@absolutejs/auth 0.29.1 → 0.29.3

package/dist/credentials/config.d.ts

@@ -22,7 +22,10 @@ export type CredentialsConfig<UserType> = {
     checkBreachesOnLogin?: boolean;
     credentialStore: CredentialStore;
     getUserByEmail: (email: string) => Promise<UserType | null | undefined> | UserType | null | undefined;
-    isMfaRequired?: (user: UserType) => boolean | Promise<boolean>;
+    isMfaRequired?: (user: UserType, context?: {
+        headers: Record<string, string | undefined>;
+        ip?: string;
+    }) => boolean | Promise<boolean>;
     loginRoute?: RouteString;
     onCreateCredentialUser: (identity: CredentialIdentity & Record<string, unknown>) => Promise<Response | StatusReturn | UserType> | Response | StatusReturn | UserType;
     onCredentialsLoginError?: (context: {

package/dist/index.js

@@ -3457,9 +3457,18 @@ var credentialsLogin = ({
 }) => new Elysia6().use(sessionStore()).post(loginRoute, async ({
   body: { email, password },
   cookie: { user_session_id },
+  request,
   status,
   store: { session, unregisteredSession }
 }) => {
+  const headerBag = {};
+  request.headers.forEach((value, key) => {
+    headerBag[key] = value;
+  });
+  const mfaContext = {
+    headers: headerBag,
+    ip: headerBag["cf-connecting-ip"] ?? headerBag["do-connecting-ip"] ?? headerBag["x-forwarded-for"]?.split(",")[0]?.trim() ?? undefined
+  };
   const normalizedEmail = email.trim().toLowerCase();
   const lockState = lockoutGuard ? await lockoutGuard.check(normalizedEmail) : undefined;
   if (lockState?.locked) {
@@ -3483,7 +3492,7 @@ var credentialsLogin = ({
   if (requireEmailVerification && !credential.emailVerified) {
     return status("Forbidden", { status: "email_not_verified" });
   }
-  if (await isMfaRequired?.(user)) {
+  if (await isMfaRequired?.(user, mfaContext)) {
     const compatibilityLayer = await createSessionCompatibilityLayer({
       authSessionStore,
       userSessionId: user_session_id.value
@@ -23217,5 +23226,5 @@ export {
   AuthIdentityConflictError
 };
 
-//# debugId=7EEC3FFFBF5D362764756E2164756E21
+//# debugId=A629114DF39943A964756E2164756E21
 //# sourceMappingURL=index.js.map