@finueva/auth 0.26.0 → 0.27.0

package/dist/server.d.ts

@@ -193,9 +193,13 @@ interface DriveRecipientAuthOptions {
   fetch?: typeof globalThis.fetch;
   timeoutMs?: number;
 }
-interface ResolveDriveRecipientInput {
+type ResolveDriveRecipientInput = {
   email: string;
-}
+  userId?: never;
+} | {
+  userId: string;
+  email?: never;
+};
 interface DriveRecipient {
   userId: string;
   name: string;

package/dist/server.js

@@ -3122,11 +3122,17 @@ function createDriveRecipientAuth(options) {
 	return { async resolveRecipient(input, clientAssertion) {
 		let body;
 		let email;
+		let userId;
 		try {
-			if (!exact(input, ["email"]) || typeof input.email !== "string") throw new Error();
-			email = input.email.trim().toLowerCase();
-			if (!validEmail(email)) throw new Error();
-			body = JSON.stringify({ email });
+			if (exact(input, ["email"]) && typeof input.email === "string") {
+				email = input.email.trim().toLowerCase();
+				if (!validEmail(email)) throw new Error();
+				body = JSON.stringify({ email });
+			} else if (exact(input, ["userId"]) && typeof input.userId === "string") {
+				userId = input.userId;
+				if (!/^[A-Za-z0-9_-]{1,128}$(?![\s\S])/.test(userId)) throw new Error();
+				body = JSON.stringify({ userId });
+			} else throw new Error();
 		} catch {
 			throw new AuthError("invalid_request", 400);
 		}
@@ -3199,7 +3205,7 @@ function createDriveRecipientAuth(options) {
 					"email"
 				])) throw authorityUnavailable();
 				const recipient = value.recipient;
-				if (typeof recipient.userId !== "string" || !/^[A-Za-z0-9_-]{1,128}$(?![\s\S])/.test(recipient.userId) || typeof recipient.name !== "string" || recipient.name.length === 0 || encoder.encode(recipient.name).byteLength > 1024 || !validEmail(recipient.email) || recipient.email !== recipient.email.trim().toLowerCase() || recipient.email !== email) throw authorityUnavailable();
+				if (typeof recipient.userId !== "string" || !/^[A-Za-z0-9_-]{1,128}$(?![\s\S])/.test(recipient.userId) || typeof recipient.name !== "string" || recipient.name.length === 0 || encoder.encode(recipient.name).byteLength > 1024 || !validEmail(recipient.email) || recipient.email !== recipient.email.trim().toLowerCase() || email !== void 0 && recipient.email !== email || userId !== void 0 && recipient.userId !== userId) throw authorityUnavailable();
 				return {
 					userId: recipient.userId,
 					name: recipient.name,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@finueva/auth",
-  "version": "0.26.0",
+  "version": "0.27.0",
   "description": "Public browser and server SDK for Finueva Auth",
   "type": "module",
   "sideEffects": false,