@factiii/auth 0.3.0 → 0.4.0

package/dist/index.mjs

@@ -8,20 +8,16 @@ import {
   endAllSessionsSchema,
   getTwofaSecretSchema,
   loginSchema,
-  logoutSchema,
   oAuthLoginSchema,
-  otpLoginRequestSchema,
-  otpLoginVerifySchema,
   registerPushTokenSchema,
   requestPasswordResetSchema,
   resetPasswordSchema,
   signupSchema,
   twoFaResetSchema,
   twoFaResetVerifySchema,
-  twoFaSetupSchema,
   twoFaVerifySchema,
   verifyEmailSchema
-} from "./chunk-PYVDWODF.mjs";
+} from "./chunk-EHI4P63M.mjs";
 
 // src/middleware/authGuard.ts
 import { TRPCError } from "@trpc/server";
@@ -81,7 +77,8 @@ function createConsoleEmailAdapter() {
 
 // src/utilities/config.ts
 var defaultTokenSettings = {
-  accessTokenExpiry: "5m",
+  jwtExpiry: 30 * 24 * 60 * 60,
+  // 30 days in seconds
   passwordResetExpiryMs: 60 * 60 * 1e3,
   // 1 hour
   otpValidityMs: 15 * 60 * 1e3
@@ -90,15 +87,13 @@ var defaultTokenSettings = {
 var defaultCookieSettings = {
   secure: true,
   sameSite: "Strict",
-  httpOnly: true,
-  accessTokenPath: "/",
-  refreshTokenPath: "/api/trpc/auth.refresh",
-  maxAge: 365 * 24 * 60 * 60
-  // 1 year in seconds
+  httpOnly: false,
+  path: "/",
+  maxAge: 30 * 24 * 60 * 60
+  // 30 days in seconds
 };
 var defaultStorageKeys = {
-  accessToken: "auth-at",
-  refreshToken: "auth-rt"
+  authToken: "auth-token"
 };
 var defaultFeatures = {
   twoFa: true,
@@ -130,21 +125,17 @@ var defaultAuthConfig = {
 
