@thunderid/express 0.3.0 → 0.4.0

package/dist/ThunderIDExpressClient.d.ts

@@ -23,6 +23,12 @@ declare class ThunderIDExpressClient<T extends ExpressClientConfig = ExpressClie
     constructor();
     initialize(config: T, storage?: Storage): Promise<boolean>;
     get expressConfig(): ExpressClientConfig | undefined;
+    /**
+     * Resolves the session cookie name for this client instance, honoring an
+     * explicit `sessionCookie.name` override before falling back to the
+     * `vendor`-derived default (which itself defaults to `'thunderid'`).
+     */
+    getSessionCookieName(): string;
     getUserFromRequest(req: express.Request): Promise<User | undefined>;
     signIn(req: express.Request, res: express.Response, next: express.NextFunction, signInConfig?: Record<string, string | boolean>): Promise<TokenResponse>;
     signOut(userId?: string): Promise<string>;

package/dist/ThunderIDExpressClient.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ThunderIDExpressClient.d.ts","sourceRoot":"","sources":["../src/ThunderIDExpressClient.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAC,mBAAmB,EAA0B,OAAO,EAAE,aAAa,EAAE,IAAI,EAAC,MAAM,iBAAiB,CAAC;AAC1G,OAAO,OAAO,MAAM,SAAS,CAAC;AAG9B,OAAO,EAAC,mBAAmB,EAAC,MAAM,iBAAiB,CAAC;AAGpD,cAAM,sBAAsB,CAAC,CAAC,SAAS,mBAAmB,GAAG,mBAAmB,CAAE,SAAQ,mBAAmB,CAAC,CAAC,CAAC;IAC9G,OAAO,CAAC,cAAc,CAAkC;;IAMlC,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,OAAO,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAKhF,IAAW,aAAa,IAAI,mBAAmB,GAAG,SAAS,CAE1D;IAEY,kBAAkB,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC,IAAI,GAAG,SAAS,CAAC;IAK1D,MAAM,CAC1B,GAAG,EAAE,OAAO,CAAC,OAAO,EACpB,GAAG,EAAE,OAAO,CAAC,QAAQ,EACrB,IAAI,EAAE,OAAO,CAAC,YAAY,EAC1B,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,GAC9C,OAAO,CAAC,aAAa,CAAC;IAuDH,OAAO,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;CAGhE;AAED,eAAe,sBAAsB,CAAC"}
+{"version":3,"file":"ThunderIDExpressClient.d.ts","sourceRoot":"","sources":["../src/ThunderIDExpressClient.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EACL,mBAAmB,EAEnB,OAAO,EACP,aAAa,EACb,IAAI,EAEL,MAAM,iBAAiB,CAAC;AACzB,OAAO,OAAO,MAAM,SAAS,CAAC;AAG9B,OAAO,EAAC,mBAAmB,EAAC,MAAM,iBAAiB,CAAC;AAGpD,cAAM,sBAAsB,CAAC,CAAC,SAAS,mBAAmB,GAAG,mBAAmB,CAAE,SAAQ,mBAAmB,CAAC,CAAC,CAAC;IAC9G,OAAO,CAAC,cAAc,CAAkC;;IAMlC,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,OAAO,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAKhF,IAAW,aAAa,IAAI,mBAAmB,GAAG,SAAS,CAE1D;IAED;;;;OAIG;IACI,oBAAoB,IAAI,MAAM;IAOxB,kBAAkB,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC,IAAI,GAAG,SAAS,CAAC;IAK1D,MAAM,CAC1B,GAAG,EAAE,OAAO,CAAC,OAAO,EACpB,GAAG,EAAE,OAAO,CAAC,QAAQ,EACrB,IAAI,EAAE,OAAO,CAAC,YAAY,EAC1B,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,GAC9C,OAAO,CAAC,aAAa,CAAC;IAwDH,OAAO,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;CAGhE;AAED,eAAe,sBAAsB,CAAC"}

