@strapi/core 0.0.0-next.4afb25b82502b04f05bbc122b43e1e3a806e7600 → 0.0.0-next.4df41dfed303a6fe5d2f36c53a4f144039ba7018

package/dist/services/session-manager.d.ts

@@ -0,0 +1,167 @@
+import type { Algorithm } from 'jsonwebtoken';
+import type { Database } from '@strapi/database';
+export interface SessionProvider {
+    create(session: SessionData): Promise<SessionData>;
+    findBySessionId(sessionId: string): Promise<SessionData | null>;
+    updateBySessionId(sessionId: string, data: Partial<SessionData>): Promise<void>;
+    deleteBySessionId(sessionId: string): Promise<void>;
+    deleteExpired(): Promise<void>;
+    deleteBy(criteria: {
+        userId?: string;
+        origin?: string;
+        deviceId?: string;
+    }): Promise<void>;
+}
+export interface SessionData {
+    id?: string;
+    userId: string;
+    sessionId: string;
+    deviceId?: string;
+    origin: string;
+    childId?: string | null;
+    type?: 'refresh' | 'session';
+    status?: 'active' | 'rotated' | 'revoked';
+    expiresAt: Date;
+    absoluteExpiresAt?: Date | null;
+    createdAt?: Date;
+    updatedAt?: Date;
+}
+export interface RefreshTokenPayload {
+    userId: string;
+    sessionId: string;
+    type: 'refresh';
+    exp: number;
+    iat: number;
+}
+export interface AccessTokenPayload {
+    userId: string;
+    sessionId: string;
+    type: 'access';
+    exp: number;
+    iat: number;
+}
+export type TokenPayload = RefreshTokenPayload | AccessTokenPayload;
+export interface ValidateRefreshTokenResult {
+    isValid: boolean;
+    userId?: string;
+    sessionId?: string;
+    error?: 'invalid_token' | 'token_expired' | 'session_not_found' | 'session_expired' | 'wrong_token_type';
+}
+export interface SessionManagerConfig {
+    jwtSecret?: string;
+    accessTokenLifespan: number;
+    maxRefreshTokenLifespan: number;
+    idleRefreshTokenLifespan: number;
+    maxSessionLifespan: number;
+    idleSessionLifespan: number;
+    algorithm?: Algorithm;
+    jwtOptions?: Record<string, unknown>;
+}
+declare class OriginSessionManager {
+    private sessionManager;
+    private origin;
+    constructor(sessionManager: SessionManager, origin: string);
+    generateRefreshToken(userId: string, deviceId: string | undefined, options?: {
+        type?: 'refresh' | 'session';
+    }): Promise<{
+        token: string;
+        sessionId: string;
+        absoluteExpiresAt: string;
+    }>;
+    generateAccessToken(refreshToken: string): Promise<{
+        token: string;
+    } | {
+        error: string;
+    }>;
+    rotateRefreshToken(refreshToken: string): Promise<{
+        token: string;
+        sessionId: string;
+        absoluteExpiresAt: string;
+        type: 'refresh' | 'session';
+    } | {
+        error: string;
+    }>;
+    validateAccessToken(token: string): {
+        isValid: true;
+        payload: AccessTokenPayload;
+    } | {
+        isValid: false;
+        payload: null;
+    };
+    validateRefreshToken(token: string): Promise<ValidateRefreshTokenResult>;
+    invalidateRefreshToken(userId: string, deviceId?: string): Promise<void>;
+    /**
+     * Returns true when a session exists and is not expired for this origin.
+     * If the session exists but is expired, it will be deleted as part of this check.
