@revojs/auth 0.2.7 → 0.2.9

package/dist/module/index.js

@@ -1,61 +1,64 @@
+import { addRoutes } from "@revojs/server/module";
 import { defineModule, useModule } from "revojs/module";
 //#region src/module/index.ts
 var module_default = defineModule({
 	name: "auth",
-	config: () => ({ session: {
-		name: "session",
-		cookie: {
-			path: "/",
-			secure: true,
-			httpOnly: true,
-			sameSite: "Lax",
-			maxAge: 604800
+	config: () => ({
+		organizations: false,
+		session: {
+			name: "session",
+			cookie: {
+				path: "/",
+				secure: true,
+				httpOnly: true,
+				sameSite: "Lax",
+				maxAge: 604800
+			}
 		}
-	} }),
-	setup() {
+	}),
+	setup(config) {
 		const { fromModule } = useModule(import.meta.url);
-		return {
-			variables: { server: {
-				sessionSecret: { type: "string" },
-				appleClientKey: {
-					type: "string",
-					optional: true
-				},
-				appleClientSecret: {
-					type: "string",
-					optional: true
-				},
-				githubClientKey: {
-					type: "string",
-					optional: true
-				},
-				githubClientSecret: {
-					type: "string",
-					optional: true
-				},
-				googleClientKey: {
-					type: "string",
-					optional: true
-				},
-				googleClientSecret: {
-					type: "string",
-					optional: true
-				},
-				microsoftClientKey: {
-					type: "string",
-					optional: true
-				},
-				microsoftClientSecret: {
-					type: "string",
-					optional: true
-				},
-				microsoftTenant: {
-					type: "string",
-					optional: true
-				}
-			} },
-			sources: { routes: { from: [fromModule("../routes")] } }
-		};
+		addRoutes(config, fromModule("../routes"));
+		if (config.auth.organizations) addRoutes(config, fromModule("../organization/routes"));
+		return { variables: { server: {
+			sessionSecret: { type: "string" },
+			appleClientKey: {
+				type: "string",
+				optional: true
+			},
+			appleClientSecret: {
+				type: "string",
+				optional: true
+			},
+			githubClientKey: {
+				type: "string",
+				optional: true
+			},
+			githubClientSecret: {
+				type: "string",
+				optional: true
+			},
+			googleClientKey: {
+				type: "string",
+				optional: true
+			},
+			googleClientSecret: {
+				type: "string",
+				optional: true
+			},
+			microsoftClientKey: {
+				type: "string",
+				optional: true
+			},
+			microsoftClientSecret: {
+				type: "string",
+				optional: true
+			},
+			microsoftTenant: {
+				type: "string",
+				optional: true
+			}
+		} } };
 	}
 });
 //#endregion

package/dist/organization/routes/auth/invitations/accept/post.d.ts

@@ -0,0 +1,4 @@
+declare const _default: {
+    fetch(scope: import("revojs").Scope): Promise<Response>;
+};
+export default _default;