package/dist/cjs/index.cjs

@@ -44,8 +44,6 @@ uuid = __toESM(uuid);
 * specific language governing permissions and limitations
 * under the License.
 */
-/** Session cookie name used across the Express SDK. */
-const SESSION_COOKIE_NAME = "THUNDERID_SESSION_ID";
 /** Default cookie configuration values. */
 const CookieConfig = {
 	defaultExpirySeconds: 86400,
@@ -97,18 +95,27 @@ var ThunderIDExpressClient = class extends __thunderid_node.ThunderIDNodeClient
 	get expressConfig() {
 		return this._expressConfig;
 	}
+	/**
+	* Resolves the session cookie name for this client instance, honoring an
+	* explicit `sessionCookie.name` override before falling back to the
+	* `vendor`-derived default (which itself defaults to `'thunderid'`).
+	*/
+	getSessionCookieName() {
+		return __thunderid_node.CookieConfig.resolveSessionCookieName(this._expressConfig?.vendor, this._expressConfig?.sessionCookie?.name);
+	}
 	async getUserFromRequest(req) {
-		const sessionId = req.cookies?.[SESSION_COOKIE_NAME];
+		const sessionId = req.cookies?.[this.getSessionCookieName()];
 		return this.getUser(sessionId);
 	}
 	async signIn(req, res, next, signInConfig) {
 		if (expressUtils_default(req.originalUrl)) return Promise.reject(new __thunderid_node.ThunderIDAuthException("EXPRESS-CLIENT-SI-IV01", "Invalid login request URL", "Login request contains an error query parameter in the URL"));
-		let userId = req.cookies?.[SESSION_COOKIE_NAME];
+		const cookieName = this.getSessionCookieName();
+		let userId = req.cookies?.[cookieName];
 		if (!userId) userId = (0, uuid.v4)();
 		const sc = this._expressConfig?.sessionCookie;
 		const authRedirectCallback = (url) => {
 			if (!url) return;
-			res.cookie(SESSION_COOKIE_NAME, userId, {
+			res.cookie(cookieName, userId, {
 				httpOnly: sc?.httpOnly ?? CookieConfig_default.defaultHttpOnly,
 				maxAge: (sc?.expiryTime ?? CookieConfig_default.defaultExpirySeconds) * 1e3,
 				sameSite: sc?.sameSite ?? CookieConfig_default.defaultSameSite,
@@ -241,7 +248,8 @@ const handleSignOut = () => {
 			onSignOut(res);
 			return;
 		}
-		const sessionId = req.cookies?.[SESSION_COOKIE_NAME];
+		const cookieName = client.getSessionCookieName();
+		const sessionId = req.cookies?.[cookieName];
 		if (!sessionId) {
 			onError(res, new __thunderid_node.ThunderIDRuntimeError("No cookie found in the request", "EXPRESS-AUTH_MW-LOGOUT-NF01", "express"));
 			return;
@@ -249,7 +257,7 @@ const handleSignOut = () => {
 		try {
 			const signOutURL = await client.signOut(sessionId);
 			if (signOutURL) {
-				res.cookie(SESSION_COOKIE_NAME, null, { maxAge: 0 });
+				res.cookie(cookieName, null, { maxAge: 0 });
 				res.redirect(signOutURL);
 			}
 		} catch (e) {
@@ -271,7 +279,7 @@ const handleSignOut = () => {
 const protect = (onUnauthenticated) => {
 	return async (req, res, next) => {
 		const client = req.thunderIDAuth;
-		const sessionId = req.cookies?.[SESSION_COOKIE_NAME];
+		const sessionId = req.cookies?.[client?.getSessionCookieName() ?? ""];
 		const reject = () => {
 			if (onUnauthenticated) onUnauthenticated(res);
 			else res.status(401).end();
@@ -376,7 +384,6 @@ var flow_default = handleFlow;
 
