aaspai-authx 0.0.8 → 0.1.0

package/dist/express/index.js

@@ -1,9 +1,29 @@
 // src/express/auth.routes.ts
 import bcrypt2 from "bcryptjs";
 import { randomUUID } from "crypto";
-import express, { Router } from "express";
+import express, {
+  Router
+} from "express";
 import jwt4 from "jsonwebtoken";
 
+// src/core/utils.ts
+function baseProjectCookieOptionsFrom(cookie) {
+  const base = {
+    secure: cookie.secure ?? false,
+    sameSite: cookie.sameSite ?? "lax",
+    path: cookie.path ?? "/",
+    maxAge: cookie.maxAgeMs
+  };
+  if (cookie.domain) base.domain = cookie.domain;
+  return base;
+}
+function hasAnyRole(session, roles) {
+  if (!session || !session.roles || !Array.isArray(roles) || roles.length === 0) {
+    return false;
+  }
+  return roles.some((role) => session.roles.includes(role));
+}
+
 // src/config/loadConfig.ts
 function loadConfig() {
   return {
@@ -581,6 +601,16 @@ function createAuthRouter(options = {}) {
   const r = Router();
   const email = new EmailService();
   const authAdmin = new AuthAdminService();
+  const isProdEnv = process.env.NODE_ENV === "production";
+  const cookieConfig = {
+    sameSite: options.cookie?.sameSite ?? (isProdEnv ? "none" : "lax"),
+    // default if not provided
+    secure: options.cookie?.secure ?? isProdEnv,
+    // default: secure in prod
+    domain: options.cookie?.domain ?? void 0,
+    path: options.cookie?.path ?? "/",
+    maxAgeMs: options.cookie?.maxAgeMs ?? 24 * 60 * 60 * 1e3
+  };
   r.use(express.json());
   r.use(express.urlencoded({ extended: true }));
   r.get(
@@ -611,10 +641,10 @@ function createAuthRouter(options = {}) {
         });
       }
       const tokens = generateTokens(user);
-      setAuthCookies(res, tokens);
+      setAuthCookies(res, tokens, cookieConfig);
       if (user.projectId) {
         res.cookie(options.projectCookieName || "projectId", user.projectId, {
-          ...cookieOpts(false),
+          ...baseProjectCookieOptionsFrom(cookieConfig),
           httpOnly: true
         });
       }
@@ -946,26 +976,22 @@ function createAuthRouter(options = {}) {
   });
   return r;
 }
-function setAuthCookies(res, tokens) {
+function setAuthCookies(res, tokens, cookie) {
+  const base = {
+    httpOnly: true,
+    secure: cookie.secure ?? false,
+    sameSite: cookie.sameSite ?? "lax",
+    path: cookie.path ?? "/",
+    maxAge: cookie.maxAgeMs
+  };
+  if (cookie.domain) {
+    base.domain = cookie.domain;
+  }
   if (tokens?.access_token) {
-    res.cookie("access_token", tokens.access_token, {
-      httpOnly: true,
-      secure: false,
-      sameSite: "lax",
-      maxAge: 24 * 60 * 60 * 1e3,
-      // 24 hours
-      path: "/"
-    });
+    res.cookie("access_token", tokens.access_token, base);
   }
   if (tokens?.refresh_token) {
-    res.cookie("refresh_token", tokens.refresh_token, {
-      httpOnly: true,
-      secure: false,
-      sameSite: "lax",
-      maxAge: 24 * 60 * 60 * 1e3,
-      // 24 hours
-      path: "/"
-    });
+    res.cookie("refresh_token", tokens.refresh_token, base);
   }
 }
 function toUserResponse(user) {
@@ -1174,14 +1200,6 @@ import bcrypt3 from "bcryptjs";
 import { randomUUID as randomUUID3 } from "crypto";
 import express3, { Router as Router5 } from "express";
 
-// src/core/utils.ts
-function hasAnyRole(session, roles) {
-  if (!session || !session.roles || !Array.isArray(roles) || roles.length === 0) {
-    return false;
-  }
-  return roles.some((role) => session.roles.includes(role));
-}
-
 // src/middlewares/requireRole.ts
 function requireRole(...roles) {
   return (req, res, next) => {