@getstrata/bootstrap 0.2.49 → 0.2.51

package/dist/entries/web/session.js

@@ -3,18 +3,71 @@ var __jsonParse = (a) => JSON.parse(a);
 
 // ../../src/bootstrap/web/session.ts
 import { createHash, randomBytes } from "crypto";
+import { AuthManager } from "@getstrata/core/auth/guard";
+import { getBoundDatabaseConnection } from "@getstrata/core/database/boundConnection";
+import { getDefaultDatabasePool } from "@getstrata/core/database/defaultConnection";
 import { readRequestCookie } from "@getstrata/core/http/cookies";
+function isSqlClient(value) {
+  return typeof value.unsafe === "function";
+}
+function resolveSql(source) {
+  if (isSqlClient(source)) {
+    return source;
+  }
+  return source();
+}
+function defaultSessionSql() {
+  const bound = getBoundDatabaseConnection();
+  if (bound) {
+    return bound;
+  }
+  return getDefaultDatabasePool();
+}
+function defaultMapSessionUser(user) {
+  return {
+    id: user.id,
+    role: user.is_admin ? "admin" : "member"
+  };
+}
+async function defaultLoadSessionUser(sql, sessionId) {
+  const rows = await sql.unsafe(`SELECT s.id, s.user_id, s.expires_at, u.name, u.email, u.learn_subscriber,
+            COALESCE(u.is_admin, false) AS is_admin
+     FROM sessions s
+     INNER JOIN users u ON u.id = s.user_id
+     WHERE s.id = $1 AND s.expires_at > NOW()`, [sessionId]);
+  const row = rows[0];
+  if (!row)
+    return null;
+  return {
+    id: row.user_id,
+    name: row.name,
+    email: row.email,
+    learn_subscriber: row.learn_subscriber,
+    is_admin: row.is_admin
+  };
+}
+function redirectWithCookie(location, setCookie, status) {
+  return new Response(null, {
+    status,
+    headers: {
+      Location: location,
+      "Set-Cookie": setCookie
+    }
+  });
+}
 
