@dax-crafta/auth 2.1.2 → 2.1.4

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dax-crafta/auth",
-  "version": "2.1.2",
+  "version": "2.1.4",
   "description": "A powerful, flexible, and secure authentication plugin for the Crafta framework. Supports JWT, social login, 2FA, RBAC, audit logging, and enterprise-grade security features.",
   "main": "src/index.js",
   "types": "src/index.d.ts",

package/src/models/user.js

@@ -89,10 +89,10 @@ userSchema.methods.comparePassword = async function (candidate) {
   return bcrypt.compare(candidate, this.password);
 };
 
-userSchema.methods.recordPasswordHistory = async function () {
+userSchema.methods.recordPasswordHistory = async function (previousPasswordHash) {
   this.passwordHistory = this.passwordHistory || [];
   this.passwordHistory.push({
-    hash: this.password,
+    hash: previousPasswordHash || this.password,
     changedAt: new Date()
   });
 

package/src/services/auth.service.js

@@ -204,9 +204,10 @@ class AuthService {
       throw new ApiError('Cannot reuse previous passwords', 400);
     }
 
+    const previousPasswordHash = user.password;
     user.password = newPassword;
 
-    await user.recordPasswordHistory(); // 🔥 add
+    await user.recordPasswordHistory(previousPasswordHash);
     await user.revokeAllRefreshTokens(); // session invalidate
     user.passwordResetToken = undefined;
     user.passwordResetExpires = undefined;
@@ -341,6 +342,43 @@ class AuthService {
     return true;
   }
 
+  async handleSocialLogin(provider, profile) {
+    if (!profile) {
+      throw new ApiError('Social profile is required', 400);
+    }
+
+    const primaryEmail = profile.emails?.[0]?.value;
+    if (!primaryEmail) {
+      throw new ApiError('Social provider did not return an email', 400);
+    }
+
+    let user = await User.findOne({ email: primaryEmail });
+
+    if (!user) {
+      user = new User({
+        email: primaryEmail,
+        password: this.generateSecureToken(),
+        isVerified: true,
+        customFields: {
+          socialProvider: provider,
+          socialId: profile.id,
+          name: profile.displayName
+        }
+      });
+      await user.save();
+    } else if (profile.displayName) {
+      user.customFields = {
+        ...(user.customFields || {}),
+        socialProvider: provider,
+        socialId: profile.id,
+        name: profile.displayName
+      };
+      await user.save();
+    }
+
+    return user;
+  }
+
 
 
   /* ---------------------------------------------

package/src/utils/email.js

@@ -57,7 +57,8 @@ class EmailService {
   }
 
   async sendVerificationEmail(user, token) {
-    const url = `${this.config.baseUrl}/verify-email?token=${token}`;
+    const verifyPath = this.config.routes?.verify || '/verify';
+    const url = `${this.config.baseUrl}${verifyPath}?token=${token}`;
 
     const html = this.loadTemplate("email-verification", {
       name: user.name || user.email,
@@ -73,7 +74,8 @@ class EmailService {
   }
 
   async sendPasswordResetEmail(user, token) {
-    const url = `${this.config.baseUrl}/reset-password?token=${token}`;
+    const resetPath = this.config.routes?.resetPassword || '/reset-password';
+    const url = `${this.config.baseUrl}${resetPath}?token=${token}`;
 
     const html = this.loadTemplate("password-reset", {
       name: user.name || user.email,