@dax-crafta/auth 2.1.1 → 2.1.3

package/README.md

@@ -53,12 +53,34 @@ const app = crafta();
 auth({
   strategy: 'jwt',
   fields: ['email', 'password'],
+  // Works even without SMTP in local dev.
+  // Email flows auto-disable if SMTP is not configured.
   emailVerification: true
 })(app);
 
 app.listen(3000);
 ```
 
+## Feature Toggles (Simple JSON)
+
+Disable any feature by setting it to `false`:
+
+```javascript
+auth({
+  features: {
+    emailVerification: false,
+    loginAlerts: false,
+    securityAttempts: false,
+    rateLimit: true,
+    auditLogs: true,
+    twoFactor: true,
+    csrf: false
+  }
+})(app);
+```
+
+Example: if `securityAttempts: false`, login-attempt lock handling and lock emails are disabled.
+
 ## Configuration
 
 ```javascript

package/dev-testing.md

@@ -0,0 +1,48 @@
+# Adaptive Testing & Logging (Developer Guide)
+
+This is a lightweight, developer-friendly testing + logging skeleton you can extend.
+
+## Files (shipped with `src/` for publish)
+- `dev-tools/logger.js` — colored terminal logging (`SUCCESS`, `WARN`, `FAIL`, `SKIP`, `INFO`).
+- `dev-tools/feature-config.js` — sample feature toggles + auth config.
+- `dev-tools/tests.js` — mock feature tests (JWT, Email OTP, OAuth, 2FA) tagged by feature key.
+- `dev-tools/run-tests.js` — adaptive runner that executes only enabled-feature tests.
+- `dev-tools/example-app.js` — minimal Express wiring showing startup logs and honoring feature flags.
+
+## Library exports (for consumers)
+- `runAdaptiveTests(config, featureFlags?, opts?)`
+- `inferFeatureFlags(config)`
+- `testCatalog` (for extension)
+
+## Run adaptive tests
+```bash
+node dev-tools/run-tests.js
+```
+
+Sample output
+```
+[INFO] Adaptive test runner starting…
+[INFO] JWT secret present, token signing would proceed
+[SUCCESS] JWT issues token
+[INFO] SMTP host: smtp.example.com
+[SUCCESS] Email OTP sends message
+[SKIP] OAuth login flow - feature disabled
+[INFO] 2FA code verification simulated
+[SUCCESS] 2FA TOTP validation
+[SUCCESS] Adaptive tests complete.
+```
+
+## How it works
+- Feature flags live in `feature-config.js` (`features.jwt`, `features.emailOtp`, `features.oauth`, `features.twofa`).
+- The runner reads the flags and only executes tests whose `feature` matches an enabled flag.
+- Config changes require no test edits; toggling a flag updates which tests run.
+- Add new features by adding a flag in `feature-config.js` and a test entry in `tests.js`.
+
+## Integrating with the auth library
+- `dev-tools/example-app.js` shows how to load your library (`auth(cfg)(app)`) and print startup messages reflecting enabled features.
+- Wire real tests by replacing the mock test bodies in `tests.js` with actual calls to your services/routes.
+
+## Extending
+- Add more log helpers in `logger.js` if you want structured output.
+- Add more feature keys (e.g., `emailVerification`, `refreshTokens`) and corresponding tests.
+- Point `feature-config.js` at your real project config or load from env for true parity.

package/package.json

@@ -1,62 +1,65 @@
-{
-  "name": "@dax-crafta/auth",
-  "version": "2.1.1",
-  "description": "A powerful, flexible, and secure authentication plugin for the Crafta framework. Supports JWT, social login, 2FA, RBAC, audit logging, and enterprise-grade security features.",
-  "main": "src/index.js",
-  "types": "src/index.d.ts",
-  "private": false,
-  "dependencies": {
-    "bcryptjs": "^2.4.3",
-    "cookie-parser": "^1.4.7",
-    "csurf": "^1.11.0",
-    "express-brute": "^1.0.1",
-    "express-rate-limit": "^7.1.4",
-    "express-validator": "^7.3.0",
-    "google-auth-library": "^9.2.0",
-    "helmet": "^8.1.0",
-    "jsonwebtoken": "^9.0.2",
-    "mongoose": "^7.6.3",
-    "nodemailer": "^6.9.7",
-    "otplib": "^12.0.1",
-    "passport": "^0.6.0",
-    "passport-facebook": "^3.0.0",
-    "passport-github2": "^0.1.12",
-    "passport-google-oauth20": "^2.0.0",
-    "qrcode": "^1.5.3",
-    "speakeasy": "^2.0.0",
-    "validator": "^13.11.0",
-    "winston": "^3.11.0",
-    "zxcvbn": "^4.4.2"
-  },
-  "peerDependencies": {
-    "crafta": "^1.1.4"
-  },
-  "keywords": [
-    "authentication",
-    "auth",
-    "jwt",
-    "oauth",
-    "social-login",
-    "role-based-access-control",
-    "rbac",
-    "2fa",
-    "mfa",
-    "audit-logging",
-    "express",
-    "nodejs",
-    "crafta",
-    "secure-authentication",
-    "enterprise-security",
-    "user-management"
-  ],
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/daxp472/crafta.git"
-  },
-  "bugs": {
-    "url": "https://github.com/daxp472/crafta/issues"
-  },
-  "homepage": "https://github.com/daxp472/crafta#readme",
-  "license": "MIT",
-  "author": "Dax Patel"
-}
+{
+  "name": "@dax-crafta/auth",
+  "version": "2.1.3",
+  "description": "A powerful, flexible, and secure authentication plugin for the Crafta framework. Supports JWT, social login, 2FA, RBAC, audit logging, and enterprise-grade security features.",
+  "main": "src/index.js",
+  "types": "src/index.d.ts",
+  "private": false,
+  "scripts": {
+    "test": "node dev-tools/smoke-tests/run-smoke-tests.js"
+  },
+  "dependencies": {
+    "bcryptjs": "^2.4.3",
+    "cookie-parser": "^1.4.7",
+    "csurf": "^1.11.0",
+    "express-brute": "^1.0.1",
+    "express-rate-limit": "^7.1.4",
+    "express-validator": "^7.3.0",
+    "google-auth-library": "^9.2.0",
+    "helmet": "^8.1.0",
+    "jsonwebtoken": "^9.0.2",
+    "mongoose": "^7.6.3",
+    "nodemailer": "^6.9.7",
+    "otplib": "^12.0.1",
+    "passport": "^0.6.0",
+    "passport-facebook": "^3.0.0",
+    "passport-github2": "^0.1.12",
+    "passport-google-oauth20": "^2.0.0",
+    "qrcode": "^1.5.3",
+    "speakeasy": "^2.0.0",
+    "validator": "^13.11.0",
+    "winston": "^3.11.0",
+    "zxcvbn": "^4.4.2"
+  },
+  "peerDependencies": {
+    "crafta": "^1.1.4"
+  },
+  "keywords": [
+    "authentication",
+    "auth",
+    "jwt",
+    "oauth",
+    "social-login",
+    "role-based-access-control",
+    "rbac",
+    "2fa",
+    "mfa",
+    "audit-logging",
+    "express",
+    "nodejs",
+    "crafta",
+    "secure-authentication",
+    "enterprise-security",
+    "user-management"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/daxp472/crafta.git"
+  },
+  "bugs": {
+    "url": "https://github.com/daxp472/crafta/issues"
+  },
+  "homepage": "https://github.com/daxp472/crafta#readme",
+  "license": "MIT",
+  "author": "Dax Patel"
+}

