@pangza/auth 0.0.0-stage → 1.0.1

package/dist/index.js

@@ -0,0 +1,162 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.verifyAuthToken = exports.generateStyleToken = exports.createAuthToken = exports.NotRoleError = exports.NotPermissionError = exports.NotLoginError = exports.AuthError = exports.AUTH_MIDDLEWARE_FLAG = exports.isSessionExpired = exports.getAuthOptions = exports.AuthUtil = void 0;
+exports.matchesIgnore = matchesIgnore;
+exports.isGloballyIgnored = isGloballyIgnored;
+exports.default = Auth;
+const context_1 = require("./context");
+const AuthUtil_1 = require("./AuthUtil");
+const flag_1 = require("./flag");
+/** 默认忽略的浏览器/探测路径，避免误进鉴权日志 */
+const DEFAULT_IGNORE_PATHS = [
+    "/.well-known",
+    "/favicon.ico",
+    "/robots.txt",
+    "/sitemap.xml",
+];
+function normalizeIgnorePath(p) {
+    if (!p)
+        return "/";
+    let s = p.trim();
+    if (!s.startsWith("/"))
+        s = `/${s}`;
+    // 保留模式里的通配；仅去掉末尾多余 /
+    if (s.length > 1 && s.endsWith("/") && !s.endsWith("*/") && !s.endsWith("**/")) {
+        s = s.slice(0, -1);
+    }
+    return s;
+}
+/**
+ * ignore 路径匹配（类 Ant / glob）：
+ * - `/api/user/login`     精确，或该路径下的子路径
+ * - `/api/pub/**`         以 `/api/pub` 开头的全部接口
+ * - `/api/pub/*`          仅一层：`/api/pub/xxx`，不含更深
+ * - `/api/aes*`           前缀（尾部单个 *）
+ */
+function matchesIgnore(path, ignore = []) {
+    const requestPath = normalizeIgnorePath(path);
+    const list = [...DEFAULT_IGNORE_PATHS, ...ignore].map(normalizeIgnorePath);
+    return list.some((pattern) => matchIgnorePattern(requestPath, pattern));
+}
+function matchIgnorePattern(requestPath, pattern) {
+    // /api/pub/** → /api/pub 及其所有子路径
+    if (pattern.endsWith("/**")) {
+        const base = pattern.slice(0, -3);
+        if (!base || base === "/") {
+            return true;
+        }
+        return requestPath === base || requestPath.startsWith(`${base}/`);
+    }
+    // /api/pub/* → 仅匹配下一层
+    if (pattern.endsWith("/*")) {
+        const base = pattern.slice(0, -2);
+        if (!requestPath.startsWith(`${base}/`))
+            return false;
+        const rest = requestPath.slice(base.length + 1);
+        return rest.length > 0 && !rest.includes("/");
+    }
+    // /api/aes* → 尾部单个 * 视为前缀（可跨 /）
+    if (pattern.endsWith("*") && !pattern.slice(0, -1).includes("*")) {
+        return requestPath.startsWith(pattern.slice(0, -1));
+    }
+    // 其余含 * / ** 的 glob → 正则
+    if (pattern.includes("*")) {
+        return globToRegExp(pattern).test(requestPath);
+    }
+    // 无通配：精确匹配，或「目录前缀」（/api/foo 放行 /api/foo/bar，但不放行 /api/foobar）
+    return requestPath === pattern || requestPath.startsWith(`${pattern}/`);
+}
+/** 将 * / ** 转为正则（* 不跨 /，** 跨段） */
+function globToRegExp(pattern) {
+    let i = 0;
+    let out = "^";
+    while (i < pattern.length) {
+        const ch = pattern[i];
+        if (ch === "*" && pattern[i + 1] === "*") {
+            out += ".*";
+            i += 2;
+            // 吞掉 ** 后紧跟的 /，避免 /**/ 多要求一层
+            if (pattern[i] === "/")
+                i += 1;
+            continue;
+        }
+        if (ch === "*") {
+            out += "[^/]*";
+            i += 1;
+            continue;
+        }
+        if (".+^${}()|[]\\".includes(ch)) {
+            out += `\\${ch}`;
+        }
+        else {
+            out += ch;
+        }
+        i += 1;
+    }
+    out += "/?$";
+    return new RegExp(out);
+}
+/** 是否命中 Auth 全局 ignore（优先级最高） */
+function isGloballyIgnored(path) {
+    return matchesIgnore(path, (0, AuthUtil_1.getAuthOptions)().ignore ?? []);
+}
+/**
+ * Auth 中间件工厂（类 Sa-Token）。
+ * 只负责解析 token、注入请求上下文，不强制登录；
+ * 需要登录的接口请在业务里调用 AuthUtil.checkLogin()。
+ *
+ * @example
+ * Auth({
+ *   tokenName: 'satoken',
+ *   timeout: 30 * 24 * 60 * 60 * 1000,
+ *   activityTimeout: -1,
+ *   allowConcurrentLogin: false,
+ *   isShare: false,
+ *   tokenStyle: 'uuid', // 或 'jwt'
+ *   jwtSecret: 'change-me',
+ * })
+ */
+function Auth(options = {}) {
+    (0, AuthUtil_1.configureAuth)(options);
