@iqauth/sdk 2.6.3 → 2.7.0

package/dist/fastify.mjs

@@ -2,18 +2,19 @@ import {
   handleCallback,
   handleRefresh,
   handleSignout,
+  handleUserinfo,
   serializeCookie
-} from "./chunk-6TDJJER7.mjs";
+} from "./chunk-RUJXRTEW.mjs";
 import {
   assertPublishableKey
-} from "./chunk-WQWBJSSS.mjs";
+} from "./chunk-HVHNYPDC.mjs";
 import {
   IQAuthClient
-} from "./chunk-W3F4JYGP.mjs";
-import "./chunk-UNYDG2L4.mjs";
+} from "./chunk-JXQI62A7.mjs";
+import "./chunk-NUO2I65G.mjs";
 import {
   IQAuthError
-} from "./chunk-6I6RM4MN.mjs";
+} from "./chunk-6PJRLRB4.mjs";
 import "./chunk-Y6FXYEAI.mjs";
 
 // src/fastify.ts
@@ -23,7 +24,10 @@ var KNOWN_AUTH_ERRORS = /* @__PURE__ */ new Set([
   "TOKEN_REVOKED",
   "SESSION_EXPIRED",
   "SESSION_INVALID",
-  "AUTH_REQUIRED"
+  "AUTH_REQUIRED",
+  // Task #127 — typed `IQAuthErrorCode` taxonomy.
+  "token_invalid",
+  "token_expired"
 ]);
 function applyResponse(reply, hr) {
   for (const c of hr.cookies) {
@@ -72,6 +76,7 @@ async function iqAuth(fastify, options) {
   const mountHelpers = options.mountHelperRoutes !== false;
   const isPublic = (p) => {
     if (mountHelpers && p.startsWith(mount + "/")) return true;
+    if (options.mountUserinfo && p === `${mount}/me`) return true;
     if (Array.isArray(options.publicPaths)) return options.publicPaths.includes(p);
     if (typeof options.publicPaths === "function") return options.publicPaths(p);
     return false;
@@ -110,13 +115,23 @@ async function iqAuth(fastify, options) {
     fastify.post(`${mount}/refresh`, async (req, reply) => {
       const body = req.body || {};
       const refreshToken = body.refreshToken || readCookie(req, refreshCookie);
-      applyResponse(reply, await handleRefresh(helperConfig, { refreshToken }));
+      const idempotencyToken = req.headers?.["x-iqauth-idempotency"] || body.idempotencyToken;
+      applyResponse(reply, await handleRefresh(helperConfig, { refreshToken, idempotencyToken }));
     });
     fastify.post(`${mount}/signout`, async (req, reply) => {
       const auth = req.headers?.authorization;
       const accessToken = (typeof auth === "string" ? auth.replace(/^Bearer /i, "") : void 0) || readCookie(req, accessCookie);
+      const refreshToken = readCookie(req, refreshCookie);
       const ssoCookieHeader = typeof req.headers?.cookie === "string" ? req.headers.cookie : void 0;
-      applyResponse(reply, await handleSignout(helperConfig, { accessToken, ssoCookieHeader }));
+      const idempotencyToken = req.headers?.["x-iqauth-idempotency"];
+      applyResponse(reply, await handleSignout(helperConfig, { accessToken, refreshToken, idempotencyToken, ssoCookieHeader }));
+    });
+  }
+  if (options.mountUserinfo) {
+    fastify.get(`${mount}/me`, async (req, reply) => {
+      const auth = req.headers?.authorization;
+      const accessToken = (typeof auth === "string" ? auth.replace(/^Bearer /i, "") : void 0) || readCookie(req, accessCookie);
+      applyResponse(reply, await handleUserinfo(helperConfig, { accessToken, req }));
     });
   }
   fastify.decorate("iqauth", { client, issuer });

package/dist/hono.d.mts

@@ -1,4 +1,6 @@
 import { IQAuthHelperConfig } from './server/handlers.mjs';
+import './tokens-CITeoG6P.mjs';
+import './types-XOV9XPVi.mjs';
 
 /**
  * @iqauth/sdk/hono — Hono adapter.

package/dist/hono.d.ts

@@ -1,4 +1,6 @@
 import { IQAuthHelperConfig } from './server/handlers.js';
+import './tokens-Bqhmqq_R.js';
+import './types-XOV9XPVi.js';
 
 /**
  * @iqauth/sdk/hono — Hono adapter.