npm - iron-session - Versions diffs - 2.0.0-alpha.1 → 2.0.0-alpha.10 - Mend

iron-session 2.0.0-alpha.1 → 2.0.0-alpha.10

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (15) hide show

package/dist/index.d.ts CHANGED Viewed

@@ -1,5 +1,5 @@
-import { NextApiRequest, NextApiResponse, GetServerSidePropsResult, GetServerSidePropsContext } from 'next';
 import { CookieSerializeOptions } from 'cookie';
+import { IncomingMessage, ServerResponse } from 'http';
 declare type password = string | {
     id: number;
@@ -18,16 +18,12 @@ interface IronSession {
     destroy: () => void;
     save: () => Promise<string>;
 }
+declare function getIronSession<RequestType extends IncomingMessage, ResponseType extends ServerResponse>(req: RequestType, res: ResponseType, userOptions: IronSessionOptions): Promise<{
+    set: <T = any>(name: string, value: T) => T;
+    get: (name?: string | undefined) => any;
+    unset: (name: string) => void;
+    save(): Promise<string>;
+    destroy(): void;
+}>;
-interface NextApiRequestWithIronSession extends NextApiRequest {
-    session: IronSession;
-}
-declare type NextApiHandlerWithIronSession<T = unknown> = (req: NextApiRequestWithIronSession, res: NextApiResponse<T>) => void | Promise<void>;
-interface NextGetSeverSideContextWithIronSession extends GetServerSidePropsContext {
-    req: NextApiRequestWithIronSession;
-}
-declare type NextGetServerSidePropsHandlerWithIronSession<P> = (context: NextGetSeverSideContextWithIronSession) => Promise<GetServerSidePropsResult<P>>;
-declare function withIronSessionApiRoute(handler: NextApiHandlerWithIronSession, options: IronSessionOptions): NextApiHandlerWithIronSession;
-declare function withIronSessionSsr<P>(handler: NextGetServerSidePropsHandlerWithIronSession<P>, options: IronSessionOptions): NextGetServerSidePropsHandlerWithIronSession<P>;
-export { NextApiHandlerWithIronSession, NextApiRequestWithIronSession, NextGetServerSidePropsHandlerWithIronSession, withIronSessionApiRoute, withIronSessionSsr };
+export { IronSession, IronSessionOptions, getIronSession };

package/dist/index.js CHANGED Viewed

@@ -1,2 +1,127 @@
-var x=Object.create;var c=Object.defineProperty,O=Object.defineProperties,T=Object.getOwnPropertyDescriptor,C=Object.getOwnPropertyDescriptors,b=Object.getOwnPropertyNames,u=Object.getOwnPropertySymbols,A=Object.getPrototypeOf,w=Object.prototype.hasOwnProperty,I=Object.prototype.propertyIsEnumerable;var f=(e,s,o)=>s in e?c(e,s,{enumerable:!0,configurable:!0,writable:!0,value:o}):e[s]=o,r=(e,s)=>{for(var o in s||(s={}))w.call(s,o)&&f(e,o,s[o]);if(u)for(var o of u(s))I.call(s,o)&&f(e,o,s[o]);return e},d=(e,s)=>O(e,C(s)),h=e=>c(e,"__esModule",{value:!0});var R=(e,s)=>{h(e);for(var o in s)c(e,o,{get:s[o],enumerable:!0})},E=(e,s,o)=>{if(s&&typeof s=="object"||typeof s=="function")for(let t of b(s))!w.call(e,t)&&t!=="default"&&c(e,t,{get:()=>s[t],enumerable:!(o=T(s,t))||o.enumerable});return e},y=e=>E(h(c(e!=null?x(A(e)):{},"default",e&&e.__esModule&&"default"in e?{get:()=>e.default,enumerable:!0}:{value:e,enumerable:!0})),e);R(exports,{getIronSession:()=>z});var m=y(require("iron-store")),g=y(require("cookie")),N=60,S={ttl:15*24*3600,cookieOptions:{httpOnly:!0,secure:!0,sameSite:"lax",path:"/"}};async function z(e,s,o){var l,k;if(!e||!s||!o||!o.cookieName||!o.password)throw new Error('iron-session: Bad usage. Minimum usage is const session = await getIronSession(req, res, { cookieName: "...", password: "...". Check the usage here: https://github.com/vvo/iron-session');let t=Array.isArray(o.password)?o.password:[{id:1,password:o.password}];t.forEach(({password:a})=>{if(a.length<32)throw new Error("iron-session: Bad usage. Password must be at least 32 characters long.")});let i=d(r(r({},S),o),{cookieOptions:r(r({},S.cookieOptions),o.cookieOptions||{})});i.ttl===0&&(i.ttl=2147483647),i.cookieOptions.maxAge=M((k=(l=o.cookieOptions)==null?void 0:l.maxAge)!=null?k:i.ttl);let n=await q({sealed:g.default.parse(e.headers.cookie||"")[i.cookieName],password:t,ttl:i.ttl*1e3});return{set:n.set,get:n.get,unset:n.unset,async save(){let a=await n.seal(),p=g.default.serialize(i.cookieName,a,i.cookieOptions);if(p.length>4096)throw new Error(`iron-session: Cookie length is too big ${p.length}, browsers will refuse it. Try to remove some data.`);return v(p,s),p},destroy(){n.clear();let a=g.default.serialize(i.cookieName,"",d(r({},i.cookieOptions),{maxAge:0}));v(a,s)}}}function v(e,s){var t;let o=(t=s.getHeader("set-cookie"))!=null?t:[];typeof o=="string"&&(o=[o]),s.setHeader("set-cookie",[...o,e])}function M(e){return e-N}async function q({sealed:e,password:s,ttl:o}){try{return await(0,m.default)({sealed:e,password:s,ttl:o})}catch(t){if(t instanceof Error&&(t.message==="Expired seal"||t.message==="Bad hmac value"||t.message==="Cannot find password: "))return await(0,m.default)({password:s,ttl:o});throw t}}0&&(module.exports={getIronSession});
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __markAsModule = (target) => __defProp(target, "__esModule", { value: true });
+var __export = (target, all) => {
+  __markAsModule(target);
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __reExport = (target, module2, desc) => {
+  if (module2 && typeof module2 === "object" || typeof module2 === "function") {
+    for (let key of __getOwnPropNames(module2))
+      if (!__hasOwnProp.call(target, key) && key !== "default")
+        __defProp(target, key, { get: () => module2[key], enumerable: !(desc = __getOwnPropDesc(module2, key)) || desc.enumerable });
+  }
+  return target;
+};
+var __toModule = (module2) => {
+  return __reExport(__markAsModule(__defProp(module2 != null ? __create(__getProtoOf(module2)) : {}, "default", module2 && module2.__esModule && "default" in module2 ? { get: () => module2.default, enumerable: true } : { value: module2, enumerable: true })), module2);
+};
+// src/index.ts
+__export(exports, {
+  getIronSession: () => getIronSession
+});
+var import_iron_store = __toModule(require("iron-store"));
+var import_cookie = __toModule(require("cookie"));
+var timestampSkewSec = 60;
+var defaultOptions = {
+  ttl: 15 * 24 * 3600,
+  cookieOptions: {
+    httpOnly: true,
+    secure: true,
+    sameSite: "lax",
+    path: "/"
+  }
+};
+async function getIronSession(req, res, userOptions) {
+  var _a, _b;
+  if (!req || !res || !userOptions || !userOptions.cookieName || !userOptions.password) {
+    throw new Error(`iron-session: Bad usage. Minimum usage is const session = await getIronSession(req, res, { cookieName: "...", password: "...". Check the usage here: https://github.com/vvo/iron-session`);
+  }
+  const passwordAsAnArray = Array.isArray(userOptions.password) ? userOptions.password : [{ id: 1, password: userOptions.password }];
+  passwordAsAnArray.forEach(({ password }) => {
+    if (password.length < 32) {
+      throw new Error(`iron-session: Bad usage. Password must be at least 32 characters long.`);
+    }
+  });
+  const options = {
+    ...defaultOptions,
+    ...userOptions,
+    cookieOptions: {
+      ...defaultOptions.cookieOptions,
+      ...userOptions.cookieOptions || {}
+    }
+  };
+  if (options.ttl === 0) {
+    options.ttl = 2147483647;
+  }
+  options.cookieOptions.maxAge = computeCookieMaxAge((_b = (_a = userOptions.cookieOptions) == null ? void 0 : _a.maxAge) != null ? _b : options.ttl);
+  const store = await getOrCreateStore({
+    sealed: import_cookie.default.parse(req.headers.cookie || "")[options.cookieName],
+    password: passwordAsAnArray,
+    ttl: options.ttl * 1e3
+  });
+  return {
+    set: store.set,
+    get: store.get,
+    unset: store.unset,
+    async save() {
+      const seal = await store.seal();
+      const cookieValue = import_cookie.default.serialize(options.cookieName, seal, options.cookieOptions);
+      if (cookieValue.length > 4096) {
+        throw new Error(`iron-session: Cookie length is too big ${cookieValue.length}, browsers will refuse it. Try to remove some data.`);
+      }
+      addToCookies(cookieValue, res);
+      return cookieValue;
+    },
+    destroy() {
+      store.clear();
+      const cookieValue = import_cookie.default.serialize(options.cookieName, "", {
+        ...options.cookieOptions,
+        maxAge: 0
+      });
+      addToCookies(cookieValue, res);
+    }
+  };
+}
+function addToCookies(cookieValue, res) {
+  var _a;
+  let existingSetCookie = (_a = res.getHeader("set-cookie")) != null ? _a : [];
+  if (typeof existingSetCookie === "string") {
+    existingSetCookie = [existingSetCookie];
+  }
+  res.setHeader("set-cookie", [...existingSetCookie, cookieValue]);
+}
+function computeCookieMaxAge(ttl) {
+  return ttl - timestampSkewSec;
+}
+async function getOrCreateStore({
+  sealed,
+  password,
+  ttl
+}) {
+  try {
+    return await (0, import_iron_store.default)({
+      sealed,
+      password,
+      ttl
+    });
+  } catch (error) {
+    if (error instanceof Error) {
+      if (error.message === "Expired seal" || error.message === "Bad hmac value" || error.message === "Cannot find password: ") {
+        return await (0, import_iron_store.default)({ password, ttl });
+      }
+    }
+    throw error;
+  }
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  getIronSession
+});
 //# sourceMappingURL=index.js.map

