namespace Auth

SessionStrategy | None installedSessionStrategy

const int PBKDF2_CHUNK = 5000

const int PBKDF2_DEFAULT_ITERATIONS = 210000

const int PBKDF2_MIN_ITERATIONS = 100000

auditCsrfReject(Log::Logger log, Http::Context ctx) -> void

auditIp(Http::Context ctx) -> string

auditLockout(Log::Logger log, Http::Context ctx, string principalId) -> void

auditLoginFailure(Log::Logger log, Http::Context ctx, string reason) -> void

auditLoginSuccess(Log::Logger log, Http::Context ctx, string principalId) -> void

auditLogout(Log::Logger log, Http::Context ctx, string principalId) -> void

auditRatelimitReject(Log::Logger log, Http::Context ctx) -> void

auditRoute(Http::Context ctx) -> string

auditSessionReissue(Log::Logger log, Http::Context ctx, string principalId) -> void

auditTokenInvalid(Log::Logger log, Http::Context ctx, string reason) -> void

checkPbkdf2Iterations(int n) -> void

constantTimeEquals(string a, string b) -> bool

cookieShouldBeSecure(Http::Context ctx, SessionConfig cfg) -> bool

cookieValue(Http::Context ctx, string name) -> string | None

corsMiddleware(CorsConfig cfg) -> (Http::Context, (Http::Context) => HttpResponse) => HttpResponse

csrfMiddleware(CsrfConfig cfg) -> (Http::Context, (Http::Context) => HttpResponse) => HttpResponse

csrfToken(Http::Context ctx) -> string

currentSessionRecord(Http::Context ctx) -> SessionRecord | None

defaultCorsConfig() -> CorsConfig

defaultCsrfConfig() -> CsrfConfig

defaultIpKeySelector(Http::Context ctx) -> string

defaultSecurityHeadersConfig() -> SecurityHeadersConfig

defaultSessionConfig(string key) -> SessionConfig

defaultTokenConfig(string key) -> TokenConfig

dummyPasswordHash(int iterations) -> string

emptyClaims() -> Map<string, string>

emptyJsonObject() -> Map<string, JsonValue>

ensurePreSession(SessionStrategy strategy, Http::Context ctx) -> Promise<string>

formField(string body, string name) -> string | None

guard(Routing::Router router, PolicyRegistry reg) -> (Http::Context, (Http::Context) => HttpResponse) => HttpResponse

guardSpecOf(int authMode, string authRole) -> string

hashPassword(string password, int iterations) -> Promise<string>

installSessionStrategy(SessionStrategy s) -> void

isSafeMethod(string m) -> bool

jsonNumToInt(JsonValue v) -> int | None

middleware(Array<IAuthStrategy> strategies) -> (Http::Context, (Http::Context) => HttpResponse) => HttpResponse

mintToken(Principal p, int ttlSec, TokenConfig cfg) -> string

originAllowed(CorsConfig cfg, string origin) -> bool

parseCookieHeader(string header) -> Array<CookiePair>

pbkdf2Chain(string password, string salt, int iterations) -> Promise<string>

principalKeySelector(Http::Context ctx) -> string

putSessionRecord(Http::Context ctx, SessionRecord rec) -> Promise<void>

randomBytes(int n) -> string

rateLimitMiddleware(TokenBucketLimiter limiter, (Http::Context) => string keySelector, float ratePerMin, float burst) -> (Http::Context, (Http::Context) => HttpResponse) => HttpResponse

renderExpiredCookie(string name, bool secure) -> string

renderSetCookie(string name, string value, bool secure, int maxAgeSec) -> string

require(Http::Context ctx) -> Principal

securityHeadersMiddleware(SecurityHeadersConfig cfg) -> (Http::Context, (Http::Context) => HttpResponse) => HttpResponse

sessionReissueMiddleware() -> (Http::Context, (Http::Context) => HttpResponse) => HttpResponse

validateCorsConfig(CorsConfig cfg) -> void

validateGuards(Routing::Router router, PolicyRegistry reg) -> void

verifyPassword(string password, string stored, int currentIterations) -> Promise<VerifyResult>

verifyToken(string token, TokenConfig cfg) -> Principal | None

xorBytes(string a, string b) -> string