@robelest/convex-auth 0.0.4-preview.28 → 0.0.4-preview.29

package/dist/bin.js

@@ -6255,7 +6255,10 @@ gradient.pastel = pastel;
 //#region src/cli/keys.ts
 async function generateKeys() {
 	try {
-		const keys = await generateKeyPair("RS256", { extractable: true });
+		const keys = await generateKeyPair("EdDSA", {
+			crv: "Ed25519",
+			extractable: true
+		});
 		const privateKey = await exportPKCS8(keys.privateKey);
 		const publicKey = await exportJWK(keys.publicKey);
 		const jwks = JSON.stringify({ keys: [{

package/dist/component/_generated/component.d.ts

@@ -16,6 +16,7 @@ type ComponentApi<Name extends string | undefined = string | undefined> = {
   public: {
     accountDelete: FunctionReference<"mutation", "internal", {
       accountId: string;
+      requireOtherAccount?: boolean;
     }, null, Name>;
     accountGet: FunctionReference<"query", "internal", {
       provider: string;
@@ -290,6 +291,68 @@ type ComponentApi<Name extends string | undefined = string | undefined> = {
         }, null, Name>;
       };
     };
+    groupAncestors: FunctionReference<"query", "internal", {
+      groupId: string;
+      includeSelf?: boolean;
+      maxDepth?: number;
+    }, {
+      ancestors: Array<{
+        _creationTime: number;
+        _id: string;
+        extend?: any;
+        isRoot?: boolean;
+        name: string;
+        parentGroupId?: string;
+        policy?: {
+          extend?: any;
+          identity: {
+            accountLinking: {
+              oidc: "verifiedEmail" | "none";
+              saml: "verifiedEmail" | "none";
+            };
+          };
+          provisioning: {
+            deprovision: {
+              mode: "soft" | "hard";
+            };
+            groups: {
+              mapping?: Record<string, Array<string>>;
+              mode: "ignore" | "sync";
+              source: "protocol";
+            };
+            jit: {
+              defaultRole?: string;
+              defaultRoleIds?: Array<string>;
+              mode: "off" | "createUser" | "createUserAndMembership";
+            };
+            roles: {
+              mapping?: Record<string, Array<string>>;
+              mode: "ignore" | "map";
+              source: "protocol";
+            };
+            scimReuse: {
+              user: "externalId" | "none";
+            };
+            user: {
+              authority: "app" | "sso" | "scim";
+              createOnSignIn: boolean;
+              updateProfileFromScim: "never" | "missing" | "always";
+              updateProfileOnLogin: "never" | "missing" | "always";
+            };
+          };
+          version: 1;
+        };
+        rootGroupId?: string;
+        slug?: string;
+        tags?: Array<{
+          key: string;
+          value: string;
+        }>;
+        type?: string;
+      }>;
+      cycleDetected: boolean;
+      maxDepthReached: boolean;
+    }, Name>;
     groupAuditEventCreate: FunctionReference<"mutation", "internal", {
       actorId?: string;
       actorType: "user" | "system" | "scim" | "api_key" | "webhook";
@@ -347,6 +410,7 @@ type ComponentApi<Name extends string | undefined = string | undefined> = {
     }, null, Name>;
     groupConnectionDomainList: FunctionReference<"query", "internal", {
       connectionId: string;
+      limit?: number;
     }, Array<{
       _creationTime: number;
       _id: string;
@@ -529,6 +593,25 @@ type ComponentApi<Name extends string | undefined = string | undefined> = {
       resourceType: "user" | "group";
       userId?: string;
     } | null, Name>;
+    groupConnectionScimIdentityGetByGroupConnectionAndUsers: FunctionReference<"query", "internal", {
+      connectionId: string;
+      userIds: Array<string>;
+    }, Array<{
+      identity: {
+        _creationTime: number;
+        _id: string;
+        active?: boolean;
+        connectionId: string;
+        externalId: string;
+        groupId: string;
+        lastProvisionedAt?: number;
+        mappedGroupId?: string;
+        raw?: any;
+        resourceType: "user" | "group";
+        userId?: string;
+      } | null;
+      userId: string;
+    }>, Name>;
     groupConnectionScimIdentityGetByMappedGroup: FunctionReference<"query", "internal", {
       mappedGroupId: string;
     }, {
@@ -682,6 +765,62 @@ type ComponentApi<Name extends string | undefined = string | undefined> = {
       }>;
       type?: string;
     } | null, Name>;
+    groupGetMany: FunctionReference<"query", "internal", {
+      groupIds: Array<string>;
+    }, Array<{
