@orangecheck/auth-core 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025 OrangeCheck
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,91 @@
+# `@orangecheck/auth-core`
+
+**Cross-subdomain session primitives for the OrangeCheck ecosystem.**
+
+A ~3 KB package that handles:
+
+- Ed25519 JWT sign / verify with `jose`
+- Cross-subdomain cookie serialize / clear / parse
+- Typed `SessionPayload` (`sub`, `addr`, `jti`, …)
+
+No React, no DB, no framework. Usable from Node, Edge, or browser.
+
+## The model
+
+There is **one auth host** (by convention `https://ochk.io`) that holds the
+private JWK and issues tokens. Every **consumer subdomain** (`attest.ochk.io`,
+`lock.ochk.io`, `docs.ochk.io`, …) only holds the public JWK and verifies
+locally — no network round-trip.
+
+The session cookie is set with `Domain=.ochk.io`, so once a user signs in on
+any subdomain, every other subdomain sees them as signed-in immediately.
+
+## Install
+
+```bash
+yarn add @orangecheck/auth-core
+```
+
+## Generate a key pair
+
+```bash
+node scripts/gen-auth-keys.mjs
+# → prints OC_AUTH_KID, OC_AUTH_PRIVATE_JWK, OC_AUTH_PUBLIC_JWK
+```
+
+`OC_AUTH_PRIVATE_JWK` lives only on the auth host. The public JWK + KID go on
+every subdomain.
+
+## On the auth host
+
+```ts
+import { signSession, serializeSessionCookie } from '@orangecheck/auth-core';
+
+const token = await signSession(
+    { sub: accountId, addr: btcAddress, jti: crypto.randomUUID() },
+    {
+        kid: process.env.OC_AUTH_KID!,
+        privateJwk: process.env.OC_AUTH_PRIVATE_JWK!,
+        publicJwk: process.env.OC_AUTH_PUBLIC_JWK!,
+        issuer: 'https://ochk.io',
+    },
+    60 * 60 * 24 * 30
+);
+
+res.setHeader(
+    'Set-Cookie',
+    serializeSessionCookie(token, { domain: '.ochk.io', maxAge: 60 * 60 * 24 * 30 })
+);
+```
+
+## On any consumer subdomain
+
+```ts
+import { readSessionCookie, verifySessionToken } from '@orangecheck/auth-core';
+
+const token = readSessionCookie(req.headers.cookie);
+if (!token) return res.status(401).end();
+
+const payload = await verifySessionToken(token, {
+    publicJwk: process.env.OC_AUTH_PUBLIC_JWK!,
+    issuer: 'https://ochk.io',
+});
+
+if (!payload) return res.status(401).end();
+
+// payload.addr is the verified Bitcoin address.
+```
+
+## Guarantees
+
+- **No shared secret.** Consumer apps cannot forge sessions — only the auth
+  host can, because only it holds the private key.
+- **Offline-verifiable.** Given the public JWK, any process can verify a
+  token — no database, no auth server round-trip.
+- **Stateless.** Revocation is the caller's problem. This package does
+  crypto only; if you need immediate-revoke semantics, layer a DB check
+  on the auth host.
+
+## License
+
+MIT.

package/dist/index.d.mts

@@ -0,0 +1,42 @@
+import { CryptoKey, KeyObject, JWTPayload } from 'jose';
+
+declare const JWT_ALG: "EdDSA";
+declare const SESSION_COOKIE: "oc_session";
+declare const DEFAULT_ISSUER: "https://ochk.io";
+type AuthKey = CryptoKey | KeyObject;
+interface SessionPayload extends JWTPayload {
+    sub: string;
+    addr: string;
+    jti: string;
+}
+interface VerifyConfig {
+    publicJwk: string;
+    issuer?: string;
+}
+interface SignConfig extends VerifyConfig {
+    privateJwk: string;
+    kid: string;
+}
+declare function loadPublicKey(publicJwk: string): Promise<AuthKey>;
+declare function loadPrivateKey(privateJwk: string): Promise<AuthKey>;
+declare function parsePublicJwk(publicJwk: string): Record<string, unknown>;
+declare function signSession(claims: {
+    sub: string;
+    addr: string;
+    jti: string;
+}, cfg: SignConfig, ttlSeconds: number): Promise<string>;
+declare function verifySessionToken(token: string, cfg: VerifyConfig): Promise<SessionPayload | null>;
+interface CookieOptions {
+    domain?: string;
+    maxAge?: number;
+    expires?: Date;
+    path?: string;
+    secure?: boolean;
+    httpOnly?: boolean;
+    sameSite?: 'Lax' | 'Strict' | 'None';
+}
+declare function serializeSessionCookie(token: string, opts?: CookieOptions): string;
+declare function clearSessionCookieHeader(opts?: Pick<CookieOptions, 'domain' | 'path' | 'secure'>): string;
+declare function readSessionCookie(cookieHeader: string | null | undefined): string | null;
+
+export { type AuthKey, type CookieOptions, DEFAULT_ISSUER, JWT_ALG, SESSION_COOKIE, type SessionPayload, type SignConfig, type VerifyConfig, clearSessionCookieHeader, loadPrivateKey, loadPublicKey, parsePublicJwk, readSessionCookie, serializeSessionCookie, signSession, verifySessionToken };

package/dist/index.d.ts

@@ -0,0 +1,42 @@
+import { CryptoKey, KeyObject, JWTPayload } from 'jose';
+
+declare const JWT_ALG: "EdDSA";
+declare const SESSION_COOKIE: "oc_session";
