@o/better-auth-utils 0.16.19

package/dist/cjs/createAuthClient.test.cjs

@@ -0,0 +1,88 @@
+var import_vitest = require("vitest");
+var import_createAuthClient = require("./createAuthClient.cjs");
+const mocks = import_vitest.vi.hoisted(() => ({
+  createAuthClient: import_vitest.vi.fn(),
+  request: import_vitest.vi.fn()
+}));
+import_vitest.vi.mock("better-auth/client", () => ({
+  createAuthClient: mocks.createAuthClient
+}));
+import_vitest.vi.mock("@o/helpers", () => ({
+  createEmitter: (_name, initialValue) => {
+    const emitter = {
+      value: initialValue,
+      emit(value) {
+        emitter.value = value;
+      }
+    };
+    return emitter;
+  },
+  createStorageValue: () => ({
+    get: () => void 0,
+    set: import_vitest.vi.fn(),
+    remove: import_vitest.vi.fn()
+  }),
+  isEqualDeepLite: Object.is,
+  useEmitterValue: emitter => emitter.value
+}));
+(0, import_vitest.describe)("createBetterAuthClient signOut", () => {
+  (0, import_vitest.beforeEach)(() => {
+    mocks.request.mockReset();
+    mocks.createAuthClient.mockReset();
+    mocks.createAuthClient.mockReturnValue({
+      $fetch: mocks.request,
+      useSession: {
+        subscribe: import_vitest.vi.fn(() => import_vitest.vi.fn())
+      }
+    });
+  });
+  (0, import_vitest.test)("sends JSON and clears local auth only after server revocation succeeds", async () => {
+    const deferred = Promise.withResolvers();
+    mocks.request.mockReturnValue(deferred.promise);
+    const onAuthStateChange = import_vitest.vi.fn();
+    const client = (0, import_createAuthClient.createBetterAuthClient)({
+      baseURL: "https://auth.example.com",
+      onAuthStateChange
+    });
+    const pending = client.authClient.signOut();
+    (0, import_vitest.expect)(mocks.request).toHaveBeenCalledWith("/sign-out", {
+      method: "POST",
+      body: {}
+    });
+    (0, import_vitest.expect)(onAuthStateChange).not.toHaveBeenCalled();
+    deferred.resolve({
+      data: {
+        success: true
+      },
+      error: null
+    });
+    await (0, import_vitest.expect)(pending).resolves.toEqual({
+      data: {
+        success: true
+      },
+      error: null
+    });
+    (0, import_vitest.expect)(onAuthStateChange).toHaveBeenCalledWith({
+      state: "logged-out",
+      session: null,
+      user: null,
+      token: null
+    });
+  });
+  (0, import_vitest.test)("keeps local auth when server revocation fails", async () => {
+    const error = {
+      message: "network unavailable"
+    };
+    mocks.request.mockResolvedValue({
+      data: null,
+      error
+    });
+    const onAuthStateChange = import_vitest.vi.fn();
+    const client = (0, import_createAuthClient.createBetterAuthClient)({
+      baseURL: "https://auth.example.com",
+      onAuthStateChange
+    });
+    await (0, import_vitest.expect)(client.authClient.signOut()).rejects.toBe(error);
+    (0, import_vitest.expect)(onAuthStateChange).not.toHaveBeenCalled();
+  });
+});

