faire-auth 1.0.4 → 1.1.0

package/package.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://json.schemastore.org/package",
   "name": "faire-auth",
-  "version": "1.0.4",
+  "version": "1.1.0",
   "description": "The most comprehensive authentication library for TypeScript.",
   "type": "module",
   "license": "MIT",
@@ -37,6 +37,14 @@
         "default": "./dist/index.cjs"
       }
     },
+    "./shared": {
+      "import": {
+        "types": "./dist/shared.d.mts"
+      },
+      "require": {
+        "types": "./dist/shared.d.cts"
+      }
+    },
     "./test": {
       "dev-source": "./src/test-utils/index.ts",
       "import": {
@@ -358,19 +366,19 @@
     }
   },
   "dependencies": {
-    "@better-fetch/fetch": "^1.1.18",
-    "@simplewebauthn/browser": "^13.1.2",
-    "@simplewebauthn/server": "^13.1.2",
-    "defu": "^6.1.4",
-    "jose": "^6.1.0",
-    "kysely": "^0.28.14",
-    "nanostores": "^1.0.1",
+    "@better-fetch/fetch": "^1.3.3",
+    "@simplewebauthn/browser": "^13.3.0",
+    "@simplewebauthn/server": "^13.3.3",
+    "defu": "^6.1.7",
+    "jose": "^6.2.15",
+    "kysely": "^0.28.19",
+    "nanostores": "^1.5.5",
     "type-fest": "^4.41.0",
-    "zod": "4.1.4",
-    "@faire-auth/core": "1.0.4"
+    "@faire-auth/core": "1.1.0"
   },
   "peerDependencies": {
-    "hono": ">=4.3.6"
+    "hono": ">=4.3.6",
+    "zod": "^4.1.12"
   },
   "peerDependenciesOptional": {
     "@lynx-js/react": "*",
@@ -412,7 +420,7 @@
     }
   },
   "optionalDependencies": {
-    "cbor-x": "^1.6.0"
+    "cbor-x": "^1.6.9"
   },
   "devDependencies": {
     "@cloudflare/workers-types": "^4.20250903.0",
@@ -420,43 +428,45 @@
     "@lynx-js/react": "^0.112.5",
     "@prisma/client": "^5.22.0",
     "@sveltejs/kit": "^2.37.1",
-    "@tanstack/react-start": "^1.131.36",
-    "@tanstack/start-server-core": "^1.131.36",
+    "@tanstack/react-start": "^1.169.4",
+    "@tanstack/start-server-core": "^1.169.45",
     "@types/better-sqlite3": "^7.6.13",
-    "@types/bun": "^1.2.20",
+    "@types/bun": "^1.4.4",
     "@types/keccak": "^3.0.5",
-    "@types/pg": "^8.15.5",
+    "@types/pg": "^8.23.1",
     "@types/prompts": "^2.4.9",
-    "@types/react": "^19.1.12",
+    "@types/react": "^19.3.0",
     "@vitest/coverage-v8": "^3.2.4",
     "@vitest/ui": "^3.2.4",
     "@vitest/utils": "^4.0.8",
-    "better-sqlite3": "^12.2.0",
+    "better-sqlite3": "^12.11.1",
     "concurrently": "^9.2.1",
     "deepmerge": "^4.3.1",
     "drizzle-kit": "^0.31.4",
     "drizzle-orm": "^0.38.2",
     "happy-dom": "^20.0.0",
-    "listhen": "^1.9.0",
+    "hono": "^4.13.16",
+    "listhen": "^1.10.1",
     "mongodb": "^6.18.0",
     "ms": "4.0.0-nightly.202508271359",
     "msw": "^2.11.5",
-    "mysql2": "^3.14.4",
-    "next": "16.1.7",
+    "mysql2": "^3.24.6",
+    "next": "16.4.5",
     "oauth2-mock-server": "^7.2.1",
-    "pg": "^8.16.3",
+    "pg": "^8.23.1",
     "prisma": "^5.22.0",
-    "publint": "^0.3.15",
-    "react": "^19.1.1",
-    "react-dom": "^19.1.1",
+    "publint": "^0.3.25",
+    "react": "^19.3.1",
+    "react-dom": "^19.3.1",
     "react-native": "~0.80.2",
-    "solid-js": "^1.9.8",
-    "tarn": "^3.0.2",
+    "solid-js": "^1.9.18",
+    "tarn": "^3.1.2",
     "tedious": "^18.6.1",
-    "terser": "^5.41.0",
+    "terser": "^5.51.2",
     "tinybench": "^5.0.1",
-    "tsdown": "^0.16.0",
-    "vue": "^3.5.18"
+    "tsdown": "^0.23.7",
+    "vue": "^3.5.44",
+    "zod": "^4.6.7"
   },
   "files": [
     "dist"

