@strivacity/sdk-svelte 4.0.0-beta.0 → 4.0.0-beta.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@strivacity/sdk-svelte",
-  "version": "4.0.0-beta.0",
+  "version": "4.0.0-beta.2",
   "description": "Strivacity Svelte SDK client",
   "license": "MIT",
   "author": "strivacity <opensource@strivacity.com>",
@@ -8,8 +8,9 @@
     "type": "git",
     "url": "https://github.com/Strivacity/sdk-js"
   },
-  "main": "./dist/index.cjs",
-  "types": "./dist/index.d.ts",
+  "sideEffects": false,
+  "main": "./dist/client/index.cjs",
+  "types": "./dist/client/index.d.ts",
   "exports": {
     "./client": {
       "types": "./dist/client/index.d.ts",
@@ -61,7 +62,7 @@
     }
   },
   "dependencies": {
-    "@strivacity/sdk-core": "4.0.0-beta.0"
+    "@strivacity/sdk-core": "4.0.0-beta.2"
   },
   "peerDependencies": {
     "@sveltejs/kit": ">=2",

package/src/client/components.svelte.ts

@@ -4,13 +4,14 @@ import type { IdTokenClaims, RedirectFlow, PopupFlow, EmbeddedFlow, NativeFlow,
 import { STRIVACITY_SDK } from './hooks.svelte';
 
 /**
- * The `StyAuthProvider` component is a Svelte context provider that initializes the Strivacity SDK and provides its state and methods to the rest of the application.
+ * Initializes the Strivacity SDK and stores its reactive state and methods in the Svelte context, so `useStrivacity()` can read them in every descendant component.
+ * Call it during the initialization of a root component (e.g. the root `+layout.svelte`). The SDK is only created in the browser: during SSR `sdk` is `undefined` and `loading` stays `true`.
  *
- * @param {StyAuthProviderProps} props - The properties for the `StyAuthProvider` component.
+ * @param {StyAuthProviderProps} props - The options and the optional session getter used to configure the SDK.
  * @param {SDKInitConfig} props.options - The configuration options for initializing the Strivacity SDK.
- * @param {() => SessionData | null | undefined} [props.session] - Optional getter for session data to initialize/refresh the SDK with.
+ * @param {() => SessionData | null | undefined} [props.session] - Optional getter for the session data the SDK is initialized and kept in sync with.
  *
- * @returns {SDKContext<RedirectFlow | PopupFlow | NativeFlow | EmbeddedFlow>} A Svelte context provider that wraps its children and provides access to the Strivacity SDK.
+ * @returns {SDKContext<RedirectFlow | PopupFlow | NativeFlow | EmbeddedFlow>} The context value that was set, the same object `useStrivacity()` returns.
  */
 export function createStyAuthProvider(props: StyAuthProviderProps): SDKContext<RedirectFlow | PopupFlow | NativeFlow | EmbeddedFlow> {
 	let sdk: SDKInstance;
@@ -111,7 +112,7 @@ export function createStyAuthProvider(props: StyAuthProviderProps): SDKContext<R
 		checkAuthentication: (...args: Parameters<typeof sdk.checkAuthentication>) => sdk.checkAuthentication(...args),
 		tokenExchange: (...args: Parameters<typeof sdk.tokenExchange>) => sdk.tokenExchange(...args),
 		handleCallback: (...args: Parameters<typeof sdk.handleCallback>) => sdk.handleCallback(...args),
-		refresh: () => sdk.refresh(),
+		refresh: (...args: Parameters<typeof sdk.refresh>) => sdk.refresh(...args),
 		revoke: () => sdk.revoke(),
 		logout: (...args: Parameters<typeof sdk.logout>) => sdk.logout(...args),
 		login: (...args: Parameters<typeof sdk.login>) => sdk.login(...args),

package/src/client/hooks.svelte.ts

@@ -1,9 +1,7 @@
 import { getContext, setContext, onMount, onDestroy } from 'svelte';
-import { SvelteURL } from 'svelte/reactivity';
-import type { RedirectFlow, PopupFlow, EmbeddedFlow, NativeFlow, NativeParams, NativeFlowState, NativeFlowMessage } from '@strivacity/sdk-core/types';
+import type { RedirectFlow, PopupFlow, EmbeddedFlow, NativeFlow } from '@strivacity/sdk-core/types';
 import type { LoginContext, SDKContext, UseNativeLoginOptions } from '../types';
-import { FallbackError } from '@strivacity/sdk-core/utils/errors';
-import { unflattenObject } from '@strivacity/sdk-core/utils';
+import { createNativeLoginController } from '@strivacity/sdk-core/utils';
 