package/src/index.d.ts

@@ -1,12 +1,107 @@
-export function register(email: string, password: string): Promise<any>;
-export function login(email: string, password: string): Promise<any>;
-export function verifyToken(token: string): boolean;
+export interface CraftaAuthRoutes {
+  register?: string;
+  login?: string;
+  verify?: string;
+  forgotPassword?: string;
+  resetPassword?: string;
+  refreshToken?: string;
+  profile?: string;
+  twoFactor?: string;
+  roles?: string;
+  permissions?: string;
+}
+
+export interface PasswordPolicyConfig {
+  minLength?: number;
+  requireUppercase?: boolean;
+  requireLowercase?: boolean;
+  requireNumbers?: boolean;
+  requireSpecialChars?: boolean;
+  expiryDays?: number;
+  minStrength?: number;
+}
+
+export interface SmtpConfig {
+  host: string;
+  port: number;
+  auth: {
+    user: string;
+    pass: string;
+  };
+  from: string;
+}
+
+export interface SocialGoogleConfig {
+  clientID: string;
+  clientSecret: string;
+  callbackURL: string;
+}
+
+export interface SocialConfig {
+  google?: SocialGoogleConfig | null;
+  facebook?: any;
+  github?: any;
+}
+
+export interface EnvConfig {
+  JWT_SECRET: string;
+  [key: string]: any;
+}
+
+export interface AuthConfig {
+  strategy?: 'jwt';
+  fields?: string[];
+  routes?: CraftaAuthRoutes;
+  mongoUrl?: string;
+  maxLoginAttempts?: number;
+  emailVerification?: boolean;
+  loginAlerts?: boolean;
+  passwordPolicy?: PasswordPolicyConfig;
+  smtp?: SmtpConfig | null;
+  social?: SocialConfig;
+  env?: EnvConfig;
+  accessTokenExpiry?: string;
+  refreshTokenDays?: number;
+  enableCSRF?: boolean;
+  limits?: {
+    loginMax?: number;
+    twoFAMax?: number;
+    forgotPasswordMax?: number;
+    refreshMax?: number;
+  };
+  baseUrl?: string;
+  emailTemplateDir?: string;
+  features?: AuthFeaturesConfig;
+  logging?: boolean;
+}
+
+export interface AuthFeaturesConfig {
+  emailVerification?: boolean;
+  loginAlerts?: boolean;
+  securityAttempts?: boolean;
+  rateLimit?: boolean;
+  auditLogs?: boolean;
+  twoFactor?: boolean;
+  csrf?: boolean;
+}
+
+export class ApiError extends Error {
+  status: number;
+  constructor(message: string, status?: number);
+}
+
+export function auth(config?: AuthConfig): (app: any) => void;
 
-export interface User {
-  email: string;
-  password?: string;
-  role?: string;
+export interface AdaptiveTestCase {
+  name: string;
+  feature: string;
+  run: (cfg: AuthConfig, log: any) => Promise<void>;
 }
 
-export function getUser(id: string): Promise<User>;
-export function logout(): Promise<void>;
+export function inferFeatureFlags(authConfig?: AuthConfig): Record<string, boolean>;
+export function runAdaptiveTests(
+  authConfig?: AuthConfig,
+  featureFlags?: Record<string, boolean>,
+  opts?: { logging?: boolean }
+): Promise<boolean>;
+export const testCatalog: AdaptiveTestCase[];