@effect-auth/core 0.1.0-alpha.3 → 0.1.0-alpha.4

package/dist/index.js

@@ -1,4 +1,5 @@
 export const packageName = "@effect-auth/core";
+export * from "./ApiKey.js";
 export * from "./AuditLog.js";
 export * from "./AuthConfig.js";
 export * from "./AuthFlow.js";
@@ -8,11 +9,22 @@ export * from "./Crypto.js";
 export * from "./EmailOtp.js";
 export * from "./EmailVerification.js";
 export * from "./Identifiers.js";
+export * from "./Jwt.js";
+export * from "./LoginApproval.js";
+export * from "./LoginNotification.js";
+export * from "./LoginRisk.js";
 export * from "./Mailer.js";
+export * from "./MagicLink.js";
 export * from "./Password.js";
+export * from "./Passkey.js";
 export * from "./Policy.js";
 export * from "./Privacy.js";
+export * from "./RecoveryCode.js";
+export * from "./RefreshToken.js";
 export * from "./Sessions.js";
 export * from "./Storage.js";
+export * from "./StepUp.js";
+export * from "./Totp.js";
+export * from "./TrustedDevice.js";
 export * from "./WaitUntil.js";
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,WAAW,GAAG,mBAA4B,CAAC;AAExD,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,wBAAwB,CAAC;AACvC,cAAc,kBAAkB,CAAC;AACjC,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,gBAAgB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,WAAW,GAAG,mBAA4B,CAAC;AAExD,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,wBAAwB,CAAC;AACvC,cAAc,kBAAkB,CAAC;AACjC,cAAc,UAAU,CAAC;AACzB,cAAc,oBAAoB,CAAC;AACnC,cAAc,wBAAwB,CAAC;AACvC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,mBAAmB,CAAC;AAClC,cAAc,mBAAmB,CAAC;AAClC,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,WAAW,CAAC;AAC1B,cAAc,oBAAoB,CAAC;AACnC,cAAc,gBAAgB,CAAC"}

package/migrations/0003_auth_login_approval_review.sql

@@ -0,0 +1,22 @@
+create table if not exists auth_login_approval_review (
+  approval_challenge_id text primary key,
+  flow_id text not null,
+  user_id text not null,
+  channel text not null,
+  reason text not null,
+  session_binding text not null,
+  same_device_required integer not null,
+  status text not null,
+  created_at integer not null,
+  expires_at integer not null,
+  reviewed_at integer,
+  reviewed_by text,
+  denied_reason text,
+  risk text,
+  metadata text,
+  review_metadata text
+);
+
+create index if not exists auth_login_approval_review_flow_id_idx on auth_login_approval_review (flow_id);
+create index if not exists auth_login_approval_review_user_id_idx on auth_login_approval_review (user_id);
+create index if not exists auth_login_approval_review_status_expires_at_idx on auth_login_approval_review (status, expires_at);

package/migrations/0004_auth_trusted_device.sql

@@ -0,0 +1,12 @@
+create table if not exists auth_trusted_device (
+  user_id text not null,
+  token_hash text not null,
+  created_at integer not null,
+  last_seen_at integer not null,
+  expires_at integer not null,
+  metadata text,
+  primary key (user_id, token_hash)
+);
+
+create index if not exists auth_trusted_device_user_id_idx on auth_trusted_device (user_id);
+create index if not exists auth_trusted_device_expires_at_idx on auth_trusted_device (expires_at);

package/migrations/0005_auth_passkey.sql

@@ -0,0 +1,17 @@
+create table if not exists auth_passkey_credential (
+  id text primary key,
+  user_id text not null,
+  credential_id text not null,
+  public_key text not null,
+  sign_count integer not null,
+  transports text,
+  backed_up integer,
+  created_at integer not null,
+  last_used_at integer,
+  revoked_at integer,
+  metadata text
+);
+
+create unique index if not exists auth_passkey_credential_credential_id_idx on auth_passkey_credential (credential_id);
+create index if not exists auth_passkey_credential_user_id_idx on auth_passkey_credential (user_id);
+create index if not exists auth_passkey_credential_revoked_at_idx on auth_passkey_credential (revoked_at);