 // src/utilities/cookies.ts
 var DEFAULT_STORAGE_KEYS = {
-  ACCESS_TOKEN: "auth-at",
-  REFRESH_TOKEN: "auth-rt"
+  AUTH_TOKEN: "auth-token"
 };
-function parseAuthCookies(cookieHeader, storageKeys = {
-  accessToken: DEFAULT_STORAGE_KEYS.ACCESS_TOKEN,
-  refreshToken: DEFAULT_STORAGE_KEYS.REFRESH_TOKEN
+function parseAuthCookie(cookieHeader, storageKeys = {
+  authToken: DEFAULT_STORAGE_KEYS.AUTH_TOKEN
 }) {
   if (!cookieHeader) {
     return {};
   }
-  const accessToken = cookieHeader.split(`${storageKeys.accessToken}=`)[1]?.split(";")[0];
-  const refreshToken = cookieHeader.split(`${storageKeys.refreshToken}=`)[1]?.split(";")[0];
+  const authToken = cookieHeader.split(`${storageKeys.authToken}=`)[1]?.split(";")[0];
   return {
-    accessToken: accessToken || void 0,
-    refreshToken: refreshToken || void 0
+    authToken: authToken || void 0
   };
 }
 function extractDomain(req) {
@@ -168,76 +159,47 @@ function extractDomain(req) {
   }
   return void 0;
 }
-function setAuthCookies(res, credentials, settings, storageKeys = {
-  accessToken: DEFAULT_STORAGE_KEYS.ACCESS_TOKEN,
-  refreshToken: DEFAULT_STORAGE_KEYS.REFRESH_TOKEN
+function setAuthCookie(res, authToken, settings, storageKeys = {
+  authToken: DEFAULT_STORAGE_KEYS.AUTH_TOKEN
 }) {
-  const cookies = [];
   const domain = settings.domain ?? extractDomain(res.req);
   const expiresDate = settings.maxAge ? new Date(Date.now() + settings.maxAge * 1e3).toUTCString() : void 0;
-  if (credentials.refreshToken) {
-    const refreshCookie = [
-      `${storageKeys.refreshToken}=${credentials.refreshToken}`,
-      "HttpOnly",
-      settings.secure ? "Secure=true" : "",
-      `SameSite=${settings.sameSite}`,
-      `Path=${settings.refreshTokenPath}`,
-      domain ? `Domain=${domain}` : "",
-      `Expires=${expiresDate}`
-    ].filter(Boolean).join("; ");
-    cookies.push(refreshCookie);
-  }
-  if (credentials.accessToken) {
-    const accessCookie = [
-      `${storageKeys.accessToken}=${credentials.accessToken}`,
-      settings.secure ? "Secure=true" : "",
-      `SameSite=${settings.sameSite}`,
-      `Path=${settings.accessTokenPath}`,
-      domain ? `Domain=${domain}` : "",
-      `Expires=${expiresDate}`
-    ].filter(Boolean).join("; ");
-    cookies.push(accessCookie);
-  }
-  if (cookies.length > 0) {
-    res.setHeader("Set-Cookie", cookies);
-  }
+  const cookie = [
+    `${storageKeys.authToken}=${authToken}`,
+    settings.httpOnly ? "HttpOnly" : "",
+    settings.secure ? "Secure=true" : "",
+    `SameSite=${settings.sameSite}`,
+    `Path=${settings.path ?? "/"}`,
+    domain ? `Domain=${domain}` : "",
+    expiresDate ? `Expires=${expiresDate}` : ""
+  ].filter(Boolean).join("; ");
+  res.setHeader("Set-Cookie", cookie);
 }
-function clearAuthCookies(res, settings, storageKeys = {
-  accessToken: DEFAULT_STORAGE_KEYS.ACCESS_TOKEN,
-  refreshToken: DEFAULT_STORAGE_KEYS.REFRESH_TOKEN
+function clearAuthCookie(res, settings, storageKeys = {
+  authToken: DEFAULT_STORAGE_KEYS.AUTH_TOKEN
 }) {
   const domain = extractDomain(res.req);
   const expiredDate = (/* @__PURE__ */ new Date(0)).toUTCString();
-  const cookies = [
-    [
-      `${storageKeys.refreshToken}=destroy`,
-      "HttpOnly",
-      settings.secure ? "Secure=true" : "",
-      `SameSite=${settings.sameSite}`,
-      `Path=${settings.refreshTokenPath}`,
-      domain ? `Domain=${domain}` : "",
-      `Expires=${expiredDate}`
-    ].filter(Boolean).join("; "),
-    [
-      `${storageKeys.accessToken}=destroy`,
-      settings.secure ? "Secure=true" : "",
-      `SameSite=${settings.sameSite}`,
-      `Path=${settings.accessTokenPath}`,
-      domain ? `Domain=${domain}` : "",
-      `Expires=${expiredDate}`
-    ].filter(Boolean).join("; ")
-  ];
-  res.setHeader("Set-Cookie", cookies);
+  const cookie = [
+    `${storageKeys.authToken}=destroy`,
+    settings.httpOnly ? "HttpOnly" : "",
+    settings.secure ? "Secure=true" : "",
+    `SameSite=${settings.sameSite}`,
+    `Path=${settings.path ?? "/"}`,
+    domain ? `Domain=${domain}` : "",
+    `Expires=${expiredDate}`
+  ].filter(Boolean).join("; ");
+  res.setHeader("Set-Cookie", cookie);
 }
 
