auth-vir 2.3.3 → 2.3.5

package/dist/auth-client/frontend-auth.client.d.ts

@@ -1,4 +1,4 @@
-import { createBlockingInterval, type JsonCompatibleObject, type MaybePromise, type PartialWithUndefined, type SelectFrom, type SetOptionalWithUndefined } from '@augment-vir/common';
+import { createBlockingInterval, type JsonCompatibleObject, type MaybePromise, type PartialWithUndefined, type SelectFrom } from '@augment-vir/common';
 import { type AnyDuration } from 'date-vir';
 import { type EmptyObject } from 'type-fest';
 /**
@@ -23,10 +23,13 @@ export type FrontendAuthClientConfig = PartialWithUndefined<{
          * Get a response from the backend to see if the user is still authenticated. If the
          * response returns a non-authorized status, the user is wiped. Any other status is
          * ignored.
+         *
+         * If the user is not currently authorized, this should return `undefined` to prevent
+         * unnecessary network traffic.
          */
         performCheck: () => MaybePromise<SelectFrom<Response, {
             status: true;
-        }>>;
+        }> | undefined>;
         /** @default {minutes: 1} */
         interval?: AnyDuration | undefined;
     };
@@ -84,9 +87,11 @@ export declare class FrontendAuthClient<AssumedUserParams extends JsonCompatible
     /**
      * Use to verify _all_ responses received from the backend. Immediately logs the user out once
      * an unauthorized response is detected.
+     *
+     * @returns `true` if the auth is okay, `false` otherwise.
      */
-    verifyResponseAuth(response: Readonly<SetOptionalWithUndefined<SelectFrom<Response, {
+    verifyResponseAuth(response: Readonly<PartialWithUndefined<SelectFrom<Response, {
         status: true;
         headers: true;
-    }>, 'headers'>>): Promise<void>;
+    }>>>): Promise<boolean>;
 }

package/dist/auth-client/frontend-auth.client.js

@@ -126,11 +126,20 @@ export class FrontendAuthClient {
     /**
      * Use to verify _all_ responses received from the backend. Immediately logs the user out once
      * an unauthorized response is detected.
+     *
+     * @returns `true` if the auth is okay, `false` otherwise.
      */
     async verifyResponseAuth(response) {
         if (response.status === HttpStatus.Unauthorized &&
             !response.headers?.get(AuthHeaderName.IsSignUpAuth)) {
             await this.logout();
+            return false;
         }
+        /** If the response has a new CSRF token, store it. */
+        const { csrfToken } = extractCsrfTokenHeader(response, this.config.overrides);
+        if (csrfToken) {
+            storeCsrfToken(csrfToken, this.config.overrides);
+        }
+        return true;
     }
 }

package/dist/csrf-token.d.ts

@@ -62,9 +62,9 @@ export type GetCsrfTokenResult = RequireExactlyOne<{
  *
  * @category Auth : Client
  */
-export declare function extractCsrfTokenHeader(response: Readonly<SelectFrom<Response, {
+export declare function extractCsrfTokenHeader(response: Readonly<PartialWithUndefined<SelectFrom<Response, {
     headers: true;
-}>>, overrides?: PartialWithUndefined<{
+}>>>, overrides?: PartialWithUndefined<{
     csrfHeaderName: string;
 }>): Readonly<GetCsrfTokenResult>;
 /**

package/dist/csrf-token.js

@@ -45,7 +45,7 @@ export var CsrfTokenFailureReason;
  */
 export function extractCsrfTokenHeader(response, overrides = {}) {
     const csrfTokenHeaderName = overrides.csrfHeaderName || AuthHeaderName.CsrfToken;
-    const rawCsrfToken = response.headers.get(csrfTokenHeaderName);
+    const rawCsrfToken = response.headers?.get(csrfTokenHeaderName);
     return parseCsrfToken(rawCsrfToken);
 }
 /**

