@julr/sesame 0.2.1 → 0.3.1

package/README.md

@@ -80,17 +80,15 @@ The `SesameScopes` augmentation gives you type-safe scope names throughout your
 Register OAuth routes from your `start/routes.ts` file:
 
 ```ts
-import { SesameManager } from '@julr/sesame'
-
-const sesame = await app.container.make(SesameManager)
+import sesame from '@julr/sesame/services/main'
 
 // OAuth endpoints under /oauth
 router.group(() => {
-  sesame.registerRoutes(router)
+  sesame.registerRoutes()
 }).prefix('/oauth')
 
 // Discovery endpoints at the root
-sesame.registerWellKnownRoutes(router)
+sesame.registerWellKnownRoutes()
 ```
 
 This registers the following endpoints:
@@ -161,7 +159,7 @@ router
 For MCP (Model Context Protocol) servers, register per-resource discovery:
 
 ```ts
-sesame.registerProtectedResource(router, {
+sesame.registerProtectedResource({
   resource: '/api/mcp',
   scopes: ['read:mcp'],
 })
@@ -193,7 +191,8 @@ node ace sesame:purge --retention-hours=168
 You can also call it programmatically:
 
 ```ts
-const sesame = await app.container.make(SesameManager)
+import sesame from '@julr/sesame/services/main'
+
 const result = await sesame.purgeTokens({ retentionHours: 168 })
 ```
 

package/build/{authorize_controller-BNWhlPZQ.js → authorize_controller-CfV9v3R2.js}

@@ -1,4 +1,4 @@
-import { a as OAuthAuthorizationCode, i as OAuthConsent, r as OAuthPendingAuthorizationRequest, t as SesameManager } from "./sesame_manager-CFq4VEIZ.js";
+import { i as OAuthAuthorizationCode, n as OAuthPendingAuthorizationRequest, r as OAuthConsent, t as SesameManager } from "./sesame_manager-Br0DIJgM.js";
 import "./decorate-BKZEjPRg.js";
 import "./oauth_access_token-bsoM5KeU.js";
 import { d as E_UNSUPPORTED_RESPONSE_TYPE, o as E_INVALID_REQUEST, r as E_INVALID_CLIENT } from "./oauth_error-CnJ3L8tf.js";

package/build/commands/sesame_purge.js

@@ -1,4 +1,4 @@
-import { t as SesameManager } from "../sesame_manager-CFq4VEIZ.js";
+import { t as SesameManager } from "../sesame_manager-Br0DIJgM.js";
 import { t as __decorate } from "../decorate-BKZEjPRg.js";
 import "../oauth_access_token-bsoM5KeU.js";
 import { BaseCommand, flags } from "@adonisjs/core/ace";

package/build/{consent_controller-COvvkpHM.js → consent_controller-DBtvczID.js}

@@ -1,4 +1,4 @@
-import { a as OAuthAuthorizationCode, i as OAuthConsent, r as OAuthPendingAuthorizationRequest, t as SesameManager } from "./sesame_manager-CFq4VEIZ.js";
+import { i as OAuthAuthorizationCode, n as OAuthPendingAuthorizationRequest, r as OAuthConsent, t as SesameManager } from "./sesame_manager-Br0DIJgM.js";
 import "./decorate-BKZEjPRg.js";
 import "./oauth_access_token-bsoM5KeU.js";
 import { a as E_INVALID_GRANT, o as E_INVALID_REQUEST, r as E_INVALID_CLIENT } from "./oauth_error-CnJ3L8tf.js";

package/build/index.js

@@ -1,12 +1,11 @@
-import { a as OAuthAuthorizationCode, i as OAuthConsent, o as OAuthRefreshToken, t as SesameManager } from "./sesame_manager-CFq4VEIZ.js";
 import { configure } from "./configure.js";
+import { a as OAuthRefreshToken, i as OAuthAuthorizationCode, r as OAuthConsent, t as SesameManager } from "./sesame_manager-Br0DIJgM.js";
 import "./decorate-BKZEjPRg.js";
 import { t as OAuthAccessToken } from "./oauth_access_token-bsoM5KeU.js";
 import { a as E_INVALID_GRANT, c as E_INVALID_TOKEN, d as E_UNSUPPORTED_RESPONSE_TYPE, f as OAuthError, i as E_INVALID_CLIENT_METADATA, l as E_SERVER_ERROR, n as E_INSUFFICIENT_SCOPE, o as E_INVALID_REQUEST, r as E_INVALID_CLIENT, s as E_INVALID_SCOPE, t as E_ACCESS_DENIED, u as E_UNSUPPORTED_GRANT_TYPE } from "./oauth_error-CnJ3L8tf.js";
 import { t as OAuthClient } from "./oauth_client-BIoY5jBR.js";
 import "./token_service-fhoA4slP.js";
-import { n as OAuthGuard, t as OAuthLucidUserProvider } from "./user_provider-DXAOfv8-.js";
-import { oauthGuard, oauthUserProvider } from "./src/guard/main.js";
