@fonderie/auth 7.0.0 → 7.1.0

package/dist/middlewares/index.d.cts

@@ -1,5 +1,5 @@
 import * as _fonderie_core from '@fonderie/core';
-import { w as withSession } from '../session-Db6KZca3.cjs';
+import { w as withSession } from '../session-6B77MAFn.cjs';
 import '@fonderie/store';
 import '@fonderie/rate-limit';
 

package/dist/middlewares/index.d.ts

@@ -1,5 +1,5 @@
 import * as _fonderie_core from '@fonderie/core';
-import { w as withSession } from '../session-Db6KZca3.js';
+import { w as withSession } from '../session-6B77MAFn.js';
 import '@fonderie/store';
 import '@fonderie/rate-limit';
 

package/dist/migrations/sql/015_password_reset_token.sql

@@ -0,0 +1,11 @@
+-- Re-introduce a high-entropy reset token ALONGSIDE the 6-digit pin (008 had
+-- renamed the original token column into pin). The pin stays for the
+-- code-entry UX (rate-limited at the route); the token backs a reset LINK
+-- that needs no rate limit because it isn't brute-forceable. Nullable so
+-- existing rows are valid; a partial unique index enforces uniqueness only
+-- for the non-null tokens.
+ALTER TABLE fonderie_password_resets ADD COLUMN IF NOT EXISTS token TEXT;
+
+CREATE UNIQUE INDEX IF NOT EXISTS uq_fonderie_password_resets_token
+	ON fonderie_password_resets (token)
+	WHERE token IS NOT NULL;

package/dist/{session-Db6KZca3.d.cts → session-6B77MAFn.d.cts}

@@ -44,6 +44,7 @@ interface IAuthConfig extends IAuthSecrets, IAuthRuntimeConfig {
     accessTokenDuration?: string;
     providers: ('email' | 'phone' | 'google' | 'github')[];
     appName?: string;
+    passwordResetUrl?: string;
     resolve?: (ctx: {
         meta: Record<string, unknown>;
     }) => Partial<IAuthRuntimeConfig>;

package/dist/{session-Db6KZca3.d.ts → session-6B77MAFn.d.ts}

@@ -44,6 +44,7 @@ interface IAuthConfig extends IAuthSecrets, IAuthRuntimeConfig {
     accessTokenDuration?: string;
     providers: ('email' | 'phone' | 'google' | 'github')[];
     appName?: string;
+    passwordResetUrl?: string;
     resolve?: (ctx: {
         meta: Record<string, unknown>;
     }) => Partial<IAuthRuntimeConfig>;

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@fonderie/auth",
-	"version": "7.0.0",
+	"version": "7.1.0",
 	"description": "Drop-in auth for SaaS — email/password, phone OTP, Google OAuth, stateless JWT sessions, TOTP-based MFA with backup codes, and self-service password recovery.",
 	"keywords": [
 		"fonderiejs",
@@ -58,10 +58,10 @@
 		"jsonwebtoken": "^9.0.3",
 		"qrcode": "^1.5.4",
 		"zod": "^4.5.4",
-		"@fonderie/rate-limit": "^4.0.6"
+		"@fonderie/rate-limit": "^4.0.7"
 	},
 	"peerDependencies": {
-		"@fonderie/core": "^0.9.0",
+		"@fonderie/core": "^0.10.0",
 		"@fonderie/events": "^5.0.0",
 		"@fonderie/store": "^0.3.0"
 	},