@layer-ai/core 0.1.5 → 0.1.6

package/dist/middleware/auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/middleware/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAK1D,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,OAAO,CAAC;QAChB,UAAU,OAAO;YACf,MAAM,CAAC,EAAE,MAAM,CAAC;YAChB,UAAU,CAAC,EAAE,MAAM,CAAC;SACrB;KACF;CACF;AAED;;;;;GAKG;AACH,wBAAsB,YAAY,CAChC,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,EACb,IAAI,EAAE,YAAY,GACjB,OAAO,CAAC,IAAI,CAAC,CAoFf;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAC1B,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,EACb,IAAI,EAAE,YAAY,GACjB,IAAI,CAWN"}
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/middleware/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAK1D,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,OAAO,CAAC;QAChB,UAAU,OAAO;YACf,MAAM,CAAC,EAAE,MAAM,CAAC;YAChB,UAAU,CAAC,EAAE,MAAM,CAAC;SACrB;KACF;CACF;AAED;;;;;GAKG;AACH,wBAAsB,YAAY,CAChC,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,EACb,IAAI,EAAE,YAAY,GACjB,OAAO,CAAC,IAAI,CAAC,CAkFf;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAC1B,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,EACb,IAAI,EAAE,YAAY,GACjB,IAAI,CAWN"}

package/dist/middleware/auth.js

@@ -37,13 +37,10 @@ export async function authenticate(req, res, next) {
             .createHash('sha256')
             .update(token)
             .digest('hex');
-        // First check if it's an API key (starts with layer_)
-        if (token.startsWith('layer_')) {
-            const apiKeyRecord = await db.getApiKeyByHash(tokenHash);
-            if (!apiKeyRecord) {
-                res.status(401).json({ error: 'unauthorized', message: 'Invalid API key' });
-                return;
-            }
+        // All tokens start with 'layer_', so we need to check both API keys and session keys
+        // First try API keys
+        const apiKeyRecord = await db.getApiKeyByHash(tokenHash);
+        if (apiKeyRecord) {
             if (!apiKeyRecord.isActive) {
                 res.status(401).json({
                     error: 'unauthorized',
@@ -61,14 +58,16 @@ export async function authenticate(req, res, next) {
             next();
             return;
         }
-        // Otherwise, check if it's a session key
+        // Not an API key, try session key
         const sessionKey = await db.getSessionKeyByHash(tokenHash);
-        if (!sessionKey) {
-            res.status(401).json({ error: 'unauthorized', message: 'Invalid token' });
+        if (sessionKey) {
+            req.userId = sessionKey.userId;
+            next();
             return;
         }
-        req.userId = sessionKey.userId;
-        next();
+        // Neither API key nor session key
+        res.status(401).json({ error: 'unauthorized', message: 'Invalid token' });
+        return;
     }
     catch (error) {
         console.error('Authentication error:', error);

package/dist/routes/auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/routes/auth.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,IAAI,UAAU,EAAE,MAAM,SAAS,CAAC;AAKpD,QAAA,MAAM,MAAM,EAAE,UAAqB,CAAC;AAoGpC,eAAe,MAAM,CAAC"}
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/routes/auth.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,IAAI,UAAU,EAAE,MAAM,SAAS,CAAC;AAKpD,QAAA,MAAM,MAAM,EAAE,UAAqB,CAAC;AA4FpC,eAAe,MAAM,CAAC"}

package/dist/routes/auth.js

@@ -79,11 +79,4 @@ router.post('/token', async (req, res) => {
         res.status(500).json({ error: 'internal_error', message: 'Failed to create api key' });
     }
 });
-// GET /auth/session
-// This endpoint is used by NextAuth to check session status
-router.get('/session', async (req, res) => {
-    // For now, return null session (not authenticated via this endpoint)
-    // NextAuth will handle sessions via its own mechanism
-    res.json({ user: null });
-});
 export default router;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@layer-ai/core",
-  "version": "0.1.5",
+  "version": "0.1.6",
   "description": "Core API routes and services for Layer AI",
   "type": "module",
   "main": "./dist/index.js",