@spfn/auth 0.2.0-beta.50 → 0.2.0-beta.52

package/dist/server.d.ts

@@ -5159,14 +5159,17 @@ declare function shouldRefreshSession(jwt: string, thresholdHours?: number): Pro
  */
 /**
  * Cookie names used by SPFN Auth
+ *
+ * Names include a port-based suffix so that multiple dev instances
+ * on different ports don't overwrite each other's cookies.
  */
 declare const COOKIE_NAMES: {
     /** Encrypted session data (userId, privateKey, keyId, algorithm) */
-    readonly SESSION: "spfn_session";
+    readonly SESSION: string;
     /** Current key ID (for key rotation) */
-    readonly SESSION_KEY_ID: "spfn_session_key_id";
+    readonly SESSION_KEY_ID: string;
     /** Pending OAuth session (privateKey, keyId, algorithm) - temporary during OAuth flow */
-    readonly OAUTH_PENDING: "spfn_oauth_pending";
+    readonly OAUTH_PENDING: string;
 };
 /**
  * Parse duration string to seconds

package/dist/server.js

@@ -7086,6 +7086,10 @@ function getKeyExpiryDate() {
 }
 async function registerPublicKeyService(params) {
   const { userId, keyId, publicKey, fingerprint, algorithm = "ES256" } = params;
+  const existing = await keysRepository.findActiveByKeyId(keyId);
+  if (existing) {
+    return;
+  }
   const isValidFingerprint = verifyKeyFingerprint(publicKey, fingerprint);
   if (!isValidFingerprint) {
     throw new InvalidKeyFingerprintError();
@@ -7420,13 +7424,23 @@ import { createHash } from "crypto";
 
 // src/server/lib/config.ts
 import { env as env5 } from "@spfn/auth/config";
+function getCookieSuffix() {
+  const port = process.env.PORT;
+  return port ? `_${port}` : "";
+}
 var COOKIE_NAMES = {
   /** Encrypted session data (userId, privateKey, keyId, algorithm) */
-  SESSION: "spfn_session",
+  get SESSION() {
+    return `spfn_session${getCookieSuffix()}`;
+  },
   /** Current key ID (for key rotation) */
-  SESSION_KEY_ID: "spfn_session_key_id",
+  get SESSION_KEY_ID() {
+    return `spfn_session_key_id${getCookieSuffix()}`;
+  },
   /** Pending OAuth session (privateKey, keyId, algorithm) - temporary during OAuth flow */
-  OAUTH_PENDING: "spfn_oauth_pending"
+  get OAUTH_PENDING() {
+    return `spfn_oauth_pending${getCookieSuffix()}`;
+  }
 };
 function parseDuration(duration) {
   if (typeof duration === "number") {