package/dist/cjs/createAuthClient.test.native.js

@@ -0,0 +1,105 @@
+"use strict";
+
+var import_vitest = require("vitest");
+var import_createAuthClient = require("./createAuthClient.native.js");
+var mocks = import_vitest.vi.hoisted(function () {
+  return {
+    createAuthClient: import_vitest.vi.fn(),
+    request: import_vitest.vi.fn()
+  };
+});
+import_vitest.vi.mock("better-auth/client", function () {
+  return {
+    createAuthClient: mocks.createAuthClient
+  };
+});
+import_vitest.vi.mock("@o/helpers", function () {
+  return {
+    createEmitter: function createEmitter(_name, initialValue) {
+      var emitter = {
+        value: initialValue,
+        emit(value) {
+          emitter.value = value;
+        }
+      };
+      return emitter;
+    },
+    createStorageValue: function createStorageValue() {
+      return {
+        get: function get() {
+          return void 0;
+        },
+        set: import_vitest.vi.fn(),
+        remove: import_vitest.vi.fn()
+      };
+    },
+    isEqualDeepLite: Object.is,
+    useEmitterValue: function useEmitterValue(emitter) {
+      return emitter.value;
+    }
+  };
+});
+(0, import_vitest.describe)("createBetterAuthClient signOut", function () {
+  (0, import_vitest.beforeEach)(function () {
+    mocks.request.mockReset();
+    mocks.createAuthClient.mockReset();
+    mocks.createAuthClient.mockReturnValue({
+      $fetch: mocks.request,
+      useSession: {
+        subscribe: import_vitest.vi.fn(function () {
+          return import_vitest.vi.fn();
+        })
+      }
+    });
+  });
+  (0, import_vitest.test)("sends JSON and clears local auth only after server revocation succeeds", async function () {
+    var deferred = Promise.withResolvers();
+    mocks.request.mockReturnValue(deferred.promise);
+    var onAuthStateChange = import_vitest.vi.fn();
+    var client = (0, import_createAuthClient.createBetterAuthClient)({
+      baseURL: "https://auth.example.com",
+      onAuthStateChange
+    });
+    var pending = client.authClient.signOut();
+    (0, import_vitest.expect)(mocks.request).toHaveBeenCalledWith("/sign-out", {
+      method: "POST",
+      body: {}
+    });
+    (0, import_vitest.expect)(onAuthStateChange).not.toHaveBeenCalled();
+    deferred.resolve({
+      data: {
+        success: true
+      },
+      error: null
+    });
+    await (0, import_vitest.expect)(pending).resolves.toEqual({
+      data: {
+        success: true
+      },
+      error: null
+    });
+    (0, import_vitest.expect)(onAuthStateChange).toHaveBeenCalledWith({
+      state: "logged-out",
+      session: null,
+      user: null,
+      token: null
+    });
+  });
+  (0, import_vitest.test)("keeps local auth when server revocation fails", async function () {
+    var error = {
+      message: "network unavailable"
+    };
+    mocks.request.mockResolvedValue({
+      data: null,
+      error
+    });
+    var onAuthStateChange = import_vitest.vi.fn();
+    var client = (0, import_createAuthClient.createBetterAuthClient)({
+      baseURL: "https://auth.example.com",
+      onAuthStateChange
+    });
+    await (0, import_vitest.expect)(client.authClient.signOut()).rejects.toBe(error);
+    (0, import_vitest.expect)(onAuthStateChange).not.toHaveBeenCalled();
+  });
+});
+//# sourceMappingURL=createAuthClient.test.native.js.map

