@gatwech/auth 1.0.0-beta.18

package/dist/src/api/middlewares/index.d.ts

@@ -0,0 +1,2 @@
+export { getOAuthState } from "./oauth";
+export * from "./origin-check";

package/dist/src/api/middlewares/oauth.d.ts

@@ -0,0 +1,15 @@
+type OAuthState = {
+    callbackURL: string;
+    codeVerifier: string;
+    errorURL?: string;
+    newUserURL?: string;
+    link?: {
+        email: string;
+        userId: string;
+    };
+    expiresAt: number;
+    requestSignUp?: boolean;
+    [key: string]: any;
+};
+declare const getOAuthState: <S>() => Promise<S & OAuthState>, setOAuthState: (value: OAuthState) => Promise<void>;
+export { getOAuthState, setOAuthState };

package/dist/src/api/middlewares/origin-check.d.ts

@@ -0,0 +1,8 @@
+import type { GenericEndpointContext } from "@gatwech/core";
+/**
+ * A middleware to validate callbackURL and origin against
+ * trustedOrigins.
+ */
+export declare const originCheckMiddleware: (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<void>;
+export declare const originCheck: (getValue: (ctx: GenericEndpointContext) => string | string[]) => (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<void>;
+export declare function isSimpleRequest(headers: Headers): boolean;

package/dist/src/api/rate-limiter/index.d.ts

@@ -0,0 +1,13 @@
+import type { AuthContext } from "@gatwech/core";
+import type { RateLimit } from "../../types";
+export declare function getRateLimitStorage(ctx: AuthContext, rateLimitSettings?: {
+    window?: number;
+} | undefined): {
+    get: (key: string) => Promise<{
+        key: string;
+        count: number;
+        lastRequest: number;
+    } | null | undefined>;
+    set: (key: string, value: RateLimit, _update?: boolean | undefined) => Promise<void>;
+};
+export declare function onRequestRateLimit(req: Request, ctx: AuthContext): Promise<Response | undefined>;