 //#endregion
 exports.CookieConfig = CookieConfig_default;
-exports.SESSION_COOKIE_NAME = SESSION_COOKIE_NAME;
 exports.ThunderIDExpressClient = ThunderIDExpressClient_default;
 exports.handleFlow = flow_default;
 exports.handleSignIn = handleSignIn;

package/dist/constants/CookieConfig.d.ts

@@ -15,8 +15,6 @@
  * specific language governing permissions and limitations
  * under the License.
  */
-/** Session cookie name used across the Express SDK. */
-export declare const SESSION_COOKIE_NAME = "THUNDERID_SESSION_ID";
 /** Default cookie configuration values. */
 declare const CookieConfig: {
     defaultExpirySeconds: number;

package/dist/constants/CookieConfig.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"CookieConfig.d.ts","sourceRoot":"","sources":["../../src/constants/CookieConfig.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,uDAAuD;AACvD,eAAO,MAAM,mBAAmB,yBAAyB,CAAC;AAE1D,2CAA2C;AAC3C,QAAA,MAAM,YAAY;;;;;CAKjB,CAAC;AAEF,eAAe,YAAY,CAAC"}
+{"version":3,"file":"CookieConfig.d.ts","sourceRoot":"","sources":["../../src/constants/CookieConfig.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,2CAA2C;AAC3C,QAAA,MAAM,YAAY;;;;;CAKjB,CAAC;AAEF,eAAe,YAAY,CAAC"}

package/dist/edge/index.js

@@ -1,4 +1,4 @@
-import { ThunderIDAuthException, ThunderIDNodeClient, ThunderIDRuntimeError, executeEmbeddedSignInFlow, logger } from "@thunderid/node";
+import { CookieConfig, ThunderIDAuthException, ThunderIDNodeClient, ThunderIDRuntimeError, executeEmbeddedSignInFlow, logger } from "@thunderid/node";
 import { v4 } from "uuid";
 
 export * from "@thunderid/node"
@@ -21,16 +21,14 @@ export * from "@thunderid/node"
 * specific language governing permissions and limitations
 * under the License.
 */
-/** Session cookie name used across the Express SDK. */
-const SESSION_COOKIE_NAME = "THUNDERID_SESSION_ID";
 /** Default cookie configuration values. */
-const CookieConfig = {
+const CookieConfig$1 = {
 	defaultExpirySeconds: 86400,
 	defaultHttpOnly: true,
 	defaultSameSite: "lax",
 	defaultSecure: false
 };
-var CookieConfig_default = CookieConfig;
+var CookieConfig_default = CookieConfig$1;
 
