@nxgt/janus-hono 0.7.4 → 0.7.6
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +1 -1
- package/docs/guide/routes.md +3 -3
- package/package.json +4 -4
package/README.md
CHANGED
|
@@ -37,7 +37,7 @@ bun add @nxgt/janus-hono @nxgt/janus hono
|
|
|
37
37
|
```
|
|
38
38
|
|
|
39
39
|
Every peer is required: `@nxgt/janus`, `hono` (4.13.4 or later) and
|
|
40
|
-
`typescript` (6). `@nxgt/janus` is a **peer**, never a dependency: this package
|
|
40
|
+
`typescript` (6 or 7). `@nxgt/janus` is a **peer**, never a dependency: this package
|
|
41
41
|
defines no error class, so the `JanusError` you catch is the one you import.
|
|
42
42
|
Like `@nxgt/janus`, it expects `"moduleResolution": "bundler"`: the
|
|
43
43
|
declarations import without extensions, so `nodenext` is not supported.
|
package/docs/guide/routes.md
CHANGED
|
@@ -178,9 +178,9 @@ window; the route needs no code of its own. `janus({ signIn: { throttle } })`
|
|
|
178
178
|
changes the limit ([passwords](https://github.com/softistx/nxgt-janus/blob/develop/packages/janus/docs/guide/passwords.md#password-guessing-is-throttled)).
|
|
179
179
|
|
|
180
180
|
**The requests that send an e-mail are throttled too.** Past five requests
|
|
181
|
-
for one address (or one user, for `verifyEmail.send`
|
|
182
|
-
`stepUp.request`) in a
|
|
183
|
-
`MAIL_THROTTLED` and sends nothing; `janusErrors()` answers it
|
|
181
|
+
for one address (or one user, for `verifyEmail.send`, `changeEmail.send` —
|
|
182
|
+
also counted per new address — and an e-mailed `stepUp.request`) in a
|
|
183
|
+
10-minute window, `@nxgt/janus` throws `MAIL_THROTTLED` and sends nothing; `janusErrors()` answers it
|
|
184
184
|
`429 { code: 'MAIL_THROTTLED', retryAfter }` with a `Retry-After` header.
|
|
185
185
|
**A refused request spends and rotates nothing**: the last link or code sent
|
|
186
186
|
still works, so tell the visitor to use the last e-mail they received, or to
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@nxgt/janus-hono",
|
|
3
|
-
"version": "0.7.
|
|
3
|
+
"version": "0.7.6",
|
|
4
4
|
"description": "Hono middleware for @nxgt/janus: the signed-in user on every request, the session cookie, routes guarded by a permission, and every error as its status",
|
|
5
5
|
"license": "MIT",
|
|
6
6
|
"type": "module",
|
|
@@ -49,14 +49,14 @@
|
|
|
49
49
|
]
|
|
50
50
|
},
|
|
51
51
|
"devDependencies": {
|
|
52
|
-
"@nxgt/janus": "^0.
|
|
52
|
+
"@nxgt/janus": "^0.23.0",
|
|
53
53
|
"@types/bun": "^1.4.2",
|
|
54
54
|
"hono": "^4.13.9",
|
|
55
55
|
"zod": "^4.6.5"
|
|
56
56
|
},
|
|
57
57
|
"peerDependencies": {
|
|
58
|
-
"@nxgt/janus": "^0.
|
|
58
|
+
"@nxgt/janus": "^0.23.0",
|
|
59
59
|
"hono": "^4.13.4",
|
|
60
|
-
"typescript": "^6.0.3"
|
|
60
|
+
"typescript": "^6.0.3 || ^7.0.0"
|
|
61
61
|
}
|
|
62
62
|
}
|