@ingram-tech/nk-auth 0.7.1 → 0.7.4
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/client.d.ts +1 -1
- package/dist/client.d.ts.map +1 -1
- package/dist/client.js +1 -1
- package/dist/client.js.map +1 -1
- package/dist/id.d.ts +1 -31
- package/dist/id.d.ts.map +1 -1
- package/dist/id.js +6 -100
- package/dist/id.js.map +1 -1
- package/dist/index.d.ts +8 -8
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js +8 -8
- package/dist/index.js.map +1 -1
- package/dist/middleware.js +1 -1
- package/dist/middleware.js.map +1 -1
- package/dist/options.d.ts +1 -1
- package/dist/options.d.ts.map +1 -1
- package/dist/options.js +1 -1
- package/dist/options.js.map +1 -1
- package/dist/server.d.ts +1 -1
- package/dist/server.d.ts.map +1 -1
- package/dist/server.js +2 -2
- package/dist/server.js.map +1 -1
- package/package.json +3 -3
package/dist/client.d.ts
CHANGED
|
@@ -20,5 +20,5 @@
|
|
|
20
20
|
export { passkeyClient } from "@better-auth/passkey/client";
|
|
21
21
|
export { jwtClient } from "better-auth/client/plugins";
|
|
22
22
|
export { createAuthClient } from "better-auth/react";
|
|
23
|
-
export { authBasePath } from "./paths";
|
|
23
|
+
export { authBasePath } from "./paths.js";
|
|
24
24
|
//# sourceMappingURL=client.d.ts.map
|
package/dist/client.d.ts.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AACvD,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErD,OAAO,EAAE,YAAY,EAAE,MAAM,
|
|
1
|
+
{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AACvD,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErD,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC"}
|
package/dist/client.js
CHANGED
|
@@ -21,5 +21,5 @@ export { passkeyClient } from "@better-auth/passkey/client";
|
|
|
21
21
|
export { jwtClient } from "better-auth/client/plugins";
|
|
22
22
|
export { createAuthClient } from "better-auth/react";
|
|
23
23
|
// Re-exported here too so the client can set `basePath` without a server import.
|
|
24
|
-
export { authBasePath } from "./paths";
|
|
24
|
+
export { authBasePath } from "./paths.js";
|
|
25
25
|
//# sourceMappingURL=client.js.map
|
package/dist/client.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AACvD,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,iFAAiF;AACjF,OAAO,EAAE,YAAY,EAAE,MAAM,
|
|
1
|
+
{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AACvD,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,iFAAiF;AACjF,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC"}
|
package/dist/id.d.ts
CHANGED
|
@@ -1,32 +1,2 @@
|
|
|
1
|
-
|
|
2
|
-
* The Ingram id codec — a UUIDv7 and its base58 skin. Dependency-light on
|
|
3
|
-
* purpose (only `node:crypto`), so a site can import it without pulling the
|
|
4
|
-
* bcrypt / passkey machinery in `./options`: `@ingram-tech/nk-auth/id`.
|
|
5
|
-
*
|
|
6
|
-
* The Python twin lives in cloud.ingram.tech's `v1/core.py` (`new_id`); the
|
|
7
|
-
* byte → string vectors in `id.test.ts` and that repo's `tests/test_ids.py` are
|
|
8
|
-
* kept identical, so a Better-Auth id (stored as a hyphenated UUIDv7 by
|
|
9
|
-
* {@link uuidGenerateId}) and an `agt_`/`smt_` id from the API are the same
|
|
10
|
-
* encoding of the same 16 bytes.
|
|
11
|
-
*
|
|
12
|
-
* The split is deliberate: keep storing the hyphenated UUIDv7 at rest (so
|
|
13
|
-
* Supabase `auth.uid()::uuid` / uuid columns keep working) and use
|
|
14
|
-
* {@link toPrefixedId} to skin it as a prefixed base58 id for the wire / display,
|
|
15
|
-
* {@link fromPrefixedId} to recover it. {@link base58Id} mints a fresh one
|
|
16
|
-
* directly, for text-id sites that want API-style ids natively.
|
|
17
|
-
*/
|
|
18
|
-
/**
|
|
19
|
-
* `advanced.database.generateId` for Better Auth — mints a **UUIDv7** (RFC 9562):
|
|
20
|
-
* a 48-bit Unix-ms timestamp prefix + random tail, version `7`, variant `10`.
|
|
21
|
-
* Keeps ids UUID-shaped (Supabase `auth.uid()::uuid`) while staying time-ordered
|
|
22
|
-
* for index locality. Node/Bun's `randomUUID` is v4-only, so we lay the bytes out
|
|
23
|
-
* by hand.
