sst 3.0.0 → 3.0.1-2

package/node/api/index.js

@@ -1,179 +0,0 @@
-import { createProxy } from "../util/index.js";
-import { useEvent, Handler, useContextType, } from "../../context/handler.js";
-import { memo } from "../../context/context2.js";
-export const Api = /* @__PURE__ */ createProxy("Api");
-export const AppSyncApi = 
-/* @__PURE__ */ createProxy("AppSyncApi");
-export const ApiGatewayV1Api = 
-/* @__PURE__ */ createProxy("ApiGatewayV1Api");
-export class Response {
-    result;
-    constructor(result) {
-        this.result = result;
-    }
-}
-/**
- * Create a new api handler that can be used to create an authenticated session.
- *
- * @example
- * ```ts
- * export const handler = ApiHandler({
- * })
- * ```
- */
-export function ApiHandler(cb) {
-    return Handler("api", async (evt, ctx) => {
-        let result;
-        try {
-            result = await cb(evt, ctx);
-        }
-        catch (e) {
-            if (e instanceof Response) {
-                result = e.result;
-            }
-            else
-                throw e;
-        }
-        const serialized = useResponse().serialize(result || {});
-        return serialized;
-    });
-}
-export const useCookies = /* @__PURE__ */ memo(() => {
-    const evt = useEvent("api");
-    const cookies = evt.cookies || [];
-    return Object.fromEntries(cookies.map((c) => c.split("=")).map(([k, v]) => [k, decodeURIComponent(v)]));
-});
-export function useCookie(name) {
-    const cookies = useCookies();
-    return cookies[name];
-}
-export const useBody = /* @__PURE__ */ memo(() => {
-    const type = useContextType();
-    const evt = useEvent(type);
-    if (!evt.body)
-        return;
-    const body = evt.isBase64Encoded
-        ? Buffer.from(evt.body, "base64").toString()
-        : evt.body;
-    return body;
-});
-export const useJsonBody = /* @__PURE__ */ memo(() => {
-    const body = useBody();
-    if (!body)
-        return;
-    return JSON.parse(body);
-});
-export const useFormData = /* @__PURE__ */ memo(() => {
-    const body = useBody();
-    if (!body)
-        return;
-    const params = new URLSearchParams(body);
-    return params;
-});
-export const usePath = /* @__PURE__ */ memo(() => {
-    const evt = useEvent("api");
-    return evt.rawPath.split("/").filter(Boolean);
-});
-export const useResponse = /* @__PURE__ */ memo(() => {
-    const response = {
-        headers: {},
-        cookies: [],
-    };
-    const result = {
-        cookies(values, options) {
-            for (const [key, value] of Object.entries(values)) {
-                result.cookie({
-                    key,
-                    value,
-                    ...options,
-                });
-            }
-            return result;
-        },
-        cookie(input) {
-            input = {
-                secure: true,
-                sameSite: "None",
-                httpOnly: true,
-                ...input,
-            };
-            const value = encodeURIComponent(input.value);
-            const parts = [input.key + "=" + value];
-            if (input.domain)
-                parts.push("Domain=" + input.domain);
-            if (input.path)
-                parts.push("Path=" + input.path);
-            if (input.expires)
-                parts.push("Expires=" + input.expires.toUTCString());
-            if (input.maxAge)
-                parts.push("Max-Age=" + input.maxAge);
-            if (input.httpOnly)
-                parts.push("HttpOnly");
-            if (input.secure)
-                parts.push("Secure");
-            if (input.sameSite)
-                parts.push("SameSite=" + input.sameSite);
-            response.cookies.push(parts.join("; "));
-            return result;
-        },
-        status(code) {
-            response.statusCode = code;
-            return result;
-        },
-        header(key, value) {
-            response.headers[key] = value;
-            return result;
-        },
-        serialize(input) {
-            return {
-                ...response,
-                ...input,
-                cookies: [...(input.cookies || []), ...response.cookies],
-                headers: {
-                    ...response.headers,
-                    ...input.headers,
-                },
-            };
-        },
-    };
-    return result;
-});
-export function useDomainName() {
-    const type = useContextType();
-    const evt = useEvent(type);
-    return evt.requestContext.domainName;
-}
-export function useMethod() {
-    const evt = useEvent("api");
-    return evt.requestContext.http.method;
-}
-export function useHeaders() {
-    const type = useContextType();
-    const evt = useEvent(type);
-    return evt.headers || {};
-}
-export function useHeader(key) {
-    const headers = useHeaders();
-    return headers[key];
-}
-export function useFormValue(name) {
-    const params = useFormData();
-    return params?.get(name);
-}
-export function useQueryParams() {
-    const type = useContextType();
-    const evt = useEvent(type);
-    const query = evt.queryStringParameters || {};
-    return query;
-}
-export function useQueryParam(name) {
-    return useQueryParams()[name];
-}
-export function usePathParams() {
-    const evt = useEvent("api");
-    const path = evt.pathParameters || {};
-    return path;
-}
-export function usePathParam(name) {
-    return usePathParams()[name];
-}

