@aooth/user 0.1.16 → 0.1.17

package/dist/atscript-db.cjs

@@ -1,5 +1,5 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_federated_identity_store = require("./federated-identity-store-BEEEcoaP.cjs");
+const require_federated_identity_store = require("./federated-identity-store-D-LvRXdx.cjs");
 let node_crypto = require("node:crypto");
 //#region src/atscript-db/federated-identity-store.ts
 function isConflict$1(err) {

package/dist/atscript-db.mjs

@@ -1,4 +1,4 @@
-import { d as UserAuthError, n as pickDefinedProfile, r as UserStore, t as FederatedIdentityStore, u as setAtPath } from "./federated-identity-store-CHW1xtMp.mjs";
+import { c as setAtPath, l as UserStore, n as pickDefinedProfile, t as FederatedIdentityStore, u as UserAuthError } from "./federated-identity-store-CRycYlMj.mjs";
 import { randomUUID } from "node:crypto";
 //#region src/atscript-db/federated-identity-store.ts
 function isConflict$1(err) {

package/dist/{federated-identity-store-CHW1xtMp.mjs → federated-identity-store-CRycYlMj.mjs}

@@ -1,4 +1,4 @@
-import { randomBytes } from "node:crypto";
+import "node:crypto";
 //#region src/errors.ts
 const defaultMessages = {
 	NOT_FOUND: "User not found",
@@ -25,6 +25,22 @@ var UserAuthError = class extends Error {
 	}
 };
 //#endregion
+//#region src/store/user-store.ts
+/**
+* Storage seam for user credentials, keyed by the stable surrogate **`id`**
+* (the token subject). Reads come in three flavours:
+*
+* - `findById` — strict, by the surrogate id; the canonical identity read used
+*   by authenticated flows that resolve the session subject (`getUserId()`).
+* - `findByHandle` — deterministic LOGIN resolver (`username`, then the
+*   annotation-resolved handle fields — email, then phone — in order).
+* - `findByIdentifier` — permissive internal/admin/recovery lookup (`id`, then
+*   the `findByHandle` chain).
+*
+* Writes (`update`/`delete`/`withCas`) all key on the surrogate `id`.
+*/
+var UserStore = class {};
+//#endregion
 //#region src/utils.ts
 function maskEmail(email) {
 	if (!email) return "";
@@ -48,13 +64,6 @@ function mask(s) {
 	const show = Math.max(1, Math.floor(s.length / 4));
 	return s.slice(0, show) + "***" + s.slice(-show);
 }
-const DEFAULT_CHARSET = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789!@#$%^&*()-_=+";
-function generateSecureRandom(length, charset = DEFAULT_CHARSET) {
-	const bytes = randomBytes(length);
-	const result = Array.from({ length });
-	for (let i = 0; i < length; i++) result[i] = charset[bytes[i] % charset.length];
-	return result.join("");
-}
 function deepMerge(target, source) {
 	const t = target;
 	for (const key of Object.keys(source)) {
@@ -93,22 +102,6 @@ function incrementAtPath(obj, path, amount) {
 	current[leaf] = (typeof existing === "number" ? existing : 0) + amount;
 }
 //#endregion
-//#region src/store/user-store.ts
-/**
-* Storage seam for user credentials, keyed by the stable surrogate **`id`**
-* (the token subject). Reads come in three flavours:
-*
-* - `findById` — strict, by the surrogate id; the canonical identity read used
-*   by authenticated flows that resolve the session subject (`getUserId()`).
-* - `findByHandle` — deterministic LOGIN resolver (`username`, then the
-*   annotation-resolved handle fields — email, then phone — in order).
-* - `findByIdentifier` — permissive internal/admin/recovery lookup (`id`, then
-*   the `findByHandle` chain).
-*
-* Writes (`update`/`delete`/`withCas`) all key on the surrogate `id`.
-*/
-var UserStore = class {};
-//#endregion
 //#region src/store/federated-identity-store.ts
 /**
 * Copy only the DEFINED display fields — so a `touchLogin` / `link` with a
@@ -134,4 +127,4 @@ function pickDefinedProfile(src) {
 */
 var FederatedIdentityStore = class {};
 //#endregion
-export { generateSecureRandom as a, maskMfaValue as c, UserAuthError as d, deepMerge as i, maskPhone as l, pickDefinedProfile as n, incrementAtPath as o, UserStore as r, maskEmail as s, FederatedIdentityStore as t, setAtPath as u };
+export { maskEmail as a, setAtPath as c, incrementAtPath as i, UserStore as l, pickDefinedProfile as n, maskMfaValue as o, deepMerge as r, maskPhone as s, FederatedIdentityStore as t, UserAuthError as u };

package/dist/{federated-identity-store-BEEEcoaP.cjs → federated-identity-store-D-LvRXdx.cjs}

