@lunora/auth 1.0.0-alpha.24 → 1.0.0-alpha.26

package/dist/turnstile-middleware.mjs

@@ -1,13 +1,10 @@
+import { LunoraError } from '@lunora/errors';
 import { verifyTurnstile } from './turnstile.mjs';
 
 const verifyTurnstileMiddleware = (options) => async ({ ctx, next }) => {
   const token = options.token(ctx);
   if (token === void 0 || token === "") {
-    throw Object.assign(new Error(options.message ?? "turnstile token missing"), {
-      code: "FORBIDDEN",
-      name: "LunoraError",
-      status: 403
-    });
+    throw new LunoraError("FORBIDDEN", options.message ?? "turnstile token missing");
   }
   let result;
   try {
@@ -24,19 +21,11 @@ const verifyTurnstileMiddleware = (options) => async ({ ctx, next }) => {
     if (options.failOpen) {
       return next();
     }
-    throw Object.assign(new Error(options.message ?? "turnstile verification unavailable"), {
-      cause: error,
-      code: "FORBIDDEN",
-      name: "LunoraError",
-      status: 403
-    });
+    throw new LunoraError("FORBIDDEN", options.message ?? "turnstile verification unavailable", { cause: error });
   }
   if (!result.success || options.validate !== void 0 && !options.validate(result)) {
-    throw Object.assign(new Error(options.message ?? "turnstile verification failed"), {
-      code: "FORBIDDEN",
-      errorCodes: result.errorCodes,
-      name: "LunoraError",
-      status: 403
+    throw new LunoraError("FORBIDDEN", options.message ?? "turnstile verification failed", {
+      data: result.errorCodes.length > 0 ? { errorCodes: result.errorCodes } : void 0
     });
   }
   return next();

package/dist/turnstile.d.mts

@@ -1,13 +1,3 @@
-/**
-* Cloudflare Turnstile server-side verification.
-*
-* Turnstile has **no Cloudflare binding** — verification is a single HTTPS POST
-* to the public `siteverify` endpoint with your secret key. The secret lives in
-* a plain env var / `.dev.vars` (conventionally `TURNSTILE_SECRET_KEY`), not in
-* `wrangler.jsonc`. This module is therefore pure, transport-agnostic, and
-* usable from any mutation/action — not just the auth flow.
-* @see https://developers.cloudflare.com/turnstile/get-started/server-side-validation/
-*/
 /** Cloudflare's public Turnstile `siteverify` endpoint. */
 declare const TURNSTILE_VERIFY_ENDPOINT = "https://challenges.cloudflare.com/turnstile/v0/siteverify";
 /** Minimal `fetch` shape we depend on, so callers can inject a stub in tests. */

package/dist/turnstile.d.ts

@@ -1,13 +1,3 @@
-/**
-* Cloudflare Turnstile server-side verification.
-*
-* Turnstile has **no Cloudflare binding** — verification is a single HTTPS POST
-* to the public `siteverify` endpoint with your secret key. The secret lives in
-* a plain env var / `.dev.vars` (conventionally `TURNSTILE_SECRET_KEY`), not in
-* `wrangler.jsonc`. This module is therefore pure, transport-agnostic, and
-* usable from any mutation/action — not just the auth flow.
-* @see https://developers.cloudflare.com/turnstile/get-started/server-side-validation/
-*/
 /** Cloudflare's public Turnstile `siteverify` endpoint. */
 declare const TURNSTILE_VERIFY_ENDPOINT = "https://challenges.cloudflare.com/turnstile/v0/siteverify";
 /** Minimal `fetch` shape we depend on, so callers can inject a stub in tests. */

package/dist/turnstile.mjs

@@ -1,3 +1,5 @@
+import { LunoraError } from '@lunora/errors';
+
 const TURNSTILE_VERIFY_ENDPOINT = "https://challenges.cloudflare.com/turnstile/v0/siteverify";
 const asString = (value) => typeof value === "string" ? value : void 0;
 const asStringArray = (value) => Array.isArray(value) ? value.filter((entry) => typeof entry === "string") : [];
@@ -21,19 +23,10 @@ const verifyTurnstile = async ({
       method: "POST"
     });
   } catch (error) {
-    throw Object.assign(new Error("turnstile siteverify request failed"), {
-      cause: error,
-      code: "SERVICE_UNAVAILABLE",
-      name: "LunoraError",
-      status: 503
-    });
+    throw new LunoraError("SERVICE_UNAVAILABLE", "turnstile siteverify request failed", { cause: error, status: 503 });
   }
   if (!response.ok) {
-    throw Object.assign(new Error(`turnstile siteverify returned ${String(response.status)}`), {
-      code: "SERVICE_UNAVAILABLE",
-      name: "LunoraError",
-      status: 503
-    });
+    throw new LunoraError("SERVICE_UNAVAILABLE", `turnstile siteverify returned ${String(response.status)}`, { status: 503 });
   }
   const raw = await response.json();
   const action = asString(raw.action);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lunora/auth",
-  "version": "1.0.0-alpha.24",
+  "version": "1.0.0-alpha.26",
   "description": "Auth for Lunora — a thin better-auth wrapper: email/password, OAuth, plugins, D1-backed",
   "keywords": [
     "auth",
@@ -84,7 +84,7 @@
   "dependencies": {
     "@better-auth/passkey": "^1.6.23",
     "@lunora/errors": "1.0.0-alpha.2",
-    "@lunora/server": "1.0.0-alpha.17",
+    "@lunora/server": "1.0.0-alpha.20",
     "@lunora/values": "1.0.0-alpha.5",
     "better-auth": "^1.6.23"
   },