@gatwech/auth 1.0.0-beta.18 → 1.0.0-beta.20

package/dist/{custom-session-L3t7ecsd.mjs → custom-session-DN_-pfi_.mjs}

@@ -1,5 +1,5 @@
-import { n as getSession } from "./session-Dgp133Yt.mjs";
-import { t as getEndpointResponse } from "./plugin-helper-4L-lzsjZ.mjs";
+import { n as getSession } from "./session-BB3oqApE.mjs";
+import { t as getEndpointResponse } from "./plugin-helper-RJJBTOba.mjs";
 import { createAuthEndpoint, createAuthMiddleware } from "@gatwech/core/api";
 import * as z$1 from "zod";
 

package/dist/db/index.d.mts

@@ -1,7 +1,7 @@
-import "../helper-tmxW3BHj.mjs";
-import { $t as mergeSchema, Jt as convertFromDB, Qt as toZodSchema, Sn as createFieldAttribute, Xt as getAdapter, Yt as convertToDB, Zt as FieldAttributeToSchema, _n as InferFieldsInput, an as parseSessionOutput, bn as InferValueType, cn as createInternalAdapter, dn as getMigrations, en as parseAccountInput, fn as matchType, gn as InferFieldsFromPlugins, hn as InferFieldsFromOptions, in as parseSessionInput, ln as getAuthTables, mn as InferAdditionalFieldsFromPluginOptions, nn as parseAdditionalUserInput, on as parseUserInput, pn as FieldAttributeToObject, qt as getWithHooks, rn as parseInputData, sn as parseUserOutput, tn as parseAccountOutput, un as getSchema, vn as InferFieldsInputClient, xn as PluginFieldAttribute, yn as InferFieldsOutput } from "../index-Cxi7TbLE.mjs";
-import "../types-B1OL7hyf.mjs";
-import "../index-65G5U5DB-DSdjzreF.mjs";
-import "../plugins-hFZT3hmK.mjs";
+import "../helper-BgOIGHsu.mjs";
+import { $t as mergeSchema, Jt as convertFromDB, Qt as toZodSchema, Sn as createFieldAttribute, Xt as getAdapter, Yt as convertToDB, Zt as FieldAttributeToSchema, _n as InferFieldsInput, an as parseSessionOutput, bn as InferValueType, cn as createInternalAdapter, dn as getMigrations, en as parseAccountInput, fn as matchType, gn as InferFieldsFromPlugins, hn as InferFieldsFromOptions, in as parseSessionInput, ln as getAuthTables, mn as InferAdditionalFieldsFromPluginOptions, nn as parseAdditionalUserInput, on as parseUserInput, pn as FieldAttributeToObject, qt as getWithHooks, rn as parseInputData, sn as parseUserOutput, tn as parseAccountOutput, un as getSchema, vn as InferFieldsInputClient, xn as PluginFieldAttribute, yn as InferFieldsOutput } from "../index-BNhJglHC.mjs";
+import "../types-DNQ9XQrB.mjs";
+import "../index-Df0KhQRf-BEa5tdwJ.mjs";
+import "../plugins-Dy_FrD4Y.mjs";
 export * from "@gatwech/core/db";
 export { FieldAttributeToObject, FieldAttributeToSchema, InferAdditionalFieldsFromPluginOptions, InferFieldsFromOptions, InferFieldsFromPlugins, InferFieldsInput, InferFieldsInputClient, InferFieldsOutput, InferValueType, PluginFieldAttribute, convertFromDB, convertToDB, createFieldAttribute, createInternalAdapter, getAdapter, getAuthTables, getMigrations, getSchema, getWithHooks, matchType, mergeSchema, parseAccountInput, parseAccountOutput, parseAdditionalUserInput, parseInputData, parseSessionInput, parseSessionOutput, parseUserInput, parseUserOutput, toZodSchema };