package/migrations/0006_auth_totp_factor.sql

@@ -0,0 +1,17 @@
+create table if not exists auth_totp_factor (
+  id text primary key,
+  user_id text not null,
+  secret text not null,
+  algorithm text not null,
+  digits integer not null,
+  period integer not null,
+  created_at integer not null,
+  confirmed_at integer,
+  last_used_at integer,
+  revoked_at integer,
+  metadata text
+);
+
+create index if not exists auth_totp_factor_user_id_idx on auth_totp_factor (user_id);
+create index if not exists auth_totp_factor_confirmed_at_idx on auth_totp_factor (confirmed_at);
+create index if not exists auth_totp_factor_revoked_at_idx on auth_totp_factor (revoked_at);

package/migrations/0007_auth_recovery_code.sql

@@ -0,0 +1,13 @@
+create table if not exists auth_recovery_code (
+  id text primary key,
+  user_id text not null,
+  code_hash text not null,
+  created_at integer not null,
+  used_at integer,
+  revoked_at integer,
+  metadata text
+);
+
+create index if not exists auth_recovery_code_user_id_idx on auth_recovery_code (user_id);
+create index if not exists auth_recovery_code_used_at_idx on auth_recovery_code (used_at);
+create index if not exists auth_recovery_code_revoked_at_idx on auth_recovery_code (revoked_at);

package/migrations/0008_auth_api_key.sql

@@ -0,0 +1,17 @@
+create table if not exists auth_api_key (
+  id text primary key,
+  user_id text not null,
+  prefix text not null,
+  secret_hash text not null,
+  scopes text not null,
+  created_at integer not null,
+  expires_at integer,
+  last_used_at integer,
+  revoked_at integer,
+  metadata text
+);
+
+create unique index if not exists auth_api_key_prefix_idx on auth_api_key (prefix);
+create index if not exists auth_api_key_user_id_idx on auth_api_key (user_id);
+create index if not exists auth_api_key_expires_at_idx on auth_api_key (expires_at);
+create index if not exists auth_api_key_revoked_at_idx on auth_api_key (revoked_at);

package/migrations/0009_auth_refresh_token.sql

@@ -0,0 +1,21 @@
+create table if not exists auth_refresh_token (
+  id text primary key,
+  family_id text not null,
+  user_id text not null,
+  secret_hash text not null,
+  created_at integer not null,
+  expires_at integer not null,
+  last_used_at integer,
+  rotated_at integer,
+  replaced_by_id text,
+  revoked_at integer,
+  reuse_detected_at integer,
+  metadata text
+);
+
+create unique index if not exists auth_refresh_token_secret_hash_idx on auth_refresh_token (secret_hash);
+create index if not exists auth_refresh_token_family_id_idx on auth_refresh_token (family_id);
+create index if not exists auth_refresh_token_user_id_idx on auth_refresh_token (user_id);
+create index if not exists auth_refresh_token_expires_at_idx on auth_refresh_token (expires_at);
+create index if not exists auth_refresh_token_rotated_at_idx on auth_refresh_token (rotated_at);
+create index if not exists auth_refresh_token_revoked_at_idx on auth_refresh_token (revoked_at);