package/dist/access-BZ7-AbTM.cjs

@@ -1,51 +0,0 @@
-const require_chunk = require('./chunk-fPmz2rbM.cjs');
-let __faire_auth_core_error = require("@faire-auth/core/error");
-
-//#region src/plugins/access/access.ts
-const role = (statements) => ({
-	authorize: (request, connector = "AND") => {
-		let success = false;
-		for (const [requestedResource, requestedActions] of Object.entries(request)) {
-			const allowedActions = statements[requestedResource];
-			if (!allowedActions) return {
-				success: false,
-				error: `You are not allowed to access resource: ${requestedResource}`
-			};
-			if (Array.isArray(requestedActions)) success = requestedActions.every((requestedAction) => allowedActions.includes(requestedAction));
-			else if (typeof requestedActions === "object") {
-				const actions = requestedActions;
-				if (actions.connector === "OR") success = actions.actions.some((requestedAction) => allowedActions.includes(requestedAction));
-				else success = actions.actions.every((requestedAction) => allowedActions.includes(requestedAction));
-			} else throw new __faire_auth_core_error.FaireAuthError("Invalid access control request");
-			if (success && connector === "OR") return { success };
-			if (!success && connector === "AND") return {
-				success: false,
-				error: `unauthorized to access resource "${requestedResource}"`
-			};
-		}
-		if (success) return { success };
-		return {
-			success: false,
-			error: "Not authorized"
-		};
-	},
-	statements
-});
-const createAccessControl = (s) => ({
-	newRole: (statements) => role(statements),
-	statements: s
-});
-
-//#endregion
-Object.defineProperty(exports, 'createAccessControl', {
-  enumerable: true,
-  get: function () {
-    return createAccessControl;
-  }
-});
-Object.defineProperty(exports, 'role', {
-  enumerable: true,
-  get: function () {
-    return role;
-  }
-});

package/dist/access-D0DRqUKC.mjs

@@ -1,39 +0,0 @@
-import { FaireAuthError } from "@faire-auth/core/error";
-
-//#region src/plugins/access/access.ts
-const role = (statements) => ({
-	authorize: (request, connector = "AND") => {
-		let success = false;
-		for (const [requestedResource, requestedActions] of Object.entries(request)) {
-			const allowedActions = statements[requestedResource];
-			if (!allowedActions) return {
-				success: false,
-				error: `You are not allowed to access resource: ${requestedResource}`
-			};
-			if (Array.isArray(requestedActions)) success = requestedActions.every((requestedAction) => allowedActions.includes(requestedAction));
-			else if (typeof requestedActions === "object") {
-				const actions = requestedActions;
-				if (actions.connector === "OR") success = actions.actions.some((requestedAction) => allowedActions.includes(requestedAction));
-				else success = actions.actions.every((requestedAction) => allowedActions.includes(requestedAction));
-			} else throw new FaireAuthError("Invalid access control request");
-			if (success && connector === "OR") return { success };
-			if (!success && connector === "AND") return {
-				success: false,
-				error: `unauthorized to access resource "${requestedResource}"`
-			};
-		}
-		if (success) return { success };
-		return {
-			success: false,
-			error: "Not authorized"
-		};
-	},
-	statements
-});
-const createAccessControl = (s) => ({
-	newRole: (statements) => role(statements),
-	statements: s
-});
-
-//#endregion
-export { role as n, createAccessControl as t };

