faire-auth 1.0.0

package/dist/types/index.d.cts

@@ -0,0 +1,3 @@
+import { $ as Client, Ct as InferPluginRateLimit, F as DTO, I as FaireAuthOptions, L as FaireAuthRateLimitOptions, P as CustomRules, Q as CamelCase, R as Hooks, St as InferPluginMiddleware, Z as AtomListener, _t as FaireAuthPlugin, a as InferPluginTypes, an as AuthContext, at as InferAdditionalAsClient, bt as InferPluginErrorCodes, c as Models, cn as Adapter, ct as InferPluginsFromClient, dn as DBAdapter, dt as IsSignal, et as ClientOptions, fn as DBAdapterInstance, ft as RevalidateOptions, gn as Where, gt as AuthPluginSchema, hn as TransactionAdapter, i as AdditionalUserFieldsOutput, it as InferActions, l as RateLimit, ln as AdapterInstance, lt as InferSessionFromClient, mn as DBTransactionAdapter, mt as Store, n as AdditionalSessionFieldsOutput, nn as AuthFactory, nt as FaireAuthClientPlugin, o as InferSession, on as init, ot as InferAdditionalFromClient, pn as DBAdapterSchemaCreation, pt as SessionQueryParams, r as AdditionalUserFieldsInput, rn as AuthProperties, rt as Inc, s as InferUser, st as InferErrorCodes, t as AdditionalSessionFieldsInput, tn as AuthEndpoint, tt as CreateSchemaType, un as AdapterSchemaCreation, ut as InferUserFromClient, vt as InferOptionSchema, xt as InferPluginHooks, yt as InferPluginDTO, z as Middleware } from "../index-B-WeOMzg.cjs";
+import { n as Execute, r as ToExecFull, t as ContextVars } from "../hono-DOM31WQz.cjs";
+export { Adapter, AdapterInstance, AdapterSchemaCreation, AdditionalSessionFieldsInput, AdditionalSessionFieldsOutput, AdditionalUserFieldsInput, AdditionalUserFieldsOutput, AtomListener, AuthContext, AuthEndpoint, AuthFactory, AuthPluginSchema, AuthProperties, CamelCase, Client, ClientOptions, ContextVars, CreateSchemaType, CustomRules, DBAdapter, DBAdapterInstance, DBAdapterSchemaCreation, DBTransactionAdapter, DTO, Execute, FaireAuthClientPlugin, FaireAuthOptions, FaireAuthPlugin, FaireAuthRateLimitOptions, Hooks, Inc, InferActions, InferAdditionalAsClient, InferAdditionalFromClient, InferErrorCodes, InferOptionSchema, InferPluginDTO, InferPluginErrorCodes, InferPluginHooks, InferPluginMiddleware, InferPluginRateLimit, InferPluginTypes, InferPluginsFromClient, InferSession, InferSessionFromClient, InferUser, InferUserFromClient, IsSignal, Middleware, Models, RateLimit, RevalidateOptions, SessionQueryParams, Store, ToExecFull, TransactionAdapter, Where, init };

