@gauts/auth 0.9.0 → 0.10.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (45) hide show
  1. package/README.md +91 -80
  2. package/SECURITY.md +8 -4
  3. package/dist/adapters/express/index.d.ts +7 -13
  4. package/dist/adapters/express/index.d.ts.map +1 -1
  5. package/dist/adapters/express/index.js +6 -6
  6. package/dist/adapters/express/index.js.map +1 -1
  7. package/dist/adapters/fastify/index.d.ts +7 -13
  8. package/dist/adapters/fastify/index.d.ts.map +1 -1
  9. package/dist/adapters/fastify/index.js +5 -5
  10. package/dist/adapters/fastify/index.js.map +1 -1
  11. package/dist/adapters/hono/index.d.ts +7 -13
  12. package/dist/adapters/hono/index.d.ts.map +1 -1
  13. package/dist/adapters/hono/index.js +5 -5
  14. package/dist/adapters/hono/index.js.map +1 -1
  15. package/dist/adapters/next/index.d.ts +2 -7
  16. package/dist/adapters/next/index.d.ts.map +1 -1
  17. package/dist/adapters/next/index.js +9 -39
  18. package/dist/adapters/next/index.js.map +1 -1
  19. package/dist/adapters/utils/session.d.ts.map +1 -1
  20. package/dist/adapters/utils/session.js +70 -78
  21. package/dist/adapters/utils/session.js.map +1 -1
  22. package/dist/adapters/utils/types.d.ts +3 -9
  23. package/dist/adapters/utils/types.d.ts.map +1 -1
  24. package/dist/config.d.ts +1 -2
  25. package/dist/config.d.ts.map +1 -1
  26. package/dist/config.js +1 -2
  27. package/dist/config.js.map +1 -1
  28. package/dist/headers/index.d.ts +7 -0
  29. package/dist/headers/index.d.ts.map +1 -0
  30. package/dist/headers/index.js +37 -0
  31. package/dist/headers/index.js.map +1 -0
  32. package/dist/index.d.ts +1 -1
  33. package/dist/session/cookie.d.ts +6 -8
  34. package/dist/session/cookie.d.ts.map +1 -1
  35. package/dist/session/cookie.js +7 -24
  36. package/dist/session/cookie.js.map +1 -1
  37. package/dist/session/state.d.ts +41 -0
  38. package/dist/session/state.d.ts.map +1 -0
  39. package/dist/session/state.js +192 -0
  40. package/dist/session/state.js.map +1 -0
  41. package/package.json +5 -1
  42. package/dist/session/cache.d.ts +0 -32
  43. package/dist/session/cache.d.ts.map +0 -1
  44. package/dist/session/cache.js +0 -138
  45. package/dist/session/cache.js.map +0 -1
@@ -1,138 +0,0 @@
1
- import { createHmac, timingSafeEqual } from "node:crypto";
2
- import { matchesClient, normalizeClient } from "../client/index.js";
3
- import { createError } from "../errors.js";
4
- import { isAuthAccount, isNullableString, isRecord } from "./guards.js";
5
- const signaturePattern = /^[A-Za-z0-9_-]{43}$/;
6
- const CACHE_CONTEXT = "auth/session-cache";
7
- const MIN_SECRET_BYTES = 32;
8
- const getSignature = ({ body, secret, token }) => {
9
- return createHmac("sha256", secret)
10
- .update(CACHE_CONTEXT)
11
- .update("\0")
12
- .update(token)
13
- .update("\0")
14
- .update(body)
15
- .digest("base64url");
16
- };
17
- const matchesSignature = ({ body, secret, signature, token }) => {
18
- if (!signaturePattern.test(signature)) {
19
- return false;
20
- }
21
- const expected = Buffer.from(getSignature({ body, secret, token }), "ascii");
22
- const received = Buffer.from(signature, "ascii");
23
- return expected.byteLength === received.byteLength && timingSafeEqual(expected, received);
24
- };
25