+    const middleware = (req, _res, next) => {
+        // 预检与忽略路径直接放行
+        if (req.method === "OPTIONS" || matchesIgnore(req.path, options.ignore)) {
+            return next();
+        }
+        const token = AuthUtil_1.AuthUtil.readTokenFromRequest(req);
+        void (async () => {
+            try {
+                const session = await AuthUtil_1.AuthUtil.loadSession(token, { touch: true });
+                context_1.authContext.run({
+                    req,
+                    token,
+                    session,
+                }, () => next());
+            }
+            catch (err) {
+                next(err);
+            }
+        })();
+    };
+    Object.defineProperty(middleware, flag_1.AUTH_MIDDLEWARE_FLAG, {
+        value: true,
+        enumerable: false,
+    });
+    return middleware;
+}
+var AuthUtil_2 = require("./AuthUtil");
+Object.defineProperty(exports, "AuthUtil", { enumerable: true, get: function () { return AuthUtil_2.AuthUtil; } });
+Object.defineProperty(exports, "getAuthOptions", { enumerable: true, get: function () { return AuthUtil_2.getAuthOptions; } });
+Object.defineProperty(exports, "isSessionExpired", { enumerable: true, get: function () { return AuthUtil_2.isSessionExpired; } });
+var flag_2 = require("./flag");
+Object.defineProperty(exports, "AUTH_MIDDLEWARE_FLAG", { enumerable: true, get: function () { return flag_2.AUTH_MIDDLEWARE_FLAG; } });
+var errors_1 = require("./errors");
+Object.defineProperty(exports, "AuthError", { enumerable: true, get: function () { return errors_1.AuthError; } });
+Object.defineProperty(exports, "NotLoginError", { enumerable: true, get: function () { return errors_1.NotLoginError; } });
+Object.defineProperty(exports, "NotPermissionError", { enumerable: true, get: function () { return errors_1.NotPermissionError; } });
+Object.defineProperty(exports, "NotRoleError", { enumerable: true, get: function () { return errors_1.NotRoleError; } });
+var token_1 = require("./token");
+Object.defineProperty(exports, "createAuthToken", { enumerable: true, get: function () { return token_1.createAuthToken; } });
+Object.defineProperty(exports, "generateStyleToken", { enumerable: true, get: function () { return token_1.generateStyleToken; } });
+Object.defineProperty(exports, "verifyAuthToken", { enumerable: true, get: function () { return token_1.verifyAuthToken; } });
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AAgCA,sCAKC;AAgED,8CAEC;AAkBD,uBAmCC;AA3JD,uCAAwC;AACxC,yCAAqE;AACrE,iCAA8C;AAG9C,6BAA6B;AAC7B,MAAM,oBAAoB,GAAG;IAC3B,cAAc;IACd,cAAc;IACd,aAAa;IACb,cAAc;CACf,CAAC;AAEF,SAAS,mBAAmB,CAAC,CAAS;IACpC,IAAI,CAAC,CAAC;QAAE,OAAO,GAAG,CAAC;IACnB,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACjB,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC;IACpC,qBAAqB;IACrB,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/E,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,aAAa,CAAC,IAAY,EAAE,SAAmB,EAAE;IAC/D,MAAM,WAAW,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,CAAC,GAAG,oBAAoB,EAAE,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IAE3E,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,kBAAkB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;AAC1E,CAAC;AAED,SAAS,kBAAkB,CAAC,WAAmB,EAAE,OAAe;IAC9D,iCAAiC;IACjC,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAClC,IAAI,CAAC,IAAI,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YAC1B,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,WAAW,KAAK,IAAI,IAAI,WAAW,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC;IACpE,CAAC;IAED,sBAAsB;IACtB,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAClC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QACtD,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAChD,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAChD,CAAC;IAED,gCAAgC;IAChC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACjE,OAAO,WAAW,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACtD,CAAC;IAED,yBAAyB;IACzB,