const resolveSessionCookieNames: (input?: SessionCookieNamesInput) => SessionCookieNames;
|
|
19
16
|
export declare const parseSessionToken: (value?: string | null) => string | null;
|
|
17
|
+
export {};
|
|
20
18
|
//# sourceMappingURL=cookie.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"cookie.d.ts","sourceRoot":"","sources":["../../src/session/cookie.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,uBAAuB,GAAG;IAClC,
|
|
1
|
+
{"version":3,"file":"cookie.d.ts","sourceRoot":"","sources":["../../src/session/cookie.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,uBAAuB,GAAG;IAClC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC7B,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,KAAK,sBAAsB,GAAG;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;CACjB,CAAC;AAIF,eAAO,MAAM,iBAAiB,GAAI,kBAAkB,sBAAsB,KAAG,MAW5E,CAAC;AAEF,eAAO,MAAM,wBAAwB,GAAI,QAAQ,MAAM,KAAG,MAKzD,CAAC;AAEF,eAAO,MAAM,yBAAyB,GAClC,QAAO,uBAA4B,KACpC,kBAgBF,CAAC;AAEF,eAAO,MAAM,iBAAiB,GAAI,QAAQ,MAAM,GAAG,IAAI,KAAG,MAAM,GAAG,IAGlE,CAAC"}
|
package/dist/session/cookie.js
CHANGED
|
@@ -2,26 +2,7 @@ import { COOKIE_DEFAULTS } from "../config.js";
|
|
|
2
2
|
import { createError } from "../errors.js";
|
|
3
3
|
import { tokenPattern } from "./token.js";
|
|
4
4
|
const cookieNamePattern = /^[!#$%&'*+\-.^_`|~0-9A-Za-z]+$/;
|
|
5
|
-
const
|
|
6
|
-
export const formatRenewAt = (value) => {
|
|
7
|
-
const seconds = Math.floor(value.getTime() / 1000);
|
|
8
|
-
if (!Number.isSafeInteger(seconds) || seconds < 1) {
|
|
9
|
-
throw createError({
|
|
10
|
-
code: "SESSION_DATA_INVALID",
|
|
11
|
-
message: "Session renewal date is invalid.",
|
|
12
|
-
});
|
|
13
|
-
}
|
|
14
|
-
return seconds.toString();
|
|
15
|
-
};
|
|
16
|
-
export const parseRenewAt = (value) => {
|
|
17
|
-
const input = value?.trim();
|
|
18
|
-
if (!input || !renewAtPattern.test(input)) {
|
|
19
|
-
return null;
|
|
20
|
-
}
|
|
21
|
-
const seconds = Number(input);
|
|
22
|
-
return Number.isSafeInteger(seconds) ? seconds : null;
|
|
23
|
-
};
|
|
24
|
-
export const resolveCookieName = ({ input, label, }) => {
|
|
5
|
+
export const resolveCookieName = ({ input, label }) => {
|
|
25
6
|
const name = input;
|
|
26
7
|
if (!cookieNamePattern.test(name)) {
|
|
27
8
|
throw createError({
|
|
@@ -38,16 +19,18 @@ export const resolveSessionCookieName = (input) => {
|
|
|
38
19
|
});
|
|
39
20
|
};
|
|
40
21
|
export const resolveSessionCookieNames = (input = {}) => {
|
|
41
|
-
const
|
|
42
|
-
|
|
22
|
+
const contextName = resolveCookieName({
|
|
23
|
+
input: input.contextName ?? COOKIE_DEFAULTS.contextName,
|
|
24
|
+
label: "Context",
|
|
25
|
+
});
|
|
43
26
|
const sessionName = resolveSessionCookieName(input.sessionName);
|
|
44
|
-
if (
|
|
27
|
+
if (contextName === sessionName) {
|
|
45
28
|
throw createError({
|
|
46
29
|
code: "AUTH_CONFIG_INVALID",
|
|
47
30
|
message: "Session cookie names must be unique.",
|
|
48
31
|
});
|
|
49
32
|
}
|
|
50
|
-
return {
|
|
33
|
+
return { contextName, sessionName };
|
|
51
34
|
};
|
|
52
35
|
export const parseSessionToken = (value) => {
|
|
53
36
|
const token = value?.trim();
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"cookie.js","sourceRoot":"","sources":["../../src/session/cookie.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;
|
|
1
|
+
{"version":3,"file":"cookie.js","sourceRoot":"","sources":["../../src/session/cookie.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAiB1C,MAAM,iBAAiB,GAAG,gCAAgC,CAAC;AAE3D,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,EAAE,KAAK,EAAE,KAAK,EAA0B,EAAU,EAAE;IAClF,MAAM,IAAI,GAAG,KAAK,CAAC;IAEnB,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAChC,MAAM,WAAW,CAAC;YACd,IAAI,EAAE,qBAAqB;YAC3B,OAAO,EAAE,GAAG,KAAK,0BAA0B;SAC9C,CAAC,CAAC;IACP,CAAC;IAED,OAAO,IAAI,CAAC;AAChB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,KAAc,EAAU,EAAE;IAC/D,OAAO,iBAAiB,CAAC;QACrB,KAAK,EAAE,KAAK,IAAI,eAAe,CAAC,WAAW;QAC3C,KAAK,EAAE,SAAS;KACnB,CAAC,CAAC;AACP,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,yBAAyB,GAAG,CACrC,QAAiC,EAAE,EACjB,EAAE;IACpB,MAAM,WAAW,GAAG,iBAAiB,CAAC;QAClC,KAAK,EAAE,KAAK,CAAC,WAAW,IAAI,eAAe,CAAC,WAAW;QACvD,KAAK,EAAE,SAAS;KACnB,CAAC,CAAC;IAEH,MAAM,WAAW,GAAG,wBAAwB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAEhE,IAAI,WAAW,KAAK,WAAW,EAAE,CAAC;QAC9B,MAAM,WAAW,CAAC;YACd,IAAI,EAAE,qBAAqB;YAC3B,OAAO,EAAE,sCAAsC;SAClD,CAAC,CAAC;IACP,CAAC;IAED,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC;AACxC,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,KAAqB,EAAiB,EAAE;IACtE,MAAM,KAAK,GAAG,KAAK,EAAE,IAAI,EAAE,CAAC;IAC5B,OAAO,KAAK,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5D,CAAC,CAAC"}
|
|
@@ -0,0 +1,41 @@
|
|
|
1
|
+
import { type SessionClientInput } from "../client/index.js";
|
|
2
|
+
