@gatwech/auth 1.0.0-beta.18 → 1.0.0-beta.19

package/dist/client-DZHNfxuR.d.mts

@@ -0,0 +1,75 @@
+import { c as sentinel } from "./index-DRM35ir1.mjs";
+import * as _better_fetch_fetch0 from "@better-fetch/fetch";
+
+//#region src/plugins/sentinel/client.d.ts
+declare const sentinelClient: (options?: {
+  /**
+   * Base URL of the hosted identify service. Without it, the fingerprint is
+   * sent as the visitor id.
+   */
+  identifyUrl?: string | undefined;
+  /**
+   * Identify request options
+   */
+  identifyOptions?: {
+    /**
+     * Request timeout in milliseconds
+     *
+     * @default 1000
+     */
+    timeout?: number | undefined;
+    /**
+     * Retries after a failed request, with exponential backoff
+     *
+     * @default { attempts: 2, baseDelay: 400, maxDelay: 600 }
+     */
+    retry?: {
+      attempts?: number | undefined;
+      baseDelay?: number | undefined;
+      maxDelay?: number | undefined;
+    } | undefined;
+    /**
+     * Additional headers, e.g. the publishable key
+     */
+    headers?: Record<string, string> | undefined;
+  } | undefined;
+  /**
+   * Return a browser fingerprint, e.g. from FingerprintJS. By default a
+   * random id is created and kept in `localStorage`.
+   */
+  getFingerprint?: (() => string | Promise<string>) | undefined;
+  /**
+   * Solve proof-of-work challenges and retry the request once
+   *
+   * @default true
+   */
+  autoSolveChallenge?: boolean | undefined;
+  /**
+   * Called when a proof-of-work challenge is received
+   */
+  onChallengeReceived?: ((reason: string) => void) | undefined;
+  /**
+   * Called after a challenge is solved
+   */
+  onChallengeSolved?: ((solveTimeMs: number) => void) | undefined;
+  /**
+   * Called when solving a challenge fails or its solution is rejected
+   */
+  onChallengeFailed?: ((error: Error) => void) | undefined;
+} | undefined) => {
+  id: "sentinel";
+  $InferServerPlugin: ReturnType<typeof sentinel>;
+  fetchPlugins: {
+    id: string;
+    name: string;
+    hooks: {
+      onRequest<T extends Record<string, any>>(context: _better_fetch_fetch0.RequestContext<T>): Promise<_better_fetch_fetch0.RequestContext<T>>;
+      onResponse({
+        response,
+        request
+      }: _better_fetch_fetch0.ResponseContext): Promise<Response | undefined>;
+    };
+  }[];
+};
+//#endregion
+export { sentinelClient as t };

package/dist/client-DzOqXJUm.mjs

@@ -0,0 +1,15 @@
+//#region src/plugins/audit-log/client.ts
+const auditLogClient = () => {
+	return {
+		id: "audit-log",
+		$InferServerPlugin: {},
+		pathMethods: {
+			"/audit-log/get-audit-logs": "GET",
+			"/audit-log/get-all-audit-logs": "GET",
+			"/audit-log/get-event-types": "GET"
+		}
+	};
+};
+
+//#endregion
+export { auditLogClient as t };

package/dist/{client-aExCkfwm.mjs → client-xga7yFIX.mjs}

@@ -1,5 +1,5 @@
-import { t as capitalizeFirstLetter } from "./misc-beA1w3XV.mjs";
-import { n as getClientConfig, t as createDynamicPathProxy } from "./proxy-CL9PZXJA.mjs";
+import { t as capitalizeFirstLetter } from "./misc-fKH4d5XQ.mjs";
+import { n as getClientConfig, t as createDynamicPathProxy } from "./proxy-C_KXfOhk.mjs";
 
