peta-auth 0.1.2 → 0.1.3

package/README.md

@@ -157,11 +157,21 @@ Without a generic parameter, session data defaults to `Record<string, unknown>`.
 
 ### `requireSession()` guard
 
-Returns 401 if the session has no user data. Works per-framework:
+Returns 401 if the session has no user data. Optionally checks a specific session key:
 
-- **Hono**: `app.use('/protected/*', requireSession())` — middleware, path-patterned
+```ts
+// Guard on any session data
+app.use('/api/*', requireSession())
+
+// Guard on a specific key (e.g. session.userId must be truthy)
+app.use('/admin/*', requireSession('userId'))
+```
+
+Works per-framework:
+
+- **Hono**: `app.use('/protected/*', requireSession())` — path-patterned middleware
 - **Elysia**: `app.use(requireSession())` — guards all routes defined after it
-- **Nuxt**: `requireSession(event, session)` — throws `createError({ statusCode: 401 })`
+- **Nuxt**: `requireSession(event, session)` or `requireSession(event, session, 'userId')` — throws `createError({ statusCode: 401 })`
 
 ### Session object
 
@@ -354,7 +364,7 @@ Session data is serialized, encrypted with AES-256-CBC, integrity-protected with
 ## Scripts
 
 ```bash
-bun test            # 65 tests across 12 files
+bun test            # 74 tests across 12 files
 bun run build       # tsdown → dist/ (21 files, 30 kB)
 bun run prepublish  # build + publish
 ```

package/dist/elysia.d.mts

@@ -34,35 +34,7 @@ declare function session<T extends Record<string, unknown> = Record<string, unkn
   standaloneSchema: {};
   response: {};
 }>;
-declare function requireSession(): (app: Elysia) => Elysia<"", {
-  decorator: {};
-  store: {};
-  derive: {};
-  resolve: {};
-}, {
-  typebox: {};
-  error: {};
-}, {
-  schema: {};
-  standaloneSchema: {};
-  macro: {};
-  macroFn: {};
-  parser: {};
-  response: {};
-}, {}, {
-  derive: {};
-  resolve: {};
-  schema: {};
-  standaloneSchema: {};
-  response: {};
-}, {
-  derive: {};
-  resolve: {};
-  schema: {};
-  standaloneSchema: {};
-  response: {
-    200: Response;
-  };
-}>;
+declare function requireSession(): (app: Elysia) => Elysia;
+declare function requireSession<K extends string>(key: K): (app: Elysia) => Elysia;
 //#endregion
 export { requireSession, session };

package/dist/elysia.mjs

@@ -13,10 +13,10 @@ function session(options) {
 		}, options) };
 	});
 }
-function requireSession() {
+function requireSession(key) {
 	return (app) => app.onBeforeHandle((context) => {
 		const session = context.session;
-		if (!Object.keys(session).some((k) => k !== "save" && k !== "destroy" && k !== "updateConfig")) return new Response(JSON.stringify({ error: "unauthorized" }), {
+		if (!(key ? !!session[key] : Object.keys(session).some((k) => k !== "save" && k !== "destroy" && k !== "updateConfig"))) return new Response(JSON.stringify({ error: "unauthorized" }), {
 			status: 401,
 			headers: { "Content-Type": "application/json" }
 		});

package/dist/hono.d.mts

@@ -8,5 +8,6 @@ declare function session<T extends Record<string, unknown> = Record<string, unkn
   };
 }>;
 declare function requireSession(): MiddlewareHandler;
+declare function requireSession<K extends string>(key: K): MiddlewareHandler;
 //#endregion
 export { requireSession, session };

package/dist/hono.mjs

@@ -11,10 +11,10 @@ function session(options) {
 		await next();
 	});
 }
-function requireSession() {
+function requireSession(key) {
 	return createMiddleware(async (c, next) => {
 		const s = c.var.session;
-		if (!Object.keys(s).some((k) => k !== "save" && k !== "destroy" && k !== "updateConfig")) return c.json({ error: "unauthorized" }, 401);
+		if (!(key ? !!s[key] : Object.keys(s).some((k) => k !== "save" && k !== "destroy" && k !== "updateConfig"))) return c.json({ error: "unauthorized" }, 401);
 		await next();
 	});
 }

package/dist/nuxt.d.mts

@@ -4,5 +4,6 @@ import { H3Event } from "h3";
 //#region src/nuxt.d.ts
 declare function useSession<T extends Record<string, unknown> = Record<string, unknown>>(event: H3Event, options: SessionOptions): Promise<T & IronSession>;
 declare function requireSession(_event: H3Event, session: IronSession): void;
+declare function requireSession<K extends string>(_event: H3Event, session: IronSession, key: K): void;
 //#endregion
 export { requireSession, useSession };

package/dist/nuxt.mjs

@@ -14,8 +14,8 @@ function useSession(event, options) {
 		cookieOptions: options?.cookieOptions
 	});
 }
-function requireSession(_event, session) {
-	if (!Object.keys(session).some((k) => k !== "save" && k !== "destroy" && k !== "updateConfig")) throw createError({
+function requireSession(_event, session, key) {
+	if (!(key ? !!session[key] : Object.keys(session).some((k) => k !== "save" && k !== "destroy" && k !== "updateConfig"))) throw createError({
 		statusCode: 401,
 		statusMessage: "unauthorized"
 	});

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "peta-auth",
-  "version": "0.1.2",
+  "version": "0.1.3",
   "description": "Encrypted cookie sessions for Bun — Hono, ElysiaJS & Nuxt adapters",
   "type": "module",
   "module": "./dist/index.mjs",