@baseplate-dev/plugin-auth 0.6.9 → 0.6.11

package/dist/web/assets/models-CORL4i-6.js

@@ -0,0 +1,285 @@
+import { n as __mf_0 } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare__zod__loadShare__.js-DE4UUe5K.js";
+import { i as __mf_163, y as __mf_59 } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare___mf_0_baseplate_mf_2_dev_mf_1_project_mf_2_builder_mf_2_lib__loadShare__.js-B6a7L2-k.js";
+import { t as LOCAL_AUTH_MODELS } from "./model-names-BluImOzu.js";
+//#region src/local-auth/core/schema/plugin-definition.ts
+var createLocalAuthPluginDefinitionSchema = __mf_163((ctx) => __mf_0.object({
+	additionalUserAdminRoles: ctx.withDefault(__mf_0.array(ctx.withRef({
+		type: __mf_59,
+		onDelete: "DELETE"
+	})), []),
+	requireNameOnRegistration: __mf_0.boolean().default(false)
+}));
+//#endregion
+//#region src/local-auth/core/schema/models.ts
+function createLocalAuthPartialDefinition(authFeatureName, accountsFeatureName) {
+	return { models: [
+		{
+			name: LOCAL_AUTH_MODELS.user,
+			featureRef: accountsFeatureName,
+			model: {
+				fields: [
+					{
+						name: "id",
+						type: "uuid",
+						options: { defaultGeneration: "uuidv7" }
+					},
+					{
+						name: "name",
+						type: "string",
+						isOptional: true
+					},
+					{
+						name: "email",
+						type: "string"
+					},
+					{
+						name: "emailVerified",
+						type: "boolean",
+						options: { default: "false" }
+					},
+					{
+						name: "updatedAt",
+						type: "dateTime",
+						options: {
+							defaultToNow: true,
+							updatedAt: true
+						}
+					},
+					{
+						name: "createdAt",
+						type: "dateTime",
+						options: { defaultToNow: true }
+					}
+				],
+				primaryKeyFieldRefs: ["id"],
+				uniqueConstraints: [{ fields: [{ fieldRef: "email" }] }]
+			},
+			graphql: { objectType: {
+				enabled: true,
+				fields: [{ ref: "id" }, {
+					ref: "email",
+					globalRoles: ["admin"],
+					instanceRoles: ["self"]
+				}]
+			} },
+			authorizer: { roles: [{
+				name: "self",
+				expression: "model.id === userId"
+			}] }
+		},
+		{
+			name: LOCAL_AUTH_MODELS.userAccount,
+			featureRef: accountsFeatureName,
+			model: {
+				fields: [
+					{
+						name: "id",
+						type: "uuid",
+						options: { defaultGeneration: "uuidv7" }
+					},
+					{
+						name: "userId",
+						type: "uuid"
+					},
+					{
+						name: "accountId",
+						type: "string"
+					},
+					{
+						name: "providerId",
+						type: "string"
+					},
+					{
+						name: "password",
+						type: "string",
+						isOptional: true
+					},
+					{
+						name: "createdAt",
+						type: "dateTime",
+						options: { defaultToNow: true }
+					},
+					{
+						name: "updatedAt",
+						type: "dateTime",
+						options: {
+							defaultToNow: true,
+							updatedAt: true
+						}
+					}
+				],
+				primaryKeyFieldRefs: ["id"],
+				uniqueConstraints: [{ fields: [{ fieldRef: "accountId" }, { fieldRef: "providerId" }] }],
+				relations: [{
+					name: "user",
+					references: [{
+						localRef: "userId",
+						foreignRef: "id"
+					}],
+					modelRef: LOCAL_AUTH_MODELS.user,
+					foreignRelationName: "accounts",
+					onDelete: "Cascade",
+					onUpdate: "Restrict"
+				}]
+			}
+		},
+		{