 //#region src/client/vanilla.ts
 function createAuthClient(options) {

package/dist/cookies/index.d.mts

@@ -1,7 +1,7 @@
-import "../helper-tmxW3BHj.mjs";
-import "../index-Cxi7TbLE.mjs";
-import "../types-B1OL7hyf.mjs";
-import "../index-65G5U5DB-DSdjzreF.mjs";
-import "../plugins-hFZT3hmK.mjs";
-import { a as getCookies, c as setCookieCache, d as getChunkedCookie, f as parseSetCookieHeader, i as getCookieCache, l as setSessionCookie, n as createCookieGetter, o as getSessionCookie, p as setCookieToHeader, r as deleteSessionCookie, s as parseCookies, t as EligibleCookies, u as createSessionStore } from "../index-DR0xXno9.mjs";
+import "../helper-BgOIGHsu.mjs";
+import "../index-BNhJglHC.mjs";
+import "../types-DNQ9XQrB.mjs";
+import "../index-Df0KhQRf-BEa5tdwJ.mjs";
+import "../plugins-Dy_FrD4Y.mjs";
+import { a as getCookies, c as setCookieCache, d as getChunkedCookie, f as parseSetCookieHeader, i as getCookieCache, l as setSessionCookie, n as createCookieGetter, o as getSessionCookie, p as setCookieToHeader, r as deleteSessionCookie, s as parseCookies, t as EligibleCookies, u as createSessionStore } from "../index-CsxtcAO0.mjs";
 export { EligibleCookies, createCookieGetter, createSessionStore, deleteSessionCookie, getChunkedCookie, getCookieCache, getCookies, getSessionCookie, parseCookies, parseSetCookieHeader, setCookieCache, setCookieToHeader, setSessionCookie };

package/dist/cookies/index.mjs

@@ -1,7 +1,7 @@
 import "../url-VB2gAbTI.mjs";
 import "../json-D0TBLy4q.mjs";
 import "../jwt-CmxZAGe2.mjs";
-import { a as getSessionCookie, c as setSessionCookie, d as createSessionStore, f as getChunkedCookie, i as getCookies, l as parseSetCookieHeader, n as deleteSessionCookie, o as parseCookies, r as getCookieCache, s as setCookieCache, t as createCookieGetter, u as setCookieToHeader } from "../cookies-cJObLwn1.mjs";
-import "../date-Cx2yCiC4.mjs";
+import { a as getSessionCookie, c as setSessionCookie, d as createSessionStore, f as getChunkedCookie, i as getCookies, l as parseSetCookieHeader, n as deleteSessionCookie, o as parseCookies, r as getCookieCache, s as setCookieCache, t as createCookieGetter, u as setCookieToHeader } from "../cookies-BuvlgcA-.mjs";
+import "../date-CMr04reD.mjs";
 
 export { createCookieGetter, createSessionStore, deleteSessionCookie, getChunkedCookie, getCookieCache, getCookies, getSessionCookie, parseCookies, parseSetCookieHeader, setCookieCache, setCookieToHeader, setSessionCookie };

package/dist/{cookies-cJObLwn1.mjs → cookies-BuvlgcA-.mjs}

@@ -1,7 +1,7 @@
 import { t as getBaseURL } from "./url-VB2gAbTI.mjs";
 import { t as safeJSONParse } from "./json-D0TBLy4q.mjs";
 import { i as verifyJWT, n as symmetricDecodeJWT, r as symmetricEncodeJWT, t as signJWT } from "./jwt-CmxZAGe2.mjs";
-import { t as getDate, u as parseUserOutput } from "./date-Cx2yCiC4.mjs";
+import { t as getDate, u as parseUserOutput } from "./date-CMr04reD.mjs";
 import { env, isProduction } from "@gatwech/core/env";
 import { PayvoAuthError } from "@gatwech/core/error";
 import * as z$1 from "zod";

package/dist/crypto/index.mjs

@@ -1,4 +1,5 @@
-import { a as verifyPassword, i as hashPassword, n as symmetricEncrypt, o as constantTimeEqual, r as generateRandomString, t as symmetricDecrypt } from "../crypto-Bb42eMrH.mjs";
+import { a as constantTimeEqual, i as verifyPassword, n as symmetricEncrypt, r as hashPassword, t as symmetricDecrypt } from "../crypto-CCyta8xj.mjs";
 import { i as verifyJWT, n as symmetricDecodeJWT, r as symmetricEncodeJWT, t as signJWT } from "../jwt-CmxZAGe2.mjs";
+import { t as generateRandomString } from "../random-32E3cU5o.mjs";
 
