@fonderie/auth 5.0.4 → 5.2.0

package/brain/outcomes.md

@@ -19,6 +19,20 @@ created_at               TIMESTAMPTZ NOT NULL DEFAULT now()
 PRIMARY                  KEY (user_id)
 ```
 
+### `fonderie_login_events`
+
+```sql
+id                       UUID PRIMARY KEY DEFAULT gen_random_uuid()
+user_id                  UUID REFERENCES fonderie_users(id) ON DELETE CASCADE
+email_attempted          TEXT
+method                   TEXT NOT NULL
+outcome                  TEXT NOT NULL
+failure_reason           TEXT
+ip_address               TEXT
+user_agent               TEXT
+created_at               TIMESTAMPTZ NOT NULL DEFAULT now()
+```
+
 ### `fonderie_mfa_backup_codes`
 
 ```sql
@@ -119,6 +133,7 @@ Raw SQL ships in `node_modules/@fonderie/auth/dist/migrations/sql/` — read it
 | GET | `/auth/google` | `oauth.googleInit` |
 | GET | `/auth/google/callback` | `oauth.googleCallback` |
 | POST | `/auth/login` | `ipLimit('login') → validate(loginSchema) → acctLimit('login') → auth.login` |
+| GET | `/auth/login-history` | `requireAuth → user.loginHistory` |
 | POST | `/auth/logout` | `requireAuth → validate(refreshSchema) → auth.logout` |
 | POST | `/auth/mfa/backup-codes` | `requireAuth → requireEmailLogin → requireVerified → validate(mfaTokenSchema) → mfa.regenerateBackupCodes` |
 | POST | `/auth/mfa/disable` | `requireAuth → requireEmailLogin → requireVerified → validate(mfaTokenSchema) → mfa.disable` |
@@ -127,6 +142,9 @@ Raw SQL ships in `node_modules/@fonderie/auth/dist/migrations/sql/` — read it
 | POST | `/auth/refresh` | `validate(refreshSchema) → auth.refresh` |
 | POST | `/auth/register` | `ipLimit('register') → validate(registerSchema) → auth.register` |
 | GET | `/auth/send-verification` | `requireAuth → auth.sendVerification` |
+| GET | `/auth/sessions` | `requireAuth → user.listSessions` |
+| DELETE | `/auth/sessions/:id` | `requireAuth → user.terminateSession` |
+| DELETE | `/auth/sessions/others` | `requireAuth → user.terminateOtherSessions` |
 | POST | `/auth/verify` | `requireAuth → validate(verifySchema) → auth.verify` |
 | DELETE | `/users` | `requireAuth → verifyGate → user.deleteMe` |
 | GET | `/users` | `requireAuth → user.me` |

package/brain/signatures.md

@@ -94,6 +94,8 @@ const MESSAGE_KEYS: { readonly emailRegistration: "email-registration"; readonly
 
 type AuthMessageKey = (typeof MESSAGE_KEYS)[keyof typeof MESSAGE_KEYS];
 
+const DEFAULT_TEMPLATES: { "email-registration": { subject: string; html: string; text: string; }; "email-verification": { subject: string; html: string; text: string; }; "password-reset": { subject: string; html: string; text: string; }; "phone-otp": { text: string; }; "mfa-enabled": { subject: string; html: string; text: string; }; "mfa-disabled": { subject: string; html: string; text: string; }; "mfa-backup-codes-regenerated": { subject: string; html: string; text: string; }; "email-changed": { subject: string; html: string; text: string; }; "phone-changed": { subject: string; html: string; text: string; }; }
+
 interface IUserDTO {
     id: string;
     email: string;
@@ -116,6 +118,30 @@ interface IUserDTO {
 
 function toUserDTO(user: IUser, phoneVerified?: boolean): IUserDTO
 
+interface ILoginEventDTO {
+    id: string;
+    method: string;
+    outcome: string;
+    failureReason: string | null;
+    ipAddress: string | null;
+    userAgent: string | null;
+    createdAt: string;
+}
+
+interface ILoginHistoryPageDTO {
+    events: ILoginEventDTO[];
+    nextCursor: string | null;
+}
+
+interface ISessionDTO {
+    id: string;
+    current: boolean;
+    ipAddress: string | null;
+    userAgent: string | null;
+    createdAt: string;
+    expiresAt: string;
+}
+
 function validate(schema: IRequestSchema): Middleware
 
 namespace schemas — exports: ChangePasswordInput, LoginInput, RegisterInput, ResetPasswordInput, changePasswordSchema, forgotPasswordSchema, loginSchema, mfaTokenSchema, refreshSchema, registerSchema, resetPasswordSchema, updateEmailSchema, updatePhoneSchema, updatePreferencesSchema, updateProfileSchema, verifySchema