@sixb/pg 0.1.19 → 0.1.20
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/auth-storage/auth-storage.d.ts.map +1 -1
- package/dist/auth-storage/magic-links.d.ts.map +1 -1
- package/dist/auth-storage/oidc-attempts.d.ts.map +1 -1
- package/dist/auth-storage/rows.d.ts +0 -3
- package/dist/auth-storage/rows.d.ts.map +1 -1
- package/dist/auth-storage/sessions.d.ts +0 -10
- package/dist/auth-storage/sessions.d.ts.map +1 -1
- package/dist/auth-storage/shared.d.ts +1 -2
- package/dist/auth-storage/shared.d.ts.map +1 -1
- package/dist/index.js +30 -78
- package/dist/index.js.map +9 -9
- package/dist/migrations.d.ts.map +1 -1
- package/package.json +3 -3
- package/src/auth-storage/auth-storage.ts +1 -22
- package/src/auth-storage/magic-links.ts +0 -4
- package/src/auth-storage/oidc-attempts.ts +0 -4
- package/src/auth-storage/rows.ts +0 -6
- package/src/auth-storage/sessions.ts +1 -33
- package/src/auth-storage/shared.ts +3 -35
- package/src/migrations/062-drop-auth-audience.sql +19 -0
- package/src/migrations.ts +2 -0
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"auth-storage.d.ts","sourceRoot":"","sources":["../../src/auth-storage/auth-storage.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,WAAW,EACX,gCAAgC,EAChC,iCAAiC,EACjC,4BAA4B,EAC5B,uBAAuB,EACvB,oBAAoB,EAMpB,iCAAiC,EAEjC,UAAU,EACX,MAAM,oBAAoB,CAAA;AAG3B,OAAO,EAGL,KAAK,aAAa,EAEnB,MAAM,iBAAiB,CAAA;AACxB,OAAO,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAA;AACxD,OAAO,EAEL,8BAA8B,EAC/B,MAAM,yBAAyB,CAAA;AAChC,OAAO,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAA;AAChE,OAAO,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAA;AACtD,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAA;AACrD,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAA;AACpD,OAAO,EAAE,mCAAmC,EAAE,MAAM,iBAAiB,CAAA;AAQrE,OAAO,EAAE,wCAAwC,EAAE,MAAM,qCAAqC,CAAA;AAC9F,OAAO,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAA;AAC9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAA;AAqB/C,OAAO,EAAE,eAAe,EAAE,MAAM,SAAS,CAAA;AAMzC,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,GAAG,EAAE,aAAa,CAAA;CAC5B;AAED,qBAAa,aAAc,YAAW,WAAW;IAC/C,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IAEnC,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAA;IAC/B,QAAQ,CAAC,UAAU,EAAE,uBAAuB,CAAA;IAC5C,QAAQ,CAAC,eAAe,EAAE,yBAAyB,CAAA;IACnD,QAAQ,CAAC,8BAA8B,EAAE,wCAAwC,CAAA;IACjF,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAA;IACrC,QAAQ,CAAC,YAAY,EAAE,sBAAsB,CAAA;IAC7C,QAAQ,CAAC,WAAW,EAAE,qBAAqB,CAAA;IAC3C,QAAQ,CAAC,gBAAgB,EAAE,0BAA0B,CAAA;IACrD,QAAQ,CAAC,UAAU,EAAE,oBAAoB,CAAA;IACzC,QAAQ,CAAC,yBAAyB,EAAE,mCAAmC,CAAA;IACvE,QAAQ,CAAC,oBAAoB,EAAE,8BAA8B,CAAA;gBAEjD,OAAO,EAAE,oBAAoB;IAenC,2BAA2B,CAC/B,KAAK,EAAE,gCAAgC,GACtC,OAAO,CAAC,iCAAiC,CAAC;IAkCvC,uBAAuB,CAC3B,KAAK,EAAE,4BAA4B,GAClC,OAAO,CAAC,oBAAoB,CAAC;
|
|
1
|
+
{"version":3,"file":"auth-storage.d.ts","sourceRoot":"","sources":["../../src/auth-storage/auth-storage.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,WAAW,EACX,gCAAgC,EAChC,iCAAiC,EACjC,4BAA4B,EAC5B,uBAAuB,EACvB,oBAAoB,EAMpB,iCAAiC,EAEjC,UAAU,EACX,MAAM,oBAAoB,CAAA;AAG3B,OAAO,EAGL,KAAK,aAAa,EAEnB,MAAM,iBAAiB,CAAA;AACxB,OAAO,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAA;AACxD,OAAO,EAEL,8BAA8B,EAC/B,MAAM,yBAAyB,CAAA;AAChC,OAAO,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAA;AAChE,OAAO,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAA;AACtD,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAA;AACrD,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAA;AACpD,OAAO,EAAE,mCAAmC,EAAE,MAAM,iBAAiB,CAAA;AAQrE,OAAO,EAAE,wCAAwC,EAAE,MAAM,qCAAqC,CAAA;AAC9F,OAAO,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAA;AAC9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAA;AAqB/C,OAAO,EAAE,eAAe,EAAE,MAAM,SAAS,CAAA;AAMzC,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,GAAG,EAAE,aAAa,CAAA;CAC5B;AAED,qBAAa,aAAc,YAAW,WAAW;IAC/C,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IAEnC,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAA;IAC/B,QAAQ,CAAC,UAAU,EAAE,uBAAuB,CAAA;IAC5C,QAAQ,CAAC,eAAe,EAAE,yBAAyB,CAAA;IACnD,QAAQ,CAAC,8BAA8B,EAAE,wCAAwC,CAAA;IACjF,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAA;IACrC,QAAQ,CAAC,YAAY,EAAE,sBAAsB,CAAA;IAC7C,QAAQ,CAAC,WAAW,EAAE,qBAAqB,CAAA;IAC3C,QAAQ,CAAC,gBAAgB,EAAE,0BAA0B,CAAA;IACrD,QAAQ,CAAC,UAAU,EAAE,oBAAoB,CAAA;IACzC,QAAQ,CAAC,yBAAyB,EAAE,mCAAmC,CAAA;IACvE,QAAQ,CAAC,oBAAoB,EAAE,8BAA8B,CAAA;gBAEjD,OAAO,EAAE,oBAAoB;IAenC,2BAA2B,CAC/B,KAAK,EAAE,gCAAgC,GACtC,OAAO,CAAC,iCAAiC,CAAC;IAkCvC,uBAAuB,CAC3B,KAAK,EAAE,4BAA4B,GAClC,OAAO,CAAC,oBAAoB,CAAC;IAoK1B,kBAAkB,CAAC,KAAK,EAAE,uBAAuB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAuLjF,4BAA4B,CAChC,KAAK,EAAE,iCAAiC,GACvC,OAAO,CAAC,UAAU,CAAC;IAsCtB,OAAO,CAAC,qBAAqB;IAiB7B,OAAO,CAAC,uBAAuB;YAiBjB,UAAU;YA6CV,8BAA8B;YA+C9B,WAAW;YA6BX,mBAAmB;YA0BnB,mBAAmB;YAyBnB,kBAAkB;YAclB,cAAc;CAwC7B"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"magic-links.d.ts","sourceRoot":"","sources":["../../src/auth-storage/magic-links.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"magic-links.d.ts","sourceRoot":"","sources":["../../src/auth-storage/magic-links.