package/dist/types/index.d.mts

@@ -0,0 +1,3 @@
+import { $ as Client, Ct as InferPluginRateLimit, F as DTO, I as FaireAuthOptions, L as FaireAuthRateLimitOptions, P as CustomRules, Q as CamelCase, R as Hooks, St as InferPluginMiddleware, Z as AtomListener, _t as FaireAuthPlugin, a as InferPluginTypes, an as AuthContext, at as InferAdditionalAsClient, bt as InferPluginErrorCodes, c as Models, cn as Adapter, ct as InferPluginsFromClient, dn as DBAdapter, dt as IsSignal, et as ClientOptions, fn as DBAdapterInstance, ft as RevalidateOptions, gn as Where, gt as AuthPluginSchema, hn as TransactionAdapter, i as AdditionalUserFieldsOutput, it as InferActions, l as RateLimit, ln as AdapterInstance, lt as InferSessionFromClient, mn as DBTransactionAdapter, mt as Store, n as AdditionalSessionFieldsOutput, nn as AuthFactory, nt as FaireAuthClientPlugin, o as InferSession, on as init, ot as InferAdditionalFromClient, pn as DBAdapterSchemaCreation, pt as SessionQueryParams, r as AdditionalUserFieldsInput, rn as AuthProperties, rt as Inc, s as InferUser, st as InferErrorCodes, t as AdditionalSessionFieldsInput, tn as AuthEndpoint, tt as CreateSchemaType, un as AdapterSchemaCreation, ut as InferUserFromClient, vt as InferOptionSchema, xt as InferPluginHooks, yt as InferPluginDTO, z as Middleware } from "../index-jlessPI0.mjs";
+import { n as Execute, r as ToExecFull, t as ContextVars } from "../hono-DuE14mmj.mjs";
+export { Adapter, AdapterInstance, AdapterSchemaCreation, AdditionalSessionFieldsInput, AdditionalSessionFieldsOutput, AdditionalUserFieldsInput, AdditionalUserFieldsOutput, AtomListener, AuthContext, AuthEndpoint, AuthFactory, AuthPluginSchema, AuthProperties, CamelCase, Client, ClientOptions, ContextVars, CreateSchemaType, CustomRules, DBAdapter, DBAdapterInstance, DBAdapterSchemaCreation, DBTransactionAdapter, DTO, Execute, FaireAuthClientPlugin, FaireAuthOptions, FaireAuthPlugin, FaireAuthRateLimitOptions, Hooks, Inc, InferActions, InferAdditionalAsClient, InferAdditionalFromClient, InferErrorCodes, InferOptionSchema, InferPluginDTO, InferPluginErrorCodes, InferPluginHooks, InferPluginMiddleware, InferPluginRateLimit, InferPluginTypes, InferPluginsFromClient, InferSession, InferSessionFromClient, InferUser, InferUserFromClient, IsSignal, Middleware, Models, RateLimit, RevalidateOptions, SessionQueryParams, Store, ToExecFull, TransactionAdapter, Where, init };

package/dist/types/index.mjs

@@ -0,0 +1 @@
+export {  };

package/dist/url-BoUuoIwZ.mjs

@@ -0,0 +1,88 @@
+import { env } from "@faire-auth/core/env";
+import { FaireAuthError } from "@faire-auth/core/error";
+
+//#region src/utils/url.ts
+const checkHasPath = (url) => {
+	try {
+		return new URL(url).pathname !== "/";
+	} catch {
+		throw new FaireAuthError(`Invalid base URL: ${url}. Please provide a valid base URL.`);
+	}
+};
+const withPath = (url, path = "/api/auth") => {
+	if (checkHasPath(url)) return url;
+	path = path.startsWith("/") ? path : `/${path}`;
+	return `${url.replace(/\/+$/, "")}${path}`;
+};
+const getOrigin = (url) => {
+	try {
+		return new URL(url).origin;
+	} catch {
+		return null;
+	}
+};
+const getProtocol = (url) => {
+	try {
+		return new URL(url).protocol;
+	} catch {
+		return null;
+	}
+};
+const getHost = (url) => {
+	try {
+		return new URL(url).host;
+	} catch {
+		return url;
+	}
+};
+const getBaseURLFromEnv = () => env["FAIRE_AUTH_URL"] ?? env["NEXT_PUBLIC_FAIRE_AUTH_URL"] ?? env["PUBLIC_FAIRE_AUTH_URL"] ?? env["NUXT_PUBLIC_FAIRE_AUTH_URL"] ?? env["NUXT_PUBLIC_AUTH_URL"] ?? (env["BASE_URL"] !== "/" ? env["BASE_URL"] : void 0);
+const getBaseURL = (url, path, request) => {
+	if (url) return withPath(url, path);
+	const fromEnv = getBaseURLFromEnv();
+	if (fromEnv) return withPath(fromEnv, path);
+	if (request) {
+		const fromRequest = request.header("x-forwarded-host");
+		const fromRequestProto = request.header("x-forwarded-proto");
+		if (fromRequest != null && fromRequestProto != null) return withPath(`${fromRequestProto}://${fromRequest}`, path);
+		const url$1 = getOrigin(request.url);
+		if (url$1 == null || url$1 === "") throw new FaireAuthError("Could not get origin from request. Please provide a valid base URL.");
+		return withPath(url$1, path);
+	}
+	if (typeof window !== "undefined" && window.location != null) return withPath(window.location.origin, path);
+};
+const getTrustedOrigins = (options, context, request) => {
+	const result = {
+		ready: false,
+		trustedOrigins: /* @__PURE__ */ new Set()
+	};
+	if (context?.trustedOrigins != null) if (!request) return {
+		ready: true,
+		trustedOrigins: context.trustedOrigins
+	};
+	else context.trustedOrigins.forEach((o) => result.trustedOrigins.add(o));
+	const checkFalsy = () => {
+		for (const o of result.trustedOrigins) if (!o) throw new FaireAuthError("A provided trusted origin is invalid, make sure your trusted origins list is properly defined.");
+	};
+	const optionsTrustedOrigins = options.trustedOrigins;
+	if (!context?.trustedOrigins) {
+		const baseURL = options.baseURL ?? context?.baseURL;
+		if (baseURL) result.trustedOrigins.add(new URL(baseURL).origin);
+		const envTrustedOrigins = process.env["FAIRE_AUTH_TRUSTED_ORIGINS"];
+		if (envTrustedOrigins != null) envTrustedOrigins.split(",").forEach((o) => result.trustedOrigins.add(o));
+		if (optionsTrustedOrigins && Array.isArray(optionsTrustedOrigins)) optionsTrustedOrigins.forEach((o) => result.trustedOrigins.add(o));
+	}
+	if (typeof optionsTrustedOrigins === "function" && request) result.dynamicPromise = (async () => {
+		const dynamic = await optionsTrustedOrigins(request);
+		if (dynamic) dynamic.forEach((o) => result.trustedOrigins.add(o));
+		checkFalsy();
+		result.ready = true;
+	})();
+	else {
+		checkFalsy();
+		result.ready = true;
+	}
+	return result;
+};
+
+//#endregion
+export { getTrustedOrigins as a, getProtocol as i, getHost as n, getOrigin as r, getBaseURL as t };

