@attlaz/client 1.99.0 → 1.100.0

package/dist/Model/User/PasswordCheck.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Why a password was rejected. `null` means it was accepted.
+ *
+ * Mirrors the server's `PasswordCheckResult` — duplicated here rather than imported, per the client's
+ * standing rule that it does not depend on Core.
+ */
+export type PasswordCheckCode = 'password_missing' | 'password_not_long_enough' | 'password_too_long' | 'password_repeat_match' | 'password_general_match' | 'password_too_weak';
+export declare class PasswordCheck {
+    /** Null when the password is acceptable. */
+    code: PasswordCheckCode | null;
+    /** Human-readable reason, ready to display. Null when the password is acceptable. */
+    error: string | null;
+    /**
+     * zxcvbn score, 0 (weakest) to 4 (strongest). Null when the password was rejected before it was
+     * scored — an empty or out-of-bounds password never reaches the estimator.
+     *
+     * Treat it as a display hint, not a policy: the server owns the threshold, and a low score with
+     * `code === null` still means accepted.
+     */
+    strength: number | null;
+    isAcceptable(): boolean;
+}

package/dist/Model/User/PasswordCheck.js

@@ -0,0 +1,17 @@
+export class PasswordCheck {
+    /** Null when the password is acceptable. */
+    code = null;
+    /** Human-readable reason, ready to display. Null when the password is acceptable. */
+    error = null;
+    /**
+     * zxcvbn score, 0 (weakest) to 4 (strongest). Null when the password was rejected before it was
+     * scored — an empty or out-of-bounds password never reaches the estimator.
+     *
+     * Treat it as a display hint, not a policy: the server owns the threshold, and a low score with
+     * `code === null` still means accepted.
+     */
+    strength = null;
+    isAcceptable() {
+        return this.code === null;
+    }
+}

package/dist/Service/UserEndpoint.d.ts

@@ -1,6 +1,7 @@
 import { UserAuthProvider } from '../Model/User/UserAuthProvider.js';
 import { User } from '../Model/User/User.js';
 import { UserSummary } from '../Model/User/UserSummary.js';
+import { PasswordCheck } from '../Model/User/PasswordCheck.js';
 import { CollectionResult } from '../Model/Result/CollectionResult.js';
 import { Endpoint } from './Endpoint.js';
 import { UserNotificationSession } from '../Model/User/UserNotificationSession.js';
@@ -23,6 +24,18 @@ export declare class UserEndpoint extends Endpoint {
     update(user: User): Promise<User>;
     create(user: User, password: string, invitationCode?: string | null): Promise<User>;
     requestResetPassword(email: string): Promise<boolean>;
+    /**
+     * Ask the server whether a password is acceptable, without setting it.
+     *
+     * Unauthenticated — signup calls this before an account, and therefore a token, exists. Pass the
+     * email when it is known so the server can price the password against the user's own details;
+     * `stijn2026` for `stijn@echron.com` scores far lower with it than without.
+     *
+     * Advisory only. The same rules run again when the password is actually set, so a caller must not
+     * treat acceptance here as a guarantee.
+     */
+    checkPassword(password: string, email?: string | null): Promise<PasswordCheck>;
+    private static parsePasswordCheck;
     resetPassword(code: string, password: string): Promise<boolean>;
     createWebPush(session: UserNotificationSession): Promise<boolean>;
     getSessions(pagination: CursorPagination): Promise<CollectionResult<UserNotificationSession>>;

package/dist/Service/UserEndpoint.js

@@ -2,6 +2,7 @@ import { path } from '../Http/Data/Path.js';
 import { UserAuthProvider } from '../Model/User/UserAuthProvider.js';
 import { User } from '../Model/User/User.js';
 import { UserSummary } from '../Model/User/UserSummary.js';
+import { PasswordCheck } from '../Model/User/PasswordCheck.js';
 import { Endpoint } from './Endpoint.js';
 import { UserNotificationSession } from '../Model/User/UserNotificationSession.js';
 import { QueryString } from '../Http/Data/QueryString.js';
@@ -115,6 +116,42 @@ export class UserEndpoint extends Endpoint {
             throw e;
         }
     }
+    /**
+     * Ask the server whether a password is acceptable, without setting it.
+     *
+     * Unauthenticated — signup calls this before an account, and therefore a token, exists. Pass the
+     * email when it is known so the server can price the password against the user's own details;
+     * `stijn2026` for `stijn@echron.com` scores far lower with it than without.
+     *
+     * Advisory only. The same rules run again when the password is actually set, so a caller must not
+     * treat acceptance here as a guarantee.
+     */
+    async checkPassword(password, email = null) {
+        try {
+            const url = '/users/check-password';
+            const parameters = email === null ? { password } : { password, email };
+            const result = await this.requestObject(url, parameters, UserEndpoint.parsePasswordCheck, 'POST', false);
+            const check = result.getData();
+            if (check === null) {
+                throw new Error('Unable to check password: wrong response from API');
+            }
+            return check;
+        }
+        catch (e) {
+            if (this.httpClient.isDebugEnabled()) {
+                // Never log the password itself.
+                console.error('Failed to check password: ', e);
+            }
+            throw e;
+        }
+    }
+    static parsePasswordCheck(raw) {
+        const check = new PasswordCheck();
+        check.code = (raw.code ?? null);
+        check.error = (raw.error ?? null);
+        check.strength = (raw.strength ?? null);
+        return check;
+    }
     async resetPassword(code, password) {
         try {
             const url = path('/users/resetpassword/:code', { code });

package/dist/index.d.ts

@@ -209,6 +209,8 @@ export { UserAction } from './Model/User/UserAction.js';
 export type { UserActionFilter } from './Model/User/UserActionFilter.js';
 export { UserSummary } from './Model/User/UserSummary.js';
 export type { UserSummaryType } from './Model/User/UserSummary.js';
+export { PasswordCheck } from './Model/User/PasswordCheck.js';
+export type { PasswordCheckCode } from './Model/User/PasswordCheck.js';
 export { RunnerImage } from './Model/Runner/RunnerImage.js';
 export { Component } from './Model/Component/Component.js';
 export { ComponentKind } from './Model/Component/ComponentKind.js';

package/dist/index.js

@@ -172,6 +172,7 @@ export { User } from './Model/User/User.js';
 export { UserAuthProvider } from './Model/User/UserAuthProvider.js';
 export { UserAction } from './Model/User/UserAction.js';
 export { UserSummary } from './Model/User/UserSummary.js';
+export { PasswordCheck } from './Model/User/PasswordCheck.js';
 export { RunnerImage } from './Model/Runner/RunnerImage.js';
 export { Component } from './Model/Component/Component.js';
 export { ComponentKind } from './Model/Component/ComponentKind.js';

package/dist/version.d.ts

@@ -1 +1 @@
-export declare const VERSION = "1.98.0";
+export declare const VERSION = "1.99.0";

package/dist/version.js

@@ -1 +1 @@
-export const VERSION = "1.98.0";
+export const VERSION = "1.99.0";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@attlaz/client",
-  "version": "1.99.0",
+  "version": "1.100.0",
   "description": "Javascript Client to access Attlaz API",
   "types": "./dist/index.d.ts",
   "main": "./dist/index.js",
@@ -53,7 +53,7 @@
     "registry": "https://registry.npmjs.org"
   },
   "devDependencies": {
-    "@types/node": "^26.1.2",
+    "@types/node": "^26.2.0",
     "@typescript-eslint/eslint-plugin": "^8.59.3",
     "@typescript-eslint/parser": "^8.59.3",
     "eslint": "^9.39.5",