@factiii/auth 0.3.0 → 0.4.1

package/dist/index.d.ts

@@ -6,9 +6,8 @@ import { PrismaClient } from '@prisma/client';
 import * as _trpc_server from '@trpc/server';
 import * as zod from 'zod';
 import { CreateHTTPContextOptions } from '@trpc/server/adapters/standalone';
-import { S as SchemaExtensions, A as AuthHooks } from './hooks-B41uikq7.js';
-export { C as ChangePasswordInput, L as LoginInput, a as LogoutInput, O as OAuthLoginInput, R as ResetPasswordInput, b as SignupInput, T as TwoFaVerifyInput, V as VerifyEmailInput, c as biometricVerifySchema, d as changePasswordSchema, e as endAllSessionsSchema, l as loginSchema, f as logoutSchema, o as oAuthLoginSchema, g as otpLoginRequestSchema, h as otpLoginVerifySchema, r as requestPasswordResetSchema, i as resetPasswordSchema, s as signupSchema, t as twoFaResetSchema, j as twoFaSetupSchema, k as twoFaVerifySchema, v as verifyEmailSchema } from './hooks-B41uikq7.js';
-import { SignOptions } from 'jsonwebtoken';
+import { S as SchemaExtensions, A as AuthHooks } from './hooks-yHGJ7C6_.js';
+export { C as ChangePasswordInput, L as LoginInput, O as OAuthLoginInput, R as ResetPasswordInput, a as SignupInput, T as TwoFaVerifyInput, V as VerifyEmailInput, b as biometricVerifySchema, c as changePasswordSchema, e as endAllSessionsSchema, l as loginSchema, o as oAuthLoginSchema, r as requestPasswordResetSchema, d as resetPasswordSchema, s as signupSchema, t as twoFaResetSchema, f as twoFaVerifySchema, v as verifyEmailSchema } from './hooks-yHGJ7C6_.js';
 
 //# sourceMappingURL=TRPCError.d.ts.map
 //#endregion
@@ -160,13 +159,6 @@ interface JwtPayload {
     exp?: number;
     iat?: number;
 }
-/**
- * Credentials returned after successful authentication
- */
-interface AuthCredentials {
-    accessToken: string;
-    refreshToken: string;
-}
 /**
  * Cookie settings for auth tokens
  */
@@ -175,8 +167,7 @@ interface CookieSettings {
     sameSite: 'Strict' | 'Lax' | 'None';
     domain?: string;
     httpOnly: boolean;
-    accessTokenPath: string;
-    refreshTokenPath: string;
+    path: string;
     maxAge: number;
 }
 
@@ -219,8 +210,8 @@ declare function createOAuthVerifier(keys: OAuthKeys): (provider: OAuthProvider,
  * Token and OTP expiry settings
  */
 interface TokenSettings {
-    /** Access token expiry (e.g., '5m', '1h') */
-    accessTokenExpiry: string;
+    /** JWT expiry in seconds (default: 30 days) */
+    jwtExpiry: number;
     /** Password reset token expiry in ms (default: 1 hour) */
     passwordResetExpiryMs: number;
     /** OTP validity window in ms (default: 15 minutes) */
@@ -294,8 +285,7 @@ interface AuthConfig<TExtensions extends SchemaExtensions = {}> {
      * Cookie storage keys
      */
     storageKeys?: {
-        accessToken: string;
-        refreshToken: string;
+        authToken: string;
     };
     /**
      * Schema extensions for adding custom fields to auth inputs
@@ -309,7 +299,6 @@ declare function createAuthGuard(config: AuthConfig, t: TrpcBuilder): _trpc_serv
     userId: number;
     socketId: string | null;
     sessionId: number;
-    refreshToken: string | undefined;
     headers: http.IncomingHttpHeaders;
     res: http.ServerResponse<http.IncomingMessage>;
     ip: string | undefined;
@@ -327,8 +316,7 @@ declare const defaultCookieSettings: CookieSettings;
  * Default storage keys
  */
 declare const defaultStorageKeys: {
-    accessToken: string;
-    refreshToken: string;
+    authToken: string;
 };
 /**
  * Create a fully resolved auth config with defaults applied
@@ -343,8 +331,7 @@ declare const defaultAuthConfig: {
     tokenSettings: TokenSettings;
     cookieSettings: CookieSettings;
     storageKeys: {
-        accessToken: string;
-        refreshToken: string;
+        authToken: string;
     };
 };
 
