@nxgt/janus-graphql 0.3.0 → 0.5.0

package/README.md

@@ -79,7 +79,7 @@ that reads files — `node_modules/@nxgt/janus-graphql/graphql/janus.graphqls`.
 
 | Export | What it is |
 | --- | --- |
-| `useJanus({ auth, access?, type?, clock?, loaders?, conditions? })` | The envelop plugin. Adds `ctx.janus` to every request's context, and applies the directives to every schema the server is given, once. `type` treats a user of any other type as anonymous. `clock` is what `@fresh` and `requireFresh()` read — the one given to `janus()`, when it is not the system's. `loaders` and `conditions` are what `@permission` needs beside `access` |
+| `useJanus({ auth, access?, type?, clock?, loaders?, conditions? })` | The envelop plugin. Adds `ctx.janus` to every request's context, and applies the directives to every schema the server is given, once. `type` treats a user of any other type as anonymous. `clock` is what `@fresh` and `requireFresh()` read — the one given to `janus()`, when it is not the system's. `loaders` and `conditions` are what `@permission` needs beside `access`. Under Yoga, a session `authenticate` renewed is sent again as `Set-Cookie` on the response, to a request that presented it as the cookie |
 | `ctx.janus.user()`, `ctx.janus.session()` | Who the request belongs to, and the session it presented — `null` for an anonymous request. `auth.authenticate(request)` runs the first time either is asked, once per request, and never when neither is |
 | `ctx.janus.access` | The `permissions()` instance given to `useJanus()`. Absent from the type — and from the context — without one |
 | `janusTypeDefs` | The SDL: `@authenticated`, `@fresh`, `@permission` and the `JanusPermissionDenial` enum — prefixed, so it never collides with a type of your schema. The same text as `graphql/janus.graphqls` |
@@ -93,11 +93,11 @@ that reads files — `node_modules/@nxgt/janus-graphql/graphql/janus.graphqls`.
 | `requireFresh(ctx, maxAge)` | The request's session, once it proved who it is less than `maxAge` ago — a duration with its unit, `'10m'`, never a bare number — or a denial: `UNAUTHENTICATED`, `STEP_UP_REQUIRED` |
 | `can(ctx, permission, object, options?)` | `access.can` for the request's user, typed as `access.can` is. Anonymous answers `false`. Shares the request's checks with `@permission`: one question, one check per request |
 | `janusConnection({ auth, access?, type?, clock?, upgrade? })` | Subscriptions over graphql-ws: `onConnect` for its `useServer()`, which accepts a connection whose `connectionParams.authorization` — else whose upgrade request's headers or cookie — authenticates, as a user of `type` when given, and refuses any other `4403`; an outage rejects, closed `4500`. Each operation's `ctx.janus` then authenticates from that credential, so the directives hold unchanged. `context` builds `{ janus }` for a server without Yoga; `upgrade` reads the upgrade request where the transport's `extra` does not carry it — Bun |
-| `janusMaskError(fallback?)` | Yoga's `maskedErrors.maskError`: a `JanusError` a resolver let through answered with its code and status; anything else to `fallback` |
+| `janusMaskError({ report?, fallback? })` | Yoga's `maskedErrors.maskError`: a `JanusError` a resolver let through answered with its code and status; anything else to `fallback`. `report` is called once with every `JanusError` answered 5xx — a directive's and a helper's too — and cannot change the answer. `janusMaskError(fallback)`, the fallback alone, still works |
 | `janusGraphQLError(error)` | A `JanusError` as the `GraphQLError` the client reads: its code, its status, and only what the client can act on |
 | `denial(code, message?)` | A denial of your own: `UNAUTHENTICATED` 401, `FORBIDDEN` 403, `NOT_FOUND` 404. For a stale session, call `requireFresh()`, whose `STEP_UP_REQUIRED` is `@nxgt/janus`'s |
 | `JanusContext<typeof auth, typeof access?, Type?>` | What `useJanus()` adds to the context, for your resolvers' `ctx` |
-| `JanusOptions`, `JanusOnContext`, `JanusConnectionOptions`, `JanusConnection`, `ConnectionContext`, `JanusDirectivesOptions`, `Loaders`, `Conditions`, `LoadedObject`, `RequireUserOptions`, `Auth`, `UserOfAuth`, `DenialCode`, `MaskError` | The types of the arguments and answers above |
+| `JanusOptions`, `JanusOnContext`, `JanusConnectionOptions`, `JanusConnection`, `ConnectionContext`, `JanusDirectivesOptions`, `Loaders`, `Conditions`, `LoadedObject`, `RequireUserOptions`, `Auth`, `UserOfAuth`, `DenialCode`, `MaskError`, `JanusMaskErrorOptions` | The types of the arguments and answers above |
 
