@owlmeans/auth-otp 0.1.18-rc.3 → 0.1.18-rc.30

package/build/consts.d.ts

@@ -7,4 +7,6 @@ export declare const OTP_RESOURCE = "auth-otp-cache";
 export declare const OTP_TTL_SECONDS = 600;
 /** OTP code length (numeric digits) */
 export declare const OTP_CODE_LENGTH = 6;
+/** A challenge is invalidated on its fifth failed guess. */
+export declare const OTP_MAX_FAILED_ATTEMPTS = 5;
 //# sourceMappingURL=consts.d.ts.map

package/build/consts.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"consts.d.ts","sourceRoot":"","sources":["../src/consts.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,WAAW,qBAAqB,CAAA;AAE7C,yEAAyE;AACzE,eAAO,MAAM,aAAa,cAAc,CAAA;AAExC,yDAAyD;AACzD,eAAO,MAAM,YAAY,mBAAmB,CAAA;AAE5C,uCAAuC;AACvC,eAAO,MAAM,eAAe,MAAM,CAAA;AAElC,uCAAuC;AACvC,eAAO,MAAM,eAAe,IAAI,CAAA"}
+{"version":3,"file":"consts.d.ts","sourceRoot":"","sources":["../src/consts.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,WAAW,qBAAqB,CAAA;AAE7C,yEAAyE;AACzE,eAAO,MAAM,aAAa,cAAc,CAAA;AAExC,yDAAyD;AACzD,eAAO,MAAM,YAAY,mBAAmB,CAAA;AAE5C,uCAAuC;AACvC,eAAO,MAAM,eAAe,MAAM,CAAA;AAElC,uCAAuC;AACvC,eAAO,MAAM,eAAe,IAAI,CAAA;AAEhC,4DAA4D;AAC5D,eAAO,MAAM,uBAAuB,IAAI,CAAA"}

package/build/consts.js

@@ -7,4 +7,6 @@ export const OTP_RESOURCE = 'auth-otp-cache';
 export const OTP_TTL_SECONDS = 600;
 /** OTP code length (numeric digits) */
 export const OTP_CODE_LENGTH = 6;
+/** A challenge is invalidated on its fifth failed guess. */
+export const OTP_MAX_FAILED_ATTEMPTS = 5;
 //# sourceMappingURL=consts.js.map

package/build/consts.js.map

@@ -1 +1 @@
-{"version":3,"file":"consts.js","sourceRoot":"","sources":["../src/consts.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,WAAW,GAAG,kBAAkB,CAAA;AAE7C,yEAAyE;AACzE,MAAM,CAAC,MAAM,aAAa,GAAG,WAAW,CAAA;AAExC,yDAAyD;AACzD,MAAM,CAAC,MAAM,YAAY,GAAG,gBAAgB,CAAA;AAE5C,uCAAuC;AACvC,MAAM,CAAC,MAAM,eAAe,GAAG,GAAG,CAAA;AAElC,uCAAuC;AACvC,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAA"}
+{"version":3,"file":"consts.js","sourceRoot":"","sources":["../src/consts.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,WAAW,GAAG,kBAAkB,CAAA;AAE7C,yEAAyE;AACzE,MAAM,CAAC,MAAM,aAAa,GAAG,WAAW,CAAA;AAExC,yDAAyD;AACzD,MAAM,CAAC,MAAM,YAAY,GAAG,gBAAgB,CAAA;AAE5C,uCAAuC;AACvC,MAAM,CAAC,MAAM,eAAe,GAAG,GAAG,CAAA;AAElC,uCAAuC;AACvC,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAA;AAEhC,4DAA4D;AAC5D,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAA"}

package/build/types.d.ts

@@ -1,9 +1,9 @@
 import type { InitializedService } from '@owlmeans/context';
 /** Passwordless email OTP service — generates, stores, and verifies short-lived one-time codes */
 export interface OtpService extends InitializedService {
-    /** Generate a code, persist it with TTL, and email it to the user. */
-    issueChallenge: (email: string) => Promise<void>;
-    /** Verify and consume the code. Throws OtpInvalidError if the code is wrong or expired. */
-    verifyChallenge: (email: string, code: string) => Promise<void>;
+    /** Generate a code, persist it with TTL, email it, and return its opaque issuance id. */
+    issueChallenge: (email: string) => Promise<string>;
+    /** Verify and atomically consume one issuance. */
+    verifyChallenge: (email: string, issuanceId: string, code: string) => Promise<void>;
 }
 //# sourceMappingURL=types.d.ts.map

package/build/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAA;AAE3D,kGAAkG;AAClG,MAAM,WAAW,UAAW,SAAQ,kBAAkB;IACpD,sEAAsE;IACtE,cAAc,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IAChD,2FAA2F;IAC3F,eAAe,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;CAChE"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAA;AAE3D,kGAAkG;AAClG,MAAM,WAAW,UAAW,SAAQ,kBAAkB;IACpD,yFAAyF;IACzF,cAAc,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAA;IAClD,kDAAkD;IAClD,eAAe,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;CACpF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@owlmeans/auth-otp",
-  "version": "0.1.18-rc.3",
+  "version": "0.1.18-rc.30",
   "license": "MIT",
   "type": "module",
   "scripts": {
@@ -22,12 +22,12 @@
     }
   },
   "dependencies": {
-    "@owlmeans/context": "^0.1.18-rc.3",
-    "@owlmeans/error": "^0.1.18-rc.3"
+    "@owlmeans/context": "^0.1.18-rc.32",
+    "@owlmeans/error": "^0.1.18-rc.34"
   },
   "devDependencies": {
     "@owlmeans/dep-config": "workspace:*",
-    "@types/bun": "^1.3.14",
+    "@types/bun": "^1.4.0",
     "nodemon": "^3.1.14",
     "typescript": "^7.0.2"
   },

package/src/consts.ts

@@ -11,3 +11,6 @@ export const OTP_TTL_SECONDS = 600
 
 /** OTP code length (numeric digits) */
 export const OTP_CODE_LENGTH = 6
+
+/** A challenge is invalidated on its fifth failed guess. */
+export const OTP_MAX_FAILED_ATTEMPTS = 5

package/src/types.ts

@@ -2,8 +2,8 @@ import type { InitializedService } from '@owlmeans/context'
 
 /** Passwordless email OTP service — generates, stores, and verifies short-lived one-time codes */
 export interface OtpService extends InitializedService {
-  /** Generate a code, persist it with TTL, and email it to the user. */
-  issueChallenge: (email: string) => Promise<void>
-  /** Verify and consume the code. Throws OtpInvalidError if the code is wrong or expired. */
-  verifyChallenge: (email: string, code: string) => Promise<void>
+  /** Generate a code, persist it with TTL, email it, and return its opaque issuance id. */
+  issueChallenge: (email: string) => Promise<string>
+  /** Verify and atomically consume one issuance. */
+  verifyChallenge: (email: string, issuanceId: string, code: string) => Promise<void>
 }