@adminforth/open-signup 1.2.25 → 1.3.0

package/build.log

@@ -8,5 +8,5 @@ custom/SignupPage.vue
 custom/SignupUnderLogin.vue
 custom/tsconfig.json
 
-sent 14,163 bytes  received 77 bytes  28,480.00 bytes/sec
+sent 14,167 bytes  received 77 bytes  28,488.00 bytes/sec
 total size is 13,884  speedup is 0.97

package/dist/index.js

@@ -7,7 +7,17 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
         step((generator = generator.apply(thisArg, _arguments || [])).next());
     });
 };
-import AdminForth, { AdminForthPlugin, Filters, suggestIfTypo, AdminForthDataTypes } from "adminforth";
+import AdminForth, { AdminForthPlugin, parseBody, Filters, suggestIfTypo, AdminForthDataTypes } from "adminforth";
+import { z } from "zod";
+const completeVerifiedSignupBodySchema = z.object({
+    token: z.string(),
+    password: z.string(),
+}).strict();
+const signupBodySchema = z.object({
+    email: z.string(),
+    url: z.string(),
+    password: z.string().optional(),
+}).strict();
 export default class OpenSignupPlugin extends AdminForthPlugin {
     constructor(options) {
         super(options, import.meta.url);
@@ -129,11 +139,20 @@ export default class OpenSignupPlugin extends AdminForthPlugin {
             path: `/plugin/${this.pluginInstanceId}/password-constraints`,
             noAuth: true,
             handler: (_a) => __awaiter(this, [_a], void 0, function* ({ tr }) {
-                return {
-                    minLength: this.passwordField.minLength,
-                    maxLength: this.passwordField.maxLength,
-                    validation: yield Promise.all(this.passwordField.validation.map((_a) => __awaiter(this, [_a], void 0, function* ({ regExp, message }) { return ({ regExp, message: yield tr(message, 'opensignup') }); }))),
-                };
+                if (!this.passwordField) {
+                    throw new Error(`passwordField is not defined in plugin options`);
+                }
+                const objectToReturn = {};
+                if (this.passwordField.minLength) {
+                    objectToReturn.minLength = this.passwordField.minLength;
+                }
+                if (this.passwordField.maxLength) {
+                    objectToReturn.maxLength = this.passwordField.maxLength;
+                }
+                if (this.passwordField.validation) {
+                    objectToReturn.validation = yield Promise.all(this.passwordField.validation.map((_a) => __awaiter(this, [_a], void 0, function* ({ regExp, message }) { return ({ regExp, message: yield tr(message, 'opensignup') }); })));
+                }
+                return objectToReturn;
             })
         });
         server.endpoint({
@@ -141,7 +160,11 @@ export default class OpenSignupPlugin extends AdminForthPlugin {
             path: `/plugin/${this.pluginInstanceId}/complete-verified-signup`,
             noAuth: true,
             handler: (_a) => __awaiter(this, [_a], void 0, function* ({ body, response, headers, query, cookies, tr, requestUrl }) {
-                const { token, password } = body;
+                const parsed = parseBody(completeVerifiedSignupBodySchema, body, response);
+                if ('error' in parsed)
+                    return parsed.error;
+                const data = parsed.data;
+                const { token, password } = data;
                 if (!token) {
                     return { error: yield tr('Invalid token', 'opensignup'), ok: false };
                 }
@@ -173,7 +196,11 @@ export default class OpenSignupPlugin extends AdminForthPlugin {
             noAuth: true,
             handler: (_a) => __awaiter(this, [_a], void 0, function* ({ body, response, headers, query, cookies, tr, requestUrl }) {
                 var _b, _c;
-                const { email, url, password } = body;
+                const parsed = parseBody(signupBodySchema, body, response);
+                if ('error' in parsed)
+                    return parsed.error;
+                const data = parsed.data;
+                const { email, url, password } = data;
                 if (!email || typeof email !== 'string') {
                     return { error: yield tr('Email is required', 'opensignup'), ok: false };
                 }

