express-file-cluster 0.2.9 → 0.2.11

package/dist/auth/index.cjs

@@ -4,12 +4,12 @@
 
 
 
-var _chunkUUF2OYRWcjs = require('../chunk-UUF2OYRW.cjs');
+var _chunkQOKLEPTXcjs = require('../chunk-QOKLEPTX.cjs');
 
 
 
 
 
 
-exports.configureAuth = _chunkUUF2OYRWcjs.configureAuth; exports.issueToken = _chunkUUF2OYRWcjs.issueToken; exports.requireAuth = _chunkUUF2OYRWcjs.requireAuth; exports.revokeToken = _chunkUUF2OYRWcjs.revokeToken; exports.signToken = _chunkUUF2OYRWcjs.signToken;
+exports.configureAuth = _chunkQOKLEPTXcjs.configureAuth; exports.issueToken = _chunkQOKLEPTXcjs.issueToken; exports.requireAuth = _chunkQOKLEPTXcjs.requireAuth; exports.revokeToken = _chunkQOKLEPTXcjs.revokeToken; exports.signToken = _chunkQOKLEPTXcjs.signToken;
 //# sourceMappingURL=index.cjs.map

package/dist/auth/index.d.cts

@@ -1,4 +1,4 @@
-import { Response, RequestHandler } from 'express';
+import { Request, Response, NextFunction, RequestHandler } from 'express';
 import { A as AuthStrategy } from '../types-BZehD43d.cjs';
 
 interface AuthConfig {
@@ -11,6 +11,15 @@ declare function configureAuth(config: AuthConfig): void;
 declare function issueToken(res: Response, payload: Record<string, unknown>): Promise<void>;
 declare function revokeToken(res: Response): void;
 declare function signToken(payload: Record<string, unknown>): Promise<string>;
-declare const requireAuth: RequestHandler;
+/**
+ * Used bare (`middlewares = [requireAuth]`) it just verifies the JWT.
+ * Called with role names (`middlewares = [requireAuth('admin')]`) it
+ * returns a middleware that also enforces `payload.role` is one of them.
+ */
+interface RequireAuth {
+    (req: Request, res: Response, next: NextFunction): void;
+    (...roles: string[]): RequestHandler;
+}
+declare const requireAuth: RequireAuth;
 
-export { configureAuth, issueToken, requireAuth, revokeToken, signToken };
+export { type RequireAuth, configureAuth, issueToken, requireAuth, revokeToken, signToken };

package/dist/auth/index.d.ts

@@ -1,4 +1,4 @@
-import { Response, RequestHandler } from 'express';
+import { Request, Response, NextFunction, RequestHandler } from 'express';
 import { A as AuthStrategy } from '../types-BZehD43d.js';
 
 interface AuthConfig {
@@ -11,6 +11,15 @@ declare function configureAuth(config: AuthConfig): void;
 declare function issueToken(res: Response, payload: Record<string, unknown>): Promise<void>;
 declare function revokeToken(res: Response): void;
 declare function signToken(payload: Record<string, unknown>): Promise<string>;
-declare const requireAuth: RequestHandler;
+/**
+ * Used bare (`middlewares = [requireAuth]`) it just verifies the JWT.
+ * Called with role names (`middlewares = [requireAuth('admin')]`) it
+ * returns a middleware that also enforces `payload.role` is one of them.
+ */
+interface RequireAuth {
+    (req: Request, res: Response, next: NextFunction): void;
+    (...roles: string[]): RequestHandler;
+}
+declare const requireAuth: RequireAuth;
 
-export { configureAuth, issueToken, requireAuth, revokeToken, signToken };
+export { type RequireAuth, configureAuth, issueToken, requireAuth, revokeToken, signToken };

package/dist/auth/index.js

@@ -4,7 +4,7 @@ import {
   requireAuth,
   revokeToken,
   signToken
-} from "../chunk-BHMFPULA.js";
+} from "../chunk-YE4ORV7Z.js";
 export {
   configureAuth,
   issueToken,

package/dist/{chunk-UUF2OYRW.cjs → chunk-QOKLEPTX.cjs}

@@ -27,7 +27,7 @@ async function signToken(payload) {
   const encodedSecret = new TextEncoder().encode(secret);
   return await new (0, _jose.SignJWT)(payload).setProtectedHeader({ alg: "HS256" }).setExpirationTime(expiresIn).sign(encodedSecret);
 }
-var requireAuth = async (req, res, next) => {
+async function authenticate(req, res, next, roles) {
   const { secret, strategy } = getConfig();
   try {
     let token;
@@ -46,12 +46,29 @@ var requireAuth = async (req, res, next) => {
     }
     const encodedSecret = new TextEncoder().encode(secret);
     const { payload } = await _jose.jwtVerify.call(void 0, token, encodedSecret);
+    if (roles.length > 0) {
+      const role = payload["role"];
+      if (typeof role !== "string" || !roles.includes(role)) {
+        res.status(403).json({ error: "Forbidden" });
+        return;
+      }
+    }
     req.user = payload;
     next();
   } catch (e) {
     res.status(401).json({ error: "Unauthorized" });
   }
-};
+}
+var requireAuth = ((...args) => {
+  if (args.length > 0 && typeof args[0] === "string") {
+    const roles = args;
+    return (req2, res2, next2) => {
+      void authenticate(req2, res2, next2, roles);
+    };
+  }
+  const [req, res, next] = args;
+  void authenticate(req, res, next, []);
+});
 
 
 
