@robelest/convex-auth 0.0.4-preview.34 → 0.0.4-preview.36

package/dist/component/schema.js

@@ -20,6 +20,7 @@ var schema_default = defineSchema({
 		phoneVerificationTime: v.optional(v.number()),
 		isAnonymous: v.optional(v.boolean()),
 		lastActiveGroup: v.optional(v.id("Group")),
+		hasTotp: v.optional(v.boolean()),
 		extend: v.optional(v.any())
 	}).index("email", ["email"]).index("email_verified", ["email", "emailVerificationTime"]).index("phone", ["phone"]).index("phone_verified", ["phone", "phoneVerificationTime"]),
 	UserEmail: defineTable({

package/dist/core/index.d.ts

@@ -179,6 +179,31 @@ declare function createAuthContext(component: ConvexAuthConfig["component"], con
     }>;
   };
   group: {
+    active: {
+      get: (ctx: ComponentReadCtx & {
+        auth: convex_server0.Auth;
+      }, opts?: {
+        userId?: string;
+      }) => Promise<{
+        groupId: string;
+        group: Doc<"Group"> | null;
+        membership: Doc<"GroupMember">;
+      } | null>;
+      set: (ctx: ComponentCtx & {
+        auth: convex_server0.Auth;
+      }, groupId: string, opts?: {
+        userId?: string;
+      }) => Promise<{
+        groupId: string;
+      }>;
+      clear: (ctx: ComponentCtx & {
+        auth: convex_server0.Auth;
+      }, opts?: {
+        userId?: string;
+      }) => Promise<{
+        groupId: null;
+      }>;
+    };
     create: (ctx: ComponentCtx, data: {
       name: string;
       slug?: string;
@@ -474,31 +499,6 @@ declare function createAuthContext(component: ConvexAuthConfig["component"], con
       secret: string;
     }>;
   };
-  active: {
-    get: (ctx: ComponentReadCtx & {
-      auth: convex_server0.Auth;
-    }, opts?: {
-      userId?: string;
-    }) => Promise<{
-      groupId: string;
-      group: Doc<"Group"> | null;
-      membership: Doc<"GroupMember">;
-    } | null>;
-    set: (ctx: ComponentCtx & {
-      auth: convex_server0.Auth;
-    }, groupId: string, opts?: {
-      userId?: string;
-    }) => Promise<{
-      groupId: string;
-    }>;
-    clear: (ctx: ComponentCtx & {
-      auth: convex_server0.Auth;
-    }, opts?: {
-      userId?: string;
-    }) => Promise<{
-      groupId: null;
-    }>;
-  };
 };
 //#endregion
 export { type AuthContext, type AuthContextConfig, type OptionalAuthContext, type UserDoc, createAuthContext };

package/dist/core/index.js

@@ -64,11 +64,13 @@ function createAuthContext(component, config) {
 		user: domains.user,
 		session: domains.session,
 		account: domains.account,
-		group: domains.group,
+		group: {
+			...domains.group,
+			active: domains.active
+		},
 		member: domains.member,
 		invite: domains.invite,
 		key: domains.key,
-		active: domains.active,
 		...createAuthContextFacade(authLike)
 	};
 }

package/dist/model.js

@@ -118,6 +118,7 @@ const vUserDoc = v.object({
 	phoneVerificationTime: v.optional(v.number()),
 	isAnonymous: v.optional(v.boolean()),
 	lastActiveGroup: v.optional(v.id(TABLES.Group)),
+	hasTotp: v.optional(v.boolean()),
 	extend: v.optional(v.any())
 });
 const vUserEmailSource = v.union(v.literal("password"), v.literal("oauth"), v.literal("oidc"), v.literal("saml"), v.literal("scim"));