package/dist/organization/routes/auth/invitations/accept/post.js

@@ -0,0 +1,46 @@
+import { requireSession, useServerAuth } from "../../../../../index.js";
+import { defineRoute, requireSameOrigin, sendForbidden, sendOk, useBody } from "@revojs/server";
+import { object, pipe, regex, string } from "valibot";
+//#region src/organization/routes/auth/invitations/accept/post.ts
+var tokenSchema = pipe(string(), regex(/^[\w-]{43}$/));
+var post_default = defineRoute({ async fetch(scope) {
+	await requireSession(scope);
+	requireSameOrigin(scope);
+	const { token } = await useBody(scope, object({ token: tokenSchema }));
+	const tokenHash = new Uint8Array(await crypto.subtle.digest("SHA-256", new TextEncoder().encode(token))).toHex();
+	const membership = await (await useServerAuth(scope)).transaction(async (database) => {
+		const session = await requireSession(scope);
+		const account = await database.getAccountById(session.accountId);
+		const invitation = await database.getInvitationByHash(tokenHash);
+		if (!account || !invitation || invitation.status !== "pending" || !Number.isFinite(invitation.expiresAt.getTime()) || invitation.expiresAt.getTime() <= Date.now() || invitation.email !== account.email.trim().toLowerCase()) throw sendForbidden(scope);
+		const organization = await database.getOrganization(invitation.organizationId);
+		const inviter = await database.getMembership(invitation.organizationId, invitation.invitedBy);
+		if (!organization || inviter?.status !== "active" || organization.accountId !== invitation.invitedBy) throw sendForbidden(scope);
+		let membership = await database.getMembership(invitation.organizationId, session.accountId);
+		if (membership && membership.status !== "active") throw sendForbidden(scope);
+		if (!membership) {
+			membership = {
+				id: crypto.randomUUID(),
+				organizationId: invitation.organizationId,
+				accountId: session.accountId,
+				status: "active",
+				createdAt: /* @__PURE__ */ new Date()
+			};
+			await database.createMembership(membership);
+		}
+		await database.updateInvitation(invitation.organizationId, invitation.id, "accepted");
+		await database.createTrace({
+			id: crypto.randomUUID(),
+			organizationId: invitation.organizationId,
+			accountId: session.accountId,
+			action: "invitation.accept",
+			subjectId: invitation.id,
+			content: JSON.stringify({ membershipId: membership.id }),
+			createdAt: /* @__PURE__ */ new Date()
+		});
+		return membership;
+	});
+	return sendOk(scope, membership);
+} });
+//#endregion
+export { post_default as default };

package/dist/organization/routes/auth/organizations/[organizationId]/get.d.ts

@@ -0,0 +1,4 @@
+declare const _default: {
+    fetch(scope: import("revojs").Scope): Promise<Response>;
+};
+export default _default;

package/dist/organization/routes/auth/organizations/[organizationId]/get.js

@@ -0,0 +1,14 @@
+import { organizationParametersSchema, requireSession, useServerAuth } from "../../../../../index.js";
+import { defineRoute, sendForbidden, sendOk, useParameters } from "@revojs/server";
+//#region src/organization/routes/auth/organizations/[organizationId]/get.ts
+var get_default = defineRoute({ async fetch(scope) {
+	const session = await requireSession(scope);
+	const { organizationId } = useParameters(scope, organizationParametersSchema);
+	const storage = await useServerAuth(scope);
+	const organization = await storage.getOrganization(organizationId);
+	const membership = await storage.getMembership(organizationId, session.accountId);
+	if (!organization || membership?.status !== "active" || !await storage.getAccountById(session.accountId)) return sendForbidden(scope);
+	return sendOk(scope, organization);
+} });
+//#endregion
+export { get_default as default };

package/dist/organization/routes/auth/organizations/[organizationId]/invitations/[invitationId]/delete.d.ts

@@ -0,0 +1,4 @@
+declare const _default: {
+    fetch(scope: import("revojs").Scope): Promise<Response>;
+};
+export default _default;

package/dist/organization/routes/auth/organizations/[organizationId]/invitations/[invitationId]/delete.js

@@ -0,0 +1,34 @@
+import { authIdSchema, requireSession, useServerAuth } from "../../../../../../../index.js";
+import { defineRoute, requireSameOrigin, sendForbidden, sendOk, useParameters } from "@revojs/server";
+import { object } from "valibot";
+//#region src/organization/routes/auth/organizations/[organizationId]/invitations/[invitationId]/delete.ts
+var delete_default = defineRoute({ async fetch(scope) {
+	await requireSession(scope);
+	requireSameOrigin(scope);
+	const { organizationId, invitationId } = useParameters(scope, object({
+		organizationId: authIdSchema,
+		invitationId: authIdSchema
+	}));
+	await (await useServerAuth(scope)).transaction(async (database) => {
+		const session = await requireSession(scope);
+		if (!await database.getAccountById(session.accountId)) throw sendForbidden(scope);
+		const organization = await database.getOrganization(organizationId);
+		const membership = await database.getMembership(organizationId, session.accountId);
+		if (!organization || membership?.status !== "active" || organization.accountId !== session.accountId) throw sendForbidden(scope);
+		const invitation = await database.getInvitation(organizationId, invitationId);
+		if (invitation?.status !== "pending") throw sendForbidden(scope);
+		await database.updateInvitation(organizationId, invitation.id, "revoked");
+		await database.createTrace({
+			id: crypto.randomUUID(),
+			organizationId,
+			accountId: session.accountId,
+			action: "invitation.revoke",
+			subjectId: invitation.id,
+			content: "{}",
+			createdAt: /* @__PURE__ */ new Date()
+		});
+	});
+	return sendOk(scope);
+} });
+//#endregion
+export { delete_default as default };

package/dist/organization/routes/auth/organizations/[organizationId]/invitations/get.d.ts

