@originals/auth 1.8.0 → 1.8.2

package/dist/types.d.ts

@@ -1,155 +0,0 @@
-/**
- * Shared types for @originals/auth
- */
-/**
- * Authenticated user information
- */
-export interface AuthUser {
-    /** Database user ID */
-    id: string;
-    /** User's email address */
-    email: string;
-    /** User's DID identifier */
-    did: string;
-    /** Turnkey sub-organization ID */
-    turnkeySubOrgId: string;
-}
-/**
- * JWT token payload structure
- */
-export interface TokenPayload {
-    /** Subject - Turnkey sub-organization ID (stable identifier) */
-    sub: string;
-    /** User email (metadata) */
-    email: string;
-    /** Optional Turnkey session token for user authentication */
-    sessionToken?: string;
-    /** Issued at timestamp */
-    iat: number;
-    /** Expiration timestamp */
-    exp: number;
-}
-/**
- * Options for creating auth middleware
- */
-export interface AuthMiddlewareOptions {
-    /** Function to look up user by Turnkey sub-org ID */
-    getUserByTurnkeyId: (turnkeyId: string) => Promise<AuthUser | null>;
-    /** Optional function to create user on first auth */
-    createUser?: (turnkeyId: string, email: string, temporaryDid: string) => Promise<AuthUser>;
-    /** Cookie name for JWT token (default: 'auth_token') */
-    cookieName?: string;
-    /** JWT secret (default: process.env.JWT_SECRET) */
-    jwtSecret?: string;
-}
-/**
- * Email authentication session
- */
-export interface EmailAuthSession {
-    /** User's email address */
-    email: string;
-    /** Turnkey sub-organization ID */
-    subOrgId?: string;
-    /** Turnkey OTP ID */
-    otpId?: string;
-    /** Session creation timestamp */
-    timestamp: number;
-    /** Whether the session has been verified */
-    verified: boolean;
-}
-/**
- * Result of initiating email authentication
- */
-export interface InitiateAuthResult {
-    /** Session ID for verification step */
-    sessionId: string;
-    /** User-friendly message */
-    message: string;
-}
-/**
- * Result of verifying email authentication
- */
-export interface VerifyAuthResult {
-    /** Whether verification was successful */
-    verified: boolean;
-    /** User's email address */
-    email: string;
-    /** Turnkey sub-organization ID */
-    subOrgId: string;
-}
-/**
- * Cookie configuration for auth tokens
- */
-export interface AuthCookieConfig {
-    /** Cookie name */
-    name: string;
-    /** Cookie value (JWT token) */
-    value: string;
-    /** Cookie options */
-    options: {
-        httpOnly: boolean;
-        secure: boolean;
-        sameSite: 'strict' | 'lax' | 'none';
-        maxAge: number;
-        path: string;
-    };
-}
-/**
- * Turnkey wallet information
- */
-export interface TurnkeyWallet {
-    /** Wallet ID */
-    walletId: string;
-    /** Wallet name */
-    walletName: string;
-    /** Wallet accounts */
-    accounts: TurnkeyWalletAccount[];
-}
-/**
- * Turnkey wallet account
- */
-export interface TurnkeyWalletAccount {
-    /** Account address */
-    address: string;
-    /** Cryptographic curve */
-    curve: 'CURVE_SECP256K1' | 'CURVE_ED25519';
-    /** Derivation path */
-    path: string;
-    /** Address format */
-    addressFormat: string;
-}
-/**
- * Client-side Turnkey authentication state
- */
-export interface TurnkeyAuthState {
-    /** Whether the user is authenticated */
-    isAuthenticated: boolean;
-    /** Whether an auth operation is in progress */
-    isLoading: boolean;
-    /** Error message if any */
-    error: string | null;
-    /** User's email address */
-    email: string | null;
-    /** User's wallets */
-    wallets: TurnkeyWallet[];
-    /** OTP ID for verification step */
-    otpId: string | null;
-}
-/**
- * Request context with authenticated user
- */
-export interface AuthenticatedRequest {
-    user: {
-        /** Database user ID */
-        id: string;
-        /** Turnkey sub-organization ID */
-        turnkeySubOrgId: string;
-        /** User's email */
-        email: string;
-        /** User's DID */
-        did: string;
-        /** Turnkey session token (if available) */
-        sessionToken?: string;
-    };
-}
-//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH;;GAEG;AACH,MAAM,WAAW,QAAQ;IACvB,uBAAuB;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,2BAA2B;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,4BAA4B;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,kCAAkC;IAClC,eAAe,EAAE,MAAM,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,gEAAgE;IAChE,GAAG,EAAE,MAAM,CAAC;IACZ,4BAA4B;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,6DAA6D;IAC7D,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,0BAA0B;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,2BAA2B;IAC3B,GAAG,EAAE,MAAM,CAAC;CACb;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,qDAAqD;IACrD,kBAAkB,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC;IACpE,qDAAqD;IACrD,UAAU,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC3F,wDAAwD;IACxD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,mDAAmD;IACnD,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,2BAA2B;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,kCAAkC;IAClC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,qBAAqB;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,iCAAiC;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,4CAA4C;IAC5C,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,uCAAuC;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,4BAA4B;IAC5B,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,0CAA0C;IAC1C,QAAQ,EAAE,OAAO,CAAC;IAClB,2BAA2B;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,kCAAkC;IAClC,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,kBAAkB;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,+BAA+B;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,qBAAqB;IACrB,OAAO,EAAE;QACP,QAAQ,EAAE,OAAO,CAAC;QAClB,MAAM,EAAE,OAAO,CAAC;QAChB,QAAQ,EAAE,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC;QACpC,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,EAAE,MAAM,CAAC;KACd,CAAC;CACH;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,gBAAgB;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,kBAAkB;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,sBAAsB;IACtB,QAAQ,EAAE,oBAAoB,EAAE,CAAC;CAClC;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,sBAAsB;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,0BAA0B;IAC1B,KAAK,EAAE,iBAAiB,GAAG,eAAe,CAAC;IAC3C,sBAAsB;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,qBAAqB;IACrB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,wCAAwC;IACxC,eAAe,EAAE,OAAO,CAAC;IACzB,+CAA+C;IAC/C,SAAS,EAAE,OAAO,CAAC;IACnB,2BAA2B;IAC3B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,2BAA2B;IAC3B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,qBAAqB;IACrB,OAAO,EAAE,aAAa,EAAE,CAAC;IACzB,mCAAmC;IACnC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE;QACJ,uBAAuB;QACvB,EAAE,EAAE,MAAM,CAAC;QACX,kCAAkC;QAClC,eAAe,EAAE,MAAM,CAAC;QACxB,mBAAmB;QACnB,KAAK,EAAE,MAAM,CAAC;QACd,iBAAiB;QACjB,GAAG,EAAE,MAAM,CAAC;QACZ,2CAA2C;QAC3C,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,CAAC;CACH"}

