@robelest/convex-auth 0.0.4-preview.2 → 0.0.4-preview.21
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +67 -26
- package/dist/authorization/index.d.ts +63 -0
- package/dist/authorization/index.d.ts.map +1 -0
- package/dist/authorization/index.js +63 -0
- package/dist/authorization/index.js.map +1 -0
- package/dist/bin.js +6185 -0
- package/dist/client/core/types.d.ts +20 -0
- package/dist/client/core/types.d.ts.map +1 -0
- package/dist/client/index.d.ts +2 -299
- package/dist/client/index.d.ts.map +1 -1
- package/dist/client/index.js +407 -534
- package/dist/client/index.js.map +1 -1
- package/dist/component/_generated/api.d.ts +42 -0
- package/dist/component/_generated/api.d.ts.map +1 -1
- package/dist/component/_generated/api.js.map +1 -1
- package/dist/component/_generated/component.d.ts +2546 -90
- package/dist/component/_generated/component.d.ts.map +1 -1
- package/dist/component/client/core/types.d.ts +2 -0
- package/dist/component/client/index.d.ts +2 -0
- package/dist/component/convex.config.d.ts +2 -2
- package/dist/component/functions.d.ts +11 -9
- package/dist/component/functions.d.ts.map +1 -1
- package/dist/component/functions.js.map +1 -1
- package/dist/component/index.d.ts +7 -11
- package/dist/component/index.js +2 -3
- package/dist/component/model.d.ts +153 -0
- package/dist/component/model.d.ts.map +1 -0
- package/dist/component/model.js +349 -0
- package/dist/component/model.js.map +1 -0
- package/dist/component/providers/anonymous.d.ts +54 -0
- package/dist/component/providers/anonymous.d.ts.map +1 -0
- package/dist/component/providers/credentials.d.ts +5 -5
- package/dist/component/providers/credentials.d.ts.map +1 -1
- package/dist/component/providers/device.d.ts +67 -0
- package/dist/component/providers/device.d.ts.map +1 -0
- package/dist/component/providers/email.d.ts +62 -0
- package/dist/component/providers/email.d.ts.map +1 -0
- package/dist/component/providers/oauth.d.ts.map +1 -1
- package/dist/component/providers/oauth.js.map +1 -1
- package/dist/component/providers/passkey.d.ts +57 -0
- package/dist/component/providers/passkey.d.ts.map +1 -0
- package/dist/component/providers/password.d.ts +88 -0
- package/dist/component/providers/password.d.ts.map +1 -0
- package/dist/component/providers/phone.d.ts +48 -0
- package/dist/component/providers/phone.d.ts.map +1 -0
- package/dist/component/providers/sso.d.ts +50 -0
- package/dist/component/providers/sso.d.ts.map +1 -0
- package/dist/component/providers/totp.d.ts +45 -0
- package/dist/component/providers/totp.d.ts.map +1 -0
- package/dist/component/public/enterprise/audit.d.ts +73 -0
- package/dist/component/public/enterprise/audit.d.ts.map +1 -0
- package/dist/component/public/enterprise/audit.js +108 -0
- package/dist/component/public/enterprise/audit.js.map +1 -0
- package/dist/component/public/enterprise/core.d.ts +176 -0
- package/dist/component/public/enterprise/core.d.ts.map +1 -0
- package/dist/component/public/enterprise/core.js +292 -0
- package/dist/component/public/enterprise/core.js.map +1 -0
- package/dist/component/public/enterprise/domains.d.ts +174 -0
- package/dist/component/public/enterprise/domains.d.ts.map +1 -0
- package/dist/component/public/enterprise/domains.js +271 -0
- package/dist/component/public/enterprise/domains.js.map +1 -0
- package/dist/component/public/enterprise/scim.d.ts +245 -0
- package/dist/component/public/enterprise/scim.d.ts.map +1 -0
- package/dist/component/public/enterprise/scim.js +344 -0
- package/dist/component/public/enterprise/scim.js.map +1 -0
- package/dist/component/public/enterprise/secrets.d.ts +78 -0
- package/dist/component/public/enterprise/secrets.d.ts.map +1 -0
- package/dist/component/public/enterprise/secrets.js +118 -0
- package/dist/component/public/enterprise/secrets.js.map +1 -0
- package/dist/component/public/enterprise/webhooks.d.ts +211 -0
- package/dist/component/public/enterprise/webhooks.d.ts.map +1 -0
- package/dist/component/public/enterprise/webhooks.js +300 -0
- package/dist/component/public/enterprise/webhooks.js.map +1 -0
- package/dist/component/public/factors/devices.d.ts +157 -0
- package/dist/component/public/factors/devices.d.ts.map +1 -0
- package/dist/component/public/factors/devices.js +216 -0
- package/dist/component/public/factors/devices.js.map +1 -0
- package/dist/component/public/factors/passkeys.d.ts +175 -0
- package/dist/component/public/factors/passkeys.d.ts.map +1 -0
- package/dist/component/public/factors/passkeys.js +238 -0
- package/dist/component/public/factors/passkeys.js.map +1 -0
- package/dist/component/public/factors/totp.d.ts +189 -0
- package/dist/component/public/factors/totp.d.ts.map +1 -0
- package/dist/component/public/factors/totp.js +254 -0
- package/dist/component/public/factors/totp.js.map +1 -0
- package/dist/component/public/groups/core.d.ts +137 -0
- package/dist/component/public/groups/core.d.ts.map +1 -0
- package/dist/component/public/groups/core.js +321 -0
- package/dist/component/public/groups/core.js.map +1 -0
- package/dist/component/public/groups/invites.d.ts +217 -0
- package/dist/component/public/groups/invites.d.ts.map +1 -0
- package/dist/component/public/groups/invites.js +457 -0
- package/dist/component/public/groups/invites.js.map +1 -0
- package/dist/component/public/groups/members.d.ts +204 -0
- package/dist/component/public/groups/members.d.ts.map +1 -0
- package/dist/component/public/groups/members.js +355 -0
- package/dist/component/public/groups/members.js.map +1 -0
- package/dist/component/public/identity/accounts.d.ts +147 -0
- package/dist/component/public/identity/accounts.d.ts.map +1 -0
- package/dist/component/public/identity/accounts.js +200 -0
- package/dist/component/public/identity/accounts.js.map +1 -0
- package/dist/component/public/identity/codes.d.ts +104 -0
- package/dist/component/public/identity/codes.d.ts.map +1 -0
- package/dist/component/public/identity/codes.js +140 -0
- package/dist/component/public/identity/codes.js.map +1 -0
- package/dist/component/public/identity/sessions.d.ts +128 -0
- package/dist/component/public/identity/sessions.d.ts.map +1 -0
- package/dist/component/public/identity/sessions.js +192 -0
- package/dist/component/public/identity/sessions.js.map +1 -0
- package/dist/component/public/identity/tokens.d.ts +169 -0
- package/dist/component/public/identity/tokens.d.ts.map +1 -0
- package/dist/component/public/identity/tokens.js +227 -0
- package/dist/component/public/identity/tokens.js.map +1 -0
- package/dist/component/public/identity/users.d.ts +212 -0
- package/dist/component/public/identity/users.d.ts.map +1 -0
- package/dist/component/public/identity/users.js +311 -0
- package/dist/component/public/identity/users.js.map +1 -0
- package/dist/component/public/identity/verifiers.d.ts +116 -0
- package/dist/component/public/identity/verifiers.d.ts.map +1 -0
- package/dist/component/public/identity/verifiers.js +154 -0
- package/dist/component/public/identity/verifiers.js.map +1 -0
- package/dist/component/public/security/keys.d.ts +209 -0
- package/dist/component/public/security/keys.d.ts.map +1 -0
- package/dist/component/public/security/keys.js +319 -0
- package/dist/component/public/security/keys.js.map +1 -0
- package/dist/component/public/security/limits.d.ts +114 -0
- package/dist/component/public/security/limits.d.ts.map +1 -0
- package/dist/component/public/security/limits.js +169 -0
- package/dist/component/public/security/limits.js.map +1 -0
- package/dist/component/public.d.ts +24 -271
- package/dist/component/public.d.ts.map +1 -1
- package/dist/component/public.js +21 -1229
- package/dist/component/schema.d.ts +473 -110
- package/dist/component/schema.js +162 -73
- package/dist/component/schema.js.map +1 -1
- package/dist/component/server/auth.d.ts +318 -373
- package/dist/component/server/auth.d.ts.map +1 -1
- package/dist/component/server/auth.js +204 -123
- package/dist/component/server/auth.js.map +1 -1
- package/dist/component/server/authError.js +34 -0
- package/dist/component/server/authError.js.map +1 -0
- package/dist/component/server/{providers.js → config.js} +43 -12
- package/dist/component/server/config.js.map +1 -0
- package/dist/component/server/cookies.js +3 -0
- package/dist/component/server/cookies.js.map +1 -1
- package/dist/component/server/core.js +713 -0
- package/dist/component/server/core.js.map +1 -0
- package/dist/component/server/crypto.js +38 -0
- package/dist/component/server/crypto.js.map +1 -0
- package/dist/component/server/{implementation/db.js → db.js} +2 -1
- package/dist/component/server/db.js.map +1 -0
- package/dist/component/server/device.js +109 -0
- package/dist/component/server/device.js.map +1 -0
- package/dist/component/server/enterprise/config.js +46 -0
- package/dist/component/server/enterprise/config.js.map +1 -0
- package/dist/component/server/enterprise/domain.js +885 -0
- package/dist/component/server/enterprise/domain.js.map +1 -0
- package/dist/component/server/enterprise/http.js +766 -0
- package/dist/component/server/enterprise/http.js.map +1 -0
- package/dist/component/server/enterprise/oidc.js +248 -0
- package/dist/component/server/enterprise/oidc.js.map +1 -0
- package/dist/component/server/enterprise/policy.js +85 -0
- package/dist/component/server/enterprise/policy.js.map +1 -0
- package/dist/component/server/enterprise/saml.js +338 -0
- package/dist/component/server/enterprise/saml.js.map +1 -0
- package/dist/component/server/enterprise/scim.js +97 -0
- package/dist/component/server/enterprise/scim.js.map +1 -0
- package/dist/component/server/enterprise/shared.js +51 -0
- package/dist/component/server/enterprise/shared.js.map +1 -0
- package/dist/component/server/errors.d.ts +1 -0
- package/dist/component/server/errors.js +24 -16
- package/dist/component/server/errors.js.map +1 -1
- package/dist/component/server/http.js +288 -0
- package/dist/component/server/http.js.map +1 -0
- package/dist/component/server/identity.js +13 -0
- package/dist/component/server/identity.js.map +1 -0
- package/dist/{server/implementation → component/server}/keys.js +9 -31
- package/dist/component/server/keys.js.map +1 -0
- package/dist/component/server/limits.js +61 -0
- package/dist/component/server/limits.js.map +1 -0
- package/dist/component/server/mutations/account.js +44 -0
- package/dist/component/server/mutations/account.js.map +1 -0
- package/dist/component/server/{implementation/mutations → mutations}/code.js +7 -4
- package/dist/component/server/mutations/code.js.map +1 -0
- package/dist/component/server/mutations/invalidate.js +32 -0
- package/dist/component/server/mutations/invalidate.js.map +1 -0
- package/dist/component/server/mutations/oauth.js +110 -0
- package/dist/component/server/mutations/oauth.js.map +1 -0
- package/dist/component/server/mutations/refresh.js +119 -0
- package/dist/component/server/mutations/refresh.js.map +1 -0
- package/dist/component/server/mutations/register.js +83 -0
- package/dist/component/server/mutations/register.js.map +1 -0
- package/dist/component/server/mutations/retrieve.js +65 -0
- package/dist/component/server/mutations/retrieve.js.map +1 -0
- package/dist/component/server/mutations/signature.js +32 -0
- package/dist/component/server/mutations/signature.js.map +1 -0
- package/dist/component/server/{implementation/mutations → mutations}/signin.js +2 -2
- package/dist/component/server/mutations/signin.js.map +1 -0
- package/dist/component/server/mutations/signout.js +27 -0
- package/dist/component/server/mutations/signout.js.map +1 -0