package/index.ts

@@ -1,6 +1,18 @@
-import AdminForth, { AdminForthPlugin, Filters, suggestIfTypo, AdminForthDataTypes } from "adminforth";
+import AdminForth, { AdminForthPlugin, parseBody, Filters, suggestIfTypo, AdminForthDataTypes } from "adminforth";
 import type { IAdminForth, IHttpServer, AdminForthComponentDeclaration, AdminForthResourceColumn, AdminForthResource, BeforeLoginConfirmationFunction, HttpExtra } from "adminforth";
 import type { PluginOptions } from './types.js';
+import { z } from "zod";
+
+const completeVerifiedSignupBodySchema = z.object({
+  token: z.string(),
+  password: z.string(),
+}).strict();
+
+const signupBodySchema = z.object({
+  email: z.string(),
+  url: z.string(),
+  password: z.string().optional(),
+}).strict();
 
 
 export default class OpenSignupPlugin extends AdminForthPlugin {
@@ -149,13 +161,23 @@ export default class OpenSignupPlugin extends AdminForthPlugin {
       path: `/plugin/${this.pluginInstanceId}/password-constraints`,
       noAuth: true,
       handler: async ({tr}) => {
-        return {
-          minLength: this.passwordField.minLength,
-          maxLength: this.passwordField.maxLength,
-          validation: await Promise.all(
+        if (!this.passwordField) {
+          throw new Error(`passwordField is not defined in plugin options`);
+        }
+        const objectToReturn: any = {};
+
+        if (this.passwordField.minLength) {
+          objectToReturn.minLength = this.passwordField.minLength;
+        }
+        if (this.passwordField.maxLength) {
+          objectToReturn.maxLength = this.passwordField.maxLength;
+        }
+        if (this.passwordField.validation) {
+          objectToReturn.validation = await Promise.all(
             this.passwordField.validation.map(async ({ regExp, message }) => ({ regExp, message: await tr(message, 'opensignup') }))
-          ),
-        };
+          );
+        }
+        return objectToReturn;
       }
     });
     
@@ -164,7 +186,10 @@ export default class OpenSignupPlugin extends AdminForthPlugin {
       path: `/plugin/${this.pluginInstanceId}/complete-verified-signup`,
       noAuth: true,
       handler: async ({ body, response, headers, query, cookies, tr, requestUrl }) => {
-        const { token, password } = body;
+        const parsed = parseBody(completeVerifiedSignupBodySchema, body, response);
+        if ('error' in parsed) return parsed.error;
+        const data = parsed.data;
+        const { token, password } = data;
         if (!token) {
           return { error: await tr('Invalid token', 'opensignup'), ok: false };
         }
@@ -199,7 +224,10 @@ export default class OpenSignupPlugin extends AdminForthPlugin {
       path: `/plugin/${this.pluginInstanceId}/signup`,
       noAuth: true,
       handler: async ({ body, response, headers, query, cookies, tr, requestUrl }) => {
-        const { email, url, password } = body;
+        const parsed = parseBody(signupBodySchema, body, response);
+        if ('error' in parsed) return parsed.error;
+        const data = parsed.data;
+        const { email, url, password } = data;
         if (!email || typeof email !== 'string') {
           return { error: await tr('Email is required', 'opensignup'), ok: false };
         }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@adminforth/open-signup",
-  "version": "1.2.25",
+  "version": "1.3.0",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
   "type": "module",
@@ -23,14 +23,15 @@
   "license": "MIT",
   "description": "Open signup for adminforth",
   "dependencies": {
-    "@aws-sdk/client-ses": "^3.654.0"
+    "@aws-sdk/client-ses": "^3.654.0",
+    "zod": "^4.3.6"
   },
   "peerDependencies": {
-    "adminforth": "^3.6.2"
+    "adminforth": "^3.7.1"
   },
   "devDependencies": {
     "@types/node": "^22.10.7",
-    "adminforth": "^3.6.2",
+    "adminforth": "^3.7.1",
     "semantic-release": "^24.2.1",
     "semantic-release-slack-bot": "^4.0.2",
     "typescript": "^5.7.3"