@korajs/auth 1.0.0-beta.1 → 1.0.0-beta.11

package/dist/index.d.cts

@@ -43,6 +43,7 @@ declare function createKoraAuth(options: CreateKoraAuthOptions): AuthClient;
  */
 interface AuthSyncClient {
     getAccessToken(): Promise<string | null>;
+    readonly state?: AuthState;
     onAuthChange?(callback: (state: AuthState) => void): () => void;
 }
 /**
@@ -68,6 +69,8 @@ interface CreateKoraAuthSyncOptions {
      * Defaults to {@link extractScopeValuesFromClaims}.
      */
     scopeFromClaims?: (claims: Record<string, unknown>) => Record<string, unknown>;
+    /** Signed-out behavior. Authenticated-only sync is suspended by default. */
+    anonymous?: 'suspend' | 'allow';
 }
 /**
  * Creates a sync auth binding for `createApp({ sync: { authClient: binding } })`.

package/dist/index.d.ts

@@ -43,6 +43,7 @@ declare function createKoraAuth(options: CreateKoraAuthOptions): AuthClient;
  */
 interface AuthSyncClient {
     getAccessToken(): Promise<string | null>;
+    readonly state?: AuthState;
     onAuthChange?(callback: (state: AuthState) => void): () => void;
 }
 /**
@@ -68,6 +69,8 @@ interface CreateKoraAuthSyncOptions {
      * Defaults to {@link extractScopeValuesFromClaims}.
      */
     scopeFromClaims?: (claims: Record<string, unknown>) => Record<string, unknown>;
+    /** Signed-out behavior. Authenticated-only sync is suspended by default. */
+    anonymous?: 'suspend' | 'allow';
 }
 /**
  * Creates a sync auth binding for `createApp({ sync: { authClient: binding } })`.

package/dist/index.js

@@ -1007,13 +1007,26 @@ function readDeviceIdFromClaims(claims) {
   return typeof dev === "string" && dev.length > 0 ? dev : void 0;
 }
 function createKoraAuthSync(options) {
-  const { authClient, schema, scopeFromClaims } = options;
+  const { authClient, schema, scopeFromClaims, anonymous = "suspend" } = options;
   const binding = {
     auth: async () => {
       const token = await authClient.getAccessToken();
       return { token: token ?? "" };
     }
   };
+  binding.resolveSyncState = async () => {
+    if (authClient.state === "loading") return { state: "loading" };
+    const token = await authClient.getAccessToken();
+    if (!token) {
+      return anonymous === "allow" ? { state: "anonymous", mayConnectAnonymously: true } : { state: "signed-out", mayConnectAnonymously: false };
+    }
+    const claims = decodeJwtPayload2(token);
+    const userId = typeof claims?.sub === "string" ? claims.sub : "";
+    if (!userId) {
+      return anonymous === "allow" ? { state: "anonymous", mayConnectAnonymously: true } : { state: "signed-out", mayConnectAnonymously: false };
+    }
+    return { state: "authenticated", userId, token };
+  };
   if (schema) {
     binding.resolveScopeMap = async () => {
       const token = await authClient.getAccessToken();
@@ -1039,6 +1052,17 @@ function createKoraAuthSync(options) {
     }
     return readDeviceIdFromClaims(claims);
   };
+  binding.resolveUserId = async () => {
+    const token = await authClient.getAccessToken();
+    if (!token) {
+      return void 0;
+    }
+    const claims = decodeJwtPayload2(token);
+    if (!claims || typeof claims.sub !== "string" || claims.sub.length === 0) {
+      return void 0;
+    }
+    return claims.sub;
+  };
   if (authClient.onAuthChange) {
     binding.subscribe = (listener) => authClient.onAuthChange?.(() => listener()) ?? (() => {
     });