@scayle/h3-session 0.6.0 → 0.6.1

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @scayle/h3-session
 
+## 0.6.1
+
+### Patch Changes
+
+- Disallow setting `name`, `path` or `domain` on the session cookie. Setting these properties would result in a new cookie rather than updating the existing cookie. It is now blocked to prevent unexpected behavior.
+
 ## 0.6.0
 
 ### Minor Changes

package/LICENSE

@@ -1,6 +1,6 @@
 MIT License
 
-Copyright (c) 2024 SCAYLE GmbH
+Copyright (c) 2025 SCAYLE GmbH
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

package/dist/index.d.mts

@@ -140,4 +140,5 @@ declare function validateConfig(config: H3SessionOptions): void;
  */
 declare function useSession(event: H3Event, config: H3SessionOptions): Promise<void>;
 
-export { type H3SessionOptions, type RawSession, Session, type SessionCookie, type SessionCookieOptions, type SessionDataT, type SessionMethods, type SessionStore, UnstorageSessionStore, signCookie, unsignCookie, useSession, validateConfig };
+export { Session, UnstorageSessionStore, signCookie, unsignCookie, useSession, validateConfig };
+export type { H3SessionOptions, RawSession, SessionCookie, SessionCookieOptions, SessionDataT, SessionMethods, SessionStore };

package/dist/index.d.ts

@@ -140,4 +140,5 @@ declare function validateConfig(config: H3SessionOptions): void;
  */
 declare function useSession(event: H3Event, config: H3SessionOptions): Promise<void>;
 
-export { type H3SessionOptions, type RawSession, Session, type SessionCookie, type SessionCookieOptions, type SessionDataT, type SessionMethods, type SessionStore, UnstorageSessionStore, signCookie, unsignCookie, useSession, validateConfig };
+export { Session, UnstorageSessionStore, signCookie, unsignCookie, useSession, validateConfig };
+export type { H3SessionOptions, RawSession, SessionCookie, SessionCookieOptions, SessionDataT, SessionMethods, SessionStore };

package/dist/index.mjs

@@ -95,7 +95,7 @@ class UnstorageSessionStore {
    */
   async get(sid) {
     const item = await this.storage.getItem(this.getKey(sid));
-    return item ?? undefined;
+    return item ?? void 0;
   }
   /**
    * Save the session with the specified session ID
@@ -166,11 +166,11 @@ class UnstorageSessionStore {
 const signatureLength = 43;
 function parseCookieValue(value) {
   if (value.length < signatureLength + 3) {
-    return undefined;
+    return void 0;
   }
   const separatorIndex = value.length - signatureLength - 1;
   if (value.charAt(0) !== "s" || value.charAt(1) !== ":" || value.charAt(separatorIndex) !== ".") {
-    return undefined;
+    return void 0;
   }
   return [
     value.substring(2, separatorIndex),
@@ -222,6 +222,7 @@ function validateConfig(config) {
     throw new Error("[h3-session] Session secret is required!");
   }
 }
+const uniqueCookieAttributes = /* @__PURE__ */ new Set(["name", "path", "domain"]);
 async function useSession(event, config) {
   if (event.context.session) {
     return;
@@ -261,6 +262,11 @@ async function useSession(event, config) {
     await cookie.setSessionId(sid);
     return new Proxy(cookie, {
       set(target, property, value) {
+        if (uniqueCookieAttributes.has(property)) {
+          throw new Error(
+            `[h3-session] Cannot change ${property} on a session cookie!`
+          );
+        }
         target[property] = value;
         setCookie(event, sessionConfig.name, signedCookie, cookie);
         return true;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@scayle/h3-session",
-  "version": "0.6.0",
+  "version": "0.6.1",
   "description": "Persistent sessions for h3",
   "author": "SCAYLE Commerce Engine",
   "license": "MIT",
@@ -8,6 +8,13 @@
     "access": "public",
     "registry": "https://registry.npmjs.org/"
   },
+  "repository": {
+    "url": "git+https://github.com/scayle/h3-session.git"
+  },
+  "keywords": [
+    "h3",
+    "session"
+  ],
   "exports": {
     ".": "./dist/index.mjs"
   },
@@ -21,7 +28,8 @@
     "verify-packaging": "attw --pack . --profile esm-only",
     "format": "dprint check",
     "format:fix": "dprint fmt",
-    "lint": "eslint . --format gitlab",
+    "lint": "eslint .",
+    "lint:ci": "eslint . --format gitlab",
     "lint:fix": "eslint . --fix",
     "test": "vitest run",
     "test:ci": "vitest --run --coverage --reporter=default --reporter=junit --outputFile=./coverage/junit.xml",
@@ -37,18 +45,18 @@
     "unstorage": "^1.10.2"
   },
   "devDependencies": {
-    "@arethetypeswrong/cli": "0.17.3",
-    "@scayle/eslint-config-storefront": "4.4.1",
-    "cookie-es": "1.2.2",
-    "dprint": "0.48.0",
-    "eslint": "9.18.0",
-    "eslint-formatter-gitlab": "5.1.0",
-    "h3": "1.13.1",
-    "typescript": "5.7.3",
-    "unbuild": "3.3.1",
-    "vitest": "2.1.8"
+    "@arethetypeswrong/cli": "0.17.4",
+    "@scayle/eslint-config-storefront": "4.5.0",
+    "cookie-es": "2.0.0",
+    "dprint": "0.49.1",
+    "eslint": "9.25.1",
+    "eslint-formatter-gitlab": "6.0.0",
+    "h3": "1.15.1",
+    "typescript": "5.8.3",
+    "unbuild": "3.5.0",
+    "vitest": "3.1.2"
   },
   "volta": {
-    "node": "22.13.0"
+    "node": "22.14.0"
   }
 }