@@ -60,4 +77,4 @@ var requireAuth = async (req, res, next) => {
 
 
 exports.configureAuth = configureAuth; exports.issueToken = issueToken; exports.revokeToken = revokeToken; exports.signToken = signToken; exports.requireAuth = requireAuth;
-//# sourceMappingURL=chunk-UUF2OYRW.cjs.map
+//# sourceMappingURL=chunk-QOKLEPTX.cjs.map

package/dist/chunk-QOKLEPTX.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["/home/runner/work/efc.js/efc.js/packages/core/dist/chunk-QOKLEPTX.cjs","../src/auth/index.ts"],"names":["req","res","next"],"mappings":"AAAA;ACCA,4BAAmC;AAUnC,IAAI,QAAA,EAA6B,IAAA;AAE1B,SAAS,aAAA,CAAc,MAAA,EAA0B;AACtD,EAAA,QAAA,EAAU,MAAA;AACZ;AAEA,SAAS,SAAA,CAAA,EAAwB;AAC/B,EAAA,GAAA,CAAI,CAAC,OAAA,EAAS,MAAM,IAAI,KAAA,CAAM,6DAAwD,CAAA;AACtF,EAAA,OAAO,OAAA;AACT;AAEA,MAAA,SAAsB,UAAA,CAAW,GAAA,EAAe,OAAA,EAAiD;AAC/F,EAAA,MAAM,EAAE,MAAA,EAAQ,SAAA,EAAW,aAAa,EAAA,EAAI,SAAA,CAAU,CAAA;AACtD,EAAA,MAAM,cAAA,EAAgB,IAAI,WAAA,CAAY,CAAA,CAAE,MAAA,CAAO,MAAM,CAAA;AACrD,EAAA,MAAM,MAAA,EAAQ,MAAM,IAAI,kBAAA,CAAQ,OAAO,CAAA,CACpC,kBAAA,CAAmB,EAAE,GAAA,EAAK,QAAQ,CAAC,CAAA,CACnC,iBAAA,CAAkB,SAAS,CAAA,CAC3B,IAAA,CAAK,aAAa,CAAA;AAErB,EAAA,GAAA,CAAI,MAAA,CAAO,WAAA,EAAa,KAAA,EAAO;AAAA,IAC7B,QAAA,EAAU,IAAA;AAAA,IACV,MAAA,EAAQ,OAAA,CAAQ,GAAA,CAAI,UAAU,EAAA,IAAM,YAAA;AAAA,IACpC,QAAA,EAAU,QAAA;AAAA,IACV,GAAI,aAAA,IAAiB,KAAA,EAAA,GAAa,EAAE,MAAA,EAAQ,aAAa;AAAA,EAC3D,CAAC,CAAA;AACH;AAEO,SAAS,WAAA,CAAY,GAAA,EAAqB;AAC/C,EAAA,GAAA,CAAI,WAAA,CAAY,WAAW,CAAA;AAC7B;AAEA,MAAA,SAAsB,SAAA,CAAU,OAAA,EAAmD;AACjF,EAAA,MAAM,EAAE,MAAA,EAAQ,UAAU,EAAA,EAAI,SAAA,CAAU,CAAA;AACxC,EAAA,MAAM,cAAA,EAAgB,IAAI,WAAA,CAAY,CAAA,CAAE,MAAA,CAAO,MAAM,CAAA;AACrD,EAAA,OAAO,MAAM,IAAI,kBAAA,CAAQ,OAAO,CAAA,CAC7B,kBAAA,CAAmB,EAAE,GAAA,EAAK,QAAQ,CAAC,CAAA,CACnC,iBAAA,CAAkB,SAAS,CAAA,CAC3B,IAAA,CAAK,aAAa,CAAA;AACvB;AAEA,MAAA,SAAe,YAAA,CACb,GAAA,EACA,GAAA,EACA,IAAA,EACA,KAAA,EACe;AACf,EAAA,MAAM,EAAE,MAAA,EAAQ,SAAS,EAAA,EAAI,SAAA,CAAU,CAAA;AAEvC,EAAA,IAAI;AACF,IAAA,IAAI,KAAA;AAEJ,IAAA,GAAA,CAAI,SAAA,IAAa,WAAA,EAAa;AAC5B,MAAA,MAAM,QAAA,EAAW,GAAA,CAAyD,OAAA;AAC1E,MAAA,MAAA,kBAAQ,OAAA,0BAAA,CAAU,WAAW,GAAA;AAAA,IAC/B,EAAA,KAAO;AACL,MAAA,MAAM,KAAA,EAAO,GAAA,CAAI,OAAA,CAAQ,eAAe,CAAA;AACxC,MAAA,GAAA,CAAI,OAAO,KAAA,IAAS,SAAA,GAAY,IAAA,CAAK,UAAA,CAAW,SAAS,CAAA,EAAG;AAC1D,QAAA,MAAA,EAAQ,IAAA,CAAK,KAAA,CAAM,CAAC,CAAA;AAAA,MACtB;AAAA,IACF;AAEA,IAAA,GAAA,CAAI,CAAC,KAAA,EAAO;AACV,MAAA,GAAA,CAAI,MAAA,CAAO,GAAG,CAAA,CAAE,IAAA,CAAK,EAAE,KAAA,EAAO,eAAe,CAAC,CAAA;AAC9C,MAAA,MAAA;AAAA,IACF;AAEA,IAAA,MAAM,cAAA,EAAgB,IAAI,WAAA,CAAY,CAAA,CAAE,MAAA,CAAO,MAAM,CAAA;AACrD,IAAA,MAAM,EAAE,QAAQ,EAAA,EAAI,MAAM,6BAAA,KAAU,EAAO,aAAa,CAAA;AAExD,IAAA,GAAA,CAAI,KAAA,CAAM,OAAA,EAAS,CAAA,EAAG;AACpB,MAAA,MAAM,KAAA,EAAQ,OAAA,CAAoC,MAAM,CAAA;AACxD,MAAA,GAAA,CAAI,OAAO,KAAA,IAAS,SAAA,GAAY,CAAC,KAAA,CAAM,QAAA,CAAS,IAAI,CAAA,EAAG;AACrD,QAAA,GAAA,CAAI,MAAA,CAAO,GAAG,CAAA,CAAE,IAAA,CAAK,EAAE,KAAA,EAAO,YAAY,CAAC,CAAA;AAC3C,QAAA,MAAA;AAAA,MACF;AAAA,IACF;AAEA,IAAC,GAAA,CAAuC,KAAA,EAAO,OAAA;AAC/C,IAAA,IAAA,CAAK,CAAA;AAAA,EACP,EAAA,UAAQ;AACN,IAAA,GAAA,CAAI,MAAA,CAAO,GAAG,CAAA,CAAE,IAAA,CAAK,EAAE,KAAA,EAAO,eAAe,CAAC,CAAA;AAAA,EAChD;AACF;AAYO,IAAM,YAAA,EAAA,CAA4B,CAAA,GAAI,IAAA,EAAA,GAAoB;AAC/D,EAAA,GAAA,CAAI,IAAA,CAAK,OAAA,EAAS,EAAA,GAAK,OAAO,IAAA,CAAK,CAAC,EAAA,IAAM,QAAA,EAAU;AAClD,IAAA,MAAM,MAAA,EAAQ,IAAA;AACd,IAAA,OAAO,CAACA,IAAAA,EAAcC,IAAAA,EAAeC,KAAAA,EAAAA,GAAuB;AAC1D,MAAA,KAAK,YAAA,CAAaF,IAAAA,EAAKC,IAAAA,EAAKC,KAAAA,EAAM,KAAK,CAAA;AAAA,IACzC,CAAA;AAAA,EACF;AACA,EAAA,MAAM,CAAC,GAAA,EAAK,GAAA,EAAK,IAAI,EAAA,EAAI,IAAA;AACzB,EAAA,KAAK,YAAA,CAAa,GAAA,EAAK,GAAA,EAAK,IAAA,EAAM,CAAC,CAAC,CAAA;AACtC,CAAA,CAAA;AD3CA;AACA;AACE;AACA;AACA;AACA;AACA;AACF,4KAAC","file":"/home/runner/work/efc.js/efc.js/packages/core/dist/chunk-QOKLEPTX.cjs","sourcesContent":[null,"import type { NextFunction, Request, RequestHandler, Response } from 'express';\nimport { SignJWT, jwtVerify } from 'jose';\nimport type { AuthStrategy } from '../types.js';\n\ninterface AuthConfig {\n  secret: string;\n  strategy: AuthStrategy;\n  expiresIn: string;\n  cookieDomain?: string | undefined;\n}\n\nlet _config: AuthConfig | null = null;\n\nexport function configureAuth(config: AuthConfig): void {\n  _config = config;\n}\n\nfunction getConfig(): AuthConfig {\n  if (!