 export { constantTimeEqual, generateRandomString, hashPassword, signJWT, symmetricDecodeJWT, symmetricDecrypt, symmetricEncodeJWT, symmetricEncrypt, verifyJWT, verifyPassword };

package/dist/{crypto-Bb42eMrH.mjs → crypto-CCyta8xj.mjs}

@@ -5,7 +5,6 @@ import { bytesToHex, hexToBytes, managedNonce, utf8ToBytes } from "@noble/cipher
 import { hex } from "@gatwech/utils/hex";
 import { scryptAsync } from "@noble/hashes/scrypt.js";
 import { hexToBytes as hexToBytes$1 } from "@noble/hashes/utils.js";
-import { createRandomStringGenerator } from "@gatwech/utils/random";
 
 //#region src/crypto/buffer.ts
 /**
@@ -48,10 +47,6 @@ const verifyPassword = async ({ hash, password }) => {
 	return constantTimeEqual(await generateKey(password, salt), hexToBytes$1(key));
 };
 
-//#endregion
-//#region src/crypto/random.ts
-const generateRandomString = createRandomStringGenerator("a-z", "0-9", "A-Z", "-_");
-
 //#endregion
 //#region src/crypto/index.ts
 const symmetricEncrypt = async ({ key, data }) => {
@@ -67,4 +62,4 @@ const symmetricDecrypt = async ({ key, data }) => {
 };
 
 //#endregion
-export { verifyPassword as a, hashPassword as i, symmetricEncrypt as n, constantTimeEqual as o, generateRandomString as r, symmetricDecrypt as t };
+export { constantTimeEqual as a, verifyPassword as i, symmetricEncrypt as n, hashPassword as r, symmetricDecrypt as t };

package/dist/{custom-session-L3t7ecsd.mjs → custom-session-DN_-pfi_.mjs}

@@ -1,5 +1,5 @@
-import { n as getSession } from "./session-Dgp133Yt.mjs";
-import { t as getEndpointResponse } from "./plugin-helper-4L-lzsjZ.mjs";
+import { n as getSession } from "./session-BB3oqApE.mjs";
+import { t as getEndpointResponse } from "./plugin-helper-RJJBTOba.mjs";
 import { createAuthEndpoint, createAuthMiddleware } from "@gatwech/core/api";
 import * as z$1 from "zod";
 

package/dist/db/index.d.mts

@@ -1,7 +1,7 @@
-import "../helper-tmxW3BHj.mjs";
-import { $t as mergeSchema, Jt as convertFromDB, Qt as toZodSchema, Sn as createFieldAttribute, Xt as getAdapter, Yt as convertToDB, Zt as FieldAttributeToSchema, _n as InferFieldsInput, an as parseSessionOutput, bn as InferValueType, cn as createInternalAdapter, dn as getMigrations, en as parseAccountInput, fn as matchType, gn as InferFieldsFromPlugins, hn as InferFieldsFromOptions, in as parseSessionInput, ln as getAuthTables, mn as InferAdditionalFieldsFromPluginOptions, nn as parseAdditionalUserInput, on as parseUserInput, pn as FieldAttributeToObject, qt as getWithHooks, rn as parseInputData, sn as parseUserOutput, tn as parseAccountOutput, un as getSchema, vn as InferFieldsInputClient, xn as PluginFieldAttribute, yn as InferFieldsOutput } from "../index-Cxi7TbLE.mjs";
-import "../types-B1OL7hyf.mjs";
-import "../index-65G5U5DB-DSdjzreF.mjs";
-import "../plugins-hFZT3hmK.mjs";
+import "../helper-BgOIGHsu.mjs";
+import { $t as mergeSchema, Jt as convertFromDB, Qt as toZodSchema, Sn as createFieldAttribute, Xt as getAdapter, Yt as convertToDB, Zt as FieldAttributeToSchema, _n as InferFieldsInput, an as parseSessionOutput, bn as InferValueType, cn as createInternalAdapter, dn as getMigrations, en as parseAccountInput, fn as matchType, gn as InferFieldsFromPlugins, hn as InferFieldsFromOptions, in as parseSessionInput, ln as getAuthTables, mn as InferAdditionalFieldsFromPluginOptions, nn as parseAdditionalUserInput, on as parseUserInput, pn as FieldAttributeToObject, qt as getWithHooks, rn as parseInputData, sn as parseUserOutput, tn as parseAccountOutput, un as getSchema, vn as InferFieldsInputClient, xn as PluginFieldAttribute, yn as InferFieldsOutput } from "../index-BNhJglHC.mjs";
+import "../types-DNQ9XQrB.mjs";
+import "../index-Df0KhQRf-BEa5tdwJ.mjs";
+import "../plugins-Dy_FrD4Y.mjs";
 export * from "@gatwech/core/db";
 export { FieldAttributeToObject, FieldAttributeToSchema, InferAdditionalFieldsFromPluginOptions, InferFieldsFromOptions, InferFieldsFromPlugins, InferFieldsInput, InferFieldsInputClient, InferFieldsOutput, InferValueType, PluginFieldAttribute, convertFromDB, convertToDB, createFieldAttribute, createInternalAdapter, getAdapter, getAuthTables, getMigrations, getSchema, getWithHooks, matchType, mergeSchema, parseAccountInput, parseAccountOutput, parseAdditionalUserInput, parseInputData, parseSessionInput, parseSessionOutput, parseUserInput, parseUserOutput, toZodSchema };