package/dist/url-D2yvKaM7.cjs

@@ -0,0 +1,118 @@
+const require_chunk = require('./chunk-oakRccI5.cjs');
+let __faire_auth_core_env = require("@faire-auth/core/env");
+let __faire_auth_core_error = require("@faire-auth/core/error");
+
+//#region src/utils/url.ts
+const checkHasPath = (url) => {
+	try {
+		return new URL(url).pathname !== "/";
+	} catch {
+		throw new __faire_auth_core_error.FaireAuthError(`Invalid base URL: ${url}. Please provide a valid base URL.`);
+	}
+};
+const withPath = (url, path = "/api/auth") => {
+	if (checkHasPath(url)) return url;
+	path = path.startsWith("/") ? path : `/${path}`;
+	return `${url.replace(/\/+$/, "")}${path}`;
+};
+const getOrigin = (url) => {
+	try {
+		return new URL(url).origin;
+	} catch {
+		return null;
+	}
+};
+const getProtocol = (url) => {
+	try {
+		return new URL(url).protocol;
+	} catch {
+		return null;
+	}
+};
+const getHost = (url) => {
+	try {
+		return new URL(url).host;
+	} catch {
+		return url;
+	}
+};
+const getBaseURLFromEnv = () => __faire_auth_core_env.env["FAIRE_AUTH_URL"] ?? __faire_auth_core_env.env["NEXT_PUBLIC_FAIRE_AUTH_URL"] ?? __faire_auth_core_env.env["PUBLIC_FAIRE_AUTH_URL"] ?? __faire_auth_core_env.env["NUXT_PUBLIC_FAIRE_AUTH_URL"] ?? __faire_auth_core_env.env["NUXT_PUBLIC_AUTH_URL"] ?? (__faire_auth_core_env.env["BASE_URL"] !== "/" ? __faire_auth_core_env.env["BASE_URL"] : void 0);
+const getBaseURL = (url, path, request) => {
+	if (url) return withPath(url, path);
+	const fromEnv = getBaseURLFromEnv();
+	if (fromEnv) return withPath(fromEnv, path);
+	if (request) {
+		const fromRequest = request.header("x-forwarded-host");
+		const fromRequestProto = request.header("x-forwarded-proto");
+		if (fromRequest != null && fromRequestProto != null) return withPath(`${fromRequestProto}://${fromRequest}`, path);
+		const url$1 = getOrigin(request.url);
+		if (url$1 == null || url$1 === "") throw new __faire_auth_core_error.FaireAuthError("Could not get origin from request. Please provide a valid base URL.");
+		return withPath(url$1, path);
+	}
+	if (typeof window !== "undefined" && window.location != null) return withPath(window.location.origin, path);
+};
+const getTrustedOrigins = (options, context, request) => {
+	const result = {
+		ready: false,
+		trustedOrigins: /* @__PURE__ */ new Set()
+	};
+	if (context?.trustedOrigins != null) if (!request) return {
+		ready: true,
+		trustedOrigins: context.trustedOrigins
+	};
+	else context.trustedOrigins.forEach((o) => result.trustedOrigins.add(o));
+	const checkFalsy = () => {
+		for (const o of result.trustedOrigins) if (!o) throw new __faire_auth_core_error.FaireAuthError("A provided trusted origin is invalid, make sure your trusted origins list is properly defined.");
+	};
+	const optionsTrustedOrigins = options.trustedOrigins;
+	if (!context?.trustedOrigins) {
+		const baseURL = options.baseURL ?? context?.baseURL;
+		if (baseURL) result.trustedOrigins.add(new URL(baseURL).origin);
+		const envTrustedOrigins = process.env["FAIRE_AUTH_TRUSTED_ORIGINS"];
+		if (envTrustedOrigins != null) envTrustedOrigins.split(",").forEach((o) => result.trustedOrigins.add(o));
+		if (optionsTrustedOrigins && Array.isArray(optionsTrustedOrigins)) optionsTrustedOrigins.forEach((o) => result.trustedOrigins.add(o));
+	}
+	if (typeof optionsTrustedOrigins === "function" && request) result.dynamicPromise = (async () => {
+		const dynamic = await optionsTrustedOrigins(request);
+		if (dynamic) dynamic.forEach((o) => result.trustedOrigins.add(o));
+		checkFalsy();
+		result.ready = true;
+	})();
+	else {
+		checkFalsy();
+		result.ready = true;
+	}
+	return result;
+};
+
+//#endregion
+Object.defineProperty(exports, 'getBaseURL', {
+  enumerable: true,
+  get: function () {
+    return getBaseURL;
+  }
+});
+Object.defineProperty(exports, 'getHost', {
+  enumerable: true,
+  get: function () {
+    return getHost;
+  }
+});
+Object.defineProperty(exports, 'getOrigin', {
+  enumerable: true,
+  get: function () {
+    return getOrigin;
+  }
+});
+Object.defineProperty(exports, 'getProtocol', {
+  enumerable: true,
+  get: function () {
+    return getProtocol;
+  }
+});
+Object.defineProperty(exports, 'getTrustedOrigins', {
+  enumerable: true,
+  get: function () {
+    return getTrustedOrigins;
+  }
+});

