@sourceregistry/sveltekit-oidc 1.6.14 → 1.7.0

package/dist/server/index.js

@@ -356,7 +356,11 @@ export function createOIDC(options) {
         }
     }
     async function getSession(event) {
-        return maybeRefreshSession(event.cookies, await readPersistedSession(event.cookies));
+        const session = await maybeRefreshSession(event.cookies, await readPersistedSession(event.cookies));
+        if (!session || !options.enrichSession) {
+            return session;
+        }
+        return options.enrichSession(session, { event: event });
     }
     async function signIn(event, loginOptions = {}) {
         const metadata = await getMetadata();

package/dist/server/types.d.ts

@@ -182,6 +182,18 @@ export type OIDCOptions<TClaims extends OIDCUserClaims = OIDCUserClaims, TSessio
         user?: TClaims;
         isRefresh: boolean;
     }) => MaybePromise<TSession>;
+    /**
+     * Runs on every `getSession` read (and therefore every `getPublicSession`,
+     * `hook()`-provided `requireAuth`, and the instance-level `requireAuth`) —
+     * unlike `transformSession`, which only fires on session creation and token
+     * refresh. Use this to keep data your app owns outside the token (e.g. roles
+     * or memberships stored in your own database) fresh without waiting for a
+     * refresh. Only invoked when a session is present; the result is not persisted
+     * back to the session store.
+     */
+    enrichSession?: (session: TSession, context: {
+        event?: MinimalRequestEvent;
+    }) => MaybePromise<TSession>;
     endpoints?: Partial<OIDCDiscoveryDocument>;
     logger?: OIDCLogger | false;
     /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sourceregistry/sveltekit-oidc",
-  "version": "1.6.14",
+  "version": "1.7.0",
   "description": "OIDC authentication helpers for SvelteKit applications",
   "license": "Apache-2.0",
   "scripts": {