@zudojs/auth 0.0.1

package/dist/authTypes/authUser.type.d.ts

@@ -0,0 +1,47 @@
+/**
+ * Core user type used across the auth system.
+ *
+ * @module authTypes/authUser
+ */
+import type { UserId } from "@zudojs/constants";
+export type { UserId } from "@zudojs/constants";
+/**
+ * Authenticated user representation.
+ */
+export interface AuthUser {
+    /** Unique identifier */
+    readonly id: UserId;
+    /** Email address */
+    readonly email: string;
+    /** Display name */
+    readonly name?: string;
+    /** Assigned roles */
+    readonly roles: readonly string[];
+    /** Custom claims */
+    readonly claims?: Record<string, unknown>;
+    /** Whether the user is active */
+    readonly active: boolean;
+    /** When the user was created */
+    readonly createdAt: Date;
+    /** When the user last logged in */
+    readonly lastLoginAt?: Date;
+}
+/**
+ * User credentials for login.
+ */
+export interface UserCredentials {
+    /** User email or username */
+    readonly identifier: string;
+    /** Plain-text password (will be hashed for comparison) */
+    readonly password: string;
+}
+/**
+ * User registration input.
+ */
+export interface UserRegistration {
+    readonly email: string;
+    readonly password: string;
+    readonly name?: string;
+    readonly roles?: readonly string[];
+}
+//# sourceMappingURL=authUser.type.d.ts.map

package/dist/authTypes/authUser.type.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authUser.type.d.ts","sourceRoot":"","sources":["../../src/authTypes/authUser.type.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAEhD,YAAY,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAEhD;;GAEG;AACH,MAAM,WAAW,QAAQ;IACvB,wBAAwB;IACxB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,oBAAoB;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,mBAAmB;IACnB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,qBAAqB;IACrB,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,oBAAoB;IACpB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC1C,iCAAiC;IACjC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,gCAAgC;IAChC,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC;IACzB,mCAAmC;IACnC,QAAQ,CAAC,WAAW,CAAC,EAAE,IAAI,CAAC;CAC7B;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,6BAA6B;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,0DAA0D;IAC1D,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACpC"}

package/dist/authTypes/authUser.type.js

@@ -0,0 +1,7 @@
+/**
+ * Core user type used across the auth system.
+ *
+ * @module authTypes/authUser
+ */
+export {};
+//# sourceMappingURL=authUser.type.js.map

package/dist/authTypes/authUser.type.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authUser.type.js","sourceRoot":"","sources":["../../src/authTypes/authUser.type.ts"],"names":[],"mappings":"AAAA;;;;GAIG"}

package/dist/authTypes/index.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Core auth types: users, tokens, sessions, strategies, and RBAC.
+ *
+ * @module authTypes
+ */
+export { type UserId, type AuthUser, type UserCredentials, type UserRegistration, } from "./authUser.type.js";
+export { type JwtToken, type TokenId, type TokenPayload, type TokenPair, type TokenConfig, type TokenVerificationResult, } from "./authToken.type.js";
+export { type SessionId, type AuthSession, type CreateSessionOptions, type SessionStore, } from "./authSession.type.js";
+export { type OAuthProvider, type OAuthConfig, type OAuthUserInfo, type OAuthResult, type AuthStrategy, type PasswordCredentials, type ApiKeyCredentials, } from "./authStrategy.type.js";
+export { type Permission, type Role, type GuardResult, type GuardContext, } from "./authRbac.type.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/authTypes/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/authTypes/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EACL,KAAK,MAAM,EACX,KAAK,QAAQ,EACb,KAAK,eAAe,EACpB,KAAK,gBAAgB,GACtB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,KAAK,QAAQ,EACb,KAAK,OAAO,EACZ,KAAK,YAAY,EACjB,KAAK,SAAS,EACd,KAAK,WAAW,EAChB,KAAK,uBAAuB,GAC7B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,KAAK,SAAS,EACd,KAAK,WAAW,EAChB,KAAK,oBAAoB,EACzB,KAAK,YAAY,GAClB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,KAAK,aAAa,EAClB,KAAK,WAAW,EAChB,KAAK,aAAa,EAClB,KAAK,WAAW,EAChB,KAAK,YAAY,EACjB,KAAK,mBAAmB,EACxB,KAAK,iBAAiB,GACvB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,KAAK,UAAU,EACf,KAAK,IAAI,EACT,KAAK,WAAW,EAChB,KAAK,YAAY,GAClB,MAAM,oBAAoB,CAAC"}

package/dist/authTypes/index.js

@@ -0,0 +1,11 @@
+/**
+ * Core auth types: users, tokens, sessions, strategies, and RBAC.
+ *
+ * @module authTypes
+ */
+export {} from "./authUser.type.js";
+export {} from "./authToken.type.js";
+export {} from "./authSession.type.js";
+export {} from "./authStrategy.type.js";
+export {} from "./authRbac.type.js";
+//# sourceMappingURL=index.js.map

package/dist/authTypes/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/authTypes/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAKN,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAON,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAKN,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAQN,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAKN,MAAM,oBAAoB,CAAC"}

