@contentgrowth/content-auth 0.6.2 → 0.6.4

package/dist/backend/index.d.ts

@@ -47,6 +47,12 @@ declare function normalizeEmail(email: string): string;
  */
 declare function isGmailAddress(email: string): boolean;
 
+declare function hashPassword(password: string): Promise<string>;
+declare function verifyPassword(passwordOrData: string | {
+    password: string;
+    hash: string;
+}, storedHash?: string): Promise<boolean>;
+
 declare const createUsersTable: (tableName?: string, fields?: Record<string, string>, additionalFields?: Record<string, any>) => drizzle_orm_sqlite_core.SQLiteTableWithColumns<{
     name: string;
     schema: undefined;
@@ -904,4 +910,4 @@ declare const createAuthApp: (config: AuthConfig) => {
     auth: better_auth.Auth<any>;
 };
 
-export { type AuthConfig, type EmailNormalizationConfig, type FieldAttribute, type SchemaMapping, type SignInTrackingConfig, type TableMapping, type TurnstileConfig, authMiddleware, createAuth, createAuthApp, getInvitationLink, getSessionToken, isGmailAddress, normalizeEmail, schema, verifyTurnstile };
+export { type AuthConfig, type EmailNormalizationConfig, type FieldAttribute, type SchemaMapping, type SignInTrackingConfig, type TableMapping, type TurnstileConfig, authMiddleware, createAuth, createAuthApp, getInvitationLink, getSessionToken, hashPassword, isGmailAddress, normalizeEmail, schema, verifyPassword, verifyTurnstile };

package/dist/backend/index.js

@@ -5,11 +5,13 @@ import {
   createAuthApp,
   getInvitationLink,
   getSessionToken,
+  hashPassword,
   isGmailAddress,
   normalizeEmail,
   schema_exports,
+  verifyPassword,
   verifyTurnstile
-} from "../chunk-MDSQC2UU.js";
+} from "../chunk-KUS3REJX.js";
 import "../chunk-R5U7XKVJ.js";
 export {
   Hono,
@@ -18,8 +20,10 @@ export {
   createAuthApp,
   getInvitationLink,
   getSessionToken,
+  hashPassword,
   isGmailAddress,
   normalizeEmail,
   schema_exports as schema,
+  verifyPassword,
   verifyTurnstile
 };

package/dist/{chunk-MDSQC2UU.js → chunk-KUS3REJX.js}

@@ -101,6 +101,80 @@ function isGmailAddress(email) {
   return lowerEmail.endsWith("@gmail.com") || lowerEmail.endsWith("@googlemail.com");
 }
 
+// src/backend/native-hashing.ts
+async function hashPassword(password) {
+  const salt = crypto.getRandomValues(new Uint8Array(16));
+  const enc = new TextEncoder();
+  const keyMaterial = await crypto.subtle.importKey(
+    "raw",
+    enc.encode(password),
+    { name: "PBKDF2" },
+    false,
+    ["deriveBits", "deriveKey"]
+  );
+  const hashBuffer = await crypto.subtle.deriveBits(
+    {
+      name: "PBKDF2",
+      salt,
+      iterations: 1e5,
+      hash: "SHA-256"
+    },
+    keyMaterial,
+    256
+    // 32 bytes
+  );
+  const saltB64 = btoa(String.fromCharCode(...new Uint8Array(salt)));
+  const hashB64 = btoa(String.fromCharCode(...new Uint8Array(hashBuffer)));
+  return `pbkdf2:100000:${saltB64}:${hashB64}`;
+}
+async function verifyPassword(passwordOrData, storedHash) {
+  let password;
+  let hash;
+  if (typeof passwordOrData === "object" && passwordOrData !== null) {
+    password = passwordOrData.password;
+    hash = passwordOrData.hash;
+  } else {
+    password = passwordOrData;
+    hash = storedHash;
+  }
+  if (!hash) {
+    console.error("[Auth] verifyPassword called with empty/undefined hash");
+    return false;
+  }
+  const parts = hash.split(":");
+  if (parts.length !== 4) return false;
+  const [alg, iterationsStr, saltB64, hashB64] = parts;
+  if (alg !== "pbkdf2") return false;
+  const iterations = parseInt(iterationsStr, 10);
+  const salt = Uint8Array.from(atob(saltB64), (c) => c.charCodeAt(0));
+  const originalHash = Uint8Array.from(atob(hashB64), (c) => c.charCodeAt(0));
+  const enc = new TextEncoder();
+  const keyMaterial = await crypto.subtle.importKey(
+    "raw",
+    enc.encode(password),
+    { name: "PBKDF2" },
+    false,
+    ["deriveBits", "deriveKey"]
+  );
+  const hashBuffer = await crypto.subtle.deriveBits(
+    {
+      name: "PBKDF2",
+      salt,
+      iterations,
+      hash: "SHA-256"
+    },
+    keyMaterial,
+    256
+  );
+  const newHash = new Uint8Array(hashBuffer);
+  if (newHash.length !== originalHash.length) return false;
+  let result = 0;
+  for (let i = 0; i < newHash.length; i++) {
+    result |= newHash[i] ^ originalHash[i];
+  }
+  return result === 0;
+}
+
 // src/backend/schema.ts
 var schema_exports = {};
 __export(schema_exports, {
@@ -244,80 +318,6 @@ var verifications = createVerificationsTable();
 var members = createMembersTable("members", organizations, users);
 var invitations = createInvitationsTable("invitations", organizations, users);
 
