raffel 0.1.2

package/dist/server/shared-context.js

@@ -0,0 +1,258 @@
+/**
+ * Cross-Protocol Context Sharing
+ *
+ * Enables sharing authentication and session context across different
+ * protocols (HTTP, WebSocket, Streams). This allows users authenticated
+ * via HTTP to use WebSocket/SSE without re-authenticating.
+ *
+ * @example
+ * import { createServer } from 'raffel'
+ * import { createSharedContextFactory } from 'raffel/server/shared-context'
+ * import { createSessionTracker } from 'raffel/http/session'
+ *
+ * const sessions = createSessionTracker({ maxAge: 3600000 })
+ *
+ * const server = createServer({
+ *   websocket: {
+ *     contextFactory: createSharedContextFactory({
+ *       sessions,
+ *       cookieName: 'session_id',
+ *     }),
+ *   },
+ * })
+ */
+// ─────────────────────────────────────────────────────────────────────────────
+// Helpers
+// ─────────────────────────────────────────────────────────────────────────────
+/**
+ * Parse cookies from a cookie header string
+ */
+function parseCookies(cookieHeader) {
+    const cookies = {};
+    if (!cookieHeader)
+        return cookies;
+    for (const pair of cookieHeader.split(';')) {
+        const [key, ...valueParts] = pair.trim().split('=');
+        if (key) {
+            cookies[key] = valueParts.join('='); // Handle values with '='
+        }
+    }
+    return cookies;
+}
+/**
+ * Parse query params from URL
+ */
+function parseQueryParams(url) {
+    const params = {};
+    if (!url)
+        return params;
+    const queryStart = url.indexOf('?');
+    if (queryStart === -1)
+        return params;
+    const searchParams = new URLSearchParams(url.slice(queryStart + 1));
+    for (const [key, value] of searchParams) {
+        params[key] = value;
+    }
+    return params;
+}
+/**
+ * Extract bearer token from Authorization header
+ */
+function extractBearerToken(authHeader) {
+    if (!authHeader)
+        return undefined;
+    if (!authHeader.startsWith('Bearer '))
+        return undefined;
+    return authHeader.slice(7);
+}
+/**
+ * Default mapper from Session to AuthContext
+ */
+function defaultSessionToAuth(session) {
+    return {
+        authenticated: true,
+        principal: session.userId?.toString() ?? session.id,
+        claims: {
+            ...session.data,
+            sessionId: session.id,
+            createdAt: session.createdAt,
+        },
+    };
+}
+// ─────────────────────────────────────────────────────────────────────────────
+// Main Factory
+// ─────────────────────────────────────────────────────────────────────────────
+/**
+ * Create a context factory for WebSocket/Streams that shares sessions with HTTP
+ *
+ * This factory extracts the session ID from:
+ * 1. Cookies (from the WebSocket upgrade request)
+ * 2. Query params (for EventSource that can't set cookies)
+ * 3. Authorization header (for bearer tokens)
+ *
+ * @example
+ * const contextFactory = createSharedContextFactory({
+ *   sessions,
+ *   cookieName: 'session_id',
+ * })
+ *
+ * // Use with WebSocket
+ * const server = createServer({
+ *   websocket: { contextFactory },
+ * })
+ *
+ * // Now WebSocket handlers can access ctx.auth
+ * server.ws
+ *   .onSubscribe(async (channel, ctx) => {
+ *     if (!ctx.auth?.authenticated) {
+ *       throw new Error('Must be logged in')
+ *     }
+ *   })
+ *   .channel('chat', { type: 'private' })
+ */
+export function createSharedContextFactory(options) {
