@jmlq/auth 0.0.1-alpha.33 → 0.0.1-alpha.35

package/dist/application/use-cases/verify-email.use-case.js

@@ -12,7 +12,11 @@ class VerifyEmailUseCase {
         const token = String(request.token ?? "").trim();
         if (!token) {
             // Conservador: si prefieres un error de dominio, puedes crear uno específico.
-            throw new Error("Email verification token is required");
+            if (!token) {
+                throw new errors_1.InvalidInputError("Email verification token is required", {
+                    field: "token",
+                });
+            }
         }
         const consumed = await this.emailVerificationToken.consume(token);
         const user = await this.userRepository.findById(new object_values_1.Id(consumed.userId.getValue()));

package/dist/domain/errors/auth-error-code.d.ts

@@ -9,4 +9,8 @@
  * - Mantén este catálogo pequeño y estable.
  * - Si agregas un error nuevo, agrega aquí su código.
  */
-export type AuthErrorCode = "TOKEN_INVALID" | "TOKEN_EXPIRED" | "TOKEN_MALFORMED" | "SIGNATURE_INVALID" | "AUTHENTICATION_FAILED" | "JWT_ERROR" | "KEY_MISMATCH" | "KEY_NOT_FOUND" | "KEY_MISMATCH" | "CLAIMS_VALIDATION_ERROR" | "JWT_PAYLOAD_INVALID" | "TOKEN_NOT_YET_VALID" | "JWT_EMPTY" | "JWT_MALFORMED" | "ALGORITHM_UNSUPPORTED" | "KEY_MISMATCH" | "KEY_NOT_FOUND" | "INVALID_EMAIL" | "INVALID_HASHED_PASSWORD" | "PASSWORD_POLICY_VIOLATION" | "PASSWORD_MISMATCH" | "USER_NOT_FOUND" | "USER_DISABLED" | "EMAIL_ALREADY_IN_USE" | "INVALID_PERMISSION" | "INVALID_ROLE" | "INVALID_ID" | "LOGOUT_FAILED" | "EMAIL_NOT_VERIFIED" | "PASSWORD_RESET_TOKEN_INVALID" | "PASSWORD_RESET_TOKEN_EXPIRED" | "PASSWORD_RESET_TOKEN_ALREADY_USED";
+/**
+ * ÚNICA fuente de verdad de los códigos.
+ */
+export declare const AUTH_ERROR_CODES: readonly ["TOKEN_INVALID", "TOKEN_EXPIRED", "TOKEN_MALFORMED", "SIGNATURE_INVALID", "AUTHENTICATION_FAILED", "JWT_ERROR", "KEY_MISMATCH", "KEY_NOT_FOUND", "KEY_MISMATCH", "CLAIMS_VALIDATION_ERROR", "JWT_PAYLOAD_INVALID", "TOKEN_NOT_YET_VALID", "JWT_EMPTY", "JWT_MALFORMED", "ALGORITHM_UNSUPPORTED", "KEY_MISMATCH", "KEY_NOT_FOUND", "INVALID_EMAIL", "INVALID_HASHED_PASSWORD", "PASSWORD_POLICY_VIOLATION", "PASSWORD_MISMATCH", "USER_NOT_FOUND", "USER_DISABLED", "EMAIL_ALREADY_IN_USE", "INVALID_PERMISSION", "INVALID_ROLE", "INVALID_ID", "LOGOUT_FAILED", "EMAIL_NOT_VERIFIED", "PASSWORD_RESET_TOKEN_INVALID", "PASSWORD_RESET_TOKEN_EXPIRED", "PASSWORD_RESET_TOKEN_ALREADY_USED", "EMAIL_VERIFICATION_TOKEN_INVALID", "EMAIL_VERIFICATION_TOKEN_EXPIRED", "EMAIL_VERIFICATION_TOKEN_ALREADY_USED", "INVALID_INPUT"];
+export type AuthErrorCode = (typeof AUTH_ERROR_CODES)[number];