+      _creationTime: number;
+      _id: string;
+      extend?: any;
+      isRoot?: boolean;
+      name: string;
+      parentGroupId?: string;
+      policy?: {
+        extend?: any;
+        identity: {
+          accountLinking: {
+            oidc: "verifiedEmail" | "none";
+            saml: "verifiedEmail" | "none";
+          };
+        };
+        provisioning: {
+          deprovision: {
+            mode: "soft" | "hard";
+          };
+          groups: {
+            mapping?: Record<string, Array<string>>;
+            mode: "ignore" | "sync";
+            source: "protocol";
+          };
+          jit: {
+            defaultRole?: string;
+            defaultRoleIds?: Array<string>;
+            mode: "off" | "createUser" | "createUserAndMembership";
+          };
+          roles: {
+            mapping?: Record<string, Array<string>>;
+            mode: "ignore" | "map";
+            source: "protocol";
+          };
+          scimReuse: {
+            user: "externalId" | "none";
+          };
+          user: {
+            authority: "app" | "sso" | "scim";
+            createOnSignIn: boolean;
+            updateProfileFromScim: "never" | "missing" | "always";
+            updateProfileOnLogin: "never" | "missing" | "always";
+          };
+        };
+        version: 1;
+      };
+      rootGroupId?: string;
+      slug?: string;
+      tags?: Array<{
+        key: string;
+        value: string;
+      }>;
+      type?: string;
+    } | null>, Name>;
     groupList: FunctionReference<"query", "internal", {
       cursor?: string | null;
       limit?: number;
@@ -761,6 +900,68 @@ type ComponentApi<Name extends string | undefined = string | undefined> = {
     }, Name>;
     groups: {
       core: {
+        groupAncestors: FunctionReference<"query", "internal", {
+          groupId: string;
+          includeSelf?: boolean;
+          maxDepth?: number;
+        }, {
+          ancestors: Array<{
+            _creationTime: number;
+            _id: string;
+            extend?: any;
+            isRoot?: boolean;
+            name: string;
+            parentGroupId?: string;
+            policy?: {
+              extend?: any;
+              identity: {
+                accountLinking: {
+                  oidc: "verifiedEmail" | "none";
+                  saml: "verifiedEmail" | "none";
+                };
+              };
+              provisioning: {
+                deprovision: {
+                  mode: "soft" | "hard";
+                };
+                groups: {
+                  mapping?: Record<string, Array<string>>;
+                  mode: "ignore" | "sync";
+                  source: "protocol";
+                };
+                jit: {
+                  defaultRole?: string;
+                  defaultRoleIds?: Array<string>;
+                  mode: "off" | "createUser" | "createUserAndMembership";
+                };
+                roles: {
+                  mapping?: Record<string, Array<string>>;
+                  mode: "ignore" | "map";
+                  source: "protocol";
+                };
+                scimReuse: {
+                  user: "externalId" | "none";
+                };
+                user: {
+                  authority: "app" | "sso" | "scim";
+                  createOnSignIn: boolean;
+                  updateProfileFromScim: "never" | "missing" | "always";
+                  updateProfileOnLogin: "never" | "missing" | "always";
+                };
+              };
+              version: 1;
+            };
+            rootGroupId?: string;
+            slug?: string;
+            tags?: Array<{
+              key: string;
+              value: string;
+            }>;
+            type?: string;
+          }>;
+          cycleDetected: boolean;
+          maxDepthReached: boolean;
+        }, Name>;
         groupCreate: FunctionReference<"mutation", "internal", {
           extend?: any;
           name: string;
@@ -831,6 +1032,62 @@ type ComponentApi<Name extends string | undefined = string | undefined> = {
           }>;
           type?: string;
         } | null, Name>;
+        groupGetMany: FunctionReference<"query", "internal", {
+          groupIds: Array<string>;
+        }, Array<{
+          _creationTime: number;
+          _id: string;
+          extend?: any;
+          isRoot?: boolean;
+          name: string;
+          parentGroupId?: string;
+          policy?: {
+            extend?: any;
+            identity: {