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,kBAAkB,EAClB,wBAAwB,EACxB,eAAe,EAChB,MAAM,oBAAoB,CAAA;AAE3B,OAAO,EAGL,KAAK,aAAa,EAEnB,MAAM,iBAAiB,CAAA;AAaxB,qBAAa,oBAAqB,YAAW,kBAAkB;IACjD,OAAO,CAAC,QAAQ,CAAC,GAAG;gBAAH,GAAG,EAAE,aAAa;IAEzC,MAAM,CAAC,KAAK,EAAE,wBAAwB,GAAG,OAAO,CAAC,eAAe,CAAC;IA0DjE,OAAO,CAAC,MAAM,EAAE;QACpB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;KACpB,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;IAI7B,gBAAgB,CAAC,MAAM,EAAE;QAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;QACtB,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAA;KACnB,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;IAgB7B,OAAO,CAAC,MAAM,EAAE;QACpB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;QACnB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAA;KAC1B,GAAG,OAAO,CAAC,eAAe,CAAC;IAItB,oBAAoB,CAAC,MAAM,EAAE;QACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;QACtB,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAA;KACzB,GAAG,OAAO,CAAC,SAAS,eAAe,EAAE,CAAC;CAUxC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"oidc-attempts.d.ts","sourceRoot":"","sources":["../../src/auth-storage/oidc-attempts.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"oidc-attempts.d.ts","sourceRoot":"","sources":["../../src/auth-storage/oidc-attempts.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,iCAAiC,EACjC,mCAAmC,EACnC,8BAA8B,EAC/B,MAAM,oBAAoB,CAAA;AAE3B,OAAO,EAAE,KAAK,aAAa,EAAoB,MAAM,iBAAiB,CAAA;AAWtE,qBAAa,mCAAoC,YAAW,iCAAiC;IAC/E,OAAO,CAAC,QAAQ,CAAC,GAAG;gBAAH,GAAG,EAAE,aAAa;IAEzC,MAAM,CACV,KAAK,EAAE,mCAAmC,GACzC,OAAO,CAAC,8BAA8B,CAAC;IAmDpC,OAAO,CAAC,MAAM,EAAE;QACpB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;KACpB,GAAG,OAAO,CAAC,8BAA8B,GAAG,IAAI,CAAC;IAI5C,OAAO,CAAC,MAAM,EAAE;QACpB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;QACnB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAA;KAC1B,GAAG,OAAO,CAAC,8BAA8B,CAAC;CAG5C"}
|
|
@@ -44,7 +44,6 @@ export interface PgAuthSessionRow {
|
|
|
44
44
|
readonly id: string;
|
|
45
45
|
readonly user_id: string;
|
|
46
46
|
readonly strategy_id: string;
|
|
47
|
-
readonly audience: SessionRecord["audience"];
|
|
48
47
|
readonly token_hash: string;
|
|
49
48
|
readonly created_at: PgDate;
|
|
50
49
|
readonly expires_at: PgDate;
|
|
@@ -105,7 +104,6 @@ export interface PgAuthMagicLinkRow {
|
|
|
105
104
|
readonly project_id: string;
|
|
106
105
|
readonly id: string;
|
|
107
106
|
readonly strategy_id: string;
|
|
108
|
-
readonly audience: MagicLinkRecord["audience"];
|
|
109
107
|
readonly email: string;
|
|
110
108
|
readonly token_hash: string;
|
|
111
109
|
readonly return_to: string | null;
|
|
@@ -118,7 +116,6 @@ export interface PgAuthOidcAttemptRow {
|
|
|
118
116
|
readonly project_id: string;
|
|
119
117
|
readonly id: string;
|
|
120
118
|
readonly strategy_id: string;
|
|
121
|
-
readonly audience: OidcAuthorizationAttemptRecord["audience"];
|
|
122
119
|
readonly state_hash: string;
|
|
123
120
|
readonly nonce_hash: string;
|
|
124
121
|
readonly code_verifier: string;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"rows.d.ts","sourceRoot":"","sources":["../../src/auth-storage/rows.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,iBAAiB,EACjB,yBAAyB,EACzB,qBAAqB,EACrB,qBAAqB,EACrB,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,EACf,8BAA8B,EAC9B,mCAAmC,EACnC,oBAAoB,EACpB,oBAAoB,EACpB,aAAa,EACb,kBAAkB,EAClB,UAAU,EACV,UAAU,EACX,MAAM,oBAAoB,CAAA;AAE3B,KAAK,MAAM,GAAG,IAAI,GAAG,MAAM,CAAA;AAE3B,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IACpC,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IAClC,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAA;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAC5B;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,MAAM,GAAG,IAAI,CAAA;IAClE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAC5B;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IACnC,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAA;IACrC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1C,QAAQ,CAAC,6BAA6B,EAAE,MAAM,GAAG,IAAI,CAAA;IACrD,QAAQ,CAAC,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5C,QAAQ,CAAC,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAC5B;AAED,MAAM,WAAW,sCAAsC;IACrD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAA;IACnC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,MAAM,EAAE,mCAAmC,CAAC,QAAQ,CAAC,CAAA;IAC9D,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAC5B;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,
|
|
1
|
+
