@gatwech/auth 1.0.0-beta.18 → 1.0.0-beta.20

package/dist/{index-C-u1h_WX.d.mts → index-D6ku0rUC.d.mts}

@@ -1,6 +1,6 @@
-import { g as User, h as Session } from "./index-Cxi7TbLE.mjs";
+import { g as User, h as Session } from "./index-BNhJglHC.mjs";
 import { GenericEndpointContext } from "@gatwech/core";
-import * as better_call37 from "better-call";
+import * as better_call109 from "better-call";
 import * as z$1 from "zod";
 
 //#region src/plugins/one-time-token/index.d.ts
@@ -67,7 +67,7 @@ declare const oneTimeToken: (options?: OneTimeTokenOptions | undefined) => {
       } & {
         asResponse?: boolean;
         returnHeaders?: boolean;
-        use?: better_call37.Middleware[];
+        use?: better_call109.Middleware[];
         path?: string;
       } & {
         asResponse?: AsResponse | undefined;
@@ -82,7 +82,7 @@ declare const oneTimeToken: (options?: OneTimeTokenOptions | undefined) => {
       }>;
       options: {
         method: "GET";
-        use: ((inputContext: better_call37.MiddlewareInputContext<better_call37.MiddlewareOptions>) => Promise<{
+        use: ((inputContext: better_call109.MiddlewareInputContext<better_call109.MiddlewareOptions>) => Promise<{
           session: {
             session: Record<string, any> & {
               id: string;
@@ -143,7 +143,7 @@ declare const oneTimeToken: (options?: OneTimeTokenOptions | undefined) => {
       } & {
         asResponse?: boolean;
         returnHeaders?: boolean;
-        use?: better_call37.Middleware[];
+        use?: better_call109.Middleware[];
         path?: string;
       } & {
         asResponse?: AsResponse | undefined;

package/dist/{client-CNY0tn9g.d.mts → index-DFSRYWFI.d.mts}

@@ -1,5 +1,5 @@
-import { t as InferOptionSchema } from "./plugins-hFZT3hmK.mjs";
-import * as better_call164 from "better-call";
+import { t as InferOptionSchema } from "./plugins-Dy_FrD4Y.mjs";
+import * as better_call29 from "better-call";
 import * as z$1 from "zod";
 import { StringValue } from "ms";
 
@@ -47,6 +47,19 @@ declare const schema: {
   };
 };
 //#endregion
+//#region src/plugins/device-authorization/client.d.ts
+declare const deviceAuthorizationClient: () => {
+  id: "device-authorization";
+  $InferServerPlugin: ReturnType<typeof deviceAuthorization>;
+  pathMethods: {
+    "/device/code": "POST";
+    "/device/token": "POST";
+    "/device": "GET";
+    "/device/approve": "POST";
+    "/device/deny": "POST";
+  };
+};
+//#endregion
 //#region src/plugins/device-authorization/index.d.ts
 declare const $deviceAuthorizationOptionsSchema: z$1.ZodObject<{
   expiresIn: z$1.ZodDefault<z$1.ZodCustom<StringValue, StringValue>>;
@@ -167,7 +180,7 @@ declare const deviceAuthorization: (options?: Partial<DeviceAuthorizationOptions
       } & {
         asResponse?: boolean;
         returnHeaders?: boolean;
-        use?: better_call164.Middleware[];
+        use?: better_call29.Middleware[];
         path?: string;
       } & {
         asResponse?: AsResponse | undefined;
@@ -290,7 +303,7 @@ declare const deviceAuthorization: (options?: Partial<DeviceAuthorizationOptions
       } & {
         asResponse?: boolean;
         returnHeaders?: boolean;
-        use?: better_call164.Middleware[];
+        use?: better_call29.Middleware[];
         path?: string;
       } & {
         asResponse?: AsResponse | undefined;
@@ -394,7 +407,7 @@ declare const deviceAuthorization: (options?: Partial<DeviceAuthorizationOptions
       } & {
         asResponse?: boolean;
         returnHeaders?: boolean;
-        use?: better_call164.Middleware[];
+        use?: better_call29.Middleware[];
         path?: string;
       } & {
         asResponse?: AsResponse | undefined;
@@ -471,7 +484,7 @@ declare const deviceAuthorization: (options?: Partial<DeviceAuthorizationOptions
       } & {
         asResponse?: boolean;
         returnHeaders?: boolean;
-        use?: better_call164.Middleware[];
+        use?: better_call29.Middleware[];
         path?: string;
       } & {
         asResponse?: AsResponse | undefined;
@@ -543,7 +556,7 @@ declare const deviceAuthorization: (options?: Partial<DeviceAuthorizationOptions
       } & {
         asResponse?: boolean;
         returnHeaders?: boolean;
-        use?: better_call164.Middleware[];
+        use?: better_call29.Middleware[];
         path?: string;
       } & {
         asResponse?: AsResponse | undefined;
@@ -612,17 +625,4 @@ declare const deviceAuthorization: (options?: Partial<DeviceAuthorizationOptions
   };
 };
 //#endregion
-//#region src/plugins/device-authorization/client.d.ts
-declare const deviceAuthorizationClient: () => {
-  id: "device-authorization";
-  $InferServerPlugin: ReturnType<typeof deviceAuthorization>;
-  pathMethods: {
-    "/device/code": "POST";
-    "/device/token": "POST";
-    "/device": "GET";
-    "/device/approve": "POST";
-    "/device/deny": "POST";
-  };
-};
-//#endregion
-export { deviceAuthorization as i, $deviceAuthorizationOptionsSchema as n, DeviceAuthorizationOptions as r, deviceAuthorizationClient as t };
+export { deviceAuthorizationClient as i, DeviceAuthorizationOptions as n, deviceAuthorization as r, $deviceAuthorizationOptionsSchema as t };

