@korajs/auth 0.3.2 → 0.4.0

package/dist/index.cjs

@@ -86,18 +86,18 @@ function decodeJwtPayload(token) {
 }
 function isTokenExpired(token) {
   const payload = decodeJwtPayload(token);
-  if (!payload || typeof payload["exp"] !== "number") {
+  if (!payload || typeof payload.exp !== "number") {
     return true;
   }
   const nowSeconds = Math.floor(Date.now() / 1e3);
-  return payload["exp"] <= nowSeconds + EXPIRY_BUFFER_SECONDS;
+  return payload.exp <= nowSeconds + EXPIRY_BUFFER_SECONDS;
 }
 function getUserIdFromToken(token) {
   const payload = decodeJwtPayload(token);
-  if (!payload || typeof payload["sub"] !== "string") {
+  if (!payload || typeof payload.sub !== "string") {
     return null;
   }
-  return payload["sub"];
+  return payload.sub;
 }
 function createTokenStorage(prefix) {
   let useLocalStorage = false;
@@ -445,7 +445,7 @@ var AuthClient = class {
       headers["Content-Type"] = "application/json";
     }
     if (options.token) {
-      headers["Authorization"] = `Bearer ${options.token}`;
+      headers.Authorization = `Bearer ${options.token}`;
     }
     let response;
     try {
@@ -466,23 +466,23 @@ var AuthClient = class {
       let serverError;
       try {
         const body = await response.json();
-        if (typeof body["error"] === "string") {
-          errorMessage = body["error"];
+        if (typeof body.error === "string") {
+          errorMessage = body.error;
           serverError = errorMessage;
-        } else if (typeof body["message"] === "string") {
-          errorMessage = body["message"];
+        } else if (typeof body.message === "string") {
+          errorMessage = body.message;
           serverError = errorMessage;
         }
       } catch {
       }
-      throw new AuthError(
-        errorMessage,
-        "AUTH_SERVER_ERROR",
-        { path, status: response.status, serverError }
-      );
+      throw new AuthError(errorMessage, "AUTH_SERVER_ERROR", {
+        path,
+        status: response.status,
+        serverError
+      });
     }
     const json = await response.json();
-    const data = json["data"] !== void 0 ? json["data"] : json;
+    const data = json.data !== void 0 ? json.data : json;
     return data;
   }
 };
@@ -668,10 +668,9 @@ var OrgClient = class {
    * List pending invitations for the current user's email.
    */
   async listMyInvitations(email) {
-    return this.request(
-      `/invitations?email=${encodeURIComponent(email)}`,
-      { method: "GET" }
-    );
+    return this.request(`/invitations?email=${encodeURIComponent(email)}`, {
+      method: "GET"
+    });
   }
   // --- Subscriptions ---
   /**
@@ -716,18 +715,17 @@ var OrgClient = class {
         body: options.body ? JSON.stringify(options.body) : void 0
       });
     } catch (cause) {
-      throw new OrgClientError(
-        `Network request to ${path} failed.`,
-        "ORG_NETWORK_ERROR",
-        { path, cause: cause instanceof Error ? cause.message : String(cause) }
-      );
+      throw new OrgClientError(`Network request to ${path} failed.`, "ORG_NETWORK_ERROR", {
+        path,
+        cause: cause instanceof Error ? cause.message : String(cause)
+      });
     }
     if (!response.ok) {
       let errorMessage = `Server returned HTTP ${response.status}`;
       try {
         const body = await response.json();
-        if (typeof body["error"] === "string") {
-          errorMessage = body["error"];
+        if (typeof body.error === "string") {
+          errorMessage = body.error;
         }
       } catch {
       }
@@ -905,10 +903,9 @@ async function computePublicKeyThumbprint(publicKeyJwk) {
     const hashBuffer = await globalThis.crypto.subtle.digest("SHA-256", encoded);
     return toBase64Url(hashBuffer);
   } catch (cause) {
-    throw new DeviceIdentityError(
-      "Failed to compute SHA-256 thumbprint of the public key JWK.",
-      { cause: cause instanceof Error ? cause.message : String(cause) }
-    );
+    throw new DeviceIdentityError("Failed to compute SHA-256 thumbprint of the public key JWK.", {
+      cause: cause instanceof Error ? cause.message : String(cause)
+    });
   }
 }
 
@@ -962,10 +959,9 @@ var IndexedDBDeviceKeyStore = class {