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1B,OAAO,YAAY,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACjD,CAAC;IAED,8DAA8D;IAC9D,OAAO,WAAW,KAAK,OAAO,IAAI,WAAW,CAAC,UAAU,CAAC,GAAG,OAAO,GAAG,CAAC,CAAC;AAC1E,CAAC;AAED,kCAAkC;AAClC,SAAS,YAAY,CAAC,OAAe;IACnC,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,IAAI,GAAG,GAAG,GAAG,CAAC;IACd,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;QAC1B,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,CAAE,CAAC;QACvB,IAAI,EAAE,KAAK,GAAG,IAAI,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YACzC,GAAG,IAAI,IAAI,CAAC;YACZ,CAAC,IAAI,CAAC,CAAC;YACP,6BAA6B;YAC7B,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,GAAG;gBAAE,CAAC,IAAI,CAAC,CAAC;YAC/B,SAAS;QACX,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,GAAG,IAAI,OAAO,CAAC;YACf,CAAC,IAAI,CAAC,CAAC;YACP,SAAS;QACX,CAAC;QACD,IAAI,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;YACjC,GAAG,IAAI,KAAK,EAAE,EAAE,CAAC;QACnB,CAAC;aAAM,CAAC;YACN,GAAG,IAAI,EAAE,CAAC;QACZ,CAAC;QACD,CAAC,IAAI,CAAC,CAAC;IACT,CAAC;IACD,GAAG,IAAI,KAAK,CAAC;IACb,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC;AACzB,CAAC;AAED,iCAAiC;AACjC,SAAgB,iBAAiB,CAAC,IAAY;IAC5C,OAAO,aAAa,CAAC,IAAI,EAAE,IAAA,yBAAc,GAAE,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;AAC5D,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,SAAwB,IAAI,CAAC,UAAuB,EAAE;IACpD,IAAA,wBAAa,EAAC,OAAO,CAAC,CAAC;IAEvB,MAAM,UAAU,GAAG,CAAC,GAAY,EAAE,IAAc,EAAE,IAAkB,EAAE,EAAE;QACtE,cAAc;QACd,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,aAAa,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACxE,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;QAED,MAAM,KAAK,GAAG,mBAAQ,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC;QAEjD,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,mBAAQ,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBAEnE,qBAAW,CAAC,GAAG,CACb;oBACE,GAAG;oBACH,KAAK;oBACL,OAAO;iBACR,EACD,GAAG,EAAE,CAAC,IAAI,EAAE,CACb,CAAC;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,GAAG,CAAC,CAAC;YACZ,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;IACP,CAAC,CAAC;IAEF,MAAM,CAAC,cAAc,CAAC,UAAU,EAAE,2BAAoB,EAAE;QACtD,KAAK,EAAE,IAAI;QACX,UAAU,EAAE,KAAK;KAClB,CAAC,CAAC;IAEH,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,uCAAwE;AAA/D,oGAAA,QAAQ,OAAA;AAAE,0GAAA,cAAc,OAAA;AAAE,4GAAA,gBAAgB,OAAA;AACnD,+BAA8C;AAArC,4GAAA,oBAAoB,OAAA;AAC7B,mCAKkB;AAJhB,mGAAA,SAAS,OAAA;AACT,uGAAA,aAAa,OAAA;AACb,4GAAA,kBAAkB,OAAA;AAClB,sGAAA,YAAY,OAAA;AAEd,iCAA+E;AAAtE,wGAAA,eAAe,OAAA;AAAE,2GAAA,kBAAkB,OAAA;AAAE,wGAAA,eAAe,OAAA"}

package/dist/store.d.ts

@@ -0,0 +1,72 @@
+import type { AuthSession, LoginId } from "./types";
+/** 会话存储抽象：内存 / Redis 统一接口 */
+export interface SessionStore {
+    set(session: AuthSession): Promise<void>;
+    getByToken(token: string): Promise<AuthSession | null>;
+    removeByToken(token: string): Promise<void>;
+    removeByLoginId(loginId: LoginId): Promise<void>;
+    /** 某账号下全部 token */
+    listTokensByLoginId(loginId: LoginId): Promise<string[]>;
+    /** 刷新活跃时间与 TTL */
+    touch(session: AuthSession): Promise<void>;
+}
+/**
+ * 内存会话仓库。
+ * - tokenMap：token -> 会话
+ * - loginIdMap：loginId -> token 集合
+ */
+export declare class MemoryStore implements SessionStore {
+    private tokenMap;
+    private loginIdMap;
+    set(session: AuthSession): Promise<void>;
+    getByToken(token: string): Promise<AuthSession | null>;
+    removeByToken(token: string): Promise<void>;
+    removeByLoginId(loginId: LoginId): Promise<void>;
+    listTokensByLoginId(loginId: LoginId): Promise<string[]>;
+    touch(session: AuthSession): Promise<void>;
+}
+/** Redis 静态方法最小约定（与封装的 Redis 类对齐） */
+export type RedisLike = {
+    setJSON(key: string, value: unknown, ttlSeconds?: number): Promise<void>;
+    getJSON<T = unknown>(key: string): Promise<T | null>;
+    del(...keys: string[]): Promise<number>;
+    sAdd(key: string, ...members: string[]): Promise<number>;
+    sMembers(key: string): Promise<string[]>;
