@absolutejs/auth 0.80.1 → 0.81.0

package/dist/manifest.json

@@ -333,7 +333,7 @@
 	},
 	"wiring": [
 		{
-			"description": "Sign in with Google, GitHub, and 60+ other services. Add email/password later from settings.",
+			"description": "Sign in with Google, GitHub, and 60+ other services. For email/password use get_credentials_integration and supply application-owned user, storage and email bindings.",
 			"id": "default",
 			"server": {
 				"code": ".use(\n\tawait auth({\n\t\t// TODO: return your application user for a session subject.\n\t\tgetUser: (sub) => ({ sub }),\n\t\tauthSessionStore: ${slot.sessionStore},\n\t\tcookieSecure: ${settings.cookieSecure},\n\t\tmaxSessions: ${settings.maxSessions},\n\t\tprovidersConfiguration: providersFromEnv(${settings.providersConfiguration} ?? {}),\n\t\tsessionDurationMs: ${settings.sessionDurationMs}\n\t})\n)",
@@ -352,6 +352,30 @@
 		}
 	],
 	"tools": {
+		"get_credentials_integration": {
+			"annotations": {
+				"readOnlyHint": true
+			},
+			"authorization": {
+				"approval": "never",
+				"audience": "admin",
+				"effects": [
+					"read"
+				],
+				"requiredScopes": [
+					"auth:inspect"
+				]
+			},
+			"capabilities": [
+				"read"
+			],
+			"description": "Get the package-owned typed email/password API and protected account route recipe. Reuse createCredentialsApi rather than inventing request wrappers. Requires application-owned user callbacks, a durable session and credential store, and real email delivery.",
+			"input": {
+				"type": "object",
+				"properties": {}
+			},
+			"kind": "workspace"
+		},
 		"list_sign_in_providers": {
 			"annotations": {
 				"readOnlyHint": true

package/dist/server.d.ts

@@ -34,3 +34,4 @@ export type { AuthConfig, OAuth2ConfigurationOptions, SessionData, UnregisteredS
 export { instantiateUserSession } from './utils';
 export type { OAuth2TokenResponse, ProviderOption } from 'citra';
 export { extractPropFromIdentity, isValidProviderOption, providers } from 'citra';
+export { createCredentialsApi } from './credentials/api';

package/dist/server.js

@@ -4015,7 +4015,7 @@ var createCustomOAuth2Client = (providerConfig, credentials) => buildOAuth2Clien
 var createOAuth2Client = (providerName, config) => buildOAuth2Client(providers[providerName], config);
 
 // src/index.ts
-import { Elysia as Elysia48 } from "elysia";
+import { Elysia as Elysia49 } from "elysia";
 
 // src/apikeys/routes.ts
 import { Elysia, t } from "elysia";
@@ -6858,7 +6858,11 @@ var DEFAULT_RESET_TOKEN_TTL_MS = MILLISECONDS_IN_AN_HOUR;
 var DEFAULT_VERIFICATION_TOKEN_TTL_MS = MILLISECONDS_IN_A_DAY;
 
