@brightweblabs/core-auth 0.1.2 → 0.2.0

package/package.json

@@ -1,9 +1,7 @@
 {
   "name": "@brightweblabs/core-auth",
   "private": false,
-  "version": "0.1.2",
-  "main": "./src/index.ts",
-  "types": "./src/index.ts",
+  "version": "0.2.0",
   "files": [
     "src"
   ],
@@ -16,9 +14,9 @@
     "access": "public"
   },
   "exports": {
-    ".": "./src/index.ts",
     "./client": "./src/client.ts",
-    "./server": "./src/server.ts"
+    "./server": "./src/server.ts",
+    "./shared": "./src/shared.ts"
   },
   "dependencies": {
     "next": "16.1.1",

package/src/client.ts

@@ -2,13 +2,6 @@
 
 import { useCallback, useEffect, useRef, useState } from "react";
 
-export const AUTH_RESEND_COOLDOWN_SECONDS = 60;
-
-export interface PasswordValidationResult {
-  isValid: boolean;
-  errors: string[];
-}
-
 interface CooldownTimerResult {
   remaining: number;
   isCoolingDown: boolean;
@@ -16,57 +9,6 @@ interface CooldownTimerResult {
   reset: () => void;
 }
 
-export function getAuthBaseUrl(): string {
-  const configuredUrl = process.env.NEXT_PUBLIC_APP_URL?.trim();
-  if (!configuredUrl) {
-    throw new Error("Falta NEXT_PUBLIC_APP_URL para redirecionamentos de email de autenticação.");
-  }
-
-  try {
-    return new URL(configuredUrl).toString().replace(/\/$/, "");
-  } catch {
-    throw new Error("NEXT_PUBLIC_APP_URL inválido. Esperado URL absoluto (ex.: https://exemplo.com).");
-  }
-}
-
-export function buildSignupCallbackUrl(): string {
-  return new URL("auth/callback", `${getAuthBaseUrl()}/`).toString();
-}
-
-export function buildResetPasswordRedirectUrl(): string {
-  return `${getAuthBaseUrl()}/reset-password`;
-}
-
-export function validatePassword(password: string): PasswordValidationResult {
-  const errors: string[] = [];
-
-  if (password.length < 8) {
-    errors.push("A palavra-passe deve ter pelo menos 8 caracteres");
-  }
-
-  if (!/[A-Z]/.test(password)) {
-    errors.push("A palavra-passe deve conter pelo menos uma letra maiúscula");
-  }
-
-  if (!/[a-z]/.test(password)) {
-    errors.push("A palavra-passe deve conter pelo menos uma letra minúscula");
-  }
-
-  if (!/[0-9]/.test(password)) {
-    errors.push("A palavra-passe deve conter pelo menos um número");
-  }
-
-  return {
-    isValid: errors.length === 0,
-    errors,
-  };
-}
-
-export function validateEmail(email: string): boolean {
-  const emailRegex = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
-  return emailRegex.test(email.trim().toLowerCase());
-}
-
 export function useCooldownTimer(durationSeconds: number): CooldownTimerResult {
   const [remaining, setRemaining] = useState(0);
   const intervalRef = useRef<ReturnType<typeof setInterval> | null>(null);

package/src/server.ts

@@ -1,8 +1,12 @@
 import type { User } from "@supabase/supabase-js";
 import { redirect } from "next/navigation";
 import { createServerSupabase } from "@brightweblabs/infra/server";
-
-export type GlobalRole = "client" | "staff" | "admin";
+import {
+  canAccessInsightsCms,
+  normalizeGlobalRole,
+  resolvePostLoginPath,
+  type GlobalRole,
+} from "./shared";
 
 type Profile = {
   id: string;
@@ -44,30 +48,6 @@ type ServerUserAccess =
     error: string;
   };
 
