@logto/core-kit 2.11.0 → 2.12.0

package/lib/email-blocklist.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Validates an email blocklist item.
+ *
+ * An item can be either a full email address (`foo@example.com`) or a domain entry
+ * prefixed with `@` (`@example.com`). `*` can be used inside the local part or
+ * domain while keeping the same email/domain shapes.
+ */
+export declare const isEmailBlocklistItem: (value: string) => boolean;
+/**
+ * Checks whether an email address matches an email blocklist item.
+ *
+ * Matching is case-insensitive. Domain items (`@example.com`) match only the email
+ * domain, while full email items match the complete email address.
+ */
+export declare const matchesEmailBlocklistItem: (item: string, email: string) => boolean;

package/lib/email-blocklist.js

@@ -0,0 +1,65 @@
+import { emailOrEmailDomainRegEx } from './regex.js';
+const wildcard = '*';
+const emailSeparator = '@';
+const domainSeparator = '.';
+const whitespaceRegEx = /\s/u;
+const wildcardOnlyDomainRegEx = /^[*.]+$/u;
+const hasWildcard = (value) => value.includes(wildcard);
+const escapeRegExp = (value) => value.replaceAll(/[.+?^${}()|[\]\\]/gu, '\\$&');
+const buildWildcardRegExp = (pattern) => new RegExp(`^${escapeRegExp(pattern).replaceAll(wildcard, '.*')}$`, 'u');
+const isValidWildcardLocalPart = (localPart) => localPart.length > 0 && !localPart.includes(emailSeparator) && !whitespaceRegEx.test(localPart);
+const isValidWildcardDomain = (domain) => domain.length > 0 &&
+    domain.includes(domainSeparator) &&
+    !domain.includes(emailSeparator) &&
+    !domain.includes(`${domainSeparator}${domainSeparator}`) &&
+    !domain.startsWith(domainSeparator) &&
+    !domain.endsWith(domainSeparator) &&
+    !whitespaceRegEx.test(domain) &&
+    !wildcardOnlyDomainRegEx.test(domain);
+/**
+ * Validates an email blocklist item.
+ *
+ * An item can be either a full email address (`foo@example.com`) or a domain entry
+ * prefixed with `@` (`@example.com`). `*` can be used inside the local part or
+ * domain while keeping the same email/domain shapes.
+ */
+export const isEmailBlocklistItem = (value) => {
+    if (!hasWildcard(value)) {
+        return emailOrEmailDomainRegEx.test(value);
+    }
+    if (whitespaceRegEx.test(value)) {
+        return false;
+    }
+    if (value.startsWith(emailSeparator)) {
+        return isValidWildcardDomain(value.slice(1));
+    }
+    const emailParts = value.split(emailSeparator);
+    if (emailParts.length !== 2) {
+        return false;
+    }
+    const [localPart, domain] = emailParts;
+    return (localPart !== undefined &&
+        domain !== undefined &&
+        isValidWildcardLocalPart(localPart) &&
+        isValidWildcardDomain(domain));
+};
+/**
+ * Checks whether an email address matches an email blocklist item.
+ *
+ * Matching is case-insensitive. Domain items (`@example.com`) match only the email
+ * domain, while full email items match the complete email address.
+ */
+export const matchesEmailBlocklistItem = (item, email) => {
+    const normalizedItem = item.toLowerCase();
+    const normalizedEmail = email.toLowerCase();
+    const domain = normalizedEmail.split(emailSeparator)[1];
+    if (normalizedItem.startsWith(emailSeparator)) {
+        return Boolean(domain &&
+            (hasWildcard(normalizedItem.slice(1))
+                ? buildWildcardRegExp(normalizedItem.slice(1)).test(domain)
+                : domain === normalizedItem.slice(1)));
+    }
+    return hasWildcard(normalizedItem)
+        ? buildWildcardRegExp(normalizedItem).test(normalizedEmail)
+        : normalizedEmail === normalizedItem;
+};

package/lib/index.d.ts

@@ -1,5 +1,6 @@
 export * from './utils/index.js';
 export * from './custom-ui-csp.js';
+export * from './email-blocklist.js';
 export * from './regex.js';
 export * from './openid.js';
 export * from './models/index.js';

package/lib/index.js

@@ -1,5 +1,6 @@
 export * from './utils/index.js';
 export * from './custom-ui-csp.js';
+export * from './email-blocklist.js';
 export * from './regex.js';
 export * from './openid.js';
 export * from './models/index.js';

package/lib/regex.js

@@ -1,6 +1,6 @@
 export const emailRegEx = /^\S+@\S+\.\S+$/;
 /** Validates full email address or email domain. */
-export const emailOrEmailDomainRegEx = /^\S+@\S+\.\S+|^@\S+\.\S+$/;
+export const emailOrEmailDomainRegEx = /^(?:[^\s@]+@[A-Za-z0-9](?:[A-Za-z0-9-]*[A-Za-z0-9])?(?:\.[A-Za-z0-9](?:[A-Za-z0-9-]*[A-Za-z0-9])?)+|@[A-Za-z0-9](?:[A-Za-z0-9-]*[A-Za-z0-9])?(?:\.[A-Za-z0-9](?:[A-Za-z0-9-]*[A-Za-z0-9])?)+)$(?![\s\S])/u;
 export const phoneRegEx = /^\d+$/;
 export const phoneInputRegEx = /^\+?[\d-( )]+$/;
 export const usernameRegEx = /^[A-Z_a-z]\w*$/;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@logto/core-kit",
-  "version": "2.11.0",
+  "version": "2.12.0",
   "author": "Silverhand Inc. <contact@silverhand.io>",
   "homepage": "https://github.com/logto-io/toolkit#readme",
   "repository": {
@@ -36,7 +36,7 @@
     "@silverhand/essentials": "^2.9.1",
     "color": "^4.2.3",
     "@logto/language-kit": "^1.3.0",
-    "@logto/shared": "^3.4.1"
+    "@logto/shared": "^3.4.2"
   },
   "optionalDependencies": {
     "zod": "3.24.3"
@@ -52,7 +52,7 @@
     "@vitest/coverage-v8": "^4.1.8",
     "eslint": "^8.56.0",
     "lint-staged": "^15.0.0",
-    "postcss": "^8.4.31",
+    "postcss": "^8.5.18",
     "prettier": "^3.5.3",
     "stylelint": "^15.0.0",
     "typescript": "^5.5.3",