|
|
24
|
-
*/
|
|
25
|
-
export declare const uuidGenerateId: () => string;
|
|
26
|
-
/** Skin a stored hyphenated UUIDv7 as a prefixed base58 id, e.g. `team_…`. */
|
|
27
|
-
export declare function toPrefixedId(uuid: string, prefix: string): string;
|
|
28
|
-
/** Inverse of {@link toPrefixedId}: recover the hyphenated UUIDv7. */
|
|
29
|
-
export declare function fromPrefixedId(id: string): string;
|
|
30
|
-
/** Mint a fresh prefixed base58 id (UUIDv7 core), for text-id sites / API parity. */
|
|
31
|
-
export declare function base58Id(prefix: string): string;
|
|
1
|
+
export { base58Id, fromPrefixedId, toPrefixedId, uuidGenerateId, } from "@ingram-tech/nk-db/id";
|
|
32
2
|
//# sourceMappingURL=id.d.ts.map
|
package/dist/id.d.ts.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"id.d.ts","sourceRoot":"","sources":["../src/id.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"id.d.ts","sourceRoot":"","sources":["../src/id.ts"],"names":[],"mappings":"AAKA,OAAO,EACN,QAAQ,EACR,cAAc,EACd,YAAY,EACZ,cAAc,GACd,MAAM,uBAAuB,CAAC"}
|
package/dist/id.js
CHANGED
|
@@ -1,101 +1,7 @@
|
|
|
1
|
-
|
|
2
|
-
|
|
3
|
-
|
|
4
|
-
|
|
5
|
-
|
|
6
|
-
|
|
7
|
-
* The Python twin lives in cloud.ingram.tech's `v1/core.py` (`new_id`); the
|
|
8
|
-
* byte → string vectors in `id.test.ts` and that repo's `tests/test_ids.py` are
|
|
9
|
-
* kept identical, so a Better-Auth id (stored as a hyphenated UUIDv7 by
|
|
10
|
-
* {@link uuidGenerateId}) and an `agt_`/`smt_` id from the API are the same
|
|
11
|
-
* encoding of the same 16 bytes.
|
|
12
|
-
*
|
|
13
|
-
* The split is deliberate: keep storing the hyphenated UUIDv7 at rest (so
|
|
14
|
-
* Supabase `auth.uid()::uuid` / uuid columns keep working) and use
|
|
15
|
-
* {@link toPrefixedId} to skin it as a prefixed base58 id for the wire / display,
|
|
16
|
-
* {@link fromPrefixedId} to recover it. {@link base58Id} mints a fresh one
|
|
17
|
-
* directly, for text-id sites that want API-style ids natively.
|
|
18
|
-
*/
|
|
19
|
-
/**
|
|
20
|
-
* `advanced.database.generateId` for Better Auth — mints a **UUIDv7** (RFC 9562):
|
|
21
|
-
* a 48-bit Unix-ms timestamp prefix + random tail, version `7`, variant `10`.
|
|
22
|
-
* Keeps ids UUID-shaped (Supabase `auth.uid()::uuid`) while staying time-ordered
|
|
23
|
-
* for index locality. Node/Bun's `randomUUID` is v4-only, so we lay the bytes out
|
|
24
|
-
* by hand.
|
|
25
|
-
*/
|
|
26
|
-
export const uuidGenerateId = () => {
|
|
27
|
-
const bytes = randomBytes(16);
|
|
28
|
-
const ts = Date.now();
|
|
29
|
-
bytes[0] = Math.floor(ts / 2 ** 40) & 0xff;
|
|
30
|
-
bytes[1] = Math.floor(ts / 2 ** 32) & 0xff;
|
|
31
|
-
bytes[2] = Math.floor(ts / 2 ** 24) & 0xff;
|
|
32
|
-
bytes[3] = Math.floor(ts / 2 ** 16) & 0xff;
|
|
33
|
-
bytes[4] = Math.floor(ts / 2 ** 8) & 0xff;
|
|
34
|
-
bytes[5] = ts & 0xff;
|
|
35
|
-
bytes[6] = ((bytes[6] ?? 0) & 0x0f) | 0x70; // version 7
|
|
36
|
-
bytes[8] = ((bytes[8] ?? 0) & 0x3f) | 0x80; // variant 10
|
|
37
|
-
return bytesToUuid(bytes);
|
|
38
|
-
};
|
|
39
|
-
const B58 = "123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz";
|
|
40
|
-
// ceil(128 / log2(58)): a 16-byte value never needs more than 22 digits. We
|
|
41
|
-
// left-pad to it so every body is uniform width and sorts lexically ==
|
|
42
|
-
// chronologically (UUIDv7's ms-timestamp prefix lives in the high bytes).
