@quatrain/auth 1.2.3 → 1.2.5

package/dist/AbstractAuthAdapter.d.ts

@@ -102,4 +102,11 @@ export declare abstract class AbstractAuthAdapter implements AuthInterface {
      * @returns Action response from the provider.
      */
     abstract setCustomUserClaims(id: string, claims: any): any;
+    /**
+     * Initiates password recovery/reset process for a user.
+     *
+     * @param email - The user email.
+     * @param redirectTo - Optional redirect destination.
+     */
+    recoverPassword(email: string, redirectTo?: string): Promise<any>;
 }

package/dist/AbstractAuthAdapter.js

@@ -12,6 +12,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.AbstractAuthAdapter = void 0;
 const Auth_1 = require("./Auth");
 const backend_1 = require("@quatrain/backend");
+const http_1 = require("@quatrain/http");
 /**
  * Abstract base class that defines the contract for all authentication adapters.
  * Implementations should adapt standard authentication methods to specific providers
@@ -31,7 +32,7 @@ class AbstractAuthAdapter {
     middleware() {
         return (req, res) => __awaiter(this, void 0, void 0, function* () {
             var _a;
-            const bearer = (((_a = req.headers) === null || _a === void 0 ? void 0 : _a.authorization) || '').split(' ')[1] || '';
+            const bearer = http_1.HttpHelper.parseBearerToken((_a = req.headers) === null || _a === void 0 ? void 0 : _a.authorization);
             if (bearer) {
                 try {
                     const user = yield this.getAuthToken(bearer);
@@ -44,7 +45,7 @@ class AbstractAuthAdapter {
                 }
             }
             res.setHeader('WWW-Authenticate', 'Bearer realm="Core API"');
-            res.status(401).send('Authentication required.');
+            res.status(http_1.HttpStatus.UNAUTHORIZED).send('Authentication required.');
             return false;
         });
     }
@@ -72,6 +73,15 @@ class AbstractAuthAdapter {
     get alias() {
         return this._alias;
     }
+    /**
+     * Initiates password recovery/reset process for a user.
+     *
+     * @param email - The user email.
+     * @param redirectTo - Optional redirect destination.
+     */
+    recoverPassword(email, redirectTo) {
+        throw new Error('Password recovery not implemented for this adapter');
+    }
 }
 exports.AbstractAuthAdapter = AbstractAuthAdapter;
 /** The `User` class reference to be used by the adapter. */

package/dist/Auth.d.ts

@@ -37,6 +37,8 @@ export declare class Auth extends Core {
     static logger: any;
     /** Standardized error message for duplicate email constraint violations. */
     static ERROR_EMAIL_EXISTS: string;
+    /** Standardized error message for weak password / password complexity violations. */
+    static ERROR_WEAK_PASSWORD: string;
     protected static _providers: AuthRegistry<any>;
     /**
      * Registers a configured auth provider into the global context.

package/dist/Auth.js

@@ -51,4 +51,6 @@ Auth.defaultProvider = 'default';
 Auth.logger = _a.addLogger('Auth');
 /** Standardized error message for duplicate email constraint violations. */
 Auth.ERROR_EMAIL_EXISTS = `User email already exists`;
+/** Standardized error message for weak password / password complexity violations. */
+Auth.ERROR_WEAK_PASSWORD = `weak_password`;
 Auth._providers = {};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@quatrain/auth",
-  "version": "1.2.3",
+  "version": "1.2.5",
   "license": "AGPL-3.0-only",
   "description": "Auth adapters commons",
   "main": "dist/index.js",
@@ -20,9 +20,10 @@
   },
   "author": "Quatrain Développement SAS <developers@quatrain.com>",
   "dependencies": {
-    "@quatrain/api": "^1.1.5",
-    "@quatrain/backend": "^1.2.11",
-    "@quatrain/core": "^1.2.14"
+    "@quatrain/api": "^1.1.6",
+    "@quatrain/backend": "^1.2.14",
+    "@quatrain/core": "^1.2.16",
+    "@quatrain/http": "^1.0.1"
   },
   "devDependencies": {
     "@tsconfig/recommended": "^1.0.1",

package/src/AbstractAuthAdapter.ts

@@ -2,6 +2,7 @@ import { Auth, AuthParameters, AuthParametersKeys } from './Auth'
 import { User } from '@quatrain/backend'
 import { AuthInterface } from './types/AuthInterface'
 import { ApiMiddleware, ApiRequest, ApiResponse } from '@quatrain/api'
+import { HttpStatus, HttpHelper } from '@quatrain/http'
 
 /**
  * Abstract base class that defines the contract for all authentication adapters.
@@ -25,7 +26,7 @@ export abstract class AbstractAuthAdapter implements AuthInterface {
     */
    public middleware(): ApiMiddleware {
       return async (req: ApiRequest, res: ApiResponse): Promise<boolean> => {
-         const bearer = ((req.headers?.authorization as string) || '').split(' ')[1] || ''
+         const bearer = HttpHelper.parseBearerToken(req.headers?.authorization as string)
          
          if (bearer) {
             try {
@@ -39,7 +40,7 @@ export abstract class AbstractAuthAdapter implements AuthInterface {
          }
 
          res.setHeader('WWW-Authenticate', 'Bearer realm="Core API"')
-         res.status(401).send('Authentication required.')
+         res.status(HttpStatus.UNAUTHORIZED).send('Authentication required.')
          return false
       }
    }
@@ -147,4 +148,14 @@ export abstract class AbstractAuthAdapter implements AuthInterface {
     * @returns Action response from the provider.
     */
    abstract setCustomUserClaims(id: string, claims: any): any
+
+   /**
+    * Initiates password recovery/reset process for a user.
+    * 
+    * @param email - The user email.
+    * @param redirectTo - Optional redirect destination.
+    */
+   recoverPassword(email: string, redirectTo?: string): Promise<any> {
+      throw new Error('Password recovery not implemented for this adapter')
+   }
 }

package/src/Auth.ts

@@ -48,6 +48,8 @@ export class Auth extends Core {
 
    /** Standardized error message for duplicate email constraint violations. */
    static ERROR_EMAIL_EXISTS = `User email already exists`
+   /** Standardized error message for weak password / password complexity violations. */
+   static ERROR_WEAK_PASSWORD = `weak_password`
 
    protected static _providers: AuthRegistry<any> = {}