@dudousxd/nestjs-agent-dashboard 0.9.0 → 0.9.1

package/README.md

@@ -109,6 +109,8 @@ AgentDashboardModule.forRoot({
 
 Open `/ai-gateway`, enter the credentials, and you're in. Bad credentials get a **uniform** redirect back to the login page — the response is identical for an unknown user and a wrong password, so the endpoint never reveals which one was wrong. `POST <basePath>/auth/logout` clears the cookie.
 
+Only `username` is required (non-empty) — the password is passed through to `login` verbatim, including empty, so a host that authenticates by username/email alone (password deliberately ignored) can use the built-in screen unmodified; the hook owns whether an empty password is accepted or rejected.
+
 Need the `login` hook to reach a DB (e.g. an `EntityManager`)? Use `forRootAsync` — `basePath`/`apiBasePath`/`guards` stay static (needed at module-build time for routing), only the auth config is resolved through DI:
 
 ```ts

package/dist/server/index.cjs

@@ -1295,9 +1295,13 @@ function _ts_param4(paramIndex, decorator) {
 }
 __name(_ts_param4, "_ts_param");
 function isNonEmptyString(value) {
-  return typeof value === "string" && value !== "";
+  return typeof value === "string" && value.trim() !== "";
 }
 __name(isNonEmptyString, "isNonEmptyString");
+function isString(value) {
+  return typeof value === "string";
+}
+__name(isString, "isString");
 var AgentDashboardAuthController = class _AgentDashboardAuthController {
   static {
     __name(this, "AgentDashboardAuthController");
@@ -1330,11 +1334,11 @@ var AgentDashboardAuthController = class _AgentDashboardAuthController {
     const returnTo = sanitizeReturnTo(this.basePath, body?.returnTo);
     const username = body?.username;
     const password = body?.password;
-    if (!isNonEmptyString(username) || !isNonEmptyString(password)) {
+    if (!isNonEmptyString(username) || password !== void 0 && !isString(password)) {
       this.redirectToLoginError(res, returnTo);
       return "";
     }
-    const user = await this.runLoginHook(auth, username, password);
+    const user = await this.runLoginHook(auth, username.trim(), isString(password) ? password : "");
     if (!user) {
       this.redirectToLoginError(res, returnTo);
       return "";