package/dist/index.js.map CHANGED Viewed

@@ -2,6 +2,6 @@
   "version": 3,
   "sources": ["../src/index.ts"],
   "sourcesContent": ["import ironStore from \"iron-store\";\nimport cookie, { CookieSerializeOptions } from \"cookie\";\nimport type { IncomingMessage, ServerResponse } from \"http\";\n\n// default time allowed to check for iron seal validity when ttl passed\n// see https://hapi.dev/family/iron/api/?v=6.0.0#options\nconst timestampSkewSec = 60;\n\ntype password = string | { id: number; password: string }[];\n\nconst defaultOptions: {\n  ttl: number;\n  cookieOptions: CookieSerializeOptions;\n} = {\n  ttl: 15 * 24 * 3600,\n  cookieOptions: {\n    httpOnly: true,\n    secure: true,\n    sameSite: \"lax\",\n    path: \"/\",\n  },\n};\n\nexport interface IronSessionOptions {\n  cookieName: string;\n  password: password;\n  ttl?: number;\n  cookieOptions?: CookieSerializeOptions;\n}\n\nexport interface IronSession {\n  set: <T = unknown>(name: string, value: T) => T;\n  get: <T = unknown>(name: string) => T | undefined;\n  unset: (name: string) => void;\n  destroy: () => void;\n  save: () => Promise<string>;\n}\n\nexport async function getIronSession<\n  RequestType extends IncomingMessage,\n  ResponseType extends ServerResponse,\n>(req: RequestType, res: ResponseType, userOptions: IronSessionOptions) {\n  if (\n    !req ||\n    !res ||\n    !userOptions ||\n    !userOptions.cookieName ||\n    !userOptions.password\n  ) {\n    throw new Error(\n      `iron-session: Bad usage. Minimum usage is const session = await getIronSession(req, res, { cookieName: \"...\", password: \"...\". Check the usage here: https://github.com/vvo/iron-session`,\n    );\n  }\n\n  const passwordAsAnArray = Array.isArray(userOptions.password)\n    ? userOptions.password\n    : [{ id: 1, password: userOptions.password }];\n\n  passwordAsAnArray.forEach(({ password }) => {\n    if (password.length < 32) {\n      throw new Error(\n        `iron-session: Bad usage. Password must be at least 32 characters long.`,\n      );\n    }\n  });\n\n  const options: Required<IronSessionOptions> = {\n    ...defaultOptions,\n    ...userOptions,\n    cookieOptions: {\n      ...defaultOptions.cookieOptions,\n      ...(userOptions.cookieOptions || {}),\n    },\n  };\n\n  if (options.ttl === 0) {\n    // ttl = 0 means no expiration\n    // but in reality cookies have to expire (can't have no max-age)\n    // 2147483647 is the max value for max-age in cookies\n    // see https://stackoverflow.com/a/11685301/147079\n    options.ttl = 2147483647;\n  }\n\n  options.cookieOptions.maxAge = computeCookieMaxAge(\n    userOptions.cookieOptions?.maxAge ?? options.ttl,\n  );\n\n  const store = await getOrCreateStore({\n    sealed: cookie.parse(req.headers.cookie || \"\")[options.cookieName],\n    password: passwordAsAnArray,\n    ttl: options.ttl * 1000,\n  });\n\n  return {\n    set: store.set,\n    get: store.get,\n    unset: store.unset,\n    async save() {\n      const seal = await store.seal();\n      const cookieValue = cookie.serialize(\n        options.cookieName,\n        seal,\n        options.cookieOptions,\n      );\n\n      if (cookieValue.length > 4096) {\n        throw new Error(\n          `iron-session: Cookie length is too big ${cookieValue.length}, browsers will refuse it. Try to remove some data.`,\n        );\n      }\n\n      addToCookies(cookieValue, res);\n      return cookieValue;\n    },\n    destroy() {\n      store.clear();\n      const cookieValue = cookie.serialize(options.cookieName, \"\", {\n        ...options.cookieOptions,\n        maxAge: 0,\n      });\n      addToCookies(cookieValue, res);\n    },\n  };\n}\n\nfunction addToCookies(cookieValue: string, res: ServerResponse) {\n  let existingSetCookie =\n    (res.getHeader(\"set-cookie\") as string[] | string) ?? [];\n  if (typeof existingSetCookie === \"string\") {\n    existingSetCookie = [existingSetCookie];\n  }\n  res.setHeader(\"set-cookie\", [...existingSetCookie, cookieValue]);\n}\n\nfunction computeCookieMaxAge(ttl: number) {\n  // The next line makes sure browser will expire cookies before seals are considered expired by the server.\n  // It also allows for clock difference of 60 seconds maximum between server and clients.\n  // It also makes sure to expire the cookie immediately when value is 0\n  return ttl - timestampSkewSec;\n}\n\nasync function getOrCreateStore({\n  sealed,\n  password,\n  ttl,\n}: {\n  sealed: string;\n  password: password;\n  ttl: number;\n}) {\n  try {\n    return await ironStore({\n      sealed,\n      password,\n      ttl,\n    });\n  } catch (error) {\n    if (error instanceof Error) {\n      if (\n        error.message === \"Expired seal\" ||\n        error.message === \"Bad hmac value\" ||\n        error.message === \"Cannot find password: \"\n      ) {\n        // if seal expired or\n        // if seal is not valid (encrypted using a different password, when passwords are updated) or\n        // if we can't find back the password in the seal\n        // then we just start a new session over\n        return await ironStore({ password, ttl });\n      }\n    }\n\n    throw error;\n  }\n}\n"],
-  "mappings": "s6BAAA,kCAAA,MAAsB,yBACtB,EAA+C,qBAKzC,EAAmB,GAInB,EAGF,CACF,IAAK,GAAK,GAAK,KACf,cAAe,CACb,SAAU,GACV,OAAQ,GACR,SAAU,MACV,KAAM,MAmBV,iBAGE,EAAkB,EAAmB,EAAiC,CAzCxE,QA0CE,GACE,CAAC,GACD,CAAC,GACD,CAAC,GACD,CAAC,EAAY,YACb,CAAC,EAAY,SAEb,KAAM,IAAI,OACR,4LAIJ,GAAM,GAAoB,MAAM,QAAQ,EAAY,UAChD,EAAY,SACZ,CAAC,CAAE,GAAI,EAAG,SAAU,EAAY,WAEpC,EAAkB,QAAQ,CAAC,CAAE,cAAe,CAC1C,GAAI,EAAS,OAAS,GACpB,KAAM,IAAI,OACR,4EAKN,GAAM,GAAwC,SACzC,GACA,GAFyC,CAG5C,cAAe,OACV,EAAe,eACd,EAAY,eAAiB,MAIrC,AAAI,EAAQ,MAAQ,GAKlB,GAAQ,IAAM,YAGhB,EAAQ,cAAc,OAAS,EAC7B,QAAY,gBAAZ,cAA2B,SAA3B,OAAqC,EAAQ,KAG/C,GAAM,GAAQ,KAAM,GAAiB,CACnC,OAAQ,UAAO,MAAM,EAAI,QAAQ,QAAU,IAAI,EAAQ,YACvD,SAAU,EACV,IAAK,EAAQ,IAAM,MAGrB,MAAO,CACL,IAAK,EAAM,IACX,IAAK,EAAM,IACX,MAAO,EAAM,WACP,OAAO,CACX,GAAM,GAAO,KAAM,GAAM,OACnB,EAAc,UAAO,UACzB,EAAQ,WACR,EACA,EAAQ,eAGV,GAAI,EAAY,OAAS,KACvB,KAAM,IAAI,OACR,0CAA0C,EAAY,6DAI1D,SAAa,EAAa,GACnB,GAET,SAAU,CACR,EAAM,QACN,GAAM,GAAc,UAAO,UAAU,EAAQ,WAAY,GAAI,OACxD,EAAQ,eADgD,CAE3D,OAAQ,KAEV,EAAa,EAAa,KAKhC,WAAsB,EAAqB,EAAqB,CA7HhE,MA8HE,GAAI,GACD,KAAI,UAAU,gBAAd,OAAqD,GACxD,AAAI,MAAO,IAAsB,UAC/B,GAAoB,CAAC,IAEvB,EAAI,UAAU,aAAc,CAAC,GAAG,EAAmB,IAGrD,WAA6B,EAAa,CAIxC,MAAO,GAAM,EAGf,iBAAgC,CAC9B,SACA,WACA,OAKC,CACD,GAAI,CACF,MAAO,MAAM,cAAU,CACrB,SACA,WACA,cAEK,EAAP,CACA,GAAI,YAAiB,QAEjB,GAAM,UAAY,gBAClB,EAAM,UAAY,kBAClB,EAAM,UAAY,0BAMlB,MAAO,MAAM,cAAU,CAAE,WAAU,QAIvC,KAAM",
+  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA,wBAAsB;AACtB,oBAA+C;AAK/C,IAAM,mBAAmB;AAIzB,IAAM,iBAGF;AAAA,EACF,KAAK,KAAK,KAAK;AAAA,EACf,eAAe;AAAA,IACb,UAAU;AAAA,IACV,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,MAAM;AAAA;AAAA;AAmBV,8BAGE,KAAkB,KAAmB,aAAiC;AAzCxE;AA0CE,MACE,CAAC,OACD,CAAC,OACD,CAAC,eACD,CAAC,YAAY,cACb,CAAC,YAAY,UACb;AACA,UAAM,IAAI,MACR;AAAA;AAIJ,QAAM,oBAAoB,MAAM,QAAQ,YAAY,YAChD,YAAY,WACZ,CAAC,EAAE,IAAI,GAAG,UAAU,YAAY;AAEpC,oBAAkB,QAAQ,CAAC,EAAE,eAAe;AAC1C,QAAI,SAAS,SAAS,IAAI;AACxB,YAAM,IAAI,MACR;AAAA;AAAA;AAKN,QAAM,UAAwC;AAAA,OACzC;AAAA,OACA;AAAA,IACH,eAAe;AAAA,SACV,eAAe;AAAA,SACd,YAAY,iBAAiB;AAAA;AAAA;AAIrC,MAAI,QAAQ,QAAQ,GAAG;AAKrB,YAAQ,MAAM;AAAA;AAGhB,UAAQ,cAAc,SAAS,oBAC7B,wBAAY,kBAAZ,mBAA2B,WAA3B,YAAqC,QAAQ;AAG/C,QAAM,QAAQ,MAAM,iBAAiB;AAAA,IACnC,QAAQ,sBAAO,MAAM,IAAI,QAAQ,UAAU,IAAI,QAAQ;AAAA,IACvD,UAAU;AAAA,IACV,KAAK,QAAQ,MAAM;AAAA;AAGrB,SAAO;AAAA,IACL,KAAK,MAAM;AAAA,IACX,KAAK,MAAM;AAAA,IACX,OAAO,MAAM;AAAA,UACP,OAAO;AACX,YAAM,OAAO,MAAM,MAAM;AACzB,YAAM,cAAc,sBAAO,UACzB,QAAQ,YACR,MACA,QAAQ;AAGV,UAAI,YAAY,SAAS,MAAM;AAC7B,cAAM,IAAI,MACR,0CAA0C,YAAY;AAAA;AAI1D,mBAAa,aAAa;AAC1B,aAAO;AAAA;AAAA,IAET,UAAU;AACR,YAAM;AACN,YAAM,cAAc,sBAAO,UAAU,QAAQ,YAAY,IAAI;AAAA,WACxD,QAAQ;AAAA,QACX,QAAQ;AAAA;AAEV,mBAAa,aAAa;AAAA;AAAA;AAAA;AAKhC,sBAAsB,aAAqB,KAAqB;AA7HhE;AA8HE,MAAI,oBACD,UAAI,UAAU,kBAAd,YAAqD;AACxD,MAAI,OAAO,sBAAsB,UAAU;AACzC,wBAAoB,CAAC;AAAA;AAEvB,MAAI,UAAU,cAAc,CAAC,GAAG,mBAAmB;AAAA;AAGrD,6BAA6B,KAAa;AAIxC,SAAO,MAAM;AAAA;AAGf,gCAAgC;AAAA,EAC9B;AAAA,EACA;AAAA,EACA;AAAA,GAKC;AACD,MAAI;AACF,WAAO,MAAM,+BAAU;AAAA,MACrB;AAAA,MACA;AAAA,MACA;AAAA;AAAA,WAEK,OAAP;AACA,QAAI,iBAAiB,OAAO;AAC1B,UACE,MAAM,YAAY,kBAClB,MAAM,YAAY,oBAClB,MAAM,YAAY,0BAClB;AAKA,eAAO,MAAM,+BAAU,EAAE,UAAU;AAAA;AAAA;AAIvC,UAAM;AAAA;AAAA;",
   "names": []
 }