package/dist/types.js

@@ -1,5 +0,0 @@
-/**
- * Shared types for @originals/auth
- */
-export {};
-//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;GAEG"}

package/eslint.config.js

@@ -1,32 +0,0 @@
-import eslint from '@eslint/js';
-import tseslint from 'typescript-eslint';
-
-export default tseslint.config(
-  eslint.configs.recommended,
-  ...tseslint.configs.recommendedTypeChecked,
-  {
-    languageOptions: {
-      parserOptions: {
-        project: true,
-        tsconfigRootDir: import.meta.dirname,
-      },
-    },
-    rules: {
-      '@typescript-eslint/no-explicit-any': 'warn',
-      '@typescript-eslint/no-unused-vars': ['error', { argsIgnorePattern: '^_' }],
-      '@typescript-eslint/explicit-function-return-type': 'off',
-      '@typescript-eslint/no-unsafe-assignment': 'warn',
-      '@typescript-eslint/no-unsafe-member-access': 'warn',
-      '@typescript-eslint/no-unsafe-call': 'warn',
-      '@typescript-eslint/no-unsafe-return': 'warn',
-      '@typescript-eslint/restrict-template-expressions': 'warn',
-      'no-console': 'off',
-      'no-empty': ['error', { allowEmptyCatch: false }],
-      'prefer-const': 'error',
-      'no-var': 'error',
-    },
-  },
-  {
-    ignores: ['dist/', 'node_modules/', '*.js', 'tests/'],
-  }
-);