package/dist/domain/errors/auth-error-code.js

@@ -1,2 +1,60 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.AUTH_ERROR_CODES = void 0;
+/**
+ * Códigos canónicos de error del dominio de Auth.
+ *
+ * Objetivo:
+ * - Host / plugins NO deben depender de `error.name` o `message`.
+ * - Solo deben mapear por `code`.
+ *
+ * Nota:
+ * - Mantén este catálogo pequeño y estable.
+ * - Si agregas un error nuevo, agrega aquí su código.
+ */
+/**
+ * ÚNICA fuente de verdad de los códigos.
+ */
+exports.AUTH_ERROR_CODES = [
+    // JWT / sesión
+    "TOKEN_INVALID",
+    "TOKEN_EXPIRED",
+    "TOKEN_MALFORMED", // formato invalido (no header.payload.signature),
+    "SIGNATURE_INVALID",
+    "AUTHENTICATION_FAILED", // catch-all de autenticación,
+    "JWT_ERROR",
+    "KEY_MISMATCH",
+    "KEY_NOT_FOUND",
+    "KEY_MISMATCH",
+    "CLAIMS_VALIDATION_ERROR",
+    "JWT_PAYLOAD_INVALID",
+    "TOKEN_NOT_YET_VALID",
+    "JWT_EMPTY",
+    "JWT_MALFORMED",
+    // Refresh Token
+    "ALGORITHM_UNSUPPORTED",
+    "KEY_MISMATCH",
+    "KEY_NOT_FOUND",
+    // Identidad / login
+    "INVALID_EMAIL",
+    "INVALID_HASHED_PASSWORD",
+    "PASSWORD_POLICY_VIOLATION",
+    "PASSWORD_MISMATCH",
+    "USER_NOT_FOUND",
+    "USER_DISABLED",
+    "EMAIL_ALREADY_IN_USE",
+    "INVALID_PERMISSION",
+    "INVALID_ROLE",
+    "INVALID_ID",
+    "LOGOUT_FAILED",
+    "EMAIL_NOT_VERIFIED",
+    // Password reset
+    "PASSWORD_RESET_TOKEN_INVALID",
+    "PASSWORD_RESET_TOKEN_EXPIRED",
+    "PASSWORD_RESET_TOKEN_ALREADY_USED",
+    "EMAIL_VERIFICATION_TOKEN_INVALID",
+    "EMAIL_VERIFICATION_TOKEN_EXPIRED",
+    "EMAIL_VERIFICATION_TOKEN_ALREADY_USED",
+    //General
+    "INVALID_INPUT",
+];

package/dist/domain/errors/auth.errors.d.ts

@@ -3,6 +3,7 @@ export interface ClaimsIssue {
     path: string;
     message: string;
 }
+export declare function isAuthErrorCode(value: unknown): value is AuthErrorCode;
 export declare abstract class AuthDomainError extends Error {
     readonly code: AuthErrorCode;
     readonly details?: unknown;
@@ -10,7 +11,7 @@ export declare abstract class AuthDomainError extends Error {
     toJSON(): {
         name: string;
         message: string;
-        code: AuthErrorCode;
+        code: "TOKEN_INVALID" | "TOKEN_EXPIRED" | "TOKEN_MALFORMED" | "SIGNATURE_INVALID" | "AUTHENTICATION_FAILED" | "JWT_ERROR" | "KEY_MISMATCH" | "KEY_NOT_FOUND" | "CLAIMS_VALIDATION_ERROR" | "JWT_PAYLOAD_INVALID" | "TOKEN_NOT_YET_VALID" | "JWT_EMPTY" | "JWT_MALFORMED" | "ALGORITHM_UNSUPPORTED" | "INVALID_EMAIL" | "INVALID_HASHED_PASSWORD" | "PASSWORD_POLICY_VIOLATION" | "PASSWORD_MISMATCH" | "USER_NOT_FOUND" | "USER_DISABLED" | "EMAIL_ALREADY_IN_USE" | "INVALID_PERMISSION" | "INVALID_ROLE" | "INVALID_ID" | "LOGOUT_FAILED" | "EMAIL_NOT_VERIFIED" | "PASSWORD_RESET_TOKEN_INVALID" | "PASSWORD_RESET_TOKEN_EXPIRED" | "PASSWORD_RESET_TOKEN_ALREADY_USED" | "EMAIL_VERIFICATION_TOKEN_INVALID" | "EMAIL_VERIFICATION_TOKEN_EXPIRED" | "EMAIL_VERIFICATION_TOKEN_ALREADY_USED" | "INVALID_INPUT";
         details: unknown;
     };
     /**
@@ -52,3 +53,12 @@ export declare class SessionAuthError extends AuthDomainError {
 export declare class EmailNotVerifiedError extends AuthDomainError {
     constructor(message?: string, details?: unknown);
 }
+export declare class EmailVerificationTokenAlreadyUsedError extends AuthDomainError {
+    constructor(message?: string, details?: unknown);
+}
+export declare class EmailVerificationTokenInvalidError extends AuthDomainError {
+    constructor(message?: string, details?: unknown);
+}
+export declare class EmailVerificationTokenExpiredError extends AuthDomainError {
+    constructor(message?: string, details?: unknown);
+}

