@datrix/api 0.1.0 → 0.1.2

package/dist/index.mjs

@@ -1213,7 +1213,91 @@ function createAuthHandlers(config) {
       );
     }
   }
-  return { register, login, logout, me };
+  async function forgotPassword(request) {
+    try {
+      const onForgotPassword = authConfig.passwordReset?.onForgotPassword;
+      if (!onForgotPassword) {
+        throw handlerError.permissionDenied("Password reset is not configured");
+      }
+      const body = await request.json();
+      const { email } = body;
+      if (!email || typeof email !== "string") {
+        throw handlerError.invalidBody("Email is required");
+      }
+      const authRecord = await datrix.raw.findOne(
+        authSchemaName,
+        { email },
+        {
+          populate: true,
+          select: ["email", "role", "resetToken", "resetTokenExpiry"]
+        }
+      );
+      if (!authRecord) {
+        return jsonResponse({ data: { success: true } });
+      }
+      const tokenBytes = new Uint8Array(32);
+      crypto.getRandomValues(tokenBytes);
+      const token = Array.from(tokenBytes).map((b) => b.toString(16).padStart(2, "0")).join("");
+      const expirySeconds = authConfig.passwordReset?.tokenExpirySeconds ?? DEFAULT_API_AUTH_CONFIG3.passwordReset.tokenExpirySeconds;
+      const expiry = new Date(Date.now() + expirySeconds * 1e3);
+      await datrix.raw.update(authSchemaName, authRecord.id, {
+        resetToken: token,
+        resetTokenExpiry: expiry
+      });
+      await onForgotPassword(authRecord, token);
+      return jsonResponse({ data: { success: true } });
+    } catch (error) {
+      if (error instanceof DatrixError3) {
+        return datrixErrorResponse(error);
+      }
+      const message = error instanceof Error ? error.message : "Internal server error";
+      return datrixErrorResponse(
+        handlerError.internalError(
+          message,
+          error instanceof Error ? error : void 0
+        )
+      );
+    }
+  }
+  async function resetPassword(request) {
+    try {
+      const body = await request.json();
+      const { token, password } = body;
+      if (!token || typeof token !== "string") {
+        throw handlerError.invalidBody("Token is required");
+      }
+      if (!password || typeof password !== "string") {
+        throw handlerError.invalidBody("Password is required");
+      }
+      const authRecord = await datrix.raw.findOne(
+        authSchemaName,
+        { resetToken: token }
+      );
+      if (!authRecord || !authRecord.resetTokenExpiry || new Date(authRecord.resetTokenExpiry) < /* @__PURE__ */ new Date()) {
+        throw handlerError.invalidBody("Invalid or expired reset token");
+      }
+      const { hash, salt } = await authManager.hashPassword(password);
+      await datrix.raw.update(authSchemaName, authRecord.id, {
+        password: hash,
+        passwordSalt: salt,
+        resetToken: null,
+        resetTokenExpiry: null
+      });
+      return jsonResponse({ data: { success: true } });
+    } catch (error) {
+      if (error instanceof DatrixError3) {
+        return datrixErrorResponse(error);
+      }
+      const message = error instanceof Error ? error.message : "Internal server error";
+      return datrixErrorResponse(
+        handlerError.internalError(
+          message,
+          error instanceof Error ? error : void 0
+        )
+      );
+    }
+  }
+  return { register, login, logout, me, forgotPassword, resetPassword };
 }
 function createUnifiedAuthHandler(config, apiPrefix = "/api") {
   const handlers = createAuthHandlers(config);
@@ -1222,7 +1306,9 @@ function createUnifiedAuthHandler(config, apiPrefix = "/api") {
     register: authConfig.endpoints?.register ?? DEFAULT_API_AUTH_CONFIG3.endpoints.register,
     login: authConfig.endpoints?.login ?? DEFAULT_API_AUTH_CONFIG3.endpoints.login,
     logout: authConfig.endpoints?.logout ?? DEFAULT_API_AUTH_CONFIG3.endpoints.logout,
-    me: authConfig.endpoints?.me ?? DEFAULT_API_AUTH_CONFIG3.endpoints.me
+    me: authConfig.endpoints?.me ?? DEFAULT_API_AUTH_CONFIG3.endpoints.me,
+    forgotPassword: authConfig.endpoints?.forgotPassword ?? DEFAULT_API_AUTH_CONFIG3.endpoints.forgotPassword,
+    resetPassword: authConfig.endpoints?.resetPassword ?? DEFAULT_API_AUTH_CONFIG3.endpoints.resetPassword
   };
   return async function authHandler(request) {
     const url = new URL(request.url);
@@ -1240,6 +1326,12 @@ function createUnifiedAuthHandler(config, apiPrefix = "/api") {
     if (path === endpoints.me && method === "GET") {
       return handlers.me(request);
     }
+    if (path === endpoints.forgotPassword && method === "POST") {
+      return handlers.forgotPassword(request);
+    }
+    if (path === endpoints.resetPassword && method === "POST") {
+      return handlers.resetPassword(request);
+    }
     return datrixErrorResponse(
       handlerError.recordNotFound("Auth Route", url.pathname)
     );
@@ -1396,7 +1488,10 @@ import {
   ParserError,
   buildErrorLocation
 } from "@datrix/core";
-import { MAX_WHERE_VALUE_LENGTH, MAX_LOGICAL_NESTING_DEPTH } from "@datrix/core";
+import {
+  MAX_WHERE_VALUE_LENGTH,
+  MAX_LOGICAL_NESTING_DEPTH
+} from "@datrix/core";
 var whereError = {
   invalidOperator(operator, path, context) {
     throw new ParserError(`Invalid WHERE operator: ${operator}`, {