@classic-homes/auth 0.1.49 → 0.1.50

package/dist/auth.svelte-JXZ7XEE5.js

@@ -0,0 +1,3 @@
+export { authActions, authStore, currentUser, isAuthenticated } from './chunk-TUFSFAAI.js';
+import './chunk-U5E4T4NS.js';
+import './chunk-EM7PUNZB.js';

package/dist/{chunk-DCGC6CNV.js → chunk-EM7PUNZB.js}

@@ -44,6 +44,33 @@ function getFetch() {
   const cfg = getConfig();
   return cfg.fetch ?? fetch;
 }
+function isValidRedirectUrl(url) {
+  const cfg = getConfig();
+  try {
+    const parsed = new URL(url);
+    if (parsed.protocol !== "http:" && parsed.protocol !== "https:") {
+      return false;
+    }
+    if (cfg.allowedRedirectOrigins && cfg.allowedRedirectOrigins.length > 0) {
+      return cfg.allowedRedirectOrigins.some((origin) => {
+        try {
+          const allowedOrigin = new URL(origin);
+          return parsed.origin === allowedOrigin.origin;
+        } catch {
+          return false;
+        }
+      });
+    }
+    try {
+      const baseOrigin = new URL(cfg.baseUrl);
+      return parsed.origin === baseOrigin.origin;
+    } catch {
+      return false;
+    }
+  } catch {
+    return !url.includes("://") && !url.startsWith("//");
+  }
+}
 
 // src/core/jwt.ts
 function decodeJWT(token) {
@@ -95,4 +122,4 @@ function extractClaims(token, claims) {
   return result;
 }
 
-export { decodeJWT, extractClaims, getConfig, getDefaultStorage, getFetch, getStorage, getTokenExpiration, getTokenRemainingTime, initAuth, isInitialized, isTokenExpired, resetConfig };
+export { decodeJWT, extractClaims, getConfig, getDefaultStorage, getFetch, getStorage, getTokenExpiration, getTokenRemainingTime, initAuth, isInitialized, isTokenExpired, isValidRedirectUrl, resetConfig };

package/dist/{chunk-XSQYERC6.js → chunk-GOKAXJJS.js}

@@ -1,4 +1,4 @@
-import { authApi } from './chunk-ES4UOD62.js';
+import { authApi } from './chunk-U5E4T4NS.js';
 
 // src/core/guards.ts
 function isMfaChallengeResponse(response) {
@@ -60,7 +60,7 @@ var AuthService = class {
     }
     if (options?.autoSetAuth !== false && !isMfaChallengeResponse(response)) {
       try {
-        const { authStore } = await import('./auth.svelte-DTSHZMJ4.js');
+        const { authStore } = await import('./auth.svelte-JXZ7XEE5.js');
         authStore.setAuth(
           response.accessToken,
           response.refreshToken,
@@ -246,7 +246,7 @@ var AuthService = class {
     }
     if (options?.autoSetAuth !== false) {
       try {
-        const { authStore } = await import('./auth.svelte-DTSHZMJ4.js');
+        const { authStore } = await import('./auth.svelte-JXZ7XEE5.js');
         authStore.setAuth(
           response.accessToken,
           response.refreshToken,

package/dist/{chunk-YTMFXVJR.js → chunk-RKHRCHOI.js}

@@ -1,6 +1,6 @@
-import { authService } from './chunk-XSQYERC6.js';
-import { authStore, currentUser, isAuthenticated, authActions } from './chunk-DSNTNK6T.js';
-import { isInitialized, initAuth } from './chunk-DCGC6CNV.js';
+import { authService } from './chunk-GOKAXJJS.js';
+import { authStore, currentUser, isAuthenticated, authActions } from './chunk-TUFSFAAI.js';
+import { isInitialized, initAuth } from './chunk-EM7PUNZB.js';
 
 // src/svelte/guards/auth-guard.ts
 function checkAuth(options = {}) {

package/dist/{chunk-DSNTNK6T.js → chunk-TUFSFAAI.js}

@@ -1,5 +1,5 @@
-import { authApi } from './chunk-ES4UOD62.js';
-import { decodeJWT, isInitialized, getConfig, getStorage, getDefaultStorage } from './chunk-DCGC6CNV.js';
+import { authApi } from './chunk-U5E4T4NS.js';
+import { decodeJWT, isInitialized, getConfig, getStorage, getDefaultStorage } from './chunk-EM7PUNZB.js';
 