package/dist/db/index.mjs

@@ -1,14 +1,15 @@
-import "../utils-SOMB4Px5.mjs";
+import "../utils-B03WRaGi.mjs";
 import "../get-request-ip-DSjrEpGo.mjs";
 import "../json-D0TBLy4q.mjs";
-import "../crypto-Bb42eMrH.mjs";
+import "../crypto-CCyta8xj.mjs";
 import "../jwt-CmxZAGe2.mjs";
-import { a as parseAdditionalUserInput, c as parseSessionOutput, i as parseAccountOutput, l as parseUserInput, n as mergeSchema, o as parseInputData, r as parseAccountInput, s as parseSessionInput, u as parseUserOutput } from "../date-Cx2yCiC4.mjs";
-import { a as createInternalAdapter, c as matchType, i as toZodSchema, l as getSchema, n as convertToDB, o as getWithHooks, r as getAdapter, s as getMigrations, t as convertFromDB, u as createFieldAttribute } from "../db-BrstmDhc.mjs";
-import "../dialect-CeddeGHf.mjs";
-import { t as getAuthTables } from "../get-tables-BQP7YW9c.mjs";
-import "../types-Bjn15Uy6.mjs";
-import "../misc-beA1w3XV.mjs";
+import "../random-32E3cU5o.mjs";
+import { a as parseAdditionalUserInput, c as parseSessionOutput, i as parseAccountOutput, l as parseUserInput, n as mergeSchema, o as parseInputData, r as parseAccountInput, s as parseSessionInput, u as parseUserOutput } from "../date-CMr04reD.mjs";
+import { a as createInternalAdapter, c as matchType, i as toZodSchema, l as getSchema, n as convertToDB, o as getWithHooks, r as getAdapter, s as getMigrations, t as convertFromDB, u as createFieldAttribute } from "../db-7vHnL1XA.mjs";
+import "../dialect-HsWUfpYY.mjs";
+import { t as getAuthTables } from "../get-tables-CKvSyDST.mjs";
+import "../types-DCPpFKUB.mjs";
+import "../misc-fKH4d5XQ.mjs";
 
 export * from "@gatwech/core/db"
 

package/dist/{db-BrstmDhc.mjs → db-7vHnL1XA.mjs}

@@ -1,9 +1,9 @@
-import { t as generateId } from "./utils-SOMB4Px5.mjs";
+import { t as generateId } from "./utils-B03WRaGi.mjs";
 import { t as getIp } from "./get-request-ip-DSjrEpGo.mjs";
 import { t as safeJSONParse } from "./json-D0TBLy4q.mjs";
-import { c as parseSessionOutput, t as getDate, u as parseUserOutput } from "./date-Cx2yCiC4.mjs";
-import { t as createKyselyAdapter } from "./dialect-CeddeGHf.mjs";
-import { t as getAuthTables } from "./get-tables-BQP7YW9c.mjs";
+import { c as parseSessionOutput, t as getDate, u as parseUserOutput } from "./date-CMr04reD.mjs";
+import { t as createKyselyAdapter } from "./dialect-HsWUfpYY.mjs";
+import { t as getAuthTables } from "./get-tables-CKvSyDST.mjs";
 import { getCurrentAdapter, getCurrentAuthContext, runWithTransaction } from "@gatwech/core/context";
 import { createLogger, logger } from "@gatwech/core/env";
 import { PayvoAuthError } from "@gatwech/core/error";
@@ -222,6 +222,7 @@ async function getMigrations(config) {
 	}
 	const migrations = [];
 	const useUUIDs = config.advanced?.database?.generateId === "uuid";
+	const useNumberId = config.advanced?.database?.useNumberId || config.advanced?.database?.generateId === "serial";
 	function getType(field, fieldName) {
 		const type = field.type;
 		const typeMap = {
@@ -289,7 +290,6 @@ async function getMigrations(config) {
 		});
 		migrations.push(exec);
 	}
-	const useNumberId = config.advanced?.database?.useNumberId || config.advanced?.database?.generateId === "serial";
 	if (config.advanced?.database?.useNumberId) logger$1.warn("`useNumberId` is deprecated. Please use `generateId` with `serial` instead.");
 	if (toBeCreated.length) for (const table of toBeCreated) {
 		let dbT = db.schema.createTable(table.table).addColumn("id", useNumberId ? dbType === "postgres" ? "serial" : "integer" : useUUIDs ? dbType === "postgres" || dbType === "mysql" || dbType === "mssql" ? "uuid" : "text" : dbType === "mysql" || dbType === "mssql" ? "varchar(36)" : "text", (col) => {
@@ -368,9 +368,12 @@ function getWithHooks(adapter, ctx) {
 		for (const hook of hooks || []) {
 			const toRun = hook[model]?.update?.before;
 			if (toRun) {
-				const result = await toRun(data, context);
+				const result = await toRun(actualData, context);
 				if (result === false) return null;
-				actualData = typeof result === "object" ? result.data : result;
+				if (typeof result === "object" && "data" in result) actualData = {
+					...actualData,
+					...result.data
+				};
 			}
 		}
 		const customUpdated = customUpdateFn ? await customUpdateFn.fn(actualData) : null;
@@ -391,9 +394,12 @@ function getWithHooks(adapter, ctx) {
 		for (const hook of hooks || []) {
 			const toRun = hook[model]?.update?.before;
 			if (toRun) {
-				const result = await toRun(data, context);
+				const result = await toRun(actualData, context);
 				if (result === false) return null;
-				actualData = typeof result === "object" ? result.data : result;
+				if (typeof result === "object" && "data" in result) actualData = {
+					...actualData,
+					...result.data
+				};
 			}
 		}
 		const customUpdated = customUpdateFn ? await customUpdateFn.fn(actualData) : null;