_config) throw new Error('[EFC] Auth not configured — pass jwtSecret to ignite()');\n  return _config;\n}\n\nexport async function issueToken(res: Response, payload: Record<string, unknown>): Promise<void> {\n  const { secret, expiresIn, cookieDomain } = getConfig();\n  const encodedSecret = new TextEncoder().encode(secret);\n  const token = await new SignJWT(payload)\n    .setProtectedHeader({ alg: 'HS256' })\n    .setExpirationTime(expiresIn)\n    .sign(encodedSecret);\n\n  res.cookie('efc_token', token, {\n    httpOnly: true,\n    secure: process.env['NODE_ENV'] === 'production',\n    sameSite: 'strict',\n    ...(cookieDomain !== undefined && { domain: cookieDomain }),\n  });\n}\n\nexport function revokeToken(res: Response): void {\n  res.clearCookie('efc_token');\n}\n\nexport async function signToken(payload: Record<string, unknown>): Promise<string> {\n  const { secret, expiresIn } = getConfig();\n  const encodedSecret = new TextEncoder().encode(secret);\n  return await new SignJWT(payload)\n    .setProtectedHeader({ alg: 'HS256' })\n    .setExpirationTime(expiresIn)\n    .sign(encodedSecret);\n}\n\nasync function authenticate(\n  req: Request,\n  res: Response,\n  next: NextFunction,\n  roles: string[],\n): Promise<void> {\n  const { secret, strategy } = getConfig();\n\n  try {\n    let token: string | undefined;\n\n    if (strategy === 'http-only') {\n      const cookies = (req as typeof req & { cookies: Record<string, string> }).cookies;\n      token = cookies?.['efc_token'];\n    } else {\n      const auth = req.headers['authorization'];\n      if (typeof auth === 'string' && auth.startsWith('Bearer ')) {\n        token = auth.slice(7);\n      }\n    }\n\n    if (!token) {\n      res.status(401).json({ error: 'Unauthorized' });\n      return;\n    }\n\n    const encodedSecret = new TextEncoder().encode(secret);\n    const { payload } = await jwtVerify(token, encodedSecret);\n\n    if (roles.length > 0) {\n      const role = (payload as Record<string, unknown>)['role'];\n      if (typeof role !== 'string' || !roles.includes(role)) {\n        res.status(403).json({ error: 'Forbidden' });\n        return;\n      }\n    }\n\n    (req as typeof req & { user: unknown }).user = payload;\n    next();\n  } catch {\n    res.status(401).json({ error: 'Unauthorized' });\n  }\n}\n\n/**\n * Used bare (`middlewares = [requireAuth]`) it just verifies the JWT.\n * Called with role names (`middlewares = [requireAuth('admin')]`) it\n * returns a middleware that also enforces `payload.role` is one of them.\n */\nexport interface RequireAuth {\n  (req: Request, res: Response, next: NextFunction): void;\n  (...roles: string[]): RequestHandler;\n}\n\nexport const requireAuth: RequireAuth = ((...args: unknown[]) => {\n  if (args.length > 0 && typeof args[0] === 'string') {\n    const roles = args as string[];\n    return (req: Request, res: Response, next: NextFunction) => {\n      void authenticate(req, res, next, roles);\n    };\n  }\n  const [req, res, next] = args as [Request, Response, NextFunction];\n  void authenticate(req, res, next, []);\n}) as RequireAuth;\n"]}