- package/dist/component/server/mutations/store/refs.js +15 -0
- package/dist/component/server/mutations/store/refs.js.map +1 -0
- package/dist/component/server/mutations/store.js +85 -0
- package/dist/component/server/mutations/store.js.map +1 -0
- package/dist/component/server/mutations/verifier.js +18 -0
- package/dist/component/server/mutations/verifier.js.map +1 -0
- package/dist/component/server/mutations/verify.js +98 -0
- package/dist/component/server/mutations/verify.js.map +1 -0
- package/dist/component/server/oauth.js +106 -60
- package/dist/component/server/oauth.js.map +1 -1
- package/dist/component/server/passkey.js +328 -0
- package/dist/component/server/passkey.js.map +1 -0
- package/dist/{server/implementation → component/server}/redirects.js +13 -11
- package/dist/component/server/redirects.js.map +1 -0
- package/dist/component/server/refresh.js +96 -0
- package/dist/component/server/refresh.js.map +1 -0
- package/dist/component/server/runtime.d.ts +136 -0
- package/dist/component/server/runtime.d.ts.map +1 -0
- package/dist/component/server/runtime.js +413 -0
- package/dist/component/server/runtime.js.map +1 -0
- package/dist/{server/implementation → component/server}/sessions.js +14 -8
- package/dist/component/server/sessions.js.map +1 -0
- package/dist/component/server/signin.js +201 -0
- package/dist/component/server/signin.js.map +1 -0
- package/dist/component/server/tokens.js +17 -0
- package/dist/component/server/tokens.js.map +1 -0
- package/dist/component/server/totp.js +148 -0
- package/dist/component/server/totp.js.map +1 -0
- package/dist/component/server/types.d.ts +387 -298
- package/dist/component/server/types.d.ts.map +1 -1
- package/dist/component/server/{implementation/types.js → types.js} +1 -1
- package/dist/component/server/types.js.map +1 -0
- package/dist/component/server/{implementation/users.js → users.js} +54 -35
- package/dist/component/server/users.js.map +1 -0
- package/dist/component/server/utils.js +110 -4
- package/dist/component/server/utils.js.map +1 -1
- package/dist/core/types.d.ts +369 -0
- package/dist/core/types.d.ts.map +1 -0
- package/dist/factors/device.js +105 -0
- package/dist/factors/device.js.map +1 -0
- package/dist/factors/passkey.js +181 -0
- package/dist/factors/passkey.js.map +1 -0
- package/dist/factors/totp.js +122 -0
- package/dist/factors/totp.js.map +1 -0
- package/dist/providers/anonymous.d.ts +3 -9
- package/dist/providers/anonymous.d.ts.map +1 -1
- package/dist/providers/anonymous.js +1 -18
- package/dist/providers/anonymous.js.map +1 -1
- package/dist/providers/credentials.d.ts +8 -10
- package/dist/providers/credentials.d.ts.map +1 -1
- package/dist/providers/credentials.js +3 -5
- package/dist/providers/credentials.js.map +1 -1
- package/dist/providers/device.d.ts +18 -10
- package/dist/providers/device.d.ts.map +1 -1
- package/dist/providers/device.js +4 -8
- package/dist/providers/device.js.map +1 -1
- package/dist/providers/email.d.ts +50 -23
- package/dist/providers/email.d.ts.map +1 -1
- package/dist/providers/email.js +58 -34
- package/dist/providers/email.js.map +1 -1
- package/dist/providers/index.d.ts +7 -3
- package/dist/providers/index.js +4 -1
- package/dist/providers/oauth.d.ts.map +1 -1
- package/dist/providers/oauth.js.map +1 -1
- package/dist/providers/passkey.d.ts +12 -9
- package/dist/providers/passkey.d.ts.map +1 -1
- package/dist/providers/passkey.js +1 -7
- package/dist/providers/passkey.js.map +1 -1
- package/dist/providers/password.d.ts +6 -12
- package/dist/providers/password.d.ts.map +1 -1
- package/dist/providers/password.js +189 -89
- package/dist/providers/password.js.map +1 -1
- package/dist/providers/phone.d.ts +40 -11
- package/dist/providers/phone.d.ts.map +1 -1
- package/dist/providers/phone.js +52 -21
- package/dist/providers/phone.js.map +1 -1
- package/dist/providers/sso.d.ts +50 -0
- package/dist/providers/sso.d.ts.map +1 -0
- package/dist/providers/sso.js +34 -0
- package/dist/providers/sso.js.map +1 -0
- package/dist/providers/totp.d.ts +12 -9
- package/dist/providers/totp.d.ts.map +1 -1
- package/dist/providers/totp.js +1 -7
- package/dist/providers/totp.js.map +1 -1
- package/dist/runtime/browser.js +68 -0
- package/dist/runtime/browser.js.map +1 -0
- package/dist/runtime/invite.js +51 -0
- package/dist/runtime/invite.js.map +1 -0
- package/dist/runtime/proxy.js +70 -0
- package/dist/runtime/proxy.js.map +1 -0
- package/dist/runtime/storage.js +37 -0
- package/dist/runtime/storage.js.map +1 -0
- package/dist/server/auth.d.ts +335 -370
- package/dist/server/auth.d.ts.map +1 -1
- package/dist/server/auth.js +204 -123
- package/dist/server/auth.js.map +1 -1
- package/dist/server/authError.d.ts +46 -0
- package/dist/server/authError.d.ts.map +1 -0
- package/dist/server/authError.js +34 -0
- package/dist/server/authError.js.map +1 -0
- package/dist/server/config.d.ts +1 -0
- package/dist/server/{providers.js → config.js} +43 -12
- package/dist/server/config.js.map +1 -0
- package/dist/server/cookies.d.ts +1 -38
- package/dist/server/cookies.js +3 -0
- package/dist/server/cookies.js.map +1 -1
- package/dist/server/core.d.ts +1436 -0
- package/dist/server/core.d.ts.map +1 -0
- package/dist/server/core.js +713 -0
- package/dist/server/core.js.map +1 -0
- package/dist/server/crypto.d.ts +8 -0
- package/dist/server/crypto.d.ts.map +1 -0
- package/dist/server/crypto.js +38 -0
- package/dist/server/crypto.js.map +1 -0
- package/dist/server/db.d.ts +1 -0
- package/dist/server/{implementation/db.js → db.js} +2 -1
- package/dist/server/db.js.map +1 -0
- package/dist/server/device.d.ts +1 -0
- package/dist/server/device.js +109 -0
- package/dist/server/device.js.map +1 -0
- package/dist/server/enterprise/config.d.ts +1 -0
- package/dist/server/enterprise/config.js +46 -0
- package/dist/server/enterprise/config.js.map +1 -0
- package/dist/server/enterprise/domain.d.ts +409 -0
- package/dist/server/enterprise/domain.d.ts.map +1 -0
- package/dist/server/enterprise/domain.js +885 -0
- package/dist/server/enterprise/domain.js.map +1 -0
- package/dist/server/enterprise/http.d.ts +26 -0
- package/dist/server/enterprise/http.d.ts.map +1 -0
- package/dist/server/enterprise/http.js +766 -0
- package/dist/server/enterprise/http.js.map +1 -0
- package/dist/server/enterprise/oidc.d.ts +1 -0
- package/dist/server/enterprise/oidc.js +248 -0
- package/dist/server/enterprise/oidc.js.map +1 -0
- package/dist/server/enterprise/policy.d.ts +1 -0
- package/dist/server/enterprise/policy.js +85 -0
- package/dist/server/enterprise/policy.js.map +1 -0
- package/dist/server/enterprise/saml.d.ts +1 -0
- package/dist/server/enterprise/saml.js +338 -0
- package/dist/server/enterprise/saml.js.map +1 -0
- package/dist/server/enterprise/scim.d.ts +1 -0
- package/dist/server/enterprise/scim.js +97 -0
- package/dist/server/enterprise/scim.js.map +1 -0
- package/dist/server/enterprise/shared.d.ts +5 -0
- package/dist/server/enterprise/shared.d.ts.map +1 -0
- package/dist/server/enterprise/shared.js +51 -0
- package/dist/server/enterprise/shared.js.map +1 -0
- package/dist/server/enterprise/validators.d.ts +1 -0
- package/dist/server/enterprise/validators.js +60 -0
- package/dist/server/enterprise/validators.js.map +1 -0
- package/dist/server/errors.d.ts +33 -1
- package/dist/server/errors.d.ts.map +1 -1
- package/dist/server/errors.js +44 -1
- package/dist/server/errors.js.map +1 -1
- package/dist/server/http.d.ts +59 -0
- package/dist/server/http.d.ts.map +1 -0
- package/dist/server/http.js +288 -0
- package/dist/server/http.js.map +1 -0
- package/dist/server/identity.d.ts +1 -0
- package/dist/server/identity.js +13 -0
- package/dist/server/identity.js.map +1 -0
- package/dist/server/index.d.ts +4 -182
- package/dist/server/index.js +4 -376
- package/dist/server/keys.d.ts +1 -0
- package/dist/{component/server/implementation → server}/keys.js +9 -31
- package/dist/server/keys.js.map +1 -0
- package/dist/server/limits.d.ts +1 -0
- package/dist/server/limits.js +61 -0
- package/dist/server/limits.js.map +1 -0
- package/dist/server/mounts.d.ts +647 -0
- package/dist/server/mounts.d.ts.map +1 -0
- package/dist/server/mounts.js +643 -0
- package/dist/server/mounts.js.map +1 -0
- package/dist/server/mutations/account.d.ts +30 -0
- package/dist/server/mutations/account.d.ts.map +1 -0
- package/dist/server/mutations/account.js +44 -0
- package/dist/server/mutations/account.js.map +1 -0
- package/dist/server/mutations/code.d.ts +30 -0
- package/dist/server/mutations/code.d.ts.map +1 -0
- package/dist/server/{implementation/mutations → mutations}/code.js +7 -4
- package/dist/server/mutations/code.js.map +1 -0
- package/dist/server/mutations/index.d.ts +14 -0
- package/dist/server/mutations/index.js +15 -0
- package/dist/server/mutations/invalidate.d.ts +20 -0
- package/dist/server/mutations/invalidate.d.ts.map +1 -0
- package/dist/server/mutations/invalidate.js +32 -0
- package/dist/server/mutations/invalidate.js.map +1 -0
- package/dist/server/mutations/oauth.d.ts +28 -0
- package/dist/server/mutations/oauth.d.ts.map +1 -0
- package/dist/server/mutations/oauth.js +110 -0
- package/dist/server/mutations/oauth.js.map +1 -0
- package/dist/server/mutations/refresh.d.ts +21 -0
- package/dist/server/mutations/refresh.d.ts.map +1 -0
- package/dist/server/mutations/refresh.js +119 -0
- package/dist/server/mutations/refresh.js.map +1 -0
- package/dist/server/mutations/register.d.ts +38 -0
- package/dist/server/mutations/register.d.ts.map +1 -0
- package/dist/server/mutations/register.js +83 -0
- package/dist/server/mutations/register.js.map +1 -0
- package/dist/server/mutations/retrieve.d.ts +33 -0
- package/dist/server/mutations/retrieve.d.ts.map +1 -0
- package/dist/server/mutations/retrieve.js +65 -0
- package/dist/server/mutations/retrieve.js.map +1 -0
- package/dist/server/mutations/signature.d.ts +22 -0
- package/dist/server/mutations/signature.d.ts.map +1 -0
- package/dist/server/mutations/signature.js +32 -0
- package/dist/server/mutations/signature.js.map +1 -0
- package/dist/server/mutations/signin.d.ts +22 -0
- package/dist/server/mutations/signin.d.ts.map +1 -0
- package/dist/server/{implementation/mutations → mutations}/signin.js +2 -2
- package/dist/server/mutations/signin.js.map +1 -0
- package/dist/server/mutations/signout.d.ts +16 -0
- package/dist/server/mutations/signout.d.ts.map +1 -0
- package/dist/server/mutations/signout.js +27 -0
- package/dist/server/mutations/signout.js.map +1 -0
- package/dist/server/mutations/store/refs.d.ts +12 -0
- package/dist/server/mutations/store/refs.d.ts.map +1 -0
- package/dist/server/mutations/store/refs.js +15 -0
- package/dist/server/mutations/store/refs.js.map +1 -0
- package/dist/server/mutations/store.d.ts +306 -0
- package/dist/server/mutations/store.d.ts.map +1 -0
- package/dist/server/mutations/store.js +85 -0
- package/dist/server/mutations/store.js.map +1 -0
- package/dist/server/mutations/verifier.d.ts +13 -0
- package/dist/server/mutations/verifier.d.ts.map +1 -0
- package/dist/server/mutations/verifier.js +18 -0
- package/dist/server/mutations/verifier.js.map +1 -0
- package/dist/server/mutations/verify.d.ts +26 -0
- package/dist/server/mutations/verify.d.ts.map +1 -0
- package/dist/server/mutations/verify.js +98 -0
- package/dist/server/mutations/verify.js.map +1 -0
- package/dist/server/oauth.d.ts +1 -48
- package/dist/server/oauth.js +107 -64
- package/dist/server/oauth.js.map +1 -1
- package/dist/server/passkey.d.ts +27 -0
- package/dist/server/passkey.d.ts.map +1 -0
- package/dist/server/passkey.js +328 -0