 // src/utilities/jwt.ts
 import jwt from "jsonwebtoken";
-function createAccessToken(payload, options) {
+function createAuthToken(payload, options) {
   return jwt.sign(payload, options.secret, {
     expiresIn: options.expiresIn
   });
 }
-function verifyAccessToken(token, options) {
+function verifyAuthToken(token, options) {
   return jwt.verify(token, options.secret, {
     ignoreExpiration: options.ignoreExpiration ?? false
   });
@@ -264,7 +226,7 @@ function createAuthGuard(config, t) {
   const storageKeys = config.storageKeys ?? defaultStorageKeys;
   const cookieSettings = { ...defaultCookieSettings, ...config.cookieSettings };
   const revokeSession = async (ctx, sessionId, description, errorStack, path) => {
-    clearAuthCookies(ctx.res, cookieSettings, storageKeys);
+    clearAuthCookie(ctx.res, cookieSettings, storageKeys);
     if (config.hooks?.logError) {
       try {
         const cookieHeader = ctx.headers.cookie;
@@ -275,7 +237,6 @@ function createAuthGuard(config, t) {
           ip: ctx.ip,
           userAgent: ctx.headers["user-agent"],
           ...path ? { path } : {},
-          // Diagnostic: was Cookie header present at all, and which keys were sent?
           hasCookieHeader: Boolean(cookieHeader),
           cookieKeys: cookieHeader ? cookieHeader.split(";").map((c) => c.trim().split("=")[0]).filter(Boolean) : [],
           origin: ctx.headers.origin ?? null,
@@ -318,9 +279,8 @@ ${errorStack}` : null,
     }
   };
   const authGuard = t.middleware(async ({ ctx, meta, next, path }) => {
-    const cookies = parseAuthCookies(ctx.headers.cookie, storageKeys);
-    const authToken = cookies.accessToken;
-    const refreshToken = cookies.refreshToken;
+    const cookies = parseAuthCookie(ctx.headers.cookie, storageKeys);
+    const authToken = cookies.authToken;
     const userAgent = ctx.headers["user-agent"];
     if (!userAgent) {
       throw new TRPCError({
@@ -330,27 +290,13 @@ ${errorStack}` : null,
     }
     if (authToken) {
       try {
-        const decodedToken = verifyAccessToken(authToken, {
+        const decodedToken = verifyAuthToken(authToken, {
           secret: config.secrets.jwt,
           ignoreExpiration: meta?.ignoreExpiration ?? false
         });
-        if (path === "auth.refresh" && !refreshToken) {
-          await revokeSession(
-            ctx,
-            decodedToken.id,
-            "Session revoked: No refresh token",
-            void 0,
-            path
-          );
-          throw new TRPCError({
-            message: "Unauthorized",
-            code: "UNAUTHORIZED"
-          });
-        }
         const session = await config.prisma.session.findUnique({
           where: {
-            id: decodedToken.id,
-            ...path === "auth.refresh" ? { refreshToken } : {}
+            id: decodedToken.id
           },
           select: {
             userId: true,
@@ -441,8 +387,7 @@ ${errorStack}` : null,
             ...ctx,
             userId: session.userId,
             socketId: session.socketId,
-            sessionId: session.id,
-            refreshToken
+            sessionId: session.id
           }
         });
       } catch (err) {
@@ -487,7 +432,6 @@ ${errorStack}` : null,
 }
 
 // src/procedures/base.ts
-import { randomUUID } from "crypto";
 import { TRPCError as TRPCError2 } from "@trpc/server";
 
