@crossauth/backend 0.0.34 → 0.0.36

package/dist/index.js

@@ -4,7 +4,7 @@ var d = (S, s, e) => Ie(S, typeof s != "symbol" ? s + "" : s, e);
 import { CrossauthError as o, ErrorCode as l, UserState as E, CrossauthLogger as u, j as f, OAuthFlows as b, KeyPrefix as U, OAuthTokenConsumerBase as Pe, OAuthClientBase as Ke } from "@crossauth/common";
 import { PrismaClient as ce, Prisma as X } from "@prisma/client";
 import ye from "@mbakereth/ldapjs";
-import { timingSafeEqual as he, randomBytes as ue, randomUUID as Oe, createHash as Fe, pbkdf2 as Ne, createHmac as ie, createCipheriv as Re, createDecipheriv as De, randomInt as ee } from "node:crypto";
+import { timingSafeEqual as he, randomBytes as ue, randomUUID as Fe, createHash as Oe, pbkdf2 as Ne, createHmac as ie, createCipheriv as Re, createDecipheriv as De, randomInt as ee } from "node:crypto";
 import { promisify as xe } from "node:util";
 import W from "nunjucks";
 import Ee from "nodemailer";
@@ -2498,7 +2498,7 @@ class Kt extends Y {
     super(new de(s), e);
   }
 }
-class Ot extends qe {
+class Ft extends qe {
   /**
    * Creates a PostgresKeyStorage object, optionally overriding defaults.
    * @param pgPool the instance of the Posrgres client. 
@@ -2508,7 +2508,7 @@ class Ot extends qe {
     super(new de(s), e);
   }
 }
-class Ft extends We {
+class Ot extends We {
   /**
    * Creates a PostgresOAuthClientStorage object, optionally overriding defaults.
    * @param pgPool the instance of the Posrgres client. 
@@ -2679,7 +2679,7 @@ const Ce = process.env.PBKDF2_DIGEST || "sha256", Se = Number(process.env.PBKDF2
    * Creates a UUID
    */
   static uuid() {
-    return Oe();
+    return Fe();
   }
   /**
    * Standard hash using SHA256 (not PBKDF2 or HMAC)
@@ -2697,7 +2697,7 @@ const Ce = process.env.PBKDF2_DIGEST || "sha256", Se = Number(process.env.PBKDF2
    * @returns the string containing the hash 
    */
   static sha256(s) {
-    return Fe("sha256").update(s).digest("base64url");
+    return Oe("sha256").update(s).digest("base64url");
   }
   /**
    * Hashes a password and returns it as a base64 or base64url encoded string
@@ -3639,7 +3639,8 @@ class Dt extends be {
     super({ friendlyName: "LDAP", ...t });
     d(this, "ldapAutoCreateAccount", !1);
     d(this, "ldapStorage");
-    m("ldapAutoCreateAccount", g.Boolean, this, t, "LDAP_AUTO_CREATE_ACCOUNT"), this.ldapStorage = e;
+    d(this, "ldapAutoCreateFactor1", "ldap");
+    m("ldapAutoCreateAccount", g.Boolean, this, t, "LDAP_AUTO_CREATE_ACCOUNT"), m("ldapAutoCreateFactor1", g.Boolean, this, t, "LDAP_AUTO_CREATE_FACTOR1"), this.ldapStorage = e;
   }
   /**
    * Authenticates the user, returning a the user as a {@link User} object.