 export const STRIVACITY_SDK = Symbol('strivacity-sdk');
 export const STRIVACITY_LOGIN_CONTEXT = Symbol('strivacity-login-context');
@@ -51,149 +49,21 @@ export const useNativeLoginContext = (): LoginContext => {
  * @throws {Error} - If the Strivacity SDK context is not found.
  */
 export function useNativeLogin(options: UseNativeLoginOptions = {}): LoginContext {
-	const abortController = new AbortController();
 	const ctx = useStrivacity<NativeFlow>();
+	const controller = createNativeLoginController(() => ctx.sdk, options);
+	let snapshot = $state.raw(controller.getSnapshot());
 
-	let loading = $state<boolean>(true);
-	let forms = $state<Record<string, Record<string, unknown>>>({});
-	let messages = $state<Record<string, Record<string, NativeFlowMessage>>>({});
-	let state = $state<Partial<NativeFlowState>>({});
+	const loading = $derived(snapshot.loading);
+	const forms = $derived(snapshot.forms);
+	const messages = $derived(snapshot.messages);
+	const state = $derived(snapshot.state);
 
-	onMount(async () => {
-		await ctx.init();
-
-		try {
-			await startSession(options.params);
-		} catch (error) {
-			if (error instanceof DOMException && error.name === 'AbortError') {
-				return;
-			}
-
-			ctx.sdk.logging?.error('Error fetching authorization URI', error as Error);
-			void options.onError?.(error as Error);
-			loading = false;
-		}
-	});
-
-	onDestroy(() => {
-		abortController.abort();
+	const unsubscribe = controller.subscribe((next) => {
+		snapshot = next;
 	});
 
-	async function startSession(loginParams: NativeParams = {}) {
-		try {
-			loading = true;
-
-			const nextState = await ctx.sdk.startSession(loginParams);
-
-			if (nextState) {
-				handleResponse(nextState);
-			}
-		} catch (error) {
-			if (error instanceof FallbackError) {
-				ctx.sdk.logging?.error('Fallback error occurred', error);
-				void options.onFallback?.(error);
-			} else {
-				ctx.sdk.logging?.error('Error starting session', error as Error);
-				void options.onError?.(error as Error);
-			}
-		}
-	}
-
-	function handleResponse(nextState: Partial<NativeFlowState>) {
-		if (ctx.sdk.session) {
-			return void options.onLogin?.(ctx.sdk.session);
-		}
-
-		const newState: NativeFlowState = {
-			hostedUrl: nextState?.hostedUrl ?? state.hostedUrl,
-			finalizeUrl: nextState?.finalizeUrl ?? state.finalizeUrl,
-			screen: nextState?.screen ?? state.screen,
-			forms: nextState?.forms ?? state.forms,
-			layout: nextState?.layout ?? state.layout,
-			messages: nextState?.messages ?? {},
-			branding: nextState?.branding ?? state.branding,
-		};
-
-		if (newState.screen !== state.screen) {
-			forms = {};
-			messages = {};
-
-			for (const form of newState.forms ?? []) {
-				forms[form.id] = {};
-				messages[form.id] = {};
-			}
-		} else {
-			ctx.sdk.logging?.info(`Updating screen: ${newState.screen}`);
-		}
-
-		for (const formId of Object.keys(newState.messages ?? {})) {
-			if (formId === 'global') {
-				// eslint-disable-next-line @typescript-eslint/no-non-null-asserted-optional-chain
-				void options.onGlobalMessage?.(newState.messages?.global!);
-			} else {
-				messages[formId] = newState.messages![formId] ?? {};
-			}
-		}
-
-		state = newState;
-
-		if (!newState.finalizeUrl) {
-			loading = false;
-		}
-	}
-
-	function triggerFallback(message?: string) {
-		ctx.sdk.logging?.warn(message ? `Triggering fallback due to: ${message}` : 'Triggering fallback');
-
-		if (!state.hostedUrl) {
-			const error = new Error('No hosted URL provided');
-			ctx.sdk.logging?.error('Fallback error', error);
-			throw error;
-		}
-
-		void options.onFallback?.(new FallbackError(new SvelteURL(state.hostedUrl)));
-	}
-
-	function triggerClose() {
-		ctx.sdk.logging?.debug('Triggering close');
-		void options.onClose?.();
-	}
-
-	async function submitForm(formId: string, customBody?: Record<string, unknown>) {
-		try {
-			loading = true;
-
-			const nextState = await ctx.sdk.submitForm(formId, customBody ?? unflattenObject(forms[formId] ?? {}));
-
-			if (nextState) {
-				handleResponse(nextState);
-			}
-		} catch (error) {
-			if (error instanceof FallbackError) {
-				ctx.sdk.logging?.error('Fallback error occurred', error);
-				void options.onFallback?.(error);
-			} else {
-				ctx.sdk.logging?.error('Error submitting form', error as Error);
-				void options.onError?.(error as Error);
-			}
-		}
-	}
-
-	function setFormValue(formId: string, widgetId: string, value: unknown) {
-		if (forms[formId] === undefined) {
-			forms[formId] = {};
-		}
-
-		forms[formId][widgetId] = value === '' ? null : value;
-	}
-
-	function setMessage(formId: string, widgetId: string, value: NativeFlowMessage) {
-		if (messages[formId] === undefined) {
-			messages[formId] = {};
-		}
-
-		messages[formId][widgetId] = value;
-	}
+	onMount(() => controller.start());
+	onDestroy(unsubscribe);
 