{"version":3,"file":"rows.d.ts","sourceRoot":"","sources":["../../src/auth-storage/rows.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,iBAAiB,EACjB,yBAAyB,EACzB,qBAAqB,EACrB,qBAAqB,EACrB,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,EACf,8BAA8B,EAC9B,mCAAmC,EACnC,oBAAoB,EACpB,oBAAoB,EACpB,aAAa,EACb,kBAAkB,EAClB,UAAU,EACV,UAAU,EACX,MAAM,oBAAoB,CAAA;AAE3B,KAAK,MAAM,GAAG,IAAI,GAAG,MAAM,CAAA;AAE3B,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IACpC,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IAClC,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAA;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAC5B;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,MAAM,GAAG,IAAI,CAAA;IAClE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAC5B;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IACnC,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAA;IACrC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1C,QAAQ,CAAC,6BAA6B,EAAE,MAAM,GAAG,IAAI,CAAA;IACrD,QAAQ,CAAC,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5C,QAAQ,CAAC,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAC5B;AAED,MAAM,WAAW,sCAAsC;IACrD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAA;IACnC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,MAAM,EAAE,mCAAmC,CAAC,QAAQ,CAAC,CAAA;IAC9D,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAC5B;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3C,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IAClC,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IACpC,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IAClC,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IAClC,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IACnC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAA;IACzC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1C,QAAQ,CAAC,2BAA2B,EAAE,MAAM,GAAG,IAAI,CAAA;IACnD,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;CACrC;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC,MAAM,CAAC,CAAA;IACxC,QAAQ,CAAC,YAAY,EAAE,iBAAiB,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAA;IAC3D,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,GAAG,IAAI,CAAA;IACrD,QAAQ,CAAC,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1C,QAAQ,CAAC,6BAA6B,EAAE,MAAM,GAAG,IAAI,CAAA;IACrD,QAAQ,CAAC,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5C,QAAQ,CAAC,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IAClC,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IACpC,QAAQ,CAAC,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5C,QAAQ,CAAC,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAA;CAC7C;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAA;IACjC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1C,QAAQ,CAAC,6BAA6B,EAAE,MAAM,GAAG,IAAI,CAAA;IACrD,QAAQ,CAAC,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5C,QAAQ,CAAC,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IACnC,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;CACnC;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,MAAM,EAAE,qBAAqB,CAAA;IACtC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAC5B;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IACnC,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;CACnC;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;CACpC;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAA;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,MAAM,EAAE,yBAAyB,CAAC,QAAQ,CAAC,CAAA;IACpD,QAAQ,CAAC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAA;IACxC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IACnC,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACjC,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;CACpC;AAED,wBAAgB,eAAe,CAAC,GAAG,EAAE,aAAa,GAAG,UAAU,CAW9D;AAED,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,qBAAqB,GAAG,kBAAkB,CAUlF;AAED,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,uBAAuB,GAAG,oBAAoB,CAY5F;AAED,wBAAgB,wCAAwC,CACtD,GAAG,EAAE,sCAAsC,GAC1C,mCAAmC,CAQrC;AAED,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,gBAAgB,GAAG,aAAa,CAyBvE;AAED,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,oBAAoB,GAAG,iBAAiB,CAkBnF;AAED,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,mBAAmB,EACxB,QAAQ,EAAE,SAAS,MAAM,EAAE,GAC1B,gBAAgB,CAelB;AAED,wBAAgB,0BAA0B,CAAC,GAAG,EAAE,wBAAwB,GAAG,qBAAqB,CAQ/F;AAED,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,kBAAkB,GAAG,eAAe,CAa7E;AAED,wBAAgB,mCAAmC,CACjD,GAAG,EAAE,oBAAoB,GACxB,8BAA8B,CAahC;AAED,wBAAgB,8BAA8B,CAC5C,GAAG,EAAE,4BAA4B,GAChC,yBAAyB,CAgB3B;AAED,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,SAAS,GACnD,MAAM,GAAG,IAAI,CAEf;AAED,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CAEhG"}
|
|
@@ -1,4 +1,3 @@
|
|
|
1
|
-
import type { AuthSessionAudience } from "@sixb/core";
|
|
2
1
|
import type { AuthSessionStore, CreateAuthSessionInput, RotateSessionRefreshTokenResult, SessionRecord } from "@sixb/core/storage";
|
|
3
2
|
import { type PgStoreClient } from "../transactions";
|
|
4
3
|
export declare class PgAuthSessionStore implements AuthSessionStore {
|
|
@@ -9,12 +8,6 @@ export declare class PgAuthSessionStore implements AuthSessionStore {
|
|
|
9
8
|
readonly projectId: string;
|
|
10
9
|
readonly id: string;
|
|
11
10
|
}): Promise<SessionRecord | null>;
|
|
12
|
-
getActiveByUserId(params: {
|
|
13
|
-
readonly projectId: string;
|
|
14
|
-
readonly userId: string;
|
|
15
|
-
readonly audience: AuthSessionAudience;
|
|
16
|
-
readonly now: Date;
|
|
17
|
-
}): Promise<SessionRecord | null>;
|
|
18
11
|
listActiveByUserId(params: {
|
|
19
12
|
readonly projectId: string;
|
|
20
13
|
readonly userId: string;
|
|
@@ -23,7 +16,6 @@ export declare class PgAuthSessionStore implements AuthSessionStore {
|
|
|
23
16
|
findValidByTokenHash(params: {
|
|
24
17
|
readonly projectId: string;
|
|
25
18
|
readonly id: string;
|
|
26
|
-
readonly audience: AuthSessionAudience;
|
|
27
19
|
readonly tokenHash: string;
|
|
28
20
|
readonly now: Date;