+    sRem(key: string, ...members: string[]): Promise<number>;
+    expire?(key: string, ttlSeconds: number): Promise<boolean>;
+    /** 剩余秒数；-1 永不过期，-2 不存在 */
+    ttl?(key: string): Promise<number>;
+};
+/**
+ * Redis 会话仓库（优先使用）。
+ * key：
+ * - auth:token:{token} -> AuthSession JSON + TTL
+ * - auth:uid:{loginId} -> token 集合
+ */
+export declare class RedisStore implements SessionStore {
+    private readonly redis;
+    constructor(redis: RedisLike);
+    private tokenKey;
+    private uidKey;
+    private ttlSeconds;
+    /**
+     * uid set 需要过期，否则 token key 过期后 set 残留幽灵 member。
+     * 多端登录时只延长、不缩短（取 max(当前剩余, 本次 ttl)）。
+     */
+    private refreshUidExpire;
+    set(session: AuthSession): Promise<void>;
+    getByToken(token: string): Promise<AuthSession | null>;
+    removeByToken(token: string): Promise<void>;
+    /**
+     * 清理 uid set 中 token key 已不存在的幽灵 member（TTL 竞态或旧数据）。
+     * @returns 仍有效的 token 列表
+     */
+    private pruneUidTokens;
+    removeByLoginId(loginId: LoginId): Promise<void>;
+    listTokensByLoginId(loginId: LoginId): Promise<string[]>;
+    touch(session: AuthSession): Promise<void>;
+}
+export declare function getSessionStore(): SessionStore;
+/** 切换会话仓库（配置了 redis 时切到 RedisStore） */
+export declare function setSessionStore(store: SessionStore): void;
+//# sourceMappingURL=store.d.ts.map

package/dist/store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../src/store.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAEpD,6BAA6B;AAC7B,MAAM,WAAW,YAAY;IAC3B,GAAG,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzC,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;IACvD,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5C,eAAe,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjD,mBAAmB;IACnB,mBAAmB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACzD,kBAAkB;IAClB,KAAK,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5C;AAED;;;;GAIG;AACH,qBAAa,WAAY,YAAW,YAAY;IAC9C,OAAO,CAAC,QAAQ,CAAkC;IAClD,OAAO,CAAC,UAAU,CAAkC;IAE9C,GAAG,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAWxC,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAItD,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAY3C,eAAe,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAUhD,mBAAmB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAKxD,KAAK,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;CAGjD;AAED,qCAAqC;AACrC,MAAM,MAAM,SAAS,GAAG;IACtB,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzE,OAAO,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IACrD,GAAG,CAAC,GAAG,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACxC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACzD,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACzC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACzD,MAAM,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3D,0BAA0B;IAC1B,GAAG,CAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CACpC,CAAC;AAEF;;;;;GAKG;AACH,qBAAa,UAAW,YAAW,YAAY;IACjC,OAAO,CAAC,QAAQ,CAAC,KAAK;gBAAL,KAAK,EAAE,SAAS;IAE7C,OAAO,CAAC,QAAQ;IAIhB,OAAO,CAAC,MAAM;IAId,OAAO,CAAC,UAAU;IAQlB;;;OAGG;YACW,gBAAgB;IAcxB,GAAG,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAQxC,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAItD,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQjD;;;OAGG;YACW,cAAc;IAqBtB,eAAe,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAUhD,mBAAmB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAIxD,KAAK,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;CAKjD;AAKD,wBAAgB,eAAe,IAAI,YAAY,CAE9C;AAED,uCAAuC;AACvC,wBAAgB,eAAe,CAAC,KAAK,EAAE,YAAY,GAAG,IAAI,CAEzD"}

package/dist/store.js

@@ -0,0 +1,173 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RedisStore = exports.MemoryStore = void 0;
+exports.getSessionStore = getSessionStore;
+exports.setSessionStore = setSessionStore;
+/**
+ * 内存会话仓库。
+ * - tokenMap：token -> 会话
+ * - loginIdMap：loginId -> token 集合
+ */
+class MemoryStore {
+    constructor() {
+        this.tokenMap = new Map();
+        this.loginIdMap = new Map();