package/dist/db/index.mjs

@@ -1,14 +1,15 @@
-import "../utils-SOMB4Px5.mjs";
+import "../utils-B03WRaGi.mjs";
 import "../get-request-ip-DSjrEpGo.mjs";
 import "../json-D0TBLy4q.mjs";
-import "../crypto-Bb42eMrH.mjs";
+import "../crypto-CCyta8xj.mjs";
 import "../jwt-CmxZAGe2.mjs";
-import { a as parseAdditionalUserInput, c as parseSessionOutput, i as parseAccountOutput, l as parseUserInput, n as mergeSchema, o as parseInputData, r as parseAccountInput, s as parseSessionInput, u as parseUserOutput } from "../date-Cx2yCiC4.mjs";
-import { a as createInternalAdapter, c as matchType, i as toZodSchema, l as getSchema, n as convertToDB, o as getWithHooks, r as getAdapter, s as getMigrations, t as convertFromDB, u as createFieldAttribute } from "../db-BrstmDhc.mjs";
-import "../dialect-CeddeGHf.mjs";
-import { t as getAuthTables } from "../get-tables-BQP7YW9c.mjs";
-import "../types-Bjn15Uy6.mjs";
-import "../misc-beA1w3XV.mjs";
+import "../random-32E3cU5o.mjs";
+import { a as parseAdditionalUserInput, c as parseSessionOutput, i as parseAccountOutput, l as parseUserInput, n as mergeSchema, o as parseInputData, r as parseAccountInput, s as parseSessionInput, u as parseUserOutput } from "../date-CMr04reD.mjs";
+import { a as createInternalAdapter, c as matchType, i as toZodSchema, l as getSchema, n as convertToDB, o as getWithHooks, r as getAdapter, s as getMigrations, t as convertFromDB, u as createFieldAttribute } from "../db-7vHnL1XA.mjs";
+import "../dialect-HsWUfpYY.mjs";
+import { t as getAuthTables } from "../get-tables-CKvSyDST.mjs";
+import "../types-DCPpFKUB.mjs";
+import "../misc-fKH4d5XQ.mjs";
 
 export * from "@gatwech/core/db"
 

