@jskit-ai/auth-core 0.1.107 → 0.1.109

package/package.descriptor.mjs

@@ -1,7 +1,7 @@
 export default Object.freeze({
   "packageVersion": 1,
   "packageId": "@jskit-ai/auth-core",
-  "version": "0.1.107",
+  "version": "0.1.109",
   "kind": "runtime",
   "dependsOn": [
     "@jskit-ai/value-app-config-shared"
@@ -74,7 +74,7 @@ export default Object.freeze({
   "mutations": {
     "dependencies": {
       "runtime": {
-        "@jskit-ai/kernel": "0.1.109",
+        "@jskit-ai/kernel": "0.1.111",
         "@fastify/cookie": "^11.0.2",
         "@fastify/csrf-protection": "^7.1.0",
         "@fastify/rate-limit": "^10.3.0"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jskit-ai/auth-core",
-  "version": "0.1.107",
+  "version": "0.1.109",
   "type": "module",
   "scripts": {
     "test": "node --test"
@@ -54,7 +54,7 @@
     "./shared/commands/authSessionReadCommand": "./src/shared/commands/authSessionReadCommand.js"
   },
   "dependencies": {
-    "@jskit-ai/kernel": "0.1.109",
+    "@jskit-ai/kernel": "0.1.111",
     "@fastify/cookie": "^11.0.2",
     "@fastify/csrf-protection": "^7.1.0",
     "@fastify/rate-limit": "^10.3.0",

package/src/server/authServiceDecoratorRegistry.js

@@ -49,8 +49,22 @@ function resolveAuthServiceDecorators(scope) {
     .map((entry) => entry.decorator);
 }
 
+function applyAuthServiceDecorators(scope, authService) {
+  let decoratedAuthService = authService;
+
+  for (const decorator of resolveAuthServiceDecorators(scope)) {
+    decoratedAuthService = decorator.decorateAuthService(decoratedAuthService);
+    if (!decoratedAuthService || typeof decoratedAuthService !== "object") {
+      throw new Error(`Auth service decorator "${decorator.decoratorId}" must return an auth service object.`);
+    }
+  }
+
+  return decoratedAuthService;
+}
+
 export {
   AUTH_SERVICE_DECORATOR_TAG,
+  applyAuthServiceDecorators,
   registerAuthServiceDecorator,
   resolveAuthServiceDecorators
 };

package/test/authServiceDecoratorRegistry.test.js

@@ -3,6 +3,7 @@ import test from "node:test";
 import { createApplication } from "@jskit-ai/kernel/_testable";
 import {
   AUTH_SERVICE_DECORATOR_TAG,
+  applyAuthServiceDecorators,
   registerAuthServiceDecorator,
   resolveAuthServiceDecorators
 } from "../src/server/authServiceDecoratorRegistry.js";
@@ -39,13 +40,26 @@ test("auth service decorator registry resolves decorators in order", () => {
     ["alpha", "zeta"]
   );
 
-  const decorated = decorators.reduce(
-    (service, decorator) => decorator.decorateAuthService(service),
-    { trace: [] }
-  );
+  const decorated = applyAuthServiceDecorators(app, { trace: [] });
   assert.deepEqual(decorated.trace, ["alpha", "zeta"]);
 });
 
+test("auth service decorator registry rejects invalid decorated services", () => {
+  const app = createApplication();
+
+  registerAuthServiceDecorator(app, "test.auth.decorator.invalid", () => ({
+    decoratorId: "invalid",
+    decorateAuthService() {
+      return null;
+    }
+  }));
+
+  assert.throws(
+    () => applyAuthServiceDecorators(app, {}),
+    /Auth service decorator "invalid" must return an auth service object/
+  );
+});
+
 test("auth service decorator registry exports canonical tag", () => {
   assert.equal(AUTH_SERVICE_DECORATOR_TAG, "jskit.auth.service.decorators");
 });