|
|
29
21
|
}): Promise<SessionRecord | null>;
|
|
@@ -37,7 +29,6 @@ export declare class PgAuthSessionStore implements AuthSessionStore {
|
|
|
37
29
|
renewIfValid(params: {
|
|
38
30
|
readonly projectId: string;
|
|
39
31
|
readonly id: string;
|
|
40
|
-
readonly audience: AuthSessionAudience;
|
|
41
32
|
readonly tokenHash: string;
|
|
42
33
|
readonly now: Date;
|
|
43
34
|
readonly expiresAt: Date;
|
|
@@ -50,7 +41,6 @@ export declare class PgAuthSessionStore implements AuthSessionStore {
|
|
|
50
41
|
revokeActiveForUser(params: {
|
|
51
42
|
readonly projectId: string;
|
|
52
43
|
readonly userId: string;
|
|
53
|
-
readonly audience?: AuthSessionAudience;
|
|
54
44
|
readonly revokedAt: Date;
|
|
55
45
|
}): Promise<readonly SessionRecord[]>;
|
|
56
46
|
touch(params: {
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"sessions.d.ts","sourceRoot":"","sources":["../../src/auth-storage/sessions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,
|
|
1
|
+
{"version":3,"file":"sessions.d.ts","sourceRoot":"","sources":["../../src/auth-storage/sessions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,gBAAgB,EAChB,sBAAsB,EACtB,+BAA+B,EAC/B,aAAa,EACd,MAAM,oBAAoB,CAAA;AAE3B,OAAO,EAGL,KAAK,aAAa,EAEnB,MAAM,iBAAiB,CAAA;AAWxB,qBAAa,kBAAmB,YAAW,gBAAgB;IAC7C,OAAO,CAAC,QAAQ,CAAC,GAAG;gBAAH,GAAG,EAAE,aAAa;IAEzC,MAAM,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,aAAa,CAAC;IAM7D,OAAO,CAAC,MAAM,EAAE;QACpB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;KACpB,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;IAI3B,kBAAkB,CAAC,MAAM,EAAE;QAC/B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;QACvB,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAA;KACnB,GAAG,OAAO,CAAC,SAAS,aAAa,EAAE,CAAC;IAe/B,oBAAoB,CAAC,MAAM,EAAE;QACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;QACnB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAA;KACnB,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;IAe3B,0BAA0B,CAAC,MAAM,EAAE;QACvC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;QACnB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAA;KACnB,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;IAe3B,kBAAkB,CACtB,MAAM,EAAE,UAAU,CAAC,gBAAgB,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC,GAC5D,OAAO,CAAC,+BAA+B,CAAC;IA2CrC,YAAY,CAAC,MAAM,EAAE;QACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;QACnB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAA;QAClB,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAA;KACzB,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;IAwB3B,MAAM,CAAC,MAAM,EAAE;QACnB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;QACnB,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAA;KACzB,GAAG,OAAO,CAAC,aAAa,CAAC;IAuBpB,mBAAmB,CAAC,MAAM,EAAE;QAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;QACvB,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAA;KACzB,GAAG,OAAO,CAAC,SAAS,aAAa,EAAE,CAAC;IAO/B,KAAK,CAAC,MAAM,EAAE;QAClB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;QACnB,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAA;KAC1B,GAAG,OAAO,CAAC,aAAa,CAAC;CAe3B"}
|
|
@@ -1,4 +1,4 @@
|
|
|
1
|
-
import type {
|
|
1
|
+
import type { Principal } from "@sixb/core";
|
|
2
2
|
import type { CompleteAuthSessionInput, CreateAuthSessionInput, GroupMembershipRecord, InvitationRecord, MagicLinkRecord, OidcAuthorizationAttemptRecord, SessionRecord, UpsertAuthGroupMembershipInput, UserRecord } from "@sixb/core/storage";
|
|
3
3
|
import type { SQLClient } from "../pg-client";
|
|
4
4
|
import type { PgAuthMagicLinkRow, PgAuthOidcAttemptRow, PgAuthSessionRow, PgAuthUserIdentityRow, PgAuthUserRow } from "./rows";
|
|
@@ -121,7 +121,6 @@ export declare function createSession(sql: SQLClient, input: CreateAuthSessionIn
|
|
|
121
121
|
export declare function revokeActiveSessionsForUser(sql: SQLClient, params: {
|
|
122
122
|
readonly projectId: string;
|
|
123
123
|
readonly userId: string;
|
|
124
|
-
readonly audience?: AuthSessionAudience;
|
|
125
124
|
readonly revokedAt: Date;
|
|
126
125
|
}): Promise<readonly SessionRecord[]>;
|
|
127
126
|
export declare function upsertGroupMembership(sql: SQLClient, input: UpsertAuthGroupMembershipInput): Promise<GroupMembershipRecord>;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"shared.d.ts","sourceRoot":"","sources":["../../src/auth-storage/shared.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,
|
|
1
|
+
{"version":3,"file":"shared.d.ts","sourceRoot":"","sources":["../../src/auth-storage/shared.