|
|
43
|
-
const WIDTH = 22;
|
|
44
|
-
/** Big-endian base58 (Bitcoin alphabet) of 16 bytes, left-padded to `WIDTH`. */
|
|
45
|
-
function encode58(bytes) {
|
|
46
|
-
let n = 0n;
|
|
47
|
-
for (const b of bytes)
|
|
48
|
-
n = (n << 8n) | BigInt(b);
|
|
49
|
-
let out = "";
|
|
50
|
-
while (n > 0n) {
|
|
51
|
-
out = B58.charAt(Number(n % 58n)) + out;
|
|
52
|
-
n /= 58n;
|
|
53
|
-
}
|
|
54
|
-
return out.padStart(WIDTH, B58.charAt(0));
|
|
55
|
-
}
|
|
56
|
-
/** Inverse of {@link encode58}: a base58 body back to 16 bytes. */
|
|
57
|
-
function decode58(body) {
|
|
58
|
-
let n = 0n;
|
|
59
|
-
for (const ch of body) {
|
|
60
|
-
const v = B58.indexOf(ch);
|
|
61
|
-
if (v < 0)
|
|
62
|
-
throw new Error(`invalid base58 char: ${ch}`);
|
|
63
|
-
n = n * 58n + BigInt(v);
|
|
64
|
-
}
|
|
65
|
-
const bytes = new Uint8Array(16);
|
|
66
|
-
for (let i = 15; i >= 0; i--) {
|
|
67
|
-
bytes[i] = Number(n & 0xffn);
|
|
68
|
-
n >>= 8n;
|
|
69
|
-
}
|
|
70
|
-
return bytes;
|
|
71
|
-
}
|
|
72
|
-
/** A hyphenated UUID string → its 16 raw bytes. */
|
|
73
|
-
function uuidToBytes(uuid) {
|
|
74
|
-
const hex = uuid.replace(/-/g, "");
|
|
75
|
-
if (!/^[0-9a-fA-F]{32}$/.test(hex))
|
|
76
|
-
throw new Error(`not a uuid: ${uuid}`);
|
|
77
|
-
const bytes = new Uint8Array(16);
|
|
78
|
-
for (let i = 0; i < 16; i++) {
|
|
79
|
-
bytes[i] = Number.parseInt(hex.slice(i * 2, i * 2 + 2), 16);
|
|
80
|
-
}
|
|
81
|
-
return bytes;
|
|
82
|
-
}
|
|
83
|
-
/** 16 raw bytes → a canonical hyphenated UUID string. */
|
|
84
|
-
function bytesToUuid(bytes) {
|
|
85
|
-
const hex = Array.from(bytes, (b) => b.toString(16).padStart(2, "0")).join("");
|
|
86
|
-
return `${hex.slice(0, 8)}-${hex.slice(8, 12)}-${hex.slice(12, 16)}-${hex.slice(16, 20)}-${hex.slice(20)}`;
|
|
87
|
-
}
|
|
88
|
-
/** Skin a stored hyphenated UUIDv7 as a prefixed base58 id, e.g. `team_…`. */
|
|
89
|
-
export function toPrefixedId(uuid, prefix) {
|
|
90
|
-
return `${prefix}_${encode58(uuidToBytes(uuid))}`;
|
|
91
|
-
}
|
|
92
|
-
/** Inverse of {@link toPrefixedId}: recover the hyphenated UUIDv7. */
|
|
93
|
-
export function fromPrefixedId(id) {
|
|
94
|
-
const body = id.slice(id.indexOf("_") + 1);
|
|
95
|
-
return bytesToUuid(decode58(body));
|
|
96
|
-
}
|
|
97
|
-
/** Mint a fresh prefixed base58 id (UUIDv7 core), for text-id sites / API parity. */
|
|
98
|
-
export function base58Id(prefix) {
|
|
99
|
-
return toPrefixedId(uuidGenerateId(), prefix);
|
|
100
|
-
}
|
|
1
|
+
// The Ingram id codec moved to `@ingram-tech/nk-db/id` — the lowest package in
|
|
2
|
+
// the graph — so a site can mint ids without pulling this auth slice. This
|
|
3
|
+
// re-export keeps `@ingram-tech/nk-auth/id` (and Better Auth's
|
|
4
|
+
// `advanced.database.generateId`, wired in `./options`) working unchanged. For
|
|
5
|
+
// the typed prefix registry (`createIdRegistry`), import from `@ingram-tech/nk-db/id`.