- package/dist/server/passkey.js.map +1 -0
- package/dist/server/redirects.d.ts +1 -0
- package/dist/{component/server/implementation → server}/redirects.js +13 -11
- package/dist/server/redirects.js.map +1 -0
- package/dist/server/refresh.d.ts +1 -0
- package/dist/server/refresh.js +96 -0
- package/dist/server/refresh.js.map +1 -0
- package/dist/server/runtime.d.ts +136 -0
- package/dist/server/runtime.d.ts.map +1 -0
- package/dist/server/runtime.js +413 -0
- package/dist/server/runtime.js.map +1 -0
- package/dist/server/sessions.d.ts +1 -0
- package/dist/{component/server/implementation → server}/sessions.js +14 -8
- package/dist/server/sessions.js.map +1 -0
- package/dist/server/signin.d.ts +1 -0
- package/dist/server/signin.js +201 -0
- package/dist/server/signin.js.map +1 -0
- package/dist/server/ssr.d.ts +226 -0
- package/dist/server/ssr.d.ts.map +1 -0
- package/dist/server/ssr.js +786 -0
- package/dist/server/ssr.js.map +1 -0
- package/dist/server/templates.d.ts +1 -21
- package/dist/server/templates.js +2 -1
- package/dist/server/templates.js.map +1 -1
- package/dist/server/tokens.d.ts +1 -0
- package/dist/server/tokens.js +17 -0
- package/dist/server/tokens.js.map +1 -0
- package/dist/server/totp.d.ts +1 -0
- package/dist/server/totp.js +148 -0
- package/dist/server/totp.js.map +1 -0
- package/dist/server/types.d.ts +498 -306
- package/dist/server/types.d.ts.map +1 -1
- package/dist/server/types.js +108 -1
- package/dist/server/types.js.map +1 -0
- package/dist/server/users.d.ts +1 -0
- package/dist/server/{implementation/users.js → users.js} +54 -35
- package/dist/server/users.js.map +1 -0
- package/dist/server/utils.d.ts +1 -6
- package/dist/server/utils.js +110 -4
- package/dist/server/utils.js.map +1 -1
- package/package.json +49 -46
- package/src/authorization/index.ts +83 -0
- package/src/cli/bin.ts +5 -0
- package/src/cli/command.ts +6 -5
- package/src/cli/index.ts +456 -248
- package/src/cli/keys.ts +3 -0
- package/src/client/core/types.ts +437 -0
- package/src/client/factors/device.ts +160 -0
- package/src/client/factors/passkey.ts +282 -0
- package/src/client/factors/totp.ts +150 -0
- package/src/client/index.ts +745 -989
- package/src/client/runtime/browser.ts +112 -0
- package/src/client/runtime/invite.ts +65 -0
- package/src/client/runtime/proxy.ts +111 -0
- package/src/client/runtime/storage.ts +79 -0
- package/src/component/_generated/api.ts +42 -0
- package/src/component/_generated/component.ts +3123 -102
- package/src/component/functions.ts +38 -22
- package/src/component/index.ts +10 -20
- package/src/component/model.ts +449 -0
- package/src/component/public/enterprise/audit.ts +120 -0
- package/src/component/public/enterprise/core.ts +354 -0
- package/src/component/public/enterprise/domains.ts +323 -0
- package/src/component/public/enterprise/scim.ts +396 -0
- package/src/component/public/enterprise/secrets.ts +132 -0
- package/src/component/public/enterprise/webhooks.ts +306 -0
- package/src/component/public/factors/devices.ts +223 -0
- package/src/component/public/factors/passkeys.ts +242 -0
- package/src/component/public/factors/totp.ts +258 -0
- package/src/component/public/groups/core.ts +481 -0
- package/src/component/public/groups/invites.ts +602 -0
- package/src/component/public/groups/members.ts +409 -0
- package/src/component/public/identity/accounts.ts +206 -0
- package/src/component/public/identity/codes.ts +148 -0
- package/src/component/public/identity/sessions.ts +209 -0
- package/src/component/public/identity/tokens.ts +250 -0
- package/src/component/public/identity/users.ts +354 -0
- package/src/component/public/identity/verifiers.ts +157 -0
- package/src/component/public/security/keys.ts +365 -0
- package/src/component/public/security/limits.ts +173 -0
- package/src/component/public.ts +26 -1766
- package/src/component/schema.ts +273 -100
- package/src/providers/anonymous.ts +10 -20
- package/src/providers/credentials.ts +14 -22
- package/src/providers/device.ts +3 -14
- package/src/providers/email.ts +83 -47
- package/src/providers/index.ts +7 -0
- package/src/providers/oauth.ts +5 -3
- package/src/providers/passkey.ts +0 -13
- package/src/providers/password.ts +307 -130
- package/src/providers/phone.ts +81 -37
- package/src/providers/sso.ts +54 -0
- package/src/providers/totp.ts +0 -13
- package/src/samlify.d.ts +53 -0
- package/src/server/auth.ts +701 -247
- package/src/server/authError.ts +44 -0
- package/src/server/{providers.ts → config.ts} +84 -15
- package/src/server/cookies.ts +8 -1
- package/src/server/core.ts +2095 -0
- package/src/server/crypto.ts +88 -0
- package/src/server/{implementation/db.ts → db.ts} +90 -15
- package/src/server/device.ts +221 -0
- package/src/server/enterprise/config.ts +51 -0
- package/src/server/enterprise/domain.ts +1751 -0
- package/src/server/enterprise/http.ts +1324 -0
- package/src/server/enterprise/oidc.ts +500 -0
- package/src/server/enterprise/policy.ts +128 -0
- package/src/server/enterprise/saml.ts +578 -0
- package/src/server/enterprise/scim.ts +135 -0
- package/src/server/enterprise/shared.ts +134 -0
- package/src/server/enterprise/validators.ts +93 -0
- package/src/server/errors.ts +130 -119
- package/src/server/http.ts +531 -0
- package/src/server/identity.ts +18 -0
- package/src/server/index.ts +32 -650
- package/src/server/{implementation/keys.ts → keys.ts} +16 -44
- package/src/server/limits.ts +134 -0
- package/src/server/mounts.ts +948 -0
- package/src/server/mutations/account.ts +76 -0
- package/src/server/{implementation/mutations → mutations}/code.ts +22 -11
- package/src/server/mutations/index.ts +13 -0
- package/src/server/mutations/invalidate.ts +50 -0
- package/src/server/mutations/oauth.ts +237 -0
- package/src/server/mutations/refresh.ts +298 -0
- package/src/server/mutations/register.ts +200 -0
- package/src/server/mutations/retrieve.ts +109 -0
- package/src/server/mutations/signature.ts +50 -0
- package/src/server/{implementation/mutations → mutations}/signin.ts +9 -7
- package/src/server/mutations/signout.ts +43 -0
- package/src/server/mutations/store/refs.ts +10 -0
- package/src/server/mutations/store.ts +138 -0
- package/src/server/mutations/verifier.ts +34 -0
- package/src/server/mutations/verify.ts +202 -0
- package/src/server/oauth.ts +243 -131
- package/src/server/passkey.ts +784 -0
- package/src/server/{implementation/redirects.ts → redirects.ts} +21 -16
- package/src/server/refresh.ts +222 -0
- package/src/server/runtime.ts +880 -0
- package/src/server/{implementation/sessions.ts → sessions.ts} +33 -25
- package/src/server/signin.ts +438 -0
- package/src/server/ssr.ts +1764 -0
- package/src/server/templates.ts +8 -3
- package/src/server/{implementation/tokens.ts → tokens.ts} +11 -5
- package/src/server/totp.ts +349 -0
- package/src/server/types.ts +972 -207
- package/src/server/{implementation/users.ts → users.ts} +129 -75
- package/src/server/utils.ts +192 -5
- package/src/test.ts +28 -4
- package/dist/bin.cjs +0 -27757
- package/dist/component/providers/email.js +0 -47
- package/dist/component/providers/email.js.map +0 -1
- package/dist/component/public.js.map +0 -1
- package/dist/component/server/implementation/db.js.map +0 -1
- package/dist/component/server/implementation/device.js +0 -135
- package/dist/component/server/implementation/device.js.map +0 -1
- package/dist/component/server/implementation/index.d.ts +0 -870
- package/dist/component/server/implementation/index.d.ts.map +0 -1
- package/dist/component/server/implementation/index.js +0 -610
- package/dist/component/server/implementation/index.js.map +0 -1
- package/dist/component/server/implementation/keys.js.map +0 -1
- package/dist/component/server/implementation/mutations/account.js +0 -39
- package/dist/component/server/implementation/mutations/account.js.map +0 -1
- package/dist/component/server/implementation/mutations/code.js.map +0 -1
- package/dist/component/server/implementation/mutations/index.js +0 -70
- package/dist/component/server/implementation/mutations/index.js.map +0 -1
- package/dist/component/server/implementation/mutations/invalidate.js +0 -29
- package/dist/component/server/implementation/mutations/invalidate.js.map +0 -1
- package/dist/component/server/implementation/mutations/oauth.js +0 -51
- package/dist/component/server/implementation/mutations/oauth.js.map +0 -1
- package/dist/component/server/implementation/mutations/refresh.js +0 -85
- package/dist/component/server/implementation/mutations/refresh.js.map +0 -1
- package/dist/component/server/implementation/mutations/register.js +0 -65
- package/dist/component/server/implementation/mutations/register.js.map +0 -1
- package/dist/component/server/implementation/mutations/retrieve.js +0 -50
- package/dist/component/server/implementation/mutations/retrieve.js.map +0 -1
- package/dist/component/server/implementation/mutations/signature.js +0 -27
- package/dist/component/server/implementation/mutations/signature.js.map +0 -1
- package/dist/component/server/implementation/mutations/signin.js.map +0 -1
- package/dist/component/server/implementation/mutations/signout.js +0 -27
- package/dist/component/server/implementation/mutations/signout.js.map +0 -1
- package/dist/component/server/implementation/mutations/store.js +0 -12
- package/dist/component/server/implementation/mutations/store.js.map +0 -1
- package/dist/component/server/implementation/mutations/verifier.js +0 -16
- package/dist/component/server/implementation/mutations/verifier.js.map +0 -1
- package/dist/component/server/implementation/mutations/verify.js +0 -105
- package/dist/component/server/implementation/mutations/verify.js.map +0 -1
- package/dist/component/server/implementation/passkey.js +0 -307
- package/dist/component/server/implementation/passkey.js.map +0 -1
- package/dist/component/server/implementation/provider.js +0 -19
- package/dist/component/server/implementation/provider.js.map +0 -1
- package/dist/component/server/implementation/ratelimit.js +0 -48
- package/dist/component/server/implementation/ratelimit.js.map +0 -1
- package/dist/component/server/implementation/redirects.js.map +0 -1
- package/dist/component/server/implementation/refresh.js +0 -109
- package/dist/component/server/implementation/refresh.js.map +0 -1
- package/dist/component/server/implementation/sessions.js.map +0 -1
- package/dist/component/server/implementation/signin.js +0 -148
- package/dist/component/server/implementation/signin.js.map +0 -1
- package/dist/component/server/implementation/tokens.js +0 -15
- package/dist/component/server/implementation/tokens.js.map +0 -1
- package/dist/component/server/implementation/totp.js +0 -142
- package/dist/component/server/implementation/totp.js.map +0 -1
- package/dist/component/server/implementation/types.d.ts +0 -42
- package/dist/component/server/implementation/types.d.ts.map +0 -1
- package/dist/component/server/implementation/types.js.map +0 -1
- package/dist/component/server/implementation/users.js.map +0 -1
- package/dist/component/server/implementation/utils.js +0 -56
- package/dist/component/server/implementation/utils.js.map +0 -1
- package/dist/component/server/providers.js.map +0 -1
- package/dist/component/server/templates.js +0 -84
- package/dist/component/server/templates.js.map +0 -1
- package/dist/server/cookies.d.ts.map +0 -1
- package/dist/server/implementation/db.d.ts +0 -86
- package/dist/server/implementation/db.d.ts.map +0 -1
- package/dist/server/implementation/db.js.map +0 -1
- package/dist/server/implementation/device.d.ts +0 -30
