@madauth/server 0.1.0 → 0.2.0-beta.1

package/dist/entry/lambda.d.ts

@@ -1,16 +1,16 @@
 import { LambdaEvent, LambdaContext, handle } from 'hono/aws-lambda';
-import { C as ConfigOverrides } from '../config-KQvE2imU.js';
+import { E as EntryOptions } from '../config-BkxADgtp.js';
 import 'jose';
-import '../schema-Dotc6LU7.js';
-import '../webhook-CT80emTQ.js';
+import '../schema-BSgYVRpd.js';
+import '../webhook-ltwulgcB.js';
 
 type LambdaHandler = (event: LambdaEvent, context: LambdaContext) => ReturnType<ReturnType<typeof handle>>;
 /**
  * Creates an AWS Lambda handler (Function URL, API Gateway v1/v2 or ALB). It reads the configuration from
  * the function's environment variables on the first invocation. Pass `store` to use your own store
- * adapter.
+ * adapter, and `env` to load settings from elsewhere, e.g. secrets from the Parameter Store.
  */
-declare function createHandler(overrides?: ConfigOverrides): LambdaHandler;
+declare function createHandler(options?: EntryOptions): LambdaHandler;
 /** The handler configured only by environment variables (`lambda.handler` in the standalone bundle). */
 declare const handler: LambdaHandler;
 

package/dist/entry/lambda.js

@@ -1,19 +1,21 @@
 import {
   createApp
-} from "../chunk-TEMZRMFF.js";
-import "../chunk-PRRKLEW7.js";
+} from "../chunk-YALS7OMV.js";
+import "../chunk-7CTAB3QV.js";
 import {
-  loadConfig
-} from "../chunk-V2XKGETK.js";
+  loadConfig,
+  resolveEnv
+} from "../chunk-5CKEMC6M.js";
 import "../chunk-JDQLSL36.js";
-import "../chunk-AVZE6FFR.js";
+import "../chunk-6EJDVZCD.js";
 
 // src/entry/lambda.ts
 import { handle } from "hono/aws-lambda";
-function createHandler(overrides = {}) {
+function createHandler(options = {}) {
+  const { env, ...overrides } = options;
   let handlerPromise;
   return async (event, context) => {
-    handlerPromise ??= loadConfig(process.env, overrides).then((config) => handle(createApp(config)));
+    handlerPromise ??= resolveEnv(env).then((loaded) => loadConfig(loaded, overrides)).then((config) => handle(createApp(config)));
     handlerPromise.catch(() => handlerPromise = void 0);
     return (await handlerPromise)(event, context);
   };

package/dist/entry/node.d.ts

@@ -1,15 +1,12 @@
-import { C as ConfigOverrides } from '../config-KQvE2imU.js';
+import { E as EntryOptions } from '../config-BkxADgtp.js';
 import 'jose';
-import '../schema-Dotc6LU7.js';
-import '../webhook-CT80emTQ.js';
+import '../schema-BSgYVRpd.js';
+import '../webhook-ltwulgcB.js';
 
-interface StartOptions extends ConfigOverrides {
-    /** Environment variables to read. Default: `process.env`. */
-    env?: Record<string, string | undefined>;
-}
+type StartOptions = EntryOptions;
 /**
  * Starts the madAuth server on Node, listening on PORT (default 8787). Used by the Docker image.
- * Pass `store` to use your own store adapter.
+ * Pass `store` to use your own store adapter, and `env` to load settings from elsewhere than `process.env`.
  */
 declare function start(opts?: StartOptions): Promise<void>;
 

package/dist/entry/node.js

@@ -1,17 +1,19 @@
 import {
   createApp
-} from "../chunk-TEMZRMFF.js";
-import "../chunk-PRRKLEW7.js";
+} from "../chunk-YALS7OMV.js";
+import "../chunk-7CTAB3QV.js";
 import {
-  loadConfig
-} from "../chunk-V2XKGETK.js";
+  loadConfig,
+  resolveEnv
+} from "../chunk-5CKEMC6M.js";
 import "../chunk-JDQLSL36.js";
-import "../chunk-AVZE6FFR.js";
+import "../chunk-6EJDVZCD.js";
 
 // src/entry/node.ts
 import { serve } from "@hono/node-server";
 async function start(opts = {}) {
-  const { env = process.env, ...overrides } = opts;
+  const { env: source, ...overrides } = opts;
+  const env = await resolveEnv(source);
   const config = await loadConfig(env, overrides);
   const port = Number(env.PORT?.trim() || 8787);
   serve({ fetch: createApp(config).fetch, port });

package/dist/index.d.ts

@@ -1,11 +1,11 @@
 import { Hono } from 'hono';
-import { M as MadauthConfig } from './config-KQvE2imU.js';
-export { a as ConfigError, C as ConfigOverrides, e as envVars, l as loadConfig } from './config-KQvE2imU.js';
+import { M as MadauthConfig } from './config-BkxADgtp.js';
+export { C as ConfigError, a as ConfigOverrides, E as EntryOptions, e as envVars, l as loadConfig } from './config-BkxADgtp.js';
 import { JWK } from 'jose';
-import { a as Schema } from './schema-Dotc6LU7.js';
-export { F as FieldDef, b as FieldType, R as Row, S as StoreAdapter, V as Value, W as Where, m as madauthSchema } from './schema-Dotc6LU7.js';
-export { M as MadauthUser } from './user-3DDyggFV.js';
-import './webhook-CT80emTQ.js';
+import { a as Schema } from './schema-BSgYVRpd.js';
+export { F as FieldDef, b as FieldType, R as Row, S as StoreAdapter, V as Value, W as Where, m as madauthSchema } from './schema-BSgYVRpd.js';
+export { M as MadauthUser } from './user-C1A3BfOo.js';
+import './webhook-ltwulgcB.js';
 