+    }
+    async set(session) {
+        this.tokenMap.set(session.token, session);
+        const key = String(session.loginId);
+        let tokens = this.loginIdMap.get(key);
+        if (!tokens) {
+            tokens = new Set();
+            this.loginIdMap.set(key, tokens);
+        }
+        tokens.add(session.token);
+    }
+    async getByToken(token) {
+        return this.tokenMap.get(token) ?? null;
+    }
+    async removeByToken(token) {
+        const session = this.tokenMap.get(token);
+        if (!session)
+            return;
+        this.tokenMap.delete(token);
+        const key = String(session.loginId);
+        const tokens = this.loginIdMap.get(key);
+        if (tokens) {
+            tokens.delete(token);
+            if (tokens.size === 0)
+                this.loginIdMap.delete(key);
+        }
+    }
+    async removeByLoginId(loginId) {
+        const key = String(loginId);
+        const tokens = this.loginIdMap.get(key);
+        if (!tokens)
+            return;
+        for (const token of [...tokens]) {
+            this.tokenMap.delete(token);
+        }
+        this.loginIdMap.delete(key);
+    }
+    async listTokensByLoginId(loginId) {
+        const tokens = this.loginIdMap.get(String(loginId));
+        return tokens ? [...tokens] : [];
+    }
+    async touch(session) {
+        this.tokenMap.set(session.token, session);
+    }
+}
+exports.MemoryStore = MemoryStore;
+/**
+ * Redis 会话仓库（优先使用）。
+ * key：
+ * - auth:token:{token} -> AuthSession JSON + TTL
+ * - auth:uid:{loginId} -> token 集合
+ */
+class RedisStore {
+    constructor(redis) {
+        this.redis = redis;
+    }
+    tokenKey(token) {
+        return `auth:token:${token}`;
+    }
+    uidKey(loginId) {
+        return `auth:uid:${loginId}`;
+    }
+    ttlSeconds(session) {
+        if (session.expireTime >= Number.MAX_SAFE_INTEGER / 2) {
+            // 永不过期：不设 TTL（或很长）
+            return undefined;
+        }
+        return Math.max(1, Math.ceil((session.expireTime - Date.now()) / 1000));
+    }
+    /**
+     * uid set 需要过期，否则 token key 过期后 set 残留幽灵 member。
+     * 多端登录时只延长、不缩短（取 max(当前剩余, 本次 ttl)）。
+     */
+    async refreshUidExpire(loginId, ttl) {
+        if (ttl == null || !this.redis.expire)
+            return;
+        const key = this.uidKey(loginId);
+        if (this.redis.ttl) {
+            const left = await this.redis.ttl(key);
+            if (left === -1)
+                return; // 已是永不过期（永不过期会话）
+            if (left > ttl)
+                return;
+        }
+        await this.redis.expire(key, ttl);
+    }
+    async set(session) {
+        const ttl = this.ttlSeconds(session);
+        await this.redis.setJSON(this.tokenKey(session.token), session, ttl);
+        const uidKey = this.uidKey(session.loginId);
+        await this.redis.sAdd(uidKey, session.token);
+        await this.refreshUidExpire(session.loginId, ttl);
+    }
+    async getByToken(token) {
+        return this.redis.getJSON(this.tokenKey(token));
+    }
+    async removeByToken(token) {
+        const session = await this.redis.getJSON(this.tokenKey(token));
+        await this.redis.del(this.tokenKey(token));
+        if (session) {
+            await this.redis.sRem(this.uidKey(session.loginId), token);
+        }
+    }
+    /**
+     * 清理 uid set 中 token key 已不存在的幽灵 member（TTL 竞态或旧数据）。
+     * @returns 仍有效的 token 列表
+     */
+    async pruneUidTokens(loginId) {
+        const key = this.uidKey(loginId);
+        const tokens = await this.redis.sMembers(key);
+        if (!tokens.length)
+            return [];
+        const alive = [];
+        const ghosts = [];
+        for (const token of tokens) {
+            const session = await this.redis.getJSON(this.tokenKey(token));
+            if (session)
+                alive.push(token);
+            else
+                ghosts.push(token);
+        }
+        if (ghosts.length) {
+            await this.redis.sRem(key, ...ghosts);
+        }
