@scayle/h3-session 0.6.0 → 0.6.2

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # @scayle/h3-session
 
+## 0.6.2
+
+### Patch Changes
+
+- Cleaned up README.md and added CONTRIBUTING.md. No functional changes.
+
+## 0.6.1
+
+### Patch Changes
+
+- Disallow setting `name`, `path` or `domain` on the session cookie. Setting these properties would result in a new cookie rather than updating the existing cookie. It is now blocked to prevent unexpected behavior.
+
 ## 0.6.0
 
 ### Minor Changes
@@ -10,7 +22,7 @@
 
 ### Patch Changes
 
-- When a sessionID exists, but there is no session data, re-use the sessionID instead of generating both new data and a new ID. This enables proper functioning of the `saveUnitialized` configuration.
+- When a sessionID exists, but there is no session data, re-use the sessionID instead of generating both new data and a new ID. This enables proper functioning of the `saveUninitialized` configuration.
 - Fix the `clear()` method on `UnstorageSessionStore` not clearing sessions
 
 ## 0.5.0

package/LICENSE

@@ -1,6 +1,6 @@
 MIT License
 
-Copyright (c) 2024 SCAYLE GmbH
+Copyright (c) 2025 SCAYLE GmbH
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

package/README.md

@@ -143,12 +143,3 @@ declare module '@scayle/h3-session' {
 ## License
 
 Licensed under the [MIT License](https://opensource.org/license/mit/)
-
-<!-- Badges -->
-
-[npm-version-src]: https://img.shields.io/npm/v/@scayle/h3-session/latest.svg?style=flat&colorA=18181B&colorB=28CF8D
-[npm-version-href]: https://npmjs.com/package/@scayle/h3-session
-[npm-downloads-src]: https://img.shields.io/npm/dm/@scayle/h3-session.svg?style=flat&colorA=18181B&colorB=28CF8D
-[npm-downloads-href]: https://npmjs.com/package/@scayle/h3-session
-[license-src]: https://img.shields.io/npm/l/@scayle/h3-session.svg?style=flat&colorA=18181B&colorB=28CF8D
-[license-href]: https://npmjs.com/package/@scayle/h3-session

package/dist/index.d.mts

@@ -140,4 +140,5 @@ declare function validateConfig(config: H3SessionOptions): void;
  */
 declare function useSession(event: H3Event, config: H3SessionOptions): Promise<void>;
 
-export { type H3SessionOptions, type RawSession, Session, type SessionCookie, type SessionCookieOptions, type SessionDataT, type SessionMethods, type SessionStore, UnstorageSessionStore, signCookie, unsignCookie, useSession, validateConfig };
+export { Session, UnstorageSessionStore, signCookie, unsignCookie, useSession, validateConfig };
+export type { H3SessionOptions, RawSession, SessionCookie, SessionCookieOptions, SessionDataT, SessionMethods, SessionStore };

package/dist/index.d.ts

@@ -140,4 +140,5 @@ declare function validateConfig(config: H3SessionOptions): void;
  */
 declare function useSession(event: H3Event, config: H3SessionOptions): Promise<void>;
 
-export { type H3SessionOptions, type RawSession, Session, type SessionCookie, type SessionCookieOptions, type SessionDataT, type SessionMethods, type SessionStore, UnstorageSessionStore, signCookie, unsignCookie, useSession, validateConfig };
+export { Session, UnstorageSessionStore, signCookie, unsignCookie, useSession, validateConfig };
+export type { H3SessionOptions, RawSession, SessionCookie, SessionCookieOptions, SessionDataT, SessionMethods, SessionStore };

