@baseplate-dev/plugin-auth 4.0.1 → 4.0.2

package/dist/auth0/core/schema/plugin-definition.js.map

@@ -1 +1 @@
-{"version":3,"file":"plugin-definition.js","sourceRoot":"","sources":["../../../../src/auth0/core/schema/plugin-definition.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,gBAAgB,EAAE,MAAM,oCAAoC,CAAC;AACtE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,iCAAiC,GAAG,gBAAgB,CAAC,CAAC,CAAC,EAAE,EAAE,CACtE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CACb,CAAC"}
+{"version":3,"file":"plugin-definition.js","sourceRoot":"","sources":["../../../../src/auth0/core/schema/plugin-definition.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,gBAAgB,EAAE,MAAM,oCAAoC,CAAC;AACtE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,iCAAiC,GAAG,gBAAgB,CAAC,GAAG,EAAE,CACrE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CACb,CAAC"}

package/dist/auth0/generators/fastify/auth0-module/templates/module/schema/user-session.queries.ts

@@ -10,7 +10,7 @@ builder.queryField('viewer', (t) =>
     description: 'The currently authenticated user',
     authorize: ['public'],
     resolve: async (query, root, args, { auth }) => {
-      if (!auth.session || auth.session.type !== 'user') {
+      if (auth.session?.type !== 'user') {
         return null;
       }
       return prisma.user.findUnique({

package/dist/auth0/generators/react/auth0-hooks/auth0-hooks.generator.js

@@ -24,7 +24,7 @@ export const auth0HooksGenerator = createGenerator({
                         await builder.apply(renderers.hooksGroup.render({
                             variables: {
                                 useSession: {
-                                    TPL_AUTH_ROLES: TsCodeUtils.mergeFragmentsAsArrayPresorted([...authRoles].sort().map((role) => quot(role))),
+                                    TPL_AUTH_ROLES: TsCodeUtils.mergeFragmentsAsArrayPresorted([...authRoles].toSorted().map((role) => quot(role))),
                                 },
                             },
                         }));

package/dist/auth0/generators/react/auth0-hooks/auth0-hooks.generator.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth0-hooks.generator.js","sourceRoot":"","sources":["../../../../../src/auth0/generators/react/auth0-hooks/auth0-hooks.generator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,gCAAgC,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC3E,OAAO,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAC;AAC5C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,2BAA2B,EAAE,MAAM,sBAAsB,CAAC;AAEnE,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CAC3C,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,mBAAmB,GAAG,eAAe,CAAC;IACjD,IAAI,EAAE,mBAAmB;IACzB,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG;IACjC,gBAAgB;IAChB,UAAU,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;QAC9B,KAAK,EAAE,2BAA2B,CAAC,KAAK,CAAC,IAAI;QAC7C,OAAO,EAAE,2BAA2B,CAAC,OAAO,CAAC,IAAI;QACjD,SAAS,EAAE,2BAA2B,CAAC,SAAS,CAAC,IAAI;QACrD,IAAI,EAAE,mBAAmB,CAAC;YACxB,YAAY,EAAE;gBACZ,SAAS,EAAE,2BAA2B,CAAC,SAAS,CAAC,QAAQ;aAC1D;YACD,GAAG,CAAC,EAAE,SAAS,EAAE;gBACf,OAAO;oBACL,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;wBACvB,MAAM,OAAO,CAAC,KAAK,CACjB,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC;4BAC1B,SAAS,EAAE;gCACT,UAAU,EAAE;oCACV,cAAc,EAAE,WAAW,CAAC,8BAA8B,CACxD,CAAC,GAAG,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAChD;iCACF;6BACF;yBACF,CAAC,CACH,CAAC;oBACJ,CAAC;iBACF,CAAC;YACJ,CAAC;SACF,CAAC;KACH,CAAC;CACH,CAAC,CAAC"}
+{"version":3,"file":"auth0-hooks.generator.js","sourceRoot":"","sources":["../../../../../src/auth0/generators/react/auth0-hooks/auth0-hooks.generator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,gCAAgC,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC3E,OAAO,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAC;AAC5C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,2BAA2B,EAAE,MAAM,sBAAsB,CAAC;AAEnE,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CAC3C,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,mBAAmB,GAAG,eAAe,CAAC;IACjD,IAAI,EAAE,mBAAmB;IACzB,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG;IACjC,gBAAgB;IAChB,UAAU,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;QAC9B,KAAK,EAAE,2BAA2B,CAAC,KAAK,CAAC,IAAI;QAC7C,OAAO,EAAE,2BAA2B,CAAC,OAAO,CAAC,IAAI;QACjD,SAAS,EAAE,2BAA2B,CAAC,SAAS,CAAC,IAAI;QACrD,IAAI,EAAE,mBAAmB,CAAC;YACxB,YAAY,EAAE;gBACZ,SAAS,EAAE,2BAA2B,CAAC,SAAS,CAAC,QAAQ;aAC1D;YACD,GAAG,CAAC,EAAE,SAAS,EAAE;gBACf,OAAO;oBACL,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;wBACvB,MAAM,OAAO,CAAC,KAAK,CACjB,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC;4BAC1B,SAAS,EAAE;gCACT,UAAU,EAAE;oCACV,cAAc,EAAE,WAAW,CAAC,8BAA8B,CACxD,CAAC,GAAG,SAAS,CAAC,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CACpD;iCACF;6BACF;yBACF,CAAC,CACH,CAAC;oBACJ,CAAC;iBACF,CAAC;YACJ,CAAC;SACF,CAAC;KACH,CAAC;CACH,CAAC,CAAC"}

