2.0.0 (#36)

Implements a new major version of Edge-CSRF (2.0.0) with several breaking changes:
* Splits functionality into three separate public packages:
  * `@edge-csrf/nextjs` - Next.js integration library
  * `@edge-csrf/sveltekit` - SvelteKit integration library
  * `@edge-csrf/core` - Core API
* The integration libraries each offer high-level and low-level integration methods:
  * A method for creating drop-in middleware (e.g. `createCsrfMiddleware()`, `createCsrfHandle()`)
  * A method for creating functions that can be used inside middleware (e.g. `createCsrfProtect()`)
* Internally the code was re-organized into a monorepo structure with three public packages and a private package for shared code using pnpm workspaces for management
* It should be easy to add new framework integrations with the new repo structure

.eslintrc.json → .eslintrc.cjs

@@ -1,11 +1,11 @@
-{
+module.exports = {
   "root": true,
   "plugins": [
     "@typescript-eslint"
   ],
   "extends": [
-    "airbnb",
-    "airbnb-typescript",
+    "airbnb-base",
+    "airbnb-typescript/base",
     "plugin:@typescript-eslint/recommended"
   ],
   "parser": "@typescript-eslint/parser",
@@ -14,11 +14,18 @@
   },
   "ignorePatterns": [],
   "rules": {
+    "@typescript-eslint/naming-convention": "off",
+    "@typescript-eslint/no-explicit-any": "off",
+    "import/extensions": "off",
+    "import/no-extraneous-dependencies": ["error", {
+      "packageDir": [".", __dirname]  // This tells ESLint to check both the local and root package.json files
+    }],
+    "import/prefer-default-export": "off",
     "max-classes-per-file": "off",
     "max-len": "off",
     "no-await-in-loop": "off",
     "no-restricted-syntax": "off",
     "no-underscore-dangle": "off",
     "object-curly-newline": "off"
   }
-}
+};

.github/workflows/ci.yml

@@ -17,7 +17,7 @@ jobs:
         with:
           version: 8
       - run: pnpm install
-      - run: pnpm lint
+      - run: pnpm -r lint
 
   test:
     runs-on: ubuntu-latest
@@ -30,7 +30,10 @@ jobs:
         with:
           version: 8
       - run: pnpm install
-      - run: pnpm test run
+      - run: pnpm -r test run -- --environment node
+      - run: pnpm -r test run -- --environment edge-runtime
+      - run: pnpm -r build # only necessary for miniflare
+      - run: pnpm -r test run -- --environment miniflare
 
   build:
     runs-on: ubuntu-latest
@@ -43,4 +46,4 @@ jobs:
         with:
           version: 8
       - run: pnpm install
-      - run: pnpm build
+      - run: pnpm -r build

.github/workflows/publish.yml

@@ -12,6 +12,9 @@ jobs:
       packages: write
       contents: read
     steps:
+      - name: Get tag name
+        uses: olegtarasov/[email protected]
+        id: tagName
       - uses: actions/checkout@v4
       - uses: actions/setup-node@v4
         with:
@@ -21,7 +24,8 @@ jobs:
         with:
           version: 8
       - run: pnpm install
-      - run: pnpm build
-      - run: pnpm publish --no-git-checks --access public
+      - run: pnpm -r build
+      - run: /bin/bash set-version.sh ${{ steps.tagName.outputs.tag }}
+      - run: pnpm -r publish --no-git-checks --access public
         env:
           NODE_AUTH_TOKEN: ${{secrets.NPM_TOKEN}}

.gitignore

@@ -3,10 +3,32 @@
 # For a project mostly in C, the following would be a good set of
 # exclude patterns (uncomment them if you want to use them):
 # *.[oa]
+.DS_Store
 *~
 \#*
 node_modules
 .next
+.env
 .env*.local
+.env.*
+!.env.example
 dist
+build
 .vscode
+
+# vite
+vite.config.js.timestamp-*
+vite.config.ts.timestamp-*
+
+# sveltkit
+.svelte-kit
+
+# vercel
+.vercel
+
+# wrangler files
+.wrangler
+.dev.vars
+
+# lerna
+.nx