       request.onerror = () => {
         this.dbPromise = null;
         reject(
-          new DeviceKeyStoreError(
-            "Failed to open IndexedDB database for device key storage.",
-            { error: request.error?.message }
-          )
+          new DeviceKeyStoreError("Failed to open IndexedDB database for device key storage.", {
+            error: request.error?.message
+          })
         );
       };
       request.onblocked = () => {
@@ -992,21 +988,18 @@ var IndexedDBDeviceKeyStore = class {
         };
         tx.onerror = () => {
           reject(
-            new DeviceKeyStoreError(
-              `Failed to save key pair for device "${deviceId}".`,
-              { deviceId, error: tx.error?.message }
-            )
+            new DeviceKeyStoreError(`Failed to save key pair for device "${deviceId}".`, {
+              deviceId,
+              error: tx.error?.message
+            })
           );
         };
       } catch (cause) {
         reject(
-          new DeviceKeyStoreError(
-            `Failed to save key pair for device "${deviceId}".`,
-            {
-              deviceId,
-              cause: cause instanceof Error ? cause.message : String(cause)
-            }
-          )
+          new DeviceKeyStoreError(`Failed to save key pair for device "${deviceId}".`, {
+            deviceId,
+            cause: cause instanceof Error ? cause.message : String(cause)
+          })
         );
       }
     });
@@ -1025,21 +1018,18 @@ var IndexedDBDeviceKeyStore = class {
         };
         request.onerror = () => {
           reject(
-            new DeviceKeyStoreError(
-              `Failed to load key pair for device "${deviceId}".`,
-              { deviceId, error: request.error?.message }
-            )
+            new DeviceKeyStoreError(`Failed to load key pair for device "${deviceId}".`, {
+              deviceId,
+              error: request.error?.message
+            })
           );
         };
       } catch (cause) {
         reject(
-          new DeviceKeyStoreError(
-            `Failed to load key pair for device "${deviceId}".`,
-            {
-              deviceId,
-              cause: cause instanceof Error ? cause.message : String(cause)
-            }
-          )
+          new DeviceKeyStoreError(`Failed to load key pair for device "${deviceId}".`, {
+            deviceId,
+            cause: cause instanceof Error ? cause.message : String(cause)
+          })
         );
       }
     });
@@ -1057,21 +1047,18 @@ var IndexedDBDeviceKeyStore = class {
         };
         tx.onerror = () => {
           reject(
-            new DeviceKeyStoreError(
-              `Failed to delete key pair for device "${deviceId}".`,
-              { deviceId, error: tx.error?.message }
-            )
+            new DeviceKeyStoreError(`Failed to delete key pair for device "${deviceId}".`, {
+              deviceId,
+              error: tx.error?.message
+            })
           );
         };
       } catch (cause) {
         reject(
-          new DeviceKeyStoreError(
-            `Failed to delete key pair for device "${deviceId}".`,
-            {
-              deviceId,
-              cause: cause instanceof Error ? cause.message : String(cause)
-            }
-          )
+          new DeviceKeyStoreError(`Failed to delete key pair for device "${deviceId}".`, {
+            deviceId,
+            cause: cause instanceof Error ? cause.message : String(cause)
+          })
         );
       }
     });
@@ -1097,13 +1084,10 @@ var IndexedDBDeviceKeyStore = class {
         };
       } catch (cause) {
         reject(
-          new DeviceKeyStoreError(
-            `Failed to check if key pair exists for device "${deviceId}".`,
-            {
-              deviceId,
-              cause: cause instanceof Error ? cause.message : String(cause)
-            }
-          )
+          new DeviceKeyStoreError(`Failed to check if key pair exists for device "${deviceId}".`, {
+            deviceId,
+            cause: cause instanceof Error ? cause.message : String(cause)
+          })
         );
       }
     });
