swift-auth 1.6.1 → 1.6.2

package/README.md

@@ -37,6 +37,7 @@ Built for **Next.js 15/16** with **Upstash Redis**, optimized for type safety an
 | 📦 **Minimal Footprint** | You control what's stored in Redis                   |
 | 🚀 **Zero Crypto Deps**  | No external dependencies for hashing                 |
 | ✅ **Production-Ready**  | Battle-tested session management                     |
+| 🔄 **Flexible Hashing**  | Use built-in scrypt or bring your own encryption     |
 
 ---
 
@@ -79,9 +80,13 @@ REDIS_URL=https://your-instance.upstash.io
 REDIS_TOKEN=your_auth_token
 ```
 
-### Step 3️⃣ Database Setup
+### Step 3️⃣ Database Setup & Password Hashing
 
-Configure your Prisma schema with the `user` model:
+Choose your password hashing approach:
+
+#### Option A: Use Swift Auth's Built-in Hashing (Recommended)
+
+Configure your Prisma schema with the `user` model including salt:
 
 ```prisma
 // prisma/schema.prisma
@@ -101,7 +106,7 @@ model user {
   name       String
   email      String   @unique
   password   String
-  salt       String   // ⚠️ MUST be STRING
+  salt       String   // Required for built-in hashing
   created_at DateTime @default(now())
   updated_at DateTime @updatedAt
 }
@@ -109,6 +114,82 @@ model user {
 
 > ⚠️ **Critical**: Salt must be stored as a `String`, not Buffer or Bytes.
 
+#### Option B: Use Your Own Encryption Method
+
+If you prefer your own password hashing logic, omit the `salt` field:
+
+```prisma
+model user {
+  id         String   @id @default(uuid())
+  name       String
+  email      String   @unique
+  password   String   // Your pre-encrypted password
+  created_at DateTime @default(now())
+  updated_at DateTime @updatedAt
+}
+```
+
+---
+
+## 🔒 Password Management
+
+### Option A: Swift Auth Built-in Hashing
+
+#### Generate Salt & Hash Password
+
+```typescript
+const salt = auth.generateSalt();
+const hashedPassword = await auth.hashPassword("user-password", salt);
+
+// Store both hashedPassword and salt as STRINGS in your database
+await prisma.user.create({
+  data: {
+    email: "user@example.com",
+    password: hashedPassword,
+    salt: salt,
+    name: "John Doe",
+  },
+});
+```
+
+#### Verify Password During Login
+
+```typescript
+const isValid = await auth.comparePassword({
+  password: "user-password",
+  salt,
+  hashedPassword,
+});
+
+if (!isValid) {
+  return { success: false, message: "Invalid password" };
+}
+```
+
+### Option B: Custom Encryption
+
+Use your own encryption method before storing in the database:
+
+```typescript
+import bcrypt from "bcrypt"; // or any other method
+
+// During registration
+const hashedPassword = await bcrypt.hash("user-password", 10);
+
+await prisma.user.create({
+  data: {
+    email: "user@example.com",
+    password: hashedPassword,
+    name: "John Doe",
+  },
+});
+
+// During login verification
+const isValid = await bcrypt.compare("user-password", user.password);
+```
+
+---
+
 ### Step 4️⃣ Create Auth Instance
 
 ```typescript
@@ -129,18 +210,18 @@ export const auth = createAuth<User>({
     token: process.env.REDIS_TOKEN!,
   },
   ttl: 60 * 60 * 24 * 7, // 7 days
-  sessionFields: ["id", "name", "email", "created_at"],
+  payload: ["id", "name", "email", "created_at"],
 });
 ```
 
 **Configuration Options:**
 
-| Option          | Type       | Description               |
-| --------------- | ---------- | ------------------------- |
-| `redis.url`     | `string`   | Upstash Redis URL         |
-| `redis.token`   | `string`   | Upstash Redis token       |
-| `ttl`           | `number`   | Session TTL in seconds    |
-| `sessionFields` | `string[]` | Fields persisted in Redis |
+| Option        | Type       | Description               |
+| ------------- | ---------- | ------------------------- |
+| `redis.url`   | `string`   | Upstash Redis URL         |
+| `redis.token` | `string`   | Upstash Redis token       |
+| `ttl`         | `number`   | Session TTL in seconds    |
+| `payload`     | `string[]` | Fields persisted in Redis |
 
 ---
 
@@ -206,43 +287,6 @@ export async function signOut() {
 
 ---
 
-## 🔒 Password Security
-
-Swift Auth provides built-in password hashing and verification with scrypt.
-
-### Register User
-
-```typescript
-const salt = auth.generateSalt();
-const hashedPassword = await auth.hashPassword("user-password", salt);
-
-// Store both hashedPassword and salt as STRINGS in your database
-await prisma.user.create({
-  data: {
-    email: "user@example.com",
-    password: hashedPassword,
-    salt: salt,
-    name: "John Doe",
-  },
-});
-```
-
-### Verify Password During Login
-
-```typescript
-const isValid = await auth.comparePassword({
-  password: "user-password",
-  salt,
-  hashedPassword,
-});
-
-if (!isValid) {
-  return { success: false, message: "Invalid password" };
-}
-```
-
----
-
 ## 📚 Full Login Example
 
 Complete login flow with Prisma + Zod validation:
@@ -297,13 +341,17 @@ export async function signIn(formData: unknown) {
       return { success: false, message: "Account not found" };
     }
 
-    // 3. Verify password (timing-safe)
+    // 3. Verify password (choose your method)
+    // Option A: Using Swift Auth's built-in method
     const isCorrectPassword = await auth.comparePassword({
       hashedPassword: user.password,
       password,
-      salt: user.salt, // must be string
+      salt: user.salt, // if using built-in hashing
     });
 
+    // Option B: Using custom encryption (e.g., bcrypt)
+    // const isCorrectPassword = await bcrypt.compare(password, user.password);
+
     if (!isCorrectPassword) {
       return { success: false, message: "Invalid password" };
     }
@@ -344,7 +392,7 @@ export async function signIn(formData: unknown) {
 | `updateUserSession()`     | `user`, `cookieStore` | `Promise<void>` | Update existing session              |
 | `removeUserFromSession()` | `cookieStore`         | `Promise<void>` | Logout user                          |
 
-### Password Management
+### Password Management (Optional - Built-in only)
 
 | Method              | Parameters                           | Returns            | Description                            |
 | ------------------- | ------------------------------------ | ------------------ | -------------------------------------- |
@@ -358,7 +406,8 @@ export async function signIn(formData: unknown) {
 
 ✅ **Do:**
 
-- Store salt as a **STRING** in your database
+- Choose a hashing method before building your database schema
+- Store salt as a **STRING** if using Swift Auth's hashing
 - Use environment variables for Redis credentials
 - Call `signOut()` before navigating to login page
 - Update session after profile changes
@@ -366,9 +415,10 @@ export async function signIn(formData: unknown) {
 
 ❌ **Don't:**
 
-- Store salt as Buffer or Bytes
+- Mix hashing methods (pick one and stick with it)
+- Store salt as Buffer or Bytes (if using built-in hashing)
 - Hardcode Redis credentials
-- Compare passwords with `===`
+- Compare passwords manually with `===`
 - Expose session data to client components
 - Use TTL shorter than 1 hour for user experience
 
@@ -395,7 +445,7 @@ echo $REDIS_URL
 **Solution:**
 
 - Check if TTL has expired
-- Verify `sessionFields` includes all required user data
+- Verify `payload` includes all required user data
 - Ensure cookie store is being awaited properly
 
 ```typescript
@@ -422,7 +472,7 @@ export type User = {
 import type { User } from "@/lib/auth";
 ```
 
-### Password Comparison Always Fails
+### Password Comparison Always Fails (Built-in Hashing)
 
 **Problem**: `comparePassword()` returns false for valid password
 
@@ -464,3 +514,4 @@ MIT © Taimoor Safdar
 [⬆ back to top](#-swift-auth)
 
 </div>
+

package/dist/index.cjs

@@ -37,6 +37,19 @@ module.exports = __toCommonJS(index_exports);
 // src/create-auth.ts
 var import_crypto = __toESM(require("crypto"), 1);
 
+// src/internal/redis-client.ts
+var import_redis = require("@upstash/redis");
+var createRedisClient = ({ url, token }) => {
+  if (!url || !token) {
+    throw new Error("Both REDIS URL and TOKEN are required to create Redis client");
+  }
+  const redisClient = new import_redis.Redis({
+    url,
+    token
+  });
+  return redisClient;
+};
+
 // src/internal/keys.ts
 var COOKIE_SESSION_KEY = "session-id";
 
@@ -113,19 +126,6 @@ async function removeUserFromSession(auth, cookies) {
   deleteSessionCookie(cookies);
 }
 
-// src/internal/redis-client.ts
-var import_redis = require("@upstash/redis");
-var createRedisClient = ({ url, token }) => {
-  if (!url || !token) {
-    throw new Error("Both REDIS URL and TOKEN are required to create Redis client");
-  }
-  const redisClient = new import_redis.Redis({
-    url,
-    token
-  });
-  return redisClient;
-};
-
 // src/create-auth.ts
 function createAuth(options) {
   if (!options.payload.includes("id")) {