package/dist/{chunk-BHMFPULA.js → chunk-YE4ORV7Z.js}

@@ -27,7 +27,7 @@ async function signToken(payload) {
   const encodedSecret = new TextEncoder().encode(secret);
   return await new SignJWT(payload).setProtectedHeader({ alg: "HS256" }).setExpirationTime(expiresIn).sign(encodedSecret);
 }
-var requireAuth = async (req, res, next) => {
+async function authenticate(req, res, next, roles) {
   const { secret, strategy } = getConfig();
   try {
     let token;
@@ -46,12 +46,29 @@ var requireAuth = async (req, res, next) => {
     }
     const encodedSecret = new TextEncoder().encode(secret);
     const { payload } = await jwtVerify(token, encodedSecret);
+    if (roles.length > 0) {
+      const role = payload["role"];
+      if (typeof role !== "string" || !roles.includes(role)) {
+        res.status(403).json({ error: "Forbidden" });
+        return;
+      }
+    }
     req.user = payload;
     next();
   } catch {
     res.status(401).json({ error: "Unauthorized" });
   }
-};
+}
+var requireAuth = ((...args) => {
+  if (args.length > 0 && typeof args[0] === "string") {
+    const roles = args;
+    return (req2, res2, next2) => {
+      void authenticate(req2, res2, next2, roles);
+    };
+  }
+  const [req, res, next] = args;
+  void authenticate(req, res, next, []);
+});
 
 export {
   configureAuth,
@@ -60,4 +77,4 @@ export {
   signToken,
   requireAuth
 };
-//# sourceMappingURL=chunk-BHMFPULA.js.map
+//# sourceMappingURL=chunk-YE4ORV7Z.js.map