package/dist/utils/cookies.cjs

@@ -0,0 +1,51 @@
+const require_chunk = require('../chunk-oakRccI5.cjs');
+require('../crypto-CcTxYH82.cjs');
+require('../json-CcJ2HjGo.cjs');
+const require_cookies = require('../cookies-B5xeA6i8.cjs');
+let hono_utils_cookie = require("hono/utils/cookie");
+
+exports.checkAuthCookie = require_cookies.checkAuthCookie;
+exports.createCookieCapture = require_cookies.createCookieCapture;
+exports.createCookieCreator = require_cookies.createCookieCreator;
+exports.createCookieSetter = require_cookies.createCookieSetter;
+exports.deleteSessionCookie = require_cookies.deleteSessionCookie;
+exports.getCookieCache = require_cookies.getCookieCache;
+exports.getCookieKey = require_cookies.getCookieKey;
+exports.getCookies = require_cookies.getCookies;
+exports.getSessionCookie = require_cookies.getSessionCookie;
+Object.defineProperty(exports, 'parse', {
+  enumerable: true,
+  get: function () {
+    return hono_utils_cookie.parse;
+  }
+});
+exports.parseCookies = require_cookies.parseCookies;
+exports.parseSetCookieHeader = require_cookies.parseSetCookieHeader;
+Object.defineProperty(exports, 'parseSigned', {
+  enumerable: true,
+  get: function () {
+    return hono_utils_cookie.parseSigned;
+  }
+});
+Object.defineProperty(exports, 'serialize', {
+  enumerable: true,
+  get: function () {
+    return hono_utils_cookie.serialize;
+  }
+});
+Object.defineProperty(exports, 'serializeSigned', {
+  enumerable: true,
+  get: function () {
+    return hono_utils_cookie.serializeSigned;
+  }
+});
+exports.serializeSignedCookie = require_cookies.serializeSignedCookie;
+exports.setCookieCache = require_cookies.setCookieCache;
+exports.setSessionCookie = require_cookies.setSessionCookie;
+var hono_cookie = require("hono/cookie");
+Object.keys(hono_cookie).forEach(function (k) {
+  if (k !== 'default' && !Object.prototype.hasOwnProperty.call(exports, k)) Object.defineProperty(exports, k, {
+    enumerable: true,
+    get: function () { return hono_cookie[k]; }
+  });
+});

