@atproto/oauth-provider 0.5.0 → 0.5.2

package/src/assets/app/locales/zh-TW/messages.po

@@ -17,11 +17,11 @@ msgstr ""
 msgid "<0/> is asking for permission to access your account (<1/>)."
 msgstr ""
 
-#: src/assets/app/views/authorize/sign-in/sign-in-form.tsx:221
+#: src/assets/app/views/authorize/sign-in/sign-in-form.tsx:219
 msgid "2FA Confirmation"
 msgstr ""
 
-#: src/assets/app/components/utils/error-message.tsx:47
+#: src/assets/app/components/utils/error-message.tsx:27
 msgid "A second authentication factor is required"
 msgstr ""
 
@@ -45,7 +45,7 @@ msgstr ""
 msgid "An application on your device"
 msgstr ""
 
-#: src/assets/app/components/utils/error-message.tsx:61
+#: src/assets/app/components/utils/error-message.tsx:87
 msgid "An unknown error occurred"
 msgstr ""
 
@@ -78,8 +78,6 @@ msgstr ""
 msgid "By clicking <0>Authorize</0>, you allow this application to perform the following actions in accordance with their <1>terms of service</1> and <2>privacy policy</2>:"
 msgstr ""
 
-#. placeholder {0}: tosLink ? ( <LinkAnchor className="text-brand underline" link={tosLink}> <Trans>Terms of Service</Trans> </LinkAnchor> ) : ( <Trans>Terms of Service</Trans> )
-#. placeholder {1}: ppLink ? ( <LinkAnchor className="text-brand underline" link={ppLink}> <Trans>Privacy Policy</Trans> </LinkAnchor> ) : ( <Trans>Privacy Policy</Trans> )
 #: src/assets/app/views/authorize/sign-up/sign-up-disclaimer.tsx:30
 msgid "By creating an account you agree to the {0} and the {1} of this service."
 msgstr ""
@@ -89,8 +87,7 @@ msgstr ""
 msgid "Cancel"
 msgstr ""
 
-#. placeholder {0}: secondFactor.hint
-#: src/assets/app/views/authorize/sign-in/sign-in-form.tsx:234
+#: src/assets/app/views/authorize/sign-in/sign-in-form.tsx:232
 msgid "Check your {0} email for a login code and enter it here."
 msgstr ""
 
@@ -110,7 +107,7 @@ msgstr ""
 msgid "Confirm your password to continue"
 msgstr ""
 
-#: src/assets/app/views/authorize/sign-in/sign-in-form.tsx:225
+#: src/assets/app/views/authorize/sign-in/sign-in-form.tsx:223
 msgid "Confirmation code"
 msgstr ""
 
@@ -130,19 +127,17 @@ msgstr ""
 msgid "Description"
 msgstr ""
 
-#: src/assets/app/views/authorize/sign-up/sign-up-account-form.tsx:112
-#: src/assets/app/components/forms/input-email-address.tsx:49
-#: src/assets/app/components/forms/input-email-address.tsx:50
-#: src/assets/app/components/forms/input-email-address.tsx:51
+#: src/assets/app/views/authorize/sign-up/sign-up-account-form.tsx:114
 msgid "Email"
 msgstr ""
 
 #: src/assets/app/views/authorize/reset-password/reset-password-request-form.tsx:55
 #: src/assets/app/views/authorize/reset-password/reset-password-request-form.tsx:60
+#: src/assets/app/components/forms/input-email-address.tsx:51
 msgid "Email address"
 msgstr ""
 
-#: src/assets/app/components/forms/input-new-password.tsx:48
+#: src/assets/app/components/forms/input-new-password.tsx:44
 msgid "Enter a password"
 msgstr ""
 
@@ -158,7 +153,7 @@ msgstr ""
 msgid "Enter your email address"
 msgstr ""
 
-#: src/assets/app/components/forms/input-new-password.tsx:49
+#: src/assets/app/components/forms/input-new-password.tsx:45
 msgid "Enter your new password"
 msgstr ""
 
@@ -175,6 +170,10 @@ msgstr ""
 msgid "Error"
 msgstr ""
 
+#: src/assets/app/views/authorize/sign-up/sign-up-account-form.tsx:102
+msgid "example-com-xxxxx-xxxxx"
+msgstr ""
+
 #: src/assets/app/components/utils/password-strength-label.tsx:25
 msgid "Extra"
 msgstr ""
@@ -183,11 +182,10 @@ msgstr ""
 msgid "Forgot Password"
 msgstr ""
 