|
|
6
|
+
export { base58Id, fromPrefixedId, toPrefixedId, uuidGenerateId, } from "@ingram-tech/nk-db/id";
|
|
101
7
|
//# sourceMappingURL=id.js.map
|
package/dist/id.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"id.js","sourceRoot":"","sources":["../src/id.ts"],"names":[],"mappings":"AAAA
|
|
1
|
+
{"version":3,"file":"id.js","sourceRoot":"","sources":["../src/id.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,2EAA2E;AAC3E,+DAA+D;AAC/D,+EAA+E;AAC/E,uFAAuF;AACvF,OAAO,EACN,QAAQ,EACR,cAAc,EACd,YAAY,EACZ,cAAc,GACd,MAAM,uBAAuB,CAAC"}
|
package/dist/index.d.ts
CHANGED
|
@@ -1,9 +1,9 @@
|
|
|
1
|
-
export { type BackendJwtConfig, backendJwtOptions, rlsJwtOptions, verifyBackendJwt, } from "./jwt";
|
|
2
|
-
export { base58Id, fromPrefixedId, toPrefixedId, uuidGenerateId } from "./id";
|
|
3
|
-
export { type AuthEnv, authEnv, isConfigured } from "./keys";
|
|
4
|
-
export { bcryptPassword, makeEmailSenders, makePasskeyOptions, type PasskeyConfig, type SendEmail, } from "./options";
|
|
5
|
-
export { lastActiveOrganizationHooks, lastActiveOrganizationUserField, nkOrganizationDefaults, } from "./organization";
|
|
6
|
-
export { authBasePath } from "./paths";
|
|
7
|
-
export { createAuthPool } from "./pool";
|
|
8
|
-
export { createServerSupabase, type ServerSupabaseConfig } from "./supabase";
|
|
1
|
+
export { type BackendJwtConfig, backendJwtOptions, rlsJwtOptions, verifyBackendJwt, } from "./jwt.js";
|
|
2
|
+
export { base58Id, fromPrefixedId, toPrefixedId, uuidGenerateId } from "./id.js";
|
|
3
|
+
export { type AuthEnv, authEnv, isConfigured } from "./keys.js";
|
|
4
|
+
export { bcryptPassword, makeEmailSenders, makePasskeyOptions, type PasskeyConfig, type SendEmail, } from "./options.js";
|
|
5
|
+
export { lastActiveOrganizationHooks, lastActiveOrganizationUserField, nkOrganizationDefaults, } from "./organization.js";
|
|
6
|
+
export { authBasePath } from "./paths.js";
|
|
7
|
+
export { createAuthPool } from "./pool.js";
|
|
8
|
+
export { createServerSupabase, type ServerSupabaseConfig } from "./supabase.js";
|
|
9
9
|
//# sourceMappingURL=index.d.ts.map
|
package/dist/index.d.ts.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAKA,OAAO,EACN,KAAK,gBAAgB,EACrB,iBAAiB,EACjB,aAAa,EACb,gBAAgB,GAChB,MAAM,
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAKA,OAAO,EACN,KAAK,gBAAgB,EACrB,iBAAiB,EACjB,aAAa,EACb,gBAAgB,GAChB,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AACjF,OAAO,EAAE,KAAK,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAChE,OAAO,EACN,cAAc,EACd,gBAAgB,EAChB,kBAAkB,EAClB,KAAK,aAAa,EAClB,KAAK,SAAS,GACd,MAAM,cAAc,CAAC;AACtB,OAAO,EACN,2BAA2B,EAC3B,+BAA+B,EAC/B,sBAAsB,GACtB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,oBAAoB,EAAE,KAAK,oBAAoB,EAAE,MAAM,eAAe,CAAC"}
|
package/dist/index.js
CHANGED
|
@@ -2,12 +2,12 @@
|
|
|
2
2
|
// "@ingram-tech/nk-auth/client" so importing the server presets never pulls in
|
|
3
3
|
// React. Focused subpaths (./jwt, ./organization, ./pool) let a site import
|
|
4
4
|
// only what it needs (e.g. avoid bcrypt/supabase when it uses neither).