package/dist/utils/cookies.d.cts

@@ -0,0 +1,179 @@
+import { I as FaireAuthOptions$1, an as AuthContext$1 } from "../index-B-WeOMzg.cjs";
+import { t as ContextVars } from "../hono-DOM31WQz.cjs";
+import { LiteralStringUnion } from "@faire-auth/core/types";
+import { Context } from "hono";
+import { Session, User } from "@faire-auth/core/db";
+import { SuccessContext } from "@better-fetch/fetch";
+import { parse, parseSigned, serialize, serializeSigned } from "hono/utils/cookie";
+export * from "hono/cookie";
+
+//#region src/utils/cookies.d.ts
+type FaireAuthCookies = ReturnType<typeof getCookies>;
+type EligibleCookies = LiteralStringUnion<keyof FaireAuthCookies>;
+interface CookieAttributes {
+  value: string;
+  "max-age"?: number;
+  expires?: Date;
+  domain?: string;
+  path?: string;
+  secure?: boolean;
+  httponly?: boolean;
+  samesite?: "lax" | "none" | "strict";
+  [key: string]: any;
+}
+type CookiePrefixOptions = "host" | "secure";
+interface CookieOptions {
+  /**
+   * Domain of the cookie
+   *
+   * The Domain attribute specifies which server can receive a cookie. If specified, cookies are
+   * available on the specified server and its subdomains. If the it is not
+   * specified, the cookies are available on the server that sets it but not on
+   * its subdomains.
+   *
+   * @example
+   * `domain: "example.com"`
+   */
+  domain?: string;
+  /**
+   * A lifetime of a cookie. Permanent cookies are deleted after the date specified in the
+   * Expires attribute:
+   *
+   * Expires has been available for longer than Max-Age, however Max-Age is less error-prone, and
+   * takes precedence when both are set. The rationale behind this is that when you set an
+   * Expires date and time, they're relative to the client the cookie is being set on. If the
+   * server is set to a different time, this could cause errors
+   */
+  expires?: Date;
+  /**
+   * Forbids JavaScript from accessing the cookie, for example, through the Document.cookie
+   * property. Note that a cookie that has been created with HttpOnly will still be sent with
+   * JavaScript-initiated requests, for example, when calling XMLHttpRequest.send() or fetch().
+   * This mitigates attacks against cross-site scripting
+   */
+  httpOnly?: boolean;
+  /**
+   * Indicates the number of seconds until the cookie expires. A zero or negative number will
+   * expire the cookie immediately. If both Expires and Max-Age are set, Max-Age has precedence.
+   *
+   * @example 604800 - 7 days
+   */
+  maxAge?: number;
+  /**
+   * Indicates the path that must exist in the requested URL for the browser to send the Cookie
+   * header.
+   *
+   * @example
+   * "/docs"
+   * // -> the request paths /docs, /docs/, /docs/Web/, and /docs/Web/HTTP will all match. the request paths /, /fr/docs will not match.
+   */
+  path?: string;
+  /**
+   * Indicates that the cookie is sent to the server only when a request is made with the https:
+   * scheme (except on localhost), and therefore, is more resistant to man-in-the-middle attacks.
+   */
+  secure?: boolean;
+  /**
+   * Controls whether or not a cookie is sent with cross-site requests, providing some protection
+   * against cross-site request forgery attacks (CSRF).
+   *
+   * Strict -  Means that the browser sends the cookie only for same-site requests, that is,
+   * requests originating from the same site that set the cookie. If a request originates from a
+   * different domain or scheme (even with the same domain), no cookies with the SameSite=Strict
+   * attribute are sent.
+   *
+   * Lax - Means that the cookie is not sent on cross-site requests, such as on requests to load
+   * images or frames, but is sent when a user is navigating to the origin site from an external
+   * site (for example, when following a link). This is the default behavior if the SameSite
+   * attribute is not specified.
+   *
+   * None - Means that the browser sends the cookie with both cross-site and same-site requests.