 // src/svelte/stores/auth.svelte.ts
 function getStorageKey() {

package/dist/{chunk-ES4UOD62.js → chunk-U5E4T4NS.js}

@@ -1,10 +1,14 @@
-import { getConfig, getStorage, getFetch } from './chunk-DCGC6CNV.js';
+import { getConfig, getStorage, getFetch, isValidRedirectUrl } from './chunk-EM7PUNZB.js';
 
 // src/core/client.ts
 var isRefreshing = false;
 var refreshSubscribers = [];
 function subscribeTokenRefresh(cb) {
   refreshSubscribers.push(cb);
+  return () => {
+    const idx = refreshSubscribers.indexOf(cb);
+    if (idx > -1) refreshSubscribers.splice(idx, 1);
+  };
 }
 function onTokenRefreshed(token) {
   refreshSubscribers.forEach((cb) => cb(token));
@@ -58,7 +62,7 @@ function updateStoredTokens(accessToken, refreshToken) {
   parsed.accessToken = accessToken;
   parsed.refreshToken = refreshToken;
   storage.setItem(storageKey, JSON.stringify(parsed));
-  import('./auth.svelte-DTSHZMJ4.js').then(({ authStore }) => {
+  import('./auth.svelte-JXZ7XEE5.js').then(({ authStore }) => {
     authStore.updateTokens(accessToken, refreshToken);
   }).catch(() => {
   });
@@ -168,13 +172,15 @@ async function apiRequest(endpoint, options = {}) {
         const REFRESH_TIMEOUT_MS = 3e4;
         return new Promise((resolve, reject) => {
           let settled = false;
+          let unsubscribe = null;
           const timeoutId = setTimeout(() => {
             if (!settled) {
               settled = true;
+              unsubscribe?.();
               reject(new Error("Token refresh timed out. Please sign in again."));
             }
           }, REFRESH_TIMEOUT_MS);
-          subscribeTokenRefresh(() => {
+          unsubscribe = subscribeTokenRefresh(() => {
             if (!settled) {
               settled = true;
               clearTimeout(timeoutId);
@@ -320,11 +326,18 @@ var authApi = {
    * Initiate SSO login by redirecting to the SSO provider.
    * @param options.callbackUrl - The URL where the SSO provider should redirect after auth
    * @param options.redirectUrl - The final URL to redirect to after processing the callback
+   * @throws Error if redirectUrl or callbackUrl fail validation
    */
   initiateSSOLogin(options) {
     if (typeof window === "undefined") return;
     const config = getConfig();
     const authorizeUrl = config.sso?.authorizeUrl ?? `${config.baseUrl}/auth/sso/authorize`;
+    if (options?.callbackUrl && !isValidRedirectUrl(options.callbackUrl)) {
+      throw new Error("Invalid callback URL: URL is not in the list of allowed redirect origins");
+    }
+    if (options?.redirectUrl && !isValidRedirectUrl(options.redirectUrl)) {
+      throw new Error("Invalid redirect URL: URL is not in the list of allowed redirect origins");
+    }
     const params = new URLSearchParams();
     if (options?.callbackUrl) {
       params.set("callback", options.callbackUrl);
@@ -599,10 +612,10 @@ var authApi = {
     await api.delete("/auth/sso/unlink", true, void 0, { provider, password });
   },
   /**
-   * Link an SSO account (redirects to SSO provider via form POST).
+   * Link an SSO account.
    *
-   * Uses form submission to avoid exposing the access token in URL parameters,
-   * which could leak via browser history, referrer headers, or server logs.
+   * Initiates the SSO linking flow by making an authenticated API call.
+   * The server returns an authorization URL to redirect the user to.
    */
   async linkSSOAccount(provider = "authentik") {
     if (typeof window === "undefined") return;
@@ -611,22 +624,24 @@ var authApi = {
       throw new Error("Not authenticated");
     }
     const config = getConfig();
-    const form = document.createElement("form");
-    form.method = "POST";
-    form.action = `${config.baseUrl}/auth/sso/link`;
-    form.style.display = "none";
-    const tokenInput = document.createElement("input");
-    tokenInput.type = "hidden";
-    tokenInput.name = "token";
-    tokenInput.value = accessToken;
-    form.appendChild(tokenInput);
-    const providerInput = document.createElement("input");
-    providerInput.type = "hidden";
-    providerInput.name = "provider";
-    providerInput.value = provider;
-    form.appendChild(providerInput);
-    document.body.appendChild(form);
-    form.submit();
+    const fetchFn = config.fetch ?? fetch;
+    const response = await fetchFn(`${config.baseUrl}/auth/sso/link`, {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+        Authorization: `Bearer ${accessToken}`
+      },
+      body: JSON.stringify({ provider })
+    });
+    if (!response.ok) {
+      const error = await response.json().catch(() => ({ message: "Failed to link SSO account" }));
+      throw new Error(error.error?.message || error.message || "Failed to link SSO account");
+    }
+    const result = await response.json();
+    const authorizationUrl = extractData(result).authorizationUrl;
+    if (authorizationUrl) {
+      window.location.href = authorizationUrl;
+    }
   },
   // ============================================================================
   // Security Events

