@jskit-ai/auth-core 0.1.149 → 0.1.151

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jskit-ai/auth-core",
-  "version": "0.1.149",
+  "version": "0.1.151",
   "type": "module",
   "scripts": {
     "test": "node --test"
@@ -59,7 +59,7 @@
     "@fastify/cookie": "^11.0.2",
     "@fastify/csrf-protection": "^7.1.0",
     "@fastify/rate-limit": "^10.3.0",
-    "@jskit-ai/kernel": "0.1.151",
+    "@jskit-ai/kernel": "0.1.153",
     "json-rest-schema": "^1.0.17"
   },
   "jskit": {
@@ -132,7 +132,7 @@
     "mutations": {
       "dependencies": {
         "runtime": {
-          "@jskit-ai/kernel": "0.1.151",
+          "@jskit-ai/kernel": "0.1.153",
           "@fastify/cookie": "^11.0.2",
           "@fastify/csrf-protection": "^7.1.0",
           "@fastify/rate-limit": "^10.3.0"

package/src/server/authActor.js

@@ -24,19 +24,13 @@ function createAuthIdentityId(provider, providerUserId) {
 
 function normalizeAuthActor(value = {}, options = {}) {
   const source = value && typeof value === "object" && !Array.isArray(value) ? value : {};
-  const provider = normalizeAuthProviderId(source.provider || source.authProvider || options.provider, {
+  const provider = normalizeAuthProviderId(source.provider || options.provider, {
     fallback: normalizeAuthProviderId(options.provider, { fallback: "unknown" })
   });
-  const providerUserId = normalizeProviderUserId(
-    source.providerUserId ||
-      source.authProviderUserSid ||
-      source.sub ||
-      source.userId ||
-      source.id
-  );
+  const providerUserId = normalizeProviderUserId(source.providerUserId);
   const email = normalizeEmail(source.email || "");
-  const displayName = normalizeDisplayName(source.displayName || source.username || source.name, email);
-  const appUserId = normalizeOpaqueId(source.appUserId || source.profileId || source.userProfileId, {
+  const displayName = normalizeDisplayName(source.displayName, email);
+  const appUserId = normalizeOpaqueId(source.appUserId, {
     fallback: null
   });
   const id = appUserId || providerUserId;
@@ -58,40 +52,19 @@ function normalizeAuthActor(value = {}, options = {}) {
   });
 }
 
-function buildLegacyProfileFromActor(actorLike) {
-  const actor = normalizeAuthActor(actorLike);
-  if (!actor) {
-    return null;
-  }
-  return Object.freeze({
-    id: actor.id || actor.appUserId || actor.providerUserId || actor.authIdentityId,
-    email: actor.email,
-    displayName: actor.displayName,
-    authProvider: actor.provider,
-    authProviderUserSid: actor.providerUserId
-  });
-}
-
 function normalizeAuthResult(value = {}, options = {}) {
   const source = value && typeof value === "object" && !Array.isArray(value) ? value : {};
-  const actor = normalizeAuthActor(source.actor, options) || normalizeAuthActor(source.profile, {
-    ...options,
-    profileSource: "users"
-  });
-  const profile = source.profile && typeof source.profile === "object"
-    ? source.profile
-    : buildLegacyProfileFromActor(actor);
+  const actor = normalizeAuthActor(source.actor, options);
+  const { profile: _profile, ...result } = source;
 
   return Object.freeze({
-    ...source,
-    ...(actor ? { actor } : {}),
-    ...(profile ? { profile } : {})
+    ...result,
+    ...(actor ? { actor } : {})
   });
 }
 
 export {
   createAuthIdentityId,
   normalizeAuthActor,
-  buildLegacyProfileFromActor,
   normalizeAuthResult
 };

package/src/server/lib/authPolicySupport.js

@@ -22,15 +22,10 @@ function assertAuthPolicyDeps(deps = {}) {
 
 function normalizeActorResolution(result) {
   const source = asObject(result);
-  const actor = Object.hasOwn(source, "actor")
-    ? source.actor
-    : Object.hasOwn(source, "profile")
-      ? source.profile
-      : null;
 
   return {
     authenticated: Boolean(source.authenticated),
-    actor,
+    actor: Object.hasOwn(source, "actor") ? source.actor : null,
     transientFailure: Boolean(source.transientFailure)
   };
 }

package/src/server/lib/index.js

@@ -3,7 +3,6 @@ export { withAuthPolicy, mergeAuthPolicy } from "./routeMeta.js";
 export {
   createAuthIdentityId,
   normalizeAuthActor,
-  buildLegacyProfileFromActor,
   normalizeAuthResult
 } from "../authActor.js";
 export {