package/dist/local-auth/constants/model-names.d.ts

@@ -15,5 +15,9 @@ export declare const LOCAL_AUTH_MODELS: {
      * Model name for the user session model that represents a user session in the local auth system.
      */
     readonly userSession: "UserSession";
+    /**
+     * Model name for the auth verification model used for secure token-based verification flows (e.g. password reset, email verification).
+     */
+    readonly authVerification: "AuthVerification";
 };
 //# sourceMappingURL=model-names.d.ts.map

package/dist/local-auth/constants/model-names.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"model-names.d.ts","sourceRoot":"","sources":["../../../src/local-auth/constants/model-names.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,iBAAiB;IAC5B;;OAEG;;IAEH;;OAEG;;IAEH;;OAEG;;IAEH;;OAEG;;CAEK,CAAC"}
+{"version":3,"file":"model-names.d.ts","sourceRoot":"","sources":["../../../src/local-auth/constants/model-names.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,iBAAiB;IAC5B;;OAEG;;IAEH;;OAEG;;IAEH;;OAEG;;IAEH;;OAEG;;IAEH;;OAEG;;CAEK,CAAC"}

package/dist/local-auth/constants/model-names.js

@@ -15,5 +15,9 @@ export const LOCAL_AUTH_MODELS = {
      * Model name for the user session model that represents a user session in the local auth system.
      */
     userSession: 'UserSession',
+    /**
+     * Model name for the auth verification model used for secure token-based verification flows (e.g. password reset, email verification).
+     */
+    authVerification: 'AuthVerification',
 };
 //# sourceMappingURL=model-names.js.map

package/dist/local-auth/constants/model-names.js.map

@@ -1 +1 @@
-{"version":3,"file":"model-names.js","sourceRoot":"","sources":["../../../src/local-auth/constants/model-names.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B;;OAEG;IACH,IAAI,EAAE,MAAM;IACZ;;OAEG;IACH,WAAW,EAAE,aAAa;IAC1B;;OAEG;IACH,QAAQ,EAAE,UAAU;IACpB;;OAEG;IACH,WAAW,EAAE,aAAa;CAClB,CAAC"}
+{"version":3,"file":"model-names.js","sourceRoot":"","sources":["../../../src/local-auth/constants/model-names.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B;;OAEG;IACH,IAAI,EAAE,MAAM;IACZ;;OAEG;IACH,WAAW,EAAE,aAAa;IAC1B;;OAEG;IACH,QAAQ,EAAE,UAAU;IACpB;;OAEG;IACH,WAAW,EAAE,aAAa;IAC1B;;OAEG;IACH,gBAAgB,EAAE,kBAAkB;CAC5B,CAAC"}

package/dist/local-auth/core/generators/auth-email-password/auth-email-password.generator.d.ts

@@ -3,6 +3,7 @@
  */
 export declare const authEmailPasswordGenerator: import("@baseplate-dev/sync").GeneratorBundleCreator<{
     adminRoles: string[];
+    devWebDomainPort: number;
 }, {
     paths: import("@baseplate-dev/sync").GeneratorTask<{
         localAuthCoreAuthEmailPasswordPaths: import("@baseplate-dev/sync").ProviderExport<import("./generated/template-paths.js").LocalAuthCoreAuthEmailPasswordPaths>;
@@ -12,9 +13,15 @@ export declare const authEmailPasswordGenerator: import("@baseplate-dev/sync").G
     imports: import("@baseplate-dev/sync").GeneratorTask<{
         authEmailPasswordImports: import("@baseplate-dev/sync").ProviderExport<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
             authenticateUserWithEmailAndPassword: {};
+            cleanupExpiredPasswordResetTokens: {};
+            completePasswordReset: {};
             createUserWithEmailAndPassword: {};
+            PASSWORD_MAX_LENGTH: {};
             PASSWORD_MIN_LENGTH: {};
+            PASSWORD_RESET_TOKEN_EXPIRY_SEC: {};
             registerUserWithEmailAndPassword: {};
+            requestPasswordReset: {};
+            validatePasswordResetToken: {};
         }>>;
     }, {
         paths: import("@baseplate-dev/sync").ProviderType<import("./generated/template-paths.js").LocalAuthCoreAuthEmailPasswordPaths>;
@@ -25,6 +32,29 @@ export declare const authEmailPasswordGenerator: import("@baseplate-dev/sync").G
         authModuleImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
             userSessionPayload: {};
         }>>;
+        configServiceImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
+            config: {};
+        }>>;
+        emailModuleImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
+            EmailAdapter: {
+                isTypeOnly: true;
+            };
+            EmailAttachment: {
+                isTypeOnly: true;
+            };
+            EmailRawOptions: {
+                isTypeOnly: true;
+            };
+            EmailSendOptions: {
+                isTypeOnly: true;
+            };
+            sendEmail: {};
+            sendEmailQueue: {};
+            sendRawEmail: {};
+            TransformedEmailMessage: {
+                isTypeOnly: true;
+            };
+        }>>;
         errorHandlerServiceImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
             BadRequestError: {};
             ForbiddenError: {};
@@ -33,6 +63,7 @@ export declare const authEmailPasswordGenerator: import("@baseplate-dev/sync").G
             InternalServerError: {};
             logError: {};
             NotFoundError: {};
+            TooManyRequestsError: {};
             UnauthorizedError: {};
         }>>;
         passwordHasherServiceImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
@@ -52,6 +83,19 @@ export declare const authEmailPasswordGenerator: import("@baseplate-dev/sync").G
         prismaImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
             prisma: {};
         }>>;
+        rateLimitImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
+            createRateLimiter: {};
+            memoizeRateLimiter: {};
+            RateLimiter: {
+                isTypeOnly: true;
+            };
+            RateLimiterConfig: {
+                isTypeOnly: true;
+            };
+            RateLimitResult: {
+                isTypeOnly: true;
+            };
+        }>>;
         requestServiceContextImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
             createContextFromRequest: {};
             RequestServiceContext: {
@@ -71,6 +115,11 @@ export declare const authEmailPasswordGenerator: import("@baseplate-dev/sync").G
             };
         }>>;
     }, undefined>;
+    config: import("@baseplate-dev/sync").GeneratorTask<undefined, {
+        provider: import("@baseplate-dev/sync").ProviderType<Omit<import("@baseplate-dev/utils").FieldMap<{
+            configFields: import("@baseplate-dev/utils").MapContainer<string, import("@baseplate-dev/fastify-generators/src/index.js").ConfigServiceField>;
+        }>, "getValues">>;
+    }, undefined>;
     appModule: import("@baseplate-dev/sync").GeneratorTask<any, {
         paths: import("@baseplate-dev/sync").ProviderType<import("./generated/template-paths.js").LocalAuthCoreAuthEmailPasswordPaths>;
         appModule: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/fastify-generators/src/index.js").AppModuleProvider>;