package/dist/index.mjs CHANGED Viewed

@@ -1,2 +1,99 @@
-var h=Object.defineProperty,y=Object.defineProperties;var S=Object.getOwnPropertyDescriptors;var l=Object.getOwnPropertySymbols;var v=Object.prototype.hasOwnProperty,x=Object.prototype.propertyIsEnumerable;var k=(s,o,e)=>o in s?h(s,o,{enumerable:!0,configurable:!0,writable:!0,value:e}):s[o]=e,r=(s,o)=>{for(var e in o||(o={}))v.call(o,e)&&k(s,e,o[e]);if(l)for(var e of l(o))x.call(o,e)&&k(s,e,o[e]);return s},p=(s,o)=>y(s,S(o));import u from"iron-store";import g from"cookie";var O=60,w={ttl:15*24*3600,cookieOptions:{httpOnly:!0,secure:!0,sameSite:"lax",path:"/"}};async function E(s,o,e){var d,m;if(!s||!o||!e||!e.cookieName||!e.password)throw new Error('iron-session: Bad usage. Minimum usage is const session = await getIronSession(req, res, { cookieName: "...", password: "...". Check the usage here: https://github.com/vvo/iron-session');let t=Array.isArray(e.password)?e.password:[{id:1,password:e.password}];t.forEach(({password:a})=>{if(a.length<32)throw new Error("iron-session: Bad usage. Password must be at least 32 characters long.")});let i=p(r(r({},w),e),{cookieOptions:r(r({},w.cookieOptions),e.cookieOptions||{})});i.ttl===0&&(i.ttl=2147483647),i.cookieOptions.maxAge=T((m=(d=e.cookieOptions)==null?void 0:d.maxAge)!=null?m:i.ttl);let n=await C({sealed:g.parse(s.headers.cookie||"")[i.cookieName],password:t,ttl:i.ttl*1e3});return{set:n.set,get:n.get,unset:n.unset,async save(){let a=await n.seal(),c=g.serialize(i.cookieName,a,i.cookieOptions);if(c.length>4096)throw new Error(`iron-session: Cookie length is too big ${c.length}, browsers will refuse it. Try to remove some data.`);return f(c,o),c},destroy(){n.clear();let a=g.serialize(i.cookieName,"",p(r({},i.cookieOptions),{maxAge:0}));f(a,o)}}}function f(s,o){var t;let e=(t=o.getHeader("set-cookie"))!=null?t:[];typeof e=="string"&&(e=[e]),o.setHeader("set-cookie",[...e,s])}function T(s){return s-O}async function C({sealed:s,password:o,ttl:e}){try{return await u({sealed:s,password:o,ttl:e})}catch(t){if(t instanceof Error&&(t.message==="Expired seal"||t.message==="Bad hmac value"||t.message==="Cannot find password: "))return await u({password:o,ttl:e});throw t}}export{E as getIronSession};
+// src/index.ts
+import ironStore from "iron-store";
+import cookie from "cookie";
+var timestampSkewSec = 60;
+var defaultOptions = {
+  ttl: 15 * 24 * 3600,
+  cookieOptions: {
+    httpOnly: true,
+    secure: true,
+    sameSite: "lax",
+    path: "/"
+  }
+};
+async function getIronSession(req, res, userOptions) {
+  var _a, _b;
+  if (!req || !res || !userOptions || !userOptions.cookieName || !userOptions.password) {
+    throw new Error(`iron-session: Bad usage. Minimum usage is const session = await getIronSession(req, res, { cookieName: "...", password: "...". Check the usage here: https://github.com/vvo/iron-session`);
+  }
+  const passwordAsAnArray = Array.isArray(userOptions.password) ? userOptions.password : [{ id: 1, password: userOptions.password }];
+  passwordAsAnArray.forEach(({ password }) => {
+    if (password.length < 32) {
+      throw new Error(`iron-session: Bad usage. Password must be at least 32 characters long.`);
+    }
+  });
+  const options = {
+    ...defaultOptions,
+    ...userOptions,
+    cookieOptions: {
+      ...defaultOptions.cookieOptions,
+      ...userOptions.cookieOptions || {}
+    }
+  };
+  if (options.ttl === 0) {
+    options.ttl = 2147483647;
+  }
+  options.cookieOptions.maxAge = computeCookieMaxAge((_b = (_a = userOptions.cookieOptions) == null ? void 0 : _a.maxAge) != null ? _b : options.ttl);
+  const store = await getOrCreateStore({
+    sealed: cookie.parse(req.headers.cookie || "")[options.cookieName],
+    password: passwordAsAnArray,
+    ttl: options.ttl * 1e3
+  });
+  return {
+    set: store.set,
+    get: store.get,
+    unset: store.unset,
+    async save() {
+      const seal = await store.seal();
+      const cookieValue = cookie.serialize(options.cookieName, seal, options.cookieOptions);
+      if (cookieValue.length > 4096) {
+        throw new Error(`iron-session: Cookie length is too big ${cookieValue.length}, browsers will refuse it. Try to remove some data.`);
+      }
+      addToCookies(cookieValue, res);
+      return cookieValue;
+    },
+    destroy() {
+      store.clear();
+      const cookieValue = cookie.serialize(options.cookieName, "", {
+        ...options.cookieOptions,
+        maxAge: 0
+      });
+      addToCookies(cookieValue, res);
+    }
+  };
+}
+function addToCookies(cookieValue, res) {
+  var _a;
+  let existingSetCookie = (_a = res.getHeader("set-cookie")) != null ? _a : [];
+  if (typeof existingSetCookie === "string") {
+    existingSetCookie = [existingSetCookie];
+  }
+  res.setHeader("set-cookie", [...existingSetCookie, cookieValue]);
+}
+function computeCookieMaxAge(ttl) {
+  return ttl - timestampSkewSec;
+}
+async function getOrCreateStore({
+  sealed,
+  password,
+  ttl
+}) {
+  try {
+    return await ironStore({
+      sealed,
+      password,
+      ttl
+    });
+  } catch (error) {
+    if (error instanceof Error) {
+      if (error.message === "Expired seal" || error.message === "Bad hmac value" || error.message === "Cannot find password: ") {
+        return await ironStore({ password, ttl });
+      }
+    }
+    throw error;
+  }
+}
+export {
+  getIronSession
+};
 //# sourceMappingURL=index.mjs.map