package/dist/server/auth.d.ts

@@ -117,11 +117,12 @@ type AuthApiBase<TAuthorization extends AuthAuthorizationConfig | undefined = un
   session: ReturnType<typeof Auth>["auth"]["session"];
   provider: ReturnType<typeof Auth>["auth"]["provider"];
   account: ReturnType<typeof Auth>["auth"]["account"];
-  group: ReturnType<typeof Auth>["auth"]["group"];
+  group: ReturnType<typeof Auth>["auth"]["group"] & {
+    /** Current user's active-group selection (`get` / `set` / `clear`). */active: ReturnType<typeof Auth>["auth"]["active"];
+  };
   member: MemberApiWithAuthorization<TAuthorization>;
   invite: ReturnType<typeof Auth>["auth"]["invite"];
-  key: ReturnType<typeof Auth>["auth"]["key"]; /** Current user's active-group selection (`get` / `set` / `clear`). */
-  active: ReturnType<typeof Auth>["auth"]["active"];
+  key: ReturnType<typeof Auth>["auth"]["key"];
   request: ReturnType<typeof Auth>["auth"]["request"];
   /**
    * Resolve the current request's auth context. Framework-agnostic — use

package/dist/server/auth.js

@@ -142,12 +142,12 @@ function createAuth(component, config) {
 		account: authResult.auth.account,
 		group: {
 			...authResult.auth.group,
-			sso: publicGroupSso
+			sso: publicGroupSso,
+			active: authResult.auth.active
 		},
 		member: authResult.auth.member,
 		invite: authResult.auth.invite,
 		key: authResult.auth.key,
-		active: authResult.auth.active,
 		request: authResult.auth.request,
 		...createAuthContextFacade(authResult.auth)
 	};

