@server/next 0.21.1 → 0.21.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@server/next",
-  "version": "0.21.1",
+  "version": "0.21.2",
   "description": "A fully-fledged web server with routing, file uploads, sessions, static files, schema validation, websockets, testing, etc.",
   "homepage": "https://server-js.com/",
   "repository": "https://github.com/franciscop/server-next.git",

package/src/auth/auth.js

@@ -48,8 +48,8 @@ export default async function auth(ctx) {
 
   const auth = await options.session.get(sessionId);
   // Mmh, which one to do...
-  if (!auth) throw ServerError.AUTH_NO_SESSION();
-  // if (!auth) return; // SESSION ALREADY INVALID; no auth
+  // if (!auth) throw ServerError.AUTH_NO_SESSION();
+  if (!auth) return; // SESSION ALREADY INVALID; no auth
 
   if (!auth.provider) throw ServerError.AUTH_NO_PROVIDER();
   if (!options.provider.includes(auth.provider)) {

package/src/auth/index.js

@@ -12,16 +12,16 @@ const load = async (ctx) => {
 
 const middle = async (ctx) => {
   if (ctx.options.auth) {
-    ctx.app.post("/auth/logout", logout);
-
     if (ctx.options.auth.provider.includes("github")) {
       if (!env.GITHUB_ID) throw new Error("GITHUB_ID not defined");
       if (!env.GITHUB_SECRET) throw new Error("GITHUB_SECRET not defined");
+      ctx.app.get("/auth/logout", logout);
       ctx.app.get("/auth/login/github", providers.github.login);
       ctx.app.get("/auth/callback/github", providers.github.callback);
     }
 
     if (ctx.options.auth.provider.includes("email")) {
+      ctx.app.post("/auth/logout", logout);
       ctx.app.post("/auth/register/email", providers.email.register);
       ctx.app.post("/auth/login/email", providers.email.login);
       ctx.app.put("/auth/password/email", providers.email.password);

package/src/auth/index.test.js

@@ -61,7 +61,8 @@ describe("token", () => {
   it("cannot get the session", async () => {
     const authorization = "Bearer REqA2l022l8Q0tuI";
     const req = await api.get("/", { headers: { authorization } });
-    expect(req).not.toSucceed("Invalid session");
+    expect(req.status).toBe(404);
+    // expect(req).not.toSucceed("Invalid session");
   });
 
   it("cannot get the user", async () => {
@@ -112,7 +113,8 @@ describe("cookie", () => {
   it("can get the proper session", async () => {
     const cookie = "authentication=REqA2l022l8Q0tuI";
     const req = await api.get("/", { headers: { cookie } });
-    expect(req).not.toSucceed("Invalid session");
+    expect(req.status).toBe(404);
+    // expect(req).not.toSucceed("Invalid session");
   });
 
   it("can get the proper session", async () => {

package/src/auth/logout.js

@@ -7,7 +7,7 @@ export default async function logout(ctx) {
   if (type === "token") {
     return { token: null };
   } else if (type === "cookie") {
-    return cookies({ authorization: null }).send({});
+    return cookies({ authorization: null }).redirect("/");
   } else if (type === "jwt") {
     throw new Error("JWT auth not supported yet");
   } else if (type === "key") {

package/src/index.js

@@ -11,7 +11,7 @@ import {
   parseHeaders,
 } from "./helpers/index.js";
 
-import middle from "./middle/index.js";
+import { assets, auth } from "./middle/index.js";
 
 // Export the reply helpers
 export * from "./reply.js";
@@ -29,7 +29,7 @@ export default function server(options = {}) {
   }
 
   // Keep a copy of the options in the instance
-  this.opts = options;
+  this.opts = config(options);
   this.platform = getMachine();
 
   // TODO: find a way to remove this hack
@@ -74,7 +74,10 @@ export default function server(options = {}) {
     this.node();
   }
 
-  this.use(...middle);
+  this.use(assets);
+  if (this.opts.auth) {
+    this.use(auth({ options: this.opts, app: this }));
+  }
 }
 
 server.prototype.self = function () {
@@ -93,12 +96,11 @@ server.prototype.self = function () {
 // #region Runtimes
 // Node.js
 server.prototype.node = async function () {
-  const options = config(this.opts);
   const http = await import("http");
   http
     .createServer(async (request, response) => {
       try {
-        const ctx = await createNodeContext(request, options, this);
+        const ctx = await createNodeContext(request, this.opts, this);
         const out = await handleRequest(this.handlers, ctx);
 
         response.writeHead(out.status || 200, parseHeaders(out.headers));
@@ -125,8 +127,7 @@ server.prototype.callback = async function (request, context) {
     if (typeof Netlify === "undefined") {
       throw new Error("Netlify doesn't exist");
     }
-    const options = config(this.opts);
-    const ctx = await createWinterContext(request, options, this);
+    const ctx = await createWinterContext(request, this.opts, this);
     return await handleRequest(this.handlers, ctx);
   } catch (error) {
     return new Response(error.message, { status: error.status || 500 });
@@ -139,8 +140,7 @@ server.prototype.fetch = async function (request, env) {
   Object.assign(globalThis.env, env); // Extend env with the passed vars
 
   try {
-    const options = config(this.opts);
-    const ctx = await createWinterContext(request, options, this);
+    const ctx = await createWinterContext(request, this.opts, this);
     return await handleRequest(this.handlers, ctx);
   } catch (error) {
     return new Response(error.message, { status: error.status || 500 });

package/src/middle/index.js

@@ -1,4 +1,5 @@
-import auth from "../auth/index.js";
+import authMod from "../auth/index.js";
 import assets from "./assets.js";
 
-export default [assets, auth.middle];
+const auth = authMod.middle;
+export { assets, auth };