@rapidrest/auth 1.0.0-beta.1

package/dist/types/routes/BaseAuthPasskeyRoute.d.ts

@@ -0,0 +1,41 @@
+import { JWTUser, MessagingUtils } from "@rapidrest/core";
+import { RepoUtils, AuthMiddleware, ObjectFactory } from "@rapidrest/service-core";
+import { Alias, AuthResult, Secret, User } from "../models/types.js";
+import { PasskeyConfig, StoredPasskeyCredential } from "../auth/types.js";
+import { UserUtils } from "./UserUtils.js";
+/**
+ *
+ *
+ * @author Jean-Philippe Steinmetz
+ */
+export declare abstract class BaseAuthPasskeyRoute<U extends User, A extends Alias, S extends Secret> {
+    protected abstract aliasClass: any;
+    protected abstract secretClass: any;
+    protected abstract userClass: any;
+    protected aliasRepo?: RepoUtils<A>;
+    protected authMiddleware?: AuthMiddleware;
+    protected jwtConfig?: any;
+    protected objectFactory?: ObjectFactory;
+    protected messagingUtils?: MessagingUtils;
+    protected secretRepo?: RepoUtils<S>;
+    protected passkeyConfig: PasskeyConfig;
+    protected userRepo?: RepoUtils<U>;
+    protected userUtils?: UserUtils<U, A>;
+    /**
+     * Called on server startup to initialize the route with any defaults.
+     */
+    protected initialize(): Promise<void>;
+    /**
+     * Authenticates the user using Passkey and returns a JSON Web Token access token to be used with future API requests.
+     */
+    authenticate(user: JWTUser): Promise<AuthResult | undefined>;
+    protected getCredentialById(credentialId: string): Promise<StoredPasskeyCredential | undefined>;
+    protected getCredentials(id: string): Promise<StoredPasskeyCredential[]>;
+    /**
+     * Retrieve the user associated with a given uid or alias.
+     *
+     * @param id The unqique id of the user or alias to lookup.
+     */
+    protected getUser(id: string): Promise<JWTUser | undefined>;
+    protected updateCredentialCounter(credentialId: string, newCounter: number): Promise<void>;
+}

package/dist/types/routes/BaseAuthTOTPRoute.d.ts

@@ -0,0 +1,38 @@
+import { JWTUser, MessagingUtils } from "@rapidrest/core";
+import { RepoUtils, AuthMiddleware, ObjectFactory } from "@rapidrest/service-core";
+import { Alias, AuthResult, Secret, User } from "../models/types.js";
+import { TOTPSecret } from "../auth/types.js";
+import { UserUtils } from "./UserUtils.js";
+/**
+ *
+ *
+ * @author Jean-Philippe Steinmetz
+ */
+export declare abstract class BaseAuthTOTPRoute<U extends User, A extends Alias, S extends Secret> {
+    protected abstract aliasClass: any;
+    protected abstract secretClass: any;
+    protected abstract userClass: any;
+    protected authMiddleware?: AuthMiddleware;
+    protected jwtConfig?: any;
+    protected objectFactory?: ObjectFactory;
+    protected messagingUtils?: MessagingUtils;
+    protected secretRepo?: RepoUtils<S>;
+    /** The name of the messaging template to use for sending notifications. */
+    protected template: string;
+    protected userUtils?: UserUtils<U, A>;
+    /**
+     * Called on server startup to initialize the route with any defaults.
+     */
+    protected initialize(): Promise<void>;
+    /**
+     * Authenticates the user using TOTP and returns a JSON Web Token access token to be used with future API requests.
+     */
+    authenticate(user: JWTUser): Promise<AuthResult | undefined>;
+    protected getSecrets(uid: string): Promise<TOTPSecret[]>;
+    /**
+     * Retrieves the user with the given unique id.
+     * @param uid The unique id of the user to retrieve.
+     * @returns The user if found, otherwise `undefined`.
+     */
+    protected getUser(uid: string): Promise<JWTUser | undefined>;
+}

package/dist/types/routes/BaseProfileRoute.d.ts

@@ -0,0 +1,7 @@
+import { CRUDRoute } from "@rapidrest/service-core";
+import { Profile } from "../models/types.js";
+/**
+ * @author Jean-Philippe Steinmetz
+ */
+export declare abstract class BaseProfileRoute<T extends Profile> extends CRUDRoute<T> {
+}

