@madauth/server 0.2.0-beta.2 → 0.3.0-beta.1

package/dist/store/dynamodb.d.ts

@@ -1,5 +1,5 @@
 import { DynamoDBClient } from '@aws-sdk/client-dynamodb';
-import { S as StoreAdapter } from '../schema-BSgYVRpd.js';
+import { S as StoreAdapter } from '../schema-3yhCc2jH.js';
 
 interface DynamoDbAdapterOptions {
     /** The table, with the partition key `pk` and the sort key `sk` (both strings). */

package/dist/store/sqlite.d.ts

@@ -1,4 +1,4 @@
-import { S as StoreAdapter } from '../schema-BSgYVRpd.js';
+import { S as StoreAdapter } from '../schema-3yhCc2jH.js';
 
 /**
  * Stores madAuth's records in a SQLite file using Node's built-in `node:sqlite` (Node 22.13 or newer).

package/dist/testing.d.ts

@@ -1,4 +1,4 @@
-import { S as StoreAdapter } from './schema-BSgYVRpd.js';
+import { S as StoreAdapter } from './schema-3yhCc2jH.js';
 
 /** The parts of a test runner the contract needs; Vitest, Jest and node:test with `expect` all fit. */
 interface ContractRunner {

package/dist/testing.js

@@ -14,6 +14,7 @@ function testUser(overrides = {}) {
     sessionVersion: 0,
     lastMailAt: 0,
     wrongCodes: 0,
+    claims: null,
     createdAt: 17e11,
     ...overrides
   };
@@ -27,6 +28,7 @@ function testAccount(overrides = {}) {
     secret: "hash",
     failedAttempts: 0,
     lockedUntil: 0,
+    email: null,
     createdAt: 17e11,
     ...overrides
   };

package/dist/user-BMWEWREH.d.ts

@@ -0,0 +1,12 @@
+/** The signed-in user as returned to apps. */
+interface MadauthUser {
+    /** Stable id (`usr_…`), the same whichever way the user signs in. */
+    id: string;
+    email?: string;
+    name?: string;
+    picture?: string;
+    /** What admins attached to the user, e.g. `{ roles: ['admin'] }`. Absent without claims. */
+    claims?: Record<string, unknown>;
+}
+
+export type { MadauthUser as M };

package/dist/verify.d.ts

@@ -1,5 +1,5 @@
 import { JWTVerifyGetKey } from 'jose';
-import { M as MadauthUser } from './user-C1A3BfOo.js';
+import { M as MadauthUser } from './user-BMWEWREH.js';
 
 interface SessionVerifierOptions {
     /** The madAuth server's public base URL (its MADAUTH_ISSUER). */

package/dist/verify.js

@@ -2,7 +2,7 @@ import {
   SESSION_COOKIE,
   SESSION_TYP,
   userFromClaims
-} from "./chunk-7CTAB3QV.js";
+} from "./chunk-DCDTO5LG.js";
 import {
   SIGNING_ALG
 } from "./chunk-JDQLSL36.js";

package/dist/{webhook-ltwulgcB.d.ts → webhook-DCDP6SaE.d.ts}

@@ -1,5 +1,5 @@
 /** Every `type` madAuth sends. */
-declare const WEBHOOK_TYPES: readonly ["email.verify", "email.reset", "email.already_registered", "signup.before", "user.created", "email.verified", "password.reset", "user.signed_in", "user.deleted", "roles.changed"];
+declare const WEBHOOK_TYPES: readonly ["email.verify", "email.reset", "email.already_registered", "signup.before", "user.created", "email.verified", "email.password_reset", "user.signed_in", "user.deleted", "user.claims_changed"];
 type WebhookType = (typeof WEBHOOK_TYPES)[number];
 /** How old a call may be before receivers reject it, so a captured call can't be replayed. */
 declare const WEBHOOK_TOLERANCE_SECONDS: number;

package/dist/webhook.d.ts

@@ -1 +1 @@
-export { a as WEBHOOK_TOLERANCE_SECONDS, b as WEBHOOK_TYPES, c as WebhookType, g as generateWebhookSecret, s as signWebhook, v as verifyWebhook } from './webhook-ltwulgcB.js';
+export { a as WEBHOOK_TOLERANCE_SECONDS, b as WEBHOOK_TYPES, c as WebhookType, g as generateWebhookSecret, s as signWebhook, v as verifyWebhook } from './webhook-DCDP6SaE.js';

package/dist/webhook.js

@@ -4,7 +4,7 @@ import {
   generateWebhookSecret,
   signWebhook,
   verifyWebhook
-} from "./chunk-6EJDVZCD.js";
+} from "./chunk-NPNM26J3.js";
 export {
   WEBHOOK_TOLERANCE_SECONDS,
   WEBHOOK_TYPES,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@madauth/server",
-  "version": "0.2.0-beta.2",
+  "version": "0.3.0-beta.1",
   "description": "madAuth server: Google and e-mail & password sign-in with madAuth sessions, for Docker, AWS Lambda and Azure Functions.",
   "license": "MIT",
   "author": "David Neuy",

package/dist/user-C1A3BfOo.d.ts

@@ -1,12 +0,0 @@
-/** The signed-in user as returned to apps. */
-interface MadauthUser {
-    /** Stable id, e.g. `google:<sub>`. */
-    id: string;
-    email?: string;
-    name?: string;
-    picture?: string;
-    /** The roles of the user's e-mail address, e.g. `['admin']`. Absent without roles. */
-    roles?: string[];
-}
-
-export type { MadauthUser as M };