package/src/server/services/authSessionEventsService.js

@@ -4,8 +4,7 @@ function resolveActorId(context = {}) {
   return normalizeOpaqueId(
     context?.actor?.id ||
       context?.actor?.appUserId ||
-      context?.actor?.providerUserId ||
-      context?.profile?.id,
+      context?.actor?.providerUserId,
     { fallback: null }
   );
 }

package/src/shared/authSecurityStatus.js

@@ -56,12 +56,7 @@ function normalizeAuthSecurityStatus(value = {}) {
   const authMethods = (Array.isArray(source.authMethods) ? source.authMethods : [])
     .map((entry) => normalizeAuthMethodStatus(entry))
     .filter(Boolean);
-  const policySource =
-    source.policy && typeof source.policy === "object"
-      ? source.policy
-      : source.authPolicy && typeof source.authPolicy === "object"
-        ? source.authPolicy
-        : {};
+  const policySource = source.policy && typeof source.policy === "object" ? source.policy : {};
   const minimumEnabledMethods = Number.isInteger(Number(policySource.minimumEnabledMethods))
     ? Math.max(1, Number(policySource.minimumEnabledMethods))
     : AUTH_METHOD_MINIMUM_ENABLED;
@@ -87,7 +82,6 @@ function normalizeAuthSecurityStatus(value = {}) {
           methods: Object.freeze([])
         }),
     policy,
-    authPolicy: policy,
     actions,
     authMethods: Object.freeze(authMethods)
   });

package/test/authContract.test.js

@@ -10,7 +10,6 @@ import {
   normalizeAuthSecurityStatus
 } from "../src/shared/authSecurityStatus.js";
 import {
-  buildLegacyProfileFromActor,
   normalizeAuthActor,
   normalizeAuthResult
 } from "../src/server/authActor.js";
@@ -85,10 +84,10 @@ test("normalizeAuthCapabilities returns one provider-neutral feature shape", ()
   );
 });
 
-test("normalizeAuthActor builds the stable actor and legacy profile bridge", () => {
+test("normalizeAuthActor builds the canonical actor", () => {
   const actor = normalizeAuthActor({
-    authProvider: "supabase",
-    authProviderUserSid: "abc-123",
+    provider: "supabase",
+    providerUserId: "abc-123",
     email: " ADA@example.COM ",
     displayName: "Ada",
     appUserId: 42,
@@ -105,14 +104,12 @@ test("normalizeAuthActor builds the stable actor and legacy profile bridge", ()
     appUserId: "42",
     profileSource: "users"
   });
-  assert.deepEqual(buildLegacyProfileFromActor(actor), {
-    id: "42",
-    email: "ada@example.com",
-    displayName: "Ada",
-    authProvider: "supabase",
-    authProviderUserSid: "abc-123"
-  });
-  assert.deepEqual(normalizeAuthResult({ authenticated: true, actor }).profile, buildLegacyProfileFromActor(actor));
+  assert.deepEqual(normalizeAuthResult({ authenticated: true, actor }).actor, actor);
+  assert.equal(Object.hasOwn(normalizeAuthResult({ authenticated: true, actor }), "profile"), false);
+  assert.equal(
+    Object.hasOwn(normalizeAuthResult({ authenticated: true, actor, profile: actor }), "profile"),
+    false
+  );
 });
 
 test("normalizeAuthActor preserves opaque app user ids", () => {
@@ -126,7 +123,6 @@ test("normalizeAuthActor preserves opaque app user ids", () => {
 
   assert.equal(actor.id, "app-user-1");
   assert.equal(actor.appUserId, "app-user-1");
-  assert.equal(buildLegacyProfileFromActor(actor).id, "app-user-1");
 });
 
 test("normalizeAuthActor exposes projected app user id as the stable actor id", () => {
@@ -154,7 +150,7 @@ test("normalizeAuthActor falls back to provider user id when no app user is proj
   assert.equal(actor.providerUserId, "provider-user-1");
 });
 
-test("normalizeAuthSecurityStatus emits policy and legacy authPolicy aliases", () => {
+test("normalizeAuthSecurityStatus emits the canonical policy", () => {
   const status = buildSecurityStatusFromAuthMethodsStatus(
     {
       methods: [
@@ -181,7 +177,7 @@ test("normalizeAuthSecurityStatus emits policy and legacy authPolicy aliases", (
     minimumEnabledMethods: 1,
     enabledMethodsCount: 1
   });
-  assert.equal(status.authPolicy, status.policy);
+  assert.equal(Object.hasOwn(status, "authPolicy"), false);
   assert.equal(status.actions.changePassword, true);
   assert.equal(status.actions.linkProvider, false);
   assert.deepEqual(normalizeAuthSecurityStatus(status), status);