@baseplate-dev/plugin-auth 0.6.9 → 0.6.10

package/dist/web/assets/models-BTYxwDyB.js

@@ -0,0 +1,304 @@
+import { i as __mf_163, y as __mf_59 } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare___mf_0_baseplate_mf_2_dev_mf_1_project_mf_2_builder_mf_2_lib__loadShare__.mjs-DMKuehfC.js";
+import { n as __mf_0 } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare__zod__loadShare__.mjs-BalS-ZNe.js";
+import { t as BETTER_AUTH_MODELS } from "./model-names-CUS5rSei.js";
+//#region src/better-auth/core/schema/plugin-definition.ts
+var createBetterAuthPluginDefinitionSchema = __mf_163((ctx) => __mf_0.object({ additionalUserAdminRoles: ctx.withDefault(__mf_0.array(ctx.withRef({
+	type: __mf_59,
+	onDelete: "DELETE"
+})), []) }));
+//#endregion
+//#region src/better-auth/core/schema/models.ts
+function createBetterAuthPartialDefinition(authFeatureName, accountsFeatureName) {
+	return { models: [
+		{
+			name: BETTER_AUTH_MODELS.user,
+			featureRef: accountsFeatureName,
+			model: {
+				fields: [
+					{
+						name: "id",
+						type: "uuid",
+						options: { defaultGeneration: "uuidv7" }
+					},
+					{
+						name: "name",
+						type: "string",
+						isOptional: false
+					},
+					{
+						name: "email",
+						type: "string",
+						isOptional: false
+					},
+					{
+						name: "emailVerified",
+						type: "boolean",
+						options: { default: "false" }
+					},
+					{
+						name: "image",
+						type: "string",
+						isOptional: true
+					},
+					{
+						name: "updatedAt",
+						type: "dateTime",
+						options: {
+							defaultToNow: true,
+							updatedAt: true
+						}
+					},
+					{
+						name: "createdAt",
+						type: "dateTime",
+						options: { defaultToNow: true }
+					}
+				],
+				primaryKeyFieldRefs: ["id"],
+				uniqueConstraints: [{ fields: [{ fieldRef: "email" }] }]
+			},
+			graphql: { objectType: {
+				enabled: true,
+				fields: [{ ref: "id" }, {
+					ref: "email",
+					globalRoles: ["admin"],
+					instanceRoles: ["self"]
+				}]
+			} },
+			authorizer: { roles: [{
+				name: "self",
+				expression: "model.id === userId"
+			}] }
+		},
+		{
+			name: BETTER_AUTH_MODELS.session,
+			featureRef: accountsFeatureName,
+			model: {
+				fields: [
+					{
+						name: "id",
+						type: "uuid",
+						options: { defaultGeneration: "uuidv7" }
+					},
+					{
+						name: "expiresAt",
+						type: "dateTime"
+					},
+					{
+						name: "token",
+						type: "string"
+					},
+					{
+						name: "ipAddress",
+						type: "string",
+						isOptional: true
+					},
+					{
+						name: "userAgent",
+						type: "string",
+						isOptional: true
+					},
+					{
+						name: "userId",
+						type: "uuid"
+					},
+					{
+						name: "createdAt",
+						type: "dateTime",
+						options: { defaultToNow: true }
+					},
+					{
+						name: "updatedAt",
+						type: "dateTime",
+						options: {
+							defaultToNow: true,
+							updatedAt: true
+						}
+					}
+				],
+				primaryKeyFieldRefs: ["id"],
+				uniqueConstraints: [{ fields: [{ fieldRef: "token" }] }],
+				relations: [{
+					name: "user",
+					references: [{
+						localRef: "userId",
+						foreignRef: "id"
+					}],
+					modelRef: BETTER_AUTH_MODELS.user,
+					foreignRelationName: "sessions",
+					onDelete: "Cascade",
+					onUpdate: "Restrict"
+				}]
+			}
+		},
+		{