package/dist/server/mounts.d.ts

@@ -215,10 +215,10 @@ declare function sso<TAuthorization extends AuthAuthorizationConfig | undefined
     connection: {
       create: convex_server19.RegisteredMutation<"public", {
         name?: string | undefined;
-        slug?: string | undefined;
         status?: "draft" | "active" | "disabled" | undefined;
+        slug?: string | undefined;
         domain?: string | undefined;
-        protocol: "saml" | "oidc";
+        protocol: "oidc" | "saml";
         groupId: string;
       }, Promise<{
         groupId: string;
@@ -264,9 +264,9 @@ declare function sso<TAuthorization extends AuthAuthorizationConfig | undefined
       list: convex_server19.RegisteredQuery<"public", {
         limit?: number | undefined;
         where?: {
+          status?: "draft" | "active" | "disabled" | undefined;
           slug?: string | undefined;
           groupId?: string | undefined;
-          status?: "draft" | "active" | "disabled" | undefined;
         } | undefined;
         cursor?: string | null | undefined;
         orderBy?: string | undefined;
@@ -289,8 +289,8 @@ declare function sso<TAuthorization extends AuthAuthorizationConfig | undefined
         connectionId: string;
         data: {
           name?: string | undefined;
-          slug?: string | undefined;
           status?: "draft" | "active" | "disabled" | undefined;
+          slug?: string | undefined;
         };
       }, Promise<{
         connectionId: string;
@@ -441,13 +441,13 @@ declare function sso<TAuthorization extends AuthAuthorizationConfig | undefined
       configure: convex_server19.RegisteredMutation<"public", {
         profile?: {
           mapping?: {
-            email?: string | undefined;
             name?: string | undefined;
-            emailVerified?: string | undefined;
+            email?: string | undefined;
             image?: string | undefined;
-            subject?: string | undefined;
+            emailVerified?: string | undefined;
             groups?: string | undefined;
             roles?: string | undefined;
+            subject?: string | undefined;
           } | undefined;
           extraFields?: Record<string, string> | undefined;
         } | undefined;
@@ -511,12 +511,12 @@ declare function sso<TAuthorization extends AuthAuthorizationConfig | undefined
       configure: convex_server19.RegisteredAction<"public", {
         profile?: {
           mapping?: {
-            email?: string | undefined;
             name?: string | undefined;
+            email?: string | undefined;
             image?: string | undefined;
-            subject?: string | undefined;
             groups?: string | undefined;
             roles?: string | undefined;
+            subject?: string | undefined;
             firstName?: string | undefined;
             lastName?: string | undefined;
           } | undefined;
@@ -600,8 +600,8 @@ declare function sso<TAuthorization extends AuthAuthorizationConfig | undefined
         patch: {
           identity?: {
             accountLinking?: {
-              saml?: "verifiedEmail" | "none" | "sameConnection" | undefined;
               oidc?: "verifiedEmail" | "none" | "sameConnection" | undefined;
+              saml?: "verifiedEmail" | "none" | "sameConnection" | undefined;
             } | undefined;
           } | undefined;
           provisioning?: {
@@ -609,7 +609,7 @@ declare function sso<TAuthorization extends AuthAuthorizationConfig | undefined
               createOnSignIn?: boolean | undefined;
               updateProfileOnLogin?: "never" | "missing" | "always" | undefined;
               updateProfileFromScim?: "never" | "missing" | "always" | undefined;
-              authority?: "app" | "sso" | "scim" | undefined;
+              authority?: "scim" | "app" | "sso" | undefined;
             } | undefined;
             scimReuse?: {
               user?: "none" | "externalId" | undefined;
@@ -622,13 +622,13 @@ declare function sso<TAuthorization extends AuthAuthorizationConfig | undefined
               mode?: "soft" | "hard" | undefined;
             } | undefined;
             groups?: {
-              mode?: "ignore" | "sync" | undefined;
               source?: "protocol" | undefined;
+              mode?: "ignore" | "sync" | undefined;
               mapping?: Record<string, string[]> | undefined;
             } | undefined;
             roles?: {
-              mode?: "map" | "ignore" | undefined;
               source?: "protocol" | undefined;
+              mode?: "map" | "ignore" | undefined;
               mapping?: Record<string, string[]> | undefined;
             } | undefined;
           } | undefined;
@@ -772,22 +772,22 @@ declare function sso<TAuthorization extends AuthAuthorizationConfig | undefined
 declare function scim<TAuthorization extends AuthAuthorizationConfig | undefined = undefined, TRequirement = unknown>(auth: Pick<AuthApi<TAuthorization>, "context" | "group">, options?: CreateAuthGroupSsoOptions<TRequirement>): {
   admin: {
     configure: convex_server19.RegisteredMutation<"public", {
+      status?: "draft" | "active" | "disabled" | undefined;
       profile?: {
         mapping?: {
-          email?: string | undefined;
           name?: string | undefined;
-          subject?: string | undefined;
+          email?: string | undefined;
           phone?: string | undefined;
           externalId?: string | undefined;
           groups?: string | undefined;
           roles?: string | undefined;
           active?: string | undefined;
+          subject?: string | undefined;
           firstName?: string | undefined;
           lastName?: string | undefined;
         } | undefined;
         extraFields?: Record<string, string> | undefined;
