@plyaz/types 1.27.6 → 1.27.8

package/dist/auth/auth-events.d.ts

@@ -0,0 +1,107 @@
+/**
+ * @fileoverview Authentication event constants for @plyaz/auth
+ * @module @plyaz/auth/constants/auth-events
+ *
+ * @description
+ * Defines standardized event names for authentication system events.
+ * These events are published via @plyaz/events for audit logging and
+ * cross-component communication. Used by repositories, services, and
+ * frontend stores for reactive state management.
+ *
+ * @example
+ * ```typescript
+ * import { AUTH_EVENTS } from '@plyaz/auth';
+ *
+ * // Publish event
+ * eventManager.publish(AUTH_EVENTS.USER_AUTHENTICATED, { userId, provider });
+ *
+ * // Subscribe to event
+ * eventManager.subscribe(AUTH_EVENTS.SESSION_EXPIRED, handleSessionExpiry);
+ * ```
+ */
+/**
+ * Authentication event type constants
+ * Used for event publishing and subscription throughout the auth system
+ */
+export declare const AUTH_EVENTS: {
+    /** User successfully authenticated */
+    readonly USER_AUTHENTICATED: "auth.user.authenticated";
+    /** User signed up (new account created) */
+    readonly USER_SIGNED_UP: "auth.user.signed_up";
+    /** User logged out */
+    readonly USER_LOGGED_OUT: "auth.user.logged_out";
+    /** Authentication attempt failed */
+    readonly AUTHENTICATION_FAILED: "auth.authentication.failed";
+    /** Session created */
+    readonly SESSION_CREATED: "auth.session.created";
+    /** Session expired */
+    readonly SESSION_EXPIRED: "auth.session.expired";
+    /** Session refreshed */
+    readonly SESSION_REFRESHED: "auth.session.refreshed";
+    /** Session invalidated (logout) */
+    readonly SESSION_INVALIDATED: "auth.session.invalidated";
+    /** Account linked to user */
+    readonly ACCOUNT_LINKED: "auth.account.linked";
+    /** Account unlinked from user */
+    readonly ACCOUNT_UNLINKED: "auth.account.unlinked";
+    /** Role assigned to user */
+    readonly ROLE_ASSIGNED: "auth.rbac.role_assigned";
+    /** Role revoked from user */
+    readonly ROLE_REVOKED: "auth.rbac.role_revoked";
+    /** Suspicious login attempt detected */
+    readonly SUSPICIOUS_LOGIN_ATTEMPT: "auth.security.suspicious_login";
+    /** Password changed */
+    readonly PASSWORD_CHANGED: "auth.password.changed";
+    /** Password reset requested */
+    readonly PASSWORD_RESET_REQUESTED: "auth.password.reset_requested";
+};
+/**
+ * Type for authentication event names
+ */
+export type AuthEventTypes = typeof AUTH_EVENTS[keyof typeof AUTH_EVENTS];
+/**
+ * Authentication event payload interfaces
+ */
+export interface AuthEventPayload {
+    /** Base event data */
+    timestamp: Date;
+    /** IP address of the request */
+    ipAddress?: string;
+    /** User agent string */
+    userAgent?: string;
+    /** Additional metadata */
+    metadata?: Record<string, unknown>;
+}
+export interface UserAuthenticatedPayload extends AuthEventPayload {
+    userId: string;
+    provider: string;
+    sessionId: string;
+}
+export interface UserSignedUpPayload extends AuthEventPayload {
+    userId: string;
+    provider: string;
+    email: string;
+}
+export interface UserLoggedOutPayload extends AuthEventPayload {
+    userId: string;
+    sessionId: string;
+}
+export interface AuthenticationFailedPayload extends AuthEventPayload {
+    provider: string;
+    reason: string;
+    email?: string;
+}
+export interface SessionEventPayload extends AuthEventPayload {
+    userId: string;
+    sessionId: string;
+}
+export interface AccountLinkedPayload extends AuthEventPayload {
+    userId: string;
+    provider: string;
+    accountId: string;
+}
+export interface RoleEventPayload extends AuthEventPayload {
+    userId: string;
+    role: string;
+    assignedBy?: string;
+}

