@baseplate-dev/plugin-auth 0.6.18 → 0.6.20

package/dist/local-auth/admin/generators/admin-crud-roles-column/admin-crud-roles-column.generator.d.ts

@@ -10,6 +10,7 @@ export declare const adminCrudRolesColumnGenerator: import("@baseplate-dev/sync"
                 isTypeOnly: true;
             };
             Alert: {};
+            AlertAction: {};
             AlertDescription: {};
             AlertTitle: {};
             Autocomplete: {};
@@ -39,6 +40,7 @@ export declare const adminCrudRolesColumnGenerator: import("@baseplate-dev/sync"
             buttonVariants: {};
             Calendar: {};
             Card: {};
+            CardAction: {};
             CardContent: {};
             CardDescription: {};
             CardFooter: {};
@@ -165,6 +167,10 @@ export declare const adminCrudRolesColumnGenerator: import("@baseplate-dev/sync"
             NotFoundCard: {};
             NumberField: {};
             NumberFieldController: {};
+            PageHeader: {};
+            PageHeaderActions: {};
+            PageHeaderDescription: {};
+            PageHeaderTitle: {};
             Popover: {};
             PopoverContent: {};
             PopoverTrigger: {};
@@ -174,6 +180,11 @@ export declare const adminCrudRolesColumnGenerator: import("@baseplate-dev/sync"
                 isTypeOnly: true;
             };
             ScrollArea: {};
+            Section: {};
+            SectionActions: {};
+            SectionDescription: {};
+            SectionHeader: {};
+            SectionTitle: {};
             Select: {};
             SelectField: {};
             SelectFieldController: {};
@@ -229,7 +240,27 @@ export declare const adminCrudRolesColumnGenerator: import("@baseplate-dev/sync"
             Textarea: {};
             TextareaField: {};
             TextareaFieldController: {};
+            Toast: {};
+            toast: {};
+            ToastAction: {};
+            ToastClose: {};
+            ToastContent: {};
+            ToastDescription: {};
             Toaster: {};
+            toastManager: {};
+            ToastOptions: {
+                isTypeOnly: true;
+            };
+            ToastPortal: {};
+            ToastProvider: {};
+            ToastTitle: {};
+            ToastType: {
+                isTypeOnly: true;
+            };
+            ToastUpdateOptions: {
+                isTypeOnly: true;
+            };
+            ToastViewport: {};
             Tooltip: {};
             TooltipContent: {};
             TooltipProvider: {};
@@ -242,6 +273,7 @@ export declare const adminCrudRolesColumnGenerator: import("@baseplate-dev/sync"
             useConfirmDialogState: {};
             useControlledState: {};
             useControllerMerged: {};
+            useFieldIds: {};
             useIsMobile: {};
             useSidebar: {};
         }>>;

package/dist/local-auth/core/generators/auth-email-password/auth-email-password.generator.d.ts

@@ -3,7 +3,7 @@
  */
 export declare const authEmailPasswordGenerator: import("@baseplate-dev/sync").GeneratorBundleCreator<{
     adminRoles: string[];
-    devWebDomainPort: number;
+    webAppName: string;
     requireNameOnRegistration: boolean;
     emailOtp?: boolean | undefined;
     disableRegistration?: boolean | undefined;
@@ -16,7 +16,6 @@ export declare const authEmailPasswordGenerator: import("@baseplate-dev/sync").G
     imports: import("@baseplate-dev/sync").GeneratorTask<{
         authEmailPasswordImports: import("@baseplate-dev/sync").ProviderExport<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
             authenticateUserWithEmailAndPassword: {};
-            cleanupExpiredPasswordResetTokens: {};
             completePasswordReset: {};
             createUserWithEmailAndPassword: {};
             PASSWORD_MAX_LENGTH: {};
@@ -32,6 +31,15 @@ export declare const authEmailPasswordGenerator: import("@baseplate-dev/sync").G
     renderers: import("@baseplate-dev/sync").GeneratorTask<{
         localAuthCoreAuthEmailPasswordRenderers: import("@baseplate-dev/sync").ProviderExport<import("./generated/template-renderers.js").LocalAuthCoreAuthEmailPasswordRenderers>;
     }, {
+        appUrlsImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
+            getApiUrl: {};
+            getWebAppForUrl: {};
+            getWebOrigins: {};
+            getWebUrl: {};
+            WebAppName: {
+                isTypeOnly: true;
+            };
+        }>>;
         authModuleImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
             cleanupAuthVerificationQueue: {};
             cleanupAuthVerificationWorker: {};
@@ -109,11 +117,6 @@ export declare const authEmailPasswordGenerator: import("@baseplate-dev/sync").G
             };
         }>>;
     }, undefined>;
-    config: import("@baseplate-dev/sync").GeneratorTask<undefined, {
-        provider: import("@baseplate-dev/sync").ProviderType<Omit<import("@baseplate-dev/utils").FieldMap<{
-            configFields: import("@baseplate-dev/utils").MapContainer<string, import("@baseplate-dev/fastify-generators").ConfigServiceField>;
-        }>, "getValues">>;
-    }, undefined>;
     appModule: import("@baseplate-dev/sync").GeneratorTask<any, {
         paths: import("@baseplate-dev/sync").ProviderType<import("./generated/template-paths.js").LocalAuthCoreAuthEmailPasswordPaths>;
         appModule: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/fastify-generators").AppModuleProvider>;