+			name: BETTER_AUTH_MODELS.account,
+			featureRef: accountsFeatureName,
+			model: {
+				fields: [
+					{
+						name: "id",
+						type: "uuid",
+						options: { defaultGeneration: "uuidv7" }
+					},
+					{
+						name: "accountId",
+						type: "string"
+					},
+					{
+						name: "providerId",
+						type: "string"
+					},
+					{
+						name: "userId",
+						type: "uuid"
+					},
+					{
+						name: "accessToken",
+						type: "string",
+						isOptional: true
+					},
+					{
+						name: "refreshToken",
+						type: "string",
+						isOptional: true
+					},
+					{
+						name: "idToken",
+						type: "string",
+						isOptional: true
+					},
+					{
+						name: "accessTokenExpiresAt",
+						type: "dateTime",
+						isOptional: true
+					},
+					{
+						name: "refreshTokenExpiresAt",
+						type: "dateTime",
+						isOptional: true
+					},
+					{
+						name: "scope",
+						type: "string",
+						isOptional: true
+					},
+					{
+						name: "password",
+						type: "string",
+						isOptional: true
+					},
+					{
+						name: "createdAt",
+						type: "dateTime",
+						options: { defaultToNow: true }
+					},
+					{
+						name: "updatedAt",
+						type: "dateTime",
+						options: {
+							defaultToNow: true,
+							updatedAt: true
+						}
+					}
+				],
+				primaryKeyFieldRefs: ["id"],
+				relations: [{
+					name: "user",
+					references: [{
+						localRef: "userId",
+						foreignRef: "id"
+					}],
+					modelRef: BETTER_AUTH_MODELS.user,
+					foreignRelationName: "accounts",
+					onDelete: "Cascade",
+					onUpdate: "Restrict"
+				}]
+			}
+		},
+		{
+			name: BETTER_AUTH_MODELS.verification,
+			featureRef: authFeatureName,
+			model: {
+				fields: [
+					{
+						name: "id",
+						type: "uuid",
+						options: { defaultGeneration: "uuidv4" }
+					},
+					{
+						name: "identifier",
+						type: "string"
+					},
+					{
+						name: "value",
+						type: "string"
+					},
+					{
+						name: "expiresAt",
+						type: "dateTime"
+					},
+					{
+						name: "createdAt",
+						type: "dateTime",
+						options: { defaultToNow: true }
+					},
+					{
+						name: "updatedAt",
+						type: "dateTime",
+						options: {
+							defaultToNow: true,
+							updatedAt: true
+						}
+					}
+				],
+				primaryKeyFieldRefs: ["id"]
+			}
+		},
+		{
+			name: BETTER_AUTH_MODELS.userRole,
+			featureRef: accountsFeatureName,
+			model: {
+				fields: [
+					{
+						name: "userId",
+						type: "uuid"
+					},
+					{
+						name: "role",
+						type: "string"
+					},
+					{
+						name: "updatedAt",
+						type: "dateTime",
+						options: {
+							defaultToNow: true,
+							updatedAt: true
+						}
+					},
+					{
+						name: "createdAt",
+						type: "dateTime",
+						options: { defaultToNow: true }
+					}
+				],
+				primaryKeyFieldRefs: ["userId", "role"],
+				relations: [{
+					name: "user",
+					references: [{
+						localRef: "userId",
+						foreignRef: "id"
+					}],
+					modelRef: BETTER_AUTH_MODELS.user,
+					foreignRelationName: "roles",
+					onDelete: "Cascade",
+					onUpdate: "Restrict"
+				}]
+			}
+		}
+	] };
+}
+//#endregion
+export { createBetterAuthPluginDefinitionSchema as n, createBetterAuthPartialDefinition as t };
+
+//# sourceMappingURL=models-BTYxwDyB.js.map

package/dist/web/assets/models-BufWBHGv.js