package/dist/auth/enums.d.ts

@@ -222,3 +222,41 @@ export declare const AUTH_ERROR_DEFINITIONS: {
         readonly retryable: false;
     };
 };
+/**
+ * @fileoverview Enums for @plyaz/auth
+ * @module @plyaz/auth/enums
+ */
+export declare enum USERROLESTATUS {
+    ACTIVE = "ACTIVE",
+    INACTIVE = "INACTIVE",
+    SUSPENDED = "SUSPENDED"
+}
+export declare enum AUTHPROVIDER {
+    EMAIL = "EMAIL",
+    CLERK = "CLERK",
+    GOOGLE = "GOOGLE",
+    FACEBOOK = "FACEBOOK",
+    APPLE = "APPLE",
+    WEB3 = "WEB3",
+    NEXTAUTH = "NEXTAUTH"
+}
+export declare enum TOKENTYPE {
+    BEARER = "Bearer",
+    JWT = "JWT"
+}
+export declare enum PROVIDERTYPE {
+    OAUTH = "OAUTH",
+    WEB3 = "WEB3",
+    EMAIL = "EMAIL"
+}
+export declare enum SESSIONSTATUS {
+    ACTIVE = "ACTIVE",
+    EXPIRED = "EXPIRED",
+    REVOKED = "REVOKED"
+}
+export declare enum MFATYPE {
+    TOTP = "TOTP",
+    SMS = "SMS",
+    EMAIL = "EMAIL",
+    BackupCodes = "BACKUP_CODES"
+}

