chore: migrate to lucia v3

.github/scripts/deploy.py

@@ -37,6 +37,7 @@ def main(environment_name: str, verbose: bool = False):
     REDIS_NAME = "jabref"
     DATABASE_URL = os.environ.get("DATABASE_URL", "<Not specified>")
     SESSION_SECRET = os.environ.get("AZURE_SESSION_SECRET", "<Not specified>")
+    SESSION_SEAL = os.environ.get("AZURE_SESSION_SEAL", "<Not specified>")
     GITHUB_REPO_TOKEN = os.environ.get("GITHUB_REPO_TOKEN", "<Not specified>")
 
     function_app_name = "jabref-function-" + environment_name
@@ -133,6 +134,7 @@ def main(environment_name: str, verbose: bool = False):
                         "value": redis_keys.primary_key,
                     },
                     {"name": "SESSION_SECRET_PRIMARY", "value": SESSION_SECRET},
+                    {"name": "SESSION_SEAL", "value": SESSION_SEAL},
                     {"name": "GITHUB_REPO_TOKEN", "value": GITHUB_REPO_TOKEN},
                     # Disable indexing of non-production sites
                     # https://nuxtseo.com/robots/guides/disable-indexing#preview-staging-testing-environments

.vscode/settings.json

@@ -15,6 +15,7 @@
     "scimago",
     "transpiled",
     "tsyringe",
+    "Unstorage",
     "upsert"
   ],
   "[jsonc]": {

apollo/validation.ts

@@ -1,12 +1,13 @@
 import { z } from 'zod'
-import type { LoginInput, SignupInput } from './graphql'
+import type { ChangePasswordInput, LoginInput, SignupInput } from './graphql'
 import {
+  ChangePasswordInputSchema as InternalChangePasswordInputSchema,
   LoginInputSchema as InternalLoginInputSchema,
   SignupInputSchema as InternalSignupInputSchema,
 } from './validation.internal'
 
 type Properties<T> = Required<{
   [K in keyof T]: z.ZodType<T[K], any, T[K]>
 }>
 
 const passwordSchema = z
@@ -24,3 +25,9 @@
     email: z.string().email(),
     password: passwordSchema,
   })
+
+export const ChangePasswordInputSchema: z.ZodObject<
+  Properties<ChangePasswordInput>
+> = InternalChangePasswordInputSchema.extend({
+  newPassword: passwordSchema,
+})

config.ts

@@ -65,6 +65,7 @@ export interface Config {
   session: {
     primarySecret: string
     secondarySecret: string
+    seal: string
   }
   githubRepoToken: string
   public: {
@@ -87,6 +88,9 @@ export function constructConfig() {
     session: {
       primarySecret: process.env.SESSION_SECRET_PRIMARY ?? 'session_secret',
       secondarySecret: process.env.SESSION_SECRET_SECONDARY ?? 'session_secret',
+      // seal has to be min 32 characters
+      seal:
+        process.env.SESSION_SEAL ?? 'session_seal_session_seal_session_seal',
     },
     githubRepoToken: process.env.GITHUB_REPO_TOKEN ?? 'UNDEFINED',
     public: {

package.json

@@ -48,7 +48,7 @@
     "@azure/communication-email": "1.0.0",
     "@graphql-tools/schema": "10.0.4",
     "@he-tree/vue": "2.8.2",
-    "@lucia-auth/adapter-prisma": "^3.0.2",
+    "@lucia-auth/adapter-prisma": "^4.0.0",
     "@lucia-auth/adapter-session-unstorage": "^2.1.0",
     "@nuxtjs/tailwindcss": "6.12.1",
     "@pinia/nuxt": "0.5.2",
@@ -69,7 +69,7 @@
     "ioredis": "5.4.1",
     "json-bigint-patch": "0.0.8",
     "lodash": "4.17.21",
-    "lucia": "^2.7.4",
+    "lucia": "^3.0.1",
     "pinia": "2.2.0",
     "reflect-metadata": "0.2.2",
     "ts-loader": "9.5.1",