|
|
5
|
-
export { backendJwtOptions, rlsJwtOptions, verifyBackendJwt, } from "./jwt";
|
|
6
|
-
export { base58Id, fromPrefixedId, toPrefixedId, uuidGenerateId } from "./id";
|
|
7
|
-
export { authEnv, isConfigured } from "./keys";
|
|
8
|
-
export { bcryptPassword, makeEmailSenders, makePasskeyOptions, } from "./options";
|
|
9
|
-
export { lastActiveOrganizationHooks, lastActiveOrganizationUserField, nkOrganizationDefaults, } from "./organization";
|
|
10
|
-
export { authBasePath } from "./paths";
|
|
11
|
-
export { createAuthPool } from "./pool";
|
|
12
|
-
export { createServerSupabase } from "./supabase";
|
|
5
|
+
export { backendJwtOptions, rlsJwtOptions, verifyBackendJwt, } from "./jwt.js";
|
|
6
|
+
export { base58Id, fromPrefixedId, toPrefixedId, uuidGenerateId } from "./id.js";
|
|
7
|
+
export { authEnv, isConfigured } from "./keys.js";
|
|
8
|
+
export { bcryptPassword, makeEmailSenders, makePasskeyOptions, } from "./options.js";
|
|
9
|
+
export { lastActiveOrganizationHooks, lastActiveOrganizationUserField, nkOrganizationDefaults, } from "./organization.js";
|
|
10
|
+
export { authBasePath } from "./paths.js";
|
|
11
|
+
export { createAuthPool } from "./pool.js";
|
|
12
|
+
export { createServerSupabase } from "./supabase.js";
|
|
13
13
|
//# sourceMappingURL=index.js.map
|
package/dist/index.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,+EAA+E;AAC/E,4EAA4E;AAC5E,wEAAwE;AAExE,OAAO,EAEN,iBAAiB,EACjB,aAAa,EACb,gBAAgB,GAChB,MAAM,
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,+EAA+E;AAC/E,4EAA4E;AAC5E,wEAAwE;AAExE,OAAO,EAEN,iBAAiB,EACjB,aAAa,EACb,gBAAgB,GAChB,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AACjF,OAAO,EAAgB,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAChE,OAAO,EACN,cAAc,EACd,gBAAgB,EAChB,kBAAkB,GAGlB,MAAM,cAAc,CAAC;AACtB,OAAO,EACN,2BAA2B,EAC3B,+BAA+B,EAC/B,sBAAsB,GACtB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,oBAAoB,EAA6B,MAAM,eAAe,CAAC"}
|
package/dist/middleware.js
CHANGED
|
@@ -27,7 +27,7 @@
|
|
|
27
27
|
*/
|
|
28
28
|
import { getSessionCookie } from "better-auth/cookies";
|
|
29
29
|
import { NextResponse } from "next/server";
|
|
30
|
-
import { NK_AUTH_PATH_HEADER, safeNextParam } from "./gating-internals";
|
|
30
|
+
import { NK_AUTH_PATH_HEADER, safeNextParam } from "./gating-internals.js";
|
|
31
31
|
export function createAuthMiddleware(config) {
|
|
32
32
|
const signInPath = config.signInPath ?? "/login";
|
|
33
33
|
const frontDoorPaths = config.frontDoorPaths ?? [];
|
package/dist/middleware.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"middleware.js","sourceRoot":"","sources":["../src/middleware.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAoB,YAAY,EAAE,MAAM,aAAa,CAAC;AAC7D,OAAO,EAAE,mBAAmB,EAAE,aAAa,EAAE,MAAM,
|
|
1
|
+
{"version":3,"file":"middleware.js","sourceRoot":"","sources":["../src/middleware.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAoB,YAAY,EAAE,MAAM,aAAa,CAAC;AAC7D,OAAO,EAAE,mBAAmB,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AA0B3E,MAAM,UAAU,oBAAoB,CAAC,MAA4B;IAChE,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,QAAQ,CAAC;IACjD,MAAM,cAAc,GAAG,MAAM,CAAC,cAAc,IAAI,EAAE,CAAC;IACnD,MAAM,YAAY,GAAG,MAAM,CAAC,mBAAmB,IAAI,aAAa,CAAC;IAEjE,uEAAuE;IACvE,kEAAkE;IAClE,4EAA4E;IAC5E,qCAAqC;IACrC,IAAI,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,KAAK,CACd,qCAAqC,UAAU,8FAA8F,CAC7I,CAAC;IACH,CAAC;IACD,IAAI,cAAc,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CACd,qCAAqC,UAAU,sFAAsF,CACrI,CAAC;IACH,CAAC;IACD,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CACd,gFAAgF,CAChF,CAAC;IACH,CAAC;IAED,OAAO,SAAS,UAAU,CAAC,OAAoB;QAC9C,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC;QAEtC,2EAA2E;