@@ -0,0 +1,285 @@
+import { i as __mf_163, y as __mf_59 } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare___mf_0_baseplate_mf_2_dev_mf_1_project_mf_2_builder_mf_2_lib__loadShare__.mjs-DMKuehfC.js";
+import { n as __mf_0 } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare__zod__loadShare__.mjs-BalS-ZNe.js";
+import { t as LOCAL_AUTH_MODELS } from "./model-names-BluImOzu.js";
+//#region src/local-auth/core/schema/plugin-definition.ts
+var createLocalAuthPluginDefinitionSchema = __mf_163((ctx) => __mf_0.object({
+	additionalUserAdminRoles: ctx.withDefault(__mf_0.array(ctx.withRef({
+		type: __mf_59,
+		onDelete: "DELETE"
+	})), []),
+	requireNameOnRegistration: __mf_0.boolean().default(false)
+}));
+//#endregion
+//#region src/local-auth/core/schema/models.ts
+function createLocalAuthPartialDefinition(authFeatureName, accountsFeatureName) {
+	return { models: [
+		{
+			name: LOCAL_AUTH_MODELS.user,
+			featureRef: accountsFeatureName,
+			model: {
+				fields: [
+					{
+						name: "id",
+						type: "uuid",
+						options: { defaultGeneration: "uuidv7" }
+					},
+					{
+						name: "name",
+						type: "string",
+						isOptional: true
+					},
+					{
+						name: "email",
+						type: "string"
+					},
+					{
+						name: "emailVerified",
+						type: "boolean",
+						options: { default: "false" }
+					},
+					{
+						name: "updatedAt",
+						type: "dateTime",
+						options: {
+							defaultToNow: true,
+							updatedAt: true
+						}
+					},
+					{
+						name: "createdAt",
+						type: "dateTime",
+						options: { defaultToNow: true }
+					}
+				],
+				primaryKeyFieldRefs: ["id"],
+				uniqueConstraints: [{ fields: [{ fieldRef: "email" }] }]
+			},
+			graphql: { objectType: {
+				enabled: true,
+				fields: [{ ref: "id" }, {
+					ref: "email",
+					globalRoles: ["admin"],
+					instanceRoles: ["self"]
+				}]
+			} },
+			authorizer: { roles: [{
+				name: "self",
+				expression: "model.id === userId"
+			}] }
+		},
+		{
+			name: LOCAL_AUTH_MODELS.userAccount,
+			featureRef: accountsFeatureName,
+			model: {
+				fields: [
+					{
+						name: "id",
+						type: "uuid",
+						options: { defaultGeneration: "uuidv7" }
+					},
+					{
+						name: "userId",
+						type: "uuid"
+					},
+					{
+						name: "accountId",
+						type: "string"
+					},
+					{
+						name: "providerId",
+						type: "string"
+					},
+					{
+						name: "password",
+						type: "string",
+						isOptional: true
+					},
+					{
+						name: "createdAt",
+						type: "dateTime",
+						options: { defaultToNow: true }
+					},
+					{
+						name: "updatedAt",
+						type: "dateTime",
+						options: {
+							defaultToNow: true,
+							updatedAt: true
+						}
+					}
+				],
+				primaryKeyFieldRefs: ["id"],
+				uniqueConstraints: [{ fields: [{ fieldRef: "accountId" }, { fieldRef: "providerId" }] }],
+				relations: [{
+					name: "user",
+					references: [{
+						localRef: "userId",
+						foreignRef: "id"
+					}],
+					modelRef: LOCAL_AUTH_MODELS.user,
+					foreignRelationName: "accounts",
+					onDelete: "Cascade",
+					onUpdate: "Restrict"
+				}]
+			}
+		},
+		{
+			name: LOCAL_AUTH_MODELS.userRole,
+			featureRef: accountsFeatureName,
+			model: {
+				fields: [
+					{
+						name: "userId",
+						type: "uuid"
+					},
+					{