package/dist/types/routes/BaseSecretRoute.d.ts

@@ -0,0 +1,89 @@
+import { HttpRequest, HttpResponse, ModelRoute } from "@rapidrest/service-core";
+import { Secret } from "../models/types.js";
+import { JWTUser } from "@rapidrest/core";
+import { PasskeyConfig, TOTPConfig } from "../auth/types.js";
+/**
+ * @author Jean-Philippe Steinmetz
+ */
+export declare abstract class BaseSecretRoute<T extends Secret> extends ModelRoute<T> {
+    protected readonly repoUtilsClass: any;
+    /**
+     * The relying party configuration used for validating and generating passkey (WebAuthn) registration data.
+     */
+    protected passkeyConfig: PasskeyConfig;
+    /**
+     * The relying party configuration used for validating and generating FIDO2 hardware security key
+     * (WebAuthn) registration data. Kept separate from `passkeyConfig` since a hardware key deployment
+     * commonly wants a different `authenticatorAttachment`/`residentKey` policy — a hardware key is
+     * typically registered as a `"cross-platform"`, non-discoverable credential tied to a known
+     * account, rather than a discoverable, possibly-synced passkey.
+     */
+    protected fido2Config: PasskeyConfig;
+    /**
+     * The issuer configuration used for validating and generating TOTP (RFC 6238) registration data.
+     */
+    protected totpConfig: TOTPConfig;
+    /**
+     * Removes the `data` property from the secret(s) to protect sensitive information.
+     */
+    protected cleanData(obj: T | T[]): void;
+    count(params: any, query: any, res: HttpResponse, user?: JWTUser): Promise<any>;
+    protected validateCreate(obj: Partial<T> | Partial<T>[], req: HttpRequest, user?: JWTUser): Promise<void>;
+    /**
+     * Verifies a client-submitted WebAuthn `RegistrationResponseJSON` (as produced by
+     * `navigator.credentials.create()` using the options from `generatePasskeyRegistrationOptions()`) against
+     * the challenge stored in the session, and replaces `obj.data` with the resulting `StoredPasskeyCredential`.
+     *
+     * Shared by both `passkey` and `fido2` secrets — the two differ only in relying party configuration
+     * (see `passkeyConfig`/`fido2Config`) and which `SecretType` they're persisted under, not in the
+     * underlying WebAuthn ceremony.
+     *
+     * Per the WebAuthn registration ceremony (https://www.w3.org/TR/webauthn-2/#sctn-registering-a-new-credential),
+     * the credential ID must be unique across all accounts known to this relying party. Rather than duplicate that
+     * check here, the credential ID is used directly as this secret's own `uid` so that `ModelRoute`'s existing
+     * create-time identifier check rejects the request should the ID already be registered to any account. This
+     * also lets a login ceremony, which only has the credential ID to go on, look the secret up directly by its
+     * primary key (see `BaseAuthPasskeyRoute`/`BaseAuthFIDO2Route`'s `getCredentialById`/`updateCredentialCounter`).
+     *
+     * @param obj The secret being created. Its `data` property must be a `RegistrationResponseJSON`.
+     * @param req The source HTTP request, used to retrieve the challenge stored in the session by a prior call to
+     * `generatePasskeyRegistrationOptions()`.
+     * @param config The relying party configuration to verify the response against.
+     */
+    protected validateWebAuthnCreate(obj: Partial<T>, req: HttpRequest, config: PasskeyConfig): Promise<void>;
+    /**
+     * Validates (or generates) the secret for a new `totp` secret per RFC 6238/RFC 4226.
+     *
+     * The client may either bring their own Base32-encoded secret (e.g. one generated on a
+     * different server for migration purposes) or, more commonly, omit `data` entirely and have one
+     * generated here. Either way, the secret's token parameters (`digits`/`period`/`algorithm`) are
+     * captured onto the stored `TOTPSecret` alongside it, rather than left to always defer to
+     * `totpConfig`, so verification keeps working for this secret even if the configured defaults
+     * change later.
+     *
+     * @param obj The secret being created. If `data` is a string, it's used as the caller-supplied
+     * secret; otherwise a new one is generated.
+     */
+    protected validateTOTPCreate(obj: Partial<T>): Promise<void>;
+    /**
+     * Begins a WebAuthn registration ceremony for the authenticated user: generates a set of
+     * `PublicKeyCredentialCreationOptions` (RFC/spec compliant per https://www.w3.org/TR/webauthn-2/), scoped
+     * to exclude any credentials of the given type the user already has registered, and stores the challenge
+     * in the session for verification by `validateWebAuthnCreate()` once the client completes the ceremony
+     * and submits a new secret of that type. Shared by both the `passkey` and `fido2` registration endpoints.
+     *
+     * @param req The source HTTP request. Used to persist the generated challenge in the session.
+     * @param user The authenticated user the new credential will be associated with.
+     * @param type The secret type being registered — `passkey` or `fido2`.
+     * @param config The relying party configuration to generate options with.
+     */
+    private beginWebAuthnRegistration;
+    passkeyRegistrationOptions(req: HttpRequest, user?: JWTUser): Promise<any>;
+    fido2RegistrationOptions(req: HttpRequest, user?: JWTUser): Promise<any>;
+    create(obj: T | T[], req: HttpRequest, user?: JWTUser): Promise<T | Array<T>>;
+    delete(id: string, version: string | undefined, purge: string | undefined, req: HttpRequest, user?: JWTUser): Promise<void>;
+    exists(id: string, query: any, res: HttpResponse, user?: JWTUser): Promise<any>;
+    find(params: any, query: any, user?: JWTUser): Promise<Array<T>>;
+    findById(id: string, query: any, user?: JWTUser): Promise<T | null>;
+    truncate(params: any, query: any, user?: JWTUser): Promise<void>;
+}