package/dist/index.mjs.map CHANGED Viewed

@@ -2,6 +2,6 @@
   "version": 3,
   "sources": ["../src/index.ts"],
   "sourcesContent": ["import ironStore from \"iron-store\";\nimport cookie, { CookieSerializeOptions } from \"cookie\";\nimport type { IncomingMessage, ServerResponse } from \"http\";\n\n// default time allowed to check for iron seal validity when ttl passed\n// see https://hapi.dev/family/iron/api/?v=6.0.0#options\nconst timestampSkewSec = 60;\n\ntype password = string | { id: number; password: string }[];\n\nconst defaultOptions: {\n  ttl: number;\n  cookieOptions: CookieSerializeOptions;\n} = {\n  ttl: 15 * 24 * 3600,\n  cookieOptions: {\n    httpOnly: true,\n    secure: true,\n    sameSite: \"lax\",\n    path: \"/\",\n  },\n};\n\nexport interface IronSessionOptions {\n  cookieName: string;\n  password: password;\n  ttl?: number;\n  cookieOptions?: CookieSerializeOptions;\n}\n\nexport interface IronSession {\n  set: <T = unknown>(name: string, value: T) => T;\n  get: <T = unknown>(name: string) => T | undefined;\n  unset: (name: string) => void;\n  destroy: () => void;\n  save: () => Promise<string>;\n}\n\nexport async function getIronSession<\n  RequestType extends IncomingMessage,\n  ResponseType extends ServerResponse,\n>(req: RequestType, res: ResponseType, userOptions: IronSessionOptions) {\n  if (\n    !req ||\n    !res ||\n    !userOptions ||\n    !userOptions.cookieName ||\n    !userOptions.password\n  ) {\n    throw new Error(\n      `iron-session: Bad usage. Minimum usage is const session = await getIronSession(req, res, { cookieName: \"...\", password: \"...\". Check the usage here: https://github.com/vvo/iron-session`,\n    );\n  }\n\n  const passwordAsAnArray = Array.isArray(userOptions.password)\n    ? userOptions.password\n    : [{ id: 1, password: userOptions.password }];\n\n  passwordAsAnArray.forEach(({ password }) => {\n    if (password.length < 32) {\n      throw new Error(\n        `iron-session: Bad usage. Password must be at least 32 characters long.`,\n      );\n    }\n  });\n\n  const options: Required<IronSessionOptions> = {\n    ...defaultOptions,\n    ...userOptions,\n    cookieOptions: {\n      ...defaultOptions.cookieOptions,\n      ...(userOptions.cookieOptions || {}),\n    },\n  };\n\n  if (options.ttl === 0) {\n    // ttl = 0 means no expiration\n    // but in reality cookies have to expire (can't have no max-age)\n    // 2147483647 is the max value for max-age in cookies\n    // see https://stackoverflow.com/a/11685301/147079\n    options.ttl = 2147483647;\n  }\n\n  options.cookieOptions.maxAge = computeCookieMaxAge(\n    userOptions.cookieOptions?.maxAge ?? options.ttl,\n  );\n\n  const store = await getOrCreateStore({\n    sealed: cookie.parse(req.headers.cookie || \"\")[options.cookieName],\n    password: passwordAsAnArray,\n    ttl: options.ttl * 1000,\n  });\n\n  return {\n    set: store.set,\n    get: store.get,\n    unset: store.unset,\n    async save() {\n      const seal = await store.seal();\n      const cookieValue = cookie.serialize(\n        options.cookieName,\n        seal,\n        options.cookieOptions,\n      );\n\n      if (cookieValue.length > 4096) {\n        throw new Error(\n          `iron-session: Cookie length is too big ${cookieValue.length}, browsers will refuse it. Try to remove some data.`,\n        );\n      }\n\n      addToCookies(cookieValue, res);\n      return cookieValue;\n    },\n    destroy() {\n      store.clear();\n      const cookieValue = cookie.serialize(options.cookieName, \"\", {\n        ...options.cookieOptions,\n        maxAge: 0,\n      });\n      addToCookies(cookieValue, res);\n    },\n  };\n}\n\nfunction addToCookies(cookieValue: string, res: ServerResponse) {\n  let existingSetCookie =\n    (res.getHeader(\"set-cookie\") as string[] | string) ?? [];\n  if (typeof existingSetCookie === \"string\") {\n    existingSetCookie = [existingSetCookie];\n  }\n  res.setHeader(\"set-cookie\", [...existingSetCookie, cookieValue]);\n}\n\nfunction computeCookieMaxAge(ttl: number) {\n  // The next line makes sure browser will expire cookies before seals are considered expired by the server.\n  // It also allows for clock difference of 60 seconds maximum between server and clients.\n  // It also makes sure to expire the cookie immediately when value is 0\n  return ttl - timestampSkewSec;\n}\n\nasync function getOrCreateStore({\n  sealed,\n  password,\n  ttl,\n}: {\n  sealed: string;\n  password: password;\n  ttl: number;\n}) {\n  try {\n    return await ironStore({\n      sealed,\n      password,\n      ttl,\n    });\n  } catch (error) {\n    if (error instanceof Error) {\n      if (\n        error.message === \"Expired seal\" ||\n        error.message === \"Bad hmac value\" ||\n        error.message === \"Cannot find password: \"\n      ) {\n        // if seal expired or\n        // if seal is not valid (encrypted using a different password, when passwords are updated) or\n        // if we can't find back the password in the seal\n        // then we just start a new session over\n        return await ironStore({ password, ttl });\n      }\n    }\n\n    throw error;\n  }\n}\n"],
-  "mappings": "6aAAA,0BACA,sBAKA,GAAM,GAAmB,GAInB,EAGF,CACF,IAAK,GAAK,GAAK,KACf,cAAe,CACb,SAAU,GACV,OAAQ,GACR,SAAU,MACV,KAAM,MAmBV,iBAGE,EAAkB,EAAmB,EAAiC,CAzCxE,QA0CE,GACE,CAAC,GACD,CAAC,GACD,CAAC,GACD,CAAC,EAAY,YACb,CAAC,EAAY,SAEb,KAAM,IAAI,OACR,4LAIJ,GAAM,GAAoB,MAAM,QAAQ,EAAY,UAChD,EAAY,SACZ,CAAC,CAAE,GAAI,EAAG,SAAU,EAAY,WAEpC,EAAkB,QAAQ,CAAC,CAAE,cAAe,CAC1C,GAAI,EAAS,OAAS,GACpB,KAAM,IAAI,OACR,4EAKN,GAAM,GAAwC,SACzC,GACA,GAFyC,CAG5C,cAAe,OACV,EAAe,eACd,EAAY,eAAiB,MAIrC,AAAI,EAAQ,MAAQ,GAKlB,GAAQ,IAAM,YAGhB,EAAQ,cAAc,OAAS,EAC7B,QAAY,gBAAZ,cAA2B,SAA3B,OAAqC,EAAQ,KAG/C,GAAM,GAAQ,KAAM,GAAiB,CACnC,OAAQ,EAAO,MAAM,EAAI,QAAQ,QAAU,IAAI,EAAQ,YACvD,SAAU,EACV,IAAK,EAAQ,IAAM,MAGrB,MAAO,CACL,IAAK,EAAM,IACX,IAAK,EAAM,IACX,MAAO,EAAM,WACP,OAAO,CACX,GAAM,GAAO,KAAM,GAAM,OACnB,EAAc,EAAO,UACzB,EAAQ,WACR,EACA,EAAQ,eAGV,GAAI,EAAY,OAAS,KACvB,KAAM,IAAI,OACR,0CAA0C,EAAY,6DAI1D,SAAa,EAAa,GACnB,GAET,SAAU,CACR,EAAM,QACN,GAAM,GAAc,EAAO,UAAU,EAAQ,WAAY,GAAI,OACxD,EAAQ,eADgD,CAE3D,OAAQ,KAEV,EAAa,EAAa,KAKhC,WAAsB,EAAqB,EAAqB,CA7HhE,MA8HE,GAAI,GACD,KAAI,UAAU,gBAAd,OAAqD,GACxD,AAAI,MAAO,IAAsB,UAC/B,GAAoB,CAAC,IAEvB,EAAI,UAAU,aAAc,CAAC,GAAG,EAAmB,IAGrD,WAA6B,EAAa,CAIxC,MAAO,GAAM,EAGf,iBAAgC,CAC9B,SACA,WACA,OAKC,CACD,GAAI,CACF,MAAO,MAAM,GAAU,CACrB,SACA,WACA,cAEK,EAAP,CACA,GAAI,YAAiB,QAEjB,GAAM,UAAY,gBAClB,EAAM,UAAY,kBAClB,EAAM,UAAY,0BAMlB,MAAO,MAAM,GAAU,CAAE,WAAU,QAIvC,KAAM",
+  "mappings": ";AAAA;AACA;AAKA,IAAM,mBAAmB;AAIzB,IAAM,iBAGF;AAAA,EACF,KAAK,KAAK,KAAK;AAAA,EACf,eAAe;AAAA,IACb,UAAU;AAAA,IACV,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,MAAM;AAAA;AAAA;AAmBV,8BAGE,KAAkB,KAAmB,aAAiC;AAzCxE;AA0CE,MACE,CAAC,OACD,CAAC,OACD,CAAC,eACD,CAAC,YAAY,cACb,CAAC,YAAY,UACb;AACA,UAAM,IAAI,MACR;AAAA;AAIJ,QAAM,oBAAoB,MAAM,QAAQ,YAAY,YAChD,YAAY,WACZ,CAAC,EAAE,IAAI,GAAG,UAAU,YAAY;AAEpC,oBAAkB,QAAQ,CAAC,EAAE,eAAe;AAC1C,QAAI,SAAS,SAAS,IAAI;AACxB,YAAM,IAAI,MACR;AAAA;AAAA;AAKN,QAAM,UAAwC;AAAA,OACzC;AAAA,OACA;AAAA,IACH,eAAe;AAAA,SACV,eAAe;AAAA,SACd,YAAY,iBAAiB;AAAA;AAAA;AAIrC,MAAI,QAAQ,QAAQ,GAAG;AAKrB,YAAQ,MAAM;AAAA;AAGhB,UAAQ,cAAc,SAAS,oBAC7B,wBAAY,kBAAZ,mBAA2B,WAA3B,YAAqC,QAAQ;AAG/C,QAAM,QAAQ,MAAM,iBAAiB;AAAA,IACnC,QAAQ,OAAO,MAAM,IAAI,QAAQ,UAAU,IAAI,QAAQ;AAAA,IACvD,UAAU;AAAA,IACV,KAAK,QAAQ,MAAM;AAAA;AAGrB,SAAO;AAAA,IACL,KAAK,MAAM;AAAA,IACX,KAAK,MAAM;AAAA,IACX,OAAO,MAAM;AAAA,UACP,OAAO;AACX,YAAM,OAAO,MAAM,MAAM;AACzB,YAAM,cAAc,OAAO,UACzB,QAAQ,YACR,MACA,QAAQ;AAGV,UAAI,YAAY,SAAS,MAAM;AAC7B,cAAM,IAAI,MACR,0CAA0C,YAAY;AAAA;AAI1D,mBAAa,aAAa;AAC1B,aAAO;AAAA;AAAA,IAET,UAAU;AACR,YAAM;AACN,YAAM,cAAc,OAAO,UAAU,QAAQ,YAAY,IAAI;AAAA,WACxD,QAAQ;AAAA,QACX,QAAQ;AAAA;AAEV,mBAAa,aAAa;AAAA;AAAA;AAAA;AAKhC,sBAAsB,aAAqB,KAAqB;AA7HhE;AA8HE,MAAI,oBACD,UAAI,UAAU,kBAAd,YAAqD;AACxD,MAAI,OAAO,sBAAsB,UAAU;AACzC,wBAAoB,CAAC;AAAA;AAEvB,MAAI,UAAU,cAAc,CAAC,GAAG,mBAAmB;AAAA;AAGrD,6BAA6B,KAAa;AAIxC,SAAO,MAAM;AAAA;AAGf,gCAAgC;AAAA,EAC9B;AAAA,EACA;AAAA,EACA;AAAA,GAKC;AACD,MAAI;AACF,WAAO,MAAM,UAAU;AAAA,MACrB;AAAA,MACA;AAAA,MACA;AAAA;AAAA,WAEK,OAAP;AACA,QAAI,iBAAiB,OAAO;AAC1B,UACE,MAAM,YAAY,kBAClB,MAAM,YAAY,oBAClB,MAAM,YAAY,0BAClB;AAKA,eAAO,MAAM,UAAU,EAAE,UAAU;AAAA;AAAA;AAIvC,UAAM;AAAA;AAAA;",
   "names": []
 }