-#: src/assets/app/views/authorize/sign-in/sign-in-form.tsx:180
+#: src/assets/app/views/authorize/sign-in/sign-in-form.tsx:178
 msgid "Forgot?"
 msgstr ""
 
-#. placeholder {0}: account.preferred_username || account.email || account.sub
 #: src/assets/app/views/authorize/accept/accept-view.tsx:40
 msgid "Grant access to your <0>{0}</0> account"
 msgstr ""
@@ -212,13 +210,12 @@ msgstr ""
 msgid "Interface language selector"
 msgstr ""
 
-#: src/assets/app/views/authorize/sign-up/sign-up-handle-form.tsx:277
+#: src/assets/app/views/authorize/sign-up/sign-up-handle-form.tsx:275
 msgid "Invalid"
 msgstr ""
 
-#: src/assets/app/views/authorize/sign-up/sign-up-account-form.tsx:95
-#: src/assets/app/views/authorize/sign-up/sign-up-account-form.tsx:99
-#: src/assets/app/views/authorize/sign-up/sign-up-account-form.tsx:100
+#: src/assets/app/views/authorize/sign-up/sign-up-account-form.tsx:96
+#: src/assets/app/views/authorize/sign-up/sign-up-account-form.tsx:101
 msgid "Invite code"
 msgstr ""
 
@@ -272,9 +269,7 @@ msgstr ""
 msgid "Only letters, numbers, and hyphens"
 msgstr ""
 
-#: src/assets/app/views/authorize/sign-up/sign-up-account-form.tsx:126
-#: src/assets/app/components/forms/input-password.tsx:51
-#: src/assets/app/components/forms/input-password.tsx:52
+#: src/assets/app/views/authorize/sign-up/sign-up-account-form.tsx:128
 #: src/assets/app/components/forms/input-password.tsx:53
 msgid "Password"
 msgstr ""
@@ -295,11 +290,11 @@ msgstr ""
 msgid "Password updated!"
 msgstr ""
 
-#: src/assets/app/components/forms/input-new-password.tsx:50
+#: src/assets/app/components/forms/input-new-password.tsx:46
 msgid "Password with at least {MIN_PASSWORD_LENGTH} characters"
 msgstr ""
 
-#: src/assets/app/views/authorize/sign-in/sign-in-form.tsx:194
+#: src/assets/app/views/authorize/sign-in/sign-in-form.tsx:192
 msgid "Please verify the domain name of the website before entering your password. Never enter your password on a domain you do not trust."
 msgstr ""
 
@@ -309,8 +304,8 @@ msgstr ""
 msgid "Privacy Policy"
 msgstr ""
 
-#: src/assets/app/views/authorize/sign-in/sign-in-form.tsx:208
-#: src/assets/app/views/authorize/sign-in/sign-in-form.tsx:213
+#: src/assets/app/views/authorize/sign-in/sign-in-form.tsx:206
+#: src/assets/app/views/authorize/sign-in/sign-in-form.tsx:211
 msgid "Remember this account on this device"
 msgstr ""
 
@@ -326,11 +321,11 @@ msgstr ""
 msgid "Reset Password"
 msgstr ""
 
-#: src/assets/app/views/authorize/sign-in/sign-in-form.tsx:178
+#: src/assets/app/views/authorize/sign-in/sign-in-form.tsx:176
 msgid "Reset your password"
 msgstr ""
 
-#: src/assets/app/views/authorize/sign-up/sign-up-handle-form.tsx:198
+#: src/assets/app/views/authorize/sign-up/sign-up-handle-form.tsx:196
 msgid "Select domain"
 msgstr ""
 
@@ -338,7 +333,7 @@ msgstr ""
 msgid "Select from an existing account"
 msgstr ""
 
-#: src/assets/app/views/authorize/sign-in/sign-in-form.tsx:204
+#: src/assets/app/views/authorize/sign-in/sign-in-form.tsx:202
 msgid "Session"
 msgstr ""
 
@@ -348,7 +343,6 @@ msgstr ""
 msgid "Sign in"
 msgstr ""
 
-#. placeholder {0}: account.name
 #: src/assets/app/views/authorize/sign-in/sign-in-picker.tsx:75
 msgid "Sign in as {0}"
 msgstr ""
@@ -383,45 +377,55 @@ msgstr ""
 msgid "Terms of Service"
 msgstr ""
 
