@eaccess/auth 0.1.17 → 0.1.19

package/dist/index.cjs

@@ -723,7 +723,7 @@ var BaseOAuthProvider = class {
     if (existingProvider) {
       const account2 = await queries.findAccountById(existingProvider.account_id);
       if (account2) {
-        await this.authManager.onLoginSuccessful(account2, false);
+        await this.authManager.onLoginSuccessful(account2, true);
         return { isNewUser: false };
       }
     }
@@ -758,7 +758,7 @@ var BaseOAuthProvider = class {
       providerName: userData.name || null,
       providerAvatar: userData.avatar || null
     });
-    await this.authManager.onLoginSuccessful(account, false);
+    await this.authManager.onLoginSuccessful(account, true);
     return { isNewUser: true };
   }
   async exchangeCodeForToken(code, tokenUrl) {
@@ -1833,6 +1833,7 @@ var AuthManager = class {
     this.req.session.auth.status = account.status;
     this.req.session.auth.rolemask = account.rolemask;
     this.req.session.auth.verified = account.verified;
+    this.req.session.auth.hasPassword = account.password !== null;
     this.req.session.auth.lastResync = /* @__PURE__ */ new Date();
   }
   async processRememberDirective() {
@@ -1886,6 +1887,7 @@ var AuthManager = class {
           lastRememberCheck: /* @__PURE__ */ new Date(),
           forceLogout: account.force_logout,
           verified: account.verified,
+          hasPassword: account.password !== null,
           shouldForceLogout: false
         };
         this.req.session.auth = session;
@@ -1972,6 +1974,7 @@ var AuthManager = class {
             lastRememberCheck: /* @__PURE__ */ new Date(),
             forceLogout: 0,
             verified: false,
+            hasPassword: false,
             awaitingTwoFactor: {
               accountId: account.id,
               expiresAt,
@@ -2110,6 +2113,14 @@ var AuthManager = class {
   getVerified() {
     return this.req.session?.auth?.verified ?? null;
   }
+  /**
+   * Check if the current user has a password set.
+   * OAuth-only users will return false.
+   * @returns true if user has a password, false if OAuth-only, null if not logged in
+   */
+  hasPassword() {
+    return this.req.session?.auth?.hasPassword ?? null;
+  }
   /**
    * Get human-readable role names for the current user or a specific rolemask.
    * @param rolemask - Optional specific rolemask to check. If omitted, uses current user's roles
@@ -2258,6 +2269,7 @@ var AuthManager = class {
           lastRememberCheck: /* @__PURE__ */ new Date(),
           forceLogout: 0,
           verified: false,
+          hasPassword: false,
           awaitingTwoFactor: {
             accountId: account.id,
             expiresAt,