import type { ResolvedSessionConfig } from "../config.js";
|
|
3
|
+
import type { AuthAccount, ResolvedSession } from "./types.js";
|
|
4
|
+
export type SessionCacheConfig = {
|
|
5
|
+
ttl: number;
|
|
6
|
+
};
|
|
7
|
+
type SessionStateDeps = {
|
|
8
|
+
cache?: SessionCacheConfig;
|
|
9
|
+
now?: () => Date;
|
|
10
|
+
secret: string;
|
|
11
|
+
session: ResolvedSessionConfig;
|
|
12
|
+
};
|
|
13
|
+
type ResolveStateInput = {
|
|
14
|
+
client: SessionClientInput;
|
|
15
|
+
token: string;
|
|
16
|
+
value: string | null | undefined;
|
|
17
|
+
};
|
|
18
|
+
type CreateStateInput<TAccount extends AuthAccount> = {
|
|
19
|
+
cache?: boolean;
|
|
20
|
+
resolved: ResolvedSession<TAccount>;
|
|
21
|
+
token: string;
|
|
22
|
+
};
|
|
23
|
+
type SessionStateCookie = {
|
|
24
|
+
expires_at: Date;
|
|
25
|
+
value: string;
|
|
26
|
+
};
|
|
27
|
+
export type SessionStateSchedule = {
|
|
28
|
+
expires_at: Date;
|
|
29
|
+
renew_at: Date;
|
|
30
|
+
};
|
|
31
|
+
export type ResolvedSessionState<TAccount extends AuthAccount = AuthAccount> = SessionStateSchedule & {
|
|
32
|
+
cache: ResolvedSession<TAccount> | null;
|
|
33
|
+
};
|
|
34
|
+
export type SessionState<TAccount extends AuthAccount = AuthAccount> = {
|
|
35
|
+
create(input: CreateStateInput<TAccount>): SessionStateCookie;
|
|
36
|
+
resolve(input: ResolveStateInput): ResolvedSessionState<TAccount> | null;
|
|
37
|
+
};
|
|
38
|
+
export declare const parseSessionState: (value?: string | null) => SessionStateSchedule | null;
|
|
39
|
+
export declare const createSessionState: <TAccount extends AuthAccount>({ cache, now, secret, session: sessionConfig, }: SessionStateDeps) => SessionState<TAccount>;
|
|
40
|
+
export {};
|
|
41
|
+
//# sourceMappingURL=state.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"state.d.ts","sourceRoot":"","sources":["../../src/session/state.ts"],"names":[],"mappings":"AAEA,OAAO,EAAkC,KAAK,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAC7F,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAG1D,OAAO,KAAK,EAAE,WAAW,EAAE,eAAe,EAAW,MAAM,YAAY,CAAC;AAExE,MAAM,MAAM,kBAAkB,GAAG;IAC7B,GAAG,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,KAAK,gBAAgB,GAAG;IACpB,KAAK,CAAC,EAAE,kBAAkB,CAAC;IAC3B,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,qBAAqB,CAAC;CAClC,CAAC;AAEF,KAAK,iBAAiB,GAAG;IACrB,MAAM,EAAE,kBAAkB,CAAC;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;CACpC,CAAC;AAEF,KAAK,gBAAgB,CAAC,QAAQ,SAAS,WAAW,IAAI;IAClD,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,QAAQ,EAAE,eAAe,CAAC,QAAQ,CAAC,CAAC;IACpC,KAAK,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,KAAK,kBAAkB,GAAG;IACtB,UAAU,EAAE,IAAI,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;CACjB,CAAC;AA6BF,MAAM,MAAM,oBAAoB,GAAG;IAC/B,UAAU,EAAE,IAAI,CAAC;IACjB,QAAQ,EAAE,IAAI,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,oBAAoB,CAAC,QAAQ,SAAS,WAAW,GAAG,WAAW,IACvE,oBAAoB,GAAG;IACnB,KAAK,EAAE,eAAe,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC;CAC3C,CAAC;AAEN,MAAM,MAAM,YAAY,CAAC,QAAQ,SAAS,WAAW,GAAG,WAAW,IAAI;IACnE,MAAM,CAAC,KAAK,EAAE,gBAAgB,CAAC,QAAQ,CAAC,GAAG,kBAAkB,CAAC;IAC9D,OAAO,CAAC,KAAK,EAAE,iBAAiB,GAAG,oBAAoB,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC;CAC5E,CAAC;AAkHF,eAAO,MAAM,iBAAiB,GAAI,QAAQ,MAAM,GAAG,IAAI,KAAG,oBAAoB,GAAG,IAShF,CAAC;AAiBF,eAAO,MAAM,kBAAkB,GAAI,QAAQ,SAAS,WAAW,EAAE,iDAK9D,gBAAgB,KAAG,YAAY,CAAC,QAAQ,CAiH1C,CAAC"}
|
|
@@ -0,0 +1,192 @@
|
|
|
1
|
+
import { createHmac, timingSafeEqual } from "node:crypto";
|
|
2
|
+
import { matchesClient, normalizeClient } from "../client/index.js";
|
|
3
|
+
import { createError } from "../errors.js";
|
|
4
|
+
import { isAuthAccount, isNullableString, isRecord } from "./guards.js";
|
|
5
|
+
const signaturePattern = /^[A-Za-z0-9_-]{43}$/;
|
|
6
|
+
const SIGNATURE_CONTEXT = "auth/session-context";
|
|
7
|
+
const MIN_SECRET_BYTES = 32;
|
|
8
|
+
const toSeconds = (value) => Math.floor(value.getTime() / 1000);
|
|
9
|
+
const toDate = (value) => new Date(value * 1000);
|
|
10
|
+
const getSignature = ({ body, secret, token }) => {
|
|
11
|
+
return createHmac("sha256", secret)
|
|
12
|
+
.update(SIGNATURE_CONTEXT)
|
|
13
|
+
.update("\0")
|
|
14
|
+
.update(token)
|
|
15
|
+
.update("\0")
|
|
16
|
+
.update(body)
|
|
17
|
+
.digest("base64url");
|
|
18
|
+
};
|
|
19
|
+
const matchesSignature = ({ body, secret, signature, token }) => {
|
|
20
|
+
const expected = Buffer.from(getSignature({ body, secret, token }), "ascii");
|
|
21
|
+
const received = Buffer.from(signature, "ascii");
|
|
22
|
+
return expected.byteLength === received.byteLength && timingSafeEqual(expected, received);
|
|
23
|
+
};
|
|
24
|
+
const isStoredSession = (value) => {
|
|
25
|
+
return (isRecord(value) &&
|
|
26
|
+
isRecord(value.client) &&
|
|
27
|
+
isNullableString(value.client.agent) &&
