@~lyre/auth 0.0.5 → 0.0.7

package/dist/{chunk-LMIRQKLN.js → chunk-RADVGFYQ.js}

@@ -2,11 +2,15 @@
 import { createHmac, timingSafeEqual } from "crypto";
 var SESSION_COOKIE_NAME = "platform_session";
 var STATE_COOKIE_NAME = "accounts_auth_state";
+function normalizeOptionalString(value) {
+  const trimmed = value?.trim();
+  return trimmed ? trimmed : void 0;
+}
 function createAccountsClientConfig(input = {}) {
   return {
-    baseUrl: input.baseUrl ?? process.env.ACCOUNTS_BASE_URL,
+    baseUrl: normalizeOptionalString(input.baseUrl ?? process.env.ACCOUNTS_BASE_URL),
     clientId: input.clientId ?? process.env.ACCOUNTS_CLIENT_ID ?? "accounts-app",
-    clientSecret: input.clientSecret ?? process.env.ACCOUNTS_CLIENT_SECRET,
+    clientSecret: normalizeOptionalString(input.clientSecret ?? process.env.ACCOUNTS_CLIENT_SECRET),
     redirectUri: input.redirectUri ?? process.env.ACCOUNTS_REDIRECT_URI ?? "http://localhost:5173/auth/callback",
     logoutRedirectUri: input.logoutRedirectUri ?? process.env.ACCOUNTS_LOGOUT_REDIRECT_URI ?? "http://localhost:5173/",
     useMock: input.useMock ?? (process.env.ACCOUNTS_USE_MOCK === "true" || !process.env.ACCOUNTS_BASE_URL || !process.env.ACCOUNTS_CLIENT_ID)
@@ -94,18 +98,22 @@ async function exchangeAuthorizationCode(input) {
     return createMockTokenResponse(input.code);
   }
   const fetchImpl = input.fetchImpl ?? fetch;
+  const clientSecret = normalizeOptionalString(input.config.clientSecret);
+  const tokenBody = {
+    grant_type: "authorization_code",
+    code: input.code,
+    redirect_uri: input.config.redirectUri,
+    client_id: input.config.clientId
+  };
+  if (clientSecret) {
+    tokenBody.client_secret = clientSecret;
+  }
   const response = await fetchImpl(new URL("/api/auth/token", input.config.baseUrl), {
     method: "POST",
     headers: {
       "content-type": "application/json"
     },
-    body: JSON.stringify({
-      grant_type: "authorization_code",
-      code: input.code,
-      redirect_uri: input.config.redirectUri,
-      client_id: input.config.clientId,
-      client_secret: input.config.clientSecret
-    })
+    body: JSON.stringify(tokenBody)
   });
   if (!response.ok) {
     throw new Error(`Accounts token exchange failed with status ${response.status}.`);

package/dist/index.js

@@ -9,7 +9,7 @@ import {
   readPlatformSessionCookie,
   resolveActiveTenant,
   syncAccountsUser
-} from "./chunk-LMIRQKLN.js";
+} from "./chunk-RADVGFYQ.js";
 export {
   beginAccountsLoginRedirect,
   clearPlatformSessionCookie,

package/dist/sveltekit.js

@@ -4,10 +4,9 @@ import {
   handleAccountsCallback,
   identityPassthroughSync,
   readPlatformSessionCookie
-} from "./chunk-LMIRQKLN.js";
+} from "./chunk-RADVGFYQ.js";
 
 // src/sveltekit.ts
-import { redirect } from "@sveltejs/kit";
 var STATE_COOKIE = "accounts_auth_state";
 function redirectWithCookies(location, cookies) {
   const headers = new Headers({ location });
@@ -65,7 +64,7 @@ function createAuthHandle(opts) {
           headers: { "content-type": "application/json" }
         });
       }
-      throw redirect(302, `${loginPath}?next=${encodeURIComponent(path + event.url.search)}`);
+      return redirectWithCookies(`${loginPath}?next=${encodeURIComponent(path + event.url.search)}`, []);
     }
     return resolve(event);
   };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@~lyre/auth",
-  "version": "0.0.5",
+  "version": "0.0.7",
   "description": "Shared Axis Accounts auth SDK — framework-agnostic session/identity core (HMAC-signed cookies, accounts login/callback/logout) plus an optional turnkey SvelteKit adapter.",
   "type": "module",
   "sideEffects": false,