@lalternative/auth 0.13.3 → 0.15.0

package/dist/{types-3OHf736K.d.ts → types-COX3VaBw.d.ts}

@@ -141,6 +141,29 @@ interface PlatformSsoConfig {
     /** Lets a first visit create the local user. Defaults to true. */
     allowSignUp?: boolean;
 }
+interface PlatformKratosPasswordConfig {
+    /** Kratos' public URL, e.g. https://id.urbangate.dev */
+    publicUrl: string;
+    /** urbangate's issuer URL for the provisioning credential. */
+    issuer: string;
+    /** The product's provisioner client, e.g. "spore-provisioner". */
+    clientId: string;
+    clientSecret: string;
+    /** The role granted to a customer of this product, e.g. "spore:user". */
+    role: string;
+    /** The product id, e.g. "spore". */
+    product: string;
+    /**
+     * Called when a sign-up could not reach the provider, so the app can queue
+     * the repair. The sign-up itself always succeeds: the hook runs after the
+     * insert commits, and a customer is never refused registration because the
+     * provider is down.
+     */
+    onProvisioningDeferred?: (input: {
+        userId: string;
+        email: string;
+    }) => void | Promise<void>;
+}
 interface SsoClientSurface {
     signIn: {
         social(args: {
@@ -182,6 +205,21 @@ interface PlatformAuthConfig {
      * as admin, anyone else as a plain user. Omit to leave it off.
      */
     sso?: PlatformSsoConfig;
+    /**
+     * Moves the customers' passwords to the suite's identity provider while the
+     * app keeps its own login screen, its own domain and its own session. The
+     * form posts to this app as before; the password is checked against Kratos
+     * instead of a local hash, and the person is never redirected.
+     *
+     * Each app keeps its own accounts: the same person signing up on two
+     * products has two local users and two passwords. They share one identity
+     * at the provider, which is what an app key is issued against — so an app
+     * dropping a local account must drop its role, never deactivate the
+     * identity, or the person loses every other product of the suite.
+     *
+     * Omit to leave passwords local, as before.
+     */
+    kratosPasswords?: PlatformKratosPasswordConfig;
     /**
      * Override the OTP email subject line per verification type. Merged over
      * the platform defaults — provide only the keys you want to change. The
@@ -729,4 +767,4 @@ interface AuthLayoutProps extends AuthHeadingProps {
     footer?: React.ReactNode;
 }
 
-export type { AuthLayoutProps as A, ForgotPasswordFormProps as F, InvitationNoticeProps as I, LoginFormProps as L, MagicLinkFormProps as M, PlatformAuthClientConfig as P, RegisterFormProps as R, SsoClientSurface as S, TwoFactorClientSurface as T, VerifyEmailFormProps as V, ResetPasswordFormProps as a, AuthClientResult as b, LinkComponent as c, AdminClientSurface as d, AuthClientDataResult as e, AuthClientSurface as f, AuthInviteProps as g, AuthNavProps as h, AuthThemeProps as i, InvitationFailure as j, LoginFormLabels as k, MagicLinkClientSurface as l, MagicLinkConfig as m, MagicLinkFormLabels as n, PlatformAuthConfig as o, PlatformAuthMailer as p, PlatformAuthMailerArgs as q, PlatformAuthMailerType as r, PlatformRateLimitConfig as s, PlatformRateLimitRule as t, PlatformSession as u, PlatformSessionData as v, PlatformSsoConfig as w, PlatformTwoFactorConfig as x, PlatformUser as y, RegisterFormLabels as z };
+export type { AuthLayoutProps as A, RegisterFormLabels as B, ForgotPasswordFormProps as F, InvitationNoticeProps as I, LoginFormProps as L, MagicLinkFormProps as M, PlatformAuthClientConfig as P, RegisterFormProps as R, SsoClientSurface as S, TwoFactorClientSurface as T, VerifyEmailFormProps as V, ResetPasswordFormProps as a, AuthClientResult as b, LinkComponent as c, AdminClientSurface as d, AuthClientDataResult as e, AuthClientSurface as f, AuthInviteProps as g, AuthNavProps as h, AuthThemeProps as i, InvitationFailure as j, LoginFormLabels as k, MagicLinkClientSurface as l, MagicLinkConfig as m, MagicLinkFormLabels as n, PlatformAuthConfig as o, PlatformAuthMailer as p, PlatformAuthMailerArgs as q, PlatformAuthMailerType as r, PlatformKratosPasswordConfig as s, PlatformRateLimitConfig as t, PlatformRateLimitRule as u, PlatformSession as v, PlatformSessionData as w, PlatformSsoConfig as x, PlatformTwoFactorConfig as y, PlatformUser as z };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lalternative/auth",
-  "version": "0.13.3",
+  "version": "0.15.0",
   "description": "Shared Better Auth wrapper for L'Alternative apps (server + React client + auth UI)",
   "type": "module",
   "main": "./dist/index.js",