package/dist/local-auth/core/generators/auth-email-password/auth-email-password.generator.js

@@ -1,14 +1,15 @@
 import { tsCodeFragment, TsCodeUtils, tsImportBuilder, } from '@baseplate-dev/core-generators';
-import { appModuleProvider, configServiceProvider, createPothosPrismaObjectTypeOutputName, pothosTypeOutputProvider, } from '@baseplate-dev/fastify-generators';
+import { appModuleProvider, createPothosPrismaObjectTypeOutputName, pothosTypeOutputProvider, } from '@baseplate-dev/fastify-generators';
 import { transactionalLibConfigProvider } from '@baseplate-dev/plugin-email';
-import { createGenerator, createGeneratorTask, createProviderTask, } from '@baseplate-dev/sync';
+import { createGenerator, createGeneratorTask } from '@baseplate-dev/sync';
 import { quot } from '@baseplate-dev/utils';
 import { z } from 'zod';
 import { LOCAL_AUTH_MODELS } from '#src/local-auth/constants/model-names.js';
 import { LOCAL_AUTH_CORE_AUTH_EMAIL_PASSWORD_GENERATED as GENERATED_TEMPLATES } from './generated/index.js';
 const descriptorSchema = z.object({
     adminRoles: z.array(z.string()),
-    devWebDomainPort: z.number(),
+    /** Web app the links in auth emails point at. */
+    webAppName: z.string(),
     requireNameOnRegistration: z.boolean(),
     emailOtp: z.boolean().default(false),
     disableRegistration: z.boolean().default(false),
@@ -20,17 +21,10 @@ export const authEmailPasswordGenerator = createGenerator({
     name: 'local-auth/core/auth-email-password',
     generatorFileUrl: import.meta.url,
     descriptorSchema,
-    buildTasks: ({ adminRoles, devWebDomainPort, requireNameOnRegistration, emailOtp, disableRegistration, }) => ({
+    buildTasks: ({ adminRoles, webAppName, requireNameOnRegistration, emailOtp, disableRegistration, }) => ({
         paths: GENERATED_TEMPLATES.paths.task,
         imports: GENERATED_TEMPLATES.imports.task,
         renderers: GENERATED_TEMPLATES.renderers.task,
-        config: createProviderTask(configServiceProvider, (configService) => {
-            configService.configFields.set('AUTH_FRONTEND_URL', {
-                validator: tsCodeFragment('z.url()'),
-                comment: 'Frontend URL for authentication flows including password reset and email verification (e.g., https://app.example.com)',
-                exampleValue: `http://localhost:${devWebDomainPort}`,
-            });
-        }),
         appModule: createGeneratorTask({
             dependencies: {
                 paths: GENERATED_TEMPLATES.paths.provider,
@@ -92,6 +86,7 @@ export const authEmailPasswordGenerator = createGenerator({
                                     TPL_USER_OBJECT_TYPE: userObjectTypeFragment,
                                 },
                                 servicesPasswordReset: {
+                                    TPL_AUTH_WEB_APP: quot(webAppName),
                                     TPL_PASSWORD_RESET_EMAIL: TsCodeUtils.importFragment('PasswordResetEmail', transactionalLibPackageName),
                                     TPL_PASSWORD_CHANGED_EMAIL: TsCodeUtils.importFragment('PasswordChangedEmail', transactionalLibPackageName),
                                 },
@@ -104,6 +99,7 @@ export const authEmailPasswordGenerator = createGenerator({
                         }));
                         await builder.apply(renderers.servicesInvite.render({
                             variables: {
+                                TPL_AUTH_WEB_APP: quot(webAppName),
                                 TPL_INVITE_EMAIL: TsCodeUtils.importFragment('InviteEmail', transactionalLibPackageName),
                             },
                         }));
@@ -115,6 +111,7 @@ export const authEmailPasswordGenerator = createGenerator({
                         }));
                         await builder.apply(renderers.servicesEmailVerification.render({
                             variables: {
+                                TPL_AUTH_WEB_APP: quot(webAppName),
                                 TPL_ACCOUNT_VERIFICATION_EMAIL: TsCodeUtils.importFragment('AccountVerificationEmail', transactionalLibPackageName),
                             },
                         }));