 	const context: LoginContext = {
 		get loading() {
@@ -208,11 +78,11 @@ export function useNativeLogin(options: UseNativeLoginOptions = {}): LoginContex
 		get state() {
 			return state;
 		},
-		triggerFallback,
-		triggerClose,
-		submitForm,
-		setFormValue,
-		setMessage,
+		triggerFallback: controller.triggerFallback,
+		triggerClose: controller.triggerClose,
+		submitForm: controller.submitForm,
+		setFormValue: controller.setFormValue,
+		setMessage: controller.setMessage,
 	};
 
 	setContext(STRIVACITY_LOGIN_CONTEXT, context);

package/src/client/types.ts

@@ -5,19 +5,19 @@ import type {
 	NativeFlow,
 	EmbeddedFlow,
 	initFlow,
-	NativeParams,
 	NativeFlowState,
 	SessionData,
 	NativeFlowMessage,
 	SDKInitConfig,
+	NativeLoginControllerOptions,
 } from '@strivacity/sdk-core';
-import type { FallbackError } from '@strivacity/sdk-core/utils';
 
 export * from '@strivacity/sdk-core/types';
 
 export type SDKContext<Flow extends RedirectFlow | PopupFlow | NativeFlow | EmbeddedFlow> = {
 	/**
 	 * The underlying Strivacity SDK flow instance.
+	 * It is created in the browser only, so during SSR it is `undefined` and the SDK methods of this context must not be called.
 	 */
 	readonly sdk: Flow;
 
@@ -32,7 +32,7 @@ export type SDKContext<Flow extends RedirectFlow | PopupFlow | NativeFlow | Embe
 	readonly language: string;
 
 	/**
-	 * A boolean ref indicating whether the user is authenticated.
+	 * Whether the user is authenticated.
 	 */
 	readonly isAuthenticated: boolean;
 
@@ -52,7 +52,7 @@ export type SDKContext<Flow extends RedirectFlow | PopupFlow | NativeFlow | Embe
 	readonly refreshToken: string | null;
 
 	/**
-	 * A boolean ref indicating whether the access token has expired.
+	 * Whether the access token has expired.
 	 */
 	readonly accessTokenExpired: boolean;
 
@@ -155,10 +155,10 @@ export type LoginContext = {
 	submitForm: (formId: string, customBody?: Record<string, unknown>) => Promise<void>;
 
 	/**
-	 * Redirects to the hosted login UI.
+	 * Hands the flow over to the hosted login UI: calls `onFallback` with a `FallbackError` carrying the hosted URL, so the app can redirect there.
 	 *
-	 * @param message - Optional message to log before redirecting.
-	 * @returns A promise that resolves when the redirect is initiated.
+	 * @param message - Optional message to log as the fallback reason.
+	 * @throws {Error} When the IdP has not provided a hosted URL yet.
 	 */
 	triggerFallback: (message?: string) => void;
 
