@dyrected/core 2.13.5 → 2.14.0

package/dist/server.js

@@ -4793,6 +4793,14 @@ function getSecret() {
   return new TextEncoder().encode(secret);
 }
 var DEFAULT_EXPIRY = "7d";
+var DEFAULT_SESSION_EXPIRY = DEFAULT_EXPIRY;
+function resolveSessionTokenExpiry(collection) {
+  const auth = collection.auth;
+  if (auth && typeof auth === "object" && typeof auth.tokenExpiration === "string" && auth.tokenExpiration.length > 0) {
+    return auth.tokenExpiration;
+  }
+  return DEFAULT_SESSION_EXPIRY;
+}
 async function signCollectionToken(payload, expiresIn = DEFAULT_EXPIRY) {
   return new SignJWT({ ...payload }).setProtectedHeader({ alg: "HS256" }).setIssuedAt().setExpirationTime(expiresIn).sign(getSecret());
 }
@@ -9644,6 +9652,7 @@ var AuthController = class {
       userId: user.id,
       email: user.email,
       collection: this.collection.slug,
+      expiresIn: resolveSessionTokenExpiry(this.collection),
       ip: c.get("clientIp"),
       authSource: "local"
     });
@@ -9735,6 +9744,7 @@ var AuthController = class {
       userId: user.id,
       email: user.email,
       collection: this.collection.slug,
+      expiresIn: resolveSessionTokenExpiry(this.collection),
       ip: c.get("clientIp"),
       authSource: "local"
     });
@@ -9825,12 +9835,15 @@ var AuthController = class {
     }
     const tokenPayload = c.get("authTokenPayload");
     if (tokenPayload?.sid) {
-      const token2 = await signCollectionToken({
-        sub: requestUser.sub,
-        email: requestUser.email,
-        collection: this.collection.slug,
-        sid: tokenPayload.sid
-      });
+      const token2 = await signCollectionToken(
+        {
+          sub: requestUser.sub,
+          email: requestUser.email,
+          collection: this.collection.slug,
+          sid: tokenPayload.sid
+        },
+        resolveSessionTokenExpiry(this.collection)
+      );
       return c.json({ token: token2 });
     }
     const token = await issueAuthSessionToken({
@@ -10092,6 +10105,7 @@ var AuthController = class {
       userId: user.id,
       email: inviteeEmail,
       collection: this.collection.slug,
+      expiresIn: resolveSessionTokenExpiry(this.collection),
       ip: c.get("clientIp"),
       authSource: "local"
     });
@@ -10349,6 +10363,7 @@ var AdminAuthController = class {
       userId: user.id,
       email: user.email,
       collection: adminCollection.slug,
+      expiresIn: resolveSessionTokenExpiry(adminCollection),
       providerId: provider.id,
       authSource: "external",
       ip: c.get("clientIp")
@@ -14638,7 +14653,7 @@ function normalizeConfig(config) {
             name: "roles",
             type: "select",
             label: "Roles",
-            defaultValue: [],
+            defaultValue: "viewer",
             options: [
               { value: "admin", label: "Admin" },
               { value: "editor", label: "Editor" },
@@ -15088,8 +15103,12 @@ init_embedding_service();
 export {
   AIAgent,
   AIController,
+  AUTH_SESSIONS_COLLECTION,
   AuthController,
   CollectionController,
+  DEFAULT_LOCK_TIME_MS,
+  DEFAULT_MAX_LOGIN_ATTEMPTS,
+  DEFAULT_SESSION_EXPIRY,
   EmbeddingService,
   GlobalController,
   InMemoryRateLimitStore,
@@ -15100,7 +15119,11 @@ export {
   attachRequestMetrics,
   bindObservabilityRuntime,
   buildDyrectedSystemPrompt,
+  buildInviteEmail,
+  buildPasswordChangedEmail,
   buildRequestLogger,
+  buildResetPasswordEmail,
+  buildWelcomeEmail,
   captureRequestBody,
   chunkText,
   cosineSimilarity,
@@ -15108,24 +15131,39 @@ export {
   createDyrectedApp,
   createObservabilityRuntime,
   createRequestSpan,
+  decodeCollectionToken,
   endRequestSpan,
   estimateTokens,
   extractTextFromDoc,
   formatAIErrorMessage,
   getAIModel,
+  getAuthSession,
   getConfigLogger,
   getEmbeddingModel,
+  getLockedUntilMs,
   getObservabilityRuntime,
   getRequestLogger,
   hashContent,
+  hashPassword,
+  isAuthSessionActive,
+  issueAuthSessionToken,
   normalizeFieldValue,
   redactBody,
   redactHeaders,
   registerRoutes,
   renderPrometheusMetrics,
+  resolveAuthLockoutConfig,
   resolveObservabilityConfig,
+  resolveSessionTokenExpiry,
+  revokeAllAuthSessions,
+  revokeAuthSession,
+  sendEmail,
   serializeDetailForApi,
   serializeViewForApi,
   shouldSampleRequest,
-  validatePayloadAgainstFields
+  signCollectionToken,
+  touchAuthSession,
+  validatePayloadAgainstFields,
+  verifyCollectionToken,
+  verifyPassword
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dyrected/core",
-  "version": "2.13.5",
+  "version": "2.14.0",
   "type": "module",
   "main": "./dist/index.js",
   "module": "./dist/index.js",