+declare const DEFAULT_ISSUER: "https://ochk.io";
+type AuthKey = CryptoKey | KeyObject;
+interface SessionPayload extends JWTPayload {
+    sub: string;
+    addr: string;
+    jti: string;
+}
+interface VerifyConfig {
+    publicJwk: string;
+    issuer?: string;
+}
+interface SignConfig extends VerifyConfig {
+    privateJwk: string;
+    kid: string;
+}
+declare function loadPublicKey(publicJwk: string): Promise<AuthKey>;
+declare function loadPrivateKey(privateJwk: string): Promise<AuthKey>;
+declare function parsePublicJwk(publicJwk: string): Record<string, unknown>;
+declare function signSession(claims: {
+    sub: string;
+    addr: string;
+    jti: string;
+}, cfg: SignConfig, ttlSeconds: number): Promise<string>;
+declare function verifySessionToken(token: string, cfg: VerifyConfig): Promise<SessionPayload | null>;
+interface CookieOptions {
+    domain?: string;
+    maxAge?: number;
+    expires?: Date;
+    path?: string;
+    secure?: boolean;
+    httpOnly?: boolean;
+    sameSite?: 'Lax' | 'Strict' | 'None';
+}
+declare function serializeSessionCookie(token: string, opts?: CookieOptions): string;
+declare function clearSessionCookieHeader(opts?: Pick<CookieOptions, 'domain' | 'path' | 'secure'>): string;
+declare function readSessionCookie(cookieHeader: string | null | undefined): string | null;
+
+export { type AuthKey, type CookieOptions, DEFAULT_ISSUER, JWT_ALG, SESSION_COOKIE, type SessionPayload, type SignConfig, type VerifyConfig, clearSessionCookieHeader, loadPrivateKey, loadPublicKey, parsePublicJwk, readSessionCookie, serializeSessionCookie, signSession, verifySessionToken };

package/dist/index.js

@@ -0,0 +1,106 @@
+'use strict';
+
+var jose = require('jose');
+
+// src/index.ts
+var JWT_ALG = "EdDSA";
+var SESSION_COOKIE = "oc_session";
+var DEFAULT_ISSUER = "https://ochk.io";
+function decodeJwk(value) {
+  const json = typeof Buffer !== "undefined" ? Buffer.from(value, "base64url").toString("utf8") : new TextDecoder().decode(base64UrlDecode(value));
+  const parsed = JSON.parse(json);
+  if (!parsed || typeof parsed !== "object") {
+    throw new Error("[@orangecheck/auth-core] JWK env did not decode to an object");
+  }
+  return parsed;
+}
+function base64UrlDecode(input) {
+  const pad = input.length % 4 === 0 ? "" : "=".repeat(4 - input.length % 4);
+  const b64 = (input + pad).replace(/-/g, "+").replace(/_/g, "/");
+  const bin = typeof atob !== "undefined" ? atob(b64) : "";
+  const bytes = new Uint8Array(bin.length);
+  for (let i = 0; i < bin.length; i++) bytes[i] = bin.charCodeAt(i);
+  return bytes;
+}
+var publicKeyPromise = null;
+var publicKeyCache = null;
+function loadPublicKey(publicJwk) {
+  if (!publicKeyPromise || publicKeyCache !== publicJwk) {
+    publicKeyCache = publicJwk;
+    publicKeyPromise = jose.importJWK(decodeJwk(publicJwk), JWT_ALG);
+  }
+  return publicKeyPromise;
+}
+var privateKeyPromise = null;
+var privateKeyCache = null;
+function loadPrivateKey(privateJwk) {
+  if (!privateKeyPromise || privateKeyCache !== privateJwk) {
+    privateKeyCache = privateJwk;
+    privateKeyPromise = jose.importJWK(decodeJwk(privateJwk), JWT_ALG);
+  }
+  return privateKeyPromise;
+}
+function parsePublicJwk(publicJwk) {
+  return decodeJwk(publicJwk);
+}
+async function signSession(claims, cfg, ttlSeconds) {
+  const now = Math.floor(Date.now() / 1e3);
+  return new jose.SignJWT(claims).setProtectedHeader({ alg: JWT_ALG, typ: "JWT", kid: cfg.kid }).setIssuer(cfg.issuer ?? DEFAULT_ISSUER).setIssuedAt(now).setExpirationTime(now + ttlSeconds).sign(await loadPrivateKey(cfg.privateJwk));
+}
+async function verifySessionToken(token, cfg) {
+  try {
+    const res = await jose.jwtVerify(token, await loadPublicKey(cfg.publicJwk), {
+      algorithms: [JWT_ALG],
+      issuer: cfg.issuer ?? DEFAULT_ISSUER
+    });
+    const p = res.payload;
+    if (!p.sub || !p.addr || !p.jti) return null;
+    return p;
+  } catch {
+    return null;
+  }
+}
+function serializeSessionCookie(token, opts = {}) {
+  const parts = [`${SESSION_COOKIE}=${token}`];
+  parts.push(`Path=${opts.path ?? "/"}`);
+  if (opts.httpOnly ?? true) parts.push("HttpOnly");
+  parts.push(`SameSite=${opts.sameSite ?? "Lax"}`);
+  if (opts.secure ?? true) parts.push("Secure");
+  if (opts.domain) parts.push(`Domain=${opts.domain}`);
+  if (opts.maxAge != null) parts.push(`Max-Age=${opts.maxAge}`);
+  if (opts.expires) parts.push(`Expires=${opts.expires.toUTCString()}`);
+  return parts.join("; ");
+}
+function clearSessionCookieHeader(opts = {}) {
+  return serializeSessionCookie("", {
+    ...opts,
+    maxAge: 0,
+    expires: /* @__PURE__ */ new Date(0)
+  });
+}
+function readSessionCookie(cookieHeader) {
+  if (!cookieHeader) return null;