package/dist/generated/internal/class.js

@@ -21,8 +21,8 @@ const config = {
             "fromEnvVar": null
         },
         "config": {
-            "engineType": "client",
-            "moduleFormat": "esm"
+            "moduleFormat": "esm",
+            "engineType": "client"
         },
         "binaryTargets": [
             {
@@ -39,8 +39,8 @@ const config = {
         "isCustomOutput": true
     },
     "relativePath": "../../test-files",
-    "clientVersion": "6.17.1",
-    "engineVersion": "272a37d34178c2894197e17273bf937f25acdeac",
+    "clientVersion": "6.18.0",
+    "engineVersion": "34b5a692b7bd79939a9a2c3ef97d816e749cda2f",
     "datasourceNames": [
         "db"
     ],
@@ -54,8 +54,8 @@ const config = {
             }
         }
     },
-    "inlineSchema": "generator jsClient {\n  provider        = \"prisma-client\"\n  previewFeatures = [\"strictUndefinedChecks\", \"relationJoins\"]\n  output          = \"../src/generated\"\n  engineType      = \"client\"\n  moduleFormat    = \"esm\"\n}\n\ngenerator shapes {\n  provider = \"prisma-shapes\"\n  output   = \"../src/generated\"\n}\n\ngenerator stringDates {\n  provider = \"prisma-string-dates\"\n  output   = \"../src/generated\"\n}\n\ngenerator taggedIds {\n  provider = \"prisma-tagged-ids\"\n  output   = \"../src/generated\"\n}\n\ndatasource db {\n  provider = \"postgresql\"\n  url      = env(\"DATABASE_URL\")\n}\n\nmodel User {\n  id        String   @id @default(cuid(2))\n  createdAt DateTime @default(now())\n  updatedAt DateTime @default(now()) @updatedAt\n\n  name String\n}\n",
-    "inlineSchemaHash": "7d1ca802697687a0d28701b345324b445a425e1f524d6377a89cbc48895f7110",
+    "inlineSchema": "generator jsClient {\n  provider        = \"prisma-client\"\n  previewFeatures = [\"strictUndefinedChecks\", \"relationJoins\"]\n  output          = \"../src/generated\"\n  engineType      = \"client\"\n  moduleFormat    = \"esm\"\n}\n\ngenerator shapes {\n  provider = \"prisma-shapes\"\n  output   = \"../src/generated\"\n}\n\ngenerator stringDates {\n  provider = \"prisma-string-dates\"\n  output   = \"../src/generated\"\n}\n\ngenerator brandedFields {\n  provider = \"prisma-branded-fields\"\n  output   = \"../src/generated\"\n}\n\ndatasource db {\n  provider = \"postgresql\"\n  url      = env(\"DATABASE_URL\")\n}\n\nmodel User {\n  id        String   @id @default(cuid(2))\n  createdAt DateTime @default(now())\n  updatedAt DateTime @default(now()) @updatedAt\n\n  name String\n}\n",
+    "inlineSchemaHash": "23208c8e58615c00e5101cfaaa5341ce46c109a1169d3aea10dae8caa3594dcc",
     "copyEngine": true,
     "runtimeDataModel": {
         "models": {},

package/dist/generated/internal/prismaNamespace.d.ts

@@ -58,13 +58,14 @@ export type PrismaVersion = {
     engine: string;
 };
 /**
- * Prisma Client JS version: 6.17.1
- * Query Engine version: 272a37d34178c2894197e17273bf937f25acdeac
+ * Prisma Client JS version: 6.18.0
+ * Query Engine version: 34b5a692b7bd79939a9a2c3ef97d816e749cda2f
  */
 export declare const prismaVersion: PrismaVersion;
 /**
  * Utility Types
  */
+export type Bytes = runtime.Bytes;
 export type JsonObject = runtime.JsonObject;
 export type JsonArray = runtime.JsonArray;
 export type JsonValue = runtime.JsonValue;

package/dist/generated/internal/prismaNamespace.js

@@ -38,12 +38,12 @@ export const skip = runtime.skip;
 export const Decimal = runtime.Decimal;
 export const getExtensionContext = runtime.Extensions.getExtensionContext;
 /**
- * Prisma Client JS version: 6.17.1
- * Query Engine version: 272a37d34178c2894197e17273bf937f25acdeac
+ * Prisma Client JS version: 6.18.0
+ * Query Engine version: 34b5a692b7bd79939a9a2c3ef97d816e749cda2f
  */
 export const prismaVersion = {
-    client: "6.17.1",
-    engine: "272a37d34178c2894197e17273bf937f25acdeac"
+    client: "6.18.0",
+    engine: "34b5a692b7bd79939a9a2c3ef97d816e749cda2f"
 };
 export const NullTypes = {
     DbNull: runtime.objectEnumValues.classes.DbNull,

package/dist/generated/models/User.d.ts

@@ -1,8 +1,5 @@
-import { type Tagged } from 'type-fest';
-export type UserId = Tagged<string, 'model-User-field-id', {
-    model: 'User';
-    field: 'id';
-}>;
+import { type Branded } from '@augment-vir/common';
+export type UserId = Branded<string, 'model-User-field-id'>;
 import { type UtcIsoString } from 'date-vir';
 import type * as runtime from "@prisma/client/runtime/client";
 import type * as Prisma from "../internal/prismaNamespace.js";