package/dist/index.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts","../src/create-auth.ts","../src/internal/keys.ts","../src/internal/cookie.ts","../src/internal/utils.ts","../src/internal/session.ts","../src/internal/redis-client.ts"],"sourcesContent":["export { createAuth } from \"./create-auth.js\";\n","import crypto from \"crypto\";\r\nimport {\r\n    getUserFromSession,\r\n    createUserSession as internalCreateUserSession,\r\n    removeUserFromSession as internalRemoveUserFromSession,\r\n    updateUserSession as internalUpdateUserSession,\r\n} from \"./internal/session.js\";\r\nimport { AuthInstance, AuthPublic } from \"./internal/types.js\";\r\nimport { createRedisClient } from \"./internal/redis-client.js\";\r\nimport { Cookies } from \"./internal/cookie.js\";\r\n\r\ntype StrictRedisConfig = {\r\n    url: string;\r\n    token: string;\r\n} & {\r\n    [K in Exclude<string, \"url\" | \"token\">]?: never;\r\n};\r\n\r\ntype CreateAuthOptions<UserType extends Record<string, unknown>> = {\r\n    redis: StrictRedisConfig;\r\n    ttl: number;\r\n    payload: (keyof UserType)[];\r\n} & {\r\n    [K in Exclude<string, \"redis\" | \"ttl\" | \"payload\">]?: never;\r\n};\r\n\r\n\r\n/**\r\n * Create an authentication instance\r\n */\r\nexport function createAuth<UserType extends Record<string, unknown>>(\r\n    options: CreateAuthOptions<UserType>\r\n): AuthPublic<UserType> {\r\n    if (!options.payload.includes(\"id\" as keyof UserType)) {\r\n        throw new Error(\"payload must include `id`\");\r\n    }\r\n\r\n    const _redis = createRedisClient(options.redis);\r\n    const _payload = options.payload;\r\n    const _ttl = options.ttl;\r\n\r\n    const auth: AuthInstance<UserType> = {\r\n        _redis,\r\n        _payload,\r\n        _ttl,\r\n        // -------------------\r\n        // Session operations\r\n        // -------------------\r\n        getCurrentUser(cookies) {\r\n            return getUserFromSession({ _redis, _payload, _ttl: _ttl }, cookies);\r\n        },\r\n\r\n        createUserSession(user, cookies) {\r\n            const sessionData: Partial<UserType> = {} as any;\r\n            for (const key of _payload) {\r\n                if (key in user) sessionData[key] = user[key];\r\n            }\r\n            return internalCreateUserSession({ _redis, _payload, _ttl: _ttl }, sessionData, cookies);\r\n        },\r\n\r\n        updateUserSession(user, cookies: Pick<Cookies, \"get\" | \"set\">) {\r\n            const sessionData: Partial<UserType> = {};\r\n            for (const key of _payload) {\r\n                if (key in user) sessionData[key] = user[key];\r\n            }\r\n            return internalUpdateUserSession({ _redis, _payload, _ttl }, sessionData, cookies);\r\n        },\r\n\r\n        async removeUserFromSession(cookies) {\r\n            await internalRemoveUserFromSession({ _redis, _payload, _ttl: _ttl }, cookies);\r\n        },\r\n\r\n        // -------------------\r\n        // Password helpers\r\n        // -------------------\r\n        hashPassword(password: string, salt: string): Promise<string> {\r\n            return new Promise((resolve, reject) => {\r\n                crypto.scrypt(\r\n                    password.normalize(),\r\n                    salt,\r\n                    64,\r\n                    (err: Error | null, derivedKey: Buffer) => {\r\n                        if (err) return reject(err);\r\n                        resolve(derivedKey.toString(\"hex\").normalize());\r\n                    }\r\n                );\r\n            });\r\n        },\r\n\r\n        generateSalt(): string {\r\n            return crypto.randomBytes(16).toString(\"hex\").normalize();\r\n        },\r\n\r\n        async comparePassword({\r\n            password,\r\n            salt,\r\n            hashedPassword,\r\n        }: {\r\n            password: string;\r\n            salt: string;\r\n            hashedPassword: string;\r\n        }): Promise<boolean> {\r\n            const inputHashed = await auth.hashPassword(password, salt);\r\n            return crypto.timingSafeEqual(\r\n                Buffer.from(inputHashed, \"hex\"),\r\n                Buffer.from(hashedPassword, \"hex\")\r\n            );\r\n        },\r\n    };\r\n\r\n    return auth;\r\n}\r\n","export const COOKIE_SESSION_KEY = \"session-id\"","import { COOKIE_SESSION_KEY } from \"./keys.js\";\r\n\r\nexport type Cookies = {\r\n    set: (\r\n        key: string,\r\n        value: string,\r\n        options?: {\r\n            secure?: boolean;\r\n            httpOnly?: boolean;\r\n            sameSite?: \"strict\" | \"lax\";\r\n            path: string;\r\n            maxAge: number\r\n        }\r\n    ) => void;\r\n    get: (key: string) => { name: string; value: string } | undefined;\r\n    delete: (key: string) => void;\r\n};\r\n\r\nexport function getSessionId(\r\n    cookies: Pick<Cookies, \"get\">\r\n): string | null {\r\n    return cookies.get(COOKIE_SESSION_KEY)?.value ?? null;\r\n}\r\n\r\nexport function deleteSessionCookie(\r\n    cookies: Pick<Cookies, \"delete\">\r\n) {\r\n    cookies.delete(COOKIE_SESSION_KEY);\r\n}\r\n","export function stringifyBigInt<T>(obj: T): string {\r\n    return JSON.stringify(obj, (_, value) =>\r\n        typeof value === \"bigint\" ? value.toString() : value\r\n    );\r\n}\r\n\r\nexport function generateSessionId(): string {\r\n    const array = new Uint8Array(512);\r\n    crypto.getRandomValues(array);\r\n\r\n    return Array.from(array)\r\n        .map((b) => b.toString(16).padStart(2, \"0\"))\r\n        .join(\"\");\r\n}\r\n","import { Redis } from \"@upstash/redis\";\r\nimport {\r\n    Cookies,\r\n    deleteSessionCookie,\r\n    getSessionId,\r\n} from \"./cookie.js\";\r\nimport { generateSessionId, stringifyBigInt } from \"./utils.js\";\r\nimport { COOKIE_SESSION_KEY } from \"./keys.js\";\r\n\r\nexport async function getUserFromSession<UserType extends Record<string, unknown>>(\r\n    auth: { _redis: Redis; _payload: (keyof UserType)[]; _ttl: number },\r\n    cookies: Pick<Cookies, \"get\">\r\n): Promise<Partial<UserType> | null> {\r\n    const sessionId = cookies.get(COOKIE_SESSION_KEY)?.value;\r\n    if (!sessionId) return null;\r\n\r\n    const data = await auth._redis.get<string | object>(`session:${sessionId}`);\r\n    if (!data) return null;\r\n\r\n    // Only parse if it's still a string\r\n    const sessionData: Partial<UserType> = typeof data === \"string\"\r\n        ? JSON.parse(data)\r\n        : (data as any);\r\n\r\n    // Optional: pick only _payload to ensure type safety\r\n    const result: Partial<UserType> = {};\r\n    for (const key of auth._payload) {\r\n        if (key in sessionData) result[key] = sessionData[key];\r\n    }\r\n\r\n    return result;\r\n}\r\n\r\nexport async function createUserSession<UserType extends Record<string, unknown>>(\r\n    auth: { _redis: Redis; _payload: (keyof UserType)[]; _ttl: number },\r\n    user: Partial<UserType>,\r\n    cookies: Pick<Cookies, \"set\">\r\n) {\r\n    const sessionId = generateSessionId();\r\n\r\n    // Pick only session fields\r\n    const sessionData: Partial<UserType> = {};\r\n    for (const key of auth._payload) {\r\n        if (key in user) sessionData[key] = user[key];\r\n    }\r\n\r\n    await auth._redis.set(\r\n        `session:${sessionId}`,\r\n        stringifyBigInt(sessionData),\r\n        { ex: auth._ttl }\r\n    );\r\n\r\n    cookies.set(COOKIE_SESSION_KEY, sessionId, {\r\n        secure: process.env.NODE_ENV === \"production\",\r\n        httpOnly: true,\r\n        sameSite: \"lax\",\r\n        path: \"/\",\r\n        maxAge: auth._ttl,\r\n    });\r\n}\r\n\r\n\r\nexport async function updateUserSession<UserType extends Record<string, unknown>>(\r\n    auth: { _redis: Redis; _payload: (keyof UserType)[]; _ttl: number },\r\n    user: Partial<UserType>,   // ✅ allow partial here\r\n    cookies: Pick<Cookies, \"get\" | \"set\">\r\n): Promise<void> {\r\n    const sessionId = getSessionId(cookies);\r\n    if (!sessionId) return; // ✅ just return void\r\n\r\n    // Pick only session fields\r\n    const sessionData: Partial<UserType> = {} as any;\r\n    for (const key of auth._payload) {\r\n        if (key in user) sessionData[key] = user[key];\r\n    }\r\n\r\n    await auth._redis.set(\r\n        `session:${sessionId}`,\r\n        stringifyBigInt(sessionData),\r\n        { ex: auth._ttl }\r\n    );\r\n}\r\n\r\nexport async function removeUserFromSession<UserType extends Record<string, unknown>>(\r\n    auth: { _redis: Redis; _payload: (keyof UserType)[]; _ttl: number },\r\n    cookies: Pick<Cookies, \"get\" | \"delete\">\r\n) {\r\n    const sessionId = getSessionId(cookies);\r\n    if (!sessionId) return null;\r\n\r\n    await auth._redis.del(`session:${sessionId}`);\r\n    deleteSessionCookie(cookies);\r\n}\r\n","import { Redis } from \"@upstash/redis\";\r\n\r\nexport type CreateRedisClientOptions = {\r\n    url: string;\r\n    token: string;\r\n};\r\n\r\nexport const createRedisClient = ({ url, token }: CreateRedisClientOptions) => {\r\n    if (!url || !token) {\r\n        throw new Error(\"Both REDIS URL and TOKEN are required to create Redis client\");\r\n    }\r\n\r\n    const redisClient = new Redis({\r\n        url,\r\n        token,\r\n    });\r\n\r\n    return redisClient;\r\n};\r\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAA,oBAAmB;;;ACAZ,IAAM,qBAAqB;;;ACkB3B,SAAS,aACZ,SACa;AACb,SAAO,QAAQ,IAAI,kBAAkB,GAAG,SAAS;AACrD;AAEO,SAAS,oBACZ,SACF;AACE,UAAQ,OAAO,kBAAkB;AACrC;;;AC5BO,SAAS,gBAAmB,KAAgB;AAC/C,SAAO,KAAK;AAAA,IAAU;AAAA,IAAK,CAAC,GAAG,UAC3B,OAAO,UAAU,WAAW,MAAM,SAAS,IAAI;AAAA,EACnD;AACJ;AAEO,SAAS,oBAA4B;AACxC,QAAM,QAAQ,IAAI,WAAW,GAAG;AAChC,SAAO,gBAAgB,KAAK;AAE5B,SAAO,MAAM,KAAK,KAAK,EAClB,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,EAC1C,KAAK,EAAE;AAChB;;;ACJA,eAAsB,mBAClB,MACA,SACiC;AACjC,QAAM,YAAY,QAAQ,IAAI,kBAAkB,GAAG;AACnD,MAAI,CAAC,UAAW,QAAO;AAEvB,QAAM,OAAO,MAAM,KAAK,OAAO,IAAqB,WAAW,SAAS,EAAE;AAC1E,MAAI,CAAC,KAAM,QAAO;AAGlB,QAAM,cAAiC,OAAO,SAAS,WACjD,KAAK,MAAM,IAAI,IACd;AAGP,QAAM,SAA4B,CAAC;AACnC,aAAW,OAAO,KAAK,UAAU;AAC7B,QAAI,OAAO,YAAa,QAAO,GAAG,IAAI,YAAY,GAAG;AAAA,EACzD;AAEA,SAAO;AACX;AAEA,eAAsB,kBAClB,MACA,MACA,SACF;AACE,QAAM,YAAY,kBAAkB;AAGpC,QAAM,cAAiC,CAAC;AACxC,aAAW,OAAO,KAAK,UAAU;AAC7B,QAAI,OAAO,KAAM,aAAY,GAAG,IAAI,KAAK,GAAG;AAAA,EAChD;AAEA,QAAM,KAAK,OAAO;AAAA,IACd,WAAW,SAAS;AAAA,IACpB,gBAAgB,WAAW;AAAA,IAC3B,EAAE,IAAI,KAAK,KAAK;AAAA,EACpB;AAEA,UAAQ,IAAI,oBAAoB,WAAW;AAAA,IACvC,QAAQ,QAAQ,IAAI,aAAa;AAAA,IACjC,UAAU;AAAA,IACV,UAAU;AAAA,IACV,MAAM;AAAA,IACN,QAAQ,KAAK;AAAA,EACjB,CAAC;AACL;AAGA,eAAsB,kBAClB,MACA,MACA,SACa;AACb,QAAM,YAAY,aAAa,OAAO;AACtC,MAAI,CAAC,UAAW;AAGhB,QAAM,cAAiC,CAAC;AACxC,aAAW,OAAO,KAAK,UAAU;AAC7B,QAAI,OAAO,KAAM,aAAY,GAAG,IAAI,KAAK,GAAG;AAAA,EAChD;AAEA,QAAM,KAAK,OAAO;AAAA,IACd,WAAW,SAAS;AAAA,IACpB,gBAAgB,WAAW;AAAA,IAC3B,EAAE,IAAI,KAAK,KAAK;AAAA,EACpB;AACJ;AAEA,eAAsB,sBAClB,MACA,SACF;AACE,QAAM,YAAY,aAAa,OAAO;AACtC,MAAI,CAAC,UAAW,QAAO;AAEvB,QAAM,KAAK,OAAO,IAAI,WAAW,SAAS,EAAE;AAC5C,sBAAoB,OAAO;AAC/B;;;AC5FA,mBAAsB;AAOf,IAAM,oBAAoB,CAAC,EAAE,KAAK,MAAM,MAAgC;AAC3E,MAAI,CAAC,OAAO,CAAC,OAAO;AAChB,UAAM,IAAI,MAAM,8DAA8D;AAAA,EAClF;AAEA,QAAM,cAAc,IAAI,mBAAM;AAAA,IAC1B;AAAA,IACA;AAAA,EACJ,CAAC;AAED,SAAO;AACX;;;ALYO,SAAS,WACZ,SACoB;AACpB,MAAI,CAAC,QAAQ,QAAQ,SAAS,IAAsB,GAAG;AACnD,UAAM,IAAI,MAAM,2BAA2B;AAAA,EAC/C;AAEA,QAAM,SAAS,kBAAkB,QAAQ,KAAK;AAC9C,QAAM,WAAW,QAAQ;AACzB,QAAM,OAAO,QAAQ;AAErB,QAAM,OAA+B;AAAA,IACjC;AAAA,IACA;AAAA,IACA;AAAA;AAAA;AAAA;AAAA,IAIA,eAAe,SAAS;AACpB,aAAO,mBAAmB,EAAE,QAAQ,UAAU,KAAW,GAAG,OAAO;AAAA,IACvE;AAAA,IAEA,kBAAkB,MAAM,SAAS;AAC7B,YAAM,cAAiC,CAAC;AACxC,iBAAW,OAAO,UAAU;AACxB,YAAI,OAAO,KAAM,aAAY,GAAG,IAAI,KAAK,GAAG;AAAA,MAChD;AACA,aAAO,kBAA0B,EAAE,QAAQ,UAAU,KAAW,GAAG,aAAa,OAAO;AAAA,IAC3F;AAAA,IAEA,kBAAkB,MAAM,SAAuC;AAC3D,YAAM,cAAiC,CAAC;AACxC,iBAAW,OAAO,UAAU;AACxB,YAAI,OAAO,KAAM,aAAY,GAAG,IAAI,KAAK,GAAG;AAAA,MAChD;AACA,aAAO,kBAA0B,EAAE,QAAQ,UAAU,KAAK,GAAG,aAAa,OAAO;AAAA,IACrF;AAAA,IAEA,MAAM,sBAAsB,SAAS;AACjC,YAAM,sBAA8B,EAAE,QAAQ,UAAU,KAAW,GAAG,OAAO;AAAA,IACjF;AAAA;AAAA;AAAA;AAAA,IAKA,aAAa,UAAkB,MAA+B;AAC1D,aAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACpC,sBAAAA,QAAO;AAAA,UACH,SAAS,UAAU;AAAA,UACnB;AAAA,UACA;AAAA,UACA,CAAC,KAAmB,eAAuB;AACvC,gBAAI,IAAK,QAAO,OAAO,GAAG;AAC1B,oBAAQ,WAAW,SAAS,KAAK,EAAE,UAAU,CAAC;AAAA,UAClD;AAAA,QACJ;AAAA,MACJ,CAAC;AAAA,IACL;AAAA,IAEA,eAAuB;AACnB,aAAO,cAAAA,QAAO,YAAY,EAAE,EAAE,SAAS,KAAK,EAAE,UAAU;AAAA,IAC5D;AAAA,IAEA,MAAM,gBAAgB;AAAA,MAClB;AAAA,MACA;AAAA,MACA;AAAA,IACJ,GAIqB;AACjB,YAAM,cAAc,MAAM,KAAK,aAAa,UAAU,IAAI;AAC1D,aAAO,cAAAA,QAAO;AAAA,QACV,OAAO,KAAK,aAAa,KAAK;AAAA,QAC9B,OAAO,KAAK,gBAAgB,KAAK;AAAA,MACrC;AAAA,IACJ;AAAA,EACJ;AAEA,SAAO;AACX;","names":["crypto"]}
+{"version":3,"sources":["../src/index.ts","../src/create-auth.ts","../src/internal/redis-client.ts","../src/internal/keys.ts","../src/internal/cookie.ts","../src/internal/utils.ts","../src/internal/session.ts"],"sourcesContent":["export { createAuth } from \"./create-auth.js\";\n","import crypto from \"crypto\";\r\nimport { Cookies } from \"./internal/cookie.js\";\r\nimport { createRedisClient } from \"./internal/redis-client.js\";\r\nimport {\r\n    getUserFromSession,\r\n    createUserSession as internalCreateUserSession,\r\n    removeUserFromSession as internalRemoveUserFromSession,\r\n    updateUserSession as internalUpdateUserSession,\r\n} from \"./internal/session.js\";\r\nimport { AuthInstance, AuthPublic } from \"./internal/types.js\";\r\n\r\ntype RedisConfig = {\r\n    url: string;\r\n    token: string;\r\n}\r\n\r\ntype CreateAuthOptions<UserType extends Record<string, unknown>> = {\r\n    redis: RedisConfig;\r\n    ttl: number;\r\n    payload: (keyof UserType)[];\r\n}\r\n\r\n/**\r\n * Create an authentication instance\r\n */\r\nexport function createAuth<UserType extends Record<string, unknown>>(\r\n    options: CreateAuthOptions<UserType>\r\n): AuthPublic<UserType> {\r\n    if (!options.payload.includes(\"id\" as keyof UserType)) {\r\n        throw new Error(\"payload must include `id`\");\r\n    }\r\n\r\n    const _redis = createRedisClient(options.redis);\r\n    const _payload = options.payload;\r\n    const _ttl = options.ttl;\r\n\r\n    const auth: AuthInstance<UserType> = {\r\n        _redis,\r\n        _payload,\r\n        _ttl,\r\n        // -------------------\r\n        // Session operations\r\n        // -------------------\r\n        getCurrentUser(cookies) {\r\n            return getUserFromSession({ _redis, _payload, _ttl: _ttl }, cookies);\r\n        },\r\n\r\n        createUserSession(user, cookies) {\r\n            const sessionData: Partial<UserType> = {} as any;\r\n            for (const key of _payload) {\r\n                if (key in user) sessionData[key] = user[key];\r\n            }\r\n            return internalCreateUserSession({ _redis, _payload, _ttl: _ttl }, sessionData, cookies);\r\n        },\r\n\r\n        updateUserSession(user, cookies: Pick<Cookies, \"get\" | \"set\">) {\r\n            const sessionData: Partial<UserType> = {};\r\n            for (const key of _payload) {\r\n                if (key in user) sessionData[key] = user[key];\r\n            }\r\n            return internalUpdateUserSession({ _redis, _payload, _ttl }, sessionData, cookies);\r\n        },\r\n\r\n        async removeUserFromSession(cookies) {\r\n            await internalRemoveUserFromSession({ _redis, _payload, _ttl: _ttl }, cookies);\r\n        },\r\n\r\n        // -------------------\r\n        // Password helpers\r\n        // -------------------\r\n        hashPassword(password: string, salt: string): Promise<string> {\r\n            return new Promise((resolve, reject) => {\r\n                crypto.scrypt(\r\n                    password.normalize(),\r\n                    salt,\r\n                    64,\r\n                    (err: Error | null, derivedKey: Buffer) => {\r\n                        if (err) return reject(err);\r\n                        resolve(derivedKey.toString(\"hex\").normalize());\r\n                    }\r\n                );\r\n            });\r\n        },\r\n\r\n        generateSalt(): string {\r\n            return crypto.randomBytes(16).toString(\"hex\").normalize();\r\n        },\r\n\r\n        async comparePassword({\r\n            password,\r\n            salt,\r\n            hashedPassword,\r\n        }: {\r\n            password: string;\r\n            salt: string;\r\n            hashedPassword: string;\r\n        }): Promise<boolean> {\r\n            const inputHashed = await auth.hashPassword(password, salt);\r\n            return crypto.timingSafeEqual(\r\n                Buffer.from(inputHashed, \"hex\"),\r\n                Buffer.from(hashedPassword, \"hex\")\r\n            );\r\n        },\r\n    };\r\n\r\n    return auth;\r\n}\r\n","import { Redis } from \"@upstash/redis\";\r\n\r\nexport type CreateRedisClientOptions = {\r\n    url: string;\r\n    token: string;\r\n};\r\n\r\nexport const createRedisClient = ({ url, token }: CreateRedisClientOptions) => {\r\n    if (!url || !token) {\r\n        throw new Error(\"Both REDIS URL and TOKEN are required to create Redis client\");\r\n    }\r\n\r\n    const redisClient = new Redis({\r\n        url,\r\n        token,\r\n    });\r\n\r\n    return redisClient;\r\n};\r\n","export const COOKIE_SESSION_KEY = \"session-id\"","import { COOKIE_SESSION_KEY } from \"./keys.js\";\r\n\r\nexport type Cookies = {\r\n    set: (\r\n        key: string,\r\n        value: string,\r\n        options?: {\r\n            secure?: boolean;\r\n            httpOnly?: boolean;\r\n            sameSite?: \"strict\" | \"lax\";\r\n            path: string;\r\n            maxAge: number\r\n        }\r\n    ) => void;\r\n    get: (key: string) => { name: string; value: string } | undefined;\r\n    delete: (key: string) => void;\r\n};\r\n\r\nexport function getSessionId(\r\n    cookies: Pick<Cookies, \"get\">\r\n): string | null {\r\n    return cookies.get(COOKIE_SESSION_KEY)?.value ?? null;\r\n}\r\n\r\nexport function deleteSessionCookie(\r\n    cookies: Pick<Cookies, \"delete\">\r\n) {\r\n    cookies.delete(COOKIE_SESSION_KEY);\r\n}\r\n","export function stringifyBigInt<T>(obj: T): string {\r\n    return JSON.stringify(obj, (_, value) =>\r\n        typeof value === \"bigint\" ? value.toString() : value\r\n    );\r\n}\r\n\r\nexport function generateSessionId(): string {\r\n    const array = new Uint8Array(512);\r\n    crypto.getRandomValues(array);\r\n\r\n    return Array.from(array)\r\n        .map((b) => b.toString(16).padStart(2, \"0\"))\r\n        .join(\"\");\r\n}\r\n","import { Redis } from \"@upstash/redis\";\r\nimport {\r\n    Cookies,\r\n    deleteSessionCookie,\r\n    getSessionId,\r\n} from \"./cookie.js\";\r\nimport { generateSessionId, stringifyBigInt } from \"./utils.js\";\r\nimport { COOKIE_SESSION_KEY } from \"./keys.js\";\r\n\r\nexport async function getUserFromSession<UserType extends Record<string, unknown>>(\r\n    auth: { _redis: Redis; _payload: (keyof UserType)[]; _ttl: number },\r\n    cookies: Pick<Cookies, \"get\">\r\n): Promise<Partial<UserType> | null> {\r\n    const sessionId = cookies.get(COOKIE_SESSION_KEY)?.value;\r\n    if (!sessionId) return null;\r\n\r\n    const data = await auth._redis.get<string | object>(`session:${sessionId}`);\r\n    if (!data) return null;\r\n\r\n    // Only parse if it's still a string\r\n    const sessionData: Partial<UserType> = typeof data === \"string\"\r\n        ? JSON.parse(data)\r\n        : (data as any);\r\n\r\n    // Optional: pick only _payload to ensure type safety\r\n    const result: Partial<UserType> = {};\r\n    for (const key of auth._payload) {\r\n        if (key in sessionData) result[key] = sessionData[key];\r\n    }\r\n\r\n    return result;\r\n}\r\n\r\nexport async function createUserSession<UserType extends Record<string, unknown>>(\r\n    auth: { _redis: Redis; _payload: (keyof UserType)[]; _ttl: number },\r\n    user: Partial<UserType>,\r\n    cookies: Pick<Cookies, \"set\">\r\n) {\r\n    const sessionId = generateSessionId();\r\n\r\n    // Pick only session fields\r\n    const sessionData: Partial<UserType> = {};\r\n    for (const key of auth._payload) {\r\n        if (key in user) sessionData[key] = user[key];\r\n    }\r\n\r\n    await auth._redis.set(\r\n        `session:${sessionId}`,\r\n        stringifyBigInt(sessionData),\r\n        { ex: auth._ttl }\r\n    );\r\n\r\n    cookies.set(COOKIE_SESSION_KEY, sessionId, {\r\n        secure: process.env.NODE_ENV === \"production\",\r\n        httpOnly: true,\r\n        sameSite: \"lax\",\r\n        path: \"/\",\r\n        maxAge: auth._ttl,\r\n    });\r\n}\r\n\r\n\r\nexport async function updateUserSession<UserType extends Record<string, unknown>>(\r\n    auth: { _redis: Redis; _payload: (keyof UserType)[]; _ttl: number },\r\n    user: Partial<UserType>,   // ✅ allow partial here\r\n    cookies: Pick<Cookies, \"get\" | \"set\">\r\n): Promise<void> {\r\n    const sessionId = getSessionId(cookies);\r\n    if (!sessionId) return; // ✅ just return void\r\n\r\n    // Pick only session fields\r\n    const sessionData: Partial<UserType> = {} as any;\r\n    for (const key of auth._payload) {\r\n        if (key in user) sessionData[key] = user[key];\r\n    }\r\n\r\n    await auth._redis.set(\r\n        `session:${sessionId}`,\r\n        stringifyBigInt(sessionData),\r\n        { ex: auth._ttl }\r\n    );\r\n}\r\n\r\nexport async function removeUserFromSession<UserType extends Record<string, unknown>>(\r\n    auth: { _redis: Redis; _payload: (keyof UserType)[]; _ttl: number },\r\n    cookies: Pick<Cookies, \"get\" | \"delete\">\r\n) {\r\n    const sessionId = getSessionId(cookies);\r\n    if (!sessionId) return null;\r\n\r\n    await auth._redis.del(`session:${sessionId}`);\r\n    deleteSessionCookie(cookies);\r\n}\r\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAA,oBAAmB;;;ACAnB,mBAAsB;AAOf,IAAM,oBAAoB,CAAC,EAAE,KAAK,MAAM,MAAgC;AAC3E,MAAI,CAAC,OAAO,CAAC,OAAO;AAChB,UAAM,IAAI,MAAM,8DAA8D;AAAA,EAClF;AAEA,QAAM,cAAc,IAAI,mBAAM;AAAA,IAC1B;AAAA,IACA;AAAA,EACJ,CAAC;AAED,SAAO;AACX;;;AClBO,IAAM,qBAAqB;;;ACkB3B,SAAS,aACZ,SACa;AACb,SAAO,QAAQ,IAAI,kBAAkB,GAAG,SAAS;AACrD;AAEO,SAAS,oBACZ,SACF;AACE,UAAQ,OAAO,kBAAkB;AACrC;;;AC5BO,SAAS,gBAAmB,KAAgB;AAC/C,SAAO,KAAK;AAAA,IAAU;AAAA,IAAK,CAAC,GAAG,UAC3B,OAAO,UAAU,WAAW,MAAM,SAAS,IAAI;AAAA,EACnD;AACJ;AAEO,SAAS,oBAA4B;AACxC,QAAM,QAAQ,IAAI,WAAW,GAAG;AAChC,SAAO,gBAAgB,KAAK;AAE5B,SAAO,MAAM,KAAK,KAAK,EAClB,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,EAC1C,KAAK,EAAE;AAChB;;;ACJA,eAAsB,mBAClB,MACA,SACiC;AACjC,QAAM,YAAY,QAAQ,IAAI,kBAAkB,GAAG;AACnD,MAAI,CAAC,UAAW,QAAO;AAEvB,QAAM,OAAO,MAAM,KAAK,OAAO,IAAqB,WAAW,SAAS,EAAE;AAC1E,MAAI,CAAC,KAAM,QAAO;AAGlB,QAAM,cAAiC,OAAO,SAAS,WACjD,KAAK,MAAM,IAAI,IACd;AAGP,QAAM,SAA4B,CAAC;AACnC,aAAW,OAAO,KAAK,UAAU;AAC7B,QAAI,OAAO,YAAa,QAAO,GAAG,IAAI,YAAY,GAAG;AAAA,EACzD;AAEA,SAAO;AACX;AAEA,eAAsB,kBAClB,MACA,MACA,SACF;AACE,QAAM,YAAY,kBAAkB;AAGpC,QAAM,cAAiC,CAAC;AACxC,aAAW,OAAO,KAAK,UAAU;AAC7B,QAAI,OAAO,KAAM,aAAY,GAAG,IAAI,KAAK,GAAG;AAAA,EAChD;AAEA,QAAM,KAAK,OAAO;AAAA,IACd,WAAW,SAAS;AAAA,IACpB,gBAAgB,WAAW;AAAA,IAC3B,EAAE,IAAI,KAAK,KAAK;AAAA,EACpB;AAEA,UAAQ,IAAI,oBAAoB,WAAW;AAAA,IACvC,QAAQ,QAAQ,IAAI,aAAa;AAAA,IACjC,UAAU;AAAA,IACV,UAAU;AAAA,IACV,MAAM;AAAA,IACN,QAAQ,KAAK;AAAA,EACjB,CAAC;AACL;AAGA,eAAsB,kBAClB,MACA,MACA,SACa;AACb,QAAM,YAAY,aAAa,OAAO;AACtC,MAAI,CAAC,UAAW;AAGhB,QAAM,cAAiC,CAAC;AACxC,aAAW,OAAO,KAAK,UAAU;AAC7B,QAAI,OAAO,KAAM,aAAY,GAAG,IAAI,KAAK,GAAG;AAAA,EAChD;AAEA,QAAM,KAAK,OAAO;AAAA,IACd,WAAW,SAAS;AAAA,IACpB,gBAAgB,WAAW;AAAA,IAC3B,EAAE,IAAI,KAAK,KAAK;AAAA,EACpB;AACJ;AAEA,eAAsB,sBAClB,MACA,SACF;AACE,QAAM,YAAY,aAAa,OAAO;AACtC,MAAI,CAAC,UAAW,QAAO;AAEvB,QAAM,KAAK,OAAO,IAAI,WAAW,SAAS,EAAE;AAC5C,sBAAoB,OAAO;AAC/B;;;ALnEO,SAAS,WACZ,SACoB;AACpB,MAAI,CAAC,QAAQ,QAAQ,SAAS,IAAsB,GAAG;AACnD,UAAM,IAAI,MAAM,2BAA2B;AAAA,EAC/C;AAEA,QAAM,SAAS,kBAAkB,QAAQ,KAAK;AAC9C,QAAM,WAAW,QAAQ;AACzB,QAAM,OAAO,QAAQ;AAErB,QAAM,OAA+B;AAAA,IACjC;AAAA,IACA;AAAA,IACA;AAAA;AAAA;AAAA;AAAA,IAIA,eAAe,SAAS;AACpB,aAAO,mBAAmB,EAAE,QAAQ,UAAU,KAAW,GAAG,OAAO;AAAA,IACvE;AAAA,IAEA,kBAAkB,MAAM,SAAS;AAC7B,YAAM,cAAiC,CAAC;AACxC,iBAAW,OAAO,UAAU;AACxB,YAAI,OAAO,KAAM,aAAY,GAAG,IAAI,KAAK,GAAG;AAAA,MAChD;AACA,aAAO,kBAA0B,EAAE,QAAQ,UAAU,KAAW,GAAG,aAAa,OAAO;AAAA,IAC3F;AAAA,IAEA,kBAAkB,MAAM,SAAuC;AAC3D,YAAM,cAAiC,CAAC;AACxC,iBAAW,OAAO,UAAU;AACxB,YAAI,OAAO,KAAM,aAAY,GAAG,IAAI,KAAK,GAAG;AAAA,MAChD;AACA,aAAO,kBAA0B,EAAE,QAAQ,UAAU,KAAK,GAAG,aAAa,OAAO;AAAA,IACrF;AAAA,IAEA,MAAM,sBAAsB,SAAS;AACjC,YAAM,sBAA8B,EAAE,QAAQ,UAAU,KAAW,GAAG,OAAO;AAAA,IACjF;AAAA;AAAA;AAAA;AAAA,IAKA,aAAa,UAAkB,MAA+B;AAC1D,aAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACpC,sBAAAA,QAAO;AAAA,UACH,SAAS,UAAU;AAAA,UACnB;AAAA,UACA;AAAA,UACA,CAAC,KAAmB,eAAuB;AACvC,gBAAI,IAAK,QAAO,OAAO,GAAG;AAC1B,oBAAQ,WAAW,SAAS,KAAK,EAAE,UAAU,CAAC;AAAA,UAClD;AAAA,QACJ;AAAA,MACJ,CAAC;AAAA,IACL;AAAA,IAEA,eAAuB;AACnB,aAAO,cAAAA,QAAO,YAAY,EAAE,EAAE,SAAS,KAAK,EAAE,UAAU;AAAA,IAC5D;AAAA,IAEA,MAAM,gBAAgB;AAAA,MAClB;AAAA,MACA;AAAA,MACA;AAAA,IACJ,GAIqB;AACjB,YAAM,cAAc,MAAM,KAAK,aAAa,UAAU,IAAI;AAC1D,aAAO,cAAAA,QAAO;AAAA,QACV,OAAO,KAAK,aAAa,KAAK;AAAA,QAC9B,OAAO,KAAK,gBAAgB,KAAK;AAAA,MACrC;AAAA,IACJ;AAAA,EACJ;AAEA,SAAO;AACX;","names":["crypto"]}