package/dist/local-auth/core/generators/auth-email-password/auth-email-password.generator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth-email-password.generator.d.ts","sourceRoot":"","sources":["../../../../../src/local-auth/core/generators/auth-email-password/auth-email-password.generator.ts"],"names":[],"mappings":"AAkBA;;GAEG;AACH,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA+CrC,CAAC"}
+{"version":3,"file":"auth-email-password.generator.d.ts","sourceRoot":"","sources":["../../../../../src/local-auth/core/generators/auth-email-password/auth-email-password.generator.ts"],"names":[],"mappings":"AAwBA;;GAEG;AACH,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAgErC,CAAC"}

package/dist/local-auth/core/generators/auth-email-password/auth-email-password.generator.js

@@ -1,12 +1,13 @@
-import { TsCodeUtils } from '@baseplate-dev/core-generators';
-import { appModuleProvider, createPothosPrismaObjectTypeOutputName, pothosTypeOutputProvider, } from '@baseplate-dev/fastify-generators';
-import { createGenerator, createGeneratorTask } from '@baseplate-dev/sync';
+import { tsCodeFragment, TsCodeUtils } from '@baseplate-dev/core-generators';
+import { appModuleProvider, configServiceProvider, createPothosPrismaObjectTypeOutputName, pothosTypeOutputProvider, } from '@baseplate-dev/fastify-generators';
+import { createGenerator, createGeneratorTask, createProviderTask, } from '@baseplate-dev/sync';
 import { quot } from '@baseplate-dev/utils';
 import { z } from 'zod';
 import { LOCAL_AUTH_MODELS } from '#src/local-auth/constants/model-names.js';
 import { LOCAL_AUTH_CORE_AUTH_EMAIL_PASSWORD_GENERATED as GENERATED_TEMPLATES } from './generated/index.js';
 const descriptorSchema = z.object({
     adminRoles: z.array(z.string()),
+    devWebDomainPort: z.number(),
 });
 /**
  * Sets up email / password authentication
@@ -15,17 +16,24 @@ export const authEmailPasswordGenerator = createGenerator({
     name: 'local-auth/core/auth-email-password',
     generatorFileUrl: import.meta.url,
     descriptorSchema,
-    buildTasks: ({ adminRoles }) => ({
+    buildTasks: ({ adminRoles, devWebDomainPort }) => ({
         paths: GENERATED_TEMPLATES.paths.task,
         imports: GENERATED_TEMPLATES.imports.task,
         renderers: GENERATED_TEMPLATES.renderers.task,
+        config: createProviderTask(configServiceProvider, (configService) => {
+            configService.configFields.set('AUTH_FRONTEND_URL', {
+                validator: tsCodeFragment('z.url()'),
+                comment: 'Frontend URL for authentication flows including password reset and email verification (e.g., https://app.example.com)',
+                exampleValue: `http://localhost:${devWebDomainPort}`,
+            });
+        }),
         appModule: createGeneratorTask({
             dependencies: {
                 paths: GENERATED_TEMPLATES.paths.provider,
                 appModule: appModuleProvider,
             },
             run({ paths, appModule }) {
-                appModule.moduleImports.push(paths.schemaUserPasswordMutations);
+                appModule.moduleImports.push(paths.schemaUserPasswordMutations, paths.schemaPasswordResetMutations, paths.schemaEmailVerificationMutations);
             },
         }),
         main: createGeneratorTask({
@@ -41,11 +49,14 @@ export const authEmailPasswordGenerator = createGenerator({
                         await builder.apply(renderers.moduleGroup.render({
                             variables: {
                                 schemaUserPasswordMutations: {
-                                    TPL_ADMIN_ROLES: TsCodeUtils.mergeFragmentsAsArrayPresorted(adminRoles.map((r) => quot(r)).sort()),
+                                    TPL_ADMIN_ROLES: TsCodeUtils.mergeFragmentsAsArrayPresorted(adminRoles.map((r) => quot(r)).toSorted()),
                                     TPL_USER_OBJECT_TYPE: userObjectType.getTypeReference().fragment,
                                 },
                             },
                         }));
+                        await builder.apply(renderers.servicesAuthVerification.render({}));
+                        await builder.apply(renderers.servicesEmailVerification.render({}));
+                        await builder.apply(renderers.schemaEmailVerificationMutations.render({}));
                     },
                 };
             },