@@ -181,19 +181,19 @@ export type LoginContext = {
 	 *
 	 * @param formId - The ID of the form containing the widget.
 	 * @param widgetId - The ID of the widget to set the message for.
-	 * @param value - The message to set, which can be a string or a structured NativeFlowMessage.
+	 * @param value - The message to set, e.g. `{ type: 'error', text: 'Required' }`.
 	 */
 	setMessage: (formId: string, widgetId: string, value: NativeFlowMessage) => void;
 };
 
 export type StyAuthProviderProps = {
 	/**
-	 * The options to be used by the AuthProvider. These options are passed to the SDK during initialization.
+	 * The options passed to `initFlow` when `createStyAuthProvider` creates the SDK.
 	 */
 	options: SDKInitConfig;
 
 	/**
-	 * A getter returning the session data to be used by the AuthProvider.
+	 * A getter returning the session data the SDK is initialized with, typically loaded on the server for server-managed sessions.
 	 *
 	 * Called reactively (inside a Svelte effect) whenever the returned value changes, so it should read from a
 	 * reactive source (e.g. a `$props()` field) rather than a plain snapshot. If not provided, the AuthProvider
@@ -203,97 +203,11 @@ export type StyAuthProviderProps = {
 };
 
 /**
- * The reactive context value exposed to native login flow widgets via `useNativeLoginContext()` (key: `nativeFlowContext`).
+ * The reactive context value exposed to native login flow widgets via `useNativeLoginContext()`.
  */
-export type NativeFlowContextValue = {
-	/**
-	 * Whether a form submission or session initialization is in progress.
-	 */
-	loading: boolean;
-
-	/**
-	 * Current form field values, keyed by form ID then widget ID.
-	 */
-	forms: Record<string, Record<string, unknown>>;
-
-	/**
-	 * Current validation and info messages, keyed by form ID then widget ID.
-	 */
-	messages: Record<string, Record<string, NativeFlowMessage>>;
-
-	/**
-	 * The current login flow state returned by the backend.
-	 */
-	state: Partial<NativeFlowState>;
-
-	/**
-	 * Submits the form with the given ID and advances the login flow.
-	 *
-	 * @param formId - The ID of the form to submit.
-	 * @param customBody - Optional custom body to send with the form submission. If not provided, the current form values will be used.
-	 * @returns A promise that resolves when the form submission is complete.
-	 */
-	submitForm: (formId: string, customBody?: Record<string, unknown>) => Promise<void>;
-
-	/**
-	 * Redirects to the hosted login UI.
-	 *
-	 * @param message - Optional message to log before redirecting.
-	 */
-	triggerFallback: (message?: string) => void;
-
-	/**
-	 * Signals that the login flow was closed by the user.
-	 */
-	triggerClose: () => void;
+export type NativeFlowContextValue = LoginContext;
 
-	/**
-	 * Updates a single field value within a form before submission.
-	 *
-	 * @param formId - The ID of the form containing the field.
-	 * @param widgetId - The ID of the widget (field) to update.
-	 * @param value - The new value to set for the field.
-	 */
-	setFormValue: (formId: string, widgetId: string, value: unknown) => void;
-
-	/**
-	 * Sets a validation or info message on a specific widget.
-	 *
-	 * @param formId - The ID of the form containing the widget.
-	 * @param widgetId - The ID of the widget to set the message for.
-	 * @param value - The message to set.
-	 */
-	setMessage: (formId: string, widgetId: string, value: NativeFlowMessage) => void;
-};
-
-export type UseNativeLoginOptions = {
-	/**
-	 * Optional parameters to be passed to the login session request. These parameters will be sent to the `authorizationUri` endpoint.
-	 */
-	params?: NativeParams;
-
-	/**
-	 * Called when the user successfully completes the login flow.
-	 */
-	onLogin?: (session: SessionData) => void | Promise<void>;
-
-	/**
-	 * Called when the fallback flow is triggered, typically due to an error or unsupported environment. Receives a `FallbackError` object containing the hosted URL to redirect to.
-	 */
-	onFallback?: (error: FallbackError) => void | Promise<void>;
-
-	/**
-	 * Called when the login flow is closed by the user.
-	 */
-	onClose?: () => void | Promise<void>;
-
-	/**
-	 * Called when an error occurs during the login session initialization or flow.
-	 */
-	onError?: (error: Error) => void | Promise<void>;
-
-	/**
-	 * Called when a global message is received during the login flow.
-	 */
-	onGlobalMessage?: (message: NativeFlowMessage) => void | Promise<void>;
-};
+/**
+ * Callbacks and parameters of the native login flow. See `NativeLoginControllerOptions` in `@strivacity/sdk-core`.
+ */
+export type UseNativeLoginOptions = NativeLoginControllerOptions;

package/src/server/sdk.ts

@@ -2,9 +2,37 @@ import type { RequestEvent, Handle } from '@sveltejs/kit';
 import type { SessionData } from '@strivacity/sdk-core/types';
 import type { SvelteKitServerSDK, SvelteKitServerSDKInitConfig } from './types';
 import { redirect } from '@sveltejs/kit';
-import { isSessionExpired } from '@strivacity/sdk-core/utils';
+import { flushSetCookies } from '@strivacity/sdk-core/utils';
 import { createBaseServerSDK } from '@strivacity/sdk-core/server';
 
