najm-auth 1.1.43 → 1.1.44

package/dist/index.d.ts

@@ -1199,6 +1199,13 @@ declare class AuthResolver {
     private container;
     private app;
     private log;
+    /**
+     * Missing/stale/invalid credentials (4xx) are an expected client state on
+     * these resolve paths — e.g. a refresh cookie that outlived its DB row
+     * after a reseed or rotation. Log those at debug; reserve warn for
+     * unexpected (5xx/non-HTTP) failures.
+     */
+    private logResolveMiss;
     resolve(token: string): Promise<{
         user: any;
         role?: string;

package/dist/index.js

@@ -2739,6 +2739,20 @@ var AuthResolver = class AuthResolver2 {
   container;
   app;
   log;
+  /**
+   * Missing/stale/invalid credentials (4xx) are an expected client state on
+   * these resolve paths — e.g. a refresh cookie that outlived its DB row
+   * after a reseed or rotation. Log those at debug; reserve warn for
+   * unexpected (5xx/non-HTTP) failures.
+   */
+  logResolveMiss(message, error) {
+    const status = error?.status;
+    if (typeof status === "number" && status < 500) {
+      this.log.debug(message, error);
+    } else {
+      this.log.warn(message, error);
+    }
+  }
   async resolve(token) {
     if (!token)
       return false;
@@ -2754,7 +2768,7 @@ var AuthResolver = class AuthResolver2 {
         permissions: user.permissions
       };
     } catch (error) {
-      this.log.warn("Token verification failed", error);
+      this.logResolveMiss("Token verification failed", error);
       return false;
     }
   }
@@ -2770,7 +2784,7 @@ var AuthResolver = class AuthResolver2 {
         permissions: session.permissions
       };
     } catch (error) {
-      this.log.warn("Session cookie verification failed", error);
+      this.logResolveMiss("Session cookie verification failed", error);
       return false;
     }
   }
@@ -2794,7 +2808,7 @@ var AuthResolver = class AuthResolver2 {
         permissions: user.permissions
       };
     } catch (error) {
-      this.log.warn("Cookie verification failed", error);
+      this.logResolveMiss("Cookie verification failed", error);
       return false;
     }
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "najm-auth",
-  "version": "1.1.43",
+  "version": "1.1.44",
   "description": "Authentication and authorization library for najm framework",
   "type": "module",
   "files": [