 ## Directives
 
@@ -207,11 +207,32 @@ every one carries a `code` and the HTTP status Yoga answers with:
 
 The status sits in `extensions.http.status`, which Yoga reads to answer the
 HTTP response and strips from the body. `USER_INVALID` adds `issues`,
-`PASSWORD_TOO_SHORT` `minLength` and `CODE_INVALID` `attemptsLeft`; nothing
+`PASSWORD_TOO_SHORT` `minLength`, `CODE_INVALID` `attemptsLeft`, and a
+throttled `CREDENTIALS_INVALID` `retryAfter` — with a `Retry-After` header in
+`extensions.http.headers`, which Yoga answers with; nothing
 else — never `reason`, `login`, a hash prefix or a cause. The message is a
 fixed one per status, never the core's: read `code`. Detail, and the status of a
 response with several errors: [the errors guide](docs/guide/errors.md).
 
+The message carries nothing of the store's, and a directive answers an
+outage itself, before any resolver of yours could log it. `report` sees
+every `JanusError` answered 5xx, once, whichever path it took:
+
+```ts
+import { maskError } from 'graphql-yoga';
+
+createYoga({
+	schema,
+	plugins: [useJanus({ auth, access })],
+	maskedErrors: {
+		maskError: janusMaskError({
+			report: (error) => logger.error({ code: error.code, cause: error.cause }), // slot, operation: which call failed
+			fallback: maskError, // Yoga's own, for everything else
+		}),
+	},
+});
+```
+
 ## Traps
 
 - **Without `janusMaskError()`, a `JanusError` from a resolver is Yoga's
@@ -229,10 +250,16 @@ response with several errors: [the errors guide](docs/guide/errors.md).
   the highest `extensions.http.status` among the errors, so `{ open me }`
   from an anonymous request is a 401 whose `data` still holds `open`. A client
   reads `data` and `errors`, not only the status.
-- **A renewed session is not sent back as a cookie.** `authenticate` renews
-  a sliding session in passing, and nothing here sets `Set-Cookie` on the
-  GraphQL response: a browser keeps the cookie with its old expiry. Sign in
-  and renew through your HTTP routes, or send a bearer token.
+- **A renewed session is sent back only on an HTTP response from Yoga.**
+  `useJanus()` sets it in Yoga's `onResponse`, which a server on envelop
+  alone never calls; and an operation over graphql-ws has no response at
+  all. There, `ctx.janus` still renews the session in the store, but the
+  browser keeps the cookie with its old expiry until the next renewal over
+  HTTP, a `renewAfter` later: a browser whose only traffic is the WebSocket
+  should renew through an HTTP route of yours.
+- **An `auth` of your own needs `cookie` for the renewal.** A wrapper that
+  passes on only `authenticate` and `types` sends no renewed cookie; pass
+  `cookie: auth.cookie` along.
 - **`useJanus({ type })` narrows the whole server.** A user of any other type
   is anonymous everywhere, and a directive naming another type is refused
   when the schema is built.
@@ -297,7 +324,7 @@ response with several errors: [the errors guide](docs/guide/errors.md).
 