@@ -0,0 +1,4 @@
+declare const _default: {
+    fetch(scope: import("revojs").Scope): Promise<Response>;
+};
+export default _default;

package/dist/organization/routes/auth/organizations/[organizationId]/invitations/get.js

@@ -0,0 +1,22 @@
+import { organizationParametersSchema, requireSession, useServerAuth } from "../../../../../../index.js";
+import { defineRoute, sendForbidden, sendOk, useParameters } from "@revojs/server";
+//#region src/organization/routes/auth/organizations/[organizationId]/invitations/get.ts
+var get_default = defineRoute({ async fetch(scope) {
+	const session = await requireSession(scope);
+	const { organizationId } = useParameters(scope, organizationParametersSchema);
+	const storage = await useServerAuth(scope);
+	const organization = await storage.getOrganization(organizationId);
+	const membership = await storage.getMembership(organizationId, session.accountId);
+	if (!organization || membership?.status !== "active" || organization.accountId !== session.accountId || !await storage.getAccountById(session.accountId)) return sendForbidden(scope);
+	return sendOk(scope, (await storage.listInvitations(organizationId)).map((invitation) => ({
+		id: invitation.id,
+		organizationId: invitation.organizationId,
+		email: invitation.email,
+		invitedBy: invitation.invitedBy,
+		status: invitation.status,
+		expiresAt: invitation.expiresAt,
+		createdAt: invitation.createdAt
+	})));
+} });
+//#endregion
+export { get_default as default };

package/dist/organization/routes/auth/organizations/[organizationId]/invitations/post.d.ts

@@ -0,0 +1,4 @@
+declare const _default: {
+    fetch(scope: import("revojs").Scope): Promise<Response>;
+};
+export default _default;

package/dist/organization/routes/auth/organizations/[organizationId]/invitations/post.js

@@ -0,0 +1,56 @@
+import { organizationParametersSchema, requireSession, useServerAuth } from "../../../../../../index.js";
+import { defineRoute, requireSameOrigin, sendForbidden, sendOk, useBody, useParameters } from "@revojs/server";
+import { email, maxLength, maxValue, minValue, number, object, optional, pipe, string, trim } from "valibot";
+//#region src/organization/routes/auth/organizations/[organizationId]/invitations/post.ts
+var expiresInSchema = pipe(number(), minValue(1), maxValue(2592e3));
+var bodySchema = object({
+	email: pipe(string(), trim(), maxLength(254), email()),
+	expiresIn: optional(expiresInSchema, 604800)
+});
+var post_default = defineRoute({ async fetch(scope) {
+	await requireSession(scope);
+	requireSameOrigin(scope);
+	const { organizationId } = useParameters(scope, organizationParametersSchema);
+	const body = await useBody(scope, bodySchema);
+	const token = crypto.getRandomValues(/* @__PURE__ */ new Uint8Array(32)).toBase64({
+		alphabet: "base64url",
+		omitPadding: true
+	});
+	const tokenHash = new Uint8Array(await crypto.subtle.digest("SHA-256", new TextEncoder().encode(token))).toHex();
+	const invitation = await (await useServerAuth(scope)).transaction(async (database) => {
+		const session = await requireSession(scope);
+		if (!await database.getAccountById(session.accountId)) throw sendForbidden(scope);
+		const organization = await database.getOrganization(organizationId);
+		const membership = await database.getMembership(organizationId, session.accountId);
+		if (!organization || membership?.status !== "active" || organization.accountId !== session.accountId) throw sendForbidden(scope);
+		const invitation = {
+			id: crypto.randomUUID(),
+			organizationId,
+			email: body.email.toLowerCase(),
+			invitedBy: session.accountId,
+			status: "pending",
+			expiresAt: new Date(Date.now() + body.expiresIn * 1e3),
+			createdAt: /* @__PURE__ */ new Date()
+		};
+		await database.createInvitation({
+			...invitation,
+			tokenHash
+		});
+		await database.createTrace({
+			id: crypto.randomUUID(),
+			organizationId,
+			accountId: session.accountId,
+			action: "invitation.create",
+			subjectId: invitation.id,
+			content: "{}",
+			createdAt: /* @__PURE__ */ new Date()
+		});
+		return invitation;
+	});
+	return sendOk(scope, {
+		invitation,
+		token
+	});
+} });
+//#endregion
+export { post_default as default };