+              accountLinking: {
+                oidc: "verifiedEmail" | "none";
+                saml: "verifiedEmail" | "none";
+              };
+            };
+            provisioning: {
+              deprovision: {
+                mode: "soft" | "hard";
+              };
+              groups: {
+                mapping?: Record<string, Array<string>>;
+                mode: "ignore" | "sync";
+                source: "protocol";
+              };
+              jit: {
+                defaultRole?: string;
+                defaultRoleIds?: Array<string>;
+                mode: "off" | "createUser" | "createUserAndMembership";
+              };
+              roles: {
+                mapping?: Record<string, Array<string>>;
+                mode: "ignore" | "map";
+                source: "protocol";
+              };
+              scimReuse: {
+                user: "externalId" | "none";
+              };
+              user: {
+                authority: "app" | "sso" | "scim";
+                createOnSignIn: boolean;
+                updateProfileFromScim: "never" | "missing" | "always";
+                updateProfileOnLogin: "never" | "missing" | "always";
+              };
+            };
+            version: 1;
+          };
+          rootGroupId?: string;
+          slug?: string;
+          tags?: Array<{
+            key: string;
+            value: string;
+          }>;
+          type?: string;
+        } | null>, Name>;
         groupList: FunctionReference<"query", "internal", {
           cursor?: string | null;
           limit?: number;
@@ -1041,6 +1298,19 @@ type ComponentApi<Name extends string | undefined = string | undefined> = {
           status?: string;
           userId: string;
         } | null, Name>;
+        memberGetByGroupAndUserMany: FunctionReference<"query", "internal", {
+          groupIds: Array<string>;
+          userId: string;
+        }, Array<{
+          _creationTime: number;
+          _id: string;
+          extend?: any;
+          groupId: string;
+          role?: string;
+          roleIds?: Array<string>;
+          status?: string;
+          userId: string;
+        } | null>, Name>;
         memberList: FunctionReference<"query", "internal", {
           cursor?: string | null;
           limit?: number;
@@ -1200,6 +1470,7 @@ type ComponentApi<Name extends string | undefined = string | undefined> = {
       accounts: {
         accountDelete: FunctionReference<"mutation", "internal", {
           accountId: string;
+          requireOtherAccount?: boolean;
         }, null, Name>;
         accountGet: FunctionReference<"query", "internal", {
           provider: string;
@@ -1413,6 +1684,7 @@ type ComponentApi<Name extends string | undefined = string | undefined> = {
       };
       users: {
         userDelete: FunctionReference<"mutation", "internal", {
+          cascade?: boolean;
           userId: string;
         }, null, Name>;
         userFindByVerifiedEmail: FunctionReference<"query", "internal", {
@@ -1423,6 +1695,7 @@ type ComponentApi<Name extends string | undefined = string | undefined> = {
           email?: string;
           emailVerificationTime?: number;
           extend?: any;
+          hasTotp?: boolean;
           image?: string;
           isAnonymous?: boolean;
           name?: string;
@@ -1437,6 +1710,7 @@ type ComponentApi<Name extends string | undefined = string | undefined> = {
           email?: string;
           emailVerificationTime?: number;
           extend?: any;
+          hasTotp?: boolean;
           image?: string;
           isAnonymous?: boolean;
           name?: string;
@@ -1451,12 +1725,28 @@ type ComponentApi<Name extends string | undefined = string | undefined> = {
           email?: string;
           emailVerificationTime?: number;
           extend?: any;
+          hasTotp?: boolean;
           image?: string;
           isAnonymous?: boolean;
           name?: string;
           phone?: string;
           phoneVerificationTime?: number;
         } | null, Name>;
+        userGetMany: FunctionReference<"query", "internal", {
+          userIds: Array<string>;
+        }, Array<{
+          _creationTime: number;
+          _id: string;
+          email?: string;
+          emailVerificationTime?: number;
+          extend?: any;
+          hasTotp?: boolean;
+          image?: string;
+          isAnonymous?: boolean;
+          name?: string;
+          phone?: string;
+          phoneVerificationTime?: number;
+        } | null>, Name>;
