@softr/sdk 0.0.21 → 0.0.22-alpha.0

package/dist/auth/session.d.ts

@@ -0,0 +1,16 @@
+import "./context.js";
+
+//#region src/auth/session.d.ts
+
+declare function makeSessionTokenCookie(token: string, secure?: boolean): string;
+/** The clearing pair, for the same out-of-context caller as `makeSessionTokenCookie`. */
+declare function makeSessionClearingCookies(secure: boolean): Array<string>;
+/**
+ * The name `readSessionToken` would look the token up under on a request of this
+ * scheme, for a caller that only needs to know whether one is present and cannot
+ * decode it. Same `secure` argument as `makeSessionTokenCookie`, so a caller that
+ * writes and a caller that probes cannot disagree about the name.
+ */
+declare function sessionTokenCookieName(secure: boolean): string;
+//#endregion
+export { makeSessionClearingCookies, makeSessionTokenCookie, sessionTokenCookieName };

package/dist/auth/session.js

@@ -19,10 +19,13 @@ const HOST_PREFIX = "__Host-";
 function requestIsSecure() {
 	return getRequestProtocol() === "https";
 }
+function sessionCookieName(base, secure) {
+	return secure ? HOST_PREFIX + base : base;
+}
 function sessionCookie(base) {
 	const secure = requestIsSecure();
 	return {
-		name: secure ? HOST_PREFIX + base : base,
+		name: sessionCookieName(base, secure),
 		secure
 	};
 }
@@ -43,9 +46,8 @@ function readSessionData(sessionToken) {
 		permissions: payload.permissions
 	};
 }
-function makeSessionTokenCookie(token) {
-	const { name, secure } = sessionCookie(SESSION_TOKEN);
-	return serializeCookie(name, sealEnvelope(token, SESSION_TOKEN), {
+function makeSessionTokenCookie(token, secure = requestIsSecure()) {
+	return serializeCookie(sessionCookieName(SESSION_TOKEN, secure), sealEnvelope(token, SESSION_TOKEN), {
 		maxAge: sessionConfig().sessionMaxAge,
 		secure
 	});
@@ -69,6 +71,19 @@ function makeSessionDataCookie(session, sessionToken) {
 function clearSession() {
 	clearCookies([SESSION_TOKEN, SESSION_DATA]);
 }
+/** The clearing pair, for the same out-of-context caller as `makeSessionTokenCookie`. */
+function makeSessionClearingCookies(secure) {
+	return serializeClearingCookies([SESSION_TOKEN, SESSION_DATA], secure);
+}
+/**
+* The name `readSessionToken` would look the token up under on a request of this
+* scheme, for a caller that only needs to know whether one is present and cannot
+* decode it. Same `secure` argument as `makeSessionTokenCookie`, so a caller that
+* writes and a caller that probes cannot disagree about the name.
+*/
+function sessionTokenCookieName(secure) {
+	return sessionCookieName(SESSION_TOKEN, secure);
+}
 const sessionDataSchema = z.object({
 	user: userSchema.nullable(),
 	permissions: permissionsSchema,
@@ -80,11 +95,13 @@ const sessionDataSchema = z.object({
 * schemes, and the one left behind would revive if the scheme changed back.
 */
 function clearCookies(bases) {
-	const secure = requestIsSecure();
-	writeCookies(bases.flatMap((base) => secure ? [HOST_PREFIX + base, base] : [base]).map((name) => serializeCookie(name, "", {
+	writeCookies(serializeClearingCookies(bases, requestIsSecure()));
+}
+function serializeClearingCookies(bases, secure) {
+	return bases.flatMap((base) => secure ? [sessionCookieName(base, secure), base] : [base]).map((name) => serializeCookie(name, "", {
 		maxAge: 0,
 		secure
-	})));
+	}));
 }
 /**
 * Over the plaintext token, never the cookie value: that is resealed with a
@@ -160,4 +177,4 @@ function openEnvelope(raw, purpose) {
 }
 
 //#endregion
-export { clearSession, makeSessionDataCookie, makeSessionTokenCookie, readSessionData, readSessionToken };
+export { clearSession, makeSessionClearingCookies, makeSessionDataCookie, makeSessionTokenCookie, readSessionData, readSessionToken, sessionTokenCookieName };

package/dist/server.d.ts

@@ -2,5 +2,6 @@ import { auth } from "./auth/server.js";
 import { ds } from "./core/datasource.js";
 import { workflow } from "./core/workflow.js";
 import { integration } from "./core/integration.js";
+import { makeSessionClearingCookies, makeSessionTokenCookie, sessionTokenCookieName } from "./auth/session.js";
 import "@tanstack/react-start/server-only";
-export { auth, ds, integration, workflow };
+export { auth, ds, integration, makeSessionClearingCookies, makeSessionTokenCookie, sessionTokenCookieName, workflow };

package/dist/server.js

@@ -1,7 +1,8 @@
+import { makeSessionClearingCookies, makeSessionTokenCookie, sessionTokenCookieName } from "./auth/session.js";
 import { auth } from "./auth/server.js";
 import { ds } from "./core/datasource.js";
 import { workflow } from "./core/workflow.js";
 import { integration } from "./core/integration.js";
 import "@tanstack/react-start/server-only";
 
-export { auth, ds, integration, workflow };
+export { auth, ds, integration, makeSessionClearingCookies, makeSessionTokenCookie, sessionTokenCookieName, workflow };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@softr/sdk",
-  "version": "0.0.21",
+  "version": "0.0.22-alpha.0",
   "type": "module",
   "exports": {
     ".": { "types": "./dist/index.d.ts", "import": "./dist/index.js" },