package/dist/domain/errors/auth.errors.js

@@ -1,11 +1,17 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.EmailNotVerifiedError = exports.SessionAuthError = exports.AuthenticationError = exports.InvalidSignatureError = exports.InvalidTokenFormatError = exports.TokenExpiredError = exports.AuthDomainError = void 0;
+exports.EmailVerificationTokenExpiredError = exports.EmailVerificationTokenInvalidError = exports.EmailVerificationTokenAlreadyUsedError = exports.EmailNotVerifiedError = exports.SessionAuthError = exports.AuthenticationError = exports.InvalidSignatureError = exports.InvalidTokenFormatError = exports.TokenExpiredError = exports.AuthDomainError = void 0;
+exports.isAuthErrorCode = isAuthErrorCode;
+const auth_error_code_1 = require("./auth-error-code");
 function asAuthErrorLike(value) {
     if (value && typeof value === "object")
         return value;
     return {};
 }
+const AUTH_ERROR_CODE_SET = new Set(auth_error_code_1.AUTH_ERROR_CODES);
+function isAuthErrorCode(value) {
+    return typeof value === "string" && AUTH_ERROR_CODE_SET.has(value);
+}
 class AuthDomainError extends Error {
     constructor(message, code, details) {
         super(message);
@@ -42,7 +48,8 @@ class AuthDomainError extends Error {
         if (e instanceof AuthDomainError)
             return true;
         const like = asAuthErrorLike(e);
-        return typeof like.code === "string" && typeof like.message === "string";
+        // Exigir que code sea uno de los canónicos del core
+        return isAuthErrorCode(like.code);
     }
 }
 exports.AuthDomainError = AuthDomainError;
@@ -86,3 +93,21 @@ class EmailNotVerifiedError extends AuthDomainError {
     }
 }
 exports.EmailNotVerifiedError = EmailNotVerifiedError;
+class EmailVerificationTokenAlreadyUsedError extends AuthDomainError {
+    constructor(message = "Email verification token already used", details) {
+        super(message, "EMAIL_VERIFICATION_TOKEN_ALREADY_USED", details);
+    }
+}
+exports.EmailVerificationTokenAlreadyUsedError = EmailVerificationTokenAlreadyUsedError;
+class EmailVerificationTokenInvalidError extends AuthDomainError {
+    constructor(message = "Email verification token is invalid", details) {
+        super(message, "EMAIL_VERIFICATION_TOKEN_INVALID", details);
+    }
+}
+exports.EmailVerificationTokenInvalidError = EmailVerificationTokenInvalidError;
+class EmailVerificationTokenExpiredError extends AuthDomainError {
+    constructor(message = "Email verification token has expired", details) {
+        super(message, "EMAIL_VERIFICATION_TOKEN_EXPIRED", details);
+    }
+}
+exports.EmailVerificationTokenExpiredError = EmailVerificationTokenExpiredError;