package/node/auth/adapter/adapter.d.ts

@@ -1,3 +0,0 @@
-import { APIGatewayProxyStructuredResultV2 } from "aws-lambda";
-export declare function createAdapter<A extends (config: any) => Adapter>(adapter: A): A;
-export type Adapter = () => Promise<APIGatewayProxyStructuredResultV2>;

package/node/auth/adapter/adapter.js

@@ -1,3 +0,0 @@
-export function createAdapter(adapter) {
-    return adapter;
-}

package/node/auth/adapter/facebook.d.ts

@@ -1,2 +0,0 @@
-import { OauthBasicConfig } from "./oauth.js";
-export declare const FacebookAdapter: (config: OauthBasicConfig) => () => Promise<import("aws-lambda").APIGatewayProxyStructuredResultV2>;

package/node/auth/adapter/facebook.js

@@ -1,26 +0,0 @@
-import { Issuer } from "openid-client";
-import { createAdapter } from "./adapter.js";
-import { OauthAdapter } from "./oauth.js";
-// Facebook's OIDC flow returns "id_token" as uri hash in redirect uri. Hashes
-// are not passed to Lambda event object. It is likely that Facebook only wants
-// to support redirecting to a frontend uri.
-//
-// We are only going to suppor the OAuth flow for now. More details about the flow:
-// https://developers.facebook.com/docs/facebook-login/guides/advanced/oidc-token
-//
-// Also note that Facebook's discover uri does not work for the OAuth flow, as the
-// token_endpoint and userinfo_endpoint are not included in the response.
-// await Issuer.discover("https://www.facebook.com/.well-known/openid-configuration/");
-const issuer = new Issuer({
-    issuer: "https://www.facebook.com",
-    authorization_endpoint: "https://facebook.com/dialog/oauth/",
-    jwks_uri: "https://www.facebook.com/.well-known/oauth/openid/jwks/",
-    token_endpoint: "https://graph.facebook.com/oauth/access_token",
-    userinfo_endpoint: "https://graph.facebook.com/oauth/access_token",
-});
-export const FacebookAdapter = /* @__PURE__ */ createAdapter((config) => {
-    return OauthAdapter({
-        issuer,
-        ...config,
-    });
-});

package/node/auth/adapter/github.d.ts

@@ -1,2 +0,0 @@
-import { OauthBasicConfig } from "./oauth.js";
-export declare const GithubAdapter: (config: OauthBasicConfig) => () => Promise<import("aws-lambda").APIGatewayProxyStructuredResultV2>;

package/node/auth/adapter/github.js

@@ -1,21 +0,0 @@
-import { Issuer } from "openid-client";
-import { createAdapter } from "./adapter.js";
-import { OauthAdapter } from "./oauth.js";
-import { OidcAdapter } from "./oidc.js";
-const issuer = new Issuer({
-    issuer: "https://github.com",
-    authorization_endpoint: "https://github.com/login/oauth/authorize",
-    token_endpoint: "https://github.com/login/oauth/access_token",
-});
-export const GithubAdapter = /* @__PURE__ */ createAdapter((config) => {
-    if (config.clientSecret) {
-        return OauthAdapter({
-            issuer,
-            ...config,
-        });
-    }
-    return OidcAdapter({
-        issuer,
-        ...config,
-    });
-});

package/node/auth/adapter/google.d.ts

@@ -1,9 +0,0 @@
-import { OauthBasicConfig } from "./oauth.js";
-import { OidcBasicConfig } from "./oidc.js";
-type GoogleConfig = (OauthBasicConfig & {
-    mode: "oauth";
-}) | (OidcBasicConfig & {
-    mode: "oidc";
-});
-export declare const GoogleAdapter: (config: GoogleConfig) => () => Promise<import("aws-lambda").APIGatewayProxyStructuredResultV2>;
-export {};