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA;AAC3C,OAAO,KAAK,EACV,wBAAwB,EACxB,sBAAsB,EACtB,qBAAqB,EACrB,gBAAgB,EAChB,eAAe,EACf,8BAA8B,EAC9B,aAAa,EACb,8BAA8B,EAC9B,UAAU,EACX,MAAM,oBAAoB,CAAA;AAE3B,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAA;AAE7C,OAAO,KAAK,EAGV,kBAAkB,EAClB,oBAAoB,EACpB,gBAAgB,EAChB,qBAAqB,EACrB,aAAa,EACd,MAAM,QAAQ,CAAA;AACf,OAAO,EAKL,kBAAkB,EAEnB,MAAM,QAAQ,CAAA;AAEf,MAAM,MAAM,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,IAAI,GAAG,IAAI,CAAA;AAEnD,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAMnE;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEpD;AAED,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,GAAG,SAAS,MAAM,EAAE,CAE5F;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,IAAI,GAAG,SAAS,GAAG,IAAI,CAEvD;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,SAAS,OAAO,EAAE,GAAG,SAAS,GAAG,OAAO,CAE9E;AAED,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,OAAO,EAAE,EACjB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE;IAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAC3D,MAAM,CAcR;AAED,wBAAgB,YAAY,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,CAEjF;AAED,wBAAsB,cAAc,CAClC,GAAG,EAAE,SAAS,EACd,MAAM,EAAE;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,EAC3D,OAAO,GAAE;IAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAA;CAAO,GAC7C,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAa/B;AAED,wBAAsB,WAAW,CAC/B,GAAG,EAAE,SAAS,EACd,MAAM,EAAE;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAC1D,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAG5B;AAED,wBAAsB,iBAAiB,CACrC,GAAG,EAAE,SAAS,EACd,MAAM,EAAE;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,EAC9D,OAAO,GAAE;IAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAA;CAAO,GAC7C,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAa/B;AAED,wBAAsB,eAAe,CACnC,GAAG,EAAE,SAAS,EACd,MAAM,EAAE;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAC1D,OAAO,CAAC,UAAU,CAAC,CASrB;AAED,wBAAsB,uBAAuB,CAC3C,GAAG,EAAE,SAAS,EACd,MAAM,EAAE;IACN,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CACzB,EACD,OAAO,GAAE;IAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAA;CAAO,GAC7C,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC,CAcvC;AAED,wBAAsB,iBAAiB,CACrC,GAAG,EAAE,SAAS,EACd,MAAM,EAAE;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,EAC3D,OAAO,GAAE;IAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAA;CAAO,GAC7C,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAalC;AAED,wBAAsB,cAAc,CAClC,GAAG,EAAE,SAAS,EACd,MAAM,EAAE;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAC1D,OAAO,CAAC,UAAU,CAAC,OAAO,kBAAkB,CAAC,GAAG,IAAI,CAAC,CAGvD;AAED,wBAAsB,kBAAkB,CACtC,GAAG,EAAE,SAAS,EACd,MAAM,EAAE;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAC1D,OAAO,CAAC,UAAU,CAAC,OAAO,kBAAkB,CAAC,CAAC,CAShD;AAED,wBAAsB,qBAAqB,CACzC,GAAG,EAAE,SAAS,EACd,MAAM,EAAE;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GACpE,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC,CAU5B;AAED,wBAAsB,iBAAiB,CACrC,GAAG,EAAE,SAAS,EACd,MAAM,EAAE;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,EAC3D,OAAO,GAAE;IAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAA;CAAO,GAC7C,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAalC;AAED,wBAAsB,qBAAqB,CACzC,GAAG,EAAE,SAAS,EACd,MAAM,EAAE;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,EAC3D,OAAO,GAAE;IAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAA;CAAO,GAC7C,OAAO,CAAC,gBAAgB,CAAC,CAS3B;AAED,wBAAsB,0BAA0B,CAC9C,GAAG,EAAE,SAAS,EACd,MAAM,EAAE;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAA;CAAE,EAClF,OAAO,GAAE;IAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAA;CAAO,GAC7C,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAiBlC;AAED,wBAAsB,uBAAuB,CAC3C,GAAG,EAAE,SAAS,EACd,MAAM,EAAE;IACN,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAA;CACrC,GACA,OAAO,CAAC,IAAI,CAAC,CAsBf;AAED,wBAAsB,mBAAmB,CACvC,GAAG,EAAE,SAAS,EACd,MAAM,EAAE;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,EAC3D,OAAO,GAAE;IAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAA;CAAO,GAC7C,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAapC;AAED,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,SAAS,EACd,MAAM,EAAE;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAC1D,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAGjC;AAED,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,SAAS,EACd,MAAM,EAAE;IACN,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAA;CAC1B,GACA,OAAO,CAAC,eAAe,CAAC,CA0B1B;AAED,wBAAsB,qBAAqB,CACzC,GAAG,EAAE,SAAS,EACd,MAAM,EAAE;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,EAC3D,OAAO,GAAE;IAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAA;CAAO,GAC7C,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAatC;AAED,wBAAsB,kBAAkB,CACtC,GAAG,EAAE,SAAS,EACd,MAAM,EAAE;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAC1D,OAAO,CAAC,8BAA8B,GAAG,IAAI,CAAC,CAGhD;AAED,wBAAsB,kBAAkB,CACtC,GAAG,EAAE,SAAS,EACd,MAAM,EAAE;IACN,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAA;CAC1B,GACA,OAAO,CAAC,8BAA8B,CAAC,CA0BzC;AAED,wBAAsB,4BAA4B,CAChD,GAAG,EAAE,SAAS,EACd,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,wBAAwB,GAChC,OAAO,CAAC,IAAI,CAAC,CAIf;AAED,wBAAsB,wBAAwB,CAC5C,GAAG,EAAE,SAAS,EACd,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,IAAI,CAAC,CAOf;AAED,wBAAsB,aAAa,CACjC,GAAG,EAAE,SAAS,EACd,KAAK,EAAE,sBAAsB,GAC5B,OAAO,CAAC,aAAa,CAAC,CAoDxB;AAED,wBAAsB,2BAA2B,CAC/C,GAAG,EAAE,SAAS,EACd,MAAM,EAAE;IACN,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAA;CACzB,GACA,OAAO,CAAC,SAAS,aAAa,EAAE,CAAC,CA6BnC;AAED,wBAAsB,qBAAqB,CACzC,GAAG,EAAE,SAAS,EACd,KAAK,EAAE,8BAA8B,GACpC,OAAO,CAAC,qBAAqB,CAAC,CAgChC;AAED,wBAAsB,qBAAqB,CACzC,GAAG,EAAE,SAAS,EACd,MAAM,EAAE;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACxF,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC,CAcvC;AAED,wBAAsB,kBAAkB,CACtC,GAAG,EAAE,SAAS,EACd,MAAM,EAAE;