+  const prefix = `${SESSION_COOKIE}=`;
+  for (const part of cookieHeader.split(";")) {
+    const trimmed = part.trim();
+    if (trimmed.startsWith(prefix)) {
+      const val = trimmed.slice(prefix.length);
+      return val.length > 0 ? val : null;
+    }
+  }
+  return null;
+}
+
+exports.DEFAULT_ISSUER = DEFAULT_ISSUER;
+exports.JWT_ALG = JWT_ALG;
+exports.SESSION_COOKIE = SESSION_COOKIE;
+exports.clearSessionCookieHeader = clearSessionCookieHeader;
+exports.loadPrivateKey = loadPrivateKey;
+exports.loadPublicKey = loadPublicKey;
+exports.parsePublicJwk = parsePublicJwk;
+exports.readSessionCookie = readSessionCookie;
+exports.serializeSessionCookie = serializeSessionCookie;
+exports.signSession = signSession;
+exports.verifySessionToken = verifySessionToken;
+//# sourceMappingURL=index.js.map
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts"],"names":["importJWK","SignJWT","jwtVerify"],"mappings":";;;;;AAwBO,IAAM,OAAA,GAAU;AAChB,IAAM,cAAA,GAAiB;AACvB,IAAM,cAAA,GAAiB;AA0B9B,SAAS,UAAU,KAAA,EAAwC;AACvD,EAAA,MAAM,OACF,OAAO,MAAA,KAAW,cACZ,MAAA,CAAO,IAAA,CAAK,OAAO,WAAW,CAAA,CAAE,QAAA,CAAS,MAAM,IAC/C,IAAI,WAAA,GAAc,MAAA,CAAO,eAAA,CAAgB,KAAK,CAAC,CAAA;AACzD,EAAA,MAAM,MAAA,GAAS,IAAA,CAAK,KAAA,CAAM,IAAI,CAAA;AAC9B,EAAA,IAAI,CAAC,MAAA,IAAU,OAAO,MAAA,KAAW,QAAA,EAAU;AACvC,IAAA,MAAM,IAAI,MAAM,8DAA8D,CAAA;AAAA,EAClF;AACA,EAAA,OAAO,MAAA;AACX;AAEA,SAAS,gBAAgB,KAAA,EAA2B;AAChD,EAAA,MAAM,GAAA,GAAM,KAAA,CAAM,MAAA,GAAS,CAAA,KAAM,CAAA,GAAI,EAAA,GAAK,GAAA,CAAI,MAAA,CAAO,CAAA,GAAK,KAAA,CAAM,MAAA,GAAS,CAAE,CAAA;AAC3E,EAAA,MAAM,GAAA,GAAA,CAAO,QAAQ,GAAA,EAAK,OAAA,CAAQ,MAAM,GAAG,CAAA,CAAE,OAAA,CAAQ,IAAA,EAAM,GAAG,CAAA;AAC9D,EAAA,MAAM,MAAM,OAAO,IAAA,KAAS,WAAA,GAAc,IAAA,CAAK,GAAG,CAAA,GAAI,EAAA;AACtD,EAAA,MAAM,KAAA,GAAQ,IAAI,UAAA,CAAW,GAAA,CAAI,MAAM,CAAA;AACvC,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,GAAA,CAAI,MAAA,EAAQ,CAAA,EAAA,EAAK,KAAA,CAAM,CAAC,CAAA,GAAI,GAAA,CAAI,UAAA,CAAW,CAAC,CAAA;AAChE,EAAA,OAAO,KAAA;AACX;AAEA,IAAI,gBAAA,GAA4C,IAAA;AAChD,IAAI,cAAA,GAAgC,IAAA;AAC7B,SAAS,cAAc,SAAA,EAAqC;AAC/D,EAAA,IAAI,CAAC,gBAAA,IAAoB,cAAA,KAAmB,SAAA,EAAW;AACnD,IAAA,cAAA,GAAiB,SAAA;AACjB,IAAA,gBAAA,GAAmBA,cAAA,CAAU,SAAA,CAAU,SAAS,CAAA,EAAG,OAAO,CAAA;AAAA,EAC9D;AACA,EAAA,OAAO,gBAAA;AACX;AAEA,IAAI,iBAAA,GAA6C,IAAA;AACjD,IAAI,eAAA,GAAiC,IAAA;AAC9B,SAAS,eAAe,UAAA,EAAsC;AACjE,EAAA,IAAI,CAAC,iBAAA,IAAqB,eAAA,KAAoB,UAAA,EAAY;AACtD,IAAA,eAAA,GAAkB,UAAA;AAClB,IAAA,iBAAA,GAAoBA,cAAA,CAAU,SAAA,CAAU,UAAU,CAAA,EAAG,OAAO,CAAA;AAAA,EAChE;AACA,EAAA,OAAO,iBAAA;AACX;AAGO,SAAS,eAAe,SAAA,EAA4C;AACvE,EAAA,OAAO,UAAU,SAAS,CAAA;AAC9B;AAWA,eAAsB,WAAA,CAClB,MAAA,EACA,GAAA,EACA,UAAA,EACe;AACf,EAAA,MAAM,MAAM,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,GAAA,KAAQ,GAAI,CAAA;AACxC,EAAA,OAAO,IAAIC,YAAA,CAAQ,MAAM,CAAA,CACpB,mBAAmB,EAAE,GAAA,EAAK,OAAA,EAAS,GAAA,EAAK,KAAA,EAAO,GAAA,EAAK,GAAA,CAAI,GAAA,EAAK,CAAA,CAC7D,SAAA,CAAU,GAAA,CAAI,MAAA,IAAU,cAAc,CAAA,CACtC,WAAA,CAAY,GAAG,EACf,iBAAA,CAAkB,GAAA,GAAM,UAAU,CAAA,CAClC,IAAA,CAAK,MAAM,cAAA,CAAe,GAAA,CAAI,UAAU,CAAC,CAAA;AAClD;AASA,eAAsB,kBAAA,CAClB,OACA,GAAA,EAC8B;AAC9B,EAAA,IAAI;AACA,IAAA,MAAM,GAAA,GAAM,MAAMC,cAAA,CAAU,KAAA,EAAO,MAAM,aAAA,CAAc,GAAA,CAAI,SAAS,CAAA,EAAG;AAAA,MACnE,UAAA,EAAY,CAAC,OAAO,CAAA;AAAA,MACpB,MAAA,EAAQ,IAAI,MAAA,IAAU;AAAA,KACzB,CAAA;AACD,IAAA,MAAM,IAAI,GAAA,CAAI,OAAA;AACd,IAAA,IAAI,CAAC,EAAE,GAAA,IAAO,CAAC,EAAE,IAAA,IAAQ,CAAC,CAAA,CAAE,GAAA,EAAK,OAAO,IAAA;AACxC,IAAA,OAAO,CAAA;AAAA,EACX,CAAA,CAAA,MAAQ;AACJ,IAAA,OAAO,IAAA;AAAA,EACX;AACJ;AAkBO,SAAS,sBAAA,CACZ,KAAA,EACA,IAAA,GAAsB,EAAC,EACjB;AACN,EAAA,MAAM,QAAkB,CAAC,CAAA,EAAG,cAAc,CAAA,CAAA,EAAI,KAAK,CAAA,CAAE,CAAA;AACrD,EAAA,KAAA,CAAM,IAAA,CAAK,CAAA,KAAA,EAAQ,IAAA,CAAK,IAAA,IAAQ,GAAG,CAAA,CAAE,CAAA;AACrC,EAAA,IAAI,IAAA,CAAK,QAAA,IAAY,IAAA,EAAM,KAAA,CAAM,KAAK,UAAU,CAAA;AAChD,EAAA,KAAA,CAAM,IAAA,CAAK,CAAA,SAAA,EAAY,IAAA,CAAK,QAAA,IAAY,KAAK,CAAA,CAAE,CAAA;AAC/C,EAAA,IAAI,IAAA,CAAK,MAAA,IAAU,IAAA,EAAM,KAAA,CAAM,KAAK,QAAQ,CAAA;AAC5C,EAAA,IAAI,KAAK,MAAA,EAAQ,KAAA,CAAM,KAAK,CAAA,OAAA,EAAU,IAAA,CAAK,MAAM,CAAA,CAAE,CAAA;AACnD,EAAA,IAAI,IAAA,CAAK,UAAU,IAAA,EAAM,KAAA,CAAM,KAAK,CAAA,QAAA,EAAW,IAAA,CAAK,MAAM,CAAA,CAAE,CAAA;AAC5D,EAAA,IAAI,IAAA,CAAK,SAAS,KAAA,CAAM,IAAA,CAAK,WAAW,IAAA,CAAK,OAAA,CAAQ,WAAA,EAAa,CAAA,CAAE,CAAA;AACpE,EAAA,OAAO,KAAA,CAAM,KAAK,IAAI,CAAA;AAC1B;AAGO,SAAS,wBAAA,CAAyB,IAAA,GAA0D,EAAC,EAAW;AAC3G,EAAA,OAAO,uBAAuB,EAAA,EAAI;AAAA,IAC9B,GAAG,IAAA;AAAA,IACH,MAAA,EAAQ,CAAA;AAAA,IACR,OAAA,kBAAS,IAAI,IAAA,CAAK,CAAC;AAAA,GACtB,CAAA;AACL;AAMO,SAAS,kBAAkB,YAAA,EAAwD;AACtF,EAAA,IAAI,CAAC,cAAc,OAAO,IAAA;AAC1B,EAAA,MAAM,MAAA,GAAS,GAAG,cAAc,CAAA,CAAA,CAAA;AAChC,EAAA,KAAA,MAAW,IAAA,IAAQ,YAAA,CAAa,KAAA,CAAM,GAAG,CAAA,EAAG;AACxC,IAAA,MAAM,OAAA,GAAU,KAAK,IAAA,EAAK;AAC1B,IAAA,IAAI,OAAA,CAAQ,UAAA,CAAW,MAAM,CAAA,EAAG;AAC5B,MAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,KAAA,CAAM,MAAA,CAAO,MAAM,CAAA;AACvC,MAAA,OAAO,GAAA,CAAI,MAAA,GAAS,CAAA,GAAI,GAAA,GAAM,IAAA;AAAA,IAClC;AAAA,EACJ;AACA,EAAA,OAAO,IAAA;AACX","file":"index.js","sourcesContent":["/**\n * @orangecheck/auth-core\n *\n * Cross-subdomain oc_session JWT verification + cookie helpers.