@contentgrowth/content-auth 0.6.1 → 0.6.3

package/dist/backend/index.d.ts

@@ -47,6 +47,12 @@ declare function normalizeEmail(email: string): string;
  */
 declare function isGmailAddress(email: string): boolean;
 
+declare function hashPassword(password: string): Promise<string>;
+declare function verifyPassword(passwordOrData: string | {
+    password: string;
+    hash: string;
+}, storedHash?: string): Promise<boolean>;
+
 declare const createUsersTable: (tableName?: string, fields?: Record<string, string>, additionalFields?: Record<string, any>) => drizzle_orm_sqlite_core.SQLiteTableWithColumns<{
     name: string;
     schema: undefined;
@@ -904,4 +910,4 @@ declare const createAuthApp: (config: AuthConfig) => {
     auth: better_auth.Auth<any>;
 };
 
-export { type AuthConfig, type EmailNormalizationConfig, type FieldAttribute, type SchemaMapping, type SignInTrackingConfig, type TableMapping, type TurnstileConfig, authMiddleware, createAuth, createAuthApp, getInvitationLink, getSessionToken, isGmailAddress, normalizeEmail, schema, verifyTurnstile };
+export { type AuthConfig, type EmailNormalizationConfig, type FieldAttribute, type SchemaMapping, type SignInTrackingConfig, type TableMapping, type TurnstileConfig, authMiddleware, createAuth, createAuthApp, getInvitationLink, getSessionToken, hashPassword, isGmailAddress, normalizeEmail, schema, verifyPassword, verifyTurnstile };

package/dist/backend/index.js

@@ -5,11 +5,13 @@ import {
   createAuthApp,
   getInvitationLink,
   getSessionToken,
+  hashPassword,
   isGmailAddress,
   normalizeEmail,
   schema_exports,
+  verifyPassword,
   verifyTurnstile
-} from "../chunk-MDSQC2UU.js";
+} from "../chunk-V434IQQD.js";
 import "../chunk-R5U7XKVJ.js";
 export {
   Hono,
@@ -18,8 +20,10 @@ export {
   createAuthApp,
   getInvitationLink,
   getSessionToken,
+  hashPassword,
   isGmailAddress,
   normalizeEmail,
   schema_exports as schema,
+  verifyPassword,
   verifyTurnstile
 };

package/dist/{chunk-AHFGJJZD.js → chunk-EDNWJGKD.js}

@@ -1,6 +1,6 @@
 import {
   authClient
-} from "./chunk-NKDKDBM2.js";
+} from "./chunk-W5RBQBED.js";
 
 // src/frontend/components/react/AuthForm.tsx
 import { useState, useRef, useEffect } from "react";

package/dist/{chunk-MDSQC2UU.js → chunk-V434IQQD.js}

@@ -101,6 +101,80 @@ function isGmailAddress(email) {
   return lowerEmail.endsWith("@gmail.com") || lowerEmail.endsWith("@googlemail.com");
 }
 
+// src/backend/native-hashing.ts
+async function hashPassword(password) {
+  const salt = crypto.getRandomValues(new Uint8Array(16));
+  const enc = new TextEncoder();
+  const keyMaterial = await crypto.subtle.importKey(
+    "raw",
+    enc.encode(password),
+    { name: "PBKDF2" },
+    false,
+    ["deriveBits", "deriveKey"]
+  );
+  const hashBuffer = await crypto.subtle.deriveBits(
+    {
+      name: "PBKDF2",
+      salt,
+      iterations: 1e5,
+      hash: "SHA-256"
+    },
+    keyMaterial,
+    256
+    // 32 bytes
+  );
+  const saltB64 = btoa(String.fromCharCode(...new Uint8Array(salt)));
+  const hashB64 = btoa(String.fromCharCode(...new Uint8Array(hashBuffer)));
+  return `pbkdf2:100000:${saltB64}:${hashB64}`;
+}
+async function verifyPassword(passwordOrData, storedHash) {
+  let password;
+  let hash;
+  if (typeof passwordOrData === "object" && passwordOrData !== null) {
+    password = passwordOrData.password;
+    hash = passwordOrData.hash;
+  } else {
+    password = passwordOrData;
+    hash = storedHash;
+  }
+  if (!hash) {
+    console.error("[Auth] verifyPassword called with empty/undefined hash");
+    return false;
+  }
+  const parts = hash.split(":");
+  if (parts.length !== 4) return false;
+  const [alg, iterationsStr, saltB64, hashB64] = parts;
+  if (alg !== "pbkdf2") return false;
+  const iterations = parseInt(iterationsStr, 10);
+  const salt = Uint8Array.from(atob(saltB64), (c) => c.charCodeAt(0));
+  const originalHash = Uint8Array.from(atob(hashB64), (c) => c.charCodeAt(0));
+  const enc = new TextEncoder();
+  const keyMaterial = await crypto.subtle.importKey(
+    "raw",
+    enc.encode(password),
+    { name: "PBKDF2" },
+    false,
+    ["deriveBits", "deriveKey"]
+  );
+  const hashBuffer = await crypto.subtle.deriveBits(
+    {
+      name: "PBKDF2",
+      salt,
+      iterations,
+      hash: "SHA-256"
+    },
+    keyMaterial,
+    256
+  );
+  const newHash = new Uint8Array(hashBuffer);
+  if (newHash.length !== originalHash.length) return false;
+  let result = 0;
+  for (let i = 0; i < newHash.length; i++) {
+    result |= newHash[i] ^ originalHash[i];
+  }
+  return result === 0;
+}
+
 // src/backend/schema.ts
 var schema_exports = {};
 __export(schema_exports, {
@@ -244,80 +318,6 @@ var verifications = createVerificationsTable();
 var members = createMembersTable("members", organizations, users);
 var invitations = createInvitationsTable("invitations", organizations, users);
 