       } | undefined;
-      status?: "draft" | "active" | "disabled" | undefined;
       security?: {
         maxRequestSize?: number | undefined;
       } | undefined;
@@ -941,10 +941,10 @@ declare function scim<TAuthorization extends AuthAuthorizationConfig | undefined
 declare function createAuthGroupSso<TAuthorization extends AuthAuthorizationConfig | undefined = undefined, TRequirement = unknown>(auth: Pick<AuthApi<TAuthorization>, "context" | "group" | "member">, options: CreateAuthGroupSsoOptions<TRequirement>): {
   createConnection: convex_server19.RegisteredMutation<"public", {
     name?: string | undefined;
-    slug?: string | undefined;
     status?: "draft" | "active" | "disabled" | undefined;
+    slug?: string | undefined;
     domain?: string | undefined;
-    protocol: "saml" | "oidc";
+    protocol: "oidc" | "saml";
     groupId: string;
   }, Promise<{
     groupId: string;
@@ -990,9 +990,9 @@ declare function createAuthGroupSso<TAuthorization extends AuthAuthorizationConf
   listConnections: convex_server19.RegisteredQuery<"public", {
     limit?: number | undefined;
     where?: {
+      status?: "draft" | "active" | "disabled" | undefined;
       slug?: string | undefined;
       groupId?: string | undefined;
-      status?: "draft" | "active" | "disabled" | undefined;
     } | undefined;
     cursor?: string | null | undefined;
     orderBy?: string | undefined;
@@ -1015,8 +1015,8 @@ declare function createAuthGroupSso<TAuthorization extends AuthAuthorizationConf
     connectionId: string;
     data: {
       name?: string | undefined;
-      slug?: string | undefined;
       status?: "draft" | "active" | "disabled" | undefined;
+      slug?: string | undefined;
     };
   }, Promise<{
     connectionId: string;
@@ -1161,13 +1161,13 @@ declare function createAuthGroupSso<TAuthorization extends AuthAuthorizationConf
   configureOidc: convex_server19.RegisteredMutation<"public", {
     profile?: {
       mapping?: {
-        email?: string | undefined;
         name?: string | undefined;
-        emailVerified?: string | undefined;
+        email?: string | undefined;
         image?: string | undefined;
-        subject?: string | undefined;
+        emailVerified?: string | undefined;
         groups?: string | undefined;
         roles?: string | undefined;
+        subject?: string | undefined;
       } | undefined;
       extraFields?: Record<string, string> | undefined;
     } | undefined;
@@ -1229,12 +1229,12 @@ declare function createAuthGroupSso<TAuthorization extends AuthAuthorizationConf
   configureSaml: convex_server19.RegisteredAction<"public", {
     profile?: {
       mapping?: {
-        email?: string | undefined;
         name?: string | undefined;
+        email?: string | undefined;
         image?: string | undefined;
-        subject?: string | undefined;
         groups?: string | undefined;
         roles?: string | undefined;
+        subject?: string | undefined;
         firstName?: string | undefined;
         lastName?: string | undefined;
       } | undefined;
@@ -1316,8 +1316,8 @@ declare function createAuthGroupSso<TAuthorization extends AuthAuthorizationConf
     patch: {
       identity?: {
         accountLinking?: {
-          saml?: "verifiedEmail" | "none" | "sameConnection" | undefined;
           oidc?: "verifiedEmail" | "none" | "sameConnection" | undefined;
+          saml?: "verifiedEmail" | "none" | "sameConnection" | undefined;
         } | undefined;
       } | undefined;
       provisioning?: {
@@ -1325,7 +1325,7 @@ declare function createAuthGroupSso<TAuthorization extends AuthAuthorizationConf
           createOnSignIn?: boolean | undefined;
           updateProfileOnLogin?: "never" | "missing" | "always" | undefined;
           updateProfileFromScim?: "never" | "missing" | "always" | undefined;
-          authority?: "app" | "sso" | "scim" | undefined;
+          authority?: "scim" | "app" | "sso" | undefined;
         } | undefined;
         scimReuse?: {
           user?: "none" | "externalId" | undefined;
@@ -1338,13 +1338,13 @@ declare function createAuthGroupSso<TAuthorization extends AuthAuthorizationConf
           mode?: "soft" | "hard" | undefined;
         } | undefined;
         groups?: {
-          mode?: "ignore" | "sync" | undefined;
           source?: "protocol" | undefined;
+          mode?: "ignore" | "sync" | undefined;
           mapping?: Record<string, string[]> | undefined;
         } | undefined;
         roles?: {
-          mode?: "map" | "ignore" | undefined;
           source?: "protocol" | undefined;
+          mode?: "map" | "ignore" | undefined;
           mapping?: Record<string, string[]> | undefined;
         } | undefined;
       } | undefined;
@@ -1421,22 +1421,22 @@ declare function createAuthGroupSso<TAuthorization extends AuthAuthorizationConf
     endpointId: string;
   }>>;
   configureScim: convex_server19.RegisteredMutation<"public", {
+    status?: "draft" | "active" | "disabled" | undefined;
     profile?: {
       mapping?: {
-        email?: string | undefined;
         name?: string | undefined;
-        subject?: string | undefined;
+        email?: string | undefined;
         phone?: string | undefined;
         externalId?: string | undefined;
         groups?: string | undefined;
         roles?: string | undefined;
         active?: string | undefined;
+        subject?: string | undefined;
         firstName?: string | undefined;
         lastName?: string | undefined;
       } | undefined;
       extraFields?: Record<string, string> | undefined;
     } | undefined;
-    status?: "draft" | "active" | "disabled" | undefined;
     security?: {
       maxRequestSize?: number | undefined;
     } | undefined;