+const canonicalEvents = new WeakMap<object, RequestEvent>();
+
+/**
+ * SvelteKit hands shallow copies of the request event to `load`, `resolve()` and each `sequence()` handler, while the core tracks queued `Set-Cookie` headers per event object.
+ * Map every copy back to the first event seen for the request (keyed by the `locals` object, which all copies share) so cookies queued from `load` / `+server.ts` are flushed by `handle`.
+ *
+ * @template T - The type of the request event, typically `RequestEvent` or `undefined`.
+ * @param event - The request event to canonicalize.
+ * @returns The canonical request event, which may be the same as the input or a previously seen event.
+ */
+function canonical<T extends RequestEvent | undefined>(event: T): T {
+	const key = event?.locals;
+
+	if (!key) {
+		return event;
+	}
+
+	const known = canonicalEvents.get(key);
+
+	if (known) {
+		return known as T;
+	}
+
+	canonicalEvents.set(key, event);
+
+	return event;
+}
+
 /**
  * Creates the Strivacity server SDK for SvelteKit: session management, auth route handlers, and the `handle` hook used in `hooks.server.ts`.
  *
@@ -19,16 +47,11 @@ export function createServerSDK(initConfig: SvelteKitServerSDKInitConfig): Svelt
 		initConfig,
 	);
 
-	async function requireSession(event: RequestEvent, guardOpts: { returnTo?: string } = {}): Promise<SessionData> {
-		let session = await base.getSession(event);
-
-		if (session && isSessionExpired(session) && session.refresh_token) {
-			try {
-				session = await base.refreshSession(event);
-			} catch {
-				session = null;
-			}
-		}
+	// NOTE: SvelteKit runs the layout and page `load` functions concurrently, each with its own event copy: the canonical event makes
+	// them share the core's once-per-request refresh (`getSession`), and `handle` writes the rotated cookie.
+	async function requireSession(requestEvent: RequestEvent, guardOpts: { returnTo?: string } = {}): Promise<SessionData> {
+		const event = canonical(requestEvent);
+		const session = await base.getSession(event);
 
 		if (!session) {
 			const loginUrl = ['embedded', 'native'].includes(base.options.mode) ? base.options.loginUri : `${base.options.authUrlPrefix}/login`;
@@ -46,9 +69,10 @@ export function createServerSDK(initConfig: SvelteKitServerSDKInitConfig): Svelt
 	}
 
 	const handle: Handle = async ({ event, resolve }) => {
-		const response = await base.handler(event);
+		const requestEvent = canonical(event);
+		const response = await base.handler(requestEvent);
 
-		return response ?? resolve(event);
+		return response ?? flushSetCookies(requestEvent, await resolve(event));
 	};
 
