lucia-auth: A fresh start

[pilcrowonpaper]

Hi!

From today, lucia-sveltekit has been separated into 2 packages: lucia-auth and @lucia-auth/sveltekit. This means the core Lucia package is framework agnostic, and can be used in any Node environments. I'm planning to make integration package for Express and NextJS, and maybe other popular ones as well.

Thanks for sticking with us!

Migration

First, install both lucia-auth and @lucia-auth/sveltekit. Using your editor's find-and-replace, replace lucia-sveltekit with lucia-auth, @lucia-sveltekit with @lucia-auth.

Next, follow the SvelteKit guide to update your import statements. In general, SvelteKit specific code (all client code) is exported by @lucia-auth/sveltekit. Some things to look out for:

• Change auth.handleServerSession() to handleServerSession(auth), auth.handleHooks() to handleHooks(auth). Make sure to import handleServerSession() and handleHooks() from @lucia-auth/sveltekit
• Add handleSession() to your root layout page
• getUser() returns a store, not an object (just add $)
• You can use invalidateAll() instead of a full refresh to update the current session in the client
• signOut() no longer takes in an optional url

Other than that, there have been some changes to the core package as well:

• validateRequest() will not attempt to renew the session if it is invalid
• new createSessionCookies() and createBlankSessionCookies()