@porulle/core 0.20.2 → 0.20.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (4) hide show
  1. package/dist/auth/setup.d.ts.map +1 -1
  2. package/dist/auth/setup.js +5 -4
  3. package/package.json +1 -1
  4. package/src/auth/setup.ts +5 -4
package/dist/auth/setup.d.ts.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"setup.d.ts","sourceRoot":"","sources":["../../src/auth/setup.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AACxF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAkBrE;;;;;GAKG;AACH,KAAK,cAAc,GAAG,UAAU,CAAC,OAAO,UAAU,CAAC;IACjD,OAAO,EAAE;QACP,UAAU,CAAC,OAAO,YAAY,CAAC;QAC/B,UAAU,CAAC,OAAO,MAAM,CAAC;QACzB,UAAU,CAAC,OAAO,GAAG,CAAC;QACtB,UAAU,CAAC,OAAO,SAAS,CAAC;QAC5B,UAAU,CAAC,OAAO,MAAM,CAAC;QACzB,UAAU,CAAC,OAAO,WAAW,CAAC;KAC/B,CAAC;CACH,CAAC,CAAC,CAAC;AAEJ;;;GAGG;AACH,MAAM,MAAM,YAAY,GAAG,cAAc,CAAC;AAE1C,wBAAgB,UAAU,CACxB,EAAE,EAAE,eAAe,EACnB,MAAM,EAAE,cAAc,GACrB,YAAY,CAkKd"}
1
+ {"version":3,"file":"setup.d.ts","sourceRoot":"","sources":["../../src/auth/setup.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AACxF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAkBrE;;;;;GAKG;AACH,KAAK,cAAc,GAAG,UAAU,CAAC,OAAO,UAAU,CAAC;IACjD,OAAO,EAAE;QACP,UAAU,CAAC,OAAO,YAAY,CAAC;QAC/B,UAAU,CAAC,OAAO,MAAM,CAAC;QACzB,UAAU,CAAC,OAAO,GAAG,CAAC;QACtB,UAAU,CAAC,OAAO,SAAS,CAAC;QAC5B,UAAU,CAAC,OAAO,MAAM,CAAC;QACzB,UAAU,CAAC,OAAO,WAAW,CAAC;KAC/B,CAAC;CACH,CAAC,CAAC,CAAC;AAEJ;;;GAGG;AACH,MAAM,MAAM,YAAY,GAAG,cAAc,CAAC;AAE1C,wBAAgB,UAAU,CACxB,EAAE,EAAE,eAAe,EACnB,MAAM,EAAE,cAAc,GACrB,YAAY,CAmKd"}
package/dist/auth/setup.js CHANGED
@@ -120,10 +120,11 @@ export function createAuth(db, config) {
120
120
  session: {
121
121
  expiresIn: config.auth?.sessionDuration ?? 60 * 60 * 24 * 7,
122
122
  updateAge: 60 * 60 * 24,
123
- cookieCache: {
124
- enabled: true,
125
- maxAge: 60 * 5,
126
- },
123
+ // No cookie cache. It made the signed session cookie a second source
124
+ // of truth for session liveness, so a revoked session kept authorizing
125
+ // every route that resolves an actor for up to its maxAge. If this is
126
+ // ever reintroduced behind a config option, resolveActor must ask with
127
+ // query.disableCookieCache so authorization keeps reading the table.
127
128
  },
128
129
  advanced: {
129
130
  cookiePrefix: AUTH_COOKIE_PREFIX,
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@porulle/core",
3
- "version": "0.20.2",
3
+ "version": "0.20.3",
4
4
  "license": "MIT",
5
5
  "type": "module",
6
6
  "exports": {
package/src/auth/setup.ts CHANGED
@@ -173,10 +173,11 @@ export function createAuth(
173
173
  session: {
174
174
  expiresIn: config.auth?.sessionDuration ?? 60 * 60 * 24 * 7,
175
175
  updateAge: 60 * 60 * 24,
176
- cookieCache: {
177
- enabled: true,
178
- maxAge: 60 * 5,
179
- },
176
+ // No cookie cache. It made the signed session cookie a second source
177
+ // of truth for session liveness, so a revoked session kept authorizing
178
+ // every route that resolves an actor for up to its maxAge. If this is
179
+ // ever reintroduced behind a config option, resolveActor must ask with
180
+ // query.disableCookieCache so authorization keeps reading the table.
180
181
  },
181
182
  advanced: {
182
183
  cookiePrefix: AUTH_COOKIE_PREFIX,