@@ -392,7 +379,6 @@ type Meta = {
 interface TrpcContext {
     userId: number | null;
     sessionId: number | null;
-    refreshToken: string | null;
     socketId: string | null;
     headers: CreateHTTPContextOptions['req']['headers'];
     res: CreateHTTPContextOptions['res'];
@@ -673,12 +659,12 @@ declare function createAuthRouter<TExtensions extends SchemaExtensions = {}>(con
                     email: zod.ZodString;
                     password: zod.ZodEffects<zod.ZodString, string, string>;
                 }, "strip", zod.ZodTypeAny, {
-                    email: string;
                     username: string;
+                    email: string;
                     password: string;
                 }, {
-                    email: string;
                     username: string;
+                    email: string;
                     password: string;
                 }>>["in"] extends infer T_7 ? T_7 extends inferParser<[TExtensions["signup"]] extends [zod.AnyZodObject] ? zod.ZodObject<{
                     username: zod.ZodString;
@@ -697,12 +683,12 @@ declare function createAuthRouter<TExtensions extends SchemaExtensions = {}>(con
                     email: zod.ZodString;
                     password: zod.ZodEffects<zod.ZodString, string, string>;
                 }, "strip", zod.ZodTypeAny, {
-                    email: string;
                     username: string;
+                    email: string;
                     password: string;
                 }, {
-                    email: string;
                     username: string;
+                    email: string;
                     password: string;
                 }>>["in"] ? T_7 extends _trpc_server.TRPCUnsetMarker ? void : T_7 : never : never;
                 output: {
@@ -766,12 +752,17 @@ declare function createAuthRouter<TExtensions extends SchemaExtensions = {}>(con
                     code?: string | undefined;
                 }>>["in"] ? T_12 extends _trpc_server.TRPCUnsetMarker ? void : T_12 : never : never;
                 output: {
+                    success: boolean;
+                    requires2FA: boolean;
+                    user?: undefined;
+                } | {
                     success: boolean;
                     user: {
                         id: number;
                         email: string;
                         username: string;
                     };
+                    requires2FA?: undefined;
                 };
                 meta: Meta;
             }>;
@@ -877,7 +868,6 @@ declare function createAuthRouter<TExtensions extends SchemaExtensions = {}>(con
     procedure: _trpc_server.TRPCProcedureBuilder<TrpcContext, Meta, {
         sessionId: number;
         userId: number;
-        refreshToken: string | undefined;
         socketId: string | null;
         headers: http.IncomingHttpHeaders;
         res: http.ServerResponse<http.IncomingMessage>;
@@ -886,7 +876,6 @@ declare function createAuthRouter<TExtensions extends SchemaExtensions = {}>(con
     authProcedure: _trpc_server.TRPCProcedureBuilder<TrpcContext, Meta, {
         sessionId: number;
         userId: number;
-        refreshToken: string | undefined;
         socketId: string | null;
         headers: http.IncomingHttpHeaders;
         res: http.ServerResponse<http.IncomingMessage>;
@@ -916,76 +905,71 @@ declare function isMobileDevice(userAgent: string): boolean;
 declare function isNativeApp(userAgent: string): boolean;
 
 /**
- * Default storage keys for auth cookies
+ * Default storage key for auth cookie
  */
 declare const DEFAULT_STORAGE_KEYS: {
-    ACCESS_TOKEN: string;
-    REFRESH_TOKEN: string;
+    AUTH_TOKEN: string;
 };
 /**
- * Parse auth tokens from cookie header
+ * Parse auth token from cookie header
  * @param cookieHeader - Raw cookie header string
  * @param storageKeys - Custom storage keys (optional)
- * @returns Parsed tokens
+ * @returns Parsed auth token
  */
-declare function parseAuthCookies(cookieHeader: string | undefined, storageKeys?: {
-    accessToken: string;
-    refreshToken: string;
+declare function parseAuthCookie(cookieHeader: string | undefined, storageKeys?: {
+    authToken: string;
 }): {
-    accessToken?: string;
-    refreshToken?: string;
+    authToken?: string;
 };
 /**
- * Set auth cookies on response
+ * Set auth cookie on response
  * @param res - HTTP response object
- * @param credentials - Access and refresh tokens
+ * @param authToken - Auth JWT token
  * @param settings - Cookie settings
  * @param storageKeys - Storage key names
  */
-declare function setAuthCookies(res: CreateHTTPContextOptions['res'], credentials: Partial<AuthCredentials>, settings: Partial<CookieSettings>, storageKeys?: {
-    accessToken: string;
-    refreshToken: string;
+declare function setAuthCookie(res: CreateHTTPContextOptions['res'], authToken: string, settings: Partial<CookieSettings>, storageKeys?: {
+    authToken: string;
 }): void;
 /**
- * Clear auth cookies (for logout)
+ * Clear auth cookie (for logout)
  * @param res - HTTP response object
  * @param settings - Cookie settings
  * @param storageKeys - Storage key names
  */
-declare function clearAuthCookies(res: CreateHTTPContextOptions['res'], settings: Partial<CookieSettings>, storageKeys?: {
-    accessToken: string;
-    refreshToken: string;
+declare function clearAuthCookie(res: CreateHTTPContextOptions['res'], settings: Partial<CookieSettings>, storageKeys?: {
+    authToken: string;
 }): void;
 