 //#endregion
 //#region src/utils/expressUtils.ts
@@ -74,18 +72,27 @@ var ThunderIDExpressClient = class extends ThunderIDNodeClient {
 	get expressConfig() {
 		return this._expressConfig;
 	}
+	/**
+	* Resolves the session cookie name for this client instance, honoring an
+	* explicit `sessionCookie.name` override before falling back to the
+	* `vendor`-derived default (which itself defaults to `'thunderid'`).
+	*/
+	getSessionCookieName() {
+		return CookieConfig.resolveSessionCookieName(this._expressConfig?.vendor, this._expressConfig?.sessionCookie?.name);
+	}
 	async getUserFromRequest(req) {
-		const sessionId = req.cookies?.[SESSION_COOKIE_NAME];
+		const sessionId = req.cookies?.[this.getSessionCookieName()];
 		return this.getUser(sessionId);
 	}
 	async signIn(req, res, next, signInConfig) {
 		if (expressUtils_default(req.originalUrl)) return Promise.reject(new ThunderIDAuthException("EXPRESS-CLIENT-SI-IV01", "Invalid login request URL", "Login request contains an error query parameter in the URL"));
-		let userId = req.cookies?.[SESSION_COOKIE_NAME];
+		const cookieName = this.getSessionCookieName();
+		let userId = req.cookies?.[cookieName];
 		if (!userId) userId = v4();
 		const sc = this._expressConfig?.sessionCookie;
 		const authRedirectCallback = (url) => {
 			if (!url) return;
-			res.cookie(SESSION_COOKIE_NAME, userId, {
+			res.cookie(cookieName, userId, {
 				httpOnly: sc?.httpOnly ?? CookieConfig_default.defaultHttpOnly,
 				maxAge: (sc?.expiryTime ?? CookieConfig_default.defaultExpirySeconds) * 1e3,
 				sameSite: sc?.sameSite ?? CookieConfig_default.defaultSameSite,
@@ -218,7 +225,8 @@ const handleSignOut = () => {
 			onSignOut(res);
 			return;
 		}
-		const sessionId = req.cookies?.[SESSION_COOKIE_NAME];
+		const cookieName = client.getSessionCookieName();
+		const sessionId = req.cookies?.[cookieName];
 		if (!sessionId) {
 			onError(res, new ThunderIDRuntimeError("No cookie found in the request", "EXPRESS-AUTH_MW-LOGOUT-NF01", "express"));
 			return;
@@ -226,7 +234,7 @@ const handleSignOut = () => {
 		try {
 			const signOutURL = await client.signOut(sessionId);
 			if (signOutURL) {
-				res.cookie(SESSION_COOKIE_NAME, null, { maxAge: 0 });
+				res.cookie(cookieName, null, { maxAge: 0 });
 				res.redirect(signOutURL);
 			}
 		} catch (e) {
@@ -248,7 +256,7 @@ const handleSignOut = () => {
 const protect = (onUnauthenticated) => {
 	return async (req, res, next) => {
 		const client = req.thunderIDAuth;
-		const sessionId = req.cookies?.[SESSION_COOKIE_NAME];
+		const sessionId = req.cookies?.[client?.getSessionCookieName() ?? ""];
 		const reject = () => {
 			if (onUnauthenticated) onUnauthenticated(res);
 			else res.status(401).end();
@@ -352,4 +360,4 @@ const handleFlow = () => {
 var flow_default = handleFlow;
 
 //#endregion
-export { CookieConfig_default as CookieConfig, SESSION_COOKIE_NAME, ThunderIDExpressClient_default as ThunderIDExpressClient, flow_default as handleFlow, handleSignIn, handleSignOut, protect_default as protect, thunderID };
+export { CookieConfig_default as CookieConfig, ThunderIDExpressClient_default as ThunderIDExpressClient, flow_default as handleFlow, handleSignIn, handleSignOut, protect_default as protect, thunderID };

package/dist/index.d.ts

@@ -20,6 +20,6 @@ export { thunderID, handleSignIn, handleSignOut } from './middleware/authenticat
 export { default as protect } from './middleware/protect';
 export { default as handleFlow } from './middleware/flow';
 export type { ExpressClientConfig, ThunderIDExpressConfig, StrictExpressClientConfig } from './models/config';
-export { default as CookieConfig, SESSION_COOKIE_NAME } from './constants/CookieConfig';
+export { default as CookieConfig } from './constants/CookieConfig';
 export * from '@thunderid/node';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAGH,OAAO,EAAC,OAAO,IAAI,sBAAsB,EAAC,MAAM,0BAA0B,CAAC;AAG3E,OAAO,EAAC,SAAS,EAAE,YAAY,EAAE,aAAa,EAAC,MAAM,6BAA6B,CAAC;AACnF,OAAO,EAAC,OAAO,IAAI,OAAO,EAAC,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAC,OAAO,IAAI,UAAU,EAAC,MAAM,mBAAmB,CAAC;AAGxD,YAAY,EAAC,mBAAmB,EAAE,sBAAsB,EAAE,yBAAyB,EAAC,MAAM,iBAAiB,CAAC;AAG5G,OAAO,EAAC,OAAO,IAAI,YAAY,EAAE,mBAAmB,EAAC,MAAM,0BAA0B,CAAC;AAGtF,cAAc,iBAAiB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAGH,OAAO,EAAC,OAAO,IAAI,sBAAsB,EAAC,MAAM,0BAA0B,CAAC;AAG3E,OAAO,EAAC,SAAS,EAAE,YAAY,EAAE,aAAa,EAAC,MAAM,6BAA6B,CAAC;AACnF,OAAO,EAAC,OAAO,IAAI,OAAO,EAAC,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAC,OAAO,IAAI,UAAU,EAAC,MAAM,mBAAmB,CAAC;AAGxD,YAAY,EAAC,mBAAmB,EAAE,sBAAsB,EAAE,yBAAyB,EAAC,MAAM,iBAAiB,CAAC;AAK5G,OAAO,EAAC,OAAO,IAAI,YAAY,EAAC,MAAM,0BAA0B,CAAC;AAIjE,cAAc,iBAAiB,CAAC"}