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "auth-vir",
-    "version": "2.3.3",
+    "version": "2.3.5",
     "description": "Auth made easy and secure via JWT cookies, CSRF tokens, and password hashing helpers.",
     "keywords": [
         "auth",
@@ -42,18 +42,18 @@
         "test:web": "virmator test web"
     },
     "dependencies": {
-        "@augment-vir/assert": "^31.42.0",
-        "@augment-vir/common": "^31.42.0",
+        "@augment-vir/assert": "^31.47.0",
+        "@augment-vir/common": "^31.47.0",
         "date-vir": "^8.0.0",
         "hash-wasm": "^4.12.0",
         "jose": "^6.1.0",
-        "object-shape-tester": "^6.9.2",
+        "object-shape-tester": "^6.9.3",
         "type-fest": "^5.1.0",
         "url-vir": "^2.1.6"
     },
     "devDependencies": {
-        "@augment-vir/test": "^31.42.0",
-        "@prisma/client": "^6.17.1",
+        "@augment-vir/test": "^31.47.0",
+        "@prisma/client": "^6.18.0",
         "@types/node": "^24.9.1",
         "@web/dev-server-esbuild": "^1.0.4",
         "@web/test-runner": "^0.20.2",
@@ -62,7 +62,7 @@
         "@web/test-runner-visual-regression": "^0.10.0",
         "istanbul-smart-text-reporter": "^1.1.5",
         "markdown-code-example-inserter": "^3.0.3",
-        "prisma-vir": "^1.2.2",
+        "prisma-vir": "^2.1.0",
         "typedoc": "^0.28.14"
     },
     "engines": {

package/src/auth-client/frontend-auth.client.ts

@@ -5,7 +5,6 @@ import {
     type MaybePromise,
     type PartialWithUndefined,
     type SelectFrom,
-    type SetOptionalWithUndefined,
 } from '@augment-vir/common';
 import {type AnyDuration} from 'date-vir';
 import {type EmptyObject} from 'type-fest';
@@ -41,14 +40,18 @@ export type FrontendAuthClientConfig = PartialWithUndefined<{
          * Get a response from the backend to see if the user is still authenticated. If the
          * response returns a non-authorized status, the user is wiped. Any other status is
          * ignored.
+         *
+         * If the user is not currently authorized, this should return `undefined` to prevent
+         * unnecessary network traffic.
          */
         performCheck: () => MaybePromise<
-            SelectFrom<
-                Response,
-                {
-                    status: true;
-                }
-            >
+            | SelectFrom<
+                  Response,
+                  {
+                      status: true;
+                  }
+              >
+            | undefined
         >;
         /** @default {minutes: 1} */
         interval?: AnyDuration | undefined;
@@ -76,6 +79,7 @@ export class FrontendAuthClient<AssumedUserParams extends JsonCompatibleObject =
             this.userCheckInterval = createBlockingInterval(
                 async () => {
                     const response = await config.checkUser?.performCheck();
+
                     if (response) {
                         await this.verifyResponseAuth({
                             status: response.status,
@@ -223,26 +227,36 @@ export class FrontendAuthClient<AssumedUserParams extends JsonCompatibleObject =
     /**
      * Use to verify _all_ responses received from the backend. Immediately logs the user out once
      * an unauthorized response is detected.
+     *
+     * @returns `true` if the auth is okay, `false` otherwise.
      */
     public async verifyResponseAuth(
         response: Readonly<
-            SetOptionalWithUndefined<
+            PartialWithUndefined<
                 SelectFrom<
                     Response,
                     {
                         status: true;
                         headers: true;
                     }
-                >,
-                'headers'
+                >
             >
         >,
-    ): Promise<void> {
+    ): Promise<boolean> {
         if (
             response.status === HttpStatus.Unauthorized &&
             !response.headers?.get(AuthHeaderName.IsSignUpAuth)
         ) {
             await this.logout();
+            return false;
+        }
+
+        /** If the response has a new CSRF token, store it. */
+        const {csrfToken} = extractCsrfTokenHeader(response, this.config.overrides);
+        if (csrfToken) {
+            storeCsrfToken(csrfToken, this.config.overrides);
         }
+
+        return true;
     }
 }

package/src/csrf-token.ts

@@ -77,14 +77,14 @@ export type GetCsrfTokenResult = RequireExactlyOne<{
  * @category Auth : Client
  */
 export function extractCsrfTokenHeader(
-    response: Readonly<SelectFrom<Response, {headers: true}>>,
+    response: Readonly<PartialWithUndefined<SelectFrom<Response, {headers: true}>>>,
     overrides: PartialWithUndefined<{
         csrfHeaderName: string;
     }> = {},
 ): Readonly<GetCsrfTokenResult> {
     const csrfTokenHeaderName = overrides.csrfHeaderName || AuthHeaderName.CsrfToken;
 
