@devmoods/express-extras 0.51.0 → 0.52.0

package/dist/auth/passwordless.d.ts

@@ -1,6 +1,6 @@
 import { type AnyUser, type AuthProvider } from './types.js';
 export interface PasswordlessAuthProviderOptions<UserModel = AnyUser> {
-    getUserByEmail(email: string): Promise<UserModel>;
+    getUserByEmail(email: string): Promise<UserModel | null>;
     onLoginRequest(user: UserModel, temporaryToken: string): Promise<void>;
 }
 export declare function PasswordlessAuthProvider<UserModel extends AnyUser>(options: PasswordlessAuthProviderOptions<UserModel>): AuthProvider<UserModel>;

package/dist/auth/passwordless.js

@@ -3,9 +3,21 @@ import {} from './types.js';
 import { Unauthorized } from '../errors.js';
 import { getLogger } from '../logger.js';
 import { route } from '../middleware.js';
+import { DoesNotExistError } from '../postgres.js';
 import { validateBody } from '../validate.js';
 const logger = getLogger('auth');
 export function PasswordlessAuthProvider(options) {
+    const getUserOrNull = async (email) => {
+        try {
+            return await options.getUserByEmail(email);
+        }
+        catch (error) {
+            if (error instanceof DoesNotExistError) {
+                return null;
+            }
+            throw error;
+        }
+    };
     return {
         setupRoutes(router, context) {
             router.post('/passwordless/login/:token', route(async (req, res) => {
@@ -16,10 +28,11 @@ export function PasswordlessAuthProvider(options) {
                     await context.verifyTemporaryToken(temporaryToken, user);
                 }
                 catch {
+                    logger.warn('passwordless: invalid temp token', { uid: user.id });
                     throw Unauthorized('Invalid token');
                 }
                 const accessToken = await context.login(req, res, user);
-                logger.info('passwordless login');
+                logger.info('passwordless login', { uid: user.id });
                 if (req.accepts('html')) {
                     return res.redirect('/');
                 }
@@ -36,7 +49,11 @@ export function PasswordlessAuthProvider(options) {
                 required: ['email'],
             }), route(async (req) => {
                 const { email } = req.body;
-                const user = await options.getUserByEmail(email);
+                const user = await getUserOrNull(email);
+                if (!user) {
+                    logger.warn('passwordless: user not found', { email });
+                    return 202;
+                }
                 const token = await context.createTemporaryToken(user);
                 await options.onLoginRequest(user, token);
                 logger.info('passwordless login requested', { email });

package/dist/cookie-consent.d.ts

@@ -0,0 +1,3 @@
+export declare function cookieConsent({ onConsent, }: {
+    onConsent: (consents: string[]) => Promise<void> | void;
+}): import("express-serve-static-core").Router;

package/dist/cookie-consent.js

@@ -0,0 +1,33 @@
+import { Router } from 'express';
+import { getLogger } from './logger.js';
+import { route } from './middleware.js';
+import { validateBody } from './validate.js';
+const logger = getLogger();
+export function cookieConsent({ onConsent, }) {
+    const router = Router();
+    router.get('/', route(() => {
+        return {
+            consents: [],
+        };
+    }));
+    router.post('/', validateBody({
+        type: 'object',
+        properties: {
+            consents: {
+                type: 'array',
+                items: { type: 'string' },
+            },
+        },
+    }), route(async (req, res) => {
+        const { consents } = req.body;
+        res.cookie('cookie_consent', consents.join(',') || '1', {
+            expires: new Date(Date.now() + 365 * 24 * 60 * 60 * 1000),
+            sameSite: 'strict',
+            secure: process.env.NODE_ENV === 'production',
+        });
+        await onConsent?.(consents);
+        logger.info('cookie consent');
+        return { consents };
+    }));
+    return router;
+}

package/dist/index.d.ts

@@ -1,5 +1,6 @@
 export * from './auth.js';
 export * from './cache.js';
+export * from './cookie-consent.js';
 export * from './channels.js';
 export * from './cli.js';
 export * from './config.js';

package/dist/index.js

@@ -1,6 +1,7 @@
 /* c8 ignore next 100 */
 export * from './auth.js';
 export * from './cache.js';
+export * from './cookie-consent.js';
 export * from './channels.js';
 export * from './cli.js';
 export * from './config.js';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@devmoods/express-extras",
-  "version": "0.51.0",
+  "version": "0.52.0",
   "description": "Kubernetes-ready utilities for rapid Node.js application development",
   "type": "module",
   "main": "./dist/index.js",
@@ -44,15 +44,15 @@
   ],
   "license": "ISC",
   "devDependencies": {
-    "arktype": "^2.0.2",
     "@devmoods/eslint-config": "^2.6.0",
     "@types/koa-compose": "^3.2.8",
-    "@types/node": "22.10.10",
+    "@types/node": "22.13.0",
     "@types/supertest": "^6.0.2",
     "@vitejs/plugin-react": "^4.3.4",
     "@vitest/coverage-v8": "^3.0.4",
+    "arktype": "^2.0.4",
     "cookiejar": "^2.1.4",
-    "eslint": "^9.18.0",
+    "eslint": "^9.19.0",
     "faktory-worker": "^4.6.0",
     "prettier": "3.4.2",
     "supertest": "7.0.0",
@@ -65,8 +65,8 @@
   },
   "dependencies": {
     "@devmoods/fetch": "^4.0.1",
-    "@sentry/node": "^8.51.0",
-    "@sentry/profiling-node": "^8.51.0",
+    "@sentry/node": "^8.53.0",
+    "@sentry/profiling-node": "^8.53.0",
     "@types/bcrypt": "^5.0.2",
     "@types/cookie-parser": "^1.4.8",
     "@types/express": "^5.0.0",
@@ -90,7 +90,7 @@
     "pg": "^8.13.1",
     "redis": "^4.7.0",
     "sonda": "^0.7.1",
-    "sql-formatter": "^15.4.9",
+    "sql-formatter": "^15.4.10",
     "uuid": "^11.0.5"
   },
   "prettier": {
@@ -98,9 +98,9 @@
   },
   "peerDependencies": {
     "@vitejs/plugin-react": ">=4.3.4",
+    "arktype": ">=2.0.0",
     "faktory-worker": ">=4.5.1",
-    "vite": ">=6.0.5",
-    "arktype": ">=2.0.2"
+    "vite": ">=6.0.5"
   },
   "engines": {
     "node": ">=20 <24"