@getstrata/core 0.5.71 → 0.5.72

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/CHANGELOG.md CHANGED
@@ -1,5 +1,9 @@
1
1
  # @getstrata/core changelog
2
2
 
3
+ ## 0.5.72
4
+
5
+ - OpenAPI treats `POST /auth/forgot-password` and `POST /auth/reset-password` as public operations (no bearer).
6
+
3
7
  ## 0.5.71
4
8
 
5
9
  - OpenAPI treats `POST /auth/login` and `POST /auth/register` as public (no bearer), including when routes are registered under `API_PREFIX`.
package/README.md CHANGED
@@ -82,7 +82,7 @@ import type { Migration } from "@getstrata/core/database/migrations/types";
82
82
  Package name: **`@getstrata/core`** (npm org [`@getstrata`](https://www.npmjs.com/org/getstrata)).
83
83
 
84
84
  1. Add `NPM_TOKEN` to GitHub repository secrets.
85
- 2. Tag a release: `git tag v0.5.71 && git push origin v0.5.71`
85
+ 2. Tag a release: `git tag v0.5.72 && git push origin v0.5.72`
86
86
  3. [Release workflow](../../.github/workflows/release.yml) builds and runs `npm publish --access public`.
87
87
 
88
88
  Previously published as `@eyk-workhub/framework@0.1.0`, deprecated in favor of this package.
@@ -52,6 +52,8 @@ var PUBLIC_ROUTE_DESCRIPTIONS = {
52
52
  "GET /auth/me": "Current authenticated user",
53
53
  "POST /auth/login": "Login with email and password",
54
54
  "POST /auth/register": "Register with name, email, and password",
55
+ "POST /auth/forgot-password": "Request a password reset email",
56
+ "POST /auth/reset-password": "Reset password with email and token",
55
57
  "GET /auth/tokens": "List API tokens",
56
58
  "POST /auth/tokens": "Create API token",
57
59
  "DELETE /auth/tokens/:id": "Revoke API token",
@@ -96,7 +98,7 @@ function toRelativeApiPath(path) {
96
98
  }
97
99
  function requiresBearerAuth(path, method) {
98
100
  const relative = toRelativeApiPath(path);
99
- if (relative.startsWith("/auth/login") || relative.startsWith("/auth/register") || relative.startsWith("/auth/oauth")) {
101
+ if (relative.startsWith("/auth/login") || relative.startsWith("/auth/register") || relative.startsWith("/auth/forgot-password") || relative.startsWith("/auth/reset-password") || relative.startsWith("/auth/oauth")) {
100
102
  return false;
101
103
  }
102
104
  if (relative.startsWith("/scim/") || relative.startsWith("/billing/webhooks/") || path.startsWith("/scim/") || path.startsWith("/billing/webhooks/")) {
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@getstrata/core",
3
- "version": "0.5.71",
3
+ "version": "0.5.72",
4
4
  "description": "Strata — Laravel-inspired Bun framework public API",
5
5
  "type": "module",
6
6
  "license": "MIT",