- package/dist/server/implementation/device.d.ts.map +0 -1
- package/dist/server/implementation/device.js +0 -135
- package/dist/server/implementation/device.js.map +0 -1
- package/dist/server/implementation/index.d.ts +0 -870
- package/dist/server/implementation/index.d.ts.map +0 -1
- package/dist/server/implementation/index.js +0 -610
- package/dist/server/implementation/index.js.map +0 -1
- package/dist/server/implementation/keys.d.ts +0 -66
- package/dist/server/implementation/keys.d.ts.map +0 -1
- package/dist/server/implementation/keys.js.map +0 -1
- package/dist/server/implementation/mutations/account.d.ts +0 -27
- package/dist/server/implementation/mutations/account.d.ts.map +0 -1
- package/dist/server/implementation/mutations/account.js +0 -39
- package/dist/server/implementation/mutations/account.js.map +0 -1
- package/dist/server/implementation/mutations/code.d.ts +0 -29
- package/dist/server/implementation/mutations/code.d.ts.map +0 -1
- package/dist/server/implementation/mutations/code.js.map +0 -1
- package/dist/server/implementation/mutations/index.d.ts +0 -310
- package/dist/server/implementation/mutations/index.d.ts.map +0 -1
- package/dist/server/implementation/mutations/index.js +0 -70
- package/dist/server/implementation/mutations/index.js.map +0 -1
- package/dist/server/implementation/mutations/invalidate.d.ts +0 -18
- package/dist/server/implementation/mutations/invalidate.d.ts.map +0 -1
- package/dist/server/implementation/mutations/invalidate.js +0 -29
- package/dist/server/implementation/mutations/invalidate.js.map +0 -1
- package/dist/server/implementation/mutations/oauth.d.ts +0 -23
- package/dist/server/implementation/mutations/oauth.d.ts.map +0 -1
- package/dist/server/implementation/mutations/oauth.js +0 -51
- package/dist/server/implementation/mutations/oauth.js.map +0 -1
- package/dist/server/implementation/mutations/refresh.d.ts +0 -20
- package/dist/server/implementation/mutations/refresh.d.ts.map +0 -1
- package/dist/server/implementation/mutations/refresh.js +0 -85
- package/dist/server/implementation/mutations/refresh.js.map +0 -1
- package/dist/server/implementation/mutations/register.d.ts +0 -37
- package/dist/server/implementation/mutations/register.d.ts.map +0 -1
- package/dist/server/implementation/mutations/register.js +0 -65
- package/dist/server/implementation/mutations/register.js.map +0 -1
- package/dist/server/implementation/mutations/retrieve.d.ts +0 -31
- package/dist/server/implementation/mutations/retrieve.d.ts.map +0 -1
- package/dist/server/implementation/mutations/retrieve.js +0 -50
- package/dist/server/implementation/mutations/retrieve.js.map +0 -1
- package/dist/server/implementation/mutations/signature.d.ts +0 -19
- package/dist/server/implementation/mutations/signature.d.ts.map +0 -1
- package/dist/server/implementation/mutations/signature.js +0 -27
- package/dist/server/implementation/mutations/signature.js.map +0 -1
- package/dist/server/implementation/mutations/signin.d.ts +0 -21
- package/dist/server/implementation/mutations/signin.d.ts.map +0 -1
- package/dist/server/implementation/mutations/signin.js.map +0 -1
- package/dist/server/implementation/mutations/signout.d.ts +0 -14
- package/dist/server/implementation/mutations/signout.d.ts.map +0 -1
- package/dist/server/implementation/mutations/signout.js +0 -27
- package/dist/server/implementation/mutations/signout.js.map +0 -1
- package/dist/server/implementation/mutations/store.d.ts +0 -11
- package/dist/server/implementation/mutations/store.d.ts.map +0 -1
- package/dist/server/implementation/mutations/store.js +0 -12
- package/dist/server/implementation/mutations/store.js.map +0 -1
- package/dist/server/implementation/mutations/verifier.d.ts +0 -11
- package/dist/server/implementation/mutations/verifier.d.ts.map +0 -1
- package/dist/server/implementation/mutations/verifier.js +0 -16
- package/dist/server/implementation/mutations/verifier.js.map +0 -1
- package/dist/server/implementation/mutations/verify.d.ts +0 -25
- package/dist/server/implementation/mutations/verify.d.ts.map +0 -1
- package/dist/server/implementation/mutations/verify.js +0 -105
- package/dist/server/implementation/mutations/verify.js.map +0 -1
- package/dist/server/implementation/passkey.d.ts +0 -24
- package/dist/server/implementation/passkey.d.ts.map +0 -1
- package/dist/server/implementation/passkey.js +0 -307
- package/dist/server/implementation/passkey.js.map +0 -1
- package/dist/server/implementation/provider.d.ts +0 -10
- package/dist/server/implementation/provider.d.ts.map +0 -1
- package/dist/server/implementation/provider.js +0 -19
- package/dist/server/implementation/provider.js.map +0 -1
- package/dist/server/implementation/ratelimit.d.ts +0 -10
- package/dist/server/implementation/ratelimit.d.ts.map +0 -1
- package/dist/server/implementation/ratelimit.js +0 -48
- package/dist/server/implementation/ratelimit.js.map +0 -1
- package/dist/server/implementation/redirects.d.ts +0 -10
- package/dist/server/implementation/redirects.d.ts.map +0 -1
- package/dist/server/implementation/redirects.js.map +0 -1
- package/dist/server/implementation/refresh.d.ts +0 -37
- package/dist/server/implementation/refresh.d.ts.map +0 -1
- package/dist/server/implementation/refresh.js +0 -109
- package/dist/server/implementation/refresh.js.map +0 -1
- package/dist/server/implementation/sessions.d.ts +0 -29
- package/dist/server/implementation/sessions.d.ts.map +0 -1
- package/dist/server/implementation/sessions.js.map +0 -1
- package/dist/server/implementation/signin.d.ts +0 -55
- package/dist/server/implementation/signin.d.ts.map +0 -1
- package/dist/server/implementation/signin.js +0 -148
- package/dist/server/implementation/signin.js.map +0 -1
- package/dist/server/implementation/tokens.d.ts +0 -11
- package/dist/server/implementation/tokens.d.ts.map +0 -1
- package/dist/server/implementation/tokens.js +0 -15
- package/dist/server/implementation/tokens.js.map +0 -1
- package/dist/server/implementation/totp.d.ts +0 -31
- package/dist/server/implementation/totp.d.ts.map +0 -1
- package/dist/server/implementation/totp.js +0 -142
- package/dist/server/implementation/totp.js.map +0 -1
- package/dist/server/implementation/types.d.ts +0 -189
- package/dist/server/implementation/types.d.ts.map +0 -1
- package/dist/server/implementation/types.js +0 -97
- package/dist/server/implementation/types.js.map +0 -1
- package/dist/server/implementation/users.d.ts +0 -30
- package/dist/server/implementation/users.d.ts.map +0 -1
- package/dist/server/implementation/users.js.map +0 -1
- package/dist/server/implementation/utils.d.ts +0 -19
- package/dist/server/implementation/utils.d.ts.map +0 -1
- package/dist/server/implementation/utils.js +0 -56
- package/dist/server/implementation/utils.js.map +0 -1
- package/dist/server/index.d.ts.map +0 -1
- package/dist/server/index.js.map +0 -1
- package/dist/server/oauth.d.ts.map +0 -1
- package/dist/server/providers.d.ts +0 -72
- package/dist/server/providers.d.ts.map +0 -1
- package/dist/server/providers.js.map +0 -1
- package/dist/server/templates.d.ts.map +0 -1
- package/dist/server/utils.d.ts.map +0 -1
- package/dist/server/version.d.ts +0 -5
- package/dist/server/version.d.ts.map +0 -1
- package/dist/server/version.js +0 -6
- package/dist/server/version.js.map +0 -1
- package/src/cli/utils.ts +0 -248
- package/src/server/implementation/device.ts +0 -307
- package/src/server/implementation/index.ts +0 -1583
- package/src/server/implementation/mutations/account.ts +0 -50
- package/src/server/implementation/mutations/index.ts +0 -157
- package/src/server/implementation/mutations/invalidate.ts +0 -42
- package/src/server/implementation/mutations/oauth.ts +0 -73
- package/src/server/implementation/mutations/refresh.ts +0 -175
- package/src/server/implementation/mutations/register.ts +0 -100
- package/src/server/implementation/mutations/retrieve.ts +0 -79
- package/src/server/implementation/mutations/signature.ts +0 -39
- package/src/server/implementation/mutations/signout.ts +0 -35
- package/src/server/implementation/mutations/store.ts +0 -7
- package/src/server/implementation/mutations/verifier.ts +0 -24
- package/src/server/implementation/mutations/verify.ts +0 -194
- package/src/server/implementation/passkey.ts +0 -620
- package/src/server/implementation/provider.ts +0 -36
- package/src/server/implementation/ratelimit.ts +0 -79
- package/src/server/implementation/refresh.ts +0 -172
- package/src/server/implementation/signin.ts +0 -296
- package/src/server/implementation/totp.ts +0 -342
- package/src/server/implementation/types.ts +0 -444
- package/src/server/implementation/utils.ts +0 -91
- package/src/server/version.ts +0 -2
|
@@ -1,85 +0,0 @@
|
|
|
1
|
-
import { logWithLevel, maybeRedact } from "../utils.js";
|
|
2
|
-
import { authDb } from "../db.js";
|
|
3
|
-
import { REFRESH_TOKEN_REUSE_WINDOW_MS, deleteAllRefreshTokens, invalidateRefreshTokensInSubtree, loadActiveRefreshToken, parseRefreshToken, refreshTokenIfValid } from "../refresh.js";
|
|
4
|
-
import { generateTokensForSession } from "../sessions.js";
|
|
5
|
-
import { AUTH_STORE_REF } from "./store.js";
|
|
6
|
-
import { v } from "convex/values";
|
|
7
|
-
|
|
8
|
-
//#region src/server/implementation/mutations/refresh.ts
|
|
9
|
-
const refreshSessionArgs = v.object({ refreshToken: v.string() });
|
|
10
|
-
async function refreshSessionImpl(ctx, args, getProviderOrThrow, config) {
|
|
11
|
-
const db = authDb(ctx, config);
|
|
12
|
-
const { refreshToken } = args;
|
|
13
|
-
const { refreshTokenId, sessionId: tokenSessionId } = parseRefreshToken(refreshToken);
|
|
14
|
-
logWithLevel("DEBUG", `refreshSessionImpl args: Token ID: ${maybeRedact(refreshTokenId)} Session ID: ${maybeRedact(tokenSessionId)}`);
|
|
15
|
-
const validationResult = await refreshTokenIfValid(ctx, refreshTokenId, tokenSessionId, config);
|
|
16
|
-
if (validationResult === null) {
|
|
17
|
-
let session$1 = null;
|
|
18
|
-
try {
|
|
19
|
-
session$1 = await db.sessions.getById(tokenSessionId);
|
|
20
|
-
} catch {
|
|
21
|
-
logWithLevel("DEBUG", "Skipping invalid session id during refresh cleanup");
|
|
22
|
-
}
|
|
23
|
-
if (session$1 !== null) await db.sessions.delete(session$1._id);
|
|
24
|
-
try {
|
|
25
|
-
await deleteAllRefreshTokens(ctx, tokenSessionId, config);
|
|
26
|
-
} catch {
|
|
27
|
-
logWithLevel("DEBUG", "Skipping invalid token session id during refresh token cleanup");
|
|
28
|
-
}
|
|
29
|
-
return null;
|
|
30
|
-
}
|
|
31
|
-
const { session } = validationResult;
|
|
32
|
-
const sessionId = session._id;
|
|
33
|
-
const userId = session.userId;
|
|
34
|
-
const tokenFirstUsed = validationResult.refreshTokenDoc.firstUsedTime;
|
|
35
|
-
if (tokenFirstUsed === void 0) {
|
|
36
|
-
await db.refreshTokens.patch(refreshTokenId, { firstUsedTime: Date.now() });
|
|
37
|
-
const result = await generateTokensForSession(ctx, config, {
|
|
38
|
-
userId,
|
|
39
|
-
sessionId,
|
|
40
|
-
issuedRefreshTokenId: null,
|
|
41
|
-
parentRefreshTokenId: refreshTokenId
|
|
42
|
-
});
|
|
43
|
-
const { refreshTokenId: newRefreshTokenId } = parseRefreshToken(result.refreshToken);
|
|
44
|
-
logWithLevel("DEBUG", `Exchanged ${maybeRedact(validationResult.refreshTokenDoc._id)} (first use) for new refresh token ${maybeRedact(newRefreshTokenId)}`);
|
|
45
|
-
return result;
|
|
46
|
-
}
|
|
47
|
-
const activeRefreshToken = await loadActiveRefreshToken(ctx, tokenSessionId, config);
|
|
48
|
-