 // src/utilities/browser.ts
@@ -713,31 +657,29 @@ var BaseProcedureFactory = class {
       if (this.config.hooks?.onUserCreated) {
         await this.config.hooks.onUserCreated(user.id, typedInput);
       }
-      const refreshToken = randomUUID();
       const extraSessionData = this.config.hooks?.getSessionData ? await this.config.hooks.getSessionData(typedInput) : {};
       const session = await this.config.prisma.session.create({
         data: {
           userId: user.id,
           browserName: detectBrowser(userAgent),
           socketId: null,
-          refreshToken,
           ...extraSessionData
         },
-        select: { id: true, refreshToken: true, userId: true }
+        select: { id: true, userId: true }
       });
       if (this.config.hooks?.onSessionCreated) {
         await this.config.hooks.onSessionCreated(session.id, typedInput);
       }
-      const accessToken = createAccessToken(
+      const authToken = createAuthToken(
         { id: session.id, userId: session.userId, verifiedHumanAt: null },
         {
           secret: this.config.secrets.jwt,
-          expiresIn: this.config.tokenSettings.accessTokenExpiry
+          expiresIn: this.config.tokenSettings.jwtExpiry
         }
       );
-      setAuthCookies(
+      setAuthCookie(
         ctx.res,
-        { accessToken, refreshToken: session.refreshToken },
+        authToken,
         this.config.cookieSettings,
         this.config.storageKeys
       );
@@ -829,19 +771,13 @@ var BaseProcedureFactory = class {
           }
         }
         if (!validCode) {
-          const checkOTP = await this.config.prisma.oTPBasedLogin.findFirst({
-            where: {
-              code: Number(code),
-              userId: user.id,
-              disabled: false,
-              createdAt: { gte: new Date(Date.now() - this.config.tokenSettings.otpValidityMs) }
-            }
+          const checkOTP = await this.config.prisma.oTP.findUnique({
+            where: { userId: user.id }
           });
-          if (checkOTP) {
+          if (checkOTP && checkOTP.code === Number(code) && checkOTP.expiredAt >= /* @__PURE__ */ new Date()) {
             validCode = true;
-            await this.config.prisma.oTPBasedLogin.updateMany({
-              where: { code: Number(code) },
-              data: { disabled: true }
+            await this.config.prisma.oTP.delete({
+              where: { userId: user.id }
             });
           }
         }
@@ -852,19 +788,16 @@ var BaseProcedureFactory = class {
           });
         }
       }
-      const refreshToken = randomUUID();
       const extraSessionData = this.config.hooks?.getSessionData ? await this.config.hooks.getSessionData(typedInput) : {};
       const session = await this.config.prisma.session.create({
         data: {
           userId: user.id,
           browserName: detectBrowser(userAgent),
           socketId: null,
-          refreshToken,
           ...extraSessionData
         },
         select: {
           id: true,
-          refreshToken: true,
           userId: true,
           socketId: true,
           browserName: true,
@@ -881,16 +814,16 @@ var BaseProcedureFactory = class {
       if (this.config.hooks?.onSessionCreated) {
         await this.config.hooks.onSessionCreated(session.id, typedInput);
       }
-      const accessToken = createAccessToken(
+      const authToken = createAuthToken(
         { id: session.id, userId: session.userId, verifiedHumanAt: user.verifiedHumanAt },
         {
           secret: this.config.secrets.jwt,
-          expiresIn: this.config.tokenSettings.accessTokenExpiry
+          expiresIn: this.config.tokenSettings.jwtExpiry
         }
       );
-      setAuthCookies(
+      setAuthCookie(
         ctx.res,
-        { accessToken, refreshToken: session.refreshToken },
+        authToken,
         this.config.cookieSettings,
         this.config.storageKeys
       );
@@ -901,7 +834,7 @@ var BaseProcedureFactory = class {
     });
   }
   logout() {
-    return this.procedure.mutation(async ({ ctx }) => {
+    return this.authProcedure.meta({ ignoreExpiration: true }).mutation(async ({ ctx }) => {
       const { userId, sessionId } = ctx;
       if (sessionId) {
         await this.config.prisma.session.update({
@@ -918,18 +851,17 @@ var BaseProcedureFactory = class {
           await this.config.hooks.afterLogout(userId, sessionId, ctx.socketId);
         }
       }
-      clearAuthCookies(ctx.res, this.config.cookieSettings, this.config.storageKeys);
+      clearAuthCookie(ctx.res, this.config.cookieSettings, this.config.storageKeys);
       return { success: true };
     });
   }
   refresh() {
-    return this.authProcedure.meta({ ignoreExpiration: true }).query(async ({ ctx }) => {
+    return this.authProcedure.query(async ({ ctx }) => {
       const session = await this.config.prisma.session.update({
         where: { id: ctx.sessionId },
-        data: { refreshToken: randomUUID(), lastUsed: /* @__PURE__ */ new Date() },
+        data: { lastUsed: /* @__PURE__ */ new Date() },
         select: {
           id: true,
-          refreshToken: true,
           userId: true,
           user: { select: { verifiedHumanAt: true } }
         }
@@ -938,16 +870,16 @@ var BaseProcedureFactory = class {
         this.config.hooks.onRefresh(session.userId).catch(() => {
         });
       }
-      const accessToken = createAccessToken(
+      const authToken = createAuthToken(
         { id: session.id, userId: session.userId, verifiedHumanAt: session.user.verifiedHumanAt },
         {
           secret: this.config.secrets.jwt,
-          expiresIn: this.config.tokenSettings.accessTokenExpiry
+          expiresIn: this.config.tokenSettings.jwtExpiry
         }
       );
-      setAuthCookies(
+      setAuthCookie(
         ctx.res,
-        { accessToken, refreshToken: session.refreshToken },
+        authToken,
         this.config.cookieSettings,
         this.config.storageKeys
       );
@@ -1175,7 +1107,7 @@ var BiometricProcedureFactory = class {
 };
 