+    const { sessions, cookieName = 'session_id', queryParamName = 'sessionId', checkAuthHeader = true, mapSessionToAuth = defaultSessionToAuth, onContextCreated, } = options;
+    return async (_ws, req) => {
+        const ctx = {
+            auth: undefined,
+        };
+        // Try to find session ID from various sources
+        let sessionId;
+        // 1. Check cookies first (most common for browsers)
+        const cookies = parseCookies(req.headers.cookie);
+        sessionId = cookies[cookieName];
+        // 2. Check query params (for EventSource)
+        if (!sessionId && queryParamName !== false) {
+            const queryParams = parseQueryParams(req.url);
+            sessionId = queryParams[queryParamName];
+        }
+        // 3. Check Authorization header for bearer token
+        if (!sessionId && checkAuthHeader) {
+            const bearerToken = extractBearerToken(req.headers.authorization);
+            if (bearerToken) {
+                // Bearer token might be a session ID or JWT
+                // Try to look it up as session ID first
+                sessionId = bearerToken;
+            }
+        }
+        // Load session if we found an ID
+        if (sessionId) {
+            try {
+                const session = await sessions.get(sessionId);
+                if (session) {
+                    // Session found - populate auth context
+                    ctx.auth = mapSessionToAuth(session);
+                    // Touch session to extend TTL
+                    await sessions.touch(sessionId);
+                }
+            }
+            catch (error) {
+                // Session lookup failed - continue without auth
+                console.error('Failed to load session:', error);
+            }
+        }
+        // Callback for logging/metrics
+        onContextCreated?.(ctx, req);
+        return ctx;
+    };
+}
+/**
+ * Create a simple auth context factory for protocols that don't need session storage
+ * Just extracts auth info from the request without persistence
+ *
+ * @example
+ * const contextFactory = createAuthContextFactory({
+ *   verifyToken: async (token) => {
+ *     // Verify JWT and return user info
+ *     const payload = await verifyJWT(token)
+ *     return { authenticated: true, principal: payload.sub }
+ *   },
+ * })
+ */
+export function createAuthContextFactory(options) {
+    const { verifyToken, verifyApiKey, apiKeyHeader = 'x-api-key', apiKeyQueryParam = 'apiKey', } = options;
+    return async (_ws, req) => {
+        const ctx = {
+            auth: undefined,
+        };
+        // Try bearer token first
+        if (verifyToken) {
+            const bearerToken = extractBearerToken(req.headers.authorization);
+            if (bearerToken) {
+                const auth = await verifyToken(bearerToken);
+                if (auth) {
+                    ctx.auth = auth;
+                    return ctx;
+                }
+            }
+        }
+        // Try API key
+        if (verifyApiKey) {
+            let apiKey = req.headers[apiKeyHeader];
+            // Check query param if not in header
+            if (!apiKey && apiKeyQueryParam !== false) {
+                const queryParams = parseQueryParams(req.url);
+                apiKey = queryParams[apiKeyQueryParam];
+            }
+            if (apiKey) {
+                const auth = await verifyApiKey(apiKey);
+                if (auth) {
+                    ctx.auth = auth;
+                    return ctx;
+                }
+            }
+        }
+        return ctx;
+    };
+}
+/**
