@quatrain/auth-supabase 1.2.5 → 1.2.7

package/dist/SupabaseAuthAdapter.d.ts

@@ -79,4 +79,11 @@ export declare class SupabaseAuthAdapter extends AbstractAuthAdapter {
      * @returns Resolved updated user wrapper.
      */
     setCustomUserClaims(id: string, claims: any): Promise<any>;
+    /**
+     * Initiates password recovery/reset process for a user.
+     *
+     * @param email - The user email.
+     * @param redirectTo - Optional redirect destination.
+     */
+    recoverPassword(email: string, redirectTo?: string): Promise<any>;
 }

package/dist/SupabaseAuthAdapter.js

@@ -199,19 +199,27 @@ class SupabaseAuthAdapter extends auth_1.AbstractAuthAdapter {
      */
     update(user, updatable) {
         return __awaiter(this, void 0, void 0, function* () {
+            var _a;
             auth_1.Auth.debug('auth data to update', JSON.stringify(updatable));
             try {
                 if (Object.keys(updatable).length > 0) {
                     auth_1.Auth.info(`Updating ${updatable.displayName} Auth record`);
                     const { error } = yield this._client.auth.admin.updateUserById(user.uid, updatable);
                     if (error !== null) {
-                        auth_1.Auth.error(error);
+                        auth_1.Auth.error(error.message);
+                        if (error.code === 'weak_password' || ((_a = error.message) === null || _a === void 0 ? void 0 : _a.toLowerCase().includes('password'))) {
+                            throw new auth_1.AuthenticationError(auth_1.Auth.ERROR_WEAK_PASSWORD);
+                        }
+                        throw new auth_1.AuthenticationError(error.message);
                     }
                 }
             }
             catch (e) {
                 auth_1.Auth.error(e);
-                return false;
+                if (e instanceof auth_1.AuthenticationError) {
+                    throw e;
+                }
+                throw new auth_1.AuthenticationError(e.message);
             }
         });
     }
@@ -246,5 +254,22 @@ class SupabaseAuthAdapter extends auth_1.AbstractAuthAdapter {
             }
         });
     }
+    /**
+     * Initiates password recovery/reset process for a user.
+     *
+     * @param email - The user email.
+     * @param redirectTo - Optional redirect destination.
+     */
+    recoverPassword(email, redirectTo) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const { data, error } = yield this._client.auth.resetPasswordForEmail(email, {
+                redirectTo,
+            });
+            if (error) {
+                throw new Error(error.message);
+            }
+            return data;
+        });
+    }
 }
 exports.SupabaseAuthAdapter = SupabaseAuthAdapter;

package/dist/SupabaseAuthAdapter.test.js

@@ -336,15 +336,21 @@ describe('SupabaseAuthAdapter', () => {
                 data: null,
                 error: { message: 'Update failed' },
             });
-            yield adapter.update(mockUser, updatable);
-            // The method doesn't throw, just logs the error
+            yield expect(adapter.update(mockUser, updatable)).rejects.toThrow(auth_1.AuthenticationError);
             expect(mockAuthAdmin.updateUserById).toHaveBeenCalledWith('user-123', updatable);
         }));
-        it('should return false on exception', () => __awaiter(void 0, void 0, void 0, function* () {
+        it('should throw AuthenticationError on exception', () => __awaiter(void 0, void 0, void 0, function* () {
             const updatable = { displayName: 'New Name' };
             mockAuthAdmin.updateUserById.mockRejectedValue(new Error('Network error'));
-            const result = yield adapter.update(mockUser, updatable);
-            expect(result).toBe(false);
+            yield expect(adapter.update(mockUser, updatable)).rejects.toThrow(auth_1.AuthenticationError);
+        }));
+        it('should throw Auth.ERROR_WEAK_PASSWORD on weak password error', () => __awaiter(void 0, void 0, void 0, function* () {
+            const updatable = { password: '123' };
+            mockAuthAdmin.updateUserById.mockResolvedValue({
+                data: null,
+                error: { code: 'weak_password', message: 'Password should be stronger' },
+            });
+            yield expect(adapter.update(mockUser, updatable)).rejects.toThrow('weak_password');
         }));
     });
     describe('delete()', () => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@quatrain/auth-supabase",
-  "version": "1.2.5",
+  "version": "1.2.7",
   "license": "AGPL-3.0-only",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -19,9 +19,9 @@
   },
   "author": "Quatrain Développement SAS <developers@quatrain.com>",
   "dependencies": {
-    "@quatrain/api": "^1.1.5",
-    "@quatrain/auth": "^1.2.3",
-    "@quatrain/backend": "^1.2.11",
+    "@quatrain/api": "^1.1.6",
+    "@quatrain/auth": "^1.2.5",
+    "@quatrain/backend": "^1.2.14",
     "@supabase/supabase-js": "^2.87.3",
     "node-fetch-native": "^1.6.4"
   },

package/src/SupabaseAuthAdapter.test.ts

@@ -399,25 +399,39 @@ describe('SupabaseAuthAdapter', () => {
             error: { message: 'Update failed' },
          })
 
-         await adapter.update(mockUser, updatable)
+         await expect(adapter.update(mockUser, updatable)).rejects.toThrow(
+            AuthenticationError
+         )
 
-         // The method doesn't throw, just logs the error
          expect(mockAuthAdmin.updateUserById).toHaveBeenCalledWith(
             'user-123',
             updatable
          )
       })
 
-      it('should return false on exception', async () => {
+      it('should throw AuthenticationError on exception', async () => {
          const updatable = { displayName: 'New Name' }
 
          mockAuthAdmin.updateUserById.mockRejectedValue(
             new Error('Network error')
          )
 
-         const result = await adapter.update(mockUser, updatable)
+         await expect(adapter.update(mockUser, updatable)).rejects.toThrow(
+            AuthenticationError
+         )
+      })
 
-         expect(result).toBe(false)
+      it('should throw Auth.ERROR_WEAK_PASSWORD on weak password error', async () => {
+         const updatable = { password: '123' }
+
+         mockAuthAdmin.updateUserById.mockResolvedValue({
+            data: null,
+            error: { code: 'weak_password', message: 'Password should be stronger' },
+         })
+
+         await expect(adapter.update(mockUser, updatable)).rejects.toThrow(
+            'weak_password'
+         )
       })
    })
 

package/src/SupabaseAuthAdapter.ts

@@ -185,12 +185,19 @@ export class SupabaseAuthAdapter extends AbstractAuthAdapter {
                updatable
             )
             if (error !== null) {
-               Auth.error(error)
+               Auth.error(error.message)
+               if (error.code === 'weak_password' || error.message?.toLowerCase().includes('password')) {
+                  throw new AuthenticationError(Auth.ERROR_WEAK_PASSWORD)
+               }
+               throw new AuthenticationError(error.message)
             }
          }
       } catch (e) {
          Auth.error(e)
-         return false
+         if (e instanceof AuthenticationError) {
+            throw e
+         }
+         throw new AuthenticationError((e as Error).message)
       }
    }
 
@@ -222,4 +229,20 @@ export class SupabaseAuthAdapter extends AbstractAuthAdapter {
          return data
       }
    }
+
+   /**
+    * Initiates password recovery/reset process for a user.
+    * 
+    * @param email - The user email.
+    * @param redirectTo - Optional redirect destination.
+    */
+   async recoverPassword(email: string, redirectTo?: string) {
+      const { data, error } = await this._client.auth.resetPasswordForEmail(email, {
+         redirectTo,
+      })
+      if (error) {
+         throw new Error(error.message)
+      }
+      return data
+   }
 }