package/dist/local-auth/core/generators/auth-email-password/auth-email-password.generator.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth-email-password.generator.js","sourceRoot":"","sources":["../../../../../src/local-auth/core/generators/auth-email-password/auth-email-password.generator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,gCAAgC,CAAC;AAC7D,OAAO,EACL,iBAAiB,EACjB,sCAAsC,EACtC,wBAAwB,GACzB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC3E,OAAO,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAC;AAC5C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,iBAAiB,EAAE,MAAM,0CAA0C,CAAC;AAE7E,OAAO,EAAE,6CAA6C,IAAI,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAE5G,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;CAChC,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,eAAe,CAAC;IACxD,IAAI,EAAE,qCAAqC;IAC3C,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG;IACjC,gBAAgB;IAChB,UAAU,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC;QAC/B,KAAK,EAAE,mBAAmB,CAAC,KAAK,CAAC,IAAI;QACrC,OAAO,EAAE,mBAAmB,CAAC,OAAO,CAAC,IAAI;QACzC,SAAS,EAAE,mBAAmB,CAAC,SAAS,CAAC,IAAI;QAC7C,SAAS,EAAE,mBAAmB,CAAC;YAC7B,YAAY,EAAE;gBACZ,KAAK,EAAE,mBAAmB,CAAC,KAAK,CAAC,QAAQ;gBACzC,SAAS,EAAE,iBAAiB;aAC7B;YACD,GAAG,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE;gBACtB,SAAS,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;YAClE,CAAC;SACF,CAAC;QACF,IAAI,EAAE,mBAAmB,CAAC;YACxB,YAAY,EAAE;gBACZ,SAAS,EAAE,mBAAmB,CAAC,SAAS,CAAC,QAAQ;gBACjD,cAAc,EAAE,wBAAwB;qBACrC,UAAU,EAAE;qBACZ,SAAS,CACR,sCAAsC,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAC/D;aACJ;YACD,GAAG,CAAC,EAAE,SAAS,EAAE,cAAc,EAAE;gBAC/B,OAAO;oBACL,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;wBACvB,MAAM,OAAO,CAAC,KAAK,CACjB,SAAS,CAAC,WAAW,CAAC,MAAM,CAAC;4BAC3B,SAAS,EAAE;gCACT,2BAA2B,EAAE;oCAC3B,eAAe,EAAE,WAAW,CAAC,8BAA8B,CACzD,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CACtC;oCACD,oBAAoB,EAClB,cAAc,CAAC,gBAAgB,EAAE,CAAC,QAAQ;iCAC7C;6BACF;yBACF,CAAC,CACH,CAAC;oBACJ,CAAC;iBACF,CAAC;YACJ,CAAC;SACF,CAAC;KACH,CAAC;CACH,CAAC,CAAC"}
+{"version":3,"file":"auth-email-password.generator.js","sourceRoot":"","sources":["../../../../../src/local-auth/core/generators/auth-email-password/auth-email-password.generator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,gCAAgC,CAAC;AAC7E,OAAO,EACL,iBAAiB,EACjB,qBAAqB,EACrB,sCAAsC,EACtC,wBAAwB,GACzB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,kBAAkB,GACnB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAC;AAC5C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,iBAAiB,EAAE,MAAM,0CAA0C,CAAC;AAE7E,OAAO,EAAE,6CAA6C,IAAI,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAE5G,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC/B,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE;CAC7B,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,eAAe,CAAC;IACxD,IAAI,EAAE,qCAAqC;IAC3C,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG;IACjC,gBAAgB;IAChB,UAAU,EAAE,CAAC,EAAE,UAAU,EAAE,gBAAgB,EAAE,EAAE,EAAE,CAAC,CAAC;QACjD,KAAK,EAAE,mBAAmB,CAAC,KAAK,CAAC,IAAI;QACrC,OAAO,EAAE,mBAAmB,CAAC,OAAO,CAAC,IAAI;QACzC,SAAS,EAAE,mBAAmB,CAAC,SAAS,CAAC,IAAI;QAC7C,MAAM,EAAE,kBAAkB,CAAC,qBAAqB,EAAE,CAAC,aAAa,EAAE,EAAE;YAClE,aAAa,CAAC,YAAY,CAAC,GAAG,CAAC,mBAAmB,EAAE;gBAClD,SAAS,EAAE,cAAc,CAAC,SAAS,CAAC;gBACpC,OAAO,EACL,uHAAuH;gBACzH,YAAY,EAAE,oBAAoB,gBAAgB,EAAE;aACrD,CAAC,CAAC;QACL,CAAC,CAAC;QACF,SAAS,EAAE,mBAAmB,CAAC;YAC7B,YAAY,EAAE;gBACZ,KAAK,EAAE,mBAAmB,CAAC,KAAK,CAAC,QAAQ;gBACzC,SAAS,EAAE,iBAAiB;aAC7B;YACD,GAAG,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE;gBACtB,SAAS,CAAC,aAAa,CAAC,IAAI,CAC1B,KAAK,CAAC,2BAA2B,EACjC,KAAK,CAAC,4BAA4B,EAClC,KAAK,CAAC,gCAAgC,CACvC,CAAC;YACJ,CAAC;SACF,CAAC;QACF,IAAI,EAAE,mBAAmB,CAAC;YACxB,YAAY,EAAE;gBACZ,SAAS,EAAE,mBAAmB,CAAC,SAAS,CAAC,QAAQ;gBACjD,cAAc,EAAE,wBAAwB;qBACrC,UAAU,EAAE;qBACZ,SAAS,CACR,sCAAsC,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAC/D;aACJ;YACD,GAAG,CAAC,EAAE,SAAS,EAAE,cAAc,EAAE;gBAC/B,OAAO;oBACL,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;wBACvB,MAAM,OAAO,CAAC,KAAK,CACjB,SAAS,CAAC,WAAW,CAAC,MAAM,CAAC;4BAC3B,SAAS,EAAE;gCACT,2BAA2B,EAAE;oCAC3B,eAAe,EAAE,WAAW,CAAC,8BAA8B,CACzD,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAC1C;oCACD,oBAAoB,EAClB,cAAc,CAAC,gBAAgB,EAAE,CAAC,QAAQ;iCAC7C;6BACF;yBACF,CAAC,CACH,CAAC;wBACF,MAAM,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,wBAAwB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;wBACnE,MAAM,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,yBAAyB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;wBACpE,MAAM,OAAO,CAAC,KAAK,CACjB,SAAS,CAAC,gCAAgC,CAAC,MAAM,CAAC,EAAE,CAAC,CACtD,CAAC;oBACJ,CAAC;iBACF,CAAC;YACJ,CAAC;SACF,CAAC;KACH,CAAC;CACH,CAAC,CAAC"}