 	return {
@@ -57,21 +81,21 @@ export function createServerSDK(initConfig: SvelteKitServerSDKInitConfig): Svelt
 		},
 		handle,
 		requireSession,
-		getSession: (event) => base.getSession(event),
-		updateSession: (session, event) => base.updateSession(session, event),
-		refreshSession: (event) => base.refreshSession(event),
-		revokeSession: (event) => base.revokeSession(event),
+		getSession: (event, params) => base.getSession(canonical(event), params),
+		updateSession: (session, event) => base.updateSession(session, canonical(event)),
+		refreshSession: (event) => base.refreshSession(canonical(event)),
+		revokeSession: (event) => base.revokeSession(canonical(event)),
 		getEntrySession: (entryUrl) => base.getEntrySession(entryUrl),
-		completeLogin: (params, event) => base.completeLogin(params, event),
-		logout: (postLogoutRedirectUri, event) => base.logout(postLogoutRedirectUri, event),
-		handleLogin: (event) => base.handleLogin(event),
-		handleRegister: (event) => base.handleRegister(event),
-		handleCallback: (event) => base.handleCallback(event),
-		handleRefresh: (event) => base.handleRefresh(event),
-		handleRevoke: (event) => base.handleRevoke(event),
-		handleEntry: (event) => base.handleEntry(event),
-		handleLogout: (event) => base.handleLogout(event),
-		handleBackChannelLogout: (event) => base.handleBackChannelLogout(event),
-		handler: (event) => base.handler(event),
+		completeLogin: (params, event) => base.completeLogin(params, canonical(event)),
+		logout: (postLogoutRedirectUri, event) => base.logout(postLogoutRedirectUri, canonical(event)),
+		handleLogin: (event) => base.handleLogin(canonical(event)),
+		handleRegister: (event) => base.handleRegister(canonical(event)),
+		handleCallback: (event) => base.handleCallback(canonical(event)),
+		handleRefresh: (event) => base.handleRefresh(canonical(event)),
+		handleRevoke: (event) => base.handleRevoke(canonical(event)),
+		handleEntry: (event) => base.handleEntry(canonical(event)),
+		handleLogout: (event) => base.handleLogout(canonical(event)),
+		handleBackChannelLogout: (event) => base.handleBackChannelLogout(canonical(event)),
+		handler: (event) => base.handler(canonical(event)),
 	};
 }

package/testing/tests/components.spec.ts

@@ -62,7 +62,7 @@ describe('createStyAuthProvider', () => {
 		['checkAuthentication', [{ autoRefresh: false }], true],
 		['tokenExchange', [{ code: 'abc' }], undefined],
 		['handleCallback', ['https://brandtegrity.io/callback?code=abc'], undefined],
-		['refresh', [], undefined],
+		['refresh', [{ returnTo: '/orders' }], undefined],
 		['revoke', [], undefined],
 		['logout', [{ postLogoutRedirectUri: 'https://brandtegrity.io' }], undefined],
 		['login', [{ scopes: ['openid'] }], undefined],

package/testing/tests/hooks.spec.ts

@@ -112,7 +112,7 @@ describe('useNativeLogin', () => {
 	});
 
 	test('calls onLogin and leaves the tracked state untouched when the sdk already has a session', async () => {
-		const session = { access_token: 'access-token' } as unknown as SessionData;
+		const session = { access_token: 'access-token', expires_at: Math.floor(Date.now() / 1000) + 3600 } as unknown as SessionData;
 		const sdk = createMockFlow<NativeFlow>({ session });
 		vi.mocked(sdk.startSession).mockResolvedValue({ screen: 'identifier' });
 		const onLogin = vi.fn();

package/testing/tests/index.spec.ts

@@ -35,6 +35,7 @@ describe('client', () => {
 			'buildEndSessionUrl',
 			'createDefaultLogging',
 			'createHttpClient',
+			'createNativeLoginController',
 			'createSession',
 			'createState',
 			'createWebAuthnCredential',
@@ -72,6 +73,7 @@ describe('client', () => {
 			'throwHttpError',
 			'throwTokenEndpointError',
 			'timestamp',
+			'toClientSession',
 			'toSafeRedirect',
 			'unflattenObject',
 			'verifyIdToken',
@@ -94,7 +96,10 @@ describe('client', () => {
 			'createSessionIdCookieStorage',
 			'createSessionStorage',
 			'createWorkerStorage',
+			'deleteEncryptedCookie',
 			'handleWorkerStorageRequests',
+			'readEncryptedCookie',
+			'writeEncryptedCookie',
 			'AlgorithmTypeList',
 			'GrantTypeList',
 			'ResponseModeList',
@@ -131,6 +136,7 @@ describe('server', () => {
 			'buildEndSessionUrl',
 			'createDefaultLogging',
 			'createHttpClient',
+			'createNativeLoginController',
 			'createSession',
 			'createState',
 			'createWebAuthnCredential',
@@ -168,6 +174,7 @@ describe('server', () => {
 			'throwHttpError',
 			'throwTokenEndpointError',
 			'timestamp',
+			'toClientSession',
 			'toSafeRedirect',
 			'unflattenObject',
 			'verifyIdToken',
@@ -185,7 +192,10 @@ describe('server', () => {
 			'createServerStateStorage',
 			'createSessionStorage',
 			'createWorkerStorage',
+			'deleteEncryptedCookie',
 			'handleWorkerStorageRequests',
+			'readEncryptedCookie',
+			'writeEncryptedCookie',
 			'AlgorithmTypeList',
 			'GrantTypeList',
 			'ResponseModeList',