@fonderie/auth 1.0.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Fonderie, Inc.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,51 @@
+# @fonderie/auth
+
+Drop-in auth for SaaS: email/password, phone OTP, Google OAuth, and
+stateless JWT sessions — shipped as a brick that registers its routes,
+migrations, and events in one line.
+
+## Install
+
+```sh
+npm install @fonderie/auth
+```
+
+## Use
+
+```ts
+import { FonderieApp, defineConfig } from '@fonderie/core';
+import { AuthModule } from '@fonderie/auth';
+
+const app = await new FonderieApp(defineConfig({}))
+  .register(new AuthModule())
+  .boot();
+```
+
+Guard your own routes with the exported middlewares:
+
+```ts
+import { withSession, requireAuth } from '@fonderie/auth';
+```
+
+Also exports `toUserDTO`, `normalizeEmail`, and the full type surface
+(`IUser`, `ISession`, `IMfaChallenge`, …).
+
+## Why this exists
+
+You've shipped this plumbing before — auth, teams, billing, messaging —
+and the next project will ask for it again. Fonderie packages it once:
+plain TypeScript modules for
+[`@fonderie/core`](https://github.com/fonderie-js/sdk/tree/main/packages/core),
+PostgreSQL-backed, self-hosted, MIT. No external control plane, no
+per-seat anything. Register the modules you need; skip the ones you don't.
+
+**This package owns** who the caller is. Identity, credentials, sessions, and MFA — every
+other brick trusts the `ctx.user` this one establishes.
+
+Browse the whole set at
+[fonderie-js/sdk](https://github.com/fonderie-js/sdk) · follow
+[@fonderiejs](https://x.com/fonderiejs)
+
+## License
+
+MIT © Fonderie, Inc.

package/dist/dtos/user.cjs

@@ -0,0 +1,66 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/dtos/user.ts
+var user_exports = {};
+__export(user_exports, {
+  toUserDTO: () => toUserDTO
+});
+module.exports = __toCommonJS(user_exports);
+var import_core = require("@fonderie/core");
+var DEFAULT_PREFERENCES = {
+  locale: "en-US",
+  timezone: "UTC",
+  notifications: { email: true, inApp: true, sms: false, push: false },
+  emailDigest: "immediate",
+  dateFormat: "MM/DD/YYYY",
+  timeFormat: "hh:mm A"
+};
+function toUserDTO(user, phoneVerified = false) {
+  const prefs = user.preferences ?? {};
+  return {
+    id: (0, import_core.stringOrEmpty)(user.id),
+    email: (0, import_core.stringOrEmpty)(user.email),
+    firstName: (0, import_core.stringOrEmpty)(user.firstName),
+    lastName: (0, import_core.stringOrEmpty)(user.lastName),
+    phone: (0, import_core.stringOrEmpty)(user.phone),
+    profileImageUrl: (0, import_core.stringOrEmpty)(user.profileImageUrl),
+    isActive: typeof user.isActive === "boolean" ? user.isActive : true,
+    lastLogin: user.lastLogin instanceof Date ? user.lastLogin.toISOString() : "",
+    preferences: {
+      ...DEFAULT_PREFERENCES,
+      ...prefs,
+      locale: user.locale || prefs.locale || "en-US",
+      timezone: user.timezone || prefs.timezone || "UTC"
+    },
+    isEmailVerified: user.emailVerifiedAt !== null,
+    isPhoneVerified: phoneVerified,
+    mfaEnabled: (0, import_core.booleanOrFalse)(user.mfaEnabled),
+    suspended: (0, import_core.booleanOrFalse)(user.suspended),
+    whitelist: (0, import_core.booleanOrFalse)(user.whitelist),
+    ipWhitelist: Array.isArray(user.ipWhitelist) ? user.ipWhitelist : [],
+    createdAt: user.createdAt instanceof Date ? user.createdAt.toISOString() : "",
+    updatedAt: user.updatedAt instanceof Date ? user.updatedAt.toISOString() : ""
+  };
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  toUserDTO
+});
+//# sourceMappingURL=user.cjs.map