package/dist/{db-BrstmDhc.mjs → db-7vHnL1XA.mjs}

@@ -1,9 +1,9 @@
-import { t as generateId } from "./utils-SOMB4Px5.mjs";
+import { t as generateId } from "./utils-B03WRaGi.mjs";
 import { t as getIp } from "./get-request-ip-DSjrEpGo.mjs";
 import { t as safeJSONParse } from "./json-D0TBLy4q.mjs";
-import { c as parseSessionOutput, t as getDate, u as parseUserOutput } from "./date-Cx2yCiC4.mjs";
-import { t as createKyselyAdapter } from "./dialect-CeddeGHf.mjs";
-import { t as getAuthTables } from "./get-tables-BQP7YW9c.mjs";
+import { c as parseSessionOutput, t as getDate, u as parseUserOutput } from "./date-CMr04reD.mjs";
+import { t as createKyselyAdapter } from "./dialect-HsWUfpYY.mjs";
+import { t as getAuthTables } from "./get-tables-CKvSyDST.mjs";
 import { getCurrentAdapter, getCurrentAuthContext, runWithTransaction } from "@gatwech/core/context";
 import { createLogger, logger } from "@gatwech/core/env";
 import { PayvoAuthError } from "@gatwech/core/error";
@@ -222,6 +222,7 @@ async function getMigrations(config) {
 	}
 	const migrations = [];
 	const useUUIDs = config.advanced?.database?.generateId === "uuid";
+	const useNumberId = config.advanced?.database?.useNumberId || config.advanced?.database?.generateId === "serial";
 	function getType(field, fieldName) {
 		const type = field.type;
 		const typeMap = {
@@ -289,7 +290,6 @@ async function getMigrations(config) {
 		});
 		migrations.push(exec);
 	}
-	const useNumberId = config.advanced?.database?.useNumberId || config.advanced?.database?.generateId === "serial";
 	if (config.advanced?.database?.useNumberId) logger$1.warn("`useNumberId` is deprecated. Please use `generateId` with `serial` instead.");
 	if (toBeCreated.length) for (const table of toBeCreated) {
 		let dbT = db.schema.createTable(table.table).addColumn("id", useNumberId ? dbType === "postgres" ? "serial" : "integer" : useUUIDs ? dbType === "postgres" || dbType === "mysql" || dbType === "mssql" ? "uuid" : "text" : dbType === "mysql" || dbType === "mssql" ? "varchar(36)" : "text", (col) => {
@@ -368,9 +368,12 @@ function getWithHooks(adapter, ctx) {
 		for (const hook of hooks || []) {
 			const toRun = hook[model]?.update?.before;
 			if (toRun) {
-				const result = await toRun(data, context);
+				const result = await toRun(actualData, context);
 				if (result === false) return null;
-				actualData = typeof result === "object" ? result.data : result;
+				if (typeof result === "object" && "data" in result) actualData = {
+					...actualData,
+					...result.data
+				};
 			}
 		}
 		const customUpdated = customUpdateFn ? await customUpdateFn.fn(actualData) : null;
@@ -391,9 +394,12 @@ function getWithHooks(adapter, ctx) {
 		for (const hook of hooks || []) {
 			const toRun = hook[model]?.update?.before;
 			if (toRun) {
-				const result = await toRun(data, context);
+				const result = await toRun(actualData, context);
 				if (result === false) return null;
-				actualData = typeof result === "object" ? result.data : result;
+				if (typeof result === "object" && "data" in result) actualData = {
+					...actualData,
+					...result.data
+				};
 			}
 		}
 		const customUpdated = customUpdateFn ? await customUpdateFn.fn(actualData) : null;

package/dist/{device-authorization-V4s3h4Mj.mjs → device-authorization-BKnNhlsz.mjs}

@@ -1,7 +1,7 @@
-import { r as generateRandomString } from "./crypto-Bb42eMrH.mjs";
-import { m as ms } from "./cookies-cJObLwn1.mjs";
-import { n as mergeSchema } from "./date-Cx2yCiC4.mjs";
-import { r as getSessionFromCtx } from "./session-Dgp133Yt.mjs";
+import { t as generateRandomString } from "./random-32E3cU5o.mjs";
+import { m as ms } from "./cookies-BuvlgcA-.mjs";
+import { n as mergeSchema } from "./date-CMr04reD.mjs";
+import { r as getSessionFromCtx } from "./session-BB3oqApE.mjs";
 import { defineErrorCodes } from "@gatwech/core/utils";
 import { APIError } from "better-call";
 import { createAuthEndpoint } from "@gatwech/core/api";