QAC3E,2EAA2E;QAC3E,yEAAyE;QACzE,2EAA2E;QAC3E,IAAI,IAAI,KAAK,UAAU,IAAI,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,GAAG,EAAE,CAAC;YAC9E,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACnC,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAChC,MAAM,GAAG,GAAG,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YACtC,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;gBAC/C,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC;oBAAE,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACzE,CAAC;YACD,OAAO,GAAG,CAAC;QACZ,CAAC;QAED,MAAM,gBAAgB,GAAG,CAAC,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAErD,qEAAqE;QACrE,qCAAqC;QACrC,IACC,CAAC,gBAAgB;YACjB,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EACpD,CAAC;YACF,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;YACnE,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACnC,EAAE,CAAC,QAAQ,GAAG,UAAU,CAAC;YACzB,EAAE,CAAC,MAAM,GAAG,EAAE,CAAC;YACf,MAAM,IAAI,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;YACrC,IAAI,IAAI;gBAAE,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAC5C,OAAO,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAClC,CAAC;QAED,2EAA2E;QAC3E,IACC,gBAAgB;YAChB,MAAM,CAAC,gBAAgB;YACvB,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,EAC5B,CAAC;YACF,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACnC,EAAE,CAAC,QAAQ,GAAG,MAAM,CAAC,gBAAgB,CAAC;YACtC,EAAE,CAAC,MAAM,GAAG,EAAE,CAAC;YACf,OAAO,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAClC,CAAC;QAED,2EAA2E;QAC3E,qDAAqD;QACrD,MAAM,cAAc,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACpD,cAAc,CAAC,GAAG,CAAC,mBAAmB,EAAE,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACvE,OAAO,YAAY,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,EAAE,CAAC,CAAC;IACpE,CAAC,CAAC;AACH,CAAC"}
|
package/dist/options.d.ts
CHANGED
package/dist/options.d.ts.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"options.d.ts","sourceRoot":"","sources":["../src/options.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAM3D,OAAO,EAAE,cAAc,EAAE,MAAM,
|
|
1
|
+
{"version":3,"file":"options.d.ts","sourceRoot":"","sources":["../src/options.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAM3D,OAAO,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAEzC;;;;;;;;GAQG;AAEH;;;GAGG;AACH,eAAO,MAAM,cAAc;qBACT,MAAM,KAAG,OAAO,CAAC,MAAM,CAAC;kCAItC;QACF,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,EAAE,MAAM,CAAC;KACjB,KAAG,OAAO,CAAC,OAAO,CAAC;CACpB,CAAC;AAEF,MAAM,WAAW,aAAa;IAC7B,oEAAoE;IACpE,IAAI,EAAE,MAAM,CAAC;IACb,kCAAkC;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,sDAAsD;IACtD,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;CAC1B;AAED,iFAAiF;AACjF,eAAO,MAAM,kBAAkB,GAAI,KAAK,aAAa,KAAG,cAItD,CAAC;AAEH,iFAAiF;AACjF,MAAM,MAAM,SAAS,GAAG,CAAC,OAAO,EAAE;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;CACZ,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;AAEvB;;;GAGG;AACH,eAAO,MAAM,gBAAgB,GAAI,MAAM,SAAS;wCAI5C;QACF,IAAI,EAAE;YAAE,KAAK,EAAE,MAAM,CAAA;SAAE,CAAC;QACxB,GAAG,EAAE,MAAM,CAAC;KACZ,KAAG,OAAO,CAAC,IAAI,CAAC;4CAMd;QACF,IAAI,EAAE;YAAE,KAAK,EAAE,MAAM,CAAA;SAAE,CAAC;QACxB,GAAG,EAAE,MAAM,CAAC;KACZ,KAAG,OAAO,CAAC,IAAI,CAAC;CAGhB,CAAC"}
|
package/dist/options.js
CHANGED
|
@@ -2,7 +2,7 @@ import bcrypt from "bcrypt";
|
|
|
2
2
|
// `uuidGenerateId` (the `advanced.database.generateId` UUIDv7 generator) and the
|
|
3
3
|
// base58 skin now live in the dependency-light `./id` module; re-exported here so
|
|
4
4
|
// existing `from "@ingram-tech/nk-auth"` imports keep resolving.
|
|
5
|
-
export { uuidGenerateId } from "./id";
|
|
5
|
+
export { uuidGenerateId } from "./id.js";
|
|
6
6
|
/**
|
|
7
7
|
* Portable Better Auth building blocks for Ingram sites.