+						name: "role",
+						type: "string"
+					},
+					{
+						name: "updatedAt",
+						type: "dateTime",
+						options: {
+							defaultToNow: true,
+							updatedAt: true
+						}
+					},
+					{
+						name: "createdAt",
+						type: "dateTime",
+						options: { defaultToNow: true }
+					}
+				],
+				primaryKeyFieldRefs: ["userId", "role"],
+				relations: [{
+					name: "user",
+					references: [{
+						localRef: "userId",
+						foreignRef: "id"
+					}],
+					modelRef: LOCAL_AUTH_MODELS.user,
+					foreignRelationName: "roles",
+					onDelete: "Cascade",
+					onUpdate: "Restrict"
+				}]
+			}
+		},
+		{
+			name: LOCAL_AUTH_MODELS.userSession,
+			featureRef: accountsFeatureName,
+			model: {
+				fields: [
+					{
+						name: "id",
+						type: "uuid",
+						options: { defaultGeneration: "uuidv7" }
+					},
+					{
+						name: "userId",
+						type: "uuid"
+					},
+					{
+						name: "token",
+						type: "string"
+					},
+					{
+						name: "expiresAt",
+						type: "dateTime"
+					},
+					{
+						name: "renewedAt",
+						type: "dateTime",
+						options: { defaultToNow: true }
+					},
+					{
+						name: "createdAt",
+						type: "dateTime",
+						options: { defaultToNow: true }
+					},
+					{
+						name: "updatedAt",
+						type: "dateTime",
+						options: {
+							defaultToNow: true,
+							updatedAt: true
+						}
+					}
+				],
+				primaryKeyFieldRefs: ["id"],
+				uniqueConstraints: [{ fields: [{ fieldRef: "token" }] }],
+				relations: [{
+					name: "user",
+					references: [{
+						localRef: "userId",
+						foreignRef: "id"
+					}],
+					modelRef: LOCAL_AUTH_MODELS.user,
+					foreignRelationName: "sessions",
+					onDelete: "Cascade",
+					onUpdate: "Restrict"
+				}]
+			}
+		},
+		{
+			name: LOCAL_AUTH_MODELS.authVerification,
+			featureRef: authFeatureName,
+			model: {
+				fields: [
+					{
+						name: "id",
+						type: "uuid",
+						options: { defaultGeneration: "uuidv4" }
+					},
+					{
+						name: "type",
+						type: "string"
+					},
+					{
+						name: "identifier",
+						type: "string"
+					},
+					{
+						name: "value",
+						type: "string"
+					},
+					{
+						name: "userId",
+						type: "uuid",
+						isOptional: true
+					},
+					{
+						name: "metadata",
+						type: "json",
+						isOptional: true
+					},
+					{
+						name: "expiresAt",
+						type: "dateTime"
+					},
+					{
+						name: "createdAt",
+						type: "dateTime",
+						options: { defaultToNow: true }
+					}
+				],
+				primaryKeyFieldRefs: ["id"],
+				uniqueConstraints: [{ fields: [{ fieldRef: "type" }, { fieldRef: "identifier" }] }],
+				relations: [{
+					name: "user",
+					references: [{
+						localRef: "userId",
+						foreignRef: "id"
+					}],
+					modelRef: LOCAL_AUTH_MODELS.user,
+					foreignRelationName: "authVerifications",
+					onDelete: "Cascade",
+					onUpdate: "Restrict"
+				}]
+			}
+		}
+	] };
+}
+//#endregion
+export { createLocalAuthPluginDefinitionSchema as n, createLocalAuthPartialDefinition as t };
+
+//# sourceMappingURL=models-BufWBHGv.js.map

package/dist/web/assets/plugin-definition-BTHzuXv5.js

@@ -0,0 +1,78 @@
+import { i as __mf_163, s as __mf_172, y as __mf_59 } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare___mf_0_baseplate_mf_2_dev_mf_1_project_mf_2_builder_mf_2_lib__loadShare__.mjs-DMKuehfC.js";