package/dist/index.d.cts

@@ -27,18 +27,14 @@ type AuthPublic<UserType extends Record<string, unknown>> = {
     }): Promise<boolean>;
 };
 
-type StrictRedisConfig = {
+type RedisConfig = {
     url: string;
     token: string;
-} & {
-    [K in Exclude<string, "url" | "token">]?: never;
 };
 type CreateAuthOptions<UserType extends Record<string, unknown>> = {
-    redis: StrictRedisConfig;
+    redis: RedisConfig;
     ttl: number;
     payload: (keyof UserType)[];
-} & {
-    [K in Exclude<string, "redis" | "ttl" | "payload">]?: never;
 };
 /**
  * Create an authentication instance

package/dist/index.d.ts

@@ -27,18 +27,14 @@ type AuthPublic<UserType extends Record<string, unknown>> = {
     }): Promise<boolean>;
 };
 
-type StrictRedisConfig = {
+type RedisConfig = {
     url: string;
     token: string;
-} & {
-    [K in Exclude<string, "url" | "token">]?: never;
 };
 type CreateAuthOptions<UserType extends Record<string, unknown>> = {
-    redis: StrictRedisConfig;
+    redis: RedisConfig;
     ttl: number;
     payload: (keyof UserType)[];
-} & {
-    [K in Exclude<string, "redis" | "ttl" | "payload">]?: never;
 };
 /**
  * Create an authentication instance

package/dist/index.js

@@ -1,6 +1,19 @@
 // src/create-auth.ts
 import crypto2 from "crypto";
 
+// src/internal/redis-client.ts
+import { Redis } from "@upstash/redis";
+var createRedisClient = ({ url, token }) => {
+  if (!url || !token) {
+    throw new Error("Both REDIS URL and TOKEN are required to create Redis client");
+  }
+  const redisClient = new Redis({
+    url,
+    token
+  });
+  return redisClient;
+};
+
 // src/internal/keys.ts
 var COOKIE_SESSION_KEY = "session-id";
 
@@ -77,19 +90,6 @@ async function removeUserFromSession(auth, cookies) {
   deleteSessionCookie(cookies);
 }
 
-// src/internal/redis-client.ts
-import { Redis } from "@upstash/redis";
-var createRedisClient = ({ url, token }) => {
-  if (!url || !token) {
-    throw new Error("Both REDIS URL and TOKEN are required to create Redis client");
-  }
-  const redisClient = new Redis({
-    url,
-    token
-  });
-  return redisClient;
-};
-
 // src/create-auth.ts
 function createAuth(options) {
   if (!options.payload.includes("id")) {