+			name: LOCAL_AUTH_MODELS.userRole,
+			featureRef: accountsFeatureName,
+			model: {
+				fields: [
+					{
+						name: "userId",
+						type: "uuid"
+					},
+					{
+						name: "role",
+						type: "string"
+					},
+					{
+						name: "updatedAt",
+						type: "dateTime",
+						options: {
+							defaultToNow: true,
+							updatedAt: true
+						}
+					},
+					{
+						name: "createdAt",
+						type: "dateTime",
+						options: { defaultToNow: true }
+					}
+				],
+				primaryKeyFieldRefs: ["userId", "role"],
+				relations: [{
+					name: "user",
+					references: [{
+						localRef: "userId",
+						foreignRef: "id"
+					}],
+					modelRef: LOCAL_AUTH_MODELS.user,
+					foreignRelationName: "roles",
+					onDelete: "Cascade",
+					onUpdate: "Restrict"
+				}]
+			}
+		},
+		{
+			name: LOCAL_AUTH_MODELS.userSession,
+			featureRef: accountsFeatureName,
+			model: {
+				fields: [
+					{
+						name: "id",
+						type: "uuid",
+						options: { defaultGeneration: "uuidv7" }
+					},
+					{
+						name: "userId",
+						type: "uuid"
+					},
+					{
+						name: "token",
+						type: "string"
+					},
+					{
+						name: "expiresAt",
+						type: "dateTime"
+					},
+					{
+						name: "renewedAt",
+						type: "dateTime",
+						options: { defaultToNow: true }
+					},
+					{
+						name: "createdAt",
+						type: "dateTime",
+						options: { defaultToNow: true }
+					},
+					{
+						name: "updatedAt",
+						type: "dateTime",
+						options: {
+							defaultToNow: true,
+							updatedAt: true
+						}
+					}
+				],
+				primaryKeyFieldRefs: ["id"],
+				uniqueConstraints: [{ fields: [{ fieldRef: "token" }] }],
+				relations: [{
+					name: "user",
+					references: [{
+						localRef: "userId",
+						foreignRef: "id"
+					}],
+					modelRef: LOCAL_AUTH_MODELS.user,
+					foreignRelationName: "sessions",
+					onDelete: "Cascade",
+					onUpdate: "Restrict"
+				}]
+			}
+		},
+		{
+			name: LOCAL_AUTH_MODELS.authVerification,
+			featureRef: authFeatureName,
+			model: {
+				fields: [
+					{
+						name: "id",
+						type: "uuid",
+						options: { defaultGeneration: "uuidv4" }
+					},
+					{
+						name: "type",
+						type: "string"
+					},
+					{
+						name: "identifier",
+						type: "string"
+					},
+					{
+						name: "value",
+						type: "string"
+					},
+					{
+						name: "userId",
+						type: "uuid",
+						isOptional: true
+					},
+					{
+						name: "metadata",
+						type: "json",
+						isOptional: true
+					},
+					{
+						name: "expiresAt",
+						type: "dateTime"
+					},
+					{
+						name: "createdAt",
+						type: "dateTime",
+						options: { defaultToNow: true }
+					}
+				],
+				primaryKeyFieldRefs: ["id"],
+				uniqueConstraints: [{ fields: [{ fieldRef: "type" }, { fieldRef: "identifier" }] }],
+				relations: [{
+					name: "user",
+					references: [{
+						localRef: "userId",
+						foreignRef: "id"
+					}],
+					modelRef: LOCAL_AUTH_MODELS.user,
+					foreignRelationName: "authVerifications",
+					onDelete: "Cascade",
+					onUpdate: "Restrict"
+				}]
+			}
+		}
+	] };
+}
+//#endregion
+export { createLocalAuthPluginDefinitionSchema as n, createLocalAuthPartialDefinition as t };
+
+//# sourceMappingURL=models-CORL4i-6.js.map