package/dist/local-auth/core/generators/auth-email-password/generated/index.d.ts

@@ -3,9 +3,15 @@ export declare const LOCAL_AUTH_CORE_AUTH_EMAIL_PASSWORD_GENERATED: {
         task: import("@baseplate-dev/sync").GeneratorTask<{
             authEmailPasswordImports: import("@baseplate-dev/sync").ProviderExport<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
                 authenticateUserWithEmailAndPassword: {};
+                cleanupExpiredPasswordResetTokens: {};
+                completePasswordReset: {};
                 createUserWithEmailAndPassword: {};
+                PASSWORD_MAX_LENGTH: {};
                 PASSWORD_MIN_LENGTH: {};
+                PASSWORD_RESET_TOKEN_EXPIRY_SEC: {};
                 registerUserWithEmailAndPassword: {};
+                requestPasswordReset: {};
+                validatePasswordResetToken: {};
             }>>;
         }, {
             paths: import("@baseplate-dev/sync").ProviderType<import("./template-paths.js").LocalAuthCoreAuthEmailPasswordPaths>;
@@ -27,6 +33,29 @@ export declare const LOCAL_AUTH_CORE_AUTH_EMAIL_PASSWORD_GENERATED: {
             authModuleImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
                 userSessionPayload: {};
             }>>;
+            configServiceImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
+                config: {};
+            }>>;
+            emailModuleImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
+                EmailAdapter: {
+                    isTypeOnly: true;
+                };
+                EmailAttachment: {
+                    isTypeOnly: true;
+                };
+                EmailRawOptions: {
+                    isTypeOnly: true;
+                };
+                EmailSendOptions: {
+                    isTypeOnly: true;
+                };
+                sendEmail: {};
+                sendEmailQueue: {};
+                sendRawEmail: {};
+                TransformedEmailMessage: {
+                    isTypeOnly: true;
+                };
+            }>>;
             errorHandlerServiceImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
                 BadRequestError: {};
                 ForbiddenError: {};
@@ -35,6 +64,7 @@ export declare const LOCAL_AUTH_CORE_AUTH_EMAIL_PASSWORD_GENERATED: {
                 InternalServerError: {};
                 logError: {};
                 NotFoundError: {};
+                TooManyRequestsError: {};
                 UnauthorizedError: {};
             }>>;
             passwordHasherServiceImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
@@ -54,6 +84,19 @@ export declare const LOCAL_AUTH_CORE_AUTH_EMAIL_PASSWORD_GENERATED: {
             prismaImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
                 prisma: {};
             }>>;
+            rateLimitImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
+                createRateLimiter: {};
+                memoizeRateLimiter: {};
+                RateLimiter: {
+                    isTypeOnly: true;
+                };
+                RateLimiterConfig: {
+                    isTypeOnly: true;
+                };
+                RateLimitResult: {
+                    isTypeOnly: true;
+                };
+            }>>;
             requestServiceContextImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
                 createContextFromRequest: {};
                 RequestServiceContext: {
@@ -77,6 +120,13 @@ export declare const LOCAL_AUTH_CORE_AUTH_EMAIL_PASSWORD_GENERATED: {
     templates: {
         moduleGroup: {
             constantsPassword: import("@baseplate-dev/core-generators").TsTemplateFile<{}, {}, Record<never, Record<never, never>>>;
+            schemaPasswordResetMutations: import("@baseplate-dev/core-generators").TsTemplateFile<{}, {
+                pothosImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
+                    builder: {};
+                }>>;
+            }, {
+                servicesPasswordReset: {};
+            }>;
             schemaUserPasswordMutations: import("@baseplate-dev/core-generators").TsTemplateFile<{
                 TPL_ADMIN_ROLES: {};
                 TPL_USER_OBJECT_TYPE: {};
@@ -90,6 +140,71 @@ export declare const LOCAL_AUTH_CORE_AUTH_EMAIL_PASSWORD_GENERATED: {
             }, {
                 servicesUserPassword: {};
             }>;
+            servicesPasswordReset: import("@baseplate-dev/core-generators").TsTemplateFile<{}, {
+                configServiceImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
+                    config: {};
+                }>>;
+                emailModuleImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
+                    EmailAdapter: {
+                        isTypeOnly: true;
+                    };
+                    EmailAttachment: {
+                        isTypeOnly: true;
+                    };
+                    EmailRawOptions: {
+                        isTypeOnly: true;
+                    };
+                    EmailSendOptions: {
+                        isTypeOnly: true;
+                    };
+                    sendEmail: {};
+                    sendEmailQueue: {};
+                    sendRawEmail: {};
+                    TransformedEmailMessage: {
+                        isTypeOnly: true;
+                    };
+                }>>;
+                errorHandlerServiceImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
+                    BadRequestError: {};
+                    ForbiddenError: {};
+                    handleZodRequestValidationError: {};
+                    HttpError: {};
+                    InternalServerError: {};
+                    logError: {};
+                    NotFoundError: {};
+                    TooManyRequestsError: {};
+                    UnauthorizedError: {};
+                }>>;
+                passwordHasherServiceImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
+                    createPasswordHash: {};
+                    verifyPasswordHash: {};
+                }>>;
+                prismaImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
+                    prisma: {};
+                }>>;
+                rateLimitImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
+                    createRateLimiter: {};