 ## Type safety, counted
 
-Thirty-five plausible mistakes are refused by the compiler, each with a
+Thirty-seven plausible mistakes are refused by the compiler, each with a
 `@ts-expect-error` case in `test/types/`:
 
 - five in `context.ts`: reading the user or the session where either may be
@@ -310,10 +337,11 @@ Thirty-five plausible mistakes are refused by the compiler, each with a
   permission the object's type does not declare, an object type the model
   does not, an object without a field a `fromField` reads, a condition reached
   with no `ctx`, a `ctx` of the wrong shape, and a context with no `access`;
-- five in `plugin.ts`: `useJanus()` given a user type the instance does not
+- seven in `plugin.ts`: `useJanus()` given a user type the instance does not
   know, something that is not what `janus()` answered, the `permissions()`
-  instance as `auth`, and `applyJanusDirectives()` without `auth` or narrowed
-  to a user type the instance does not know;
+  instance as `auth`, `applyJanusDirectives()` without `auth` or narrowed
+  to a user type the instance does not know, and `janusMaskError()` given a
+  misspelled `report` or one reading what a `JanusError` does not carry;
 - five in `wiring.ts`: `useJanus()`'s `loaders` for an object type the model
   does not declare, a loader answering an object without a field a
   `fromField` reads, `conditions` for a type no `when()` is reached on, a

package/dist/context.d.ts

@@ -48,6 +48,12 @@ export interface ContextOptions {
  * here asked.
  */
 export declare function createJanusContext(request: RequestLike | undefined, options: ContextOptions): Built;
+/**
+ * What `authenticate` answered for `janus`'s request, or `undefined` when it
+ * never ran — nothing asked `user()` or `session()`, or the context was not
+ * built here. Never runs it.
+ */
+export declare function answerOf(janus: object): Promise<Authenticated<AnyUser> | null> | undefined;
 /**
  * The clock `@fresh` and `requireFresh()` read the time from: the one given
  * to `useJanus({ clock })`, or the system's.

package/dist/context.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../src/context.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EACN,KAAK,aAAa,EAClB,KAAK,KAAK,EACV,KAAK,WAAW,EAEhB,MAAM,aAAa,CAAC;AAErB,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAE9C,iFAAiF;AACjF,MAAM,MAAM,KAAK,GAAG,CACnB,OAAO,EAAE;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,EAC9D,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,EACtD,OAAO,CAAC,EAAE;IAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,OAAO,CAAA;CAAE,KAChC,OAAO,CAAC,OAAO,CAAC,CAAC;AAEtB,qEAAqE;AACrE,KAAK,OAAO,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC;AAE9D,KAAK,SAAS,GAAG;IAChB,YAAY,CACX,OAAO,EAAE,WAAW,EACpB,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAClC,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;CAC1C,CAAC;AAEF,KAAK,KAAK,GAAG,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;AAa9C,mEAAmE;AACnE,MAAM,WAAW,cAAc;IAC9B,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE;QAAE,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAA;KAAE,GAAG,SAAS,CAAC;IACxD,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,GAAG,SAAS,CAAC;IACnC,wEAAwE;IACxE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CACjC,OAAO,EAAE,WAAW,GAAG,SAAS,EAChC,OAAO,EAAE,cAAc,GACrB,KAAK,CAoCP;AAED;;;GAGG;AACH,wBAAgB,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,CAE5C;AAED;;;;;;;;GAQG;AACH,wBAAgB,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,UAAQ,GAAG,KAAK,GAAG,IAAI,CAMlE;AAED;;;GAGG;AACH,wBAAgB,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,KAAK,CAQ3D"}
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../src/context.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EACN,KAAK,aAAa,EAClB,KAAK,KAAK,EACV,KAAK,WAAW,EAEhB,MAAM,aAAa,CAAC;AAErB,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAE9C,iFAAiF;AACjF,MAAM,MAAM,KAAK,GAAG,CACnB,OAAO,EAAE;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,EAC9D,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,EACtD,OAAO,CAAC,EAAE;IAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,OAAO,CAAA;CAAE,KAChC,OAAO,CAAC,OAAO,CAAC,CAAC;AAEtB,qEAAqE;AACrE,KAAK,OAAO,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC;AAE9D,KAAK,SAAS,GAAG;IAChB,YAAY,CACX,OAAO,EAAE,WAAW,EACpB,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAClC,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;CAC1C,CAAC;AAEF,KAAK,KAAK,GAAG,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;AAuB9C,mEAAmE;AACnE,MAAM,WAAW,cAAc;IAC9B,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE;QAAE,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAA;KAAE,GAAG,SAAS,CAAC;IACxD,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,GAAG,SAAS,CAAC;IACnC,wEAAwE;IACxE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CACjC,OAAO,EAAE,WAAW,GAAG,SAAS,EAChC,OAAO,EAAE,cAAc,GACrB,KAAK,CAqCP;AAED;;;;GAIG;AACH,wBAAgB,QAAQ,CACvB,KAAK,EAAE,MAAM,GACX,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,SAAS,CAEpD;AAED;;;GAGG;AACH,wBAAgB,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,CAE5C;AAED;;;;;;;;GAQG;AACH,wBAAgB,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,UAAQ,GAAG,KAAK,GAAG,IAAI,CAMlE;AAED;;;GAGG;AACH,wBAAgB,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,KAAK,CAQ3D"}