package/dist/dtos/user.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/dtos/user.ts"],"sourcesContent":["import { stringOrEmpty, booleanOrFalse } from '@fonderie/core';\n\nimport type { IUser, IUserPreferences } from '../types';\n\nexport interface IUserDTO {\n\tid: string;\n\temail: string;\n\tfirstName: string;\n\tlastName: string;\n\tphone: string;\n\tprofileImageUrl: string;\n\tisActive: boolean;\n\tlastLogin: string;\n\tpreferences: IUserPreferences;\n\tisEmailVerified: boolean;\n\tisPhoneVerified: boolean;\n\tmfaEnabled: boolean;\n\tsuspended: boolean;\n\twhitelist: boolean;\n\tipWhitelist: string[];\n\tcreatedAt: string;\n\tupdatedAt: string;\n}\n\nconst DEFAULT_PREFERENCES: IUserPreferences = {\n\tlocale: 'en-US',\n\ttimezone: 'UTC',\n\tnotifications: { email: true, inApp: true, sms: false, push: false },\n\temailDigest: 'immediate',\n\tdateFormat: 'MM/DD/YYYY',\n\ttimeFormat: 'hh:mm A',\n};\n\nexport function toUserDTO(user: IUser, phoneVerified = false): IUserDTO {\n\tconst prefs = user.preferences ?? ({} as IUserPreferences);\n\treturn {\n\t\tid: stringOrEmpty(user.id),\n\t\temail: stringOrEmpty(user.email),\n\t\tfirstName: stringOrEmpty(user.firstName),\n\t\tlastName: stringOrEmpty(user.lastName),\n\t\tphone: stringOrEmpty(user.phone),\n\t\tprofileImageUrl: stringOrEmpty(user.profileImageUrl),\n\t\tisActive: typeof user.isActive === 'boolean' ? user.isActive : true,\n\t\tlastLogin: user.lastLogin instanceof Date ? user.lastLogin.toISOString() : '',\n\t\tpreferences: {\n\t\t\t...DEFAULT_PREFERENCES,\n\t\t\t...prefs,\n\t\t\tlocale: user.locale || prefs.locale || 'en-US',\n\t\t\ttimezone: user.timezone || prefs.timezone || 'UTC',\n\t\t},\n\t\tisEmailVerified: user.emailVerifiedAt !== null,\n\t\tisPhoneVerified: phoneVerified,\n\t\tmfaEnabled: booleanOrFalse(user.mfaEnabled),\n\t\tsuspended: booleanOrFalse(user.suspended),\n\t\twhitelist: booleanOrFalse(user.whitelist),\n\t\tipWhitelist: Array.isArray(user.ipWhitelist) ? user.ipWhitelist : [],\n\t\tcreatedAt: user.createdAt instanceof Date ? user.createdAt.toISOString() : '',\n\t\tupdatedAt: user.updatedAt instanceof Date ? user.updatedAt.toISOString() : '',\n\t};\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,kBAA8C;AAwB9C,IAAM,sBAAwC;AAAA,EAC7C,QAAQ;AAAA,EACR,UAAU;AAAA,EACV,eAAe,EAAE,OAAO,MAAM,OAAO,MAAM,KAAK,OAAO,MAAM,MAAM;AAAA,EACnE,aAAa;AAAA,EACb,YAAY;AAAA,EACZ,YAAY;AACb;AAEO,SAAS,UAAU,MAAa,gBAAgB,OAAiB;AACvE,QAAM,QAAQ,KAAK,eAAgB,CAAC;AACpC,SAAO;AAAA,IACN,QAAI,2BAAc,KAAK,EAAE;AAAA,IACzB,WAAO,2BAAc,KAAK,KAAK;AAAA,IAC/B,eAAW,2BAAc,KAAK,SAAS;AAAA,IACvC,cAAU,2BAAc,KAAK,QAAQ;AAAA,IACrC,WAAO,2BAAc,KAAK,KAAK;AAAA,IAC/B,qBAAiB,2BAAc,KAAK,eAAe;AAAA,IACnD,UAAU,OAAO,KAAK,aAAa,YAAY,KAAK,WAAW;AAAA,IAC/D,WAAW,KAAK,qBAAqB,OAAO,KAAK,UAAU,YAAY,IAAI;AAAA,IAC3E,aAAa;AAAA,MACZ,GAAG;AAAA,MACH,GAAG;AAAA,MACH,QAAQ,KAAK,UAAU,MAAM,UAAU;AAAA,MACvC,UAAU,KAAK,YAAY,MAAM,YAAY;AAAA,IAC9C;AAAA,IACA,iBAAiB,KAAK,oBAAoB;AAAA,IAC1C,iBAAiB;AAAA,IACjB,gBAAY,4BAAe,KAAK,UAAU;AAAA,IAC1C,eAAW,4BAAe,KAAK,SAAS;AAAA,IACxC,eAAW,4BAAe,KAAK,SAAS;AAAA,IACxC,aAAa,MAAM,QAAQ,KAAK,WAAW,IAAI,KAAK,cAAc,CAAC;AAAA,IACnE,WAAW,KAAK,qBAAqB,OAAO,KAAK,UAAU,YAAY,IAAI;AAAA,IAC3E,WAAW,KAAK,qBAAqB,OAAO,KAAK,UAAU,YAAY,IAAI;AAAA,EAC5E;AACD;","names":[]}