package/next/dist/index.d.ts ADDED Viewed

@@ -0,0 +1,15 @@
+import { NextApiRequest, NextApiResponse, GetServerSidePropsResult, GetServerSidePropsContext } from 'next';
+import { IronSession, IronSessionOptions } from 'iron-session';
+interface NextApiRequestWithIronSession extends NextApiRequest {
+    session: IronSession;
+}
+declare type NextApiHandlerWithIronSession<T = unknown> = (req: NextApiRequestWithIronSession, res: NextApiResponse<T>) => void | Promise<void>;
+interface NextGetSeverSideContextWithIronSession extends GetServerSidePropsContext {
+    req: NextApiRequestWithIronSession;
+}
+declare type NextGetServerSidePropsHandlerWithIronSession<P> = (context: NextGetSeverSideContextWithIronSession) => Promise<GetServerSidePropsResult<P>>;
+declare function withIronSessionApiRoute(handler: NextApiHandlerWithIronSession, options: IronSessionOptions): NextApiHandlerWithIronSession;
+declare function withIronSessionSsr<P>(handler: NextGetServerSidePropsHandlerWithIronSession<P>, options: IronSessionOptions): NextGetServerSidePropsHandlerWithIronSession<P>;
+export { NextApiHandlerWithIronSession, NextApiRequestWithIronSession, NextGetServerSidePropsHandlerWithIronSession, withIronSessionApiRoute, withIronSessionSsr };

package/next/dist/index.js ADDED Viewed

@@ -0,0 +1,48 @@
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __markAsModule = (target) => __defProp(target, "__esModule", { value: true });
+var __export = (target, all) => {
+  __markAsModule(target);
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __reExport = (target, module2, desc) => {
+  if (module2 && typeof module2 === "object" || typeof module2 === "function") {
+    for (let key of __getOwnPropNames(module2))
+      if (!__hasOwnProp.call(target, key) && key !== "default")
+        __defProp(target, key, { get: () => module2[key], enumerable: !(desc = __getOwnPropDesc(module2, key)) || desc.enumerable });
+  }
+  return target;
+};
+var __toModule = (module2) => {
+  return __reExport(__markAsModule(__defProp(module2 != null ? __create(__getProtoOf(module2)) : {}, "default", module2 && module2.__esModule && "default" in module2 ? { get: () => module2.default, enumerable: true } : { value: module2, enumerable: true })), module2);
+};
+// next/index.ts
+__export(exports, {
+  withIronSessionApiRoute: () => withIronSessionApiRoute,
+  withIronSessionSsr: () => withIronSessionSsr
+});
+var import_iron_session = __toModule(require("iron-session"));
+function withIronSessionApiRoute(handler, options) {
+  return async function nextApiHandlerWrappedWithIronSession(req, res) {
+    req.session = await (0, import_iron_session.getIronSession)(req, res, options);
+    return handler(req, res);
+  };
+}
+function withIronSessionSsr(handler, options) {
+  return async function nextGetServerSidePropsHandlerWrappedWithIronSession(context) {
+    context.req.session = await (0, import_iron_session.getIronSession)(context.req, context.res, options);
+    return handler(context);
+  };
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  withIronSessionApiRoute,
+  withIronSessionSsr
+});
+//# sourceMappingURL=index.js.map

package/next/dist/index.js.map ADDED Viewed

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../index.ts"],
+  "sourcesContent": ["import type {\n  GetServerSidePropsContext,\n  GetServerSidePropsResult,\n  NextApiRequest,\n  NextApiResponse,\n} from \"next\";\nimport type { IronSession, IronSessionOptions } from \"iron-session\";\nimport { getIronSession } from \"iron-session\";\n\nexport interface NextApiRequestWithIronSession extends NextApiRequest {\n  session: IronSession;\n}\n\nexport declare type NextApiHandlerWithIronSession<T = unknown> = (\n  req: NextApiRequestWithIronSession,\n  res: NextApiResponse<T>,\n) => void | Promise<void>;\n\ninterface NextGetSeverSideContextWithIronSession\n  extends GetServerSidePropsContext {\n  req: NextApiRequestWithIronSession;\n}\n\nexport declare type NextGetServerSidePropsHandlerWithIronSession<P> = (\n  context: NextGetSeverSideContextWithIronSession,\n) => Promise<GetServerSidePropsResult<P>>;\n\nexport function withIronSessionApiRoute(\n  handler: NextApiHandlerWithIronSession,\n  options: IronSessionOptions,\n): NextApiHandlerWithIronSession {\n  return async function nextApiHandlerWrappedWithIronSession(req, res) {\n    req.session = await getIronSession(req, res, options);\n    return handler(req, res);\n  };\n}\n\nexport function withIronSessionSsr<P>(\n  handler: NextGetServerSidePropsHandlerWithIronSession<P>,\n  options: IronSessionOptions,\n): NextGetServerSidePropsHandlerWithIronSession<P> {\n  return async function nextGetServerSidePropsHandlerWrappedWithIronSession(\n    context: NextGetSeverSideContextWithIronSession,\n  ) {\n    context.req.session = await getIronSession(\n      context.req,\n      context.res,\n      options,\n    );\n    return handler(context);\n  };\n}\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAOA,0BAA+B;AAoBxB,iCACL,SACA,SAC+B;AAC/B,SAAO,oDAAoD,KAAK,KAAK;AACnE,QAAI,UAAU,MAAM,wCAAe,KAAK,KAAK;AAC7C,WAAO,QAAQ,KAAK;AAAA;AAAA;AAIjB,4BACL,SACA,SACiD;AACjD,SAAO,mEACL,SACA;AACA,YAAQ,IAAI,UAAU,MAAM,wCAC1B,QAAQ,KACR,QAAQ,KACR;AAEF,WAAO,QAAQ;AAAA;AAAA;",
+  "names": []
+}

package/next/dist/index.mjs ADDED Viewed

@@ -0,0 +1,19 @@
+// next/index.ts
+import { getIronSession } from "iron-session";
+function withIronSessionApiRoute(handler, options) {
+  return async function nextApiHandlerWrappedWithIronSession(req, res) {
+    req.session = await getIronSession(req, res, options);
+    return handler(req, res);
+  };
+}
+function withIronSessionSsr(handler, options) {
+  return async function nextGetServerSidePropsHandlerWrappedWithIronSession(context) {
+    context.req.session = await getIronSession(context.req, context.res, options);
+    return handler(context);
+  };
+}
+export {
+  withIronSessionApiRoute,
+  withIronSessionSsr
+};
+//# sourceMappingURL=index.mjs.map

package/next/dist/index.mjs.map ADDED Viewed

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../index.ts"],
+  "sourcesContent": ["import type {\n  GetServerSidePropsContext,\n  GetServerSidePropsResult,\n  NextApiRequest,\n  NextApiResponse,\n} from \"next\";\nimport type { IronSession, IronSessionOptions } from \"iron-session\";\nimport { getIronSession } from \"iron-session\";\n\nexport interface NextApiRequestWithIronSession extends NextApiRequest {\n  session: IronSession;\n}\n\nexport declare type NextApiHandlerWithIronSession<T = unknown> = (\n  req: NextApiRequestWithIronSession,\n  res: NextApiResponse<T>,\n) => void | Promise<void>;\n\ninterface NextGetSeverSideContextWithIronSession\n  extends GetServerSidePropsContext {\n  req: NextApiRequestWithIronSession;\n}\n\nexport declare type NextGetServerSidePropsHandlerWithIronSession<P> = (\n  context: NextGetSeverSideContextWithIronSession,\n) => Promise<GetServerSidePropsResult<P>>;\n\nexport function withIronSessionApiRoute(\n  handler: NextApiHandlerWithIronSession,\n  options: IronSessionOptions,\n): NextApiHandlerWithIronSession {\n  return async function nextApiHandlerWrappedWithIronSession(req, res) {\n    req.session = await getIronSession(req, res, options);\n    return handler(req, res);\n  };\n}\n\nexport function withIronSessionSsr<P>(\n  handler: NextGetServerSidePropsHandlerWithIronSession<P>,\n  options: IronSessionOptions,\n): NextGetServerSidePropsHandlerWithIronSession<P> {\n  return async function nextGetServerSidePropsHandlerWrappedWithIronSession(\n    context: NextGetSeverSideContextWithIronSession,\n  ) {\n    context.req.session = await getIronSession(\n      context.req,\n      context.res,\n      options,\n    );\n    return handler(context);\n  };\n}\n"],
+  "mappings": ";AAOA;AAoBO,iCACL,SACA,SAC+B;AAC/B,SAAO,oDAAoD,KAAK,KAAK;AACnE,QAAI,UAAU,MAAM,eAAe,KAAK,KAAK;AAC7C,WAAO,QAAQ,KAAK;AAAA;AAAA;AAIjB,4BACL,SACA,SACiD;AACjD,SAAO,mEACL,SACA;AACA,YAAQ,IAAI,UAAU,MAAM,eAC1B,QAAQ,KACR,QAAQ,KACR;AAEF,WAAO,QAAQ;AAAA;AAAA;",
+  "names": []
+}