+     */
+    isSessionActive(sessionId: string): Promise<boolean>;
+}
+declare class SessionManager {
+    private provider;
+    private originConfigs;
+    private cleanupInvocationCounter;
+    private readonly cleanupEveryCalls;
+    constructor(provider: SessionProvider);
+    /**
+     * Define configuration for a specific origin
+     */
+    defineOrigin(origin: string, config: SessionManagerConfig): void;
+    /**
+     * Check if an origin is defined
+     */
+    hasOrigin(origin: string): boolean;
+    /**
+     * Get configuration for a specific origin, throw error if not defined
+     */
+    private getConfigForOrigin;
+    /**
+     * Get the appropriate JWT key based on the algorithm
+     */
+    private getJwtKey;
+    generateSessionId(): string;
+    private maybeCleanupExpired;
+    /**
+     * Get the cleanup every calls threshold
+     */
+    get cleanupThreshold(): number;
+    generateRefreshToken(userId: string, deviceId: string | undefined, origin: string, options?: {
+        type?: 'refresh' | 'session';
+    }): Promise<{
+        token: string;
+        sessionId: string;
+        absoluteExpiresAt: string;
+    }>;
+    validateAccessToken(token: string, origin: string): {
+        isValid: true;
+        payload: AccessTokenPayload;
+    } | {
+        isValid: false;
+        payload: null;
+    };
+    validateRefreshToken(token: string, origin: string): Promise<ValidateRefreshTokenResult>;
+    invalidateRefreshToken(origin: string, userId: string, deviceId?: string): Promise<void>;
+    generateAccessToken(refreshToken: string, origin: string): Promise<{
+        token: string;
+    } | {
+        error: string;
+    }>;
+    rotateRefreshToken(refreshToken: string, origin: string): Promise<{
+        token: string;
+        sessionId: string;
+        absoluteExpiresAt: string;
+        type: 'refresh' | 'session';
+    } | {
+        error: string;
+    }>;
+    /**
+     * Returns true when a session exists and is not expired.
+     * If the session exists but is expired, it will be deleted as part of this check.
+     */
+    isSessionActive(sessionId: string, origin: string): Promise<boolean>;
+}
+declare const createDatabaseProvider: (db: Database, contentType: string) => SessionProvider;
+declare const createSessionManager: ({ db, }: {
+    db: Database;
+}) => SessionManager & ((origin: string) => OriginSessionManager);
+export { createSessionManager, createDatabaseProvider };
+//# sourceMappingURL=session-manager.d.ts.map

package/dist/services/session-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-manager.d.ts","sourceRoot":"","sources":["../../src/services/session-manager.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAiB,SAAS,EAAE,MAAM,cAAc,CAAC;AAC7D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAGjD,MAAM,WAAW,eAAe;IAC9B,MAAM,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACnD,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;IAChE,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChF,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACpD,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5F;AAED,MAAM,WAAW,WAAW;IAC1B,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAExB,IAAI,CAAC,EAAE,SAAS,GAAG,SAAS,CAAC;IAC7B,MAAM,CAAC,EAAE,QAAQ,GAAG,SAAS,GAAG,SAAS,CAAC;IAC1C,SAAS,EAAE,IAAI,CAAC;IAChB,iBAAiB,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;IAChC,SAAS,CAAC,EAAE,IAAI,CAAC;IACjB,SAAS,CAAC,EAAE,IAAI,CAAC;CAClB;AAED