package/dist/organization/routes/auth/organizations/[organizationId]/memberships/[membershipId]/delete.d.ts

@@ -0,0 +1,4 @@
+declare const _default: {
+    fetch(scope: import("revojs").Scope): Promise<Response>;
+};
+export default _default;

package/dist/organization/routes/auth/organizations/[organizationId]/memberships/[membershipId]/delete.js

@@ -0,0 +1,30 @@
+import { membershipParametersSchema, requireSession, useServerAuth } from "../../../../../../../index.js";
+import { defineRoute, requireSameOrigin, sendForbidden, sendOk, useParameters } from "@revojs/server";
+//#region src/organization/routes/auth/organizations/[organizationId]/memberships/[membershipId]/delete.ts
+var delete_default = defineRoute({ async fetch(scope) {
+	await requireSession(scope);
+	requireSameOrigin(scope);
+	const { organizationId, membershipId } = useParameters(scope, membershipParametersSchema);
+	await (await useServerAuth(scope)).transaction(async (database) => {
+		const session = await requireSession(scope);
+		if (!await database.getAccountById(session.accountId)) throw sendForbidden(scope);
+		const organization = await database.getOrganization(organizationId);
+		const membership = await database.getMembership(organizationId, session.accountId);
+		if (!organization || membership?.status !== "active" || organization.accountId !== session.accountId) throw sendForbidden(scope);
+		const member = await database.getMembershipById(organizationId, membershipId);
+		if (!member || member.accountId === organization.accountId) throw sendForbidden(scope);
+		await database.deleteMembership(organizationId, member.id);
+		await database.createTrace({
+			id: crypto.randomUUID(),
+			organizationId,
+			accountId: session.accountId,
+			action: "membership.remove",
+			subjectId: member.id,
+			content: "{}",
+			createdAt: /* @__PURE__ */ new Date()
+		});
+	});
+	return sendOk(scope);
+} });
+//#endregion
+export { delete_default as default };

package/dist/organization/routes/auth/organizations/[organizationId]/memberships/[membershipId]/patch.d.ts

@@ -0,0 +1,4 @@
+declare const _default: {
+    fetch(scope: import("revojs").Scope): Promise<Response>;
+};
+export default _default;

package/dist/organization/routes/auth/organizations/[organizationId]/memberships/[membershipId]/patch.js

@@ -0,0 +1,35 @@
+import { membershipParametersSchema, requireSession, useServerAuth } from "../../../../../../../index.js";
+import { defineRoute, requireSameOrigin, sendForbidden, sendOk, useBody, useParameters } from "@revojs/server";
+import { object, picklist } from "valibot";
+//#region src/organization/routes/auth/organizations/[organizationId]/memberships/[membershipId]/patch.ts
+var patch_default = defineRoute({ async fetch(scope) {
+	await requireSession(scope);
+	requireSameOrigin(scope);
+	const { organizationId, membershipId } = useParameters(scope, membershipParametersSchema);
+	const { status } = await useBody(scope, object({ status: picklist(["active", "suspended"]) }));
+	await (await useServerAuth(scope)).transaction(async (database) => {
+		const session = await requireSession(scope);
+		if (!await database.getAccountById(session.accountId)) throw sendForbidden(scope);
+		const organization = await database.getOrganization(organizationId);
+		const membership = await database.getMembership(organizationId, session.accountId);
+		if (!organization || membership?.status !== "active" || organization.accountId !== session.accountId) throw sendForbidden(scope);
+		const member = await database.getMembershipById(organizationId, membershipId);
+		if (!member || member.accountId === organization.accountId) throw sendForbidden(scope);
+		await database.updateMembership(organizationId, member.id, status);
+		await database.createTrace({
+			id: crypto.randomUUID(),
+			organizationId,
+			accountId: session.accountId,
+			action: `membership.${status}`,
+			subjectId: member.id,
+			content: JSON.stringify({
+				beforeStatus: member.status,
+				status
+			}),
+			createdAt: /* @__PURE__ */ new Date()
+		});
+	});
+	return sendOk(scope);
+} });
+//#endregion
+export { patch_default as default };