\n *\n * The auth HOST (whoever owns sign-in) holds a private key and issues\n * tokens with `signSession()`. Every CONSUMER subdomain holds only the\n * public JWK and verifies tokens locally with `verifySessionToken()` —\n * no network round-trip, no shared secret.\n *\n * The ochk.io ecosystem picks Ed25519 (EdDSA) with JWKs distributed\n * via environment variable. The public key is also published at\n * `/.well-known/jwks.json` on the auth host for dynamic discovery.\n */\n\nimport {\n    importJWK,\n    jwtVerify,\n    SignJWT,\n    type CryptoKey,\n    type JWTPayload,\n    type KeyObject,\n} from 'jose';\n\nexport const JWT_ALG = 'EdDSA' as const;\nexport const SESSION_COOKIE = 'oc_session' as const;\nexport const DEFAULT_ISSUER = 'https://ochk.io' as const;\n\nexport type AuthKey = CryptoKey | KeyObject;\n\nexport interface SessionPayload extends JWTPayload {\n    sub: string;\n    addr: string;\n    jti: string;\n}\n\nexport interface VerifyConfig {\n    /** Base64url-encoded JWK containing the Ed25519 public key. */\n    publicJwk: string;\n    /** Expected `iss` claim. Tokens with a different issuer are rejected. */\n    issuer?: string;\n}\n\nexport interface SignConfig extends VerifyConfig {\n    /** Base64url-encoded JWK containing the Ed25519 private key. */\n    privateJwk: string;\n    /** Short key id placed in the JWT header (`kid`). Must match the JWK. */\n    kid: string;\n}\n\n// ─── JWK helpers ────────────────────────────────────────────────────────\n\nfunction decodeJwk(value: string): Record<string, unknown> {\n    const json =\n        typeof Buffer !== 'undefined'\n            ? Buffer.from(value, 'base64url').toString('utf8')\n            : new TextDecoder().decode(base64UrlDecode(value));\n    const parsed = JSON.parse(json) as Record<string, unknown>;\n    if (!parsed || typeof parsed !== 'object') {\n        throw new Error('[@orangecheck/auth-core] JWK env did not decode to an object');\n    }\n    return parsed;\n}\n\nfunction base64UrlDecode(input: string): Uint8Array {\n    const pad = input.length % 4 === 0 ? '' : '='.repeat(4 - (input.length % 4));\n    const b64 = (input + pad).replace(/-/g, '+').replace(/_/g, '/');\n    const bin = typeof atob !== 'undefined' ? atob(b64) : '';\n    const bytes = new Uint8Array(bin.length);\n    for (let i = 0; i < bin.length; i++) bytes[i] = bin.charCodeAt(i);\n    return bytes;\n}\n\nlet publicKeyPromise: Promise<AuthKey> | null = null;\nlet publicKeyCache: string | null = null;\nexport function loadPublicKey(publicJwk: string): Promise<AuthKey> {\n    if (!publicKeyPromise || publicKeyCache !== publicJwk) {\n        publicKeyCache = publicJwk;\n        publicKeyPromise = importJWK(decodeJwk(publicJwk), JWT_ALG) as Promise<AuthKey>;\n    }\n    return publicKeyPromise;\n}\n\nlet privateKeyPromise: Promise<AuthKey> | null = null;\nlet privateKeyCache: string | null = null;\nexport function loadPrivateKey(privateJwk: string): Promise<AuthKey> {\n    if (!privateKeyPromise || privateKeyCache !== privateJwk) {\n        privateKeyCache = privateJwk;\n        privateKeyPromise = importJWK(decodeJwk(privateJwk), JWT_ALG) as Promise<AuthKey>;\n    }\n    return privateKeyPromise;\n}\n\n/** Parse the `OC_AUTH_PUBLIC_JWK` env var back into a JWK object. */\nexport function parsePublicJwk(publicJwk: string): Record<string, unknown> {\n    return decodeJwk(publicJwk);\n}\n\n// ─── Sign / verify ──────────────────────────────────────────────────────\n\n/**\n * Mint a fresh oc_session JWT. Only called on the auth host (the only\n * place that holds the private key).\n *\n * The caller owns persisting `jti` to a revocation list if they want\n * revocation semantics — auth-core is deliberately stateless.\n */\nexport async function signSession(\n    claims: { sub: string; addr: string; jti: string },\n    cfg: SignConfig,\n    ttlSeconds: number\n): Promise<string> {\n    const now = Math.floor(Date.now() / 1000);\n    return new SignJWT(claims)\n        .setProtectedHeader({ alg: JWT_ALG, typ: 'JWT', kid: cfg.kid })\n        .setIssuer(cfg.issuer ?? DEFAULT_ISSUER)\n        .setIssuedAt(now)\n        .setExpirationTime(now + ttlSeconds)\n        .sign(await loadPrivateKey(cfg.privateJwk));\n}\n\n/**\n * Crypto-only JWT verify. Returns the payload on success, `null` on\n * any failure (bad signature, expired, wrong issuer, malformed).\n *\n * Safe for consumer subdomains — they only need the public JWK.