+                    memoizeRateLimiter: {};
+                    RateLimiter: {
+                        isTypeOnly: true;
+                    };
+                    RateLimiterConfig: {
+                        isTypeOnly: true;
+                    };
+                    RateLimitResult: {
+                        isTypeOnly: true;
+                    };
+                }>>;
+                requestServiceContextImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
+                    createContextFromRequest: {};
+                    RequestServiceContext: {
+                        isTypeOnly: true;
+                    };
+                }>>;
+            }, {
+                constantsPassword: {};
+                servicesAuthVerification: {};
+            }>;
             servicesUserPassword: import("@baseplate-dev/core-generators").TsTemplateFile<{}, {
                 errorHandlerServiceImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
                     BadRequestError: {};
@@ -99,6 +214,7 @@ export declare const LOCAL_AUTH_CORE_AUTH_EMAIL_PASSWORD_GENERATED: {
                     InternalServerError: {};
                     logError: {};
                     NotFoundError: {};
+                    TooManyRequestsError: {};
                     UnauthorizedError: {};
                 }>>;
                 passwordHasherServiceImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
@@ -114,6 +230,19 @@ export declare const LOCAL_AUTH_CORE_AUTH_EMAIL_PASSWORD_GENERATED: {
                 prismaImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
                     prisma: {};
                 }>>;
+                rateLimitImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
+                    createRateLimiter: {};
+                    memoizeRateLimiter: {};
+                    RateLimiter: {
+                        isTypeOnly: true;
+                    };
+                    RateLimiterConfig: {
+                        isTypeOnly: true;
+                    };
+                    RateLimitResult: {
+                        isTypeOnly: true;
+                    };
+                }>>;
                 requestServiceContextImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
                     createContextFromRequest: {};
                     RequestServiceContext: {
@@ -133,8 +262,88 @@ export declare const LOCAL_AUTH_CORE_AUTH_EMAIL_PASSWORD_GENERATED: {
                 }>>;
             }, {
                 constantsPassword: {};
+                servicesEmailVerification: {};
             }>;
         };
+        schemaEmailVerificationMutations: import("@baseplate-dev/core-generators").TsTemplateFile<{}, {
+            pothosImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
+                builder: {};
+            }>>;
+        }, {
+            servicesEmailVerification: {};
+        }>;
+        servicesAuthVerification: import("@baseplate-dev/core-generators").TsTemplateFile<{}, {
+            prismaGeneratedImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
+                PrismaClient: {};
+                Prisma: {};
+                '*': {};
+                $Enums: {};
+            }>>;
+            prismaImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
+                prisma: {};
+            }>>;
+        }, Record<never, Record<never, never>>>;
+        servicesEmailVerification: import("@baseplate-dev/core-generators").TsTemplateFile<{}, {
+            configServiceImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
+                config: {};
+            }>>;
+            emailModuleImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
+                EmailAdapter: {
+                    isTypeOnly: true;
+                };
+                EmailAttachment: {
+                    isTypeOnly: true;
+                };
+                EmailRawOptions: {
+                    isTypeOnly: true;
+                };
+                EmailSendOptions: {
+                    isTypeOnly: true;
+                };
+                sendEmail: {};
+                sendEmailQueue: {};
+                sendRawEmail: {};
+                TransformedEmailMessage: {
+                    isTypeOnly: true;
+                };
+            }>>;
+            errorHandlerServiceImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
+                BadRequestError: {};
+                ForbiddenError: {};
+                handleZodRequestValidationError: {};
+                HttpError: {};
+                InternalServerError: {};
+                logError: {};
+                NotFoundError: {};
+                TooManyRequestsError: {};
+                UnauthorizedError: {};
+            }>>;
+            prismaImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
+                prisma: {};
+            }>>;
+            rateLimitImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
+                createRateLimiter: {};
+                memoizeRateLimiter: {};
+                RateLimiter: {
+                    isTypeOnly: true;
+                };
+                RateLimiterConfig: {
+                    isTypeOnly: true;
+                };
+                RateLimitResult: {
+                    isTypeOnly: true;
+                };
+            }>>;
+            requestServiceContextImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
+                createContextFromRequest: {};
+                RequestServiceContext: {
+                    isTypeOnly: true;
+                };
+            }>>;
+        }, {
+            constantsPassword: {};
+            servicesAuthVerification: {};
+        }>;
     };
 };
 //# sourceMappingURL=index.d.ts.map

package/dist/local-auth/core/generators/auth-email-password/generated/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/local-auth/core/generators/auth-email-password/generated/index.ts"],"names":[],"mappings":"AAKA,eAAO,MAAM,6CAA6C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAKzD,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/local-auth/core/generators/auth-email-password/generated/index.ts"],"names":[],"mappings":"AAKA,eAAO,MAAM,6CAA6C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAKzD,CAAC"}

package/dist/local-auth/core/generators/auth-email-password/generated/template-paths.d.ts

