@binary1702/auth 0.2.3 → 0.2.4

package/dist/core/signup.d.ts

@@ -12,4 +12,6 @@ export declare function signupPolicy(env: {
 }, userCount: number): SignupPolicy;
 export declare const EMAIL_RE: RegExp;
 /** Returns an error message, or null when the pair is acceptable. */
-export declare function validateCredentials(email: string, password: string): string | null;
+export declare function validateCredentials(email: string, password: string, env?: {
+    AUTH_EMAIL_DOMAIN?: string;
+}): string | null;

package/dist/core/signup.js

@@ -17,9 +17,13 @@ export function signupPolicy(env, userCount) {
 }
 export const EMAIL_RE = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
 /** Returns an error message, or null when the pair is acceptable. */
-export function validateCredentials(email, password) {
+export function validateCredentials(email, password, env) {
     if (!EMAIL_RE.test(email))
         return "Please enter a valid email address.";
+    const domain = env?.AUTH_EMAIL_DOMAIN;
+    if (domain && !email.toLowerCase().endsWith(`@${domain.toLowerCase()}`)) {
+        return `Only @${domain} emails are allowed.`;
+    }
     if (password.length < 8)
         return "Password must be at least 8 characters.";
     return null;

package/dist/next/index.js

@@ -165,7 +165,7 @@ export async function POST(req, ctx) {
             return NextResponse.json({ error: "Sign-up is closed" }, { status: 404 });
         if (p.inviteRequired && invite !== process.env.AUTH_INVITE_CODE)
             return fail("Wrong invite code.", 403);
-        const invalid = validateCredentials(email, password);
+        const invalid = validateCredentials(email, password, process.env);
         if (invalid)
             return fail(invalid);
         if (await findUser(email))

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@binary1702/auth",
-  "version": "0.2.3",
+  "version": "0.2.4",
   "description": "Email + password auth for Next.js. One command: npx @binary1702/auth",
   "type": "module",
   "repository": {