@udibo/oauth2 0.21.2 → 0.21.3

package/dist/adapters/hono/_common.d.ts

@@ -26,6 +26,12 @@ export interface HonoResourceServerVariables<Client extends ClientInterface, Use
     /** The authenticated OAuth2 context set by the protect middleware. */
     [OAUTH2_CONTEXT_KEY]: AuthenticatedContext<Client, User, S>;
 }
+/**
+ * Answers with `response` while keeping the headers earlier middleware set on
+ * `c`, such as the `Set-Cookie` a BFF sets when a refresh rotates or ends the
+ * session. A middleware returning a bare `Response` would drop them.
+ */
+export declare function respondInContext(c: Context, response: Response): Response;
 /**
  * Builds a Hono middleware that authenticates bearer tokens, stores the
  * authenticated context at {@link OAUTH2_CONTEXT_KEY}, and on failure returns

package/dist/adapters/hono/_common.js

@@ -13,6 +13,14 @@ import { ResourceServer } from "../../server/resource-server.js";
  * context. Namespaced to avoid collisions with other middleware.
  */
 export const OAUTH2_CONTEXT_KEY = "@udibo/oauth2";
+/**
+ * Answers with `response` while keeping the headers earlier middleware set on
+ * `c`, such as the `Set-Cookie` a BFF sets when a refresh rotates or ends the
+ * session. A middleware returning a bare `Response` would drop them.
+ */
+export function respondInContext(c, response) {
+    return c.newResponse(response.body, response);
+}
 /**
  * Builds a Hono middleware that authenticates bearer tokens, stores the
  * authenticated context at {@link OAUTH2_CONTEXT_KEY}, and on failure returns
@@ -26,7 +34,7 @@ export function createProtectMiddleware(server, requiredScope) {
             await next();
         }
         catch (error) {
-            return server.handleAuthError(error);
+            return respondInContext(c, server.handleAuthError(error));
         }
     };
 }
@@ -45,7 +53,7 @@ export function createRequireScopeMiddleware(server, adapterName, requiredScope)
             server.assertScope(scope, requiredScope);
         }
         catch (error) {
-            return server.handleAuthError(error);
+            return respondInContext(c, server.handleAuthError(error));
         }
         await next();
     };
@@ -63,7 +71,7 @@ export function createRequireMiddleware(server, adapterName, conditions) {
             server.assertAuthorized(context, conditions);
         }
         catch (error) {
-            return server.handleAuthError(error);
+            return respondInContext(c, server.handleAuthError(error));
         }
         await next();
     };

package/dist/adapters/hono/bff/bff.js

@@ -55,7 +55,7 @@ import { defaultFetch } from "../../../utils/_default-fetch.js";
 import { inboundRequestWithHeaders } from "../../../utils/_inbound-request.js";
 import { timingSafeMatchIndex } from "../../../utils/_timing-safe.js";
 import { sha256Hash } from "../../../server/utils/hash.js";
-import { OAUTH2_CONTEXT_KEY } from "../_common.js";
+import { OAUTH2_CONTEXT_KEY, respondInContext } from "../_common.js";
 import { DEFAULT_MAX_RETURN_TO_LENGTH, loginContinuation as computeLoginContinuation, safeReturnTo, } from "../../../utils/url.js";
 import { resolveCookieName, resolvePrefixConstrainedAttributes, } from "./cookie-prefix.js";
 import { DEFAULT_SESSION_MAX_AGE_MS, sessionStoreMaxAgeMs, supportsBackchannelLogout, supportsRefreshLock, } from "./session-store.js";
@@ -1208,7 +1208,7 @@ export class HonoBff {
                 await next();
             }
             catch (error) {
-                return resourceServer.handleAuthError(error);
+                return respondInContext(c, resourceServer.handleAuthError(error));
             }
         };
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@udibo/oauth2",
-  "version": "0.21.2",
+  "version": "0.21.3",
   "description": "A flexible OAuth2 toolkit: framework-agnostic authorization & resource servers, a typed client, Hono adapters (including a backend-for-frontend), and React bindings.",
   "keywords": [
     "authorization-server",