 // src/credentials/emailVerification.ts
-var credentialsEmailVerification = ({
+var credentialsEmailVerification = (configuration) => credentialsEmailVerificationRoute({
+  ...configuration,
+  verifyEmailRoute: configuration.verifyEmailRoute ?? "/auth/verify-email"
+});
+var credentialsEmailVerificationRoute = ({
   credentialStore,
   getUserByEmail,
   onCreateCredentialUser,
@@ -6867,7 +6871,7 @@ var credentialsEmailVerification = ({
   onSendEmail,
   requireEmailVerification = false,
   verificationTokenDurationMs = DEFAULT_VERIFICATION_TOKEN_TTL_MS,
-  verifyEmailRoute = "/auth/verify-email"
+  verifyEmailRoute
 }) => new Elysia10().post(verifyEmailRoute, { body: t7.Object({ token: t7.String() }) }, async ({ body: { token }, status }) => {
   const consumed = await credentialStore.consumeVerificationToken(await hashToken(token));
   if (!consumed) {
@@ -7147,7 +7151,11 @@ var isPasswordCompromised = (password) => isPasswordBreached(password);
 // src/credentials/login.ts
 var dummyPasswordHashPromise;
 var dummyPasswordHash = () => dummyPasswordHashPromise ??= hashPassword("absolutejs-auth-timing-equalizer");
-var credentialsLogin = ({
+var credentialsLogin = (configuration) => credentialsLoginRoute({
+  ...configuration,
+  loginRoute: configuration.loginRoute ?? "/auth/login"
+});
+var credentialsLoginRoute = ({
   authSessionStore,
   checkBreachesOnLogin,
   cookieSecure,
@@ -7156,7 +7164,7 @@ var credentialsLogin = ({
   getUserByEmail,
   isMfaRequired,
   lockoutGuard,
-  loginRoute = "/auth/login",
+  loginRoute,
   onCredentialsLoginError,
   onCredentialsLoginSuccess,
   onUntrustedOrigin,
@@ -7269,12 +7277,16 @@ var credentialsLogin = ({
 // src/credentials/passwordReset.ts
 init_crypto();
 import { Elysia as Elysia12, t as t9 } from "elysia";
-var credentialsPasswordReset = ({
+var credentialsPasswordReset = (configuration) => credentialsPasswordResetRoute({
+  ...configuration,
+  resetPasswordRoute: configuration.resetPasswordRoute ?? "/auth/reset-password"
+});
+var credentialsPasswordResetRoute = ({
   credentialStore,
   onPasswordReset,
   onSendEmail,
   passwordPolicy,
-  resetPasswordRoute = "/auth/reset-password",
+  resetPasswordRoute,
   resetTokenDurationMs = DEFAULT_RESET_TOKEN_TTL_MS
 }) => new Elysia12().post(`${resetPasswordRoute}/request`, { body: t9.Object({ email: t9.String() }) }, async ({ body: { email }, status }) => {
   const normalizedEmail = email.trim().toLowerCase();
@@ -7331,7 +7343,11 @@ var credentialsPasswordReset = ({
 // src/credentials/register.ts
 init_crypto();
 import { Elysia as Elysia13, t as t10 } from "elysia";
-var credentialsRegister = ({
+var credentialsRegister = (configuration) => credentialsRegisterRoute({
+  ...configuration,
+  registerRoute: configuration.registerRoute ?? "/auth/register"
+});
+var credentialsRegisterRoute = ({
   authSessionStore,
   cookieSecure,
   credentialStore,
@@ -7344,7 +7360,7 @@ var credentialsRegister = ({
   onSendEmail,
   onUntrustedOrigin,
   passwordPolicy,
-  registerRoute = "/auth/register",
+  registerRoute,
   requireEmailVerification = false,
   revealRegistrationConflicts = false,
   sessionDurationMs = DEFAULT_CREDENTIAL_SESSION_TTL_MS,
@@ -41561,6 +41577,21 @@ var createInMemorySetupSessionStore = () => {
     }
   };
 };
+// src/credentials/api.ts
+import { Elysia as Elysia48 } from "elysia";
+var createCredentialsApi = (configuration) => new Elysia48().use(credentialsRegisterRoute({
+  ...configuration,
+  registerRoute: "/auth/register"
+})).use(credentialsLoginRoute({
+  ...configuration,
+  loginRoute: "/auth/login"
+})).use(credentialsEmailVerificationRoute({
+  ...configuration,
+  verifyEmailRoute: "/auth/verify-email"
+})).use(credentialsPasswordResetRoute({
+  ...configuration,
+  resetPasswordRoute: "/auth/reset-password"
+}));
 
