@seamless-auth/core 0.7.0 → 0.10.0

package/dist/verifySignedAuthResponse.js

@@ -1,11 +1,24 @@
 import { createRemoteJWKSet, jwtVerify } from "jose";
-export async function verifySignedAuthResponse(token, authServerUrl) {
+// jose caches keys and applies a refetch cooldown per JWKS instance, so the instance
+// must outlive a single call. Memoize per JWKS URL (one per auth server, so the map
+// stays tiny) instead of building a fresh, empty-cache instance on every verification.
+const jwksByUrl = new Map();
+function getJwks(jwksUrl) {
+    let jwks = jwksByUrl.get(jwksUrl);
+    if (!jwks) {
+        jwks = createRemoteJWKSet(new URL(jwksUrl));
+        jwksByUrl.set(jwksUrl, jwks);
+    }
+    return jwks;
+}
+export async function verifySignedAuthResponse(token, authServerUrl, audience) {
     try {
         const jwksUrl = new URL("/.well-known/jwks.json", authServerUrl).toString();
-        const JWKS = createRemoteJWKSet(new URL(jwksUrl));
+        const JWKS = getJwks(jwksUrl);
         const { payload } = await jwtVerify(token, JWKS, {
             algorithms: ["RS256"],
             issuer: authServerUrl,
+            audience,
         });
         return payload;
     }

package/dist/verifySignedAuthResponse.js.map

@@ -1 +1 @@
-{"version":3,"file":"verifySignedAuthResponse.js","sourceRoot":"","sources":["../src/verifySignedAuthResponse.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AAErD,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,KAAa,EACb,aAAqB;IAErB,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,wBAAwB,EAAE,aAAa,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC5E,MAAM,IAAI,GAAG,kBAAkB,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;QAElD,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE;YAC/C,UAAU,EAAE,CAAC,OAAO,CAAC;YACrB,MAAM,EAAE,aAAa;SACtB,CAAC,CAAC;QAEH,OAAO,OAAY,CAAC;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,KAAK,CAAC,uDAAuD,CAAC,CAAC;QACvE,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}
+{"version":3,"file":"verifySignedAuthResponse.js","sourceRoot":"","sources":["../src/verifySignedAuthResponse.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AAErD,qFAAqF;AACrF,oFAAoF;AACpF,uFAAuF;AACvF,MAAM,SAAS,GAAG,IAAI,GAAG,EAAiD,CAAC;AAE3E,SAAS,OAAO,CAAC,OAAe;IAC9B,IAAI,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAClC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,IAAI,GAAG,kBAAkB,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;QAC5C,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,KAAa,EACb,aAAqB,EACrB,QAAgB;IAEhB,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,wBAAwB,EAAE,aAAa,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC5E,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAE9B,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE;YAC/C,UAAU,EAAE,CAAC,OAAO,CAAC;YACrB,MAAM,EAAE,aAAa;YACrB,QAAQ;SACT,CAAC,CAAC;QAEH,OAAO,OAAY,CAAC;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,KAAK,CAAC,uDAAuD,CAAC,CAAC;QACvE,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/package.json

@@ -1,14 +1,26 @@
 {
   "name": "@seamless-auth/core",
-  "version": "0.7.0",
+  "version": "0.10.0",
   "description": "Framework-agnostic core authentication logic for SeamlessAuth",
+  "keywords": [
+    "authentication",
+    "passwordless",
+    "webauthn",
+    "passkeys",
+    "jwt",
+    "seamless-auth"
+  ],
   "license": "AGPL-3.0-only",
   "author": "Fells Code, LLC",
   "sideEffects": false,
   "homepage": "https://seamlessauth.com",
   "repository": {
     "type": "git",
-    "url": "https://github.com/fells-code/seamless-auth-server/tree/main/packages/core"
+    "url": "https://github.com/fells-code/seamless-auth-server.git",
+    "directory": "packages/core"
+  },
+  "bugs": {
+    "url": "https://github.com/fells-code/seamless-auth-server/issues"
   },
   "type": "module",
   "main": "./dist/index.js",
@@ -30,7 +42,7 @@
     "README.md"
   ],
   "engines": {
-    "node": ">=18"
+    "node": ">=24 <25"
   },
   "dependencies": {
     "jose": "^6.1.3",