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACxF,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC,CAUvC;AAED,wBAAsB,sBAAsB,CAC1C,GAAG,EAAE,SAAS,EACd,MAAM,EAAE;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC9D,OAAO,CAAC,SAAS,qBAAqB,EAAE,CAAC,CAU3C;AAED,wBAAsB,8BAA8B,CAClD,GAAG,EAAE,SAAS,EACd,MAAM,EAAE;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAA;CAAE,GACvF,OAAO,CAAC,SAAS,eAAe,EAAE,CAAC,CA8BrC;AAED,wBAAgB,wBAAwB,CAAC,SAAS,EAAE,SAAS,GAAG,SAAS,GAAG;IAC1E,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAA;IACvC,QAAQ,CAAC,yBAAyB,EAAE,MAAM,GAAG,IAAI,CAAA;IACjD,QAAQ,CAAC,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAA;CAC1C,CAMA;AAED,wBAAgB,qBAAqB,CACnC,SAAS,EAAE,MAAM,EACjB,EAAE,EAAE,MAAM,EACV,SAAS,EAAE,MAAM,EACjB,EAAE,EAAE,IAAI,EACR,GAAG,EAAE,kBAAkB,GACtB,IAAI,CAcN;AAED,wBAAgB,uBAAuB,CACrC,SAAS,EAAE,MAAM,EACjB,EAAE,EAAE,MAAM,EACV,SAAS,EAAE,MAAM,EACjB,EAAE,EAAE,IAAI,EACR,GAAG,EAAE,oBAAoB,GACxB,IAAI,CAcN;AAED,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,OAAO,EACd,IAAI,EACA,wBAAwB,GACxB,gCAAgC,GAChC,oBAAoB,GACpB,sBAAsB,GACtB,sBAAsB,GACtB,wBAAwB,GACxB,2BAA2B,GAC3B,mBAAmB,GACnB,gBAAgB,EACpB,OAAO,EAAE,MAAM,GACd,KAAK,CAMP"}
|
package/dist/index.js
CHANGED
|
@@ -1244,7 +1244,6 @@ function rowToSessionRecord(row) {
|
|
|
1244
1244
|
projectId: row.project_id,
|
|
1245
1245
|
userId: row.user_id,
|
|
1246
1246
|
strategyId: row.strategy_id,
|
|
1247
|
-
audience: row.audience,
|
|
1248
1247
|
tokenHash: row.token_hash,
|
|
1249
1248
|
createdAt: toDate(row.created_at),
|
|
1250
1249
|
expiresAt: toDate(row.expires_at),
|
|
@@ -1311,7 +1310,6 @@ function rowToMagicLinkRecord(row) {
|
|
|
1311
1310
|
id: row.id,
|
|
1312
1311
|
projectId: row.project_id,
|
|
1313
1312
|
strategyId: row.strategy_id,
|
|
1314
|
-
audience: row.audience,
|
|
1315
1313
|
email: row.email,
|
|
1316
1314
|
tokenHash: row.token_hash,
|
|
1317
1315
|
returnTo: row.return_to ?? undefined,
|
|
@@ -1326,7 +1324,6 @@ function rowToOidcAuthorizationAttemptRecord(row) {
|
|
|
1326
1324
|
id: row.id,
|
|
1327
1325
|
projectId: row.project_id,
|
|
1328
1326
|
strategyId: row.strategy_id,
|
|
1329
|
-
audience: row.audience,
|
|
1330
1327
|
stateHash: row.state_hash,
|
|
1331
1328
|
nonceHash: row.nonce_hash,
|
|
1332
1329
|
codeVerifier: row.code_verifier,
|
|
@@ -1622,7 +1619,6 @@ async function consumeOidcAttempt(sql, params) {
|
|
|
1622
1619
|
}
|
|
1623
1620
|
async function validateCompleteSessionInput(sql, projectId, session) {
|
|
1624
1621
|
const sessionId = assertNonEmpty(session.id, "Session id");
|
|
1625
|
-
assertNonEmpty(session.audience, "Session audience");
|
|
1626
1622
|
assertNonEmpty(session.tokenHash, "Session token hash");
|
|
1627
1623
|
await assertSessionIdAvailable(sql, projectId, sessionId);
|
|
1628
1624
|
}
|
|
@@ -1636,7 +1632,6 @@ async function createSession(sql, input) {
|
|
|
1636
1632
|
const projectId = assertNonEmpty(input.projectId, "Project id");
|
|
1637
1633
|
const userId = assertNonEmpty(input.userId, "User id");
|
|
1638
1634
|
const strategyId = assertNonEmpty(input.strategyId, "Strategy id");
|
|
1639
|
-
const audience = assertNonEmpty(input.audience, "Session audience");
|
|
1640
1635
|
const tokenHash = assertNonEmpty(input.tokenHash, "Session token hash");
|
|
1641
1636
|
await requireUserById(sql, { projectId, id: userId });
|
|
1642
1637
|
await assertSessionIdAvailable(sql, projectId, id);
|
|
@@ -1647,7 +1642,6 @@ async function createSession(sql, input) {
|
|
|
1647
1642
|
id,
|
|
1648
1643
|
user_id,
|
|
1649
1644
|
strategy_id,
|
|
1650
|
-
audience,
|
|
1651
1645
|
token_hash,
|
|
1652
1646
|
created_at,
|
|
1653
1647
|
expires_at,
|
|
@@ -1662,7 +1656,6 @@ async function createSession(sql, input) {
|
|
|
1662
1656
|
${id},
|
|
1663
1657
|
${userId},
|
|
1664
1658
|
${strategyId},
|
|
1665
|
-
${audience},
|
|
1666
1659
|
${tokenHash},
|
|
1667
1660
|
${input.createdAt},
|
|
1668
1661
|
${input.expiresAt},
|
|
@@ -1681,50 +1674,26 @@ async function createSession(sql, input) {
|
|
|
1681
1674
|
}
|
|
1682
1675
|
}
|
|
1683
1676
|
async function revokeActiveSessionsForUser(sql, params) {
|
|
1684
|
-
const rows =
|
|
1685
|
-
SELECT *
|
|
1686
|
-
FROM auth_sessions
|
|
1687
|
-
WHERE project_id = ${params.projectId}
|
|
1688
|
-
AND user_id = ${params.userId}
|
|
1689
|
-
AND revoked_at IS NULL
|
|
1690
|
-
AND expires_at > ${params.revokedAt}
|
|
1691
|
-
AND (absolute_expires_at IS NULL OR absolute_expires_at > ${params.revokedAt})
|
|
1692
|
-
ORDER BY created_at ASC, id ASC
|
|
1693
|
-
FOR UPDATE
|
|
1694
|
-
` : await sql`
|
|
1677
|
+
const rows = await sql`
|
|
1695
1678
|
SELECT *
|
|
1696
1679
|
FROM auth_sessions
|
|
1697
1680
|
WHERE project_id = ${params.projectId}
|
|
1698
1681
|
AND user_id = ${params.userId}
|
|
1699
|
-
AND audience = ${params.audience}
|
|
1700
1682
|
AND revoked_at IS NULL
|
|
1701
1683
|
AND expires_at > ${params.revokedAt}
|
|
1702
1684
|
AND (absolute_expires_at IS NULL OR absolute_expires_at > ${params.revokedAt})
|
|
1703
1685
|
ORDER BY created_at ASC, id ASC
|
|
1704
1686
|
FOR UPDATE
|
|
1705
1687
|
`;
|
|
1706
|
-
|
|
1707
|
-
await sql`
|
|
1708
|
-
UPDATE auth_sessions
|
|
1709
|
-
SET revoked_at = ${params.revokedAt}
|