package/dist/core/index.d.ts

@@ -1,6 +1,6 @@
-import { L as LoginCredentials, h as LoginResponse, j as LogoutResponse, R as RegisterData, k as RegisterResponse, U as User, u as ProfileUpdateData, v as ChangePasswordData, l as Session, m as ApiKey, C as CreateApiKeyRequest, n as CreateApiKeyResponse, o as MFAStatus, M as MFASetupResponse, p as MFAChallengeData, D as Device, q as UserPreferences, s as LinkedAccount, t as SecurityEvent, P as Pagination } from '../types-Ct5g1Nbj.js';
-export { A as AuthConfig, f as AuthState, w as ResetPasswordData, S as SSOConfig, e as StorageAdapter, g as getConfig, b as getDefaultStorage, d as getFetch, c as getStorage, i as initAuth, a as isInitialized, r as resetConfig } from '../types-Ct5g1Nbj.js';
-export { A as AuthService, L as LoginOptions, M as MFAVerifyOptions, R as RoleDeniedError, a as authService, f as formatUserRoles, c as getAvatarFallback, g as getDisplayName, e as getGreeting, d as getUserEmail, b as getUserInitials, i as isRoleDeniedError } from '../user-utils-BtLu_jhF.js';
+import { L as LoginCredentials, h as LoginResponse, j as LogoutResponse, R as RegisterData, k as RegisterResponse, U as User, u as ProfileUpdateData, v as ChangePasswordData, l as Session, m as ApiKey, C as CreateApiKeyRequest, n as CreateApiKeyResponse, o as MFAStatus, M as MFASetupResponse, p as MFAChallengeData, D as Device, q as UserPreferences, s as LinkedAccount, t as SecurityEvent, P as Pagination } from '../types-CKcLRCI_.js';
+export { A as AuthConfig, f as AuthState, w as ResetPasswordData, S as SSOConfig, e as StorageAdapter, g as getConfig, b as getDefaultStorage, d as getFetch, c as getStorage, i as initAuth, a as isInitialized, r as resetConfig } from '../types-CKcLRCI_.js';
+export { A as AuthService, L as LoginOptions, M as MFAVerifyOptions, R as RoleDeniedError, a as authService, f as formatUserRoles, c as getAvatarFallback, g as getDisplayName, e as getGreeting, d as getUserEmail, b as getUserInitials, i as isRoleDeniedError } from '../user-utils-Bi3-FHxY.js';
 
 /**
  * HTTP Client
@@ -113,6 +113,7 @@ declare const authApi: {
      * Initiate SSO login by redirecting to the SSO provider.
      * @param options.callbackUrl - The URL where the SSO provider should redirect after auth
      * @param options.redirectUrl - The final URL to redirect to after processing the callback
+     * @throws Error if redirectUrl or callbackUrl fail validation
      */
     initiateSSOLogin(options?: {
         callbackUrl?: string;
@@ -253,10 +254,10 @@ declare const authApi: {
      */
     unlinkSSOAccount(provider: string, password?: string): Promise<void>;
     /**
-     * Link an SSO account (redirects to SSO provider via form POST).
+     * Link an SSO account.
      *
-     * Uses form submission to avoid exposing the access token in URL parameters,
-     * which could leak via browser history, referrer headers, or server logs.
+     * Initiates the SSO linking flow by making an authenticated API call.
+     * The server returns an authorization URL to redirect the user to.
      */
     linkSSOAccount(provider?: string): Promise<void>;
     /**

