@molecule/api-resource-user 1.0.0

package/dist/utilities/notify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"notify.js","sourceRoot":"","sources":["../../src/utilities/notify.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAA;AAEnD,MAAM,MAAM,GAAG,SAAS,EAAE,CAAA;AAE1B;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,MAAM,GAAG,KAAK,EAAE,EAC3B,MAAM,EACN,QAAQ,EACR,KAAK,EACL,QAAQ,EACR,IAAI,EACJ,OAAO,GAQR,EAAiB,EAAE;IAClB,IAAI,CAAC;QACH,MAAM,iBAAiB,GAAG,MAAM,MAAM,CAAC,kCAAkC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAA;QAC5F,IAAI,CAAC,iBAAiB;YAAE,OAAM;QAE9B,MAAM,aAAa,GAAG,GAAG,CAItB,QAAQ,CAAC,CAAA;QACZ,IAAI,CAAC,aAAa;YAAE,OAAM;QAE1B,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAA;QAEnE,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAI,MAAM,CAAC,EAAE,KAAK,QAAQ;gBAAE,SAAQ;YAEpC,IAAI,CAAC;gBACH,MAAM,iBAAiB,CAAC,IAAI,CAC1B,MAAM,CAAC,gBAAgE,EACvE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,EAAE,CAC1D,CAAA;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,KAAK,CAAC,iCAAiC,MAAM,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,CAAA;YACpE,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,eAAe,EAAE,KAAK,CAAC,CAAA;IACtC,CAAC;AACH,CAAC,CAAA"}

package/dist/utilities/stripSensitiveUserColumns.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Removes secret columns from a user row before it is returned to the client.
+ *
+ * `findById` is `SELECT *`, so a self-read (`/users/me`, `/users/:id` self)
+ * would otherwise return every column verbatim — including base-schema OAuth
+ * material AND any secret column a consuming app adds to the shared `users`
+ * table by migration. Notably `emailConfirmationToken`: an app that stores the
+ * email-verification token here in plaintext would let a user read their own
+ * token from a self-read and self-verify with no mailbox access (defeating an
+ * email-verification gate). This is a DENYLIST, not an allowlist projection, so
+ * app-added *non-secret* columns still reach the client.
+ *
+ * @module
+ */
+/** User-row columns that must never appear in a self-read response. */
+export declare const SENSITIVE_USER_COLUMNS: readonly ["oauthData", "oauthId", "emailConfirmationToken", "emailConfirmationTokenAt", "passwordResetToken", "passwordResetTokenAt", "passwordHash", "twoFactorSecret", "pendingTwoFactorSecret", "anonymousSecretHash", "anonymousSecret", "stripeCustomerId"];
+/**
+ * Returns a shallow copy of a user row with {@link SENSITIVE_USER_COLUMNS}
+ * removed. The input row is not mutated.
+ *
+ * @param user - The full user row (as loaded by `findById`).
+ * @returns A copy of the row without secret columns.
+ */
+export declare function stripSensitiveUserColumns<T extends Record<string, unknown>>(user: T): T;
+//# sourceMappingURL=stripSensitiveUserColumns.d.ts.map

package/dist/utilities/stripSensitiveUserColumns.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stripSensitiveUserColumns.d.ts","sourceRoot":"","sources":["../../src/utilities/stripSensitiveUserColumns.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,uEAAuE;AACvE,eAAO,MAAM,sBAAsB,kQAazB,CAAA;AAEV;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,CAIvF"}

package/dist/utilities/stripSensitiveUserColumns.js

@@ -0,0 +1,43 @@
+/**
+ * Removes secret columns from a user row before it is returned to the client.
+ *
+ * `findById` is `SELECT *`, so a self-read (`/users/me`, `/users/:id` self)
+ * would otherwise return every column verbatim — including base-schema OAuth
+ * material AND any secret column a consuming app adds to the shared `users`
+ * table by migration. Notably `emailConfirmationToken`: an app that stores the
+ * email-verification token here in plaintext would let a user read their own
+ * token from a self-read and self-verify with no mailbox access (defeating an
+ * email-verification gate). This is a DENYLIST, not an allowlist projection, so
+ * app-added *non-secret* columns still reach the client.
+ *
+ * @module
+ */
+/** User-row columns that must never appear in a self-read response. */
+export const SENSITIVE_USER_COLUMNS = [
+    'oauthData',
+    'oauthId',
+    'emailConfirmationToken',
+    'emailConfirmationTokenAt',
+    'passwordResetToken',
+    'passwordResetTokenAt',
+    'passwordHash',
+    'twoFactorSecret',
+    'pendingTwoFactorSecret',
+    'anonymousSecretHash',
+    'anonymousSecret',
+    'stripeCustomerId',
+];
+/**
+ * Returns a shallow copy of a user row with {@link SENSITIVE_USER_COLUMNS}
+ * removed. The input row is not mutated.
+ *
+ * @param user - The full user row (as loaded by `findById`).
+ * @returns A copy of the row without secret columns.
+ */
+export function stripSensitiveUserColumns(user) {
+    const safe = { ...user };
+    for (const col of SENSITIVE_USER_COLUMNS)
+        delete safe[col];
+    return safe;
+}
+//# sourceMappingURL=stripSensitiveUserColumns.js.map