package/dist/chunk-YE4ORV7Z.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/auth/index.ts"],"sourcesContent":["import type { NextFunction, Request, RequestHandler, Response } from 'express';\nimport { SignJWT, jwtVerify } from 'jose';\nimport type { AuthStrategy } from '../types.js';\n\ninterface AuthConfig {\n  secret: string;\n  strategy: AuthStrategy;\n  expiresIn: string;\n  cookieDomain?: string | undefined;\n}\n\nlet _config: AuthConfig | null = null;\n\nexport function configureAuth(config: AuthConfig): void {\n  _config = config;\n}\n\nfunction getConfig(): AuthConfig {\n  if (!_config) throw new Error('[EFC] Auth not configured — pass jwtSecret to ignite()');\n  return _config;\n}\n\nexport async function issueToken(res: Response, payload: Record<string, unknown>): Promise<void> {\n  const { secret, expiresIn, cookieDomain } = getConfig();\n  const encodedSecret = new TextEncoder().encode(secret);\n  const token = await new SignJWT(payload)\n    .setProtectedHeader({ alg: 'HS256' })\n    .setExpirationTime(expiresIn)\n    .sign(encodedSecret);\n\n  res.cookie('efc_token', token, {\n    httpOnly: true,\n    secure: process.env['NODE_ENV'] === 'production',\n    sameSite: 'strict',\n    ...(cookieDomain !== undefined && { domain: cookieDomain }),\n  });\n}\n\nexport function revokeToken(res: Response): void {\n  res.clearCookie('efc_token');\n}\n\nexport async function signToken(payload: Record<string, unknown>): Promise<string> {\n  const { secret, expiresIn } = getConfig();\n  const encodedSecret = new TextEncoder().encode(secret);\n  return await new SignJWT(payload)\n    .setProtectedHeader({ alg: 'HS256' })\n    .setExpirationTime(expiresIn)\n    .sign(encodedSecret);\n}\n\nasync function authenticate(\n  req: Request,\n  res: Response,\n  next: NextFunction,\n  roles: string[],\n): Promise<void> {\n  const { secret, strategy } = getConfig();\n\n  try {\n    let token: string | undefined;\n\n    if (strategy === 'http-only') {\n      const cookies = (req as typeof req & { cookies: Record<string, string> }).cookies;\n      token = cookies?.['efc_token'];\n    } else {\n      const auth = req.headers['authorization'];\n      if (typeof auth === 'string' && auth.startsWith('Bearer ')) {\n        token = auth.slice(7);\n      }\n    }\n\n    if (!token) {\n      res.status(401).json({ error: 'Unauthorized' });\n      return;\n    }\n\n    const encodedSecret = new TextEncoder().encode(secret);\n    const { payload } = await jwtVerify(token, encodedSecret);\n\n    if (roles.length > 0) {\n      const role = (payload as Record<string, unknown>)['role'];\n      if (typeof role !== 'string' || !roles.includes(role)) {\n        res.status(403).json({ error: 'Forbidden' });\n        return;\n      }\n    }\n\n    (req as typeof req & { user: unknown }).user = payload;\n    next();\n  } catch {\n    res.status(401).json({ error: 'Unauthorized' });\n  }\n}\n\n/**\n * Used bare (`middlewares = [requireAuth]`) it just verifies the JWT.