package/dist/src/api/routes/account.d.ts

@@ -0,0 +1,623 @@
+import type { OAuth2Tokens } from "@gatwech/core/oauth2";
+import * as z from "zod";
+export declare const listUserAccounts: {
+    <AsResponse extends boolean = false, ReturnHeaders extends boolean = false>(inputCtx_0?: ({
+        body?: undefined;
+    } & {
+        method?: "GET" | undefined;
+    } & {
+        query?: Record<string, any> | undefined;
+    } & {
+        params?: Record<string, any>;
+    } & {
+        request?: Request;
+    } & {
+        headers?: HeadersInit;
+    } & {
+        asResponse?: boolean;
+        returnHeaders?: boolean;
+        use?: import("better-call").Middleware[];
+        path?: string;
+    } & {
+        asResponse?: AsResponse | undefined;
+        returnHeaders?: ReturnHeaders | undefined;
+    }) | undefined): Promise<[AsResponse] extends [true] ? Response : [ReturnHeaders] extends [true] ? {
+        headers: Headers;
+        response: {
+            id: string;
+            providerId: string;
+            createdAt: Date;
+            updatedAt: Date;
+            accountId: string;
+            userId: string;
+            scopes: string[];
+        }[];
+    } : {
+        id: string;
+        providerId: string;
+        createdAt: Date;
+        updatedAt: Date;
+        accountId: string;
+        userId: string;
+        scopes: string[];
+    }[]>;
+    options: {
+        method: "GET";
+        use: ((inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
+            session: {
+                session: Record<string, any> & {
+                    id: string;
+                    createdAt: Date;
+                    updatedAt: Date;
+                    userId: string;
+                    expiresAt: Date;
+                    token: string;
+                    ipAddress?: string | null | undefined;
+                    userAgent?: string | null | undefined;
+                };
+                user: Record<string, any> & {
+                    id: string;
+                    createdAt: Date;
+                    updatedAt: Date;
+                    email: string;
+                    emailVerified: boolean;
+                    name: string;
+                    image?: string | null | undefined;
+                };
+            };
+        }>)[];
+        metadata: {
+            openapi: {
+                description: string;
+                responses: {
+                    "200": {
+                        description: string;
+                        content: {
+                            "application/json": {
+                                schema: {
+                                    type: "array";
+                                    items: {
+                                        type: string;
+                                        properties: {
+                                            id: {
+                                                type: string;
+                                            };
+                                            providerId: {
+                                                type: string;
+                                            };
+                                            createdAt: {
+                                                type: string;
+                                                format: string;
+                                            };
+                                            updatedAt: {
+                                                type: string;
+                                                format: string;
+                                            };
+                                            accountId: {
+                                                type: string;
+                                            };
+                                            userId: {
+                                                type: string;
+                                            };
+                                            scopes: {
+                                                type: string;
+                                                items: {
+                                                    type: string;
+                                                };
+                                            };
+                                        };
+                                        required: string[];
+                                    };
+                                };
+                            };
+                        };
+                    };
+                };
+            };
+        };
+    } & {
+        use: any[];
+    };
+    path: "/list-accounts";
+};
+export declare const linkSocialAccount: {
+    <AsResponse extends boolean = false, ReturnHeaders extends boolean = false>(inputCtx_0: {
+        body: {
+            provider: unknown;
+            callbackURL?: string | undefined;
+            idToken?: {
+                token: string;
+                nonce?: string | undefined;
+                accessToken?: string | undefined;
+                refreshToken?: string | undefined;
+                scopes?: string[] | undefined;
+            } | undefined;
+            requestSignUp?: boolean | undefined;
+            scopes?: string[] | undefined;
+            errorCallbackURL?: string | undefined;
+            disableRedirect?: boolean | undefined;
+            additionalData?: Record<string, any> | undefined;
+        };
+    } & {
+        method?: "POST" | undefined;
+    } & {
+        query?: Record<string, any> | undefined;
+    } & {
+        params?: Record<string, any>;
+    } & {
+        request?: Request;
+    } & {
+        headers: HeadersInit;
+    } & {
+        asResponse?: boolean;
+        returnHeaders?: boolean;
+        use?: import("better-call").Middleware[];
+        path?: string;
+    } & {
+        asResponse?: AsResponse | undefined;
+        returnHeaders?: ReturnHeaders | undefined;
+    }): Promise<[AsResponse] extends [true] ? Response : [ReturnHeaders] extends [true] ? {
+        headers: Headers;
+        response: {
+            url: string;
+            redirect: boolean;
+        };
+    } : {
+        url: string;
+        redirect: boolean;
+    }>;
+    options: {
+        method: "POST";
+        requireHeaders: true;
+        body: z.ZodObject<{
+            callbackURL: z.ZodOptional<z.ZodString>;
+            provider: z.ZodType<"github" | "google" | (string & {}), unknown, z.core.$ZodTypeInternals<"github" | "google" | (string & {}), unknown>>;
+            idToken: z.ZodOptional<z.ZodObject<{
+                token: z.ZodString;
+                nonce: z.ZodOptional<z.ZodString>;
+                accessToken: z.ZodOptional<z.ZodString>;
+                refreshToken: z.ZodOptional<z.ZodString>;
+                scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            }, z.core.$strip>>;
+            requestSignUp: z.ZodOptional<z.ZodBoolean>;
+            scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            errorCallbackURL: z.ZodOptional<z.ZodString>;
+            disableRedirect: z.ZodOptional<z.ZodBoolean>;
+            additionalData: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
+        }, z.core.$strip>;
+        use: ((inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
+            session: {
+                session: Record<string, any> & {
+                    id: string;
+                    createdAt: Date;
+                    updatedAt: Date;
+                    userId: string;
+                    expiresAt: Date;
+                    token: string;
+                    ipAddress?: string | null | undefined;
+                    userAgent?: string | null | undefined;
