@thunderid/node 1.0.3 → 1.0.5

package/dist/cjs/index.cjs

@@ -276,6 +276,72 @@ var CookieConfig = class CookieConfig {
 };
 var CookieConfig_default = CookieConfig;
 
+//#endregion
+//#region src/utils/CookieChunking.ts
+/**
+* Framework-agnostic cookie chunking. Browsers reject a `Set-Cookie` once
+* the full `name=value; attributes` line exceeds ~4096 bytes, so a session
+* cookie carrying a JWT (access/id/refresh tokens) can overflow that limit.
+* Mirrors next-auth's session cookie chunking (packages/core/src/lib/utils/cookie.ts):
+* split an oversized value across numbered `${name}.0`, `${name}.1`, ...
+* cookies and reassemble on read.
+*
+* This class only computes chunk names/values — reading, writing, and
+* deleting cookies is framework-specific (h3, Next.js, Express, ...), so
+* callers plug in their own cookie access via the `getCookie` callback and
+* by writing/deleting the names this class returns.
+*/
+var CookieChunking = class CookieChunking {
+	constructor() {}
+	static ALLOWED_COOKIE_SIZE = 4096;
+	static ESTIMATED_EMPTY_COOKIE_SIZE = 160;
+	static CHUNK_SIZE = CookieChunking.ALLOWED_COOKIE_SIZE - CookieChunking.ESTIMATED_EMPTY_COOKIE_SIZE;
+	/**
+	* Builds the cookie name for chunk `index` of a chunked cookie `name`.
+	*/
+	static getChunkName(name, index) {
+		return `${name}.${index}`;
+	}
+	/**
+	* Filters `cookieNames` down to those belonging to `name`: the unchunked
+	* base cookie and/or any numbered `${name}.0`, `${name}.1`, ... chunks.
+	*/
+	static filterChunkNames(name, cookieNames) {
+		const prefix = `${name}.`;
+		return cookieNames.filter((cookieName) => cookieName === name || cookieName.startsWith(prefix));
+	}
+	/**
+	* Splits `value` into the cookie name/value pairs that should be written
+	* for `name`: a single `{[name]: value}` entry when it fits in one
+	* cookie, or numbered `${name}.0`, `${name}.1`, ... entries once it would
+	* exceed the ~4KB per-cookie limit.
+	*/
+	static split(name, value) {
+		const chunkCount = Math.max(1, Math.ceil(value.length / CookieChunking.CHUNK_SIZE));
+		if (chunkCount === 1) return { [name]: value };
+		const chunks = {};
+		for (let i = 0; i < chunkCount; i += 1) chunks[CookieChunking.getChunkName(name, i)] = value.slice(i * CookieChunking.CHUNK_SIZE, (i + 1) * CookieChunking.CHUNK_SIZE);
+		return chunks;
+	}
+	/**
+	* Reassembles a cookie value that may have been split via {@link split}.
+	* Calls `getCookie` with `name` first, then `${name}.0`, `${name}.1`, ...
+	* until a lookup returns `undefined`.
+	*/
+	static join(name, getCookie) {
+		const unchunked = getCookie(name);
+		if (unchunked !== void 0) return unchunked;
+		const chunks = [];
+		for (let i = 0;; i += 1) {
+			const chunk = getCookie(CookieChunking.getChunkName(name, i));
+			if (chunk === void 0) break;
+			chunks.push(chunk);
+		}
+		return chunks.length > 0 ? chunks.join("") : void 0;
+	}
+};
+var CookieChunking_default = CookieChunking;
+
 //#endregion
 //#region src/utils/generateSessionId.ts
 const generateSessionId = () => (/* @__PURE__ */ new Date()).getTime().toString(36) + Math.random().toString(36).substring(2);
@@ -300,6 +366,7 @@ if (!globalThis.fetch) {
 }
 
 //#endregion
+exports.CookieChunking = CookieChunking_default;
 exports.CookieConfig = CookieConfig_default;
 exports.MemoryCacheStore = MemoryCacheStore_default;
 exports.NodeCryptoUtils = NodeCryptoUtils_default;