-#: src/assets/app/components/utils/error-message.tsx:42
+#: src/assets/app/components/utils/error-message.tsx:52
 msgid "That handle cannot be used"
 msgstr ""
 
-#: src/assets/app/components/utils/error-message.tsx:33
+#: src/assets/app/components/utils/error-message.tsx:69
+msgid "The data you submitted is invalid. Please check the form and try again."
+msgstr ""
+
+#: src/assets/app/components/utils/error-message.tsx:43
 msgid "The domain name is not allowed"
 msgstr ""
 
-#: src/assets/app/components/utils/error-message.tsx:35
+#: src/assets/app/components/utils/error-message.tsx:45
 msgid "The handle contains inappropriate language"
 msgstr ""
 
-#: src/assets/app/components/utils/error-message.tsx:40
+#: src/assets/app/components/utils/error-message.tsx:50
 msgid "The handle is already in use"
 msgstr ""
 
-#: src/assets/app/components/utils/error-message.tsx:31
+#: src/assets/app/components/utils/error-message.tsx:41
 msgid "The handle is invalid"
 msgstr ""
 
-#: src/assets/app/components/utils/error-message.tsx:25
+#: src/assets/app/components/utils/error-message.tsx:35
+msgid "The invite code is not valid"
+msgstr ""
+
+#: src/assets/app/components/utils/error-message.tsx:77
+msgid "This authorization request has been denied. Please try again."
+msgstr ""
+
+#: src/assets/app/components/utils/error-message.tsx:57
 msgid "This email is already used"
 msgstr ""
 
-#: src/assets/app/components/utils/error-message.tsx:38
+#: src/assets/app/components/utils/error-message.tsx:48
 msgid "This handle is reserved"
 msgstr ""
 
-#: src/assets/app/components/utils/error-message.tsx:54
+#: src/assets/app/components/utils/error-message.tsx:64
 msgid "This sign-in session has expired"
 msgstr ""
 
 #: src/assets/app/views/authorize/sign-up/sign-up-handle-form.tsx:166
-#: src/assets/app/views/authorize/sign-up/sign-up-handle-form.tsx:167
-#: src/assets/app/views/authorize/sign-up/sign-up-handle-form.tsx:168
 msgid "Type your desired username"
 msgstr ""
 
-#: src/assets/app/components/utils/error-message.tsx:58
+#: src/assets/app/components/utils/error-message.tsx:84
 msgid "Unexpected server response"
 msgstr ""
 
@@ -430,23 +434,18 @@ msgid "Uniquely identify you"
 msgstr ""
 
 #: src/assets/app/views/authorize/sign-in/sign-in-form.tsx:143
-#: src/assets/app/views/authorize/sign-in/sign-in-form.tsx:144
 msgid "Username or email address"
 msgstr ""
 
-#: src/assets/app/views/authorize/sign-up/sign-up-handle-form.tsx:272
+#: src/assets/app/views/authorize/sign-up/sign-up-handle-form.tsx:270
 msgid "Valid"
 msgstr ""
 
-#: src/assets/app/views/authorize/sign-in/sign-in-form.tsx:154
-msgid "Valid email address or username"
-msgstr ""
-
 #: src/assets/app/views/authorize/sign-up/sign-up-view.tsx:135
 msgid "Verify you are human"
 msgstr ""
 
-#: src/assets/app/views/authorize/sign-in/sign-in-form.tsx:191
+#: src/assets/app/views/authorize/sign-in/sign-in-form.tsx:189
 msgid "Warning"
 msgstr ""
 
@@ -458,7 +457,7 @@ msgstr ""
 msgid "Weak"
 msgstr ""
 
-#: src/assets/app/components/utils/error-message.tsx:21
+#: src/assets/app/components/utils/error-message.tsx:31
 msgid "Wrong identifier or password"
 msgstr ""
 
@@ -466,7 +465,7 @@ msgstr ""
 msgid "You are being redirected..."
 msgstr ""
 
-#: src/assets/app/views/authorize/sign-up/sign-up-handle-form.tsx:237
+#: src/assets/app/views/authorize/sign-up/sign-up-handle-form.tsx:235
 msgid "You can change this username to any domain name you control after your account is set up."
 msgstr ""
 
@@ -482,8 +481,7 @@ msgstr ""
 msgid "Your account"
 msgstr ""
 