+                };
+                user: Record<string, any> & {
+                    id: string;
+                    createdAt: Date;
+                    updatedAt: Date;
+                    email: string;
+                    emailVerified: boolean;
+                    name: string;
+                    image?: string | null | undefined;
+                };
+            };
+        }>)[];
+        metadata: {
+            openapi: {
+                description: string;
+                responses: {
+                    "200": {
+                        description: string;
+                        content: {
+                            "application/json": {
+                                schema: {
+                                    type: "object";
+                                    properties: {
+                                        url: {
+                                            type: string;
+                                            description: string;
+                                        };
+                                        redirect: {
+                                            type: string;
+                                            description: string;
+                                        };
+                                        status: {
+                                            type: string;
+                                        };
+                                    };
+                                    required: string[];
+                                };
+                            };
+                        };
+                    };
+                };
+            };
+        };
+    } & {
+        use: any[];
+    };
+    path: "/link-social";
+};
+export declare const unlinkAccount: {
+    <AsResponse extends boolean = false, ReturnHeaders extends boolean = false>(inputCtx_0: {
+        body: {
+            providerId: string;
+            accountId?: string | undefined;
+        };
+    } & {
+        method?: "POST" | undefined;
+    } & {
+        query?: Record<string, any> | undefined;
+    } & {
+        params?: Record<string, any>;
+    } & {
+        request?: Request;
+    } & {
+        headers?: HeadersInit;
+    } & {
+        asResponse?: boolean;
+        returnHeaders?: boolean;
+        use?: import("better-call").Middleware[];
+        path?: string;
+    } & {
+        asResponse?: AsResponse | undefined;
+        returnHeaders?: ReturnHeaders | undefined;
+    }): Promise<[AsResponse] extends [true] ? Response : [ReturnHeaders] extends [true] ? {
+        headers: Headers;
+        response: {
+            status: boolean;
+        };
+    } : {
+        status: boolean;
+    }>;
+    options: {
+        method: "POST";
+        body: z.ZodObject<{
+            providerId: z.ZodString;
+            accountId: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>;
+        use: ((inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
+            session: {
+                session: Record<string, any> & {
+                    id: string;
+                    createdAt: Date;
+                    updatedAt: Date;
+                    userId: string;
+                    expiresAt: Date;
+                    token: string;
+                    ipAddress?: string | null | undefined;
+                    userAgent?: string | null | undefined;
+                };
+                user: Record<string, any> & {
+                    id: string;
+                    createdAt: Date;
+                    updatedAt: Date;
+                    email: string;
+                    emailVerified: boolean;
+                    name: string;
+                    image?: string | null | undefined;
+                };
+            };
+        }>)[];
+        metadata: {
+            openapi: {
+                description: string;
+                responses: {
+                    "200": {
+                        description: string;
+                        content: {
+                            "application/json": {
+                                schema: {
+                                    type: "object";
+                                    properties: {
+                                        status: {
+                                            type: string;
+                                        };
+                                    };
+                                };
+                            };
+                        };
+                    };
+                };
+            };
+        };
+    } & {
+        use: any[];
+    };
+    path: "/unlink-account";
+};
+export declare const getAccessToken: {
+    <AsResponse extends boolean = false, ReturnHeaders extends boolean = false>(inputCtx_0: {
+        body: {
+            providerId: string;
+            accountId?: string | undefined;
+            userId?: string | undefined;
+        };
+    } & {
+        method?: "POST" | undefined;
+    } & {
+        query?: Record<string, any> | undefined;
+    } & {
+        params?: Record<string, any>;
+    } & {
+        request?: Request;
+    } & {
+        headers?: HeadersInit;
+    } & {
+        asResponse?: boolean;
+        returnHeaders?: boolean;
+        use?: import("better-call").Middleware[];
+        path?: string;
+    } & {
+        asResponse?: AsResponse | undefined;
+        returnHeaders?: ReturnHeaders | undefined;
+    }): Promise<[AsResponse] extends [true] ? Response : [ReturnHeaders] extends [true] ? {
+        headers: Headers;
+        response: {
+            accessToken: string;
+            accessTokenExpiresAt: Date | undefined;
+            scopes: string[];
+            idToken: string | undefined;
+        };
+    } : {
+        accessToken: string;
+        accessTokenExpiresAt: Date | undefined;
+        scopes: string[];
+        idToken: string | undefined;
+    }>;
+    options: {
+        method: "POST";
+        body: z.ZodObject<{
+            providerId: z.ZodString;
+            accountId: z.ZodOptional<z.ZodString>;
+            userId: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>;
+        metadata: {
+            openapi: {
+                description: string;
+                responses: {
+                    200: {
+                        description: string;
+                        content: {
+                            "application/json": {
+                                schema: {
+                                    type: "object";
+                                    properties: {
+                                        tokenType: {
+                                            type: string;
+                                        };
+                                        idToken: {
+                                            type: string;
+                                        };
+                                        accessToken: {
+                                            type: string;
+                                        };
+                                        refreshToken: {
+                                            type: string;
+                                        };
+                                        accessTokenExpiresAt: {
+                                            type: string;
+                                            format: string;
+                                        };
+                                        refreshTokenExpiresAt: {
+                                            type: string;
+                                            format: string;
+                                        };
+                                    };
+                                };
+                            };