package/dist/errors.d.ts

@@ -12,8 +12,10 @@ export type DenialCode = 'UNAUTHENTICATED' | 'FORBIDDEN' | 'NOT_FOUND';
 export declare function denial(code: DenialCode, message?: string): GraphQLError;
 /**
  * A `JanusError` as the client may read it: its code and status, and only
- * what the client can act on — `issues`, `minLength`, `attemptsLeft`. Never
- * `reason`, `login`, `slot` or a cause: those are for your logs.
+ * what the client can act on — `issues`, `minLength`, `attemptsLeft`,
+ * `retryAfter`. Never `reason`, `login`, `slot` or a cause: those are for
+ * your logs. A throttled sign-in also carries its `Retry-After` header in
+ * `http.headers`, which Yoga answers with.
  *
  * `STORE_FAILED` is `SERVICE_UNAVAILABLE` 503 — **an outage is never a
  * denial** — and no message of the core's reaches the client.
@@ -26,6 +28,22 @@ export declare function janusGraphQLError(error: JanusError): GraphQLError;
 export declare function rethrown(error: unknown): never;
 /** Yoga's and envelop's `maskError` signature. */
 export type MaskError = (error: unknown, message: string, isDev?: boolean) => Error;
+/** What `janusMaskError()` takes. */
+export interface JanusMaskErrorOptions {
+    /**
+     * Called once with every `JanusError` answered 5xx — `STORE_FAILED`,
+     * `UNSUPPORTED`, `PERMISSION_DEPTH` — whichever path it took: a
+     * directive, `requireUser()`, `can()`, or a resolver that let it through.
+     * Its `slot`, `operation`, `reason` and cause are for your logs; the
+     * response never carries them.
+     *
+     * **It cannot change the answer**: one that throws, or rejects, is a
+     * `process.emitWarning`, and the 503 is sent all the same.
+     */
+    readonly report?: (error: JanusError) => unknown;
+    /** Every error that is not a `JanusError`; see `janusMaskError()`. */
+    readonly fallback?: MaskError;
+}
 /**
  * Yoga's `maskedErrors.maskError`: a `JanusError` a resolver let through is
  * answered with its code and status — `STORE_FAILED` as 503, never masked
@@ -33,12 +51,19 @@ export type MaskError = (error: unknown, message: string, isDev?: boolean) => Er
  *
  * Without a `fallback`, a `GraphQLError` is kept and anything else becomes
  * `message`, with no detail. Pass Yoga's own `maskError` to keep its
- * development-mode details:
+ * development-mode details — as the options' `fallback`, or alone, as
+ * before `report` existed:
  *
  * ```ts
  * import { createYoga, maskError } from 'graphql-yoga';
- * createYoga({ schema, plugins, maskedErrors: { maskError: janusMaskError(maskError) } });
+ * createYoga({
+ *   schema,
+ *   plugins,
+ *   maskedErrors: {
+ *     maskError: janusMaskError({ report: (error) => logger.error(error), fallback: maskError }),
+ *   },
+ * });
  * ```
  */
-export declare function janusMaskError(fallback?: MaskError): MaskError;
+export declare function janusMaskError(options?: JanusMaskErrorOptions | MaskError): MaskError;
 //# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,UAAU,EAAmC,MAAM,aAAa,CAAC;AAC1E,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEvC,mFAAmF;AACnF,MAAM,MAAM,UAAU,GAAG,iBAAiB,GAAG,WAAW,GAAG,WAAW,CAAC;AAEvE,2EAA2E;AAC3E,wBAAgB,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,YAAY,CAKvE;AAaD;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,UAAU,GAAG,YAAY,CAQjE;AA4CD;;;GAGG;AACH,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,CAE9C;AAED,kDAAkD;AAClD,MAAM,MAAM,SAAS,GAAG,CACvB,KAAK,EAAE,OAAO,EACd,OAAO,EAAE,MAAM,EACf,KAAK,CAAC,EAAE,OAAO,KACX,KAAK,CAAC;AAEX;;;;;;;;;;;;;GAaG;AACH,wBAAgB,cAAc,CAAC,QAAQ,GAAE,SAAkB,GAAG,SAAS,CAiBtE"}
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,UAAU,EAAmC,MAAM,aAAa,CAAC;AAC1E,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAGvC,mFAAmF;AACnF,MAAM,MAAM,UAAU,GAAG,iBAAiB,GAAG,WAAW,GAAG,WAAW,CAAC;AAEvE,2EAA2E;AAC3E,wBAAgB,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,YAAY,CAKvE;AAaD;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,UAAU,GAAG,YAAY,CAQjE;AA0DD;;;GAGG;AACH,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,CAE9C;AAED,kDAAkD;AAClD,MAAM,MAAM,SAAS,GAAG,CACvB,KAAK,EAAE,OAAO,EACd,OAAO,EAAE,MAAM,EACf,KAAK,CAAC,EAAE,OAAO,KACX,KAAK,CAAC;AAEX,qCAAqC;AACrC,MAAM,WAAW,qBAAqB;IACrC;;;;;;;;;OASG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,OAAO,CAAC;IACjD,sEAAsE;IACtE,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,CAAC;CAC9B;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,cAAc,CAC7B,OAAO,GAAE,qBAAqB,GAAG,SAAc,GAC7C,SAAS,CAqBX"}