package/dist/index.mjs

@@ -95,7 +95,7 @@ class UnstorageSessionStore {
    */
   async get(sid) {
     const item = await this.storage.getItem(this.getKey(sid));
-    return item ?? undefined;
+    return item ?? void 0;
   }
   /**
    * Save the session with the specified session ID
@@ -166,11 +166,11 @@ class UnstorageSessionStore {
 const signatureLength = 43;
 function parseCookieValue(value) {
   if (value.length < signatureLength + 3) {
-    return undefined;
+    return void 0;
   }
   const separatorIndex = value.length - signatureLength - 1;
   if (value.charAt(0) !== "s" || value.charAt(1) !== ":" || value.charAt(separatorIndex) !== ".") {
-    return undefined;
+    return void 0;
   }
   return [
     value.substring(2, separatorIndex),
@@ -222,6 +222,7 @@ function validateConfig(config) {
     throw new Error("[h3-session] Session secret is required!");
   }
 }
+const uniqueCookieAttributes = /* @__PURE__ */ new Set(["name", "path", "domain"]);
 async function useSession(event, config) {
   if (event.context.session) {
     return;
@@ -261,6 +262,11 @@ async function useSession(event, config) {
     await cookie.setSessionId(sid);
     return new Proxy(cookie, {
       set(target, property, value) {
+        if (uniqueCookieAttributes.has(property)) {
+          throw new Error(
+            `[h3-session] Cannot change ${property} on a session cookie!`
+          );
+        }
         target[property] = value;
         setCookie(event, sessionConfig.name, signedCookie, cookie);
         return true;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@scayle/h3-session",
-  "version": "0.6.0",
+  "version": "0.6.2",
   "description": "Persistent sessions for h3",
   "author": "SCAYLE Commerce Engine",
   "license": "MIT",
@@ -8,6 +8,13 @@
     "access": "public",
     "registry": "https://registry.npmjs.org/"
   },
+  "repository": {
+    "url": "git+https://github.com/scayle/h3-session.git"
+  },
+  "keywords": [
+    "h3",
+    "session"
+  ],
   "exports": {
     ".": "./dist/index.mjs"
   },
@@ -16,18 +23,6 @@
     "CHANGELOG.md",
     "dist/**"
   ],
-  "scripts": {
-    "build": "unbuild",
-    "verify-packaging": "attw --pack . --profile esm-only",
-    "format": "dprint check",
-    "format:fix": "dprint fmt",
-    "lint": "eslint . --format gitlab",
-    "lint:fix": "eslint . --fix",
-    "test": "vitest run",
-    "test:ci": "vitest --run --coverage --reporter=default --reporter=junit --outputFile=./coverage/junit.xml",
-    "test:watch": "vitest watch",
-    "typecheck": "tsc --noEmit -p tsconfig.json"
-  },
   "peerDependencies": {
     "h3": "^1.10.0"
   },
@@ -37,18 +32,33 @@
     "unstorage": "^1.10.2"
   },
   "devDependencies": {
-    "@arethetypeswrong/cli": "0.17.3",
-    "@scayle/eslint-config-storefront": "4.4.1",
-    "cookie-es": "1.2.2",
-    "dprint": "0.48.0",
-    "eslint": "9.18.0",
-    "eslint-formatter-gitlab": "5.1.0",
-    "h3": "1.13.1",
-    "typescript": "5.7.3",
-    "unbuild": "3.3.1",
-    "vitest": "2.1.8"
+    "@arethetypeswrong/cli": "0.18.2",
+    "@vitest/coverage-v8": "3.2.4",
+    "cookie-es": "2.0.0",
+    "dprint": "0.50.2",
+    "eslint-formatter-gitlab": "6.0.1",
+    "eslint": "9.38.0",
+    "h3": "1.15.4",
+    "typescript": "5.9.3",
+    "unbuild": "3.6.1",
+    "vitest": "3.2.4",
+    "@scayle/eslint-config-storefront": "4.7.11",
+    "@scayle/vitest-config-storefront": "1.0.0"
   },
   "volta": {
-    "node": "22.13.0"
+    "node": "22.21.0"
+  },
+  "scripts": {
+    "build": "unbuild",
+    "verify-packaging": "attw --pack . --profile esm-only",
+    "format": "dprint check",
+    "format:fix": "dprint fmt",
+    "lint": "eslint .",
+    "lint:ci": "eslint . --format gitlab",
+    "lint:fix": "eslint . --fix",
+    "test": "vitest run",
+    "test:ci": "vitest --run --coverage --reporter=default --reporter=junit --outputFile=./coverage/junit.xml",
+    "test:watch": "vitest watch",
+    "typecheck": "tsc --noEmit -p tsconfig.json"
   }
-}
+}