,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,SAAS,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,QAAQ,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,MAAM,YAAY,GAAG,mBAAmB,GAAG,kBAAkB,CAAC;AAEpE,MAAM,WAAW,0BAA0B;IACzC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EACF,eAAe,GACf,eAAe,GACf,mBAAmB,GACnB,iBAAiB,GACjB,kBAAkB,CAAC;CACxB;AAqDD,MAAM,WAAW,oBAAoB;IACnC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,uBAAuB,EAAE,MAAM,CAAC;IAChC,wBAAwB,EAAE,MAAM,CAAC;IACjC,kBAAkB,EAAE,MAAM,CAAC;IAC3B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACtC;AAED,cAAM,oBAAoB;IAEtB,OAAO,CAAC,cAAc;IACtB,OAAO,CAAC,MAAM;gBADN,cAAc,EAAE,cAAc,EAC9B,MAAM,EAAE,MAAM;IAGlB,oBAAoB,CACxB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,GAAG,SAAS,EAC5B,OAAO,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,SAAS,GAAG,SAAS,CAAA;KAAE,GACzC,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,iBAAiB,EAAE,MAAM,CAAA;KAAE,CAAC;IAIrE,mBAAmB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAIzF,kBAAkB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CACnD;QACE,KAAK,EAAE,MAAM,CAAC;QACd,SAAS,EAAE,MAAM,CAAC;QAClB,iBAAiB,EAAE,MAAM,CAAC;QAC1B,IAAI,EAAE,SAAS,GAAG,SAAS,CAAC;KAC7B,GACD;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CACpB;IAID,mBAAmB,CACjB,KAAK,EAAE,MAAM,GACZ;QAAE,OAAO,EAAE,IAAI,CAAC;QAAC,OAAO,EAAE,kBAAkB,CAAA;KAAE,GAAG;QAAE,OAAO,EAAE,KAAK,CAAC;QAAC,OAAO,EAAE,IAAI,CAAA;KAAE;IAI/E,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,0BAA0B,CAAC;IAIxE,sBAAsB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI9E;;;OAGG;IACG,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;CAG3D;AAED,cAAM,cAAc;IAClB,OAAO,CAAC,QAAQ,CAAkB;IAGlC,OAAO,CAAC,aAAa,CAAgD;IAGrE,OAAO,CAAC,wBAAwB,CAAa;IAE7C,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAc;gBAEpC,QAAQ,EAAE,eAAe;IAIrC;;OAEG;IACH,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,oBAAoB,GAAG,IAAI;IAIhE;;OAEG;IACH,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO;IAIlC;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAU1B;;OAEG;IACH,OAAO,CAAC,SAAS;IAqCjB,iBAAiB,IAAI,MAAM;YAIb,mBAAmB;IASjC;;OAEG;IACH,IAAI,gBAAgB,IAAI,MAAM,CAE7B;IAEK,oBAAoB,CACxB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,GAAG,SAAS,EAC5B,MAAM,EAAE,MAAM,EACd,OAAO,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,SAAS,GAAG,SAAS,CAAA;KAAE,GACzC,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,iBAAiB,EAAE,MAAM,CAAA;KAAE,CAAC;IAiE3E,mBAAmB,CACjB,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,GACb;QAAE,OAAO,EAAE,IAAI,CAAC;QAAC,OAAO,EAAE,kBAAkB,CAAA;KAAE,GAAG;QAAE,OAAO,EAAE,KAAK,CAAC;QAAC,OAAO,EAAE,IAAI,CAAA;KAAE;IA2B/E,oBAAoB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,0BAA0B,CAAC;IA4DxF,sBAAsB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIxF,mBAAmB,CACvB,YAAY,EAAE,MAAM,EACpB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAmC3C,kBAAkB,CACtB,YAAY,EAAE,MAAM,EACpB,MAAM,EAAE,MAAM,GACb,OAAO,CACN;QACE,KAAK,EAAE,MAAM,CAAC;QACd,SAAS,EAAE,MAAM,CAAC;QAClB,iBAAiB,EAAE,MAAM,CAAC;QAC1B,IAAI,EAAE,SAAS,GAAG,SAAS,CAAC;KAC7B,GACD;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CACpB;IAmJD;;;OAGG;IACG,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;CAmB3E;AAED,QAAA,MAAM,sBAAsB,OAAQ,QAAQ,eAAe,MAAM,KAAG,eAEnE,CAAC;AAEF,QAAA,MAAM,oBAAoB,YAEvB;IACD,EAAE,EAAE,QAAQ,CAAC;CACd,KAAG,cAAc,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,KAAK,oBAAoB,CA8B7D,CAAC;AAEF,OAAO,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,CAAC"}