@nxgt/janus 0.20.0 → 0.22.0

package/dist/index.js

@@ -612,6 +612,12 @@ function toUser(record) {
   };
 }
 var idOf = (user) => typeof user === "string" ? user : user.id;
+function refId(user) {
+  if (typeof user === "string")
+    return user;
+  const id = typeof user === "object" && user !== null ? user.id : undefined;
+  return typeof id === "string" ? id : "";
+}
 
 // src/auth/context/records.ts
 var notFound = (where, id, type) => new NotFoundError2(`${where}: no ${type ?? "user"} has this id`, type === null ? { userId: id, operation: where } : { userId: id, userType: type, operation: where });
@@ -1391,39 +1397,6 @@ async function confirmReset(context, type, secret, password, where) {
   return toUser(written);
 }
 
-// src/auth/email-flows/verify-email.ts
-function verifyEmailFlows(context, type, at) {
-  return {
-    async send(user) {
-      const where = at("verifyEmail.send");
-      const record = await getRecord(context, idOf(user), type.name, where);
-      await countMailByUser(context, type, "verifyEmail", record.id, where);
-      return issueEmailToken(context, type, "verifyEmail", record, where);
-    },
-    async confirm(secret) {
-      const where = at("verifyEmail.confirm");
-      const { token, user } = await redeemEmailToken(context, type, "verifyEmail", secret, where);
-      let newlyVerified = false;
-      const written = await writeUser(context, user.id, type, undefined, where, (record, now) => {
-        refuseStale(type, record, token, where, "token");
-        newlyVerified = record.emailVerifiedAt === null;
-        return { emailVerifiedAt: now };
-      });
-      if (newlyVerified) {
-        await emit(context, "user.emailVerified", written, written.updatedAt);
-      }
-      return toUser(written);
-    }
-  };
-}
-
-// src/auth/email-flows/flows.ts
-function emailFlows(context, type, at) {
-  return {
-    verifyEmail: verifyEmailFlows(context, type, at),
-    resetPassword: resetPasswordFlows(context, type, at)
-  };
-}
 // src/auth/totp.ts
 import { createHmac as createHmac2, randomBytes as randomBytes5 } from "node:crypto";
 var TOTP = { digits: 6, stepMs: 30000, drift: 1 };
@@ -1558,6 +1531,59 @@ async function endWhatTheSquatterOpened(context, userId) {
   await endWhatThePasswordOpened(context, userId);
 }
 
+// src/auth/email-flows/prove-first.ts
+function proveFirstFlow(context, type, at) {
+  return async (user) => {
+    const where = at("verifyEmail.proveFirst");
+    const record = await getRecord(context, refId(user), type.name, where);
+    if (!record.active) {
+      throw new UserInactiveError2(`${where}: the user is inactive`, {
+        userId: record.id,
+        userType: type.name
+      });
+    }
+    if (record.emailVerifiedAt !== null) {
+      return { user: toUser(record), proved: false };
+    }
+    const proved = await proveFirstEmail(context, type, record, where);
+    return { user: toUser(proved), proved: true };
+  };
+}
+
+// src/auth/email-flows/verify-email.ts
+function verifyEmailFlows(context, type, at) {
+  return {
+    async send(user) {
+      const where = at("verifyEmail.send");
+      const record = await getRecord(context, idOf(user), type.name, where);
+      await countMailByUser(context, type, "verifyEmail", record.id, where);
+      return issueEmailToken(context, type, "verifyEmail", record, where);
+    },
+    async confirm(secret) {
+      const where = at("verifyEmail.confirm");
+      const { token, user } = await redeemEmailToken(context, type, "verifyEmail", secret, where);
+      let newlyVerified = false;
+      const written = await writeUser(context, user.id, type, undefined, where, (record, now) => {
+        refuseStale(type, record, token, where, "token");
+        newlyVerified = record.emailVerifiedAt === null;
+        return { emailVerifiedAt: now };
+      });
+      if (newlyVerified) {
+        await emit(context, "user.emailVerified", written, written.updatedAt);
+      }
+      return toUser(written);
+    },
+    proveFirst: proveFirstFlow(context, type, at)
+  };
+}
+
+// src/auth/email-flows/flows.ts
+function emailFlows(context, type, at) {
+  return {
+    verifyEmail: verifyEmailFlows(context, type, at),
+    resetPassword: resetPasswordFlows(context, type, at)
+  };
+}
 // src/auth/email-sign-in.ts
 async function signInHolder(context, type, email) {
   const record = await holderOfEmail(context, type, email);
@@ -1636,7 +1662,7 @@ function provenSignInFlows(context, type, at, finish) {
     async signInProven(user, options) {
       const where = at("signInProven");
       const device = deviceHint(context, options, where);
-      const record = await getRecord(context, idOf2(user), type.name, where);
+      const record = await getRecord(context, refId(user), type.name, where);
       if (!record.active) {
         throw new UserInactiveError2(`${where}: the user is inactive`, {
           userId: record.id,
@@ -1649,12 +1675,6 @@ function provenSignInFlows(context, type, at, finish) {
     }
   };
 }
-function idOf2(user) {
-  if (typeof user === "string")
-    return user;
-  const id = typeof user === "object" && user !== null ? user.id : undefined;
-  return typeof id === "string" ? id : "";
-}
 
 // src/auth/sign-in-attempts.ts
 var PURPOSE3 = "janus/sign-in/attempts/v1";
@@ -2238,6 +2258,18 @@ async function confirmStepUp(context, type, request, secret, code, where) {
   return toSession(confirmed);
 }
 
+// src/auth/users/find-by-email.ts
+function findByEmailFlows(context, type) {
+  return {
+    async findByEmail(email) {
+      if (typeof email !== "string" || email.trim() === "")
+        return null;
+      const record = await holderOfEmail(context, type, email);
+      return record === null ? null : toUser(record);
+    }
+  };
+}
+
 // src/auth/users/by-login.ts
 var byLogin = async (context, type, login) => isStorable(login) ? context.store.users.findUserByLogin(type.name, login) : null;
 
@@ -2527,6 +2559,7 @@ function typeApi(context, type) {
     signInCode,
     magicLink: magicLinkFlows(context, type, at, secondFactor.finish),
     stepUp: stepUpFlows(context, type, at),
+    ...findByEmailFlows(context, type),
     ...emailFlows(context, type, at)
   };
 }
@@ -2615,5 +2648,5 @@ export {
   systemClock
 };
 
-//# debugId=58DD1D230B6CE48B64756E2164756E21
+//# debugId=D104C8FB67042A0864756E2164756E21
 //# sourceMappingURL=index.js.map