release: WRNexusJS 0.5.10

packages/auth/src/plugin.ts

@@ -4,7 +4,11 @@ import { fileURLToPath } from "node:url";
 import { definePlugin, type PluginContext } from "@wrnexus/plugin";
 import type { AuthEngine } from "./engine.ts";
 import type { AuthPasskeyHttpOptions } from "./http/index.ts";
-import type { AuthSignedInHandler, AuthSignedOutHandler } from "./types.ts";
+import type {
+  AuthSessionVerificationHandler,
+  AuthSignedInHandler,
+  AuthSignedOutHandler,
+} from "./types.ts";
 import { AUTH_ROUTE_DEFINITIONS, type AuthRouteGroup } from "./routes/definitions.ts";
 import {
   clearDefaultAuthEngine,
@@ -52,6 +56,10 @@ export interface AuthConfig {
   onSignedIn?: AuthSignedInHandler;
   /** @deprecated Prefer createAuthEngine({ onSignedOut }). */
   onSignedOut?: AuthSignedOutHandler;
+  /** Shared SSO cookie whose value is an AuthEngine session id. */
+  sessionCookieName?: string;
+  /** Customize the package forward-auth verification response. */
+  onSessionVerification?: AuthSessionVerificationHandler;
 }
 
 /** Explicit plugin options remain supported for compatibility. Prefer config.auth. */
@@ -88,14 +96,22 @@ interface ResolvedAuthConfig {
   passkey?: AuthPasskeyHttpOptions;
   onSignedIn?: AuthSignedInHandler;
   onSignedOut?: AuthSignedOutHandler;
+  sessionCookieName?: string;
+  onSessionVerification?: AuthSessionVerificationHandler;
 }
 
-const packageRoot = dirname(dirname(fileURLToPath(import.meta.url)));
+const moduleRoot = dirname(fileURLToPath(import.meta.url));
+const packageRoot = dirname(moduleRoot);
+const compiledPackage = moduleRoot === join(packageRoot, "dist");
 const clientRuntime = join(packageRoot, "assets", "client", "auth.js");
 const migrationsFile = join(packageRoot, "migrations", "001_auth.sql");
 const otpPurposeMigrationFile = join(packageRoot, "migrations", "002_auth_otp_purpose.sql");
-const apiRoutesDir = join(packageRoot, "src", "routes", "api");
-const middlewareFile = join(packageRoot, "src", "routes", "middleware.ts");
+const apiRoutesDir = compiledPackage
+  ? join(moduleRoot, "routes", "api")
+  : join(packageRoot, "src", "routes", "api");
+const middlewareFile = compiledPackage
+  ? join(moduleRoot, "routes", "middleware.js")
+  : join(packageRoot, "src", "routes", "middleware.ts");
 const resolvedConfigKey = "@wrnexus/auth:resolved-config";
 
 export function authComponentsDir(): string {
@@ -104,7 +120,7 @@ export function authComponentsDir(): string {
 
 function authApiRouteEntry(path: string): string {
   const routeName = path.replace(/^\/api\/auth\/?/, "").replace(/\//g, "-") || "index";
-  return join(apiRoutesDir, routeName + ".ts");
+  return join(apiRoutesDir, routeName + (compiledPackage ? ".js" : ".ts"));
 }
 
 function resolveConfig(
@@ -142,6 +158,8 @@ function resolveConfig(
     passkey: raw.passkey,
     onSignedIn: raw.onSignedIn ?? raw.engine?.onSignedIn,
     onSignedOut: raw.onSignedOut ?? raw.engine?.onSignedOut,
+    sessionCookieName: raw.sessionCookieName,
+    onSessionVerification: raw.onSessionVerification,
   };
 }
 
@@ -377,6 +395,10 @@ export function authPlugin(options: AuthPluginOptions = {}) {
         onSignedIn: value.onSignedIn,
 
         onSignedOut: value.onSignedOut,
+
+        sessionCookieName: value.sessionCookieName,
+
+        onSessionVerification: value.onSessionVerification,
       });
 
       context.metadata.set("@wrnexus/auth:component-dir", value.componentDir);