@gatwech/auth 1.0.0-beta.19 → 1.0.0-beta.20

package/dist/plugins/phone-number/index.d.mts

@@ -3,5 +3,5 @@ import "../../index-BNhJglHC.mjs";
 import "../../types-DNQ9XQrB.mjs";
 import "../../index-Df0KhQRf-BEa5tdwJ.mjs";
 import "../../plugins-Dy_FrD4Y.mjs";
-import { n as UserWithPhoneNumber, r as phoneNumber, t as PhoneNumberOptions } from "../../index-CaqpCfE5.mjs";
+import { n as UserWithPhoneNumber, r as phoneNumber, t as PhoneNumberOptions } from "../../index-CofuaNMl.mjs";
 export { PhoneNumberOptions, UserWithPhoneNumber, phoneNumber };

package/dist/plugins/sentinel/client.d.mts

@@ -4,27 +4,27 @@ import "../../types-DNQ9XQrB.mjs";
 import "../../index-Df0KhQRf-BEa5tdwJ.mjs";
 import "../../plugins-Dy_FrD4Y.mjs";
 import "../../index-CxlWnL9c.mjs";
-import "../../index-EABwA_BH.mjs";
-import "../../index-zBdYQGaS.mjs";
-import "../../index-DRM35ir1.mjs";
-import "../../index-DS-R7st3.mjs";
-import "../../index-CgeC2eGC.mjs";
-import "../../index-DG-X1PK5.mjs";
-import "../../index-BAVzFqII.mjs";
-import "../../index-CUknVRZp.mjs";
-import "../../index-CP3FNbOZ.mjs";
-import "../../index-Df4SvZaE.mjs";
-import "../../index-COGe8UJx.mjs";
-import "../../index-Blmhq6eA.mjs";
-import "../../index-Db8jqUq2.mjs";
-import "../../index-DyH_CgmX.mjs";
-import "../../index-BNDRYfTF.mjs";
-import "../../index-DXVU0HGr.mjs";
+import "../../index-XfE0WjTN.mjs";
+import "../../index-CNd5jqLl.mjs";
+import "../../index-D57DuhZR.mjs";
+import "../../index-CP8x1TFq.mjs";
+import "../../index-DGeoJ4gu.mjs";
+import "../../index-BsSKcKgO.mjs";
+import "../../index-DFSRYWFI.mjs";
+import "../../index-CC920PPp.mjs";
+import "../../index-CBiGsvDd.mjs";
+import "../../index-DwPAddfE.mjs";
+import "../../index-Dnd8S4S4.mjs";
+import "../../index-4I1YhYhk.mjs";
+import "../../index-DyXi7S2M.mjs";
+import "../../index-DTkcY7xH.mjs";
+import "../../index-sb-UFLuo.mjs";
+import "../../index-D6ku0rUC.mjs";
 import "../../index-QmocqGM-.mjs";
-import "../../index-CKnPAS5n.mjs";
-import "../../index-CaqpCfE5.mjs";
-import "../../index-xoYsoOiR.mjs";
-import "../../index-mxEUX2Gs.mjs";
-import "../../index-Cv9iMevV.mjs";
-import { t as sentinelClient } from "../../client-DZHNfxuR.mjs";
+import "../../index-KhbNmMmG.mjs";
+import "../../index-CofuaNMl.mjs";
+import "../../index-Bml-PCqP.mjs";
+import "../../index-BX7rl07Z.mjs";
+import "../../index-CzpdkTdv.mjs";
+import { t as sentinelClient } from "../../client-C_qmyez2.mjs";
 export { sentinelClient };

