authmi 1.0.0 → 1.1.0

package/dist/index.mjs

@@ -2,15 +2,127 @@ import {
   AuthMiClient,
   AuthMiError,
   LocalStorageTokenStorage,
-  MemoryTokenStorage,
   ScopeError
-} from "./chunk-UNKK6FP4.mjs";
+} from "./chunk-EAK7C6YO.mjs";
+
+// src/storage/cookie.ts
+var CookieTokenStorage = class _CookieTokenStorage {
+  /**
+   * @param cookieStr  The raw `Cookie` header value (server-side) or `document.cookie` (browser).
+   *                   Pass an empty string in environments where cookies are managed via Set-Cookie.
+   */
+  constructor(cookieStr = "", options = {}) {
+    this.cookieStr = cookieStr;
+    this.options = {
+      name: "authmi_token",
+      httpOnly: true,
+      secure: typeof process !== "undefined" && process.env?.NODE_ENV === "production",
+      sameSite: "lax",
+      domain: "",
+      path: "/",
+      maxAge: 86400,
+      ...options
+    };
+  }
+  /** Update the raw cookie string (e.g. per-request in server middleware) */
+  setCookieString(cookieStr) {
+    this.cookieStr = cookieStr;
+  }
+  /** Escape special regex characters in a string */
+  static escapeRegex(s) {
+    return s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+  }
+  getToken() {
+    const name = _CookieTokenStorage.escapeRegex(this.options.name);
+    const match = this.cookieStr.match(
+      new RegExp(`(?:^|;\\s*)${name}=([^;]*)`)
+    );
+    return match ? decodeURIComponent(match[1]) : null;
+  }
+  setToken(token) {
+    const { name, httpOnly, secure, sameSite, domain, path, maxAge } = this.options;
+    let cookie = `${name}=${encodeURIComponent(token)}; path=${path}; max-age=${maxAge}`;
+    if (httpOnly) cookie += "; HttpOnly";
+    if (secure) cookie += "; Secure";
+    if (sameSite) cookie += `; SameSite=${sameSite}`;
+    if (domain) cookie += `; domain=${domain}`;
+    this.lastSetCookie = cookie;
+    this.cookieStr = `${name}=${encodeURIComponent(token)}`;
+  }
+  /** The last Set-Cookie header generated by setToken() or removeToken() */
+  getSetCookieHeader() {
+    return this.lastSetCookie;
+  }
+  removeToken() {
+    const { name, domain, path } = this.options;
+    let cookie = `${name}=; path=${path}; max-age=0`;
+    if (domain) cookie += `; domain=${domain}`;
+    this.lastSetCookie = cookie;
+    this.cookieStr = "";
+  }
+};
+
+// src/storage/memory.ts
+var MemoryTokenStorage = class {
+  constructor() {
+    this.token = null;
+  }
+  getToken() {
+    return this.token;
+  }
+  setToken(token) {
+    this.token = token;
+  }
+  removeToken() {
+    this.token = null;
+  }
+};
+
+// src/cache.ts
+var IntrospectCache = class {
+  constructor(ttlMs = 6e4) {
+    this.store = /* @__PURE__ */ new Map();
+    this.defaultTtlMs = ttlMs;
+  }
+  /** Build a cache key from the token (simple hash) */
+  key(token) {
+    let hash = 0;
+    for (let i = 0; i < token.length; i++) {
+      hash = hash * 31 + token.charCodeAt(i) | 0;
+    }
+    return `tok:${hash.toString(36)}`;
+  }
+  get(token) {
+    const entry = this.store.get(this.key(token));
+    if (!entry) return void 0;
+    if (Date.now() > entry.expiresAt) {
+      this.store.delete(this.key(token));
+      return void 0;
+    }
+    return entry.result;
+  }
+  set(token, result, ttlMs) {
+    if (!result.valid) return;
+    this.store.set(this.key(token), {
+      result,
+      expiresAt: Date.now() + (ttlMs ?? this.defaultTtlMs)
+    });
+  }
+  invalidate(token) {
+    this.store.delete(this.key(token));
+  }
+  clear() {
+    this.store.clear();
+  }
+};
 
 // src/index.ts
-var VERSION = "1.0.0";
+var VERSION = "1.1.0";
 export {
   AuthMiClient,
   AuthMiError,
+  CookieTokenStorage,
+  IntrospectCache,
   LocalStorageTokenStorage,
   MemoryTokenStorage,
   ScopeError,