logWithLevel("DEBUG", `Active refresh token: ${maybeRedact(activeRefreshToken?._id ?? "(none)")}, parent ${maybeRedact(activeRefreshToken?.parentRefreshTokenId ?? "(none)")}`);
|
|
49
|
-
if (activeRefreshToken !== null && activeRefreshToken.parentRefreshTokenId === refreshTokenId) {
|
|
50
|
-
logWithLevel("DEBUG", `Token ${maybeRedact(validationResult.refreshTokenDoc._id)} is parent of active refresh token ${maybeRedact(activeRefreshToken._id)}, so returning that token`);
|
|
51
|
-
return await generateTokensForSession(ctx, config, {
|
|
52
|
-
userId,
|
|
53
|
-
sessionId,
|
|
54
|
-
issuedRefreshTokenId: activeRefreshToken._id,
|
|
55
|
-
parentRefreshTokenId: refreshTokenId
|
|
56
|
-
});
|
|
57
|
-
}
|
|
58
|
-
if (tokenFirstUsed + REFRESH_TOKEN_REUSE_WINDOW_MS > Date.now()) {
|
|
59
|
-
const result = await generateTokensForSession(ctx, config, {
|
|
60
|
-
userId,
|
|
61
|
-
sessionId,
|
|
62
|
-
issuedRefreshTokenId: null,
|
|
63
|
-
parentRefreshTokenId: refreshTokenId
|
|
64
|
-
});
|
|
65
|
-
const { refreshTokenId: newRefreshTokenId } = parseRefreshToken(result.refreshToken);
|
|
66
|
-
logWithLevel("DEBUG", `Exchanged ${maybeRedact(validationResult.refreshTokenDoc._id)} (reuse) for new refresh token ${maybeRedact(newRefreshTokenId)}`);
|
|
67
|
-
return result;
|
|
68
|
-
} else {
|
|
69
|
-
logWithLevel("ERROR", "Refresh token used outside of reuse window");
|
|
70
|
-
logWithLevel("DEBUG", `Token ${maybeRedact(validationResult.refreshTokenDoc._id)} being used outside of reuse window, so invalidating all refresh tokens in subtree`);
|
|
71
|
-
const tokensToInvalidate = await invalidateRefreshTokensInSubtree(ctx, validationResult.refreshTokenDoc, config);
|
|
72
|
-
logWithLevel("DEBUG", `Invalidated ${tokensToInvalidate.length} refresh tokens in subtree: ${tokensToInvalidate.map((token) => maybeRedact(token._id)).join(", ")}`);
|
|
73
|
-
return null;
|
|
74
|
-
}
|
|
75
|
-
}
|
|
76
|
-
const callRefreshSession = async (ctx, args) => {
|
|
77
|
-
return ctx.runMutation(AUTH_STORE_REF, { args: {
|
|
78
|
-
type: "refreshSession",
|
|
79
|
-
...args
|
|
80
|
-
} });
|
|
81
|
-
};
|
|
82
|
-
|
|
83
|
-
//#endregion
|
|
84
|
-
export { callRefreshSession, refreshSessionArgs, refreshSessionImpl };
|
|
85
|
-
//# sourceMappingURL=refresh.js.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"refresh.js","names":["session"],"sources":["../../../../src/server/implementation/mutations/refresh.ts"],"sourcesContent":["import { Infer, v } from \"convex/values\";\nimport { ActionCtx, Doc, MutationCtx } from \"../types\";\nimport * as Provider from \"../provider\";\nimport { logWithLevel, maybeRedact } from \"../utils\";\nimport {\n deleteAllRefreshTokens,\n invalidateRefreshTokensInSubtree,\n loadActiveRefreshToken,\n parseRefreshToken,\n REFRESH_TOKEN_REUSE_WINDOW_MS,\n refreshTokenIfValid,\n} from \"../refresh\";\nimport { generateTokensForSession } from \"../sessions\";\nimport { authDb } from \"../db\";\nimport { AUTH_STORE_REF } from \"./store\";\n\nexport const refreshSessionArgs = v.object({\n refreshToken: v.string(),\n});\n\ntype ReturnType = null | {\n token: string;\n refreshToken: string;\n};\n\nexport async function refreshSessionImpl(\n ctx: MutationCtx,\n args: Infer<typeof refreshSessionArgs>,\n getProviderOrThrow: Provider.GetProviderOrThrowFunc,\n config: Provider.Config,\n): Promise<ReturnType> {\n const db = authDb(ctx, config);\n const { refreshToken } = args;\n const { refreshTokenId, sessionId: tokenSessionId } =\n parseRefreshToken(refreshToken);\n logWithLevel(\n \"DEBUG\",\n `refreshSessionImpl args: Token ID: ${maybeRedact(refreshTokenId)} Session ID: ${maybeRedact(\n tokenSessionId,\n )}`,\n );\n const validationResult = await refreshTokenIfValid(\n ctx,\n refreshTokenId,\n tokenSessionId,\n config,\n );\n\n if (validationResult === null) {\n // Replicating `deleteSession` but ensuring that we delete both the session\n // and the refresh token, even if one of them is missing.\n let session: Doc<\"session\"> | null = null;\n try {\n session = await db.sessions.getById(tokenSessionId);\n } catch {\n logWithLevel(\"DEBUG\", \"Skipping invalid session id during refresh cleanup\");\n }\n if (session !== null) {\n await db.sessions.delete(session._id);\n }\n try {\n await deleteAllRefreshTokens(ctx, tokenSessionId, config);\n } catch {\n logWithLevel(\n \"DEBUG\",\n \"Skipping invalid token session id during refresh token cleanup\",\n );\n }\n return null;\n }\n const { session } = validationResult;\n const sessionId = session._id;\n const userId = session.userId;\n\n const tokenFirstUsed = validationResult.refreshTokenDoc.firstUsedTime;\n\n // First use -- mark as used and generate new refresh token\n if (tokenFirstUsed === undefined) {\n await db.refreshTokens.patch(refreshTokenId, {\n firstUsedTime: Date.now(),\n });\n const result = await generateTokensForSession(ctx, config, {\n userId,\n sessionId,\n issuedRefreshTokenId: null,\n parentRefreshTokenId: refreshTokenId,\n });\n const { refreshTokenId: newRefreshTokenId } = parseRefreshToken(\n result.refreshToken,\n );\n logWithLevel(\n \"DEBUG\",\n `Exchanged ${maybeRedact(validationResult.refreshTokenDoc._id)} (first use) for new refresh token ${maybeRedact(newRefreshTokenId)}`,\n );\n return result;\n }\n\n // Token has been used before\n // Check if parent of active refresh token\n const activeRefreshToken = await loadActiveRefreshToken(\n ctx,\n tokenSessionId,\n config,\n );\n logWithLevel(\n \"DEBUG\",\n `Active refresh token: ${maybeRedact(activeRefreshToken?._id ?? \"(none)\")}, parent ${maybeRedact(activeRefreshToken?.parentRefreshTokenId ?? \"(none)\")}`,\n );\n if (\n activeRefreshToken !== null &&\n activeRefreshToken.parentRefreshTokenId === refreshTokenId\n ) {\n logWithLevel(\n \"DEBUG\",\n `Token ${maybeRedact(validationResult.refreshTokenDoc._id)} is parent of active refresh token ${maybeRedact(activeRefreshToken._id)}, so returning that token`,\n );\n\n const result = await generateTokensForSession(ctx, config, {\n userId,\n sessionId,\n issuedRefreshTokenId: activeRefreshToken._id,\n parentRefreshTokenId: refreshTokenId,\n });\n return result;\n }\n\n // Check if within reuse window\n if (tokenFirstUsed + REFRESH_TOKEN_REUSE_WINDOW_MS > Date.now()) {\n const result = await generateTokensForSession(ctx, config, {\n userId,\n sessionId,\n issuedRefreshTokenId: null,\n parentRefreshTokenId: refreshTokenId,\n });\n const { refreshTokenId: newRefreshTokenId } = parseRefreshToken(\n result.refreshToken,\n );\n logWithLevel(\n \"DEBUG\",\n `Exchanged ${maybeRedact(validationResult.refreshTokenDoc._id)} (reuse) for new refresh token ${maybeRedact(newRefreshTokenId)}`,\n );\n return result;\n } else {\n // Outside of reuse window -- invalidate all refresh tokens in subtree\n logWithLevel(\"ERROR\", \"Refresh token used outside of reuse window\");\n logWithLevel(\n \"DEBUG\",\n `Token ${maybeRedact(validationResult.refreshTokenDoc._id)} being used outside of reuse window, so invalidating all refresh tokens in subtree`,\n );\n const tokensToInvalidate = await invalidateRefreshTokensInSubtree(\n ctx,\n validationResult.refreshTokenDoc,\n config,\n );\n logWithLevel(\n \"DEBUG\",\n `Invalidated ${tokensToInvalidate.length} refresh tokens in subtree: ${tokensToInvalidate\n .map((token) => maybeRedact(token._id))\n .join(\", \")}`,\n );\n return null;\n }\n}\n\nexport const callRefreshSession = async (\n ctx: ActionCtx,\n args: Infer<typeof refreshSessionArgs>,\n): Promise<ReturnType> => {\n return ctx.runMutation(AUTH_STORE_REF, {\n args: {\n type: \"refreshSession\",\n ...args,\n },\n });\n};\n"],"mappings":";;;;;;;;AAgBA,MAAa,qBAAqB,EAAE,OAAO,EACzC,cAAc,EAAE,QAAQ,EACzB,CAAC;AAOF,eAAsB,mBACpB,KACA,MACA,oBACA,QACqB;CACrB,MAAM,KAAK,OAAO,KAAK,OAAO;CAC9B,MAAM,EAAE,iBAAiB;CACzB,MAAM,EAAE,gBAAgB,WAAW,mBACjC,kBAAkB,aAAa;AACjC,cACE,SACA,sCAAsC,YAAY,eAAe,CAAC,eAAe,YAC/E,eACD,GACF;CACD,MAAM,mBAAmB,MAAM,oBAC7B,KACA,gBACA,gBACA,OACD;AAED,KAAI,qBAAqB,MAAM;EAG7B,IAAIA,YAAiC;AACrC,MAAI;AACF,eAAU,MAAM,GAAG,SAAS,QAAQ,eAAe;UAC7C;AACN,gBAAa,SAAS,qDAAqD;;AAE7E,MAAIA,cAAY,KACd,OAAM,GAAG,SAAS,OAAOA,UAAQ,IAAI;AAEvC,MAAI;AACF,SAAM,uBAAuB,KAAK,gBAAgB,OAAO;UACnD;AACN,gBACE,SACA,iEACD;;AAEH,SAAO;;CAET,MAAM,EAAE,YAAY;CACpB,MAAM,YAAY,QAAQ;CAC1B,MAAM,SAAS,QAAQ;CAEvB,MAAM,iBAAiB,iBAAiB,gBAAgB;AAGxD,KAAI,mBAAmB,QAAW;AAChC,QAAM,GAAG,cAAc,MAAM,gBAAgB,EAC3C,eAAe,KAAK,KAAK,EAC1B,CAAC;EACF,MAAM,SAAS,MAAM,yBAAyB,KAAK,QAAQ;GACzD;GACA;GACA,sBAAsB;GACtB,sBAAsB;GACvB,CAAC;EACF,MAAM,EAAE,gBAAgB,sBAAsB,kBAC5C,OAAO,aACR;AACD,eACE,SACA,aAAa,YAAY,iBAAiB,gBAAgB,IAAI,CAAC,qCAAqC,YAAY,kBAAkB,GACnI;AACD,SAAO;;CAKT,MAAM,qBAAqB,MAAM,uBAC/B,KACA,gBACA,OACD;AACD,cACE,SACA,yBAAyB,YAAY,oBAAoB,OAAO,SAAS,CAAC,WAAW,YAAY,oBAAoB,wBAAwB,SAAS,GACvJ;AACD,KACE,uBAAuB,QACvB,mBAAmB,yBAAyB,gBAC5C;AACA,eACE,SACA,SAAS,YAAY,iBAAiB,gBAAgB,IAAI,CAAC,qCAAqC,YAAY,mBAAmB,IAAI,CAAC,2BACrI;AAQD,SANe,MAAM,yBAAyB,KAAK,QAAQ;GACzD;GACA;GACA,sBAAsB,mBAAmB;GACzC,sBAAsB;GACvB,CAAC;;AAKJ,KAAI,iBAAiB,gCAAgC,KAAK,KAAK,EAAE;EAC/D,MAAM,SAAS,MAAM,yBAAyB,KAAK,QAAQ;GACzD;GACA;GACA,sBAAsB;GACtB,sBAAsB;GACvB,CAAC;EACF,MAAM,EAAE,gBAAgB,sBAAsB,kBAC5C,OAAO,aACR;AACD,eACE,SACA,aAAa,YAAY,iBAAiB,gBAAgB,IAAI,CAAC,iCAAiC,YAAY,kBAAkB,GAC/H;AACD,SAAO;QACF;AAEL,eAAa,SAAS,6CAA6C;AACnE,eACE,SACA,SAAS,YAAY,iBAAiB,gBAAgB,IAAI,CAAC,oFAC5D;EACD,MAAM,qBAAqB,MAAM,iCAC/B,KACA,iBAAiB,iBACjB,OACD;AACD,eACE,SACA,eAAe,mBAAmB,OAAO,8BAA8B,mBACpE,KAAK,UAAU,YAAY,MAAM,IAAI,CAAC,CACtC,KAAK,KAAK,GACd;AACD,SAAO;;;AAIX,MAAa,qBAAqB,OAChC,KACA,SACwB;AACxB,QAAO,IAAI,YAAY,gBAAgB,EACrC,MAAM;EACJ,MAAM;EACN,GAAG;EACJ,EACF,CAAC"}
|
|
@@ -1,37 +0,0 @@
|
|
|
1
|
-
import { ActionCtx, Doc, MutationCtx } from "../types.js";
|
|
2
|
-
import { Config, GetProviderOrThrowFunc } from "../provider.js";
|
|
3
|
-
import * as convex_values3 from "convex/values";
|
|
4
|
-
import { Infer } from "convex/values";
|
|
5
|
-
|
|
6
|
-
//#region src/server/implementation/mutations/register.d.ts
|
|
7
|
-
declare const createAccountFromCredentialsArgs: convex_values3.VObject<{
|
|
8
|
-
shouldLinkViaEmail?: boolean | undefined;
|
|
9
|
-
shouldLinkViaPhone?: boolean | undefined;
|
|
10
|
-
account: {
|
|
11
|
-
secret?: string | undefined;
|
|
12
|
-
id: string;
|
|
13
|
-
};
|
|
14
|
-
provider: string;
|
|
15
|
-
profile: any;
|
|
16
|
-
}, {
|
|
17
|
-
provider: convex_values3.VString<string, "required">;
|
|
18
|
-
account: convex_values3.VObject<{
|
|
19
|
-
secret?: string | undefined;
|
|
20
|
-
id: string;
|
|
21
|
-
}, {
|
|
22
|
-
id: convex_values3.VString<string, "required">;
|
|
23
|
-
secret: convex_values3.VString<string | undefined, "optional">;
|
|
24
|
-
}, "required", "id" | "secret">;
|
|
25
|
-
profile: convex_values3.VAny<any, "required", string>;
|
|
26
|
-
shouldLinkViaEmail: convex_values3.VBoolean<boolean | undefined, "optional">;
|
|
27
|
-
shouldLinkViaPhone: convex_values3.VBoolean<boolean | undefined, "optional">;
|
|
28
|
-
}, "required", "account" | "provider" | "profile" | `profile.${string}` | "shouldLinkViaEmail" | "shouldLinkViaPhone" | "account.id" | "account.secret">;
|
|
29
|
-
type ReturnType = {
|
|
30
|
-
account: Doc<"account">;
|
|
31
|
-
user: Doc<"user">;
|
|
32
|
-
};
|
|
33
|
-
declare function createAccountFromCredentialsImpl(ctx: MutationCtx, args: Infer<typeof createAccountFromCredentialsArgs>, getProviderOrThrow: GetProviderOrThrowFunc, config: Config): Promise<ReturnType>;
|
|
34
|
-
declare const callCreateAccountFromCredentials: (ctx: ActionCtx, args: Infer<typeof createAccountFromCredentialsArgs>) => Promise<ReturnType>;
|
|
35
|
-
//#endregion
|
|
36
|
-
