@getstrata/bootstrap 0.4.2 → 0.4.3

package/CHANGELOG.md

@@ -1,5 +1,10 @@
 # @getstrata/bootstrap changelog
 
+## 0.4.3
+
+- Cookie session `mapUser` / row mapping can pass `email_verified_at` through as `emailVerifiedAt` so HTML email verification works.
+- Session insert binds `expires_at` as an ISO string so SQLite cookie login does not fail parameter binding.
+
 ## 0.4.2
 
 - `HttpKernel.wrapApi` uses `withJsonErrorHandling`. Hybrid views do not turn API errors into HTML.

package/README.md

@@ -38,4 +38,4 @@ HTML apps should bind `createCookieSessionAuthManager` from `@getstrata/bootstra
 
 `registerDefaultJobs()` registers `cache.invalidate-tags` and `audit.export` only. Apps that dispatch model webhooks should call `registerWebhookJobs()` themselves.
 
-These subpaths assemble leftover fixture HTTP for framework tests and are not a generic starter API: `@getstrata/bootstrap/createRoutes`, `@getstrata/bootstrap/schedule`, `@getstrata/bootstrap/createWebRoutes`. New apps should use `buildWebModuleRoutes` / `buildModuleRoutes`. HiroApp uses `createApp()` in `apps/hiroapp`.
+These subpaths assemble leftover fixture HTTP for framework tests and are not a generic starter API: `@getstrata/bootstrap/createRoutes`, `@getstrata/bootstrap/schedule`, `@getstrata/bootstrap/createWebRoutes`. New apps should use `buildWebModuleRoutes` / `buildModuleRoutes`. Generated examples use `createApp()` in `apps/hiroapp`.

package/dist/bootstrap/web/session.d.ts

@@ -6,6 +6,7 @@ export interface SessionUser {
     email: string;
     learn_subscriber?: boolean;
     is_admin?: boolean;
+    email_verified_at?: Date | string | null;
 }
 type SqlClient = {
     unsafe<T>(query: string, params?: readonly unknown[]): Promise<T[]>;

package/dist/entries/web/session.js

@@ -34,7 +34,8 @@ function defaultSessionSql() {
 function defaultMapSessionUser(user) {
   return {
     id: user.id,
-    role: user.is_admin ? "admin" : "member"
+    role: user.is_admin ? "admin" : "member",
+    ...user.email_verified_at !== undefined ? { emailVerifiedAt: user.email_verified_at } : {}
   };
 }
 function sessionDisplayName(row, email) {
@@ -53,7 +54,8 @@ function mapSessionUserRow(row) {
     name: sessionDisplayName(row, email),
     email,
     learn_subscriber: Boolean(row.learn_subscriber),
-    is_admin: Boolean(row.is_admin)
+    is_admin: Boolean(row.is_admin),
+    ...row.email_verified_at !== undefined ? { email_verified_at: row.email_verified_at } : {}
   };
 }
 async function defaultLoadSessionUser(sql, sessionId) {
@@ -120,7 +122,7 @@ class CookieSessionStore {
     const id = randomBytes(32).toString("hex");
     const expires = new Date(Date.now() + this.maxAgeSeconds * 1000);
     await this.sql().unsafe(`INSERT INTO sessions (id, user_id, expires_at, user_agent, ip_address, last_active_at)
-       VALUES (${sqlPlaceholder(1)}, ${sqlPlaceholder(2)}, ${sqlPlaceholder(3)}, ${sqlPlaceholder(4)}, ${sqlPlaceholder(5)}, ${sqlNow()})`, [id, user.id, expires, meta.userAgent ?? null, meta.ipAddress ?? null]);
+       VALUES (${sqlPlaceholder(1)}, ${sqlPlaceholder(2)}, ${sqlPlaceholder(3)}, ${sqlPlaceholder(4)}, ${sqlPlaceholder(5)}, ${sqlNow()})`, [id, user.id, expires.toISOString(), meta.userAgent ?? null, meta.ipAddress ?? null]);
     return id;
   }
   async destroy(sessionId) {

package/dist/index.js

@@ -1423,7 +1423,8 @@ function defaultSessionSql() {
 function defaultMapSessionUser(user) {
   return {
     id: user.id,
-    role: user.is_admin ? "admin" : "member"
+    role: user.is_admin ? "admin" : "member",
+    ...user.email_verified_at !== undefined ? { emailVerifiedAt: user.email_verified_at } : {}
   };
 }
 function sessionDisplayName(row, email) {
@@ -1442,7 +1443,8 @@ function mapSessionUserRow(row) {
     name: sessionDisplayName(row, email),
     email,
     learn_subscriber: Boolean(row.learn_subscriber),
-    is_admin: Boolean(row.is_admin)
+    is_admin: Boolean(row.is_admin),
+    ...row.email_verified_at !== undefined ? { email_verified_at: row.email_verified_at } : {}
   };
 }
 async function defaultLoadSessionUser(sql, sessionId) {
@@ -1509,7 +1511,7 @@ class CookieSessionStore {
     const id = randomBytes(32).toString("hex");
     const expires = new Date(Date.now() + this.maxAgeSeconds * 1000);
     await this.sql().unsafe(`INSERT INTO sessions (id, user_id, expires_at, user_agent, ip_address, last_active_at)
-       VALUES (${sqlPlaceholder(1)}, ${sqlPlaceholder(2)}, ${sqlPlaceholder(3)}, ${sqlPlaceholder(4)}, ${sqlPlaceholder(5)}, ${sqlNow()})`, [id, user.id, expires, meta.userAgent ?? null, meta.ipAddress ?? null]);
+       VALUES (${sqlPlaceholder(1)}, ${sqlPlaceholder(2)}, ${sqlPlaceholder(3)}, ${sqlPlaceholder(4)}, ${sqlPlaceholder(5)}, ${sqlNow()})`, [id, user.id, expires.toISOString(), meta.userAgent ?? null, meta.ipAddress ?? null]);
     return id;
   }
   async destroy(sessionId) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@getstrata/bootstrap",
-  "version": "0.4.2",
+  "version": "0.4.3",
   "description": "Strata application bootstrap: HttpKernel, DI, web session helpers",
   "type": "module",
   "license": "MIT",