cauthy-auth 0.39.0 → 0.40.0

package/dist/index.mjs

@@ -1157,13 +1157,13 @@ function createCauthy(given = {}) {
     return proto === "https" || proto === "http" ? `${proto}://${url.host}` : url.origin;
   };
   const attrs = (request, maxAge) => ({ secure: originOf(request).startsWith("https://"), maxAge });
-  async function token(form) {
+  async function token(form, proof = {}) {
     const body2 = new URLSearchParams({ client_id: clientId, ...form });
     if (clientSecret) body2.set("client_secret", clientSecret);
     try {
       const res = await doFetch(`${issuer}/v1/oauth/token`, {
         method: "POST",
-        headers: { "content-type": "application/x-www-form-urlencoded", accept: "application/json" },
+        headers: { "content-type": "application/x-www-form-urlencoded", accept: "application/json", ...proof },
         body: body2
       });
       if (res.ok) return { ok: true, body: await res.json() };
@@ -1403,7 +1403,7 @@ function createCauthy(given = {}) {
       code,
       redirect_uri: `${originOf(request)}${basePath}/callback`,
       code_verifier: flow.verifier
-    });
+    }, await passedOn(request));
     const s = res.ok ? await stored(res.body) : null;
     if (s === null) return failed(request, "exchange_failed");
     return redirect(flow.returnTo, [...await write(request, s, had), writeCookie(flowCookie, "", attrs(request, 0)), writeCookie(againCookie, "", attrs(request, 0))]);
@@ -1515,7 +1515,7 @@ function createCauthy(given = {}) {
       const proof = { "x-cauthy-system-token": await ownSystem.token(), "x-cauthy-app-origin": originOf(request) };
       return ip ? { ...proof, "x-cauthy-client-ip": ip } : proof;
     } catch {
-      noProofUntil = Date.now() + 5 * 6e4;
+      noProofUntil = Date.now() + 3e4;
       return {};
     }
   }