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "iron-session",
-  "version": "2.0.0-alpha.1",
+  "version": "2.0.0-alpha.10",
   "license": "MIT",
   "author": "Vincent Voyer <vincent@codeagain.com>",
   "exports": {
@@ -10,39 +10,27 @@
       "types": "./dist/index.d.ts"
     },
     "./next": {
-      "import": "./dist/next/index.mjs",
-      "require": "./dist/next/index.js",
-      "types": "./dist/next/index.d.ts"
+      "import": "./next/dist/index.mjs",
+      "require": "./next/dist/index.js",
+      "types": "./next/dist/index.d.ts"
     }
   },
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",
   "types": "./dist/index.d.ts",
   "files": [
-    "dist"
+    "dist",
+    "next/dist"
   ],
   "workspaces": [
     "examples/next.js",
     "examples/next.js-typescript"
   ],
   "scripts": {
-    "build": "tsup",
+    "build": "rimraf dist/ next/dist && tsup src/index.ts && tsup next/index.ts -d next/dist",
     "lint": "eslint . && (cd examples/next.js && npm run lint) && (cd examples/next.js-typescript && npm run lint)",
     "prepublishOnly": "npm run build",
-    "test": "jest && npm run lint"
-  },
-  "babel": {
-    "presets": [
-      [
-        "@babel/preset-env",
-        {
-          "targets": {
-            "node": "current"
-          }
-        }
-      ],
-      "@babel/preset-typescript"
-    ]
+    "test": "jest --coverage && npm run lint"
   },
   "prettier": {
     "trailingComma": "all"
@@ -69,6 +57,26 @@
       ]
     }
   },
+  "jest": {
+    "collectCoverageFrom": [
+      "src/*.ts",
+      "next/*.ts"
+    ],
+    "coverageProvider": "v8",
+    "coverageReporters": [
+      "text"
+    ],
+    "transform": {
+      ".ts$": [
+        "@swc-node/jest",
+        {
+          "jsc": {
+            "minify": false
+          }
+        }
+      ]
+    }
+  },
   "dependencies": {
     "@types/cookie": "^0.4.0",
     "@types/node": "^16.11.1",
@@ -76,19 +84,17 @@
     "iron-store": "^1.3.5"
   },
   "devDependencies": {
-    "@babel/core": "7.15.8",
-    "@babel/preset-env": "7.15.8",
-    "@babel/preset-typescript": "7.15.0",
+    "@swc-node/jest": "1.3.3",
     "@tsconfig/node12": "1.0.9",
     "@types/jest": "27.0.2",
     "@typescript-eslint/eslint-plugin": "5.1.0",
     "@typescript-eslint/parser": "5.1.0",
-    "babel-jest": "27.3.1",
     "eslint": "8.0.1",
     "jest": "27.3.1",
     "jest-date-mock": "1.0.8",
     "prettier": "2.4.1",
     "prettier-plugin-packagejson": "2.2.13",
+    "rimraf": "3.0.2",
     "tsup": "5.4.1",
     "typescript": "4.4.4"
   },
@@ -124,14 +130,13 @@
     "sourcemap": true,
     "clean": true,
     "dts": true,
-    "entryPoints": [
-      "src/index.ts",
-      "src/next/index.ts"
-    ],
+    "target": "es2019",
     "format": [
       "esm",
       "cjs"
     ],
-    "minify": true
+    "external": [
+      "iron-session"
+    ]
   }
 }

package/dist/next/index.js DELETED Viewed

	@@ -1,2 +0,0 @@
1	- var y=Object.create;var p=Object.defineProperty,N=Object.defineProperties,A=Object.getOwnPropertyDescriptor,R=Object.getOwnPropertyDescriptors,P=Object.getOwnPropertyNames,x=Object.getOwnPropertySymbols,W=Object.getPrototypeOf,h=Object.prototype.hasOwnProperty,C=Object.prototype.propertyIsEnumerable;var w=(e,o,s)=>o in e?p(e,o,{enumerable:!0,configurable:!0,writable:!0,value:s}):e[o]=s,i=(e,o)=>{for(var s in o\|\|(o={}))h.call(o,s)&&w(e,s,o[s]);if(x)for(var s of x(o))C.call(o,s)&&w(e,s,o[s]);return e},S=(e,o)=>N(e,R(o)),k=e=>p(e,"__esModule",{value:!0});var O=(e,o)=>{k(e);for(var s in o)p(e,s,{get:o[s],enumerable:!0})},T=(e,o,s)=>{if(o&&typeof o=="object"\|\|typeof o=="function")for(let t of P(o))!h.call(e,t)&&t!=="default"&&p(e,t,{get:()=>o[t],enumerable:!(s=A(o,t))\|\|s.enumerable});return e},f=e=>T(k(p(e!=null?y(W(e)):{},"default",e&&e.__esModule&&"default"in e?{get:()=>e.default,enumerable:!0}:{value:e,enumerable:!0})),e);O(exports,{withIronSessionApiRoute:()=>E,withIronSessionSsr:()=>z});var u=f(require("iron-store")),c=f(require("cookie")),q=60,I={ttl:15243600,cookieOptions:{httpOnly:!0,secure:!0,sameSite:"lax",path:"/"}};async function m(e,o,s){var l,g;if(!e\|\|!o\|\|!s\|\|!s.cookieName\|\|!s.password)throw new Error('iron-session: Bad usage. Minimum usage is const session = await getIronSession(req, res, { cookieName: "...", password: "...". Check the usage here: https://github.com/vvo/iron-session');let t=Array.isArray(s.password)?s.password:[{id:1,password:s.password}];t.forEach(({password:a})=>{if(a.length<32)throw new Error("iron-session: Bad usage. Password must be at least 32 characters long.")});let r=S(i(i({},I),s),{cookieOptions:i(i({},I.cookieOptions),s.cookieOptions\|\|{})});r.ttl===0&&(r.ttl=2147483647),r.cookieOptions.maxAge=H((g=(l=s.cookieOptions)==null?void 0:l.maxAge)!=null?g:r.ttl);let n=await b({sealed:c.default.parse(e.headers.cookie\|\|"")[r.cookieName],password:t,ttl:r.ttl*1e3});return{set:n.set,get:n.get,unset:n.unset,async save(){let a=await n.seal(),d=c.default.serialize(r.cookieName,a,r.cookieOptions);if(d.length>4096)throw new Error(`iron-session: Cookie length is too big ${d.length}, browsers will refuse it. Try to remove some data.`);return v(d,o),d},destroy(){n.clear();let a=c.default.serialize(r.cookieName,"",S(i({},r.cookieOptions),{maxAge:0}));v(a,o)}}}function v(e,o){var t;let s=(t=o.getHeader("set-cookie"))!=null?t:[];typeof s=="string"&&(s=[s]),o.setHeader("set-cookie",[...s,e])}function H(e){return e-q}async function b({sealed:e,password:o,ttl:s}){try{return await(0,u.default)({sealed:e,password:o,ttl:s})}catch(t){if(t instanceof Error&&(t.message==="Expired seal"\|\|t.message==="Bad hmac value"\|\|t.message==="Cannot find password: "))return await(0,u.default)({password:o,ttl:s});throw t}}function E(e,o){return async function(t,r){return t.session=await m(t,r,o),e(t,r)}}function z(e,o){return async function(t){return t.req.session=await m(t.req,t.res,o),e(t)}}0&&(module.exports={withIronSessionApiRoute,withIronSessionSsr});
2	- //# sourceMappingURL=index.js.map