\n * Called with role names (`middlewares = [requireAuth('admin')]`) it\n * returns a middleware that also enforces `payload.role` is one of them.\n */\nexport interface RequireAuth {\n  (req: Request, res: Response, next: NextFunction): void;\n  (...roles: string[]): RequestHandler;\n}\n\nexport const requireAuth: RequireAuth = ((...args: unknown[]) => {\n  if (args.length > 0 && typeof args[0] === 'string') {\n    const roles = args as string[];\n    return (req: Request, res: Response, next: NextFunction) => {\n      void authenticate(req, res, next, roles);\n    };\n  }\n  const [req, res, next] = args as [Request, Response, NextFunction];\n  void authenticate(req, res, next, []);\n}) as RequireAuth;\n"],"mappings":";AACA,SAAS,SAAS,iBAAiB;AAUnC,IAAI,UAA6B;AAE1B,SAAS,cAAc,QAA0B;AACtD,YAAU;AACZ;AAEA,SAAS,YAAwB;AAC/B,MAAI,CAAC,QAAS,OAAM,IAAI,MAAM,6DAAwD;AACtF,SAAO;AACT;AAEA,eAAsB,WAAW,KAAe,SAAiD;AAC/F,QAAM,EAAE,QAAQ,WAAW,aAAa,IAAI,UAAU;AACtD,QAAM,gBAAgB,IAAI,YAAY,EAAE,OAAO,MAAM;AACrD,QAAM,QAAQ,MAAM,IAAI,QAAQ,OAAO,EACpC,mBAAmB,EAAE,KAAK,QAAQ,CAAC,EACnC,kBAAkB,SAAS,EAC3B,KAAK,aAAa;AAErB,MAAI,OAAO,aAAa,OAAO;AAAA,IAC7B,UAAU;AAAA,IACV,QAAQ,QAAQ,IAAI,UAAU,MAAM;AAAA,IACpC,UAAU;AAAA,IACV,GAAI,iBAAiB,UAAa,EAAE,QAAQ,aAAa;AAAA,EAC3D,CAAC;AACH;AAEO,SAAS,YAAY,KAAqB;AAC/C,MAAI,YAAY,WAAW;AAC7B;AAEA,eAAsB,UAAU,SAAmD;AACjF,QAAM,EAAE,QAAQ,UAAU,IAAI,UAAU;AACxC,QAAM,gBAAgB,IAAI,YAAY,EAAE,OAAO,MAAM;AACrD,SAAO,MAAM,IAAI,QAAQ,OAAO,EAC7B,mBAAmB,EAAE,KAAK,QAAQ,CAAC,EACnC,kBAAkB,SAAS,EAC3B,KAAK,aAAa;AACvB;AAEA,eAAe,aACb,KACA,KACA,MACA,OACe;AACf,QAAM,EAAE,QAAQ,SAAS,IAAI,UAAU;AAEvC,MAAI;AACF,QAAI;AAEJ,QAAI,aAAa,aAAa;AAC5B,YAAM,UAAW,IAAyD;AAC1E,cAAQ,UAAU,WAAW;AAAA,IAC/B,OAAO;AACL,YAAM,OAAO,IAAI,QAAQ,eAAe;AACxC,UAAI,OAAO,SAAS,YAAY,KAAK,WAAW,SAAS,GAAG;AAC1D,gBAAQ,KAAK,MAAM,CAAC;AAAA,MACtB;AAAA,IACF;AAEA,QAAI,CAAC,OAAO;AACV,UAAI,OAAO,GAAG,EAAE,KAAK,EAAE,OAAO,eAAe,CAAC;AAC9C;AAAA,IACF;AAEA,UAAM,gBAAgB,IAAI,YAAY,EAAE,OAAO,MAAM;AACrD,UAAM,EAAE,QAAQ,IAAI,MAAM,UAAU,OAAO,aAAa;AAExD,QAAI,MAAM,SAAS,GAAG;AACpB,YAAM,OAAQ,QAAoC,MAAM;AACxD,UAAI,OAAO,SAAS,YAAY,CAAC,MAAM,SAAS,IAAI,GAAG;AACrD,YAAI,OAAO,GAAG,EAAE,KAAK,EAAE,OAAO,YAAY,CAAC;AAC3C;AAAA,MACF;AAAA,IACF;AAEA,IAAC,IAAuC,OAAO;AAC/C,SAAK;AAAA,EACP,QAAQ;AACN,QAAI,OAAO,GAAG,EAAE,KAAK,EAAE,OAAO,eAAe,CAAC;AAAA,EAChD;AACF;AAYO,IAAM,eAA4B,IAAI,SAAoB;AAC/D,MAAI,KAAK,SAAS,KAAK,OAAO,KAAK,CAAC,MAAM,UAAU;AAClD,UAAM,QAAQ;AACd,WAAO,CAACA,MAAcC,MAAeC,UAAuB;AAC1D,WAAK,aAAaF,MAAKC,MAAKC,OAAM,KAAK;AAAA,IACzC;AAAA,EACF;AACA,QAAM,CAAC,KAAK,KAAK,IAAI,IAAI;AACzB,OAAK,aAAa,KAAK,KAAK,MAAM,CAAC,CAAC;AACtC;","names":["req","res","next"]}

package/dist/index.cjs

@@ -1,6 +1,6 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _interopRequireWildcard(obj) { if (obj && obj.__esModule) { return obj; } else { var newObj = {}; if (obj != null) { for (var key in obj) { if (Object.prototype.hasOwnProperty.call(obj, key)) { newObj[key] = obj[key]; } } } newObj.default = obj; return newObj; } } function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; } function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
 