package/dist/{index-BBm8nQ9Q.d.mts → index-DGeoJ4gu.d.mts}

@@ -1,4 +1,4 @@
-import * as _gatwech_core18 from "@gatwech/core";
+import * as _gatwech_core9 from "@gatwech/core";
 
 //#region src/plugins/captcha/constants.d.ts
 declare const Providers: {
@@ -34,7 +34,7 @@ type CaptchaOptions = GoogleRecaptchaOptions | CloudflareTurnstileOptions | HCap
 //#region src/plugins/captcha/index.d.ts
 declare const captcha: (options: CaptchaOptions) => {
   id: "captcha";
-  onRequest: (request: Request, ctx: _gatwech_core18.AuthContext<_gatwech_core18.PayvoAuthOptions>) => Promise<{
+  onRequest: (request: Request, ctx: _gatwech_core9.AuthContext<_gatwech_core9.PayvoAuthOptions>) => Promise<{
     response: Response;
   } | undefined>;
 };

package/dist/{index-G6V0Z_Mn.d.mts → index-DTkcY7xH.d.mts}

@@ -1,5 +1,5 @@
-import * as _gatwech_core7 from "@gatwech/core";
-import * as better_call19 from "better-call";
+import * as _gatwech_core23 from "@gatwech/core";
+import * as better_call60 from "better-call";
 import * as z$1 from "zod";
 