+ * Merge multiple context factories into one
+ * Each factory is tried in order; first non-empty auth wins
+ *
+ * @example
+ * const contextFactory = mergeContextFactories([
+ *   createSharedContextFactory({ sessions }),
+ *   createAuthContextFactory({ verifyToken }),
+ * ])
+ */
+export function mergeContextFactories(factories) {
+    return async (ws, req) => {
+        const mergedCtx = {
+            auth: undefined,
+        };
+        for (const factory of factories) {
+            const ctx = await factory(ws, req);
+            // Merge auth (first authenticated wins)
+            if (!mergedCtx.auth?.authenticated && ctx.auth?.authenticated) {
+                mergedCtx.auth = ctx.auth;
+            }
+        }
+        return mergedCtx;
+    };
+}
+// ─────────────────────────────────────────────────────────────────────────────
+// Extension Symbols (for storing extra data in context.extensions)
+// ─────────────────────────────────────────────────────────────────────────────
+/**
+ * Symbol for storing session in context.extensions
+ * Usage: ctx.extensions.get(SESSION_SYMBOL)
+ */
+export const SESSION_SYMBOL = Symbol.for('raffel.session');
+/**
+ * Symbol for storing original HTTP request in context.extensions
+ * Usage: ctx.extensions.get(HTTP_REQUEST_SYMBOL)
+ */
+export const HTTP_REQUEST_SYMBOL = Symbol.for('raffel.httpRequest');
+/**
+ * Helper to get session from context extensions
+ */
+export function getSessionFromContext(ctx) {
+    return ctx.extensions.get(SESSION_SYMBOL);
+}
+/**
+ * Helper to get original HTTP request from context extensions
+ */
+export function getHttpRequestFromContext(ctx) {
+    return ctx.extensions.get(HTTP_REQUEST_SYMBOL);
+}
+//# sourceMappingURL=shared-context.js.map

package/dist/server/shared-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shared-context.js","sourceRoot":"","sources":["../../src/server/shared-context.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAgDH,gFAAgF;AAChF,UAAU;AACV,gFAAgF;AAEhF;;GAEG;AACH,SAAS,YAAY,CAAC,YAAgC;IACpD,MAAM,OAAO,GAA2B,EAAE,CAAA;IAC1C,IAAI,CAAC,YAAY;QAAE,OAAO,OAAO,CAAA;IAEjC,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3C,MAAM,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QACnD,IAAI,GAAG,EAAE,CAAC;YACR,OAAO,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA,CAAC,yBAAyB;QAC/D,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAA;AAChB,CAAC;AAED;;GAEG;AACH,SAAS,gBAAgB,CAAC,GAAuB;IAC/C,MAAM,MAAM,GAA2B,EAAE,CAAA;IACzC,IAAI,CAAC,GAAG;QAAE,OAAO,MAAM,CAAA;IAEvB,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IACnC,IAAI,UAAU,KAAK,CAAC,CAAC;QAAE,OAAO,MAAM,CAAA;IAEpC,MAAM,YAAY,GAAG,IAAI,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,CAAA;IACnE,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,YAAY,EAAE,CAAC;QACxC,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;IACrB,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC;AAED;;GAEG;AACH,SAAS,kBAAkB,CAAC,UAA8B;IACxD,IAAI,CAAC,UAAU;QAAE,OAAO,SAAS,CAAA;IACjC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAA;IACvD,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;AAC5B,CAAC;AAED;;GAEG;AACH,SAAS,oBAAoB,CAAC,OAAgB;IAC5C,OAAO;QACL,aAAa,EAAE,IAAI;QACnB,SAAS,EAAE,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,OAAO,CAAC,EAAE;QACnD,MAAM,EAAE;YACN,GAAG,OAAO,CAAC,IAAI;YACf,SAAS,EAAE,OAAO,CAAC,EAAE;YACrB,SAAS,EAAE,OAAO,CAAC,SAAS;SAC7B;KACF,CAAA;AACH,CAAC;AAED,gFAAgF;AAChF,eAAe;AACf,gFAAgF;AAEhF;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,UAAU,0BAA0B,CACxC,OAAoC;IAEpC,MAAM,EACJ,