-var _chunkUUF2OYRWcjs = require('./chunk-UUF2OYRW.cjs');
+var _chunkQOKLEPTXcjs = require('./chunk-QOKLEPTX.cjs');
 
 
 
@@ -1041,7 +1041,7 @@ async function ignite(config) {
   }
   if (jwtSecret) {
     const cookieDomain = process.env["COOKIE_DOMAIN"];
-    _chunkUUF2OYRWcjs.configureAuth.call(void 0, {
+    _chunkQOKLEPTXcjs.configureAuth.call(void 0, {
       secret: jwtSecret,
       strategy: authStrategy,
       expiresIn: _nullishCoalesce(process.env["JWT_EXPIRES_IN"], () => ( "7d")),

package/dist/index.js

@@ -1,6 +1,6 @@
 import {
   configureAuth
-} from "./chunk-BHMFPULA.js";
+} from "./chunk-YE4ORV7Z.js";
 import {
   registerTask,
   setEnqueueImpl,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "express-file-cluster",
-  "version": "0.2.9",
+  "version": "0.2.11",
   "description": "Enterprise-grade, zero-boilerplate backend framework with file-based routing and multi-core clustering",
   "license": "MIT",
   "type": "module",

package/dist/chunk-BHMFPULA.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/auth/index.ts"],"sourcesContent":["import type { RequestHandler, Response } from 'express';\nimport { SignJWT, jwtVerify } from 'jose';\nimport type { AuthStrategy } from '../types.js';\n\ninterface AuthConfig {\n  secret: string;\n  strategy: AuthStrategy;\n  expiresIn: string;\n  cookieDomain?: string | undefined;\n}\n\nlet _config: AuthConfig | null = null;\n\nexport function configureAuth(config: AuthConfig): void {\n  _config = config;\n}\n\nfunction getConfig(): AuthConfig {\n  if (!_config) throw new Error('[EFC] Auth not configured — pass jwtSecret to ignite()');\n  return _config;\n}\n\nexport async function issueToken(res: Response, payload: Record<string, unknown>): Promise<void> {\n  const { secret, expiresIn, cookieDomain } = getConfig();\n  const encodedSecret = new TextEncoder().encode(secret);\n  const token = await new SignJWT(payload)\n    .setProtectedHeader({ alg: 'HS256' })\n    .setExpirationTime(expiresIn)\n    .sign(encodedSecret);\n\n  res.cookie('efc_token', token, {\n    httpOnly: true,\n    secure: process.env['NODE_ENV'] === 'production',\n    sameSite: 'strict',\n    ...(cookieDomain !== undefined && { domain: cookieDomain }),\n  });\n}\n\nexport function revokeToken(res: Response): void {\n  res.clearCookie('efc_token');\n}\n\nexport async function signToken(payload: Record<string, unknown>): Promise<string> {\n  const { secret, expiresIn } = getConfig();\n  const encodedSecret = new TextEncoder().encode(secret);\n  return await new SignJWT(payload)\n    .setProtectedHeader({ alg: 'HS256' })\n    .setExpirationTime(expiresIn)\n    .sign(encodedSecret);\n}\n\nexport const requireAuth: RequestHandler = async (req, res, next) => {\n  const { secret, strategy } = getConfig();\n\n  try {\n    let token: string | undefined;\n\n    if (strategy === 'http-only') {\n      const cookies = (req as typeof req & { cookies: Record<string, string> }).cookies;\n      token = cookies?.['efc_token'];\n    } else {\n      const auth = req.headers['authorization'];\n      if (typeof auth === 'string' && auth.startsWith('Bearer ')) {\n        token = auth.slice(7);\n      }\n    }\n\n    if (!token) {\n      res.status(401).json({ error: 'Unauthorized' });\n      return;\n    }\n\n    const encodedSecret = new TextEncoder().encode(secret);\n    const { payload } = await jwtVerify(token, encodedSecret);\n    (req as typeof req & { user: unknown }).user = payload;\n    next();\n  } catch {\n    res.status(401).json({ error: 'Unauthorized' });\n  }\n};\n"],"mappings":";AACA,SAAS,SAAS,iBAAiB;AAUnC,IAAI,UAA6B;AAE1B,SAAS,cAAc,QAA0B;AACtD,YAAU;AACZ;AAEA,SAAS,YAAwB;AAC/B,MAAI,CAAC,QAAS,OAAM,IAAI,MAAM,6DAAwD;AACtF,SAAO;AACT;AAEA,eAAsB,WAAW,KAAe,SAAiD;AAC/F,QAAM,EAAE,QAAQ,WAAW,aAAa,IAAI,UAAU;AACtD,QAAM,gBAAgB,IAAI,YAAY,EAAE,OAAO,MAAM;AACrD,QAAM,QAAQ,MAAM,IAAI,QAAQ,OAAO,EACpC,mBAAmB,EAAE,KAAK,QAAQ,CAAC,EACnC,kBAAkB,SAAS,EAC3B,KAAK,aAAa;AAErB,MAAI,OAAO,aAAa,OAAO;AAAA,IAC7B,UAAU;AAAA,IACV,QAAQ,QAAQ,IAAI,UAAU,MAAM;AAAA,IACpC,UAAU;AAAA,IACV,GAAI,iBAAiB,UAAa,EAAE,QAAQ,aAAa;AAAA,EAC3D,CAAC;AACH;AAEO,SAAS,YAAY,KAAqB;AAC/C,MAAI,YAAY,WAAW;AAC7B;AAEA,eAAsB,UAAU,SAAmD;AACjF,QAAM,EAAE,QAAQ,UAAU,IAAI,UAAU;AACxC,QAAM,gBAAgB,IAAI,YAAY,EAAE,OAAO,MAAM;AACrD,SAAO,MAAM,IAAI,QAAQ,OAAO,EAC7B,mBAAmB,EAAE,KAAK,QAAQ,CAAC,EACnC,kBAAkB,SAAS,EAC3B,KAAK,aAAa;AACvB;AAEO,IAAM,cAA8B,OAAO,KAAK,KAAK,SAAS;AACnE,QAAM,EAAE,QAAQ,SAAS,IAAI,UAAU;AAEvC,MAAI;AACF,QAAI;AAEJ,QAAI,aAAa,aAAa;AAC5B,YAAM,UAAW,IAAyD;AAC1E,cAAQ,UAAU,WAAW;AAAA,IAC/B,OAAO;AACL,YAAM,OAAO,IAAI,QAAQ,eAAe;AACxC,UAAI,OAAO,SAAS,YAAY,KAAK,WAAW,SAAS,GAAG;AAC1D,gBAAQ,KAAK,MAAM,CAAC;AAAA,MACtB;AAAA,IACF;AAEA,QAAI,CAAC,OAAO;AACV,UAAI,OAAO,GAAG,EAAE,KAAK,EAAE,OAAO,eAAe,CAAC;AAC9C;AAAA,IACF;AAEA,UAAM,gBAAgB,IAAI,YAAY,EAAE,OAAO,MAAM;AACrD,UAAM,EAAE,QAAQ,IAAI,MAAM,UAAU,OAAO,aAAa;AACxD,IAAC,IAAuC,OAAO;AAC/C,SAAK;AAAA,EACP,QAAQ;AACN,QAAI,OAAO,GAAG,EAAE,KAAK,EAAE,OAAO,eAAe,CAAC;AAAA,EAChD;AACF;","names":[]}

