@absolutejs/auth 0.57.8 → 0.58.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +33 -0
- package/dist/agents/index.d.ts +1 -1
- package/dist/agents/index.js +66 -35
- package/dist/agents/index.js.map +3 -3
- package/dist/agents/postgresStores.d.ts +586 -1
- package/dist/cli/migrate.js +46 -14
- package/dist/cli/migrate.js.map +5 -5
- package/dist/index.d.ts +11 -5
- package/dist/index.js +286 -58
- package/dist/index.js.map +14 -13
- package/dist/manifest.js +8 -1
- package/dist/manifest.js.map +3 -3
- package/dist/manifest.json +9 -0
- package/dist/mfa/challenge.d.ts +4 -2
- package/dist/mfa/config.d.ts +6 -0
- package/dist/mfa/postgresMfaStore.d.ts +45 -0
- package/dist/mfa/routes.d.ts +9 -4
- package/dist/mfa/sms.d.ts +38 -5
- package/dist/mfa/types.d.ts +4 -0
- package/dist/server.d.ts +1 -0
- package/dist/server.js +280 -59
- package/dist/server.js.map +15 -14
- package/dist/types.d.ts +5 -1
- package/dist/verification/types.d.ts +47 -0
- package/package.json +1 -1
package/dist/cli/migrate.js
CHANGED
|
@@ -381,23 +381,28 @@ var portableJsonb = customType({
|
|
|
381
381
|
fromDriver: (value) => typeof value === "string" ? JSON.parse(value) : value,
|
|
382
382
|
toDriver: (value) => JSON.stringify(value)
|
|
383
383
|
});
|
|
384
|
-
var
|
|
384
|
+
var bunSqlJsonb = customType({
|
|
385
|
+
dataType: () => "jsonb",
|
|
386
|
+
fromDriver: (value) => typeof value === "string" ? JSON.parse(value) : value,
|
|
387
|
+
toDriver: (value) => value
|
|
388
|
+
});
|
|
389
|
+
var createAgentDelegationsTable = (json) => pgTable3("auth_agent_delegations", {
|
|
385
390
|
agent_id: varchar3("agent_id", { length: ID_LENGTH3 }).notNull(),
|
|
386
|
-
authorization_details:
|
|
391
|
+
authorization_details: json("authorization_details").$type(),
|
|
387
392
|
created_at_ms: bigint3("created_at_ms", { mode: "number" }).notNull(),
|
|
388
393
|
delegation_id: varchar3("delegation_id", {
|
|
389
394
|
length: ID_LENGTH3
|
|
390
395
|
}).primaryKey(),
|
|
391
396
|
expires_at_ms: bigint3("expires_at_ms", { mode: "number" }),
|
|
392
397
|
organization_id: varchar3("organization_id", { length: ID_LENGTH3 }),
|
|
393
|
-
scopes:
|
|
398
|
+
scopes: json("scopes").$type().notNull().default([]),
|
|
394
399
|
status: varchar3("status", { length: STATUS_LENGTH }).$type().notNull(),
|
|
395
400
|
updated_at_ms: bigint3("updated_at_ms", { mode: "number" }).notNull(),
|
|
396
401
|
user_id: varchar3("user_id", { length: ID_LENGTH3 }).notNull()
|
|
397
402
|
});
|
|
398
|
-
var
|
|
403
|
+
var createAgentIdentityRegistrationsTable = (json) => pgTable3("auth_agent_identity_registrations", {
|
|
399
404
|
agent_id: varchar3("agent_id", { length: ID_LENGTH3 }).notNull().unique(),
|
|
400
|
-
claim_attempt:
|
|
405
|
+
claim_attempt: json("claim_attempt").$type(),
|
|
401
406
|
claim_attempt_token_hash: varchar3("claim_attempt_token_hash", {
|
|
402
407
|
length: ID_LENGTH3
|
|
403
408
|
}).unique(),
|
|
@@ -407,8 +412,12 @@ var agentIdentityRegistrationsTable = pgTable3("auth_agent_identity_registration
