@nxgt/janus-graphql 0.6.4 → 0.6.6

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/README.md CHANGED
@@ -49,7 +49,7 @@ export const yoga = createYoga({
49
49
 
50
50
  ```sh
51
51
  bun add @nxgt/janus-graphql @nxgt/janus graphql @graphql-tools/utils @envelop/core
52
- bun add -d typescript # 6
52
+ bun add -d typescript # 6 or 7
53
53
  ```
54
54
 
55
55
  Every peer is required but `graphql-ws`:
@@ -60,7 +60,7 @@ Every peer is required but `graphql-ws`:
60
60
  | `graphql` | `^16.9.0 \|\| ^17.0.0` | The schema and `GraphQLError` are yours; a second copy of `graphql` fails every schema |
61
61
  | `@graphql-tools/utils` | `>=10.0.0 <13` | `mapSchema` and `getDirective`, which apply the directives |
62
62
  | `@envelop/core` | `^5.0.0` | Types only — the `Plugin` `useJanus()` answers. Yoga already brings it |
63
- | `typescript` | `^6.0.3` | As for `@nxgt/janus` |
63
+ | `typescript` | `^6.0.3 \|\| ^7.0.0` | As for `@nxgt/janus` |
64
64
  | `graphql-ws` | `^6.0.0`, **optional** | Only for subscriptions over a WebSocket, with `janusConnection()`. Nothing here imports it. For `graphql` 17, a `graphql-ws` whose peer range includes it — 6.3.0 does |
65
65
 
66
66
  The floors are tested, not claimed: the package's specs and its typecheck run
@@ -169,12 +169,12 @@ body. `retryAfter` is the seconds until the login's next window.
169
169
  ([passwords](https://github.com/softistx/nxgt-janus/blob/develop/packages/janus/docs/guide/passwords.md#password-guessing-is-throttled)).
170
170
 
171
171
  **The requests that send an e-mail are throttled too.** Past five requests
172
- for one address (one user, for `verifyEmail.send` and an e-mailed
173
- `stepUp.request`) in a 10-minute window, `@nxgt/janus` throws `MAIL_THROTTLED`
174
- and sends nothing; a refused request spends and rotates nothing, so the last
172
+ for one address (one user, for `verifyEmail.send`, `changeEmail.send` — also
173
+ counted per new address — and an e-mailed `stepUp.request`) in a 10-minute
174
+ window, `@nxgt/janus` throws `MAIL_THROTTLED` and sends nothing; a refused request spends and rotates nothing, so the last
175
175
  link or code sent still works. Tell the visitor to use the last e-mail they
176
- received, or to wait `retryAfter` seconds. `janusGraphQLError()` answers it with the fixed message
177
- `Too many requests, retry later`:
176
+ received, or to wait `retryAfter` seconds. `janusGraphQLError()` answers it
177
+ with the fixed message `Too many requests, retry later`:
178
178
 
179
179
  ```json
180
180
  {
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@nxgt/janus-graphql",
3
- "version": "0.6.4",
3
+ "version": "0.6.6",
4
4
  "description": "GraphQL for @nxgt/janus: an envelop plugin with the signed-in user on the context, fields guarded by @authenticated, @fresh and @permission, and every error with the status it deserves",
5
5
  "license": "MIT",
6
6
  "type": "module",
@@ -55,7 +55,7 @@
55
55
  "devDependencies": {
56
56
  "@envelop/core": "^5.6.1",
57
57
  "@graphql-tools/utils": "^12.0.1",
58
- "@nxgt/janus": "^0.22.0",
58
+ "@nxgt/janus": "^0.23.0",
59
59
  "@types/bun": "^1.4.2",
60
60
  "@types/ws": "^8.18.1",
61
61
  "graphql": "^17.0.2",
@@ -67,10 +67,10 @@
67
67
  "peerDependencies": {
68
68
  "@envelop/core": "^5.0.0",
69
69
  "@graphql-tools/utils": ">=10.0.0 <13",
70
- "@nxgt/janus": "^0.22.0",
70
+ "@nxgt/janus": "^0.23.0",
71
71
  "graphql": "^16.9.0 || ^17.0.0",
72
72
  "graphql-ws": "^6.0.0",
73
- "typescript": "^6.0.3"
73
+ "typescript": "^6.0.3 || ^7.0.0"
74
74
  },
75
75
  "peerDependenciesMeta": {
76
76
  "graphql-ws": {