package/dist/next.d.mts

@@ -1,7 +1,5 @@
-import * as react_jsx_runtime from 'react/jsx-runtime';
 import { NextRequest, NextResponse } from 'next/server';
-import { b as AuthMiConfig } from './client-D6JiIhlU.mjs';
-export { A as ApiKey, a as AuthMiClient, c as AuthMiError, d as AuthToken, C as CreateApiKeyRequest, e as CreateApiKeyResponse, f as CreateScopeRequest, g as CreateUserRequest, I as IntrospectRequest, h as IntrospectResponse, L as LocalStorageTokenStorage, i as LoginCredentials, M as MemoryTokenStorage, O as OAuthCallbackResult, j as OAuthInitiateResponse, k as OAuthProvider, l as OnboardRequest, m as OnboardResponse, R as RegisterWebhookRequest, S as Scope, n as ScopeError, o as Service, T as TokenStorage, U as User, p as UserListResponse, V as ValidationResult, W as Webhook } from './client-D6JiIhlU.mjs';
+export { A as ApiKey, a as AuditLog, b as AuditLogQuery, c as AuthMiClient, e as AuthMiError, f as AuthToken, B as BackupCodesResult, C as Challenge2FARequest, g as CheckoutResponse, h as ClientOptions, j as CreateApiKeyRequest, k as CreateApiKeyResponse, l as CreateRoleRequest, m as CreateSamlConnectionRequest, n as CreateScopeRequest, o as CreateUserRequest, E as Enable2FAResult, F as ForgotPasswordRequest, p as IntrospectRequest, q as IntrospectResponse, J as JwksResponse, L as LoginCredentials, O as OAuthCallbackResult, r as OAuthInitiateResponse, s as OAuthProvider, P as Plan, t as PortalResponse, R as RegisterWebhookRequest, u as ResendVerificationRequest, v as ResetPasswordRequest, w as Role, S as SamlConnection, x as SamlInitiateRequest, y as Scope, z as ScopeError, D as ServiceDetail, G as Setup2FAResult, H as SignupCredentials, K as Subscription, U as UpdateServiceRequest, M as User, V as ValidationResult, N as VerifyEmailRequest, W as Webhook } from './client-DmZsG2xs.mjs';
 
 interface MiddlewareOptions {
     /** Base URL of Auth Mi service */
@@ -21,17 +19,11 @@ interface MiddlewareOptions {
     /** Forbidden page path (insufficient scopes) */
     forbiddenPath?: string;
 }
-interface MiddlewareContext {
-    valid: boolean;
-    userId?: string;
-    email?: string;
-    scopes?: string[];
-    error?: string;
-}
 /**
  * Create a Next.js middleware with scope-based protection
  *
  * @example
+ * ```ts
  * // middleware.ts
  * import { createAuthMiMiddleware } from "authmi/next";
  *
@@ -41,36 +33,18 @@ interface MiddlewareContext {
  *   protectedPaths: ["/dashboard", "/api/protected"],
  *   scopedPaths: {
  *     "/api/users": ["users:read"],
- *     "/api/users/create": ["users:write"],
- *     "/api/billing": ["billing:read"],
  *     "/api/admin": ["admin"],
  *   },
  *   publicPaths: ["/", "/login", "/register"],
  * });
+ * ```
  */
 declare function createAuthMiMiddleware(options: MiddlewareOptions): (request: NextRequest) => Promise<NextResponse<unknown>>;
-/**
- * Higher-order component to protect a page with required scopes
- *
- * @example
- * // pages/admin.tsx
- * import { withScope } from "authmi/next";
- *
- * function AdminPage() {
- *   return <div>Admin Only</div>;
- * }
- *
- * export default withScope(AdminPage, ["admin"], {
- *   baseUrl: process.env.NEXT_PUBLIC_AUTHMI_URL!,
- *   apiKey: process.env.NEXT_PUBLIC_AUTHMI_API_KEY!,
- * });
- */
-declare function withScope<P extends object>(Component: React.ComponentType<P>, _requiredScopes: string[], _config: AuthMiConfig): (props: P) => react_jsx_runtime.JSX.Element;
 /**
  * Server-side helper to validate scopes in API routes
  *
  * @example
- * // app/api/users/route.ts
+ * ```ts
  * import { validateScopes } from "authmi/next";
  *
  * export async function GET(request: Request) {
@@ -79,16 +53,12 @@ declare function withScope<P extends object>(Component: React.ComponentType<P>,
  *     apiKey: process.env.AUTHMI_API_KEY!,
  *     requiredScopes: ["users:read"],
  *   });
- *
  *   if (!result.valid) {
- *     return new Response(JSON.stringify({ error: result.error }), {
- *       status: result.status || 401,
- *     });
+ *     return Response.json({ error: result.error }, { status: result.status });
  *   }
- *
- *   // Proceed with the request
  *   return Response.json({ users: [] });
  * }
+ * ```
  */
 declare function validateScopes(request: Request, options: {
     baseUrl: string;
@@ -106,4 +76,4 @@ declare function validateScopes(request: Request, options: {
     status: number;
 }>;
 