|
|
8
8
|
*
|
package/dist/options.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"options.js","sourceRoot":"","sources":["../src/options.ts"],"names":[],"mappings":"AACA,OAAO,MAAM,MAAM,QAAQ,CAAC;AAE5B,iFAAiF;AACjF,kFAAkF;AAClF,iEAAiE;AACjE,OAAO,EAAE,cAAc,EAAE,MAAM,
|
|
1
|
+
{"version":3,"file":"options.js","sourceRoot":"","sources":["../src/options.ts"],"names":[],"mappings":"AACA,OAAO,MAAM,MAAM,QAAQ,CAAC;AAE5B,iFAAiF;AACjF,kFAAkF;AAClF,iEAAiE;AACjE,OAAO,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAEzC;;;;;;;;GAQG;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG;IAC7B,IAAI,EAAE,CAAC,QAAgB,EAAmB,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC;IACtE,MAAM,EAAE,CAAC,EACR,IAAI,EACJ,QAAQ,GAIR,EAAoB,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC;CACtD,CAAC;AAWF,iFAAiF;AACjF,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,GAAkB,EAAkB,EAAE,CAAC,CAAC;IAC1E,IAAI,EAAE,GAAG,CAAC,IAAI;IACd,MAAM,EAAE,GAAG,CAAC,MAAM;IAClB,MAAM,EAAE,GAAG,CAAC,MAAM;CAClB,CAAC,CAAC;AASH;;;GAGG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,IAAe,EAAE,EAAE,CAAC,CAAC;IACrD,iBAAiB,EAAE,KAAK,EAAE,EACzB,IAAI,EACJ,GAAG,GAIH,EAAiB,EAAE;QACnB,MAAM,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,qBAAqB,EAAE,GAAG,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,qBAAqB,EAAE,KAAK,EAAE,EAC7B,IAAI,EACJ,GAAG,GAIH,EAAiB,EAAE;QACnB,MAAM,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,mBAAmB,EAAE,GAAG,EAAE,CAAC,CAAC;IACnE,CAAC;CACD,CAAC,CAAC"}
|
package/dist/server.d.ts
CHANGED
|
@@ -3,7 +3,7 @@
|
|
|
3
3
|
* non-protocol-relative path, else null. Use on the login page before honoring
|
|
4
4
|
* `?next=` so it can't become an open redirect.
|
|
5
5
|
*/
|
|
6
|
-
export { safeNextParam as safeNext } from "./gating-internals";
|
|
6
|
+
export { safeNextParam as safeNext } from "./gating-internals.js";
|
|
7
7
|
/** The shape we need from a session: anything carrying a `user`. */
|
|
8
8
|
interface SessionLike {
|
|
9
9
|
user: unknown;
|
package/dist/server.d.ts.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AA4BA;;;;GAIG;AACH,OAAO,EAAE,aAAa,IAAI,QAAQ,EAAE,MAAM,
|
|
1
|
+
{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AA4BA;;;;GAIG;AACH,OAAO,EAAE,aAAa,IAAI,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAElE,oEAAoE;AACpE,UAAU,WAAW;IACpB,IAAI,EAAE,OAAO,CAAC;CACd;AAED;;;;GAIG;AACH,UAAU,QAAQ,CAAC,CAAC,SAAS,WAAW;IACvC,GAAG,EAAE;QACJ,UAAU,EAAE,CAAC,KAAK,EAAE;YAAE,OAAO,EAAE,OAAO,CAAA;SAAE,KAAK,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;KAC/D,CAAC;CACF;AAED,MAAM,WAAW,kBAAkB;IAClC,iEAAiE;IACjE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,wBAAgB,iBAAiB,CAAC,CAAC,SAAS,WAAW,EACtD,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,EACjB,OAAO,GAAE,kBAAuB;sBAMH,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC;mBAKpB,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;0BAkClB,OAAO,CAAC,CAAC,CAAC;uBAXb,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;kCAuBL,MAAM,KAAG,OAAO,CAAC,IAAI,CAAC;EAWjE"}
|
package/dist/server.js
CHANGED
|
@@ -24,13 +24,13 @@
|
|
|
24
24
|
*/
|
|
25
25
|
import { cookies, headers } from "next/headers";
|
|
26
26
|
import { redirect } from "next/navigation";
|
|
27
|
-
import { NK_AUTH_PATH_HEADER, signInUrl } from "./gating-internals";
|
|
27
|
+
import { NK_AUTH_PATH_HEADER, signInUrl } from "./gating-internals.js";
|
|
28
28
|
/**
|
|
29
29
|
* Validate a `next` redirect param: returns it only if it's an internal,
|
|
30
30
|
* non-protocol-relative path, else null. Use on the login page before honoring
|
|
31
31
|
* `?next=` so it can't become an open redirect.