QAAQ,EACR,UAAU,GAAG,YAAY,EACzB,cAAc,GAAG,WAAW,EAC5B,eAAe,GAAG,IAAI,EACtB,gBAAgB,GAAG,oBAAoB,EACvC,gBAAgB,GACjB,GAAG,OAAO,CAAA;IAEX,OAAO,KAAK,EAAE,GAAY,EAAE,GAAoB,EAA+D,EAAE;QAC/G,MAAM,GAAG,GAAuD;YAC9D,IAAI,EAAE,SAAS;SAChB,CAAA;QAED,8CAA8C;QAC9C,IAAI,SAA6B,CAAA;QAEjC,oDAAoD;QACpD,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;QAChD,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,CAAA;QAE/B,0CAA0C;QAC1C,IAAI,CAAC,SAAS,IAAI,cAAc,KAAK,KAAK,EAAE,CAAC;YAC3C,MAAM,WAAW,GAAG,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;YAC7C,SAAS,GAAG,WAAW,CAAC,cAAc,CAAC,CAAA;QACzC,CAAC;QAED,iDAAiD;QACjD,IAAI,CAAC,SAAS,IAAI,eAAe,EAAE,CAAC;YAClC,MAAM,WAAW,GAAG,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAA;YACjE,IAAI,WAAW,EAAE,CAAC;gBAChB,4CAA4C;gBAC5C,wCAAwC;gBACxC,SAAS,GAAG,WAAW,CAAA;YACzB,CAAC;QACH,CAAC;QAED,iCAAiC;QACjC,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;gBAC7C,IAAI,OAAO,EAAE,CAAC;oBACZ,wCAAwC;oBACxC,GAAG,CAAC,IAAI,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAA;oBAEpC,8BAA8B;oBAC9B,MAAM,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;gBACjC,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,gDAAgD;gBAChD,OAAO,CAAC,KAAK,CAAC,yBAAyB,EAAE,KAAK,CAAC,CAAA;YACjD,CAAC;QACH,CAAC;QAED,+BAA+B;QAC/B,gBAAgB,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;QAE5B,OAAO,GAAG,CAAA;IACZ,CAAC,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,wBAAwB,CAAC,OAaxC;IACC,MAAM,EACJ,WAAW,EACX,YAAY,EACZ,YAAY,GAAG,WAAW,EAC1B,gBAAgB,GAAG,QAAQ,GAC5B,GAAG,OAAO,CAAA;IAEX,OAAO,KAAK,EAAE,GAAY,EAAE,GAAoB,EAA+D,EAAE;QAC/G,MAAM,GAAG,GAAuD;YAC9D,IAAI,EAAE,SAAS;SAChB,CAAA;QAED,yBAAyB;QACzB,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,WAAW,GAAG,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAA;YACjE,IAAI,WAAW,EAAE,CAAC;gBAChB,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,WAAW,CAAC,CAAA;gBAC3C,IAAI,IAAI,EAAE,CAAC;oBACT,GAAG,CAAC,IAAI,GAAG,IAAI,CAAA;oBACf,OAAO,GAAG,CAAA;gBACZ,CAAC;YACH,CAAC;QACH,CAAC;QAED,cAAc;QACd,IAAI,YAAY,EAAE,CAAC;YACjB,IAAI,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,YAAY,CAAuB,CAAA;YAE5D,qCAAqC;YACrC,IAAI,CAAC,MAAM,IAAI,gBAAgB,KAAK,KAAK,EAAE,CAAC;gBAC1C,MAAM,WAAW,GAAG,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;gBAC7C,MAAM,GAAG,WAAW,CAAC,gBAAgB,CAAC,CAAA;YACxC,CAAC;YAED,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC,CAAA;gBACvC,IAAI,IAAI,EAAE,CAAC;oBACT,GAAG,CAAC,IAAI,GAAG,IAAI,CAAA;oBACf,OAAO,GAAG,CAAA;gBACZ,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,GAAG,CAAA;IACZ,CAAC,CAAA;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,qBAAqB,CACnC,SAAmC;IAEnC,OAAO,KAAK,EAAE,EAAW,EAAE,GAAoB,EAA+D,EAAE;QAC9G,MAAM,SAAS,GAAuD;YACpE,IAAI,EAAE,SAAS;SAChB,CAAA;QAED,KAAK,MAAM,OAAO,IAAI,SAAS,EAAE,CAAC;YAChC,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,EAAE,EAAE,GAAG,CAAC,CAAA;YAElC,wCAAwC;YACxC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,aAAa,IAAI,GAAG,CAAC,IAAI,EAAE,aAAa,EAAE,CAAC;gBAC9D,SAAS,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,CAAA;YAC3B,CAAC;QACH,CAAC;QAED,OAAO,SAAS,CAAA;IAClB,CAAC,CAAA;AACH,CAAC;AAED,gFAAgF;AAChF,mEAAmE;AACnE,gFAAgF;AAEhF;;;GAGG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAA;AAE1D;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAA;AAEnE;;GAEG;AACH,MAAM,UAAU,qBAAqB,CAAC,GAAY;IAChD,OAAO,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,cAAc,CAAwB,CAAA;AAClE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,yBAAyB,CAAC,GAAY;IACpD,OAAO,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,mBAAmB,CAAgC,CAAA;AAC/E,CAAC"}