|
|
28
|
+
isNullableString(value.client.ip) &&
|
|
29
|
+
isNullableString(value.client.platform) &&
|
|
30
|
+
typeof value.created === "number" &&
|
|
31
|
+
Number.isSafeInteger(value.created) &&
|
|
32
|
+
typeof value.id === "string");
|
|
33
|
+
};
|
|
34
|
+
const isStoredData = (value) => {
|
|
35
|
+
return isRecord(value) && isAuthAccount(value.account) && isStoredSession(value.session);
|
|
36
|
+
};
|
|
37
|
+
const isStoredCache = (value) => {
|
|
38
|
+
return (isRecord(value) &&
|
|
39
|
+
isStoredData(value.data) &&
|
|
40
|
+
typeof value.exp === "number" &&
|
|
41
|
+
Number.isSafeInteger(value.exp));
|
|
42
|
+
};
|
|
43
|
+
const isStatePayload = (value) => {
|
|
44
|
+
return (isRecord(value) &&
|
|
45
|
+
(value.cache === null || isStoredCache(value.cache)) &&
|
|
46
|
+
typeof value.exp === "number" &&
|
|
47
|
+
Number.isSafeInteger(value.exp) &&
|
|
48
|
+
typeof value.renew === "number" &&
|
|
49
|
+
Number.isSafeInteger(value.renew));
|
|
50
|
+
};
|
|
51
|
+
const parsePayload = (body) => {
|
|
52
|
+
try {
|
|
53
|
+
const value = JSON.parse(Buffer.from(body, "base64url").toString("utf8"));
|
|
54
|
+
return isStatePayload(value) ? value : null;
|
|
55
|
+
}
|
|
56
|
+
catch {
|
|
57
|
+
return null;
|
|
58
|
+
}
|
|
59
|
+
};
|
|
60
|
+
const parseEnvelope = (value) => {
|
|
61
|
+
const [body, signature, extra] = value?.trim().split(".") ?? [];
|
|
62
|
+
if (!body || !signature || extra !== undefined || !signaturePattern.test(signature)) {
|
|
63
|
+
return null;
|
|
64
|
+
}
|
|
65
|
+
return { body, signature };
|
|
66
|
+
};
|
|
67
|
+
const getSchedule = (payload) => {
|
|
68
|
+
if (payload.exp < 1 || payload.renew < 1 || payload.renew > payload.exp) {
|
|
69
|
+
return null;
|
|
70
|
+
}
|
|
71
|
+
const schedule = {
|
|
72
|
+
expires_at: toDate(payload.exp),
|
|
73
|
+
renew_at: toDate(payload.renew),
|
|
74
|
+
};
|
|
75
|
+
return Number.isFinite(schedule.expires_at.getTime()) &&
|
|
76
|
+
Number.isFinite(schedule.renew_at.getTime())
|
|
77
|
+
? schedule
|
|
78
|
+
: null;
|
|
79
|
+
};
|
|
80
|
+
export const parseSessionState = (value) => {
|
|
81
|
+
const envelope = parseEnvelope(value);
|
|
82
|
+
if (!envelope) {
|
|
83
|
+
return null;
|
|
84
|
+
}
|
|
85
|
+
const payload = parsePayload(envelope.body);
|
|
86
|
+
return payload ? getSchedule(payload) : null;
|
|
87
|
+
};
|
|
88
|
+
const toSession = ({ account_id, payload, stored }) => ({
|
|
89
|
+
account_id,
|
|
90
|
+
client: stored.client,
|
|
91
|
+
created_at: toDate(stored.created),
|
|
92
|
+
expires_at: toDate(payload.exp),
|
|
93
|
+
id: stored.id,
|
|
94
|
+
renew_at: toDate(payload.renew),
|
|
95
|
+
});
|
|
96
|
+
const toStoredSession = (session) => ({
|
|
97
|
+
client: session.client,
|
|
98
|
+
created: toSeconds(session.created_at),
|
|
99
|
+
id: session.id,
|
|
100
|
+
});
|
|
101
|
+
export const createSessionState = ({ cache, now = () => new Date(), secret, session: sessionConfig, }) => {
|
|
102
|
+
if (cache !== undefined) {
|
|
103
|
+
if (!Number.isInteger(cache.ttl) || cache.ttl < 1 || cache.ttl > sessionConfig.ttl) {
|
|
104
|
+
throw createError({
|
|
105
|
+
code: "AUTH_CONFIG_INVALID",
|
|
106
|
+
message: "Session cache TTL must be an integer between 1 and the session TTL.",
|
|
107
|
+
});
|
|
108
|
+
}
|
|
109
|
+
}
|
|
110
|
+
if (typeof secret !== "string" || Buffer.byteLength(secret, "utf8") < MIN_SECRET_BYTES) {
|
|
111
|
+
throw createError({
|
|
112
|
+
code: "AUTH_CONFIG_INVALID",
|
|
113
|
+
message: "Authentication secret must contain at least 32 bytes.",
|
|
114
|
+
});
|
|
115
|
+
}
|
|
116
|
+
return {
|
|
117
|
+
create: ({ cache: useCache = true, resolved, token }) => {
|
|
118
|
+
const expires_at = resolved.session.expires_at;
|
|
119
|
+
const cache_expires_at = cache && useCache
|
|
120
|
+
? new Date(Math.min(now().getTime() + cache.ttl * 1000, expires_at.getTime()))
|
|
121
|
+
: null;
|
|
122
|
+
const payload = {
|
|
123
|
+
cache: cache_expires_at
|
|
124
|
+
? {
|
|
125
|
+
data: {
|
|
126
|
+
account: resolved.account,
|
|
127
|
+
session: toStoredSession(resolved.session),
|
|
128
|
+
},
|
|
129
|
+
exp: toSeconds(cache_expires_at),
|
|
130
|
+
}
|
|
131
|
+
: null,
|
|
132
|
+
exp: toSeconds(expires_at),
|
|
133
|
+
renew: toSeconds(resolved.session.renew_at),
|
|
134
|
+
};
|
|
135
|
+
const body = Buffer.from(JSON.stringify(payload)).toString("base64url");
|
|
136
|
+
const signature = getSignature({ body, secret, token });
|
|
137
|
+
return {
|
|
138
|
+
expires_at,
|
|
139
|
+
value: `${body}.${signature}`,
|
|
140
|
+
};
|
|
141
|
+
},
|
|
142
|
+
resolve: ({ client, token, value }) => {
|
|
143
|
+
const envelope = parseEnvelope(value);
|
|
144
|
+
if (!envelope ||
|
|
145
|
+
!matchesSignature({
|
|
146
|
+
body: envelope.body,