+   * The Secure attribute must also be set when setting this value.
+   */
+  sameSite?: "Lax" | "lax" | "None" | "none" | "Strict" | "strict";
+  /**
+   * Indicates that the cookie should be stored using partitioned storage. Note that if this is
+   * set, the Secure directive must also be set.
+   *
+   * @see https://developer.mozilla.org/en-US/docs/Web/Privacy/Privacy_sandbox/Partitioned_cookies
+   */
+  partitioned?: boolean;
+  /**
+   * Cooke Prefix
+   *
+   * - secure: `__Secure-` -> `__Secure-cookie-name`
+   * - host: `__Host-` -> `__Host-cookie-name`
+   *
+   * `secure` must be set to true to use prefixes
+   */
+  prefix?: CookiePrefixOptions;
+}
+declare const getCookieKey: (key: string, prefix?: CookiePrefixOptions) => string | undefined;
+/**
+ * Parse an HTTP Cookie header string and returning an object of all cookie
+ * name-value pairs.
+ *
+ * Inspired by https://github.com/unjs/cookie-es/blob/main/src/cookie/parse.ts
+ *
+ * @param str the string representing a `Cookie` header value
+ */
+declare const parseCookies: (str: string) => Map<string, string>;
+declare const serializeSignedCookie: (key: string, value: string, secret: string, opt?: CookieOptions) => Promise<string>;
+declare const checkAuthCookie: (request: Headers | Request, auth: {
+  $context: Promise<AuthContext$1> | AuthContext$1;
+}) => Promise<string | null>;
+/**
+ * IMPORTANT - each Set-Cookie header should be a single cookie
+ */
+declare const parseSetCookieHeader: (setCookie: string | string[]) => Map<string, CookieAttributes>;
+declare const createCookieCreator: (options: FaireAuthOptions$1) => (cookieName: string, overrideAttributes?: Partial<CookieOptions>) => {
+  name: string;
+  attributes: CookieOptions;
+};
+declare const getCookies: (options: FaireAuthOptions$1) => {
+  sessionToken: {
+    name: string;
+    options: CookieOptions;
+  };
+  /**
+   * This cookie is used to store the session data in the cookie
+   * This is useful for when you want to cache the session in the cookie
+   */
+  sessionData: {
+    name: string;
+    options: CookieOptions;
+  };
+  dontRememberToken: {
+    name: string;
+    options: CookieOptions;
+  };
+};
+declare const createCookieSetter: (headers: Headers) => (name: string, value: string) => void;
+declare const createCookieCapture: (headers: Headers) => (callback?: (cookieMap: Map<string, string>) => void) => <Res = {}>(context: SuccessContext<Res> | {
+  response: Response;
+}) => void;
+declare const getCookieCache: <S extends {
+  session: Session;
+  user: User;
+}>(request: Headers | Request, config?: {
+  cookiePrefix?: string;
+  cookieName?: string;
+  isSecure?: boolean;
+  secret?: string;
+}) => Promise<S | null>;
+declare const setCookieCache: <V extends object>(ctx: Context<ContextVars<V>>, options: Pick<FaireAuthOptions$1, "session">, session: {
+  session: Session;
+  user: User;
+}, dontRememberMe?: boolean) => Promise<void>;
+declare const getSessionCookie: (request: Headers | Request, config?: {
+  cookiePrefix?: string;
+  cookieName?: string;
+  path?: string;
+}) => string | null;
+declare const setSessionCookie: <V extends object>(ctx: Context<ContextVars<V>>, authOptions: Pick<FaireAuthOptions$1, "session" | "secondaryStorage">, session: {
+  session: Session;
+  user: User;
+}, dontRememberMe?: boolean, overrides?: Partial<CookieOptions>) => Promise<void>;
+declare const deleteSessionCookie: <V extends object>(ctx: Context<ContextVars<V>>, skipDontRememberMe?: boolean) => void;
+//#endregion
+export { CookieOptions, CookiePrefixOptions, EligibleCookies, FaireAuthCookies, checkAuthCookie, createCookieCapture, createCookieCreator, createCookieSetter, deleteSessionCookie, getCookieCache, getCookieKey, getCookies, getSessionCookie, parse, parseCookies, parseSetCookieHeader, parseSigned, serialize, serializeSigned, serializeSignedCookie, setCookieCache, setSessionCookie };