package/node/auth/adapter/google.js

@@ -1,18 +0,0 @@
-import { Issuer } from "openid-client";
-import { createAdapter } from "./adapter.js";
-import { OauthAdapter } from "./oauth.js";
-import { OidcAdapter } from "./oidc.js";
-const issuer = await Issuer.discover("https://accounts.google.com");
-export const GoogleAdapter = /* @__PURE__ */ createAdapter((config) => {
-    if ("clientSecret" in config) {
-        return OauthAdapter({
-            issuer,
-            ...config,
-        });
-    }
-    return OidcAdapter({
-        issuer,
-        scope: "openid email profile",
-        ...config,
-    });
-});

package/node/auth/adapter/link.d.ts

@@ -1,8 +0,0 @@
-import { APIGatewayProxyStructuredResultV2 } from "aws-lambda";
-interface LinkConfig {
-    onLink: (link: string, claims: Record<string, any>) => Promise<APIGatewayProxyStructuredResultV2>;
-    onSuccess: (claims: Record<string, any>) => Promise<APIGatewayProxyStructuredResultV2>;
-    onError: () => Promise<APIGatewayProxyStructuredResultV2>;
-}
-export declare const LinkAdapter: (config: LinkConfig) => () => Promise<APIGatewayProxyStructuredResultV2>;
-export {};

package/node/auth/adapter/link.js

@@ -1,39 +0,0 @@
-import { createSigner, createVerifier } from "fast-jwt";
-import { useDomainName, usePath, useQueryParam, useQueryParams, } from "../../api/index.js";
-import { createAdapter } from "./adapter.js";
-import { getPrivateKey, getPublicKey } from "../auth.js";
-export const LinkAdapter = /* @__PURE__ */ createAdapter((config) => {
-    const signer = createSigner({
-        expiresIn: 1000 * 60 * 10,
-        key: getPrivateKey(),
-        algorithm: "RS512",
-    });
-    return async function () {
-        const [step] = usePath().slice(-1);
-        const callback = "https://" +
-            [useDomainName(), ...usePath().slice(0, -1), "callback"].join("/");
-        if (step === "authorize") {
-            const url = new URL(callback);
-            const claims = useQueryParams();
-            url.searchParams.append("token", signer(claims));
-            return config.onLink(url.toString(), claims);
-        }
-        if (step === "callback") {
-            const token = useQueryParam("token");
-            if (!token)
-                throw new Error("Missing token parameter");
-            try {
-                const verifier = createVerifier({
-                    algorithms: ["RS512"],
-                    key: getPublicKey(),
-                });
-                const jwt = verifier(token);
-                return config.onSuccess(jwt);
-            }
-            catch {
-                return config.onError();
-            }
-        }
-        throw new Error("Invalid auth request");
-    };
-});

package/node/auth/adapter/oauth.d.ts

@@ -1,25 +0,0 @@
-import { APIGatewayProxyStructuredResultV2 } from "aws-lambda";
-import { BaseClient, Issuer, TokenSet } from "openid-client";
-export interface OauthBasicConfig {
-    /**
-     * The clientID provided by the third party oauth service
-     */
-    clientID: string;
-    /**
-     * The clientSecret provided by the third party oauth service
-     */
-    clientSecret: string;
-    /**
-     * Various scopes requested for the access token
-     */
-    scope: string;
-    prompt?: string;
-    /**
-     * onSuccess callback when the oauth flow is successful. Will provide tokenset
-     */
-    onSuccess: (tokenset: TokenSet, client: BaseClient) => Promise<APIGatewayProxyStructuredResultV2>;
-}
-export interface OauthConfig extends OauthBasicConfig {
-    issuer: Issuer;
-}
-export declare const OauthAdapter: (config: OauthConfig) => () => Promise<APIGatewayProxyStructuredResultV2>;

