@sourceregistry/sveltekit-oidc 1.6.1 → 1.6.3

package/dist/server/index.js

@@ -8,7 +8,8 @@ import { absoluteUrl, base64UrlEncode, buildCookieOptions, collectGroups, create
 export { createInMemoryBackChannelLogoutStore, createInMemorySessionStore } from './store.js';
 import { createInMemoryBackChannelLogoutStore, createInMemorySessionStore } from './store.js';
 function buildLogger(logger) {
-    const noop = () => { };
+    const noop = () => {
+    };
     if (logger === false)
         return { debug: noop, info: noop, warn: noop, error: noop };
     if (logger)
@@ -269,13 +270,13 @@ export function createOIDC(options) {
         }
         return backChannelLogoutStore.isRevoked(session);
     }
-    async function maybeRefreshSession(event, persisted) {
+    async function maybeRefreshSession(cookies, persisted) {
         const session = persisted?.session ?? null;
         if (!session) {
             return null;
         }
         if (await isRevoked(session)) {
-            await clearPersistedSession(event.cookies, persisted?.id);
+            await clearPersistedSession(cookies, persisted?.id);
             return null;
         }
         if (!shouldRefresh(session, refreshToleranceSeconds)) {
@@ -309,17 +310,17 @@ export function createOIDC(options) {
                     isRefresh: true
                 })
                 : nextSession;
-            await writePersistedSession(event.cookies, finalSession, persisted?.id);
+            await writePersistedSession(cookies, finalSession, persisted?.id);
             return finalSession;
         }
         catch (err) {
             log.error('Token refresh failed — clearing session', err);
-            await clearPersistedSession(event.cookies, persisted?.id);
+            await clearPersistedSession(cookies, persisted?.id);
             return null;
         }
     }
     async function getSession(event) {
-        return maybeRefreshSession(event, await readPersistedSession(event.cookies));
+        return maybeRefreshSession(event.cookies, await readPersistedSession(event.cookies));
     }
     async function signIn(event, loginOptions = {}) {
         const metadata = await getMetadata();
@@ -473,22 +474,28 @@ export function createOIDC(options) {
         throw redirect(302, `${absoluteUrl(event, loginPath)}?returnTo=${encodeURIComponent(returnTo ?? `${event.url.pathname}${event.url.search}`)}`);
     }
     const handle = async ({ event, resolve }) => {
-        const session = await getSession(event);
-        event.locals.oidc = {
-            isAuthenticated: Boolean(session),
-            session,
-            user: session?.user,
-            claims: session?.claims,
-            requireAuth: async () => {
-                if (!session) {
-                    throw error(401, { message: 'Authentication required' });
-                }
-                return session;
-            },
-            clearSession: async () => clearPersistedSession(event.cookies)
-        };
+        const { oidc } = await hook(event);
+        event.locals.oidc = oidc;
         return resolve(event);
     };
+    async function hook(event) {
+        const session = await getSession(event);
+        return {
+            oidc: {
+                isAuthenticated: Boolean(session),
+                session,
+                user: session?.user,
+                claims: session?.claims,
+                requireAuth: async () => {
+                    if (!session) {
+                        throw error(401, { message: 'Authentication required' });
+                    }
+                    return session;
+                },
+                clearSession: async () => clearPersistedSession(event.cookies)
+            }
+        };
+    }
     function loginHandler(defaults = {}) {
         return async (event) => {
             const returnTo = event.url.searchParams.get('returnTo') ?? defaults.returnTo;
@@ -565,6 +572,7 @@ export function createOIDC(options) {
     }
     return {
         handle,
+        hook,
         getMetadata,
         getSession,
         getPublicSession: async (event) => toPublicSession(await getSession(event)),

package/dist/server/types.d.ts

@@ -242,6 +242,11 @@ export type OIDCPersistedSession<TClaims extends OIDCUserClaims = OIDCUserClaims
 };
 export type OIDCInstance<TClaims extends OIDCUserClaims = OIDCUserClaims, TSession extends OIDCSession<TClaims> = OIDCSession<TClaims>> = {
     handle: Handle;
+    hook: (event: {
+        cookies: RequestEvent['cookies'];
+    }) => Promise<{
+        oidc: OIDCHandleLocals<TClaims, TSession>;
+    }>;
     getMetadata: () => Promise<OIDCDiscoveryDocument>;
     getSession: (event: RequestEvent) => Promise<TSession | null>;
     getPublicSession: (event: RequestEvent) => Promise<OIDCPublicSession<TClaims> | null>;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sourceregistry/sveltekit-oidc",
-  "version": "1.6.1",
+  "version": "1.6.3",
   "description": "OIDC authentication helpers for SvelteKit applications",
   "license": "Apache-2.0",
   "scripts": {