package/dist/{dialect-CeddeGHf.mjs → dialect-HsWUfpYY.mjs}

@@ -41,7 +41,7 @@ const createKyselyAdapter = async (config) => {
 	if ("getConnection" in db) dialect = new MysqlDialect(db);
 	if ("connect" in db) dialect = new PostgresDialect({ pool: db });
 	if ("fileControl" in db) {
-		const { BunSqliteDialect } = await import("./bun-sqlite-dialect-CeNvMaZz.mjs");
+		const { BunSqliteDialect } = await import("./bun-sqlite-dialect-CDGusFqF.mjs");
 		dialect = new BunSqliteDialect({ database: db });
 	}
 	if ("createSession" in db && typeof window === "undefined") {
@@ -57,7 +57,7 @@ const createKyselyAdapter = async (config) => {
 			if (error !== null && typeof error === "object" && "code" in error && error.code !== "ERR_UNKNOWN_BUILTIN_MODULE") throw error;
 		}
 		if (DatabaseSync && db instanceof DatabaseSync) {
-			const { NodeSqliteDialect } = await import("./node-sqlite-dialect-BcKxBQnm.mjs");
+			const { NodeSqliteDialect } = await import("./node-sqlite-dialect-CIOjcg31.mjs");
 			dialect = new NodeSqliteDialect({ database: db });
 		}
 	}

package/dist/{email-otp-BtDHSw14.mjs → email-otp-Dw0DypjQ.mjs}

@@ -1,9 +1,10 @@
-import { t as APIError } from "./api-0pR_I-Nx.mjs";
-import { n as symmetricEncrypt, r as generateRandomString, t as symmetricDecrypt } from "./crypto-Bb42eMrH.mjs";
-import { c as setSessionCookie, s as setCookieCache } from "./cookies-cJObLwn1.mjs";
-import { t as getDate } from "./date-Cx2yCiC4.mjs";
-import { r as getSessionFromCtx } from "./session-Dgp133Yt.mjs";
-import { t as getEndpointResponse } from "./plugin-helper-4L-lzsjZ.mjs";
+import { t as APIError } from "./api-Dk8Yj_J5.mjs";
+import { n as symmetricEncrypt, t as symmetricDecrypt } from "./crypto-CCyta8xj.mjs";
+import { t as generateRandomString } from "./random-32E3cU5o.mjs";
+import { c as setSessionCookie, s as setCookieCache } from "./cookies-BuvlgcA-.mjs";
+import { t as getDate } from "./date-CMr04reD.mjs";
+import { r as getSessionFromCtx } from "./session-BB3oqApE.mjs";
+import { t as getEndpointResponse } from "./plugin-helper-RJJBTOba.mjs";
 import { BASE_ERROR_CODES } from "@gatwech/core/error";
 import { defineErrorCodes } from "@gatwech/core/utils";
 import { createAuthEndpoint, createAuthMiddleware } from "@gatwech/core/api";

package/dist/{generic-oauth-CL5X27ZI.mjs → generic-oauth-DFj27JY8.mjs}

@@ -1,7 +1,7 @@
-import { i as parseState, r as generateState } from "./utils-SOMB4Px5.mjs";
-import { O as handleOAuthUserInfo } from "./api-0pR_I-Nx.mjs";
-import { c as setSessionCookie } from "./cookies-cJObLwn1.mjs";
-import { u as sessionMiddleware } from "./session-Dgp133Yt.mjs";
+import { i as parseState, r as generateState } from "./utils-B03WRaGi.mjs";
+import { O as handleOAuthUserInfo } from "./api-Dk8Yj_J5.mjs";
+import { c as setSessionCookie } from "./cookies-BuvlgcA-.mjs";
+import { u as sessionMiddleware } from "./session-BB3oqApE.mjs";
 import { BASE_ERROR_CODES } from "@gatwech/core/error";
 import { createAuthorizationURL, refreshAccessToken, validateAuthorizationCode } from "@gatwech/core/oauth2";
 import { defineErrorCodes } from "@gatwech/core/utils";

package/dist/{has-permission-BpAr7uCn.mjs → has-permission-Bvg8de8g.mjs}

@@ -1,4 +1,4 @@
-import { r as defaultRoles } from "./access-DT1f6l5k.mjs";
+import { r as defaultRoles } from "./access-bhklJd7m.mjs";
 