@@ -3656,9 +3657,9 @@ class Dt extends be {
     let i;
     if (this.ldapAutoCreateAccount)
       try {
-        i = (await this.ldapStorage.getUserByUsername(e.username)).user;
+        i = (await this.ldapStorage.getUserByUsername(e.username)).user, i.factor1 = this.ldapAutoCreateFactor1;
       } catch {
-        i = await this.ldapStorage.createUser(e, r);
+        i = await this.ldapStorage.createUser({ factor1: this.ldapAutoCreateFactor1, ...e }, r);
       }
     else
       i = (await this.ldapStorage.getUserByUsername(e.username)).user;
@@ -5761,7 +5762,7 @@ class zt {
     otp: _,
     deviceCode: C
   }) {
-    var F, V, j;
+    var O, V, j;
     const T = this.inferFlowFromPost(s, a);
     if (!T) return {
       error: "server_error",
@@ -5816,11 +5817,11 @@ class zt {
       let P;
       if (N.username)
         try {
-          const { user: O } = await ((F = this.userStorage) == null ? void 0 : F.getUserByUsername(N.username));
-          P = O;
-        } catch (O) {
+          const { user: F } = await ((O = this.userStorage) == null ? void 0 : O.getUserByUsername(N.username));
+          P = F;
+        } catch (F) {
           return u.logger.error(f({
-            err: O,
+            err: F,
             msg: "Couldn't get user for refresh token.  Doesn't exist?",
             username: N.username
           })), {
@@ -5829,11 +5830,11 @@ class zt {
           };
         }
       try {
-        const O = U.refreshToken + v.hash(n);
-        await this.keyStorage.deleteKey(O);
-      } catch (O) {
-        const I = o.asCrossauthError(O);
-        u.logger.debug(f({ err: O })), u.logger.warn(f({ msg: "Cannot delete refresh token", cerr: I }));
+        const F = U.refreshToken + v.hash(n);
+        await this.keyStorage.deleteKey(F);
+      } catch (F) {
+        const I = o.asCrossauthError(F);
+        u.logger.debug(f({ err: F })), u.logger.warn(f({ msg: "Cannot delete refresh token", cerr: I }));
       }
       return await this.makeAccessToken({
         client: A,
@@ -5847,11 +5848,11 @@ class zt {
       const {
         scopes: N,
         error: P,
-        error_description: O
+        error_description: F
       } = await this.validateAndPersistScope(e, t, void 0);
       return P ? {
         error: P,
-        error_description: O
+        error_description: F
       } : await this.makeAccessToken({
         client: A,
         client_secret: i,
@@ -5891,11 +5892,11 @@ class zt {
       const {
         scopes: N,
         error: P,
-        error_description: O
+        error_description: F
       } = await this.validateAndPersistScope(e, t, K);
       return P ? {
         error: P,
-        error_description: O
+        error_description: F
       } : K.factor2 ? this.allowedFactor2.length > 0 && (K.state == E.factor2ResetNeeded || !this.allowedFactor2.includes(K.factor2 ? K.factor2 : "none")) ? {
         error: "access_denied",
         error_description: "2FA method not allowed or needs to be reconfigured"
@@ -5911,12 +5912,12 @@ class zt {
       const {
         scopes: N,
         error: P,
-        error_description: O
+        error_description: F
       } = await this.validateAndPersistScope(e, t, void 0);
       if (P)
         return {
           error: P,
-          error_description: O
+          error_description: F
         };
       if (!_)
         return {
@@ -5974,12 +5975,12 @@ class zt {
       const {
         scopes: N,
         error: P,
-        error_description: O
+        error_description: F
       } = await this.validateAndPersistScope(e, t, void 0);
       if (P)
         return {
           error: P,
-          error_description: O
+          error_description: F
         };
       if (!y || !p)
         return {
@@ -6053,15 +6054,15 @@ class zt {
       try {
         N = await this.keyStorage.getKey(U.deviceCode + C);
       } catch (P) {
-        const O = o.asCrossauthError(P);
-        return u.logger.debug(f({ err: O })), u.logger.error(f({ msg: "Couldn't get device code", cerr: O })), {
+        const F = o.asCrossauthError(P);
+        return u.logger.debug(f({ err: F })), u.logger.error(f({ msg: "Couldn't get device code", cerr: F })), {
           error: "accerss_denied",
           error_description: "Invalid device code"
         };
       }
       try {
-        const P = JSON.parse(N.data ?? "{}"), O = (/* @__PURE__ */ new Date()).getTime();
-        if (N.expires && O > N.expires.getTime())
+        const P = JSON.parse(N.data ?? "{}"), F = (/* @__PURE__ */ new Date()).getTime();
+        if (N.expires && F > N.expires.getTime())
           return await this.deleteDeviceCode(C), {
             error: "expired_token",
             error_description: "Code has expired"
@@ -6083,8 +6084,8 @@ class zt {
           });
         }
       } catch (P) {
-        const O = o.asCrossauthError(P);
-        return u.logger.debug(f({ err: O })), u.logger.error(f({ msg: "Couldn't get device code", cerr: O })), await this.deleteDeviceCode(C), {
+        const F = o.asCrossauthError(P);
+        return u.logger.debug(f({ err: F })), u.logger.error(f({ msg: "Couldn't get device code", cerr: F })), await this.deleteDeviceCode(C), {