-    const rawCsrfToken = response.headers.get(csrfTokenHeaderName);
+    const rawCsrfToken = response.headers?.get(csrfTokenHeaderName);
 
     return parseCsrfToken(rawCsrfToken);
 }

package/src/generated/internal/class.ts

@@ -26,8 +26,8 @@ const config: runtime.GetPrismaClientConfig = {
       "fromEnvVar": null
     },
     "config": {
-      "engineType": "client",
-      "moduleFormat": "esm"
+      "moduleFormat": "esm",
+      "engineType": "client"
     },
     "binaryTargets": [
       {
@@ -44,8 +44,8 @@ const config: runtime.GetPrismaClientConfig = {
     "isCustomOutput": true
   },
   "relativePath": "../../test-files",
-  "clientVersion": "6.17.1",
-  "engineVersion": "272a37d34178c2894197e17273bf937f25acdeac",
+  "clientVersion": "6.18.0",
+  "engineVersion": "34b5a692b7bd79939a9a2c3ef97d816e749cda2f",
   "datasourceNames": [
     "db"
   ],
@@ -59,8 +59,8 @@ const config: runtime.GetPrismaClientConfig = {
       }
     }
   },
-  "inlineSchema": "generator jsClient {\n  provider        = \"prisma-client\"\n  previewFeatures = [\"strictUndefinedChecks\", \"relationJoins\"]\n  output          = \"../src/generated\"\n  engineType      = \"client\"\n  moduleFormat    = \"esm\"\n}\n\ngenerator shapes {\n  provider = \"prisma-shapes\"\n  output   = \"../src/generated\"\n}\n\ngenerator stringDates {\n  provider = \"prisma-string-dates\"\n  output   = \"../src/generated\"\n}\n\ngenerator taggedIds {\n  provider = \"prisma-tagged-ids\"\n  output   = \"../src/generated\"\n}\n\ndatasource db {\n  provider = \"postgresql\"\n  url      = env(\"DATABASE_URL\")\n}\n\nmodel User {\n  id        String   @id @default(cuid(2))\n  createdAt DateTime @default(now())\n  updatedAt DateTime @default(now()) @updatedAt\n\n  name String\n}\n",
-  "inlineSchemaHash": "7d1ca802697687a0d28701b345324b445a425e1f524d6377a89cbc48895f7110",
+  "inlineSchema": "generator jsClient {\n  provider        = \"prisma-client\"\n  previewFeatures = [\"strictUndefinedChecks\", \"relationJoins\"]\n  output          = \"../src/generated\"\n  engineType      = \"client\"\n  moduleFormat    = \"esm\"\n}\n\ngenerator shapes {\n  provider = \"prisma-shapes\"\n  output   = \"../src/generated\"\n}\n\ngenerator stringDates {\n  provider = \"prisma-string-dates\"\n  output   = \"../src/generated\"\n}\n\ngenerator brandedFields {\n  provider = \"prisma-branded-fields\"\n  output   = \"../src/generated\"\n}\n\ndatasource db {\n  provider = \"postgresql\"\n  url      = env(\"DATABASE_URL\")\n}\n\nmodel User {\n  id        String   @id @default(cuid(2))\n  createdAt DateTime @default(now())\n  updatedAt DateTime @default(now()) @updatedAt\n\n  name String\n}\n",
+  "inlineSchemaHash": "23208c8e58615c00e5101cfaaa5341ce46c109a1169d3aea10dae8caa3594dcc",
   "copyEngine": true,
   "runtimeDataModel": {
     "models": {},

package/src/generated/internal/prismaNamespace.ts

@@ -93,18 +93,19 @@ export type PrismaVersion = {
 }
 
 /**
- * Prisma Client JS version: 6.17.1
- * Query Engine version: 272a37d34178c2894197e17273bf937f25acdeac
+ * Prisma Client JS version: 6.18.0
+ * Query Engine version: 34b5a692b7bd79939a9a2c3ef97d816e749cda2f
  */
 export const prismaVersion: PrismaVersion = {
-  client: "6.17.1",
-  engine: "272a37d34178c2894197e17273bf937f25acdeac"
+  client: "6.18.0",
+  engine: "34b5a692b7bd79939a9a2c3ef97d816e749cda2f"
 }
 
 /**
  * Utility Types
  */
 
+export type Bytes = runtime.Bytes
 export type JsonObject = runtime.JsonObject
 export type JsonArray = runtime.JsonArray
 export type JsonValue = runtime.JsonValue

package/src/generated/models/User.ts

@@ -1,6 +1,6 @@
-import {type Tagged} from 'type-fest';
+import {type Branded} from '@augment-vir/common';
 
-export type UserId = Tagged<string, 'model-User-field-id', {model: 'User', field: 'id'}>;
+export type UserId = Branded<string, 'model-User-field-id'>;
 
 // @ts-nocheck
 import {type UtcIsoString} from 'date-vir';