- const isStoredSession = (value) => {
26
- return (isRecord(value) &&
27
- isRecord(value.client) &&
28
- isNullableString(value.client.agent) &&
29
- isNullableString(value.client.ip) &&
30
- isNullableString(value.client.platform) &&
31
- typeof value.created_at === "number" &&
32
- Number.isSafeInteger(value.created_at) &&
33
- typeof value.exp === "number" &&
34
- Number.isSafeInteger(value.exp) &&
35
- typeof value.id === "string" &&
36
- typeof value.ren === "number" &&
37
- Number.isSafeInteger(value.ren));
38
- };
39
- const isCachePayload = (value) => {
40
- return (isRecord(value) &&
41
- isAuthAccount(value.acc) &&
42
- typeof value.exp === "number" &&
43
- Number.isSafeInteger(value.exp) &&
44
- isStoredSession(value.ses));
45
- };
46
- const parsePayload = (body) => {
47
- try {
48
- const value = JSON.parse(Buffer.from(body, "base64url").toString("utf8"));
49
- return isCachePayload(value) ? value : null;
50
- }
51
- catch {
52
- return null;
53
- }
54
- };
55
- const toSession = ({ account_id, stored }) => ({
56
- account_id,
57
- client: stored.client,
58
- created_at: new Date(stored.created_at),
59
- expires_at: new Date(stored.exp),
60
- id: stored.id,
61
- renew_at: new Date(stored.ren),
62
- });
63
- const toStoredSession = (session) => ({
64
- client: session.client,
65
- created_at: session.created_at.getTime(),
66
- exp: session.expires_at.getTime(),
67
- id: session.id,
68
- ren: session.renew_at.getTime(),
69
- });
70
- export const createSessionCache = ({ config, now = () => new Date(), secret, session: sessionConfig, }) => {
71
- if (!Number.isInteger(config.ttl) || config.ttl < 1 || config.ttl > sessionConfig.ttl) {
72
- throw createError({
73
- code: "AUTH_CONFIG_INVALID",
74
- message: "Session cache TTL must be an integer between 1 and the session TTL.",
75
- });
76
- }
77
- if (Buffer.byteLength(secret, "utf8") < MIN_SECRET_BYTES) {
78
- throw createError({
79
- code: "AUTH_CONFIG_INVALID",
80
- message: "Authentication secret must contain at least 32 bytes.",
81
- });
82
- }
83
- return {
84
- create: ({ resolved, token }) => {
85
- const max_expires_at = resolved.session.created_at.getTime() + sessionConfig.maxLifetime * 1000;
86
- const expires_at = new Date(Math.min(now().getTime() + config.ttl * 1000, resolved.session.expires_at.getTime(), max_expires_at));
87
- const payload = {
88
- acc: resolved.account,
89
- exp: expires_at.getTime(),
90
- ses: toStoredSession(resolved.session),
91
- };
92
- const body = Buffer.from(JSON.stringify(payload)).toString("base64url");
93
- const signature = getSignature({ body, secret, token });
94
- return {
95
- expires_at,
96
- value: `${body}.${signature}`,
97
- };
98
- },
99
- resolve: ({ client, token, value }) => {
100
- const [body, signature, extra] = value?.trim().split(".") ?? [];
101
- if (!body ||
102
- !signature ||
103
- extra !== undefined ||
104
- !matchesSignature({ body, secret, signature, token })) {
105
- return null;
106
- }
107
- const payload = parsePayload(body);
108
- if (!payload) {
109
- return null;
110
- }
111
- const current = now().getTime();
112
- const account = payload.acc;
113
- const resolvedSession = toSession({
114
- account_id: account.id,
115
- stored: payload.ses,
116
- });
117
