auth-vir 3.0.0 → 3.0.1

package/dist/auth-client/backend-auth.client.d.ts

@@ -46,6 +46,7 @@ export type BackendAuthClientConfig<DatabaseUser extends AnyObject, UserId exten
          * their user identity. Otherwise, this is `undefined`.
          */
         assumingUser: AssumedUserParams | undefined;
+        requestHeaders: Readonly<IncomingHttpHeaders>;
     }) => MaybePromise<DatabaseUser | undefined | null>;
     /**
      * Get JWT keys produced by {@link generateNewJwtKeys}. Make sure that each time this is
@@ -152,10 +153,11 @@ export declare class BackendAuthClient<DatabaseUser extends AnyObject, UserId ex
         requestHeaders: Readonly<IncomingHttpHeaders> | undefined;
     }): Promise<Readonly<CookieParams>>;
     /** Calls the provided `getUserFromDatabase` config. */
-    protected getDatabaseUser({ isSignUpCookie, userId, assumingUser, }: {
+    protected getDatabaseUser({ isSignUpCookie, userId, assumingUser, requestHeaders, }: {
         userId: UserId | undefined;
         assumingUser: AssumedUserParams | undefined;
         isSignUpCookie: boolean;
+        requestHeaders: IncomingHttpHeaders;
     }): Promise<undefined | DatabaseUser>;
     /** Creates a `'cookie-set'` header to refresh the user's session cookie. */
     protected createCookieRefreshHeaders({ userIdResult, requestHeaders, }: {
@@ -163,9 +165,9 @@ export declare class BackendAuthClient<DatabaseUser extends AnyObject, UserId ex
         requestHeaders: IncomingHttpHeaders;
     }): Promise<OutgoingHttpHeaders | undefined>;
     /** Reads the user's assumed user headers and, if configured, gets the assumed user. */
-    protected getAssumedUser({ headers, user, }: {
+    protected getAssumedUser({ requestHeaders, user, }: {
         user: DatabaseUser;
-        headers: IncomingHttpHeaders;
+        requestHeaders: IncomingHttpHeaders;
     }): Promise<DatabaseUser | undefined>;
     /** Securely extract a user from their request headers. */
     getSecureUser({ requestHeaders, isSignUpCookie, allowUserAuthRefresh, }: {

package/dist/auth-client/backend-auth.client.js

@@ -42,7 +42,7 @@ export class BackendAuthClient {
         };
     }
     /** Calls the provided `getUserFromDatabase` config. */
-    async getDatabaseUser({ isSignUpCookie, userId, assumingUser, }) {
+    async getDatabaseUser({ isSignUpCookie, userId, assumingUser, requestHeaders, }) {
         if (!userId) {
             return undefined;
         }
@@ -50,6 +50,7 @@ export class BackendAuthClient {
             assumingUser,
             userId,
             isSignUpCookie,
+            requestHeaders,
         });
         if (!authenticatedUser) {
             return undefined;
@@ -115,11 +116,11 @@ export class BackendAuthClient {
         }
     }
     /** Reads the user's assumed user headers and, if configured, gets the assumed user. */
-    async getAssumedUser({ headers, user, }) {
+    async getAssumedUser({ requestHeaders, user, }) {
         if (!this.config.assumeUser || !(await this.config.assumeUser.canAssumeUser(user))) {
             return undefined;
         }
-        const assumedUserHeader = ensureArray(headers[this.config.assumedUserHeaderName || AuthHeaderName.AssumedUser])[0];
+        const assumedUserHeader = ensureArray(requestHeaders[this.config.assumedUserHeaderName || AuthHeaderName.AssumedUser])[0];
         if (!assumedUserHeader) {
             return undefined;
         }
@@ -131,6 +132,7 @@ export class BackendAuthClient {
             isSignUpCookie: false,
             userId: parsedAssumedUserData.userId,
             assumingUser: parsedAssumedUserData.assumedUserParams,
+            requestHeaders,
         });
         return assumedUser;
     }
@@ -144,12 +146,13 @@ export class BackendAuthClient {
             userId: userIdResult.userId,
             assumingUser: undefined,
             isSignUpCookie,
+            requestHeaders,
         });
         if (!user) {
             return undefined;
         }
         const assumedUser = await this.getAssumedUser({
-            headers: requestHeaders,
+            requestHeaders,
             user,
         });
         const cookieRefreshHeaders = (await this.createCookieRefreshHeaders({
@@ -259,6 +262,7 @@ export class BackendAuthClient {
             isSignUpCookie: false,
             userId: userIdResult.userId,
             assumingUser: undefined,
+            requestHeaders,
         });
         if (!user) {
             return undefined;