package/dist/plugins/sentinel/index.d.mts

@@ -4,26 +4,26 @@ import "../../types-DNQ9XQrB.mjs";
 import "../../index-Df0KhQRf-BEa5tdwJ.mjs";
 import "../../plugins-Dy_FrD4Y.mjs";
 import "../../index-CxlWnL9c.mjs";
-import "../../index-EABwA_BH.mjs";
-import "../../index-zBdYQGaS.mjs";
-import { S as SentinelOptions, _ as haversineDistanceKm, b as GeoLocation, c as sentinel, d as POW_SOLUTION_HEADER, f as createNonce, g as verifySolution, h as solveChallenge, l as POW_CHALLENGE_HEADER, m as parsePowHeader, p as hasLeadingZeroBits, u as POW_REASON_HEADER, v as normalizeEmail, x as SecurityAction, y as SENTINEL_ERROR_CODES } from "../../index-DRM35ir1.mjs";
-import "../../index-DS-R7st3.mjs";
-import "../../index-CgeC2eGC.mjs";
-import "../../index-DG-X1PK5.mjs";
-import "../../index-BAVzFqII.mjs";
-import "../../index-CUknVRZp.mjs";
-import "../../index-CP3FNbOZ.mjs";
-import "../../index-Df4SvZaE.mjs";
-import "../../index-COGe8UJx.mjs";
-import "../../index-Blmhq6eA.mjs";
-import "../../index-Db8jqUq2.mjs";
-import "../../index-DyH_CgmX.mjs";
-import "../../index-BNDRYfTF.mjs";
-import "../../index-DXVU0HGr.mjs";
+import "../../index-XfE0WjTN.mjs";
+import "../../index-CNd5jqLl.mjs";
+import { S as SentinelOptions, _ as haversineDistanceKm, b as GeoLocation, c as sentinel, d as POW_SOLUTION_HEADER, f as createNonce, g as verifySolution, h as solveChallenge, l as POW_CHALLENGE_HEADER, m as parsePowHeader, p as hasLeadingZeroBits, u as POW_REASON_HEADER, v as normalizeEmail, x as SecurityAction, y as SENTINEL_ERROR_CODES } from "../../index-D57DuhZR.mjs";
+import "../../index-CP8x1TFq.mjs";
+import "../../index-DGeoJ4gu.mjs";
+import "../../index-BsSKcKgO.mjs";
+import "../../index-DFSRYWFI.mjs";
+import "../../index-CC920PPp.mjs";
+import "../../index-CBiGsvDd.mjs";
+import "../../index-DwPAddfE.mjs";
+import "../../index-Dnd8S4S4.mjs";
+import "../../index-4I1YhYhk.mjs";
+import "../../index-DyXi7S2M.mjs";
+import "../../index-DTkcY7xH.mjs";
+import "../../index-sb-UFLuo.mjs";
+import "../../index-D6ku0rUC.mjs";
 import "../../index-QmocqGM-.mjs";
-import "../../index-CKnPAS5n.mjs";
-import "../../index-CaqpCfE5.mjs";
-import "../../index-xoYsoOiR.mjs";
-import "../../index-mxEUX2Gs.mjs";
-import "../../index-Cv9iMevV.mjs";
+import "../../index-KhbNmMmG.mjs";
+import "../../index-CofuaNMl.mjs";
+import "../../index-Bml-PCqP.mjs";
+import "../../index-BX7rl07Z.mjs";
+import "../../index-CzpdkTdv.mjs";
 export { GeoLocation, POW_CHALLENGE_HEADER, POW_REASON_HEADER, POW_SOLUTION_HEADER, SENTINEL_ERROR_CODES, SecurityAction, SentinelOptions, createNonce, hasLeadingZeroBits, haversineDistanceKm, normalizeEmail, parsePowHeader, sentinel, solveChallenge, verifySolution };

package/dist/plugins/sentinel/index.mjs

@@ -17,6 +17,6 @@ import "../../session-BB3oqApE.mjs";
 import "../../registry-CqG_3Qnx.mjs";
 import "../../haveibeenpwned-CzNda7Tn.mjs";
 import { a as hasLeadingZeroBits, c as verifySolution, i as createNonce, n as POW_REASON_HEADER, o as parsePowHeader, r as POW_SOLUTION_HEADER, s as solveChallenge, t as POW_CHALLENGE_HEADER } from "../../pow-OK01yPG3.mjs";
-import { i as SENTINEL_ERROR_CODES, n as haversineDistanceKm, r as normalizeEmail, t as sentinel } from "../../sentinel-C-D1IHJo.mjs";
+import { i as SENTINEL_ERROR_CODES, n as haversineDistanceKm, r as normalizeEmail, t as sentinel } from "../../sentinel-DiPqydKG.mjs";
 
 export { POW_CHALLENGE_HEADER, POW_REASON_HEADER, POW_SOLUTION_HEADER, SENTINEL_ERROR_CODES, createNonce, hasLeadingZeroBits, haversineDistanceKm, normalizeEmail, parsePowHeader, sentinel, solveChallenge, verifySolution };

package/dist/plugins/two-factor/index.d.mts

@@ -3,5 +3,5 @@ import "../../index-BNhJglHC.mjs";
 import "../../types-DNQ9XQrB.mjs";
 import "../../index-Df0KhQRf-BEa5tdwJ.mjs";
 import "../../plugins-Dy_FrD4Y.mjs";
-import { a as TwoFactorProvider, i as TwoFactorOptions, n as twoFactorClient, o as TwoFactorTable, r as TWO_FACTOR_ERROR_CODES, s as UserWithTwoFactor, t as twoFactor } from "../../index-xoYsoOiR.mjs";
+import { a as TwoFactorProvider, i as TwoFactorOptions, n as twoFactorClient, o as TwoFactorTable, r as TWO_FACTOR_ERROR_CODES, s as UserWithTwoFactor, t as twoFactor } from "../../index-Bml-PCqP.mjs";
 export { TWO_FACTOR_ERROR_CODES, TwoFactorOptions, TwoFactorProvider, TwoFactorTable, UserWithTwoFactor, twoFactor, twoFactorClient };