package/dist/authUtils/authUtils.helper.d.ts

@@ -0,0 +1,40 @@
+/**
+ * Auth utility helpers.
+ *
+ * @module authUtils
+ */
+/**
+ * Parse a Bearer token from an Authorization header.
+ *
+ * @param authorization - Raw Authorization header value
+ * @returns The token string, or null if not a Bearer token
+ */
+export declare function parseBearerToken(authorization: string | undefined): string | null;
+/**
+ * Parse cookie string into a key-value map.
+ *
+ * @param cookie - Raw Cookie header value
+ * @returns Parsed cookies
+ */
+export declare function parseCookies(cookie: string | undefined): Record<string, string>;
+/**
+ * Check if a token is expired without verifying the signature.
+ *
+ * @param token - JWT token string
+ * @returns Whether the token appears expired
+ */
+export declare function isTokenExpired(token: string): boolean;
+/**
+ * Extract the user ID from a JWT payload without verifying.
+ *
+ * @param token - JWT token string
+ * @returns User ID or null
+ */
+export declare function extractUserId(token: string): string | null;
+/**
+ * Generate a CSRF token.
+ *
+ * @returns Random hex string for CSRF protection
+ */
+export declare function generateCsrfToken(): string;
+//# sourceMappingURL=authUtils.helper.d.ts.map

package/dist/authUtils/authUtils.helper.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authUtils.helper.d.ts","sourceRoot":"","sources":["../../src/authUtils/authUtils.helper.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAC9B,aAAa,EAAE,MAAM,GAAG,SAAS,GAChC,MAAM,GAAG,IAAI,CAKf;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAC1B,MAAM,EAAE,MAAM,GAAG,SAAS,GACzB,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAUxB;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAerD;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAc1D;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C"}

package/dist/authUtils/authUtils.helper.js

@@ -0,0 +1,84 @@
+/**
+ * Auth utility helpers.
+ *
+ * @module authUtils
+ */
+import { randomBytes } from "node:crypto";
+/**
+ * Parse a Bearer token from an Authorization header.
+ *
+ * @param authorization - Raw Authorization header value
+ * @returns The token string, or null if not a Bearer token
+ */
+export function parseBearerToken(authorization) {
+    if (!authorization)
+        return null;
+    const parts = authorization.split(" ");
+    if (parts.length !== 2 || parts[0] !== "Bearer")
+        return null;
+    return parts[1] ?? null;
+}
+/**
+ * Parse cookie string into a key-value map.
+ *
+ * @param cookie - Raw Cookie header value
+ * @returns Parsed cookies
+ */
+export function parseCookies(cookie) {
+    const result = {};
+    if (!cookie)
+        return result;
+    for (const part of cookie.split(";")) {
+        const [key, ...rest] = part.trim().split("=");
+        if (key && rest.length > 0) {
+            result[key.trim()] = rest.join("=").trim();
+        }
+    }
+    return result;
+}
+/**
+ * Check if a token is expired without verifying the signature.
+ *
+ * @param token - JWT token string
+ * @returns Whether the token appears expired
+ */
+export function isTokenExpired(token) {
+    try {
+        const parts = token.split(".");
+        if (parts.length !== 3)
+            return true;
+        const payload = JSON.parse(Buffer.from(parts[1].replace(/-/g, "+").replace(/_/g, "/"), "base64").toString("utf-8"));
+        const now = Math.floor(Date.now() / 1000);
+        return payload.exp < now;
+    }
+    catch {
+        return true;
+    }
+}
+/**
+ * Extract the user ID from a JWT payload without verifying.
+ *
+ * @param token - JWT token string
+ * @returns User ID or null
+ */
+export function extractUserId(token) {
+    try {
+        const parts = token.split(".");
+        if (parts.length !== 3)
+            return null;
+        const payload = JSON.parse(Buffer.from(parts[1].replace(/-/g, "+").replace(/_/g, "/"), "base64").toString("utf-8"));
+        return payload.sub ?? null;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Generate a CSRF token.
+ *
+ * @returns Random hex string for CSRF protection
+ */
+export function generateCsrfToken() {
+    return randomBytes(32).toString("hex");
+}
+//# sourceMappingURL=authUtils.helper.js.map

package/dist/authUtils/authUtils.helper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authUtils.helper.js","sourceRoot":"","sources":["../../src/authUtils/authUtils.helper.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAC9B,aAAiC;IAEjC,IAAI,CAAC,aAAa;QAAE,OAAO,IAAI,CAAC;IAChC,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACvC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC7D,OAAO,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AAC1B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAC1B,MAA0B;IAE1B,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,IAAI,CAAC,MAAM;QAAE,OAAO,MAAM,CAAC;IAC3B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9C,IAAI,GAAG,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3B,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7C,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,KAAa;IAC1C,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACpC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CACxB,MAAM,CAAC,IAAI,CACT,KAAK,CAAC,CAAC,CAAE,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,EAC/C,QAAQ,CACT,CAAC,QAAQ,CAAC,OAAO,CAAC,CACpB,CAAC;QACF,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC1C,OAAO,OAAO,CAAC,GAAG,GAAG,GAAG,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACpC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CACxB,MAAM,CAAC,IAAI,CACT,KAAK,CAAC,CAAC,CAAE,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,EAC/C,QAAQ,CACT,CAAC,QAAQ,CAAC,OAAO,CAAC,CACpB,CAAC;QACF,OAAO,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB;IAC/B,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACzC,CAAC"}