package/dist/local-auth/core/generators/auth-email-password/generated/index.d.ts

@@ -1,9 +1,9 @@
 export declare const LOCAL_AUTH_CORE_AUTH_EMAIL_PASSWORD_GENERATED: {
     imports: {
+        generatorName: string;
         task: import("@baseplate-dev/sync").GeneratorTask<{
             authEmailPasswordImports: import("@baseplate-dev/sync").ProviderExport<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
                 authenticateUserWithEmailAndPassword: {};
-                cleanupExpiredPasswordResetTokens: {};
                 completePasswordReset: {};
                 createUserWithEmailAndPassword: {};
                 PASSWORD_MAX_LENGTH: {};
@@ -30,6 +30,15 @@ export declare const LOCAL_AUTH_CORE_AUTH_EMAIL_PASSWORD_GENERATED: {
         task: import("@baseplate-dev/sync").GeneratorTask<{
             localAuthCoreAuthEmailPasswordRenderers: import("@baseplate-dev/sync").ProviderExport<import("./template-renderers.js").LocalAuthCoreAuthEmailPasswordRenderers>;
         }, {
+            appUrlsImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
+                getApiUrl: {};
+                getWebAppForUrl: {};
+                getWebOrigins: {};
+                getWebUrl: {};
+                WebAppName: {
+                    isTypeOnly: true;
+                };
+            }>>;
             authModuleImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
                 cleanupAuthVerificationQueue: {};
                 cleanupAuthVerificationWorker: {};
@@ -143,9 +152,19 @@ export declare const LOCAL_AUTH_CORE_AUTH_EMAIL_PASSWORD_GENERATED: {
                 servicesUserPassword: {};
             }>;
             servicesPasswordReset: import("@baseplate-dev/core-generators").TsTemplateFile<{
+                TPL_AUTH_WEB_APP: {};
                 TPL_PASSWORD_CHANGED_EMAIL: {};
                 TPL_PASSWORD_RESET_EMAIL: {};
             }, {
+                appUrlsImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
+                    getApiUrl: {};
+                    getWebAppForUrl: {};
+                    getWebOrigins: {};
+                    getWebUrl: {};
+                    WebAppName: {
+                        isTypeOnly: true;
+                    };
+                }>>;
                 authModuleImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
                     cleanupAuthVerificationQueue: {};
                     cleanupAuthVerificationWorker: {};
@@ -158,10 +177,6 @@ export declare const LOCAL_AUTH_CORE_AUTH_EMAIL_PASSWORD_GENERATED: {
                     validateAuthVerification: {};
                     validateCodeVerification: {};
                 }>>;
-                configServiceImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
-                    getConfig: {};
-                    isDevelopment: {};
-                }>>;
                 errorHandlerServiceImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
                     BadRequestError: {};
                     ForbiddenError: {};
@@ -389,7 +404,17 @@ export declare const LOCAL_AUTH_CORE_AUTH_EMAIL_PASSWORD_GENERATED: {
         }>;
         servicesEmailVerification: import("@baseplate-dev/core-generators").TsTemplateFile<{
             TPL_ACCOUNT_VERIFICATION_EMAIL: {};
+            TPL_AUTH_WEB_APP: {};
         }, {
+            appUrlsImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
+                getApiUrl: {};
+                getWebAppForUrl: {};
+                getWebOrigins: {};
+                getWebUrl: {};
+                WebAppName: {
+                    isTypeOnly: true;
+                };
+            }>>;
             authModuleImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
                 cleanupAuthVerificationQueue: {};
                 cleanupAuthVerificationWorker: {};
@@ -402,10 +427,6 @@ export declare const LOCAL_AUTH_CORE_AUTH_EMAIL_PASSWORD_GENERATED: {
                 validateAuthVerification: {};
                 validateCodeVerification: {};
             }>>;
-            configServiceImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
-                getConfig: {};
-                isDevelopment: {};
-            }>>;
             errorHandlerServiceImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
                 BadRequestError: {};
                 ForbiddenError: {};
@@ -447,8 +468,18 @@ export declare const LOCAL_AUTH_CORE_AUTH_EMAIL_PASSWORD_GENERATED: {
             constantsPassword: {};
         }>;
         servicesInvite: import("@baseplate-dev/core-generators").TsTemplateFile<{
+            TPL_AUTH_WEB_APP: {};
             TPL_INVITE_EMAIL: {};
         }, {
+            appUrlsImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
+                getApiUrl: {};
+                getWebAppForUrl: {};
+                getWebOrigins: {};
+                getWebUrl: {};
+                WebAppName: {
+                    isTypeOnly: true;
+                };
+            }>>;
             authModuleImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
                 cleanupAuthVerificationQueue: {};
                 cleanupAuthVerificationWorker: {};
@@ -461,10 +492,6 @@ export declare const LOCAL_AUTH_CORE_AUTH_EMAIL_PASSWORD_GENERATED: {
                 validateAuthVerification: {};
                 validateCodeVerification: {};
             }>>;
-            configServiceImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
-                getConfig: {};
-                isDevelopment: {};
-            }>>;
             errorHandlerServiceImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
                 BadRequestError: {};
                 ForbiddenError: {};

