{content}
\n * \n * \n * )\n * })\n * await next()\n * })\n * ```\n */\n setRenderer = (renderer) => {\n this.#renderer = renderer;\n };\n /**\n * `.header()` can set headers.\n *\n * @see {@link https://hono.dev/docs/api/context#header}\n *\n * @example\n * ```ts\n * app.get('/welcome', (c) => {\n * // Set headers\n * c.header('X-Message', 'Hello!')\n * c.header('Content-Type', 'text/plain')\n *\n * return c.body('Thank you for coming')\n * })\n * ```\n */\n header = (name, value, options) => {\n if (this.finalized) {\n this.#res = new Response(this.#res.body, this.#res);\n }\n const headers = this.#res ? this.#res.headers : this.#preparedHeaders ??= new Headers();\n if (value === void 0) {\n headers.delete(name);\n } else if (options?.append) {\n headers.append(name, value);\n } else {\n headers.set(name, value);\n }\n };\n status = (status) => {\n this.#status = status;\n };\n /**\n * `.set()` can set the value specified by the key.\n *\n * @see {@link https://hono.dev/docs/api/context#set-get}\n *\n * @example\n * ```ts\n * app.use('*', async (c, next) => {\n * c.set('message', 'Hono is hot!!')\n * await next()\n * })\n * ```\n */\n set = (key, value) => {\n this.#var ??= /* @__PURE__ */ new Map();\n this.#var.set(key, value);\n };\n /**\n * `.get()` can use the value specified by the key.\n *\n * @see {@link https://hono.dev/docs/api/context#set-get}\n *\n * @example\n * ```ts\n * app.get('/', (c) => {\n * const message = c.get('message')\n * return c.text(`The message is \"${message}\"`)\n * })\n * ```\n */\n get = (key) => {\n return this.#var ? this.#var.get(key) : void 0;\n };\n /**\n * `.var` can access the value of a variable.\n *\n * @see {@link https://hono.dev/docs/api/context#var}\n *\n * @example\n * ```ts\n * const result = c.var.client.oneMethod()\n * ```\n */\n // c.var.propName is a read-only\n get var() {\n if (!this.#var) {\n return {};\n }\n return Object.fromEntries(this.#var);\n }\n #newResponse(data, arg, headers) {\n const responseHeaders = this.#res ? new Headers(this.#res.headers) : this.#preparedHeaders ?? new Headers();\n if (typeof arg === \"object\" && \"headers\" in arg) {\n const argHeaders = arg.headers instanceof Headers ? arg.headers : new Headers(arg.headers);\n for (const [key, value] of argHeaders) {\n if (key.toLowerCase() === \"set-cookie\") {\n responseHeaders.append(key, value);\n } else {\n responseHeaders.set(key, value);\n }\n }\n }\n if (headers) {\n for (const [k, v] of Object.entries(headers)) {\n if (typeof v === \"string\") {\n responseHeaders.set(k, v);\n } else {\n responseHeaders.delete(k);\n for (const v2 of v) {\n responseHeaders.append(k, v2);\n }\n }\n }\n }\n const status = typeof arg === \"number\" ? arg : arg?.status ?? this.#status;\n return new Response(data, { status, headers: responseHeaders });\n }\n newResponse = (...args) => this.#newResponse(...args);\n /**\n * `.body()` can return the HTTP response.\n * You can set headers with `.header()` and set HTTP status code with `.status`.\n * This can also be set in `.text()`, `.json()` and so on.\n *\n * @see {@link https://hono.dev/docs/api/context#body}\n *\n * @example\n * ```ts\n * app.get('/welcome', (c) => {\n * // Set headers\n * c.header('X-Message', 'Hello!')\n * c.header('Content-Type', 'text/plain')\n * // Set HTTP status code\n * c.status(201)\n *\n * // Return the response body\n * return c.body('Thank you for coming')\n * })\n * ```\n */\n body = (data, arg, headers) => this.#newResponse(data, arg, headers);\n /**\n * `.text()` can render text as `Content-Type:text/plain`.\n *\n * @see {@link https://hono.dev/docs/api/context#text}\n *\n * @example\n * ```ts\n * app.get('/say', (c) => {\n * return c.text('Hello!')\n * })\n * ```\n */\n text = (text, arg, headers) => {\n return !this.#preparedHeaders && !this.#status && !arg && !headers && !this.finalized ? new Response(text) : this.#newResponse(\n text,\n arg,\n setDefaultContentType(TEXT_PLAIN, headers)\n );\n };\n /**\n * `.json()` can render JSON as `Content-Type:application/json`.\n *\n * @see {@link https://hono.dev/docs/api/context#json}\n *\n * @example\n * ```ts\n * app.get('/api', (c) => {\n * return c.json({ message: 'Hello!' })\n * })\n * ```\n */\n json = (object, arg, headers) => {\n return this.#newResponse(\n JSON.stringify(object),\n arg,\n setDefaultContentType(\"application/json\", headers)\n );\n };\n html = (html, arg, headers) => {\n const res = (html2) => this.#newResponse(html2, arg, setDefaultContentType(\"text/html; charset=UTF-8\", headers));\n return typeof html === \"object\" ? resolveCallback(html, HtmlEscapedCallbackPhase.Stringify, false, {}).then(res) : res(html);\n };\n /**\n * `.redirect()` can Redirect, default status code is 302.