@@ -1,6 +1,11 @@
 export interface LocalAuthCoreAuthEmailPasswordPaths {
     constantsPassword: string;
+    schemaEmailVerificationMutations: string;
+    schemaPasswordResetMutations: string;
     schemaUserPasswordMutations: string;
+    servicesAuthVerification: string;
+    servicesEmailVerification: string;
+    servicesPasswordReset: string;
     servicesUserPassword: string;
 }
 export declare const LOCAL_AUTH_CORE_AUTH_EMAIL_PASSWORD_PATHS: {

package/dist/local-auth/core/generators/auth-email-password/generated/template-paths.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"template-paths.d.ts","sourceRoot":"","sources":["../../../../../../src/local-auth/core/generators/auth-email-password/generated/template-paths.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,mCAAmC;IAClD,iBAAiB,EAAE,MAAM,CAAC;IAC1B,2BAA2B,EAAE,MAAM,CAAC;IACpC,oBAAoB,EAAE,MAAM,CAAC;CAC9B;AA4BD,eAAO,MAAM,yCAAyC;;;;;;;CAGrD,CAAC"}
+{"version":3,"file":"template-paths.d.ts","sourceRoot":"","sources":["../../../../../../src/local-auth/core/generators/auth-email-password/generated/template-paths.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,mCAAmC;IAClD,iBAAiB,EAAE,MAAM,CAAC;IAC1B,gCAAgC,EAAE,MAAM,CAAC;IACzC,4BAA4B,EAAE,MAAM,CAAC;IACrC,2BAA2B,EAAE,MAAM,CAAC;IACpC,wBAAwB,EAAE,MAAM,CAAC;IACjC,yBAAyB,EAAE,MAAM,CAAC;IAClC,qBAAqB,EAAE,MAAM,CAAC;IAC9B,oBAAoB,EAAE,MAAM,CAAC;CAC9B;AAiCD,eAAO,MAAM,yCAAyC;;;;;;;CAGrD,CAAC"}

package/dist/local-auth/core/generators/auth-email-password/generated/template-paths.js

@@ -12,7 +12,12 @@ const localAuthCoreAuthEmailPasswordPathsTask = createGeneratorTask({
             providers: {
                 localAuthCoreAuthEmailPasswordPaths: {
                     constantsPassword: `${moduleRoot}/constants/password.constants.ts`,
+                    schemaEmailVerificationMutations: `${moduleRoot}/schema/email-verification.mutations.ts`,
+                    schemaPasswordResetMutations: `${moduleRoot}/schema/password-reset.mutations.ts`,
                     schemaUserPasswordMutations: `${moduleRoot}/schema/user-password.mutations.ts`,
+                    servicesAuthVerification: `${moduleRoot}/services/auth-verification.service.ts`,
+                    servicesEmailVerification: `${moduleRoot}/services/email-verification.service.ts`,
+                    servicesPasswordReset: `${moduleRoot}/services/password-reset.service.ts`,
                     servicesUserPassword: `${moduleRoot}/services/user-password.service.ts`,
                 },
             },

package/dist/local-auth/core/generators/auth-email-password/generated/template-paths.js.map

@@ -1 +1 @@
-{"version":3,"file":"template-paths.js","sourceRoot":"","sources":["../../../../../../src/local-auth/core/generators/auth-email-password/generated/template-paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAC;AACtE,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAQ9E,MAAM,mCAAmC,GACvC,kBAAkB,CAChB,2CAA2C,CAC5C,CAAC;AAEJ,MAAM,uCAAuC,GAAG,mBAAmB,CAAC;IAClE,YAAY,EAAE,EAAE,SAAS,EAAE,iBAAiB,EAAE;IAC9C,OAAO,EAAE;QACP,mCAAmC,EACjC,mCAAmC,CAAC,MAAM,EAAE;KAC/C;IACD,GAAG,CAAC,EAAE,SAAS,EAAE;QACf,MAAM,UAAU,GAAG,SAAS,CAAC,eAAe,EAAE,CAAC;QAE/C,OAAO;YACL,SAAS,EAAE;gBACT,mCAAmC,EAAE;oBACnC,iBAAiB,EAAE,GAAG,UAAU,kCAAkC;oBAClE,2BAA2B,EAAE,GAAG,UAAU,oCAAoC;oBAC9E,oBAAoB,EAAE,GAAG,UAAU,oCAAoC;iBACxE;aACF;SACF,CAAC;IACJ,CAAC;CACF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,yCAAyC,GAAG;IACvD,QAAQ,EAAE,mCAAmC;IAC7C,IAAI,EAAE,uCAAuC;CAC9C,CAAC"}
+{"version":3,"file":"template-paths.js","sourceRoot":"","sources":["../../../../../../src/local-auth/core/generators/auth-email-password/generated/template-paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAC;AACtE,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAa9E,MAAM,mCAAmC,GACvC,kBAAkB,CAChB,2CAA2C,CAC5C,CAAC;AAEJ,MAAM,uCAAuC,GAAG,mBAAmB,CAAC;IAClE,YAAY,EAAE,EAAE,SAAS,EAAE,iBAAiB,EAAE;IAC9C,OAAO,EAAE;QACP,mCAAmC,EACjC,mCAAmC,CAAC,MAAM,EAAE;KAC/C;IACD,GAAG,CAAC,EAAE,SAAS,EAAE;QACf,MAAM,UAAU,GAAG,SAAS,CAAC,eAAe,EAAE,CAAC;QAE/C,OAAO;YACL,SAAS,EAAE;gBACT,mCAAmC,EAAE;oBACnC,iBAAiB,EAAE,GAAG,UAAU,kCAAkC;oBAClE,gCAAgC,EAAE,GAAG,UAAU,yCAAyC;oBACxF,4BAA4B,EAAE,GAAG,UAAU,qCAAqC;oBAChF,2BAA2B,EAAE,GAAG,UAAU,oCAAoC;oBAC9E,wBAAwB,EAAE,GAAG,UAAU,wCAAwC;oBAC/E,yBAAyB,EAAE,GAAG,UAAU,yCAAyC;oBACjF,qBAAqB,EAAE,GAAG,UAAU,qCAAqC;oBACzE,oBAAoB,EAAE,GAAG,UAAU,oCAAoC;iBACxE;aACF;SACF,CAAC;IACJ,CAAC;CACF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,yCAAyC,GAAG;IACvD,QAAQ,EAAE,mCAAmC;IAC7C,IAAI,EAAE,uCAAuC;CAC9C,CAAC"}