package/dist/server/runtime.d.ts

@@ -276,11 +276,11 @@ declare function Auth(config_: ConvexAuthConfig): {
           _id: GenericId<"GroupMember">;
           _creationTime: number;
           extend?: any;
+          status?: string | undefined;
           role?: string | undefined;
           roleIds?: string[] | undefined;
-          status?: string | undefined;
-          groupId: GenericId<"Group">;
           userId: GenericId<"User">;
+          groupId: GenericId<"Group">;
         } & {
           _id: GenericId<"GroupMember">;
           _creationTime: number;
@@ -705,36 +705,36 @@ declare function Auth(config_: ConvexAuthConfig): {
       type: "verifier";
     } | {
       type: "verifierSignature";
-      signature: string;
       verifier: string;
+      signature: string;
     } | {
       emails?: {
-        primary?: boolean | undefined;
         verified?: boolean | undefined;
+        primary?: boolean | undefined;
         email: string;
       }[] | undefined;
       accountExtend?: {
+        saml?: {
+          attributes?: Record<string, string | string[]> | undefined;
+          sessionIndex?: string | undefined;
+        } | undefined;
         identity?: {
           type?: string | undefined;
           provider?: string | undefined;
+          connectionId?: string | undefined;
           providerAccountId?: string | undefined;
           protocol?: string | undefined;
-          connectionId?: string | undefined;
           subject?: string | undefined;
           issuer?: string | undefined;
           discoveryUrl?: string | undefined;
           entityId?: string | undefined;
         } | undefined;
-        saml?: {
-          attributes?: Record<string, string | string[]> | undefined;
-          sessionIndex?: string | undefined;
-        } | undefined;
       } | undefined;
-      profile: Record<string, string | number | boolean | (string | number | boolean | null)[] | Record<string, string | number | boolean | (string | number | boolean | null)[] | null> | null>;
       type: "userOAuth";
       provider: string;
       providerAccountId: string;
       signature: string;
+      profile: Record<string, string | number | boolean | (string | number | boolean | null)[] | Record<string, string | number | boolean | (string | number | boolean | null)[] | null> | null>;
     } | {
       email?: string | undefined;
       phone?: string | undefined;
@@ -747,9 +747,9 @@ declare function Auth(config_: ConvexAuthConfig): {
     } | {
       shouldLinkViaEmail?: boolean | undefined;
       shouldLinkViaPhone?: boolean | undefined;
-      profile: Record<string, string | number | boolean | (string | number | boolean | null)[] | Record<string, string | number | boolean | (string | number | boolean | null)[] | null> | null>;
       type: "createAccountFromCredentials";
       provider: string;
+      profile: Record<string, string | number | boolean | (string | number | boolean | null)[] | Record<string, string | number | boolean | (string | number | boolean | null)[] | null> | null>;
       account: {
         secret?: string | undefined;
         id: string;

package/dist/server/sso/domain.d.ts

@@ -448,7 +448,7 @@ declare function createGroupConnectionDomain<TDeps extends DomainDeps>(deps: TDe
       loginHint?: string;
     }) => Promise<{
       connectionId: string;
-      protocol: "saml" | "oidc";
+      protocol: "oidc" | "saml";
       providerId: string;
       signInPath: string;
       callbackPath: string;