package/dist/local-auth/core/generators/auth-email-password/generated/template-renderers.d.ts

@@ -32,6 +32,15 @@ export declare const LOCAL_AUTH_CORE_AUTH_EMAIL_PASSWORD_RENDERERS: {
     task: import("@baseplate-dev/sync").GeneratorTask<{
         localAuthCoreAuthEmailPasswordRenderers: import("@baseplate-dev/sync").ProviderExport<LocalAuthCoreAuthEmailPasswordRenderers>;
     }, {
+        appUrlsImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
+            getApiUrl: {};
+            getWebAppForUrl: {};
+            getWebOrigins: {};
+            getWebUrl: {};
+            WebAppName: {
+                isTypeOnly: true;
+            };
+        }>>;
         authModuleImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
             cleanupAuthVerificationQueue: {};
             cleanupAuthVerificationWorker: {};

package/dist/local-auth/core/generators/auth-email-password/generated/template-renderers.js

@@ -1,5 +1,5 @@
 import { typescriptFileProvider } from '@baseplate-dev/core-generators';
-import { configServiceImportsProvider, errorHandlerServiceImportsProvider, passwordHasherServiceImportsProvider, pothosImportsProvider, prismaGeneratedImportsProvider, prismaImportsProvider, requestServiceContextImportsProvider, userSessionTypesImportsProvider, } from '@baseplate-dev/fastify-generators';
+import { appUrlsImportsProvider, configServiceImportsProvider, errorHandlerServiceImportsProvider, passwordHasherServiceImportsProvider, pothosImportsProvider, prismaGeneratedImportsProvider, prismaImportsProvider, requestServiceContextImportsProvider, userSessionTypesImportsProvider, } from '@baseplate-dev/fastify-generators';
 import { rateLimitImportsProvider } from '@baseplate-dev/plugin-rate-limit';
 import { createGeneratorTask, createProviderType } from '@baseplate-dev/sync';
 import { authModuleImportsProvider } from '#src/local-auth/core/generators/auth-module/generated/ts-import-providers.js';
@@ -8,6 +8,7 @@ import { LOCAL_AUTH_CORE_AUTH_EMAIL_PASSWORD_TEMPLATES } from './typed-templates
 const localAuthCoreAuthEmailPasswordRenderers = createProviderType('local-auth-core-auth-email-password-renderers');
 const localAuthCoreAuthEmailPasswordRenderersTask = createGeneratorTask({
     dependencies: {
+        appUrlsImports: appUrlsImportsProvider,
         authModuleImports: authModuleImportsProvider,
         configServiceImports: configServiceImportsProvider,
         errorHandlerServiceImports: errorHandlerServiceImportsProvider,
@@ -24,7 +25,7 @@ const localAuthCoreAuthEmailPasswordRenderersTask = createGeneratorTask({
     exports: {
         localAuthCoreAuthEmailPasswordRenderers: localAuthCoreAuthEmailPasswordRenderers.export(),
     },
-    run({ authModuleImports, configServiceImports, errorHandlerServiceImports, passwordHasherServiceImports, paths, pothosImports, prismaGeneratedImports, prismaImports, rateLimitImports, requestServiceContextImports, typescriptFile, userSessionTypesImports, }) {
+    run({ appUrlsImports, authModuleImports, configServiceImports, errorHandlerServiceImports, passwordHasherServiceImports, paths, pothosImports, prismaGeneratedImports, prismaImports, rateLimitImports, requestServiceContextImports, typescriptFile, userSessionTypesImports, }) {
         return {
             providers: {
                 localAuthCoreAuthEmailPasswordRenderers: {
@@ -40,8 +41,8 @@ const localAuthCoreAuthEmailPasswordRenderersTask = createGeneratorTask({
                             group: LOCAL_AUTH_CORE_AUTH_EMAIL_PASSWORD_TEMPLATES.moduleGroup,
                             paths,
                             importMapProviders: {
+                                appUrlsImports,
                                 authModuleImports,
-                                configServiceImports,
                                 errorHandlerServiceImports,
                                 passwordHasherServiceImports,
                                 pothosImports,
@@ -112,8 +113,8 @@ const localAuthCoreAuthEmailPasswordRenderersTask = createGeneratorTask({
                             template: LOCAL_AUTH_CORE_AUTH_EMAIL_PASSWORD_TEMPLATES.servicesEmailVerification,
                             destination: paths.servicesEmailVerification,
                             importMapProviders: {
+                                appUrlsImports,
                                 authModuleImports,
-                                configServiceImports,
                                 errorHandlerServiceImports,
                                 prismaImports,
                                 rateLimitImports,
@@ -128,8 +129,8 @@ const localAuthCoreAuthEmailPasswordRenderersTask = createGeneratorTask({
                             template: LOCAL_AUTH_CORE_AUTH_EMAIL_PASSWORD_TEMPLATES.servicesInvite,
                             destination: paths.servicesInvite,
                             importMapProviders: {
+                                appUrlsImports,
                                 authModuleImports,
-                                configServiceImports,
                                 errorHandlerServiceImports,
                                 passwordHasherServiceImports,
                                 prismaGeneratedImports,