-// src/backend/native-hashing.ts
-async function hashPassword(password) {
-  const salt = crypto.getRandomValues(new Uint8Array(16));
-  const enc = new TextEncoder();
-  const keyMaterial = await crypto.subtle.importKey(
-    "raw",
-    enc.encode(password),
-    { name: "PBKDF2" },
-    false,
-    ["deriveBits", "deriveKey"]
-  );
-  const hashBuffer = await crypto.subtle.deriveBits(
-    {
-      name: "PBKDF2",
-      salt,
-      iterations: 1e5,
-      hash: "SHA-256"
-    },
-    keyMaterial,
-    256
-    // 32 bytes
-  );
-  const saltB64 = btoa(String.fromCharCode(...new Uint8Array(salt)));
-  const hashB64 = btoa(String.fromCharCode(...new Uint8Array(hashBuffer)));
-  return `pbkdf2:100000:${saltB64}:${hashB64}`;
-}
-async function verifyPassword(passwordOrData, storedHash) {
-  let password;
-  let hash;
-  if (typeof passwordOrData === "object" && passwordOrData !== null) {
-    password = passwordOrData.password;
-    hash = passwordOrData.hash;
-  } else {
-    password = passwordOrData;
-    hash = storedHash;
-  }
-  if (!hash) {
-    console.error("[Auth] verifyPassword called with empty/undefined hash");
-    return false;
-  }
-  const parts = hash.split(":");
-  if (parts.length !== 4) return false;
-  const [alg, iterationsStr, saltB64, hashB64] = parts;
-  if (alg !== "pbkdf2") return false;
-  const iterations = parseInt(iterationsStr, 10);
-  const salt = Uint8Array.from(atob(saltB64), (c) => c.charCodeAt(0));
-  const originalHash = Uint8Array.from(atob(hashB64), (c) => c.charCodeAt(0));
-  const enc = new TextEncoder();
-  const keyMaterial = await crypto.subtle.importKey(
-    "raw",
-    enc.encode(password),
-    { name: "PBKDF2" },
-    false,
-    ["deriveBits", "deriveKey"]
-  );
-  const hashBuffer = await crypto.subtle.deriveBits(
-    {
-      name: "PBKDF2",
-      salt,
-      iterations,
-      hash: "SHA-256"
-    },
-    keyMaterial,
-    256
-  );
-  const newHash = new Uint8Array(hashBuffer);
-  if (newHash.length !== originalHash.length) return false;
-  let result = 0;
-  for (let i = 0; i < newHash.length; i++) {
-    result |= newHash[i] ^ originalHash[i];
-  }
-  return result === 0;
-}
-
 // src/backend/utils.ts
 function getInvitationLink(data, baseUrl) {
   let rawLink = data.link || data.url;
@@ -657,6 +657,8 @@ export {
   verifyTurnstile,
   normalizeEmail,
   isGmailAddress,
+  hashPassword,
+  verifyPassword,
   schema_exports,
   getInvitationLink,
   getSessionToken,

package/dist/{chunk-NKDKDBM2.js → chunk-W5RBQBED.js}

@@ -1,12 +1,16 @@
 // src/frontend/client.ts
 import { createAuthClient } from "better-auth/react";
 import { organizationClient } from "better-auth/client/plugins";
-var createClient = (baseUrl) => {
+var createClient = (baseUrl, options = {}) => {
+  const { refetchOnWindowFocus = false } = options;
   return createAuthClient({
     baseURL: baseUrl,
     plugins: [
       organizationClient()
-    ]
+    ],
+    sessionOptions: {
+      refetchOnWindowFocus
+    }
   });
 };
 var authClient = createClient();

package/dist/frontend/client.d.ts

@@ -3,7 +3,21 @@ import * as _better_fetch_fetch from '@better-fetch/fetch';
 import * as better_auth from 'better-auth';
 import * as better_auth_plugins from 'better-auth/plugins';
 