package/tests/index.test.ts

@@ -1,29 +0,0 @@
-import { describe, test, expect } from 'bun:test';
-
-describe('@originals/auth', () => {
-  test('package exports are defined', async () => {
-    // Test that the main exports are accessible
-    const auth = await import('../src/index');
-    expect(auth).toBeDefined();
-  });
-
-  test('server exports are defined', async () => {
-    const server = await import('../src/server/index');
-    expect(server).toBeDefined();
-  });
-
-  test('client exports are defined', async () => {
-    const client = await import('../src/client/index');
-    expect(client).toBeDefined();
-  });
-
-  test('types are defined', async () => {
-    const types = await import('../src/types');
-    expect(types).toBeDefined();
-  });
-});
-
-
-
-
-

package/tests/server-auth.test.ts

@@ -1,167 +0,0 @@
-import { describe, test, expect, mock } from 'bun:test';
-import { sendOtp, verifyOtp } from '../src/client/server-auth';
-
-describe('server-auth', () => {
-  describe('sendOtp', () => {
-    test('sends email to endpoint and returns result', async () => {
-      const mockFetch = mock(() =>
-        Promise.resolve({
-          ok: true,
-          json: () => Promise.resolve({ sessionId: 'session_123', message: 'Code sent' }),
-        })
-      );
-      const result = await sendOtp('test@example.com', '/api/auth/send-otp', {
-        fetch: mockFetch as unknown as typeof fetch,
-      });
-      expect(result.sessionId).toBe('session_123');
-      expect(result.message).toBe('Code sent');
-      expect(mockFetch).toHaveBeenCalledWith(
-        '/api/auth/send-otp',
-        expect.objectContaining({
-          method: 'POST',
-          headers: { 'Content-Type': 'application/json' },
-          body: JSON.stringify({ email: 'test@example.com' }),
-        })
-      );
-    });
-
-    test('throws on non-ok response with server message', async () => {
-      const mockFetch = mock(() =>
-        Promise.resolve({
-          ok: false,
-          status: 400,
-          json: () => Promise.resolve({ message: 'Invalid email' }),
-        })
-      );
-      await expect(
-        sendOtp('bad', '/api/auth/send-otp', { fetch: mockFetch as unknown as typeof fetch })
-      ).rejects.toThrow('Invalid email');
-    });
-
-    test('throws with HTTP status when no message in response', async () => {
-      const mockFetch = mock(() =>
-        Promise.resolve({
-          ok: false,
-          status: 500,
-          json: () => Promise.resolve({}),
-        })
-      );
-      await expect(
-        sendOtp('test@example.com', '/api/auth/send-otp', {
-          fetch: mockFetch as unknown as typeof fetch,
-        })
-      ).rejects.toThrow('HTTP 500');
-    });
-
-    test('throws fallback message when json parsing fails', async () => {
-      const mockFetch = mock(() =>
-        Promise.resolve({
-          ok: false,
-          status: 502,
-          json: () => Promise.reject(new Error('Invalid JSON')),
-        })
-      );
-      await expect(
-        sendOtp('test@example.com', '/api/auth/send-otp', {
-          fetch: mockFetch as unknown as typeof fetch,
-        })
-      ).rejects.toThrow('Failed to send OTP');
-    });
-
-    test('uses default endpoint when not provided', async () => {
-      const mockFetch = mock(() =>
-        Promise.resolve({
-          ok: true,
-          json: () => Promise.resolve({ sessionId: 's1', message: 'ok' }),
-        })
-      );
-      await sendOtp('test@example.com', undefined, { fetch: mockFetch as unknown as typeof fetch });
-      expect(mockFetch).toHaveBeenCalledWith('/api/auth/send-otp', expect.anything());