package/dist/{device-authorization-V4s3h4Mj.mjs → device-authorization-BKnNhlsz.mjs}

@@ -1,7 +1,7 @@
-import { r as generateRandomString } from "./crypto-Bb42eMrH.mjs";
-import { m as ms } from "./cookies-cJObLwn1.mjs";
-import { n as mergeSchema } from "./date-Cx2yCiC4.mjs";
-import { r as getSessionFromCtx } from "./session-Dgp133Yt.mjs";
+import { t as generateRandomString } from "./random-32E3cU5o.mjs";
+import { m as ms } from "./cookies-BuvlgcA-.mjs";
+import { n as mergeSchema } from "./date-CMr04reD.mjs";
+import { r as getSessionFromCtx } from "./session-BB3oqApE.mjs";
 import { defineErrorCodes } from "@gatwech/core/utils";
 import { APIError } from "better-call";
 import { createAuthEndpoint } from "@gatwech/core/api";

package/dist/{dialect-CeddeGHf.mjs → dialect-HsWUfpYY.mjs}

@@ -41,7 +41,7 @@ const createKyselyAdapter = async (config) => {
 	if ("getConnection" in db) dialect = new MysqlDialect(db);
 	if ("connect" in db) dialect = new PostgresDialect({ pool: db });
 	if ("fileControl" in db) {
-		const { BunSqliteDialect } = await import("./bun-sqlite-dialect-CeNvMaZz.mjs");
+		const { BunSqliteDialect } = await import("./bun-sqlite-dialect-CDGusFqF.mjs");
 		dialect = new BunSqliteDialect({ database: db });
 	}
 	if ("createSession" in db && typeof window === "undefined") {
@@ -57,7 +57,7 @@ const createKyselyAdapter = async (config) => {
 			if (error !== null && typeof error === "object" && "code" in error && error.code !== "ERR_UNKNOWN_BUILTIN_MODULE") throw error;
 		}
 		if (DatabaseSync && db instanceof DatabaseSync) {
-			const { NodeSqliteDialect } = await import("./node-sqlite-dialect-BcKxBQnm.mjs");
+			const { NodeSqliteDialect } = await import("./node-sqlite-dialect-CIOjcg31.mjs");
 			dialect = new NodeSqliteDialect({ database: db });
 		}
 	}