package/dist/types/routes/BaseUserRoute.d.ts

@@ -0,0 +1,7 @@
+import { CRUDRoute } from "@rapidrest/service-core";
+import { User } from "../models/types.js";
+/**
+ * @author Jean-Philippe Steinmetz
+ */
+export declare abstract class BaseUserRoute<T extends User> extends CRUDRoute<T> {
+}

package/dist/types/routes/UserUtils.d.ts

@@ -0,0 +1,21 @@
+import { ObjectFactory, RepoUtils } from "@rapidrest/service-core";
+import { Alias, User } from "../models/types.js";
+/**
+ * Utility class for working with persisted `User` objects in the database.
+ */
+export declare class UserUtils<U extends User, A extends Alias> {
+    protected aliasClass: any;
+    protected aliasRepo?: RepoUtils<A>;
+    protected userClass: any;
+    protected userRepo?: RepoUtils<U>;
+    protected objectFactory?: ObjectFactory;
+    constructor(userClass: any, aliasClass: any);
+    protected init(): Promise<void>;
+    /**
+     * Performs a look up of the user with the given id. The id may be one of: the user's `uid` or an `Alias`.
+     *
+     * @param id The unique id of the user to lookup.
+     * @returns The `User` if found, otherwise `undefined`.
+     */
+    lookup(id: string): Promise<U | undefined>;
+}

package/dist/types/routes/index.d.ts

@@ -0,0 +1,12 @@
+export * from "./BaseAliasRoute.js";
+export * from "./BaseAuthBasicRoute.js";
+export * from "./BaseAuthFIDO2Route.js";
+export * from "./BaseAuthMFARoute.js";
+export * from "./BaseAuthOIDCRoute.js";
+export * from "./BaseAuthOTPRoute.js";
+export * from "./BaseAuthPasskeyRoute.js";
+export * from "./BaseAuthTOTPRoute.js";
+export * from "./BaseProfileRoute.js";
+export * from "./BaseSecretRoute.js";
+export * from "./BaseUserRoute.js";
+export * from "./UserUtils.js";

package/dist/types/routes/mongo/BaseAliasRouteMongo.d.ts

@@ -0,0 +1,4 @@
+import { AliasMongo } from "../../mongo.js";
+import { BaseAliasRoute } from "../BaseAliasRoute.js";
+export declare class BaseAliasRouteMongo extends BaseAliasRoute<AliasMongo> {
+}