package/dist/chunk-UUF2OYRW.cjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["/home/runner/work/efc.js/efc.js/packages/core/dist/chunk-UUF2OYRW.cjs","../src/auth/index.ts"],"names":[],"mappings":"AAAA;ACCA,4BAAmC;AAUnC,IAAI,QAAA,EAA6B,IAAA;AAE1B,SAAS,aAAA,CAAc,MAAA,EAA0B;AACtD,EAAA,QAAA,EAAU,MAAA;AACZ;AAEA,SAAS,SAAA,CAAA,EAAwB;AAC/B,EAAA,GAAA,CAAI,CAAC,OAAA,EAAS,MAAM,IAAI,KAAA,CAAM,6DAAwD,CAAA;AACtF,EAAA,OAAO,OAAA;AACT;AAEA,MAAA,SAAsB,UAAA,CAAW,GAAA,EAAe,OAAA,EAAiD;AAC/F,EAAA,MAAM,EAAE,MAAA,EAAQ,SAAA,EAAW,aAAa,EAAA,EAAI,SAAA,CAAU,CAAA;AACtD,EAAA,MAAM,cAAA,EAAgB,IAAI,WAAA,CAAY,CAAA,CAAE,MAAA,CAAO,MAAM,CAAA;AACrD,EAAA,MAAM,MAAA,EAAQ,MAAM,IAAI,kBAAA,CAAQ,OAAO,CAAA,CACpC,kBAAA,CAAmB,EAAE,GAAA,EAAK,QAAQ,CAAC,CAAA,CACnC,iBAAA,CAAkB,SAAS,CAAA,CAC3B,IAAA,CAAK,aAAa,CAAA;AAErB,EAAA,GAAA,CAAI,MAAA,CAAO,WAAA,EAAa,KAAA,EAAO;AAAA,IAC7B,QAAA,EAAU,IAAA;AAAA,IACV,MAAA,EAAQ,OAAA,CAAQ,GAAA,CAAI,UAAU,EAAA,IAAM,YAAA;AAAA,IACpC,QAAA,EAAU,QAAA;AAAA,IACV,GAAI,aAAA,IAAiB,KAAA,EAAA,GAAa,EAAE,MAAA,EAAQ,aAAa;AAAA,EAC3D,CAAC,CAAA;AACH;AAEO,SAAS,WAAA,CAAY,GAAA,EAAqB;AAC/C,EAAA,GAAA,CAAI,WAAA,CAAY,WAAW,CAAA;AAC7B;AAEA,MAAA,SAAsB,SAAA,CAAU,OAAA,EAAmD;AACjF,EAAA,MAAM,EAAE,MAAA,EAAQ,UAAU,EAAA,EAAI,SAAA,CAAU,CAAA;AACxC,EAAA,MAAM,cAAA,EAAgB,IAAI,WAAA,CAAY,CAAA,CAAE,MAAA,CAAO,MAAM,CAAA;AACrD,EAAA,OAAO,MAAM,IAAI,kBAAA,CAAQ,OAAO,CAAA,CAC7B,kBAAA,CAAmB,EAAE,GAAA,EAAK,QAAQ,CAAC,CAAA,CACnC,iBAAA,CAAkB,SAAS,CAAA,CAC3B,IAAA,CAAK,aAAa,CAAA;AACvB;AAEO,IAAM,YAAA,EAA8B,MAAA,CAAO,GAAA,EAAK,GAAA,EAAK,IAAA,EAAA,GAAS;AACnE,EAAA,MAAM,EAAE,MAAA,EAAQ,SAAS,EAAA,EAAI,SAAA,CAAU,CAAA;AAEvC,EAAA,IAAI;AACF,IAAA,IAAI,KAAA;AAEJ,IAAA,GAAA,CAAI,SAAA,IAAa,WAAA,EAAa;AAC5B,MAAA,MAAM,QAAA,EAAW,GAAA,CAAyD,OAAA;AAC1E,MAAA,MAAA,kBAAQ,OAAA,0BAAA,CAAU,WAAW,GAAA;AAAA,IAC/B,EAAA,KAAO;AACL,MAAA,MAAM,KAAA,EAAO,GAAA,CAAI,OAAA,CAAQ,eAAe,CAAA;AACxC,MAAA,GAAA,CAAI,OAAO,KAAA,IAAS,SAAA,GAAY,IAAA,CAAK,UAAA,CAAW,SAAS,CAAA,EAAG;AAC1D,QAAA,MAAA,EAAQ,IAAA,CAAK,KAAA,CAAM,CAAC,CAAA;AAAA,MACtB;AAAA,IACF;AAEA,IAAA,GAAA,CAAI,CAAC,KAAA,EAAO;AACV,MAAA,GAAA,CAAI,MAAA,CAAO,GAAG,CAAA,CAAE,IAAA,CAAK,EAAE,KAAA,EAAO,eAAe,CAAC,CAAA;AAC9C,MAAA,MAAA;AAAA,IACF;AAEA,IAAA,MAAM,cAAA,EAAgB,IAAI,WAAA,CAAY,CAAA,CAAE,MAAA,CAAO,MAAM,CAAA;AACrD,IAAA,MAAM,EAAE,QAAQ,EAAA,EAAI,MAAM,6BAAA,KAAU,EAAO,aAAa,CAAA;AACxD,IAAC,GAAA,CAAuC,KAAA,EAAO,OAAA;AAC/C,IAAA,IAAA,CAAK,CAAA;AAAA,EACP,EAAA,UAAQ;AACN,IAAA,GAAA,CAAI,MAAA,CAAO,GAAG,CAAA,CAAE,IAAA,CAAK,EAAE,KAAA,EAAO,eAAe,CAAC,CAAA;AAAA,EAChD;AACF,CAAA;ADzBA;AACA;AACE;AACA;AACA;AACA;AACA;AACF,4KAAC","file":"/home/runner/work/efc.js/efc.js/packages/core/dist/chunk-UUF2OYRW.cjs","sourcesContent":[null,"import type { RequestHandler, Response } from 'express';\nimport { SignJWT, jwtVerify } from 'jose';\nimport type { AuthStrategy } from '../types.js';\n\ninterface AuthConfig {\n  secret: string;\n  strategy: AuthStrategy;\n  expiresIn: string;\n  cookieDomain?: string | undefined;\n}\n\nlet _config: AuthConfig | null = null;\n\nexport function configureAuth(config: AuthConfig): void {\n  _config = config;\n}\n\nfunction getConfig(): AuthConfig {\n  if (!_config) throw new Error('[EFC] Auth not configured — pass jwtSecret to ignite()');\n  return _config;\n}\n\nexport async function issueToken(res: Response, payload: Record<string, unknown>): Promise<void> {\n  const { secret, expiresIn, cookieDomain } = getConfig();\n  const encodedSecret = new TextEncoder().encode(secret);\n  const token = await new SignJWT(payload)\n    .setProtectedHeader({ alg: 'HS256' })\n    .setExpirationTime(expiresIn)\n    .sign(encodedSecret);\n\n  res.cookie('efc_token', token, {\n    httpOnly: true,\n    secure: process.env['NODE_ENV'] === 'production',\n    sameSite: 'strict',\n    ...(cookieDomain !== undefined && { domain: cookieDomain }),\n  });\n}\n\nexport function revokeToken(res: Response): void {\n  res.clearCookie('efc_token');\n}\n\nexport async function signToken(payload: Record<string, unknown>): Promise<string> {\n  const { secret, expiresIn } = getConfig();\n  const encodedSecret = new TextEncoder().encode(secret);\n  return await new SignJWT(payload)\n    .setProtectedHeader({ alg: 'HS256' })\n    .setExpirationTime(expiresIn)\n    .sign(encodedSecret);\n}\n\nexport const requireAuth: RequestHandler = async (req, res, next) => {\n  const { secret, strategy } = getConfig();\n\n  try {\n    let token: string | undefined;\n\n    if (strategy === 'http-only') {\n      const cookies = (req as typeof req & { cookies: Record<string, string> }).cookies;\n      token = cookies?.['efc_token'];\n    } else {\n      const auth = req.headers['authorization'];\n      if (typeof auth === 'string' && auth.startsWith('Bearer ')) {\n        token = auth.slice(7);\n      }\n    }\n\n    if (!token) {\n      res.status(401).json({ error: 'Unauthorized' });\n      return;\n    }\n\n    const encodedSecret = new TextEncoder().encode(secret);\n    const { payload } = await jwtVerify(token, encodedSecret);\n    (req as typeof req & { user: unknown }).user = payload;\n    next();\n  } catch {\n    res.status(401).json({ error: 'Unauthorized' });\n  }\n};\n"]}