         userInsert: FunctionReference<"mutation", "internal", {
           data: any;
         }, string, Name>;
@@ -1478,6 +1768,7 @@ type ComponentApi<Name extends string | undefined = string | undefined> = {
             email?: string;
             emailVerificationTime?: number;
             extend?: any;
+            hasTotp?: boolean;
             image?: string;
             isAnonymous?: boolean;
             name?: string;
@@ -1782,6 +2073,19 @@ type ComponentApi<Name extends string | undefined = string | undefined> = {
       status?: string;
       userId: string;
     } | null, Name>;
+    memberGetByGroupAndUserMany: FunctionReference<"query", "internal", {
+      groupIds: Array<string>;
+      userId: string;
+    }, Array<{
+      _creationTime: number;
+      _id: string;
+      extend?: any;
+      groupId: string;
+      role?: string;
+      roleIds?: Array<string>;
+      status?: string;
+      userId: string;
+    } | null>, Name>;
     memberList: FunctionReference<"query", "internal", {
       cursor?: string | null;
       limit?: number;
@@ -2319,6 +2623,7 @@ type ComponentApi<Name extends string | undefined = string | undefined> = {
         }, null, Name>;
         groupConnectionDomainList: FunctionReference<"query", "internal", {
           connectionId: string;
+          limit?: number;
         }, Array<{
           _creationTime: number;
           _id: string;
@@ -2442,6 +2747,25 @@ type ComponentApi<Name extends string | undefined = string | undefined> = {
           resourceType: "user" | "group";
           userId?: string;
         } | null, Name>;
+        groupConnectionScimIdentityGetByGroupConnectionAndUsers: FunctionReference<"query", "internal", {
+          connectionId: string;
+          userIds: Array<string>;
+        }, Array<{
+          identity: {
+            _creationTime: number;
+            _id: string;
+            active?: boolean;
+            connectionId: string;
+            externalId: string;
+            groupId: string;
+            lastProvisionedAt?: number;
+            mappedGroupId?: string;
+            raw?: any;
+            resourceType: "user" | "group";
+            userId?: string;
+          } | null;
+          userId: string;
+        }>, Name>;
         groupConnectionScimIdentityGetByMappedGroup: FunctionReference<"query", "internal", {
           mappedGroupId: string;
         }, {
@@ -2686,6 +3010,7 @@ type ComponentApi<Name extends string | undefined = string | undefined> = {
       totpId: string;
     }, null, Name>;
     userDelete: FunctionReference<"mutation", "internal", {
+      cascade?: boolean;
       userId: string;
     }, null, Name>;
     userFindByVerifiedEmail: FunctionReference<"query", "internal", {
@@ -2696,6 +3021,7 @@ type ComponentApi<Name extends string | undefined = string | undefined> = {
       email?: string;
       emailVerificationTime?: number;
       extend?: any;
+      hasTotp?: boolean;
       image?: string;
       isAnonymous?: boolean;
       name?: string;
@@ -2710,6 +3036,7 @@ type ComponentApi<Name extends string | undefined = string | undefined> = {
       email?: string;
       emailVerificationTime?: number;
       extend?: any;
+      hasTotp?: boolean;
       image?: string;
       isAnonymous?: boolean;
       name?: string;
@@ -2724,12 +3051,28 @@ type ComponentApi<Name extends string | undefined = string | undefined> = {
       email?: string;
       emailVerificationTime?: number;
       extend?: any;
+      hasTotp?: boolean;
       image?: string;
       isAnonymous?: boolean;
       name?: string;
       phone?: string;
       phoneVerificationTime?: number;
     } | null, Name>;
+    userGetMany: FunctionReference<"query", "internal", {
+      userIds: Array<string>;
+    }, Array<{
+      _creationTime: number;
+      _id: string;
+      email?: string;
+      emailVerificationTime?: number;
+      extend?: any;
+      hasTotp?: boolean;
+      image?: string;
+      isAnonymous?: boolean;
+      name?: string;
+      phone?: string;
+      phoneVerificationTime?: number;
+    } | null>, Name>;
     userInsert: FunctionReference<"mutation", "internal", {
       data: any;
     }, string, Name>;
@@ -2751,6 +3094,7 @@ type ComponentApi<Name extends string | undefined = string | undefined> = {
         email?: string;
         emailVerificationTime?: number;
         extend?: any;
+        hasTotp?: boolean;
         image?: string;
         isAnonymous?: boolean;
         name?: string;