-// src/backend/native-hashing.ts
-async function hashPassword(password) {
-  const salt = crypto.getRandomValues(new Uint8Array(16));
-  const enc = new TextEncoder();
-  const keyMaterial = await crypto.subtle.importKey(
-    "raw",
-    enc.encode(password),
-    { name: "PBKDF2" },
-    false,
-    ["deriveBits", "deriveKey"]
-  );
-  const hashBuffer = await crypto.subtle.deriveBits(
-    {
-      name: "PBKDF2",
-      salt,
-      iterations: 1e5,
-      hash: "SHA-256"
-    },
-    keyMaterial,
-    256
-    // 32 bytes
-  );
-  const saltB64 = btoa(String.fromCharCode(...new Uint8Array(salt)));
-  const hashB64 = btoa(String.fromCharCode(...new Uint8Array(hashBuffer)));
-  return `pbkdf2:100000:${saltB64}:${hashB64}`;
-}
-async function verifyPassword(passwordOrData, storedHash) {
-  let password;
-  let hash;
-  if (typeof passwordOrData === "object" && passwordOrData !== null) {
-    password = passwordOrData.password;
-    hash = passwordOrData.hash;
-  } else {
-    password = passwordOrData;
-    hash = storedHash;
-  }
-  if (!hash) {
-    console.error("[Auth] verifyPassword called with empty/undefined hash");
-    return false;
-  }
-  const parts = hash.split(":");
-  if (parts.length !== 4) return false;
-  const [alg, iterationsStr, saltB64, hashB64] = parts;
-  if (alg !== "pbkdf2") return false;
-  const iterations = parseInt(iterationsStr, 10);
-  const salt = Uint8Array.from(atob(saltB64), (c) => c.charCodeAt(0));
-  const originalHash = Uint8Array.from(atob(hashB64), (c) => c.charCodeAt(0));
-  const enc = new TextEncoder();
-  const keyMaterial = await crypto.subtle.importKey(
-    "raw",
-    enc.encode(password),
-    { name: "PBKDF2" },
-    false,
-    ["deriveBits", "deriveKey"]
-  );
-  const hashBuffer = await crypto.subtle.deriveBits(
-    {
-      name: "PBKDF2",
-      salt,
-      iterations,
-      hash: "SHA-256"
-    },
-    keyMaterial,
-    256
-  );
-  const newHash = new Uint8Array(hashBuffer);
-  if (newHash.length !== originalHash.length) return false;
-  let result = 0;
-  for (let i = 0; i < newHash.length; i++) {
-    result |= newHash[i] ^ originalHash[i];
-  }
-  return result === 0;
-}
-
 // src/backend/utils.ts
 function getInvitationLink(data, baseUrl) {
   let rawLink = data.link || data.url;
@@ -637,6 +637,44 @@ var createAuth = (config) => {
     console.log("[ContentAuth-DEBUG] Other options passed to betterAuth():", Object.keys(otherOptions).join(", "));
     console.log("[ContentAuth-DEBUG] ========================================");
   }
+  auth.createUser = async (options) => {
+    const { email, password, name, emailVerified = false } = options;
+    const signupRequest = new Request(`${baseUrl}/api/auth/sign-up/email`, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({
+        email: email.toLowerCase().trim(),
+        password,
+        name: name || email.split("@")[0],
+        callbackURL: "/"
+      })
+    });
+    const signupResponse = await auth.handler(signupRequest);
+    if (!signupResponse.ok) {
+      const errorData = await signupResponse.json();
+      throw new Error(`Failed to create user: ${JSON.stringify(errorData)}`);
+    }
+    const signupData = await signupResponse.json();
+    if (emailVerified && signupData.user?.id && rawDb?.prepare) {
+      await rawDb.prepare(
+        `UPDATE ${userTableName} SET ${userIdColumn === "id" ? "emailVerified" : schemaMapping?.user?.fields?.emailVerified || "emailVerified"} = 1 WHERE ${userIdColumn} = ?`
+      ).bind(signupData.user.id).run();
+    }
+    return signupData.user;
+  };
+  auth.resetUserPassword = async (userId, newPassword) => {
+    if (!rawDb?.prepare) {
+      throw new Error("Password reset requires database access");
+    }
+    const hashedPassword = await hashPassword(newPassword);
+    const accountIdField = schemaMapping?.account?.fields?.userId || "userId";
+    const passwordField = schemaMapping?.account?.fields?.password || "password";
+    const updatedAtField = schemaMapping?.account?.fields?.updatedAt || "updatedAt";
+    await rawDb.prepare(
+      `UPDATE ${accountTableName} SET ${passwordField} = ?, ${updatedAtField} = ? WHERE ${accountIdField} = ? AND providerId = 'credential'`
+    ).bind(hashedPassword, Date.now(), userId).run();
+    return { success: true };
+  };
   return auth;
 };
 var authMiddleware = (auth) => {
@@ -657,6 +695,8 @@ export {
   verifyTurnstile,
   normalizeEmail,
   isGmailAddress,
+  hashPassword,
+  verifyPassword,
   schema_exports,
   getInvitationLink,
   getSessionToken,