package/dist/dtos/user.d.cts

@@ -0,0 +1,24 @@
+import { IUserPreferences, IUser } from '../types.cjs';
+
+interface IUserDTO {
+    id: string;
+    email: string;
+    firstName: string;
+    lastName: string;
+    phone: string;
+    profileImageUrl: string;
+    isActive: boolean;
+    lastLogin: string;
+    preferences: IUserPreferences;
+    isEmailVerified: boolean;
+    isPhoneVerified: boolean;
+    mfaEnabled: boolean;
+    suspended: boolean;
+    whitelist: boolean;
+    ipWhitelist: string[];
+    createdAt: string;
+    updatedAt: string;
+}
+declare function toUserDTO(user: IUser, phoneVerified?: boolean): IUserDTO;
+
+export { type IUserDTO, toUserDTO };

package/dist/dtos/user.d.ts

@@ -0,0 +1,24 @@
+import { IUserPreferences, IUser } from '../types.js';
+
+interface IUserDTO {
+    id: string;
+    email: string;
+    firstName: string;
+    lastName: string;
+    phone: string;
+    profileImageUrl: string;
+    isActive: boolean;
+    lastLogin: string;
+    preferences: IUserPreferences;
+    isEmailVerified: boolean;
+    isPhoneVerified: boolean;
+    mfaEnabled: boolean;
+    suspended: boolean;
+    whitelist: boolean;
+    ipWhitelist: string[];
+    createdAt: string;
+    updatedAt: string;
+}
+declare function toUserDTO(user: IUser, phoneVerified?: boolean): IUserDTO;
+
+export { type IUserDTO, toUserDTO };

package/dist/dtos/user.js

@@ -0,0 +1,41 @@
+// src/dtos/user.ts
+import { stringOrEmpty, booleanOrFalse } from "@fonderie/core";
+var DEFAULT_PREFERENCES = {
+  locale: "en-US",
+  timezone: "UTC",
+  notifications: { email: true, inApp: true, sms: false, push: false },
+  emailDigest: "immediate",
+  dateFormat: "MM/DD/YYYY",
+  timeFormat: "hh:mm A"
+};
+function toUserDTO(user, phoneVerified = false) {
+  const prefs = user.preferences ?? {};
+  return {
+    id: stringOrEmpty(user.id),
+    email: stringOrEmpty(user.email),
+    firstName: stringOrEmpty(user.firstName),
+    lastName: stringOrEmpty(user.lastName),
+    phone: stringOrEmpty(user.phone),
+    profileImageUrl: stringOrEmpty(user.profileImageUrl),
+    isActive: typeof user.isActive === "boolean" ? user.isActive : true,
+    lastLogin: user.lastLogin instanceof Date ? user.lastLogin.toISOString() : "",
+    preferences: {
+      ...DEFAULT_PREFERENCES,
+      ...prefs,
+      locale: user.locale || prefs.locale || "en-US",
+      timezone: user.timezone || prefs.timezone || "UTC"
+    },
+    isEmailVerified: user.emailVerifiedAt !== null,
+    isPhoneVerified: phoneVerified,
+    mfaEnabled: booleanOrFalse(user.mfaEnabled),
+    suspended: booleanOrFalse(user.suspended),
+    whitelist: booleanOrFalse(user.whitelist),
+    ipWhitelist: Array.isArray(user.ipWhitelist) ? user.ipWhitelist : [],
+    createdAt: user.createdAt instanceof Date ? user.createdAt.toISOString() : "",
+    updatedAt: user.updatedAt instanceof Date ? user.updatedAt.toISOString() : ""
+  };
+}
+export {
+  toUserDTO
+};
+//# sourceMappingURL=user.js.map

