@adonis-agora/authkit-server 0.69.0 → 0.71.0

package/build/src/host/ui-dist/index.html

@@ -8,7 +8,7 @@
     <link rel="preconnect" href="https://fonts.googleapis.com">
     <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
     <link href="https://fonts.googleapis.com/css2?family=Sora:wght@400;500;600;700&family=JetBrains+Mono:ital,wght@0,400;0,500;0,600;1,400&display=swap" rel="stylesheet">
-    <script type="module" crossorigin src="/__AUTHKIT_BASE__/assets/index-D9CYQnZR.js"></script>
+    <script type="module" crossorigin src="/__AUTHKIT_BASE__/assets/index-Dct63ai-.js"></script>
     <link rel="stylesheet" crossorigin href="/__AUTHKIT_BASE__/assets/index-DTSmD4RU.css">
   </head>
   <body>

package/build/src/host/validators.d.ts

@@ -1,6 +1,6 @@
 /** Cadastro passwordless: só e-mail + nome (sem senha). O login vem por magic link. */
 export declare const passwordlessSignupValidator: import("@vinejs/vine").VineValidator<import("@vinejs/vine").VineObject<{
-    email: import("@vinejs/vine").VineString;
+    email: import("@vinejs/vine/schema/base/literal").TransformModifier<import("@vinejs/vine").VineString, string>;
     fullName: import("@vinejs/vine").VineString;
 }, {
     email: string;
@@ -13,7 +13,7 @@ export declare const passwordlessSignupValidator: import("@vinejs/vine").VineVal
     fullName: string;
 }>, Record<string, any> | undefined>;
 export declare const signupValidator: import("@vinejs/vine").VineValidator<import("@vinejs/vine").VineObject<{
-    email: import("@vinejs/vine").VineString;
+    email: import("@vinejs/vine/schema/base/literal").TransformModifier<import("@vinejs/vine").VineString, string>;
     fullName: import("@vinejs/vine").VineString;
     password: import("@vinejs/vine").VineString;
 }, {
@@ -30,7 +30,7 @@ export declare const signupValidator: import("@vinejs/vine").VineValidator<impor
     password: string;
 }>, Record<string, any> | undefined>;
 export declare const forgotPasswordValidator: import("@vinejs/vine").VineValidator<import("@vinejs/vine").VineObject<{
-    email: import("@vinejs/vine").VineString;
+    email: import("@vinejs/vine/schema/base/literal").TransformModifier<import("@vinejs/vine").VineString, string>;
 }, {
     email: string;
 }, {
@@ -75,7 +75,7 @@ export declare const changePasswordValidator: import("@vinejs/vine").VineValidat
  */
 export declare const changeEmailValidator: import("@vinejs/vine").VineValidator<import("@vinejs/vine").VineObject<{
     currentPassword: import("@vinejs/vine/schema/base/literal").OptionalModifier<import("@vinejs/vine").VineString>;
-    newEmail: import("@vinejs/vine").VineString;
+    newEmail: import("@vinejs/vine/schema/base/literal").TransformModifier<import("@vinejs/vine").VineString, string>;
 }, {
     currentPassword?: string | null | undefined;
     newEmail: string;
@@ -123,7 +123,7 @@ export declare const deleteAccountValidator: import("@vinejs/vine").VineValidato
 }>, Record<string, any> | undefined>;
 /** Criação de usuário no console admin (email obrigatório; nome/senha opcionais). */
 export declare const adminCreateUserValidator: import("@vinejs/vine").VineValidator<import("@vinejs/vine").VineObject<{
-    email: import("@vinejs/vine").VineString;
+    email: import("@vinejs/vine/schema/base/literal").TransformModifier<import("@vinejs/vine").VineString, string>;
     name: import("@vinejs/vine/schema/base/literal").OptionalModifier<import("@vinejs/vine").VineString>;
     password: import("@vinejs/vine/schema/base/literal").OptionalModifier<import("@vinejs/vine").VineString>;
 }, {

package/build/src/host/validators.js

@@ -1,16 +1,28 @@
 import vine from '@vinejs/vine';
+import { normalizeEmailIdentifier } from './email_identifier.js';
+/**
+ * E-mail usado como IDENTIDADE da conta. Normalização ÚNICA e conservadora
+ * ({@link normalizeEmailIdentifier}: `trim` + `toLowerCase`) — a MESMA aplicada
+ * no passo de identificador do login, para que os dois lados concordem.
+ *
+ * NÃO use `.normalizeEmail()` do VineJS aqui: ele aplica os defaults do
+ * validator.js, que no gmail REMOVEM os pontos e o sub-endereço `+tag` — a
+ * conta nascia com um endereço diferente do digitado e a pessoa ficava trancada
+ * do lado de fora (ver `host/email_identifier.ts`).
+ */
+const emailIdentifier = () => vine.string().trim().email().transform(normalizeEmailIdentifier);
 /** Cadastro passwordless: só e-mail + nome (sem senha). O login vem por magic link. */
 export const passwordlessSignupValidator = vine.compile(vine.object({
-    email: vine.string().trim().email().normalizeEmail(),
+    email: emailIdentifier(),
     fullName: vine.string().trim().minLength(2).maxLength(255),
 }));
 export const signupValidator = vine.compile(vine.object({
-    email: vine.string().trim().email().normalizeEmail(),
+    email: emailIdentifier(),
     fullName: vine.string().trim().minLength(2).maxLength(255),
     password: vine.string().minLength(8).maxLength(255),
 }));
 export const forgotPasswordValidator = vine.compile(vine.object({
-    email: vine.string().trim().email().normalizeEmail(),
+    email: emailIdentifier(),
 }));
 export const resetPasswordValidator = vine.compile(vine.object({
     token: vine.string().trim().minLength(1),
@@ -31,7 +43,7 @@ export const changePasswordValidator = vine.compile(vine.object({
  */
 export const changeEmailValidator = vine.compile(vine.object({
     currentPassword: vine.string().minLength(1).optional(),
-    newEmail: vine.string().trim().email().normalizeEmail(),
+    newEmail: emailIdentifier(),
 }));
 /**
  * Edição de perfil no console de conta: nome e avatarUrl, ambos opcionais.
@@ -52,7 +64,7 @@ export const deleteAccountValidator = vine.compile(vine.object({
 }));
 /** Criação de usuário no console admin (email obrigatório; nome/senha opcionais). */
 export const adminCreateUserValidator = vine.compile(vine.object({
-    email: vine.string().trim().email().normalizeEmail(),
+    email: emailIdentifier(),
     name: vine.string().trim().maxLength(255).optional(),
     password: vine.string().minLength(8).maxLength(255).optional(),
 }));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@adonis-agora/authkit-server",
-  "version": "0.69.0",
+  "version": "0.71.0",
   "description": "AdonisJS OIDC/OAuth2 provider (Identity Provider) toolkit: ejectable auth server with sessions, rate-limiting, MFA/TOTP, audit log, federated logout and OpenTelemetry metrics.",
   "license": "MIT",
   "author": "dudousxd",
@@ -113,7 +113,7 @@
     "qrcode": "1.5.4"
   },
   "devDependencies": {
-    "@adonis-agora/authkit-react": "0.21.0",
+    "@adonis-agora/authkit-react": "0.22.0",
     "@adonis-agora/durable": "0.40.0",
     "@adonis-agora/telescope": "0.21.1",
     "@adonisjs/ally": "6.3.0",