@adminforth/email-invite 1.1.12 → 1.2.0

package/dist/index.js

@@ -7,7 +7,15 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
         step((generator = generator.apply(thisArg, _arguments || [])).next());
     });
 };
-import AdminForth, { AdminForthPlugin, suggestIfTypo, Filters, afLogger } from "adminforth";
+import AdminForth, { AdminForthPlugin, parseBody, suggestIfTypo, Filters, afLogger } from "adminforth";
+import { z } from "zod";
+const setPasswordBodySchema = z.object({
+    token: z.string(),
+    password: z.string(),
+}).strict();
+const resendInviteBodySchema = z.object({
+    recordId: z.union([z.string(), z.number()]),
+}).strict();
 export default class EmailInvitePlugin extends AdminForthPlugin {
     constructor(options) {
         super(options, import.meta.url);
@@ -197,8 +205,12 @@ export default class EmailInvitePlugin extends AdminForthPlugin {
             method: 'POST',
             path: `/plugin/${this.pluginInstanceId}/set-password`,
             noAuth: true,
-            handler: (_a) => __awaiter(this, [_a], void 0, function* ({ body }) {
-                const { token, password } = body;
+            handler: (_a) => __awaiter(this, [_a], void 0, function* ({ body, response }) {
+                const parsed = parseBody(setPasswordBodySchema, body, response);
+                if ('error' in parsed)
+                    return parsed.error;
+                const data = parsed.data;
+                const { token, password } = data;
                 try {
                     const decoded = yield this.adminforth.auth.verify(token, 'inviteUser', false);
                     if (!decoded || !decoded.inviteEmail) {
@@ -247,8 +259,12 @@ export default class EmailInvitePlugin extends AdminForthPlugin {
         server.endpoint({
             method: 'POST',
             path: `/plugin/${this.pluginInstanceId}/resend-invite`,
-            handler: (_a) => __awaiter(this, [_a], void 0, function* ({ body, adminUser }) {
-                const { recordId } = body;
+            handler: (_a) => __awaiter(this, [_a], void 0, function* ({ body, adminUser, response }) {
+                const parsed = parseBody(resendInviteBodySchema, body, response);
+                if ('error' in parsed)
+                    return parsed.error;
+                const data = parsed.data;
+                const { recordId } = data;
                 try {
                     // Get the user record
                     const userRecord = yield this.adminforth.resource(this.authResource.resourceId).get(recordId);

package/index.ts

@@ -1,6 +1,16 @@
-import AdminForth, { AdminForthPlugin, suggestIfTypo, Filters, afLogger } from "adminforth";
+import AdminForth, { AdminForthPlugin, parseBody, suggestIfTypo, Filters, afLogger } from "adminforth";
 import type { IAdminForth, IHttpServer, AdminForthResourcePages, AdminForthResourceColumn, AdminForthDataTypes, AdminForthResource, AdminUser, HttpExtra } from "adminforth";
 import type { PluginOptions } from './types.js';
+import { z } from "zod";
+
+const setPasswordBodySchema = z.object({
+  token: z.string(),
+  password: z.string(),
+}).strict();
+
+const resendInviteBodySchema = z.object({
+  recordId: z.union([z.string(), z.number()]),
+}).strict();
 
 export default class EmailInvitePlugin extends AdminForthPlugin {
   options: PluginOptions;
@@ -242,9 +252,12 @@ export default class EmailInvitePlugin extends AdminForthPlugin {
       method: 'POST',
       path: `/plugin/${this.pluginInstanceId}/set-password`,
       noAuth: true,
-      handler: async ({ body }) => {
-        const { token, password } = body;
-        
+      handler: async ({ body, response }) => {
+        const parsed = parseBody(setPasswordBodySchema, body, response);
+        if ('error' in parsed) return parsed.error;
+        const data = parsed.data;
+        const { token, password } = data;
+
         try {
           const decoded = await this.adminforth.auth.verify(token, 'inviteUser', false);
           if (!decoded || !decoded.inviteEmail) {
@@ -308,12 +321,15 @@ export default class EmailInvitePlugin extends AdminForthPlugin {
     server.endpoint({
       method: 'POST',
       path: `/plugin/${this.pluginInstanceId}/resend-invite`,
-      handler: async ({ body, adminUser }) => {
-        const { recordId } = body;
-        
+      handler: async ({ body, adminUser, response }) => {
+        const parsed = parseBody(resendInviteBodySchema, body, response);
+        if ('error' in parsed) return parsed.error;
+        const data = parsed.data;
+        const { recordId } = data;
+
         try {
           // Get the user record
-          const userRecord = await this.adminforth.resource(this.authResource.resourceId).get(recordId);
+          const userRecord = await this.adminforth.resource(this.authResource.resourceId).get(recordId as any);
           if (!userRecord) {
             return { error: 'User not found', ok: false };
           }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@adminforth/email-invite",
-  "version": "1.1.12",
+  "version": "1.2.0",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
   "type": "module",
@@ -16,15 +16,18 @@
   "author": "DevForth (https://devforth.io)",
   "license": "MIT",
   "description": "Email invite plugin for adminforth",
+  "dependencies": {
+    "zod": "^4.3.6"
+  },
   "devDependencies": {
     "@types/node": "^22.10.7",
-    "adminforth": "^3.6.21",
+    "adminforth": "^3.7.1",
     "semantic-release": "^24.2.1",
     "semantic-release-slack-bot": "^4.0.2",
     "typescript": "^5.7.3"
   },
   "peerDependencies": {
-    "adminforth": "^3.6.21"
+    "adminforth": "^3.7.1"
   },
   "publishConfig": {
     "access": "public"