package/node/auth/adapter/oauth.js

@@ -1,52 +0,0 @@
-import { generators } from "openid-client";
-import { useCookie, useDomainName, usePath, useQueryParams, } from "../../api/index.js";
-import { createAdapter } from "./adapter.js";
-export const OauthAdapter = /* @__PURE__ */ createAdapter((config) => {
-    return async function () {
-        const [step] = usePath().slice(-1);
-        const callback = "https://" +
-            [useDomainName(), ...usePath().slice(0, -1), "callback"].join("/");
-        const client = new config.issuer.Client({
-            client_id: config.clientID,
-            client_secret: config.clientSecret,
-            redirect_uris: [callback],
-            response_types: ["code"],
-        });
-        if (step === "authorize") {
-            const code_verifier = generators.codeVerifier();
-            const state = generators.state();
-            const code_challenge = generators.codeChallenge(code_verifier);
-            const url = client.authorizationUrl({
-                scope: config.scope,
-                code_challenge: code_challenge,
-                code_challenge_method: "S256",
-                state,
-                prompt: config.prompt,
-            });
-            const expires = new Date(Date.now() + 1000 * 30).toUTCString();
-            return {
-                statusCode: 302,
-                cookies: [
-                    `auth-code-verifier=${code_verifier}; HttpOnly; expires=${expires}`,
-                    `auth-state=${state}; HttpOnly; expires=${expires}`,
-                ],
-                headers: {
-                    location: url,
-                },
-            };
-        }
-        if (step === "callback") {
-            const params = useQueryParams();
-            const code_verifier = useCookie("auth-code-verifier");
-            const state = useCookie("auth-state");
-            const tokenset = await client[config.issuer.metadata.userinfo_endpoint
-                ? "callback"
-                : "oauthCallback"](callback, params, {
-                code_verifier,
-                state,
-            });
-            return config.onSuccess(tokenset, client);
-        }
-        throw new Error("Invalid auth request");
-    };
-});

package/node/auth/adapter/oidc.d.ts

@@ -1,17 +0,0 @@
-import { APIGatewayProxyStructuredResultV2 } from "aws-lambda";
-import { BaseClient, Issuer, TokenSet } from "openid-client";
-export interface OidcBasicConfig {
-    /**
-     * The clientID provided by the third party oauth service
-     */
-    clientID: string;
-    /**
-     * onSuccess callback when the oauth flow is successful. Will provide tokenset
-     */
-    onSuccess: (claims: TokenSet, client: BaseClient) => Promise<APIGatewayProxyStructuredResultV2>;
-}
-export interface OidcConfig extends OidcBasicConfig {
-    issuer: Issuer;
-    scope: string;
-}
-export declare const OidcAdapter: (config: OidcConfig) => () => Promise<APIGatewayProxyStructuredResultV2>;

package/node/auth/adapter/oidc.js

@@ -1,50 +0,0 @@
-import { generators } from "openid-client";
-import { useCookie, useDomainName, useFormData, usePath, } from "../../api/index.js";
-import { createAdapter } from "./adapter.js";
-export const OidcAdapter = /* @__PURE__ */ createAdapter((config) => {
-    return async function () {
-        const [step] = usePath().slice(-1);
-        const callback = "https://" +
-            [useDomainName(), ...usePath().slice(0, -1), "callback"].join("/");
-        const client = new config.issuer.Client({
-            client_id: config.clientID,
-            redirect_uris: [callback],
-            response_types: ["id_token"],
-        });
-        if (step === "authorize") {
-            const nonce = generators.nonce();
-            const state = generators.state();
-            const url = client.authorizationUrl({
-                scope: config.scope,
-                response_mode: "form_post",
-                nonce,
-                state,
-            });
-            const expires = new Date(Date.now() + 1000 * 30).toUTCString();
-            return {
-                statusCode: 302,
-                cookies: [
-                    `auth-nonce=${nonce}; HttpOnly; expires=${expires}`,
-                    `auth-state=${state}; HttpOnly; expires=${expires}`,
-                ],
-                headers: {
-                    location: url,
-                },
-            };
-        }
-        if (step === "callback") {
-            const form = useFormData();
-            if (!form)
-                throw new Error("Missing body");
-            const params = Object.fromEntries(form.entries());
-            const nonce = useCookie("auth-nonce");
-            const state = useCookie("auth-state");
-            const tokenset = await client.callback(callback, params, {
-                nonce,
-                state,
-            });
-            return config.onSuccess(tokenset, client);
-        }
-        throw new Error("Invalid auth request");
-    };
-});

package/node/auth/adapter/twitch.d.ts

@@ -1,2 +0,0 @@
-import { OidcBasicConfig } from "./oidc.js";
-export declare const TwitchAdapter: (config: OidcBasicConfig) => () => Promise<import("aws-lambda").APIGatewayProxyStructuredResultV2>;

package/node/auth/adapter/twitch.js

@@ -1,11 +0,0 @@
-import { Issuer } from "openid-client";
-import { createAdapter } from "./adapter.js";
-import { OidcAdapter } from "./oidc.js";
-const issuer = await Issuer.discover("https://id.twitch.tv/oauth2");
-export const TwitchAdapter = /* @__PURE__ */ createAdapter((config) => {
-    return OidcAdapter({
-        issuer,
-        scope: "openid",
-        ...config,
-    });
-});