package/dist/dtos/user.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/dtos/user.ts"],"sourcesContent":["import { stringOrEmpty, booleanOrFalse } from '@fonderie/core';\n\nimport type { IUser, IUserPreferences } from '../types';\n\nexport interface IUserDTO {\n\tid: string;\n\temail: string;\n\tfirstName: string;\n\tlastName: string;\n\tphone: string;\n\tprofileImageUrl: string;\n\tisActive: boolean;\n\tlastLogin: string;\n\tpreferences: IUserPreferences;\n\tisEmailVerified: boolean;\n\tisPhoneVerified: boolean;\n\tmfaEnabled: boolean;\n\tsuspended: boolean;\n\twhitelist: boolean;\n\tipWhitelist: string[];\n\tcreatedAt: string;\n\tupdatedAt: string;\n}\n\nconst DEFAULT_PREFERENCES: IUserPreferences = {\n\tlocale: 'en-US',\n\ttimezone: 'UTC',\n\tnotifications: { email: true, inApp: true, sms: false, push: false },\n\temailDigest: 'immediate',\n\tdateFormat: 'MM/DD/YYYY',\n\ttimeFormat: 'hh:mm A',\n};\n\nexport function toUserDTO(user: IUser, phoneVerified = false): IUserDTO {\n\tconst prefs = user.preferences ?? ({} as IUserPreferences);\n\treturn {\n\t\tid: stringOrEmpty(user.id),\n\t\temail: stringOrEmpty(user.email),\n\t\tfirstName: stringOrEmpty(user.firstName),\n\t\tlastName: stringOrEmpty(user.lastName),\n\t\tphone: stringOrEmpty(user.phone),\n\t\tprofileImageUrl: stringOrEmpty(user.profileImageUrl),\n\t\tisActive: typeof user.isActive === 'boolean' ? user.isActive : true,\n\t\tlastLogin: user.lastLogin instanceof Date ? user.lastLogin.toISOString() : '',\n\t\tpreferences: {\n\t\t\t...DEFAULT_PREFERENCES,\n\t\t\t...prefs,\n\t\t\tlocale: user.locale || prefs.locale || 'en-US',\n\t\t\ttimezone: user.timezone || prefs.timezone || 'UTC',\n\t\t},\n\t\tisEmailVerified: user.emailVerifiedAt !== null,\n\t\tisPhoneVerified: phoneVerified,\n\t\tmfaEnabled: booleanOrFalse(user.mfaEnabled),\n\t\tsuspended: booleanOrFalse(user.suspended),\n\t\twhitelist: booleanOrFalse(user.whitelist),\n\t\tipWhitelist: Array.isArray(user.ipWhitelist) ? user.ipWhitelist : [],\n\t\tcreatedAt: user.createdAt instanceof Date ? user.createdAt.toISOString() : '',\n\t\tupdatedAt: user.updatedAt instanceof Date ? user.updatedAt.toISOString() : '',\n\t};\n}\n"],"mappings":";AAAA,SAAS,eAAe,sBAAsB;AAwB9C,IAAM,sBAAwC;AAAA,EAC7C,QAAQ;AAAA,EACR,UAAU;AAAA,EACV,eAAe,EAAE,OAAO,MAAM,OAAO,MAAM,KAAK,OAAO,MAAM,MAAM;AAAA,EACnE,aAAa;AAAA,EACb,YAAY;AAAA,EACZ,YAAY;AACb;AAEO,SAAS,UAAU,MAAa,gBAAgB,OAAiB;AACvE,QAAM,QAAQ,KAAK,eAAgB,CAAC;AACpC,SAAO;AAAA,IACN,IAAI,cAAc,KAAK,EAAE;AAAA,IACzB,OAAO,cAAc,KAAK,KAAK;AAAA,IAC/B,WAAW,cAAc,KAAK,SAAS;AAAA,IACvC,UAAU,cAAc,KAAK,QAAQ;AAAA,IACrC,OAAO,cAAc,KAAK,KAAK;AAAA,IAC/B,iBAAiB,cAAc,KAAK,eAAe;AAAA,IACnD,UAAU,OAAO,KAAK,aAAa,YAAY,KAAK,WAAW;AAAA,IAC/D,WAAW,KAAK,qBAAqB,OAAO,KAAK,UAAU,YAAY,IAAI;AAAA,IAC3E,aAAa;AAAA,MACZ,GAAG;AAAA,MACH,GAAG;AAAA,MACH,QAAQ,KAAK,UAAU,MAAM,UAAU;AAAA,MACvC,UAAU,KAAK,YAAY,MAAM,YAAY;AAAA,IAC9C;AAAA,IACA,iBAAiB,KAAK,oBAAoB;AAAA,IAC1C,iBAAiB;AAAA,IACjB,YAAY,eAAe,KAAK,UAAU;AAAA,IAC1C,WAAW,eAAe,KAAK,SAAS;AAAA,IACxC,WAAW,eAAe,KAAK,SAAS;AAAA,IACxC,aAAa,MAAM,QAAQ,KAAK,WAAW,IAAI,KAAK,cAAc,CAAC;AAAA,IACnE,WAAW,KAAK,qBAAqB,OAAO,KAAK,UAAU,YAAY,IAAI;AAAA,IAC3E,WAAW,KAAK,qBAAqB,OAAO,KAAK,UAAU,YAAY,IAAI;AAAA,EAC5E;AACD;","names":[]}