auth-vir 2.7.1 → 2.7.2

package/dist/auth-client/backend-auth.client.js

@@ -146,7 +146,9 @@ export class BackendAuthClient {
     async getSecureUser({ requestHeaders, isSignUpCookie, allowUserAuthRefresh, }) {
         const userIdResult = await extractUserIdFromRequestHeaders(requestHeaders, await this.getJwtParams(), isSignUpCookie ? AuthCookieName.SignUp : AuthCookieName.Auth, this.config.overrides);
         if (!userIdResult) {
-            authLog('auth-vir: getSecureUser failed - could not extract user from request');
+            if (!isSignUpCookie) {
+                authLog('auth-vir: getSecureUser failed - could not extract user from request');
+            }
             return undefined;
         }
         const user = await this.getDatabaseUser({

package/dist/auth.js

@@ -24,7 +24,11 @@ function readCsrfTokenHeader(headers, overrides) {
     if (!rawCsrfToken) {
         return undefined;
     }
-    return parseCsrfToken(rawCsrfToken).csrfToken?.token || rawCsrfToken;
+    const token = parseCsrfToken(rawCsrfToken).csrfToken?.token || rawCsrfToken;
+    if (!token) {
+        authLog('auth-vir: CSRF token not found.');
+    }
+    return token;
 }
 /**
  * Extract the user id from a request by checking both the request cookie and CSRF token. This is
@@ -48,11 +52,13 @@ export async function extractUserIdFromRequestHeaders(headers, jwtParams, cookie
         }
         const jwt = await extractCookieJwt(cookie, jwtParams, cookieName);
         if (!jwt || jwt.data.csrfToken !== csrfToken) {
-            authLog('auth-vir: extractUserIdFromRequestHeaders failed - JWT invalid or CSRF mismatch', {
-                hasJwt: !!jwt,
-                csrfMatch: jwt ? jwt.data.csrfToken === csrfToken : false,
-                cookieName,
-            });
+            if (cookieName === AuthCookieName.Auth) {
+                authLog('auth-vir: extractUserIdFromRequestHeaders failed - JWT invalid or CSRF mismatch', {
+                    hasJwt: !!jwt,
+                    csrfMatch: jwt ? jwt.data.csrfToken === csrfToken : false,
+                    cookieName,
+                });
+            }
             return undefined;
         }
         return {

package/dist/csrf-token.js

@@ -75,7 +75,6 @@ export function parseCsrfToken(value) {
         fallbackValue: undefined,
     });
     if (!csrfToken) {
-        authLog('auth-vir: CSRF token parse failed - will cause logout if used');
         return {
             failure: CsrfTokenFailureReason.ParseFailed,
         };
@@ -84,9 +83,6 @@ export function parseCsrfToken(value) {
         fullDate: getNowInUtcTimezone(),
         relativeTo: csrfToken.expiration,
     })) {
-        authLog('auth-vir: CSRF token expired - will cause logout', {
-            expiration: csrfToken.expiration,
-        });
         return {
             failure: CsrfTokenFailureReason.Expired,
         };

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "auth-vir",
-    "version": "2.7.1",
+    "version": "2.7.2",
     "description": "Auth made easy and secure via JWT cookies, CSRF tokens, and password hashing helpers.",
     "keywords": [
         "auth",
@@ -42,8 +42,8 @@
         "test:web": "virmator test web"
     },
     "dependencies": {
-        "@augment-vir/assert": "^31.59.0",
-        "@augment-vir/common": "^31.59.0",
+        "@augment-vir/assert": "^31.59.2",
+        "@augment-vir/common": "^31.59.2",
         "date-vir": "^8.1.0",
         "detect-activity": "^0.0.1",
         "hash-wasm": "^4.12.0",
@@ -53,8 +53,8 @@
         "url-vir": "^2.1.7"
     },
     "devDependencies": {
-        "@augment-vir/test": "^31.59.0",
-        "@prisma/client": "^6.18.0",
+        "@augment-vir/test": "^31.59.2",
+        "@prisma/client": "^6.19.2",
         "@types/node": "^24.9.1",
         "@web/dev-server-esbuild": "^1.0.4",
         "@web/test-runner": "^0.20.2",

package/src/auth-client/backend-auth.client.ts

@@ -388,7 +388,9 @@ export class BackendAuthClient<
             this.config.overrides,
         );
         if (!userIdResult) {
-            authLog('auth-vir: getSecureUser failed - could not extract user from request');
+            if (!isSignUpCookie) {
+                authLog('auth-vir: getSecureUser failed - could not extract user from request');
+            }
             return undefined;
         }
 

package/src/auth.ts

@@ -70,7 +70,13 @@ function readCsrfTokenHeader(
         return undefined;
     }
 
-    return parseCsrfToken(rawCsrfToken).csrfToken?.token || rawCsrfToken;
+    const token = parseCsrfToken(rawCsrfToken).csrfToken?.token || rawCsrfToken;
+
+    if (!token) {
+        authLog('auth-vir: CSRF token not found.');
+    }
+
+    return token;
 }
 
 /**
@@ -108,14 +114,16 @@ export async function extractUserIdFromRequestHeaders<UserId extends string | nu
         const jwt = await extractCookieJwt(cookie, jwtParams, cookieName);
 
         if (!jwt || jwt.data.csrfToken !== csrfToken) {
-            authLog(
-                'auth-vir: extractUserIdFromRequestHeaders failed - JWT invalid or CSRF mismatch',
-                {
-                    hasJwt: !!jwt,
-                    csrfMatch: jwt ? jwt.data.csrfToken === csrfToken : false,
-                    cookieName,
-                },
-            );
+            if (cookieName === AuthCookieName.Auth) {
+                authLog(
+                    'auth-vir: extractUserIdFromRequestHeaders failed - JWT invalid or CSRF mismatch',
+                    {
+                        hasJwt: !!jwt,
+                        csrfMatch: jwt ? jwt.data.csrfToken === csrfToken : false,
+                        cookieName,
+                    },
+                );
+            }
             return undefined;
         }
 

package/src/csrf-token.ts

@@ -138,7 +138,6 @@ export function parseCsrfToken(value: string | undefined | null): Readonly<GetCs
     );
 
     if (!csrfToken) {
-        authLog('auth-vir: CSRF token parse failed - will cause logout if used');
         return {
             failure: CsrfTokenFailureReason.ParseFailed,
         };
@@ -150,9 +149,6 @@ export function parseCsrfToken(value: string | undefined | null): Readonly<GetCs
             relativeTo: csrfToken.expiration,
         })
     ) {
-        authLog('auth-vir: CSRF token expired - will cause logout', {
-            expiration: csrfToken.expiration,
-        });
         return {
             failure: CsrfTokenFailureReason.Expired,
         };