package/dist/cjs/createAuthClient.test.native.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["import_vitest","require","import_createAuthClient","mocks","vi","hoisted","createAuthClient","fn","request","mock","createEmitter","_name","initialValue","emitter","value","emit","createStorageValue","get","set","remove","isEqualDeepLite","Object","is","useEmitterValue","describe","beforeEach","mockReset","mockReturnValue","$fetch","useSession","subscribe","test","deferred","Promise","withResolvers","promise","onAuthStateChange","client","createBetterAuthClient","baseURL","pending","authClient","signOut","expect","toHaveBeenCalledWith","method","body","not","toHaveBeenCalled","resolve","data","success","error"],"sources":["../../src/createAuthClient.test.ts"],"sourcesContent":[null],"mappings":"AAAA;;AA8BA,IAAAA,aAAA,GAAAC,OAAA,SAAuC;AA5BvC,IAAAC,uBAAc,GAAAD,OAAG,+BAAe;AAAA,IAC9BE,KAAA,GAAAH,aAAkB,CAAAI,EAAA,CAAAC,OAAA,CAAG,YAAG;EACxB;IACAC,gBAAA,EAAAN,aAAA,CAAAI,EAAA,CAAAG,EAAA;IAEFC,OAAA,EAAAR,aAAQ,CAAAI,EAAA,CAAAG,EAAA;EACN;AACF,EAAE;AAEFP,aAAA,CAAAI,EAAA,CAAGK,IAAA,CAAK,oBAAc,EAAO;EAC3B;IACEH,gBAAgB,EAAAH,KAAA,CAAAG;EAAA;AACP;AAELN,aAAA,CAAAI,EAAQ,CAAAK,IAAA,aAAQ;EAAA,OAClB;IACFC,aAAA,WAAAA,cAAAC,KAAA,EAAAC,YAAA;MACA,IAAAC,OAAO;QACTC,KAAA,EAAAF,YAAA;QACAG,KAAAD,KAAA;UACOD,OAAM,CAAAC,KAAA,GAAAA,KAAA;QACX;MACA;MACF,OAAAD,OAAA;IACA;IACAG,kBAAkB,WAAgCA,kBAAQA,CAAA;MAC1D;QAIFC,GAAA,WAAAA,IAAA,EAAS;UACP;QACE;QACAC,GAAM,EAAAlB,aAAA,CAAiBI,EAAA,CAAAG,EAAA;QACvBY,MAAM,EAAAnB,aAAiB,CAAAI,EAAA,CAAAG,EAAA;MACrB;IAAc;IACFa,eACC,EAAAC,MAAA,CAAAC,EAAA;IAAmBC,eAChC,WAAAA,gBAAAV,OAAA;MACD,OAAAA,OAAA,CAAAC,KAAA;IACF;EAED;AACE;AAIA,IAAAd,aAAM,CAAQwB,QAAA,kCAAgC;EAC9C,IAAAxB,aAAM,CAAAyB,UAAoB;IAC1BtB,KAAA,CAAMK,OAAA,CAAAkB,SAAS;IAAuBvB,KACpC,CAAAG,gBAAS,CAAAoB,SAAA;IAAAvB,KACT,CAAAG,gBAAA,CAAAqB,eAAA;MACDC,MAAA,EAAAzB,KAAA,CAAAK,OAAA;MAEDqB,UAAM;QACNC,SAAA,EAAA9B,aAAO,CAAAI,EAAA,CAAMG,EAAA,aAAS;UACpB,OAAQP,aAAA,CAAAI,EAAA,CAAAG,EAAA;QACR;MACD;IACD;EAEA;EACA,IAAAP,aAAM,CAAA+B,IAAA,0EAAmE,oBAAM;IAC/E,IAAAC,QAAA,GAAAC,OAAA,CAAAC,aAAO;IAAwC/B,KAC7C,CAAAK,OAAO,CAAAmB,eAAA,CAAAK,QAAA,CAAAG,OAAA;IAAA,IACPC,iBAAS,GAAApC,aAAA,CAAAI,EAAA,CAAAG,EAAA;IAAA,IACT8B,MAAM,OAAAnC,uBAAA,CAAAoC,sBAAA;MACNC,OAAO;MACRH;IACF;IAED,IAAAI,OAAA,GAAAH,MAAA,CAAAI,UAAK,CAAAC,OAAA;IACH,IAAA1C,aAAgB,CAAA2C,MAAA,EAASxC,KAAA,CAAAK,OAAA,EAAAoC,oBAAsB;MAC/CC,MAAM,QAAQ;MACdC,IAAM;IACN;IAAsC,EACpC,EAAA9C,aAAS,CAAA2C,MAAA,EAAAP,iBAAA,EAAAW,GAAA,CAAAC,gBAAA;IAAAhB,QACT,CAAAiB,OAAA;MACDC,IAAA;QAEDC,OAAM;MACN;MACDC,KAAA;IACF","ignoreList":[]}

package/dist/cjs/index.cjs

@@ -0,0 +1,20 @@
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from)) if (!__hasOwnProp.call(to, key) && key !== except) __defProp(to, key, {
+      get: () => from[key],
+      enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable
+    });
+  }
+  return to;
+};
+var __reExport = (target, mod, secondTarget) => (__copyProps(target, mod, "default"), secondTarget && __copyProps(secondTarget, mod, "default"));
+var __toCommonJS = mod => __copyProps(__defProp({}, "__esModule", {
+  value: true
+}), mod);
+var index_exports = {};
+module.exports = __toCommonJS(index_exports);
+__reExport(index_exports, require("./createAuthClient.cjs"), module.exports);