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/create-auth.ts","../src/internal/keys.ts","../src/internal/cookie.ts","../src/internal/utils.ts","../src/internal/session.ts","../src/internal/redis-client.ts"],"sourcesContent":["import crypto from \"crypto\";\r\nimport {\r\n    getUserFromSession,\r\n    createUserSession as internalCreateUserSession,\r\n    removeUserFromSession as internalRemoveUserFromSession,\r\n    updateUserSession as internalUpdateUserSession,\r\n} from \"./internal/session.js\";\r\nimport { AuthInstance, AuthPublic } from \"./internal/types.js\";\r\nimport { createRedisClient } from \"./internal/redis-client.js\";\r\nimport { Cookies } from \"./internal/cookie.js\";\r\n\r\ntype StrictRedisConfig = {\r\n    url: string;\r\n    token: string;\r\n} & {\r\n    [K in Exclude<string, \"url\" | \"token\">]?: never;\r\n};\r\n\r\ntype CreateAuthOptions<UserType extends Record<string, unknown>> = {\r\n    redis: StrictRedisConfig;\r\n    ttl: number;\r\n    payload: (keyof UserType)[];\r\n} & {\r\n    [K in Exclude<string, \"redis\" | \"ttl\" | \"payload\">]?: never;\r\n};\r\n\r\n\r\n/**\r\n * Create an authentication instance\r\n */\r\nexport function createAuth<UserType extends Record<string, unknown>>(\r\n    options: CreateAuthOptions<UserType>\r\n): AuthPublic<UserType> {\r\n    if (!options.payload.includes(\"id\" as keyof UserType)) {\r\n        throw new Error(\"payload must include `id`\");\r\n    }\r\n\r\n    const _redis = createRedisClient(options.redis);\r\n    const _payload = options.payload;\r\n    const _ttl = options.ttl;\r\n\r\n    const auth: AuthInstance<UserType> = {\r\n        _redis,\r\n        _payload,\r\n        _ttl,\r\n        // -------------------\r\n        // Session operations\r\n        // -------------------\r\n        getCurrentUser(cookies) {\r\n            return getUserFromSession({ _redis, _payload, _ttl: _ttl }, cookies);\r\n        },\r\n\r\n        createUserSession(user, cookies) {\r\n            const sessionData: Partial<UserType> = {} as any;\r\n            for (const key of _payload) {\r\n                if (key in user) sessionData[key] = user[key];\r\n            }\r\n            return internalCreateUserSession({ _redis, _payload, _ttl: _ttl }, sessionData, cookies);\r\n        },\r\n\r\n        updateUserSession(user, cookies: Pick<Cookies, \"get\" | \"set\">) {\r\n            const sessionData: Partial<UserType> = {};\r\n            for (const key of _payload) {\r\n                if (key in user) sessionData[key] = user[key];\r\n            }\r\n            return internalUpdateUserSession({ _redis, _payload, _ttl }, sessionData, cookies);\r\n        },\r\n\r\n        async removeUserFromSession(cookies) {\r\n            await internalRemoveUserFromSession({ _redis, _payload, _ttl: _ttl }, cookies);\r\n        },\r\n\r\n        // -------------------\r\n        // Password helpers\r\n        // -------------------\r\n        hashPassword(password: string, salt: string): Promise<string> {\r\n            return new Promise((resolve, reject) => {\r\n                crypto.scrypt(\r\n                    password.normalize(),\r\n                    salt,\r\n                    64,\r\n                    (err: Error | null, derivedKey: Buffer) => {\r\n                        if (err) return reject(err);\r\n                        resolve(derivedKey.toString(\"hex\").normalize());\r\n                    }\r\n                );\r\n            });\r\n        },\r\n\r\n        generateSalt(): string {\r\n            return crypto.randomBytes(16).toString(\"hex\").normalize();\r\n        },\r\n\r\n        async comparePassword({\r\n            password,\r\n            salt,\r\n            hashedPassword,\r\n        }: {\r\n            password: string;\r\n            salt: string;\r\n            hashedPassword: string;\r\n        }): Promise<boolean> {\r\n            const inputHashed = await auth.hashPassword(password, salt);\r\n            return crypto.timingSafeEqual(\r\n                Buffer.from(inputHashed, \"hex\"),\r\n                Buffer.from(hashedPassword, \"hex\")\r\n            );\r\n        },\r\n    };\r\n\r\n    return auth;\r\n}\r\n","export const COOKIE_SESSION_KEY = \"session-id\"","import { COOKIE_SESSION_KEY } from \"./keys.js\";\r\n\r\nexport type Cookies = {\r\n    set: (\r\n        key: string,\r\n        value: string,\r\n        options?: {\r\n            secure?: boolean;\r\n            httpOnly?: boolean;\r\n            sameSite?: \"strict\" | \"lax\";\r\n            path: string;\r\n            maxAge: number\r\n        }\r\n    ) => void;\r\n    get: (key: string) => { name: string; value: string } | undefined;\r\n    delete: (key: string) => void;\r\n};\r\n\r\nexport function getSessionId(\r\n    cookies: Pick<Cookies, \"get\">\r\n): string | null {\r\n    return cookies.get(COOKIE_SESSION_KEY)?.value ?? null;\r\n}\r\n\r\nexport function deleteSessionCookie(\r\n    cookies: Pick<Cookies, \"delete\">\r\n) {\r\n    cookies.delete(COOKIE_SESSION_KEY);\r\n}\r\n","export function stringifyBigInt<T>(obj: T): string {\r\n    return JSON.stringify(obj, (_, value) =>\r\n        typeof value === \"bigint\" ? value.toString() : value\r\n    );\r\n}\r\n\r\nexport function generateSessionId(): string {\r\n    const array = new Uint8Array(512);\r\n    crypto.getRandomValues(array);\r\n\r\n    return Array.from(array)\r\n        .map((b) => b.toString(16).padStart(2, \"0\"))\r\n        .join(\"\");\r\n}\r\n","import { Redis } from \"@upstash/redis\";\r\nimport {\r\n    Cookies,\r\n    deleteSessionCookie,\r\n    getSessionId,\r\n} from \"./cookie.js\";\r\nimport { generateSessionId, stringifyBigInt } from \"./utils.js\";\r\nimport { COOKIE_SESSION_KEY } from \"./keys.js\";\r\n\r\nexport async function getUserFromSession<UserType extends Record<string, unknown>>(\r\n    auth: { _redis: Redis; _payload: (keyof UserType)[]; _ttl: number },\r\n    cookies: Pick<Cookies, \"get\">\r\n): Promise<Partial<UserType> | null> {\r\n    const sessionId = cookies.get(COOKIE_SESSION_KEY)?.value;\r\n    if (!sessionId) return null;\r\n\r\n    const data = await auth._redis.get<string | object>(`session:${sessionId}`);\r\n    if (!data) return null;\r\n\r\n    // Only parse if it's still a string\r\n    const sessionData: Partial<UserType> = typeof data === \"string\"\r\n        ? JSON.parse(data)\r\n        : (data as any);\r\n\r\n    // Optional: pick only _payload to ensure type safety\r\n    const result: Partial<UserType> = {};\r\n    for (const key of auth._payload) {\r\n        if (key in sessionData) result[key] = sessionData[key];\r\n    }\r\n\r\n    return result;\r\n}\r\n\r\nexport async function createUserSession<UserType extends Record<string, unknown>>(\r\n    auth: { _redis: Redis; _payload: (keyof UserType)[]; _ttl: number },\r\n    user: Partial<UserType>,\r\n    cookies: Pick<Cookies, \"set\">\r\n) {\r\n    const sessionId = generateSessionId();\r\n\r\n    // Pick only session fields\r\n    const sessionData: Partial<UserType> = {};\r\n    for (const key of auth._payload) {\r\n        if (key in user) sessionData[key] = user[key];\r\n    }\r\n\r\n    await auth._redis.set(\r\n        `session:${sessionId}`,\r\n        stringifyBigInt(sessionData),\r\n        { ex: auth._ttl }\r\n    );\r\n\r\n    cookies.set(COOKIE_SESSION_KEY, sessionId, {\r\n        secure: process.env.NODE_ENV === \"production\",\r\n        httpOnly: true,\r\n        sameSite: \"lax\",\r\n        path: \"/\",\r\n        maxAge: auth._ttl,\r\n    });\r\n}\r\n\r\n\r\nexport async function updateUserSession<UserType extends Record<string, unknown>>(\r\n    auth: { _redis: Redis; _payload: (keyof UserType)[]; _ttl: number },\r\n    user: Partial<UserType>,   // ✅ allow partial here\r\n    cookies: Pick<Cookies, \"get\" | \"set\">\r\n): Promise<void> {\r\n    const sessionId = getSessionId(cookies);\r\n    if (!sessionId) return; // ✅ just return void\r\n\r\n    // Pick only session fields\r\n    const sessionData: Partial<UserType> = {} as any;\r\n    for (const key of auth._payload) {\r\n        if (key in user) sessionData[key] = user[key];\r\n    }\r\n\r\n    await auth._redis.set(\r\n        `session:${sessionId}`,\r\n        stringifyBigInt(sessionData),\r\n        { ex: auth._ttl }\r\n    );\r\n}\r\n\r\nexport async function removeUserFromSession<UserType