export { callCreateAccountFromCredentials, createAccountFromCredentialsArgs, createAccountFromCredentialsImpl };
|
|
37
|
-
//# sourceMappingURL=register.d.ts.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"register.d.ts","names":[],"sources":["../../../../src/server/implementation/mutations/register.ts"],"mappings":";;;;;;cAWa,gCAAA,iBAAgC,OAAA;;;;;;;;;;YAM3C,cAAA,CAAA,OAAA;;;;;;;;;;;;KAEG,UAAA;EAAe,OAAA,EAAS,GAAA;EAAgB,IAAA,EAAM,GAAA;AAAA;AAAA,iBAE7B,gCAAA,CACpB,GAAA,EAAK,WAAA,EACL,IAAA,EAAM,KAAA,QAAa,gCAAA,GACnB,kBAAA,EAAoB,sBAAA,EACpB,MAAA,EAAQ,MAAA,GACP,OAAA,CAAQ,UAAA;AAAA,cA+DE,gCAAA,GACX,GAAA,EAAK,SAAA,EACL,IAAA,EAAM,KAAA,QAAa,gCAAA,MAClB,OAAA,CAAQ,UAAA"}
|
|
@@ -1,65 +0,0 @@
|
|
|
1
|
-
import { throwAuthError } from "../../errors.js";
|
|
2
|
-
import { LOG_LEVELS, logWithLevel, maybeRedact } from "../utils.js";
|
|
3
|
-
import { authDb } from "../db.js";
|
|
4
|
-
import { getAuthSessionId } from "../sessions.js";
|
|
5
|
-
import { AUTH_STORE_REF } from "./store.js";
|
|
6
|
-
import { upsertUserAndAccount } from "../users.js";
|
|
7
|
-
import { hash, verify } from "../provider.js";
|
|
8
|
-
import { v } from "convex/values";
|
|
9
|
-
|
|
10
|
-
//#region src/server/implementation/mutations/register.ts
|
|
11
|
-
const createAccountFromCredentialsArgs = v.object({
|
|
12
|
-
provider: v.string(),
|
|
13
|
-
account: v.object({
|
|
14
|
-
id: v.string(),
|
|
15
|
-
secret: v.optional(v.string())
|
|
16
|
-
}),
|
|
17
|
-
profile: v.any(),
|
|
18
|
-
shouldLinkViaEmail: v.optional(v.boolean()),
|
|
19
|
-
shouldLinkViaPhone: v.optional(v.boolean())
|
|
20
|
-
});
|
|
21
|
-
async function createAccountFromCredentialsImpl(ctx, args, getProviderOrThrow, config) {
|
|
22
|
-
logWithLevel(LOG_LEVELS.DEBUG, "createAccountFromCredentialsImpl args:", {
|
|
23
|
-
provider: args.provider,
|
|
24
|
-
account: {
|
|
25
|
-
id: args.account.id,
|
|
26
|
-
secret: maybeRedact(args.account.secret ?? "")
|
|
27
|
-
}
|
|
28
|
-
});
|
|
29
|
-
const { provider: providerId, account, profile, shouldLinkViaEmail, shouldLinkViaPhone } = args;
|
|
30
|
-
const db = authDb(ctx, config);
|
|
31
|
-
const provider = getProviderOrThrow(providerId);
|
|
32
|
-
const existingAccount = await db.accounts.get(provider.id, account.id);
|
|
33
|
-
if (existingAccount !== null) {
|
|
34
|
-
if (account.secret !== void 0 && !await verify(provider, account.secret, existingAccount.secret ?? "")) throwAuthError("ACCOUNT_ALREADY_EXISTS", `Account ${account.id} already exists`);
|
|
35
|
-
return {
|
|
36
|
-
account: existingAccount,
|
|
37
|
-
user: await db.users.getById(existingAccount.userId)
|
|
38
|
-
};
|
|
39
|
-
}
|
|
40
|
-
const secret = account.secret !== void 0 ? await hash(provider, account.secret) : void 0;
|
|
41
|
-
const { userId, accountId } = await upsertUserAndAccount(ctx, await getAuthSessionId(ctx), {
|
|
42
|
-
providerAccountId: account.id,
|
|
43
|
-
secret
|
|
44
|
-
}, {
|
|
45
|
-
type: "credentials",
|
|
46
|
-
provider,
|
|
47
|
-
profile,
|
|
48
|
-
shouldLinkViaEmail,
|
|
49
|
-
shouldLinkViaPhone
|
|
50
|
-
}, config);
|
|
51
|
-
return {
|
|
52
|
-
account: await db.accounts.getById(accountId),
|
|
53
|
-
user: await db.users.getById(userId)
|
|
54
|
-
};
|
|
55
|
-
}
|
|
56
|
-
const callCreateAccountFromCredentials = async (ctx, args) => {
|
|
57
|
-
return ctx.runMutation(AUTH_STORE_REF, { args: {
|
|
58
|
-
type: "createAccountFromCredentials",
|
|
59
|
-
...args
|
|
60
|
-
} });
|
|
61
|
-
};
|
|
62
|
-
|
|
63
|
-
//#endregion
|
|
64
|
-
export { callCreateAccountFromCredentials, createAccountFromCredentialsArgs, createAccountFromCredentialsImpl };
|
|
65
|
-
//# sourceMappingURL=register.js.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"register.js","names":["Provider.verify","Provider.hash"],"sources":["../../../../src/server/implementation/mutations/register.ts"],"sourcesContent":["import { Infer, v } from \"convex/values\";\nimport { ActionCtx, Doc, MutationCtx } from \"../types\";\nimport * as Provider from \"../provider\";\nimport { ConvexCredentialsConfig } from \"../../types\";\nimport { upsertUserAndAccount } from \"../users\";\nimport { getAuthSessionId } from \"../sessions\";\nimport { LOG_LEVELS, logWithLevel, maybeRedact } from \"../utils\";\nimport { authDb } from \"../db\";\nimport { AUTH_STORE_REF } from \"./store\";\nimport { throwAuthError } from \"../../errors\";\n\nexport const createAccountFromCredentialsArgs = v.object({\n provider: v.string(),\n account: v.object({ id: v.string(), secret: v.optional(v.string()) }),\n profile: v.any(),\n shouldLinkViaEmail: v.optional(v.boolean()),\n shouldLinkViaPhone: v.optional(v.boolean()),\n});\n\ntype ReturnType = { account: Doc<\"account\">; user: Doc<\"user\"> };\n\nexport async function createAccountFromCredentialsImpl(\n ctx: MutationCtx,\n args: Infer<typeof createAccountFromCredentialsArgs>,\n getProviderOrThrow: Provider.GetProviderOrThrowFunc,\n config: Provider.Config,\n): Promise<ReturnType> {\n logWithLevel(LOG_LEVELS.DEBUG, \"createAccountFromCredentialsImpl args:\", {\n provider: args.provider,\n account: {\n id: args.account.id,\n secret: maybeRedact(args.account.secret ?? \"\"),\n },\n });\n const {\n provider: providerId,\n account,\n profile,\n shouldLinkViaEmail,\n shouldLinkViaPhone,\n } = args;\n const db = authDb(ctx, config);\n const provider = getProviderOrThrow(providerId) as ConvexCredentialsConfig;\n const existingAccount = (await db.accounts.get(\n provider.id,\n account.id,\n )) as Doc<\"account\"> | null;\n if (existingAccount !== null) {\n if (\n account.secret !== undefined &&\n !(await Provider.verify(\n provider,\n account.secret,\n existingAccount.secret ?? \"\",\n ))\n ) {\n throwAuthError(\"ACCOUNT_ALREADY_EXISTS\", `Account ${account.id} already exists`);\n }\n return {\n account: existingAccount,\n // TODO: Ian removed this,\n user: (await db.users.getById(existingAccount.userId)) as unknown as Doc<\"user\">,\n };\n }\n\n const secret =\n account.secret !== undefined\n ? await Provider.hash(provider, account.secret)\n : undefined;\n const { userId, accountId } = await upsertUserAndAccount(\n ctx,\n await getAuthSessionId(ctx),\n { providerAccountId: account.id, secret },\n {\n type: \"credentials\",\n provider,\n profile,\n shouldLinkViaEmail,\n shouldLinkViaPhone,\n },\n config,\n );\n\n return {\n account: (await db.accounts.getById(accountId)) as Doc<\"account\">,\n user: (await db.users.getById(userId)) as unknown as Doc<\"user\">,\n };\n}\n\nexport const callCreateAccountFromCredentials = async (\n ctx: ActionCtx,\n args: Infer<typeof createAccountFromCredentialsArgs>,\n): Promise<ReturnType> => {\n return ctx.runMutation(AUTH_STORE_REF, {\n args: {\n type: \"createAccountFromCredentials\",\n ...args,\n },\n });\n};\n"],"mappings":";;;;;;;;;;AAWA,MAAa,mCAAmC,EAAE,OAAO;CACvD,UAAU,EAAE,QAAQ;CACpB,SAAS,EAAE,OAAO;EAAE,IAAI,EAAE,QAAQ;EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC;EAAE,CAAC;CACrE,SAAS,EAAE,KAAK;CAChB,oBAAoB,EAAE,SAAS,EAAE,SAAS,CAAC;CAC3C,oBAAoB,EAAE,SAAS,EAAE,SAAS,CAAC;CAC5C,CAAC;AAIF,eAAsB,iCACpB,KACA,MACA,oBACA,QACqB;AACrB,cAAa,WAAW,OAAO,0CAA0C;EACvE,UAAU,KAAK;EACf,SAAS;GACP,IAAI,KAAK,QAAQ;GACjB,QAAQ,YAAY,KAAK,QAAQ,UAAU,GAAG;GAC/C;EACF,CAAC;CACF,MAAM,EACJ,UAAU,YACV,SACA,SACA,oBACA,uBACE;CACJ,MAAM,KAAK,OAAO,KAAK,OAAO;CAC9B,MAAM,WAAW,mBAAmB,WAAW;CAC/C,MAAM,kBAAmB,MAAM,GAAG,SAAS,IACzC,SAAS,IACT,QAAQ,GACT;AACD,KAAI,oBAAoB,MAAM;AAC5B,MACE,QAAQ,WAAW,UACnB,CAAE,MAAMA,OACN,UACA,QAAQ,QACR,gBAAgB,UAAU,GAC3B,CAED,gBAAe,0BAA0B,WAAW,QAAQ,GAAG,iBAAiB;AAElF,SAAO;GACL,SAAS;GAET,MAAO,MAAM,GAAG,MAAM,QAAQ,gBAAgB,OAAO;GACtD;;CAGH,MAAM,SACJ,QAAQ,WAAW,SACf,MAAMC,KAAc,UAAU,QAAQ,OAAO,GAC7C;CACN,MAAM,EAAE,QAAQ,cAAc,MAAM,qBAClC,KACA,MAAM,iBAAiB,IAAI,EAC3B;EAAE,mBAAmB,QAAQ;EAAI;EAAQ,EACzC;EACE,MAAM;EACN;EACA;EACA;EACA;EACD,EACD,OACD;AAED,QAAO;EACL,SAAU,MAAM,GAAG,SAAS,QAAQ,UAAU;EAC9C,MAAO,MAAM,GAAG,MAAM,QAAQ,OAAO;EACtC;;AAGH,MAAa,mCAAmC,OAC9C,KACA,SACwB;AACxB,QAAO,IAAI,YAAY,gBAAgB,EACrC,MAAM;EACJ,MAAM;EACN,GAAG;EACJ,EACF,CAAC"}
|
|
@@ -1,31 +0,0 @@
|
|
|
1
|
-
import { ActionCtx, Doc, MutationCtx } from "../types.js";
|
|
2
|
-
import { Config, GetProviderOrThrowFunc } from "../provider.js";
|
|
3
|
-
import * as convex_values106 from "convex/values";
|
|
4
|
-
import { Infer } from "convex/values";
|
|
5
|
-
|
|
6
|
-
//#region src/server/implementation/mutations/retrieve.d.ts
|
|
7
|
-
declare const retrieveAccountWithCredentialsArgs: convex_values106.VObject<{
|
|
8
|
-
account: {
|
|
9
|
-
secret?: string | undefined;
|
|
10
|
-
id: string;
|
|
11
|
-
};
|
|
12
|
-
provider: string;
|
|
13
|
-
}, {
|
|
14
|
-
provider: convex_values106.VString<string, "required">;
|
|
15
|
-
account: convex_values106.VObject<{
|
|
16
|
-
secret?: string | undefined;
|
|
17
|
-
id: string;
|
|
18
|
-
}, {
|
|
19
|
-
id: convex_values106.VString<string, "required">;
|
|
20
|
-
secret: convex_values106.VString<string | undefined, "optional">;
|
|
21
|
-
}, "required", "id" | "secret">;
|
|
22
|
-
}, "required", "account" | "provider" | "account.id" | "account.secret">;
|
|
23
|
-
type ReturnType = "InvalidAccountId" | "TooManyFailedAttempts" | "InvalidSecret" | {
|
|
24
|
-
account: Doc<"account">;
|
|
25
|
-
user: Doc<"user">;
|
|
26
|
-
};
|
|
27
|
-
declare function retrieveAccountWithCredentialsImpl(ctx: MutationCtx, args: Infer<typeof retrieveAccountWithCredentialsArgs>, getProviderOrThrow: GetProviderOrThrowFunc, config: Config): Promise<ReturnType>;
|
|
28
|
-
declare const callRetreiveAccountWithCredentials: (ctx: ActionCtx, args: Infer<typeof retrieveAccountWithCredentialsArgs>) => Promise<ReturnType>;
|
|
29
|
-
//#endregion
|
|
30
|
-
export { callRetreiveAccountWithCredentials, retrieveAccountWithCredentialsArgs, retrieveAccountWithCredentialsImpl };
|
|
31
|
-
//# sourceMappingURL=retrieve.d.ts.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"retrieve.d.ts","names":[],"sources":["../../../../src/server/implementation/mutations/retrieve.ts"],"mappings":";;;;;;cAYa,kCAAA,mBAAkC,OAAA;;;;;;;YAG7C,gBAAA,CAAA,OAAA;;;;;;;;;KAEG,UAAA;EAIC,OAAA,EAAS,GAAA;EAAgB,IAAA,EAAM,GAAA;AAAA;AAAA,iBAEf,kCAAA,CACpB,GAAA,EAAK,WAAA,EACL,IAAA,EAAM,KAAA,QAAa,kCAAA,GACnB,kBAAA,EAAoB,sBAAA,EACpB,MAAA,EAAQ,MAAA,GACP,OAAA,CAAQ,UAAA;AAAA,cAwCE,kCAAA,GACX,GAAA,EAAK,SAAA,EACL,IAAA,EAAM,KAAA,QAAa,kCAAA,MAClB,OAAA,CAAQ,UAAA"}
|
|
@@ -1,50 +0,0 @@
|
|
|
1
|
-
import { LOG_LEVELS, logWithLevel, maybeRedact } from "../utils.js";
|
|
2
|
-
import { authDb } from "../db.js";
|
|
3
|
-
import { AUTH_STORE_REF } from "./store.js";
|
|
4
|
-
import { isSignInRateLimited, recordFailedSignIn, resetSignInRateLimit } from "../ratelimit.js";
|
|
5
|
-
import { verify } from "../provider.js";
|
|
6
|
-
import { v } from "convex/values";
|
|
7
|
-
|
|
8
|
-
//#region src/server/implementation/mutations/retrieve.ts
|
|
9
|
-
const retrieveAccountWithCredentialsArgs = v.object({
|
|
10
|
-
provider: v.string(),
|
|
11
|
-
account: v.object({
|
|
12
|
-
id: v.string(),
|
|
13
|
-
secret: v.optional(v.string())
|
|
14
|
-
})
|
|
15
|
-
});
|
|
16
|
-
async function retrieveAccountWithCredentialsImpl(ctx, args, getProviderOrThrow, config) {
|
|
17
|
-
const { provider: providerId, account } = args;
|
|
18
|
-
const db = authDb(ctx, config);
|
|
19
|
-
logWithLevel(LOG_LEVELS.DEBUG, "retrieveAccountWithCredentialsImpl args:", {
|
|
20
|
-
provider: providerId,
|
|
21
|
-
account: {
|
|
22
|
-
id: account.id,
|
|
23
|
-
secret: maybeRedact(account.secret ?? "")
|
|
24
|
-
}
|
|
25
|
-
});
|
|
26
|
-
const existingAccount = await db.accounts.get(providerId, account.id);
