@rpcbase/auth 0.165.0 → 0.167.0

package/dist/handler-CoHpAhui.js

@@ -1,81 +0,0 @@
-import { models } from "@rpcbase/db";
-import { verifyPasswordFromStorage } from "@rpcbase/server";
-import { c as completeAuthSignIn } from "./session-DoTNxRRA.js";
-import { R as Route, r as requestSchema } from "./index-D94-1Zwh.js";
-const signIn = async (payload, ctx) => {
-  const User = await models.getGlobal("RBUser", ctx);
-  const parsed = requestSchema.safeParse(payload);
-  if (!parsed.success) {
-    ctx.res.status(400);
-    return {
-      success: false,
-      error: "invalid_payload"
-    };
-  }
-  const {
-    email,
-    password
-  } = parsed.data;
-  const user = await User.findOne({
-    email
-  }, {
-    password: 1,
-    tenants: 1,
-    tenantRoles: 1
-  });
-  if (!user?.password) {
-    ctx.res.status(401);
-    return {
-      success: false,
-      error: "invalid_credentials"
-    };
-  }
-  const stored = String(user.password);
-  const passwordMatches = await verifyPasswordFromStorage(password, stored);
-  if (!passwordMatches) {
-    if (!stored.startsWith("$scrypt$")) {
-      console.warn("auth::sign-in invalid stored password format", user._id.toString());
-    }
-    ctx.res.status(401);
-    return {
-      success: false,
-      error: "invalid_credentials"
-    };
-  }
-  const signedInTenants = (user.tenants || []).map(String);
-  const defaultTenantId = signedInTenants[0];
-  if (!defaultTenantId) {
-    ctx.res.status(500);
-    return {
-      success: false,
-      error: "tenant_unavailable"
-    };
-  }
-  const tenantId = defaultTenantId;
-  const tenantRolesMap = user.get("tenantRoles");
-  const tenantRoles = tenantRolesMap ? Object.fromEntries(tenantRolesMap.entries()) : void 0;
-  if (!completeAuthSignIn(ctx, {
-    userId: user._id.toString(),
-    currentTenantId: tenantId,
-    signedInTenants: signedInTenants.length ? signedInTenants : [tenantId],
-    tenantRoles
-  })) {
-    ctx.res.status(500);
-    return {
-      success: false,
-      error: "session_unavailable"
-    };
-  }
-  return {
-    success: true,
-    userId: user._id.toString(),
-    tenantId
-  };
-};
-const handler = (api) => {
-  api.post(Route, signIn);
-};
-export {
-  handler as default
-};
-//# sourceMappingURL=handler-CoHpAhui.js.map