package/dist/index.d.ts

@@ -6,6 +6,7 @@ export { default as CookieConfig } from './constants/CookieConfig';
 export type { ThunderIDNodeConfig, SessionCookieConfig } from './models/config';
 export type { default as AuthURLCallback } from './models/AuthURLCallback';
 export { default as MemoryCacheStore } from './stores/MemoryCacheStore';
+export { default as CookieChunking } from './utils/CookieChunking';
 export { default as NodeCryptoUtils } from './utils/NodeCryptoUtils';
 export { default as SessionUtils } from './utils/SessionUtils';
 export { default as generateSessionId } from './utils/generateSessionId';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAaA;;GAEG;AAGH,OAAO,EAAC,OAAO,IAAI,mBAAmB,EAAC,MAAM,uBAAuB,CAAC;AAGrE,OAAO,EAAC,OAAO,IAAI,YAAY,EAAC,MAAM,0BAA0B,CAAC;AAGjE,YAAY,EAAC,mBAAmB,EAAE,mBAAmB,EAAC,MAAM,iBAAiB,CAAC;AAC9E,YAAY,EAAC,OAAO,IAAI,eAAe,EAAC,MAAM,0BAA0B,CAAC;AAGzE,OAAO,EAAC,OAAO,IAAI,gBAAgB,EAAC,MAAM,2BAA2B,CAAC;AAGtE,OAAO,EAAC,OAAO,IAAI,eAAe,EAAC,MAAM,yBAAyB,CAAC;AACnE,OAAO,EAAC,OAAO,IAAI,YAAY,EAAC,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAC,OAAO,IAAI,iBAAiB,EAAC,MAAM,2BAA2B,CAAC;AACvE,OAAO,EAAC,OAAO,IAAI,uBAAuB,EAAC,MAAM,iCAAiC,CAAC;AAGnF,cAAc,uBAAuB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAaA;;GAEG;AAGH,OAAO,EAAC,OAAO,IAAI,mBAAmB,EAAC,MAAM,uBAAuB,CAAC;AAGrE,OAAO,EAAC,OAAO,IAAI,YAAY,EAAC,MAAM,0BAA0B,CAAC;AAGjE,YAAY,EAAC,mBAAmB,EAAE,mBAAmB,EAAC,MAAM,iBAAiB,CAAC;AAC9E,YAAY,EAAC,OAAO,IAAI,eAAe,EAAC,MAAM,0BAA0B,CAAC;AAGzE,OAAO,EAAC,OAAO,IAAI,gBAAgB,EAAC,MAAM,2BAA2B,CAAC;AAGtE,OAAO,EAAC,OAAO,IAAI,cAAc,EAAC,MAAM,wBAAwB,CAAC;AACjE,OAAO,EAAC,OAAO,IAAI,eAAe,EAAC,MAAM,yBAAyB,CAAC;AACnE,OAAO,EAAC,OAAO,IAAI,YAAY,EAAC,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAC,OAAO,IAAI,iBAAiB,EAAC,MAAM,2BAA2B,CAAC;AACvE,OAAO,EAAC,OAAO,IAAI,uBAAuB,EAAC,MAAM,iCAAiC,CAAC;AAGnF,cAAc,uBAAuB,CAAC"}

package/dist/index.js

@@ -247,6 +247,72 @@ var CookieConfig = class CookieConfig {
 };
 var CookieConfig_default = CookieConfig;
 
+//#endregion
+//#region src/utils/CookieChunking.ts
+/**
+* Framework-agnostic cookie chunking. Browsers reject a `Set-Cookie` once
+* the full `name=value; attributes` line exceeds ~4096 bytes, so a session
+* cookie carrying a JWT (access/id/refresh tokens) can overflow that limit.
+* Mirrors next-auth's session cookie chunking (packages/core/src/lib/utils/cookie.ts):
+* split an oversized value across numbered `${name}.0`, `${name}.1`, ...
+* cookies and reassemble on read.
+*
+* This class only computes chunk names/values — reading, writing, and
+* deleting cookies is framework-specific (h3, Next.js, Express, ...), so
+* callers plug in their own cookie access via the `getCookie` callback and
+* by writing/deleting the names this class returns.
+*/
+var CookieChunking = class CookieChunking {
+	constructor() {}
+	static ALLOWED_COOKIE_SIZE = 4096;
+	static ESTIMATED_EMPTY_COOKIE_SIZE = 160;
+	static CHUNK_SIZE = CookieChunking.ALLOWED_COOKIE_SIZE - CookieChunking.ESTIMATED_EMPTY_COOKIE_SIZE;
+	/**
+	* Builds the cookie name for chunk `index` of a chunked cookie `name`.
+	*/
+	static getChunkName(name, index) {
+		return `${name}.${index}`;
+	}
+	/**
+	* Filters `cookieNames` down to those belonging to `name`: the unchunked
+	* base cookie and/or any numbered `${name}.0`, `${name}.1`, ... chunks.
+	*/
+	static filterChunkNames(name, cookieNames) {
+		const prefix = `${name}.`;
+		return cookieNames.filter((cookieName) => cookieName === name || cookieName.startsWith(prefix));
+	}
+	/**
+	* Splits `value` into the cookie name/value pairs that should be written
+	* for `name`: a single `{[name]: value}` entry when it fits in one
+	* cookie, or numbered `${name}.0`, `${name}.1`, ... entries once it would
+	* exceed the ~4KB per-cookie limit.
+	*/
+	static split(name, value) {
+		const chunkCount = Math.max(1, Math.ceil(value.length / CookieChunking.CHUNK_SIZE));
+		if (chunkCount === 1) return { [name]: value };
+		const chunks = {};
+		for (let i = 0; i < chunkCount; i += 1) chunks[CookieChunking.getChunkName(name, i)] = value.slice(i * CookieChunking.CHUNK_SIZE, (i + 1) * CookieChunking.CHUNK_SIZE);
+		return chunks;
+	}
+	/**
+	* Reassembles a cookie value that may have been split via {@link split}.
+	* Calls `getCookie` with `name` first, then `${name}.0`, `${name}.1`, ...
+	* until a lookup returns `undefined`.
+	*/
+	static join(name, getCookie) {
+		const unchunked = getCookie(name);
+		if (unchunked !== void 0) return unchunked;
+		const chunks = [];
+		for (let i = 0;; i += 1) {
+			const chunk = getCookie(CookieChunking.getChunkName(name, i));
+			if (chunk === void 0) break;
+			chunks.push(chunk);
+		}
+		return chunks.length > 0 ? chunks.join("") : void 0;
+	}
+};
+var CookieChunking_default = CookieChunking;
+
 //#endregion
 //#region src/utils/generateSessionId.ts
 const generateSessionId = () => (/* @__PURE__ */ new Date()).getTime().toString(36) + Math.random().toString(36).substring(2);
@@ -271,4 +337,4 @@ if (!globalThis.fetch) {
 }
 
