@tern-secure/backend 1.2.0-canary.v20251202162458 → 1.2.0-canary.v20251202164451

package/dist/auth/index.js

@@ -742,6 +742,14 @@ var ONE_HOUR_IN_SECONDS = 60 * 60;
 var ONE_MINUTE_IN_SECONDS = 60;
 var ONE_MINUTE_IN_MILLIS = ONE_MINUTE_IN_SECONDS * 1e3;
 var ONE_DAY_IN_MILLIS = 24 * 60 * 60 * 1e3;
+var Attributes = {
+  AuthToken: "__ternsecureAuthToken",
+  AuthSignature: "__ternsecureAuthSignature",
+  AuthStatus: "__ternsecureAuthStatus",
+  AuthReason: "__ternsecureAuthReason",
+  AuthMessage: "__ternsecureAuthMessage",
+  TernSecureUrl: "__ternsecureUrl"
+};
 var Cookies = {
   Session: "__session",
   CsrfToken: "__terncf",
@@ -766,6 +774,46 @@ var QueryParameters = {
   HandshakeReason: "__tern_hs_reason",
   HandshakeNonce: Cookies.HandshakeNonce
 };
+var Headers2 = {
+  Accept: "accept",
+  AppCheckToken: "x-ternsecure-appcheck",
+  AuthMessage: "x-ternsecure-auth-message",
+  Authorization: "authorization",
+  AuthReason: "x-ternsecure-auth-reason",
+  AuthSignature: "x-ternsecure-auth-signature",
+  AuthStatus: "x-ternsecure-auth-status",
+  AuthToken: "x-ternsecure-auth-token",
+  CacheControl: "cache-control",
+  TernSecureRedirectTo: "x-ternsecure-redirect-to",
+  TernSecureRequestData: "x-ternsecure-request-data",
+  TernSecureUrl: "x-ternsecure-url",
+  CloudFrontForwardedProto: "cloudfront-forwarded-proto",
+  ContentType: "content-type",
+  ContentSecurityPolicy: "content-security-policy",
+  ContentSecurityPolicyReportOnly: "content-security-policy-report-only",
+  EnableDebug: "x-ternsecure-debug",
+  ForwardedHost: "x-forwarded-host",
+  ForwardedPort: "x-forwarded-port",
+  ForwardedProto: "x-forwarded-proto",
+  Host: "host",
+  Location: "location",
+  Nonce: "x-nonce",
+  Origin: "origin",
+  Referrer: "referer",
+  SecFetchDest: "sec-fetch-dest",
+  UserAgent: "user-agent",
+  ReportingEndpoints: "reporting-endpoints"
+};
+var ContentTypes = {
+  Json: "application/json"
+};
+var constants = {
+  Attributes,
+  Cookies,
+  Headers: Headers2,
+  ContentTypes,
+  QueryParameters
+};
 
 // src/app-check/generator.ts
 function transformMillisecondsToSecondsString(milliseconds) {
@@ -827,6 +875,9 @@ var AppCheckTokenGenerator = class {
 // src/app-check/serverAppCheck.ts
 var import_redis = require("@upstash/redis");
 
+// src/admin/sessionTernSecure.ts
+var import_errors4 = require("@tern-secure/shared/errors");
+
 // src/utils/admin-init.ts
 var import_firebase_admin = __toESM(require("firebase-admin"));
 var import_app_check = require("firebase-admin/app-check");
@@ -886,6 +937,38 @@ var adminTernSecureDb = import_firebase_admin.default.firestore();
 var TernSecureTenantManager = import_firebase_admin.default.auth().tenantManager();
 var appCheckAdmin = (0, import_app_check.getAppCheck)();
 
+// src/admin/sessionTernSecure.ts
+var DEFAULT_COOKIE_CONFIG = {
+  DEFAULT_EXPIRES_IN_MS: 5 * 60 * 1e3,
+  // 5 minutes
+  DEFAULT_EXPIRES_IN_SECONDS: 5 * 60,
+  REVOKE_REFRESH_TOKENS_ON_SIGNOUT: true
+};
+var DEFAULT_COOKIE_OPTIONS = {
+  httpOnly: true,
+  secure: process.env.NODE_ENV === "production",
+  sameSite: "strict",
+  path: "/"
+};
+
+// src/admin/nextSessionTernSecure.ts
+var import_cookie = require("@tern-secure/shared/cookie");
+var import_errors5 = require("@tern-secure/shared/errors");
+var import_headers = require("next/headers");
+var SESSION_CONSTANTS = {
+  COOKIE_NAME: constants.Cookies.Session,
+  DEFAULT_EXPIRES_IN_MS: 60 * 60 * 24 * 5 * 1e3,
+  // 5 days
+  DEFAULT_EXPIRES_IN_SECONDS: 60 * 60 * 24 * 5,
+  REVOKE_REFRESH_TOKENS_ON_SIGNOUT: true
+};
+
+// src/tokens/ternSecureRequest.ts
+var import_cookie2 = require("cookie");
+
+// src/admin/user.ts
+var import_errors6 = require("@tern-secure/shared/errors");
+
 // src/app-check/verifier.ts
 var import_jose6 = require("jose");
 var getPublicKey = async (header, keyURL) => {