-declare const createClient: (baseUrl?: string) => {
+interface ContentAuthClientOptions {
+    /**
+     * Controls whether the session is re-fetched when the browser window
+     * regains focus (e.g. lock/unlock screen, switching apps in a PWA).
+     *
+     * Defaults to `false`. Re-fetching on focus causes a React re-render
+     * cascade that can interrupt active client-side sessions (e.g. vocabulary
+     * review flows) by triggering component remounts.
+     *
+     * Set to `true` only for apps that need the session to be always
+     * up-to-date immediately after the user returns to the tab.
+     */
+    refetchOnWindowFocus?: boolean;
+}
+declare const createClient: (baseUrl?: string, options?: ContentAuthClientOptions) => {
     useActiveOrganization: () => {
         data: better_auth.Prettify<{
             id: string;
@@ -3194,4 +3208,4 @@ declare const authClient: {
     };
 };
 
-export { authClient, createClient };
+export { type ContentAuthClientOptions, authClient, createClient };

package/dist/frontend/client.js

@@ -1,7 +1,7 @@
 import {
   authClient,
   createClient
-} from "../chunk-NKDKDBM2.js";
+} from "../chunk-W5RBQBED.js";
 import "../chunk-R5U7XKVJ.js";
 export {
   authClient,

package/dist/frontend/index.d.ts

@@ -1,6 +1,6 @@
 import React from 'react';
 import { authClient } from './client.js';
-export { createClient } from './client.js';
+export { ContentAuthClientOptions, createClient } from './client.js';
 import 'nanostores';
 import '@better-fetch/fetch';
 import 'better-auth';

package/dist/frontend/index.js

@@ -7,11 +7,11 @@ import {
   PasswordChanger,
   ProfileEditor,
   ResetPasswordForm
-} from "../chunk-AHFGJJZD.js";
+} from "../chunk-EDNWJGKD.js";
 import {
   authClient,
   createClient
-} from "../chunk-NKDKDBM2.js";
+} from "../chunk-W5RBQBED.js";
 import "../chunk-R5U7XKVJ.js";
 export {
   AuthForm,

package/dist/index.d.ts

@@ -1,6 +1,6 @@
-export { AuthConfig, EmailNormalizationConfig, FieldAttribute, SchemaMapping, SignInTrackingConfig, TableMapping, TurnstileConfig, authMiddleware, createAuth, createAuthApp, getInvitationLink, getSessionToken, isGmailAddress, normalizeEmail, schema, verifyTurnstile } from './backend/index.js';
+export { AuthConfig, EmailNormalizationConfig, FieldAttribute, SchemaMapping, SignInTrackingConfig, TableMapping, TurnstileConfig, authMiddleware, createAuth, createAuthApp, getInvitationLink, getSessionToken, hashPassword, isGmailAddress, normalizeEmail, schema, verifyPassword, verifyTurnstile } from './backend/index.js';
 export { AuthForm, CreateOrganizationForm, ForgotPasswordForm, InviteMemberForm, OrganizationSwitcher, PasswordChanger, PasswordChangerProps, ProfileEditor, ProfileEditorProps, ResetPasswordForm } from './frontend/index.js';
-export { authClient, createClient } from './frontend/client.js';
+export { ContentAuthClientOptions, authClient, createClient } from './frontend/client.js';
 export * from 'better-auth';
 export { Hono } from 'hono';
 import 'hono/types';

package/dist/index.js

@@ -5,11 +5,13 @@ import {
   createAuthApp,
   getInvitationLink,
   getSessionToken,
+  hashPassword,
   isGmailAddress,
   normalizeEmail,
   schema_exports,
+  verifyPassword,
   verifyTurnstile
-} from "./chunk-MDSQC2UU.js";
+} from "./chunk-V434IQQD.js";
 import {
   AuthForm,
   CreateOrganizationForm,
@@ -19,11 +21,11 @@ import {
   PasswordChanger,
   ProfileEditor,
   ResetPasswordForm
-} from "./chunk-AHFGJJZD.js";
+} from "./chunk-EDNWJGKD.js";
 import {
   authClient,
   createClient
-} from "./chunk-NKDKDBM2.js";
+} from "./chunk-W5RBQBED.js";
 import "./chunk-R5U7XKVJ.js";
 export {
   AuthForm,
@@ -42,8 +44,10 @@ export {
   createClient,
   getInvitationLink,
   getSessionToken,
+  hashPassword,
   isGmailAddress,
   normalizeEmail,
   schema_exports as schema,
+  verifyPassword,
   verifyTurnstile
 };

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@contentgrowth/content-auth",
-    "version": "0.6.1",
+    "version": "0.6.3",
     "description": "Better Auth wrapper with UI components for Cloudflare Workers & Pages. Includes custom schema mapping, Turnstile bot protection, and email normalization.",
     "type": "module",
     "main": "./dist/index.js",