extends Record<string, unknown>>(\r\n    auth: { _redis: Redis; _payload: (keyof UserType)[]; _ttl: number },\r\n    cookies: Pick<Cookies, \"get\" | \"delete\">\r\n) {\r\n    const sessionId = getSessionId(cookies);\r\n    if (!sessionId) return null;\r\n\r\n    await auth._redis.del(`session:${sessionId}`);\r\n    deleteSessionCookie(cookies);\r\n}\r\n","import { Redis } from \"@upstash/redis\";\r\n\r\nexport type CreateRedisClientOptions = {\r\n    url: string;\r\n    token: string;\r\n};\r\n\r\nexport const createRedisClient = ({ url, token }: CreateRedisClientOptions) => {\r\n    if (!url || !token) {\r\n        throw new Error(\"Both REDIS URL and TOKEN are required to create Redis client\");\r\n    }\r\n\r\n    const redisClient = new Redis({\r\n        url,\r\n        token,\r\n    });\r\n\r\n    return redisClient;\r\n};\r\n"],"mappings":";AAAA,OAAOA,aAAY;;;ACAZ,IAAM,qBAAqB;;;ACkB3B,SAAS,aACZ,SACa;AACb,SAAO,QAAQ,IAAI,kBAAkB,GAAG,SAAS;AACrD;AAEO,SAAS,oBACZ,SACF;AACE,UAAQ,OAAO,kBAAkB;AACrC;;;AC5BO,SAAS,gBAAmB,KAAgB;AAC/C,SAAO,KAAK;AAAA,IAAU;AAAA,IAAK,CAAC,GAAG,UAC3B,OAAO,UAAU,WAAW,MAAM,SAAS,IAAI;AAAA,EACnD;AACJ;AAEO,SAAS,oBAA4B;AACxC,QAAM,QAAQ,IAAI,WAAW,GAAG;AAChC,SAAO,gBAAgB,KAAK;AAE5B,SAAO,MAAM,KAAK,KAAK,EAClB,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,EAC1C,KAAK,EAAE;AAChB;;;ACJA,eAAsB,mBAClB,MACA,SACiC;AACjC,QAAM,YAAY,QAAQ,IAAI,kBAAkB,GAAG;AACnD,MAAI,CAAC,UAAW,QAAO;AAEvB,QAAM,OAAO,MAAM,KAAK,OAAO,IAAqB,WAAW,SAAS,EAAE;AAC1E,MAAI,CAAC,KAAM,QAAO;AAGlB,QAAM,cAAiC,OAAO,SAAS,WACjD,KAAK,MAAM,IAAI,IACd;AAGP,QAAM,SAA4B,CAAC;AACnC,aAAW,OAAO,KAAK,UAAU;AAC7B,QAAI,OAAO,YAAa,QAAO,GAAG,IAAI,YAAY,GAAG;AAAA,EACzD;AAEA,SAAO;AACX;AAEA,eAAsB,kBAClB,MACA,MACA,SACF;AACE,QAAM,YAAY,kBAAkB;AAGpC,QAAM,cAAiC,CAAC;AACxC,aAAW,OAAO,KAAK,UAAU;AAC7B,QAAI,OAAO,KAAM,aAAY,GAAG,IAAI,KAAK,GAAG;AAAA,EAChD;AAEA,QAAM,KAAK,OAAO;AAAA,IACd,WAAW,SAAS;AAAA,IACpB,gBAAgB,WAAW;AAAA,IAC3B,EAAE,IAAI,KAAK,KAAK;AAAA,EACpB;AAEA,UAAQ,IAAI,oBAAoB,WAAW;AAAA,IACvC,QAAQ,QAAQ,IAAI,aAAa;AAAA,IACjC,UAAU;AAAA,IACV,UAAU;AAAA,IACV,MAAM;AAAA,IACN,QAAQ,KAAK;AAAA,EACjB,CAAC;AACL;AAGA,eAAsB,kBAClB,MACA,MACA,SACa;AACb,QAAM,YAAY,aAAa,OAAO;AACtC,MAAI,CAAC,UAAW;AAGhB,QAAM,cAAiC,CAAC;AACxC,aAAW,OAAO,KAAK,UAAU;AAC7B,QAAI,OAAO,KAAM,aAAY,GAAG,IAAI,KAAK,GAAG;AAAA,EAChD;AAEA,QAAM,KAAK,OAAO;AAAA,IACd,WAAW,SAAS;AAAA,IACpB,gBAAgB,WAAW;AAAA,IAC3B,EAAE,IAAI,KAAK,KAAK;AAAA,EACpB;AACJ;AAEA,eAAsB,sBAClB,MACA,SACF;AACE,QAAM,YAAY,aAAa,OAAO;AACtC,MAAI,CAAC,UAAW,QAAO;AAEvB,QAAM,KAAK,OAAO,IAAI,WAAW,SAAS,EAAE;AAC5C,sBAAoB,OAAO;AAC/B;;;AC5FA,SAAS,aAAa;AAOf,IAAM,oBAAoB,CAAC,EAAE,KAAK,MAAM,MAAgC;AAC3E,MAAI,CAAC,OAAO,CAAC,OAAO;AAChB,UAAM,IAAI,MAAM,8DAA8D;AAAA,EAClF;AAEA,QAAM,cAAc,IAAI,MAAM;AAAA,IAC1B;AAAA,IACA;AAAA,EACJ,CAAC;AAED,SAAO;AACX;;;ALYO,SAAS,WACZ,SACoB;AACpB,MAAI,CAAC,QAAQ,QAAQ,SAAS,IAAsB,GAAG;AACnD,UAAM,IAAI,MAAM,2BAA2B;AAAA,EAC/C;AAEA,QAAM,SAAS,kBAAkB,QAAQ,KAAK;AAC9C,QAAM,WAAW,QAAQ;AACzB,QAAM,OAAO,QAAQ;AAErB,QAAM,OAA+B;AAAA,IACjC;AAAA,IACA;AAAA,IACA;AAAA;AAAA;AAAA;AAAA,IAIA,eAAe,SAAS;AACpB,aAAO,mBAAmB,EAAE,QAAQ,UAAU,KAAW,GAAG,OAAO;AAAA,IACvE;AAAA,IAEA,kBAAkB,MAAM,SAAS;AAC7B,YAAM,cAAiC,CAAC;AACxC,iBAAW,OAAO,UAAU;AACxB,YAAI,OAAO,KAAM,aAAY,GAAG,IAAI,KAAK,GAAG;AAAA,MAChD;AACA,aAAO,kBAA0B,EAAE,QAAQ,UAAU,KAAW,GAAG,aAAa,OAAO;AAAA,IAC3F;AAAA,IAEA,kBAAkB,MAAM,SAAuC;AAC3D,YAAM,cAAiC,CAAC;AACxC,iBAAW,OAAO,UAAU;AACxB,YAAI,OAAO,KAAM,aAAY,GAAG,IAAI,KAAK,GAAG;AAAA,MAChD;AACA,aAAO,kBAA0B,EAAE,QAAQ,UAAU,KAAK,GAAG,aAAa,OAAO;AAAA,IACrF;AAAA,IAEA,MAAM,sBAAsB,SAAS;AACjC,YAAM,sBAA8B,EAAE,QAAQ,UAAU,KAAW,GAAG,OAAO;AAAA,IACjF;AAAA;AAAA;AAAA;AAAA,IAKA,aAAa,UAAkB,MAA+B;AAC1D,aAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACpC,QAAAC,QAAO;AAAA,UACH,SAAS,UAAU;AAAA,UACnB;AAAA,UACA;AAAA,UACA,CAAC,KAAmB,eAAuB;AACvC,gBAAI,IAAK,QAAO,OAAO,GAAG;AAC1B,oBAAQ,WAAW,SAAS,KAAK,EAAE,UAAU,CAAC;AAAA,UAClD;AAAA,QACJ;AAAA,MACJ,CAAC;AAAA,IACL;AAAA,IAEA,eAAuB;AACnB,aAAOA,QAAO,YAAY,EAAE,EAAE,SAAS,KAAK,EAAE,UAAU;AAAA,IAC5D;AAAA,IAEA,MAAM,gBAAgB;AAAA,MAClB;AAAA,MACA;AAAA,MACA;AAAA,IACJ,GAIqB;AACjB,YAAM,cAAc,MAAM,KAAK,aAAa,UAAU,IAAI;AAC1D,aAAOA,QAAO;AAAA,QACV,OAAO,KAAK,aAAa,KAAK;AAAA,QAC9B,OAAO,KAAK,gBAAgB,KAAK;AAAA,MACrC;AAAA,IACJ;AAAA,EACJ;AAEA,SAAO;AACX;","names":["crypto","crypto"]}
+{"version":3,"sources":["../src/create-auth.ts","../src/internal/redis-client.ts","../src/internal/keys.ts","../src/internal/cookie.ts","../src/internal/utils.ts","../src/internal/session.ts"],"sourcesContent":["import crypto from \"crypto\";\r\nimport { Cookies } from \"./internal/cookie.js\";\r\nimport { createRedisClient } from \"./internal/redis-client.js\";\r\nimport {\r\n    getUserFromSession,\r\n    createUserSession as internalCreateUserSession,\r\n    removeUserFromSession as internalRemoveUserFromSession,\r\n    updateUserSession as internalUpdateUserSession,\r\n} from \"./internal/session.js\";\r\nimport { AuthInstance, AuthPublic } from \"./internal/types.js\";\r\n\r\ntype RedisConfig = {\r\n    url: string;\r\n    token: string;\r\n}\r\n\r\ntype CreateAuthOptions<UserType extends Record<string, unknown>> = {\r\n    redis: RedisConfig;\r\n    ttl: number;\r\n    payload: (keyof UserType)[];\r\n}\r\n\r\n/**\r\n * Create an authentication instance\r\n */\r\nexport function createAuth<UserType extends Record<string, unknown>>(\r\n    options: CreateAuthOptions<UserType>\r\n): AuthPublic<UserType> {\r\n    if (!options.payload.includes(\"id\" as keyof UserType)) {\r\n        throw new Error(\"payload must include `id`\");\r\n    }\r\n\r\n    const _redis = createRedisClient(options.redis);\r\n    const _payload = options.payload;\r\n    const _ttl = options.ttl;\r\n\r\n    const auth: AuthInstance<UserType> = {\r\n        _redis,\r\n        _payload,\r\n        _ttl,\r\n        // -------------------\r\n        // Session operations\r\n        // -------------------\r\n        getCurrentUser(cookies) {\r\n            return getUserFromSession({ _redis, _payload, _ttl: _ttl }, cookies);\r\n        },\r\n\r\n        createUserSession(user, cookies) {\r\n            const sessionData: Partial<UserType> = {} as any;\r\n            for (const key of _payload) {\r\n                if (key in user) sessionData[key] = user[key];\r\n            }\r\n            return internalCreateUserSession({ _redis, _payload, _ttl: _ttl }, sessionData, cookies);\r\n        },\r\n\r\n        updateUserSession(user, cookies: Pick<Cookies, \"get\" | \"set\">) {\r\n            const sessionData: Partial<UserType> = {};\r\n            for (const key of _payload) {\r\n                if (key in user) sessionData[key] = user[key];\r\n            }\r\n            return internalUpdateUserSession({ _redis, _payload, _ttl }, sessionData, cookies);\r\n        },\r\n\r\n        async removeUserFromSession(cookies) {\r\n            await internalRemoveUserFromSession({ _redis, _payload, _ttl: _ttl }, cookies);\r\n        },\r\n\r\n        // -------------------\r\n        // Password helpers\r\n        // -------------------\r\n        hashPassword(password: string, salt: string): Promise<string> {\r\n            return new Promise((resolve, reject) => {\r\n                crypto.scrypt(\r\n                    password.normalize(),\r\n                    salt,\r\n                    64,\r\n                    (err: Error | null, derivedKey: Buffer) => {\r\n                        if (err) return reject(err);\r\n                        resolve(derivedKey.toString(\"hex\").normalize());\r\n                    }\r\n                );\r\n            });\r\n        },\r\n\r\n        generateSalt(): string {\r\n            return crypto.randomBytes(16).toString(\"hex\").normalize();\r\n        },\r\n\r\n        async comparePassword({\r\n            password,\r\n            salt,\r\n            hashedPassword,\r\n        }: {\r\n            password: string;\r\n            salt: string;\r\n            hashedPassword: string;\r\n        }): Promise<boolean> {\r\n            const inputHashed = await auth.hashPassword(password, salt);\r\n            return crypto.timingSafeEqual(\r\n                Buffer.from(inputHashed, \"hex\"),\r\n                Buffer.from(hashedPassword, \"hex\")\r\n            );\r\n        },\r\n    };\r\n\r\n    return auth;\r\n}\r\n","import { Redis } from \"@upstash/redis\";\r\n\r\nexport type CreateRedisClientOptions = {\r\n    url: string;\r\n    token: string;\r\n};\r\n\r\nexport const createRedisClient = ({ url, token }: CreateRedisClientOptions) => {\r\n    if (!url || !token) {\r\n        throw new Error(\"Both REDIS URL and TOKEN are required to create Redis client\");\r\n    }\r\n\r\n    const redisClient = new Redis({\r\n        url,\r\n        token,\r\n    });\r\n\r\n    return redisClient;\r\n};\r\n","export const COOKIE_SESSION_KEY = \"session-id\"","import { COOKIE_SESSION_KEY } from \"./keys.js\";\r\n\r\nexport type Cookies = {\r\n    set: (\r\n        key: string,\r\n        value: string,\r\n        options?: {\r\n            secure?: boolean;\r\n            httpOnly?: boolean;\r\n            sameSite?: \"strict\" | \"lax\";\r\n            path: string;\r\n            maxAge: number\r\n        }\r\n    ) => void;\r\n    get: (key: string) => { name: string; value: string } | undefined;\r\n    delete: (key: string) => void;\r\n};\r\n\r\nexport function getSessionId(\r\n    cookies: Pick<Cookies, \"get\">\r\n): string | null {\r\n    return cookies.get(COOKIE_SESSION_KEY)?.value ?? null;\r\n}\r\n\r\nexport function deleteSessionCookie(\r\n    cookies: Pick<Cookies, \"delete\">\r\n) {\r\n    cookies.delete(COOKIE_SESSION_KEY);\r\n}\r\n","export function stringifyBigInt<T>(obj: T): string {\r\n    return JSON.stringify(obj, (_, value) =>\r\n        typeof value === \"bigint\" ? value.toString() : value\r\n    );\r\n}\r\n\r\nexport function generateSessionId(): string {\r\n    const array = new Uint8Array(512);\r\n    crypto.getRandomValues(array);\r\n\r\n    return Array.from(array)\r\n        .map((b) => b.toString(16).padStart(2, \"0\"))\r\n        .join(\"\");\r\n}\r\n","import { Redis } from \"@upstash/redis\";\r\nimport {\r\n    Cookies,\r\n    deleteSessionCookie,\r\n    getSessionId,\r\n} from \"./cookie.js\";\r\nimport { generateSessionId, stringifyBigInt } from \"./utils.js\";\r\nimport { COOKIE_SESSION_KEY } from \"./keys.js\";\r\n\r\nexport async function getUserFromSession<UserType extends Record<string, unknown>>(\r\n    auth: { _redis: Redis; _payload: (keyof UserType)[]; _ttl: number },\r\n    cookies: Pick<Cookies, \"get\">\r\n): Promise<Partial<UserType> | null> {\r\n    const sessionId = cookies.get(COOKIE_SESSION_KEY)?.value;\r\n    if (!sessionId) return null;\r\n\r\n    const data = await auth._redis.get<string | object>(`session:${sessionId}`);\r\n    if (!data) return null;\r\n\r\n    // Only parse if it's still a string\r\n    const sessionData: Partial<UserType> = typeof data === \"string\"\r\n        ? JSON.parse(data)\r\n        : (data as any);\r\n\r\n    // Optional: pick only _payload to ensure type safety\r\n    const result: Partial<UserType> = {};\r\n    for (const key of auth._payload) {\r\n        if (key in sessionData) result[key] = sessionData[key];\r\n    }\r\n\r\n    return result;\r\n}\r\n\r\nexport async function createUserSession<UserType extends Record<string, unknown>>(\r\n    auth: { _redis: Redis; _payload: (keyof UserType)[]; _ttl: number },\r\n    user: Partial<UserType>,\r\n    cookies: Pick<Cookies, \"set\">\r\n) {\r\n    const sessionId = generateSessionId();\r\n\r\n    // Pick only session fields\r\n    const sessionData: Partial<UserType> = {};\r\n    for (const key of auth._payload) {\r\n        if (key in user) sessionData[key] = user[key];\r\n    }\r\n\r\n    await auth._redis.set(\r\n        `session:${sessionId}`,\r\n        stringifyBigInt(sessionData),\r\n        { ex: auth._ttl }\r\n    );\r\n\r\n    cookies.set(COOKIE_SESSION_KEY, sessionId, {\r\n        secure: process.env.NODE_ENV === \"production\",\r\n        httpOnly: true,\r\n        sameSite: \"lax\",\r\n        path: \"/\",\r\n        maxAge: auth._ttl,\r\n    });\r\n}\r\n\r\n\r\nexport async function updateUserSession<UserType extends Record<string, unknown>>(\r\n    auth: { _redis: Redis; _payload: (keyof UserType)[]; _ttl: number },\r\n    user: Partial<UserType>,   // ✅ allow partial here\r\n    cookies: Pick<Cookies, \"get\" | \"set\">\r\n): Promise<void> {\r\n    const sessionId = getSessionId(cookies);\r\n    if (!sessionId) return; // ✅ just return void\r\n\r\n    // Pick only session fields\r\n    const sessionData: Partial<UserType> = {} as any;\r\n    for (const key of auth._payload) {\r\n        if (key in user) sessionData[key] = user[key];\r\n    }\r\n\r\n    await auth._redis.set(\r\n        `session:${sessionId}`,\r\n        stringifyBigInt(sessionData),\r\n        { ex: auth._ttl }\r\n    );\r\n}\r\n\r\nexport async function removeUserFromSession<UserType extends Record<string, unknown>>(\r\n    auth: { _redis: Redis; _payload: (keyof UserType)[]; _ttl: number },\r\n    cookies: Pick<Cookies, \"get\" | \"delete\">\r\n) {\r\n    const sessionId = getSessionId(cookies);\r\n    if (!sessionId) return null;\r\n\r\n    await auth._redis.del(`session:${sessionId}`);\r\n    deleteSessionCookie(cookies);\r\n}\r\n"],"mappings":";AAAA,OAAOA,aAAY;;;ACAnB,SAAS,aAAa;AAOf,IAAM,oBAAoB,CAAC,EAAE,KAAK,MAAM,MAAgC;AAC3E,MAAI,CAAC,OAAO,CAAC,OAAO;AAChB,UAAM,IAAI,MAAM,8DAA8D;AAAA,EAClF;AAEA,QAAM,cAAc,IAAI,MAAM;AAAA,IAC1B;AAAA,IACA;AAAA,EACJ,CAAC;AAED,SAAO;AACX;;;AClBO,IAAM,qBAAqB;;;ACkB3B,SAAS,aACZ,SACa;AACb,SAAO,QAAQ,IAAI,kBAAkB,GAAG,SAAS;AACrD;AAEO,SAAS,oBACZ,SACF;AACE,UAAQ,OAAO,kBAAkB;AACrC;;;AC5BO,SAAS,gBAAmB,KAAgB;AAC/C,SAAO,KAAK;AAAA,IAAU;AAAA,IAAK,CAAC,GAAG,UAC3B,OAAO,UAAU,WAAW,MAAM,SAAS,IAAI;AAAA,EACnD;AACJ;AAEO,SAAS,oBAA4B;AACxC,QAAM,QAAQ,IAAI,WAAW,GAAG;AAChC,SAAO,gBAAgB,KAAK;AAE5B,SAAO,MAAM,KAAK,KAAK,EAClB,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,EAC1C,KAAK,EAAE;AAChB;;;ACJA,eAAsB,mBAClB,MACA,SACiC;AACjC,QAAM,YAAY,QAAQ,IAAI,kBAAkB,GAAG;AACnD,MAAI,CAAC,UAAW,QAAO;AAEvB,QAAM,OAAO,MAAM,KAAK,OAAO,IAAqB,WAAW,SAAS,EAAE;AAC1E,MAAI,CAAC,KAAM,QAAO;AAGlB,QAAM,cAAiC,OAAO,SAAS,WACjD,KAAK,MAAM,IAAI,IACd;AAGP,QAAM,SAA4B,CAAC;AACnC,aAAW,OAAO,KAAK,UAAU;AAC7B,QAAI,OAAO,YAAa,QAAO,GAAG,IAAI,YAAY,GAAG;AAAA,EACzD;AAEA,SAAO;AACX;AAEA,eAAsB,kBAClB,MACA,MACA,SACF;AACE,QAAM,YAAY,kBAAkB;AAGpC,QAAM,cAAiC,CAAC;AACxC,aAAW,OAAO,KAAK,UAAU;AAC7B,QAAI,OAAO,KAAM,aAAY,GAAG,IAAI,KAAK,GAAG;AAAA,EAChD;AAEA,QAAM,KAAK,OAAO;AAAA,IACd,WAAW,SAAS;AAAA,IACpB,gBAAgB,WAAW;AAAA,IAC3B,EAAE,IAAI,KAAK,KAAK;AAAA,EACpB;AAEA,UAAQ,IAAI,oBAAoB,WAAW;AAAA,IACvC,QAAQ,QAAQ,IAAI,aAAa;AAAA,IACjC,UAAU;AAAA,IACV,UAAU;AAAA,IACV,MAAM;AAAA,IACN,QAAQ,KAAK;AAAA,EACjB,CAAC;AACL;AAGA,eAAsB,kBAClB,MACA,MACA,SACa;AACb,QAAM,YAAY,aAAa,OAAO;AACtC,MAAI,CAAC,UAAW;AAGhB,QAAM,cAAiC,CAAC;AACxC,aAAW,OAAO,KAAK,UAAU;AAC7B,QAAI,OAAO,KAAM,aAAY,GAAG,IAAI,KAAK,GAAG;AAAA,EAChD;AAEA,QAAM,KAAK,OAAO;AAAA,IACd,WAAW,SAAS;AAAA,IACpB,gBAAgB,WAAW;AAAA,IAC3B,EAAE,IAAI,KAAK,KAAK;AAAA,EACpB;AACJ;AAEA,eAAsB,sBAClB,MACA,SACF;AACE,QAAM,YAAY,aAAa,OAAO;AACtC,MAAI,CAAC,UAAW,QAAO;AAEvB,QAAM,KAAK,OAAO,IAAI,WAAW,SAAS,EAAE;AAC5C,sBAAoB,OAAO;AAC/B;;;ALnEO,SAAS,WACZ,SACoB;AACpB,MAAI,CAAC,QAAQ,QAAQ,SAAS,IAAsB,GAAG;AACnD,UAAM,IAAI,MAAM,2BAA2B;AAAA,EAC/C;AAEA,QAAM,SAAS,kBAAkB,QAAQ,KAAK;AAC9C,QAAM,WAAW,QAAQ;AACzB,QAAM,OAAO,QAAQ;AAErB,QAAM,OAA+B;AAAA,IACjC;AAAA,IACA;AAAA,IACA;AAAA;AAAA;AAAA;AAAA,IAIA,eAAe,SAAS;AACpB,aAAO,mBAAmB,EAAE,QAAQ,UAAU,KAAW,GAAG,OAAO;AAAA,IACvE;AAAA,IAEA,kBAAkB,MAAM,SAAS;AAC7B,YAAM,cAAiC,CAAC;AACxC,iBAAW,OAAO,UAAU;AACxB,YAAI,OAAO,KAAM,aAAY,GAAG,IAAI,KAAK,GAAG;AAAA,MAChD;AACA,aAAO,kBAA0B,EAAE,QAAQ,UAAU,KAAW,GAAG,aAAa,OAAO;AAAA,IAC3F;AAAA,IAEA,kBAAkB,MAAM,SAAuC;AAC3D,YAAM,cAAiC,CAAC;AACxC,iBAAW,OAAO,UAAU;AACxB,YAAI,OAAO,KAAM,aAAY,GAAG,IAAI,KAAK,GAAG;AAAA,MAChD;AACA,aAAO,kBAA0B,EAAE,QAAQ,UAAU,KAAK,GAAG,aAAa,OAAO;AAAA,IACrF;AAAA,IAEA,MAAM,sBAAsB,SAAS;AACjC,YAAM,sBAA8B,EAAE,QAAQ,UAAU,KAAW,GAAG,OAAO;AAAA,IACjF;AAAA;AAAA;AAAA;AAAA,IAKA,aAAa,UAAkB,MAA+B;AAC1D,aAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACpC,QAAAC,QAAO;AAAA,UACH,SAAS,UAAU;AAAA,UACnB;AAAA,UACA;AAAA,UACA,CAAC,KAAmB,eAAuB;AACvC,gBAAI,IAAK,QAAO,OAAO,GAAG;AAC1B,oBAAQ,WAAW,SAAS,KAAK,EAAE,UAAU,CAAC;AAAA,UAClD;AAAA,QACJ;AAAA,MACJ,CAAC;AAAA,IACL;AAAA,IAEA,eAAuB;AACnB,aAAOA,QAAO,YAAY,EAAE,EAAE,SAAS,KAAK,EAAE,UAAU;AAAA,IAC5D;AAAA,IAEA,MAAM,gBAAgB;AAAA,MAClB;AAAA,MACA;AAAA,MACA;AAAA,IACJ,GAIqB;AACjB,YAAM,cAAc,MAAM,KAAK,aAAa,UAAU,IAAI;AAC1D,aAAOA,QAAO;AAAA,QACV,OAAO,KAAK,aAAa,KAAK;AAAA,QAC9B,OAAO,KAAK,gBAAgB,KAAK;AAAA,MACrC;AAAA,IACJ;AAAA,EACJ;AAEA,SAAO;AACX;","names":["crypto","crypto"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "swift-auth",
-  "version": "1.6.1",
+  "version": "1.6.2",
   "type": "module",
   "description": "Custom authentication system for apps",
   "main": "dist/index.cjs.js",