@teikyo/access 0.4.0 → 0.5.0

package/lib/patterns.js

@@ -1,6 +1,9 @@
 import { hasPartsMatch } from '@kokuin/capability';
 /** Whether an access pattern covers a procedure, using the matcher Enkaku applies to access rules. */ export function patternMatches(pattern, procedure) {
-    return hasPartsMatch(procedure, pattern);
+    return hasPartsMatch({
+        expected: procedure,
+        actual: pattern
+    });
 }
 function baseOf(pattern) {
     return pattern.endsWith('/*') ? pattern.slice(0, -2) : pattern;

package/lib/revocation/backend.d.ts

@@ -25,4 +25,7 @@ export type RevocationHookParams = {
  * a revocation are logged through `onError` and surface as `Access denied`, because Enkaku copies
  * error messages to the client.
  */
-export declare function createRevocationHook(params: RevocationHookParams): (token: SignedToken, raw: string) => Promise<void>;
+export declare function createRevocationHook(params: RevocationHookParams): (params: {
+    token: SignedToken;
+    raw: string;
+}) => Promise<void>;

package/lib/revocation/backend.js

@@ -21,8 +21,10 @@ function toRecord(row) {
     return (db)=>{
         return {
             async add (record) {
-                const verified = await verifyToken(record, {
+                const verified = await verifyToken({
+                    token: record,
                     historic: true,
+                    crypto: options.crypto,
                     resolver: options.resolver,
                     cache: options.cache,
                     methods: options.methods
@@ -44,7 +46,7 @@ function toRecord(row) {
                         'jti'
                     ]).doNothing()).execute();
             },
-            async get (jti, issuer) {
+            async get ({ jti, issuer }) {
                 const row = await db.selectFrom('revocations').select([
                     'data',
                     'signature'
@@ -67,12 +69,18 @@ function toRecord(row) {
  * error messages to the client.
  */ export function createRevocationHook(params) {
     // Parameter widened to any signed token so plain invocation tokens can be checked too.
-    return async (token, raw)=>{
+    return async ({ token, raw })=>{
         if (params.requireJTI && token.payload.jti == null) {
             throw new Error('Token without jti rejected');
         }
         try {
-            await createRevocationChecker(params.backend, params.options)(token, raw);
+            await createRevocationChecker({
+                ...params.options,
+                backend: params.backend
+            })({
+                token: token,
+                raw
+            });
         } catch (cause) {
             if (cause instanceof Error && cause.message.startsWith('Token revoked:')) {
                 throw cause;

package/lib/revocation/plugin.d.ts

@@ -6,7 +6,10 @@ import { type RevocationStoreAPI } from './backend.js';
 export type AccessRevocation = {
     backend: RevocationStoreAPI;
     /** Enkaku `verifyToken` hook rejecting revoked signed tokens. */
-    verifyToken: (token: SignedToken, raw: string) => Promise<void>;
+    verifyToken: (params: {
+        token: SignedToken;
+        raw: string;
+    }) => Promise<void>;
 };
 export declare const ACCESS_REVOCATION: import("@sozai/http-server").PluginName<"access:revocation", AccessRevocation>;
 export type AccessRevocationPluginParams = RevocationOptions & {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@teikyo/access",
-  "version": "0.4.0",
+  "version": "0.5.0",
   "description": "Access grants and revocation for Enkaku servers",
   "repository": {
     "type": "git",
@@ -19,20 +19,21 @@
     "lib/*"
   ],
   "dependencies": {
-    "@enkaku/server": "^0.22.2",
-    "@hozon/db": "^0.5.0",
-    "@kokuin/capability": "^0.5.2",
-    "@kokuin/token": "^0.6.2",
-    "@sozai/codec": "^0.4.3",
+    "@enkaku/server": "^0.23.0",
+    "@hozon/db": "^0.5.1",
+    "@kokuin/capability": "^0.7.0",
+    "@kokuin/token": "^0.7.0",
+    "@sozai/codec": "^0.4.4",
     "@sozai/http-server": "^0.2.1",
     "@sozai/log": "^0.4.0",
     "@teikyo/hozon": "^0.4.0"
   },
   "devDependencies": {
-    "@hozon/provider": "^0.3.0",
-    "@types/node": "^26.6.5",
+    "@hozon/provider": "^0.3.1",
+    "@kokuin/crypto": "^0.7.0",
+    "@types/node": "^26.6.6",
     "del-cli": "^8.0.1",
-    "vitest": "5.0.5"
+    "vitest": "5.1.0"
   },
   "engines": {
     "node": ">=24"