           error: "accerss_denied",
           error_description: "Invalid device code"
         };
@@ -6656,17 +6657,17 @@ class zt {
       let K;
       try {
         K = await this.keyStorage.getKey(U.authorizationCode + v.hash(e)), h = x.decodeData(K.data);
-      } catch (F) {
-        return u.logger.debug(f({ err: F })), {
+      } catch (O) {
+        return u.logger.debug(f({ err: O })), {
           error: "access_denied",
           error_description: "Invalid or expired authorization code"
         };
       }
       try {
         await this.keyStorage.deleteKey(K.value);
-      } catch (F) {
+      } catch (O) {
         u.logger.warn(f({
-          err: F,
+          err: O,
           msg: "Couldn't delete authorization code from storatge",
           client_id: s == null ? void 0 : s.client_id
         }));
@@ -6707,13 +6708,13 @@ class zt {
       type: "access"
     };
     C = this.addClaims(C, this.accessTokenClaims, i, n), i && (C.scope = i), this.accessTokenExpiry != null && (C.exp = y + this.accessTokenExpiry, p = new Date(w.getTime() + this.accessTokenExpiry * 1e3 + this.clockTolerance * 1e3)), this.audience && (C.aud = this.audience);
-    const T = await new Promise((K, F) => {
+    const T = await new Promise((K, O) => {
       se.sign(
         C,
         this.secretOrPrivateKey,
         { algorithm: this.jwtAlgorithmChecked, keyid: "1" },
         (V, j) => {
-          j ? K(j) : F(V || new o(
+          j ? K(j) : O(V || new o(
             l.Unauthorized,
             "Couldn't create jwt"
           ));
@@ -6730,7 +6731,7 @@ class zt {
     let k;
     if (i && i.includes("openid")) {
       const K = v.uuid();
-      let F = {
+      let O = {
         aud: s.client_id,
         jti: K,
         iat: y,
@@ -6738,7 +6739,7 @@ class zt {
         sub: h.username,
         type: "id"
       };
-      if (i.includes("email") && (n != null && n.email) && (F.email = n.email), i.includes("address") && n && "address" in n && (F.address = n.address), i.includes("phone") && n && "phone" in n && (F.phone = n.phone), i.includes("profile") && n)
+      if (i.includes("email") && (n != null && n.email) && (O.email = n.email), i.includes("address") && n && "address" in n && (O.address = n.address), i.includes("phone") && n && "phone" in n && (O.phone = n.phone), i.includes("profile") && n)
         for (let V of [
           "name",
           "family_name",
@@ -6755,10 +6756,10 @@ class zt {
           "locale",
           "updated_at"
         ])
-          F[V] = n[V];
-      F = this.addClaims(F, this.idTokenClaims, i, n), F.scope = i, this.accessTokenExpiry != null && (F.exp = y + this.accessTokenExpiry), k = await new Promise((V, j) => {
+          O[V] = n[V];
+      O = this.addClaims(O, this.idTokenClaims, i, n), O.scope = i, this.accessTokenExpiry != null && (O.exp = y + this.accessTokenExpiry), k = await new Promise((V, j) => {
         se.sign(
-          F,
+          O,
           this.secretOrPrivateKey,
           {
             algorithm: this.jwtAlgorithmChecked,
@@ -6780,7 +6781,7 @@ class zt {
         client_id: s.client_id
       };
       i && (K.scope = i);
-      let F;
+      let O;
       const j = {
         jti: v.uuid(),
         iat: y,
@@ -6788,13 +6789,13 @@ class zt {
         sub: h.username,
         type: "refresh"
       };
-      this.refreshTokenExpiry != null && (j.exp = y + this.refreshTokenExpiry, F = this.refreshTokenExpiry ? new Date(y + this.refreshTokenExpiry * 1e3 + this.clockTolerance * 1e3) : void 0), this.oauthIssuer && (j.aud = this.oauthIssuer), A = await new Promise((N, P) => {
+      this.refreshTokenExpiry != null && (j.exp = y + this.refreshTokenExpiry, O = this.refreshTokenExpiry ? new Date(y + this.refreshTokenExpiry * 1e3 + this.clockTolerance * 1e3) : void 0), this.oauthIssuer && (j.aud = this.oauthIssuer), A = await new Promise((N, P) => {
         se.sign(
           j,
           this.secretOrPrivateKey,
           { algorithm: this.jwtAlgorithmChecked, keyid: "1" },
-          (O, I) => {
-            I ? N(I) : P(O || new o(
+          (F, I) => {
+            I ? N(I) : P(F || new o(
               l.Unauthorized,
               "Couldn't create jwt"
             ));
@@ -6805,7 +6806,7 @@ class zt {
         // to avoid user storage dependency
         U.refreshToken + v.hash(A),
         w,
-        F,
+        O,
         JSON.stringify(K)
       ));
     }
@@ -7352,9 +7353,9 @@ export {
   nt as OAuthTokenConsumer,
   g as ParamType,
   be as PasswordAuthenticator,
-  Ot as PostgresKeyStorage,
+  Ft as PostgresKeyStorage,
   Nt as PostgresOAuthAuthorizationStorage,
-  Ft as PostgresOAuthClientStorage,
+  Ot as PostgresOAuthClientStorage,
   Kt as PostgresUserStorage,
   kt as PrismaKeyStorage,
   bt as PrismaOAuthAuthorizationStorage,

package/dist/oauth/client.d.ts

@@ -37,6 +37,12 @@ export interface OAuthClientOptions extends OAuthTokenConsumerOptions {
      * Default `device_authorization`
      */
     deviceAuthorizationUrl?: string;
+    /**
+     * If set to true, users must also have a local account to log in
+     * with OIDC.