package/dist/utilities/stripSensitiveUserColumns.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stripSensitiveUserColumns.js","sourceRoot":"","sources":["../../src/utilities/stripSensitiveUserColumns.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,uEAAuE;AACvE,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,WAAW;IACX,SAAS;IACT,wBAAwB;IACxB,0BAA0B;IAC1B,oBAAoB;IACpB,sBAAsB;IACtB,cAAc;IACd,iBAAiB;IACjB,wBAAwB;IACxB,qBAAqB;IACrB,iBAAiB;IACjB,kBAAkB;CACV,CAAA;AAEV;;;;;;GAMG;AACH,MAAM,UAAU,yBAAyB,CAAoC,IAAO;IAClF,MAAM,IAAI,GAA4B,EAAE,GAAG,IAAI,EAAE,CAAA;IACjD,KAAK,MAAM,GAAG,IAAI,sBAAsB;QAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAA;IAC1D,OAAO,IAAS,CAAA;AAClB,CAAC"}

package/package.json

@@ -0,0 +1,94 @@
+{
+  "name": "@molecule/api-resource-user",
+  "version": "1.0.0",
+  "description": "User resource types and schema for molecule.dev.",
+  "type": "module",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "scripts": {
+    "build": "tsc",
+    "test": "vitest run",
+    "test:watch": "vitest"
+  },
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "setup"
+  ],
+  "keywords": [
+    "molecule",
+    "resource",
+    "user",
+    "auth"
+  ],
+  "license": "Apache-2.0",
+  "dependencies": {
+    "zod": "4.4.3"
+  },
+  "devDependencies": {
+    "@molecule/api-bond": "1.0.0",
+    "@molecule/api-config": "1.0.0",
+    "@molecule/api-locales-user": "1.0.0",
+    "@molecule/api-locales-user-payments": "1.0.0",
+    "@molecule/api-payments": "1.0.0",
+    "@molecule/api-push-notifications": "1.0.0",
+    "@molecule/api-rate-limit": "1.0.0",
+    "@molecule/api-two-factor": "1.0.0",
+    "@types/node": "26.1.2",
+    "typescript": "6.0.3",
+    "vitest": "4.1.10"
+  },
+  "peerDependencies": {
+    "@molecule/api-bond": "^1.0.0",
+    "@molecule/api-config": "^1.0.0",
+    "@molecule/api-database": "^1.0.0",
+    "@molecule/api-entitlements": "^1.0.0",
+    "@molecule/api-i18n": "^1.0.0",
+    "@molecule/api-jwt": "^1.0.0",
+    "@molecule/api-locales-user": "^1.0.0",
+    "@molecule/api-locales-user-payments": "^1.0.0",
+    "@molecule/api-password": "^1.0.0",
+    "@molecule/api-payments": "^1.0.0",
+    "@molecule/api-push-notifications": "^1.0.0",
+    "@molecule/api-rate-limit": "^1.0.0",
+    "@molecule/api-resource": "^1.0.0",
+    "@molecule/api-resource-device": "^1.0.0",
+    "@molecule/api-secrets": "^1.0.0",
+    "@molecule/api-two-factor": "^1.0.0"
+  },
+  "peerDependenciesMeta": {
+    "@molecule/api-entitlements": {
+      "optional": true
+    },
+    "@molecule/api-two-factor": {
+      "optional": true
+    },
+    "@molecule/api-emails": {
+      "optional": true
+    },
+    "@molecule/api-push-notifications": {
+      "optional": true
+    },
+    "@molecule/api-payments": {
+      "optional": true
+    },
+    "@molecule/api-resource-payment": {
+      "optional": true
+    }
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/molecule-dev/molecule.git",
+    "directory": "packages/api/resources/user"
+  },
+  "homepage": "https://github.com/molecule-dev/molecule/tree/main/packages/api/resources/user",
+  "bugs": "https://github.com/molecule-dev/molecule/issues",
+  "publishConfig": {
+    "access": "public"
+  }
+}

package/setup/users.sql

@@ -0,0 +1,22 @@
+CREATE TABLE IF NOT EXISTS "users" (
+  "id" uuid UNIQUE PRIMARY KEY NOT NULL,
+  "createdAt" timestamptz DEFAULT current_timestamp NOT NULL,
+  "updatedAt" timestamptz DEFAULT current_timestamp NOT NULL,
+  "username" varchar(255),
+  "name" text,
+  "email" varchar(1023) UNIQUE,
+  "emailVerified" boolean DEFAULT false NOT NULL,
+  "avatar" text,
+  "bio" text,
+  "twoFactorEnabled" boolean DEFAULT false,
+  "oauthServer" text,
+  "oauthId" text,
+  "oauthData" jsonb,
+  "planKey" text,
+  "planExpiresAt" timestamptz,
+  "planAutoRenews" boolean DEFAULT false
+);
+CREATE INDEX IF NOT EXISTS "users_createdAt_index" ON "users" ("createdAt");
+CREATE INDEX IF NOT EXISTS "users_updatedAt_index" ON "users" ("updatedAt");
+CREATE INDEX IF NOT EXISTS "users_username_index" ON "users" ("username");
+CREATE INDEX IF NOT EXISTS "users_email_index" ON "users" ("email");

package/setup/usersSecrets.sql

@@ -0,0 +1,9 @@
+CREATE TABLE IF NOT EXISTS "usersSecrets" (
+  "id" uuid UNIQUE PRIMARY KEY NOT NULL,
+  "passwordHash" text,
+  "passwordResetToken" text,
+  "passwordResetTokenAt" timestamptz,
+  "pendingTwoFactorSecret" text,
+  "twoFactorSecret" text,
+  "lastTwoFactorTimeStep" integer
+);