@fonderie/auth 7.9.3 → 7.10.0

package/dist/migrations/sql/018_login_event_location.sql

@@ -0,0 +1,6 @@
+-- Optional location for each login attempt (and registration), filled only when the app supplies
+-- IAuthConfig.location. JSONB rather than columns: resolvers differ in
+-- what they know (edge headers give country/region/city; an IP-intelligence
+-- API adds ISP/ASN/proxy), and auth sanitizes the shape before writing.
+-- Nullable, no default, no backfill: existing rows simply have no location.
+ALTER TABLE fonderie_login_events ADD COLUMN IF NOT EXISTS location JSONB;

package/dist/migrations/sql/019_session_location.sql

@@ -0,0 +1,5 @@
+-- Where each session was opened from, filled only when the app supplies
+-- IAuthConfig.location — the Active Sessions screen shows it next to the IP.
+-- Same shape and sanitizing as fonderie_login_events.location. Nullable, no
+-- backfill.
+ALTER TABLE fonderie_sessions ADD COLUMN IF NOT EXISTS location JSONB;

package/dist/{session-Bv4qu9xV.d.cts → session-DU9QTf7f.d.cts}

@@ -2,6 +2,41 @@ import { Middleware } from '@fonderie/core';
 import { IStoreAdapter } from '@fonderie/store';
 import { IRateLimitStore, IRateLimitRule } from '@fonderie/rate-limit';
 
+/** Where a login attempt came from. Every field is optional; unknown is null. */
+interface IRequestLocation {
+    country?: string | null;
+    countryName?: string | null;
+    subdivision?: string | null;
+    subdivisionName?: string | null;
+    city?: string | null;
+    /** Postal / ZIP code as the provider reports it (94043, K1A 0B1, SW1A). Approximate. */
+    postalCode?: string | null;
+    continent?: string | null;
+    timeZone?: string | null;
+    latitude?: number | null;
+    longitude?: number | null;
+    /** How far off the point may be, in kilometres (MaxMind's accuracy_radius).
+     * Lets a UI say "near Mountain View (±20 km)" instead of implying precision. */
+    accuracyRadius?: number | null;
+    /** Network facts — only resolvers backed by an IP-intelligence API know these. */
+    isp?: string | null;
+    org?: string | null;
+    asn?: string | null;
+    mobile?: boolean | null;
+    proxy?: boolean | null;
+    hosting?: boolean | null;
+}
+interface ILocationRequest {
+    /** The resolved client IP (adapter-resolved, proxy-aware), or null. */
+    ip: string | null;
+    /** The incoming request's headers — for platform geolocation headers. */
+    headers: Headers;
+}
+type LocationResolver = (req: ILocationRequest) => IRequestLocation | null | undefined | Promise<IRequestLocation | null | undefined>;
+/** Keep only well-formed, bounded fields. Returns null when nothing survives. */
+declare function sanitizeLocation(input: unknown): IRequestLocation | null;
+declare function resolveLocation(resolver: LocationResolver | undefined, req: ILocationRequest, timeoutMs?: number): Promise<IRequestLocation | null>;
+
 interface IAuthRateLimitConfig {
     store?: IRateLimitStore;
     rules?: Partial<Record<AuthLimitedRoute, IRateLimitRule | false>>;
@@ -51,6 +86,7 @@ declare const MESSAGE_KEYS: {
 };
 type AuthMessageKey = (typeof MESSAGE_KEYS)[keyof typeof MESSAGE_KEYS];
 interface IAuthConfig extends IAuthSecrets, IAuthRuntimeConfig {
+    location?: LocationResolver;
     secureCookies?: boolean;
     rateLimit?: IAuthRateLimitConfig | false;
     accessTokenDuration?: string;
@@ -76,4 +112,4 @@ type AuthRouteOverride = string | {
 
 declare function withSession(store: IStoreAdapter, config: IAuthConfig): Middleware;
 