+import { n as __mf_0 } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare__zod__loadShare__.mjs-BalS-ZNe.js";
+//#region src/auth/core/schema/roles/constants.ts
+var AUTH_DEFAULT_ROLES = [
+	{
+		name: "public",
+		comment: "All users (including unauthenticated and authenticated users)",
+		builtIn: true,
+		autoAssigned: true
+	},
+	{
+		name: "user",
+		comment: "All authenticated users",
+		builtIn: true,
+		autoAssigned: true
+	},
+	{
+		name: "system",
+		comment: "System processes without a user context, e.g. background jobs",
+		builtIn: true,
+		autoAssigned: true
+	},
+	{
+		name: "admin",
+		comment: "Administrator with full access",
+		builtIn: true,
+		autoAssigned: false
+	}
+];
+function createDefaultAuthRoles() {
+	return AUTH_DEFAULT_ROLES.map((role) => ({
+		...role,
+		id: __mf_59.generateNewId()
+	}));
+}
+//#endregion
+//#region src/auth/core/schema/roles/schema.ts
+var createAuthRoleSchema = __mf_163((ctx) => ctx.withEnt(__mf_0.object({
+	id: __mf_0.string(),
+	name: __mf_0.string().min(1),
+	comment: __mf_0.string().min(1),
+	builtIn: __mf_0.boolean().default(false),
+	autoAssigned: __mf_0.boolean().default(false)
+}), { type: __mf_59 }));
+/**
+* Defines the schema for an array of roles ensuring that there are no duplicate
+* role names and that the built-in roles are included.
+*/
+var createAuthRolesSchema = __mf_163((ctx) => __mf_0.array(createAuthRoleSchema(ctx)).superRefine((roles, ctx) => {
+	const dup = roles.map((r) => r.name).filter((v, i, a) => a.indexOf(v) !== i);
+	if (dup.length > 0) ctx.addIssue({
+		code: "custom",
+		message: `Duplicate role name(s): ${dup.join(", ")}`
+	});
+}).superRefine((roles, ctx) => {
+	for (const defaultRole of AUTH_DEFAULT_ROLES) if (!roles.some((r) => r.name === defaultRole.name && r.builtIn)) ctx.addIssue({
+		code: "custom",
+		message: `Missing built-in role: ${defaultRole.name}`
+	});
+}));
+//#endregion
+//#region src/auth/core/schema/plugin-definition.ts
+var createAuthPluginDefinitionSchema = __mf_163((ctx) => __mf_0.object({
+	implementationPluginKey: __mf_0.string().min(1, "Auth implementation plugin must be selected"),
+	authFeatureRef: ctx.withRef({
+		type: __mf_172,
+		onDelete: "RESTRICT"
+	}),
+	accountsFeatureRef: ctx.withRef({
+		type: __mf_172,
+		onDelete: "RESTRICT"
+	}),
+	roles: createAuthRolesSchema(ctx)
+}));
+//#endregion
+export { createAuthRoleSchema as n, createDefaultAuthRoles as r, createAuthPluginDefinitionSchema as t };
+
+//# sourceMappingURL=plugin-definition-BTHzuXv5.js.map

package/dist/web/assets/plugin-definition-D5s4GTfd.js

@@ -0,0 +1,11 @@
+import { i as __mf_163 } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare___mf_0_baseplate_mf_2_dev_mf_1_project_mf_2_builder_mf_2_lib__loadShare__.mjs-DMKuehfC.js";
+import { n as __mf_0 } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare__zod__loadShare__.mjs-BalS-ZNe.js";
+//#region src/placeholder-auth/constants/model-names.ts
+var PLACEHOLDER_AUTH_MODELS = { user: "User" };
+//#endregion
+//#region src/placeholder-auth/core/schema/plugin-definition.ts
+var createPlaceholderAuthPluginDefinitionSchema = __mf_163(() => __mf_0.object({}));
+//#endregion
+export { PLACEHOLDER_AUTH_MODELS as n, createPlaceholderAuthPluginDefinitionSchema as t };
+
+//# sourceMappingURL=plugin-definition-D5s4GTfd.js.map