@eaccess/auth 0.1.18 → 0.1.19

package/dist/index.cjs

@@ -1833,6 +1833,7 @@ var AuthManager = class {
     this.req.session.auth.status = account.status;
     this.req.session.auth.rolemask = account.rolemask;
     this.req.session.auth.verified = account.verified;
+    this.req.session.auth.hasPassword = account.password !== null;
     this.req.session.auth.lastResync = /* @__PURE__ */ new Date();
   }
   async processRememberDirective() {
@@ -1886,6 +1887,7 @@ var AuthManager = class {
           lastRememberCheck: /* @__PURE__ */ new Date(),
           forceLogout: account.force_logout,
           verified: account.verified,
+          hasPassword: account.password !== null,
           shouldForceLogout: false
         };
         this.req.session.auth = session;
@@ -1972,6 +1974,7 @@ var AuthManager = class {
             lastRememberCheck: /* @__PURE__ */ new Date(),
             forceLogout: 0,
             verified: false,
+            hasPassword: false,
             awaitingTwoFactor: {
               accountId: account.id,
               expiresAt,
@@ -2110,6 +2113,14 @@ var AuthManager = class {
   getVerified() {
     return this.req.session?.auth?.verified ?? null;
   }
+  /**
+   * Check if the current user has a password set.
+   * OAuth-only users will return false.
+   * @returns true if user has a password, false if OAuth-only, null if not logged in
+   */
+  hasPassword() {
+    return this.req.session?.auth?.hasPassword ?? null;
+  }
   /**
    * Get human-readable role names for the current user or a specific rolemask.
    * @param rolemask - Optional specific rolemask to check. If omitted, uses current user's roles
@@ -2258,6 +2269,7 @@ var AuthManager = class {
           lastRememberCheck: /* @__PURE__ */ new Date(),
           forceLogout: 0,
           verified: false,
+          hasPassword: false,
           awaitingTwoFactor: {
             accountId: account.id,
             expiresAt,