package/dist/bearer-DDzrp5M7.cjs

@@ -1,60 +0,0 @@
-const require_chunk = require('./chunk-fPmz2rbM.cjs');
-const require_cookies = require('./cookies-BTl72THv.cjs');
-const require_middleware = require('./middleware-CWvRH4EW.cjs');
-let __faire_auth_core_datatypes = require("@faire-auth/core/datatypes");
-
-//#region src/plugins/bearer/index.ts
-/**
-* Converts bearer token to session cookie
-*/
-const bearer = (options) => ({
-	id: "bearer",
-	hooks: {
-		before: [{
-			matcher: (ctx) => Boolean(ctx.req.header("Authorization")),
-			handler: (_opts) => require_middleware.createHook()(async (ctx) => {
-				const token = ctx.req.header("Authorization")?.replace("Bearer ", "");
-				if (token == null) return;
-				let signedToken = "";
-				if (token.includes(".")) signedToken = token.replace("=", "");
-				else {
-					if (options?.requireSignature === true) return;
-					signedToken = (await require_cookies.serializeSignedCookie("", token, ctx.get("context").secret)).replace("=", "");
-				}
-				try {
-					const [first, second] = decodeURIComponent(signedToken).split(".");
-					if (first == null || second == null) return;
-					if (!await (0, __faire_auth_core_datatypes.createHMAC)("SHA-256", "base64urlnopad").verify(ctx.get("context").secret, first, second)) return;
-				} catch {
-					return;
-				}
-				ctx.req.raw.headers.append("cookie", `${ctx.get("context").authCookies.sessionToken.name}=${signedToken}`);
-			})
-		}],
-		after: [{
-			matcher: (_ctx) => true,
-			handler: (_opts) => require_middleware.createHook()(async (ctx) => {
-				const setCookie = ctx.res.headers.getSetCookie();
-				if (!setCookie.length) return;
-				const parsedCookies = require_cookies.parseSetCookieHeader(setCookie);
-				const cookieName = ctx.get("context").authCookies.sessionToken.name;
-				const sessionCookie = parsedCookies.get(cookieName);
-				if (sessionCookie?.value == null || sessionCookie["max-age"] === 0) return;
-				const token = sessionCookie.value;
-				const exposedHeaders = ctx.res.headers.get("access-control-expose-headers") ?? "";
-				const headersSet = new Set(exposedHeaders.split(",").map((header) => header.trim()).filter(Boolean));
-				headersSet.add("set-auth-token");
-				ctx.res.headers.set("set-auth-token", token);
-				ctx.res.headers.set("Access-Control-Expose-Headers", Array.from(headersSet).join(", "));
-			})
-		}]
-	}
-});
-
-//#endregion
-Object.defineProperty(exports, 'bearer', {
-  enumerable: true,
-  get: function () {
-    return bearer;
-  }
-});

package/dist/bearer-WZcs7gxL.mjs

@@ -1,54 +0,0 @@
-import { _ as serializeSignedCookie, p as parseSetCookieHeader } from "./cookies-BTs1o992.mjs";
-import { n as createHook } from "./middleware-CE6OhDkq.mjs";
-import { createHMAC } from "@faire-auth/core/datatypes";
-
-//#region src/plugins/bearer/index.ts
-/**
-* Converts bearer token to session cookie
-*/
-const bearer = (options) => ({
-	id: "bearer",
-	hooks: {
-		before: [{
-			matcher: (ctx) => Boolean(ctx.req.header("Authorization")),
-			handler: (_opts) => createHook()(async (ctx) => {
-				const token = ctx.req.header("Authorization")?.replace("Bearer ", "");
-				if (token == null) return;
-				let signedToken = "";
-				if (token.includes(".")) signedToken = token.replace("=", "");
-				else {
-					if (options?.requireSignature === true) return;
-					signedToken = (await serializeSignedCookie("", token, ctx.get("context").secret)).replace("=", "");
-				}
-				try {
-					const [first, second] = decodeURIComponent(signedToken).split(".");
-					if (first == null || second == null) return;
-					if (!await createHMAC("SHA-256", "base64urlnopad").verify(ctx.get("context").secret, first, second)) return;
-				} catch {
-					return;
-				}
-				ctx.req.raw.headers.append("cookie", `${ctx.get("context").authCookies.sessionToken.name}=${signedToken}`);
-			})
-		}],
-		after: [{
-			matcher: (_ctx) => true,
-			handler: (_opts) => createHook()(async (ctx) => {
-				const setCookie = ctx.res.headers.getSetCookie();
-				if (!setCookie.length) return;
-				const parsedCookies = parseSetCookieHeader(setCookie);
-				const cookieName = ctx.get("context").authCookies.sessionToken.name;
-				const sessionCookie = parsedCookies.get(cookieName);
-				if (sessionCookie?.value == null || sessionCookie["max-age"] === 0) return;
-				const token = sessionCookie.value;
-				const exposedHeaders = ctx.res.headers.get("access-control-expose-headers") ?? "";
-				const headersSet = new Set(exposedHeaders.split(",").map((header) => header.trim()).filter(Boolean));
-				headersSet.add("set-auth-token");
-				ctx.res.headers.set("set-auth-token", token);
-				ctx.res.headers.set("Access-Control-Expose-Headers", Array.from(headersSet).join(", "));
-			})
-		}]
-	}
-});
-
-//#endregion
-export { bearer as t };