 // src/procedures/emailVerification.ts
-import { randomUUID as randomUUID2 } from "crypto";
+import { randomUUID } from "crypto";
 import { TRPCError as TRPCError4 } from "@trpc/server";
 var EmailVerificationProcedureFactory = class {
   constructor(config, authProcedure) {
@@ -1208,7 +1140,7 @@ var EmailVerificationProcedureFactory = class {
       if (user.emailVerificationStatus === "VERIFIED") {
         return { message: "Email is already verified", emailSent: false };
       }
-      const otp = randomUUID2();
+      const otp = randomUUID();
       await this.config.prisma.user.update({
         where: { id: userId },
         data: { emailVerificationStatus: "PENDING", otpForEmailVerification: otp }
@@ -1273,7 +1205,6 @@ var EmailVerificationProcedureFactory = class {
 };
 
 // src/procedures/oauth.ts
-import { randomUUID as randomUUID3 } from "crypto";
 import { TRPCError as TRPCError5 } from "@trpc/server";
 var OAuthLoginProcedureFactory = class {
   constructor(config, procedure) {
@@ -1372,19 +1303,16 @@ var OAuthLoginProcedureFactory = class {
       if (user.status === "BANNED") {
         throw new TRPCError5({ code: "FORBIDDEN", message: "Your account has been banned." });
       }
-      const refreshToken = randomUUID3();
       const extraSessionData = this.config.hooks?.getSessionData ? await this.config.hooks.getSessionData(typedInput) : {};
       const session = await this.config.prisma.session.create({
         data: {
           userId: user.id,
           browserName: detectBrowser(userAgent),
           socketId: null,
-          refreshToken,
           ...extraSessionData
         },
         select: {
           id: true,
-          refreshToken: true,
           userId: true,
           socketId: true,
           browserName: true,
@@ -1401,16 +1329,16 @@ var OAuthLoginProcedureFactory = class {
       if (this.config.hooks?.onSessionCreated) {
         await this.config.hooks.onSessionCreated(session.id, typedInput);
       }
-      const accessToken = createAccessToken(
+      const authToken = createAuthToken(
         { id: session.id, userId: session.userId, verifiedHumanAt: user.verifiedHumanAt ?? null },
         {
           secret: this.config.secrets.jwt,
-          expiresIn: this.config.tokenSettings.accessTokenExpiry
+          expiresIn: this.config.tokenSettings.jwtExpiry
         }
       );
-      setAuthCookies(
+      setAuthCookie(
         ctx.res,
-        { accessToken, refreshToken: session.refreshToken },
+        authToken,
         this.config.cookieSettings,
         this.config.storageKeys
       );
@@ -1608,8 +1536,11 @@ var TwoFaProcedureFactory = class {
         throw new TRPCError6({ code: "FORBIDDEN", message: "Invalid credentials." });
       }
       const otp = generateOtp();
-      await this.config.prisma.oTPBasedLogin.create({
-        data: { userId: user.id, code: otp }