package/dist/index.js

@@ -1,4 +1,4 @@
-import { ThunderIDAuthException, ThunderIDNodeClient, ThunderIDRuntimeError, executeEmbeddedSignInFlow, logger } from "@thunderid/node";
+import { CookieConfig, ThunderIDAuthException, ThunderIDNodeClient, ThunderIDRuntimeError, executeEmbeddedSignInFlow, logger } from "@thunderid/node";
 import { v4 } from "uuid";
 
 export * from "@thunderid/node"
@@ -21,16 +21,14 @@ export * from "@thunderid/node"
 * specific language governing permissions and limitations
 * under the License.
 */
-/** Session cookie name used across the Express SDK. */
-const SESSION_COOKIE_NAME = "THUNDERID_SESSION_ID";
 /** Default cookie configuration values. */
-const CookieConfig = {
+const CookieConfig$1 = {
 	defaultExpirySeconds: 86400,
 	defaultHttpOnly: true,
 	defaultSameSite: "lax",
 	defaultSecure: false
 };
-var CookieConfig_default = CookieConfig;
+var CookieConfig_default = CookieConfig$1;
 
 //#endregion
 //#region src/utils/expressUtils.ts
@@ -74,18 +72,27 @@ var ThunderIDExpressClient = class extends ThunderIDNodeClient {
 	get expressConfig() {
 		return this._expressConfig;
 	}
+	/**
+	* Resolves the session cookie name for this client instance, honoring an
+	* explicit `sessionCookie.name` override before falling back to the
+	* `vendor`-derived default (which itself defaults to `'thunderid'`).
+	*/
+	getSessionCookieName() {
+		return CookieConfig.resolveSessionCookieName(this._expressConfig?.vendor, this._expressConfig?.sessionCookie?.name);
+	}
 	async getUserFromRequest(req) {
-		const sessionId = req.cookies?.[SESSION_COOKIE_NAME];
+		const sessionId = req.cookies?.[this.getSessionCookieName()];
 		return this.getUser(sessionId);
 	}
 	async signIn(req, res, next, signInConfig) {
 		if (expressUtils_default(req.originalUrl)) return Promise.reject(new ThunderIDAuthException("EXPRESS-CLIENT-SI-IV01", "Invalid login request URL", "Login request contains an error query parameter in the URL"));
-		let userId = req.cookies?.[SESSION_COOKIE_NAME];
+		const cookieName = this.getSessionCookieName();
+		let userId = req.cookies?.[cookieName];
 		if (!userId) userId = v4();
 		const sc = this._expressConfig?.sessionCookie;
 		const authRedirectCallback = (url) => {
 			if (!url) return;
-			res.cookie(SESSION_COOKIE_NAME, userId, {
+			res.cookie(cookieName, userId, {
 				httpOnly: sc?.httpOnly ?? CookieConfig_default.defaultHttpOnly,
 				maxAge: (sc?.expiryTime ?? CookieConfig_default.defaultExpirySeconds) * 1e3,
 				sameSite: sc?.sameSite ?? CookieConfig_default.defaultSameSite,
@@ -218,7 +225,8 @@ const handleSignOut = () => {
 			onSignOut(res);
 			return;
 		}
-		const sessionId = req.cookies?.[SESSION_COOKIE_NAME];
+		const cookieName = client.getSessionCookieName();
+		const sessionId = req.cookies?.[cookieName];
 		if (!sessionId) {
 			onError(res, new ThunderIDRuntimeError("No cookie found in the request", "EXPRESS-AUTH_MW-LOGOUT-NF01", "express"));
 			return;
@@ -226,7 +234,7 @@ const handleSignOut = () => {
 		try {
 			const signOutURL = await client.signOut(sessionId);
 			if (signOutURL) {
-				res.cookie(SESSION_COOKIE_NAME, null, { maxAge: 0 });
+				res.cookie(cookieName, null, { maxAge: 0 });
 				res.redirect(signOutURL);
 			}
 		} catch (e) {
@@ -248,7 +256,7 @@ const handleSignOut = () => {
 const protect = (onUnauthenticated) => {
 	return async (req, res, next) => {
 		const client = req.thunderIDAuth;
-		const sessionId = req.cookies?.[SESSION_COOKIE_NAME];
+		const sessionId = req.cookies?.[client?.getSessionCookieName() ?? ""];
 		const reject = () => {
 			if (onUnauthenticated) onUnauthenticated(res);
 			else res.status(401).end();
@@ -352,4 +360,4 @@ const handleFlow = () => {
 var flow_default = handleFlow;
 