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-export { AuthConfig, EmailNormalizationConfig, FieldAttribute, SchemaMapping, SignInTrackingConfig, TableMapping, TurnstileConfig, authMiddleware, createAuth, createAuthApp, getInvitationLink, getSessionToken, isGmailAddress, normalizeEmail, schema, verifyTurnstile } from './backend/index.js';
+export { AuthConfig, EmailNormalizationConfig, FieldAttribute, SchemaMapping, SignInTrackingConfig, TableMapping, TurnstileConfig, authMiddleware, createAuth, createAuthApp, getInvitationLink, getSessionToken, hashPassword, isGmailAddress, normalizeEmail, schema, verifyPassword, verifyTurnstile } from './backend/index.js';
 export { AuthForm, CreateOrganizationForm, ForgotPasswordForm, InviteMemberForm, OrganizationSwitcher, PasswordChanger, PasswordChangerProps, ProfileEditor, ProfileEditorProps, ResetPasswordForm } from './frontend/index.js';
 export { ContentAuthClientOptions, authClient, createClient } from './frontend/client.js';
 export * from 'better-auth';

package/dist/index.js

@@ -5,11 +5,13 @@ import {
   createAuthApp,
   getInvitationLink,
   getSessionToken,
+  hashPassword,
   isGmailAddress,
   normalizeEmail,
   schema_exports,
+  verifyPassword,
   verifyTurnstile
-} from "./chunk-MDSQC2UU.js";
+} from "./chunk-KUS3REJX.js";
 import {
   AuthForm,
   CreateOrganizationForm,
@@ -42,8 +44,10 @@ export {
   createClient,
   getInvitationLink,
   getSessionToken,
+  hashPassword,
   isGmailAddress,
   normalizeEmail,
   schema_exports as schema,
+  verifyPassword,
   verifyTurnstile
 };

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@contentgrowth/content-auth",
-    "version": "0.6.2",
+    "version": "0.6.4",
     "description": "Better Auth wrapper with UI components for Cloudflare Workers & Pages. Includes custom schema mapping, Turnstile bot protection, and email normalization.",
     "type": "module",
     "main": "./dist/index.js",