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "auth-vir",
-    "version": "3.0.0",
+    "version": "3.0.1",
     "description": "Auth made easy and secure via JWT cookies, CSRF tokens, and password hashing helpers.",
     "keywords": [
         "auth",

package/src/auth-client/backend-auth.client.ts

@@ -77,6 +77,7 @@ export type BackendAuthClientConfig<
              * their user identity. Otherwise, this is `undefined`.
              */
             assumingUser: AssumedUserParams | undefined;
+            requestHeaders: Readonly<IncomingHttpHeaders>;
         }) => MaybePromise<DatabaseUser | undefined | null>;
         /**
          * Get JWT keys produced by {@link generateNewJwtKeys}. Make sure that each time this is
@@ -228,10 +229,12 @@ export class BackendAuthClient<
         isSignUpCookie,
         userId,
         assumingUser,
+        requestHeaders,
     }: {
         userId: UserId | undefined;
         assumingUser: AssumedUserParams | undefined;
         isSignUpCookie: boolean;
+        requestHeaders: IncomingHttpHeaders;
     }): Promise<undefined | DatabaseUser> {
         if (!userId) {
             return undefined;
@@ -241,6 +244,7 @@ export class BackendAuthClient<
             assumingUser,
             userId,
             isSignUpCookie,
+            requestHeaders,
         });
 
         if (!authenticatedUser) {
@@ -329,18 +333,18 @@ export class BackendAuthClient<
 
     /** Reads the user's assumed user headers and, if configured, gets the assumed user. */
     protected async getAssumedUser({
-        headers,
+        requestHeaders,
         user,
     }: {
         user: DatabaseUser;
-        headers: IncomingHttpHeaders;
+        requestHeaders: IncomingHttpHeaders;
     }): Promise<DatabaseUser | undefined> {
         if (!this.config.assumeUser || !(await this.config.assumeUser.canAssumeUser(user))) {
             return undefined;
         }
 
         const assumedUserHeader: string | undefined = ensureArray(
-            headers[this.config.assumedUserHeaderName || AuthHeaderName.AssumedUser],
+            requestHeaders[this.config.assumedUserHeaderName || AuthHeaderName.AssumedUser],
         )[0];
 
         if (!assumedUserHeader) {
@@ -358,6 +362,7 @@ export class BackendAuthClient<
             isSignUpCookie: false,
             userId: parsedAssumedUserData.userId,
             assumingUser: parsedAssumedUserData.assumedUserParams,
+            requestHeaders,
         });
 
         return assumedUser;
@@ -392,6 +397,7 @@ export class BackendAuthClient<
             userId: userIdResult.userId,
             assumingUser: undefined,
             isSignUpCookie,
+            requestHeaders,
         });
 
         if (!user) {
@@ -399,7 +405,7 @@ export class BackendAuthClient<
         }
 
         const assumedUser = await this.getAssumedUser({
-            headers: requestHeaders,
+            requestHeaders,
             user,
         });
 
@@ -619,6 +625,7 @@ export class BackendAuthClient<
             isSignUpCookie: false,
             userId: userIdResult.userId,
             assumingUser: undefined,
+            requestHeaders,
         });
 
         if (!user) {