package/dist/{email-otp-BtDHSw14.mjs → email-otp-Dw0DypjQ.mjs}

@@ -1,9 +1,10 @@
-import { t as APIError } from "./api-0pR_I-Nx.mjs";
-import { n as symmetricEncrypt, r as generateRandomString, t as symmetricDecrypt } from "./crypto-Bb42eMrH.mjs";
-import { c as setSessionCookie, s as setCookieCache } from "./cookies-cJObLwn1.mjs";
-import { t as getDate } from "./date-Cx2yCiC4.mjs";
-import { r as getSessionFromCtx } from "./session-Dgp133Yt.mjs";
-import { t as getEndpointResponse } from "./plugin-helper-4L-lzsjZ.mjs";
+import { t as APIError } from "./api-Dk8Yj_J5.mjs";
+import { n as symmetricEncrypt, t as symmetricDecrypt } from "./crypto-CCyta8xj.mjs";
+import { t as generateRandomString } from "./random-32E3cU5o.mjs";
+import { c as setSessionCookie, s as setCookieCache } from "./cookies-BuvlgcA-.mjs";
+import { t as getDate } from "./date-CMr04reD.mjs";
+import { r as getSessionFromCtx } from "./session-BB3oqApE.mjs";
+import { t as getEndpointResponse } from "./plugin-helper-RJJBTOba.mjs";
 import { BASE_ERROR_CODES } from "@gatwech/core/error";
 import { defineErrorCodes } from "@gatwech/core/utils";
 import { createAuthEndpoint, createAuthMiddleware } from "@gatwech/core/api";

package/dist/{generic-oauth-CL5X27ZI.mjs → generic-oauth-DFj27JY8.mjs}

@@ -1,7 +1,7 @@
-import { i as parseState, r as generateState } from "./utils-SOMB4Px5.mjs";
-import { O as handleOAuthUserInfo } from "./api-0pR_I-Nx.mjs";
-import { c as setSessionCookie } from "./cookies-cJObLwn1.mjs";
-import { u as sessionMiddleware } from "./session-Dgp133Yt.mjs";
+import { i as parseState, r as generateState } from "./utils-B03WRaGi.mjs";
+import { O as handleOAuthUserInfo } from "./api-Dk8Yj_J5.mjs";
+import { c as setSessionCookie } from "./cookies-BuvlgcA-.mjs";
+import { u as sessionMiddleware } from "./session-BB3oqApE.mjs";
 import { BASE_ERROR_CODES } from "@gatwech/core/error";
 import { createAuthorizationURL, refreshAccessToken, validateAuthorizationCode } from "@gatwech/core/oauth2";
 import { defineErrorCodes } from "@gatwech/core/utils";

package/dist/{has-permission-BpAr7uCn.mjs → has-permission-Bvg8de8g.mjs}

@@ -1,4 +1,4 @@
-import { r as defaultRoles } from "./access-DT1f6l5k.mjs";
+import { r as defaultRoles } from "./access-bhklJd7m.mjs";
 
 //#region src/plugins/admin/has-permission.ts
 const hasPermission = (input) => {

package/dist/{haveibeenpwned-cMpJvmzI.mjs → haveibeenpwned-CzNda7Tn.mjs}

@@ -1,29 +1,42 @@
-import { t as APIError } from "./api-0pR_I-Nx.mjs";
+import { t as APIError } from "./api-Dk8Yj_J5.mjs";
 import { defineErrorCodes } from "@gatwech/core/utils";
 import { createHash } from "@gatwech/utils/hash";
 import { betterFetch } from "@better-fetch/fetch";
 