- const max_expires_at = resolvedSession.created_at.getTime() + sessionConfig.maxLifetime * 1000;
118
- if (payload.exp <= current ||
119
- resolvedSession.expires_at.getTime() <= current ||
120
- max_expires_at <= current ||
121
- payload.exp > resolvedSession.expires_at.getTime() ||
122
- payload.exp > max_expires_at ||
123
- resolvedSession.expires_at.getTime() > max_expires_at ||
124
- !matchesClient({
125
- current: normalizeClient(client),
126
- stored: resolvedSession.client,
127
- validation: sessionConfig.validation,
128
- })) {
129
- return null;
130
- }
131
- return {
132
- account,
133
- session: resolvedSession,
134
- };
135
- },
136
- };
137
- };
138
- //# sourceMappingURL=cache.js.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"cache.js","sourceRoot":"","sources":["../../src/session/cache.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE1D,OAAO,EAAE,aAAa,EAAE,eAAe,EAA2B,MAAM,oBAAoB,CAAC;AAE7F,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AA6DxE,MAAM,gBAAgB,GAAG,qBAAqB,CAAC;AAC/C,MAAM,aAAa,GAAG,oBAAoB,CAAC;AAC3C,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAE5B,MAAM,YAAY,GAAG,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAmD,EAAE,EAAE;IAC9F,OAAO,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC;SAC9B,MAAM,CAAC,aAAa,CAAC;SACrB,MAAM,CAAC,IAAI,CAAC;SACZ,MAAM,CAAC,KAAK,CAAC;SACb,MAAM,CAAC,IAAI,CAAC;SACZ,MAAM,CAAC,IAAI,CAAC;SACZ,MAAM,CAAC,WAAW,CAAC,CAAC;AAC7B,CAAC,CAAC;AAEF,MAAM,gBAAgB,GAAG,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAoB,EAAW,EAAE;IACvF,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACpC,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;IAC7E,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAEjD,OAAO,QAAQ,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU,IAAI,eAAe,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;AAC9F,CAAC,CAAC;AAEF,MAAM,eAAe,GAAG,CAAC,KAAc,EAA0B,EAAE;IAC/D,OAAO,CACH,QAAQ,CAAC,KAAK,CAAC;QACf,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;QACtB,gBAAgB,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC;QACpC,gBAAgB,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QACjC,gBAAgB,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC;QACvC,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ;QACpC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,UAAU,CAAC;QACtC,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ;QAC7B,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC;QAC/B,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ;QAC5B,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ;QAC7B,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAClC,CAAC;AACN,CAAC,CAAC;AAEF,MAAM,cAAc,GAAG,CAAC,KAAc,EAAyB,EAAE;IAC7D,OAAO,CACH,QAAQ,CAAC,KAAK,CAAC;QACf,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC;QACxB,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ;QAC7B,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC;QAC/B,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,CAC7B,CAAC;AACN,CAAC,CAAC;AAEF,MAAM,YAAY,GAAG,CAAC,IAAY,EAAuB,EAAE;IACvD,IAAI,CAAC;QACD,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QACnF,OAAO,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,IAAI,CAAC;IAChB,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,SAAS,GAAG,CAAC,EAAE,UAAU,EAAE,MAAM,EAAkB,EAAW,EAAE,CAAC,CAAC;IACpE,UAAU;IACV,MAAM,EAAE,MAAM,CAAC,MAAM;IACrB,UAAU,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC;IACvC,UAAU,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC;IAChC,EAAE,EAAE,MAAM,CAAC,EAAE;IACb,QAAQ,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC;CACjC,CAAC,CAAC;AAEH,MAAM,eAAe,GAAG,CAAC,OAAgB,EAAiB,EAAE,CAAC,CAAC;IAC1D,MAAM,EAAE,OAAO,CAAC,MAAM;IACtB,UAAU,EAAE,OAAO,CAAC,UAAU,CAAC,OAAO,EAAE;IACxC,GAAG,EAAE,OAAO,CAAC,UAAU,CAAC,OAAO,EAAE;IACjC,EAAE,EAAE,OAAO,CAAC,EAAE;IACd,GAAG,EAAE,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE;CAClC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAA+B,EAC7D,MAAM,EACN,GAAG,GAAG,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,EACtB,MAAM,EACN,OAAO,EAAE,aAAa,GACP,EAA0B,EAAE;IAC3C,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,MAAM,CAAC,GAAG,GAAG,aAAa,CAAC,GAAG,EAAE,CAAC;QACpF,MAAM,WAAW,CAAC;YACd,IAAI,EAAE,qBAAqB;YAC3B,OAAO,EAAE,qEAAqE;SACjF,CAAC,CAAC;IACP,CAAC;IAED,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,gBAAgB,EAAE,CAAC;QACvD,MAAM,WAAW,CAAC;YACd,IAAI,EAAE,qBAAqB;YAC3B,OAAO,EAAE,uDAAuD;SACnE,CAAC,CAAC;IACP,CAAC;IAED,OAAO;QACH,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE;YAC5B,MAAM,cAAc,GAChB,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,aAAa,CAAC,WAAW,GAAG,IAAI,CAAC;YAC7E,MAAM,UAAU,GAAG,IAAI,IAAI,CACvB,IAAI,CAAC,GAAG,CACJ,GAAG,EAAE,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,GAAG,GAAG,IAAI,EACnC,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,EAAE,EACrC,cAAc,CACjB,CACJ,CAAC;YAEF,MAAM,OAAO,GAAiB;gBAC1B,GAAG,EAAE,QAAQ,CAAC,OAAO;gBACrB,GAAG,EAAE,UAAU,CAAC,OAAO,EAAE;gBACzB,GAAG,EAAE,eAAe,CAAC,QAAQ,CAAC,OAAO,CAAC;aACzC,CAAC;YAEF,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;YACxE,MAAM,SAAS,GAAG,YAAY,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YAExD,OAAO;gBACH,UAAU;gBACV,KAAK,EAAE,GAAG,IAAI,IAAI,SAAS,EAAE;aAChC,CAAC;QACN,CAAC;QAED,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE;YAClC,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,GAAG,KAAK,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YAEhE,IACI,CAAC,IAAI;gBACL,CAAC,SAAS;gBACV,KAAK,KAAK,SAAS;gBACnB,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,EACvD,CAAC;gBACC,OAAO,IAAI,CAAC;YAChB,CAAC;YAED,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;YACnC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACX,OAAO,IAAI,CAAC;YAChB,CAAC;YAED,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;YAChC,MAAM,OAAO,GAAG,OAAO,CAAC,GAAe,CAAC;YAExC,MAAM,eAAe,GAAG,SAAS,CAAC;gBAC9B,UAAU,EAAE,OAAO,CAAC,EAAE;gBACtB,MAAM,EAAE,OAAO,CAAC,GAAG;aACtB,CAAC,CAAC;YAEH,MAAM,cAAc,GAChB,eAAe,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,aAAa,CAAC,WAAW,GAAG,IAAI,CAAC;YAE5E,IACI,OAAO,CAAC,GAAG,IAAI,OAAO;gBACtB,eAAe,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,OAAO;gBAC/C,cAAc,IAAI,OAAO;gBACzB,OAAO,CAAC,GAAG,GAAG,eAAe,CAAC,UAAU,CAAC,OAAO,EAAE;gBAClD,OAAO,CAAC,GAAG,GAAG,cAAc;gBAC5B,eAAe,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,cAAc;gBACrD,CAAC,aAAa,CAAC;oBACX,OAAO,EAAE,eAAe,CAAC,MAAM,CAAC;oBAChC,MAAM,EAAE,eAAe,CAAC,MAAM;oBAC9B,UAAU,EAAE,aAAa,CAAC,UAAU;iBACvC,CAAC,EACJ,CAAC;gBACC,OAAO,IAAI,CAAC;YAChB,CAAC;YAED,OAAO;gBACH,OAAO;gBACP,OAAO,EAAE,eAAe;aAC3B,CAAC;QACN,CAAC;KACJ,CAAC;AACN,CAAC,CAAC"}