 /**
- * Options for creating access tokens
+ * Options for creating auth tokens
  */
 interface CreateTokenOptions {
     secret: string;
-    expiresIn: SignOptions['expiresIn'];
+    expiresIn: number;
 }
 /**
- * Options for verifying access tokens
+ * Options for verifying auth tokens
  */
 interface VerifyTokenOptions {
     secret: string;
     ignoreExpiration?: boolean;
 }
 /**
- * Create a JWT access token
+ * Create a JWT auth token
  * @param payload - Token payload containing session and user info
  * @param options - Token creation options
  * @returns Signed JWT token
  */
-declare function createAccessToken(payload: Omit<JwtPayload, 'exp' | 'iat'>, options: CreateTokenOptions): string;
+declare function createAuthToken(payload: Omit<JwtPayload, 'exp' | 'iat'>, options: CreateTokenOptions): string;
 /**
- * Verify and decode a JWT access token
+ * Verify and decode a JWT auth token
  * @param token - JWT token to verify
  * @param options - Verification options
  * @returns Decoded token payload
  * @throws Error if token is invalid or expired
  */
-declare function verifyAccessToken(token: string, options: VerifyTokenOptions): JwtPayload;
+declare function verifyAuthToken(token: string, options: VerifyTokenOptions): JwtPayload;
 /**
  * Decode a JWT token without verification
  * @param token - JWT token to decode
@@ -1060,4 +1044,4 @@ declare function verifyTotp(code: string, secret: string): Promise<boolean>;
  */
 declare function generateOtp(min?: number, max?: number): number;
 
-export { type AuthConfig, type AuthFeatures, AuthHooks, type AuthRouter, DEFAULT_STORAGE_KEYS, type EmailAdapter, type OAuthKeys, type OAuthProvider, type OAuthResult, OAuthVerificationError, SchemaExtensions, type TokenSettings, type TrpcContext, cleanBase32String, clearAuthCookies, comparePassword, createAccessToken, createAuthConfig, createAuthGuard, createAuthRouter, createConsoleEmailAdapter, createNoopEmailAdapter, createOAuthVerifier, decodeToken, defaultAuthConfig, defaultCookieSettings, defaultStorageKeys, defaultTokenSettings, detectBrowser, generateOtp, generateTotpCode, generateTotpSecret, hashPassword, isMobileDevice, isNativeApp, isTokenExpiredError, isTokenInvalidError, parseAuthCookies, setAuthCookies, validatePasswordStrength, verifyAccessToken, verifyTotp };
+export { type AuthConfig, type AuthFeatures, AuthHooks, type AuthRouter, DEFAULT_STORAGE_KEYS, type EmailAdapter, type OAuthKeys, type OAuthProvider, type OAuthResult, OAuthVerificationError, SchemaExtensions, type TokenSettings, type TrpcContext, cleanBase32String, clearAuthCookie, comparePassword, createAuthConfig, createAuthGuard, createAuthRouter, createAuthToken, createConsoleEmailAdapter, createNoopEmailAdapter, createOAuthVerifier, decodeToken, defaultAuthConfig, defaultCookieSettings, defaultStorageKeys, defaultTokenSettings, detectBrowser, generateOtp, generateTotpCode, generateTotpSecret, hashPassword, isMobileDevice, isNativeApp, isTokenExpiredError, isTokenInvalidError, parseAuthCookie, setAuthCookie, validatePasswordStrength, verifyAuthToken, verifyTotp };