\n * Revocation-aware checks live on the auth host.\n */\nexport async function verifySessionToken(\n    token: string,\n    cfg: VerifyConfig\n): Promise<SessionPayload | null> {\n    try {\n        const res = await jwtVerify(token, await loadPublicKey(cfg.publicJwk), {\n            algorithms: [JWT_ALG],\n            issuer: cfg.issuer ?? DEFAULT_ISSUER,\n        });\n        const p = res.payload as SessionPayload;\n        if (!p.sub || !p.addr || !p.jti) return null;\n        return p;\n    } catch {\n        return null;\n    }\n}\n\n// ─── Cookie helpers ─────────────────────────────────────────────────────\n\nexport interface CookieOptions {\n    domain?: string;\n    maxAge?: number;\n    expires?: Date;\n    path?: string;\n    secure?: boolean;\n    httpOnly?: boolean;\n    sameSite?: 'Lax' | 'Strict' | 'None';\n}\n\n/**\n * Serialize a cookie header value for `Set-Cookie`. Defaults match the\n * ochk.io session shape: HttpOnly, SameSite=Lax, Path=/, Secure in prod.\n */\nexport function serializeSessionCookie(\n    token: string,\n    opts: CookieOptions = {}\n): string {\n    const parts: string[] = [`${SESSION_COOKIE}=${token}`];\n    parts.push(`Path=${opts.path ?? '/'}`);\n    if (opts.httpOnly ?? true) parts.push('HttpOnly');\n    parts.push(`SameSite=${opts.sameSite ?? 'Lax'}`);\n    if (opts.secure ?? true) parts.push('Secure');\n    if (opts.domain) parts.push(`Domain=${opts.domain}`);\n    if (opts.maxAge != null) parts.push(`Max-Age=${opts.maxAge}`);\n    if (opts.expires) parts.push(`Expires=${opts.expires.toUTCString()}`);\n    return parts.join('; ');\n}\n\n/** Clear the session cookie. Must match the Domain used when it was set. */\nexport function clearSessionCookieHeader(opts: Pick<CookieOptions, 'domain' | 'path' | 'secure'> = {}): string {\n    return serializeSessionCookie('', {\n        ...opts,\n        maxAge: 0,\n        expires: new Date(0),\n    });\n}\n\n/**\n * Read the oc_session token out of a raw `Cookie:` header string.\n * Returns `null` if the cookie is missing or empty.\n */\nexport function readSessionCookie(cookieHeader: string | null | undefined): string | null {\n    if (!cookieHeader) return null;\n    const prefix = `${SESSION_COOKIE}=`;\n    for (const part of cookieHeader.split(';')) {\n        const trimmed = part.trim();\n        if (trimmed.startsWith(prefix)) {\n            const val = trimmed.slice(prefix.length);\n            return val.length > 0 ? val : null;\n        }\n    }\n    return null;\n}\n"]}

package/dist/index.mjs

@@ -0,0 +1,94 @@
+import { importJWK, SignJWT, jwtVerify } from 'jose';
+
+// src/index.ts
+var JWT_ALG = "EdDSA";
+var SESSION_COOKIE = "oc_session";
+var DEFAULT_ISSUER = "https://ochk.io";
+function decodeJwk(value) {
+  const json = typeof Buffer !== "undefined" ? Buffer.from(value, "base64url").toString("utf8") : new TextDecoder().decode(base64UrlDecode(value));
+  const parsed = JSON.parse(json);
+  if (!parsed || typeof parsed !== "object") {
+    throw new Error("[@orangecheck/auth-core] JWK env did not decode to an object");
+  }
+  return parsed;
+}
+function base64UrlDecode(input) {
+  const pad = input.length % 4 === 0 ? "" : "=".repeat(4 - input.length % 4);
+  const b64 = (input + pad).replace(/-/g, "+").replace(/_/g, "/");
+  const bin = typeof atob !== "undefined" ? atob(b64) : "";
+  const bytes = new Uint8Array(bin.length);
+  for (let i = 0; i < bin.length; i++) bytes[i] = bin.charCodeAt(i);
+  return bytes;
+}
+var publicKeyPromise = null;
+var publicKeyCache = null;
+function loadPublicKey(publicJwk) {
+  if (!publicKeyPromise || publicKeyCache !== publicJwk) {
+    publicKeyCache = publicJwk;
+    publicKeyPromise = importJWK(decodeJwk(publicJwk), JWT_ALG);
+  }
+  return publicKeyPromise;
+}
+var privateKeyPromise = null;
+var privateKeyCache = null;
+function loadPrivateKey(privateJwk) {
+  if (!privateKeyPromise || privateKeyCache !== privateJwk) {
+    privateKeyCache = privateJwk;
+    privateKeyPromise = importJWK(decodeJwk(privateJwk), JWT_ALG);
+  }
+  return privateKeyPromise;
+}
+function parsePublicJwk(publicJwk) {
+  return decodeJwk(publicJwk);
+}
+async function signSession(claims, cfg, ttlSeconds) {
+  const now = Math.floor(Date.now() / 1e3);
+  return new SignJWT(claims).setProtectedHeader({ alg: JWT_ALG, typ: "JWT", kid: cfg.kid }).setIssuer(cfg.issuer ?? DEFAULT_ISSUER).setIssuedAt(now).setExpirationTime(now + ttlSeconds).sign(await loadPrivateKey(cfg.privateJwk));
+}
+async function verifySessionToken(token, cfg) {
+  try {
+    const res = await jwtVerify(token, await loadPublicKey(cfg.publicJwk), {
+      algorithms: [JWT_ALG],
+      issuer: cfg.issuer ?? DEFAULT_ISSUER
+    });
+    const p = res.payload;
+    if (!p.sub || !p.addr || !p.jti) return null;
+    return p;
+  } catch {
+    return null;
+  }
+}
+function serializeSessionCookie(token, opts = {}) {
+  const parts = [`${SESSION_COOKIE}=${token}`];
+  parts.push(`Path=${opts.path ?? "/"}`);
+  if (opts.httpOnly ?? true) parts.push("HttpOnly");
+  parts.push(`SameSite=${opts.sameSite ?? "Lax"}`);
+  if (opts.secure ?? true) parts.push("Secure");
+  if (opts.domain) parts.push(`Domain=${opts.domain}`);
+  if (opts.maxAge != null) parts.push(`Max-Age=${opts.maxAge}`);
+  if (opts.expires) parts.push(`Expires=${opts.expires.toUTCString()}`);
+  return parts.join("; ");
+}
+function clearSessionCookieHeader(opts = {}) {
+  return serializeSessionCookie("", {
+    ...opts,
+    maxAge: 0,
+    expires: /* @__PURE__ */ new Date(0)
+  });
+}
+function readSessionCookie(cookieHeader) {
+  if (!cookieHeader) return null;
+  const prefix = `${SESSION_COOKIE}=`;
+  for (const part of cookieHeader.split(";")) {
+    const trimmed = part.trim();
+    if (trimmed.startsWith(prefix)) {
+      const val = trimmed.slice(prefix.length);
+      return val.length > 0 ? val : null;
+    }
+  }
+  return null;
+}
+
+export { DEFAULT_ISSUER, JWT_ALG, SESSION_COOKIE, clearSessionCookieHeader, loadPrivateKey, loadPublicKey, parsePublicJwk, readSessionCookie, serializeSessionCookie, signSession, verifySessionToken };
+//# sourceMappingURL=index.mjs.map
+//# sourceMappingURL=index.mjs.map

package/dist/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts"],"names":[],"mappings":";;;AAwBO,IAAM,OAAA,GAAU;AAChB,IAAM,cAAA,GAAiB;AACvB,IAAM,cAAA,GAAiB;AA0B9B,SAAS,UAAU,KAAA,EAAwC;AACvD,EAAA,MAAM,OACF,OAAO,MAAA,KAAW,cACZ,MAAA,CAAO,IAAA,CAAK,OAAO,WAAW,CAAA,CAAE,QAAA,CAAS,MAAM,IAC/C,IAAI,WAAA,GAAc,MAAA,CAAO,eAAA,CAAgB,KAAK,CAAC,CAAA;AACzD,EAAA,MAAM,MAAA,GAAS,IAAA,CAAK,KAAA,CAAM,IAAI,CAAA;AAC9B,EAAA,IAAI,CAAC,MAAA,IAAU,OAAO,MAAA,KAAW,QAAA,EAAU;AACvC,IAAA,MAAM,IAAI,MAAM,8DAA8D,CAAA;AAAA,EAClF;AACA,EAAA,OAAO,MAAA;AACX;AAEA,SAAS,gBAAgB,KAAA,EAA2B;AAChD,EAAA,MAAM,GAAA,GAAM,KAAA,CAAM,MAAA,GAAS,CAAA,KAAM,CAAA,GAAI,EAAA,GAAK,GAAA,CAAI,MAAA,CAAO,CAAA,GAAK,KAAA,CAAM,MAAA,GAAS,CAAE,CAAA;AAC3E,EAAA,MAAM,GAAA,GAAA,CAAO,QAAQ,GAAA,EAAK,OAAA,CAAQ,MAAM,GAAG,CAAA,CAAE,OAAA,CAAQ,IAAA,EAAM,GAAG,CAAA;AAC9D,EAAA,MAAM,MAAM,OAAO,IAAA,KAAS,WAAA,GAAc,IAAA,CAAK,GAAG,CAAA,GAAI,EAAA;AACtD,EAAA,MAAM,KAAA,GAAQ,IAAI,UAAA,CAAW,GAAA,CAAI,MAAM,CAAA;AACvC,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,GAAA,CAAI,MAAA,EAAQ,CAAA,EAAA,EAAK,KAAA,CAAM,CAAC,CAAA,GAAI,GAAA,CAAI,UAAA,CAAW,CAAC,CAAA;AAChE,EAAA,OAAO,KAAA;AACX;AAEA,IAAI,gBAAA,GAA4C,IAAA;AAChD,IAAI,cAAA,GAAgC,IAAA;AAC7B,SAAS,cAAc,SAAA,EAAqC;AAC/D,EAAA,IAAI,CAAC,gBAAA,IAAoB,cAAA,KAAmB,SAAA,EAAW;AACnD,IAAA,cAAA,GAAiB,SAAA;AACjB,IAAA,gBAAA,GAAmB,SAAA,CAAU,SAAA,CAAU,SAAS,CAAA,EAAG,OAAO,CAAA;AAAA,EAC9D;AACA,EAAA,OAAO,gBAAA;AACX;AAEA,IAAI,iBAAA,GAA6C,IAAA;AACjD,IAAI,eAAA,GAAiC,IAAA;AAC9B,SAAS,eAAe,UAAA,EAAsC;AACjE,EAAA,IAAI,CAAC,iBAAA,IAAqB,eAAA,KAAoB,UAAA,EAAY;AACtD,IAAA,eAAA,GAAkB,UAAA;AAClB,IAAA,iBAAA,GAAoB,SAAA,CAAU,SAAA,CAAU,UAAU,CAAA,EAAG,OAAO,CAAA;AAAA,EAChE;AACA,EAAA,OAAO,iBAAA;AACX;AAGO,SAAS,eAAe,SAAA,EAA4C;AACvE,EAAA,OAAO,UAAU,SAAS,CAAA;AAC9B;AAWA,eAAsB,WAAA,CAClB,MAAA,EACA,GAAA,EACA,UAAA,EACe;AACf,EAAA,MAAM,MAAM,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,GAAA,KAAQ,GAAI,CAAA;AACxC,EAAA,OAAO,IAAI,OAAA,CAAQ,MAAM,CAAA,CACpB,mBAAmB,EAAE,GAAA,EAAK,OAAA,EAAS,GAAA,EAAK,KAAA,EAAO,GAAA,EAAK,GAAA,CAAI,GAAA,EAAK,CAAA,CAC7D,SAAA,CAAU,GAAA,CAAI,MAAA,IAAU,cAAc,CAAA,CACtC,WAAA,CAAY,GAAG,EACf,iBAAA,CAAkB,GAAA,GAAM,UAAU,CAAA,CAClC,IAAA,CAAK,MAAM,cAAA,CAAe,GAAA,CAAI,UAAU,CAAC,CAAA;AAClD;AASA,eAAsB,kBAAA,CAClB,OACA,GAAA,EAC8B;AAC9B,EAAA,IAAI;AACA,IAAA,MAAM,GAAA,GAAM,MAAM,SAAA,CAAU,KAAA,EAAO,MAAM,aAAA,CAAc,GAAA,CAAI,SAAS,CAAA,EAAG;AAAA,MACnE,UAAA,EAAY,CAAC,OAAO,CAAA;AAAA,MACpB,MAAA,EAAQ,IAAI,MAAA,IAAU;AAAA,KACzB,CAAA;AACD,IAAA,MAAM,IAAI,GAAA,CAAI,OAAA;AACd,IAAA,IAAI,CAAC,EAAE,GAAA,IAAO,CAAC,EAAE,IAAA,IAAQ,CAAC,CAAA,CAAE,GAAA,EAAK,OAAO,IAAA;AACxC,IAAA,OAAO,CAAA;AAAA,EACX,CAAA,CAAA,MAAQ;AACJ,IAAA,OAAO,IAAA;AAAA,EACX;AACJ;AAkBO,SAAS,sBAAA,CACZ,KAAA,EACA,IAAA,GAAsB,EAAC,EACjB;AACN,EAAA,MAAM,QAAkB,CAAC,CAAA,EAAG,cAAc,CAAA,CAAA,EAAI,KAAK,CAAA,CAAE,CAAA;AACrD,EAAA,KAAA,CAAM,IAAA,CAAK,CAAA,KAAA,EAAQ,IAAA,CAAK,IAAA,IAAQ,GAAG,CAAA,CAAE,CAAA;AACrC,EAAA,IAAI,IAAA,CAAK,QAAA,IAAY,IAAA,EAAM,KAAA,CAAM,KAAK,UAAU,CAAA;AAChD,EAAA,KAAA,CAAM,IAAA,CAAK,CAAA,SAAA,EAAY,IAAA,CAAK,QAAA,IAAY,KAAK,CAAA,CAAE,CAAA;AAC/C,EAAA,IAAI,IAAA,CAAK,MAAA,IAAU,IAAA,EAAM,KAAA,CAAM,KAAK,QAAQ,CAAA;AAC5C,EAAA,IAAI,KAAK,MAAA,EAAQ,KAAA,CAAM,KAAK,CAAA,OAAA,EAAU,IAAA,CAAK,MAAM,CAAA,CAAE,CAAA;AACnD,EAAA,IAAI,IAAA,CAAK,UAAU,IAAA,EAAM,KAAA,CAAM,KAAK,CAAA,QAAA,EAAW,IAAA,CAAK,MAAM,CAAA,CAAE,CAAA;AAC5D,EAAA,IAAI,IAAA,CAAK,SAAS,KAAA,CAAM,IAAA,CAAK,WAAW,IAAA,CAAK,OAAA,CAAQ,WAAA,EAAa,CAAA,CAAE,CAAA;AACpE,EAAA,OAAO,KAAA,CAAM,KAAK,IAAI,CAAA;AAC1B;AAGO,SAAS,wBAAA,CAAyB,IAAA,GAA0D,EAAC,EAAW;AAC3G,EAAA,OAAO,uBAAuB,EAAA,EAAI;AAAA,IAC9B,GAAG,IAAA;AAAA,IACH,MAAA,EAAQ,CAAA;AAAA,IACR,OAAA,kBAAS,IAAI,IAAA,CAAK,CAAC;AAAA,GACtB,CAAA;AACL;AAMO,SAAS,kBAAkB,YAAA,EAAwD;AACtF,EAAA,IAAI,CAAC,cAAc,OAAO,IAAA;AAC1B,EAAA,MAAM,MAAA,GAAS,GAAG,cAAc,CAAA,CAAA,CAAA;AAChC,EAAA,KAAA,MAAW,IAAA,IAAQ,YAAA,CAAa,KAAA,CAAM,GAAG,CAAA,EAAG;AACxC,IAAA,MAAM,OAAA,GAAU,KAAK,IAAA,EAAK;AAC1B,IAAA,IAAI,OAAA,CAAQ,UAAA,CAAW,MAAM,CAAA,EAAG;AAC5B,MAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,KAAA,CAAM,MAAA,CAAO,MAAM,CAAA;AACvC,MAAA,OAAO,GAAA,CAAI,MAAA,GAAS,CAAA,GAAI,GAAA,GAAM,IAAA;AAAA,IAClC;AAAA,EACJ;AACA,EAAA,OAAO,IAAA;AACX","file":"index.mjs","sourcesContent":["/**\n * @orangecheck/auth-core\n *\n * Cross-subdomain oc_session JWT verification + cookie helpers.\n *\n * The auth HOST (whoever owns sign-in) holds a private key and issues\n * tokens with `signSession()`. Every CONSUMER subdomain holds only the\n * public JWK and verifies tokens locally with `verifySessionToken()` —\n * no network round-trip, no shared secret.\n *\n * The ochk.io ecosystem picks Ed25519 (EdDSA) with JWKs distributed\n * via environment variable. The public key is also published at\n * `/.well-known/jwks.json` on the auth host for dynamic discovery.\n */\n\nimport {\n    importJWK,\n    jwtVerify,\n    SignJWT,\n    type CryptoKey,\n    type JWTPayload,\n    type KeyObject,\n} from 'jose';\n\nexport const JWT_ALG = 'EdDSA' as const;\nexport const SESSION_COOKIE = 'oc_session' as const;\nexport const DEFAULT_ISSUER = 'https://ochk.io' as const;\n\nexport type AuthKey = CryptoKey | KeyObject;\n\nexport interface SessionPayload extends JWTPayload {\n    sub: string;\n    addr: string;\n    jti: string;\n}\n\nexport interface VerifyConfig {\n    /** Base64url-encoded JWK containing the Ed25519 public key. */\n    publicJwk: string;\n    /** Expected `iss` claim. Tokens with a different issuer are rejected. */\n    issuer?: string;\n}\n\nexport interface SignConfig extends VerifyConfig {\n    /** Base64url-encoded JWK containing the Ed25519 private key. */\n    privateJwk: string;\n    /** Short key id placed in the JWT header (`kid`). Must match the JWK. */\n    kid: string;\n}\n\n// ─── JWK helpers ────────────────────────────────────────────────────────\n\nfunction decodeJwk(value: string): Record<string, unknown> {\n    const json =\n        typeof Buffer !== 'undefined'\n            ? Buffer.from(value, 'base64url').toString('utf8')\n            : new TextDecoder().decode(base64UrlDecode(value));\n    const parsed = JSON.parse(json) as Record<string, unknown>;\n    if (!parsed || typeof parsed !== 'object') {\n        throw new Error('[@orangecheck/auth-core] JWK env did not decode to an object');\n    }\n    return parsed;\n}\n\nfunction base64UrlDecode(input: string): Uint8Array {\n    const pad = input.length % 4 === 0 ? '' : '='.repeat(4 - (input.length % 4));\n    const b64 = (input + pad).replace(/-/g, '+').replace(/_/g, '/');\n    const bin = typeof atob !== 'undefined' ? atob(b64) : '';\n    const bytes = new Uint8Array(bin.length);\n    for (let i = 0; i < bin.length; i++) bytes[i] = bin.charCodeAt(i);\n    return bytes;\n}\n\nlet publicKeyPromise: Promise<AuthKey> | null = null;\nlet publicKeyCache: string | null = null;\nexport function loadPublicKey(publicJwk: string): Promise<AuthKey> {\n    if (!publicKeyPromise || publicKeyCache !== publicJwk) {\n        publicKeyCache = publicJwk;\n        publicKeyPromise = importJWK(decodeJwk(publicJwk), JWT_ALG) as Promise<AuthKey>;\n    }\n    return publicKeyPromise;\n}\n\nlet privateKeyPromise: Promise<AuthKey> | null = null;\nlet privateKeyCache: string | null = null;\nexport function loadPrivateKey(privateJwk: string): Promise<AuthKey> {\n    if (!privateKeyPromise || privateKeyCache !== privateJwk) {\n        privateKeyCache = privateJwk;\n        privateKeyPromise = importJWK(decodeJwk(privateJwk), JWT_ALG) as Promise<AuthKey>;\n    }\n    return privateKeyPromise;\n}\n\n/** Parse the `OC_AUTH_PUBLIC_JWK` env var back into a JWK object. */\nexport function parsePublicJwk(publicJwk: string): Record<string, unknown> {\n    return decodeJwk(publicJwk);\n}\n\n// ─── Sign / verify ──────────────────────────────────────────────────────\n\n/**\n * Mint a fresh oc_session JWT. Only called on the auth host (the only\n * place that holds the private key).\n *\n * The caller owns persisting `jti` to a revocation list if they want\n * revocation semantics — auth-core is deliberately stateless.