+      const expiredAt = new Date(Date.now() + this.config.tokenSettings.otpValidityMs);
+      await this.config.prisma.oTP.upsert({
+        where: { userId: user.id },
+        update: { code: otp, expiredAt },
+        create: { userId: user.id, code: otp, expiredAt }
       });
       if (this.config.emailService) {
         await this.config.emailService.sendOTPEmail(user.email, otp);
@@ -1628,20 +1559,14 @@ var TwoFaProcedureFactory = class {
       if (!user) {
         throw new TRPCError6({ code: "NOT_FOUND", message: "User not found" });
       }
-      const otp = await this.config.prisma.oTPBasedLogin.findFirst({
-        where: {
-          userId: user.id,
-          code,
-          disabled: false,
-          createdAt: { gte: new Date(Date.now() - this.config.tokenSettings.otpValidityMs) }
-        }
+      const otp = await this.config.prisma.oTP.findUnique({
+        where: { userId: user.id }
       });
-      if (!otp) {
+      if (!otp || otp.code !== code || otp.expiredAt < /* @__PURE__ */ new Date()) {
         throw new TRPCError6({ code: "FORBIDDEN", message: "Invalid or expired OTP" });
       }
-      await this.config.prisma.oTPBasedLogin.update({
-        where: { id: otp.id },
-        data: { disabled: true }
+      await this.config.prisma.oTP.delete({
+        where: { userId: user.id }
       });
       await this.config.prisma.user.update({
         where: { id: user.id },
@@ -1694,7 +1619,7 @@ var TwoFaProcedureFactory = class {
     });
   }
   deregisterPushToken() {
-    return this.authProcedure.meta({ ignoreExpiration: true }).input(deregisterPushTokenSchema).mutation(async ({ ctx, input }) => {
+    return this.authProcedure.input(deregisterPushTokenSchema).mutation(async ({ ctx, input }) => {
       this.checkConfig();
       const { userId } = ctx;
       const { pushToken } = input;
@@ -1813,7 +1738,6 @@ var createContext = ({ req, res }) => ({
   headers: req.headers,
   userId: null,
   sessionId: null,
-  refreshToken: null,
   socketId: null,
   ip: getClientIp(req),
   res
@@ -1872,12 +1796,12 @@ export {
   biometricVerifySchema,
   changePasswordSchema,
   cleanBase32String,
-  clearAuthCookies,
+  clearAuthCookie,
   comparePassword,
-  createAccessToken,
   createAuthConfig,
   createAuthGuard,
   createAuthRouter,
+  createAuthToken,
   createConsoleEmailAdapter,
   createNoopEmailAdapter,
   createOAuthVerifier,
@@ -1897,20 +1821,16 @@ export {
   isTokenExpiredError,
   isTokenInvalidError,
   loginSchema,
-  logoutSchema,
   oAuthLoginSchema,
-  otpLoginRequestSchema,
-  otpLoginVerifySchema,
-  parseAuthCookies,
+  parseAuthCookie,
   requestPasswordResetSchema,
   resetPasswordSchema,
-  setAuthCookies,
+  setAuthCookie,
   signupSchema,
   twoFaResetSchema,
-  twoFaSetupSchema,
   twoFaVerifySchema,
   validatePasswordStrength,
-  verifyAccessToken,
+  verifyAuthToken,
   verifyEmailSchema,
   verifyTotp
 };