package/dist/web/assets/models-DPPMgQz_.js

@@ -0,0 +1,304 @@
+import { n as __mf_0 } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare__zod__loadShare__.js-DE4UUe5K.js";
+import { i as __mf_163, y as __mf_59 } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare___mf_0_baseplate_mf_2_dev_mf_1_project_mf_2_builder_mf_2_lib__loadShare__.js-B6a7L2-k.js";
+import { t as BETTER_AUTH_MODELS } from "./model-names-CUS5rSei.js";
+//#region src/better-auth/core/schema/plugin-definition.ts
+var createBetterAuthPluginDefinitionSchema = __mf_163((ctx) => __mf_0.object({ additionalUserAdminRoles: ctx.withDefault(__mf_0.array(ctx.withRef({
+	type: __mf_59,
+	onDelete: "DELETE"
+})), []) }));
+//#endregion
+//#region src/better-auth/core/schema/models.ts
+function createBetterAuthPartialDefinition(authFeatureName, accountsFeatureName) {
+	return { models: [
+		{
+			name: BETTER_AUTH_MODELS.user,
+			featureRef: accountsFeatureName,
+			model: {
+				fields: [
+					{
+						name: "id",
+						type: "uuid",
+						options: { defaultGeneration: "uuidv7" }
+					},
+					{
+						name: "name",
+						type: "string",
+						isOptional: false
+					},
+					{
+						name: "email",
+						type: "string",
+						isOptional: false
+					},
+					{
+						name: "emailVerified",
+						type: "boolean",
+						options: { default: "false" }
+					},
+					{
+						name: "image",
+						type: "string",
+						isOptional: true
+					},
+					{
+						name: "updatedAt",
+						type: "dateTime",
+						options: {
+							defaultToNow: true,
+							updatedAt: true
+						}
+					},
+					{
+						name: "createdAt",
+						type: "dateTime",
+						options: { defaultToNow: true }
+					}
+				],
+				primaryKeyFieldRefs: ["id"],
+				uniqueConstraints: [{ fields: [{ fieldRef: "email" }] }]
+			},
+			graphql: { objectType: {
+				enabled: true,
+				fields: [{ ref: "id" }, {
+					ref: "email",
+					globalRoles: ["admin"],
+					instanceRoles: ["self"]
+				}]
+			} },
+			authorizer: { roles: [{
+				name: "self",
+				expression: "model.id === userId"
+			}] }
+		},
+		{
+			name: BETTER_AUTH_MODELS.session,
+			featureRef: accountsFeatureName,
+			model: {
+				fields: [
+					{
+						name: "id",
+						type: "uuid",
+						options: { defaultGeneration: "uuidv7" }
+					},
+					{
+						name: "expiresAt",
+						type: "dateTime"
+					},
+					{
+						name: "token",
+						type: "string"
+					},
+					{
+						name: "ipAddress",
+						type: "string",
+						isOptional: true
+					},
+					{
+						name: "userAgent",
+						type: "string",
+						isOptional: true
+					},
+					{
+						name: "userId",
+						type: "uuid"
+					},
+					{
+						name: "createdAt",
+						type: "dateTime",
+						options: { defaultToNow: true }
+					},
+					{
+						name: "updatedAt",
+						type: "dateTime",
+						options: {
+							defaultToNow: true,
+							updatedAt: true
+						}
+					}
+				],
+				primaryKeyFieldRefs: ["id"],
+				uniqueConstraints: [{ fields: [{ fieldRef: "token" }] }],
+				relations: [{
+					name: "user",
+					references: [{
+						localRef: "userId",
+						foreignRef: "id"
+					}],
+					modelRef: BETTER_AUTH_MODELS.user,
+					foreignRelationName: "sessions",
+					onDelete: "Cascade",
+					onUpdate: "Restrict"
+				}]
+			}
+		},
+		{
+			name: BETTER_AUTH_MODELS.account,
+			featureRef: accountsFeatureName,
+			model: {
+				fields: [
+					{
+						name: "id",
+						type: "uuid",
+						options: { defaultGeneration: "uuidv7" }
+					},
+					{
+						name: "accountId",
+						type: "string"
+					},
+					{
+						name: "providerId",
+						type: "string"
+					},
+					{
+						name: "userId",
+						type: "uuid"
+					},
+					{
+						name: "accessToken",
+						type: "string",
+						isOptional: true
+					},
+					{
+						name: "refreshToken",
+						type: "string",
+						isOptional: true
+					},
+					{
+						name: "idToken",
+						type: "string",
+						isOptional: true
+					},
+					{
+						name: "accessTokenExpiresAt",
+						type: "dateTime",
+						isOptional: true
+					},
+					{
+						name: "refreshTokenExpiresAt",
+						type: "dateTime",
+						isOptional: true
+					},
+					{
+						name: "scope",
+						type: "string",
+						isOptional: true
+					},
+					{
+						name: "password",
+						type: "string",
+						isOptional: true
+					},
+					{
+						name: "createdAt",
+						type: "dateTime",
+						options: { defaultToNow: true }
+					},
+					{
+						name: "updatedAt",
+						type: "dateTime",
+						options: {
+							defaultToNow: true,
+							updatedAt: true
+						}
+					}
+				],
+				primaryKeyFieldRefs: ["id"],
+				relations: [{
+					name: "user",
+					references: [{
+						localRef: "userId",
+						foreignRef: "id"
+					}],
+					modelRef: BETTER_AUTH_MODELS.user,
+					foreignRelationName: "accounts",
+					onDelete: "Cascade",
+					onUpdate: "Restrict"
+				}]
+			}
+		},
+		{
+			name: BETTER_AUTH_MODELS.verification,
+			featureRef: authFeatureName,
+			model: {
+				fields: [
+					{
+						name: "id",
+						type: "uuid",
+						options: { defaultGeneration: "uuidv4" }
+					},
+					{
+						name: "identifier",
+						type: "string"
+					},
+					{
+						name: "value",
+						type: "string"
+					},
+					{
+						name: "expiresAt",
+						type: "dateTime"
+					},
+					{
+						name: "createdAt",
+						type: "dateTime",
+						options: { defaultToNow: true }
+					},
+					{
+						name: "updatedAt",
+						type: "dateTime",
+						options: {
+							defaultToNow: true,
+							updatedAt: true
+						}
+					}
+				],
+				primaryKeyFieldRefs: ["id"]
+			}
+		},
+		{
+			name: BETTER_AUTH_MODELS.userRole,
+			featureRef: accountsFeatureName,
+			model: {
+				fields: [
+					{
+						name: "userId",
+						type: "uuid"
+					},
+					{
+						name: "role",
+						type: "string"
+					},
+					{
+						name: "updatedAt",
+						type: "dateTime",
+						options: {
+							defaultToNow: true,
+							updatedAt: true
+						}
+					},
+					{
+						name: "createdAt",
+						type: "dateTime",
+						options: { defaultToNow: true }
+					}
+				],
+				primaryKeyFieldRefs: ["userId", "role"],
+				relations: [{
+					name: "user",
+					references: [{
+						localRef: "userId",
+						foreignRef: "id"
+					}],
+					modelRef: BETTER_AUTH_MODELS.user,
+					foreignRelationName: "roles",
+					onDelete: "Cascade",
+					onUpdate: "Restrict"
+				}]
+			}
+		}
+	] };
+}
+//#endregion
+export { createBetterAuthPluginDefinitionSchema as n, createBetterAuthPartialDefinition as t };
+
+//# sourceMappingURL=models-DPPMgQz_.js.map