package/dist/index.d.ts

@@ -9,8 +9,9 @@
  * - `applyJanusDirectives(schema, { auth })` — the schema transform alone;
  * - `requireUser(ctx, { type? })`, `requireFresh(ctx, maxAge)` and
  *   `can(ctx, permission, object)` — the calls a resolver makes itself;
- * - `janusMaskError(fallback?)` — Yoga's `maskError`: a `JanusError` as its
- *   code and status, `STORE_FAILED` as 503 and never as 401 or 403.
+ * - `janusMaskError({ report?, fallback? })` — Yoga's `maskError`: a
+ *   `JanusError` as its code and status, `STORE_FAILED` as 503 and never as
+ *   401 or 403, and every 5xx handed to `report`.
  * - `janusGraphQLError(error)` — a `JanusError` as the `GraphQLError` the
  *   client reads, and `denial(code, message?)` — a denial of your own.
  * - `janusConnection({ auth, access?, type?, clock?, upgrade? })` —
@@ -24,7 +25,7 @@
 export { janusConnection } from './connection/connection';
 export type { ConnectionContext, JanusConnection, JanusConnectionOptions, } from './connection/types';
 export { applyJanusDirectives, type JanusDirectivesOptions, } from './directives/apply';
-export { type DenialCode, denial, janusGraphQLError, janusMaskError, type MaskError, } from './errors';
+export { type DenialCode, denial, type JanusMaskErrorOptions, janusGraphQLError, janusMaskError, type MaskError, } from './errors';
 export { requireFresh } from './fresh';
 export { can, type RequireUserOptions, requireUser } from './helpers';
 export { useJanus } from './plugin';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,YAAY,EACX,iBAAiB,EACjB,eAAe,EACf,sBAAsB,GACtB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACN,oBAAoB,EACpB,KAAK,sBAAsB,GAC3B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACN,KAAK,UAAU,EACf,MAAM,EACN,iBAAiB,EACjB,cAAc,EACd,KAAK,SAAS,GACd,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,GAAG,EAAE,KAAK,kBAAkB,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACtE,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACpC,OAAO,EAAE,aAAa,EAAE,MAAM,OAAO,CAAC;AACtC,YAAY,EACX,IAAI,EACJ,YAAY,EACZ,cAAc,EACd,YAAY,EACZ,UAAU,GACV,MAAM,SAAS,CAAC;AACjB,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,UAAU,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,YAAY,EACX,iBAAiB,EACjB,eAAe,EACf,sBAAsB,GACtB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACN,oBAAoB,EACpB,KAAK,sBAAsB,GAC3B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACN,KAAK,UAAU,EACf,MAAM,EACN,KAAK,qBAAqB,EAC1B,iBAAiB,EACjB,cAAc,EACd,KAAK,SAAS,GACd,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,GAAG,EAAE,KAAK,kBAAkB,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACtE,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACpC,OAAO,EAAE,aAAa,EAAE,MAAM,OAAO,CAAC;AACtC,YAAY,EACX,IAAI,EACJ,YAAY,EACZ,cAAc,EACd,YAAY,EACZ,UAAU,GACV,MAAM,SAAS,CAAC;AACjB,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,UAAU,CAAC"}