|
|
|
407
412
|
claim_token_hash: varchar3("claim_token_hash", {
|
|
408
413
|
length: ID_LENGTH3
|
|
409
414
|
}).notNull().unique(),
|
|
410
|
-
created_at_ms: bigint3("created_at_ms", {
|
|
411
|
-
|
|
415
|
+
created_at_ms: bigint3("created_at_ms", {
|
|
416
|
+
mode: "number"
|
|
417
|
+
}).notNull(),
|
|
418
|
+
expires_at_ms: bigint3("expires_at_ms", {
|
|
419
|
+
mode: "number"
|
|
420
|
+
}).notNull(),
|
|
412
421
|
kind: varchar3("kind", { length: 32 }).$type().notNull(),
|
|
413
422
|
last_polled_at_ms: bigint3("last_polled_at_ms", { mode: "number" }),
|
|
414
423
|
login_hint: varchar3("login_hint", { length: ID_LENGTH3 }),
|
|
@@ -416,27 +425,37 @@ var agentIdentityRegistrationsTable = pgTable3("auth_agent_identity_registration
|
|
|
416
425
|
length: ID_LENGTH3
|
|
417
426
|
}).primaryKey(),
|
|
418
427
|
status: varchar3("status", { length: STATUS_LENGTH }).$type().notNull(),
|
|
419
|
-
updated_at_ms: bigint3("updated_at_ms", {
|
|
428
|
+
updated_at_ms: bigint3("updated_at_ms", {
|
|
429
|
+
mode: "number"
|
|
430
|
+
}).notNull(),
|
|
420
431
|
upstream_client_id: varchar3("upstream_client_id", {
|
|
421
432
|
length: ID_LENGTH3
|
|
422
433
|
}),
|
|
423
434
|
upstream_issuer: varchar3("upstream_issuer", { length: ID_LENGTH3 }),
|
|
424
|
-
upstream_subject: varchar3("upstream_subject", {
|
|
435
|
+
upstream_subject: varchar3("upstream_subject", {
|
|
436
|
+
length: ID_LENGTH3
|
|
437
|
+
}),
|
|
425
438
|
user_id: varchar3("user_id", { length: ID_LENGTH3 }),
|
|
426
439
|
version: integer("version").notNull()
|
|
427
440
|
}, (table) => [
|
|
428
441
|
uniqueIndex("auth_agent_identity_upstream_unique").on(table.upstream_issuer, table.upstream_subject, table.upstream_client_id)
|
|
429
442
|
]);
|
|
430
|
-
var
|
|
443
|
+
var createAgentRegistrationsTable = (json) => pgTable3("auth_agent_registrations", {
|
|
431
444
|
agent_id: varchar3("agent_id", { length: ID_LENGTH3 }).primaryKey(),
|
|
432
|
-
allowed_scopes:
|
|
445
|
+
allowed_scopes: json("allowed_scopes").$type().notNull().default([]),
|
|
433
446
|
client_id: varchar3("client_id", { length: ID_LENGTH3 }).unique(),
|
|
434
447
|
created_at_ms: bigint3("created_at_ms", { mode: "number" }).notNull(),
|
|
435
|
-
metadata:
|
|
448
|
+
metadata: json("metadata").$type(),
|
|
436
449
|
name: varchar3("name", { length: NAME_LENGTH }).notNull(),
|
|
437
450
|
status: varchar3("status", { length: STATUS_LENGTH }).$type().notNull(),
|
|
438
451
|
updated_at_ms: bigint3("updated_at_ms", { mode: "number" }).notNull()
|
|
439
452
|
});
|
|
453
|
+
var agentDelegationsBunSqlTable = createAgentDelegationsTable(bunSqlJsonb);
|
|
454
|
+
var agentDelegationsTable = createAgentDelegationsTable(portableJsonb);
|
|
455
|
+
var agentIdentityRegistrationsBunSqlTable = createAgentIdentityRegistrationsTable(bunSqlJsonb);
|
|
456
|
+
var agentIdentityRegistrationsTable = createAgentIdentityRegistrationsTable(portableJsonb);
|
|
457
|
+