package/dist/utils/cookies.d.mts

@@ -0,0 +1,179 @@
+import { I as FaireAuthOptions$1, an as AuthContext$1 } from "../index-jlessPI0.mjs";
+import { t as ContextVars } from "../hono-DuE14mmj.mjs";
+import { Context } from "hono";
+import { parse, parseSigned, serialize, serializeSigned } from "hono/utils/cookie";
+import { Session, User } from "@faire-auth/core/db";
+import { SuccessContext } from "@better-fetch/fetch";
+import { LiteralStringUnion } from "@faire-auth/core/types";
+export * from "hono/cookie";
+
+//#region src/utils/cookies.d.ts
+type FaireAuthCookies = ReturnType<typeof getCookies>;
+type EligibleCookies = LiteralStringUnion<keyof FaireAuthCookies>;
+interface CookieAttributes {
+  value: string;
+  "max-age"?: number;
+  expires?: Date;
+  domain?: string;
+  path?: string;
+  secure?: boolean;
+  httponly?: boolean;
+  samesite?: "lax" | "none" | "strict";
+  [key: string]: any;
+}
+type CookiePrefixOptions = "host" | "secure";
+interface CookieOptions {
+  /**
+   * Domain of the cookie
+   *
+   * The Domain attribute specifies which server can receive a cookie. If specified, cookies are
+   * available on the specified server and its subdomains. If the it is not
+   * specified, the cookies are available on the server that sets it but not on
+   * its subdomains.
+   *
+   * @example
+   * `domain: "example.com"`
+   */
+  domain?: string;
+  /**
+   * A lifetime of a cookie. Permanent cookies are deleted after the date specified in the
+   * Expires attribute:
+   *
+   * Expires has been available for longer than Max-Age, however Max-Age is less error-prone, and
+   * takes precedence when both are set. The rationale behind this is that when you set an
+   * Expires date and time, they're relative to the client the cookie is being set on. If the
+   * server is set to a different time, this could cause errors
+   */
+  expires?: Date;
+  /**
+   * Forbids JavaScript from accessing the cookie, for example, through the Document.cookie
+   * property. Note that a cookie that has been created with HttpOnly will still be sent with
+   * JavaScript-initiated requests, for example, when calling XMLHttpRequest.send() or fetch().
+   * This mitigates attacks against cross-site scripting
+   */
+  httpOnly?: boolean;
+  /**
+   * Indicates the number of seconds until the cookie expires. A zero or negative number will
+   * expire the cookie immediately. If both Expires and Max-Age are set, Max-Age has precedence.
+   *
+   * @example 604800 - 7 days
+   */
+  maxAge?: number;
+  /**
+   * Indicates the path that must exist in the requested URL for the browser to send the Cookie
+   * header.
+   *
+   * @example
+   * "/docs"
+   * // -> the request paths /docs, /docs/, /docs/Web/, and /docs/Web/HTTP will all match. the request paths /, /fr/docs will not match.
+   */
+  path?: string;
+  /**
+   * Indicates that the cookie is sent to the server only when a request is made with the https:
+   * scheme (except on localhost), and therefore, is more resistant to man-in-the-middle attacks.
+   */
+  secure?: boolean;
+  /**
+   * Controls whether or not a cookie is sent with cross-site requests, providing some protection
+   * against cross-site request forgery attacks (CSRF).
+   *
+   * Strict -  Means that the browser sends the cookie only for same-site requests, that is,
+   * requests originating from the same site that set the cookie. If a request originates from a
+   * different domain or scheme (even with the same domain), no cookies with the SameSite=Strict
+   * attribute are sent.
+   *
+   * Lax - Means that the cookie is not sent on cross-site requests, such as on requests to load
+   * images or frames, but is sent when a user is navigating to the origin site from an external
+   * site (for example, when following a link). This is the default behavior if the SameSite
+   * attribute is not specified.
+   *
+   * None - Means that the browser sends the cookie with both cross-site and same-site requests.
+   * The Secure attribute must also be set when setting this value.
+   */
+  sameSite?: "Lax" | "lax" | "None" | "none" | "Strict" | "strict";
+  /**
+   * Indicates that the cookie should be stored using partitioned storage. Note that if this is
+   * set, the Secure directive must also be set.
+   *
+   * @see https://developer.mozilla.org/en-US/docs/Web/Privacy/Privacy_sandbox/Partitioned_cookies
+   */
+  partitioned?: boolean;
+  /**
+   * Cooke Prefix
+   *
+   * - secure: `__Secure-` -> `__Secure-cookie-name`
+   * - host: `__Host-` -> `__Host-cookie-name`
+   *
+   * `secure` must be set to true to use prefixes
+   */
+  prefix?: CookiePrefixOptions;
+}
+declare const getCookieKey: (key: string, prefix?: CookiePrefixOptions) => string | undefined;
+/**
+ * Parse an HTTP Cookie header string and returning an object of all cookie
+ * name-value pairs.
+ *
+ * Inspired by https://github.com/unjs/cookie-es/blob/main/src/cookie/parse.ts
+ *
+ * @param str the string representing a `Cookie` header value
+ */
+declare const parseCookies: (str: string) => Map<string, string>;
+declare const serializeSignedCookie: (key: string, value: string, secret: string, opt?: CookieOptions) => Promise<string>;
+declare const checkAuthCookie: (request: Headers | Request, auth: {
+  $context: Promise<AuthContext$1> | AuthContext$1;
+}) => Promise<string | null>;
+/**
+ * IMPORTANT - each Set-Cookie header should be a single cookie
+ */
+declare const parseSetCookieHeader: (setCookie: string | string[]) => Map<string, CookieAttributes>;
+declare const createCookieCreator: (options: FaireAuthOptions$1) => (cookieName: string, overrideAttributes?: Partial<CookieOptions>) => {
+  name: string;
+  attributes: CookieOptions;
+};
+declare const getCookies: (options: FaireAuthOptions$1) => {
+  sessionToken: {
+    name: string;
+    options: CookieOptions;
+  };
+  /**
+   * This cookie is used to store the session data in the cookie
+   * This is useful for when you want to cache the session in the cookie
+   */
+  sessionData: {
+    name: string;
+    options: CookieOptions;
+  };
+  dontRememberToken: {
+    name: string;
+    options: CookieOptions;
+  };
+};
+declare const createCookieSetter: (headers: Headers) => (name: string, value: string) => void;
+declare const createCookieCapture: (headers: Headers) => (callback?: (cookieMap: Map<string, string>) => void) => <Res = {}>(context: SuccessContext<Res> | {
+  response: Response;
+}) => void;
+declare const getCookieCache: <S extends {
+  session: Session;
+  user: User;
+}>(request: Headers | Request, config?: {
+  cookiePrefix?: string;
+  cookieName?: string;
+  isSecure?: boolean;
+  secret?: string;
+}) => Promise<S | null>;
+declare const setCookieCache: <V extends object>(ctx: Context<ContextVars<V>>, options: Pick<FaireAuthOptions$1, "session">, session: {
+  session: Session;
+  user: User;
+}, dontRememberMe?: boolean) => Promise<void>;
+declare const getSessionCookie: (request: Headers | Request, config?: {
+  cookiePrefix?: string;
+  cookieName?: string;
+  path?: string;
+}) => string | null;
+declare const setSessionCookie: <V extends object>(ctx: Context<ContextVars<V>>, authOptions: Pick<FaireAuthOptions$1, "session" | "secondaryStorage">, session: {
+  session: Session;
+  user: User;
+}, dontRememberMe?: boolean, overrides?: Partial<CookieOptions>) => Promise<void>;
+declare const deleteSessionCookie: <V extends object>(ctx: Context<ContextVars<V>>, skipDontRememberMe?: boolean) => void;
+//#endregion
+export { CookieOptions, CookiePrefixOptions, EligibleCookies, FaireAuthCookies, checkAuthCookie, createCookieCapture, createCookieCreator, createCookieSetter, deleteSessionCookie, getCookieCache, getCookieKey, getCookies, getSessionCookie, parse, parseCookies, parseSetCookieHeader, parseSigned, serialize, serializeSigned, serializeSignedCookie, setCookieCache, setSessionCookie };