package/dist/organization/routes/auth/organizations/[organizationId]/memberships/get.d.ts

@@ -0,0 +1,4 @@
+declare const _default: {
+    fetch(scope: import("revojs").Scope): Promise<Response>;
+};
+export default _default;

package/dist/organization/routes/auth/organizations/[organizationId]/memberships/get.js

@@ -0,0 +1,14 @@
+import { organizationParametersSchema, requireSession, useServerAuth } from "../../../../../../index.js";
+import { defineRoute, sendForbidden, sendOk, useParameters } from "@revojs/server";
+//#region src/organization/routes/auth/organizations/[organizationId]/memberships/get.ts
+var get_default = defineRoute({ async fetch(scope) {
+	const session = await requireSession(scope);
+	const { organizationId } = useParameters(scope, organizationParametersSchema);
+	const storage = await useServerAuth(scope);
+	const organization = await storage.getOrganization(organizationId);
+	const membership = await storage.getMembership(organizationId, session.accountId);
+	if (!organization || membership?.status !== "active" || !await storage.getAccountById(session.accountId)) return sendForbidden(scope);
+	return sendOk(scope, await storage.listMemberships(organizationId));
+} });
+//#endregion
+export { get_default as default };

package/dist/organization/routes/auth/organizations/[organizationId]/ownership/post.d.ts

@@ -0,0 +1,4 @@
+declare const _default: {
+    fetch(scope: import("revojs").Scope): Promise<Response>;
+};
+export default _default;

package/dist/organization/routes/auth/organizations/[organizationId]/ownership/post.js

@@ -0,0 +1,38 @@
+import { authIdSchema, organizationParametersSchema, requireSession, useServerAuth } from "../../../../../../index.js";
+import { defineRoute, requireSameOrigin, sendForbidden, sendOk, useBody, useParameters } from "@revojs/server";
+import { object } from "valibot";
+//#region src/organization/routes/auth/organizations/[organizationId]/ownership/post.ts
+var post_default = defineRoute({ async fetch(scope) {
+	await requireSession(scope);
+	requireSameOrigin(scope);
+	const { organizationId } = useParameters(scope, organizationParametersSchema);
+	const { membershipId } = await useBody(scope, object({ membershipId: authIdSchema }));
+	await (await useServerAuth(scope)).transaction(async (database) => {
+		const session = await requireSession(scope);
+		if (!await database.getAccountById(session.accountId)) throw sendForbidden(scope);
+		const organization = await database.getOrganization(organizationId);
+		const membership = await database.getMembership(organizationId, session.accountId);
+		if (!organization || membership?.status !== "active" || organization.accountId !== session.accountId) throw sendForbidden(scope);
+		const member = await database.getMembershipById(organizationId, membershipId);
+		if (member?.status !== "active") throw sendForbidden(scope);
+		await database.updateOrganization(organizationId, {
+			name: organization.name,
+			accountId: member.accountId
+		});
+		await database.createTrace({
+			id: crypto.randomUUID(),
+			organizationId,
+			accountId: session.accountId,
+			action: "organization.transferOwnership",
+			subjectId: member.id,
+			content: JSON.stringify({
+				beforeAccountId: organization.accountId,
+				accountId: member.accountId
+			}),
+			createdAt: /* @__PURE__ */ new Date()
+		});
+	});
+	return sendOk(scope);
+} });
+//#endregion
+export { post_default as default };