 //#region src/plugins/admin/has-permission.ts
 const hasPermission = (input) => {

package/dist/{haveibeenpwned-cMpJvmzI.mjs → haveibeenpwned-CzNda7Tn.mjs}

@@ -1,29 +1,42 @@
-import { t as APIError } from "./api-0pR_I-Nx.mjs";
+import { t as APIError } from "./api-Dk8Yj_J5.mjs";
 import { defineErrorCodes } from "@gatwech/core/utils";
 import { createHash } from "@gatwech/utils/hash";
 import { betterFetch } from "@better-fetch/fetch";
 
 //#region src/plugins/haveibeenpwned/index.ts
 const ERROR_CODES = defineErrorCodes({ PASSWORD_COMPROMISED: "The password you entered has been compromised. Please choose a different password." });
-async function checkPasswordCompromise(password, customMessage) {
-	if (!password) return;
+/**
+* Returns how many times a password appears in known breaches, using the
+* k-anonymity range API: only the first 5 characters of the password's SHA-1
+* hash are sent. Throws if the API can't be reached.
+*/
+async function getPasswordBreachCount(password) {
 	const sha1Hash = (await createHash("SHA-1", "hex").digest(password)).toUpperCase();
 	const prefix = sha1Hash.substring(0, 5);
 	const suffix = sha1Hash.substring(5);
+	const { data, error } = await betterFetch(`https://api.pwnedpasswords.com/range/${prefix}`, { headers: {
+		"Add-Padding": "true",
+		"User-Agent": "payvoAuth Password Checker"
+	} });
+	if (error) throw new Error(`Failed to check password. Status: ${error.status}`);
+	for (const line of data.split("\n")) {
+		const [lineSuffix, count] = line.trim().split(":");
+		if (lineSuffix?.toUpperCase() === suffix) return Number(count) || 0;
+	}
+	return 0;
+}
+async function checkPasswordCompromise(password, customMessage) {
+	if (!password) return;
+	let breachCount;
 	try {
-		const { data, error } = await betterFetch(`https://api.pwnedpasswords.com/range/${prefix}`, { headers: {
-			"Add-Padding": "true",
-			"User-Agent": "payvoAuth Password Checker"
-		} });
-		if (error) throw new APIError("INTERNAL_SERVER_ERROR", { message: `Failed to check password. Status: ${error.status}` });
-		if (data.split("\n").some((line) => line.split(":")[0].toUpperCase() === suffix.toUpperCase())) throw new APIError("BAD_REQUEST", {
-			message: customMessage || ERROR_CODES.PASSWORD_COMPROMISED,
-			code: "PASSWORD_COMPROMISED"
-		});
-	} catch (error) {
-		if (error instanceof APIError) throw error;
+		breachCount = await getPasswordBreachCount(password);
+	} catch {
 		throw new APIError("INTERNAL_SERVER_ERROR", { message: "Failed to check password. Please try again later." });
 	}
+	if (breachCount > 0) throw new APIError("BAD_REQUEST", {
+		message: customMessage || ERROR_CODES.PASSWORD_COMPROMISED,
+		code: "PASSWORD_COMPROMISED"
+	});
 }
 const haveIBeenPwned = (options) => ({
 	id: "haveIBeenPwned",
@@ -40,4 +53,4 @@ const haveIBeenPwned = (options) => ({
 });
 
 //#endregion
-export { haveIBeenPwned as t };
+export { haveIBeenPwned as n, getPasswordBreachCount as t };

package/dist/{client-CNY0tn9g.d.mts → index-BAVzFqII.d.mts}

@@ -1,5 +1,5 @@
-import { t as InferOptionSchema } from "./plugins-hFZT3hmK.mjs";
-import * as better_call164 from "better-call";
+import { t as InferOptionSchema } from "./plugins-Dy_FrD4Y.mjs";
+import * as better_call150 from "better-call";
 import * as z$1 from "zod";
 import { StringValue } from "ms";
 