package/dist/authUtils/index.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Auth utility helpers: token parsing, cookie parsing, CSRF.
+ *
+ * @module authUtils
+ */
+export { parseBearerToken, parseCookies, isTokenExpired, extractUserId, generateCsrfToken, } from "./authUtils.helper.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/authUtils/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/authUtils/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EACL,gBAAgB,EAChB,YAAY,EACZ,cAAc,EACd,aAAa,EACb,iBAAiB,GAClB,MAAM,uBAAuB,CAAC"}

package/dist/authUtils/index.js

@@ -0,0 +1,7 @@
+/**
+ * Auth utility helpers: token parsing, cookie parsing, CSRF.
+ *
+ * @module authUtils
+ */
+export { parseBearerToken, parseCookies, isTokenExpired, extractUserId, generateCsrfToken, } from "./authUtils.helper.js";
+//# sourceMappingURL=index.js.map

package/dist/authUtils/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/authUtils/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EACL,gBAAgB,EAChB,YAAY,EACZ,cAAc,EACd,aAAa,EACb,iBAAiB,GAClB,MAAM,uBAAuB,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,19 @@
+/**
+ * @zudojs/auth
+ *
+ * Authentication and authorization services for the Zudojs framework.
+ *
+ * Provides JWT token management (access + refresh), password hashing (scrypt),
+ * session management, RBAC (role-based access control), and auth utilities.
+ *
+ * @module @zudojs/auth
+ */
+export * from "./authTypes/index.js";
+export * from "./authErrors/index.js";
+export * from "./authPassword/index.js";
+export * from "./authToken/index.js";
+export { jwt } from "./authToken/jwt.namespace.js";
+export * from "./authSession/index.js";
+export * from "./authProvider/index.js";
+export * from "./authUtils/index.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,cAAc,sBAAsB,CAAC;AACrC,cAAc,uBAAuB,CAAC;AACtC,cAAc,yBAAyB,CAAC;AACxC,cAAc,sBAAsB,CAAC;AACrC,OAAO,EAAE,GAAG,EAAE,MAAM,8BAA8B,CAAC;AACnD,cAAc,wBAAwB,CAAC;AACvC,cAAc,yBAAyB,CAAC;AACxC,cAAc,sBAAsB,CAAC"}

package/dist/index.js

@@ -0,0 +1,19 @@
+/**
+ * @zudojs/auth
+ *
+ * Authentication and authorization services for the Zudojs framework.
+ *
+ * Provides JWT token management (access + refresh), password hashing (scrypt),
+ * session management, RBAC (role-based access control), and auth utilities.
+ *
+ * @module @zudojs/auth
+ */
+export * from "./authTypes/index.js";
+export * from "./authErrors/index.js";
+export * from "./authPassword/index.js";
+export * from "./authToken/index.js";
+export { jwt } from "./authToken/jwt.namespace.js";
+export * from "./authSession/index.js";
+export * from "./authProvider/index.js";
+export * from "./authUtils/index.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,cAAc,sBAAsB,CAAC;AACrC,cAAc,uBAAuB,CAAC;AACtC,cAAc,yBAAyB,CAAC;AACxC,cAAc,sBAAsB,CAAC;AACrC,OAAO,EAAE,GAAG,EAAE,MAAM,8BAA8B,CAAC;AACnD,cAAc,wBAAwB,CAAC;AACvC,cAAc,yBAAyB,CAAC;AACxC,cAAc,sBAAsB,CAAC"}

package/package.json

@@ -0,0 +1,55 @@
+{
+  "name": "@zudojs/auth",
+  "version": "0.0.1",
+  "description": "Authentication and authorization services for the Zudojs framework — JWT, sessions, RBAC, OAuth2, and password management.",
+  "license": "MIT",
+  "type": "module",
+  "main": "./dist/index.js",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "default": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "clean": "rm -rf dist",
+    "test": "vitest run",
+    "test:watch": "vitest"
+  },
+  "dependencies": {
+    "@zudojs/errors": "workspace:*",
+    "@zudojs/constants": "workspace:*",
+    "@zudojs/permissions": "workspace:*"
+  },
+  "engines": {
+    "node": ">=24.0.0"
+  },
+  "devDependencies": {
+    "typescript": "^7.0.2",
+    "vitest": "^4.1.11"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "keywords": [
+    "zudojs",
+    "authentication",
+    "authorization",
+    "jwt",
+    "sessions",
+    "rbac"
+  ],
+  "homepage": "https://github.com/oyinlola-tech/zudo#readme",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/oyinlola-tech/zudo"
+  }
+}