kavachos 0.2.0 → 0.2.1

package/dist/index.js

@@ -1912,8 +1912,16 @@ function getCookie(request, name) {
   const match = header.match(new RegExp(`(?:^|;\\s*)${name}=([^;]*)`));
   return match?.[1] ? decodeURIComponent(match[1]) : null;
 }
-function buildSetCookie(name, value, maxAge, path = "/") {
-  return `${name}=${encodeURIComponent(value)}; HttpOnly; Secure; SameSite=Lax; Path=${path}; Max-Age=${maxAge}`;
+function buildSetCookie(name, value, maxAge, path = "/", secure = true) {
+  const parts = [
+    `${name}=${encodeURIComponent(value)}`,
+    "HttpOnly",
+    "SameSite=Lax",
+    `Path=${path}`,
+    `Max-Age=${maxAge}`
+  ];
+  if (secure) parts.splice(1, 0, "Secure");
+  return parts.join("; ");
 }
 function buildClearCookie(name, path = "/") {
   return `${name}=; HttpOnly; Secure; SameSite=Lax; Path=${path}; Max-Age=0`;
@@ -5764,7 +5772,8 @@ function oauth(config) {
             if (userId !== "__pending__") {
               const { session, token } = await sessionManager.create(userId);
               const maxAge = Math.floor((session.expiresAt.getTime() - Date.now()) / 1e3);
-              const cookie = buildSetCookie("kavach_session", token, maxAge);
+              const isSecure = baseUrl.startsWith("https://");
+              const cookie = buildSetCookie("kavach_session", token, maxAge, "/", isSecure);
               const userInfo = encodeURIComponent(JSON.stringify({ id: userId, email }));
               const callbackUrl = `${baseUrl}/?auth_user=${userInfo}`;
               return new Response(null, {
@@ -6068,13 +6077,14 @@ function createGithubProvider(config) {
     });
     return `${AUTHORIZATION_URL3}?${params.toString()}`;
   }
-  async function exchangeCode(code2, _codeVerifier, redirectUri) {
+  async function exchangeCode(code2, codeVerifier, redirectUri) {
     const effectiveRedirectUri = config.redirectUri ?? redirectUri;
     const body = new URLSearchParams({
       client_id: config.clientId,
       client_secret: config.clientSecret,
       code: code2,
-      redirect_uri: effectiveRedirectUri
+      redirect_uri: effectiveRedirectUri,
+      code_verifier: codeVerifier
     });
     const response = await fetch(TOKEN_URL3, {
       method: "POST",
@@ -6370,14 +6380,15 @@ function createLinkedInProvider(config) {
     });
     return `${AUTHORIZATION_URL6}?${params.toString()}`;
   }
-  async function exchangeCode(code2, _codeVerifier, redirectUri) {
+  async function exchangeCode(code2, codeVerifier, redirectUri) {
     const effectiveRedirectUri = config.redirectUri ?? redirectUri;
     const body = new URLSearchParams({
       grant_type: "authorization_code",
       client_id: config.clientId,
       client_secret: config.clientSecret,
       code: code2,
-      redirect_uri: effectiveRedirectUri
+      redirect_uri: effectiveRedirectUri,
+      code_verifier: codeVerifier
     });
     const response = await fetch(TOKEN_URL6, {
       method: "POST",
@@ -6561,14 +6572,15 @@ function createSlackProvider(config) {
     });
     return `${AUTHORIZATION_URL8}?${params.toString()}`;
   }
-  async function exchangeCode(code2, _codeVerifier, redirectUri) {
+  async function exchangeCode(code2, codeVerifier, redirectUri) {
     const effectiveRedirectUri = config.redirectUri ?? redirectUri;
     const body = new URLSearchParams({
       grant_type: "authorization_code",
       client_id: config.clientId,
       client_secret: config.clientSecret,
       code: code2,
-      redirect_uri: effectiveRedirectUri
+      redirect_uri: effectiveRedirectUri,
+      code_verifier: codeVerifier
     });
     const response = await fetch(TOKEN_URL8, {
       method: "POST",
@@ -10680,7 +10692,13 @@ function passkey(config) {
                   status: 200,
                   headers: {
                     "Content-Type": "application/json",
-                    "Set-Cookie": buildSetCookie("kavach_session", token, maxAge)
+                    "Set-Cookie": buildSetCookie(
+                      "kavach_session",
+                      token,
+                      maxAge,
+                      "/",
+                      (ctx.config.baseUrl ?? "").startsWith("https://")
+                    )
                   }
                 }
               );