|
1710
|
-
WHERE project_id = ${params.projectId}
|
|
1711
|
-
AND user_id = ${params.userId}
|
|
1712
|
-
AND revoked_at IS NULL
|
|
1713
|
-
AND expires_at > ${params.revokedAt}
|
|
1714
|
-
AND (absolute_expires_at IS NULL OR absolute_expires_at > ${params.revokedAt})
|
|
1715
|
-
`;
|
|
1716
|
-
} else {
|
|
1717
|
-
await sql`
|
|
1688
|
+
await sql`
|
|
1718
1689
|
UPDATE auth_sessions
|
|
1719
1690
|
SET revoked_at = ${params.revokedAt}
|
|
1720
1691
|
WHERE project_id = ${params.projectId}
|
|
1721
1692
|
AND user_id = ${params.userId}
|
|
1722
|
-
AND audience = ${params.audience}
|
|
1723
1693
|
AND revoked_at IS NULL
|
|
1724
1694
|
AND expires_at > ${params.revokedAt}
|
|
1725
1695
|
AND (absolute_expires_at IS NULL OR absolute_expires_at > ${params.revokedAt})
|
|
1726
1696
|
`;
|
|
1727
|
-
}
|
|
1728
1697
|
return rows.map((row) => rowToSessionRecord({
|
|
1729
1698
|
...row,
|
|
1730
1699
|
revoked_at: params.revokedAt
|
|
@@ -2384,7 +2353,6 @@ class PgAuthInvitationStore {
|
|
|
2384
2353
|
}
|
|
2385
2354
|
|
|
2386
2355
|
// src/auth-storage/magic-links.ts
|
|
2387
|
-
import { resolveAuthSessionAudience } from "@sixb/core";
|
|
2388
2356
|
import { AuthStorageError as AuthStorageError5 } from "@sixb/core/storage";
|
|
2389
2357
|
class PgAuthMagicLinkStore {
|
|
2390
2358
|
sql;
|
|
@@ -2396,7 +2364,6 @@ class PgAuthMagicLinkStore {
|
|
|
2396
2364
|
const id = assertNonEmpty(input.id, "Magic link id");
|
|
2397
2365
|
const projectId = assertNonEmpty(input.projectId, "Project id");
|
|
2398
2366
|
const strategyId = assertNonEmpty(input.strategyId, "Strategy id");
|
|
2399
|
-
const audience = resolveAuthSessionAudience(input.audience);
|
|
2400
2367
|
const email = normalizeEmail(input.email);
|
|
2401
2368
|
const tokenHash = assertNonEmpty(input.tokenHash, "Magic link token hash");
|
|
2402
2369
|
await lockAdvisoryKeys(tx, [authLockKey("magic-links", projectId, email)]);
|
|
@@ -2414,7 +2381,6 @@ class PgAuthMagicLinkStore {
|
|
|
2414
2381
|
project_id,
|
|
2415
2382
|
id,
|
|
2416
2383
|
strategy_id,
|
|
2417
|
-
audience,
|
|
2418
2384
|
email,
|
|
2419
2385
|
token_hash,
|
|
2420
2386
|
return_to,
|
|
@@ -2424,7 +2390,6 @@ class PgAuthMagicLinkStore {
|
|
|
2424
2390
|
${projectId},
|
|
2425
2391
|
${id},
|
|
2426
2392
|
${strategyId},
|
|
2427
|
-
${audience},
|
|
2428
2393
|
${email},
|
|
2429
2394
|
${tokenHash},
|
|
2430
2395
|
${input.returnTo ?? null},
|
|
@@ -2472,7 +2437,6 @@ class PgAuthMagicLinkStore {
|
|
|
2472
2437
|
}
|
|
2473
2438
|
|
|
2474
2439
|
// src/auth-storage/oidc-attempts.ts
|
|
2475
|
-
import { resolveAuthSessionAudience as resolveAuthSessionAudience2 } from "@sixb/core";
|
|
2476
2440
|
import { AuthStorageError as AuthStorageError6 } from "@sixb/core/storage";
|
|
2477
2441
|
class PgAuthOidcAuthorizationAttemptStore {
|
|
2478
2442
|
sql;
|
|
@@ -2483,7 +2447,6 @@ class PgAuthOidcAuthorizationAttemptStore {
|
|
|
2483
2447
|
const id = assertNonEmpty(input.id, "OIDC authorization attempt id");
|
|
2484
2448
|
const projectId = assertNonEmpty(input.projectId, "Project id");
|
|
2485
2449
|
const strategyId = assertNonEmpty(input.strategyId, "Strategy id");
|
|
2486
|
-
const audience = resolveAuthSessionAudience2(input.audience);
|
|
2487
2450
|
const stateHash = assertNonEmpty(input.stateHash, "OIDC state hash");
|
|
2488
2451
|
const nonceHash = assertNonEmpty(input.nonceHash, "OIDC nonce hash");
|
|
2489
2452
|
const codeVerifier = assertNonEmpty(input.codeVerifier, "OIDC code verifier");
|
|
@@ -2496,7 +2459,6 @@ class PgAuthOidcAuthorizationAttemptStore {
|
|
|
2496
2459
|
project_id,
|
|
2497
2460
|
id,
|
|
2498
2461
|
strategy_id,
|
|
2499
|
-
audience,
|
|
2500
2462
|
state_hash,
|
|
2501
2463
|
nonce_hash,
|
|
2502
2464
|
code_verifier,
|
|
@@ -2507,7 +2469,6 @@ class PgAuthOidcAuthorizationAttemptStore {
|
|
|
2507
2469
|
${projectId},
|
|
2508
2470
|
${id},
|
|
2509
2471
|
${strategyId},
|
|
2510
|
-
${audience},
|
|
2511
2472
|
${stateHash},
|
|
2512
2473
|
${nonceHash},
|
|
2513
2474
|
${codeVerifier},
|
|
@@ -2765,21 +2726,6 @@ class PgAuthSessionStore {
|
|
|
2765
2726
|
async getById(params) {
|
|
2766
2727
|
return getSessionById(this.sql, params);
|
|
2767
2728
|
}
|
|
2768
|
-
async getActiveByUserId(params) {
|
|
2769
|
-
const [row] = await this.sql`
|
|
2770
|
-
SELECT *
|
|
2771
|
-
FROM auth_sessions
|
|
2772
|
-
WHERE project_id = ${params.projectId}
|
|
2773
|
-
AND user_id = ${params.userId}
|
|
2774
|
-
AND audience = ${params.audience}
|
|
2775
|
-
AND revoked_at IS NULL
|
|
2776
|
-
AND expires_at > ${params.now}
|
|
2777
|
-
AND (absolute_expires_at IS NULL OR absolute_expires_at > ${params.now})
|
|
2778
|
-
ORDER BY created_at DESC, id DESC
|
|
2779
|
-
LIMIT 1
|
|
2780
|
-
`;
|
|
2781
|
-
return row ? rowToSessionRecord(row) : null;
|
|
2782
|
-
}
|
|
2783
2729
|
async listActiveByUserId(params) {
|
|
2784
2730
|
const rows = await this.sql`
|
|
2785
2731
|
SELECT *
|
|
@@ -2795,7 +2741,7 @@ class PgAuthSessionStore {
|
|
|
2795
2741
|
}
|
|
2796
2742
|
async findValidByTokenHash(params) {
|
|
2797
2743
|
const row = await getSessionRowById(this.sql, params);
|
|
2798
|
-
if (!row || row.refresh_token_hash !== null || row.