package/dist/organization/routes/auth/organizations/[organizationId]/patch.d.ts

@@ -0,0 +1,4 @@
+declare const _default: {
+    fetch(scope: import("revojs").Scope): Promise<Response>;
+};
+export default _default;

package/dist/organization/routes/auth/organizations/[organizationId]/patch.js

@@ -0,0 +1,36 @@
+import { organizationNameSchema, organizationParametersSchema, requireSession, useServerAuth } from "../../../../../index.js";
+import { defineRoute, requireSameOrigin, sendForbidden, sendOk, useBody, useParameters } from "@revojs/server";
+import { object } from "valibot";
+//#region src/organization/routes/auth/organizations/[organizationId]/patch.ts
+var patch_default = defineRoute({ async fetch(scope) {
+	await requireSession(scope);
+	requireSameOrigin(scope);
+	const { organizationId } = useParameters(scope, organizationParametersSchema);
+	const { name } = await useBody(scope, object({ name: organizationNameSchema }));
+	await (await useServerAuth(scope)).transaction(async (database) => {
+		const session = await requireSession(scope);
+		if (!await database.getAccountById(session.accountId)) throw sendForbidden(scope);
+		const organization = await database.getOrganization(organizationId);
+		const membership = await database.getMembership(organizationId, session.accountId);
+		if (!organization || membership?.status !== "active" || organization.accountId !== session.accountId) throw sendForbidden(scope);
+		await database.updateOrganization(organizationId, {
+			name,
+			accountId: organization.accountId
+		});
+		await database.createTrace({
+			id: crypto.randomUUID(),
+			organizationId,
+			accountId: session.accountId,
+			action: "organization.update",
+			subjectId: organizationId,
+			content: JSON.stringify({
+				beforeName: organization.name,
+				name
+			}),
+			createdAt: /* @__PURE__ */ new Date()
+		});
+	});
+	return sendOk(scope);
+} });
+//#endregion
+export { patch_default as default };

package/dist/organization/routes/auth/organizations/[organizationId]/traces/get.d.ts

@@ -0,0 +1,4 @@
+declare const _default: {
+    fetch(scope: import("revojs").Scope): Promise<Response>;
+};
+export default _default;

package/dist/organization/routes/auth/organizations/[organizationId]/traces/get.js

@@ -0,0 +1,26 @@
+import { authIdSchema, organizationParametersSchema, requireSession, useServerAuth } from "../../../../../../index.js";
+import { defineRoute, sendForbidden, sendOk, useParameters, useQuery } from "@revojs/server";
+import { check, digits, maxValue, minValue, object, optional, pipe, string, toDate, toNumber } from "valibot";
+//#region src/organization/routes/auth/organizations/[organizationId]/traces/get.ts
+var limitSchema = pipe(string(), digits(), toNumber(), minValue(1), maxValue(500));
+var timestampSchema = pipe(string(), toDate());
+var querySchema = pipe(object({
+	limit: optional(limitSchema, "100"),
+	beforeCreatedAt: optional(timestampSchema),
+	beforeId: optional(authIdSchema)
+}), check((value) => Boolean(value.beforeCreatedAt) === Boolean(value.beforeId)));
+var get_default = defineRoute({ async fetch(scope) {
+	const session = await requireSession(scope);
+	const { organizationId } = useParameters(scope, organizationParametersSchema);
+	const query = useQuery(scope, querySchema);
+	const storage = await useServerAuth(scope);
+	const organization = await storage.getOrganization(organizationId);
+	const membership = await storage.getMembership(organizationId, session.accountId);
+	if (!organization || membership?.status !== "active" || organization.accountId !== session.accountId || !await storage.getAccountById(session.accountId)) return sendForbidden(scope);
+	return sendOk(scope, await storage.listTraces(organizationId, query.limit, query.beforeCreatedAt && query.beforeId ? {
+		createdAt: query.beforeCreatedAt,
+		id: query.beforeId
+	} : void 0));
+} });
+//#endregion
+export { get_default as default };