package/dist/core/index.js

@@ -1,3 +1,3 @@
-export { AuthService, RoleDeniedError, authService, formatUserRoles, getAvailableMethods, getAvatarFallback, getDisplayName, getGreeting, getMfaToken, getUserEmail, getUserInitials, isLoginSuccessResponse, isMfaChallengeResponse, isRoleDeniedError } from '../chunk-XSQYERC6.js';
-export { api, apiRequest, authApi, clearStoredAuth, extractData, getAccessToken, getRefreshToken, getSessionToken, updateStoredTokens } from '../chunk-ES4UOD62.js';
-export { decodeJWT, extractClaims, getConfig, getDefaultStorage, getFetch, getStorage, getTokenExpiration, getTokenRemainingTime, initAuth, isInitialized, isTokenExpired, resetConfig } from '../chunk-DCGC6CNV.js';
+export { AuthService, RoleDeniedError, authService, formatUserRoles, getAvailableMethods, getAvatarFallback, getDisplayName, getGreeting, getMfaToken, getUserEmail, getUserInitials, isLoginSuccessResponse, isMfaChallengeResponse, isRoleDeniedError } from '../chunk-GOKAXJJS.js';
+export { api, apiRequest, authApi, clearStoredAuth, extractData, getAccessToken, getRefreshToken, getSessionToken, updateStoredTokens } from '../chunk-U5E4T4NS.js';
+export { decodeJWT, extractClaims, getConfig, getDefaultStorage, getFetch, getStorage, getTokenExpiration, getTokenRemainingTime, initAuth, isInitialized, isTokenExpired, resetConfig } from '../chunk-EM7PUNZB.js';

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-export { m as ApiKey, A as AuthConfig, f as AuthState, v as ChangePasswordData, C as CreateApiKeyRequest, n as CreateApiKeyResponse, D as Device, s as LinkedAccount, L as LoginCredentials, h as LoginResponse, j as LogoutResponse, p as MFAChallengeData, M as MFASetupResponse, o as MFAStatus, P as Pagination, u as ProfileUpdateData, R as RegisterData, k as RegisterResponse, w as ResetPasswordData, S as SSOConfig, t as SecurityEvent, l as Session, e as StorageAdapter, U as User, q as UserPreferences, g as getConfig, b as getDefaultStorage, d as getFetch, c as getStorage, i as initAuth, a as isInitialized, r as resetConfig } from './types-Ct5g1Nbj.js';
+export { m as ApiKey, A as AuthConfig, f as AuthState, v as ChangePasswordData, C as CreateApiKeyRequest, n as CreateApiKeyResponse, D as Device, s as LinkedAccount, L as LoginCredentials, h as LoginResponse, j as LogoutResponse, p as MFAChallengeData, M as MFASetupResponse, o as MFAStatus, P as Pagination, u as ProfileUpdateData, R as RegisterData, k as RegisterResponse, w as ResetPasswordData, S as SSOConfig, t as SecurityEvent, l as Session, e as StorageAdapter, U as User, q as UserPreferences, g as getConfig, b as getDefaultStorage, d as getFetch, c as getStorage, i as initAuth, a as isInitialized, r as resetConfig } from './types-CKcLRCI_.js';
 export { ApiRequestOptions, ApiResponse, JWTPayload, api, apiRequest, authApi, clearStoredAuth, decodeJWT, extractClaims, extractData, getAccessToken, getAvailableMethods, getMfaToken, getRefreshToken, getSessionToken, getTokenExpiration, getTokenRemainingTime, isLoginSuccessResponse, isMfaChallengeResponse, isTokenExpired, updateStoredTokens } from './core/index.js';
-export { A as AuthService, L as LoginOptions, M as MFAVerifyOptions, R as RoleDeniedError, a as authService, f as formatUserRoles, c as getAvatarFallback, g as getDisplayName, e as getGreeting, d as getUserEmail, b as getUserInitials, i as isRoleDeniedError } from './user-utils-BtLu_jhF.js';
+export { A as AuthService, L as LoginOptions, M as MFAVerifyOptions, R as RoleDeniedError, a as authService, f as formatUserRoles, c as getAvatarFallback, g as getDisplayName, e as getGreeting, d as getUserEmail, b as getUserInitials, i as isRoleDeniedError } from './user-utils-Bi3-FHxY.js';
 export { AuthClient, AuthGuardOptions, AuthGuardResult, AuthHookOptions, CreateAuthClientOptions, NavFilterOptions, RoleRestrictedItem, authActions, authStore, canAccess, checkAuth, createAuthClient, createAuthGuard, createAuthHook, createNavFilter, currentUser, filterByAccess, filterNavSections, isAuthenticated, matchesRoute, protectedLoad, requireAuth, requirePermission, requireRole, routePatterns } from './svelte/index.js';
 import '@sveltejs/kit';