-const INSIGHTS_CMS_ALLOWED_ROLES: GlobalRole[] = ["admin"];
-const DASHBOARD_LANDING_ROLES: GlobalRole[] = ["staff", "admin"];
-
-export function normalizeGlobalRole(value: string | null | undefined): GlobalRole | null {
-  const normalizedValue = (value ?? "").trim().toLowerCase();
-  if (normalizedValue === "client" || normalizedValue === "staff" || normalizedValue === "admin") {
-    return normalizedValue;
-  }
-
-  return null;
-}
-
-export function canAccessInsightsCms(role: string | null | undefined): boolean {
-  const normalizedRole = normalizeGlobalRole(role);
-  return normalizedRole !== null && INSIGHTS_CMS_ALLOWED_ROLES.some((allowedRole) => allowedRole === normalizedRole);
-}
-
-export function resolvePostLoginPath(role: string | null | undefined): "/dashboard" | "/account" {
-  const normalizedRole = normalizeGlobalRole(role);
-  const shouldLandOnDashboard = normalizedRole !== null
-    && DASHBOARD_LANDING_ROLES.some((allowedRole) => allowedRole === normalizedRole);
-  return shouldLandOnDashboard ? "/dashboard" : "/account";
-}
-
 export async function requireServerUserAccess(): Promise<ServerUserAccess> {
   const supabase = await createServerSupabase();
   const {

package/src/shared.ts

@@ -0,0 +1,83 @@
+export const AUTH_RESEND_COOLDOWN_SECONDS = 60;
+
+export interface PasswordValidationResult {
+  isValid: boolean;
+  errors: string[];
+}
+
+export type GlobalRole = "client" | "staff" | "admin";
+
+const INSIGHTS_CMS_ALLOWED_ROLES: GlobalRole[] = ["admin"];
+const DASHBOARD_LANDING_ROLES: GlobalRole[] = ["staff", "admin"];
+
+export function getAuthBaseUrl(): string {
+  const configuredUrl = process.env.NEXT_PUBLIC_APP_URL?.trim();
+  if (!configuredUrl) {
+    throw new Error("Falta NEXT_PUBLIC_APP_URL para redirecionamentos de email de autenticação.");
+  }
+
+  try {
+    return new URL(configuredUrl).toString().replace(/\/$/, "");
+  } catch {
+    throw new Error("NEXT_PUBLIC_APP_URL inválido. Esperado URL absoluto (ex.: https://exemplo.com).");
+  }
+}
+
+export function buildSignupCallbackUrl(): string {
+  return new URL("auth/callback", `${getAuthBaseUrl()}/`).toString();
+}
+
+export function buildResetPasswordRedirectUrl(): string {
+  return `${getAuthBaseUrl()}/reset-password`;
+}
+
+export function validatePassword(password: string): PasswordValidationResult {
+  const errors: string[] = [];
+
+  if (password.length < 8) {
+    errors.push("A palavra-passe deve ter pelo menos 8 caracteres");
+  }
+
+  if (!/[A-Z]/.test(password)) {
+    errors.push("A palavra-passe deve conter pelo menos uma letra maiúscula");
+  }
+
+  if (!/[a-z]/.test(password)) {
+    errors.push("A palavra-passe deve conter pelo menos uma letra minúscula");
+  }
+
+  if (!/[0-9]/.test(password)) {
+    errors.push("A palavra-passe deve conter pelo menos um número");
+  }
+
+  return {
+    isValid: errors.length === 0,
+    errors,
+  };
+}
+
+export function validateEmail(email: string): boolean {
+  const emailRegex = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
+  return emailRegex.test(email.trim().toLowerCase());
+}
+
+export function normalizeGlobalRole(value: string | null | undefined): GlobalRole | null {
+  const normalizedValue = (value ?? "").trim().toLowerCase();
+  if (normalizedValue === "client" || normalizedValue === "staff" || normalizedValue === "admin") {
+    return normalizedValue;
+  }
+
+  return null;
+}
+
+export function canAccessInsightsCms(role: string | null | undefined): boolean {
+  const normalizedRole = normalizeGlobalRole(role);
+  return normalizedRole !== null && INSIGHTS_CMS_ALLOWED_ROLES.some((allowedRole) => allowedRole === normalizedRole);
+}
+
+export function resolvePostLoginPath(role: string | null | undefined): "/dashboard" | "/account" {
+  const normalizedRole = normalizeGlobalRole(role);
+  const shouldLandOnDashboard = normalizedRole !== null
+    && DASHBOARD_LANDING_ROLES.some((allowedRole) => allowedRole === normalizedRole);
+  return shouldLandOnDashboard ? "/dashboard" : "/account";
+}

package/src/index.ts

@@ -1 +0,0 @@
-export * from "./client";