-export { AuthMiConfig, type MiddlewareContext, type MiddlewareOptions, createAuthMiMiddleware, validateScopes, withScope };
+export { type MiddlewareOptions, createAuthMiMiddleware, validateScopes };

package/dist/next.d.ts

@@ -1,7 +1,5 @@
-import * as react_jsx_runtime from 'react/jsx-runtime';
 import { NextRequest, NextResponse } from 'next/server';
-import { b as AuthMiConfig } from './client-D6JiIhlU.js';
-export { A as ApiKey, a as AuthMiClient, c as AuthMiError, d as AuthToken, C as CreateApiKeyRequest, e as CreateApiKeyResponse, f as CreateScopeRequest, g as CreateUserRequest, I as IntrospectRequest, h as IntrospectResponse, L as LocalStorageTokenStorage, i as LoginCredentials, M as MemoryTokenStorage, O as OAuthCallbackResult, j as OAuthInitiateResponse, k as OAuthProvider, l as OnboardRequest, m as OnboardResponse, R as RegisterWebhookRequest, S as Scope, n as ScopeError, o as Service, T as TokenStorage, U as User, p as UserListResponse, V as ValidationResult, W as Webhook } from './client-D6JiIhlU.js';
+export { A as ApiKey, a as AuditLog, b as AuditLogQuery, c as AuthMiClient, e as AuthMiError, f as AuthToken, B as BackupCodesResult, C as Challenge2FARequest, g as CheckoutResponse, h as ClientOptions, j as CreateApiKeyRequest, k as CreateApiKeyResponse, l as CreateRoleRequest, m as CreateSamlConnectionRequest, n as CreateScopeRequest, o as CreateUserRequest, E as Enable2FAResult, F as ForgotPasswordRequest, p as IntrospectRequest, q as IntrospectResponse, J as JwksResponse, L as LoginCredentials, O as OAuthCallbackResult, r as OAuthInitiateResponse, s as OAuthProvider, P as Plan, t as PortalResponse, R as RegisterWebhookRequest, u as ResendVerificationRequest, v as ResetPasswordRequest, w as Role, S as SamlConnection, x as SamlInitiateRequest, y as Scope, z as ScopeError, D as ServiceDetail, G as Setup2FAResult, H as SignupCredentials, K as Subscription, U as UpdateServiceRequest, M as User, V as ValidationResult, N as VerifyEmailRequest, W as Webhook } from './client-DmZsG2xs.js';
 
 interface MiddlewareOptions {
     /** Base URL of Auth Mi service */
@@ -21,17 +19,11 @@ interface MiddlewareOptions {
     /** Forbidden page path (insufficient scopes) */
     forbiddenPath?: string;
 }
-interface MiddlewareContext {
-    valid: boolean;
-    userId?: string;
-    email?: string;
-    scopes?: string[];
-    error?: string;
-}
 /**
  * Create a Next.js middleware with scope-based protection
  *
  * @example
+ * ```ts
  * // middleware.ts
  * import { createAuthMiMiddleware } from "authmi/next";
  *
@@ -41,36 +33,18 @@ interface MiddlewareContext {
  *   protectedPaths: ["/dashboard", "/api/protected"],
  *   scopedPaths: {
  *     "/api/users": ["users:read"],
- *     "/api/users/create": ["users:write"],
- *     "/api/billing": ["billing:read"],
  *     "/api/admin": ["admin"],
  *   },
  *   publicPaths: ["/", "/login", "/register"],
  * });
+ * ```
  */
 declare function createAuthMiMiddleware(options: MiddlewareOptions): (request: NextRequest) => Promise<NextResponse<unknown>>;
-/**
- * Higher-order component to protect a page with required scopes
- *
- * @example
- * // pages/admin.tsx
- * import { withScope } from "authmi/next";
- *
- * function AdminPage() {
- *   return <div>Admin Only</div>;
- * }
- *
- * export default withScope(AdminPage, ["admin"], {
- *   baseUrl: process.env.NEXT_PUBLIC_AUTHMI_URL!,
- *   apiKey: process.env.NEXT_PUBLIC_AUTHMI_API_KEY!,
- * });
- */
-declare function withScope<P extends object>(Component: React.ComponentType<P>, _requiredScopes: string[], _config: AuthMiConfig): (props: P) => react_jsx_runtime.JSX.Element;
 /**
  * Server-side helper to validate scopes in API routes
  *
  * @example
- * // app/api/users/route.ts
+ * ```ts
  * import { validateScopes } from "authmi/next";
  *
  * export async function GET(request: Request) {
@@ -79,16 +53,12 @@ declare function withScope<P extends object>(Component: React.ComponentType<P>,
  *     apiKey: process.env.AUTHMI_API_KEY!,
  *     requiredScopes: ["users:read"],
  *   });
- *
  *   if (!result.valid) {
- *     return new Response(JSON.stringify({ error: result.error }), {
- *       status: result.status || 401,
- *     });
+ *     return Response.json({ error: result.error }, { status: result.status });
  *   }
- *
- *   // Proceed with the request
  *   return Response.json({ users: [] });
  * }
+ * ```
  */
 declare function validateScopes(request: Request, options: {
     baseUrl: string;
@@ -106,4 +76,4 @@ declare function validateScopes(request: Request, options: {
     status: number;
 }>;
 
-export { AuthMiConfig, type MiddlewareContext, type MiddlewareOptions, createAuthMiMiddleware, validateScopes, withScope };
+export { type MiddlewareOptions, createAuthMiMiddleware, validateScopes };