 /** Creates a new private ES256 JWK for MADAUTH_SIGNING_KEY. */
 declare function generateSigningKey(): Promise<JWK>;
@@ -24,7 +24,12 @@ declare function tableName(model: string): string;
 /** The SQL column that holds a field, e.g. `email_normalized` for `emailNormalized`. */
 declare function columnName(field: string): string;
 type SqlDialect = 'sqlite' | 'postgres' | 'mysql';
+/**
+ * The SQL that brings tables created for schema version `fromVersion` up to date. Empty if they are.
+ * Run it before you start the madAuth version that needs it; older madAuth versions ignore the additions.
+ */
+declare function upgradeTablesSql(dialect: SqlDialect, fromVersion: number): string;
 /** The SQL that creates madAuth's tables and indexes in an empty database. */
 declare function createTablesSql(dialect: SqlDialect, schema?: Schema): string;
 
-export { MadauthConfig, REDIRECT_ERROR_PARAM, Schema, type SqlDialect, columnName, createApp, createTablesSql, generateSigningKey, tableName };
+export { MadauthConfig, REDIRECT_ERROR_PARAM, Schema, type SqlDialect, columnName, createApp, createTablesSql, generateSigningKey, tableName, upgradeTablesSql };

package/dist/index.js

@@ -1,23 +1,26 @@
 import {
   columnName,
   createTablesSql,
-  madauthSchema,
-  tableName
-} from "./chunk-3WIWWKRI.js";
+  tableName,
+  upgradeTablesSql
+} from "./chunk-CNL562LZ.js";
+import {
+  madauthSchema
+} from "./chunk-XNBWZZHT.js";
 import {
   REDIRECT_ERROR_PARAM,
   createApp
-} from "./chunk-TEMZRMFF.js";
-import "./chunk-PRRKLEW7.js";
+} from "./chunk-YALS7OMV.js";
+import "./chunk-7CTAB3QV.js";
 import {
   ConfigError,
   envVars,
   loadConfig
-} from "./chunk-V2XKGETK.js";
+} from "./chunk-5CKEMC6M.js";
 import {
   generateSigningKey
 } from "./chunk-JDQLSL36.js";
-import "./chunk-AVZE6FFR.js";
+import "./chunk-6EJDVZCD.js";
 export {
   ConfigError,
   REDIRECT_ERROR_PARAM,
@@ -28,5 +31,6 @@ export {
   generateSigningKey,
   loadConfig,
   madauthSchema,
-  tableName
+  tableName,
+  upgradeTablesSql
 };

package/dist/{schema-Dotc6LU7.d.ts → schema-BSgYVRpd.d.ts}

@@ -43,7 +43,7 @@ interface Schema {
 }
 /** The records madAuth stores. Timestamps are milliseconds since 1970. */
 declare const madauthSchema: {
-    readonly version: 1;
+    readonly version: 3;
     readonly models: {
         readonly user: {
             readonly fields: {
@@ -71,6 +71,10 @@ declare const madauthSchema: {
                 readonly lastMailAt: {
                     readonly type: "number";
                 };
+                /** Wrong e-mail codes in a row, counted across e-mails (since version 2). */
+                readonly wrongCodes: {
+                    readonly type: "number";
+                };
                 readonly createdAt: {
                     readonly type: "number";
                 };
@@ -131,6 +135,29 @@ declare const madauthSchema: {
                 };
             };
         };
+        /**
+         * The roles of an e-mail address (since version 3). `id` is the normalized address, so the roles
+         * apply whichever way its owner signs in. `roles` holds the names separated by spaces.
+         */
+        readonly role: {
+            readonly fields: {
+                readonly id: {
+                    readonly type: "string";
+                    readonly primaryKey: true;
+                };
+                readonly roles: {
+                    readonly type: "string";
+                };
+                readonly updatedAt: {
+                    readonly type: "number";
+                };
+                /** The address of the admin who set them; empty when set from the command line. */
+                readonly updatedBy: {
+                    readonly type: "string";
+                    readonly nullable: true;
+                };
+            };
+        };
     };
 };
 

package/dist/sqlite.js

@@ -1,9 +1,12 @@
 import {
   columnName,
   createTablesSql,
-  madauthSchema,
-  tableName
-} from "./chunk-3WIWWKRI.js";
+  tableName,
+  upgradeTablesSql
+} from "./chunk-CNL562LZ.js";
+import {
+  madauthSchema
+} from "./chunk-XNBWZZHT.js";
 
 // src/store/sqlite.ts
 function createSqliteAdapter(path) {
@@ -87,7 +90,7 @@ function migrate(db) {
   if (version === madauthSchema.version) return;
   db.exec("BEGIN");
   try {
-    db.exec(createTablesSql("sqlite"));
+    db.exec(version === 0 ? createTablesSql("sqlite") : upgradeTablesSql("sqlite", version));
     db.exec(`PRAGMA user_version = ${madauthSchema.version}`);
     db.exec("COMMIT");
   } catch (e) {