 //#endregion
-export { CookieConfig_default as CookieConfig, SESSION_COOKIE_NAME, ThunderIDExpressClient_default as ThunderIDExpressClient, flow_default as handleFlow, handleSignIn, handleSignOut, protect_default as protect, thunderID };
+export { CookieConfig_default as CookieConfig, ThunderIDExpressClient_default as ThunderIDExpressClient, flow_default as handleFlow, handleSignIn, handleSignOut, protect_default as protect, thunderID };

package/dist/middleware/authentication.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"authentication.d.ts","sourceRoot":"","sources":["../../src/middleware/authentication.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAGH,OAAO,OAAO,MAAM,SAAS,CAAC;AAE9B,OAAO,EAAC,sBAAsB,EAAC,MAAM,kBAAkB,CAAC;AAGxD;;;;;;;;;;;;;;GAcG;AACH,QAAA,MAAM,SAAS,GAAI,QAAQ,sBAAsB,KAAG,OAAO,CAAC,cAsB3D,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,QAAA,MAAM,YAAY,QAAO,OAAO,CAAC,cA6BhC,CAAC;AAEF;;;;;;;;;;;;;GAaG;AACH,QAAA,MAAM,aAAa,QAAO,OAAO,CAAC,cA4CjC,CAAC;AAEF,OAAO,EAAC,SAAS,EAAE,YAAY,EAAE,aAAa,EAAC,CAAC"}
+{"version":3,"file":"authentication.d.ts","sourceRoot":"","sources":["../../src/middleware/authentication.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAGH,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAC,sBAAsB,EAAC,MAAM,kBAAkB,CAAC;AAGxD;;;;;;;;;;;;;;GAcG;AACH,QAAA,MAAM,SAAS,GAAI,QAAQ,sBAAsB,KAAG,OAAO,CAAC,cAsB3D,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,QAAA,MAAM,YAAY,QAAO,OAAO,CAAC,cA6BhC,CAAC;AAEF;;;;;;;;;;;;;GAaG;AACH,QAAA,MAAM,aAAa,QAAO,OAAO,CAAC,cA6CjC,CAAC;AAEF,OAAO,EAAC,SAAS,EAAE,YAAY,EAAE,aAAa,EAAC,CAAC"}

package/dist/middleware/protect.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"protect.d.ts","sourceRoot":"","sources":["../../src/middleware/protect.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAGH,OAAO,OAAO,MAAM,SAAS,CAAC;AAI9B;;;;;;;GAOG;AACH,QAAA,MAAM,OAAO,GACX,oBAAoB,CAAC,GAAG,EAAE,OAAO,CAAC,QAAQ,KAAK,IAAI,KAClD,CAAC,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,YAAY,KAAK,OAAO,CAAC,IAAI,CAAC,CA4B7F,CAAC;AAEF,eAAe,OAAO,CAAC"}
+{"version":3,"file":"protect.d.ts","sourceRoot":"","sources":["../../src/middleware/protect.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAGH,OAAO,OAAO,MAAM,SAAS,CAAC;AAG9B;;;;;;;GAOG;AACH,QAAA,MAAM,OAAO,GACX,oBAAoB,CAAC,GAAG,EAAE,OAAO,CAAC,QAAQ,KAAK,IAAI,KAClD,CAAC,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,YAAY,KAAK,OAAO,CAAC,IAAI,CAAC,CA4B7F,CAAC;AAEF,eAAe,OAAO,CAAC"}