+import { i as OAuthGuard, n as oauthUserProvider, r as OAuthLucidUserProvider, t as oauthGuard } from "./main-ix9EOujk.js";
 function defineConfig(config) {
 	return {
 		issuer: config.issuer,

package/build/{introspect_controller-JjAAXFIV.js → introspect_controller-D2SihAxt.js}

@@ -1,4 +1,4 @@
-import { o as OAuthRefreshToken, t as SesameManager } from "./sesame_manager-CFq4VEIZ.js";
+import { a as OAuthRefreshToken, t as SesameManager } from "./sesame_manager-Br0DIJgM.js";
 import "./decorate-BKZEjPRg.js";
 import { t as OAuthAccessToken } from "./oauth_access_token-bsoM5KeU.js";
 import { r as E_INVALID_CLIENT } from "./oauth_error-CnJ3L8tf.js";

package/build/{user_provider-DXAOfv8-.js → main-ix9EOujk.js}

@@ -147,4 +147,15 @@ var OAuthLucidUserProvider = class {
 		return this.createUserForGuard(user);
 	}
 };
-export { OAuthGuard as n, OAuthLucidUserProvider as t };
+function oauthGuard(config) {
+	return { async resolver(name, app) {
+		const emitter = await app.container.make("emitter");
+		const { SesameManager } = await import("./sesame_manager-Blf8pkgS.js");
+		const manager = await app.container.make(SesameManager);
+		return (ctx) => new OAuthGuard(name, ctx, emitter, config.provider, manager, config.resource);
+	} };
+}
+function oauthUserProvider(options) {
+	return new OAuthLucidUserProvider(options);
+}
+export { OAuthGuard as i, oauthUserProvider as n, OAuthLucidUserProvider as r, oauthGuard as t };

package/build/{metadata_controller-BzCjyqUG.js → metadata_controller-CekEP9i9.js}

@@ -1,4 +1,4 @@
-import { t as SesameManager } from "./sesame_manager-CFq4VEIZ.js";
+import { t as SesameManager } from "./sesame_manager-Br0DIJgM.js";
 import "./decorate-BKZEjPRg.js";
 import "./oauth_access_token-bsoM5KeU.js";
 import { l as E_SERVER_ERROR } from "./oauth_error-CnJ3L8tf.js";

package/build/providers/sesame_provider.js

@@ -1,4 +1,4 @@
-import { t as SesameManager } from "../sesame_manager-CFq4VEIZ.js";
+import { t as SesameManager } from "../sesame_manager-Br0DIJgM.js";
 import "../decorate-BKZEjPRg.js";
 import "../oauth_access_token-bsoM5KeU.js";
 var SesameProvider = class {
@@ -6,8 +6,8 @@ var SesameProvider = class {
 		this.app = app;
 	}
 	register() {
-		this.app.container.singleton(SesameManager, () => {
-			return new SesameManager(this.app.config.get("sesame"));
+		this.app.container.singleton(SesameManager, async () => {
+			return new SesameManager(this.app.config.get("sesame"), await this.app.container.make("router"));
 		});
 	}
 };

package/build/{register_controller-DOlN9wNl.js → register_controller-Cmkyy0Pv.js}

@@ -1,4 +1,4 @@
-import { t as SesameManager } from "./sesame_manager-CFq4VEIZ.js";
+import { t as SesameManager } from "./sesame_manager-Br0DIJgM.js";
 import "./decorate-BKZEjPRg.js";
 import "./oauth_access_token-bsoM5KeU.js";
 import { i as E_INVALID_CLIENT_METADATA, o as E_INVALID_REQUEST, s as E_INVALID_SCOPE, t as E_ACCESS_DENIED } from "./oauth_error-CnJ3L8tf.js";

package/build/{revoke_controller-B281b8ZO.js → revoke_controller-CzRid0SB.js}

@@ -1,4 +1,4 @@
-import { o as OAuthRefreshToken, t as SesameManager } from "./sesame_manager-CFq4VEIZ.js";
+import { a as OAuthRefreshToken, t as SesameManager } from "./sesame_manager-Br0DIJgM.js";
 import "./decorate-BKZEjPRg.js";
 import { t as OAuthAccessToken } from "./oauth_access_token-bsoM5KeU.js";
 import { r as E_INVALID_CLIENT } from "./oauth_error-CnJ3L8tf.js";

package/build/services/main.d.ts

@@ -0,0 +1,3 @@
+import { SesameManager } from '../src/sesame_manager.ts';
+declare let sesame: SesameManager;
+export { sesame as default };

package/build/services/main.js

@@ -0,0 +1,9 @@
+import { t as SesameManager } from "../sesame_manager-Br0DIJgM.js";
+import "../decorate-BKZEjPRg.js";
+import "../oauth_access_token-bsoM5KeU.js";
+import app from "@adonisjs/core/services/app";
+let sesame;
+await app.booted(async () => {
+	sesame = await app.container.make(SesameManager);