|
|
27
|
-
if (existingAccount === null) return "InvalidAccountId";
|
|
28
|
-
if (account.secret !== void 0) {
|
|
29
|
-
if (await isSignInRateLimited(ctx, existingAccount._id, config)) return "TooManyFailedAttempts";
|
|
30
|
-
if (!await verify(getProviderOrThrow(providerId), account.secret, existingAccount.secret ?? "")) {
|
|
31
|
-
await recordFailedSignIn(ctx, existingAccount._id, config);
|
|
32
|
-
return "InvalidSecret";
|
|
33
|
-
}
|
|
34
|
-
await resetSignInRateLimit(ctx, existingAccount._id, config);
|
|
35
|
-
}
|
|
36
|
-
return {
|
|
37
|
-
account: existingAccount,
|
|
38
|
-
user: await db.users.getById(existingAccount.userId)
|
|
39
|
-
};
|
|
40
|
-
}
|
|
41
|
-
const callRetreiveAccountWithCredentials = async (ctx, args) => {
|
|
42
|
-
return ctx.runMutation(AUTH_STORE_REF, { args: {
|
|
43
|
-
type: "retrieveAccountWithCredentials",
|
|
44
|
-
...args
|
|
45
|
-
} });
|
|
46
|
-
};
|
|
47
|
-
|
|
48
|
-
//#endregion
|
|
49
|
-
export { callRetreiveAccountWithCredentials, retrieveAccountWithCredentialsArgs, retrieveAccountWithCredentialsImpl };
|
|
50
|
-
//# sourceMappingURL=retrieve.js.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"retrieve.js","names":["Provider.verify"],"sources":["../../../../src/server/implementation/mutations/retrieve.ts"],"sourcesContent":["import { Infer, v } from \"convex/values\";\nimport { ActionCtx, Doc, MutationCtx } from \"../types\";\nimport {\n isSignInRateLimited,\n recordFailedSignIn,\n resetSignInRateLimit,\n} from \"../ratelimit\";\nimport * as Provider from \"../provider\";\nimport { LOG_LEVELS, logWithLevel, maybeRedact } from \"../utils\";\nimport { authDb } from \"../db\";\nimport { AUTH_STORE_REF } from \"./store\";\n\nexport const retrieveAccountWithCredentialsArgs = v.object({\n provider: v.string(),\n account: v.object({ id: v.string(), secret: v.optional(v.string()) }),\n});\n\ntype ReturnType =\n | \"InvalidAccountId\"\n | \"TooManyFailedAttempts\"\n | \"InvalidSecret\"\n | { account: Doc<\"account\">; user: Doc<\"user\"> };\n\nexport async function retrieveAccountWithCredentialsImpl(\n ctx: MutationCtx,\n args: Infer<typeof retrieveAccountWithCredentialsArgs>,\n getProviderOrThrow: Provider.GetProviderOrThrowFunc,\n config: Provider.Config,\n): Promise<ReturnType> {\n const { provider: providerId, account } = args;\n const db = authDb(ctx, config);\n logWithLevel(LOG_LEVELS.DEBUG, \"retrieveAccountWithCredentialsImpl args:\", {\n provider: providerId,\n account: {\n id: account.id,\n secret: maybeRedact(account.secret ?? \"\"),\n },\n });\n const existingAccount = (await db.accounts.get(\n providerId,\n account.id,\n )) as Doc<\"account\"> | null;\n if (existingAccount === null) {\n return \"InvalidAccountId\";\n }\n if (account.secret !== undefined) {\n if (await isSignInRateLimited(ctx, existingAccount._id, config)) {\n return \"TooManyFailedAttempts\";\n }\n if (\n !(await Provider.verify(\n getProviderOrThrow(providerId),\n account.secret,\n existingAccount.secret ?? \"\",\n ))\n ) {\n await recordFailedSignIn(ctx, existingAccount._id, config);\n return \"InvalidSecret\";\n }\n await resetSignInRateLimit(ctx, existingAccount._id, config);\n }\n return {\n account: existingAccount,\n // TODO: Ian removed this\n user: (await db.users.getById(existingAccount.userId)) as unknown as Doc<\"user\">,\n };\n}\n\nexport const callRetreiveAccountWithCredentials = async (\n ctx: ActionCtx,\n args: Infer<typeof retrieveAccountWithCredentialsArgs>,\n): Promise<ReturnType> => {\n return ctx.runMutation(AUTH_STORE_REF, {\n args: {\n type: \"retrieveAccountWithCredentials\",\n ...args,\n },\n });\n};\n"],"mappings":";;;;;;;;AAYA,MAAa,qCAAqC,EAAE,OAAO;CACzD,UAAU,EAAE,QAAQ;CACpB,SAAS,EAAE,OAAO;EAAE,IAAI,EAAE,QAAQ;EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC;EAAE,CAAC;CACtE,CAAC;AAQF,eAAsB,mCACpB,KACA,MACA,oBACA,QACqB;CACrB,MAAM,EAAE,UAAU,YAAY,YAAY;CAC1C,MAAM,KAAK,OAAO,KAAK,OAAO;AAC9B,cAAa,WAAW,OAAO,4CAA4C;EACzE,UAAU;EACV,SAAS;GACP,IAAI,QAAQ;GACZ,QAAQ,YAAY,QAAQ,UAAU,GAAG;GAC1C;EACF,CAAC;CACF,MAAM,kBAAmB,MAAM,GAAG,SAAS,IACzC,YACA,QAAQ,GACT;AACD,KAAI,oBAAoB,KACtB,QAAO;AAET,KAAI,QAAQ,WAAW,QAAW;AAChC,MAAI,MAAM,oBAAoB,KAAK,gBAAgB,KAAK,OAAO,CAC7D,QAAO;AAET,MACE,CAAE,MAAMA,OACN,mBAAmB,WAAW,EAC9B,QAAQ,QACR,gBAAgB,UAAU,GAC3B,EACD;AACA,SAAM,mBAAmB,KAAK,gBAAgB,KAAK,OAAO;AAC1D,UAAO;;AAET,QAAM,qBAAqB,KAAK,gBAAgB,KAAK,OAAO;;AAE9D,QAAO;EACL,SAAS;EAET,MAAO,MAAM,GAAG,MAAM,QAAQ,gBAAgB,OAAO;EACtD;;AAGH,MAAa,qCAAqC,OAChD,KACA,SACwB;AACxB,QAAO,IAAI,YAAY,gBAAgB,EACrC,MAAM;EACJ,MAAM;EACN,GAAG;EACJ,EACF,CAAC"}
|
|
@@ -1,19 +0,0 @@
|
|
|
1
|
-
import { ActionCtx, MutationCtx } from "../types.js";
|
|
2
|
-
import { Config } from "../provider.js";
|
|
3
|
-
import * as convex_values103 from "convex/values";
|
|
4
|
-
import { Infer } from "convex/values";
|
|
5
|
-
|
|
6
|
-
//#region src/server/implementation/mutations/signature.d.ts
|
|
7
|
-
declare const verifierSignatureArgs: convex_values103.VObject<{
|
|
8
|
-
verifier: string;
|
|
9
|
-
signature: string;
|
|
10
|
-
}, {
|
|
11
|
-
verifier: convex_values103.VString<string, "required">;
|
|
12
|
-
signature: convex_values103.VString<string, "required">;
|
|
13
|
-
}, "required", "verifier" | "signature">;
|
|
14
|
-
type ReturnType = void;
|
|
15
|
-
declare function verifierSignatureImpl(ctx: MutationCtx, args: Infer<typeof verifierSignatureArgs>, config: Config): Promise<ReturnType>;
|
|
16
|
-
declare const callVerifierSignature: (ctx: ActionCtx, args: Infer<typeof verifierSignatureArgs>) => Promise<void>;
|
|
17
|
-
//#endregion
|
|
18
|
-
export { callVerifierSignature, verifierSignatureArgs, verifierSignatureImpl };
|
|
19
|
-
//# sourceMappingURL=signature.d.ts.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"signature.d.ts","names":[],"sources":["../../../../src/server/implementation/mutations/signature.ts"],"mappings":";;;;;;cAOa,qBAAA,mBAAqB,OAAA;;;;YAGhC,gBAAA,CAAA,OAAA;;;KAEG,UAAA;AAAA,iBAEiB,qBAAA,CACpB,GAAA,EAAK,WAAA,EACL,IAAA,EAAM,KAAA,QAAa,qBAAA,GACnB,MAAA,EAAQ,MAAA,GACP,OAAA,CAAQ,UAAA;AAAA,cAUE,qBAAA,GACX,GAAA,EAAK,SAAA,EACL,IAAA,EAAM,KAAA,QAAa,qBAAA,MAClB,OAAA"}
|
|
@@ -1,27 +0,0 @@
|
|
|
1
|
-
import { throwAuthError } from "../../errors.js";
|
|
2
|
-
import { authDb } from "../db.js";
|
|
3
|
-
import { AUTH_STORE_REF } from "./store.js";
|
|
4
|
-
import { v } from "convex/values";
|
|
5
|
-
|
|
6
|
-
//#region src/server/implementation/mutations/signature.ts
|
|
7
|
-
const verifierSignatureArgs = v.object({
|
|
8
|
-
verifier: v.string(),
|
|
9
|
-
signature: v.string()
|
|
10
|
-
});
|
|
11
|
-
async function verifierSignatureImpl(ctx, args, config) {
|
|
12
|
-
const { verifier, signature } = args;
|
|
13
|
-
const db = authDb(ctx, config);
|
|
14
|
-
const verifierDoc = await db.verifiers.getById(verifier);
|
|
15
|
-
if (verifierDoc === null) throwAuthError("INVALID_VERIFIER");
|
|
16
|
-
return await db.verifiers.patch(verifierDoc._id, { signature });
|
|
17
|
-
}
|
|
18
|
-
const callVerifierSignature = async (ctx, args) => {
|
|
19
|
-
return ctx.runMutation(AUTH_STORE_REF, { args: {
|
|
20
|
-
type: "verifierSignature",
|
|
21
|
-
...args
|
|
22
|
-
} });
|
|
23
|
-
};
|
|
24
|
-
|
|
25
|
-
//#endregion
|
|
26
|
-
export { callVerifierSignature, verifierSignatureArgs, verifierSignatureImpl };
|
|
27
|
-
//# sourceMappingURL=signature.js.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"signature.js","names":[],"sources":["../../../../src/server/implementation/mutations/signature.ts"],"sourcesContent":["import { GenericId, Infer, v } from \"convex/values\";\nimport { ActionCtx, MutationCtx } from \"../types\";\nimport * as Provider from \"../provider\";\nimport { authDb } from \"../db\";\nimport { AUTH_STORE_REF } from \"./store\";\nimport { throwAuthError } from \"../../errors\";\n\nexport const verifierSignatureArgs = v.object({\n verifier: v.string(),\n signature: v.string(),\n});\n\ntype ReturnType = void;\n\nexport async function verifierSignatureImpl(\n ctx: MutationCtx,\n args: Infer<typeof verifierSignatureArgs>,\n config: Provider.Config,\n): Promise<ReturnType> {\n const { verifier, signature } = args;\n const db = authDb(ctx, config);\n const verifierDoc = await db.verifiers.getById(verifier as GenericId<\"verifier\">);\n if (verifierDoc === null) {\n throwAuthError(\"INVALID_VERIFIER\");\n }\n return await db.verifiers.patch(verifierDoc._id, { signature });\n}\n\nexport const callVerifierSignature = async (\n ctx: ActionCtx,\n args: Infer<typeof verifierSignatureArgs>,\n): Promise<void> => {\n return ctx.runMutation(AUTH_STORE_REF, {\n args: {\n type: \"verifierSignature\",\n ...args,\n },\n });\n};\n"],"mappings":";;;;;;AAOA,MAAa,wBAAwB,EAAE,OAAO;CAC5C,UAAU,EAAE,QAAQ;CACpB,WAAW,EAAE,QAAQ;CACtB,CAAC;AAIF,eAAsB,sBACpB,KACA,MACA,QACqB;CACrB,MAAM,EAAE,UAAU,cAAc;CAChC,MAAM,KAAK,OAAO,KAAK,OAAO;CAC9B,MAAM,cAAc,MAAM,GAAG,UAAU,QAAQ,SAAkC;AACjF,KAAI,gBAAgB,KAClB,gBAAe,mBAAmB;AAEpC,QAAO,MAAM,GAAG,UAAU,MAAM,YAAY,KAAK,EAAE,WAAW,CAAC;;AAGjE,MAAa,wBAAwB,OACnC,KACA,SACkB;AAClB,QAAO,IAAI,YAAY,gBAAgB,EACrC,MAAM;EACJ,MAAM;EACN,GAAG;EACJ,EACF,CAAC"}
|
|
@@ -1,21 +0,0 @@
|
|
|
1
|
-
import { ActionCtx, MutationCtx, SessionInfo } from "../types.js";
|
|
2
|
-
import { Config } from "../provider.js";
|
|
3
|
-
import * as convex_values111 from "convex/values";
|
|
4
|
-
import { Infer } from "convex/values";
|
|
5
|
-
|
|
6
|
-
//#region src/server/implementation/mutations/signin.d.ts
|
|
7
|
-
declare const signInArgs: convex_values111.VObject<{
|
|
8
|
-
sessionId?: string | undefined;
|
|
9
|
-
userId: string;
|
|
10
|
-
generateTokens: boolean;
|
|
11
|
-
}, {
|
|
12
|
-
userId: convex_values111.VString<string, "required">;
|
|
13
|
-
sessionId: convex_values111.VString<string | undefined, "optional">;
|
|
14
|
-
generateTokens: convex_values111.VBoolean<boolean, "required">;
|
|
15
|
-
}, "required", "userId" | "sessionId" | "generateTokens">;
|
|
16
|
-
type ReturnType = SessionInfo;
|
|
17
|
-
declare function signInImpl(ctx: MutationCtx, args: Infer<typeof signInArgs>, config: Config): Promise<ReturnType>;
|
|
18
|
-
declare const callSignIn: (ctx: ActionCtx, args: Infer<typeof signInArgs>) => Promise<ReturnType>;
|
|
19
|
-
//#endregion
|
|
20
|
-
export { callSignIn, signInArgs, signInImpl };
|
|
21
|
-
//# sourceMappingURL=signin.d.ts.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"signin.d.ts","names":[],"sources":["../../../../src/server/implementation/mutations/signin.ts"],"mappings":";;;;;;cAUa,UAAA,mBAAU,OAAA;;;;;UAIrB,gBAAA,CAAA,OAAA;;;;KAEG,UAAA,GAAa,WAAA;AAAA,iBAEI,UAAA,CACpB,GAAA,EAAK,WAAA,EACL,IAAA,EAAM,KAAA,QAAa,UAAA,GACnB,MAAA,EAAQ,MAAA,GACP,OAAA,CAAQ,UAAA;AAAA,cAmBE,UAAA,GACX,GAAA,EAAK,SAAA,EACL,IAAA,EAAM,KAAA,QAAa,UAAA,MAClB,OAAA,CAAQ,UAAA"}
