@pulzar/core/dist/auth/session.guard.d.ts

Next-generation Node.js framework for ultra-fast web applications with zero-reflection DI, GraphQL, WebSockets, events, and edge runtime support

import { FastifyRequest, FastifyReply, FastifyPluginAsync, preHandlerHookHandler } from "fastify";
import { SessionData } from "./types";
export interface SessionStore {
    get(sessionId: string): Promise<SessionData | null>;
    set(sessionId: string, data: SessionData): Promise<void>;
    delete(sessionId: string): Promise<void>;
    touch(sessionId: string): Promise<void>;
    clear(): Promise<void>;
    cleanup?(): Promise<void>;
}
export interface SessionOptions {
    store: SessionStore;
    name: string;
    secret: string;
    maxAge: number;
    secure: boolean;
    httpOnly: boolean;
    sameSite: "strict" | "lax" | "none";
    domain?: string;
    path: string;
    rolling: boolean;
    touchInterval?: number;
    cleanupInterval?: number;
}
export declare class MemorySessionStore implements SessionStore {
    private sessions;
    private cleanupTimer?;
    constructor(cleanupInterval?: number);
    get(sessionId: string): Promise<SessionData | null>;
    set(sessionId: string, data: SessionData): Promise<void>;
    delete(sessionId: string): Promise<void>;
    touch(sessionId: string): Promise<void>;
    clear(): Promise<void>;
    cleanup(): Promise<void>;
    destroy(): void;
}
export declare class SessionGuard {
    private options;
    private lastTouchTimes;
    constructor(options: SessionOptions);
    /**
     * Create a new session with crypto-safe ID
     */
    createSession(userId: string, data?: Record<string, any>): Promise<string>;
    /**
     * Get session data
     */
    getSession(sessionId: string): Promise<SessionData | null>;
    /**
     * Update session data
     */
    updateSession(sessionId: string, data: Record<string, any>): Promise<void>;
    /**
     * Destroy session
     */
    destroySession(sessionId: string): Promise<void>;
    /**
     * Touch session with interval throttling
     */
    touchSession(sessionId: string): Promise<void>;
    /**
     * Extract session ID from Fastify request with XSRF protection
     */
    extractSessionId(req: FastifyRequest): string | null;
    /**
     * Check if request requires XSRF protection
     */
    private requiresXSRFCheck;
    /**
     * Simple XSRF token validation (should be enhanced with proper crypto)
     */
    private validateXSRFToken;
    /**
     * Generate XSRF token for session
     */
    generateXSRFToken(sessionId: string): string;
    /**
     * Set session cookie with security validation
     */
    setSessionCookie(reply: FastifyReply, sessionId: string): void;
    /**
     * Clear session cookie
     */
    clearSessionCookie(reply: FastifyReply): void;
    /**
     * Fastify preHandler hook to authenticate session
     */
    authenticate(required?: boolean): preHandlerHookHandler;
    /**
     * Generate crypto-safe session ID
     */
    private generateSessionId;
    /**
     * Convert session to user object
     */
    private sessionToUser;
}
/**
 * Fastify plugin for session authentication
 */
export declare function createSessionPlugin(options: SessionOptions): FastifyPluginAsync;
export declare const sessionGuard: SessionGuard;
export declare function RequireSession(required?: boolean): preHandlerHookHandler;
//# sourceMappingURL=session.guard.d.ts.map