+     * Default false
+     */
+    requireLocalAccount?: boolean;
     /**
      * If using the BFF method, you can also create a user in the sesion
      * when the token is received, just like session management
@@ -51,6 +57,8 @@ export interface OAuthClientOptions extends OAuthTokenConsumerOptions {
      *
      * Matching is done in the fields given in `userMatchField` and
      * `idTokenMatchField`.
+     *
+     * Default is `idToken`, which does not require a local account
      */
     userCreationType?: "idToken" | "merge" | "embed" | "custom";
     /**

package/dist/oauth/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/oauth/client.ts"],"names":[],"mappings":"AACA,OAAO,EAA8C,eAAe,EAAK,MAAM,mBAAmB,CAAC;AAGnG,OAAO,EAEH,KAAK,yBAAyB,EAAE,MAAM,iBAAiB,CAAC;AAC5D,OAAO,KAAK,EAAE,IAAI,EAAe,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAEzC;;GAEG;AACH,MAAM,WAAW,kBAAmB,SAAQ,yBAAyB;IAEjE;;OAEG;IACH,WAAW,CAAC,EAAG,MAAM,CAAC;IAEtB;;SAEK;IACL,cAAc,CAAC,EAAG,MAAM,CAAC;IAEzB;;OAEG;IACH,SAAS,CAAC,EAAG,MAAM,CAAC;IAEpB;;OAEG;IACH,aAAa,CAAC,EAAG,MAAM,CAAC;IAExB;;OAEG;IACH,YAAY,CAAC,EAAG,MAAM,CAAC;IAEvB;;OAEG;IACH,mBAAmB,CAAC,EAAG,OAAO,GAAG,MAAM,CAAC;IAExC;;;;;OAKG;IACH,sBAAsB,CAAC,EAAG,MAAM,CAAC;IAEjC;;;;;;;;;;;;;;OAcG;IACH,gBAAgB,CAAC,EACb,SAAS,GACT,OAAO,GACP,OAAO,GACP,QAAQ,CAAC;IAEb;;;OAGG;IACH,cAAc,CAAC,EAAG,MAAM,CAAC;IAEzB;;;OAGG;IACH,iBAAiB,CAAC,EAAG,MAAM,CAAC;IAE5B;;;;;;;;;OASG;IACH,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE;QAAC,CAAC,GAAG,EAAC,MAAM,GAAE,GAAG,CAAA;KAAC,EACzC,WAAW,EAAE,WAAW,GAAC,SAAS,EAClC,cAAc,EAAG,MAAM,EACvB,iBAAiB,EAAG,MAAM,KAAK,OAAO,CAAC,IAAI,GAAC,SAAS,CAAC,CAAC;IAE3D;;;OAGG;IACH,WAAW,CAAC,EAAG,WAAW,CAAC;IAE3B;;;OAGG;IACH,aAAa,CAAC,EAAG,MAAM,GAAG,MAAM,CAAC;IAEjC;;;;;OAKG;IACH,aAAa,CAAC,EAAG,OAAO,CAAC;CAE5B;AAED;;;;;;;GAOG;AACH,qBAAa,kBAAmB,SAAQ,eAAe;IAEnD,SAAS,CAAC,sBAAsB,EAAG,MAAM,CAA0B;IACnE,SAAS,CAAC,gBAAgB,EAAI,SAAS,GACvC,OAAO,GACP,OAAO,GACP,QAAQ,CAAa;IACrB,SAAS,CAAC,cAAc,EAAG,MAAM,CAAc;IAC/C,SAAS,CAAC,iBAAiB,EAAG,MAAM,CAAS;IAC7C,SAAS,CAAC,cAAc,EAAE,CAAC,OAAO,EAAE;QAAC,CAAC,GAAG,EAAC,MAAM,GAAE,GAAG,CAAA;KAAC,EAClD,WAAW,EAAE,WAAW,GAAC,SAAS,EAClC,cAAc,EAAG,MAAM,EACvB,iBAAiB,EAAG,MAAM,KAAK,OAAO,CAAC,IAAI,GAAC,SAAS,CAAC,CAAC;IAC3D,SAAS,CAAC,WAAW,CAAC,EAAG,WAAW,CAAC;IAErC;;;;;;OAMG;gBACS,iBAAiB,EAAG,MAAM,EAAE,OAAO,EAAG,kBAAkB;IAwCpE;;;;;OAKG;IACH,SAAS,CAAC,WAAW,CAAC,MAAM,EAAG,MAAM,GAAI,MAAM;IAI/C;;;;OAIG;cACa,MAAM,CAAC,SAAS,EAAE,MAAM,GAAI,OAAO,CAAC,MAAM,CAAC;CAG9D;AAED,wBAAsB,yBAAyB,CAAC,OAAO,EAAG;IAAC,CAAC,GAAG,EAAC,MAAM,GAAE,GAAG,CAAA;CAAC,EACxE,WAAW,EAAE,WAAW,GAAC,SAAS,EAClC,cAAc,EAAG,MAAM,EACvB,iBAAiB,EAAG,MAAM,GAAI,OAAO,CAAC,IAAI,GAAC,SAAS,CAAC,CAiBxD;AAED,wBAAsB,yBAAyB,CAAC,OAAO,EAAG;IAAC,CAAC,GAAG,EAAC,MAAM,GAAE,GAAG,CAAA;CAAC,EACxE,WAAW,EAAE,WAAW,GAAC,SAAS,EAClC,cAAc,EAAG,MAAM,EACvB,iBAAiB,EAAG,MAAM,GAAI,OAAO,CAAC,IAAI,GAAC,SAAS,CAAC,CAiBxD;AAED,wBAAsB,2BAA2B,CAAC,OAAO,EAAG;IAAC,CAAC,GAAG,EAAC,MAAM,GAAE,GAAG,CAAA;CAAC,EAC1E,YAAY,EAAE,WAAW,GAAC,SAAS,EACnC,eAAe,EAAG,MAAM,EACxB,kBAAkB,EAAG,MAAM,GAAI,OAAO,CAAC,IAAI,GAAC,SAAS,CAAC,CAOzD"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/oauth/client.ts"],"names":[],"mappings":"AACA,OAAO,EAA8C,eAAe,EAAK,MAAM,mBAAmB,CAAC;AAGnG,OAAO,EAEH,KAAK,yBAAyB,EAAE,MAAM,iBAAiB,CAAC;AAC5D,OAAO,KAAK,EAAE,IAAI,EAAe,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAEzC;;GAEG;AACH,MAAM,WAAW,kBAAmB,SAAQ,yBAAyB;IAEjE;;OAEG;IACH,WAAW,CAAC,EAAG,MAAM,CAAC;IAEtB;;SAEK;IACL,cAAc,CAAC,EAAG,MAAM,CAAC;IAEzB;;OAEG;IACH,SAAS,CAAC,EAAG,MAAM,CAAC;IAEpB;;OAEG;IACH,aAAa,CAAC,EAAG,MAAM,CAAC;IAExB;;OAEG;IACH,YAAY,CAAC,EAAG,MAAM,CAAC;IAEvB;;OAEG;IACH,mBAAmB,CAAC,EAAG,OAAO,GAAG,MAAM,CAAC;IAExC;;;;;OAKG;IACH,sBAAsB,CAAC,EAAG,MAAM,CAAC;IAEjC;;;;OAIG;IACH,mBAAmB,CAAC,EAAG,OAAO,CAAA;IAE9B;;;;;;;;;;;;;;;;OAgBG;IACH,gBAAgB,CAAC,EACb,SAAS,GACT,OAAO,GACP,OAAO,GACP,QAAQ,CAAC;IAEb;;;OAGG;IACH,cAAc,CAAC,EAAG,MAAM,CAAC;IAEzB;;;OAGG;IACH,iBAAiB,CAAC,EAAG,MAAM,CAAC;IAE5B;;;;;;;;;OASG;IACH,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE;QAAC,CAAC,