 //#region src/plugins/oauth-proxy/index.d.ts
@@ -48,7 +48,7 @@ declare const oAuthProxy: (opts?: OAuthProxyOptions | undefined) => {
       } & {
         asResponse?: boolean;
         returnHeaders?: boolean;
-        use?: better_call19.Middleware[];
+        use?: better_call60.Middleware[];
         path?: string;
       } & {
         asResponse?: AsResponse | undefined;
@@ -63,7 +63,7 @@ declare const oAuthProxy: (opts?: OAuthProxyOptions | undefined) => {
           callbackURL: z$1.ZodString;
           cookies: z$1.ZodString;
         }, z$1.core.$strip>;
-        use: ((inputContext: better_call19.MiddlewareInputContext<better_call19.MiddlewareOptions>) => Promise<void>)[];
+        use: ((inputContext: better_call60.MiddlewareInputContext<better_call60.MiddlewareOptions>) => Promise<void>)[];
         metadata: {
           openapi: {
             description: string;
@@ -96,12 +96,12 @@ declare const oAuthProxy: (opts?: OAuthProxyOptions | undefined) => {
   };
   hooks: {
     after: {
-      matcher(context: _gatwech_core7.HookEndpointContext): boolean;
-      handler: (inputContext: better_call19.MiddlewareInputContext<better_call19.MiddlewareOptions>) => Promise<void>;
+      matcher(context: _gatwech_core23.HookEndpointContext): boolean;
+      handler: (inputContext: better_call60.MiddlewareInputContext<better_call60.MiddlewareOptions>) => Promise<void>;
     }[];
     before: ({
       matcher(): true;
-      handler: (inputContext: better_call19.MiddlewareInputContext<better_call19.MiddlewareOptions>) => Promise<{
+      handler: (inputContext: better_call60.MiddlewareInputContext<better_call60.MiddlewareOptions>) => Promise<{
         context: {
           context: {
             oauthConfig: {
@@ -111,9 +111,9 @@ declare const oAuthProxy: (opts?: OAuthProxyOptions | undefined) => {
         };
       } | undefined>;
     } | {
-      matcher(context: _gatwech_core7.HookEndpointContext): boolean;
-      handler: (inputContext: better_call19.MiddlewareInputContext<better_call19.MiddlewareOptions>) => Promise<{
-        context: better_call19.MiddlewareContext<better_call19.MiddlewareOptions, _gatwech_core7.AuthContext<_gatwech_core7.PayvoAuthOptions> & {
+      matcher(context: _gatwech_core23.HookEndpointContext): boolean;
+      handler: (inputContext: better_call60.MiddlewareInputContext<better_call60.MiddlewareOptions>) => Promise<{
+        context: better_call60.MiddlewareContext<better_call60.MiddlewareOptions, _gatwech_core23.AuthContext<_gatwech_core23.PayvoAuthOptions> & {
           returned?: unknown | undefined;
           responseHeaders?: Headers | undefined;
         }>;

package/dist/{index-65G5U5DB-DSdjzreF.d.mts → index-Df0KhQRf-BEa5tdwJ.d.mts}

@@ -9,13 +9,14 @@ import { StandardSchemaV1 as StandardSchemaV1$1 } from "@standard-schema/spec";
 import { Database } from "bun:sqlite";
 import { DatabaseSync } from "node:sqlite";
 
-//#region ../core/dist/index-CmdhhvA2.d.mts
+//#region ../core/dist/index-CNtOUpmF.d.mts
 
 type LogLevel = "info" | "success" | "warn" | "error" | "debug";
 interface Logger {
   disabled?: boolean | undefined;
   disableColors?: boolean | undefined;
   level?: Exclude<LogLevel, "success"> | undefined;
+  tag?: string | undefined;
   log?: ((level: Exclude<LogLevel, "success">, message: string, ...args: any[]) => void) | undefined;
 }
 type LogHandlerParams = Parameters<NonNullable<Logger["log"]>> extends [LogLevel, ...infer Rest] ? Rest : never;
@@ -24,7 +25,7 @@ type InternalLogger = { [K in LogLevel]: (...params: LogHandlerParams) => void }
 };
 declare const createLogger: (options?: Logger | undefined) => InternalLogger;
 //#endregion
-//#region ../core/dist/index-65G5U5DB.d.mts
+//#region ../core/dist/index-Df0KhQRf.d.mts
 //#region src/db/type.d.ts
 type DBPreservedModels = "user" | "account" | "session" | "verification" | "rate-limit" | "organization" | "member" | "invitation" | "jwks" | "passkey" | "two-factor";
 type DBFieldType = "string" | "number" | "boolean" | "date" | "json" | `${"string" | "number"}[]` | Array<LiteralString>;

package/dist/{index-34ONrP8l.d.mts → index-Dnd8S4S4.d.mts}

@@ -1,9 +1,9 @@
-import { t as Awaitable } from "./helper-tmxW3BHj.mjs";
-import { On as index_d_exports, g as User, h as Session } from "./index-Cxi7TbLE.mjs";
-import { t as InferOptionSchema } from "./plugins-hFZT3hmK.mjs";
-import * as _gatwech_core17 from "@gatwech/core";
+import { t as Awaitable } from "./helper-BgOIGHsu.mjs";
+import { On as index_d_exports, g as User, h as Session } from "./index-BNhJglHC.mjs";
+import { t as InferOptionSchema } from "./plugins-Dy_FrD4Y.mjs";
+import * as _gatwech_core48 from "@gatwech/core";
 import { GenericEndpointContext } from "@gatwech/core";
-import * as better_call169 from "better-call";
+import * as better_call114 from "better-call";
 import * as z$1 from "zod";
 import * as jose0 from "jose";
 import { JSONWebKeySet, JWTPayload } from "jose";
@@ -250,7 +250,7 @@ declare const jwt: (options?: JwtOptions | undefined) => {
       } & {
         asResponse?: boolean;
         returnHeaders?: boolean;
-        use?: better_call169.Middleware[];
+        use?: better_call114.Middleware[];
         path?: string;
       } & {
         asResponse?: AsResponse | undefined;
@@ -355,7 +355,7 @@ declare const jwt: (options?: JwtOptions | undefined) => {
       } & {
         asResponse?: boolean;
         returnHeaders?: boolean;
-        use?: better_call169.Middleware[];
+        use?: better_call114.Middleware[];
         path?: string;
       } & {
         asResponse?: AsResponse | undefined;
@@ -371,7 +371,7 @@ declare const jwt: (options?: JwtOptions | undefined) => {
       options: {
         method: "GET";
         requireHeaders: true;
-        use: ((inputContext: better_call169.MiddlewareInputContext<better_call169.MiddlewareOptions>) => Promise<{
+        use: ((inputContext: better_call114.MiddlewareInputContext<better_call114.MiddlewareOptions>) => Promise<{
           session: {
             session: Record<string, any> & {
               id: string;
@@ -440,7 +440,7 @@ declare const jwt: (options?: JwtOptions | undefined) => {
       } & {
         asResponse?: boolean;
         returnHeaders?: boolean;
-        use?: better_call169.Middleware[];
+        use?: better_call114.Middleware[];
         path?: string;
       } & {
         asResponse?: AsResponse | undefined;
@@ -476,8 +476,8 @@ declare const jwt: (options?: JwtOptions | undefined) => {
   };
   hooks: {
     after: {
-      matcher(context: _gatwech_core17.HookEndpointContext): boolean;
-      handler: (inputContext: better_call169.MiddlewareInputContext<better_call169.MiddlewareOptions>) => Promise<void>;
+      matcher(context: _gatwech_core48.HookEndpointContext): boolean;
+      handler: (inputContext: better_call114.MiddlewareInputContext<better_call114.MiddlewareOptions>) => Promise<void>;
     }[];
   };
   schema: {

package/dist/{index-B-XKqFvY.d.mts → index-DwPAddfE.d.mts}

@@ -1,12 +1,19 @@
-import * as _gatwech_core3 from "@gatwech/core";
+import * as _gatwech_core11 from "@gatwech/core";
 
 //#region src/plugins/haveibeenpwned/index.d.ts
+
+/**
+ * Returns how many times a password appears in known breaches, using the
+ * k-anonymity range API: only the first 5 characters of the password's SHA-1
+ * hash are sent. Throws if the API can't be reached.
+ */
+declare function getPasswordBreachCount(password: string): Promise<number>;
 interface HaveIBeenPwnedOptions {
   customPasswordCompromisedMessage?: string | undefined;
 }
 declare const haveIBeenPwned: (options?: HaveIBeenPwnedOptions | undefined) => {
   id: "haveIBeenPwned";
-  init(ctx: _gatwech_core3.AuthContext<_gatwech_core3.PayvoAuthOptions>): {
+  init(ctx: _gatwech_core11.AuthContext<_gatwech_core11.PayvoAuthOptions>): {
     context: {
       password: {
         hash(password: string): Promise<string>;
@@ -18,7 +25,7 @@ declare const haveIBeenPwned: (options?: HaveIBeenPwnedOptions | undefined) => {
           minPasswordLength: number;
           maxPasswordLength: number;
         };
-        checkPassword: (userId: string, ctx: _gatwech_core3.GenericEndpointContext<_gatwech_core3.PayvoAuthOptions>) => Promise<boolean>;
+        checkPassword: (userId: string, ctx: _gatwech_core11.GenericEndpointContext<_gatwech_core11.PayvoAuthOptions>) => Promise<boolean>;
       };
     };
   };
@@ -27,4 +34,4 @@ declare const haveIBeenPwned: (options?: HaveIBeenPwnedOptions | undefined) => {
   };
 };
 //#endregion
-export { haveIBeenPwned as n, HaveIBeenPwnedOptions as t };
+export { getPasswordBreachCount as n, haveIBeenPwned as r, HaveIBeenPwnedOptions as t };