|
|
32
32
|
*/
|
|
33
|
-
export { safeNextParam as safeNext } from "./gating-internals";
|
|
33
|
+
export { safeNextParam as safeNext } from "./gating-internals.js";
|
|
34
34
|
export function createAuthHelpers(auth, options = {}) {
|
|
35
35
|
const signInPath = options.signInPath ?? "/login";
|
|
36
36
|
const cookiePrefix = options.sessionCookiePrefix ?? "better-auth";
|
package/dist/server.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC3C,OAAO,EAAE,mBAAmB,EAAE,SAAS,EAAE,MAAM,
|
|
1
|
+
{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC3C,OAAO,EAAE,mBAAmB,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAEvE;;;;GAIG;AACH,OAAO,EAAE,aAAa,IAAI,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AA6BlE,MAAM,UAAU,iBAAiB,CAChC,IAAiB,EACjB,UAA8B,EAAE;IAEhC,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,QAAQ,CAAC;IAClD,MAAM,YAAY,GAAG,OAAO,CAAC,mBAAmB,IAAI,aAAa,CAAC;IAElE,4DAA4D;IAC5D,KAAK,UAAU,UAAU;QACxB,OAAO,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,MAAM,OAAO,EAAE,EAAE,CAAC,CAAC;IAC1D,CAAC;IAED,uCAAuC;IACvC,KAAK,UAAU,OAAO;QACrB,MAAM,OAAO,GAAG,MAAM,UAAU,EAAE,CAAC;QACnC,OAAO,OAAO,EAAE,IAAI,IAAI,IAAI,CAAC;IAC9B,CAAC;IAED;;;;;OAKG;IACH,KAAK,UAAU,YAAY;QAC1B,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;QACzD,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;QACxC,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC;QACtE,OAAO,SAAS,CAAC,UAAU,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/C,CAAC;IAED;;;;OAIG;IACH,KAAK,UAAU,WAAW;QACzB,MAAM,IAAI,GAAG,MAAM,OAAO,EAAE,CAAC;QAC7B,oEAAoE;QACpE,IAAI,CAAC,IAAI;YAAE,QAAQ,CAAC,MAAM,YAAY,EAAE,CAAC,CAAC;QAC1C,OAAO,IAAI,CAAC;IACb,CAAC;IAED;;;OAGG;IACH,KAAK,UAAU,cAAc;QAC5B,MAAM,OAAO,GAAG,MAAM,UAAU,EAAE,CAAC;QACnC,IAAI,CAAC,OAAO;YAAE,QAAQ,CAAC,MAAM,YAAY,EAAE,CAAC,CAAC;QAC7C,OAAO,OAAO,CAAC;IAChB,CAAC;IAED;;;;;OAKG;IACH,KAAK,UAAU,uBAAuB,CAAC,EAAU;QAChD,IAAI,MAAM,UAAU,EAAE;YAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;IACtC,CAAC;IAED,OAAO;QACN,UAAU;QACV,OAAO;QACP,cAAc;QACd,WAAW;QACX,uBAAuB;KACvB,CAAC;AACH,CAAC"}
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@ingram-tech/nk-auth",
|
|
3
|
-
"version": "0.7.
|
|
3
|
+
"version": "0.7.4",
|
|
4
4
|
"description": "The Ingram Better Auth foundation: composable presets (org, dual-shape JWT, Supabase RLS bridge, active-org hooks, pg pool) for Next.js sites.",
|
|
5
5
|
"license": "MIT",
|
|
6
6
|
"type": "module",
|
|
@@ -61,7 +61,7 @@
|
|
|
61
61
|
"test": "vitest run"
|
|
62
62
|
},
|
|
63
63
|
"dependencies": {
|
|
64
|
-
"@ingram-tech/nk-db": "^0.
|
|
64
|
+
"@ingram-tech/nk-db": "^0.7.0",
|
|
65
65
|
"bcrypt": "^6.0.0",
|
|
66
66
|
"jose": "^6.0.0",
|
|
67
67
|
"zod": "^4.0.0"
|
|
@@ -93,7 +93,7 @@
|
|
|
93
93
|
},
|
|
94
94
|
"devDependencies": {
|
|
95
95
|
"@better-auth/passkey": "^1.6.0",
|
|
96
|
-
"@ingram-tech/
|
|
96
|
+
"@ingram-tech/nk-dev": "0.1.0",
|
|
97
97
|
"@supabase/supabase-js": "^2.45.0",
|
|
98
98
|
"@types/bcrypt": "^6.0.0",
|
|
99
99
|
"@types/node": "^25.0.0",
|