+                        };
+                    };
+                    400: {
+                        description: string;
+                    };
+                };
+            };
+        };
+    } & {
+        use: any[];
+    };
+    path: "/get-access-token";
+};
+export declare const refreshToken: {
+    <AsResponse extends boolean = false, ReturnHeaders extends boolean = false>(inputCtx_0: {
+        body: {
+            providerId: string;
+            accountId?: string | undefined;
+            userId?: string | undefined;
+        };
+    } & {
+        method?: "POST" | undefined;
+    } & {
+        query?: Record<string, any> | undefined;
+    } & {
+        params?: Record<string, any>;
+    } & {
+        request?: Request;
+    } & {
+        headers?: HeadersInit;
+    } & {
+        asResponse?: boolean;
+        returnHeaders?: boolean;
+        use?: import("better-call").Middleware[];
+        path?: string;
+    } & {
+        asResponse?: AsResponse | undefined;
+        returnHeaders?: ReturnHeaders | undefined;
+    }): Promise<[AsResponse] extends [true] ? Response : [ReturnHeaders] extends [true] ? {
+        headers: Headers;
+        response: OAuth2Tokens;
+    } : OAuth2Tokens>;
+    options: {
+        method: "POST";
+        body: z.ZodObject<{
+            providerId: z.ZodString;
+            accountId: z.ZodOptional<z.ZodString>;
+            userId: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>;
+        metadata: {
+            openapi: {
+                description: string;
+                responses: {
+                    200: {
+                        description: string;
+                        content: {
+                            "application/json": {
+                                schema: {
+                                    type: "object";
+                                    properties: {
+                                        tokenType: {
+                                            type: string;
+                                        };
+                                        idToken: {
+                                            type: string;
+                                        };
+                                        accessToken: {
+                                            type: string;
+                                        };
+                                        refreshToken: {
+                                            type: string;
+                                        };
+                                        accessTokenExpiresAt: {
+                                            type: string;
+                                            format: string;
+                                        };
+                                        refreshTokenExpiresAt: {
+                                            type: string;
+                                            format: string;
+                                        };
+                                    };
+                                };
+                            };
+                        };
+                    };
+                    400: {
+                        description: string;
+                    };
+                };
+            };
+        };
+    } & {
+        use: any[];
+    };
+    path: "/refresh-token";
+};
+export declare const accountInfo: {
+    <AsResponse extends boolean = false, ReturnHeaders extends boolean = false>(inputCtx_0: {
+        body: {
+            accountId: string;
+        };
+    } & {
+        method?: "POST" | undefined;
+    } & {
+        query?: Record<string, any> | undefined;
+    } & {
+        params?: Record<string, any>;
+    } & {
+        request?: Request;
+    } & {
+        headers?: HeadersInit;
+    } & {
+        asResponse?: boolean;
+        returnHeaders?: boolean;
+        use?: import("better-call").Middleware[];
+        path?: string;
+    } & {
+        asResponse?: AsResponse | undefined;
+        returnHeaders?: ReturnHeaders | undefined;
+    }): Promise<[AsResponse] extends [true] ? Response : [ReturnHeaders] extends [true] ? {
+        headers: Headers;
+        response: {
+            user: import("@gatwech/core/oauth2").OAuth2UserInfo;
+            data: Record<string, any>;
+        } | null;
+    } : {
+        user: import("@gatwech/core/oauth2").OAuth2UserInfo;
+        data: Record<string, any>;
+    } | null>;
+    options: {
+        method: "POST";
+        use: ((inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
+            session: {
+                session: Record<string, any> & {
+                    id: string;
+                    createdAt: Date;
+                    updatedAt: Date;
+                    userId: string;
+                    expiresAt: Date;
+                    token: string;
+                    ipAddress?: string | null | undefined;
+                    userAgent?: string | null | undefined;
+                };
+                user: Record<string, any> & {
+                    id: string;
+                    createdAt: Date;
+                    updatedAt: Date;
+                    email: string;
+                    emailVerified: boolean;
+                    name: string;
+                    image?: string | null | undefined;
+                };
+            };
+        }>)[];
+        metadata: {
+            openapi: {
+                description: string;
+                responses: {
+                    "200": {
+                        description: string;
+                        content: {
+                            "application/json": {
+                                schema: {
+                                    type: "object";
+                                    properties: {
+                                        user: {
+                                            type: string;
+                                            properties: {
+                                                id: {
+                                                    type: string;
+                                                };
+                                                name: {
+                                                    type: string;
+                                                };
+                                                email: {
+                                                    type: string;
+                                                };
+                                                image: {
+                                                    type: string;
+                                                };
+                                                emailVerified: {
+                                                    type: string;
+                                                };
+                                            };
+                                            required: string[];
+                                        };
+                                        data: {
+                                            type: string;
+                                            properties: {};
+                                            additionalProperties: boolean;
+                                        };
+                                    };
+                                    required: string[];
+                                    additionalProperties: boolean;
+                                };
+                            };
+                        };
+                    };
+                };
+            };
+        };
+        body: z.ZodObject<{
+            accountId: z.ZodString;
+        }, z.core.$strip>;
+    } & {
+        use: any[];
+    };
+    path: "/account-info";
+};