package/dist/index.js

@@ -1,5 +1,5 @@
-export { canAccess, checkAuth, createAuthClient, createAuthGuard, createAuthHook, createNavFilter, filterByAccess, filterNavSections, matchesRoute, protectedLoad, requireAuth, requirePermission, requireRole, routePatterns } from './chunk-YTMFXVJR.js';
-export { AuthService, RoleDeniedError, authService, formatUserRoles, getAvailableMethods, getAvatarFallback, getDisplayName, getGreeting, getMfaToken, getUserEmail, getUserInitials, isLoginSuccessResponse, isMfaChallengeResponse, isRoleDeniedError } from './chunk-XSQYERC6.js';
-export { authActions, authStore, currentUser, isAuthenticated } from './chunk-DSNTNK6T.js';
-export { api, apiRequest, authApi, clearStoredAuth, extractData, getAccessToken, getRefreshToken, getSessionToken, updateStoredTokens } from './chunk-ES4UOD62.js';
-export { decodeJWT, extractClaims, getConfig, getDefaultStorage, getFetch, getStorage, getTokenExpiration, getTokenRemainingTime, initAuth, isInitialized, isTokenExpired, resetConfig } from './chunk-DCGC6CNV.js';
+export { canAccess, checkAuth, createAuthClient, createAuthGuard, createAuthHook, createNavFilter, filterByAccess, filterNavSections, matchesRoute, protectedLoad, requireAuth, requirePermission, requireRole, routePatterns } from './chunk-RKHRCHOI.js';
+export { AuthService, RoleDeniedError, authService, formatUserRoles, getAvailableMethods, getAvatarFallback, getDisplayName, getGreeting, getMfaToken, getUserEmail, getUserInitials, isLoginSuccessResponse, isMfaChallengeResponse, isRoleDeniedError } from './chunk-GOKAXJJS.js';
+export { authActions, authStore, currentUser, isAuthenticated } from './chunk-TUFSFAAI.js';
+export { api, apiRequest, authApi, clearStoredAuth, extractData, getAccessToken, getRefreshToken, getSessionToken, updateStoredTokens } from './chunk-U5E4T4NS.js';
+export { decodeJWT, extractClaims, getConfig, getDefaultStorage, getFetch, getStorage, getTokenExpiration, getTokenRemainingTime, initAuth, isInitialized, isTokenExpired, resetConfig } from './chunk-EM7PUNZB.js';

package/dist/svelte/index.d.ts

@@ -1,7 +1,7 @@
-import { f as AuthState, U as User, A as AuthConfig } from '../types-Ct5g1Nbj.js';
-export { i as initAuth, a as isInitialized } from '../types-Ct5g1Nbj.js';
-import { a as authService } from '../user-utils-BtLu_jhF.js';
-export { R as RoleDeniedError, f as formatUserRoles, c as getAvatarFallback, g as getDisplayName, e as getGreeting, d as getUserEmail, b as getUserInitials, i as isRoleDeniedError } from '../user-utils-BtLu_jhF.js';
+import { f as AuthState, U as User, A as AuthConfig } from '../types-CKcLRCI_.js';
+export { i as initAuth, a as isInitialized } from '../types-CKcLRCI_.js';
+import { a as authService } from '../user-utils-Bi3-FHxY.js';
+export { R as RoleDeniedError, f as formatUserRoles, c as getAvatarFallback, g as getDisplayName, e as getGreeting, d as getUserEmail, b as getUserInitials, i as isRoleDeniedError } from '../user-utils-Bi3-FHxY.js';
 import { RequestEvent, Handle } from '@sveltejs/kit';
 
 /**

package/dist/svelte/index.js

@@ -1,5 +1,5 @@
-export { canAccess, checkAuth, createAuthClient, createAuthGuard, createAuthHook, createNavFilter, filterByAccess, filterNavSections, matchesRoute, protectedLoad, requireAuth, requirePermission, requireRole, routePatterns } from '../chunk-YTMFXVJR.js';
-export { RoleDeniedError, formatUserRoles, getAvatarFallback, getDisplayName, getGreeting, getUserEmail, getUserInitials, isRoleDeniedError } from '../chunk-XSQYERC6.js';
-export { authActions, authStore, currentUser, isAuthenticated } from '../chunk-DSNTNK6T.js';
-import '../chunk-ES4UOD62.js';
-export { initAuth, isInitialized } from '../chunk-DCGC6CNV.js';
+export { canAccess, checkAuth, createAuthClient, createAuthGuard, createAuthHook, createNavFilter, filterByAccess, filterNavSections, matchesRoute, protectedLoad, requireAuth, requirePermission, requireRole, routePatterns } from '../chunk-RKHRCHOI.js';
+export { RoleDeniedError, formatUserRoles, getAvatarFallback, getDisplayName, getGreeting, getUserEmail, getUserInitials, isRoleDeniedError } from '../chunk-GOKAXJJS.js';
+export { authActions, authStore, currentUser, isAuthenticated } from '../chunk-TUFSFAAI.js';
+import '../chunk-U5E4T4NS.js';
+export { initAuth, isInitialized } from '../chunk-EM7PUNZB.js';