@@ -1,4 +1,4 @@
-let node_crypto = require("node:crypto");
+require("node:crypto");
 //#region src/errors.ts
 const defaultMessages = {
 	NOT_FOUND: "User not found",
@@ -25,6 +25,22 @@ var UserAuthError = class extends Error {
 	}
 };
 //#endregion
+//#region src/store/user-store.ts
+/**
+* Storage seam for user credentials, keyed by the stable surrogate **`id`**
+* (the token subject). Reads come in three flavours:
+*
+* - `findById` — strict, by the surrogate id; the canonical identity read used
+*   by authenticated flows that resolve the session subject (`getUserId()`).
+* - `findByHandle` — deterministic LOGIN resolver (`username`, then the
+*   annotation-resolved handle fields — email, then phone — in order).
+* - `findByIdentifier` — permissive internal/admin/recovery lookup (`id`, then
+*   the `findByHandle` chain).
+*
+* Writes (`update`/`delete`/`withCas`) all key on the surrogate `id`.
+*/
+var UserStore = class {};
+//#endregion
 //#region src/utils.ts
 function maskEmail(email) {
 	if (!email) return "";
@@ -48,13 +64,6 @@ function mask(s) {
 	const show = Math.max(1, Math.floor(s.length / 4));
 	return s.slice(0, show) + "***" + s.slice(-show);
 }
-const DEFAULT_CHARSET = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789!@#$%^&*()-_=+";
-function generateSecureRandom(length, charset = DEFAULT_CHARSET) {
-	const bytes = (0, node_crypto.randomBytes)(length);
-	const result = Array.from({ length });
-	for (let i = 0; i < length; i++) result[i] = charset[bytes[i] % charset.length];
-	return result.join("");
-}
 function deepMerge(target, source) {
 	const t = target;
 	for (const key of Object.keys(source)) {
@@ -93,22 +102,6 @@ function incrementAtPath(obj, path, amount) {
 	current[leaf] = (typeof existing === "number" ? existing : 0) + amount;
 }
 //#endregion
-//#region src/store/user-store.ts
-/**
-* Storage seam for user credentials, keyed by the stable surrogate **`id`**
-* (the token subject). Reads come in three flavours:
-*
-* - `findById` — strict, by the surrogate id; the canonical identity read used
-*   by authenticated flows that resolve the session subject (`getUserId()`).
-* - `findByHandle` — deterministic LOGIN resolver (`username`, then the
-*   annotation-resolved handle fields — email, then phone — in order).
-* - `findByIdentifier` — permissive internal/admin/recovery lookup (`id`, then
-*   the `findByHandle` chain).
-*
-* Writes (`update`/`delete`/`withCas`) all key on the surrogate `id`.
-*/
-var UserStore = class {};
-//#endregion
 //#region src/store/federated-identity-store.ts
 /**
 * Copy only the DEFINED display fields — so a `touchLogin` / `link` with a
@@ -158,12 +151,6 @@ Object.defineProperty(exports, "deepMerge", {
 		return deepMerge;
 	}
 });
-Object.defineProperty(exports, "generateSecureRandom", {
-	enumerable: true,
-	get: function() {
-		return generateSecureRandom;
-	}
-});
 Object.defineProperty(exports, "incrementAtPath", {
 	enumerable: true,
 	get: function() {

package/dist/index.cjs

@@ -1,5 +1,5 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_federated_identity_store = require("./federated-identity-store-BEEEcoaP.cjs");
+const require_federated_identity_store = require("./federated-identity-store-D-LvRXdx.cjs");
 let node_crypto = require("node:crypto");
 //#region src/base-x/base32.ts
 /**
@@ -113,7 +113,9 @@ function verifyTotpCode(secret, code, config) {
 	return matchedCounter;
 }
 function generateMfaCode(length = 6) {
-	return require_federated_identity_store.generateSecureRandom(length, "0123456789");
+	let code = "";
+	for (let i = 0; i < length; i++) code += (0, node_crypto.randomInt)(10).toString();
+	return code;
 }
 function hotpCode(key, counter, digits) {
 	const counterBuf = Buffer.alloc(8);

package/dist/index.mjs

@@ -1,5 +1,5 @@
-import { a as generateSecureRandom, c as maskMfaValue, d as UserAuthError, i as deepMerge, l as maskPhone, n as pickDefinedProfile, o as incrementAtPath, r as UserStore, s as maskEmail, t as FederatedIdentityStore, u as setAtPath } from "./federated-identity-store-CHW1xtMp.mjs";
-import { createHash, createHmac, randomBytes, randomUUID, scrypt, timingSafeEqual } from "node:crypto";
+import { a as maskEmail, c as setAtPath, i as incrementAtPath, l as UserStore, n as pickDefinedProfile, o as maskMfaValue, r as deepMerge, s as maskPhone, t as FederatedIdentityStore, u as UserAuthError } from "./federated-identity-store-CRycYlMj.mjs";
+import { createHash, createHmac, randomBytes, randomInt, randomUUID, scrypt, timingSafeEqual } from "node:crypto";
 //#region src/base-x/base32.ts
 /**
 * Partially copied from "thirty-two" library, all credits to Chris Umbel.
@@ -112,7 +112,9 @@ function verifyTotpCode(secret, code, config) {
 	return matchedCounter;
 }
 function generateMfaCode(length = 6) {
-	return generateSecureRandom(length, "0123456789");
+	let code = "";
+	for (let i = 0; i < length; i++) code += randomInt(10).toString();
+	return code;
 }
 function hotpCode(key, counter, digits) {
 	const counterBuf = Buffer.alloc(8);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aooth/user",
-  "version": "0.1.16",
+  "version": "0.1.17",
   "description": "User credential primitives for aoothjs",
   "keywords": [
     "aoothjs",
@@ -60,14 +60,14 @@
     "access": "public"
   },
   "devDependencies": {
-    "@atscript/core": "^0.1.74",
-    "@atscript/db": "^0.1.102",
-    "@atscript/db-sql-tools": "^0.1.102",
-    "@atscript/db-sqlite": "^0.1.102",
-    "@atscript/typescript": "^0.1.74",
+    "@atscript/core": "^0.1.75",
+    "@atscript/db": "^0.1.104",
+    "@atscript/db-sql-tools": "^0.1.104",
+    "@atscript/db-sqlite": "^0.1.104",
+    "@atscript/typescript": "^0.1.75",
     "@types/better-sqlite3": "^7.6.13",
     "better-sqlite3": "^12.6.2",
-    "unplugin-atscript": "^0.1.74"
+    "unplugin-atscript": "^0.1.75"
   },
   "peerDependencies": {
     "@atscript/db": ">=0.1.79"