\n *\n * @see {@link https://hono.dev/docs/api/context#redirect}\n *\n * @example\n * ```ts\n * app.get('/redirect', (c) => {\n * return c.redirect('/')\n * })\n * app.get('/redirect-permanently', (c) => {\n * return c.redirect('/', 301)\n * })\n * ```\n */\n redirect = (location, status) => {\n const locationString = String(location);\n this.header(\n \"Location\",\n // Multibyes should be encoded\n // eslint-disable-next-line no-control-regex\n !/[^\\x00-\\xFF]/.test(locationString) ? locationString : encodeURI(locationString)\n );\n return this.newResponse(null, status ?? 302);\n };\n /**\n * `.notFound()` can return the Not Found Response.\n *\n * @see {@link https://hono.dev/docs/api/context#notfound}\n *\n * @example\n * ```ts\n * app.get('/notfound', (c) => {\n * return c.notFound()\n * })\n * ```\n */\n notFound = () => {\n this.#notFoundHandler ??= () => new Response();\n return this.#notFoundHandler(this);\n };\n};\nexport {\n Context,\n TEXT_PLAIN\n};\n", "// src/middleware/jwt/jwt.ts\nimport { getCookie, getSignedCookie } from \"../../helper/cookie/index.js\";\nimport { HTTPException } from \"../../http-exception.js\";\nimport { Jwt } from \"../../utils/jwt/index.js\";\nimport \"../../context.js\";\nvar jwt = (options) => {\n const verifyOpts = options.verification || {};\n if (!options || !options.secret) {\n throw new Error('JWT auth middleware requires options for \"secret\"');\n }\n if (!crypto.subtle || !crypto.subtle.importKey) {\n throw new Error(\"`crypto.subtle.importKey` is undefined. JWT auth middleware requires it.\");\n }\n return async function jwt2(ctx, next) {\n const headerName = options.headerName || \"Authorization\";\n const credentials = ctx.req.raw.headers.get(headerName);\n let token;\n if (credentials) {\n const parts = credentials.split(/\\s+/);\n if (parts.length !== 2) {\n const errDescription = \"invalid credentials structure\";\n throw new HTTPException(401, {\n message: errDescription,\n res: unauthorizedResponse({\n ctx,\n error: \"invalid_request\",\n errDescription\n })\n });\n } else {\n token = parts[1];\n }\n } else if (options.cookie) {\n if (typeof options.cookie == \"string\") {\n token = getCookie(ctx, options.cookie);\n } else if (options.cookie.secret) {\n if (options.cookie.prefixOptions) {\n token = await getSignedCookie(\n ctx,\n options.cookie.secret,\n options.cookie.key,\n options.cookie.prefixOptions\n );\n } else {\n token = await getSignedCookie(ctx, options.cookie.secret, options.cookie.key);\n }\n } else {\n if (options.cookie.prefixOptions) {\n token = getCookie(ctx, options.cookie.key, options.cookie.prefixOptions);\n } else {\n token = getCookie(ctx, options.cookie.key);\n }\n }\n }\n if (!token) {\n const errDescription = \"no authorization included in request\";\n throw new HTTPException(401, {\n message: errDescription,\n res: unauthorizedResponse({\n ctx,\n error: \"invalid_request\",\n errDescription\n })\n });\n }\n let payload;\n let cause;\n try {\n payload = await Jwt.verify(token, options.secret, {\n alg: options.alg,\n ...verifyOpts\n });\n } catch (e) {\n cause = e;\n }\n if (!payload) {\n throw new HTTPException(401, {\n message: \"Unauthorized\",\n res: unauthorizedResponse({\n ctx,\n error: \"invalid_token\",\n statusText: \"Unauthorized\",\n errDescription: \"token verification failure\"\n }),\n cause\n });\n }\n ctx.set(\"jwtPayload\", payload);\n await next();\n };\n};\nfunction unauthorizedResponse(opts) {\n return new Response(\"Unauthorized\", {\n status: 401,\n statusText: opts.statusText,\n headers: {\n \"WWW-Authenticate\": `Bearer realm=\"${opts.ctx.req.url}\",error=\"${opts.error}\",error_description=\"${opts.errDescription}\"`\n }\n });\n}\nvar verifyWithJwks = Jwt.verifyWithJwks;\nvar verify = Jwt.verify;\nvar decode = Jwt.decode;\nvar sign = Jwt.sign;\nexport {\n decode,\n jwt,\n sign,\n verify,\n verifyWithJwks\n};\n", "import type { PlanetCore } from 'gravito-core';\nimport type { Context, Next } from 'hono';\nimport { sign, verify } from 'hono/jwt';\n\nexport interface OrbitAuthOptions {\n secret: string;\n exposeAs?: string; // Default: 'auth'\n}\n\nexport type AuthPayload = {\n sub: string;\n role?: string;\n [key: string]: unknown;\n};\n\nexport default function orbitAuth(core: PlanetCore, options: OrbitAuthOptions) {\n const { secret, exposeAs = 'auth' } = options;\n const logger = core.logger;\n\n logger.info(`[OrbitAuth] Initializing Auth (Exposed as: ${exposeAs})`);\n\n // Helper Methods\n const authService = {\n async sign(payload: AuthPayload): Promise