package/dist/testing/index.d.ts

@@ -1,4 +1,4 @@
-import { U as User, h as LoginResponse, j as LogoutResponse, k as RegisterResponse, M as MFASetupResponse, o as MFAStatus, l as Session, D as Device, m as ApiKey, s as LinkedAccount, t as SecurityEvent, q as UserPreferences, e as StorageAdapter, f as AuthState, A as AuthConfig } from '../types-Ct5g1Nbj.js';
+import { U as User, h as LoginResponse, j as LogoutResponse, k as RegisterResponse, M as MFASetupResponse, o as MFAStatus, l as Session, D as Device, m as ApiKey, s as LinkedAccount, t as SecurityEvent, q as UserPreferences, e as StorageAdapter, f as AuthState, A as AuthConfig } from '../types-CKcLRCI_.js';
 
 /**
  * User Fixtures

package/dist/testing/index.js

@@ -1,4 +1,4 @@
-import { initAuth, resetConfig, isTokenExpired, decodeJWT } from '../chunk-DCGC6CNV.js';
+import { initAuth, resetConfig, isTokenExpired, decodeJWT } from '../chunk-EM7PUNZB.js';
 
 // src/testing/fixtures/users.ts
 var mockUser = {

package/dist/{types-Ct5g1Nbj.d.ts → types-CKcLRCI_.d.ts}

@@ -52,6 +52,22 @@ interface AuthConfig {
     onSessionExpired?: (currentPath: string) => void;
     /** SSO configuration */
     sso?: SSOConfig;
+    /**
+     * Allowed origins for SSO redirect URLs.
+     * If not specified, only same-origin redirects are allowed.
+     *
+     * @example
+     * ```typescript
+     * initAuth({
+     *   baseUrl: 'https://api.example.com',
+     *   allowedRedirectOrigins: [
+     *     'https://app.example.com',
+     *     'https://admin.example.com',
+     *   ],
+     * });
+     * ```
+     */
+    allowedRedirectOrigins?: string[];
 }
 /**
  * Initialize the auth package with configuration.

package/dist/{user-utils-BtLu_jhF.d.ts → user-utils-Bi3-FHxY.d.ts}

@@ -1,4 +1,4 @@
-import { L as LoginCredentials, h as LoginResponse, j as LogoutResponse, R as RegisterData, k as RegisterResponse, U as User, u as ProfileUpdateData, l as Session, m as ApiKey, C as CreateApiKeyRequest, n as CreateApiKeyResponse, o as MFAStatus, M as MFASetupResponse, p as MFAChallengeData, D as Device, q as UserPreferences, s as LinkedAccount, t as SecurityEvent, P as Pagination } from './types-Ct5g1Nbj.js';
+import { L as LoginCredentials, h as LoginResponse, j as LogoutResponse, R as RegisterData, k as RegisterResponse, U as User, u as ProfileUpdateData, l as Session, m as ApiKey, C as CreateApiKeyRequest, n as CreateApiKeyResponse, o as MFAStatus, M as MFASetupResponse, p as MFAChallengeData, D as Device, q as UserPreferences, s as LinkedAccount, t as SecurityEvent, P as Pagination } from './types-CKcLRCI_.js';
 
 /**
  * Auth Service

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@classic-homes/auth",
-  "version": "0.1.49",
+  "version": "0.1.50",
   "description": "Authentication services and Svelte bindings for Classic Theme apps",
   "type": "module",
   "main": "dist/index.js",
@@ -24,6 +24,7 @@
       "import": "./dist/testing/index.js"
     }
   },
+  "sideEffects": false,
   "files": [
     "dist"
   ],

package/dist/auth.svelte-DTSHZMJ4.js

@@ -1,3 +0,0 @@
-export { authActions, authStore, currentUser, isAuthenticated } from './chunk-DSNTNK6T.js';
-import './chunk-ES4UOD62.js';
-import './chunk-DCGC6CNV.js';