package/dist/next/index.js.map DELETED Viewed

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../src/next/index.ts", "../../src/index.ts"],
-  "sourcesContent": ["import type {\n  GetServerSidePropsContext,\n  GetServerSidePropsResult,\n  NextApiRequest,\n  NextApiResponse,\n} from \"next\";\nimport type { IronSession, IronSessionOptions } from \"..\";\nimport { getIronSession } from \"..\";\n\nexport interface NextApiRequestWithIronSession extends NextApiRequest {\n  session: IronSession;\n}\n\nexport declare type NextApiHandlerWithIronSession<T = unknown> = (\n  req: NextApiRequestWithIronSession,\n  res: NextApiResponse<T>,\n) => void | Promise<void>;\n\ninterface NextGetSeverSideContextWithIronSession\n  extends GetServerSidePropsContext {\n  req: NextApiRequestWithIronSession;\n}\n\nexport declare type NextGetServerSidePropsHandlerWithIronSession<P> = (\n  context: NextGetSeverSideContextWithIronSession,\n) => Promise<GetServerSidePropsResult<P>>;\n\nexport function withIronSessionApiRoute(\n  handler: NextApiHandlerWithIronSession,\n  options: IronSessionOptions,\n): NextApiHandlerWithIronSession {\n  return async function nextApiHandlerWrappedWithIronSession(req, res) {\n    req.session = await getIronSession(req, res, options);\n    return handler(req, res);\n  };\n}\n\nexport function withIronSessionSsr<P>(\n  handler: NextGetServerSidePropsHandlerWithIronSession<P>,\n  options: IronSessionOptions,\n): NextGetServerSidePropsHandlerWithIronSession<P> {\n  return async function nextGetServerSidePropsHandlerWrappedWithIronSession(\n    context: NextGetSeverSideContextWithIronSession,\n  ) {\n    context.req.session = await getIronSession(\n      context.req,\n      context.res,\n      options,\n    );\n    return handler(context);\n  };\n}\n", "import ironStore from \"iron-store\";\nimport cookie, { CookieSerializeOptions } from \"cookie\";\nimport type { IncomingMessage, ServerResponse } from \"http\";\n\n// default time allowed to check for iron seal validity when ttl passed\n// see https://hapi.dev/family/iron/api/?v=6.0.0#options\nconst timestampSkewSec = 60;\n\ntype password = string | { id: number; password: string }[];\n\nconst defaultOptions: {\n  ttl: number;\n  cookieOptions: CookieSerializeOptions;\n} = {\n  ttl: 15 * 24 * 3600,\n  cookieOptions: {\n    httpOnly: true,\n    secure: true,\n    sameSite: \"lax\",\n    path: \"/\",\n  },\n};\n\nexport interface IronSessionOptions {\n  cookieName: string;\n  password: password;\n  ttl?: number;\n  cookieOptions?: CookieSerializeOptions;\n}\n\nexport interface IronSession {\n  set: <T = unknown>(name: string, value: T) => T;\n  get: <T = unknown>(name: string) => T | undefined;\n  unset: (name: string) => void;\n  destroy: () => void;\n  save: () => Promise<string>;\n}\n\nexport async function getIronSession<\n  RequestType extends IncomingMessage,\n  ResponseType extends ServerResponse,\n>(req: RequestType, res: ResponseType, userOptions: IronSessionOptions) {\n  if (\n    !req ||\n    !res ||\n    !userOptions ||\n    !userOptions.cookieName ||\n    !userOptions.password\n  ) {\n    throw new Error(\n      `iron-session: Bad usage. Minimum usage is const session = await getIronSession(req, res, { cookieName: \"...\", password: \"...\". Check the usage here: https://github.com/vvo/iron-session`,\n    );\n  }\n\n  const passwordAsAnArray = Array.isArray(userOptions.password)\n    ? userOptions.password\n    : [{ id: 1, password: userOptions.password }];\n\n  passwordAsAnArray.forEach(({ password }) => {\n    if (password.length < 32) {\n      throw new Error(\n        `iron-session: Bad usage. Password must be at least 32 characters long.`,\n      );\n    }\n  });\n\n  const options: Required<IronSessionOptions> = {\n    ...defaultOptions,\n    ...userOptions,\n    cookieOptions: {\n      ...defaultOptions.cookieOptions,\n      ...(userOptions.cookieOptions || {}),\n    },\n  };\n\n  if (options.ttl === 0) {\n    // ttl = 0 means no expiration\n    // but in reality cookies have to expire (can't have no max-age)\n    // 2147483647 is the max value for max-age in cookies\n    // see https://stackoverflow.com/a/11685301/147079\n    options.ttl = 2147483647;\n  }\n\n  options.cookieOptions.maxAge = computeCookieMaxAge(\n    userOptions.cookieOptions?.maxAge ?? options.ttl,\n  );\n\n  const store = await getOrCreateStore({\n    sealed: cookie.parse(req.headers.cookie || \"\")[options.cookieName],\n    password: passwordAsAnArray,\n    ttl: options.ttl * 1000,\n  });\n\n  return {\n    set: store.set,\n    get: store.get,\n    unset: store.unset,\n    async save() {\n      const seal = await store.seal();\n      const cookieValue = cookie.serialize(\n        options.cookieName,\n        seal,\n        options.cookieOptions,\n      );\n\n      if (cookieValue.length > 4096) {\n        throw new Error(\n          `iron-session: Cookie length is too big ${cookieValue.length}, browsers will refuse it. Try to remove some data.`,\n        );\n      }\n\n      addToCookies(cookieValue, res);\n      return cookieValue;\n    },\n    destroy() {\n      store.clear();\n      const cookieValue = cookie.serialize(options.cookieName, \"\", {\n        ...options.cookieOptions,\n        maxAge: 0,\n      });\n      addToCookies(cookieValue, res);\n    },\n  };\n}\n\nfunction addToCookies(cookieValue: string, res: ServerResponse) {\n  let existingSetCookie =\n    (res.getHeader(\"set-cookie\") as string[] | string) ?? [];\n  if (typeof existingSetCookie === \"string\") {\n    existingSetCookie = [existingSetCookie];\n  }\n  res.setHeader(\"set-cookie\", [...existingSetCookie, cookieValue]);\n}\n\nfunction computeCookieMaxAge(ttl: number) {\n  // The next line makes sure browser will expire cookies before seals are considered expired by the server.\n  // It also allows for clock difference of 60 seconds maximum between server and clients.\n  // It also makes sure to expire the cookie immediately when value is 0\n  return ttl - timestampSkewSec;\n}\n\nasync function getOrCreateStore({\n  sealed,\n  password,\n  ttl,\n}: {\n  sealed: string;\n  password: password;\n  ttl: number;\n}) {\n  try {\n    return await ironStore({\n      sealed,\n      password,\n      ttl,\n    });\n  } catch (error) {\n    if (error instanceof Error) {\n      if (\n        error.message === \"Expired seal\" ||\n        error.message === \"Bad hmac value\" ||\n        error.message === \"Cannot find password: \"\n      ) {\n        // if seal expired or\n        // if seal is not valid (encrypted using a different password, when passwords are updated) or\n        // if we can't find back the password in the seal\n        // then we just start a new session over\n        return await ironStore({ password, ttl });\n      }\n    }\n\n    throw error;\n  }\n}\n"],
-  "mappings": "s6BAAA,oECAA,MAAsB,yBACtB,EAA+C,qBAKzC,EAAmB,GAInB,EAGF,CACF,IAAK,GAAK,GAAK,KACf,cAAe,CACb,SAAU,GACV,OAAQ,GACR,SAAU,MACV,KAAM,MAmBV,iBAGE,EAAkB,EAAmB,EAAiC,CAzCxE,QA0CE,GACE,CAAC,GACD,CAAC,GACD,CAAC,GACD,CAAC,EAAY,YACb,CAAC,EAAY,SAEb,KAAM,IAAI,OACR,4LAIJ,GAAM,GAAoB,MAAM,QAAQ,EAAY,UAChD,EAAY,SACZ,CAAC,CAAE,GAAI,EAAG,SAAU,EAAY,WAEpC,EAAkB,QAAQ,CAAC,CAAE,cAAe,CAC1C,GAAI,EAAS,OAAS,GACpB,KAAM,IAAI,OACR,4EAKN,GAAM,GAAwC,SACzC,GACA,GAFyC,CAG5C,cAAe,OACV,EAAe,eACd,EAAY,eAAiB,MAIrC,AAAI,EAAQ,MAAQ,GAKlB,GAAQ,IAAM,YAGhB,EAAQ,cAAc,OAAS,EAC7B,QAAY,gBAAZ,cAA2B,SAA3B,OAAqC,EAAQ,KAG/C,GAAM,GAAQ,KAAM,GAAiB,CACnC,OAAQ,UAAO,MAAM,EAAI,QAAQ,QAAU,IAAI,EAAQ,YACvD,SAAU,EACV,IAAK,EAAQ,IAAM,MAGrB,MAAO,CACL,IAAK,EAAM,IACX,IAAK,EAAM,IACX,MAAO,EAAM,WACP,OAAO,CACX,GAAM,GAAO,KAAM,GAAM,OACnB,EAAc,UAAO,UACzB,EAAQ,WACR,EACA,EAAQ,eAGV,GAAI,EAAY,OAAS,KACvB,KAAM,IAAI,OACR,0CAA0C,EAAY,6DAI1D,SAAa,EAAa,GACnB,GAET,SAAU,CACR,EAAM,QACN,GAAM,GAAc,UAAO,UAAU,EAAQ,WAAY,GAAI,OACxD,EAAQ,eADgD,CAE3D,OAAQ,KAEV,EAAa,EAAa,KAKhC,WAAsB,EAAqB,EAAqB,CA7HhE,MA8HE,GAAI,GACD,KAAI,UAAU,gBAAd,OAAqD,GACxD,AAAI,MAAO,IAAsB,UAC/B,GAAoB,CAAC,IAEvB,EAAI,UAAU,aAAc,CAAC,GAAG,EAAmB,IAGrD,WAA6B,EAAa,CAIxC,MAAO,GAAM,EAGf,iBAAgC,CAC9B,SACA,WACA,OAKC,CACD,GAAI,CACF,MAAO,MAAM,cAAU,CACrB,SACA,WACA,cAEK,EAAP,CACA,GAAI,YAAiB,QAEjB,GAAM,UAAY,gBAClB,EAAM,UAAY,kBAClB,EAAM,UAAY,0BAMlB,MAAO,MAAM,cAAU,CAAE,WAAU,QAIvC,KAAM,IDhJH,WACL,EACA,EAC+B,CAC/B,MAAO,gBAAoD,EAAK,EAAK,CACnE,SAAI,QAAU,KAAM,GAAe,EAAK,EAAK,GACtC,EAAQ,EAAK,IAIjB,WACL,EACA,EACiD,CACjD,MAAO,gBACL,EACA,CACA,SAAQ,IAAI,QAAU,KAAM,GAC1B,EAAQ,IACR,EAAQ,IACR,GAEK,EAAQ",
-  "names": []
-}

package/dist/next/index.mjs DELETED Viewed

	@@ -1,2 +0,0 @@
1	- var k=Object.defineProperty,f=Object.defineProperties;var I=Object.getOwnPropertyDescriptors;var l=Object.getOwnPropertySymbols;var v=Object.prototype.hasOwnProperty,y=Object.prototype.propertyIsEnumerable;var g=(s,o,e)=>o in s?k(s,o,{enumerable:!0,configurable:!0,writable:!0,value:e}):s[o]=e,i=(s,o)=>{for(var e in o\|\|(o={}))v.call(o,e)&&g(s,e,o[e]);if(l)for(var e of l(o))y.call(o,e)&&g(s,e,o[e]);return s},d=(s,o)=>f(s,I(o));import x from"iron-store";import c from"cookie";var N=60,h={ttl:15243600,cookieOptions:{httpOnly:!0,secure:!0,sameSite:"lax",path:"/"}};async function S(s,o,e){var u,m;if(!s\|\|!o\|\|!e\|\|!e.cookieName\|\|!e.password)throw new Error('iron-session: Bad usage. Minimum usage is const session = await getIronSession(req, res, { cookieName: "...", password: "...". Check the usage here: https://github.com/vvo/iron-session');let t=Array.isArray(e.password)?e.password:[{id:1,password:e.password}];t.forEach(({password:a})=>{if(a.length<32)throw new Error("iron-session: Bad usage. Password must be at least 32 characters long.")});let r=d(i(i({},h),e),{cookieOptions:i(i({},h.cookieOptions),e.cookieOptions\|\|{})});r.ttl===0&&(r.ttl=2147483647),r.cookieOptions.maxAge=A((m=(u=e.cookieOptions)==null?void 0:u.maxAge)!=null?m:r.ttl);let n=await R({sealed:c.parse(s.headers.cookie\|\|"")[r.cookieName],password:t,ttl:r.ttl*1e3});return{set:n.set,get:n.get,unset:n.unset,async save(){let a=await n.seal(),p=c.serialize(r.cookieName,a,r.cookieOptions);if(p.length>4096)throw new Error(`iron-session: Cookie length is too big ${p.length}, browsers will refuse it. Try to remove some data.`);return w(p,o),p},destroy(){n.clear();let a=c.serialize(r.cookieName,"",d(i({},r.cookieOptions),{maxAge:0}));w(a,o)}}}function w(s,o){var t;let e=(t=o.getHeader("set-cookie"))!=null?t:[];typeof e=="string"&&(e=[e]),o.setHeader("set-cookie",[...e,s])}function A(s){return s-N}async function R({sealed:s,password:o,ttl:e}){try{return await x({sealed:s,password:o,ttl:e})}catch(t){if(t instanceof Error&&(t.message==="Expired seal"\|\|t.message==="Bad hmac value"\|\|t.message==="Cannot find password: "))return await x({password:o,ttl:e});throw t}}function q(s,o){return async function(t,r){return t.session=await S(t,r,o),s(t,r)}}function H(s,o){return async function(t){return t.req.session=await S(t.req,t.res,o),s(t)}}export{q as withIronSessionApiRoute,H as withIronSessionSsr};
2	- //# sourceMappingURL=index.mjs.map

