@wtfalch/auth 0.9.1 → 0.11.0

package/dist/sessions.js

@@ -24,7 +24,12 @@ export function createMemorySessionStore() {
             const record = records.get(key);
             if (!record || record.revokedAt !== null || record.generation !== generation)
                 return false;
-            records.set(key, { ...record, ...next, generation: generation + 1 });
+            records.set(key, {
+                ...record,
+                ...next,
+                generation: generation + 1,
+                lastSeenAt: Math.floor(Date.now() / 1000),
+            });
             return true;
         },
         async revoke(key, at) {
@@ -41,6 +46,16 @@ export function createMemorySessionStore() {
                 }
             return count;
         },
+        async listSubject(context, subject) {
+            const nowSeconds = Math.floor(Date.now() / 1000);
+            return [...records.values()]
+                .filter((r) => r.context === context &&
+                r.subject === subject &&
+                r.revokedAt === null &&
+                r.expiresAt > nowSeconds)
+                .sort((a, b) => (b.createdAt ?? 0) - (a.createdAt ?? 0))
+                .map((r) => ({ ...r }));
+        },
     };
 }
 /** The table `createPostgresSessionStore` expects. Run it in the app's own migrations. */
@@ -52,11 +67,25 @@ export const POSTGRES_SESSION_TABLE = `create table if not exists wtfalch_auth_s
   payload text not null,
   expires_at bigint not null,
   lease_until bigint,
-  revoked_at bigint
+  revoked_at bigint,
+  created_at bigint,
+  last_seen_at bigint,
+  user_agent text,
+  ip text
 );
 create index if not exists wtfalch_auth_sessions_subject on wtfalch_auth_sessions (context, subject);
 create index if not exists wtfalch_auth_sessions_expiry on wtfalch_auth_sessions (expires_at);`;
+/**
+ * `POSTGRES_SESSION_TABLE` already has these columns for a fresh table. A
+ * consumer whose table predates them runs this once, in its own migrations,
+ * to catch up; `add column if not exists` makes it safe to run again.
+ */
+export const POSTGRES_SESSION_MIGRATION_1 = `alter table wtfalch_auth_sessions add column if not exists created_at bigint;
+alter table wtfalch_auth_sessions add column if not exists last_seen_at bigint;
+alter table wtfalch_auth_sessions add column if not exists user_agent text;
+alter table wtfalch_auth_sessions add column if not exists ip text;`;
 const nullable = (value) => value === null || value === undefined ? null : Number(value);
+const nullableString = (value) => value === null || value === undefined ? null : String(value);
 /**
  * Postgres through whatever driver the app already has. `query` runs one
  * parameterised statement and resolves its rows:
@@ -77,14 +106,19 @@ export function createPostgresSessionStore(input) {
         expiresAt: Number(row.expires_at),
         leaseUntil: nullable(row.lease_until),
         revokedAt: nullable(row.revoked_at),
+        createdAt: nullable(row.created_at),
+        lastSeenAt: nullable(row.last_seen_at),
+        userAgent: nullableString(row.user_agent),
+        ip: nullableString(row.ip),
     });
     return {
         async create(r) {
             await query(`delete from wtfalch_auth_sessions where key in
            (select key from wtfalch_auth_sessions where expires_at <= $1 limit 100)`, [Math.floor(Date.now() / 1000)]);
             await query(`insert into wtfalch_auth_sessions
-           (key, context, subject, generation, payload, expires_at, lease_until, revoked_at)
-         values ($1, $2, $3, $4, $5, $6, $7, $8)`, [
+           (key, context, subject, generation, payload, expires_at, lease_until, revoked_at,
+            created_at, last_seen_at, user_agent, ip)
+         values ($1, $2, $3, $4, $5, $6, $7, $8, $9, $10, $11, $12)`, [
                 r.key,
                 r.context,
                 r.subject,
@@ -93,6 +127,10 @@ export function createPostgresSessionStore(input) {
                 r.expiresAt,
                 r.leaseUntil,
                 r.revokedAt,
+                r.createdAt,
+                r.lastSeenAt,
+                r.userAgent,
+                r.ip,
             ]);
         },
         async get(key) {
@@ -101,9 +139,17 @@ export function createPostgresSessionStore(input) {
         },
         async advance(key, generation, next) {
             const rows = await query(`update wtfalch_auth_sessions
-            set payload = $3, expires_at = $4, lease_until = $5, generation = generation + 1
+            set payload = $3, expires_at = $4, lease_until = $5, generation = generation + 1,
+                last_seen_at = $6
           where key = $1 and generation = $2 and revoked_at is null
-          returning key`, [key, generation, next.payload, next.expiresAt, next.leaseUntil]);
+          returning key`, [
+                key,
+                generation,
+                next.payload,
+                next.expiresAt,
+                next.leaseUntil,
+                Math.floor(Date.now() / 1000),
+            ]);
             return rows.length === 1;
         },
         async revoke(key, at) {
@@ -115,5 +161,11 @@ export function createPostgresSessionStore(input) {
           returning key`, [context, subject, at]);
             return rows.length;
         },
+        async listSubject(context, subject) {
+            const rows = await query(`select * from wtfalch_auth_sessions
+          where context = $1 and subject = $2 and revoked_at is null and expires_at > $3
+          order by created_at desc nulls last`, [context, subject, Math.floor(Date.now() / 1000)]);
+            return rows.map(record);
+        },
     };
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wtfalch/auth",
-  "version": "0.9.1",
+  "version": "0.11.0",
   "description": "Sign in against auth.wtfalch.dev: a server session for a Next.js app, and a browser client with silent single sign-on across subdomains.",
   "repository": {
     "type": "git",