-    });
-  });
-
-  describe('verifyOtp', () => {
-    test('sends sessionId and code, returns verification result', async () => {
-      const mockFetch = mock(() =>
-        Promise.resolve({
-          ok: true,
-          json: () =>
-            Promise.resolve({ verified: true, email: 'test@example.com', subOrgId: 'org_123' }),
-        })
-      );
-      const result = await verifyOtp('session_123', '123456', '/api/auth/verify-otp', {
-        fetch: mockFetch as unknown as typeof fetch,
-      });
-      expect(result.verified).toBe(true);
-      expect(result.email).toBe('test@example.com');
-      expect(result.subOrgId).toBe('org_123');
-      expect(mockFetch).toHaveBeenCalledWith(
-        '/api/auth/verify-otp',
-        expect.objectContaining({
-          method: 'POST',
-          headers: { 'Content-Type': 'application/json' },
-          body: JSON.stringify({ sessionId: 'session_123', code: '123456' }),
-        })
-      );
-    });
-
-    test('throws on verification failure with server message', async () => {
-      const mockFetch = mock(() =>
-        Promise.resolve({
-          ok: false,
-          status: 401,
-          json: () => Promise.resolve({ message: 'Invalid code' }),
-        })
-      );
-      await expect(
-        verifyOtp('s1', 'wrong', '/api/auth/verify-otp', {
-          fetch: mockFetch as unknown as typeof fetch,
-        })
-      ).rejects.toThrow('Invalid code');
-    });
-
-    test('throws with HTTP status when no message in response', async () => {
-      const mockFetch = mock(() =>
-        Promise.resolve({
-          ok: false,
-          status: 403,
-          json: () => Promise.resolve({}),
-        })
-      );
-      await expect(
-        verifyOtp('s1', '123456', '/api/auth/verify-otp', {
-          fetch: mockFetch as unknown as typeof fetch,
-        })
-      ).rejects.toThrow('HTTP 403');
-    });
-
-    test('throws fallback message when json parsing fails', async () => {
-      const mockFetch = mock(() =>
-        Promise.resolve({
-          ok: false,
-          status: 500,
-          json: () => Promise.reject(new Error('Invalid JSON')),
-        })
-      );
-      await expect(
-        verifyOtp('s1', '123456', '/api/auth/verify-otp', {
-          fetch: mockFetch as unknown as typeof fetch,
-        })
-      ).rejects.toThrow('Verification failed');
-    });
-
-    test('uses default endpoint when not provided', async () => {
-      const mockFetch = mock(() =>
-        Promise.resolve({
-          ok: true,
-          json: () =>
-            Promise.resolve({ verified: true, email: 'test@example.com', subOrgId: 'org_123' }),
-        })
-      );
-      await verifyOtp('session_123', '123456', undefined, {
-        fetch: mockFetch as unknown as typeof fetch,
-      });
-      expect(mockFetch).toHaveBeenCalledWith('/api/auth/verify-otp', expect.anything());
-    });
-  });
-});

package/tsconfig.json

@@ -1,32 +0,0 @@
-{
-  "compilerOptions": {
-    "target": "ES2022",
-    "module": "ESNext",
-    "moduleResolution": "bundler",
-    "declaration": true,
-    "declarationMap": true,
-    "sourceMap": true,
-    "outDir": "./dist",
-    "rootDir": "./src",
-    "strict": true,
-    "esModuleInterop": true,
-    "skipLibCheck": true,
-    "forceConsistentCasingInFileNames": true,
-    "resolveJsonModule": true,
-    "isolatedModules": true,
-    "lib": ["ES2022", "DOM"],
-    "types": ["bun-types"],
-    "paths": {
-      "@/*": ["./src/*"]
-    }
-  },
-  "include": ["src/**/*"],
-  "exclude": ["node_modules", "dist", "tests"]
-}
-
-
-
-
-
-
-