package/dist/domain/errors/general.errors.d.ts

@@ -0,0 +1,4 @@
+import { AuthDomainError } from "./auth.errors";
+export declare class InvalidInputError extends AuthDomainError {
+    constructor(message?: string, details?: unknown);
+}

package/dist/domain/errors/general.errors.js

@@ -0,0 +1,10 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.InvalidInputError = void 0;
+const auth_errors_1 = require("./auth.errors");
+class InvalidInputError extends auth_errors_1.AuthDomainError {
+    constructor(message = "Email verification token is required", details) {
+        super(message, "INVALID_INPUT", details);
+    }
+}
+exports.InvalidInputError = InvalidInputError;

package/dist/domain/errors/index.d.ts

@@ -4,3 +4,4 @@ export * from "./password-reset.errors";
 export * from "./jwt-payload.error";
 export * from "./auth-error-code";
 export * from "./jwt.errors";
+export * from "./general.errors";

package/dist/domain/errors/index.js

@@ -20,3 +20,4 @@ __exportStar(require("./password-reset.errors"), exports);
 __exportStar(require("./jwt-payload.error"), exports);
 __exportStar(require("./auth-error-code"), exports);
 __exportStar(require("./jwt.errors"), exports);
+__exportStar(require("./general.errors"), exports);

package/dist/index.d.ts

@@ -12,7 +12,7 @@ export { normalizeJwtPayload } from "./domain/services";
  * Aunque ya se exporta vía `export * from "./domain/errors"`,
  * se expone de forma directa para que el host/plugins lo consuman sin ambigüedad.
  */
-export { InvalidJwtPayloadError, InvalidJwtEmptyError, InvalidJwtMalformedError, } from "./domain/errors";
+export * from "./domain/errors";
 export * from "./domain/ports";
 export * from "./domain/entities";
 export { readNonEmptyString } from "./domain/services/helpers";

package/dist/index.js

@@ -14,7 +14,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.readNonEmptyString = exports.InvalidJwtMalformedError = exports.InvalidJwtEmptyError = exports.InvalidJwtPayloadError = exports.normalizeJwtPayload = exports.assertJwtStructure = exports.optionalAudience = void 0;
+exports.readNonEmptyString = exports.normalizeJwtPayload = exports.assertJwtStructure = exports.optionalAudience = void 0;
 var helpers_1 = require("./domain/services/helpers");
 Object.defineProperty(exports, "optionalAudience", { enumerable: true, get: function () { return helpers_1.optionalAudience; } });
 Object.defineProperty(exports, "assertJwtStructure", { enumerable: true, get: function () { return helpers_1.assertJwtStructure; } });
@@ -30,10 +30,7 @@ Object.defineProperty(exports, "normalizeJwtPayload", { enumerable: true, get: f
  * Aunque ya se exporta vía `export * from "./domain/errors"`,
  * se expone de forma directa para que el host/plugins lo consuman sin ambigüedad.
  */
-var errors_1 = require("./domain/errors");
-Object.defineProperty(exports, "InvalidJwtPayloadError", { enumerable: true, get: function () { return errors_1.InvalidJwtPayloadError; } });
-Object.defineProperty(exports, "InvalidJwtEmptyError", { enumerable: true, get: function () { return errors_1.InvalidJwtEmptyError; } });
-Object.defineProperty(exports, "InvalidJwtMalformedError", { enumerable: true, get: function () { return errors_1.InvalidJwtMalformedError; } });
+__exportStar(require("./domain/errors"), exports);
 // Contratos (ports) + config
 __exportStar(require("./domain/ports"), exports);
 // Entities

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@jmlq/auth",
   "description": "JWT authentication package with clean architecture",
-  "version": "0.0.1-alpha.33",
+  "version": "0.0.1-alpha.35",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
   "scripts": {