@madauth/server 0.2.0-beta.2 → 0.3.0-beta.2

package/dist/index.js

@@ -3,27 +3,33 @@ import {
   createTablesSql,
   tableName,
   upgradeTablesSql
-} from "./chunk-CNL562LZ.js";
+} from "./chunk-56MOVFO4.js";
 import {
   madauthSchema
-} from "./chunk-XNBWZZHT.js";
+} from "./chunk-CD7Y4T66.js";
 import {
   REDIRECT_ERROR_PARAM,
   createApp
-} from "./chunk-YALS7OMV.js";
-import "./chunk-7CTAB3QV.js";
+} from "./chunk-DVVBIFIV.js";
+import "./chunk-DCDTO5LG.js";
 import {
+  ADMIN_ROLE,
   ConfigError,
+  SIGN_IN_METHODS,
   envVars,
-  loadConfig
-} from "./chunk-5CKEMC6M.js";
+  loadConfig,
+  parseClaims,
+  parseRoles
+} from "./chunk-TI35AZ2U.js";
 import {
   generateSigningKey
 } from "./chunk-JDQLSL36.js";
-import "./chunk-6EJDVZCD.js";
+import "./chunk-3QRKWLR7.js";
 export {
+  ADMIN_ROLE,
   ConfigError,
   REDIRECT_ERROR_PARAM,
+  SIGN_IN_METHODS,
   columnName,
   createApp,
   createTablesSql,
@@ -31,6 +37,8 @@ export {
   generateSigningKey,
   loadConfig,
   madauthSchema,
+  parseClaims,
+  parseRoles,
   tableName,
   upgradeTablesSql
 };

package/dist/{schema-BSgYVRpd.d.ts → schema-3yhCc2jH.d.ts}

@@ -43,8 +43,9 @@ interface Schema {
 }
 /** The records madAuth stores. Timestamps are milliseconds since 1970. */
 declare const madauthSchema: {
-    readonly version: 3;
+    readonly version: 4;
     readonly models: {
+        /** Someone who signed in, whichever way: the e-mail address is the identity shared by the sign-in methods. */
         readonly user: {
             readonly fields: {
                 readonly id: {
@@ -75,12 +76,17 @@ declare const madauthSchema: {
                 readonly wrongCodes: {
                     readonly type: "number";
                 };
+                /** What admins attached to the user, as JSON, e.g. `{"roles":["admin"]}` (since version 4). */
+                readonly claims: {
+                    readonly type: "string";
+                    readonly nullable: true;
+                };
                 readonly createdAt: {
                     readonly type: "number";
                 };
             };
         };
-        /** How a user signs in. `key` is e.g. `password:<userId>`; later `google:<sub>` or `totp:<userId>`. */
+        /** How a user signs in. `key` is `password:<userId>` or `google:<sub>`; later e.g. `totp:<userId>`. */
         readonly account: {
             readonly fields: {
                 readonly id: {
@@ -105,6 +111,11 @@ declare const madauthSchema: {
                 readonly lockedUntil: {
                     readonly type: "number";
                 };
+                /** The address the provider reported at the last sign-in, e.g. Google's current primary address (since version 4). */
+                readonly email: {
+                    readonly type: "string";
+                    readonly nullable: true;
+                };
                 readonly createdAt: {
                     readonly type: "number";
                 };
@@ -135,23 +146,20 @@ declare const madauthSchema: {
                 };
             };
         };
-        /**
-         * The roles of an e-mail address (since version 3). `id` is the normalized address, so the roles
-         * apply whichever way its owner signs in. `roles` holds the names separated by spaces.
-         */
-        readonly role: {
+        /** A setting admins change at runtime, as JSON (since version 4), e.g. `methods`: which sign-in methods are on. */
+        readonly setting: {
             readonly fields: {
                 readonly id: {
                     readonly type: "string";
                     readonly primaryKey: true;
                 };
-                readonly roles: {
+                readonly value: {
                     readonly type: "string";
                 };
                 readonly updatedAt: {
                     readonly type: "number";
                 };
-                /** The address of the admin who set them; empty when set from the command line. */
+                /** The address of the admin who set it; empty when set from the command line. */
                 readonly updatedBy: {
                     readonly type: "string";
                     readonly nullable: true;

package/dist/sqlite.js

@@ -3,10 +3,10 @@ import {
   createTablesSql,
   tableName,
   upgradeTablesSql
-} from "./chunk-CNL562LZ.js";
+} from "./chunk-56MOVFO4.js";
 import {
   madauthSchema
-} from "./chunk-XNBWZZHT.js";
+} from "./chunk-CD7Y4T66.js";
 
 // src/store/sqlite.ts
 function createSqliteAdapter(path) {