@stacksjs/auth 0.72.94 → 0.72.96

package/dist/middleware.d.ts

@@ -28,6 +28,13 @@ export declare function authMiddleware(request: any): Promise<void>;
  *
  * Resolving it here means every caller agrees on what "the user" is, and the
  * answer is a user rather than a callable.
+ *
+ * It is also the answer to "is this a user at all". An object with no usable
+ * `id` is not one, and returning it anyway pushed the failure downstream into
+ * RBAC, which validates its input and throws a TypeError — so an authorization
+ * middleware answered 500 rather than 401, to signed-in and anonymous callers
+ * alike. Deciding it here means every caller's own `if (!user) throw 401` is
+ * the check that fires.
  */
 export declare function authenticatedUser(request: any): Promise<any | undefined>;
 /**

package/dist/middleware.js

@@ -1 +1 @@
-import{Auth}from"./authentication";import{requestToken}from"./request-token";export async function authMiddleware(request){const bearerToken=requestToken(request);if(!bearerToken){const error=Error("No authentication token provided.");error.statusCode=401;throw error}const user=await Auth.getUserFromToken(bearerToken);if(!user){const error=Error("Invalid or expired authentication token.");error.statusCode=401;throw error}Auth.setUser(user);request._authenticatedUser=user;const accessToken=await Auth.currentAccessToken();request._currentAccessToken=accessToken}export const authMiddlewareHandler={name:"auth",handle:authMiddleware};export async function authenticatedUser(request){const cached=request?._authenticatedUser;if(cached&&typeof cached==="object")return cached;const macro=request?.user;if(typeof macro==="function"){const resolved=await macro();return resolved&&typeof resolved==="object"?resolved:void 0}if(macro&&typeof macro==="object")return macro;return}
+import{Auth}from"./authentication";import{requestToken}from"./request-token";export async function authMiddleware(request){const bearerToken=requestToken(request);if(!bearerToken){const error=Error("No authentication token provided.");error.statusCode=401;throw error}const user=await Auth.getUserFromToken(bearerToken);if(!user){const error=Error("Invalid or expired authentication token.");error.statusCode=401;throw error}Auth.setUser(user);request._authenticatedUser=user;const accessToken=await Auth.currentAccessToken();request._currentAccessToken=accessToken}export const authMiddlewareHandler={name:"auth",handle:authMiddleware};export async function authenticatedUser(request){const cached=request?._authenticatedUser;if(isUserLike(cached))return cached;const macro=request?.user;if(typeof macro==="function"){const resolved=await macro();return isUserLike(resolved)?resolved:void 0}if(isUserLike(macro))return macro;return}function isUserLike(value){if(!value||typeof value!=="object")return!1;const id=value.id;if(typeof id==="number")return Number.isFinite(id)&&id>0;return typeof id==="string"&&id.trim().length>0}

package/package.json

@@ -2,7 +2,7 @@
   "name": "@stacksjs/auth",
   "type": "module",
   "sideEffects": false,
-  "version": "0.72.94",
+  "version": "0.72.96",
   "description": "A more simplistic way to authenticate.",
   "author": "Chris Breuer",
   "contributors": [
@@ -61,7 +61,7 @@
   },
   "devDependencies": {
     "better-dx": "^0.2.24",
-    "@stacksjs/error-handling": "0.72.94",
-    "@stacksjs/router": "0.72.94"
+    "@stacksjs/error-handling": "0.72.96",
+    "@stacksjs/router": "0.72.96"
   }
 }