package/dist/web/assets/plugin-definition-UAfMRa7u.js

@@ -0,0 +1,78 @@
+import { n as __mf_0 } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare__zod__loadShare__.js-DE4UUe5K.js";
+import { i as __mf_163, s as __mf_172, y as __mf_59 } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare___mf_0_baseplate_mf_2_dev_mf_1_project_mf_2_builder_mf_2_lib__loadShare__.js-B6a7L2-k.js";
+//#region src/auth/core/schema/roles/constants.ts
+var AUTH_DEFAULT_ROLES = [
+	{
+		name: "public",
+		comment: "All users (including unauthenticated and authenticated users)",
+		builtIn: true,
+		autoAssigned: true
+	},
+	{
+		name: "user",
+		comment: "All authenticated users",
+		builtIn: true,
+		autoAssigned: true
+	},
+	{
+		name: "system",
+		comment: "System processes without a user context, e.g. background jobs",
+		builtIn: true,
+		autoAssigned: true
+	},
+	{
+		name: "admin",
+		comment: "Administrator with full access",
+		builtIn: true,
+		autoAssigned: false
+	}
+];
+function createDefaultAuthRoles() {
+	return AUTH_DEFAULT_ROLES.map((role) => ({
+		...role,
+		id: __mf_59.generateNewId()
+	}));
+}
+//#endregion
+//#region src/auth/core/schema/roles/schema.ts
+var createAuthRoleSchema = __mf_163((ctx) => ctx.withEnt(__mf_0.object({
+	id: __mf_0.string(),
+	name: __mf_0.string().min(1),
+	comment: __mf_0.string().min(1),
+	builtIn: __mf_0.boolean().default(false),
+	autoAssigned: __mf_0.boolean().default(false)
+}), { type: __mf_59 }));
+/**
+* Defines the schema for an array of roles ensuring that there are no duplicate
+* role names and that the built-in roles are included.
+*/
+var createAuthRolesSchema = __mf_163((ctx) => __mf_0.array(createAuthRoleSchema(ctx)).superRefine((roles, ctx) => {
+	const dup = roles.map((r) => r.name).filter((v, i, a) => a.indexOf(v) !== i);
+	if (dup.length > 0) ctx.addIssue({
+		code: "custom",
+		message: `Duplicate role name(s): ${dup.join(", ")}`
+	});
+}).superRefine((roles, ctx) => {
+	for (const defaultRole of AUTH_DEFAULT_ROLES) if (!roles.some((r) => r.name === defaultRole.name && r.builtIn)) ctx.addIssue({
+		code: "custom",
+		message: `Missing built-in role: ${defaultRole.name}`
+	});
+}));
+//#endregion
+//#region src/auth/core/schema/plugin-definition.ts
+var createAuthPluginDefinitionSchema = __mf_163((ctx) => __mf_0.object({
+	implementationPluginKey: __mf_0.string().min(1, "Auth implementation plugin must be selected"),
+	authFeatureRef: ctx.withRef({
+		type: __mf_172,
+		onDelete: "RESTRICT"
+	}),
+	accountsFeatureRef: ctx.withRef({
+		type: __mf_172,
+		onDelete: "RESTRICT"
+	}),
+	roles: createAuthRolesSchema(ctx)
+}));
+//#endregion
+export { createAuthRoleSchema as n, createDefaultAuthRoles as r, createAuthPluginDefinitionSchema as t };
+
+//# sourceMappingURL=plugin-definition-UAfMRa7u.js.map

