@korajs/auth 1.0.0-beta.13 → 1.0.0-beta.14

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@korajs/auth",
-  "version": "1.0.0-beta.13",
+  "version": "1.0.0-beta.14",
   "description": "Offline-first authentication for Kora.js",
   "type": "module",
   "main": "./dist/index.cjs",
@@ -67,7 +67,7 @@
     "!src/**/*.test.ts"
   ],
   "dependencies": {
-    "@korajs/core": "1.0.0-beta.13"
+    "@korajs/core": "1.0.0-beta.14"
   },
   "devDependencies": {
     "@types/better-sqlite3": "^7.6.13",
@@ -78,9 +78,9 @@
     "typescript": "^5.7.0",
     "vitest": "^3.0.0",
     "vue": "^3.5.0",
-    "@korajs/server": "1.0.0-beta.13",
-    "@korajs/store": "1.0.0-beta.13",
-    "@korajs/sync": "1.0.0-beta.13"
+    "@korajs/server": "1.0.0-beta.14",
+    "@korajs/sync": "1.0.0-beta.14",
+    "@korajs/store": "1.0.0-beta.14"
   },
   "peerDependencies": {
     "react": "^18.0.0 || ^19.0.0",

package/src/provider/built-in/postgres-user-store.ts

@@ -13,6 +13,18 @@ import { DeviceOwnershipError, DuplicateEmailError } from './user-store'
 interface PostgresClient {
 	begin<T>(fn: (sql: PostgresClient) => Promise<T>): Promise<T>
 	(template: TemplateStringsArray, ...args: unknown[]): Promise<Record<string, unknown>[]>
+	/** postgres-js: close every connection of the pool (optional in this subset). */
+	end?(options?: { timeout?: number }): Promise<void>
+}
+
+/** Options for {@link PostgresUserStore}. */
+export interface PostgresUserStoreOptions {
+	/**
+	 * Whether {@link PostgresUserStore.close} ends the client's connections. True for
+	 * a store made by `createPostgresUserStore` (it opened the client); false by
+	 * default for a client you pass in, which you end yourself.
+	 */
+	ownsClient?: boolean
 }
 