package/dist/index.js

@@ -34,6 +34,7 @@ function memoized(access) {
 // src/context.ts
 var checks = new WeakMap;
 var clocks = new WeakMap;
+var answers = new WeakMap;
 function createJanusContext(request, options) {
   const { auth, access, type, clock, caller = "useJanus()" } = options;
   let answer;
@@ -59,8 +60,12 @@ function createJanusContext(request, options) {
   }
   if (clock !== undefined)
     clocks.set(janus, clock);
+  answers.set(janus, () => asked ? answer : undefined);
   return janus;
 }
+function answerOf(janus) {
+  return answers.get(janus)?.();
+}
 function clockOf(janus) {
   return clocks.get(janus) ?? systemClock;
 }
@@ -157,11 +162,40 @@ import { MapperKind, mapSchema } from "@graphql-tools/utils";
 import { defaultFieldResolver } from "graphql";
 
 // src/errors.ts
+import { JanusError as JanusError2, statusOf as statusOf2 } from "@nxgt/janus";
+import { GraphQLError as GraphQLError2 } from "graphql";
+
+// src/report.ts
 import { JanusError, statusOf } from "@nxgt/janus";
 import { GraphQLError } from "graphql";
+function janusErrorIn(error) {
+  let current = error;
+  while (current instanceof GraphQLError)
+    current = current.originalError;
+  return current instanceof JanusError ? current : null;
+}
+function reporting(report) {
+  const seen = new WeakSet;
+  return (error) => {
+    const janusError = janusErrorIn(error);
+    if (janusError === null || seen.has(janusError))
+      return;
+    if (statusOf(janusError.code) < 500)
+      return;
+    seen.add(janusError);
+    const warn = (failure) => process.emitWarning(`janusMaskError: report failed on ${janusError.code}: ${failure instanceof Error ? failure.name : typeof failure}`);
+    try {
+      Promise.resolve(report(janusError)).then(undefined, warn);
+    } catch (failure) {
+      warn(failure);
+    }
+  };
+}
+
+// src/errors.ts
 function denial(code, message) {
   const [status, fallback] = denialOf(code);
-  return new GraphQLError(message ?? fallback, {
+  return new GraphQLError2(message ?? fallback, {
     extensions: { code, http: { status } }
   });
 }
@@ -176,11 +210,11 @@ function denialOf(code) {
   }
 }
 function janusGraphQLError(error) {
-  const status = statusOf(error.code);
+  const status = statusOf2(error.code);
   const code = error.code === "STORE_FAILED" ? "SERVICE_UNAVAILABLE" : error.code;
-  return new GraphQLError(messageOf(status), {
+  return new GraphQLError2(messageOf(status), {
     originalError: error,
-    extensions: { code, http: { status }, ...actionable(error) }
+    extensions: { code, http: httpOf(error, status), ...actionable(error) }
   });
 }
 function messageOf(status) {
@@ -202,6 +236,9 @@ function messageOf(status) {
       return "Internal server error";
   }
 }
+function httpOf(error, status) {
+  return error.retryAfter === undefined ? { status } : { status, headers: { "Retry-After": String(error.retryAfter) } };
+}
 function actionable(error) {
   switch (error.code) {
     case "USER_INVALID":
@@ -210,19 +247,24 @@ function actionable(error) {
       return error.minLength === undefined ? {} : { minLength: error.minLength };
     case "CODE_INVALID":
       return error.attemptsLeft === undefined ? {} : { attemptsLeft: error.attemptsLeft };
+    case "CREDENTIALS_INVALID":
+      return error.retryAfter === undefined ? {} : { retryAfter: error.retryAfter };
     default:
       return {};
   }
 }
 function rethrown(error) {
-  throw error instanceof JanusError ? janusGraphQLError(error) : error;
+  throw error instanceof JanusError2 ? janusGraphQLError(error) : error;
 }
-function janusMaskError(fallback = masked) {
+function janusMaskError(options = {}) {
+  const { report, fallback = masked } = typeof options === "function" ? { fallback: options } : options;
