@arcote.tech/arc-auth 0.7.6 → 0.7.8

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@arcote.tech/arc-auth",
   "type": "module",
-  "version": "0.7.6",
+  "version": "0.7.8",
   "private": false,
   "description": "Reusable authentication module for Arc framework — aggregate-based auth with factory pattern",
   "main": "./src/index.ts",
@@ -10,7 +10,8 @@
     "type-check": "tsc --noEmit"
   },
   "peerDependencies": {
-    "@arcote.tech/arc": "^0.7.6",
+    "@arcote.tech/arc": "^0.7.8",
+    "@arcote.tech/platform": "^0.7.8",
     "react": "^18.0.0 || ^19.0.0",
     "typescript": "^5.0.0"
   },

package/src/aggregates/account.ts

@@ -5,6 +5,7 @@ import {
   date,
   mergeUnsafe,
   string,
+  stringEnum,
   type ArcRawShape,
 } from "@arcote.tech/arc";
 import type { AccountId } from "../ids/account";
@@ -87,9 +88,12 @@ export const createAccountAggregate = <
           customFields,
         ),
         async (ctx, event) => {
-          event.payload;
+          // Auto-verify email on registration. Framework no longer assumes
+          // an email-verification gate — apps that want one query the
+          // `isEmailVerified` field themselves (or wire a separate flow).
+          // Matches `accountRegisteredViaOAuth` behaviour for parity.
           await ctx.set(event.payload.accountId, {
-            isEmailVerified: false,
+            isEmailVerified: true,
             authMethod: "email",
             registeredAt: event.createdAt,
             lastSignedInAt: undefined,
@@ -150,6 +154,14 @@ export const createAccountAggregate = <
               customFields,
             ),
           )
+          .withResult(
+            { accountId, token: string() },
+            {
+              error: stringEnum("EMAIL_ALREADY_TAKEN"),
+              accountId,
+              token: string(),
+            },
+          )
           .handle(
             ONLY_SERVER &&
               (async (ctx, params) => {
@@ -157,7 +169,11 @@ export const createAccountAggregate = <
                   email: params.email,
                 });
                 if (existing) {
-                  return { error: "EMAIL_ALREADY_TAKEN" as const };
+                  return {
+                    error: "EMAIL_ALREADY_TAKEN" as const,
+                    accountId: existing._id,
+                    token: token.generateJWT(buildTokenParams(existing)),
+                  };
                 }
 
                 const id = accountId.generate();
@@ -169,7 +185,12 @@ export const createAccountAggregate = <
                   passwordHash: pwHash,
                 });
 
-                return { accountId: id };
+                return {
+                  accountId: id,
+                  token: token.generateJWT(
+                    buildTokenParams({ _id: id, ...params }),
+                  ),
+                };
               }),
           ),
       )
@@ -187,7 +208,7 @@ export const createAccountAggregate = <
                   email: params.email,
                 });
 
-                if (!account) {
+                if (!account || !account.passwordHash) {
                   return { error: "INVALID_EMAIL_OR_PASSWORD" as const };
                 }
 
@@ -199,13 +220,6 @@ export const createAccountAggregate = <
                   return { error: "INVALID_EMAIL_OR_PASSWORD" as const };
                 }
 
-                if (!account.isEmailVerified) {
-                  return {
-                    error: "EMAIL_NOT_VERIFIED" as const,
-                    email: params.email,
-                  };
-                }
-
                 const jwtToken = token.generateJWT(buildTokenParams(account));
 
                 await ctx.signedIn.emit({
@@ -251,11 +265,10 @@ export const createAccountAggregate = <
                   accountId: id,
                 });
 
-                const newAccount = await ctx.$query.findOne({ _id: id });
                 return {
                   accountId: id,
                   token: token.generateJWT(
-                    buildTokenParams(newAccount ?? { _id: id }),
+                    buildTokenParams({ _id: id, ...params }),
                   ),
                 };
               }),
@@ -292,12 +305,10 @@ export const createAccountAggregate = <
           ),
       )
 
-      .protectBy(token, (params) => ({ _id: params.accountId }))
-      .clientQuery("getAll", (fn) =>
-        fn.handle(async (ctx) => ctx.$query.find({})),
-      )
       .clientQuery("getMe", (fn) =>
-        fn.handle(async (ctx) => ctx.$query.findOne({})),
+        fn
+          .protectedBy(token, (params) => ({ _id: params.accountId }))
+          .handle(async (ctx) => ctx.$query.findOne({})),
       )
   );
 };

package/src/react/auth-page.tsx

@@ -72,8 +72,6 @@ export function AuthPage({
       if (result && "error" in result) {
         if (result.error === "INVALID_EMAIL_OR_PASSWORD") {
           setError("Nieprawidłowy email lub hasło.");
-        } else if (result.error === "EMAIL_NOT_VERIFIED") {
-          setError("Email nie został zweryfikowany.");
         } else {
           setError("Wystąpił błąd podczas logowania.");
         }

package/src/react/sign-in-page.tsx

@@ -49,8 +49,6 @@ export function SignInPage({ signIn, navigate, render }: SignInPageProps) {
       if (result && "error" in result) {
         if (result.error === "INVALID_EMAIL_OR_PASSWORD") {
           setError("Nieprawidłowy email lub hasło.");
-        } else if (result.error === "EMAIL_NOT_VERIFIED") {
-          setError("Email nie został zweryfikowany.");
         } else {
           setError("Wystąpił błąd podczas logowania.");
         }