 /**
@@ -33,6 +45,8 @@ interface PostgresClient {
  *   connectionString: 'postgres://user:pass@localhost:5432/mydb',
  * })
  * const routes = new BuiltInAuthRoutes({ userStore, tokenManager })
+ * // On shutdown (or at the end of a script):
+ * await userStore.close()
  * ```
  */
 export class PostgresUserStore implements UserStore {
@@ -41,11 +55,34 @@ export class PostgresUserStore implements UserStore {
 
 	private revocationStore: PostgresTokenRevocationStore | null = null
 
-	constructor(sql: PostgresClient) {
+	private readonly ownsClient: boolean
+	private closed = false
+
+	constructor(sql: PostgresClient, options: PostgresUserStoreOptions = {}) {
 		this.sql = sql
+		this.ownsClient = options.ownsClient ?? false
 		this.ready = this.ensureTables()
 	}
 
+	/**
+	 * Release the store's database connections, so a script using it can exit. Waits
+	 * for table creation to settle first. A client passed to the constructor is left
+	 * open unless `ownsClient` was set (end it yourself). Idempotent.
+	 *
+	 * @example
+	 * ```typescript
+	 * const users = await createPostgresUserStore({ connectionString })
+	 * const device = await users.findDevice(nodeId)
+	 * await users.close()
+	 * ```
+	 */
+	async close(): Promise<void> {
+		if (this.closed) return
+		this.closed = true
+		await this.ready.catch(() => {})
+		if (this.ownsClient) await this.sql.end?.({ timeout: 5 })
+	}
+
 	/** Token revocations stored in the same Postgres database as the users. */
 	getTokenRevocationStore(): TokenRevocationStore {
 		if (!this.revocationStore) {
@@ -262,7 +299,7 @@ export async function createPostgresUserStore(options: {
 }): Promise<PostgresUserStore> {
 	const postgresClient = await loadPostgresDeps()
 	const sql = postgresClient(options.connectionString) as unknown as PostgresClient
-	return new PostgresUserStore(sql)
+	return new PostgresUserStore(sql, { ownsClient: true })
 }
 
 async function loadPostgresDeps(): Promise<(connectionString: string) => unknown> {

package/src/provider/built-in/sqlite-user-store.ts

@@ -1,4 +1,6 @@
 import { randomUUID } from 'node:crypto'
+import { mkdirSync } from 'node:fs'
+import { dirname } from 'node:path'
 import {
 	type SqliteRevocationDatabase,
 	SqliteTokenRevocationStore,
@@ -278,6 +280,7 @@ export async function createSqliteUserStore(options: {
 	filename: string
 }): Promise<SqliteUserStore> {
 	const Database = await loadBetterSqlite3()
+	ensureDatabaseDirectory(options.filename)
 	const db = new Database(options.filename)
 	return new SqliteUserStore(db as unknown as SqliteDatabase)
 }
@@ -320,3 +323,13 @@ function rowToDevice(row: DeviceRow): AuthDevice {
 		lastSeenAt: row.last_seen_at,
 	}
 }
+
+/**
+ * Create the directory a SQLite database file lives in, so a default such as
+ * `./.kora/kora-server.db` works on a fresh checkout. In-memory databases and `file:`
+ * URIs are left alone.
+ */
+function ensureDatabaseDirectory(filename: string): void {
+	if (filename === '' || filename === ':memory:' || filename.startsWith('file:')) return
+	mkdirSync(dirname(filename), { recursive: true })
+}

package/src/provider/oauth/sqlite-oauth-store.ts

@@ -1,4 +1,6 @@
 import { randomUUID } from 'node:crypto'
+import { mkdirSync } from 'node:fs'
+import { dirname } from 'node:path'
 import { DuplicateLinkedIdentityError, type LinkedIdentityStore } from './linked-identity-store'
 import type { LinkedIdentity, OAuthState, OAuthStateStore } from './oauth-types'
 
@@ -219,6 +221,7 @@ export async function createSqliteOAuthStores(options: { filename: string }): Pr
 	linkedIdentityStore: SqliteLinkedIdentityStore
 }> {
 	const Database = await loadBetterSqlite3()
+	ensureDatabaseDirectory(options.filename)
 	const db = new Database(options.filename) as unknown as SqliteDatabase
 	return {
 		stateStore: new SqliteOAuthStateStore(db),
@@ -270,3 +273,13 @@ function rowToLinkedIdentity(row: LinkedIdentityRow): LinkedIdentity {
 		linkedAt: row.linked_at,
 	}
 }
+
+/**
+ * Create the directory a SQLite database file lives in, so a default such as
+ * `./.kora/kora-server.db` works on a fresh checkout. In-memory databases and `file:`
+ * URIs are left alone.
+ */
+function ensureDatabaseDirectory(filename: string): void {
+	if (filename === '' || filename === ':memory:' || filename.startsWith('file:')) return
+	mkdirSync(dirname(filename), { recursive: true })
+}

package/src/server.ts

@@ -103,7 +103,11 @@ export type { UserStore, AuthUser, StoredUser, AuthDevice } from './provider/bui
 export { SqliteUserStore, createSqliteUserStore } from './provider/built-in/sqlite-user-store'
 
 // === PostgreSQL User Store ===
-export { PostgresUserStore, createPostgresUserStore } from './provider/built-in/postgres-user-store'
+export {
+	PostgresUserStore,
+	type PostgresUserStoreOptions,
+	createPostgresUserStore,
+} from './provider/built-in/postgres-user-store'
 
 // === Provider Adapter ===
 export { BuiltInProvider, AuthProviderError } from './provider/adapter'