@fonderie/auth 7.3.5 → 7.4.0

package/dist/index.d.cts

@@ -2,8 +2,8 @@ export { IMfaChallenge, ISession, IUser } from './types.cjs';
 import { IFonderieModule, IReadinessProblem, IFonderieApp } from '@fonderie/core';
 import { IStoreAdapter } from '@fonderie/store';
 import { EventBus } from '@fonderie/events';
-import { I as IAuthConfig } from './session-Dc5-JNoW.cjs';
-export { A as AUTH_CONFIG_KEYS, a as AuthLimitedRoute, b as AuthMessageKey, c as IAuthRateLimitConfig, d as IAuthRuntimeConfig, e as IAuthSecrets, f as IDataExportContributor, M as MESSAGE_KEYS, g as buildAuthAccountLimiter, h as buildAuthIpLimiter, w as withSession } from './session-Dc5-JNoW.cjs';
+import { I as IAuthConfig } from './session-CvNqy0Kd.cjs';
+export { A as AUTH_CONFIG_KEYS, a as AuthLimitedRoute, b as AuthMessageKey, c as IAuthRateLimitConfig, d as IAuthRuntimeConfig, e as IAuthSecrets, f as IDataExportContributor, M as MESSAGE_KEYS, g as buildAuthAccountLimiter, h as buildAuthIpLimiter, w as withSession } from './session-CvNqy0Kd.cjs';
 export { IUserDTO, toUserDTO } from './dtos/user.cjs';
 export { requireAuth, validate } from '@fonderie/core/middlewares';
 import { z } from 'zod';

package/dist/index.d.ts

@@ -2,8 +2,8 @@ export { IMfaChallenge, ISession, IUser } from './types.js';
 import { IFonderieModule, IReadinessProblem, IFonderieApp } from '@fonderie/core';
 import { IStoreAdapter } from '@fonderie/store';
 import { EventBus } from '@fonderie/events';
-import { I as IAuthConfig } from './session-Dc5-JNoW.js';
-export { A as AUTH_CONFIG_KEYS, a as AuthLimitedRoute, b as AuthMessageKey, c as IAuthRateLimitConfig, d as IAuthRuntimeConfig, e as IAuthSecrets, f as IDataExportContributor, M as MESSAGE_KEYS, g as buildAuthAccountLimiter, h as buildAuthIpLimiter, w as withSession } from './session-Dc5-JNoW.js';
+import { I as IAuthConfig } from './session-CvNqy0Kd.js';
+export { A as AUTH_CONFIG_KEYS, a as AuthLimitedRoute, b as AuthMessageKey, c as IAuthRateLimitConfig, d as IAuthRuntimeConfig, e as IAuthSecrets, f as IDataExportContributor, M as MESSAGE_KEYS, g as buildAuthAccountLimiter, h as buildAuthIpLimiter, w as withSession } from './session-CvNqy0Kd.js';
 export { IUserDTO, toUserDTO } from './dtos/user.js';
 export { requireAuth, validate } from '@fonderie/core/middlewares';
 import { z } from 'zod';

package/dist/index.js

@@ -44,6 +44,7 @@ var init_password = __esm({
 });
 
 // src/routes.ts
+import { setApiResponse as setApiResponse6, HTTP as HTTP6 } from "@fonderie/core";
 import { requireAuth, requireAnyAuth, requireVerified } from "@fonderie/core/middlewares";
 
 // src/middlewares/require-email-login.ts
@@ -2711,6 +2712,27 @@ function buildAuthRoutes(store, config, bus) {
     return [o.method ?? method, o.path ?? path, ...handlers];
   };
   const routes = [
+    // Which sign-in methods this deployment can actually honour (Public).
+    //
+    // A frontend has to decide which buttons to draw, and the only honest
+    // source is the side holding the credentials. The alternative — a
+    // build-time flag in the app — stores the same fact twice and lets the
+    // two disagree; the symptom is a user clicking a provider the server
+    // cannot complete and landing on the provider's error page, which the
+    // app cannot explain.
+    //
+    // Public and unauthenticated on purpose: the login screen needs it
+    // before anyone has signed in. It discloses nothing a visitor could not
+    // learn by looking at the buttons, and deliberately nothing else — no
+    // client ids, no redirect URIs, no module inventory.
+    R(
+      "providers",
+      "GET",
+      "/auth/providers",
+      async () => setApiResponse6(HTTP6.OK, "AUTH_PROVIDERS", "Sign-in methods available here", {
+        providers: [...config.providers]
+      })
+    ),
     // Registration & Login (Public)
     R("register", "POST", "/auth/register", ipLimit("register"), validate(registerSchema), auth.register),
     R("login", "POST", "/auth/login", ipLimit("login"), validate(loginSchema), acctLimit("login"), auth.login),