@@ -47,6 +47,19 @@ declare const schema: {
   };
 };
 //#endregion
+//#region src/plugins/device-authorization/client.d.ts
+declare const deviceAuthorizationClient: () => {
+  id: "device-authorization";
+  $InferServerPlugin: ReturnType<typeof deviceAuthorization>;
+  pathMethods: {
+    "/device/code": "POST";
+    "/device/token": "POST";
+    "/device": "GET";
+    "/device/approve": "POST";
+    "/device/deny": "POST";
+  };
+};
+//#endregion
 //#region src/plugins/device-authorization/index.d.ts
 declare const $deviceAuthorizationOptionsSchema: z$1.ZodObject<{
   expiresIn: z$1.ZodDefault<z$1.ZodCustom<StringValue, StringValue>>;
@@ -167,7 +180,7 @@ declare const deviceAuthorization: (options?: Partial<DeviceAuthorizationOptions
       } & {
         asResponse?: boolean;
         returnHeaders?: boolean;
-        use?: better_call164.Middleware[];
+        use?: better_call150.Middleware[];
         path?: string;
       } & {
         asResponse?: AsResponse | undefined;
@@ -290,7 +303,7 @@ declare const deviceAuthorization: (options?: Partial<DeviceAuthorizationOptions
       } & {
         asResponse?: boolean;
         returnHeaders?: boolean;
-        use?: better_call164.Middleware[];
+        use?: better_call150.Middleware[];
         path?: string;
       } & {
         asResponse?: AsResponse | undefined;
@@ -394,7 +407,7 @@ declare const deviceAuthorization: (options?: Partial<DeviceAuthorizationOptions
       } & {
         asResponse?: boolean;
         returnHeaders?: boolean;
-        use?: better_call164.Middleware[];
+        use?: better_call150.Middleware[];
         path?: string;
       } & {
         asResponse?: AsResponse | undefined;
@@ -471,7 +484,7 @@ declare const deviceAuthorization: (options?: Partial<DeviceAuthorizationOptions
       } & {
         asResponse?: boolean;
         returnHeaders?: boolean;
-        use?: better_call164.Middleware[];
+        use?: better_call150.Middleware[];
         path?: string;
       } & {
         asResponse?: AsResponse | undefined;
@@ -543,7 +556,7 @@ declare const deviceAuthorization: (options?: Partial<DeviceAuthorizationOptions
       } & {
         asResponse?: boolean;
         returnHeaders?: boolean;
-        use?: better_call164.Middleware[];
+        use?: better_call150.Middleware[];
         path?: string;
       } & {
         asResponse?: AsResponse | undefined;
@@ -612,17 +625,4 @@ declare const deviceAuthorization: (options?: Partial<DeviceAuthorizationOptions
   };
 };
 //#endregion
-//#region src/plugins/device-authorization/client.d.ts
-declare const deviceAuthorizationClient: () => {
-  id: "device-authorization";
-  $InferServerPlugin: ReturnType<typeof deviceAuthorization>;
-  pathMethods: {
-    "/device/code": "POST";
-    "/device/token": "POST";
-    "/device": "GET";
-    "/device/approve": "POST";
-    "/device/deny": "POST";
-  };
-};
-//#endregion
-export { deviceAuthorization as i, $deviceAuthorizationOptionsSchema as n, DeviceAuthorizationOptions as r, deviceAuthorizationClient as t };
+export { deviceAuthorizationClient as i, DeviceAuthorizationOptions as n, deviceAuthorization as r, $deviceAuthorizationOptionsSchema as t };

package/dist/{index-DaBcikv9.d.mts → index-BNDRYfTF.d.mts}

@@ -1,4 +1,4 @@
-import * as better_call163 from "better-call";
+import * as better_call192 from "better-call";
 import * as z$1 from "zod";
 
 //#region src/plugins/one-tap/index.d.ts
@@ -38,7 +38,7 @@ declare const oneTap: (options?: OneTapOptions | undefined) => {
       } & {
         asResponse?: boolean;
         returnHeaders?: boolean;
-        use?: better_call163.Middleware[];
+        use?: better_call192.Middleware[];
         path?: string;
       } & {
         asResponse?: AsResponse | undefined;