package/dist/handler-CoHpAhui.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"handler-CoHpAhui.js","sources":["../src/api/sign-in/handler.ts"],"sourcesContent":["import { Api, ApiHandler, Ctx } from \"@rpcbase/api\"\nimport { models } from \"@rpcbase/db\"\nimport { verifyPasswordFromStorage } from \"@rpcbase/server\"\n\nimport { completeAuthSignIn } from \"../../session\"\nimport type { AuthSessionUser } from \"../../types\"\n\nimport * as SignIn from \"./index\"\n\n\nconst signIn: ApiHandler<SignIn.RequestPayload, SignIn.ResponsePayload, AuthSessionUser> = async(\n  payload,\n  ctx: Ctx<AuthSessionUser>\n): Promise<SignIn.ResponsePayload> => {\n  const User = await models.getGlobal(\"RBUser\", ctx)\n\n  const parsed = SignIn.requestSchema.safeParse(payload)\n\n  if (!parsed.success) {\n    ctx.res.status(400)\n    return { success: false, error: \"invalid_payload\" }\n  }\n\n  const { email, password } = parsed.data\n\n  const user = await User.findOne({ email }, { password: 1, tenants: 1, tenantRoles: 1 })\n\n  if (!user?.password) {\n    ctx.res.status(401)\n    return { success: false, error: \"invalid_credentials\" }\n  }\n\n  const stored = String(user.password)\n  const passwordMatches = await verifyPasswordFromStorage(password, stored)\n\n  if (!passwordMatches) {\n    if (!stored.startsWith(\"$scrypt$\")) {\n      console.warn(\"auth::sign-in invalid stored password format\", user._id.toString())\n    }\n    ctx.res.status(401)\n    return { success: false, error: \"invalid_credentials\" }\n  }\n\n  const signedInTenants = (user.tenants || []).map(String)\n  const defaultTenantId = signedInTenants[0]\n  if (!defaultTenantId) {\n    ctx.res.status(500)\n    return { success: false, error: \"tenant_unavailable\" }\n  }\n  const tenantId = defaultTenantId\n  const tenantRolesMap = user.get(\"tenantRoles\") as Map<string, string[]> | undefined\n  const tenantRoles = tenantRolesMap ? Object.fromEntries(tenantRolesMap.entries()) : undefined\n\n  if (!completeAuthSignIn(ctx, {\n    userId: user._id.toString(),\n    currentTenantId: tenantId,\n    signedInTenants: signedInTenants.length ? signedInTenants : [tenantId],\n    tenantRoles,\n  })) {\n    ctx.res.status(500)\n    return { success: false, error: \"session_unavailable\" }\n  }\n\n  return { success: true, userId: user._id.toString(), tenantId }\n}\n\nexport default (api: Api<AuthSessionUser>) => {\n  api.post(SignIn.Route, signIn)\n}\n"],"names":["signIn","payload","ctx","User","models","getGlobal","parsed","SignIn","safeParse","success","res","status","error","email","password","data","user","findOne","tenants","tenantRoles","stored","String","passwordMatches","verifyPasswordFromStorage","startsWith","console","warn","_id","toString","signedInTenants","map","defaultTenantId","tenantId","tenantRolesMap","get","Object","fromEntries","entries","undefined","completeAuthSignIn","userId","currentTenantId","length","api","post"],"mappings":";;;;AAUA,MAAMA,SAAqF,OACzFC,SACAC,QACoC;AACpC,QAAMC,OAAO,MAAMC,OAAOC,UAAU,UAAUH,GAAG;AAEjD,QAAMI,SAASC,cAAqBC,UAAUP,OAAO;AAErD,MAAI,CAACK,OAAOG,SAAS;AACnBP,QAAIQ,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,MAAEF,SAAS;AAAA,MAAOG,OAAO;AAAA,IAAA;AAAA,EAClC;AAEA,QAAM;AAAA,IAAEC;AAAAA,IAAOC;AAAAA,EAAAA,IAAaR,OAAOS;AAEnC,QAAMC,OAAO,MAAMb,KAAKc,QAAQ;AAAA,IAAEJ;AAAAA,EAAAA,GAAS;AAAA,IAAEC,UAAU;AAAA,IAAGI,SAAS;AAAA,IAAGC,aAAa;AAAA,EAAA,CAAG;AAEtF,MAAI,CAACH,MAAMF,UAAU;AACnBZ,QAAIQ,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,MAAEF,SAAS;AAAA,MAAOG,OAAO;AAAA,IAAA;AAAA,EAClC;AAEA,QAAMQ,SAASC,OAAOL,KAAKF,QAAQ;AACnC,QAAMQ,kBAAkB,MAAMC,0BAA0BT,UAAUM,MAAM;AAExE,MAAI,CAACE,iBAAiB;AACpB,QAAI,CAACF,OAAOI,WAAW,UAAU,GAAG;AAClCC,cAAQC,KAAK,gDAAgDV,KAAKW,IAAIC,UAAU;AAAA,IAClF;AACA1B,QAAIQ,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,MAAEF,SAAS;AAAA,MAAOG,OAAO;AAAA,IAAA;AAAA,EAClC;AAEA,QAAMiB,mBAAmBb,KAAKE,WAAW,CAAA,GAAIY,IAAIT,MAAM;AACvD,QAAMU,kBAAkBF,gBAAgB,CAAC;AACzC,MAAI,CAACE,iBAAiB;AACpB7B,QAAIQ,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,MAAEF,SAAS;AAAA,MAAOG,OAAO;AAAA,IAAA;AAAA,EAClC;AACA,QAAMoB,WAAWD;AACjB,QAAME,iBAAiBjB,KAAKkB,IAAI,aAAa;AAC7C,QAAMf,cAAcc,iBAAiBE,OAAOC,YAAYH,eAAeI,QAAAA,CAAS,IAAIC;AAEpF,MAAI,CAACC,mBAAmBrC,KAAK;AAAA,IAC3BsC,QAAQxB,KAAKW,IAAIC,SAAAA;AAAAA,IACjBa,iBAAiBT;AAAAA,IACjBH,iBAAiBA,gBAAgBa,SAASb,kBAAkB,CAACG,QAAQ;AAAA,IACrEb;AAAAA,EAAAA,CACD,GAAG;AACFjB,QAAIQ,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,MAAEF,SAAS;AAAA,MAAOG,OAAO;AAAA,IAAA;AAAA,EAClC;AAEA,SAAO;AAAA,IAAEH,SAAS;AAAA,IAAM+B,QAAQxB,KAAKW,IAAIC,SAAAA;AAAAA,IAAYI;AAAAA,EAAAA;AACvD;AAEA,MAAA,UAAe,CAACW,QAA8B;AAC5CA,MAAIC,KAAKrC,OAAcP,MAAM;AAC/B;"}