@@ -1210,15 +1194,15 @@ var TokenStore = class {
         return null;
       }
       const record = parsed;
-      if (typeof record["accessToken"] !== "string" || typeof record["refreshToken"] !== "string") {
+      if (typeof record.accessToken !== "string" || typeof record.refreshToken !== "string") {
         return null;
       }
       const tokens = {
-        accessToken: record["accessToken"],
-        refreshToken: record["refreshToken"]
+        accessToken: record.accessToken,
+        refreshToken: record.refreshToken
       };
-      if (typeof record["deviceCredential"] === "string") {
-        tokens.deviceCredential = record["deviceCredential"];
+      if (typeof record.deviceCredential === "string") {
+        tokens.deviceCredential = record.deviceCredential;
       }
       return tokens;
     } catch {
@@ -1507,11 +1491,11 @@ var EncryptedTokenStore = class {
         return null;
       }
       const record = parsed;
-      if (typeof record["iv"] !== "string" || typeof record["data"] !== "string") {
+      if (typeof record.iv !== "string" || typeof record.data !== "string") {
         return null;
       }
-      const iv = fromBase64Url2(record["iv"]);
-      const ciphertext = fromBase64Url2(record["data"]);
+      const iv = fromBase64Url2(record.iv);
+      const ciphertext = fromBase64Url2(record.data);
       const plaintextBytes = await decryptData(this.key, ciphertext, iv);
       const json = new TextDecoder().decode(plaintextBytes);
       const tokenData = JSON.parse(json);
@@ -1519,15 +1503,15 @@ var EncryptedTokenStore = class {
         return null;
       }
       const tokenRecord = tokenData;
-      if (typeof tokenRecord["accessToken"] !== "string" || typeof tokenRecord["refreshToken"] !== "string") {
+      if (typeof tokenRecord.accessToken !== "string" || typeof tokenRecord.refreshToken !== "string") {
         return null;
       }
       const tokens = {
-        accessToken: tokenRecord["accessToken"],
-        refreshToken: tokenRecord["refreshToken"]
+        accessToken: tokenRecord.accessToken,
+        refreshToken: tokenRecord.refreshToken
       };
-      if (typeof tokenRecord["deviceCredential"] === "string") {
-        tokens.deviceCredential = tokenRecord["deviceCredential"];
+      if (typeof tokenRecord.deviceCredential === "string") {
+        tokens.deviceCredential = tokenRecord.deviceCredential;
       }
       return tokens;
     } catch {
@@ -1753,9 +1737,7 @@ function extractPublicKeyFromAttestationObject(attestationObject) {
   const topMap = decoded.value;
   const authData = topMap.get("authData");
   if (!(authData instanceof Uint8Array)) {
-    throw new PasskeyError(
-      "Invalid attestation object: authData is missing or not a byte string."
-    );
+    throw new PasskeyError("Invalid attestation object: authData is missing or not a byte string.");
   }
   let offset = 0;
   offset += 32;
@@ -1777,53 +1759,54 @@ function extractPublicKeyFromAttestationObject(attestationObject) {
   return authData.slice(offset, offset + coseKeyLength);
 }
 function decodeCbor(data, offset) {
-  if (offset >= data.length) {
+  let pos = offset;
+  if (pos >= data.length) {
     throw new PasskeyError("CBOR decode error: unexpected end of data.");
   }
-  const initialByte = data[offset];
+  const initialByte = data[pos];
   const majorType = initialByte >> 5;
   const additionalInfo = initialByte & 31;
-  offset += 1;
+  pos += 1;
   let argument;
   if (additionalInfo < 24) {
     argument = additionalInfo;
   } else if (additionalInfo === 24) {
-    argument = data[offset];
-    offset += 1;
+    argument = data[pos];
+    pos += 1;
   } else if (additionalInfo === 25) {
-    argument = data[offset] << 8 | data[offset + 1];
-    offset += 2;
+    argument = data[pos] << 8 | data[pos + 1];
+    pos += 2;
   } else if (additionalInfo === 26) {
-    argument = data[offset] << 24 | data[offset + 1] << 16 | data[offset + 2] << 8 | data[offset + 3];
+    argument = data[pos] << 24 | data[pos + 1] << 16 | data[pos + 2] << 8 | data[pos + 3];
     argument = argument >>> 0;
-    offset += 4;
+    pos += 4;
   } else {
     throw new PasskeyError(