package/dist/cjs/index.native.js

@@ -0,0 +1,23 @@
+"use strict";
+
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from)) if (!__hasOwnProp.call(to, key) && key !== except) __defProp(to, key, {
+      get: () => from[key],
+      enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable
+    });
+  }
+  return to;
+};
+var __reExport = (target, mod, secondTarget) => (__copyProps(target, mod, "default"), secondTarget && __copyProps(secondTarget, mod, "default"));
+var __toCommonJS = mod => __copyProps(__defProp({}, "__esModule", {
+  value: true
+}), mod);
+var index_exports = {};
+module.exports = __toCommonJS(index_exports);
+__reExport(index_exports, require("./createAuthClient.native.js"), module.exports);
+//# sourceMappingURL=index.native.js.map

package/dist/cjs/index.native.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["__toCommonJS","mod","__copyProps","__defProp","value","index_exports","module","exports"],"sources":["../../src/index.ts"],"sourcesContent":[null],"mappings":";;;;;;;;;;;;;;;;AAAA,IAAAA,YAAA,GAAAC,GAAA,IAAAC,WAAA,CAAAC,SAAA;EAAAC,KAAA;AAAA,IAAAH,GAAA;AAAA,IAAAI,aAAA;AAAAC,MAAA,CAAAC,OAAA,GAAAP,YAAc,CAAAK,aAAA","ignoreList":[]}

package/dist/cjs/server.cjs

@@ -0,0 +1,106 @@
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all) __defProp(target, name, {
+    get: all[name],
+    enumerable: true
+  });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from)) if (!__hasOwnProp.call(to, key) && key !== except) __defProp(to, key, {
+      get: () => from[key],
+      enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable
+    });
+  }
+  return to;
+};
+var __toCommonJS = mod => __copyProps(__defProp({}, "__esModule", {
+  value: true
+}), mod);
+var server_exports = {};
+__export(server_exports, {
+  InvalidTokenError: () => InvalidTokenError,
+  NotAuthenticatedError: () => NotAuthenticatedError,
+  getAuthDataFromRequest: () => getAuthDataFromRequest,
+  isValidJWT: () => isValidJWT,
+  validateToken: () => validateToken
+});
+module.exports = __toCommonJS(server_exports);
+var import_jose = require("jose");
+class NotAuthenticatedError extends Error {}
+class InvalidTokenError extends Error {}
+async function getAuthDataFromRequest(authServer, req, tokenOptions) {
+  const authHeader = req.headers.get("authorization");
+  try {
+    const session = await authServer.api.getSession({
+      headers: req.headers
+    });
+    if (session?.user) {
+      return {
+        id: session.user.id,
+        email: session.user.email || void 0,
+        role: session.user.role === "admin" ? "admin" : void 0
+      };
+    }
+  } catch (err) {
+    console.warn(`Error validating session`, err);
+  }
+  const jwtToken = authHeader?.replace("Bearer ", "");
+  if (jwtToken) {
+    try {
+      const payload = await validateToken(jwtToken, tokenOptions);
+      const userId = payload?.id || payload?.sub;
+      if (userId) {
+        return {
+          id: userId,
+          email: payload.email,
+          role: payload.role === "admin" ? "admin" : void 0
+        };
+      }
+    } catch (err) {
+      if (!(err instanceof InvalidTokenError)) {
+        throw err;
+      }
+    }
+  }
+  return null;
+}
+async function validateToken(token, options) {
+  const {
+    baseUrl = process.env.ONE_SERVER_URL,
+    forceIssuer = process.env.FORCE_ISSUER || "",
+    jwksPath = "/api/auth/jwks"
+  } = options || {};
+  if (!baseUrl) {
+    throw new Error(`No baseURL!`);
+  }
+  const normalizedBaseUrl = removeTrailingSlash(baseUrl);
+  const url = `${forceIssuer || normalizedBaseUrl}${jwksPath}`;
+  const JWKS = (0, import_jose.createRemoteJWKSet)(new URL(url));
+  try {
+    const verifyOptions = forceIssuer ? {} : {
+      issuer: normalizedBaseUrl,
+      audience: normalizedBaseUrl
+    };
+    const {
+      payload
+    } = await (0, import_jose.jwtVerify)(token, JWKS, verifyOptions);
+    return payload;
+  } catch (error) {
+    throw new InvalidTokenError(`${error}`);
+  }
+}
+async function isValidJWT(token, options) {
+  try {
+    await validateToken(token, options);
+    return true;
+  } catch {
+    return false;
+  }
+}
+function removeTrailingSlash(str) {
+  return str.replace(/\/$/, "");
+}

