.github/FUNDING.yml

@@ -0,0 +1,3 @@
+github: jaredhanson
+patreon: jaredhanson
+ko_fi: jaredhanson

.github/ISSUE_TEMPLATE.md

@@ -0,0 +1,53 @@
+** READ THIS FIRST! **
+
+#### Are you looking for help?
+
+Reminder: The issue tracker is not a support forum.
+
+Issues should only be filed in this project once they are able to be reproduced
+and confirmed as a flaw in the software or incorrect information in associated
+documention.
+
+If you are encountering problems integrating this module into your application,
+please post a question on the [discussion forum](https://github.com/passport/discuss)
+rather than filing an issue.
+
+#### Is this a security issue?
+
+Do not open issues that might have security implications.  Potential security
+vulnerabilities should be reported privately to jaredhanson@gmail.com.  Once any
+vulerabilities have been repaired, the details will be disclosed publicly in a
+responsible manner.  This also allows time for coordinating with affected parties
+in order to mitigate negative consequences.
+
+
+If neither of the above two scenarios apply to your situation, you should open
+an issue.  Delete this paragraph and the text above, and fill in the information
+requested below.
+
+<!-- Provide a brief summary of the issue in the title field above. -->
+
+<!-- Provide a detailed description of your use case, including as much -->
+<!-- detail as possible about what you are trying to accomplish and why. -->
+
+### Expected behavior
+<!-- Provide a detailed description of how you expected the software to -->
+<!-- behave. -->
+
+### Actual behavior
+<!-- Provide a detailed description of how the software actually behaved, -->
+<!-- including any rationale for why that behavior is incorrect. -->
+
+### Steps to reproduce
+<!-- Provide an unambiguous series of steps that can be used to reproduce -->
+<!-- this issue, including any code if applicable. -->
+
+```js
+// Format code using Markdown code blocks
+```
+
+### Environment
+
+* Operating System: 
+* Node version: <!-- $ node -v -->
+* passport version: <!-- $ npm list passport -->

.github/PULL_REQUEST_TEMPLATE.md

@@ -0,0 +1,41 @@
+** READ THIS FIRST! **
+
+#### Are you implementing a new feature?
+
+Requests for new features should first be discussed on the [developer forum](https://github.com/passport/develop).
+This allows the community to gather feedback and assess whether or not there is
+an existing way to achieve the desired functionality.
+
+If it is determined that a new feature needs to be implemented, include a link
+to the relevant discussion along with the pull request.
+
+#### Is this a security patch?
+
+Do not open pull requests that might have security implications.  Potential
+security vulnerabilities should be reported privately to jaredhanson@gmail.com.
+Once any vulerabilities have been repaired, the details will be disclosed
+publicly in a responsible manner.  This also allows time for coordinating with
+affected parties in order to mitigate negative consequences.
+
+
+If neither of the above two scenarios apply to your situation, you should open
+a pull request.  Delete this paragraph and the text above, and fill in the
+information requested below.
+
+<!-- Provide a brief summary of the request in the title field above. -->
+
+<!-- Provide a detailed description of your use case, including as much -->
+<!-- detail as possible about what you are trying to accomplish and why. -->
+<!-- If this patch closes an open issue, include a reference to the issue -->
+<!-- number. -->
+
+### Checklist
+
+<!-- Place an `x` in the boxes that apply.  If you are unsure, please ask and -->
+<!-- we will help. -->
+
+- [ ] I have read the [CONTRIBUTING](https://github.com/jaredhanson/passport/blob/master/CONTRIBUTING.md) guidelines.
+- [ ] I have added test cases which verify the correct operation of this feature or patch.
+- [ ] I have added documentation pertaining to this feature or patch.
+- [ ] The automated test suite (`$ make test`) executes successfully.
+- [ ] The automated code linting (`$ make lint`) executes successfully.

