Version 1.2: Update on runtime support

[pilcrowOnPaper]

Make sure to use 1.2.1 - there was a broken import statement in 1.2.0

Hello! This is an important update as Lucia now documents runtime support:

• Node.js v19 or later
• Deno v1.18 or later
• Cloudflare Workers (including Vercel Edge functions)
• Bun v0.2.2 or later

Node 19?! Yeah... Lucia doesn't rely on any dependencies (including native Node.js modules), which is great, but it requires the Crypto web API. And... the one runtime version that doesn't expose it as a global object is Node.js 18 and lower. (Why do you have to do this to me)

So with this update, you'll now have to polyfill and expose Crypto (specifically webcrypto from Node crypto module - yes it's kinda confusing) as a global variable. This is already handled in SvelteKit and does not require any action on your front. For those not using those frameworks (including Astro and Next.js), you have 3 options:

• Next.js instructions
• Astro instructions (Requires lucia-auth@1.2.2)

1. Use the polyfill provided by Lucia

Import lucia-auth/polyfill/node before initializing Lucia:

import { lucia } from "lucia-auth";
import "lucia-auth/polyfill/node";

export const auth = lucia();

This is only available for Node.js v16 or later.

2. Use --experimental-global-webcrypto flag

This is only available for Node.js v16 or later.

node --experimental-global-webcrypto index.js

3. Use a third party polyfill

globalThis.crypto = webcryptoPolyfill;

[calvin-mclain]

Have you considered using cuid2 instead of web crypto? I think it wouldn't have this problem.

[pilcrowOnPaper]

The polyfill is for password hashing as well. cuid2 seems to be relying on @nobles/hash, which doesn't provide an easy way to remove crypto as a dependency without relying on a bundler