 class CookieSessionStore {
-  sql;
+  sqlSource;
   secret;
   cookieName;
   maxAgeSeconds;
-  constructor(sql, secret, cookieName = "strata_session", maxAgeSeconds = 60 * 60 * 24 * 14) {
-    this.sql = sql;
+  loadSessionUser;
+  constructor(sqlSource, secret, cookieName = "strata_session", maxAgeSeconds = 60 * 60 * 24 * 14, loadSessionUser = defaultLoadSessionUser) {
+    this.sqlSource = sqlSource;
     this.secret = secret;
     this.cookieName = cookieName;
     this.maxAgeSeconds = maxAgeSeconds;
+    this.loadSessionUser = loadSessionUser;
   }
   cookieHeader(_user, sessionId) {
     const payload = `${sessionId}.${this.sign(sessionId)}`;
@@ -23,16 +76,30 @@ class CookieSessionStore {
   clearCookieHeader() {
     return this.withSecureFlag(`${this.cookieName}=; Path=/; HttpOnly; SameSite=Lax; Max-Age=0`);
   }
+  sessionIdFromRequest(request) {
+    const cookie = readRequestCookie(request, this.cookieName);
+    const raw = cookie ?? null;
+    if (!raw)
+      return null;
+    const [sessionId, signature] = raw.split(".");
+    if (!sessionId || !signature || signature !== this.sign(sessionId)) {
+      return null;
+    }
+    return sessionId;
+  }
   withSecureFlag(header) {
     if (true) {
       return header;
     }
     return header.includes("Secure") ? header : `${header}; Secure`;
   }
+  sql() {
+    return resolveSql(this.sqlSource);
+  }
   async create(user) {
     const id = randomBytes(32).toString("hex");
     const expires = new Date(Date.now() + this.maxAgeSeconds * 1000);
-    await this.sql.unsafe(`INSERT INTO sessions (id, user_id, expires_at) VALUES ($1, $2, $3)`, [
+    await this.sql().unsafe(`INSERT INTO sessions (id, user_id, expires_at) VALUES ($1, $2, $3)`, [
       id,
       user.id,
       expires
@@ -40,37 +107,70 @@ class CookieSessionStore {
     return id;
   }
   async destroy(sessionId) {
-    await this.sql.unsafe(`DELETE FROM sessions WHERE id = $1`, [sessionId]);
+    await this.sql().unsafe(`DELETE FROM sessions WHERE id = $1`, [sessionId]);
   }
   async read(request) {
-    const cookie = readRequestCookie(request, this.cookieName);
-    const raw = cookie ?? null;
-    if (!raw)
-      return null;
-    const [sessionId, signature] = raw.split(".");
-    if (!sessionId || !signature || signature !== this.sign(sessionId)) {
-      return null;
-    }
-    const rows = await this.sql.unsafe(`SELECT s.id, s.user_id, s.expires_at, u.name, u.email, u.learn_subscriber,
-              COALESCE(u.is_admin, false) AS is_admin
-       FROM sessions s
-       INNER JOIN users u ON u.id = s.user_id
-       WHERE s.id = $1 AND s.expires_at > NOW()`, [sessionId]);
-    const row = rows[0];
-    if (!row)
+    const sessionId = this.sessionIdFromRequest(request);
+    if (!sessionId)
       return null;
-    return {
-      id: row.user_id,
-      name: row.name,
-      email: row.email,
-      learn_subscriber: row.learn_subscriber,
-      is_admin: row.is_admin
-    };
+    return this.loadSessionUser(this.sql(), sessionId);
   }
   sign(value) {
     return createHash("sha256").update(`${value}.${this.secret}`).digest("hex").slice(0, 32);
   }
 }
+
+class CookieSessionGuard {
+  store;
+  mapUser;
+  constructor(store, mapUser = defaultMapSessionUser) {
+    this.store = store;
+    this.mapUser = mapUser;
+  }
+  async resolve(request) {
+    const user = await this.store.read(request);
+    if (!user) {
+      return null;
+    }
+    return this.mapUser(user);
+  }
+}
+
+class CookieSessionAuthManager extends AuthManager {
+  store;
+  constructor(store, mapUser = defaultMapSessionUser) {
+    super(new CookieSessionGuard(store, mapUser));
+    this.store = store;
+  }
+  async signIn(user) {
+    const sessionId = await this.store.create(user);
+    return { sessionId, setCookie: this.store.cookieHeader(user, sessionId) };
+  }
+  async signOut(request) {
+    const sessionId = this.store.sessionIdFromRequest(request);
+    if (sessionId) {
+      await this.store.destroy(sessionId);
+    }
+    return { setCookie: this.store.clearCookieHeader() };
+  }
+  async signInRedirect(user, location, status = 302) {
+    const { setCookie } = await this.signIn(user);
+    return redirectWithCookie(location, setCookie, status);
+  }
+  async signOutRedirect(request, location, status = 302) {
+    const { setCookie } = await this.signOut(request);
+    return redirectWithCookie(location, setCookie, status);
+  }
+}
+function createCookieSessionAuthManager(options = {}) {
+  const store = options.store ?? new CookieSessionStore(options.sql ?? defaultSessionSql, options.secret ?? process.env.SESSION_SECRET?.trim() ?? "", options.cookieName, options.maxAgeSeconds, options.loadSessionUser);
+  return new CookieSessionAuthManager(store, options.mapUser ?? defaultMapSessionUser);
+}
 export {
-  CookieSessionStore
+  CookieSessionAuthManager,
+  CookieSessionGuard,
+  CookieSessionStore,
+  createCookieSessionAuthManager,
+  defaultMapSessionUser,
+  defaultSessionSql
 };