@semiont/backend 0.4.4 → 0.4.5

package/dist/index.js

@@ -11,6 +11,7 @@ import { SemiontProject, loadEnvironmentConfig } from '@semiont/core/node';
 import { exportBackup, importBackup, readEntityTypesProjection, exportLinkedData, importLinkedData, AnnotationContext, startMakeMeaning, ResourceContext, ResourceOperations } from '@semiont/make-meaning';
 import { PrismaClient } from '@prisma/client';
 import { PrismaPg } from '@prisma/adapter-pg';
+import { setCookie, deleteCookie, getCookie } from 'hono/cookie';
 import { HTTPException } from 'hono/http-exception';
 import Ajv from 'ajv';
 import addFormats from 'ajv-formats';
@@ -15362,6 +15363,10 @@ var openapi_default = {
           },
           created: {
             type: "string"
+          },
+          token: {
+            type: "string",
+            description: "The validated JWT token string for the current session"
           }
         },
         required: [
@@ -15375,7 +15380,8 @@ var openapi_default = {
           "isActive",
           "termsAcceptedAt",
           "lastLogin",
-          "created"
+          "created",
+          "token"
         ]
       },
       SvgSelector: {
@@ -15846,22 +15852,16 @@ var OAuthService = class {
 var authMiddleware = /* @__PURE__ */ __name(async (c, next) => {
   const logger2 = c.get("logger");
   const authHeader = c.req.header("Authorization");
-  if (!authHeader || !authHeader.startsWith("Bearer ")) {
-    logger2.warn("Authentication failed: Missing Authorization header", {
-      type: "auth_failed",
-      reason: "missing_header",
-      path: c.req.path,
-      method: c.req.method
-    });
-    return c.json({
-      error: "Unauthorized"
-    }, 401);
+  let tokenStr;
+  if (authHeader?.startsWith("Bearer ")) {
+    tokenStr = authHeader.substring(7).trim();
+  } else {
+    tokenStr = getCookie(c, "semiont-token");
   }
-  const tokenStr = authHeader.substring(7).trim();
   if (!tokenStr) {
-    logger2.warn("Authentication failed: Empty token", {
+    logger2.warn("Authentication failed: No token", {
       type: "auth_failed",
-      reason: "empty_token",
+      reason: "missing_token",
       path: c.req.path,
       method: c.req.method
     });
@@ -15872,6 +15872,7 @@ var authMiddleware = /* @__PURE__ */ __name(async (c, next) => {
   try {
     const user = await OAuthService.getUserFromToken(accessToken(tokenStr));
     c.set("user", user);
+    c.set("token", tokenStr);
     logger2.debug("Authentication successful", {
       type: "auth_success",
       userId: user.id,
@@ -16063,6 +16064,13 @@ authRouter.post("/api/tokens/password", validateRequestBody("PasswordAuthRequest
         lastLogin: /* @__PURE__ */ new Date()
       }
     });
+    setCookie(c, "semiont-token", token, {
+      httpOnly: true,
+      secure: process.env.NODE_ENV === "production",
+      sameSite: "Lax",
+      path: "/",
+      maxAge: 7 * 24 * 60 * 60
+    });
     const response = {
       success: true,
       user: {
@@ -16098,6 +16106,13 @@ authRouter.post("/api/tokens/google", validateRequestBody("GoogleAuthRequest"),
     }
     const googleUser = await OAuthService.verifyGoogleToken(googleCredential(access_token));
     const { user, token, isNewUser } = await OAuthService.createOrUpdateUser(googleUser);
+    setCookie(c, "semiont-token", token, {
+      httpOnly: true,
+      secure: process.env.NODE_ENV === "production",
+      sameSite: "Lax",
+      path: "/",
+      maxAge: 7 * 24 * 60 * 60
+    });
     const response = {
       success: true,
       user: {
@@ -16194,6 +16209,7 @@ authRouter.post("/api/tokens/refresh", validateRequestBody("TokenRefreshRequest"
 });
 authRouter.get("/api/users/me", authMiddleware, async (c) => {
   const user = c.get("user");
+  const token = c.get("token");
   const response = {
     id: user.id,
     email: user.email,
@@ -16205,7 +16221,8 @@ authRouter.get("/api/users/me", authMiddleware, async (c) => {
     isActive: user.isActive,
     termsAcceptedAt: user.termsAcceptedAt?.toISOString() || null,
     lastLogin: user.lastLogin?.toISOString() || null,
-    created: user.createdAt.toISOString()
+    created: user.createdAt.toISOString(),
+    token
   };
   return c.json(response, 200);
 });
@@ -16247,6 +16264,9 @@ authRouter.post("/api/users/accept-terms", authMiddleware, async (c) => {
   return c.json(response, 200);
 });
 authRouter.post("/api/users/logout", authMiddleware, async (c) => {
+  deleteCookie(c, "semiont-token", {
+    path: "/"
+  });
   return c.json({
     success: true,
     message: "Logged out successfully"