@rebasepro/server 0.13.0 → 0.13.1-canary.gcd6689e

package/dist/{jwt-DD6EtpGj.js → jwt-CzeviDcB.js}

@@ -4159,6 +4159,7 @@ var jwt_exports = /* @__PURE__ */ __exportAll({
 	getRefreshTokenExpiry: () => getRefreshTokenExpiry,
 	getRefreshTokenTtlMs: () => getRefreshTokenTtlMs,
 	hashRefreshToken: () => hashRefreshToken,
+	isJwtConfigured: () => isJwtConfigured,
 	verifyAccessToken: () => verifyAccessToken,
 	verifyDownloadToken: () => verifyDownloadToken
 });
@@ -4202,6 +4203,20 @@ function configureJwt(config) {
 	};
 }
 /**
+* Has this server been given a JWT secret?
+*
+* False on every backend that authenticates through an adapter — Firebase,
+* Clerk, anything with its own tokens — because nothing calls
+* {@link configureJwt} there. Signing paths still throw when it is false, since
+* asking for a token from a server that cannot mint one is a mistake worth
+* hearing about. Paths whose contract is *"tolerate the absence of auth"* must
+* ask first: `optionalAuth` crashing a request because this backend does not do
+* JWT is a 500 on a route that had already decided anonymous was acceptable.
+*/
+function isJwtConfigured() {
+	return Boolean(jwtConfig.secret);
+}
+/**
 * Generate an access token (short-lived, 1 hour by default)
 */
 function generateAccessToken(uid, roles, aal = "aal1", customClaims) {
@@ -4359,6 +4374,6 @@ function verifyDownloadToken(token) {
 	}
 }
 //#endregion
-export { generateRefreshToken as a, getRefreshTokenTtlMs as c, verifyAccessToken as d, verifyDownloadToken as f, generateDownloadToken as i, hashRefreshToken as l, configureJwt as n, getAccessTokenExpiry as o, require_jsonwebtoken as p, generateAccessToken as r, getRefreshTokenExpiry as s, MAX_COOKIE_AGE_MS as t, jwt_exports as u };
+export { generateRefreshToken as a, getRefreshTokenTtlMs as c, jwt_exports as d, verifyAccessToken as f, generateDownloadToken as i, hashRefreshToken as l, require_jsonwebtoken as m, configureJwt as n, getAccessTokenExpiry as o, verifyDownloadToken as p, generateAccessToken as r, getRefreshTokenExpiry as s, MAX_COOKIE_AGE_MS as t, isJwtConfigured as u };
 
-//# sourceMappingURL=jwt-DD6EtpGj.js.map
+//# sourceMappingURL=jwt-CzeviDcB.js.map