GAAG,EAAC,MAAM,GAAE,GAAG,CAAA;KAAC,EACzC,WAAW,EAAE,WAAW,GAAC,SAAS,EAClC,cAAc,EAAG,MAAM,EACvB,iBAAiB,EAAG,MAAM,KAAK,OAAO,CAAC,IAAI,GAAC,SAAS,CAAC,CAAC;IAE3D;;;OAGG;IACH,WAAW,CAAC,EAAG,WAAW,CAAC;IAE3B;;;OAGG;IACH,aAAa,CAAC,EAAG,MAAM,GAAG,MAAM,CAAC;IAEjC;;;;;OAKG;IACH,aAAa,CAAC,EAAG,OAAO,CAAC;CAE5B;AAED;;;;;;;GAOG;AACH,qBAAa,kBAAmB,SAAQ,eAAe;IAEnD,SAAS,CAAC,sBAAsB,EAAG,MAAM,CAA0B;IACnE,SAAS,CAAC,gBAAgB,EAAI,SAAS,GACvC,OAAO,GACP,OAAO,GACP,QAAQ,CAAa;IACrB,SAAS,CAAC,cAAc,EAAG,MAAM,CAAc;IAC/C,SAAS,CAAC,iBAAiB,EAAG,MAAM,CAAS;IAC7C,SAAS,CAAC,cAAc,EAAE,CAAC,OAAO,EAAE;QAAC,CAAC,GAAG,EAAC,MAAM,GAAE,GAAG,CAAA;KAAC,EAClD,WAAW,EAAE,WAAW,GAAC,SAAS,EAClC,cAAc,EAAG,MAAM,EACvB,iBAAiB,EAAG,MAAM,KAAK,OAAO,CAAC,IAAI,GAAC,SAAS,CAAC,CAAC;IAC3D,SAAS,CAAC,WAAW,CAAC,EAAG,WAAW,CAAC;IAErC;;;;;;OAMG;gBACS,iBAAiB,EAAG,MAAM,EAAE,OAAO,EAAG,kBAAkB;IAwCpE;;;;;OAKG;IACH,SAAS,CAAC,WAAW,CAAC,MAAM,EAAG,MAAM,GAAI,MAAM;IAI/C;;;;OAIG;cACa,MAAM,CAAC,SAAS,EAAE,MAAM,GAAI,OAAO,CAAC,MAAM,CAAC;CAG9D;AAED,wBAAsB,yBAAyB,CAAC,OAAO,EAAG;IAAC,CAAC,GAAG,EAAC,MAAM,GAAE,GAAG,CAAA;CAAC,EACxE,WAAW,EAAE,WAAW,GAAC,SAAS,EAClC,cAAc,EAAG,MAAM,EACvB,iBAAiB,EAAG,MAAM,GAAI,OAAO,CAAC,IAAI,GAAC,SAAS,CAAC,CAiBxD;AAED,wBAAsB,yBAAyB,CAAC,OAAO,EAAG;IAAC,CAAC,GAAG,EAAC,MAAM,GAAE,GAAG,CAAA;CAAC,EACxE,WAAW,EAAE,WAAW,GAAC,SAAS,EAClC,cAAc,EAAG,MAAM,EACvB,iBAAiB,EAAG,MAAM,GAAI,OAAO,CAAC,IAAI,GAAC,SAAS,CAAC,CAiBxD;AAED,wBAAsB,2BAA2B,CAAC,OAAO,EAAG;IAAC,CAAC,GAAG,EAAC,MAAM,GAAE,GAAG,CAAA;CAAC,EAC1E,YAAY,EAAE,WAAW,GAAC,SAAS,EACnC,eAAe,EAAG,MAAM,EACxB,kBAAkB,EAAG,MAAM,GAAI,OAAO,CAAC,IAAI,GAAC,SAAS,CAAC,CAOzD"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@crossauth/backend",
   "private": false,
-  "version": "0.0.34",
+  "version": "0.0.36",
   "license": "Apache-2.0",
   "type": "module",
   "main": "./dist/index.cjs",
@@ -70,7 +70,7 @@
     "sonic-boom": "^3.7.0",
     "sqlite3": "^5.1.7",
     "twilio": "^5.0.3",
-    "@crossauth/common": "^0.0.34"
+    "@crossauth/common": "^0.0.36"
   },
   "scripts": {
     "dev": "vite",