package/dist/types/routes/mongo/BaseAuthBasicRouteMongo.d.ts

@@ -0,0 +1,7 @@
+import { AliasMongo, SecretMongo, UserMongo } from "../../mongo.js";
+import { BaseAuthBasicRoute } from "../BaseAuthBasicRoute.js";
+export declare abstract class BaseAuthBasicRouteMongo extends BaseAuthBasicRoute<UserMongo, SecretMongo, AliasMongo> {
+    protected aliasClass: any;
+    protected secretClass: any;
+    protected userClass: any;
+}

package/dist/types/routes/mongo/BaseAuthFIDO2RouteMongo.d.ts

@@ -0,0 +1,7 @@
+import { AliasMongo, SecretMongo, UserMongo } from "../../mongo.js";
+import { BaseAuthFIDO2Route } from "../BaseAuthFIDO2Route.js";
+export declare abstract class BaseAuthFIDO2RouteMongo extends BaseAuthFIDO2Route<UserMongo, AliasMongo, SecretMongo> {
+    protected aliasClass: any;
+    protected secretClass: any;
+    protected userClass: any;
+}

package/dist/types/routes/mongo/BaseAuthMFARouteMongo.d.ts

@@ -0,0 +1,7 @@
+import { AliasMongo, SecretMongo, UserMongo } from "../../mongo.js";
+import { BaseAuthMFARoute } from "../BaseAuthMFARoute.js";
+export declare abstract class BaseAuthMFARouteMongo extends BaseAuthMFARoute<UserMongo, SecretMongo, AliasMongo> {
+    protected aliasClass: any;
+    protected secretClass: any;
+    protected userClass: any;
+}

package/dist/types/routes/mongo/BaseAuthOIDCRouteMongo.d.ts

@@ -0,0 +1,7 @@
+import { AliasMongo, ProfileMongo, UserMongo } from "../../mongo.js";
+import { BaseAuthOIDCRoute } from "../BaseAuthOIDCRoute.js";
+export declare abstract class BaseAuthOIDCRouteMongo extends BaseAuthOIDCRoute<UserMongo, AliasMongo, ProfileMongo> {
+    protected aliasClass: any;
+    protected profileClass: any;
+    protected userClass: any;
+}

package/dist/types/routes/mongo/BaseAuthOTPRouteMongo.d.ts

@@ -0,0 +1,7 @@
+import { AliasMongo, SecretMongo, UserMongo } from "../../mongo.js";
+import { BaseAuthOTPRoute } from "../BaseAuthOTPRoute.js";
+export declare abstract class BaseAuthOTPRouteMongo extends BaseAuthOTPRoute<UserMongo, AliasMongo, SecretMongo> {
+    protected aliasClass: any;
+    protected secretClass: any;
+    protected userClass: any;
+}

package/dist/types/routes/mongo/BaseAuthPasskeyRouteMongo.d.ts

@@ -0,0 +1,7 @@
+import { AliasMongo, SecretMongo, UserMongo } from "../../mongo.js";
+import { BaseAuthPasskeyRoute } from "../BaseAuthPasskeyRoute.js";
+export declare abstract class BaseAuthPasskeyRouteMongo extends BaseAuthPasskeyRoute<UserMongo, AliasMongo, SecretMongo> {
+    protected aliasClass: any;
+    protected secretClass: any;
+    protected userClass: any;
+}

package/dist/types/routes/mongo/BaseAuthTOTPRouteMongo.d.ts

@@ -0,0 +1,7 @@
+import { AliasMongo, SecretMongo, UserMongo } from "../../mongo.js";
+import { BaseAuthTOTPRoute } from "../BaseAuthTOTPRoute.js";
+export declare abstract class BaseAuthTOTPRouteMongo extends BaseAuthTOTPRoute<UserMongo, AliasMongo, SecretMongo> {
+    protected aliasClass: any;
+    protected secretClass: any;
+    protected userClass: any;
+}

package/dist/types/routes/mongo/BaseProfileRouteMongo.d.ts

@@ -0,0 +1,4 @@
+import { ProfileMongo } from "../../mongo.js";
+import { BaseProfileRoute } from "../BaseProfileRoute.js";
+export declare class BaseProfileRouteMongo extends BaseProfileRoute<ProfileMongo> {
+}

package/dist/types/routes/mongo/BaseSecretRouteMongo.d.ts

@@ -0,0 +1,4 @@
+import { SecretMongo } from "../../mongo.js";
+import { BaseSecretRoute } from "../BaseSecretRoute.js";
+export declare class BaseSecretRouteMongo extends BaseSecretRoute<SecretMongo> {
+}

