@velajs/better-auth 0.5.0 → 0.6.1

package/dist/guards/auth.guard.js

@@ -1,68 +0,0 @@
-function _ts_decorate(decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-function _ts_metadata(k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-}
-function _ts_param(paramIndex, decorator) {
-    return function(target, key) {
-        decorator(target, key, paramIndex);
-    };
-}
-import { Inject, Injectable, REQUEST_CONTEXT, Reflector, UnauthorizedException } from "@velajs/vela";
-import { AUTH_SESSION_KEY, AUTH_USER_KEY, BETTER_AUTH_OPTIONS } from "../better-auth.tokens.js";
-import { BetterAuthService } from "../better-auth.service.js";
-import { OptionalAuth } from "../decorators/optional-auth.decorator.js";
-import { Public } from "../decorators/public.decorator.js";
-export class AuthGuard {
-    auth;
-    opts;
-    reflector = new Reflector();
-    constructor(// Inject BetterAuthService rather than the raw better-auth instance.
-    // The service's lazy `.auth` getter defers construction to first use, so
-    // forRootAsync factories that depend on values only available at
-    // request time (Cloudflare D1/KV bindings, etc.) build safely on the
-    // first canActivate — not at module-load bootstrap.
-    auth, opts){
-        this.auth = auth;
-        this.opts = opts;
-    }
-    async canActivate(context) {
-        if (this.reflector.getAllAndOverride(Public, context)) return true;
-        const request = context.getRequest();
-        const path = new URL(request.url).pathname;
-        const basePath = this.opts.basePath ?? '/api/auth';
-        if (path === basePath || path.startsWith(`${basePath}/`)) return true;
-        const data = await this.auth.api.getSession({
-            headers: request.headers
-        });
-        if (data) {
-            const reqCtx = resolveRequestContext(context);
-            reqCtx.set(AUTH_USER_KEY, data.user);
-            reqCtx.set(AUTH_SESSION_KEY, data.session);
-            return true;
-        }
-        if (this.opts.defaultPolicy === 'allow' || this.reflector.getAllAndOverride(OptionalAuth, context)) {
-            return true;
-        }
-        throw new UnauthorizedException('Authentication required');
-    }
-}
-AuthGuard = _ts_decorate([
-    Injectable(),
-    _ts_param(0, Inject(BetterAuthService)),
-    _ts_param(1, Inject(BETTER_AUTH_OPTIONS)),
-    _ts_metadata("design:type", Function),
-    _ts_metadata("design:paramtypes", [
-        typeof BetterAuthService === "undefined" ? Object : BetterAuthService,
-        typeof BetterAuthModuleOptions === "undefined" ? Object : BetterAuthModuleOptions
-    ])
-], AuthGuard);
-function resolveRequestContext(context) {
-    const honoCtx = context.getContext();
-    const container = honoCtx.get('container');
-    return container.resolve(REQUEST_CONTEXT);
-}

package/dist/guards/roles.guard.d.ts

@@ -1,5 +0,0 @@
-import { type CanActivate, type ExecutionContext } from '@velajs/vela';
-export declare class RolesGuard implements CanActivate {
-    private readonly reflector;
-    canActivate(context: ExecutionContext): boolean;
-}

package/dist/guards/roles.guard.js

@@ -1,36 +0,0 @@
-function _ts_decorate(decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-import { ForbiddenException, Injectable, REQUEST_CONTEXT, Reflector } from "@velajs/vela";
-import { AUTH_USER_KEY } from "../better-auth.tokens.js";
-import { Roles } from "../decorators/roles.decorator.js";
-export class RolesGuard {
-    reflector = new Reflector();
-    canActivate(context) {
-        const required = this.reflector.getAllAndOverride(Roles, context);
-        if (!required || required.length === 0) return true;
-        const honoCtx = context.getContext();
-        const reqCtx = honoCtx.get('container').resolve(REQUEST_CONTEXT);
-        const user = reqCtx.get(AUTH_USER_KEY);
-        if (!user) {
-            throw new ForbiddenException('Role check requires authentication');
-        }
-        const userRoles = normalizeRoles(user.role);
-        const ok = required.some((r)=>userRoles.includes(r));
-        if (!ok) {
-            throw new ForbiddenException(`Insufficient role; one of [${required.join(', ')}] required`);
-        }
-        return true;
-    }
-}
-RolesGuard = _ts_decorate([
-    Injectable()
-], RolesGuard);
-function normalizeRoles(role) {
-    if (!role) return [];
-    if (Array.isArray(role)) return role;
-    return role.split(',').map((r)=>r.trim()).filter(Boolean);
-}