package/dist/models/config.d.ts

@@ -40,6 +40,13 @@ export interface StrictExpressClientConfig {
  *
  * Set `mode: 'embedded'` to enable app-native embedded auth via `handleFlow()`.
  * Defaults to `'redirect'` (standard OAuth 2.0 authorization-code flow).
+ *
+ * Inherits `vendor` and `sessionCookie.name` from `ThunderIDNodeConfig` — set
+ * either to control the session cookie name written by this SDK (default:
+ * `__thunderid__session`, the same `@thunderid/node` `CookieConfig` naming
+ * convention used by every server-side ThunderID SDK, derived from `vendor`
+ * defaulting to `'thunderid'`). `sessionCookie.name` takes priority over the
+ * `vendor`-derived default.
  */
 export type ExpressClientConfig = ThunderIDNodeConfig & StrictExpressClientConfig;
 /**

package/dist/models/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/models/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAC,mBAAmB,EAAE,qBAAqB,EAAE,aAAa,EAAC,MAAM,iBAAiB,CAAC;AAC1F,OAAO,OAAO,MAAM,SAAS,CAAC;AAE9B;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC,gEAAgE;IAChE,QAAQ,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE,aAAa,EAAE,aAAa,KAAK,IAAI,CAAC;IACzE,uDAAuD;IACvD,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,CAAC,QAAQ,KAAK,IAAI,CAAC;IAC5C,oEAAoE;IACpE,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE,SAAS,EAAE,qBAAqB,KAAK,IAAI,CAAC;IAC5E,2FAA2F;IAC3F,iBAAiB,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,CAAC,QAAQ,KAAK,IAAI,CAAC;CACrD;AAED;;;;;;;;;;GAUG;AACH,MAAM,MAAM,mBAAmB,GAAG,mBAAmB,GAAG,yBAAyB,CAAC;AAElF;;GAEG;AACH,MAAM,MAAM,sBAAsB,GAAG,mBAAmB,CAAC"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/models/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAC,mBAAmB,EAAE,qBAAqB,EAAE,aAAa,EAAC,MAAM,iBAAiB,CAAC;AAC1F,OAAO,OAAO,MAAM,SAAS,CAAC;AAE9B;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC,gEAAgE;IAChE,QAAQ,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE,aAAa,EAAE,aAAa,KAAK,IAAI,CAAC;IACzE,uDAAuD;IACvD,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,CAAC,QAAQ,KAAK,IAAI,CAAC;IAC5C,oEAAoE;IACpE,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE,SAAS,EAAE,qBAAqB,KAAK,IAAI,CAAC;IAC5E,2FAA2F;IAC3F,iBAAiB,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,CAAC,QAAQ,KAAK,IAAI,CAAC;CACrD;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,MAAM,mBAAmB,GAAG,mBAAmB,GAAG,yBAAyB,CAAC;AAElF;;GAEG;AACH,MAAM,MAAM,sBAAsB,GAAG,mBAAmB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@thunderid/express",
-  "version": "0.3.0",
+  "version": "0.4.0",
   "description": "Express.js SDK for ThunderID",
   "keywords": [
     "thunderid",
@@ -48,7 +48,7 @@
   },
   "dependencies": {
     "uuid": "11.1.1",
-    "@thunderid/node": "^0.4.0"
+    "@thunderid/node": "^0.5.0"
   },
   "peerDependencies": {
     "express": ">=4.21.2"