package/dist/local-auth/core/generators/auth-email-password/generated/ts-import-providers.d.ts

@@ -1,7 +1,6 @@
 import type { TsImportMapProviderFromSchema } from '@baseplate-dev/core-generators';
 export declare const authEmailPasswordImportsSchema: {
     authenticateUserWithEmailAndPassword: {};
-    cleanupExpiredPasswordResetTokens: {};
     completePasswordReset: {};
     createUserWithEmailAndPassword: {};
     PASSWORD_MAX_LENGTH: {};
@@ -14,7 +13,6 @@ export declare const authEmailPasswordImportsSchema: {
 export type AuthEmailPasswordImportsProvider = TsImportMapProviderFromSchema<typeof authEmailPasswordImportsSchema>;
 export declare const authEmailPasswordImportsProvider: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
     authenticateUserWithEmailAndPassword: {};
-    cleanupExpiredPasswordResetTokens: {};
     completePasswordReset: {};
     createUserWithEmailAndPassword: {};
     PASSWORD_MAX_LENGTH: {};
@@ -25,10 +23,10 @@ export declare const authEmailPasswordImportsProvider: import("@baseplate-dev/sy
     validatePasswordResetToken: {};
 }>>;
 export declare const LOCAL_AUTH_CORE_AUTH_EMAIL_PASSWORD_IMPORTS: {
+    generatorName: string;
     task: import("@baseplate-dev/sync").GeneratorTask<{
         authEmailPasswordImports: import("@baseplate-dev/sync").ProviderExport<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
             authenticateUserWithEmailAndPassword: {};
-            cleanupExpiredPasswordResetTokens: {};
             completePasswordReset: {};
             createUserWithEmailAndPassword: {};
             PASSWORD_MAX_LENGTH: {};

package/dist/local-auth/core/generators/auth-email-password/generated/ts-import-providers.js