package/migrations/0010_auth_jwt_revocation.sql

@@ -0,0 +1,8 @@
+create table if not exists auth_jwt_revocation (
+  jwt_id text primary key,
+  revoked_at integer not null,
+  expires_at integer,
+  reason text
+);
+
+create index if not exists auth_jwt_revocation_expires_at_idx on auth_jwt_revocation (expires_at);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@effect-auth/core",
-  "version": "0.1.0-alpha.3",
+  "version": "0.1.0-alpha.4",
   "description": "Composable Effect-first authentication primitives.",
   "license": "MIT",
   "files": [
@@ -17,6 +17,10 @@
       "types": "./dist/index.d.ts",
       "default": "./dist/index.js"
     },
+    "./ApiKey": {
+      "types": "./dist/ApiKey.d.ts",
+      "default": "./dist/ApiKey.js"
+    },
     "./AuditLog": {
       "types": "./dist/AuditLog.d.ts",
       "default": "./dist/AuditLog.js"
@@ -41,10 +45,18 @@
       "types": "./dist/alchemy/cloudflare/RateLimitDurableObject.d.ts",
       "default": "./dist/alchemy/cloudflare/RateLimitDurableObject.js"
     },
+    "./AlchemyCloudflareEmail": {
+      "types": "./dist/alchemy/cloudflare/Email.d.ts",
+      "default": "./dist/alchemy/cloudflare/Email.js"
+    },
     "./CloudflareRateLimitDurableObject": {
       "types": "./dist/cloudflare/RateLimitDurableObject.d.ts",
       "default": "./dist/cloudflare/RateLimitDurableObject.js"
     },
+    "./CloudflareEmail": {
+      "types": "./dist/cloudflare/Email.d.ts",
+      "default": "./dist/cloudflare/Email.js"
+    },
     "./Client": {
       "types": "./dist/Client.d.ts",
       "default": "./dist/Client.js"
@@ -77,6 +89,22 @@
       "types": "./dist/Identifiers.d.ts",
       "default": "./dist/Identifiers.js"
     },
+    "./LoginApproval": {
+      "types": "./dist/LoginApproval.d.ts",
+      "default": "./dist/LoginApproval.js"
+    },
+    "./LoginNotification": {
+      "types": "./dist/LoginNotification.d.ts",
+      "default": "./dist/LoginNotification.js"
+    },
+    "./LoginRisk": {
+      "types": "./dist/LoginRisk.d.ts",
+      "default": "./dist/LoginRisk.js"
+    },
+    "./Jwt": {
+      "types": "./dist/Jwt.d.ts",
+      "default": "./dist/Jwt.js"
+    },
     "./HttpApi": {
       "types": "./dist/HttpApi.d.ts",
       "default": "./dist/HttpApi.js"
@@ -85,6 +113,10 @@
       "types": "./dist/Mailer.d.ts",
       "default": "./dist/Mailer.js"
     },
+    "./MagicLink": {
+      "types": "./dist/MagicLink.d.ts",
+      "default": "./dist/MagicLink.js"
+    },
     "./Policy": {
       "types": "./dist/Policy.d.ts",
       "default": "./dist/Policy.js"
@@ -97,6 +129,14 @@
       "types": "./dist/RateLimiter.d.ts",
       "default": "./dist/RateLimiter.js"
     },
+    "./RecoveryCode": {
+      "types": "./dist/RecoveryCode.d.ts",
+      "default": "./dist/RecoveryCode.js"
+    },
+    "./RefreshToken": {
+      "types": "./dist/RefreshToken.d.ts",
+      "default": "./dist/RefreshToken.js"
+    },
     "./KyselyStorage": {
       "types": "./dist/KyselyStorage.d.ts",
       "default": "./dist/KyselyStorage.js"
@@ -105,6 +145,10 @@
       "types": "./dist/Password.d.ts",
       "default": "./dist/Password.js"
     },
+    "./Passkey": {
+      "types": "./dist/Passkey.d.ts",
+      "default": "./dist/Passkey.js"
+    },
     "./Sessions": {
       "types": "./dist/Sessions.d.ts",
       "default": "./dist/Sessions.js"
@@ -113,6 +157,10 @@
       "types": "./dist/Storage.d.ts",
       "default": "./dist/Storage.js"
     },
+    "./StepUp": {
+      "types": "./dist/StepUp.d.ts",
+      "default": "./dist/StepUp.js"
+    },
     "./StorageMigrations": {
       "types": "./dist/StorageMigrations.d.ts",
       "default": "./dist/StorageMigrations.js"
@@ -121,6 +169,14 @@
       "types": "./dist/Testing.d.ts",
       "default": "./dist/Testing.js"
     },
+    "./Totp": {
+      "types": "./dist/Totp.d.ts",
+      "default": "./dist/Totp.js"
+    },
+    "./TrustedDevice": {
+      "types": "./dist/TrustedDevice.d.ts",
+      "default": "./dist/TrustedDevice.js"
+    },
     "./package.json": {
       "default": "./package.json"
     }