 //#region src/plugins/haveibeenpwned/index.ts
 const ERROR_CODES = defineErrorCodes({ PASSWORD_COMPROMISED: "The password you entered has been compromised. Please choose a different password." });
-async function checkPasswordCompromise(password, customMessage) {
-	if (!password) return;
+/**
+* Returns how many times a password appears in known breaches, using the
+* k-anonymity range API: only the first 5 characters of the password's SHA-1
+* hash are sent. Throws if the API can't be reached.
+*/
+async function getPasswordBreachCount(password) {
 	const sha1Hash = (await createHash("SHA-1", "hex").digest(password)).toUpperCase();
 	const prefix = sha1Hash.substring(0, 5);
 	const suffix = sha1Hash.substring(5);
+	const { data, error } = await betterFetch(`https://api.pwnedpasswords.com/range/${prefix}`, { headers: {
+		"Add-Padding": "true",
+		"User-Agent": "payvoAuth Password Checker"
+	} });
+	if (error) throw new Error(`Failed to check password. Status: ${error.status}`);
+	for (const line of data.split("\n")) {
+		const [lineSuffix, count] = line.trim().split(":");
+		if (lineSuffix?.toUpperCase() === suffix) return Number(count) || 0;
+	}
+	return 0;
+}
+async function checkPasswordCompromise(password, customMessage) {
+	if (!password) return;
+	let breachCount;
 	try {
-		const { data, error } = await betterFetch(`https://api.pwnedpasswords.com/range/${prefix}`, { headers: {
-			"Add-Padding": "true",
-			"User-Agent": "payvoAuth Password Checker"
-		} });
-		if (error) throw new APIError("INTERNAL_SERVER_ERROR", { message: `Failed to check password. Status: ${error.status}` });
-		if (data.split("\n").some((line) => line.split(":")[0].toUpperCase() === suffix.toUpperCase())) throw new APIError("BAD_REQUEST", {
-			message: customMessage || ERROR_CODES.PASSWORD_COMPROMISED,
-			code: "PASSWORD_COMPROMISED"
-		});
-	} catch (error) {
-		if (error instanceof APIError) throw error;
+		breachCount = await getPasswordBreachCount(password);
+	} catch {
 		throw new APIError("INTERNAL_SERVER_ERROR", { message: "Failed to check password. Please try again later." });
 	}
+	if (breachCount > 0) throw new APIError("BAD_REQUEST", {
+		message: customMessage || ERROR_CODES.PASSWORD_COMPROMISED,
+		code: "PASSWORD_COMPROMISED"
+	});
 }
 const haveIBeenPwned = (options) => ({
 	id: "haveIBeenPwned",
@@ -40,4 +53,4 @@ const haveIBeenPwned = (options) => ({
 });
 
 //#endregion
-export { haveIBeenPwned as t };
+export { haveIBeenPwned as n, getPasswordBreachCount as t };

package/dist/{index-BYMI9r_d.d.mts → index-4I1YhYhk.d.mts}

@@ -1,4 +1,4 @@
-import * as better_call1 from "better-call";
+import * as better_call131 from "better-call";
 import * as z$1 from "zod";
 
 //#region src/plugins/magic-link/index.d.ts
@@ -89,7 +89,7 @@ declare const magicLink: (options: MagicLinkopts) => {
       } & {
         asResponse?: boolean;
         returnHeaders?: boolean;
-        use?: better_call1.Middleware[];
+        use?: better_call131.Middleware[];
         path?: string;
       } & {
         asResponse?: AsResponse | undefined;
@@ -175,7 +175,7 @@ declare const magicLink: (options: MagicLinkopts) => {
       } & {
         asResponse?: boolean;
         returnHeaders?: boolean;
-        use?: better_call1.Middleware[];
+        use?: better_call131.Middleware[];
         path?: string;
       } & {
         asResponse?: AsResponse | undefined;
@@ -214,7 +214,7 @@ declare const magicLink: (options: MagicLinkopts) => {
           errorCallbackURL: z$1.ZodOptional<z$1.ZodString>;
           newUserCallbackURL: z$1.ZodOptional<z$1.ZodString>;
         }, z$1.core.$strip>;
-        use: ((inputContext: better_call1.MiddlewareInputContext<better_call1.MiddlewareOptions>) => Promise<void>)[];
+        use: ((inputContext: better_call131.MiddlewareInputContext<better_call131.MiddlewareOptions>) => Promise<void>)[];
         requireHeaders: true;
         metadata: {
           openapi: {