@lobb-js/lobb-ext-auth 0.6.0 → 0.7.0

package/dist/onStartup.js

@@ -17,5 +17,11 @@ export async function onStartup(utils) {
         utils.ctx.extensions.auth.session = session;
         return;
     }
+    // Allow public paths without login
+    const publicPaths = utils.ctx.meta?.extensions?.auth?.studio?.publicPaths ?? [];
+    const currentPath = window.location.pathname;
+    if (publicPaths.some(p => currentPath.startsWith(p))) {
+        return;
+    }
     await auth.logout();
 }

package/extensions/auth/collections/collections.ts

@@ -12,6 +12,16 @@ export function collections(
   collectionsSchemas["auth_users"] = usersCollection;
   collectionsSchemas["auth_sessions"] = sessionsCollection;
 
+  // Convert the role field to an enum based on configured roles
+  const roleNames = Object.keys(extensionConfig.roles ?? {}).filter(r => r !== "public");
+  if (roleNames.length > 0) {
+    const usersFields = (collectionsSchemas["auth_users"] as { fields: Record<string, any> }).fields;
+    usersFields.role = {
+      ...usersFields.role,
+      enum: [{ value: "admin" }, ...roleNames.map(r => ({ value: r }))],
+    };
+  }
+
   // adding the additional fields and indexes if the extend_users property exists
   if (extensionConfig.extend_users) {
     collectionsSchemas["auth_users"].indexes = {

package/extensions/auth/collections/users.ts

@@ -1,7 +1,7 @@
-import type { CollectionConfig } from "@lobb-js/core";
+import type { NormalCollectionConfig } from "@lobb-js/core";
 import { hash } from "argon2";
 
-export const usersCollection: CollectionConfig = {
+export const usersCollection: NormalCollectionConfig = {
   indexes: {
     auth_users_email_index: {
       unique: true,
@@ -39,6 +39,7 @@ export const usersCollection: CollectionConfig = {
       type: "string",
       length: 255,
       required: true,
+      enum: []
     },
   },
 };

package/extensions/auth/config/extensionConfigSchema.ts

@@ -45,4 +45,7 @@ export type ExtensionConfig = {
     indexes?: CollectionConfig["indexes"];
     fields?: Omit<CollectionConfig["fields"], "id">;
   };
+  studio?: {
+    publicPaths?: string[];
+  };
 };

package/extensions/auth/meta/meta.ts

@@ -6,6 +6,7 @@ export async function meta(lobb: Lobb, extensionConfig: ExtensionConfig) {
   const meta: any = {};
 
   meta["dashboard_access_roles"] = config.dashboard_access_roles ?? ["admin"];
+  meta["studio"] = { publicPaths: config.studio?.publicPaths ?? [] };
 
   return meta;
 }

package/extensions/auth/studio/onStartup.ts

@@ -21,5 +21,13 @@ export async function onStartup(utils: ExtensionUtils) {
         utils.ctx.extensions.auth.session = session;
         return;
     }
+
+    // Allow public paths without login
+    const publicPaths: string[] = utils.ctx.meta?.extensions?.auth?.studio?.publicPaths ?? [];
+    const currentPath = window.location.pathname;
+    if (publicPaths.some(p => currentPath.startsWith(p))) {
+        return;
+    }
+
     await auth.logout()
 }

package/extensions/auth/tests/middlewares/publicPreventBasic.test.ts

@@ -38,7 +38,7 @@ describe("Prevent Guard For Public Users", () => {
 
     expect(
       result.message,
-    ).toEqual("Your role is not recognized by the system.");
+    ).toEqual("You do not have permission to perform this action.");
     expect(response.status).toEqual(403);
   });
 
@@ -54,7 +54,7 @@ describe("Prevent Guard For Public Users", () => {
 
     expect(
       result.message,
-    ).toEqual("Your role is not recognized by the system.");
+    ).toEqual("You do not have permission to perform this action.");
     expect(response.status).toEqual(403);
   });
 
@@ -81,7 +81,7 @@ describe("Prevent Guard For Public Users", () => {
     ).toEqual({
         status: 403,
         code: "FORBIDDEN",
-        message: "Your role is not recognized by the system.",
+        message: "You do not have permission to perform this action.",
     });
     expect(response.status).toEqual(403);
   });
@@ -100,7 +100,7 @@ describe("Prevent Guard For Public Users", () => {
       result,
     ).toEqual({
         code: "FORBIDDEN",
-        message: "Your role is not recognized by the system.",
+        message: "You do not have permission to perform this action.",
         status: 403,
     });
     expect(response.status).toEqual(403);

package/extensions/auth/workflows/utils.ts

@@ -40,6 +40,12 @@ export function handlePolicy({
   const currentRole = config.roles?.[role];
 
   if (typeof currentRole === "undefined") {
+    if (role === "public") {
+      throw new ctx.LobbError({
+        code: "FORBIDDEN",
+        message: "You do not have permission to perform this action.",
+      });
+    }
     throw new ctx.LobbError({
       code: "FORBIDDEN",
       message: "Your role is not recognized by the system.",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lobb-js/lobb-ext-auth",
-  "version": "0.6.0",
+  "version": "0.7.0",
   "license": "UNLICENSED",
   "type": "module",
   "publishConfig": {
@@ -33,7 +33,7 @@
     "package": "svelte-package --input extensions/auth/studio"
   },
   "dependencies": {
-    "@lobb-js/core": "^0.26.2",
+    "@lobb-js/core": "^0.27.0",
     "argon2": "^0.40.3",
     "hono": "^4.7.0"
   },