package/dist/validators.d.mts

@@ -1,2 +1,2 @@
 import 'zod';
-export { m as AuthSchemas, C as ChangePasswordInput, n as CreatedSchemas, L as LoginInput, p as LoginSchemaInput, a as LogoutInput, O as OAuthLoginInput, q as OAuthSchemaInput, R as ResetPasswordInput, b as SignupInput, u as SignupSchemaInput, T as TwoFaVerifyInput, V as VerifyEmailInput, c as biometricVerifySchema, d as changePasswordSchema, w as checkPasswordResetSchema, x as createSchemas, y as deregisterPushTokenSchema, z as disableTwofaSchema, e as endAllSessionsSchema, B as getTwofaSecretSchema, l as loginSchema, f as logoutSchema, o as oAuthLoginSchema, g as otpLoginRequestSchema, h as otpLoginVerifySchema, D as registerPushTokenSchema, r as requestPasswordResetSchema, E as resendVerificationSchema, i as resetPasswordSchema, s as signupSchema, t as twoFaResetSchema, F as twoFaResetVerifySchema, j as twoFaSetupSchema, k as twoFaVerifySchema, v as verifyEmailSchema } from './hooks-B41uikq7.mjs';
+export { g as AuthSchemas, C as ChangePasswordInput, h as CreatedSchemas, L as LoginInput, i as LoginSchemaInput, O as OAuthLoginInput, j as OAuthSchemaInput, R as ResetPasswordInput, a as SignupInput, k as SignupSchemaInput, T as TwoFaVerifyInput, V as VerifyEmailInput, b as biometricVerifySchema, c as changePasswordSchema, m as checkPasswordResetSchema, n as createSchemas, p as deregisterPushTokenSchema, q as disableTwofaSchema, e as endAllSessionsSchema, u as getTwofaSecretSchema, l as loginSchema, o as oAuthLoginSchema, w as registerPushTokenSchema, r as requestPasswordResetSchema, d as resetPasswordSchema, s as signupSchema, t as twoFaResetSchema, x as twoFaResetVerifySchema, f as twoFaVerifySchema, v as verifyEmailSchema } from './hooks-BXNxNK4S.mjs';

package/dist/validators.d.ts

@@ -1,2 +1,2 @@
 import 'zod';
-export { m as AuthSchemas, C as ChangePasswordInput, n as CreatedSchemas, L as LoginInput, p as LoginSchemaInput, a as LogoutInput, O as OAuthLoginInput, q as OAuthSchemaInput, R as ResetPasswordInput, b as SignupInput, u as SignupSchemaInput, T as TwoFaVerifyInput, V as VerifyEmailInput, c as biometricVerifySchema, d as changePasswordSchema, w as checkPasswordResetSchema, x as createSchemas, y as deregisterPushTokenSchema, z as disableTwofaSchema, e as endAllSessionsSchema, B as getTwofaSecretSchema, l as loginSchema, f as logoutSchema, o as oAuthLoginSchema, g as otpLoginRequestSchema, h as otpLoginVerifySchema, D as registerPushTokenSchema, r as requestPasswordResetSchema, E as resendVerificationSchema, i as resetPasswordSchema, s as signupSchema, t as twoFaResetSchema, F as twoFaResetVerifySchema, j as twoFaSetupSchema, k as twoFaVerifySchema, v as verifyEmailSchema } from './hooks-B41uikq7.js';
+export { g as AuthSchemas, C as ChangePasswordInput, h as CreatedSchemas, L as LoginInput, i as LoginSchemaInput, O as OAuthLoginInput, j as OAuthSchemaInput, R as ResetPasswordInput, a as SignupInput, k as SignupSchemaInput, T as TwoFaVerifyInput, V as VerifyEmailInput, b as biometricVerifySchema, c as changePasswordSchema, m as checkPasswordResetSchema, n as createSchemas, p as deregisterPushTokenSchema, q as disableTwofaSchema, e as endAllSessionsSchema, u as getTwofaSecretSchema, l as loginSchema, o as oAuthLoginSchema, w as registerPushTokenSchema, r as requestPasswordResetSchema, d as resetPasswordSchema, s as signupSchema, t as twoFaResetSchema, x as twoFaResetVerifySchema, f as twoFaVerifySchema, v as verifyEmailSchema } from './hooks-BXNxNK4S.js';