.github/workflows/node.yml

@@ -0,0 +1,42 @@
+# This workflow will do a clean install of node dependencies, cache/restore them, build the source code and run tests across different versions of node
+# For more information see: https://help.github.com/actions/language-and-framework-guides/using-nodejs-with-github-actions
+
+name: Node.js CI
+
+on:
+  push:
+    branches: [ master ]
+  pull_request:
+    branches: [ master ]
+
+jobs:
+  build:
+
+    runs-on: ubuntu-latest
+
+    strategy:
+      matrix:
+        node-version:
+          - '17'
+          - '16'
+          - '14'
+          - '12'
+          - '10'
+          - '8'
+          - '6'
+          - '4'
+          # - '3' # io.js
+          # - '2' # io.js
+          # - '1' # io.js
+          - '0.12'
+          - '0.10'
+          # - '0.8'
+
+    steps:
+    - uses: actions/checkout@v2
+    - name: Use Node.js ${{ matrix.node-version }}
+      uses: actions/setup-node@v2
+      with:
+        node-version: ${{ matrix.node-version }}
+    - run: npm install
+    - run: npm test

.gitignore

@@ -1,9 +1,9 @@
-build/
+docs/
 reports/
 
-# Node.js
-node_modules/
-npm-debug.log
-
 # Mac OS X
 .DS_Store
+
+# Node.js
+node_modules
+npm-debug.log

.npmignore

@@ -1,23 +1,11 @@
+CONTRIBUTING.md
 Makefile
-README.md
-build/
+SPONSORS.md
 docs/
 examples/
 reports/
-support/
 test/
 
-# Node.js
-.npmignore
-node_modules/
-npm-debug.log
-
-# Mac OS X
-.DS_Store
-
-# Git
-.git*
-
-# Utilities
+.github/
 .jshintrc
 .travis.yml

.travis.yml

@@ -1,14 +1,31 @@
 language: "node_js"
 node_js:
+  - "13"
+  - "12"
+  - "11"
+  - "10"
+  - "9"
+  - "8"
+  - "7"
+  - "6"
+  - "5"
+  - "4"
+  - "3" # io.js
+  - "2" # io.js
+  - "1" # io.js
   - "0.12"
   - "0.10"
-  - "iojs"
+#  - "0.8"
+
 
 before_install:
- - "npm install istanbul -g"
- - "npm install coveralls -g"
+  - "npm install make-node@0.3.x -g"
+  - "preinstall-compat"
 
-script: "make ci-travis"
+script:
+  - "make test-cov"
 
 after_success:
-  - "make submit-cov-to-coveralls"
+  - "make report-cov"
+
+sudo: false

CHANGELOG.md

@@ -0,0 +1,64 @@
+# Changelog
+All notable changes to this project will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [Unreleased]
+
+## [0.6.0] - 2022-05-20
+### Security
+
+- Improved robustness against session fixation attacks in cases where there is
+physical access to the same system or the application is susceptible to
+cross-site scripting (XSS).
+
+## [0.5.3] - 2022-05-16
+### Fixed
+
+- `initialize()` middleware extends request with `login()`, `logIn()`,
+`logout()`, `logOut()`, `isAuthenticated()`, and `isUnauthenticated()` functions
+again, reverting change from 0.5.1.
+
+## [0.5.2] - 2021-12-16
+### Fixed
+- Introduced a compatibility layer for strategies that depend directly on
+`passport@0.4.x` or earlier (such as `passport-azure-ad`), which were
+broken by the removal of private variables in `passport@0.5.1`.
+
+## [0.5.1] - 2021-12-15
+### Added
+- Informative error message in session strategy if session support is not
+available.
+
+### Changed
+
+- `authenticate()` middleware, rather than `initialize()` middleware, extends
+request with `login()`, `logIn()`, `logout()`, `logOut()`, `isAuthenticated()`,
+and `isUnauthenticated()` functions.
+
+## [0.5.0] - 2021-09-23
+### Changed
+
+- `initialize()` middleware extends request with `login()`, `logIn()`,
+`logout()`, `logOut()`, `isAuthenticated()`, and `isUnauthenticated()`
+functions.
+
+### Removed
+
+- `login()`, `logIn()`, `logout()`, `logOut()`, `isAuthenticated()`, and
+`isUnauthenticated()` functions no longer added to `http.IncomingMessage.prototype`.
+
+### Fixed
+
+- `userProperty` option to `initialize()` middleware only affects the current
+request, rather than all requests processed via singleton Passport instance,
+eliminating a race condition in situations where `initialize()` middleware is
+used multiple times in an application with `userProperty` set to different
+values.
+
+[Unreleased]: https://github.com/jaredhanson/passport/compare/v0.6.0...HEAD
+[0.6.0]: https://github.com/jaredhanson/passport/compare/v0.5.3...v0.6.0
+[0.5.3]: https://github.com/jaredhanson/passport/compare/v0.5.2...v0.5.3
+[0.5.2]: https://github.com/jaredhanson/passport/compare/v0.5.1...v0.5.2
+[0.5.1]: https://github.com/jaredhanson/passport/compare/v0.5.0...v0.5.1