package/dist/auth/index.cjs

@@ -220,6 +220,46 @@ var AUTH_ERROR_DEFINITIONS = {
     retryable: false
   }
 };
+var USERROLESTATUS = /* @__PURE__ */ ((USERROLESTATUS2) => {
+  USERROLESTATUS2["ACTIVE"] = "ACTIVE";
+  USERROLESTATUS2["INACTIVE"] = "INACTIVE";
+  USERROLESTATUS2["SUSPENDED"] = "SUSPENDED";
+  return USERROLESTATUS2;
+})(USERROLESTATUS || {});
+var AUTHPROVIDER = /* @__PURE__ */ ((AUTHPROVIDER2) => {
+  AUTHPROVIDER2["EMAIL"] = "EMAIL";
+  AUTHPROVIDER2["CLERK"] = "CLERK";
+  AUTHPROVIDER2["GOOGLE"] = "GOOGLE";
+  AUTHPROVIDER2["FACEBOOK"] = "FACEBOOK";
+  AUTHPROVIDER2["APPLE"] = "APPLE";
+  AUTHPROVIDER2["WEB3"] = "WEB3";
+  AUTHPROVIDER2["NEXTAUTH"] = "NEXTAUTH";
+  return AUTHPROVIDER2;
+})(AUTHPROVIDER || {});
+var TOKENTYPE = /* @__PURE__ */ ((TOKENTYPE2) => {
+  TOKENTYPE2["BEARER"] = "Bearer";
+  TOKENTYPE2["JWT"] = "JWT";
+  return TOKENTYPE2;
+})(TOKENTYPE || {});
+var PROVIDERTYPE = /* @__PURE__ */ ((PROVIDERTYPE2) => {
+  PROVIDERTYPE2["OAUTH"] = "OAUTH";
+  PROVIDERTYPE2["WEB3"] = "WEB3";
+  PROVIDERTYPE2["EMAIL"] = "EMAIL";
+  return PROVIDERTYPE2;
+})(PROVIDERTYPE || {});
+var SESSIONSTATUS = /* @__PURE__ */ ((SESSIONSTATUS2) => {
+  SESSIONSTATUS2["ACTIVE"] = "ACTIVE";
+  SESSIONSTATUS2["EXPIRED"] = "EXPIRED";
+  SESSIONSTATUS2["REVOKED"] = "REVOKED";
+  return SESSIONSTATUS2;
+})(SESSIONSTATUS || {});
+var MFATYPE = /* @__PURE__ */ ((MFATYPE2) => {
+  MFATYPE2["TOTP"] = "TOTP";
+  MFATYPE2["SMS"] = "SMS";
+  MFATYPE2["EMAIL"] = "EMAIL";
+  MFATYPE2["BackupCodes"] = "BACKUP_CODES";
+  return MFATYPE2;
+})(MFATYPE || {});
 var DEFAULT_PASSWORD = 8;
 var ContactUsFormSchema = zod.z.object({
   name: zod.z.string({ error: "errors.form.missingField" }).min(1, "errors.form.nameMissing"),
@@ -248,14 +288,108 @@ var AUTH_ERROR_CODES = {
   ACCOUNT_LOCKED: "AUTH_ACCOUNT_LOCKED",
   ACCOUNT_SUSPENDED: "AUTH_ACCOUNT_SUSPENDED"
 };
+var ERROR_CODE_TO_HTTP_STATUS = {
+  [AUTH_ERROR_CODES.INVALID_CREDENTIALS]: 401,
+  [AUTH_ERROR_CODES.TOKEN_EXPIRED]: 401,
+  [AUTH_ERROR_CODES.TOKEN_INVALID]: 401,
+  [AUTH_ERROR_CODES.TOKEN_REVOKED]: 401,
+  [AUTH_ERROR_CODES.SESSION_EXPIRED]: 401,
+  [AUTH_ERROR_CODES.MFA_REQUIRED]: 401,
+  [AUTH_ERROR_CODES.MFA_INVALID]: 401,
+  [AUTH_ERROR_CODES.INSUFFICIENT_PERMISSIONS]: 403,
+  [AUTH_ERROR_CODES.ROLE_REQUIRED]: 403,
+  [AUTH_ERROR_CODES.WALLET_SIGNATURE_INVALID]: 401,
+  [AUTH_ERROR_CODES.NONCE_EXPIRED]: 401,
+  [AUTH_ERROR_CODES.NONCE_ALREADY_USED]: 401,
+  [AUTH_ERROR_CODES.ACCOUNT_LOCKED]: 423,
+  [AUTH_ERROR_CODES.ACCOUNT_SUSPENDED]: 423
+};
+var ERROR_CODE_DESCRIPTIONS = {
+  [AUTH_ERROR_CODES.INVALID_CREDENTIALS]: "errors.auth.invalid_credentials",
+  [AUTH_ERROR_CODES.TOKEN_EXPIRED]: "errors.auth.token_expired",
+  [AUTH_ERROR_CODES.TOKEN_INVALID]: "errors.auth.token_invalid",
+  [AUTH_ERROR_CODES.TOKEN_REVOKED]: "errors.auth.token_revoked",
+  [AUTH_ERROR_CODES.SESSION_EXPIRED]: "errors.auth.session_expired",
+  [AUTH_ERROR_CODES.MFA_REQUIRED]: "errors.auth.mfa_required",
+  [AUTH_ERROR_CODES.MFA_INVALID]: "errors.auth.mfa_invalid",
+  [AUTH_ERROR_CODES.INSUFFICIENT_PERMISSIONS]: "errors.auth.insufficient_permissions",
+  [AUTH_ERROR_CODES.ROLE_REQUIRED]: "errors.auth.role_required",
+  [AUTH_ERROR_CODES.WALLET_SIGNATURE_INVALID]: "errors.auth.wallet_signature_invalid",
+  [AUTH_ERROR_CODES.NONCE_EXPIRED]: "errors.auth.nonce_expired",
+  [AUTH_ERROR_CODES.NONCE_ALREADY_USED]: "errors.auth.nonce_already_used",
+  [AUTH_ERROR_CODES.ACCOUNT_LOCKED]: "errors.auth.account_locked",
+  [AUTH_ERROR_CODES.ACCOUNT_SUSPENDED]: "errors.auth.account_suspended"
+};
+var OAUTH_PROVIDERS = {
+  /** Google OAuth 2.0 */
+  GOOGLE: "GOOGLE",
+  /** Facebook OAuth 2.0 */
+  FACEBOOK: "FACEBOOK",
+  /** Apple Sign In */
+  APPLE: "APPLE",
+  /** GitHub OAuth 2.0 */
+  GITHUB: "GITHUB",
+  /** Twitter OAuth 2.0 */
+  TWITTER: "TWITTER",
+  /** LinkedIn OAuth 2.0 */
+  LINKEDIN: "LINKEDIN",
+  /** Discord OAuth 2.0 */
+  DISCORD: "DISCORD",
+  /** Microsoft OAuth 2.0 */
+  MICROSOFT: "MICROSOFT"
+};
+
+// src/auth/auth-events.ts
+var AUTH_EVENTS = {
+  /** User successfully authenticated */
+  USER_AUTHENTICATED: "auth.user.authenticated",
+  /** User signed up (new account created) */
+  USER_SIGNED_UP: "auth.user.signed_up",
+  /** User logged out */
+  USER_LOGGED_OUT: "auth.user.logged_out",
+  /** Authentication attempt failed */
+  AUTHENTICATION_FAILED: "auth.authentication.failed",
+  /** Session created */
+  SESSION_CREATED: "auth.session.created",
+  /** Session expired */
+  SESSION_EXPIRED: "auth.session.expired",
+  /** Session refreshed */
+  SESSION_REFRESHED: "auth.session.refreshed",
+  /** Session invalidated (logout) */
+  SESSION_INVALIDATED: "auth.session.invalidated",
+  /** Account linked to user */
+  ACCOUNT_LINKED: "auth.account.linked",
+  /** Account unlinked from user */
+  ACCOUNT_UNLINKED: "auth.account.unlinked",
+  /** Role assigned to user */
+  ROLE_ASSIGNED: "auth.rbac.role_assigned",
+  /** Role revoked from user */
+  ROLE_REVOKED: "auth.rbac.role_revoked",
+  /** Suspicious login attempt detected */
+  SUSPICIOUS_LOGIN_ATTEMPT: "auth.security.suspicious_login",
+  /** Password changed */
+  PASSWORD_CHANGED: "auth.password.changed",
+  /** Password reset requested */
+  PASSWORD_RESET_REQUESTED: "auth.password.reset_requested"
+};
 