|
|
2744
|
+
if (!row || row.refresh_token_hash !== null || row.token_hash !== params.tokenHash || !isLiveSessionRow(row, params.now)) {
|
|
2799
2745
|
return null;
|
|
2800
2746
|
}
|
|
2801
2747
|
return rowToSessionRecord(row);
|
|
@@ -2855,7 +2801,6 @@ class PgAuthSessionStore {
|
|
|
2855
2801
|
last_seen_at = ${params.now}
|
|
2856
2802
|
WHERE project_id = ${params.projectId}
|
|
2857
2803
|
AND id = ${params.id}
|
|
2858
|
-
AND audience = ${params.audience}
|
|
2859
2804
|
AND token_hash = ${params.tokenHash}
|
|
2860
2805
|
AND refresh_token_hash IS NULL
|
|
2861
2806
|
AND revoked_at IS NULL
|
|
@@ -2883,11 +2828,7 @@ class PgAuthSessionStore {
|
|
|
2883
2828
|
}
|
|
2884
2829
|
async revokeActiveForUser(params) {
|
|
2885
2830
|
return runPgTransaction(this.sql, async (tx) => {
|
|
2886
|
-
|
|
2887
|
-
if (params.audience) {
|
|
2888
|
-
locks.push(authLockKey("sessions", params.projectId, params.userId, params.audience));
|
|
2889
|
-
}
|
|
2890
|
-
await lockAdvisoryKeys(tx, locks);
|
|
2831
|
+
await lockAdvisoryKeys(tx, [authLockKey("sessions", params.projectId, params.userId)]);
|
|
2891
2832
|
return revokeActiveSessionsForUser(tx, params);
|
|
2892
2833
|
});
|
|
2893
2834
|
}
|
|
@@ -3146,7 +3087,6 @@ class PgAuthStorage {
|
|
|
3146
3087
|
};
|
|
3147
3088
|
}
|
|
3148
3089
|
await validateCompleteSessionInput(tx, projectId, input.session);
|
|
3149
|
-
assertSignInSessionAudience(projectId, input.session.audience, magicLink.audience);
|
|
3150
3090
|
let newUserId;
|
|
3151
3091
|
if (shouldCreateUser) {
|
|
3152
3092
|
newUserId = assertNonEmpty(input.newUserId, "User id");
|
|
@@ -3251,7 +3191,6 @@ class PgAuthStorage {
|
|
|
3251
3191
|
};
|
|
3252
3192
|
}
|
|
3253
3193
|
await validateCompleteSessionInput(tx, projectId, input.session);
|
|
3254
|
-
assertSignInSessionAudience(projectId, input.session.audience, attempt.audience);
|
|
3255
3194
|
let newUserId;
|
|
3256
3195
|
if (shouldCreateUser) {
|
|
3257
3196
|
newUserId = assertNonEmpty(input.newUserId, "User id");
|
|
@@ -3459,16 +3398,12 @@ class PgAuthStorage {
|
|
|
3459
3398
|
return this.applyGroups(sql, { ...input, groupIds, source: "directory" });
|
|
3460
3399
|
}
|
|
3461
3400
|
async createSignInSession(sql, input) {
|
|
3462
|
-
await lockAdvisoryKeys(sql, [
|
|
3463
|
-
authLockKey("sessions", input.projectId, input.userId),
|
|
3464
|
-
authLockKey("sessions", input.projectId, input.userId, input.session.audience)
|
|
3465
|
-
]);
|
|
3401
|
+
await lockAdvisoryKeys(sql, [authLockKey("sessions", input.projectId, input.userId)]);
|
|
3466
3402
|
return createSession(sql, {
|
|
3467
3403
|
id: input.session.id,
|
|
3468
3404
|
projectId: input.projectId,
|
|
3469
3405
|
userId: input.userId,
|
|
3470
3406
|
strategyId: input.strategyId,
|
|
3471
|
-
audience: input.session.audience,
|
|
3472
3407
|
tokenHash: input.session.tokenHash,
|
|
3473
3408
|
createdAt: input.session.createdAt,
|
|
3474
3409
|
expiresAt: input.session.expiresAt,
|
|
@@ -3514,12 +3449,6 @@ class PgAuthStorage {
|
|
|
3514
3449
|
return rowToIdentityRecord(row);
|
|
3515
3450
|
}
|
|
3516
3451
|
}
|
|
3517
|
-
function assertSignInSessionAudience(projectId, sessionAudience, storedAudience) {
|
|
3518
|
-
if (sessionAudience === storedAudience) {
|
|
3519
|
-
return;
|
|
3520
|
-
}
|
|
3521
|
-
throw new AuthStorageError11("invalid_input", `[Sixb] Sign-in session audience '${sessionAudience}' does not match stored auth audience '${storedAudience}' for project '${projectId}'.`);
|
|
3522
|
-
}
|
|
3523
3452
|
function assertCompletableDeviceAuthorization(authorization, input) {
|
|
3524
3453
|
if (authorization.deviceCodeHash !== input.deviceCodeHash) {
|
|
3525
3454
|
throw new AuthStorageError11("invalid_device_authorization", "[Sixb] Invalid device authorization.");
|
|
@@ -8168,6 +8097,28 @@ CREATE INDEX idx_action_runs_project_status_started
|
|
|
8168
8097
|
ON action_runs (project_id, status, started_at DESC);
|
|
8169
8098
|
`;
|
|
8170
8099
|
|
|
8100
|
+
// src/migrations/062-drop-auth-audience.sql
|
|
8101
|
+
var _062_drop_auth_audience_default = `-- A project has one browser app, so sessions, magic links and sign-in attempts no longer name the
|
|
8102
|
+
-- one they belong to. Atlas's browser sessions end here: their cookie is no longer read. Native
|
|
8103
|
+
-- sessions carried Atlas's name only because the column needed a value, so they stay.
|
|
8104
|
+
UPDATE auth_sessions
|
|
8105
|
+
SET revoked_at = now()
|
|
8106
|
+
WHERE audience = 'atlas'
|
|
8107
|
+
AND refresh_token_hash IS NULL
|
|
8108
|
+
AND revoked_at IS NULL;
|
|
8109
|
+
|
|
8110
|
+
-- Dropping the column drops the two indexes that name it.
|
|
8111
|
+
ALTER TABLE auth_sessions DROP COLUMN audience;
|
|
8112
|
+
CREATE INDEX idx_auth_sessions_user_active
|
|
8113
|
+
ON auth_sessions (project_id, user_id, expires_at DESC, created_at DESC, id DESC)
|
|
8114
|
+
WHERE revoked_at IS NULL;
|
|
8115
|
+
CREATE INDEX idx_auth_sessions_user_created
|
|
8116
|
+
ON auth_sessions (project_id, user_id, created_at DESC, id DESC);
|
|
8117
|
+
|
|
8118
|
+
ALTER TABLE auth_magic_links DROP COLUMN audience;
|
|
8119
|
+
ALTER TABLE auth_oidc_authorization_attempts DROP COLUMN audience;
|
|
8120
|
+
`;
|
|
8121
|
+
|
|
8171
8122
|
// src/migrations.ts
|
|
8172
8123
|
var POSTGRES_STORAGE_ADAPTER_ID = "SixbPostgresStorage";
|
|
8173
8124
|
function pgSql(id, sqlText) {
|
|
@@ -8395,7 +8346,8 @@ var postgresStorageMigrations = defineMigrations({
|
|
|
8395
8346
|
pgSql("058-reranking-model-kind", _058_reranking_model_kind_default),
|
|
8396
8347
|
pgSql("059-file-download-grants", _059_file_download_grants_default),
|
|
8397
8348
|
pgSql("060-drained-source-versions", _060_drained_source_versions_default),
|
|
8398
|
-
pgSql("061-terminal-action-runs", _061_terminal_action_runs_default)
|
|
8349
|
+
pgSql("061-terminal-action-runs", _061_terminal_action_runs_default),
|
|
8350
|
+
pgSql("062-drop-auth-audience", _062_drop_auth_audience_default)
|
|
8399
8351
|
]
|
|
8400
8352
|
});
|
|
8401
8353
|
|
|
@@ -21026,4 +20978,4 @@ export {
|
|
|
21026
20978
|
migratePostgresStorage
|
|
21027
20979
|
};
|
|
21028
20980
|
|
|
21029
|
-
//# debugId=
|
|
20981
|
+
//# debugId=971E14D4D5198C8B64756E2164756E21
|