var agentRegistrationsBunSqlTable = createAgentRegistrationsTable(bunSqlJsonb);
|
|
458
|
+
var agentRegistrationsTable = createAgentRegistrationsTable(portableJsonb);
|
|
440
459
|
|
|
441
460
|
// src/audit/postgresAuditStore.ts
|
|
442
461
|
import { desc as desc4, eq as eq4, lt as lt2 } from "drizzle-orm";
|
|
@@ -2669,12 +2688,15 @@ var mfaEnrollmentsTable = pgTable9("auth_mfa_enrollments", {
|
|
|
2669
2688
|
backup_code_hashes: jsonb3("backup_code_hashes").$type().notNull().default([]),
|
|
2670
2689
|
created_at_ms: bigint7("created_at_ms", { mode: "number" }).notNull(),
|
|
2671
2690
|
last_used_at_ms: bigint7("last_used_at_ms", { mode: "number" }),
|
|
2691
|
+
sms_code_sent_at_ms: bigint7("sms_code_sent_at_ms", { mode: "number" }),
|
|
2672
2692
|
sms_failed_attempts: smallint("sms_failed_attempts").notNull().default(0),
|
|
2673
2693
|
sms_pending_code_expires_at_ms: bigint7("sms_pending_code_expires_at_ms", {
|
|
2674
2694
|
mode: "number"
|
|
2675
2695
|
}),
|
|
2676
2696
|
sms_pending_code_hash: text4("sms_pending_code_hash"),
|
|
2697
|
+
sms_pending_purpose: text4("sms_pending_purpose").$type(),
|
|
2677
2698
|
sms_phone: varchar9("sms_phone", { length: PHONE_LENGTH }),
|
|
2699
|
+
sms_provider_reference: text4("sms_provider_reference"),
|
|
2678
2700
|
sms_verified: boolean3("sms_verified").notNull().default(false),
|
|
2679
2701
|
totp_failed_attempts: smallint("totp_failed_attempts").notNull().default(0),
|
|
2680
2702
|
totp_secret_ciphertext: text4("totp_secret_ciphertext"),
|
|
@@ -3221,6 +3243,15 @@ var mfaTotpLockoutMigration = {
|
|
|
3221
3243
|
id: "0003_totp_lockout",
|
|
3222
3244
|
sql: 'ALTER TABLE "auth_mfa_enrollments" ADD COLUMN IF NOT EXISTS "totp_failed_attempts" smallint NOT NULL DEFAULT 0;'
|
|
3223
3245
|
};
|
|
3246
|
+
var mfaSmsDeliveryPolicyMigration = {
|
|
3247
|
+
id: "0004_sms_delivery_policy",
|
|
3248
|
+
sql: [
|
|
3249
|
+
'ALTER TABLE "auth_mfa_enrollments" ADD COLUMN IF NOT EXISTS "sms_code_sent_at_ms" bigint;',
|
|
3250
|
+
'ALTER TABLE "auth_mfa_enrollments" ADD COLUMN IF NOT EXISTS "sms_pending_purpose" text;',
|
|
3251
|
+
'ALTER TABLE "auth_mfa_enrollments" ADD COLUMN IF NOT EXISTS "sms_provider_reference" text;'
|
|
3252
|
+
].join(`
|
|
3253
|
+
`)
|
|
3254
|
+
};
|
|
3224
3255
|
var oidcResourceAudienceMigration = {
|
|
3225
3256
|
id: "0002_resource_audience",
|
|
3226
3257
|
sql: [
|
|
@@ -3275,7 +3306,8 @@ var blockMigrations = {
|
|
|
3275
3306
|
migrations: [
|
|
3276
3307
|
...initMigration("mfa", [mfaEnrollmentsTable]).migrations,
|
|
3277
3308
|
mfaSmsColumnsMigration,
|
|
3278
|
-
mfaTotpLockoutMigration
|
|
3309
|
+
mfaTotpLockoutMigration,
|
|
3310
|
+
mfaSmsDeliveryPolicyMigration
|
|
3279
3311
|
]
|
|
3280
3312
|
},
|
|
3281
3313
|
oidc: {
|
|
@@ -3512,5 +3544,5 @@ var main = async () => {
|
|
|
3512
3544
|
};
|
|
3513
3545
|
await main();
|
|
3514
3546
|
|
|
3515
|
-
//# debugId=
|
|
3547
|
+
//# debugId=19A5010083F8B61F64756E2164756E21
|
|
3516
3548
|
//# sourceMappingURL=migrate.js.map
|