+});
+export { sesame as default };

package/build/sesame_manager-Blf8pkgS.js

@@ -0,0 +1,4 @@
+import { t as SesameManager } from "./sesame_manager-Br0DIJgM.js";
+import "./decorate-BKZEjPRg.js";
+import "./oauth_access_token-bsoM5KeU.js";
+export { SesameManager };

package/build/{sesame_manager-CFq4VEIZ.js → sesame_manager-Br0DIJgM.js}

@@ -1,26 +1,15 @@
 import { n as json, t as __decorate } from "./decorate-BKZEjPRg.js";
 import { t as OAuthAccessToken } from "./oauth_access_token-bsoM5KeU.js";
-import "node:module";
 import { DateTime } from "luxon";
 import { BaseModel, column } from "@adonisjs/lucid/orm";
-var __defProp = Object.defineProperty;
-var __exportAll = (all, no_symbols) => {
-	let target = {};
-	for (var name in all) __defProp(target, name, {
-		get: all[name],
-		enumerable: true
-	});
-	if (!no_symbols) __defProp(target, Symbol.toStringTag, { value: "Module" });
-	return target;
-};
 const controllers = {
-	token: () => import("./token_controller-ll9sjcvn.js"),
-	authorize: () => import("./authorize_controller-BNWhlPZQ.js"),
-	consent: () => import("./consent_controller-COvvkpHM.js"),
-	introspect: () => import("./introspect_controller-JjAAXFIV.js"),
-	revoke: () => import("./revoke_controller-B281b8ZO.js"),
-	register: () => import("./register_controller-DOlN9wNl.js"),
-	metadata: () => import("./metadata_controller-BzCjyqUG.js"),
+	token: () => import("./token_controller-BEiR1lGn.js"),
+	authorize: () => import("./authorize_controller-CfV9v3R2.js"),
+	consent: () => import("./consent_controller-DBtvczID.js"),
+	introspect: () => import("./introspect_controller-D2SihAxt.js"),
+	revoke: () => import("./revoke_controller-CzRid0SB.js"),
+	register: () => import("./register_controller-Cmkyy0Pv.js"),
+	metadata: () => import("./metadata_controller-CekEP9i9.js"),
 	clientInfo: () => import("./client_info_controller-BucHGx4u.js")
 };
 function registerOAuthRoutes(router) {
@@ -96,11 +85,12 @@ __decorate([column()], OAuthPendingAuthorizationRequest.prototype, "codeChalleng
 __decorate([column()], OAuthPendingAuthorizationRequest.prototype, "codeChallengeMethod", void 0);
 __decorate([column.dateTime()], OAuthPendingAuthorizationRequest.prototype, "expiresAt", void 0);
 __decorate([column.dateTime({ autoCreate: true })], OAuthPendingAuthorizationRequest.prototype, "createdAt", void 0);
-var sesame_manager_exports = /* @__PURE__ */ __exportAll({ SesameManager: () => SesameManager });
 var SesameManager = class {
 	#config;
-	constructor(config) {
+	#router;
+	constructor(config, router) {
 		this.#config = config;
+		this.#router = router;
 	}
 	get config() {
 		return this.#config;
@@ -151,15 +141,15 @@ var SesameManager = class {
 			pendingRequests
 		};
 	}
-	registerRoutes(router) {
-		registerOAuthRoutes(router);
+	registerRoutes() {
+		registerOAuthRoutes(this.#router);
 	}
-	registerWellKnownRoutes(router) {
-		registerWellKnownRoutes(router);
+	registerWellKnownRoutes() {
+		registerWellKnownRoutes(this.#router);
 	}
-	registerProtectedResource(router, options) {
+	registerProtectedResource(options) {
 		const wellKnownPath = `/.well-known/oauth-protected-resource${options.resource}`;
-		router.get(wellKnownPath, async (ctx) => {
+		this.#router.get(wellKnownPath, async (ctx) => {
 			ctx.response.header("Cache-Control", "public, max-age=15, stale-while-revalidate=15, stale-if-error=86400");
 			return {
 				resource: `${this.#config.issuer}${options.resource}`,
@@ -173,4 +163,4 @@ var SesameManager = class {
 		return result.then((r) => Array.isArray(r) ? Number(r[0] ?? 0) : Number(r));
 	}
 };
-export { OAuthAuthorizationCode as a, OAuthConsent as i, sesame_manager_exports as n, OAuthRefreshToken as o, OAuthPendingAuthorizationRequest as r, SesameManager as t };
+export { OAuthRefreshToken as a, OAuthAuthorizationCode as i, OAuthPendingAuthorizationRequest as n, OAuthConsent as r, SesameManager as t };