package/dist/cjs/server.native.js

@@ -0,0 +1,228 @@
+"use strict";
+
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all) __defProp(target, name, {
+    get: all[name],
+    enumerable: true
+  });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from)) if (!__hasOwnProp.call(to, key) && key !== except) __defProp(to, key, {
+      get: () => from[key],
+      enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable
+    });
+  }
+  return to;
+};
+var __toCommonJS = mod => __copyProps(__defProp({}, "__esModule", {
+  value: true
+}), mod);
+var server_exports = {};
+__export(server_exports, {
+  InvalidTokenError: () => InvalidTokenError,
+  NotAuthenticatedError: () => NotAuthenticatedError,
+  getAuthDataFromRequest: () => getAuthDataFromRequest,
+  isValidJWT: () => isValidJWT,
+  validateToken: () => validateToken
+});
+module.exports = __toCommonJS(server_exports);
+var import_jose = require("jose");
+function _assert_this_initialized(self) {
+  if (self === void 0) throw new ReferenceError("this hasn't been initialised - super() hasn't been called");
+  return self;
+}
+function _call_super(_this, derived, args) {
+  derived = _get_prototype_of(derived);
+  return _possible_constructor_return(_this, _is_native_reflect_construct() ? Reflect.construct(derived, args || [], _get_prototype_of(_this).constructor) : derived.apply(_this, args));
+}
+function _class_call_check(instance, Constructor) {
+  if (!(instance instanceof Constructor)) throw new TypeError("Cannot call a class as a function");
+}
+function _construct(Parent, args, Class) {
+  if (_is_native_reflect_construct()) _construct = Reflect.construct;else {
+    _construct = function construct(Parent2, args2, Class2) {
+      var a = [null];
+      a.push.apply(a, args2);
+      var Constructor = Function.bind.apply(Parent2, a);
+      var instance = new Constructor();
+      if (Class2) _set_prototype_of(instance, Class2.prototype);
+      return instance;
+    };
+  }
+  return _construct.apply(null, arguments);
+}
+function _get_prototype_of(o) {
+  _get_prototype_of = Object.setPrototypeOf ? Object.getPrototypeOf : function getPrototypeOf(o2) {
+    return o2.__proto__ || Object.getPrototypeOf(o2);
+  };
+  return _get_prototype_of(o);
+}
+function _inherits(subClass, superClass) {
+  if (typeof superClass !== "function" && superClass !== null) {
+    throw new TypeError("Super expression must either be null or a function");
+  }
+  subClass.prototype = Object.create(superClass && superClass.prototype, {
+    constructor: {
+      value: subClass,
+      writable: true,
+      configurable: true
+    }
+  });
+  if (superClass) _set_prototype_of(subClass, superClass);
+}
+function _instanceof(left, right) {
+  "@swc/helpers - instanceof";
+
+  if (right != null && typeof Symbol !== "undefined" && right[Symbol.hasInstance]) {
+    return !!right[Symbol.hasInstance](left);
+  } else return left instanceof right;
+}
+function _is_native_function(fn) {
+  return Function.toString.call(fn).indexOf("[native code]") !== -1;
+}
+function _is_native_reflect_construct() {
+  try {
+    var result = !Boolean.prototype.valueOf.call(Reflect.construct(Boolean, [], function () {}));
+  } catch (_) {}
+  return (_is_native_reflect_construct = function () {
+    return !!result;
+  })();
+}
+function _possible_constructor_return(self, call) {
+  if (call && (_type_of(call) === "object" || typeof call === "function")) return call;
+  return _assert_this_initialized(self);
+}
+function _set_prototype_of(o, p) {
+  _set_prototype_of = Object.setPrototypeOf || function setPrototypeOf(o2, p2) {
+    o2.__proto__ = p2;
+    return o2;
+  };
+  return _set_prototype_of(o, p);
+}
+function _type_of(obj) {
+  "@swc/helpers - typeof";
+
+  return obj && typeof Symbol !== "undefined" && obj.constructor === Symbol ? "symbol" : typeof obj;
+}
