@fonderie/auth 7.1.0 → 7.1.1

package/dist/index.js

@@ -1156,6 +1156,8 @@ function normalizeEmailSafe(email2) {
 }
 
 // src/models/password-reset.model.ts
+import { createHash } from "crypto";
+var hashSecret = (value) => createHash("sha256").update(value).digest("hex");
 var PasswordResetModel = class {
   constructor(store) {
     this.store = store;
@@ -1167,7 +1169,7 @@ var PasswordResetModel = class {
 			VALUES ($1, $2, $3, $4, now())
 			ON CONFLICT (user_id) DO UPDATE
 			SET pin = $2, token = $3, expires_at = $4, created_at = now()`,
-      [userId, pin, token, expiresAt]
+      [userId, hashSecret(pin), hashSecret(token), expiresAt]
     );
   }
   async findLastSentAt(userId) {
@@ -1181,7 +1183,7 @@ var PasswordResetModel = class {
   async findByPin(pin) {
     const [row] = await this.store.query(
       `SELECT user_id, expires_at FROM fonderie_password_resets WHERE pin = $1`,
-      [pin]
+      [hashSecret(pin)]
     );
     if (!row) return null;
     return { userId: row.user_id, expiresAt: new Date(row.expires_at) };
@@ -1194,7 +1196,7 @@ var PasswordResetModel = class {
     if (typeof token !== "string" || token.length < 32) return null;
     const [row] = await this.store.query(
       `SELECT user_id, expires_at FROM fonderie_password_resets WHERE token = $1`,
-      [token]
+      [hashSecret(token)]
     );
     if (!row) return null;
     return { userId: row.user_id, expiresAt: new Date(row.expires_at) };