package/dist/component/convex.config.d.ts

@@ -1,7 +1,7 @@
-import * as convex_server0 from "convex/server";
+import * as convex_server7 from "convex/server";
 
 //#region src/component/convex.config.d.ts
-declare const component: convex_server0.ComponentDefinition<any>;
+declare const component: convex_server7.ComponentDefinition<any>;
 //#endregion
 export { component as default };
 //# sourceMappingURL=convex.config.d.ts.map

package/dist/component/model.d.ts

@@ -1,7 +1,7 @@
-import * as convex_values475 from "convex/values";
+import * as convex_values478 from "convex/values";
 
 //#region src/component/model.d.ts
-declare const vApiKeyDoc: convex_values475.VObject<{
+declare const vApiKeyDoc: convex_values478.VObject<{
   lastUsedAt?: number | undefined;
   expiresAt?: number | undefined;
   rateLimit?: {
@@ -16,7 +16,7 @@ declare const vApiKeyDoc: convex_values475.VObject<{
   _creationTime: number;
   name: string;
   revoked: boolean;
-  userId: convex_values475.GenericId<"User">;
+  userId: convex_values478.GenericId<"User">;
   prefix: string;
   hashedKey: string;
   scopes: {
@@ -24,43 +24,43 @@ declare const vApiKeyDoc: convex_values475.VObject<{
     actions: string[];
   }[];
   createdAt: number;
-  _id: convex_values475.GenericId<"ApiKey">;
+  _id: convex_values478.GenericId<"ApiKey">;
 }, {
-  userId: convex_values475.VId<convex_values475.GenericId<"User">, "required">;
-  prefix: convex_values475.VString<string, "required">;
-  hashedKey: convex_values475.VString<string, "required">;
-  name: convex_values475.VString<string, "required">;
-  scopes: convex_values475.VArray<{
+  userId: convex_values478.VId<convex_values478.GenericId<"User">, "required">;
+  prefix: convex_values478.VString<string, "required">;
+  hashedKey: convex_values478.VString<string, "required">;
+  name: convex_values478.VString<string, "required">;
+  scopes: convex_values478.VArray<{
     resource: string;
     actions: string[];
-  }[], convex_values475.VObject<{
+  }[], convex_values478.VObject<{
     resource: string;
     actions: string[];
   }, {
-    resource: convex_values475.VString<string, "required">;
-    actions: convex_values475.VArray<string[], convex_values475.VString<string, "required">, "required">;
+    resource: convex_values478.VString<string, "required">;
+    actions: convex_values478.VArray<string[], convex_values478.VString<string, "required">, "required">;
   }, "required", "resource" | "actions">, "required">;
-  rateLimit: convex_values475.VObject<{
+  rateLimit: convex_values478.VObject<{
     maxRequests: number;
     windowMs: number;
   } | undefined, {
-    maxRequests: convex_values475.VFloat64<number, "required">;
-    windowMs: convex_values475.VFloat64<number, "required">;
+    maxRequests: convex_values478.VFloat64<number, "required">;
+    windowMs: convex_values478.VFloat64<number, "required">;
   }, "optional", "maxRequests" | "windowMs">;
-  rateLimitState: convex_values475.VObject<{
+  rateLimitState: convex_values478.VObject<{
     attemptsLeft: number;
     lastAttemptTime: number;