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"signin.js","names":[],"sources":["../../../../src/server/implementation/mutations/signin.ts"],"sourcesContent":["import { GenericId, Infer, v } from \"convex/values\";\nimport { ActionCtx, MutationCtx, SessionInfo } from \"../types\";\nimport * as Provider from \"../provider\";\nimport {\n createNewAndDeleteExistingSession,\n maybeGenerateTokensForSession,\n} from \"../sessions\";\nimport { LOG_LEVELS, logWithLevel } from \"../utils\";\nimport { AUTH_STORE_REF } from \"./store\";\n\nexport const signInArgs = v.object({\n userId: v.string(),\n sessionId: v.optional(v.string()),\n generateTokens: v.boolean(),\n});\n\ntype ReturnType = SessionInfo;\n\nexport async function signInImpl(\n ctx: MutationCtx,\n args: Infer<typeof signInArgs>,\n config: Provider.Config,\n): Promise<ReturnType> {\n logWithLevel(LOG_LEVELS.DEBUG, \"signInImpl args:\", args);\n const { userId, sessionId: existingSessionId, generateTokens } = args;\n const typedUserId = userId as GenericId<\"user\">;\n const typedExistingSessionId = existingSessionId as\n | GenericId<\"session\">\n | undefined;\n const sessionId =\n typedExistingSessionId ??\n (await createNewAndDeleteExistingSession(ctx, config, typedUserId));\n return await maybeGenerateTokensForSession(\n ctx,\n config,\n typedUserId,\n sessionId,\n generateTokens,\n );\n}\n\nexport const callSignIn = async (\n ctx: ActionCtx,\n args: Infer<typeof signInArgs>,\n): Promise<ReturnType> => {\n return ctx.runMutation(AUTH_STORE_REF, {\n args: {\n type: \"signIn\",\n ...args,\n },\n });\n};\n"],"mappings":";;;;;;AAUA,MAAa,aAAa,EAAE,OAAO;CACjC,QAAQ,EAAE,QAAQ;CAClB,WAAW,EAAE,SAAS,EAAE,QAAQ,CAAC;CACjC,gBAAgB,EAAE,SAAS;CAC5B,CAAC;AAIF,eAAsB,WACpB,KACA,MACA,QACqB;AACrB,cAAa,WAAW,OAAO,oBAAoB,KAAK;CACxD,MAAM,EAAE,QAAQ,WAAW,mBAAmB,mBAAmB;CACjE,MAAM,cAAc;AAOpB,QAAO,MAAM,8BACX,KACA,QACA,aAT6B,qBAK5B,MAAM,kCAAkC,KAAK,QAAQ,YAAY,EAMlE,eACD;;AAGH,MAAa,aAAa,OACxB,KACA,SACwB;AACxB,QAAO,IAAI,YAAY,gBAAgB,EACrC,MAAM;EACJ,MAAM;EACN,GAAG;EACJ,EACF,CAAC"}
|
|
@@ -1,14 +0,0 @@
|
|
|
1
|
-
import { ActionCtx, MutationCtx } from "../types.js";
|
|
2
|
-
import { Config } from "../provider.js";
|
|
3
|
-
import { GenericId } from "convex/values";
|
|
4
|
-
|
|
5
|
-
//#region src/server/implementation/mutations/signout.d.ts
|
|
6
|
-
type ReturnType = {
|
|
7
|
-
userId: GenericId<"user">;
|
|
8
|
-
sessionId: GenericId<"session">;
|
|
9
|
-
} | null;
|
|
10
|
-
declare function signOutImpl(ctx: MutationCtx, config: Config): Promise<ReturnType>;
|
|
11
|
-
declare const callSignOut: (ctx: ActionCtx) => Promise<void>;
|
|
12
|
-
//#endregion
|
|
13
|
-
export { callSignOut, signOutImpl };
|
|
14
|
-
//# sourceMappingURL=signout.d.ts.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"signout.d.ts","names":[],"sources":["../../../../src/server/implementation/mutations/signout.ts"],"mappings":";;;;;KAOK,UAAA;EACH,MAAA,EAAQ,SAAA;EACR,SAAA,EAAW,SAAA;AAAA;AAAA,iBAGS,WAAA,CACpB,GAAA,EAAK,WAAA,EACL,MAAA,EAAQ,MAAA,GACP,OAAA,CAAQ,UAAA;AAAA,cAaE,WAAA,GAAqB,GAAA,EAAK,SAAA,KAAY,OAAA"}
|
|
@@ -1,27 +0,0 @@
|
|
|
1
|
-
import { authDb } from "../db.js";
|
|
2
|
-
import { deleteSession, getAuthSessionId } from "../sessions.js";
|
|
3
|
-
import { AUTH_STORE_REF } from "./store.js";
|
|
4
|
-
|
|
5
|
-
//#region src/server/implementation/mutations/signout.ts
|
|
6
|
-
async function signOutImpl(ctx, config) {
|
|
7
|
-
const db = authDb(ctx, config);
|
|
8
|
-
const sessionId = await getAuthSessionId(ctx);
|
|
9
|
-
if (sessionId !== null) {
|
|
10
|
-
const session = await db.sessions.getById(sessionId);
|
|
11
|
-
if (session !== null) {
|
|
12
|
-
await deleteSession(ctx, session, config);
|
|
13
|
-
return {
|
|
14
|
-
userId: session.userId,
|
|
15
|
-
sessionId: session._id
|
|
16
|
-
};
|
|
17
|
-
}
|
|
18
|
-
}
|
|
19
|
-
return null;
|
|
20
|
-
}
|
|
21
|
-
const callSignOut = async (ctx) => {
|
|
22
|
-
return ctx.runMutation(AUTH_STORE_REF, { args: { type: "signOut" } });
|
|
23
|
-
};
|
|
24
|
-
|
|
25
|
-
//#endregion
|
|
26
|
-
export { callSignOut, signOutImpl };
|
|
27
|
-
//# sourceMappingURL=signout.js.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"signout.js","names":[],"sources":["../../../../src/server/implementation/mutations/signout.ts"],"sourcesContent":["import { GenericId } from \"convex/values\";\nimport { ActionCtx, MutationCtx } from \"../types\";\nimport { deleteSession, getAuthSessionId } from \"../sessions\";\nimport * as Provider from \"../provider\";\nimport { authDb } from \"../db\";\nimport { AUTH_STORE_REF } from \"./store\";\n\ntype ReturnType = {\n userId: GenericId<\"user\">;\n sessionId: GenericId<\"session\">;\n} | null;\n\nexport async function signOutImpl(\n ctx: MutationCtx,\n config: Provider.Config,\n): Promise<ReturnType> {\n const db = authDb(ctx, config);\n const sessionId = await getAuthSessionId(ctx);\n if (sessionId !== null) {\n const session = await db.sessions.getById(sessionId);\n if (session !== null) {\n await deleteSession(ctx, session, config);\n return { userId: session.userId, sessionId: session._id };\n }\n }\n return null;\n}\n\nexport const callSignOut = async (ctx: ActionCtx): Promise<void> => {\n return ctx.runMutation(AUTH_STORE_REF, {\n args: {\n type: \"signOut\",\n },\n });\n};\n"],"mappings":";;;;;AAYA,eAAsB,YACpB,KACA,QACqB;CACrB,MAAM,KAAK,OAAO,KAAK,OAAO;CAC9B,MAAM,YAAY,MAAM,iBAAiB,IAAI;AAC7C,KAAI,cAAc,MAAM;EACtB,MAAM,UAAU,MAAM,GAAG,SAAS,QAAQ,UAAU;AACpD,MAAI,YAAY,MAAM;AACpB,SAAM,cAAc,KAAK,SAAS,OAAO;AACzC,UAAO;IAAE,QAAQ,QAAQ;IAAQ,WAAW,QAAQ;IAAK;;;AAG7D,QAAO;;AAGT,MAAa,cAAc,OAAO,QAAkC;AAClE,QAAO,IAAI,YAAY,gBAAgB,EACrC,MAAM,EACJ,MAAM,WACP,EACF,CAAC"}
|
|
@@ -1,11 +0,0 @@
|
|
|
1
|
-
//#region src/server/implementation/mutations/store.d.ts
|
|
2
|
-
/**
|
|
3
|
-
* Internal function reference for the library's store dispatch mutation.
|
|
4
|
-
*
|
|
5
|
-
* This remains string-based because the library code cannot import the
|
|
6
|
-
* consumer app's generated `internal` API module.
|
|
7
|
-
*/
|
|
8
|
-
declare const AUTH_STORE_REF: any;
|
|
9
|
-
//#endregion
|
|
10
|
-
export { AUTH_STORE_REF };
|
|
11
|
-
//# sourceMappingURL=store.d.ts.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"store.d.ts","names":[],"sources":["../../../../src/server/implementation/mutations/store.ts"],"mappings":";;AAMA;;;;;cAAa,cAAA"}
|
|
@@ -1,12 +0,0 @@
|
|
|
1
|
-
//#region src/server/implementation/mutations/store.ts
|
|
2
|
-
/**
|
|
3
|
-
* Internal function reference for the library's store dispatch mutation.
|
|
4
|
-
*
|
|
5
|
-
* This remains string-based because the library code cannot import the
|
|
6
|
-
* consumer app's generated `internal` API module.
|
|
7
|
-
*/
|
|
8
|
-
const AUTH_STORE_REF = "auth:store";
|
|
9
|
-
|
|
10
|
-
//#endregion
|
|
11
|
-
export { AUTH_STORE_REF };
|
|
12
|
-
//# sourceMappingURL=store.js.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"store.js","names":[],"sources":["../../../../src/server/implementation/mutations/store.ts"],"sourcesContent":["/**\n * Internal function reference for the library's store dispatch mutation.\n *\n * This remains string-based because the library code cannot import the\n * consumer app's generated `internal` API module.\n */\nexport const AUTH_STORE_REF = \"auth:store\" as any;\n"],"mappings":";;;;;;;AAMA,MAAa,iBAAiB"}
|
|
@@ -1,11 +0,0 @@
|
|
|
1
|
-
import { ActionCtx, MutationCtx } from "../types.js";
|
|
2
|
-
import { Config } from "../provider.js";
|
|
3
|
-
import { GenericId } from "convex/values";
|
|
4
|
-
|
|
5
|
-
//#region src/server/implementation/mutations/verifier.d.ts
|
|
6
|
-
type ReturnType = GenericId<"verifier">;
|
|
7
|
-
declare function verifierImpl(ctx: MutationCtx, config: Config): Promise<ReturnType>;
|
|
8
|
-
declare const callVerifier: (ctx: ActionCtx) => Promise<ReturnType>;
|
|
9
|
-
//#endregion
|
|
10
|
-
export { callVerifier, verifierImpl };
|
|
11
|
-
//# sourceMappingURL=verifier.d.ts.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"verifier.d.ts","names":[],"sources":["../../../../src/server/implementation/mutations/verifier.ts"],"mappings":";;;;;KAOK,UAAA,GAAa,SAAA;AAAA,iBAEI,YAAA,CACpB,GAAA,EAAK,WAAA,EACL,MAAA,EAAQ,MAAA,GACP,OAAA,CAAQ,UAAA;AAAA,cAKE,YAAA,GAAsB,GAAA,EAAK,SAAA,KAAY,OAAA,CAAQ,UAAA"}
|
|
@@ -1,16 +0,0 @@
|
|
|
1
|
-
import { authDb } from "../db.js";
|
|
2
|
-
import { getAuthSessionId } from "../sessions.js";
|
|
3
|
-
import { AUTH_STORE_REF } from "./store.js";
|
|
4
|
-
|
|
5
|
-
//#region src/server/implementation/mutations/verifier.ts
|
|
6
|
-
async function verifierImpl(ctx, config) {
|
|
7
|
-
const sessionId = await getAuthSessionId(ctx) ?? void 0;
|
|
8
|
-
return await authDb(ctx, config).verifiers.create(sessionId);
|
|
9
|
-
}
|
|
10
|
-
const callVerifier = async (ctx) => {
|
|
11
|
-
return ctx.runMutation(AUTH_STORE_REF, { args: { type: "verifier" } });
|
|
12
|
-
};
|
|
13
|
-
|
|
14
|
-
//#endregion
|
|
15
|
-
export { callVerifier, verifierImpl };
|
|
16
|
-
//# sourceMappingURL=verifier.js.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"verifier.js","names":[],"sources":["../../../../src/server/implementation/mutations/verifier.ts"],"sourcesContent":["import { GenericId } from \"convex/values\";\nimport { ActionCtx, MutationCtx } from \"../types\";\nimport { getAuthSessionId } from \"../sessions\";\nimport * as Provider from \"../provider\";\nimport { authDb } from \"../db\";\nimport { AUTH_STORE_REF } from \"./store\";\n\ntype ReturnType = GenericId<\"verifier\">;\n\nexport async function verifierImpl(\n ctx: MutationCtx,\n config: Provider.Config,\n): Promise<ReturnType> {\n const sessionId = (await getAuthSessionId(ctx)) ?? undefined;\n return (await authDb(ctx, config).verifiers.create(sessionId)) as ReturnType;\n}\n\nexport const callVerifier = async (ctx: ActionCtx): Promise<ReturnType> => {\n return ctx.runMutation(AUTH_STORE_REF, {\n args: {\n type: \"verifier\",\n },\n });\n};\n"],"mappings":";;;;;AASA,eAAsB,aACpB,KACA,QACqB;CACrB,MAAM,YAAa,MAAM,iBAAiB,IAAI,IAAK;AACnD,QAAQ,MAAM,OAAO,KAAK,OAAO,CAAC,UAAU,OAAO,UAAU;;AAG/D,MAAa,eAAe,OAAO,QAAwC;AACzE,QAAO,IAAI,YAAY,gBAAgB,EACrC,MAAM,EACJ,MAAM,YACP,EACF,CAAC"}
|
|
@@ -1,25 +0,0 @@
|
|
|
1
|
-
import { ActionCtx, MutationCtx, SessionInfo } from "../types.js";
|
|
2
|
-
import { Config, GetProviderOrThrowFunc } from "../provider.js";
|
|
3
|
-
import * as convex_values115 from "convex/values";
|
|
4
|
-
import { Infer } from "convex/values";
|
|
5
|
-
|
|
6
|
-
//#region src/server/implementation/mutations/verify.d.ts
|
|
7
|
-
declare const verifyCodeAndSignInArgs: convex_values115.VObject<{
|
|
8
|
-
provider?: string | undefined;
|
|
9
|
-
verifier?: string | undefined;
|
|
10
|
-
params: any;
|
|
11
|
-
generateTokens: boolean;
|
|
12
|
-
allowExtraProviders: boolean;
|
|
13
|
-
}, {
|
|
14
|
-
params: convex_values115.VAny<any, "required", string>;
|
|
15
|
-
provider: convex_values115.VString<string | undefined, "optional">;
|
|
16
|
-
verifier: convex_values115.VString<string | undefined, "optional">;
|
|
17
|
-
generateTokens: convex_values115.VBoolean<boolean, "required">;
|
|
18
|
-
allowExtraProviders: convex_values115.VBoolean<boolean, "required">;
|
|
19
|
-
}, "required", "provider" | "params" | "verifier" | "generateTokens" | "allowExtraProviders" | `params.${string}`>;
|
|
20
|
-
type ReturnType = null | SessionInfo;
|
|
21
|
-
declare function verifyCodeAndSignInImpl(ctx: MutationCtx, args: Infer<typeof verifyCodeAndSignInArgs>, getProviderOrThrow: GetProviderOrThrowFunc, config: Config): Promise<ReturnType>;
|
|
22
|
-
declare const callVerifyCodeAndSignIn: (ctx: ActionCtx, args: Infer<typeof verifyCodeAndSignInArgs>) => Promise<ReturnType>;
|
|
23
|
-
//#endregion
|
|
24
|
-
export { callVerifyCodeAndSignIn, verifyCodeAndSignInArgs, verifyCodeAndSignInImpl };
|
|
25
|
-
//# sourceMappingURL=verify.d.ts.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"verify.d.ts","names":[],"sources":["../../../../src/server/implementation/mutations/verify.ts"],"mappings":";;;;;;cAmBa,uBAAA,mBAAuB,OAAA;;;;;;;UAMlC,gBAAA,CAAA,IAAA;;;;;;KAEG,UAAA,UAAoB,WAAA;AAAA,iBAEH,uBAAA,CACpB,GAAA,EAAK,WAAA,EACL,IAAA,EAAM,KAAA,QAAa,uBAAA,GACnB,kBAAA,EAAoB,sBAAA,EACpB,MAAA,EAAQ,MAAA,GACP,OAAA,CAAQ,UAAA;AAAA,cAoDE,uBAAA,GACX,GAAA,EAAK,SAAA,EACL,IAAA,EAAM,KAAA,QAAa,uBAAA,MAClB,OAAA,CAAQ,UAAA"}
|