Version 1.2: Update on runtime support

[pilcrowonpaper]

Make sure to use 1.2.1 - there was a broken import statement in 1.2.0

Hello! This is an important update as Lucia now documents runtime support:

• Node.js v19 or later
• Deno v1.18 or later
• Cloudflare Workers (including Vercel Edge functions)
• Bun v0.2.2 or later

Node 19?! Yeah... Lucia doesn't rely on any dependencies (including native Node.js modules), which is great, but it requires the Crypto web API. And... the one runtime version that doesn't expose it as a global object is Node.js 18 and lower. (Why do you have to do this to me)

So with this update, you'll now have to polyfill and expose Crypto (specifically webcrypto from Node crypto module - yes it's kinda confusing) as a global variable. This is already handled in SvelteKit and does not require any action on your front. For those not using those frameworks (including Astro and Next.js), you have 3 options:

• Next.js instructions
• Astro instructions (Requires [email protected])

1. Use the polyfill provided by Lucia

Import lucia-auth/polyfill/node before initializing Lucia:

import { lucia } from "lucia-auth";
import "lucia-auth/polyfill/node";

export const auth = lucia();

This is only available for Node.js v16 or later.

2. Use --experimental-global-webcrypto flag

This is only available for Node.js v16 or later.

node --experimental-global-webcrypto index.js

3. Use a third party polyfill

globalThis.crypto = webcryptoPolyfill;

[calvin-mclain]

Have you considered using cuid2 instead of web crypto? I think it wouldn't have this problem.

[pilcrowonpaper]

WebCrypto API. It uses Scrypt for hashing.

[stychu]

But I mean, if its only being used for password hashing mechanism or other things in Lucia as well? Could it be separated so if you dont use username/password method at all then WebCrypto could be opted out?

[pilcrowonpaper]

Saw this late at night and missed the just part. It uses the WebCrypto API for generating cryptographically random strings for user ids and session ids as well.

[carere]

@pilcrowonpaper Well since Lucia, uses WebCrypto API, it means that it works in Deno natively ?

[pilcrowonpaper]

Yes