package/dist/types/routes/mongo/BaseUserRouteMongo.d.ts

@@ -0,0 +1,4 @@
+import { UserMongo } from "../../mongo.js";
+import { BaseUserRoute } from "../BaseUserRoute.js";
+export declare class BaseUserRouteMongo extends BaseUserRoute<UserMongo> {
+}

package/dist/types/routes/mongo/index.d.ts

@@ -0,0 +1,11 @@
+export * from "./BaseAliasRouteMongo.js";
+export * from "./BaseAuthBasicRouteMongo.js";
+export * from "./BaseAuthFIDO2RouteMongo.js";
+export * from "./BaseAuthMFARouteMongo.js";
+export * from "./BaseAuthOIDCRouteMongo.js";
+export * from "./BaseAuthOTPRouteMongo.js";
+export * from "./BaseAuthPasskeyRouteMongo.js";
+export * from "./BaseAuthTOTPRouteMongo.js";
+export * from "./BaseProfileRouteMongo.js";
+export * from "./BaseSecretRouteMongo.js";
+export * from "./BaseUserRouteMongo.js";

package/dist/types/routes/mongo.d.ts

@@ -0,0 +1 @@
+export * from "./mongo/index.js";

package/dist/types/routes/sql/BaseAliasRouteSQL.d.ts

@@ -0,0 +1,4 @@
+import { AliasSQL } from "../../sql.js";
+import { BaseAliasRoute } from "../BaseAliasRoute.js";
+export declare class BaseAliasRouteSQL extends BaseAliasRoute<AliasSQL> {
+}

package/dist/types/routes/sql/BaseAuthBasicRouteSQL.d.ts

@@ -0,0 +1,7 @@
+import { AliasSQL, SecretSQL, UserSQL } from "../../sql.js";
+import { BaseAuthBasicRoute } from "../BaseAuthBasicRoute.js";
+export declare abstract class BaseAuthBasicRouteSQL extends BaseAuthBasicRoute<UserSQL, SecretSQL, AliasSQL> {
+    protected aliasClass: any;
+    protected secretClass: any;
+    protected userClass: any;
+}

package/dist/types/routes/sql/BaseAuthFIDO2RouteSQL.d.ts

@@ -0,0 +1,7 @@
+import { AliasSQL, SecretSQL, UserSQL } from "../../sql.js";
+import { BaseAuthFIDO2Route } from "../BaseAuthFIDO2Route.js";
+export declare abstract class BaseAuthFIDO2RouteSQL extends BaseAuthFIDO2Route<UserSQL, AliasSQL, SecretSQL> {
+    protected aliasClass: any;
+    protected secretClass: any;
+    protected userClass: any;
+}

package/dist/types/routes/sql/BaseAuthMFARouteSQL.d.ts

@@ -0,0 +1,7 @@
+import { AliasSQL, SecretSQL, UserSQL } from "../../sql.js";
+import { BaseAuthMFARoute } from "../BaseAuthMFARoute.js";
+export declare abstract class BaseAuthMFARouteSQL extends BaseAuthMFARoute<UserSQL, SecretSQL, AliasSQL> {
+    protected aliasClass: any;
+    protected secretClass: any;
+    protected userClass: any;
+}

package/dist/types/routes/sql/BaseAuthOIDCRouteSQL.d.ts

@@ -0,0 +1,7 @@
+import { AliasSQL, ProfileSQL, UserSQL } from "../../sql.js";
+import { BaseAuthOIDCRoute } from "../BaseAuthOIDCRoute.js";
+export declare abstract class BaseAuthOIDCRouteSQL extends BaseAuthOIDCRoute<UserSQL, AliasSQL, ProfileSQL> {
+    protected aliasClass: any;
+    protected profileClass: any;
+    protected userClass: any;
+}

package/dist/types/routes/sql/BaseAuthOTPRouteSQL.d.ts

@@ -0,0 +1,7 @@
+import { AliasSQL, SecretSQL, UserSQL } from "../../sql.js";
+import { BaseAuthOTPRoute } from "../BaseAuthOTPRoute.js";
+export declare abstract class BaseAuthOTPRouteSQL extends BaseAuthOTPRoute<UserSQL, AliasSQL, SecretSQL> {
+    protected aliasClass: any;
+    protected secretClass: any;
+    protected userClass: any;
+}