-export { AUTH_CONFIG_KEYS as A, type IAuthConfig as I, MESSAGE_KEYS as M, type AuthLimitedRoute as a, type AuthMessageKey as b, type IAuthRateLimitConfig as c, type IAuthRuntimeConfig as d, type IAuthSecrets as e, type IDataExportContributor as f, buildAuthAccountLimiter as g, buildAuthIpLimiter as h, withSession as w };
+export { AUTH_CONFIG_KEYS as A, type IAuthConfig as I, type LocationResolver as L, MESSAGE_KEYS as M, type IRequestLocation as a, type AuthLimitedRoute as b, type AuthMessageKey as c, type IAuthRateLimitConfig as d, type IAuthRuntimeConfig as e, type IAuthSecrets as f, type IDataExportContributor as g, type ILocationRequest as h, buildAuthAccountLimiter as i, buildAuthIpLimiter as j, resolveLocation as r, sanitizeLocation as s, withSession as w };

package/dist/{session-Bv4qu9xV.d.ts → session-DU9QTf7f.d.ts}

@@ -2,6 +2,41 @@ import { Middleware } from '@fonderie/core';
 import { IStoreAdapter } from '@fonderie/store';
 import { IRateLimitStore, IRateLimitRule } from '@fonderie/rate-limit';
 
+/** Where a login attempt came from. Every field is optional; unknown is null. */
+interface IRequestLocation {
+    country?: string | null;
+    countryName?: string | null;
+    subdivision?: string | null;
+    subdivisionName?: string | null;
+    city?: string | null;
+    /** Postal / ZIP code as the provider reports it (94043, K1A 0B1, SW1A). Approximate. */
+    postalCode?: string | null;
+    continent?: string | null;
+    timeZone?: string | null;
+    latitude?: number | null;
+    longitude?: number | null;
+    /** How far off the point may be, in kilometres (MaxMind's accuracy_radius).
+     * Lets a UI say "near Mountain View (±20 km)" instead of implying precision. */
+    accuracyRadius?: number | null;
+    /** Network facts — only resolvers backed by an IP-intelligence API know these. */
+    isp?: string | null;
+    org?: string | null;
+    asn?: string | null;
+    mobile?: boolean | null;
+    proxy?: boolean | null;
+    hosting?: boolean | null;
+}
+interface ILocationRequest {
+    /** The resolved client IP (adapter-resolved, proxy-aware), or null. */
+    ip: string | null;
+    /** The incoming request's headers — for platform geolocation headers. */
+    headers: Headers;
+}
+type LocationResolver = (req: ILocationRequest) => IRequestLocation | null | undefined | Promise<IRequestLocation | null | undefined>;
+/** Keep only well-formed, bounded fields. Returns null when nothing survives. */
+declare function sanitizeLocation(input: unknown): IRequestLocation | null;
+declare function resolveLocation(resolver: LocationResolver | undefined, req: ILocationRequest, timeoutMs?: number): Promise<IRequestLocation | null>;
+
 interface IAuthRateLimitConfig {
     store?: IRateLimitStore;
     rules?: Partial<Record<AuthLimitedRoute, IRateLimitRule | false>>;
@@ -51,6 +86,7 @@ declare const MESSAGE_KEYS: {
 };
 type AuthMessageKey = (typeof MESSAGE_KEYS)[keyof typeof MESSAGE_KEYS];
 interface IAuthConfig extends IAuthSecrets, IAuthRuntimeConfig {
+    location?: LocationResolver;
     secureCookies?: boolean;
     rateLimit?: IAuthRateLimitConfig | false;
     accessTokenDuration?: string;
@@ -76,4 +112,4 @@ type AuthRouteOverride = string | {
 
 declare function withSession(store: IStoreAdapter, config: IAuthConfig): Middleware;
 
-export { AUTH_CONFIG_KEYS as A, type IAuthConfig as I, MESSAGE_KEYS as M, type AuthLimitedRoute as a, type AuthMessageKey as b, type IAuthRateLimitConfig as c, type IAuthRuntimeConfig as d, type IAuthSecrets as e, type IDataExportContributor as f, buildAuthAccountLimiter as g, buildAuthIpLimiter as h, withSession as w };
+export { AUTH_CONFIG_KEYS as A, type IAuthConfig as I, type LocationResolver as L, MESSAGE_KEYS as M, type IRequestLocation as a, type AuthLimitedRoute as b, type AuthMessageKey as c, type IAuthRateLimitConfig as d, type IAuthRuntimeConfig as e, type IAuthSecrets as f, type IDataExportContributor as g, type ILocationRequest as h, buildAuthAccountLimiter as i, buildAuthIpLimiter as j, resolveLocation as r, sanitizeLocation as s, withSession as w };

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@fonderie/auth",
-	"version": "7.9.3",
+	"version": "7.10.0",
 	"fonderie": { "stability": "stable" },
 	"description": "Drop-in auth for SaaS — email/password, phone OTP, Google OAuth, stateless JWT sessions, TOTP-based MFA with backup codes, and self-service password recovery.",
 	"keywords": [