+        if (alive.length === 0) {
+            await this.redis.del(key);
+        }
+        return alive;
+    }
+    async removeByLoginId(loginId) {
+        const key = this.uidKey(loginId);
+        const tokens = await this.pruneUidTokens(loginId);
+        if (tokens.length > 0) {
+            await this.redis.del(...tokens.map((t) => this.tokenKey(t)), key);
+        }
+        else {
+            await this.redis.del(key);
+        }
+    }
+    async listTokensByLoginId(loginId) {
+        return this.pruneUidTokens(loginId);
+    }
+    async touch(session) {
+        const ttl = this.ttlSeconds(session);
+        await this.redis.setJSON(this.tokenKey(session.token), session, ttl);
+        await this.refreshUidExpire(session.loginId, ttl);
+    }
+}
+exports.RedisStore = RedisStore;
+/** 当前生效的会话仓库，默认内存 */
+let activeStore = new MemoryStore();
+function getSessionStore() {
+    return activeStore;
+}
+/** 切换会话仓库（配置了 redis 时切到 RedisStore） */
+function setSessionStore(store) {
+    activeStore = store;
+}
+//# sourceMappingURL=store.js.map

package/dist/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../src/store.ts"],"names":[],"mappings":";;;AAmMA,0CAEC;AAGD,0CAEC;AA5LD;;;;GAIG;AACH,MAAa,WAAW;IAAxB;QACU,aAAQ,GAAG,IAAI,GAAG,EAAuB,CAAC;QAC1C,eAAU,GAAG,IAAI,GAAG,EAAuB,CAAC;IA+CtD,CAAC;IA7CC,KAAK,CAAC,GAAG,CAAC,OAAoB;QAC5B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC1C,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACpC,IAAI,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,GAAG,IAAI,GAAG,EAAE,CAAC;YACnB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACnC,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,KAAa;QAC5B,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC;IAC1C,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,KAAa;QAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5B,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACpC,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACrB,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;gBAAE,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,OAAgB;QACpC,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;QAC5B,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,CAAC,MAAM;YAAE,OAAO;QACpB,KAAK,MAAM,KAAK,IAAI,CAAC,GAAG,MAAM,CAAC,EAAE,CAAC;YAChC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC9B,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,OAAgB;QACxC,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;QACpD,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,OAAoB;QAC9B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC5C,CAAC;CACF;AAjDD,kCAiDC;AAeD;;;;;GAKG;AACH,MAAa,UAAU;IACrB,YAA6B,KAAgB;QAAhB,UAAK,GAAL,KAAK,CAAW;IAAG,CAAC;IAEzC,QAAQ,CAAC,KAAa;QAC5B,OAAO,cAAc,KAAK,EAAE,CAAC;IAC/B,CAAC;IAEO,MAAM,CAAC,OAAgB;QAC7B,OAAO,YAAY,OAAO,EAAE,CAAC;IAC/B,CAAC;IAEO,UAAU,CAAC,OAAoB;QACrC,IAAI,OAAO,CAAC,UAAU,IAAI,MAAM,CAAC,gBAAgB,GAAG,CAAC,EAAE,CAAC;YACtD,mBAAmB;YACnB,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;IAC1E,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,gBAAgB,CAC5B,OAAgB,EAChB,GAAuB;QAEvB,IAAI,GAAG,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM;YAAE,OAAO;QAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACjC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;YACnB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACvC,IAAI,IAAI,KAAK,CAAC,CAAC;gBAAE,OAAO,CAAC,iBAAiB;YAC1C,IAAI,IAAI,GAAG,GAAG;gBAAE,OAAO;QACzB,CAAC;QACD,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,OAAoB;QAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QACrC,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;QACrE,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC5C,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QAC7C,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACpD,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,KAAa;QAC5B,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAc,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IAC/D,