+  const reported = report === undefined ? undefined : reporting(report);
   return (error, message, isDev) => {
-    const original = error instanceof GraphQLError ? error.originalError : error;
-    if (original instanceof JanusError) {
+    reported?.(error);
+    const original = error instanceof GraphQLError2 ? error.originalError : error;
+    if (original instanceof JanusError2) {
       const answer = janusGraphQLError(original);
-      return error instanceof GraphQLError ? new GraphQLError(answer.message, {
+      return error instanceof GraphQLError2 ? new GraphQLError2(answer.message, {
         nodes: error.nodes ?? null,
         path: error.path ?? null,
         originalError: original,
@@ -233,18 +275,18 @@ function janusMaskError(fallback = masked) {
   };
 }
 function masked(error, message) {
-  if (error instanceof GraphQLError) {
+  if (error instanceof GraphQLError2) {
     const original = error.originalError;
-    if (original === undefined || original instanceof GraphQLError) {
+    if (original === undefined || original instanceof GraphQLError2) {
       return error;
     }
-    return new GraphQLError(message, {
+    return new GraphQLError2(message, {
       nodes: error.nodes ?? null,
       path: error.path ?? null,
       extensions: { code: "INTERNAL_SERVER_ERROR" }
     });
   }
-  return new GraphQLError(message, {
+  return new GraphQLError2(message, {
     extensions: { code: "INTERNAL_SERVER_ERROR" }
   });
 }
@@ -698,6 +740,42 @@ async function can(ctx, permission, object, ...options) {
   const subject = await janus.user().then(undefined, rethrown);
   return check(subject, permission, object, options[0]).then(undefined, rethrown);
 }
+// src/renewal.ts
+var contexts = new WeakMap;
+function track(request, janus) {
+  const known = contexts.get(request);
+  if (known === undefined)
+    contexts.set(request, [janus]);
+  else
+    known.push(janus);
+}
+async function resendRenewed({ request, response }, cookie) {
+  const known = contexts.get(request);
+  if (cookie === undefined || known === undefined)
+    return;
+  for (const janus of known) {
+    const current = await answerOf(janus)?.then((answer) => answer, () => null);
+    if (current?.renewed === true && cookieOf(request, cookie.name) === current.token && !sets(response, cookie.name)) {
+      response.headers.append("Set-Cookie", cookie.serialize(current.token, current.session));
+    }
+  }
+}
+function cookieOf(request, name) {
+  const header = request.headers.get("cookie");
+  if (header === null)
+    return null;
+  for (const pair of header.split(";")) {
+    const at = pair.indexOf("=");
+    if (at !== -1 && pair.slice(0, at).trim() === name) {
+      return pair.slice(at + 1).trim();
+    }
+  }
+  return null;
+}
+function sets(response, name) {
+  return response.headers.getSetCookie().some((value) => value.startsWith(`${name}=`));
+}
+
 // src/plugin.ts
 function useJanus(options) {
   const { auth, access, type, clock, loaders, conditions } = options;
@@ -712,6 +790,9 @@ function useJanus(options) {
         type,
         clock
       });
+      if (typeof request === "object" && request !== null) {
+        track(request, janus);
+      }
       extendContext({ janus });
     },
     onSchemaChange: ({ schema, replaceSchema }) => {
@@ -726,7 +807,8 @@ function useJanus(options) {
       });
       applied.add(next);
       replaceSchema(next);
-    }
+    },
+    onResponse: (payload) => resendRenewed(payload, auth.cookie)
   };
 }
 // src/sdl.ts
@@ -788,5 +870,5 @@ export {
   useJanus
 };
 
-//# debugId=C6BF0BFA8BF13A9C64756E2164756E21
+//# debugId=7B97AB6C768D830E64756E2164756E21
 //# sourceMappingURL=index.js.map