|
|
147
|
+
secret,
|
|
148
|
+
signature: envelope.signature,
|
|
149
|
+
token,
|
|
150
|
+
})) {
|
|
151
|
+
return null;
|
|
152
|
+
}
|
|
153
|
+
const payload = parsePayload(envelope.body);
|
|
154
|
+
if (!payload) {
|
|
155
|
+
return null;
|
|
156
|
+
}
|
|
157
|
+
const current = now().getTime();
|
|
158
|
+
const schedule = getSchedule(payload);
|
|
159
|
+
if (!schedule || schedule.expires_at.getTime() <= current) {
|
|
160
|
+
return null;
|
|
161
|
+
}
|
|
162
|
+
const { expires_at, renew_at } = schedule;
|
|
163
|
+
let resolved = null;
|
|
164
|
+
const storedCache = cache ? payload.cache : null;
|
|
165
|
+
if (storedCache) {
|
|
166
|
+
const account = storedCache.data.account;
|
|
167
|
+
const session = toSession({
|
|
168
|
+
account_id: account.id,
|
|
169
|
+
payload,
|
|
170
|
+
stored: storedCache.data.session,
|
|
171
|
+
});
|
|
172
|
+
const max_expires_at = session.created_at.getTime() + sessionConfig.maxLifetime * 1000;
|
|
173
|
+
if (toDate(storedCache.exp).getTime() > current &&
|
|
174
|
+
storedCache.exp <= payload.exp &&
|
|
175
|
+
expires_at.getTime() <= max_expires_at &&
|
|
176
|
+
matchesClient({
|
|
177
|
+
current: normalizeClient(client),
|
|
178
|
+
stored: session.client,
|
|
179
|
+
validation: sessionConfig.validation,
|
|
180
|
+
})) {
|
|
181
|
+
resolved = { account, session };
|
|
182
|
+
}
|
|
183
|
+
}
|
|
184
|
+
return {
|
|
185
|
+
cache: resolved,
|
|
186
|
+
expires_at,
|
|
187
|
+
renew_at,
|
|
188
|
+
};
|
|
189
|
+
},
|
|
190
|
+
};
|
|
191
|
+
};
|
|
192
|
+
//# sourceMappingURL=state.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"state.js","sourceRoot":"","sources":["../../src/session/state.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE1D,OAAO,EAAE,aAAa,EAAE,eAAe,EAA2B,MAAM,oBAAoB,CAAC;AAE7F,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAyFxE,MAAM,gBAAgB,GAAG,qBAAqB,CAAC;AAC/C,MAAM,iBAAiB,GAAG,sBAAsB,CAAC;AACjD,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAE5B,MAAM,SAAS,GAAG,CAAC,KAAW,EAAU,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;AAC9E,MAAM,MAAM,GAAG,CAAC,KAAa,EAAQ,EAAE,CAAC,IAAI,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC;AAE/D,MAAM,YAAY,GAAG,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAkB,EAAE,EAAE;IAC7D,OAAO,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC;SAC9B,MAAM,CAAC,iBAAiB,CAAC;SACzB,MAAM,CAAC,IAAI,CAAC;SACZ,MAAM,CAAC,KAAK,CAAC;SACb,MAAM,CAAC,IAAI,CAAC;SACZ,MAAM,CAAC,IAAI,CAAC;SACZ,MAAM,CAAC,WAAW,CAAC,CAAC;AAC7B,CAAC,CAAC;AAEF,MAAM,gBAAgB,GAAG,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAyB,EAAW,EAAE;IAC5F,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;IAC7E,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAEjD,OAAO,QAAQ,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU,IAAI,eAAe,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;AAC9F,CAAC,CAAC;AAEF,MAAM,eAAe,GAAG,CAAC,KAAc,EAA0B,EAAE;IAC/D,OAAO,CACH,QAAQ,CAAC,KAAK,CAAC;QACf,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;QACtB,gBAAgB,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC;QACpC,gBAAgB,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QACjC,gBAAgB,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC;QACvC,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;QACjC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC;QACnC,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ,CAC/B,CAAC;AACN,CAAC,CAAC;AAEF,MAAM,YAAY,GAAG,CAAC,KAAc,EAAuB,EAAE;IACzD,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;AAC7F,CAAC,CAAC;AAEF,MAAM,aAAa,GAAG,CAAC,KAAc,EAAwB,EAAE;IAC3D,OAAO,CACH,QAAQ,CAAC,KAAK,CAAC;QACf,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC;QACxB,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ;QAC7B,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAClC,CAAC;AACN,CAAC,CAAC;AAEF,MAAM,cAAc,GAAG,CAAC,KAAc,EAAyB,EAAE;IAC7D,OAAO,CACH,QAAQ,CAAC,KAAK,CAAC;QACf,CAAC,KAAK,CAAC,KAAK,KAAK,IAAI,IAAI,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACpD,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ;QAC7B,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC;QAC/B,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;QAC/B,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,CACpC,CAAC;AACN,CAAC,CAAC;AAEF,MAAM,YAAY,GAAG,CAAC,IAAY,EAAuB,EAAE;IACvD,IAAI,CAAC;QACD,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QACnF,OAAO,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,IAAI,CAAC;IAChB,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,aAAa,GAAG,CAAC,KAAqB,EAAwB,EAAE;IAClE,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,GAAG,KAAK,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;IAEhE,IAAI,CAAC,IAAI,IAAI,CAAC,SAAS,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QAClF,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