package/node/auth/auth.d.ts

@@ -1,24 +0,0 @@
-import { Adapter } from "./adapter/adapter.js";
-export declare function getPublicKey(): string;
-export declare function getPrivateKey(): string;
-export declare function getPrefix(): string;
-/**
- * Create a new auth handler that can be used to create an authenticated session.
- *
- * @example
- * ```ts
- * export const handler = AuthHandler({
- *   providers: {
- *     google: {
- *       adapter: GoogleAdapter,
- *       clientId: "...",
- *       onSuccess: (claims) => {
- *       }
- *     }
- *   }
- * })
- * ```
- */
-export declare function AuthHandler<Providers extends Record<string, Adapter>>(config: {
-    providers: Providers;
-}): (event: import("aws-lambda").APIGatewayProxyEventV2, context: import("aws-lambda").Context) => Promise<import("aws-lambda").APIGatewayProxyStructuredResultV2>;

package/node/auth/auth.js

@@ -1,74 +0,0 @@
-import { getVariables2 } from "../util/index.js";
-import { Handler } from "../../context/handler.js";
-import { useDomainName, usePath } from "../api/index.js";
-const className = "Auth";
-// Each function can only be attached to one Auth construct, so we can
-// assume there is only one entry in authData.
-const authData = getVariables2(className);
-const authValues = Object.values(authData);
-let prefix;
-let publicKey;
-let privateKey;
-if (authValues.length !== 0) {
-    prefix = authValues[0].prefix;
-    publicKey = authValues[0].publicKey;
-    privateKey = authValues[0].privateKey;
-}
-export function getPublicKey() {
-    if (!publicKey) {
-        throw new Error(`Cannot use ${className}.publicKey. Please make sure it is bound to this function.`);
-    }
-    return publicKey;
-}
-export function getPrivateKey() {
-    if (!privateKey) {
-        throw new Error(`Cannot use ${className}.privateKey. Please make sure it is bound to this function.`);
-    }
-    return privateKey;
-}
-export function getPrefix() {
-    if (!prefix) {
-        throw new Error(`Cannot use ${className}.prefix. Please make sure it is bound to this function.`);
-    }
-    return prefix;
-}
-/**
- * Create a new auth handler that can be used to create an authenticated session.
- *
- * @example
- * ```ts
- * export const handler = AuthHandler({
- *   providers: {
- *     google: {
- *       adapter: GoogleAdapter,
- *       clientId: "...",
- *       onSuccess: (claims) => {
- *       }
- *     }
- *   }
- * })
- * ```
- */
-export function AuthHandler(config) {
-    return Handler("api", async () => {
-        const path = usePath();
-        const prefix = getPrefix().split("/").filter(Boolean).join("/");
-        if (path.join("/") === prefix) {
-            return {
-                statusCode: 200,
-                headers: {
-                    "Content-Type": "application/json",
-                },
-                body: JSON.stringify(Object.fromEntries(Object.keys(config.providers).map((x) => [
-                    x,
-                    `https://${useDomainName()}/${prefix}/${x}/authorize`,
-                ])), null, 4),
-            };
-        }
-        const [providerName] = path.slice(-2);
-        const provider = config.providers[providerName];
-        if (!provider)
-            throw new Error("No matching provider found");
-        return provider();
-    });
-}

package/node/auth/index.d.ts

@@ -1,13 +0,0 @@
-export * from "./auth.js";
-export * from "./session.js";
-export * from "./adapter/adapter.js";
-export * from "./adapter/facebook.js";
-export * from "./adapter/google.js";
-export * from "./adapter/twitch.js";
-export * from "./adapter/github.js";
-export * from "./adapter/oidc.js";
-export * from "./adapter/oauth.js";
-export * from "./adapter/link.js";
-export interface AuthResources {
-}
-export declare const Auth: AuthResources;

package/node/auth/index.js

@@ -1,12 +0,0 @@
-export * from "./auth.js";
-export * from "./session.js";
-export * from "./adapter/adapter.js";
-export * from "./adapter/facebook.js";
-export * from "./adapter/google.js";
-export * from "./adapter/twitch.js";
-export * from "./adapter/github.js";
-export * from "./adapter/oidc.js";
-export * from "./adapter/oauth.js";
-export * from "./adapter/link.js";
-import { createProxy } from "../util/index.js";
-export const Auth = createProxy("Auth");