 // src/index.ts
 var validatePositiveOptions = (prefix, options) => {
@@ -41794,7 +41825,7 @@ var buildAuthApplications = async (configuration) => {
   const auditedOnRevocationSuccess = auditEmit ? composeRevocationAudit(onRevocationSuccess, auditEmit) : onRevocationSuccess;
   const auditedOnSignOut = auditEmit ? composeSignOutAudit(onSignOut, auditEmit) : onSignOut;
   const pluginSeed = pluginDependencySeed(configuration);
-  const coreRoutes = new Elysia48({
+  const coreRoutes = new Elysia49({
     name: "@absolutejs/auth/core-routes",
     seed: pluginSeed
   }).use([
@@ -41851,62 +41882,62 @@ var buildAuthApplications = async (configuration) => {
       profileRoute
     })
   ]);
-  const identityFeatureRoutes = new Elysia48().use([
+  const identityFeatureRoutes = new Elysia49().use([
     auditedCredentials ? credentialRoutes({
       ...auditedCredentials,
       authSessionStore,
       cookieSecure: resolvedCookieSecure,
       lockoutGuard
-    }) : new Elysia48,
+    }) : new Elysia49,
     auditedMfa ? mfaRoutes({
       ...auditedMfa,
       authSessionStore,
       cookieSecure: resolvedCookieSecure,
       verificationProvider
-    }) : new Elysia48,
+    }) : new Elysia49,
     passwordless ? passwordlessRoutes({
       ...passwordless,
       authSessionStore,
       cookieSecure: resolvedCookieSecure,
       emit: auditEmit
-    }) : new Elysia48,
-    sessions ? sessionRoutes({ ...sessions, authSessionStore }) : new Elysia48,
+    }) : new Elysia49,
+    sessions ? sessionRoutes({ ...sessions, authSessionStore }) : new Elysia49,
     sso ? oidcSsoRoutes({
       ...sso,
       authSessionStore,
       cookieSecure: resolvedCookieSecure
-    }) : new Elysia48,
+    }) : new Elysia49,
     sso && sso.samlAdapter ? samlSsoRoutes({
       ...sso,
       authSessionStore,
       cookieSecure: resolvedCookieSecure,
       samlAdapter: sso.samlAdapter
-    }) : new Elysia48
+    }) : new Elysia49
   ]);
-  const organizationFeatureRoutes = new Elysia48().use([
+  const organizationFeatureRoutes = new Elysia49().use([
     sso && sso.getOrganizationByEmailDomain ? ssoDiscoveryRoute({
       getOrganizationByEmailDomain: sso.getOrganizationByEmailDomain,
       ssoConnectionStore: sso.ssoConnectionStore,
       ssoRoute: sso.ssoRoute
-    }) : new Elysia48,
-    scim ? scimRoutes(scim) : new Elysia48,
-    apikeys ? apiKeysRoutes(apikeys) : new Elysia48,
+    }) : new Elysia49,
+    scim ? scimRoutes(scim) : new Elysia49,
+    apikeys ? apiKeysRoutes(apikeys) : new Elysia49,
     oidcConfig ? oidcProviderRoutes({
       ...oidcConfig,
       authSessionStore
-    }) : new Elysia48,
+    }) : new Elysia49,
     organizations ? organizationRoutes({
       ...organizations,
       authSessionStore,
       emit: auditEmit
-    }) : new Elysia48,
+    }) : new Elysia49,
     roles ? roleRoutes({
       ...roles,
       authSessionStore,
       emit: auditEmit
-    }) : new Elysia48
+    }) : new Elysia49
   ]);
-  const pushApplication = new Elysia48;
+  const pushApplication = new Elysia49;
   if (pushConfig && oidcConfig)
     pushApplication.use(pushRoutes({
       accessTokens: {
@@ -41916,24 +41947,24 @@ var buildAuthApplications = async (configuration) => {
       authSessionStore,
       config: pushConfig
     }));
-  const extendedFeatureRoutes = new Elysia48().use([
+  const extendedFeatureRoutes = new Elysia49().use([
     pushApplication,
-    portal ? portalRoutes({ ...portal, emit: auditEmit }) : new Elysia48,
+    portal ? portalRoutes({ ...portal, emit: auditEmit }) : new Elysia49,
     webauthn ? webauthnRoutes({
       ...webauthn,
       authSessionStore,
       cookieSecure: resolvedCookieSecure,
       emit: auditEmit
-    }) : new Elysia48,
+    }) : new Elysia49,
     compliance ? complianceRoutes({
       ...compliance,
       authSessionStore,
       emit: auditEmit
-    }) : new Elysia48,
+    }) : new Elysia49,
     createConfiguredAuthHtmxRoutes({ authSessionStore, config: htmx }),
     agentAuthRoutes(resolvedAgentAuth)
   ]);
-  const featureRoutes = new Elysia48({
+  const featureRoutes = new Elysia49({
     name: "@absolutejs/auth/feature-routes",
     seed: pluginSeed
   }).use([
@@ -41956,7 +41987,7 @@ var buildAuthApplications = async (configuration) => {
 };
 var auth = async (configuration) => {
   const { authContext, coreRoutes, featureRoutes } = await buildAuthApplications(configuration);
-  const application = new Elysia48({
+  const application = new Elysia49({
     name: "@absolutejs/auth",
     seed: pluginDependencySeed(configuration)
   });
@@ -42127,6 +42158,7 @@ export {
   auth2 as auth,
   createAbsoluteAuthSyncBridge,
   createAuthContext,
+  createCredentialsApi,
   createNodeSamlAdapter,
   createPostgresScimTokenStore,
   createPostgresSetupSessionStore,
@@ -42144,5 +42176,5 @@ export {
   userSessionIdTypebox
 };
 
-//# debugId=DE4780E5239C13EA64756E2164756E21
+//# debugId=57C7A1ECE15922C664756E2164756E21
 //# sourceMappingURL=server.js.map