   } | undefined, {
-    attemptsLeft: convex_values475.VFloat64<number, "required">;
-    lastAttemptTime: convex_values475.VFloat64<number, "required">;
+    attemptsLeft: convex_values478.VFloat64<number, "required">;
+    lastAttemptTime: convex_values478.VFloat64<number, "required">;
   }, "optional", "attemptsLeft" | "lastAttemptTime">;
-  expiresAt: convex_values475.VFloat64<number | undefined, "optional">;
-  lastUsedAt: convex_values475.VFloat64<number | undefined, "optional">;
-  createdAt: convex_values475.VFloat64<number, "required">;
-  revoked: convex_values475.VBoolean<boolean, "required">;
-  metadata: convex_values475.VAny<any, "optional", string>;
-  _id: convex_values475.VId<convex_values475.GenericId<"ApiKey">, "required">;
-  _creationTime: convex_values475.VFloat64<number, "required">;
+  expiresAt: convex_values478.VFloat64<number | undefined, "optional">;
+  lastUsedAt: convex_values478.VFloat64<number | undefined, "optional">;
+  createdAt: convex_values478.VFloat64<number, "required">;
+  revoked: convex_values478.VBoolean<boolean, "required">;
+  metadata: convex_values478.VAny<any, "optional", string>;
+  _id: convex_values478.VId<convex_values478.GenericId<"ApiKey">, "required">;
+  _creationTime: convex_values478.VFloat64<number, "required">;
 }, "required", "_creationTime" | "name" | "revoked" | "lastUsedAt" | "expiresAt" | "userId" | "prefix" | "hashedKey" | "scopes" | "rateLimit" | "rateLimitState" | "createdAt" | "metadata" | "_id" | "rateLimit.maxRequests" | "rateLimit.windowMs" | "rateLimitState.attemptsLeft" | "rateLimitState.lastAttemptTime" | `metadata.${string}`>;
 //#endregion
 export { vApiKeyDoc };

package/dist/component/model.js

@@ -116,6 +116,7 @@ const vUserDoc = v.object({
 	phone: v.optional(v.string()),
 	phoneVerificationTime: v.optional(v.number()),
 	isAnonymous: v.optional(v.boolean()),
+	hasTotp: v.optional(v.boolean()),
 	extend: v.optional(v.any())
 });
 const vSessionDoc = v.object({

package/dist/component/public/factors/totp.js

@@ -183,6 +183,11 @@ const totpMarkVerified = mutation({
 			verified: true,
 			lastUsedAt
 		});
+		const factor = await ctx.db.get("TotpFactor", totpId);
+		if (factor !== null) {
+			const user = await ctx.db.get("User", factor.userId);
+			if (user !== null && user.hasTotp !== true) await ctx.db.patch("User", factor.userId, { hasTotp: true });
+		}
 		return null;
 	}
 });
@@ -244,7 +249,14 @@ const totpDelete = mutation({
 	args: { totpId: v.id("TotpFactor") },
 	returns: v.null(),
 	handler: async (ctx, { totpId }) => {
+		const factor = await ctx.db.get("TotpFactor", totpId);
 		await ctx.db.delete("TotpFactor", totpId);
+		if (factor !== null && factor.verified) {
+			if (await ctx.db.query("TotpFactor").withIndex("user_id_verified", (q) => q.eq("userId", factor.userId).eq("verified", true)).first() === null) {
+				const user = await ctx.db.get("User", factor.userId);
+				if (user !== null && user.hasTotp === true) await ctx.db.patch("User", factor.userId, { hasTotp: false });
+			}
+		}
 		return null;
 	}
 });