package/dist/{index-DoXZYQpq.d.mts → index-DyXi7S2M.d.mts}

@@ -1,6 +1,6 @@
-import { o as Session, s as User } from "./index-65G5U5DB-DSdjzreF.mjs";
-import * as _gatwech_core1 from "@gatwech/core";
-import * as better_call7 from "better-call";
+import { o as Session, s as User } from "./index-Df0KhQRf-BEa5tdwJ.mjs";
+import * as _gatwech_core30 from "@gatwech/core";
+import * as better_call83 from "better-call";
 import * as z$1 from "zod";
 
 //#region src/plugins/multi-session/index.d.ts
@@ -46,7 +46,7 @@ declare const multiSession: (options?: MultiSessionConfig | undefined) => {
       } & {
         asResponse?: boolean;
         returnHeaders?: boolean;
-        use?: better_call7.Middleware[];
+        use?: better_call83.Middleware[];
         path?: string;
       } & {
         asResponse?: AsResponse | undefined;
@@ -102,7 +102,7 @@ declare const multiSession: (options?: MultiSessionConfig | undefined) => {
       } & {
         asResponse?: boolean;
         returnHeaders?: boolean;
-        use?: better_call7.Middleware[];
+        use?: better_call83.Middleware[];
         path?: string;
       } & {
         asResponse?: AsResponse | undefined;
@@ -123,7 +123,7 @@ declare const multiSession: (options?: MultiSessionConfig | undefined) => {
           sessionToken: z$1.ZodString;
         }, z$1.core.$strip>;
         requireHeaders: true;
-        use: ((inputContext: better_call7.MiddlewareInputContext<better_call7.MiddlewareOptions>) => Promise<{
+        use: ((inputContext: better_call83.MiddlewareInputContext<better_call83.MiddlewareOptions>) => Promise<{
           session: {
             session: Record<string, any> & {
               id: string;
@@ -206,7 +206,7 @@ declare const multiSession: (options?: MultiSessionConfig | undefined) => {
       } & {
         asResponse?: boolean;
         returnHeaders?: boolean;
-        use?: better_call7.Middleware[];
+        use?: better_call83.Middleware[];
         path?: string;
       } & {
         asResponse?: AsResponse | undefined;
@@ -225,7 +225,7 @@ declare const multiSession: (options?: MultiSessionConfig | undefined) => {
           sessionToken: z$1.ZodString;
         }, z$1.core.$strip>;
         requireHeaders: true;
-        use: ((inputContext: better_call7.MiddlewareInputContext<better_call7.MiddlewareOptions>) => Promise<{
+        use: ((inputContext: better_call83.MiddlewareInputContext<better_call83.MiddlewareOptions>) => Promise<{
           session: {
             session: Record<string, any> & {
               id: string;
@@ -278,8 +278,8 @@ declare const multiSession: (options?: MultiSessionConfig | undefined) => {
   };
   hooks: {
     after: {
-      matcher: (context: _gatwech_core1.HookEndpointContext) => boolean;
-      handler: (inputContext: better_call7.MiddlewareInputContext<better_call7.MiddlewareOptions>) => Promise<void>;
+      matcher: (context: _gatwech_core30.HookEndpointContext) => boolean;
+      handler: (inputContext: better_call83.MiddlewareInputContext<better_call83.MiddlewareOptions>) => Promise<void>;
     }[];
   };
   $ERROR_CODES: {