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,KAAa;QAC/B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAc,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;QAC5E,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;QAC3C,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,cAAc,CAAC,OAAgB;QAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACjC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM,CAAC,MAAM;YAAE,OAAO,EAAE,CAAC;QAE9B,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;YAC/D,IAAI,OAAO;gBAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;;gBAC1B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1B,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAClB,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,CAAC;QACxC,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5B,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,OAAgB;QACpC,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACjC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;QAClD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACpE,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,OAAgB;QACxC,OAAO,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,OAAoB;QAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QACrC,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;QACrE,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACpD,CAAC;CACF;AArGD,gCAqGC;AAED,qBAAqB;AACrB,IAAI,WAAW,GAAiB,IAAI,WAAW,EAAE,CAAC;AAElD,SAAgB,eAAe;IAC7B,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,uCAAuC;AACvC,SAAgB,eAAe,CAAC,KAAmB;IACjD,WAAW,GAAG,KAAK,CAAC;AACtB,CAAC"}

package/dist/token.d.ts

@@ -0,0 +1,16 @@
+import type { LoginId, ResolvedAuthOptions, TokenStyle } from "./types";
+/** Sa-Token 风格的随机 token 生成 */
+export declare function generateStyleToken(style: TokenStyle): string;
+export interface CreateTokenPayload {
+    loginId: LoginId;
+    device?: string;
+    /** 会话超时 ms；-1 永不过期 */
+    timeout: number;
+}
+/**
+ * 按配置生成 token（自定义 createToken > jwt > tokenStyle）。
+ */
+export declare function createAuthToken(options: ResolvedAuthOptions, payload: CreateTokenPayload): Promise<string>;
+/** 校验 JWT 形态 token（非 jwt 风格直接 true） */
+export declare function verifyAuthToken(options: ResolvedAuthOptions, token: string): boolean;
+//# sourceMappingURL=token.d.ts.map

package/dist/token.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token.d.ts","sourceRoot":"","sources":["../src/token.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,mBAAmB,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAExE,8BAA8B;AAC9B,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAuB5D;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,sBAAsB;IACtB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;GAEG;AACH,wBAAsB,eAAe,CACnC,OAAO,EAAE,mBAAmB,EAC5B,OAAO,EAAE,kBAAkB,GAC1B,OAAO,CAAC,MAAM,CAAC,CA8BjB;AAED,uCAAuC;AACvC,wBAAgB,eAAe,CAC7B,OAAO,EAAE,mBAAmB,EAC5B,KAAK,EAAE,MAAM,GACZ,OAAO,CAeT"}

package/dist/token.js

@@ -0,0 +1,81 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.generateStyleToken = generateStyleToken;
+exports.createAuthToken = createAuthToken;
+exports.verifyAuthToken = verifyAuthToken;
+const crypto_1 = require("crypto");
+const jsonwebtoken_1 = __importDefault(require("jsonwebtoken"));
+/** Sa-Token 风格的随机 token 生成 */
+function generateStyleToken(style) {
+    switch (style) {
+        case "simple-uuid":
+            return (0, crypto_1.randomUUID)().replace(/-/g, "");
+        case "uuid":
+            return (0, crypto_1.randomUUID)();
+        case "random-32":
+            return (0, crypto_1.randomBytes)(16).toString("hex");
+        case "random-64":
+            return (0, crypto_1.randomBytes)(32).toString("hex");
+        case "random-128":
+            return (0, crypto_1.randomBytes)(64).toString("hex");
+        case "tik": {
+            // 类 Sa-Token tik：短可读风格
+            const part = () => (0, crypto_1.randomBytes)(3).toString("hex");
+            return `${part()}_${part()}_${part()}`;
+        }