package/dist/types/routes/sql/BaseAuthPasskeyRouteSQL.d.ts

@@ -0,0 +1,7 @@
+import { AliasSQL, SecretSQL, UserSQL } from "../../sql.js";
+import { BaseAuthPasskeyRoute } from "../BaseAuthPasskeyRoute.js";
+export declare abstract class BaseAuthPasskeyRouteSQL extends BaseAuthPasskeyRoute<UserSQL, AliasSQL, SecretSQL> {
+    protected aliasClass: any;
+    protected secretClass: any;
+    protected userClass: any;
+}

package/dist/types/routes/sql/BaseAuthTOTPRouteSQL.d.ts

@@ -0,0 +1,7 @@
+import { AliasSQL, SecretSQL, UserSQL } from "../../sql.js";
+import { BaseAuthTOTPRoute } from "../BaseAuthTOTPRoute.js";
+export declare abstract class BaseAuthTOTPRouteSQL extends BaseAuthTOTPRoute<UserSQL, AliasSQL, SecretSQL> {
+    protected aliasClass: any;
+    protected secretClass: any;
+    protected userClass: any;
+}

package/dist/types/routes/sql/BaseProfileRouteSQL.d.ts

@@ -0,0 +1,4 @@
+import { ProfileSQL } from "../../sql.js";
+import { BaseProfileRoute } from "../BaseProfileRoute.js";
+export declare class BaseProfileRouteSQL extends BaseProfileRoute<ProfileSQL> {
+}

package/dist/types/routes/sql/BaseSecretRouteSQL.d.ts

@@ -0,0 +1,4 @@
+import { SecretSQL } from "../../sql.js";
+import { BaseSecretRoute } from "../BaseSecretRoute.js";
+export declare class BaseSecretRouteSQL extends BaseSecretRoute<SecretSQL> {
+}

package/dist/types/routes/sql/BaseUserRouteSQL.d.ts

@@ -0,0 +1,4 @@
+import { UserSQL } from "../../sql.js";
+import { BaseUserRoute } from "../BaseUserRoute.js";
+export declare class BaseUserRouteSQL extends BaseUserRoute<UserSQL> {
+}

package/dist/types/routes/sql/index.d.ts

@@ -0,0 +1,11 @@
+export * from "./BaseAliasRouteSQL.js";
+export * from "./BaseAuthBasicRouteSQL.js";
+export * from "./BaseAuthFIDO2RouteSQL.js";
+export * from "./BaseAuthMFARouteSQL.js";
+export * from "./BaseAuthOIDCRouteSQL.js";
+export * from "./BaseAuthOTPRouteSQL.js";
+export * from "./BaseAuthPasskeyRouteSQL.js";
+export * from "./BaseAuthTOTPRouteSQL.js";
+export * from "./BaseProfileRouteSQL.js";
+export * from "./BaseSecretRouteSQL.js";
+export * from "./BaseUserRouteSQL.js";

package/dist/types/routes/sql.d.ts

@@ -0,0 +1 @@
+export * from "./sql/index.js";

package/dist/types/sql.d.ts

@@ -0,0 +1,2 @@
+export * from "./models/sql.js";
+export * from "./routes/sql.js";