package/dist/validators.js

@@ -29,18 +29,13 @@ __export(validators_exports, {
   endAllSessionsSchema: () => endAllSessionsSchema,
   getTwofaSecretSchema: () => getTwofaSecretSchema,
   loginSchema: () => loginSchema,
-  logoutSchema: () => logoutSchema,
   oAuthLoginSchema: () => oAuthLoginSchema,
-  otpLoginRequestSchema: () => otpLoginRequestSchema,
-  otpLoginVerifySchema: () => otpLoginVerifySchema,
   registerPushTokenSchema: () => registerPushTokenSchema,
   requestPasswordResetSchema: () => requestPasswordResetSchema,
-  resendVerificationSchema: () => resendVerificationSchema,
   resetPasswordSchema: () => resetPasswordSchema,
   signupSchema: () => signupSchema,
   twoFaResetSchema: () => twoFaResetSchema,
   twoFaResetVerifySchema: () => twoFaResetVerifySchema,
-  twoFaSetupSchema: () => twoFaSetupSchema,
   twoFaVerifySchema: () => twoFaVerifySchema,
   verifyEmailSchema: () => verifyEmailSchema
 });
@@ -87,9 +82,6 @@ var twoFaVerifySchema = import_zod.z.object({
   code: import_zod.z.string().min(6, { message: "Verification code is required" }),
   sessionId: import_zod.z.number().optional()
 });
-var twoFaSetupSchema = import_zod.z.object({
-  code: import_zod.z.string().min(6, { message: "Verification code is required" })
-});
 var twoFaResetSchema = import_zod.z.object({
   username: import_zod.z.string().min(1),
   password: import_zod.z.string().min(1)
@@ -101,9 +93,6 @@ var twoFaResetVerifySchema = import_zod.z.object({
 var verifyEmailSchema = import_zod.z.object({
   code: import_zod.z.string().min(1, { message: "Verification code is required" })
 });
-var resendVerificationSchema = import_zod.z.object({
-  email: import_zod.z.string().email().optional()
-});
 var biometricVerifySchema = import_zod.z.object({});
 var registerPushTokenSchema = import_zod.z.object({
   pushToken: import_zod.z.string().min(1, { message: "Push token is required" })
@@ -117,19 +106,9 @@ var getTwofaSecretSchema = import_zod.z.object({
 var disableTwofaSchema = import_zod.z.object({
   password: import_zod.z.string().min(1, { message: "Password is required" })
 });
-var logoutSchema = import_zod.z.object({
-  allDevices: import_zod.z.boolean().optional().default(false)
-});
 var endAllSessionsSchema = import_zod.z.object({
   skipCurrentSession: import_zod.z.boolean().optional().default(true)
 });
-var otpLoginRequestSchema = import_zod.z.object({
-  email: import_zod.z.string().email({ message: "Invalid email address" })
-});
-var otpLoginVerifySchema = import_zod.z.object({
-  email: import_zod.z.string().email(),
-  code: import_zod.z.number().min(1e5).max(999999)
-});
 function createSchemas(extensions) {
   return {
     signup: extensions?.signup ? signupSchema.merge(extensions.signup) : signupSchema,
@@ -148,18 +127,13 @@ function createSchemas(extensions) {
   endAllSessionsSchema,
   getTwofaSecretSchema,
   loginSchema,
-  logoutSchema,
   oAuthLoginSchema,
-  otpLoginRequestSchema,
-  otpLoginVerifySchema,
   registerPushTokenSchema,
   requestPasswordResetSchema,
-  resendVerificationSchema,
   resetPasswordSchema,
   signupSchema,
   twoFaResetSchema,
   twoFaResetVerifySchema,
-  twoFaSetupSchema,
   twoFaVerifySchema,
   verifyEmailSchema
 });