package/dist/handlers/bootstrapAdminInvite.d.ts

@@ -1,20 +0,0 @@
-export interface BootstrapAdminInviteOptions {
-    authServerUrl: string;
-    email: string;
-    authorization?: string;
-    serviceAuthorization?: string;
-    externalDelivery?: boolean;
-    forwardedClientIp?: string;
-}
-export interface BootstrapAdminInviteResult {
-    status: number;
-    body?: {
-        url?: string;
-        expiresAt: string;
-        token?: string;
-        delivery?: unknown;
-    };
-    error?: string;
-}
-export declare function bootstrapAdminInviteHandler(opts: BootstrapAdminInviteOptions): Promise<BootstrapAdminInviteResult>;
-//# sourceMappingURL=bootstrapAdminInvite.d.ts.map

package/dist/handlers/bootstrapAdminInvite.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"bootstrapAdminInvite.d.ts","sourceRoot":"","sources":["../../src/handlers/bootstrapAdminInvite.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,2BAA2B;IAC1C,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,0BAA0B;IACzC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE;QACL,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,SAAS,EAAE,MAAM,CAAC;QAClB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,QAAQ,CAAC,EAAE,OAAO,CAAC;KACpB,CAAC;IACF,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,wBAAsB,2BAA2B,CAC/C,IAAI,EAAE,2BAA2B,GAChC,OAAO,CAAC,0BAA0B,CAAC,CAgCrC"}

package/dist/handlers/bootstrapAdminInvite.js

@@ -1,29 +0,0 @@
-import { authFetch } from "../authFetch.js";
-export async function bootstrapAdminInviteHandler(opts) {
-    const up = await authFetch(`${opts.authServerUrl}/internal/bootstrap/admin-invite`, {
-        method: "POST",
-        authorization: opts.authorization,
-        serviceAuthorization: opts.serviceAuthorization,
-        forwardedClientIp: opts.forwardedClientIp,
-        headers: {
-            ...(opts.externalDelivery
-                ? {
-                    "x-seamless-auth-delivery-mode": "external",
-                }
-                : {}),
-        },
-        body: { email: opts.email },
-    });
-    const data = await up.json();
-    if (!up.ok) {
-        return {
-            status: up.status,
-            error: data?.error?.message || "bootstrap_failed",
-        };
-    }
-    return {
-        status: up.status,
-        body: data?.data,
-    };
-}
-//# sourceMappingURL=bootstrapAdminInvite.js.map

package/dist/handlers/bootstrapAdminInvite.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"bootstrapAdminInvite.js","sourceRoot":"","sources":["../../src/handlers/bootstrapAdminInvite.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAsB5C,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,IAAiC;IAEjC,MAAM,EAAE,GAAG,MAAM,SAAS,CACxB,GAAG,IAAI,CAAC,aAAa,kCAAkC,EACvD;QACE,MAAM,EAAE,MAAM;QACd,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,oBAAoB,EAAE,IAAI,CAAC,oBAAoB;QAC/C,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;QACzC,OAAO,EAAE;YACP,GAAG,CAAC,IAAI,CAAC,gBAAgB;gBACvB,CAAC,CAAC;oBACE,+BAA+B,EAAE,UAAU;iBAC5C;gBACH,CAAC,CAAC,EAAE,CAAC;SACR;QACD,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE;KAC5B,CACF,CAAC;IAEF,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC;IAE7B,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QACX,OAAO;YACL,MAAM,EAAE,EAAE,CAAC,MAAM;YACjB,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,IAAI,kBAAkB;SAClD,CAAC;IACJ,CAAC;IAED,OAAO;QACL,MAAM,EAAE,EAAE,CAAC,MAAM;QACjB,IAAI,EAAE,IAAI,EAAE,IAAI;KACjB,CAAC;AACJ,CAAC"}