 //#endregion
-export { CookieConfig_default as CookieConfig, MemoryCacheStore_default as MemoryCacheStore, NodeCryptoUtils_default as NodeCryptoUtils, SessionUtils_default as SessionUtils, ThunderIDNodeClient_default as ThunderIDNodeClient, generateSessionId_default as generateSessionId, getSessionCookieOptions_default as getSessionCookieOptions };
+export { CookieChunking_default as CookieChunking, CookieConfig_default as CookieConfig, MemoryCacheStore_default as MemoryCacheStore, NodeCryptoUtils_default as NodeCryptoUtils, SessionUtils_default as SessionUtils, ThunderIDNodeClient_default as ThunderIDNodeClient, generateSessionId_default as generateSessionId, getSessionCookieOptions_default as getSessionCookieOptions };

package/dist/utils/CookieChunking.d.ts

@@ -0,0 +1,43 @@
+/**
+ * Framework-agnostic cookie chunking. Browsers reject a `Set-Cookie` once
+ * the full `name=value; attributes` line exceeds ~4096 bytes, so a session
+ * cookie carrying a JWT (access/id/refresh tokens) can overflow that limit.
+ * Mirrors next-auth's session cookie chunking (packages/core/src/lib/utils/cookie.ts):
+ * split an oversized value across numbered `${name}.0`, `${name}.1`, ...
+ * cookies and reassemble on read.
+ *
+ * This class only computes chunk names/values — reading, writing, and
+ * deleting cookies is framework-specific (h3, Next.js, Express, ...), so
+ * callers plug in their own cookie access via the `getCookie` callback and
+ * by writing/deleting the names this class returns.
+ */
+declare class CookieChunking {
+    private constructor();
+    static readonly ALLOWED_COOKIE_SIZE: number;
+    static readonly ESTIMATED_EMPTY_COOKIE_SIZE: number;
+    static readonly CHUNK_SIZE: number;
+    /**
+     * Builds the cookie name for chunk `index` of a chunked cookie `name`.
+     */
+    static getChunkName(name: string, index: number): string;
+    /**
+     * Filters `cookieNames` down to those belonging to `name`: the unchunked
+     * base cookie and/or any numbered `${name}.0`, `${name}.1`, ... chunks.
+     */
+    static filterChunkNames(name: string, cookieNames: string[]): string[];
+    /**
+     * Splits `value` into the cookie name/value pairs that should be written
+     * for `name`: a single `{[name]: value}` entry when it fits in one
+     * cookie, or numbered `${name}.0`, `${name}.1`, ... entries once it would
+     * exceed the ~4KB per-cookie limit.
+     */
+    static split(name: string, value: string): Record<string, string>;
+    /**
+     * Reassembles a cookie value that may have been split via {@link split}.
+     * Calls `getCookie` with `name` first, then `${name}.0`, `${name}.1`, ...
+     * until a lookup returns `undefined`.
+     */
+    static join(name: string, getCookie: (cookieName: string) => string | undefined): string | undefined;
+}
+export default CookieChunking;
+//# sourceMappingURL=CookieChunking.d.ts.map

package/dist/utils/CookieChunking.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CookieChunking.d.ts","sourceRoot":"","sources":["../../src/utils/CookieChunking.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;GAYG;AACH,cAAM,cAAc;IAElB,OAAO;IAEP,MAAM,CAAC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAQ;IAEnD,MAAM,CAAC,QAAQ,CAAC,2BAA2B,EAAE,MAAM,CAAO;IAE1D,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAmF;IAErH;;OAEG;IACH,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM;IAIxD;;;OAGG;IACH,MAAM,CAAC,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE;IAKtE;;;;;OAKG;IACH,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IAiBjE;;;;OAIG;IACH,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS;CAarG;AAED,eAAe,cAAc,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@thunderid/node",
-  "version": "1.0.3",
+  "version": "1.0.5",
   "description": "Node.js runtime SDK for ThunderID",
   "keywords": [
     "thunderid",
@@ -52,7 +52,7 @@
     "secure-random-bytes": "5.0.1",
     "tslib": "2.8.1",
     "uuid": "11.1.1",
-    "@thunderid/javascript": "^1.0.3"
+    "@thunderid/javascript": "^1.0.5"
   },
   "publishConfig": {
     "access": "public"