package/dist/web/assets/plugin-definition-mNNM2hOB.js

@@ -0,0 +1,11 @@
+import { n as __mf_0 } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare__zod__loadShare__.js-DE4UUe5K.js";
+import { i as __mf_163 } from "./_virtual_mf___mfe_internal__plugin_mf_2_auth__loadShare___mf_0_baseplate_mf_2_dev_mf_1_project_mf_2_builder_mf_2_lib__loadShare__.js-B6a7L2-k.js";
+//#region src/placeholder-auth/constants/model-names.ts
+var PLACEHOLDER_AUTH_MODELS = { user: "User" };
+//#endregion
+//#region src/placeholder-auth/core/schema/plugin-definition.ts
+var createPlaceholderAuthPluginDefinitionSchema = __mf_163(() => __mf_0.object({}));
+//#endregion
+export { PLACEHOLDER_AUTH_MODELS as n, createPlaceholderAuthPluginDefinitionSchema as t };
+
+//# sourceMappingURL=plugin-definition-mNNM2hOB.js.map

package/dist/web/assets/rolldown-runtime-FZ4Itg2g.js

@@ -0,0 +1,42 @@
+//#region \0rolldown/runtime.js
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __esmMin = (fn, res, err) => () => {
+	if (err) throw err[0];
+	try {
+		return fn && (res = fn(fn = 0)), res;
+	} catch (e) {
+		throw err = [e], e;
+	}
+};
+var __commonJSMin = (cb, mod) => () => (mod || (cb((mod = { exports: {} }).exports, mod), cb = null), mod.exports);
+var __exportAll = (all, no_symbols) => {
+	let target = {};
+	for (var name in all) __defProp(target, name, {
+		get: all[name],
+		enumerable: true
+	});
+	if (!no_symbols) __defProp(target, Symbol.toStringTag, { value: "Module" });
+	return target;
+};
+var __copyProps = (to, from, except, desc) => {
+	if (from && typeof from === "object" || typeof from === "function") for (var keys = __getOwnPropNames(from), i = 0, n = keys.length, key; i < n; i++) {
+		key = keys[i];
+		if (!__hasOwnProp.call(to, key) && key !== except) __defProp(to, key, {
+			get: ((k) => from[k]).bind(null, key),
+			enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable
+		});
+	}
+	return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", {
+	value: mod,
+	enumerable: true
+}) : target, mod));
+var __toCommonJS = (mod) => __hasOwnProp.call(mod, "module.exports") ? mod["module.exports"] : __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+//#endregion
+export { __toESM as a, __toCommonJS as i, __esmMin as n, __exportAll as r, __commonJSMin as t };