+        case "jwt":
+            // jwt 由 createAuthToken 用密钥签发，这里不应单独走到
+            return (0, crypto_1.randomUUID)();
+        default:
+            return (0, crypto_1.randomUUID)();
+    }
+}
+/**
+ * 按配置生成 token（自定义 createToken > jwt > tokenStyle）。
+ */
+async function createAuthToken(options, payload) {
+    if (options.createToken) {
+        return await options.createToken({
+            loginId: payload.loginId,
+            device: payload.device,
+        });
+    }
+    if (options.tokenStyle === "jwt") {
+        const expiresIn = payload.timeout < 0
+            ? undefined
+            : Math.max(1, Math.ceil(payload.timeout / 1000));
+        const signOptions = {
+            algorithm: (options.jwtAlgorithm || "HS256"),
+        };
+        if (expiresIn !== undefined) {
+            signOptions.expiresIn = expiresIn;
+        }
+        return jsonwebtoken_1.default.sign({
+            loginId: payload.loginId,
+            device: payload.device,
+        }, options.jwtSecret, signOptions);
+    }
+    return generateStyleToken(options.tokenStyle);
+}
+/** 校验 JWT 形态 token（非 jwt 风格直接 true） */
+function verifyAuthToken(options, token) {
+    if (options.tokenStyle !== "jwt" && !options.createToken) {
+        return true;
+    }
+    if (options.tokenStyle !== "jwt") {
+        return true;
+    }
+    try {
+        jsonwebtoken_1.default.verify(token, options.jwtSecret, {
+            algorithms: [(options.jwtAlgorithm || "HS256")],
+        });
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=token.js.map

package/dist/token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token.js","sourceRoot":"","sources":["../src/token.ts"],"names":[],"mappings":";;;;;AAKA,gDAuBC;AAYD,0CAiCC;AAGD,0CAkBC;AA9FD,mCAAiD;AACjD,gEAA+B;AAG/B,8BAA8B;AAC9B,SAAgB,kBAAkB,CAAC,KAAiB;IAClD,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,aAAa;YAChB,OAAO,IAAA,mBAAU,GAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACxC,KAAK,MAAM;YACT,OAAO,IAAA,mBAAU,GAAE,CAAC;QACtB,KAAK,WAAW;YACd,OAAO,IAAA,oBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACzC,KAAK,WAAW;YACd,OAAO,IAAA,oBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACzC,KAAK,YAAY;YACf,OAAO,IAAA,oBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACzC,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,uBAAuB;YACvB,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,IAAA,oBAAW,EAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YAClD,OAAO,GAAG,IAAI,EAAE,IAAI,IAAI,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;QACzC,CAAC;QACD,KAAK,KAAK;YACR,uCAAuC;YACvC,OAAO,IAAA,mBAAU,GAAE,CAAC;QACtB;YACE,OAAO,IAAA,mBAAU,GAAE,CAAC;IACxB,CAAC;AACH,CAAC;AASD;;GAEG;AACI,KAAK,UAAU,eAAe,CACnC,OAA4B,EAC5B,OAA2B;IAE3B,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;QACxB,OAAO,MAAM,OAAO,CAAC,WAAW,CAAC;YAC/B,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,MAAM,EAAE,OAAO,CAAC,MAAM;SACvB,CAAC,CAAC;IACL,CAAC;IAED,IAAI,OAAO,CAAC,UAAU,KAAK,KAAK,EAAE,CAAC;QACjC,MAAM,SAAS,GACb,OAAO,CAAC,OAAO,GAAG,CAAC;YACjB,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC;QACrD,MAAM,WAAW,GAAoB;YACnC,SAAS,EAAE,CAAC,OAAO,CAAC,YAAY,IAAI,OAAO,CAAkB;SAC9D,CAAC;QACF,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,WAAW,CAAC,SAAS,GAAG,SAAS,CAAC;QACpC,CAAC;QACD,OAAO,sBAAG,CAAC,IAAI,CACb;YACE,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,MAAM,EAAE,OAAO,CAAC,MAAM;SACvB,EACD,OAAO,CAAC,SAAS,EACjB,WAAW,CACZ,CAAC;IACJ,CAAC;IAED,OAAO,kBAAkB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;AAChD,CAAC;AAED,uCAAuC;AACvC,SAAgB,eAAe,CAC7B,OAA4B,EAC5B,KAAa;IAEb,IAAI,OAAO,CAAC,UAAU,KAAK,KAAK,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;QACzD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,OAAO,CAAC,UAAU,KAAK,KAAK,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC;QACH,sBAAG,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,SAAS,EAAE;YACnC,UAAU,EAAE,CAAC,CAAC,OAAO,CAAC,YAAY,IAAI,OAAO,CAAkB,CAAC;SACjE,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}