@@ -3,7 +3,6 @@ import { createGeneratorTask, createReadOnlyProviderType, } from '@baseplate-dev
 import { LOCAL_AUTH_CORE_AUTH_EMAIL_PASSWORD_PATHS } from './template-paths.js';
 export const authEmailPasswordImportsSchema = createTsImportMapSchema({
     authenticateUserWithEmailAndPassword: {},
-    cleanupExpiredPasswordResetTokens: {},
     completePasswordReset: {},
     createUserWithEmailAndPassword: {},
     PASSWORD_MAX_LENGTH: {},
@@ -26,7 +25,6 @@ const localAuthCoreAuthEmailPasswordImportsTask = createGeneratorTask({
             providers: {
                 authEmailPasswordImports: createTsImportMap(authEmailPasswordImportsSchema, {
                     authenticateUserWithEmailAndPassword: paths.servicesUserPassword,
-                    cleanupExpiredPasswordResetTokens: paths.servicesPasswordReset,
                     completePasswordReset: paths.servicesPasswordReset,
                     createUserWithEmailAndPassword: paths.servicesUserPassword,
                     PASSWORD_MAX_LENGTH: paths.constantsPassword,
@@ -41,6 +39,7 @@ const localAuthCoreAuthEmailPasswordImportsTask = createGeneratorTask({
     },
 });
 export const LOCAL_AUTH_CORE_AUTH_EMAIL_PASSWORD_IMPORTS = {
+    generatorName: '@baseplate-dev/plugin-auth#local-auth/core/auth-email-password',
     task: localAuthCoreAuthEmailPasswordImportsTask,
 };
 //# sourceMappingURL=ts-import-providers.js.map

package/dist/local-auth/core/generators/auth-email-password/generated/typed-templates.d.ts

@@ -31,9 +31,19 @@ export declare const moduleGroup: {
         servicesUserPassword: {};
     }>;
     servicesPasswordReset: import("@baseplate-dev/core-generators").TsTemplateFile<{
+        TPL_AUTH_WEB_APP: {};
         TPL_PASSWORD_CHANGED_EMAIL: {};
         TPL_PASSWORD_RESET_EMAIL: {};
     }, {
+        appUrlsImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
+            getApiUrl: {};
+            getWebAppForUrl: {};
+            getWebOrigins: {};
+            getWebUrl: {};
+            WebAppName: {
+                isTypeOnly: true;
+            };
+        }>>;
         authModuleImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
             cleanupAuthVerificationQueue: {};
             cleanupAuthVerificationWorker: {};
@@ -46,10 +56,6 @@ export declare const moduleGroup: {
             validateAuthVerification: {};
             validateCodeVerification: {};
         }>>;
-        configServiceImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
-            getConfig: {};
-            isDevelopment: {};
-        }>>;
         errorHandlerServiceImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
             BadRequestError: {};
             ForbiddenError: {};
@@ -193,9 +199,19 @@ export declare const LOCAL_AUTH_CORE_AUTH_EMAIL_PASSWORD_TEMPLATES: {
             servicesUserPassword: {};
         }>;
         servicesPasswordReset: import("@baseplate-dev/core-generators").TsTemplateFile<{
+            TPL_AUTH_WEB_APP: {};
             TPL_PASSWORD_CHANGED_EMAIL: {};
             TPL_PASSWORD_RESET_EMAIL: {};
         }, {
+            appUrlsImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
+                getApiUrl: {};
+                getWebAppForUrl: {};
+                getWebOrigins: {};
+                getWebUrl: {};
+                WebAppName: {
+                    isTypeOnly: true;
+                };
+            }>>;
             authModuleImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
                 cleanupAuthVerificationQueue: {};
                 cleanupAuthVerificationWorker: {};
@@ -208,10 +224,6 @@ export declare const LOCAL_AUTH_CORE_AUTH_EMAIL_PASSWORD_TEMPLATES: {
                 validateAuthVerification: {};
                 validateCodeVerification: {};
             }>>;
-            configServiceImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
-                getConfig: {};
-                isDevelopment: {};
-            }>>;
             errorHandlerServiceImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
                 BadRequestError: {};
                 ForbiddenError: {};
@@ -439,7 +451,17 @@ export declare const LOCAL_AUTH_CORE_AUTH_EMAIL_PASSWORD_TEMPLATES: {
     }>;
     servicesEmailVerification: import("@baseplate-dev/core-generators").TsTemplateFile<{
         TPL_ACCOUNT_VERIFICATION_EMAIL: {};
+        TPL_AUTH_WEB_APP: {};
     }, {
+        appUrlsImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
+            getApiUrl: {};
+            getWebAppForUrl: {};
+            getWebOrigins: {};
+            getWebUrl: {};
+            WebAppName: {
+                isTypeOnly: true;
+            };
+        }>>;
         authModuleImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
             cleanupAuthVerificationQueue: {};
             cleanupAuthVerificationWorker: {};
@@ -452,10 +474,6 @@ export declare const LOCAL_AUTH_CORE_AUTH_EMAIL_PASSWORD_TEMPLATES: {
             validateAuthVerification: {};
             validateCodeVerification: {};
         }>>;
-        configServiceImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
-            getConfig: {};
-            isDevelopment: {};
-        }>>;
         errorHandlerServiceImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
             BadRequestError: {};
             ForbiddenError: {};
@@ -497,8 +515,18 @@ export declare const LOCAL_AUTH_CORE_AUTH_EMAIL_PASSWORD_TEMPLATES: {
         constantsPassword: {};
     }>;
     servicesInvite: import("@baseplate-dev/core-generators").TsTemplateFile<{
+        TPL_AUTH_WEB_APP: {};
         TPL_INVITE_EMAIL: {};
     }, {
+        appUrlsImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
+            getApiUrl: {};
+            getWebAppForUrl: {};
+            getWebOrigins: {};
+            getWebUrl: {};
+            WebAppName: {
+                isTypeOnly: true;
+            };
+        }>>;
         authModuleImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
             cleanupAuthVerificationQueue: {};
             cleanupAuthVerificationWorker: {};
@@ -511,10 +539,6 @@ export declare const LOCAL_AUTH_CORE_AUTH_EMAIL_PASSWORD_TEMPLATES: {
             validateAuthVerification: {};
             validateCodeVerification: {};
         }>>;
-        configServiceImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
-            getConfig: {};
-            isDevelopment: {};
-        }>>;
         errorHandlerServiceImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
             BadRequestError: {};
             ForbiddenError: {};