+exports.AUTHPROVIDER = AUTHPROVIDER;
 exports.AUTH_ERROR_CODES = AUTH_ERROR_CODES;
 exports.AUTH_ERROR_DEFINITIONS = AUTH_ERROR_DEFINITIONS;
+exports.AUTH_EVENTS = AUTH_EVENTS;
 exports.AUTH_PROVIDER = AUTH_PROVIDER;
 exports.AUTH_PROVIDER_TYPE = AUTH_PROVIDER_TYPE;
 exports.ContactUsFormSchema = ContactUsFormSchema;
+exports.ERROR_CODE_DESCRIPTIONS = ERROR_CODE_DESCRIPTIONS;
+exports.ERROR_CODE_TO_HTTP_STATUS = ERROR_CODE_TO_HTTP_STATUS;
+exports.MFATYPE = MFATYPE;
+exports.OAUTH_PROVIDERS = OAUTH_PROVIDERS;
+exports.PROVIDERTYPE = PROVIDERTYPE;
+exports.SESSIONSTATUS = SESSIONSTATUS;
 exports.SignupFormSchema = SignupFormSchema;
+exports.TOKENTYPE = TOKENTYPE;
 exports.TOKEN_TYPE = TOKEN_TYPE;
+exports.USERROLESTATUS = USERROLESTATUS;
 exports.USER_ROLE = USER_ROLE;
 exports.USER_ROLE_STATUS = USER_ROLE_STATUS;
 exports.USER_STATUS = USER_STATUS;