@riligar/auth-elysia 1.4.0 → 1.4.2

package/README.md

@@ -8,6 +8,19 @@ Auth SDK for ElysiaJS with JWT and JWKS
 bun add @riligar/auth-elysia
 ```
 
+## 🔑 Environment Variables
+
+| Variable          | Description                       | Default                        |
+| ----------------- | --------------------------------- | ------------------------------ |
+| `AUTH_SECRET_KEY` | Your RiLiGar Secret Key (sk\_...) | `your-secret-key`              |
+| `AUTH_API_URL`    | Auth Manager API URL              | `https://manager.myauth.click` |
+
+```bash
+# .env
+AUTH_SECRET_KEY=sk_your_secret_key_here
+AUTH_API_URL=https://manager.myauth.click
+```
+
 ## 🚀 Basic Usage
 
 ```javascript
@@ -123,7 +136,7 @@ const config = {
         httpOnly: true,
         secure: process.env.NODE_ENV === 'production',
         sameSite: 'lax',
-        maxAge: 86400, // 24 hours
+        maxAge: 604800, // 7 days (same as JWT TTL)
     },
     onUnauthorized: set => {
         set.status = 401
@@ -140,6 +153,37 @@ const config = {
 -   `GET /auth/session` - Check current session
 -   `GET /auth/me` - User data
 
+## 👤 User Object
+
+The `user` object is available in all protected routes and contains:
+
+```typescript
+interface User {
+    id: string // Unique user ID (UUID)
+    email: string // User email
+    name: string // User display name
+    image?: string // Avatar URL (optional)
+    emailVerified: boolean // Email verification status
+    applicationId?: string // Application ID (if multi-tenant)
+    role?: string // User role from JWT claims
+    iat: number // Issued at (Unix timestamp)
+    exp: number // Expiration (Unix timestamp)
+    iss: string // Issuer (e.g., 'riligar-auth')
+    sub: string // Subject (user ID)
+}
+```
+
+### authMeta Object
+
+Performance metadata available alongside user:
+
+```typescript
+interface AuthMeta {
+    verified_locally: boolean // True if JWT was verified locally via JWKS
+    cached: boolean // True if JWKS was retrieved from cache
+}
+```
+
 ## ⚡ Performance Features
 
 ✅ **Local JWKS Verification**: Public keys cache (1h TTL)  

package/dist/index.esm.js

@@ -276,11 +276,11 @@ function authPlugin(userConfig = {}) {
     const authClient = new RiLiGarAuthClient(config.apiUrl, config.secretKey);
 
     return new Elysia({ name: 'auth-plugin' })
-        .derive(({ request }) => ({
+        .onBeforeHandle(createAuthMiddleware(config, authClient))
+        .resolve(({ request }) => ({
             user: request.user || null,
             authMeta: request.authMeta || null,
         }))
-        .onBeforeHandle(createAuthMiddleware(config, authClient))
         .group(config.prefix, app =>
             app
                 // Rota de login

package/dist/index.js

@@ -280,11 +280,11 @@ function authPlugin(userConfig = {}) {
     const authClient = new RiLiGarAuthClient(config.apiUrl, config.secretKey);
 
     return new elysia.Elysia({ name: 'auth-plugin' })
-        .derive(({ request }) => ({
+        .onBeforeHandle(createAuthMiddleware(config, authClient))
+        .resolve(({ request }) => ({
             user: request.user || null,
             authMeta: request.authMeta || null,
         }))
-        .onBeforeHandle(createAuthMiddleware(config, authClient))
         .group(config.prefix, app =>
             app
                 // Rota de login

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@riligar/auth-elysia",
-    "version": "1.4.0",
+    "version": "1.4.2",
     "type": "module",
     "description": "Auth SDK for ElysiaJS with JWT and JWKS",
     "main": "dist/index.js",

package/src/index.js

@@ -275,11 +275,11 @@ export function authPlugin(userConfig = {}) {
     const authClient = new RiLiGarAuthClient(config.apiUrl, config.secretKey)
 
     return new Elysia({ name: 'auth-plugin' })
-        .derive(({ request }) => ({
+        .onBeforeHandle(createAuthMiddleware(config, authClient))
+        .resolve(({ request }) => ({
             user: request.user || null,
             authMeta: request.authMeta || null,
         }))
-        .onBeforeHandle(createAuthMiddleware(config, authClient))
         .group(config.prefix, app =>
             app
                 // Rota de login