package/dist/utils/cookies.mjs

@@ -0,0 +1,7 @@
+import "../crypto-CyQRFtkq.mjs";
+import "../json-B1v2qRTQ.mjs";
+import { _ as serializeSignedCookie, a as createCookieSetter, c as getCookieKey, d as parse, f as parseCookies, g as serializeSigned, h as serialize, i as createCookieCreator, l as getCookies, m as parseSigned, o as deleteSessionCookie, p as parseSetCookieHeader, r as createCookieCapture, s as getCookieCache, t as checkAuthCookie, u as getSessionCookie, v as setCookieCache, y as setSessionCookie } from "../cookies-Ch1JfQIz.mjs";
+
+export * from "hono/cookie"
+
+export { checkAuthCookie, createCookieCapture, createCookieCreator, createCookieSetter, deleteSessionCookie, getCookieCache, getCookieKey, getCookies, getSessionCookie, parse, parseCookies, parseSetCookieHeader, parseSigned, serialize, serializeSigned, serializeSignedCookie, setCookieCache, setSessionCookie };

package/dist/utils-44aDDP8f.cjs

@@ -0,0 +1,2 @@
+let __faire_auth_core_env = require("@faire-auth/core/env");
+let __faire_auth_core_crypto = require("@faire-auth/core/crypto");

package/dist/utils-D4vZd1-9.mjs

@@ -0,0 +1,4 @@
+import { ENV as ENV$1, createLogger as createLogger$1, logger as logger$1 } from "@faire-auth/core/env";
+import { generateId, generateRandomString } from "@faire-auth/core/crypto";
+
+export { logger$1 as a, generateRandomString as i, createLogger$1 as n, generateId as r, ENV$1 as t };