package/dist/next/index.mjs.map DELETED Viewed

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../src/index.ts", "../../src/next/index.ts"],
-  "sourcesContent": ["import ironStore from \"iron-store\";\nimport cookie, { CookieSerializeOptions } from \"cookie\";\nimport type { IncomingMessage, ServerResponse } from \"http\";\n\n// default time allowed to check for iron seal validity when ttl passed\n// see https://hapi.dev/family/iron/api/?v=6.0.0#options\nconst timestampSkewSec = 60;\n\ntype password = string | { id: number; password: string }[];\n\nconst defaultOptions: {\n  ttl: number;\n  cookieOptions: CookieSerializeOptions;\n} = {\n  ttl: 15 * 24 * 3600,\n  cookieOptions: {\n    httpOnly: true,\n    secure: true,\n    sameSite: \"lax\",\n    path: \"/\",\n  },\n};\n\nexport interface IronSessionOptions {\n  cookieName: string;\n  password: password;\n  ttl?: number;\n  cookieOptions?: CookieSerializeOptions;\n}\n\nexport interface IronSession {\n  set: <T = unknown>(name: string, value: T) => T;\n  get: <T = unknown>(name: string) => T | undefined;\n  unset: (name: string) => void;\n  destroy: () => void;\n  save: () => Promise<string>;\n}\n\nexport async function getIronSession<\n  RequestType extends IncomingMessage,\n  ResponseType extends ServerResponse,\n>(req: RequestType, res: ResponseType, userOptions: IronSessionOptions) {\n  if (\n    !req ||\n    !res ||\n    !userOptions ||\n    !userOptions.cookieName ||\n    !userOptions.password\n  ) {\n    throw new Error(\n      `iron-session: Bad usage. Minimum usage is const session = await getIronSession(req, res, { cookieName: \"...\", password: \"...\". Check the usage here: https://github.com/vvo/iron-session`,\n    );\n  }\n\n  const passwordAsAnArray = Array.isArray(userOptions.password)\n    ? userOptions.password\n    : [{ id: 1, password: userOptions.password }];\n\n  passwordAsAnArray.forEach(({ password }) => {\n    if (password.length < 32) {\n      throw new Error(\n        `iron-session: Bad usage. Password must be at least 32 characters long.`,\n      );\n    }\n  });\n\n  const options: Required<IronSessionOptions> = {\n    ...defaultOptions,\n    ...userOptions,\n    cookieOptions: {\n      ...defaultOptions.cookieOptions,\n      ...(userOptions.cookieOptions || {}),\n    },\n  };\n\n  if (options.ttl === 0) {\n    // ttl = 0 means no expiration\n    // but in reality cookies have to expire (can't have no max-age)\n    // 2147483647 is the max value for max-age in cookies\n    // see https://stackoverflow.com/a/11685301/147079\n    options.ttl = 2147483647;\n  }\n\n  options.cookieOptions.maxAge = computeCookieMaxAge(\n    userOptions.cookieOptions?.maxAge ?? options.ttl,\n  );\n\n  const store = await getOrCreateStore({\n    sealed: cookie.parse(req.headers.cookie || \"\")[options.cookieName],\n    password: passwordAsAnArray,\n    ttl: options.ttl * 1000,\n  });\n\n  return {\n    set: store.set,\n    get: store.get,\n    unset: store.unset,\n    async save() {\n      const seal = await store.seal();\n      const cookieValue = cookie.serialize(\n        options.cookieName,\n        seal,\n        options.cookieOptions,\n      );\n\n      if (cookieValue.length > 4096) {\n        throw new Error(\n          `iron-session: Cookie length is too big ${cookieValue.length}, browsers will refuse it. Try to remove some data.`,\n        );\n      }\n\n      addToCookies(cookieValue, res);\n      return cookieValue;\n    },\n    destroy() {\n      store.clear();\n      const cookieValue = cookie.serialize(options.cookieName, \"\", {\n        ...options.cookieOptions,\n        maxAge: 0,\n      });\n      addToCookies(cookieValue, res);\n    },\n  };\n}\n\nfunction addToCookies(cookieValue: string, res: ServerResponse) {\n  let existingSetCookie =\n    (res.getHeader(\"set-cookie\") as string[] | string) ?? [];\n  if (typeof existingSetCookie === \"string\") {\n    existingSetCookie = [existingSetCookie];\n  }\n  res.setHeader(\"set-cookie\", [...existingSetCookie, cookieValue]);\n}\n\nfunction computeCookieMaxAge(ttl: number) {\n  // The next line makes sure browser will expire cookies before seals are considered expired by the server.\n  // It also allows for clock difference of 60 seconds maximum between server and clients.\n  // It also makes sure to expire the cookie immediately when value is 0\n  return ttl - timestampSkewSec;\n}\n\nasync function getOrCreateStore({\n  sealed,\n  password,\n  ttl,\n}: {\n  sealed: string;\n  password: password;\n  ttl: number;\n}) {\n  try {\n    return await ironStore({\n      sealed,\n      password,\n      ttl,\n    });\n  } catch (error) {\n    if (error instanceof Error) {\n      if (\n        error.message === \"Expired seal\" ||\n        error.message === \"Bad hmac value\" ||\n        error.message === \"Cannot find password: \"\n      ) {\n        // if seal expired or\n        // if seal is not valid (encrypted using a different password, when passwords are updated) or\n        // if we can't find back the password in the seal\n        // then we just start a new session over\n        return await ironStore({ password, ttl });\n      }\n    }\n\n    throw error;\n  }\n}\n", "import type {\n  GetServerSidePropsContext,\n  GetServerSidePropsResult,\n  NextApiRequest,\n  NextApiResponse,\n} from \"next\";\nimport type { IronSession, IronSessionOptions } from \"..\";\nimport { getIronSession } from \"..\";\n\nexport interface NextApiRequestWithIronSession extends NextApiRequest {\n  session: IronSession;\n}\n\nexport declare type NextApiHandlerWithIronSession<T = unknown> = (\n  req: NextApiRequestWithIronSession,\n  res: NextApiResponse<T>,\n) => void | Promise<void>;\n\ninterface NextGetSeverSideContextWithIronSession\n  extends GetServerSidePropsContext {\n  req: NextApiRequestWithIronSession;\n}\n\nexport declare type NextGetServerSidePropsHandlerWithIronSession<P> = (\n  context: NextGetSeverSideContextWithIronSession,\n) => Promise<GetServerSidePropsResult<P>>;\n\nexport function withIronSessionApiRoute(\n  handler: NextApiHandlerWithIronSession,\n  options: IronSessionOptions,\n): NextApiHandlerWithIronSession {\n  return async function nextApiHandlerWrappedWithIronSession(req, res) {\n    req.session = await getIronSession(req, res, options);\n    return handler(req, res);\n  };\n}\n\nexport function withIronSessionSsr<P>(\n  handler: NextGetServerSidePropsHandlerWithIronSession<P>,\n  options: IronSessionOptions,\n): NextGetServerSidePropsHandlerWithIronSession<P> {\n  return async function nextGetServerSidePropsHandlerWrappedWithIronSession(\n    context: NextGetSeverSideContextWithIronSession,\n  ) {\n    context.req.session = await getIronSession(\n      context.req,\n      context.res,\n      options,\n    );\n    return handler(context);\n  };\n}\n"],
-  "mappings": "6aAAA,0BACA,sBAKA,GAAM,GAAmB,GAInB,EAGF,CACF,IAAK,GAAK,GAAK,KACf,cAAe,CACb,SAAU,GACV,OAAQ,GACR,SAAU,MACV,KAAM,MAmBV,iBAGE,EAAkB,EAAmB,EAAiC,CAzCxE,QA0CE,GACE,CAAC,GACD,CAAC,GACD,CAAC,GACD,CAAC,EAAY,YACb,CAAC,EAAY,SAEb,KAAM,IAAI,OACR,4LAIJ,GAAM,GAAoB,MAAM,QAAQ,EAAY,UAChD,EAAY,SACZ,CAAC,CAAE,GAAI,EAAG,SAAU,EAAY,WAEpC,EAAkB,QAAQ,CAAC,CAAE,cAAe,CAC1C,GAAI,EAAS,OAAS,GACpB,KAAM,IAAI,OACR,4EAKN,GAAM,GAAwC,SACzC,GACA,GAFyC,CAG5C,cAAe,OACV,EAAe,eACd,EAAY,eAAiB,MAIrC,AAAI,EAAQ,MAAQ,GAKlB,GAAQ,IAAM,YAGhB,EAAQ,cAAc,OAAS,EAC7B,QAAY,gBAAZ,cAA2B,SAA3B,OAAqC,EAAQ,KAG/C,GAAM,GAAQ,KAAM,GAAiB,CACnC,OAAQ,EAAO,MAAM,EAAI,QAAQ,QAAU,IAAI,EAAQ,YACvD,SAAU,EACV,IAAK,EAAQ,IAAM,MAGrB,MAAO,CACL,IAAK,EAAM,IACX,IAAK,EAAM,IACX,MAAO,EAAM,WACP,OAAO,CACX,GAAM,GAAO,KAAM,GAAM,OACnB,EAAc,EAAO,UACzB,EAAQ,WACR,EACA,EAAQ,eAGV,GAAI,EAAY,OAAS,KACvB,KAAM,IAAI,OACR,0CAA0C,EAAY,6DAI1D,SAAa,EAAa,GACnB,GAET,SAAU,CACR,EAAM,QACN,GAAM,GAAc,EAAO,UAAU,EAAQ,WAAY,GAAI,OACxD,EAAQ,eADgD,CAE3D,OAAQ,KAEV,EAAa,EAAa,KAKhC,WAAsB,EAAqB,EAAqB,CA7HhE,MA8HE,GAAI,GACD,KAAI,UAAU,gBAAd,OAAqD,GACxD,AAAI,MAAO,IAAsB,UAC/B,GAAoB,CAAC,IAEvB,EAAI,UAAU,aAAc,CAAC,GAAG,EAAmB,IAGrD,WAA6B,EAAa,CAIxC,MAAO,GAAM,EAGf,iBAAgC,CAC9B,SACA,WACA,OAKC,CACD,GAAI,CACF,MAAO,MAAM,GAAU,CACrB,SACA,WACA,cAEK,EAAP,CACA,GAAI,YAAiB,QAEjB,GAAM,UAAY,gBAClB,EAAM,UAAY,kBAClB,EAAM,UAAY,0BAMlB,MAAO,MAAM,GAAU,CAAE,WAAU,QAIvC,KAAM,IChJH,WACL,EACA,EAC+B,CAC/B,MAAO,gBAAoD,EAAK,EAAK,CACnE,SAAI,QAAU,KAAM,GAAe,EAAK,EAAK,GACtC,EAAQ,EAAK,IAIjB,WACL,EACA,EACiD,CACjD,MAAO,gBACL,EACA,CACA,SAAQ,IAAI,QAAU,KAAM,GAC1B,EAAQ,IACR,EAAQ,IACR,GAEK,EAAQ",
-  "names": []
-}