-#. placeholder {0}: segment.length ? ( <strong className="text-gray-800 dark:text-gray-200"> {preview} </strong> ) : ( <span aria-hidden className="bg-gray-300 dark:bg-slate-600 rounded-md p-2 w-24" /> )
-#: src/assets/app/views/authorize/sign-up/sign-up-handle-form.tsx:219
+#: src/assets/app/views/authorize/sign-up/sign-up-handle-form.tsx:217
 msgid "Your full username will be: {0}"
 msgstr ""
 

package/src/assets/app/views/authorize/reset-password/reset-password-confirm-form.tsx

@@ -61,7 +61,7 @@ export function ResetPasswordConfirmForm({
       <Fieldset label={<Trans>Reset code</Trans>}>
         <InputToken
           name="code"
-          aria-label={tokenAriaId}
+          aria-labelledby={tokenAriaId}
           enterKeyHint="next"
           required
           autoFocus={true}

package/src/assets/app/views/authorize/sign-in/sign-in-form.tsx

@@ -140,8 +140,7 @@ export function SignInForm({
           icon={<AtSymbolIcon className="w-5" />}
           name="username"
           type="text"
-          placeholder={t`Username or email address`}
-          aria-label={t`Username or email address`}
+          title={t`Username or email address`}
           autoCapitalize="none"
           autoCorrect="off"
           autoComplete="username"
@@ -151,7 +150,6 @@ export function SignInForm({
           required
           readOnly={usernameReadonly}
           disabled={usernameReadonly}
-          title={t`Valid email address or username`}
           autoFocus
           value={username}
           onChange={(event) => {
@@ -205,7 +203,7 @@ export function SignInForm({
       >
         <InputCheckbox
           name="remember"
-          aria-label={t`Remember this account on this device`}
+          title={t`Remember this account on this device`}
           enterKeyHint={secondFactor ? 'next' : 'done'}
           checked={remember}
           onChange={(event) => setRemember(event.target.checked)}
@@ -222,7 +220,7 @@ export function SignInForm({
         >
           <div>
             <InputToken
-              aria-label={t`Confirmation code`}
+              title={t`Confirmation code`}
               enterKeyHint="done"
               required
               autoFocus={true}

package/src/assets/app/views/authorize/sign-up/sign-up-account-form.tsx

@@ -8,7 +8,8 @@ import {
 } from '../../../components/forms/form-card-async.tsx'
 import { InputEmailAddress } from '../../../components/forms/input-email-address.tsx'
 import { InputNewPassword } from '../../../components/forms/input-new-password.tsx'
-import { InputToken } from '../../../components/forms/input-token.tsx'
+import { InputText } from '../../../components/forms/input-text.tsx'
+import { TokenIcon } from '../../../components/utils/icons.tsx'
 import { mergeRefs } from '../../../lib/ref.ts'
 import { Override } from '../../../lib/util.ts'
 
@@ -93,15 +94,16 @@ export function SignUpAccountForm({
     >
       {inviteCodeRequired && (
         <Fieldset label={<Trans>Invite code</Trans>}>
-          <InputToken
+          <InputText
+            icon={<TokenIcon className="w-5" />}
             autoFocus
             name="inviteCode"
-            aria-label={t`Invite code`}
             title={t`Invite code`}
+            placeholder={t`example-com-xxxxx-xxxxx`}
             required
-            value={inviteCode}
+            value={inviteCode || ''}
             onChange={(event) => {
-              setInviteCode(event.target.value)
+              setInviteCode(event.target.value || undefined)
               resetForm()
             }}
             enterKeyHint="next"

package/src/assets/app/views/authorize/sign-up/sign-up-handle-form.tsx

@@ -163,8 +163,6 @@ export function SignUpHandleForm({
         icon={<AtSymbolIcon className="w-5" />}
         name="handle"
         type="text"
-        placeholder={t`Type your desired username`}
-        aria-label={t`Type your desired username`}
         title={t`Type your desired username`}
         pattern="[a-z0-9][a-z0-9\-]+[a-z0-9]"
         minLength={minLength}

package/src/errors/invalid-invite-code-error.ts

@@ -0,0 +1,10 @@
+import { InvalidRequestError } from './invalid-request-error'
+
+export class InvalidInviteCodeError extends InvalidRequestError {
+  constructor(details?: string, cause?: unknown) {
+    super(
+      'This invite code is invalid.' + (details ? ` ${details}` : ''),
+      cause,
+    )
+  }
+}