+function _wrap_native_super(Class) {
+  var _cache = typeof Map === "function" ? /* @__PURE__ */new Map() : void 0;
+  _wrap_native_super = function (Class2) {
+    if (Class2 === null || !_is_native_function(Class2)) return Class2;
+    if (typeof Class2 !== "function") throw new TypeError("Super expression must either be null or a function");
+    if (typeof _cache !== "undefined") {
+      if (_cache.has(Class2)) return _cache.get(Class2);
+      _cache.set(Class2, Wrapper);
+    }
+    function Wrapper() {
+      return _construct(Class2, arguments, _get_prototype_of(this).constructor);
+    }
+    Wrapper.prototype = Object.create(Class2.prototype, {
+      constructor: {
+        value: Wrapper,
+        enumerable: false,
+        writable: true,
+        configurable: true
+      }
+    });
+    return _set_prototype_of(Wrapper, Class2);
+  };
+  return _wrap_native_super(Class);
+}
+var NotAuthenticatedError = /* @__PURE__ */function (Error1) {
+  "use strict";
+
+  _inherits(NotAuthenticatedError2, Error1);
+  function NotAuthenticatedError2() {
+    _class_call_check(this, NotAuthenticatedError2);
+    return _call_super(this, NotAuthenticatedError2, arguments);
+  }
+  return NotAuthenticatedError2;
+}(_wrap_native_super(Error));
+var InvalidTokenError = /* @__PURE__ */function (Error1) {
+  "use strict";
+
+  _inherits(InvalidTokenError2, Error1);
+  function InvalidTokenError2() {
+    _class_call_check(this, InvalidTokenError2);
+    return _call_super(this, InvalidTokenError2, arguments);
+  }
+  return InvalidTokenError2;
+}(_wrap_native_super(Error));
+async function getAuthDataFromRequest(authServer, req, tokenOptions) {
+  var authHeader = req.headers.get("authorization");
+  try {
+    var session = await authServer.api.getSession({
+      headers: req.headers
+    });
+    if (session === null || session === void 0 ? void 0 : session.user) {
+      return {
+        id: session.user.id,
+        email: session.user.email || void 0,
+        role: session.user.role === "admin" ? "admin" : void 0
+      };
+    }
+  } catch (err) {
+    console.warn(`Error validating session`, err);
+  }
+  var jwtToken = authHeader === null || authHeader === void 0 ? void 0 : authHeader.replace("Bearer ", "");
+  if (jwtToken) {
+    try {
+      var payload = await validateToken(jwtToken, tokenOptions);
+      var userId = (payload === null || payload === void 0 ? void 0 : payload.id) || (payload === null || payload === void 0 ? void 0 : payload.sub);
+      if (userId) {
+        return {
+          id: userId,
+          email: payload.email,
+          role: payload.role === "admin" ? "admin" : void 0
+        };
+      }
+    } catch (err) {
+      if (!_instanceof(err, InvalidTokenError)) {
+        throw err;
+      }
+    }
+  }
+  return null;
+}
+async function validateToken(token, options) {
+  var {
+    baseUrl = process.env.ONE_SERVER_URL,
+    forceIssuer = process.env.FORCE_ISSUER || "",
+    jwksPath = "/api/auth/jwks"
+  } = options || {};
+  if (!baseUrl) {
+    throw new Error(`No baseURL!`);
+  }
+  var normalizedBaseUrl = removeTrailingSlash(baseUrl);
+  var url = `${forceIssuer || normalizedBaseUrl}${jwksPath}`;
+  var JWKS = (0, import_jose.createRemoteJWKSet)(new URL(url));
+  try {
+    var verifyOptions = forceIssuer ? {} : {
+      issuer: normalizedBaseUrl,
+      audience: normalizedBaseUrl
+    };
+    var {
+      payload
+    } = await (0, import_jose.jwtVerify)(token, JWKS, verifyOptions);
+    return payload;
+  } catch (error) {
+    throw new InvalidTokenError(`${error}`);
+  }
+}
+async function isValidJWT(token, options) {
+  try {
+    await validateToken(token, options);
+    return true;
+  } catch (unused) {
+    return false;
+  }
+}
+function removeTrailingSlash(str) {
+  return str.replace(/\/$/, "");
+}
+//# sourceMappingURL=server.native.js.map