package/dist/local-auth/core/generators/auth-email-password/generated/template-renderers.d.ts

@@ -1,10 +1,19 @@
-import type { RenderTsTemplateGroupActionInput } from '@baseplate-dev/core-generators';
+import type { RenderTsTemplateFileActionInput, RenderTsTemplateGroupActionInput } from '@baseplate-dev/core-generators';
 import type { BuilderAction } from '@baseplate-dev/sync';
 import { LOCAL_AUTH_CORE_AUTH_EMAIL_PASSWORD_TEMPLATES } from './typed-templates.js';
 export interface LocalAuthCoreAuthEmailPasswordRenderers {
     moduleGroup: {
         render: (options: Omit<RenderTsTemplateGroupActionInput<typeof LOCAL_AUTH_CORE_AUTH_EMAIL_PASSWORD_TEMPLATES.moduleGroup>, 'importMapProviders' | 'group' | 'paths' | 'generatorPaths'>) => BuilderAction;
     };
+    schemaEmailVerificationMutations: {
+        render: (options: Omit<RenderTsTemplateFileActionInput<typeof LOCAL_AUTH_CORE_AUTH_EMAIL_PASSWORD_TEMPLATES.schemaEmailVerificationMutations>, 'destination' | 'importMapProviders' | 'template' | 'generatorPaths'>) => BuilderAction;
+    };
+    servicesAuthVerification: {
+        render: (options: Omit<RenderTsTemplateFileActionInput<typeof LOCAL_AUTH_CORE_AUTH_EMAIL_PASSWORD_TEMPLATES.servicesAuthVerification>, 'destination' | 'importMapProviders' | 'template' | 'generatorPaths'>) => BuilderAction;
+    };
+    servicesEmailVerification: {
+        render: (options: Omit<RenderTsTemplateFileActionInput<typeof LOCAL_AUTH_CORE_AUTH_EMAIL_PASSWORD_TEMPLATES.servicesEmailVerification>, 'destination' | 'importMapProviders' | 'template' | 'generatorPaths'>) => BuilderAction;
+    };
 }
 export declare const LOCAL_AUTH_CORE_AUTH_EMAIL_PASSWORD_RENDERERS: {
     provider: import("@baseplate-dev/sync").ProviderType<LocalAuthCoreAuthEmailPasswordRenderers>;
@@ -14,6 +23,29 @@ export declare const LOCAL_AUTH_CORE_AUTH_EMAIL_PASSWORD_RENDERERS: {
         authModuleImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
             userSessionPayload: {};
         }>>;
+        configServiceImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
+            config: {};
+        }>>;
+        emailModuleImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
+            EmailAdapter: {
+                isTypeOnly: true;
+            };
+            EmailAttachment: {
+                isTypeOnly: true;
+            };
+            EmailRawOptions: {
+                isTypeOnly: true;
+            };
+            EmailSendOptions: {
+                isTypeOnly: true;
+            };
+            sendEmail: {};
+            sendEmailQueue: {};
+            sendRawEmail: {};
+            TransformedEmailMessage: {
+                isTypeOnly: true;
+            };
+        }>>;
         errorHandlerServiceImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
             BadRequestError: {};
             ForbiddenError: {};
@@ -22,6 +54,7 @@ export declare const LOCAL_AUTH_CORE_AUTH_EMAIL_PASSWORD_RENDERERS: {
             InternalServerError: {};
             logError: {};
             NotFoundError: {};
+            TooManyRequestsError: {};
             UnauthorizedError: {};
         }>>;
         passwordHasherServiceImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
@@ -41,6 +74,19 @@ export declare const LOCAL_AUTH_CORE_AUTH_EMAIL_PASSWORD_RENDERERS: {
         prismaImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
             prisma: {};
         }>>;
+        rateLimitImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
+            createRateLimiter: {};
+            memoizeRateLimiter: {};
+            RateLimiter: {
+                isTypeOnly: true;
+            };
+            RateLimiterConfig: {
+                isTypeOnly: true;
+            };
+            RateLimitResult: {
+                isTypeOnly: true;
+            };
+        }>>;
         requestServiceContextImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
             createContextFromRequest: {};
             RequestServiceContext: {