package/src/errors/oauth-error.ts

@@ -23,6 +23,6 @@ export class OAuthError extends Error {
     return {
       error: this.error,
       error_description: this.error_description,
-    } as const
+    }
   }
 }

package/src/oauth-errors.ts

@@ -12,6 +12,7 @@ export { InvalidClientMetadataError } from './errors/invalid-client-metadata-err
 export { InvalidDpopKeyBindingError } from './errors/invalid-dpop-key-binding-error.js'
 export { InvalidDpopProofError } from './errors/invalid-dpop-proof-error.js'
 export { InvalidGrantError } from './errors/invalid-grant-error.js'
+export { InvalidInviteCodeError } from './errors/invalid-invite-code-error.js'
 export { InvalidParametersError } from './errors/invalid-parameters-error.js'
 export { InvalidRedirectUriError } from './errors/invalid-redirect-uri-error.js'
 export { InvalidRequestError } from './errors/invalid-request-error.js'

package/src/oauth-provider.ts

@@ -103,8 +103,10 @@ import { OAuthHooks, SignInData, SignUpData } from './oauth-hooks.js'
 import { OAuthVerifier, OAuthVerifierOptions } from './oauth-verifier.js'
 import { AuthorizationResultAuthorize } from './output/build-authorize-data.js'
 import {
-  BrandingConfig,
+  Branding,
+  BrandingInput,
   Customization,
+  CustomizationInput,
   customizationSchema,
 } from './output/build-customization-data.js'
 import {
@@ -130,9 +132,11 @@ import { TokenStore, asTokenStore } from './token/token-store.js'
 import { VerifyTokenClaimsOptions } from './token/verify-token-claims.js'
 
 export {
-  type BrandingConfig,
+  type Branding,
+  type BrandingInput,
   type CustomMetadata,
   type Customization,
+  type CustomizationInput,
   type Handler,
   type HcaptchaConfig,
   Keyset,
@@ -158,7 +162,7 @@ export type RouterOptions<
 }
 
 export type OAuthProviderOptions = Override<
-  OAuthVerifierOptions & OAuthHooks & DeviceManagerOptions & Customization,
+  OAuthVerifierOptions & OAuthHooks & DeviceManagerOptions & CustomizationInput,
   {
     /**
      * Maximum age a device/account session can be before requiring
@@ -1141,28 +1145,27 @@ export class OAuthProvider extends OAuthVerifier {
      * Wrap an OAuth endpoint in a middleware that will set the appropriate
      * response headers and format the response as JSON.
      */
-    const jsonHandler = <T, TReq extends Req, TRes extends Res, Json>(
-      buildJson: (this: T, req: TReq, res: TRes) => Awaitable<Json>,
-      status?: number,
+    const jsonHandler = <T, TReq extends Req, TRes extends Res, Payload>(
+      buildJson: (
+        this: T,
+        req: TReq,
+        res: TRes,
+      ) => Awaitable<{ payload: Payload; status?: number }>,
     ): Handler<T, TReq, TRes> =>
       async function (req, res) {
-        try {
-          // https://www.rfc-editor.org/rfc/rfc6749.html#section-5.1
-          res.setHeader('Cache-Control', 'no-store')
-          res.setHeader('Pragma', 'no-cache')
-
-          // Ensure we can agree on a content encoding & type before starting to
-          // build the JSON response.
-          if (!negotiateContent(req, ['application/json'])) {
-            throw createHttpError(406, 'Unsupported media type')
-          }
+        // https://www.rfc-editor.org/rfc/rfc6749.html#section-5.1
+        res.setHeader('Cache-Control', 'no-store')
+        res.setHeader('Pragma', 'no-cache')
+
+        // Ensure we can agree on a content encoding & type before starting to
+        // build the JSON response.
+        if (!negotiateContent(req, ['application/json'])) {
+          throw createHttpError(406, 'Unsupported media type')
+        }
 
-          const result = await buildJson.call(this, req, res)
-          if (result !== undefined) {
-            writeJson(res, result, { status })
-          } else if (!res.headersSent) {
-            res.writeHead(status ?? 204).end()
-          }
+        try {
+          const { payload, status = 200 } = await buildJson.call(this, req, res)
+          writeJson(res, payload, { status })
         } catch (err) {
           onError?.(req, res, err, 'OAuth request error')
 