package/package.json

@@ -0,0 +1,138 @@
+{
+    "name": "@rapidrest/auth",
+    "version": "1.0.0-beta.1",
+    "description": "A library for implementing a complete authentication server in RapidREST.",
+    "repository": "https://github.com/rapidrest/auth.git",
+    "author": "RapidREST <rapidrests@gmail.com>",
+    "license": "MIT",
+    "contributors": [
+        "Jean-Philippe Steinmetz"
+    ],
+    "scripts": {
+        "build": "yarn lint && rimraf dist && tsc",
+        "lint": "eslint ./src ./test",
+        "local-audit": "yarn install && yarn npm audit -A -R \"$@\"",
+        "checkup": "yarn dlx @yarnpkg/doctor \"$@\"",
+        "dependency-check": "yarn dlx depcheck \"$@\"",
+        "report-coverage": "cat ./coverage/lcov.info | coveralls",
+        "bench": "tsx bench/index.ts",
+        "bench:baseline": "yarn bench 2>&1 | tee bench/baseline.txt",
+        "test": "vitest run",
+        "test:prod": "npm run lint && vitest run --coverage",
+        "test:watch": "vitest",
+        "postversion": "git push && git push --tags"
+    },
+    "peerDependencies": {
+        "@rapidrest/core": "1.x",
+        "@rapidrest/service-core": "1.x",
+        "@simplewebauthn/server": ">=13.0.0",
+        "@vitejs/plugin-react": ">=4.0.0",
+        "argon2": "0.x",
+        "jwks-rsa": "4.x",
+        "nodemon": ">=3.0.0",
+        "otplib": ">=13.0.0",
+        "react": "19.x",
+        "react-dom": "19.x",
+        "tsx": ">=4.0.0"
+    },
+    "peerDependenciesMeta": {
+        "@simplewebauthn/server": {
+            "optional": true
+        },
+        "@vitejs/plugin-react": {
+            "optional": true
+        },
+        "argon2": {
+            "optional": true
+        },
+        "jwks-rsa": {
+            "optional": true
+        },
+        "nodemon": {
+            "optional": true
+        },
+        "otplib": {
+            "optional": true
+        },
+        "tsx": {
+            "optional": true
+        }
+    },
+    "bin": {
+        "rapidreact": "./dist/cli/cli.js"
+    },
+    "dependencies": {
+        "cross-spawn": "^7.0.5"
+    },
+    "devDependencies": {
+        "@rapidrest/core": "^1.9.0",
+        "@rapidrest/service-core": "1.0.0-rc.25",
+        "@simplewebauthn/server": "^13.3.2",
+        "@swc/core": "^1.15.41",
+        "@types/cross-spawn": "^6.0.6",
+        "@types/node": "^25.9.2",
+        "@types/speakeasy": "^2",
+        "@typescript-eslint/eslint-plugin": "^8.61.0",
+        "@typescript-eslint/parser": "^8.61.0",
+        "@vitejs/plugin-react": "^6.0.3",
+        "@vitest/coverage-v8": "^4.1.8",
+        "argon2": "^0.44.0",
+        "eslint": "^10.4.1",
+        "eslint-config-prettier": "^10.1.8",
+        "eslint-plugin-import": "^2.32.0",
+        "eslint-plugin-jsdoc": "^63.0.2",
+        "globals": "^17.6.0",
+        "ioredis": "^5.11.1",
+        "ioredis-mock": "^8.13.1",
+        "jwks-rsa": "^4.1.0",
+        "lodash-es": "^4.18.1",
+        "mongodb": "^7.5.0",
+        "mongodb-memory-server": "^11.2.0",
+        "nconf": "^0.13.0",
+        "openapi3-ts": "^4.6.0",
+        "otplib": "^13.4.1",
+        "prom-client": "^15.1.3",
+        "reflect-metadata": "^0.2.2",
+        "rimraf": "^6.1.3",
+        "speakeasy": "^2.0.0",
+        "sqlite3": "^6.0.1",
+        "ts-node": "^10.9.2",
+        "tsx": "^4.19.3",
+        "typeorm": "^0.3.20",
+        "typescript": "^6.0.3",
+        "unplugin-swc": "^1.5.9",
+        "uuid": "^14.0.1",
+        "vitest": "^4.1.8",
+        "winston": "^3.19.0"
+    },
+    "resolutions": {
+        "cross-spawn": "^7.0.5"
+    },
+    "packageManager": "yarn@4.5.3",
+    "engines": {
+        "node": ">=24.0.0"
+    },
+    "publishConfig": {
+        "registry": "https://registry.npmjs.org/"
+    },
+    "type": "module",
+    "main": "dist/lib/index.js",
+    "exports": {
+        ".": {
+            "import": "./dist/lib/index.js",
+            "types": "./dist/types/index.d.ts"
+        },
+        "./mongo": {
+            "import": "./dist/lib/mongo.js",
+            "types": "./dist/types/mongo.d.ts"
+        },
+        "./sql": {
+            "import": "./dist/lib/sql.js",
+            "types": "./dist/types/sql.d.ts"
+        }
+    },
+    "typings": "dist/types/index.d.ts",
+    "files": [
+        "dist"
+    ]
+}