package/build/src/guard/main.js

@@ -2,16 +2,5 @@ import "../../decorate-BKZEjPRg.js";
 import "../../oauth_access_token-bsoM5KeU.js";
 import "../../oauth_client-BIoY5jBR.js";
 import "../../token_service-fhoA4slP.js";
-import { n as OAuthGuard, t as OAuthLucidUserProvider } from "../../user_provider-DXAOfv8-.js";
-function oauthGuard(config) {
-	return { async resolver(name, app) {
-		const emitter = await app.container.make("emitter");
-		const { SesameManager } = await import("../../sesame_manager-CFq4VEIZ.js").then((n) => n.n);
-		const manager = await app.container.make(SesameManager);
-		return (ctx) => new OAuthGuard(name, ctx, emitter, config.provider, manager, config.resource);
-	} };
-}
-function oauthUserProvider(options) {
-	return new OAuthLucidUserProvider(options);
-}
+import { i as OAuthGuard, n as oauthUserProvider, r as OAuthLucidUserProvider, t as oauthGuard } from "../../main-ix9EOujk.js";
 export { OAuthGuard, OAuthLucidUserProvider, oauthGuard, oauthUserProvider };

package/build/src/sesame_manager.d.ts

@@ -14,7 +14,7 @@ export interface PurgeResult {
  */
 export declare class SesameManager {
     #private;
-    constructor(config: ResolvedSesameConfig);
+    constructor(config: ResolvedSesameConfig, router: Router);
     get config(): ResolvedSesameConfig;
     /**
      * Check if a scope is registered in the server configuration.
@@ -71,18 +71,18 @@ export declare class SesameManager {
      * @example
      * ```ts
      * router.group(() => {
-     *   sesame.registerRoutes(router)
+     *   sesame.registerRoutes()
      * }).prefix('/oauth')
      * ```
      */
-    registerRoutes(router: Router): void;
+    registerRoutes(): void;
     /**
      * Register well-known discovery routes at the root level.
      *
      * Must be called outside any prefix group so endpoints
      * remain at `/.well-known/...`.
      */
-    registerWellKnownRoutes(router: Router): void;
+    registerWellKnownRoutes(): void;
     /**
      * Register a `/.well-known/oauth-protected-resource` endpoint
      * for a specific resource path (RFC 9728). Useful for MCP
@@ -90,7 +90,7 @@ export declare class SesameManager {
      *
      * @see https://datatracker.ietf.org/doc/html/rfc9728
      */
-    registerProtectedResource(router: Router, options: {
+    registerProtectedResource(options: {
         resource: string;
         scopes?: Scope[];
     }): void;

package/build/{token_controller-ll9sjcvn.js → token_controller-BEiR1lGn.js}

@@ -1,4 +1,4 @@
-import { a as OAuthAuthorizationCode, o as OAuthRefreshToken, t as SesameManager } from "./sesame_manager-CFq4VEIZ.js";
+import { a as OAuthRefreshToken, i as OAuthAuthorizationCode, t as SesameManager } from "./sesame_manager-Br0DIJgM.js";
 import "./decorate-BKZEjPRg.js";
 import { t as OAuthAccessToken } from "./oauth_access_token-bsoM5KeU.js";
 import { a as E_INVALID_GRANT, o as E_INVALID_REQUEST, r as E_INVALID_CLIENT, s as E_INVALID_SCOPE, u as E_UNSUPPORTED_GRANT_TYPE } from "./oauth_error-CnJ3L8tf.js";

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@julr/sesame",
   "description": "OAuth 2.1 + OIDC server for AdonisJS",
-  "version": "0.2.1",
+  "version": "0.3.1",
   "engines": {
     "node": ">=24.0.0"
   },
@@ -20,6 +20,7 @@
     "./guard": "./build/src/guard/main.js",
     "./scope_middleware": "./build/src/middleware/scope_middleware.js",
     "./any_scope_middleware": "./build/src/middleware/any_scope_middleware.js",
+    "./services/main": "./build/services/main.js",
     "./commands/*": "./build/commands/*.js",
     "./commands": "./build/commands/main.js"
   },
@@ -96,6 +97,7 @@
       "./index.ts",
       "./configure.ts",
       "./providers/sesame_provider.ts",
+      "./services/main.ts",
       "./src/guard/main.ts",
       "./commands/sesame_purge.ts",
       "./src/middleware/scope_middleware.ts",