package/dist/local-auth/core/generators/auth-email-password/generated/typed-templates.js

@@ -1,5 +1,5 @@
 import { createTsTemplateFile } from '@baseplate-dev/core-generators';
-import { configServiceImportsProvider, errorHandlerServiceImportsProvider, passwordHasherServiceImportsProvider, pothosImportsProvider, prismaGeneratedImportsProvider, prismaImportsProvider, requestServiceContextImportsProvider, userSessionTypesImportsProvider, } from '@baseplate-dev/fastify-generators';
+import { appUrlsImportsProvider, configServiceImportsProvider, errorHandlerServiceImportsProvider, passwordHasherServiceImportsProvider, pothosImportsProvider, prismaGeneratedImportsProvider, prismaImportsProvider, requestServiceContextImportsProvider, userSessionTypesImportsProvider, } from '@baseplate-dev/fastify-generators';
 import { rateLimitImportsProvider } from '@baseplate-dev/plugin-rate-limit';
 import path from 'node:path';
 import { authModuleImportsProvider } from '#src/local-auth/core/generators/auth-module/generated/ts-import-providers.js';
@@ -60,8 +60,8 @@ const servicesPasswordReset = createTsTemplateFile({
     fileOptions: { kind: 'singleton' },
     group: 'module',
     importMapProviders: {
+        appUrlsImports: appUrlsImportsProvider,
         authModuleImports: authModuleImportsProvider,
-        configServiceImports: configServiceImportsProvider,
         errorHandlerServiceImports: errorHandlerServiceImportsProvider,
         passwordHasherServiceImports: passwordHasherServiceImportsProvider,
         prismaImports: prismaImportsProvider,
@@ -70,7 +70,6 @@ const servicesPasswordReset = createTsTemplateFile({
     },
     name: 'services-password-reset',
     projectExports: {
-        cleanupExpiredPasswordResetTokens: { isTypeOnly: false },
         completePasswordReset: { isTypeOnly: false },
         requestPasswordReset: { isTypeOnly: false },
         validatePasswordResetToken: { isTypeOnly: false },
@@ -82,7 +81,11 @@ const servicesPasswordReset = createTsTemplateFile({
     source: {
         path: path.join(import.meta.dirname, '../templates/module/services/password-reset.service.ts'),
     },
-    variables: { TPL_PASSWORD_CHANGED_EMAIL: {}, TPL_PASSWORD_RESET_EMAIL: {} },
+    variables: {
+        TPL_AUTH_WEB_APP: {},
+        TPL_PASSWORD_CHANGED_EMAIL: {},
+        TPL_PASSWORD_RESET_EMAIL: {},
+    },
 });
 const servicesUserPassword = createTsTemplateFile({
     fileOptions: { kind: 'singleton' },
@@ -175,8 +178,8 @@ const servicesEmailOtp = createTsTemplateFile({
 const servicesEmailVerification = createTsTemplateFile({
     fileOptions: { kind: 'singleton' },
     importMapProviders: {
+        appUrlsImports: appUrlsImportsProvider,
         authModuleImports: authModuleImportsProvider,
-        configServiceImports: configServiceImportsProvider,
         errorHandlerServiceImports: errorHandlerServiceImportsProvider,
         prismaImports: prismaImportsProvider,
         rateLimitImports: rateLimitImportsProvider,
@@ -187,13 +190,13 @@ const servicesEmailVerification = createTsTemplateFile({
     source: {
         path: path.join(import.meta.dirname, '../templates/module/services/email-verification.service.ts'),
     },
-    variables: { TPL_ACCOUNT_VERIFICATION_EMAIL: {} },
+    variables: { TPL_ACCOUNT_VERIFICATION_EMAIL: {}, TPL_AUTH_WEB_APP: {} },
 });
 const servicesInvite = createTsTemplateFile({
     fileOptions: { kind: 'singleton' },
     importMapProviders: {
+        appUrlsImports: appUrlsImportsProvider,
         authModuleImports: authModuleImportsProvider,
-        configServiceImports: configServiceImportsProvider,
         errorHandlerServiceImports: errorHandlerServiceImportsProvider,
         passwordHasherServiceImports: passwordHasherServiceImportsProvider,
         prismaGeneratedImports: prismaGeneratedImportsProvider,
@@ -206,7 +209,7 @@ const servicesInvite = createTsTemplateFile({
     source: {
         path: path.join(import.meta.dirname, '../templates/module/services/invite.service.ts'),
     },
-    variables: { TPL_INVITE_EMAIL: {} },
+    variables: { TPL_AUTH_WEB_APP: {}, TPL_INVITE_EMAIL: {} },
 });
 export const LOCAL_AUTH_CORE_AUTH_EMAIL_PASSWORD_TEMPLATES = {
     constantsOtp,