;AAC/B,CAAC,CAAC;AAEF,MAAM,WAAW,GAAG,CAAC,OAAqB,EAA+B,EAAE;IACvE,IAAI,OAAO,CAAC,GAAG,GAAG,CAAC,IAAI,OAAO,CAAC,KAAK,GAAG,CAAC,IAAI,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QACtE,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,MAAM,QAAQ,GAAG;QACb,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC;QAC/B,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;KAClC,CAAC;IAEF,OAAO,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;QACjD,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;QAC5C,CAAC,CAAC,QAAQ;QACV,CAAC,CAAC,IAAI,CAAC;AACf,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,KAAqB,EAA+B,EAAE;IACpF,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IAEtC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACZ,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC5C,OAAO,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACjD,CAAC,CAAC;AAEF,MAAM,SAAS,GAAG,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,EAAkB,EAAW,EAAE,CAAC,CAAC;IAC7E,UAAU;IACV,MAAM,EAAE,MAAM,CAAC,MAAM;IACrB,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;IAClC,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC;IAC/B,EAAE,EAAE,MAAM,CAAC,EAAE;IACb,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;CAClC,CAAC,CAAC;AAEH,MAAM,eAAe,GAAG,CAAC,OAAgB,EAAiB,EAAE,CAAC,CAAC;IAC1D,MAAM,EAAE,OAAO,CAAC,MAAM;IACtB,OAAO,EAAE,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC;IACtC,EAAE,EAAE,OAAO,CAAC,EAAE;CACjB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAA+B,EAC7D,KAAK,EACL,GAAG,GAAG,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,EACtB,MAAM,EACN,OAAO,EAAE,aAAa,GACP,EAA0B,EAAE;IAC3C,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACtB,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,GAAG,GAAG,CAAC,IAAI,KAAK,CAAC,GAAG,GAAG,aAAa,CAAC,GAAG,EAAE,CAAC;YACjF,MAAM,WAAW,CAAC;gBACd,IAAI,EAAE,qBAAqB;gBAC3B,OAAO,EAAE,qEAAqE;aACjF,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IAED,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,gBAAgB,EAAE,CAAC;QACrF,MAAM,WAAW,CAAC;YACd,IAAI,EAAE,qBAAqB;YAC3B,OAAO,EAAE,uDAAuD;SACnE,CAAC,CAAC;IACP,CAAC;IAED,OAAO;QACH,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,QAAQ,GAAG,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE;YACpD,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC;YAC/C,MAAM,gBAAgB,GAClB,KAAK,IAAI,QAAQ;gBACb,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,GAAG,GAAG,IAAI,EAAE,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;gBAC9E,CAAC,CAAC,IAAI,CAAC;YAEf,MAAM,OAAO,GAAiB;gBAC1B,KAAK,EAAE,gBAAgB;oBACnB,CAAC,CAAC;wBACI,IAAI,EAAE;4BACF,OAAO,EAAE,QAAQ,CAAC,OAAO;4BACzB,OAAO,EAAE,eAAe,CAAC,QAAQ,CAAC,OAAO,CAAC;yBAC7C;wBACD,GAAG,EAAE,SAAS,CAAC,gBAAgB,CAAC;qBACnC;oBACH,CAAC,CAAC,IAAI;gBACV,GAAG,EAAE,SAAS,CAAC,UAAU,CAAC;gBAC1B,KAAK,EAAE,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC;aAC9C,CAAC;YAEF,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;YACxE,MAAM,SAAS,GAAG,YAAY,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YAExD,OAAO;gBACH,UAAU;gBACV,KAAK,EAAE,GAAG,IAAI,IAAI,SAAS,EAAE;aAChC,CAAC;QACN,CAAC;QAED,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE;YAClC,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;YAEtC,IACI,CAAC,QAAQ;gBACT,CAAC,gBAAgB,CAAC;oBACd,IAAI,EAAE,QAAQ,CAAC,IAAI;oBACnB,MAAM;oBACN,SAAS,EAAE,QAAQ,CAAC,SAAS;oBAC7B,KAAK;iBACR,CAAC,EACJ,CAAC;gBACC,OAAO,IAAI,CAAC;YAChB,CAAC;YAED,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAE5C,IAAI,CAAC,OAAO,EAAE,CAAC;gBACX,OAAO,IAAI,CAAC;YAChB,CAAC;YAED,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;YAChC,MAAM,QAAQ,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;YAEtC,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,OAAO,EAAE,CAAC;gBACxD,OAAO,IAAI,CAAC;YAChB,CAAC;YAED,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,QAAQ,CAAC;YAE1C,IAAI,QAAQ,GAAqC,IAAI,CAAC;YACtD,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;YAEjD,IAAI,WAAW,EAAE,CAAC;gBACd,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,OAAmB,CAAC;gBACrD,MAAM,OAAO,GAAG,SAAS,CAAC;oBACtB,UAAU,EAAE,OAAO,CAAC,EAAE;oBACtB,OAAO;oBACP,MAAM,EAAE,WAAW,CAAC,IAAI,CAAC,OAAO;iBACnC,CAAC,CAAC;gBAEH,MAAM,cAAc,GAChB,OAAO,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,aAAa,CAAC,WAAW,GAAG,IAAI,CAAC;gBAEpE,IACI,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,GAAG,OAAO;oBAC3C,WAAW,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG;oBAC9B,UAAU,CAAC,OAAO,EAAE,IAAI,cAAc;oBACtC,aAAa,CAAC;wBACV,OAAO,EAAE,eAAe,CAAC,MAAM,CAAC;wBAChC,MAAM,EAAE,OAAO,CAAC,MAAM;wBACtB,UAAU,EAAE,aAAa,CAAC,UAAU;qBACvC,CAAC,EACJ,CAAC;oBACC,QAAQ,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;gBACpC,CAAC;YACL,CAAC;YAED,OAAO;gBACH,KAAK,EAAE,QAAQ;gBACf,UAAU;gBACV,QAAQ;aACX,CAAC;QACN,CAAC;KACJ,CAAC;AACN,CAAC,CAAC"}
|
package/package.json
CHANGED
package/dist/session/cache.d.ts
