@madauth/server 0.3.0-beta.2 → 0.4.0-beta.1

package/dist/store/dynamodb.d.ts

@@ -1,5 +1,5 @@
 import { DynamoDBClient } from '@aws-sdk/client-dynamodb';
-import { S as StoreAdapter } from '../schema-3yhCc2jH.js';
+import { S as StoreAdapter } from '../schema-DTeiSuQB.js';
 
 interface DynamoDbAdapterOptions {
     /** The table, with the partition key `pk` and the sort key `sk` (both strings). */

package/dist/store/sqlite.d.ts

@@ -1,4 +1,4 @@
-import { S as StoreAdapter } from '../schema-3yhCc2jH.js';
+import { S as StoreAdapter } from '../schema-DTeiSuQB.js';
 
 /**
  * Stores madAuth's records in a SQLite file using Node's built-in `node:sqlite` (Node 22.13 or newer).

package/dist/testing.d.ts

@@ -1,4 +1,4 @@
-import { S as StoreAdapter } from './schema-3yhCc2jH.js';
+import { S as StoreAdapter } from './schema-DTeiSuQB.js';
 
 /** The parts of a test runner the contract needs; Vitest, Jest and node:test with `expect` all fit. */
 interface ContractRunner {

package/dist/testing.js

@@ -29,6 +29,8 @@ function testAccount(overrides = {}) {
     failedAttempts: 0,
     lockedUntil: 0,
     email: null,
+    lastUsedStep: 0,
+    setupId: null,
     createdAt: 17e11,
     ...overrides
   };

package/dist/{user-BMWEWREH.d.ts → user-BZs84sui.d.ts}

@@ -7,6 +7,11 @@ interface MadauthUser {
     picture?: string;
     /** What admins attached to the user, e.g. `{ roles: ['admin'] }`. Absent without claims. */
     claims?: Record<string, unknown>;
+    /**
+     * How this session was authenticated (RFC 8176): `pwd` (password), `google`, `otp` (the authenticator
+     * app, on its own or as the second factor), e.g. `['pwd', 'otp']`. Present on a user that comes with a session.
+     */
+    amr?: string[];
 }
 
 export type { MadauthUser as M };

package/dist/verify.d.ts

@@ -1,5 +1,5 @@
 import { JWTVerifyGetKey } from 'jose';
-import { M as MadauthUser } from './user-BMWEWREH.js';
+import { M as MadauthUser } from './user-BZs84sui.js';
 
 interface SessionVerifierOptions {
     /** The madAuth server's public base URL (its MADAUTH_ISSUER). */

package/dist/verify.js

@@ -2,7 +2,7 @@ import {
   SESSION_COOKIE,
   SESSION_TYP,
   userFromClaims
-} from "./chunk-DCDTO5LG.js";
+} from "./chunk-A7UYZRBL.js";
 import {
   SIGNING_ALG
 } from "./chunk-JDQLSL36.js";

package/dist/{webhook-j5u9Kv9l.d.ts → webhook-B6P50ocX.d.ts}

@@ -1,5 +1,5 @@
 /** Every `type` madAuth sends. */
-declare const WEBHOOK_TYPES: readonly ["email.verify", "email.reset", "email.already_registered", "email.no_password", "signup.before", "user.created", "email.verified", "email.password_reset", "user.signed_in", "user.deleted", "user.claims_changed"];
+declare const WEBHOOK_TYPES: readonly ["email.verify", "email.reset", "email.already_registered", "email.no_password", "signup.before", "user.created", "email.verified", "email.password_reset", "user.signed_in", "user.deleted", "user.claims_changed", "totp.enabled", "totp.disabled", "totp.recovery_code_used"];
 type WebhookType = (typeof WEBHOOK_TYPES)[number];
 /** How old a call may be before receivers reject it, so a captured call can't be replayed. */
 declare const WEBHOOK_TOLERANCE_SECONDS: number;

package/dist/webhook.d.ts

@@ -1 +1 @@
-export { a as WEBHOOK_TOLERANCE_SECONDS, b as WEBHOOK_TYPES, c as WebhookType, g as generateWebhookSecret, s as signWebhook, v as verifyWebhook } from './webhook-j5u9Kv9l.js';
+export { a as WEBHOOK_TOLERANCE_SECONDS, b as WEBHOOK_TYPES, c as WebhookType, g as generateWebhookSecret, s as signWebhook, v as verifyWebhook } from './webhook-B6P50ocX.js';

package/dist/webhook.js

@@ -4,7 +4,7 @@ import {
   generateWebhookSecret,
   signWebhook,
   verifyWebhook
-} from "./chunk-3QRKWLR7.js";
+} from "./chunk-Y7ZSUROX.js";
 export {
   WEBHOOK_TOLERANCE_SECONDS,
   WEBHOOK_TYPES,

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@madauth/server",
-  "version": "0.3.0-beta.2",
-  "description": "madAuth server: Google and e-mail & password sign-in with madAuth sessions, for Docker, AWS Lambda and Azure Functions.",
+  "version": "0.4.0-beta.1",
+  "description": "madAuth server: Google, e-mail & password and authenticator-app sign-in with madAuth sessions, for Docker, AWS Lambda and Azure Functions.",
   "license": "MIT",
   "author": "David Neuy",
   "homepage": "https://github.com/inouiw/madAuth#readme",