package/dist/local-auth/core/generators/auth-email-password/templates/module/services/email-verification.service.js

@@ -1,7 +1,7 @@
 // @ts-nocheck
 import { EMAIL_VERIFICATION_TOKEN_EXPIRY_SEC } from '$constantsPassword';
+import { getWebAppForUrl, getWebUrl } from '%appUrlsImports';
 import { createAuthVerification, validateAuthVerification, } from '%authModuleImports';
-import { getConfig } from '%configServiceImports';
 import { BadRequestError } from '%errorHandlerServiceImports';
 import { prisma } from '%prismaImports';
 import { memoizeRateLimiter } from '%rateLimitImports';
@@ -49,8 +49,7 @@ export async function requestEmailVerification({ userId, context, }) {
         userId: user.id,
         expiresInSec: EMAIL_VERIFICATION_TOKEN_EXPIRY_SEC,
     });
-    // Construct verification URL using configured domain
-    const verifyLink = `${getConfig().AUTH_FRONTEND_URL}/auth/verify-email?token=${encodeURIComponent(token)}`;
+    const verifyLink = getWebUrl(getWebAppForUrl(context.reqInfo.headers.origin) ?? TPL_AUTH_WEB_APP, `/auth/verify-email?token=${encodeURIComponent(token)}`);
     await services.email.send(TPL_ACCOUNT_VERIFICATION_EMAIL, {
         to: user.email,
         data: { verifyLink },

package/dist/local-auth/core/generators/auth-email-password/templates/module/services/email-verification.service.ts

@@ -6,11 +6,11 @@ import type {
 } from '%requestServiceContextImports';
 
 import { EMAIL_VERIFICATION_TOKEN_EXPIRY_SEC } from '$constantsPassword';
+import { getWebAppForUrl, getWebUrl } from '%appUrlsImports';
 import {
   createAuthVerification,
   validateAuthVerification,
 } from '%authModuleImports';
-import { getConfig } from '%configServiceImports';
 import { BadRequestError } from '%errorHandlerServiceImports';
 import { prisma } from '%prismaImports';
 import { memoizeRateLimiter } from '%rateLimitImports';
@@ -90,8 +90,10 @@ export async function requestEmailVerification({
     expiresInSec: EMAIL_VERIFICATION_TOKEN_EXPIRY_SEC,
   });
 
-  // Construct verification URL using configured domain
-  const verifyLink = `${getConfig().AUTH_FRONTEND_URL}/auth/verify-email?token=${encodeURIComponent(token)}`;
+  const verifyLink = getWebUrl(
+    getWebAppForUrl(context.reqInfo.headers.origin) ?? TPL_AUTH_WEB_APP,
+    `/auth/verify-email?token=${encodeURIComponent(token)}`,
+  );
 
   await services.email.send(TPL_ACCOUNT_VERIFICATION_EMAIL, {
     to: user.email,