CONTRIBUTING.md

@@ -0,0 +1,20 @@
+## Contributing
+
+### Tests
+
+The test suite is located in the `test/` directory.  All new features are
+expected to have corresponding test cases with complete code coverage.  Patches
+that increase test coverage are happily accepted.
+
+Ensure that the test suite passes by executing:
+
+```bash
+$ make test
+```
+
+Coverage reports can be generated and viewed by executing:
+
+```bash
+$ make test-cov
+$ make view-cov
+```

LICENSE

@@ -1,6 +1,6 @@
 The MIT License (MIT)
 
-Copyright (c) 2011-2015 Jared Hanson
+Copyright (c) 2011-2021 Jared Hanson
 
 Permission is hereby granted, free of charge, to any person obtaining a copy of
 this software and associated documentation files (the "Software"), to deal in

Makefile

@@ -1,47 +1,25 @@
-SOURCES ?= lib/*.js lib/**/*.js
-TESTS ?= test/*.test.js test/**/*.test.js
+include node_modules/make-node/main.mk
 
-test: test-mocha
-test-cov: test-istanbul-mocha
-view-cov: view-istanbul-report
-lint: lint-jshint
-lint-tests: lint-tests-jshint
 
+SOURCES = lib/*.js lib/**/*.js
+TESTS = test/*.test.js test/**/*.test.js
 
-# ==============================================================================
-# Node.js
-# ==============================================================================
-include support/mk/node.mk
-include support/mk/mocha.mk
-include support/mk/istanbul.mk
+LCOVFILE = ./reports/coverage/lcov.info
 
-# ==============================================================================
-# Analysis
-# ==============================================================================
-include support/mk/notes.mk
-include support/mk/jshint.mk
+MOCHAFLAGS = --require ./test/bootstrap/node
 
-# ==============================================================================
-# Reports
-# ==============================================================================
-include support/mk/coveralls.mk
 
-# ==============================================================================
-# Continuous Integration
-# ==============================================================================
-submit-cov-to-coveralls: submit-istanbul-lcov-to-coveralls
+view-docs:
+	open ./docs/index.html
 
-# Travis CI
-ci-travis: test test-cov
+view-cov:
+	open ./reports/coverage/lcov-report/index.html
 
-# ==============================================================================
-# Clean
-# ==============================================================================
-clean:
-	rm -rf build
-	rm -rf reports
+clean: clean-docs clean-cov
+	-rm -r $(REPORTSDIR)
 
-clobber: clean clobber-node
+clobber: clean
+	-rm -r node_modules
 
 
-.PHONY: test test-cov view-cov lint lint-tests submit-cov-to-coveralls ci-travis clean clobber
+.PHONY: clean clobber