package/dist/cjs/server.native.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["__toCommonJS","mod","__copyProps","__defProp","value","server_exports","__export","InvalidTokenError","NotAuthenticatedError","getAuthDataFromRequest","isValidJWT","validateToken","module","exports","import_jose","require","_assert_this_initialized","self","ReferenceError","_call_super","_this","derived","args","_get_prototype_of","_possible_constructor_return","_is_native_reflect_construct","Reflect","construct","constructor","apply","_class_call_check","instance","Constructor","TypeError","_construct","Parent","Class","Parent2","args2","Class2","a","push","Function","bind","_set_prototype_of","prototype","arguments","o","Object","setPrototypeOf","getPrototypeOf","o2","__proto__","_inherits","subClass","superClass","create","writable","configurable","_instanceof","left","right","Symbol","hasInstance","_is_native_function","fn","toString","call","indexOf","result","Boolean","valueOf","_","_type_of","p","p2"],"sources":["../../src/server.ts"],"sourcesContent":[null],"mappings":";;;;;;;;;;;;;;;;;;;;;AAAA,IAAAA,YAAA,GAAAC,GAAA,IAAAC,WAAA,CAAAC,SAAA;EAAAC,KAAA;AAAA,IAAAH,GAAA;AAAA,IAAAI,cAAA;AAAAC,QAAA,CAAAD,cAAA;EAAAE,iBAAA,EAAAA,CAAA,KAAAA,iBAAA;EAAAC,qBAAA,EAAAA,CAAA,KAAAA,qBAAA;EAAAC,sBAAA,EAAAA,CAAA,KAAAA,sBAAA;EAAAC,UAAA,EAAAA,CAAA,KAAAA,UAAA;EAAAC,aAAA,EAAAA,CAAA,KAAAA;AAAA;AAMAC,MAAA,CAAAC,OAAA,GAAAb,YAA+D,CAAAK,cAAA;AAiBxD,IAAAS,WAAM,GAAAC,OAAA;AAAqC,SAAAC,yBAAAC,IAAA;EAC3C,IAAMA,IAAA,uBAA0BC,cAAM;EAAC,OAAAD,IAAA;AAkB9C;AAKE,SAAME,YAAaC,KAAI,EAAAC,OAAQ,EAAIC,IAAA;EAWnCD,OAAI,GAAAE,iBAAA,CAAAF,OAAA;EACF,OAAAG,4BAAiC,CAAAJ,KAAI,EAAAK,4BAA0B,EAAQ,GAACC,OAAA,CAAAC,SAAA,CAAAN,OAAA,EAAAC,IAAA,QAAAC,iBAAA,CAAAH,KAAA,EAAAQ,WAAA,IAAAP,OAAA,CAAAQ,KAAA,CAAAT,KAAA,EAAAE,IAAA;AACxE;AACE,SAAAQ,iBAAOA,CAAAC,QAAA,EAAAC,WAAA;EAAA,MACLD,QAAI,YAAaC,WAAA,aAAAC,SAAA;AAAA;AACY,SAC7BC,UAAMA,CAAAC,MAAQ,EAAKb,IAAA,EAAAc,KAAS;EAAoB,IAClDX,4BAAA,IAAAS,UAAA,GAAAR,OAAA,CAAAC,SAAA,MACF;IACFO,UAAS,GAAK,SAAAP,UAAAU,OAAA,EAAAC,KAAA,EAAAC,MAAA;MACZ,IAAAC,CAAA,GAAQ,CAEV,KAIA;MAEIA,CAAA,CAAAC,IAAA,CAAAZ,KAAU,CAAAW,CAAA,EAAAF,KAAA;MACZ,IAAIN,WAAA,GAAAU,QAAA,CAAAC,IAAA,CAAAd,KAAA,CAAAQ,OAAA,EAAAG,CAAA;MACF,IAAAT,QAAM,OAAUC,WAAM;MACtB,IAAAO,MAAM,EAAAK,iBAA2B,CAAMb,QAAA,EAASQ,MAAA,CAAAM,SAAA;MAChD,OAAId,QAAQ;IACV;EAAO;EACD,OAAAG,UACI,CAAAL,KAAgB,OAAAiB,SAAA;AAAA;AAC4B,SACtDvB,kBAAAwB,CAAA;EAAAxB,iBACF,GAAAyB,MAAA,CAAAC,cAAA,GAAAD,MAAA,CAAAE,cAAA,YAAAA,eAAAC,EAAA;IACF,OAAAA,EAAS,CAAAC,SAAK,IAAAJ,MAAA,CAAAE,cAAA,CAAAC,EAAA;EACZ;EACE,OAAA5B,iBAAM,CAAAwB,CAAA;AAAA;AACR,SACFM,UAAAC,QAAA,EAAAC,UAAA;EACF,WAAAA,UAAA,mBAAAA,UAAA;IAEA,MAAO,IAAAtB,SAAA;EACT;EAIAqB,QAAA,CAAAT,SAAsB,GAAAG,MACpB,CAAAQ,MACA,CAAAD,UACqB,IAAAA,UAAA,CAAAV,SAAA;IACrBjB,WAAM;MACJxB,KAAA,EAAAkD,QAAU;MACVG,QAAA,MAAc;MACdC,YAAW;IACb;EAEA;EACE,IAAAH,UAAU,EAAAX,iBAAmB,CAAAU,QAAA,EAAAC,UAAA;AAAA;AAG/B,SAAMI,YAAAC,IAAA,EAAAC,KAAoB;EAC1B,2BAAe;;EAGf,IAAAA,KAAM,QAAO,WAAAC,MAAA,gBAAmB,IAAID,KAAI,CAAGC,MAAC,CAAAC,WAAA;IAE5C,OAAI,EAAAF,KAAA,CAAAC,MAAA,CAAAC,WAAA,EAAAH,IAAA;EACF,cAAMA,IAAA,YAAgBC,KAAA;AAElB;AACU,SACRG,mBAAUA,CAAAC,EAAA;EAAA,OACZvB,QAAA,CAAAwB,QAAA,CAAAC,IAAA,CAAAF,EAAA,EAAAG,OAAA;AAEJ;AAEA,SAAA3C,4BAAOA,CAAA;EACT;IACE,IAAA4C,MAAU,IAAAC,OAAA,CAAAzB,SAAqB,CAAA0B,OAAO,CAAAJ,IAAA,CAAAzC,OAAA,CAAAC,SAAA,CAAA2C,OAAA,mBACxC;EACF,SAAAE,CAAA,GAEA;EAIE,OAAI,CAAA/C,4BAAA,YAAAA,CAAA;IACF,OAAM,EAAA4C,MAAA;EACN;AAAO;AAEP,SAAA7C,4BAAOA,CAAAP,IAAA,EAAAkD,IAAA;EACT,IAAAA,IAAA,KAAAM,QAAA,CAAAN,IAAA,yBAAAA,IAAA,yBAAAA,IAAA;EACF,OAAAnD,wBAAA,CAAAC,IAAA;AAEA;AACE,SAAO2B,iBAAYA,CAAAG,CAAO,EAAE2B,CAAA;EAC9B9B,iBAAA,GAAAI,MAAA,CAAAC,cAAA,aAAAA,eAAAE,EAAA,EAAAwB,EAAA","ignoreList":[]}