@shipfox/client-auth 6.0.3 → 7.0.0

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@shipfox/client-auth",
   "license": "MIT",
-  "version": "6.0.3",
+  "version": "7.0.0",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/ShipfoxHQ/shipfox.git",
@@ -23,6 +23,10 @@
       "types": "./dist/continuation.d.ts",
       "default": "./dist/continuation.js"
     },
+    "./redirect-context": {
+      "types": "./dist/redirect-context.d.ts",
+      "default": "./dist/redirect-context.js"
+    },
     "./routes/*": {
       "types": "./dist/routes/*.d.ts",
       "default": "./dist/routes/*.js"

package/src/continuation.ts

@@ -3,4 +3,4 @@ export {
   EmailCodeVerification,
   type EmailCodeVerificationProps,
 } from './components/email-code-verification.js';
-export {parseRedirectContext, type RedirectContext} from './components/redirect-context.js';
+export {parseRedirectContext, type RedirectContext} from './redirect-context.js';

package/src/pages/invitation-context.ts

@@ -3,7 +3,7 @@ import {
   pendingInvitation,
   usePreviewInvitation,
 } from '@shipfox/client-invitations';
-import {parseRedirectContext} from '#/components/redirect-context.js';
+import {parseRedirectContext} from '#/redirect-context.js';
 
 export function extractInvitationToken(redirect: unknown): string | undefined {
   return parseRedirectContext(redirect).invitationToken;

package/src/{components/redirect-context.test.ts → redirect-context.test.ts}

@@ -1,6 +1,12 @@
-import {parseRedirectContext} from './redirect-context.js';
+import {parseRedirectContext, type RedirectContext} from '@shipfox/client-auth/redirect-context';
+
+describe('@shipfox/client-auth/redirect-context', () => {
+  test('imports the parser and its type through the Node-safe public subpath', () => {
+    const context: RedirectContext = parseRedirectContext('/workspaces/acme');
+
+    expect(context).toEqual({returnTo: '/workspaces/acme'});
+  });
 
-describe('parseRedirectContext', () => {
   test('returns an ordinary safe return path', () => {
     const context = parseRedirectContext('/workspaces/acme?tab=runs');
 
@@ -25,6 +31,10 @@ describe('parseRedirectContext', () => {
   test.each([
     ['/%2569nvitations/accept?token=double-encoded-token', 'double-encoded-token'],
     ['/%252569nvitations/accept?token=triple-encoded-token', 'triple-encoded-token'],
+    [
+      '/safe%255c..%255cinvitations/accept?token=encoded-backslash-token',
+      'encoded-backslash-token',
+    ],
   ])('separates an invitation token from a deeply encoded path: %s', (redirect, token) => {
     const context = parseRedirectContext(redirect);
 
@@ -41,6 +51,7 @@ describe('parseRedirectContext', () => {
     '/%252561uth/login',
     '/%E0%80%80',
     '/safe/%25252e%25252e/auth/login',
+    '/safe%255c..%255cauth/login',
   ])('rejects malformed or unsafe redirect %s', (redirect) => {
     const context = parseRedirectContext(redirect);
 

package/src/{components/redirect-context.ts → redirect-context.ts}

@@ -1,4 +1,4 @@
-import {isAuthPath, resolveRedirectPath} from './redirect-target.js';
+import {isAuthPath, resolveRedirectPath} from './components/redirect-target.js';
 
 const INVITATION_ACCEPT_PATH = '/invitations/accept';