DELETED
|
@@ -1,32 +0,0 @@
|
|
|
1
|
-
import { type SessionClientInput } from "../client/index.js";
|
|
2
|
-
import type { ResolvedSessionConfig } from "../config.js";
|
|
3
|
-
import type { AuthAccount, ResolvedSession } from "./types.js";
|
|
4
|
-
export type SessionCacheConfig = {
|
|
5
|
-
ttl: number;
|
|
6
|
-
};
|
|
7
|
-
type SessionCacheDeps = {
|
|
8
|
-
config: SessionCacheConfig;
|
|
9
|
-
now?: () => Date;
|
|
10
|
-
secret: string;
|
|
11
|
-
session: ResolvedSessionConfig;
|
|
12
|
-
};
|
|
13
|
-
type CacheInput = {
|
|
14
|
-
client: SessionClientInput;
|
|
15
|
-
token: string;
|
|
16
|
-
value: string | null | undefined;
|
|
17
|
-
};
|
|
18
|
-
type CreateCacheInput<TAccount extends AuthAccount> = {
|
|
19
|
-
resolved: ResolvedSession<TAccount>;
|
|
20
|
-
token: string;
|
|
21
|
-
};
|
|
22
|
-
type SessionCacheValue = {
|
|
23
|
-
expires_at: Date;
|
|
24
|
-
value: string;
|
|
25
|
-
};
|
|
26
|
-
export type SessionCache<TAccount extends AuthAccount = AuthAccount> = {
|
|
27
|
-
create(input: CreateCacheInput<TAccount>): SessionCacheValue;
|
|
28
|
-
resolve(input: CacheInput): ResolvedSession<TAccount> | null;
|
|
29
|
-
};
|
|
30
|
-
export declare const createSessionCache: <TAccount extends AuthAccount>({ config, now, secret, session: sessionConfig, }: SessionCacheDeps) => SessionCache<TAccount>;
|
|
31
|
-
export {};
|
|
32
|
-
//# sourceMappingURL=cache.d.ts.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"cache.d.ts","sourceRoot":"","sources":["../../src/session/cache.ts"],"names":[],"mappings":"AAEA,OAAO,EAAkC,KAAK,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAC7F,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAG1D,OAAO,KAAK,EAAE,WAAW,EAAE,eAAe,EAAW,MAAM,YAAY,CAAC;AAExE,MAAM,MAAM,kBAAkB,GAAG;IAC7B,GAAG,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,KAAK,gBAAgB,GAAG;IACpB,MAAM,EAAE,kBAAkB,CAAC;IAC3B,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,qBAAqB,CAAC;CAClC,CAAC;AAEF,KAAK,UAAU,GAAG;IACd,MAAM,EAAE,kBAAkB,CAAC;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;CACpC,CAAC;AAEF,KAAK,gBAAgB,CAAC,QAAQ,SAAS,WAAW,IAAI;IAClD,QAAQ,EAAE,eAAe,CAAC,QAAQ,CAAC,CAAC;IACpC,KAAK,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,KAAK,iBAAiB,GAAG;IACrB,UAAU,EAAE,IAAI,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;CACjB,CAAC;AAqBF,MAAM,MAAM,YAAY,CAAC,QAAQ,SAAS,WAAW,GAAG,WAAW,IAAI;IACnE,MAAM,CAAC,KAAK,EAAE,gBAAgB,CAAC,QAAQ,CAAC,GAAG,iBAAiB,CAAC;IAC7D,OAAO,CAAC,KAAK,EAAE,UAAU,GAAG,eAAe,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC;CAChE,CAAC;AAuFF,eAAO,MAAM,kBAAkB,GAAI,QAAQ,SAAS,WAAW,EAAE,kDAK9D,gBAAgB,KAAG,YAAY,CAAC,QAAQ,CA4F1C,CAAC"}
|
package/dist/session/cache.js
DELETED
|
@@ -1,138 +0,0 @@
|
|
|
1
|
-
import { createHmac, timingSafeEqual } from "node:crypto";
|
|
2
|
-
import { matchesClient, normalizeClient } from "../client/index.js";
|
|
3
|
-
import { createError } from "../errors.js";
|
|
4
|
-
import { isAuthAccount, isNullableString, isRecord } from "./guards.js";
|
|
5
|
-
const signaturePattern = /^[A-Za-z0-9_-]{43}$/;
|
|
6
|
-
const CACHE_CONTEXT = "auth/session-cache";
|
|
7
|
-
const MIN_SECRET_BYTES = 32;
|
|
8
|
-
const getSignature = ({ body, secret, token }) => {
|
|
9
|
-
return createHmac("sha256", secret)
|
|
10
|
-
.update(CACHE_CONTEXT)
|
|
11
|
-
.update("\0")
|
|
12
|
-
.update(token)
|
|
13
|
-
.update("\0")
|
|
14
|
-
.update(body)
|
|
15
|
-
.digest("base64url");
|
|
16
|
-
};
|
|
17
|
-
const matchesSignature = ({ body, secret, signature, token }) => {
|
|
18
|
-
if (!signaturePattern.test(signature)) {
|
|
19
|
-
return false;
|
|
20
|
-
}
|
|
21
|
-
const expected = Buffer.from(getSignature({ body, secret, token }), "ascii");
|
|
22
|
-
const received = Buffer.from(signature, "ascii");
|
|
23
|
-
return expected.byteLength === received.byteLength && timingSafeEqual(expected, received);
|
|
24
|
-
};
|
|
25
|
-
const isStoredSession = (value) => {
|
|
26
|
-
return (isRecord(value) &&
|
|
27
|
-
isRecord(value.client) &&
|
|
28
|
-
isNullableString(value.client.agent) &&
|
|
29
|
-
isNullableString(value.client.ip) &&
|
|
30
|
-
isNullableString(value.client.platform) &&
|
|
31
|
-
typeof value.created_at === "number" &&
|
|
32
|
-
Number.isSafeInteger(value.created_at) &&
|
|
33
|
-
typeof value.exp === "number" &&
|
|
34
|
-
Number.isSafeInteger(value.exp) &&
|
|
35
|
-
typeof value.id === "string" &&
|
|
36
|
-
typeof value.ren === "number" &&
|
|
37
|
-
Number.isSafeInteger(value.ren));
|
|
38
|
-
};
|
|
39
|
-
const isCachePayload = (value) => {
|
|
40
|
-
return (isRecord(value) &&
|
|
41
|
-
isAuthAccount(value.acc) &&
|
|
42
|
-
typeof value.exp === "number" &&
|
|
43
|
-
Number.isSafeInteger(value.exp) &&
|
|
44
|
-
isStoredSession(value.ses));
|
|
45
|
-
};
|
|
46
|
-