-      `CBOR decode error: unsupported additional info ${additionalInfo} at byte ${offset - 1}. This CBOR decoder only supports definite-length encodings.`
+      `CBOR decode error: unsupported additional info ${additionalInfo} at byte ${pos - 1}. This CBOR decoder only supports definite-length encodings.`
     );
   }
   switch (majorType) {
     // Major type 0: Unsigned integer
     case 0:
-      return { value: argument, offset };
+      return { value: argument, offset: pos };
     // Major type 1: Negative integer (-1 - argument)
     case 1:
-      return { value: -1 - argument, offset };
+      return { value: -1 - argument, offset: pos };
     // Major type 2: Byte string
     case 2: {
-      const bytes = data.slice(offset, offset + argument);
-      return { value: bytes, offset: offset + argument };
+      const bytes = data.slice(pos, pos + argument);
+      return { value: bytes, offset: pos + argument };
     }
     // Major type 3: Text string (UTF-8)
     case 3: {
-      const textBytes = data.slice(offset, offset + argument);
+      const textBytes = data.slice(pos, pos + argument);
       const text = new TextDecoder().decode(textBytes);
-      return { value: text, offset: offset + argument };
+      return { value: text, offset: pos + argument };
     }
     // Major type 4: Array
     case 4: {
       const arr = [];
-      let currentOffset = offset;
+      let currentOffset = pos;
       for (let i = 0; i < argument; i++) {
         const item = decodeCbor(data, currentOffset);
         arr.push(item.value);
@@ -1834,7 +1817,7 @@ function decodeCbor(data, offset) {
     // Major type 5: Map
     case 5: {
       const map = /* @__PURE__ */ new Map();
-      let currentOffset = offset;
+      let currentOffset = pos;
       for (let i = 0; i < argument; i++) {
         const keyResult = decodeCbor(data, currentOffset);
         const valResult = decodeCbor(data, keyResult.offset);
@@ -1845,7 +1828,7 @@ function decodeCbor(data, offset) {
     }
     default:
       throw new PasskeyError(
-        `CBOR decode error: unsupported major type ${majorType} at byte ${offset - 1}. This CBOR decoder only supports types 0-5 (integers, byte/text strings, arrays, maps).`
+        `CBOR decode error: unsupported major type ${majorType} at byte ${pos - 1}. This CBOR decoder only supports types 0-5 (integers, byte/text strings, arrays, maps).`
       );
   }
 }
@@ -2170,14 +2153,11 @@ var OperationEncryptor = class {
       if (cause instanceof OperationEncryptionError) {
         throw cause;
       }
-      throw new OperationEncryptionError(
-        `Failed to encrypt operation ${fieldName} field.`,
-        {
-          operationId,
-          fieldName,
-          cause: cause instanceof Error ? cause.message : String(cause)
-        }
-      );
+      throw new OperationEncryptionError(`Failed to encrypt operation ${fieldName} field.`, {
+        operationId,
+        fieldName,
+        cause: cause instanceof Error ? cause.message : String(cause)
+      });
     }
   }
   async decryptField(field, operationId, fieldName) {
@@ -2201,10 +2181,10 @@ var OperationEncryptor = class {
       const json = new TextDecoder().decode(plaintextBytes);
       const parsed = JSON.parse(json);
       if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) {
-        throw new OperationEncryptionError(
-          `Decrypted ${fieldName} is not a valid record object.`,
-          { operationId, fieldName }
-        );
+        throw new OperationEncryptionError(`Decrypted ${fieldName} is not a valid record object.`, {
+          operationId,
+          fieldName
+        });
       }
       return parsed;
     } catch (cause) {
@@ -2229,7 +2209,7 @@ function isEncryptedEnvelope(field) {
   if (field === null || typeof field !== "object") {
     return false;
   }
-  return field[ENCRYPTED_MARKER] === true && typeof field["ciphertext"] === "string" && typeof field["iv"] === "string" && field["algorithm"] === "AES-256-GCM";
+  return field[ENCRYPTED_MARKER] === true && typeof field.ciphertext === "string" && typeof field.iv === "string" && field.algorithm === "AES-256-GCM";
 }
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {