@pangza/auth 0.0.0-stage → 1.0.0

package/README.md

@@ -1,3 +1,3 @@
-# Temporary Holding Version
+# @pangza/auth
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+Auth / 登录态与权限

package/dist/AuthUtil.d.ts

@@ -0,0 +1,78 @@
+import type { AuthOptions, AuthSession, LoginId, LoginOptions, ResolvedAuthOptions } from "./types";
+/** 合并并保存 Auth 配置；配置了 redis 则优先使用 Redis 会话库 */
+export declare function configureAuth(options?: AuthOptions): void;
+/** 读取当前鉴权配置 */
+export declare function getAuthOptions(): ResolvedAuthOptions;
+/** 校验会话是否因绝对过期 / 闲置过期而失效 */
+export declare function isSessionExpired(session: AuthSession, options?: ResolvedAuthOptions): boolean;
+/**
+ * 类 Sa-Token 的静态工具（AuthUtil）。
+ * 业务侧通过它完成登录、取 token、校验登录/角色/权限。
+ */
+export declare class AuthUtil {
+    /**
+     * 登录：创建会话并返回 token。
+     *
+     * @example
+     * AuthUtil.login(id, ['admin'], ['user:read'])
+     * AuthUtil.login(id, { roles, permissions, device: 'web', username })
+     */
+    static login(loginId: LoginId, rolesOrOptions?: string[] | LoginOptions, permissions?: string[], profile?: {
+        username?: string;
+        avatar?: string;
+        device?: string;
+    }): Promise<string>;
+    private static syncContext;
+    /**
+     * 注销当前（或指定）token 会话
+     * @param token 不传则注销当前请求 token
+     */
+    static logout(token?: string): Promise<void>;
+    /** 按账号注销其全部会话 */
+    static logoutByLoginId(loginId: LoginId): Promise<void>;
+    /** 按账号 + 设备注销 */
+    static logoutByDevice(loginId: LoginId, device: string): Promise<void>;
+    /** 获取当前请求 token（优先上下文，其次请求头/Cookie） */
+    static getTokenValue(): string | null;
+    /**
+     * 从请求解析 token：
+     * 1. tokenName 请求头（如 satoken）
+     * 2. Authorization / 自定义 header（可带 Bearer 前缀）
+     * 3. Cookie[tokenName]
+     */
+    static readTokenFromRequest(req: {
+        headers: Record<string, unknown>;
+        cookies?: Record<string, unknown>;
+    }): string | null;
+    /**
+     * 加载并校验会话；过期清理；可选刷新 lastActiveTime。
+     */
+    static loadSession(token: string | null, options?: {
+        touch?: boolean;
+    }): Promise<AuthSession | null>;
+    /** 获取当前有效会话；过期会清理并返回 null */
+    static getSession(): Promise<AuthSession | null>;
+    /** 是否已登录 */
+    static isLogin(): Promise<boolean>;
+    /** 校验已登录，否则抛 NotLoginError；返回 loginId */
+    static checkLogin(): Promise<LoginId>;
+    /** 获取登录账号（未登录抛错） */
+    static getLoginId(): Promise<LoginId>;
+    /** 获取登录账号；未登录返回 null */
+    static getLoginIdDefaultNull(): Promise<LoginId | null>;
+    /** 当前登录设备 */
+    static getLoginDevice(): Promise<string | undefined>;
+    /** 当前角色列表 */
+    static getRoleList(): Promise<string[]>;
+    /** 当前权限列表 */
+    static getPermissionList(): Promise<string[]>;
+    /** 是否拥有指定角色 */
+    static hasRole(role: string): Promise<boolean>;
+    /** 是否拥有指定权限 */
+    static hasPermission(permission: string): Promise<boolean>;
+    /** 校验角色，失败抛 NotRoleError */
+    static checkRole(role: string): Promise<void>;
+    /** 校验权限，失败抛 NotPermissionError */
+    static checkPermission(permission: string): Promise<void>;
+}
+//# sourceMappingURL=AuthUtil.d.ts.map

package/dist/AuthUtil.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthUtil.d.ts","sourceRoot":"","sources":["../src/AuthUtil.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EACV,WAAW,EACX,WAAW,EACX,OAAO,EACP,YAAY,EACZ,mBAAmB,EACpB,MAAM,SAAS,CAAC;AA6BjB,8CAA8C;AAC9C,wBAAgB,aAAa,CAAC,OAAO,GAAE,WAAgB,GAAG,IAAI,CA8B7D;AAED,eAAe;AACf,wBAAgB,cAAc,IAAI,mBAAmB,CAEpD;AAuBD,4BAA4B;AAC5B,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,WAAW,EACpB,OAAO,GAAE,mBAAiC,GACzC,OAAO,CAWT;AAED;;;GAGG;AACH,qBAAa,QAAQ;IACnB;;;;;;OAMG;WACU,KAAK,CAChB,OAAO,EAAE,OAAO,EAChB,cAAc,GAAE,MAAM,EAAE,GAAG,YAAiB,EAC5C,WAAW,GAAE,MAAM,EAAO,EAC1B,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAChE,OAAO,CAAC,MAAM,CAAC;IAqElB,OAAO,CAAC,MAAM,CAAC,WAAW;IAQ1B;;;OAGG;WACU,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAUlD,iBAAiB;WACJ,eAAe,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAI7D,iBAAiB;WACJ,cAAc,CACzB,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,IAAI,CAAC;IAWhB,uCAAuC;IACvC,MAAM,CAAC,aAAa,IAAI,MAAM,GAAG,IAAI;IAOrC;;;;;OAKG;IACH,MAAM,CAAC,oBAAoB,CAAC,GAAG,EAAE;QAC/B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACjC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACnC,GAAG,MAAM,GAAG,IAAI;IAkCjB;;OAEG;WACU,WAAW,CACtB,KAAK,EAAE,MAAM,GAAG,IAAI,EACpB,OAAO,GAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAoB,GAC7C,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IA2B9B,6BAA6B;WAChB,UAAU,IAAI,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAgBtD,YAAY;WACC,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC;IAIxC,yCAAyC;WAC5B,UAAU,IAAI,OAAO,CAAC,OAAO,CAAC;IAM3C,oBAAoB;WACP,UAAU,IAAI,OAAO,CAAC,OAAO,CAAC;IAI3C,wBAAwB;WACX,qBAAqB,IAAI,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;IAI7D,aAAa;WACA,cAAc,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IAI1D,aAAa;WACA,WAAW,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IAI7C,aAAa;WACA,iBAAiB,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IAInD,eAAe;WACF,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAIpD,eAAe;WACF,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAIhE,4BAA4B;WACf,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAKnD,kCAAkC;WACrB,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAMhE"}

package/dist/AuthUtil.js

@@ -0,0 +1,356 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthUtil = void 0;
+exports.configureAuth = configureAuth;
+exports.getAuthOptions = getAuthOptions;
+exports.isSessionExpired = isSessionExpired;
+const context_1 = require("./context");
+const errors_1 = require("./errors");
+const store_1 = require("./store");
+const token_1 = require("./token");
+/** 默认会话时长：2 小时（毫秒） */
+const DEFAULT_TIMEOUT = 2 * 60 * 60 * 1000;
+const DEFAULT_JWT_SECRET = "pangza-admin-express-jwt-secret";
+/** 运行时鉴权配置（由 Auth(options) 写入） */
+let authOptions = {
+    tokenName: "satoken",
+    header: "Authorization",
+    tokenPrefix: "Bearer",
+    timeout: DEFAULT_TIMEOUT,
+    activityTimeout: -1,
+    allowConcurrentLogin: true,
+    isShare: false,
+    tokenStyle: "uuid",
+    jwtSecret: DEFAULT_JWT_SECRET,
+    jwtAlgorithm: "HS256",
+    ignore: [],
+    readCookie: true,
+    checkMode: "OR",
+};
+function resolveExpireTime(timeoutMs, now = Date.now()) {
+    if (timeoutMs < 0)
+        return Number.MAX_SAFE_INTEGER;
+    return now + timeoutMs;
+}
+/** 合并并保存 Auth 配置；配置了 redis 则优先使用 Redis 会话库 */
+function configureAuth(options = {}) {
+    authOptions = {
+        ...authOptions,
+        ...options,
+        tokenName: options.tokenName ?? authOptions.tokenName,
+        header: options.header ?? authOptions.header,
+        tokenPrefix: options.tokenPrefix !== undefined
+            ? options.tokenPrefix
+            : authOptions.tokenPrefix,
+        timeout: options.timeout ?? authOptions.timeout,
+        activityTimeout: options.activityTimeout ?? authOptions.activityTimeout,
+        allowConcurrentLogin: options.allowConcurrentLogin ?? authOptions.allowConcurrentLogin,
+        isShare: options.isShare ?? authOptions.isShare,
+        tokenStyle: options.tokenStyle ?? authOptions.tokenStyle,
+        createToken: options.createToken ?? authOptions.createToken,
+        jwtSecret: options.jwtSecret ?? authOptions.jwtSecret,
+        jwtAlgorithm: options.jwtAlgorithm ?? authOptions.jwtAlgorithm,
+        ignore: options.ignore ?? authOptions.ignore,
+        readCookie: options.readCookie ?? authOptions.readCookie,
+        redis: options.redis ?? authOptions.redis,
+        checkMode: options.checkMode ?? authOptions.checkMode,
+    };
+    if (options.redis) {
+        (0, store_1.setSessionStore)(new store_1.RedisStore(options.redis));
+    }
+    else if (options.redis === undefined && !authOptions.redis) {
+        (0, store_1.setSessionStore)(new store_1.MemoryStore());
+    }
+}
+/** 读取当前鉴权配置 */
+function getAuthOptions() {
+    return authOptions;
+}
+function normalizeLoginArgs(rolesOrOptions, permissions, profile) {
+    if (rolesOrOptions &&
+        !Array.isArray(rolesOrOptions) &&
+        typeof rolesOrOptions === "object") {
+        return rolesOrOptions;
+    }
+    return {
+        roles: rolesOrOptions ?? [],
+        permissions: permissions ?? [],
+        username: profile?.username,
+        avatar: profile?.avatar,
+        device: profile?.device,
+    };
+}
+/** 校验会话是否因绝对过期 / 闲置过期而失效 */
+function isSessionExpired(session, options = authOptions) {
+    const now = Date.now();
+    if (now > session.expireTime)
+        return true;
+    if (options.activityTimeout >= 0 &&
+        now - (session.lastActiveTime || session.createTime) >
+            options.activityTimeout) {
+        return true;
+    }
+    return false;
+}
+/**
+ * 类 Sa-Token 的静态工具（AuthUtil）。
+ * 业务侧通过它完成登录、取 token、校验登录/角色/权限。
+ */
+class AuthUtil {
+    /**
+     * 登录：创建会话并返回 token。
+     *
+     * @example
+     * AuthUtil.login(id, ['admin'], ['user:read'])
+     * AuthUtil.login(id, { roles, permissions, device: 'web', username })
+     */
+    static async login(loginId, rolesOrOptions = [], permissions = [], profile) {
+        const opt = normalizeLoginArgs(rolesOrOptions, permissions, profile);
+        const store = (0, store_1.getSessionStore)();
+        const timeout = opt.timeout ?? authOptions.timeout;
+        const device = opt.device;
+        const now = Date.now();
+        // is-share：复用已有有效 token（同账号 + 同设备）
+        if (authOptions.isShare) {
+            const tokens = await store.listTokensByLoginId(loginId);
+            for (const t of tokens) {
+                const old = await store.getByToken(t);
+                if (!old || isSessionExpired(old)) {
+                    if (old)
+                        await store.removeByToken(t);
+                    continue;
+                }
+                if (device && old.device && old.device !== device)
+                    continue;
+                if (!device && old.device)
+                    continue;
+                old.roles = opt.roles ?? old.roles;
+                old.permissions = opt.permissions ?? old.permissions;
+                old.username = opt.username ?? old.username;
+                old.avatar = opt.avatar ?? old.avatar;
+                old.expireTime = resolveExpireTime(timeout, now);
+                old.lastActiveTime = now;
+                await store.set(old);
+                this.syncContext(old.token, old);
+                return old.token;
+            }
+        }
+        // 不允许并发：挤掉旧登录
+        if (!authOptions.allowConcurrentLogin) {
+            if (device) {
+                const tokens = await store.listTokensByLoginId(loginId);
+                for (const t of tokens) {
+                    const old = await store.getByToken(t);
+                    if (old && (!old.device || old.device === device)) {
+                        await store.removeByToken(t);
+                    }
+                }
+            }
+            else {
+                await store.removeByLoginId(loginId);
+            }
+        }
+        const token = await (0, token_1.createAuthToken)(authOptions, {
+            loginId,
+            device,
+            timeout,
+        });
+        const session = {
+            token,
+            loginId,
+            device,
+            roles: opt.roles ?? [],
+            permissions: opt.permissions ?? [],
+            username: opt.username,
+            avatar: opt.avatar,
+            createTime: now,
+            expireTime: resolveExpireTime(timeout, now),
+            lastActiveTime: now,
+        };
+        await store.set(session);
+        this.syncContext(token, session);
+        return token;
+    }
+    static syncContext(token, session) {
+        const ctx = (0, context_1.getAuthStore)();
+        if (ctx) {
+            ctx.token = token;
+            ctx.session = session;
+        }
+    }
+    /**
+     * 注销当前（或指定）token 会话
+     * @param token 不传则注销当前请求 token
+     */
+    static async logout(token) {
+        const value = token ?? this.getTokenValue();
+        if (value)
+            await (0, store_1.getSessionStore)().removeByToken(value);
+        const ctx = (0, context_1.getAuthStore)();
+        if (ctx && (!token || ctx.token === token)) {
+            ctx.token = null;
+            ctx.session = null;
+        }
+    }
+    /** 按账号注销其全部会话 */
+    static async logoutByLoginId(loginId) {
+        await (0, store_1.getSessionStore)().removeByLoginId(loginId);
+    }
+    /** 按账号 + 设备注销 */
+    static async logoutByDevice(loginId, device) {
+        const store = (0, store_1.getSessionStore)();
+        const tokens = await store.listTokensByLoginId(loginId);
+        for (const t of tokens) {
+            const session = await store.getByToken(t);
+            if (session?.device === device) {
+                await store.removeByToken(t);
+            }
+        }
+    }
+    /** 获取当前请求 token（优先上下文，其次请求头/Cookie） */
+    static getTokenValue() {
+        const store = (0, context_1.getAuthStore)();
+        if (store?.token)
+            return store.token;
+        if (store?.req)
+            return this.readTokenFromRequest(store.req);
+        return null;
+    }
+    /**
+     * 从请求解析 token：
+     * 1. tokenName 请求头（如 satoken）
+     * 2. Authorization / 自定义 header（可带 Bearer 前缀）
+     * 3. Cookie[tokenName]
+     */
+    static readTokenFromRequest(req) {
+        const tryRaw = (raw) => {
+            if (typeof raw !== "string" || !raw.trim())
+                return null;
+            const value = raw.trim();
+            const prefix = authOptions.tokenPrefix;
+            if (prefix && value.startsWith(`${prefix} `)) {
+                return value.slice(prefix.length + 1).trim() || null;
+            }
+            return value || null;
+        };
+        // 1. tokenName header（Sa-Token 常用）
+        const byName = tryRaw(req.headers[authOptions.tokenName.toLowerCase()]);
+        if (byName)
+            return byName;
+        // 2. Authorization / 兼容 header
+        const headerName = authOptions.header.toLowerCase();
+        if (headerName !== authOptions.tokenName.toLowerCase()) {
+            const byHeader = tryRaw(req.headers[headerName]);
+            if (byHeader)
+                return byHeader;
+        }
+        // 3. Cookie
+        if (authOptions.readCookie) {
+            const cookies = req.cookies;
+            if (cookies) {
+                const byCookie = tryRaw(cookies[authOptions.tokenName]);
+                if (byCookie)
+                    return byCookie;
+            }
+        }
+        return null;
+    }
+    /**
+     * 加载并校验会话；过期清理；可选刷新 lastActiveTime。
+     */
+    static async loadSession(token, options = { touch: true }) {
+        if (!token)
+            return null;
+        if (!(0, token_1.verifyAuthToken)(authOptions, token)) {
+            await (0, store_1.getSessionStore)().removeByToken(token);
+            return null;
+        }
+        const session = await (0, store_1.getSessionStore)().getByToken(token);
+        if (!session)
+            return null;
+        // 兼容旧会话无 lastActiveTime
+        if (!session.lastActiveTime) {
+            session.lastActiveTime = session.createTime;
+        }
+        if (isSessionExpired(session)) {
+            await (0, store_1.getSessionStore)().removeByToken(token);
+            return null;
+        }
+        if (options.touch !== false) {
+            session.lastActiveTime = Date.now();
+            await (0, store_1.getSessionStore)().touch(session);
+        }
+        return session;
+    }
+    /** 获取当前有效会话；过期会清理并返回 null */
+    static async getSession() {
+        const ctx = (0, context_1.getAuthStore)();
+        if (ctx?.session) {
+            if (isSessionExpired(ctx.session)) {
+                await this.logout(ctx.session.token);
+                return null;
+            }
+            // 请求内已 touch 过则不重复写
+            return ctx.session;
+        }
+        const token = this.getTokenValue();
+        const session = await this.loadSession(token);
+        if (ctx)
+            ctx.session = session;
+        return session;
+    }
+    /** 是否已登录 */
+    static async isLogin() {
+        return (await this.getSession()) !== null;
+    }
+    /** 校验已登录，否则抛 NotLoginError；返回 loginId */
+    static async checkLogin() {
+        const session = await this.getSession();
+        if (!session)
+            throw new errors_1.NotLoginError();
+        return session.loginId;
+    }
+    /** 获取登录账号（未登录抛错） */
+    static async getLoginId() {
+        return this.checkLogin();
+    }
+    /** 获取登录账号；未登录返回 null */
+    static async getLoginIdDefaultNull() {
+        return (await this.getSession())?.loginId ?? null;
+    }
+    /** 当前登录设备 */
+    static async getLoginDevice() {
+        return (await this.getSession())?.device;
+    }
+    /** 当前角色列表 */
+    static async getRoleList() {
+        return (await this.getSession())?.roles ?? [];
+    }
+    /** 当前权限列表 */
+    static async getPermissionList() {
+        return (await this.getSession())?.permissions ?? [];
+    }
+    /** 是否拥有指定角色 */
+    static async hasRole(role) {
+        return (await this.getRoleList()).includes(role);
+    }
+    /** 是否拥有指定权限 */
+    static async hasPermission(permission) {
+        return (await this.getPermissionList()).includes(permission);
+    }
+    /** 校验角色，失败抛 NotRoleError */
+    static async checkRole(role) {
+        await this.checkLogin();
+        if (!(await this.hasRole(role)))
+            throw new errors_1.NotRoleError(`无角色: ${role}`);
+    }
+    /** 校验权限，失败抛 NotPermissionError */
+    static async checkPermission(permission) {
+        await this.checkLogin();
+        if (!(await this.hasPermission(permission))) {
+            throw new errors_1.NotPermissionError(`无权限: ${permission}`);
+        }
+    }
+}
+exports.AuthUtil = AuthUtil;
+//# sourceMappingURL=AuthUtil.js.map

package/dist/AuthUtil.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthUtil.js","sourceRoot":"","sources":["../src/AuthUtil.ts"],"names":[],"mappings":";;;AA6CA,sCA8BC;AAGD,wCAEC;AAwBD,4CAcC;AAtHD,uCAAyC;AACzC,qCAA2E;AAC3E,mCAKiB;AACjB,mCAA2D;AAS3D,sBAAsB;AACtB,MAAM,eAAe,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAE3C,MAAM,kBAAkB,GAAG,iCAAiC,CAAC;AAE7D,kCAAkC;AAClC,IAAI,WAAW,GAAwB;IACrC,SAAS,EAAE,SAAS;IACpB,MAAM,EAAE,eAAe;IACvB,WAAW,EAAE,QAAQ;IACrB,OAAO,EAAE,eAAe;IACxB,eAAe,EAAE,CAAC,CAAC;IACnB,oBAAoB,EAAE,IAAI;IAC1B,OAAO,EAAE,KAAK;IACd,UAAU,EAAE,MAAM;IAClB,SAAS,EAAE,kBAAkB;IAC7B,YAAY,EAAE,OAAO;IACrB,MAAM,EAAE,EAAE;IACV,UAAU,EAAE,IAAI;IAChB,SAAS,EAAE,IAAI;CAChB,CAAC;AAEF,SAAS,iBAAiB,CAAC,SAAiB,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IAC5D,IAAI,SAAS,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC,gBAAgB,CAAC;IAClD,OAAO,GAAG,GAAG,SAAS,CAAC;AACzB,CAAC;AAED,8CAA8C;AAC9C,SAAgB,aAAa,CAAC,UAAuB,EAAE;IACrD,WAAW,GAAG;QACZ,GAAG,WAAW;QACd,GAAG,OAAO;QACV,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,WAAW,CAAC,SAAS;QACrD,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,WAAW,CAAC,MAAM;QAC5C,WAAW,EACT,OAAO,CAAC,WAAW,KAAK,SAAS;YAC/B,CAAC,CAAC,OAAO,CAAC,WAAW;YACrB,CAAC,CAAC,WAAW,CAAC,WAAW;QAC7B,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,WAAW,CAAC,OAAO;QAC/C,eAAe,EAAE,OAAO,CAAC,eAAe,IAAI,WAAW,CAAC,eAAe;QACvE,oBAAoB,EAClB,OAAO,CAAC,oBAAoB,IAAI,WAAW,CAAC,oBAAoB;QAClE,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,WAAW,CAAC,OAAO;QAC/C,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,WAAW,CAAC,UAAU;QACxD,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,WAAW,CAAC,WAAW;QAC3D,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,WAAW,CAAC,SAAS;QACrD,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,WAAW,CAAC,YAAY;QAC9D,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,WAAW,CAAC,MAAM;QAC5C,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,WAAW,CAAC,UAAU;QACxD,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,WAAW,CAAC,KAAK;QACzC,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,WAAW,CAAC,SAAS;KACtD,CAAC;IAEF,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,IAAA,uBAAe,EAAC,IAAI,kBAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IACjD,CAAC;SAAM,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;QAC7D,IAAA,uBAAe,EAAC,IAAI,mBAAW,EAAE,CAAC,CAAC;IACrC,CAAC;AACH,CAAC;AAED,eAAe;AACf,SAAgB,cAAc;IAC5B,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,SAAS,kBAAkB,CACzB,cAAwC,EACxC,WAAsB,EACtB,OAAiE;IAEjE,IACE,cAAc;QACd,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC;QAC9B,OAAO,cAAc,KAAK,QAAQ,EAClC,CAAC;QACD,OAAO,cAAc,CAAC;IACxB,CAAC;IACD,OAAO;QACL,KAAK,EAAG,cAAuC,IAAI,EAAE;QACrD,WAAW,EAAE,WAAW,IAAI,EAAE;QAC9B,QAAQ,EAAE,OAAO,EAAE,QAAQ;QAC3B,MAAM,EAAE,OAAO,EAAE,MAAM;QACvB,MAAM,EAAE,OAAO,EAAE,MAAM;KACxB,CAAC;AACJ,CAAC;AAED,4BAA4B;AAC5B,SAAgB,gBAAgB,CAC9B,OAAoB,EACpB,UAA+B,WAAW;IAE1C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,IAAI,GAAG,GAAG,OAAO,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC;IAC1C,IACE,OAAO,CAAC,eAAe,IAAI,CAAC;QAC5B,GAAG,GAAG,CAAC,OAAO,CAAC,cAAc,IAAI,OAAO,CAAC,UAAU,CAAC;YAClD,OAAO,CAAC,eAAe,EACzB,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAa,QAAQ;IACnB;;;;;;OAMG;IACH,MAAM,CAAC,KAAK,CAAC,KAAK,CAChB,OAAgB,EAChB,iBAA0C,EAAE,EAC5C,cAAwB,EAAE,EAC1B,OAAiE;QAEjE,MAAM,GAAG,GAAG,kBAAkB,CAAC,cAAc,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;QACrE,MAAM,KAAK,GAAG,IAAA,uBAAe,GAAE,CAAC;QAChC,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,IAAI,WAAW,CAAC,OAAO,CAAC;QACnD,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;QAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEvB,mCAAmC;QACnC,IAAI,WAAW,CAAC,OAAO,EAAE,CAAC;YACxB,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;YACxD,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;gBACvB,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;gBACtC,IAAI,CAAC,GAAG,IAAI,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC;oBAClC,IAAI,GAAG;wBAAE,MAAM,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;oBACtC,SAAS;gBACX,CAAC;gBACD,IAAI,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM;oBAAE,SAAS;gBAC5D,IAAI,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM;oBAAE,SAAS;gBAEpC,GAAG,CAAC,KAAK,GAAG,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,KAAK,CAAC;gBACnC,GAAG,CAAC,WAAW,GAAG,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,WAAW,CAAC;gBACrD,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,CAAC;gBAC5C,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC;gBACtC,GAAG,CAAC,UAAU,GAAG,iBAAiB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;gBACjD,GAAG,CAAC,cAAc,GAAG,GAAG,CAAC;gBACzB,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACrB,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBACjC,OAAO,GAAG,CAAC,KAAK,CAAC;YACnB,CAAC;QACH,CAAC;QAED,cAAc;QACd,IAAI,CAAC,WAAW,CAAC,oBAAoB,EAAE,CAAC;YACtC,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;gBACxD,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;oBACvB,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;oBACtC,IAAI,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,EAAE,CAAC;wBAClD,MAAM,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;oBAC/B,CAAC;gBACH,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,MAAM,KAAK,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;YACvC,CAAC;QACH,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,IAAA,uBAAe,EAAC,WAAW,EAAE;YAC/C,OAAO;YACP,MAAM;YACN,OAAO;SACR,CAAC,CAAC;QAEH,MAAM,OAAO,GAAgB;YAC3B,KAAK;YACL,OAAO;YACP,MAAM;YACN,KAAK,EAAE,GAAG,CAAC,KAAK,IAAI,EAAE;YACtB,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,EAAE;YAClC,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,UAAU,EAAE,GAAG;YACf,UAAU,EAAE,iBAAiB,CAAC,OAAO,EAAE,GAAG,CAAC;YAC3C,cAAc,EAAE,GAAG;SACpB,CAAC;QACF,MAAM,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACzB,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACjC,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,MAAM,CAAC,WAAW,CAAC,KAAa,EAAE,OAA2B;QACnE,MAAM,GAAG,GAAG,IAAA,sBAAY,GAAE,CAAC;QAC3B,IAAI,GAAG,EAAE,CAAC;YACR,GAAG,CAAC,KAAK,GAAG,KAAK,CAAC;YAClB,GAAG,CAAC,OAAO,GAAG,OAAO,CAAC;QACxB,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAc;QAChC,MAAM,KAAK,GAAG,KAAK,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;QAC5C,IAAI,KAAK;YAAE,MAAM,IAAA,uBAAe,GAAE,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QACxD,MAAM,GAAG,GAAG,IAAA,sBAAY,GAAE,CAAC;QAC3B,IAAI,GAAG,IAAI,CAAC,CAAC,KAAK,IAAI,GAAG,CAAC,KAAK,KAAK,KAAK,CAAC,EAAE,CAAC;YAC3C,GAAG,CAAC,KAAK,GAAG,IAAI,CAAC;YACjB,GAAG,CAAC,OAAO,GAAG,IAAI,CAAC;QACrB,CAAC;IACH,CAAC;IAED,iBAAiB;IACjB,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,OAAgB;QAC3C,MAAM,IAAA,uBAAe,GAAE,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;IACnD,CAAC;IAED,iBAAiB;IACjB,MAAM,CAAC,KAAK,CAAC,cAAc,CACzB,OAAgB,EAChB,MAAc;QAEd,MAAM,KAAK,GAAG,IAAA,uBAAe,GAAE,CAAC;QAChC,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;QACxD,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACvB,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;YAC1C,IAAI,OAAO,EAAE,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC/B,MAAM,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;YAC/B,CAAC;QACH,CAAC;IACH,CAAC;IAED,uCAAuC;IACvC,MAAM,CAAC,aAAa;QAClB,MAAM,KAAK,GAAG,IAAA,sBAAY,GAAE,CAAC;QAC7B,IAAI,KAAK,EAAE,KAAK;YAAE,OAAO,KAAK,CAAC,KAAK,CAAC;QACrC,IAAI,KAAK,EAAE,GAAG;YAAE,OAAO,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC5D,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,oBAAoB,CAAC,GAG3B;QACC,MAAM,MAAM,GAAG,CAAC,GAAY,EAAiB,EAAE;YAC7C,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE;gBAAE,OAAO,IAAI,CAAC;YACxD,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;YACzB,MAAM,MAAM,GAAG,WAAW,CAAC,WAAW,CAAC;YACvC,IAAI,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC7C,OAAO,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC;YACvD,CAAC;YACD,OAAO,KAAK,IAAI,IAAI,CAAC;QACvB,CAAC,CAAC;QAEF,mCAAmC;QACnC,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QACxE,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAE1B,+BAA+B;QAC/B,MAAM,UAAU,GAAG,WAAW,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QACpD,IAAI,UAAU,KAAK,WAAW,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,CAAC;YACvD,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;YACjD,IAAI,QAAQ;gBAAE,OAAO,QAAQ,CAAC;QAChC,CAAC;QAED,YAAY;QACZ,IAAI,WAAW,CAAC,UAAU,EAAE,CAAC;YAC3B,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;YAC5B,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC;gBACxD,IAAI,QAAQ;oBAAE,OAAO,QAAQ,CAAC;YAChC,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,WAAW,CACtB,KAAoB,EACpB,UAA+B,EAAE,KAAK,EAAE,IAAI,EAAE;QAE9C,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QACxB,IAAI,CAAC,IAAA,uBAAe,EAAC,WAAW,EAAE,KAAK,CAAC,EAAE,CAAC;YACzC,MAAM,IAAA,uBAAe,GAAE,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;YAC7C,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,IAAA,uBAAe,GAAE,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAC1D,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAE1B,wBAAwB;QACxB,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC;YAC5B,OAAO,CAAC,cAAc,GAAG,OAAO,CAAC,UAAU,CAAC;QAC9C,CAAC;QAED,IAAI,gBAAgB,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAA,uBAAe,GAAE,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;YAC7C,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,OAAO,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;YAC5B,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACpC,MAAM,IAAA,uBAAe,GAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACzC,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,6BAA6B;IAC7B,MAAM,CAAC,KAAK,CAAC,UAAU;QACrB,MAAM,GAAG,GAAG,IAAA,sBAAY,GAAE,CAAC;QAC3B,IAAI,GAAG,EAAE,OAAO,EAAE,CAAC;YACjB,IAAI,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBAClC,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBACrC,OAAO,IAAI,CAAC;YACd,CAAC;YACD,oBAAoB;YACpB,OAAO,GAAG,CAAC,OAAO,CAAC;QACrB,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACnC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QAC9C,IAAI,GAAG;YAAE,GAAG,CAAC,OAAO,GAAG,OAAO,CAAC;QAC/B,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,YAAY;IACZ,MAAM,CAAC,KAAK,CAAC,OAAO;QAClB,OAAO,CAAC,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC,KAAK,IAAI,CAAC;IAC5C,CAAC;IAED,yCAAyC;IACzC,MAAM,CAAC,KAAK,CAAC,UAAU;QACrB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACxC,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,sBAAa,EAAE,CAAC;QACxC,OAAO,OAAO,CAAC,OAAO,CAAC;IACzB,CAAC;IAED,oBAAoB;IACpB,MAAM,CAAC,KAAK,CAAC,UAAU;QACrB,OAAO,IAAI,CAAC,UAAU,EAAE,CAAC;IAC3B,CAAC;IAED,wBAAwB;IACxB,MAAM,CAAC,KAAK,CAAC,qBAAqB;QAChC,OAAO,CAAC,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC,EAAE,OAAO,IAAI,IAAI,CAAC;IACpD,CAAC;IAED,aAAa;IACb,MAAM,CAAC,KAAK,CAAC,cAAc;QACzB,OAAO,CAAC,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC,EAAE,MAAM,CAAC;IAC3C,CAAC;IAED,aAAa;IACb,MAAM,CAAC,KAAK,CAAC,WAAW;QACtB,OAAO,CAAC,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC;IAChD,CAAC;IAED,aAAa;IACb,MAAM,CAAC,KAAK,CAAC,iBAAiB;QAC5B,OAAO,CAAC,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC,EAAE,WAAW,IAAI,EAAE,CAAC;IACtD,CAAC;IAED,eAAe;IACf,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,IAAY;QAC/B,OAAO,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACnD,CAAC;IAED,eAAe;IACf,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,UAAkB;QAC3C,OAAO,CAAC,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IAC/D,CAAC;IAED,4BAA4B;IAC5B,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,IAAY;QACjC,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACxB,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAAE,MAAM,IAAI,qBAAY,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;IAC1E,CAAC;IAED,kCAAkC;IAClC,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,UAAkB;QAC7C,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACxB,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,2BAAkB,CAAC,QAAQ,UAAU,EAAE,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;CACF;AA7RD,4BA6RC"}

package/dist/context.d.ts

@@ -0,0 +1,10 @@
+import { AsyncLocalStorage } from "async_hooks";
+import type { AuthContextStore } from "./types";
+/**
+ * 请求级鉴权上下文。
+ * 中间件里 run 一次后，同一次请求内的 AuthUtil 都能取到当前 req/token/session。
+ */
+export declare const authContext: AsyncLocalStorage<AuthContextStore>;
+/** 获取当前请求的鉴权上下文；不在 Auth 中间件内时返回 undefined */
+export declare function getAuthStore(): AuthContextStore | undefined;
+//# sourceMappingURL=context.d.ts.map

package/dist/context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../src/context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAEhD;;;GAGG;AACH,eAAO,MAAM,WAAW,qCAA4C,CAAC;AAErE,6CAA6C;AAC7C,wBAAgB,YAAY,IAAI,gBAAgB,GAAG,SAAS,CAE3D"}

package/dist/context.js

@@ -0,0 +1,15 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.authContext = void 0;
+exports.getAuthStore = getAuthStore;
+const async_hooks_1 = require("async_hooks");
+/**
+ * 请求级鉴权上下文。
+ * 中间件里 run 一次后，同一次请求内的 AuthUtil 都能取到当前 req/token/session。
+ */
+exports.authContext = new async_hooks_1.AsyncLocalStorage();
+/** 获取当前请求的鉴权上下文；不在 Auth 中间件内时返回 undefined */
+function getAuthStore() {
+    return exports.authContext.getStore();
+}
+//# sourceMappingURL=context.js.map

package/dist/context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../src/context.ts"],"names":[],"mappings":";;;AAUA,oCAEC;AAZD,6CAAgD;AAGhD;;;GAGG;AACU,QAAA,WAAW,GAAG,IAAI,+BAAiB,EAAoB,CAAC;AAErE,6CAA6C;AAC7C,SAAgB,YAAY;IAC1B,OAAO,mBAAW,CAAC,QAAQ,EAAE,CAAC;AAChC,CAAC"}

package/dist/errors.d.ts

@@ -0,0 +1,19 @@
+import { ResponseCode } from "@pangza/core/types/enums";
+/** 鉴权相关错误基类，携带业务响应码 */
+export declare class AuthError extends Error {
+    readonly code: ResponseCode;
+    constructor(message: string, code: ResponseCode);
+}
+/** 未登录 */
+export declare class NotLoginError extends AuthError {
+    constructor(message?: string);
+}
+/** 无权限 */
+export declare class NotPermissionError extends AuthError {
+    constructor(message?: string);
+}
+/** 无角色 */
+export declare class NotRoleError extends AuthError {
+    constructor(message?: string);
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAExD,uBAAuB;AACvB,qBAAa,SAAU,SAAQ,KAAK;IAClC,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;gBAEhB,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY;CAKhD;AAED,UAAU;AACV,qBAAa,aAAc,SAAQ,SAAS;gBAC9B,OAAO,SAAQ;CAI5B;AAED,UAAU;AACV,qBAAa,kBAAmB,SAAQ,SAAS;gBACnC,OAAO,SAAS;CAI7B;AAED,UAAU;AACV,qBAAa,YAAa,SAAQ,SAAS;gBAC7B,OAAO,SAAS;CAI7B"}

package/dist/errors.js

@@ -0,0 +1,38 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NotRoleError = exports.NotPermissionError = exports.NotLoginError = exports.AuthError = void 0;
+const enums_1 = require("@pangza/core/types/enums");
+/** 鉴权相关错误基类，携带业务响应码 */
+class AuthError extends Error {
+    constructor(message, code) {
+        super(message);
+        this.name = "AuthError";
+        this.code = code;
+    }
+}
+exports.AuthError = AuthError;
+/** 未登录 */
+class NotLoginError extends AuthError {
+    constructor(message = "未登录") {
+        super(message, enums_1.ResponseCode.UNAUTHORIZED);
+        this.name = "NotLoginError";
+    }
+}
+exports.NotLoginError = NotLoginError;
+/** 无权限 */
+class NotPermissionError extends AuthError {
+    constructor(message = "无此权限") {
+        super(message, enums_1.ResponseCode.FORBIDDEN);
+        this.name = "NotPermissionError";
+    }
+}
+exports.NotPermissionError = NotPermissionError;
+/** 无角色 */
+class NotRoleError extends AuthError {
+    constructor(message = "无此角色") {
+        super(message, enums_1.ResponseCode.FORBIDDEN);
+        this.name = "NotRoleError";
+    }
+}
+exports.NotRoleError = NotRoleError;
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":";;;AAAA,oDAAwD;AAExD,uBAAuB;AACvB,MAAa,SAAU,SAAQ,KAAK;IAGlC,YAAY,OAAe,EAAE,IAAkB;QAC7C,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,WAAW,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AARD,8BAQC;AAED,UAAU;AACV,MAAa,aAAc,SAAQ,SAAS;IAC1C,YAAY,OAAO,GAAG,KAAK;QACzB,KAAK,CAAC,OAAO,EAAE,oBAAY,CAAC,YAAY,CAAC,CAAC;QAC1C,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;IAC9B,CAAC;CACF;AALD,sCAKC;AAED,UAAU;AACV,MAAa,kBAAmB,SAAQ,SAAS;IAC/C,YAAY,OAAO,GAAG,MAAM;QAC1B,KAAK,CAAC,OAAO,EAAE,oBAAY,CAAC,SAAS,CAAC,CAAC;QACvC,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AALD,gDAKC;AAED,UAAU;AACV,MAAa,YAAa,SAAQ,SAAS;IACzC,YAAY,OAAO,GAAG,MAAM;QAC1B,KAAK,CAAC,OAAO,EAAE,oBAAY,CAAC,SAAS,CAAC,CAAC;QACvC,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;IAC7B,CAAC;CACF;AALD,oCAKC"}

package/dist/flag.d.ts

@@ -0,0 +1,3 @@
+/** 用于标记 Auth 中间件，供 Application 识别是否已注册鉴权模块 */
+export { AUTH_MIDDLEWARE_FLAG } from "@pangza/core/moduleFlags";
+//# sourceMappingURL=flag.d.ts.map

package/dist/flag.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"flag.d.ts","sourceRoot":"","sources":["../src/flag.ts"],"names":[],"mappings":"AAAA,8CAA8C;AAC9C,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC"}

package/dist/flag.js

@@ -0,0 +1,7 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AUTH_MIDDLEWARE_FLAG = void 0;
+/** 用于标记 Auth 中间件，供 Application 识别是否已注册鉴权模块 */
+var moduleFlags_1 = require("@pangza/core/moduleFlags");
+Object.defineProperty(exports, "AUTH_MIDDLEWARE_FLAG", { enumerable: true, get: function () { return moduleFlags_1.AUTH_MIDDLEWARE_FLAG; } });
+//# sourceMappingURL=flag.js.map

package/dist/flag.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"flag.js","sourceRoot":"","sources":["../src/flag.ts"],"names":[],"mappings":";;;AAAA,8CAA8C;AAC9C,wDAAgE;AAAvD,mHAAA,oBAAoB,OAAA"}

package/dist/index.d.ts

@@ -0,0 +1,35 @@
+import { NextFunction, Request, Response } from "express";
+import type { AuthOptions } from "./types";
+/**
+ * ignore 路径匹配（类 Ant / glob）：
+ * - `/api/user/login`     精确，或该路径下的子路径
+ * - `/api/pub/**`         以 `/api/pub` 开头的全部接口
+ * - `/api/pub/*`          仅一层：`/api/pub/xxx`，不含更深
+ * - `/api/aes*`           前缀（尾部单个 *）
+ */
+export declare function matchesIgnore(path: string, ignore?: string[]): boolean;
+/** 是否命中 Auth 全局 ignore（优先级最高） */
+export declare function isGloballyIgnored(path: string): boolean;
+/**
+ * Auth 中间件工厂（类 Sa-Token）。
+ * 只负责解析 token、注入请求上下文，不强制登录；
+ * 需要登录的接口请在业务里调用 AuthUtil.checkLogin()。
+ *
+ * @example
+ * Auth({
+ *   tokenName: 'satoken',
+ *   timeout: 30 * 24 * 60 * 60 * 1000,
+ *   activityTimeout: -1,
+ *   allowConcurrentLogin: false,
+ *   isShare: false,
+ *   tokenStyle: 'uuid', // 或 'jwt'
+ *   jwtSecret: 'change-me',
+ * })
+ */
+export default function Auth(options?: AuthOptions): (req: Request, _res: Response, next: NextFunction) => void;
+export { AuthUtil, getAuthOptions, isSessionExpired } from "./AuthUtil";
+export { AUTH_MIDDLEWARE_FLAG } from "./flag";
+export { AuthError, NotLoginError, NotPermissionError, NotRoleError, } from "./errors";
+export { createAuthToken, generateStyleToken, verifyAuthToken } from "./token";
+export type { AuthOptions, AuthSession, LoginId, LoginOptions, TokenStyle, AuthCheckMode, ResolvedAuthOptions, } from "./types";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAI1D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAqB3C;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,GAAE,MAAM,EAAO,GAAG,OAAO,CAK1E;AA+DD,iCAAiC;AACjC,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEvD;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,OAAO,UAAU,IAAI,CAAC,OAAO,GAAE,WAAgB,SAG3B,OAAO,QAAQ,QAAQ,QAAQ,YAAY,UAgCrE;AAED,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AACxE,OAAO,EAAE,oBAAoB,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EACL,SAAS,EACT,aAAa,EACb,kBAAkB,EAClB,YAAY,GACb,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAC/E,YAAY,EACV,WAAW,EACX,WAAW,EACX,OAAO,EACP,YAAY,EACZ,UAAU,EACV,aAAa,EACb,mBAAmB,GACpB,MAAM,SAAS,CAAC"}