const parsePayload = (body) => {
|
|
47
|
-
try {
|
|
48
|
-
const value = JSON.parse(Buffer.from(body, "base64url").toString("utf8"));
|
|
49
|
-
return isCachePayload(value) ? value : null;
|
|
50
|
-
}
|
|
51
|
-
catch {
|
|
52
|
-
return null;
|
|
53
|
-
}
|
|
54
|
-
};
|
|
55
|
-
const toSession = ({ account_id, stored }) => ({
|
|
56
|
-
account_id,
|
|
57
|
-
client: stored.client,
|
|
58
|
-
created_at: new Date(stored.created_at),
|
|
59
|
-
expires_at: new Date(stored.exp),
|
|
60
|
-
id: stored.id,
|
|
61
|
-
renew_at: new Date(stored.ren),
|
|
62
|
-
});
|
|
63
|
-
const toStoredSession = (session) => ({
|
|
64
|
-
client: session.client,
|
|
65
|
-
created_at: session.created_at.getTime(),
|
|
66
|
-
exp: session.expires_at.getTime(),
|
|
67
|
-
id: session.id,
|
|
68
|
-
ren: session.renew_at.getTime(),
|
|
69
|
-
});
|
|
70
|
-
export const createSessionCache = ({ config, now = () => new Date(), secret, session: sessionConfig, }) => {
|
|
71
|
-
if (!Number.isInteger(config.ttl) || config.ttl < 1 || config.ttl > sessionConfig.ttl) {
|
|
72
|
-
throw createError({
|
|
73
|
-
code: "AUTH_CONFIG_INVALID",
|
|
74
|
-
message: "Session cache TTL must be an integer between 1 and the session TTL.",
|
|
75
|
-
});
|
|
76
|
-
}
|
|
77
|
-
if (Buffer.byteLength(secret, "utf8") < MIN_SECRET_BYTES) {
|
|
78
|
-
throw createError({
|
|
79
|
-
code: "AUTH_CONFIG_INVALID",
|
|
80
|
-
message: "Authentication secret must contain at least 32 bytes.",
|
|
81
|
-
});
|
|
82
|
-
}
|
|
83
|
-
return {
|
|
84
|
-
create: ({ resolved, token }) => {
|
|
85
|
-
const max_expires_at = resolved.session.created_at.getTime() + sessionConfig.maxLifetime * 1000;
|
|
86
|
-
const expires_at = new Date(Math.min(now().getTime() + config.ttl * 1000, resolved.session.expires_at.getTime(), max_expires_at));
|
|
87
|
-
const payload = {
|
|
88
|
-
acc: resolved.account,
|
|
89
|
-
exp: expires_at.getTime(),
|
|
90
|
-
ses: toStoredSession(resolved.session),
|
|
91
|
-
};
|
|
92
|
-
const body = Buffer.from(JSON.stringify(payload)).toString("base64url");
|
|
93
|
-
const signature = getSignature({ body, secret, token });
|
|
94
|
-
return {
|
|
95
|
-
expires_at,
|
|
96
|
-
value: `${body}.${signature}`,
|
|
97
|
-
};
|
|
98
|
-
},
|
|
99
|
-
resolve: ({ client, token, value }) => {
|
|
100
|
-
const [body, signature, extra] = value?.trim().split(".") ?? [];
|
|
101
|
-
if (!body ||
|
|
102
|
-
!signature ||
|
|
103
|
-
extra !== undefined ||
|
|
104
|
-
!matchesSignature({ body, secret, signature, token })) {
|
|
105
|
-
return null;
|
|
106
|
-
}
|
|
107
|
-
const payload = parsePayload(body);
|
|
108
|
-
if (!payload) {
|
|
109
|
-
return null;
|
|
110
|
-
}
|
|
111
|
-
const current = now().getTime();
|
|
112
|
-
const account = payload.acc;
|
|
113
|
-
const resolvedSession = toSession({
|
|
114
|
-
account_id: account.id,
|
|
115
|
-
stored: payload.ses,
|
|
116
|
-
});
|
|
117
|
-
const max_expires_at = resolvedSession.created_at.getTime() + sessionConfig.maxLifetime * 1000;
|
|
118
|
-
if (payload.exp <= current ||
|
|
119
|
-
resolvedSession.expires_at.getTime() <= current ||
|
|
120
|
-
max_expires_at <= current ||
|
|
121
|
-
payload.exp > resolvedSession.expires_at.getTime() ||
|
|
122
|
-
payload.exp > max_expires_at ||
|
|
123
|
-
resolvedSession.expires_at.getTime() > max_expires_at ||
|
|
124
|
-
!matchesClient({
|
|
125
|
-
current: normalizeClient(client),
|
|
126
|
-
stored: resolvedSession.client,
|
|
127
|
-
validation: sessionConfig.validation,
|
|
128
|
-
})) {
|
|
129
|
-
return null;
|
|
130
|
-
}
|
|
131
|
-
return {
|
|
132
|
-
account,
|
|
133
|
-
session: resolvedSession,
|
|
134
|
-
};
|
|
135
|
-
},
|
|
136
|
-
};
|
|
137
|
-
};
|
|
138
|
-
//# sourceMappingURL=cache.js.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"cache.js","sourceRoot":"","sources":["../../src/session/cache.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE1D,OAAO,EAAE,aAAa,EAAE,eAAe,EAA2B,MAAM,oBAAoB,CAAC;AAE7F,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AA6DxE,MAAM,gBAAgB,GAAG,qBAAqB,CAAC;AAC/C,MAAM,aAAa,GAAG,oBAAoB,CAAC;AAC3C,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAE5B,MAAM,YAAY,GAAG,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAmD,EAAE,EAAE;IAC9F,OAAO,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC;SAC9B,MAAM,CAAC,aAAa,CAAC;SACrB,MAAM,CAAC,IAAI,CAAC;SACZ,MAAM,CAAC,KAAK,CAAC;SACb,MAAM,CAAC,IAAI,CAAC;SACZ,MAAM,CAAC,IAAI,CAAC;SACZ,MAAM,CAAC,WAAW,CAAC,CAAC;AAC7B,CAAC,CAAC;AAEF,MAAM,gBAAgB,GAAG,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAoB,EAAW,EAAE;IACvF,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACpC,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;IAC7E,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAEjD,OAAO,QAAQ,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU,IAAI,eAAe,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;AAC9F,CAAC,CAAC;AAEF,MAAM,eAAe,GAAG,CAAC,KAAc,EAA0B,EAAE;IAC/D,OAAO,CACH,QAAQ,CAAC,KAAK,CAAC;QACf,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;QACtB,gBAAgB,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC;QACpC,gBAAgB,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QACjC,gBAAgB,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC;QACvC,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ;QACpC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,UAAU,CAAC;QACtC,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ;QAC7B,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC;QAC/B,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ;QAC5B,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ;QAC7B,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAClC,CAAC;AACN,CAAC,CAAC;AAEF,MAAM,cAAc,GAAG,CAAC,KAAc,EAAyB,EAAE;IAC7D,OAAO,CACH,QAAQ,CAAC,KAAK,CAAC;QACf,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC;QACxB,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ;QAC7B,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC;QAC/B,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,CAC7B,CAAC;AACN,CAAC,CAAC;AAEF,MAAM,YAAY,GAAG,CAAC,IAAY,EAAuB,EAAE;IACvD,IAAI,CAAC;QACD,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QACnF,OAAO,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,IAAI,CAAC;IAChB,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,SAAS,GAAG,CAAC,EAAE,UAAU,EAAE,MAAM,EAAkB,EAAW,EAAE,CAAC,CAAC;IACpE,UAAU;IACV,MAAM,EAAE,MAAM,CAAC,MAAM;IACrB,UAAU,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC;IACvC,UAAU,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC;IAChC,EAAE,EAAE,MAAM,CAAC,EAAE;IACb,QAAQ,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC;CACjC,CAAC,CAAC;AAEH,MAAM,eAAe,GAAG,CAAC,OAAgB,EAAiB,EAAE,CAAC,CAAC;IAC1D,MAAM,EAAE,OAAO,CAAC,MAAM;IACtB,UAAU,EAAE,OAAO,CAAC,UAAU,CAAC,OAAO,EAAE;IACxC,GAAG,EAAE,OAAO,CAAC,UAAU,CAAC,OAAO,EAAE;IACjC,EAAE,EAAE,OAAO,CAAC,EAAE;IACd,GAAG,EAAE,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE;CAClC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAA+B,EAC7D,MAAM,EACN,GAAG,GAAG,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,EACtB,MAAM,EACN,OAAO,EAAE,aAAa,GACP,EAA0B,EAAE;IAC3C,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,MAAM,CAAC,GAAG,GAAG,aAAa,CAAC,GAAG,EAAE,CAAC;QACpF,MAAM,WAAW,CAAC;YACd,IAAI,EAAE,qBAAqB;YAC3B,OAAO,EAAE,qEAAqE;SACjF,CAAC,CAAC;IACP,CAAC;IAED,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,gBAAgB,EAAE,CAAC;QACvD,MAAM,WAAW,CAAC;YACd,IAAI,EAAE,qBAAqB;YAC3B,OAAO,EAAE,uDAAuD;SACnE,CAAC,CAAC;IACP,CAAC;IAED,OAAO;QACH,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE;YAC5B,MAAM,cAAc,GAChB,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,aAAa,CAAC,WAAW,GAAG,IAAI,CAAC;YAC7E,MAAM,UAAU,GAAG,IAAI,IAAI,CACvB,IAAI,CAAC,GAAG,CACJ,GAAG,EAAE,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,GAAG,GAAG,IAAI,EACnC,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,EAAE,EACrC,cAAc,CACjB,CACJ,CAAC;YAEF,MAAM,OAAO,GAAiB;gBAC1B,GAAG,EAAE,QAAQ,CAAC,OAAO;gBACrB,GAAG,EAAE,UAAU,CAAC,OAAO,EAAE;gBACzB,GAAG,EAAE,eAAe,CAAC,QAAQ,CAAC,OAAO,CAAC;aACzC,CAAC;YAEF,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;YACxE,MAAM,SAAS,GAAG,YAAY,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YAExD,OAAO;gBACH,UAAU;gBACV,KAAK,EAAE,GAAG,IAAI,IAAI,SAAS,EAAE;aAChC,CAAC;QACN,CAAC;QAED,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE;YAClC,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,GAAG,KAAK,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YAEhE,IACI,CAAC,IAAI;gBACL,CAAC,SAAS;gBACV,KAAK,KAAK,SAAS;gBACnB,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,EACvD,CAAC;gBACC,OAAO,IAAI,CAAC;YAChB,CAAC;YAED,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;YACnC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACX,OAAO,IAAI,CAAC;YAChB,CAAC;YAED,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;YAChC,MAAM,OAAO,GAAG,OAAO,CAAC,GAAe,CAAC;YAExC,MAAM,eAAe,GAAG,SAAS,CAAC;gBAC9B,UAAU,EAAE,OAAO,CAAC,EAAE;gBACtB,MAAM,EAAE,OAAO,CAAC,GAAG;aACtB,CAAC,CAAC;YAEH,MAAM,cAAc,GAChB,eAAe,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,aAAa,CAAC,WAAW,GAAG,IAAI,CAAC;YAE5E,IACI,OAAO,CAAC,GAAG,IAAI,OAAO;gBACtB,eAAe,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,OAAO;gBAC/C,cAAc,IAAI,OAAO;gBACzB,OAAO,CAAC,GAAG,GAAG,eAAe,CAAC,UAAU,CAAC,OAAO,EAAE;gBAClD,OAAO,CAAC,GAAG,GAAG,cAAc;gBAC5B,eAAe,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,cAAc;gBACrD,CAAC,aAAa,CAAC;oBACX,OAAO,EAAE,eAAe,CAAC,MAAM,CAAC;oBAChC,MAAM,EAAE,eAAe,CAAC,MAAM;oBAC9B,UAAU,EAAE,aAAa,CAAC,UAAU;iBACvC,CAAC,EACJ,CAAC;gBACC,OAAO,IAAI,CAAC;YAChB,CAAC;YAED,OAAO;gBACH,OAAO;gBACP,OAAO,EAAE,eAAe;aAC3B,CAAC;QACN,CAAC;KACJ,CAAC;AACN,CAAC,CAAC"}
|