package/dist/plugins/username/index.d.mts

@@ -1,4 +1,4 @@
 import "../../helper-BgOIGHsu.mjs";
 import "../../plugins-Dy_FrD4Y.mjs";
-import { n as username, r as USERNAME_ERROR_CODES, t as UsernameOptions } from "../../index-Cv9iMevV.mjs";
+import { n as username, r as USERNAME_ERROR_CODES, t as UsernameOptions } from "../../index-CzpdkTdv.mjs";
 export { USERNAME_ERROR_CODES, UsernameOptions, username };

package/dist/{sentinel-C-D1IHJo.mjs → sentinel-DiPqydKG.mjs}

@@ -194,23 +194,54 @@ async function isDisposableDomain(domain) {
 	for (let i = 0; i < labels.length - 1; i++) if (isDisposable(labels.slice(i).join("."))) return true;
 	return false;
 }
+/** How long a mail lookup may take before it counts as unknown */
+const MAIL_LOOKUP_TIMEOUT_MS = 2e3;
+/** The lookup found nothing, as opposed to failing */
+const isMissingRecord = (e) => {
+	const code = e.code;
+	return code === "ENOTFOUND" || code === "ENODATA" || code === "ENOTIMP";
+};
+/** Whether a domain has an A or AAAA record, null when a lookup failed */
+async function hasAddressRecords(dns, domain) {
+	const results = await Promise.allSettled([dns.resolve4(domain), dns.resolve6(domain)]);
+	if (results.some((r) => r.status === "fulfilled" && r.value.length > 0)) return true;
+	return results.some((r) => r.status === "rejected" && !isMissingRecord(r.reason)) ? null : false;
+}
+async function lookupMail(dns, domain) {
+	try {
+		const records = await dns.resolveMx(domain);
+		if (records.length === 1 && (records[0].exchange === "" || records[0].exchange === ".")) return false;
+		if (records.length > 0) return true;
+	} catch (e) {
+		const code = e.code;
+		if (code === "ENOTFOUND" || code === "ENOTIMP") return false;
+		if (!isMissingRecord(e)) return null;
+	}
+	return hasAddressRecords(dns, domain);
+}
 /**
-* Whether a domain has at least one MX record. Returns null when the lookup
-* isn't possible, e.g. on runtimes without DNS access.
+* Whether a domain can receive mail: it has an MX record, or an address
+* record to fall back to when it has none. A null MX record, which marks a
+* domain that accepts no mail, doesn't count.
+*
+* Returns null when that can't be told: runtimes without DNS access, lookup
+* failures, or a lookup that takes longer than `timeoutMs`.
 */
-async function hasMxRecords(domain) {
+async function hasMxRecords(domain, options = {}) {
 	let dns;
 	try {
 		dns = await import("node:dns/promises");
 	} catch {
 		return null;
 	}
+	let timer;
+	const timeout = new Promise((resolve) => {
+		timer = setTimeout(() => resolve(null), options.timeoutMs ?? MAIL_LOOKUP_TIMEOUT_MS);
+	});
 	try {
-		return (await dns.resolveMx(domain)).length > 0;
-	} catch (e) {
-		const code = e.code;
-		if (code === "ENOTFOUND" || code === "ENODATA" || code === "ENOTIMP") return false;
-		return null;
+		return await Promise.race([lookupMail(dns, domain), timeout]);
+	} finally {
+		clearTimeout(timer);
 	}
 }
 /**

package/dist/src/plugins/sentinel/email.d.ts

@@ -11,10 +11,16 @@ export declare function getEmailDomain(email: string): string;
  */
 export declare function isDisposableDomain(domain: string): Promise<boolean>;
 /**
- * Whether a domain has at least one MX record. Returns null when the lookup
- * isn't possible, e.g. on runtimes without DNS access.
+ * Whether a domain can receive mail: it has an MX record, or an address
+ * record to fall back to when it has none. A null MX record, which marks a
+ * domain that accepts no mail, doesn't count.
+ *
+ * Returns null when that can't be told: runtimes without DNS access, lookup
+ * failures, or a lookup that takes longer than `timeoutMs`.
  */
-export declare function hasMxRecords(domain: string): Promise<boolean | null>;
+export declare function hasMxRecords(domain: string, options?: {
+    timeoutMs?: number | undefined;
+}): Promise<boolean | null>;
 /**
  * Heuristics for addresses that look generated rather than chosen by a
  * person