@@ -1176,13 +1179,13 @@ export class OAuthProvider extends OAuthVerifier {
         }
       }
 
-    const oauthHandler = <T, TReq extends Req, TRes extends Res, Json>(
-      buildOAuthResponse: (this: T, req: TReq, res: TRes) => Awaitable<Json>,
+    const oauthHandler = <T, TReq extends Req, TRes extends Res, Payload>(
+      buildOAuthResponse: (this: T, req: TReq, res: TRes) => Awaitable<Payload>,
       status?: number,
     ) =>
       combineMiddlewares([
         corsHeaders,
-        jsonHandler<T, TReq, TRes, Json>(async function (req, res) {
+        jsonHandler<T, TReq, TRes, Payload>(async function (req, res) {
           try {
             // https://datatracker.ietf.org/doc/html/rfc9449#section-8.2
             const dpopNonce = server.nextDpopNonce()
@@ -1192,7 +1195,8 @@ export class OAuthProvider extends OAuthVerifier {
               res.appendHeader('Access-Control-Expose-Headers', name)
             }
 
-            return await buildOAuthResponse.call(this, req, res)
+            const payload = await buildOAuthResponse.call(this, req, res)
+            return { payload, status }
           } catch (err) {
             if (!res.headersSent && err instanceof WWWAuthenticateError) {
               const name = 'WWW-Authenticate'
@@ -1202,7 +1206,7 @@ export class OAuthProvider extends OAuthVerifier {
 
             throw err
           }
-        }, status),
+        }),
       ])
 
     const apiHandler = <
@@ -1210,7 +1214,7 @@ export class OAuthProvider extends OAuthVerifier {
       TReq extends Req,
       TRes extends Res,
       S extends z.ZodTypeAny,
-      Json,
+      Payload,
     >(
       inputSchema: S,
       buildJson: (
@@ -1219,10 +1223,10 @@ export class OAuthProvider extends OAuthVerifier {
         res: TRes,
         input: z.infer<S>,
         context: ApiContext,
-      ) => Json | Promise<Json>,
+      ) => Awaitable<Payload>,
       status?: number,
     ) =>
-      jsonHandler<T, TReq, TRes, Json>(async function (req, res) {
+      jsonHandler<T, TReq, TRes, Payload>(async function (req, res) {
         validateFetchMode(req, res, ['same-origin'])
         validateFetchSite(req, res, ['same-origin'])
         validateSameOrigin(req, res, issuerOrigin)
@@ -1248,12 +1252,13 @@ export class OAuthProvider extends OAuthVerifier {
           res,
         )
 
-        const payload = await parseHttpRequest(req, ['json'])
-        const input = await inputSchema.parseAsync(payload, { path: ['body'] })
+        const inputRaw = await parseHttpRequest(req, ['json'])
+        const input = await inputSchema.parseAsync(inputRaw, { path: ['body'] })
 
         const context: ApiContext = { requestUri, deviceId, deviceMetadata }
-        return buildJson.call(this, req, res, input, context)
-      }, status)
+        const payload = await buildJson.call(this, req, res, input, context)
+        return { payload, status }
+      })
 
     const navigationHandler = <T, TReq extends Req, TRes extends Res>(
       handler: (this: T, req: TReq, res: TRes) => Awaitable<void>,
@@ -1474,6 +1479,8 @@ export class OAuthProvider extends OAuthVerifier {
         } catch (err) {
           onError?.(req, res, err, 'Failed to revoke token')
         }
+
+        return {}
       }),
     )
     router.get(
@@ -1573,7 +1580,8 @@ export class OAuthProvider extends OAuthVerifier {
       apiHandler(
         z.object({ handle: handleSchema }).strict(),
         async function (req, res, data) {
-          return server.accountManager.verifyHandleAvailability(data.handle)
+          await server.accountManager.verifyHandleAvailability(data.handle)
+          return { available: true }
         },
       ),
     )
@@ -1598,6 +1606,7 @@ export class OAuthProvider extends OAuthVerifier {
         resetPasswordRequestDataSchema,
         async function (req, res, data) {
           await server.accountManager.resetPasswordRequest(data)
+          return { success: true }
         },
       ),
     )
@@ -1608,6 +1617,7 @@ export class OAuthProvider extends OAuthVerifier {
         resetPasswordConfirmDataSchema,
         async function (req, res, data) {
           await server.accountManager.resetPasswordConfirm(data)
+          return { success: true }
         },
       ),
     )