package/dist/organization/routes/auth/organizations/get.d.ts

@@ -0,0 +1,4 @@
+declare const _default: {
+    fetch(scope: import("revojs").Scope): Promise<Response>;
+};
+export default _default;

package/dist/organization/routes/auth/organizations/get.js

@@ -0,0 +1,11 @@
+import { requireSession, useServerAuth } from "../../../../index.js";
+import { defineRoute, sendForbidden, sendOk } from "@revojs/server";
+//#region src/organization/routes/auth/organizations/get.ts
+var get_default = defineRoute({ async fetch(scope) {
+	const session = await requireSession(scope);
+	const storage = await useServerAuth(scope);
+	if (!await storage.getAccountById(session.accountId)) return sendForbidden(scope);
+	return sendOk(scope, await storage.listOrganizations(session.accountId));
+} });
+//#endregion
+export { get_default as default };

package/dist/organization/routes/auth/organizations/post.d.ts

@@ -0,0 +1,4 @@
+declare const _default: {
+    fetch(scope: import("revojs").Scope): Promise<Response>;
+};
+export default _default;

package/dist/organization/routes/auth/organizations/post.js

@@ -0,0 +1,40 @@
+import { organizationNameSchema, requireSession, useServerAuth } from "../../../../index.js";
+import { defineRoute, requireSameOrigin, sendForbidden, sendOk, useBody } from "@revojs/server";
+import { object } from "valibot";
+//#region src/organization/routes/auth/organizations/post.ts
+var post_default = defineRoute({ async fetch(scope) {
+	await requireSession(scope);
+	requireSameOrigin(scope);
+	const { name } = await useBody(scope, object({ name: organizationNameSchema }));
+	const organization = await (await useServerAuth(scope)).transaction(async (database) => {
+		const session = await requireSession(scope);
+		if (!await database.getAccountById(session.accountId)) throw sendForbidden(scope);
+		const organization = {
+			id: crypto.randomUUID(),
+			name,
+			accountId: session.accountId,
+			createdAt: /* @__PURE__ */ new Date()
+		};
+		await database.createOrganization(organization);
+		await database.createMembership({
+			id: crypto.randomUUID(),
+			organizationId: organization.id,
+			accountId: session.accountId,
+			status: "active",
+			createdAt: /* @__PURE__ */ new Date()
+		});
+		await database.createTrace({
+			id: crypto.randomUUID(),
+			organizationId: organization.id,
+			accountId: session.accountId,
+			action: "organization.create",
+			subjectId: organization.id,
+			content: "{}",
+			createdAt: /* @__PURE__ */ new Date()
+		});
+		return organization;
+	});
+	return sendOk(scope, organization);
+} });
+//#endregion
+export { post_default as default };

package/dist/routes/auth/+middleware.d.ts

@@ -0,0 +1,4 @@
+declare const _default: {
+    fetch(scope: import("revojs").Scope, next: (() => import("@revojs/server").Result) | undefined): import("@revojs/server").Result | undefined;
+};
+export default _default;

package/dist/routes/auth/+middleware.js

@@ -0,0 +1,9 @@
+import { defineMiddleware, useServer } from "@revojs/server";
+//#region src/routes/auth/+middleware.ts
+var _middleware_default = defineMiddleware({ fetch(scope, next) {
+	const { response } = useServer(scope);
+	response.headers.set("Cache-Control", "no-store");
+	return next?.();
+} });
+//#endregion
+export { _middleware_default as default };

package/dist/routes/auth/sessions/delete.js

@@ -1,10 +1,9 @@
-import { DELETE_SESSION_HOOK, clearSession, getSession } from "../../../index.js";
+import { clearSession, getSession, useAccountStorage } from "../../../index.js";
 import { defineRoute, sendOk } from "@revojs/server";
-import { dispatchHook } from "revojs";
 //#region src/routes/auth/sessions/delete.ts
 var delete_default = defineRoute({ async fetch(scope) {
 	const session = await getSession(scope);
-	if (session) await dispatchHook(scope, DELETE_SESSION_HOOK, session);
+	if (session) await (await useAccountStorage(scope)).deleteSession(session.id, session.accountId);
 	clearSession(scope);
 	return sendOk(scope);
 } });