\n */\nexport async function signSession(\n    claims: { sub: string; addr: string; jti: string },\n    cfg: SignConfig,\n    ttlSeconds: number\n): Promise<string> {\n    const now = Math.floor(Date.now() / 1000);\n    return new SignJWT(claims)\n        .setProtectedHeader({ alg: JWT_ALG, typ: 'JWT', kid: cfg.kid })\n        .setIssuer(cfg.issuer ?? DEFAULT_ISSUER)\n        .setIssuedAt(now)\n        .setExpirationTime(now + ttlSeconds)\n        .sign(await loadPrivateKey(cfg.privateJwk));\n}\n\n/**\n * Crypto-only JWT verify. Returns the payload on success, `null` on\n * any failure (bad signature, expired, wrong issuer, malformed).\n *\n * Safe for consumer subdomains — they only need the public JWK.\n * Revocation-aware checks live on the auth host.\n */\nexport async function verifySessionToken(\n    token: string,\n    cfg: VerifyConfig\n): Promise<SessionPayload | null> {\n    try {\n        const res = await jwtVerify(token, await loadPublicKey(cfg.publicJwk), {\n            algorithms: [JWT_ALG],\n            issuer: cfg.issuer ?? DEFAULT_ISSUER,\n        });\n        const p = res.payload as SessionPayload;\n        if (!p.sub || !p.addr || !p.jti) return null;\n        return p;\n    } catch {\n        return null;\n    }\n}\n\n// ─── Cookie helpers ─────────────────────────────────────────────────────\n\nexport interface CookieOptions {\n    domain?: string;\n    maxAge?: number;\n    expires?: Date;\n    path?: string;\n    secure?: boolean;\n    httpOnly?: boolean;\n    sameSite?: 'Lax' | 'Strict' | 'None';\n}\n\n/**\n * Serialize a cookie header value for `Set-Cookie`. Defaults match the\n * ochk.io session shape: HttpOnly, SameSite=Lax, Path=/, Secure in prod.\n */\nexport function serializeSessionCookie(\n    token: string,\n    opts: CookieOptions = {}\n): string {\n    const parts: string[] = [`${SESSION_COOKIE}=${token}`];\n    parts.push(`Path=${opts.path ?? '/'}`);\n    if (opts.httpOnly ?? true) parts.push('HttpOnly');\n    parts.push(`SameSite=${opts.sameSite ?? 'Lax'}`);\n    if (opts.secure ?? true) parts.push('Secure');\n    if (opts.domain) parts.push(`Domain=${opts.domain}`);\n    if (opts.maxAge != null) parts.push(`Max-Age=${opts.maxAge}`);\n    if (opts.expires) parts.push(`Expires=${opts.expires.toUTCString()}`);\n    return parts.join('; ');\n}\n\n/** Clear the session cookie. Must match the Domain used when it was set. */\nexport function clearSessionCookieHeader(opts: Pick<CookieOptions, 'domain' | 'path' | 'secure'> = {}): string {\n    return serializeSessionCookie('', {\n        ...opts,\n        maxAge: 0,\n        expires: new Date(0),\n    });\n}\n\n/**\n * Read the oc_session token out of a raw `Cookie:` header string.\n * Returns `null` if the cookie is missing or empty.\n */\nexport function readSessionCookie(cookieHeader: string | null | undefined): string | null {\n    if (!cookieHeader) return null;\n    const prefix = `${SESSION_COOKIE}=`;\n    for (const part of cookieHeader.split(';')) {\n        const trimmed = part.trim();\n        if (trimmed.startsWith(prefix)) {\n            const val = trimmed.slice(prefix.length);\n            return val.length > 0 ? val : null;\n        }\n    }\n    return null;\n}\n"]}

package/package.json

@@ -0,0 +1,58 @@
+{
+    "name": "@orangecheck/auth-core",
+    "version": "0.1.0",
+    "description": "Cross-subdomain oc_session JWT verification and cookie helpers. The auth primitive every OrangeCheck app imports.",
+    "keywords": [
+        "orangecheck",
+        "bitcoin",
+        "auth",
+        "jwt",
+        "ed25519",
+        "sso",
+        "sybil-resistance"
+    ],
+    "author": "OrangeCheck",
+    "license": "MIT",
+    "homepage": "https://ochk.io",
+    "repository": {
+        "type": "git",
+        "url": "https://github.com/orangecheck/oc-packages.git",
+        "directory": "auth-core"
+    },
+    "bugs": {
+        "url": "https://github.com/orangecheck/oc-packages/issues"
+    },
+    "main": "./dist/index.js",
+    "module": "./dist/index.mjs",
+    "types": "./dist/index.d.ts",
+    "exports": {
+        ".": {
+            "types": "./dist/index.d.ts",
+            "import": "./dist/index.mjs",
+            "require": "./dist/index.js"
+        }
+    },
+    "files": [
+        "dist",
+        "README.md",
+        "LICENSE"
+    ],
+    "scripts": {
+        "build": "tsup",
+        "dev": "tsup --watch",
+        "test": "vitest run",
+        "test:watch": "vitest",
+        "type-check": "tsc --noEmit",
+        "clean": "rm -rf dist",
+        "prepublishOnly": "npm run clean && npm run build"
+    },
+    "dependencies": {
+        "jose": "^6.2.2"
+    },
+    "devDependencies": {
+        "@types/node": "^25.6.0",
+        "tsup": "^8.5.1",
+        "typescript": "^6.0.3",
+        "vitest": "^4.1.5"
+    }
+}