package/dist/handler-DfZwgoA4.js

@@ -1,94 +0,0 @@
-import { models } from "@rpcbase/db";
-import { c as completeAuthSignIn } from "./session-DoTNxRRA.js";
-import { o as object, b as boolean, s as string } from "./schemas--f80aXK7.js";
-const Route = "/api/rb/auth/verify-otp";
-const requestSchema = object({
-  email: string().email(),
-  code: string().length(6, "Code must be 6 digits"),
-  rememberMe: boolean().default(true)
-});
-object({
-  success: boolean(),
-  error: string().optional(),
-  userId: string().optional(),
-  tenantId: string().optional()
-});
-const verifyOtp = async (payload, ctx) => {
-  const User = await models.getGlobal("RBUser", ctx);
-  const parsed = requestSchema.safeParse(payload);
-  if (!parsed.success) {
-    ctx.res.status(400);
-    return {
-      success: false,
-      error: "invalid_payload"
-    };
-  }
-  const {
-    email,
-    code
-  } = parsed.data;
-  const user = await User.findOne({
-    email
-  }, {
-    emailVerificationCode: 1,
-    emailVerificationExpiresAt: 1,
-    tenants: 1,
-    tenantRoles: 1
-  });
-  if (!user) {
-    ctx.res.status(404);
-    return {
-      success: false,
-      error: "user_not_found"
-    };
-  }
-  const storedCode = user.emailVerificationCode;
-  const expiresAt = user.emailVerificationExpiresAt;
-  const isExpired = expiresAt instanceof Date && expiresAt.getTime() < Date.now();
-  if (!storedCode || storedCode !== code || isExpired) {
-    ctx.res.status(400);
-    return {
-      success: false,
-      error: "invalid_code"
-    };
-  }
-  user.emailVerificationCode = void 0;
-  user.emailVerificationExpiresAt = void 0;
-  await user.save();
-  const signedInTenants = (user.tenants || []).map(String);
-  const defaultTenantId = signedInTenants[0];
-  if (!defaultTenantId) {
-    ctx.res.status(500);
-    return {
-      success: false,
-      error: "tenant_unavailable"
-    };
-  }
-  const tenantId = defaultTenantId;
-  const tenantRolesMap = user.get("tenantRoles");
-  const tenantRoles = tenantRolesMap ? Object.fromEntries(tenantRolesMap.entries()) : void 0;
-  if (!completeAuthSignIn(ctx, {
-    userId: user._id.toString(),
-    currentTenantId: tenantId,
-    signedInTenants: signedInTenants.length ? signedInTenants : [tenantId],
-    tenantRoles
-  })) {
-    ctx.res.status(500);
-    return {
-      success: false,
-      error: "session_unavailable"
-    };
-  }
-  return {
-    success: true,
-    userId: user._id.toString(),
-    tenantId
-  };
-};
-const handler = (api) => {
-  api.post(Route, verifyOtp);
-};
-export {
-  handler as default
-};
-//# sourceMappingURL=handler-DfZwgoA4.js.map

package/dist/handler-DfZwgoA4.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"handler-DfZwgoA4.js","sources":["../src/api/verify-otp/index.ts","../src/api/verify-otp/handler.ts"],"sourcesContent":["import { z } from \"zod\"\n\n\nexport const Route = \"/api/rb/auth/verify-otp\"\n\nexport const requestSchema = z.object({\n  email: z.string().email(),\n  code: z.string().length(6, \"Code must be 6 digits\"),\n  rememberMe: z.boolean().default(true),\n})\n\nexport type RequestPayload = z.infer<typeof requestSchema>\n\nexport const responseSchema = z.object({\n  success: z.boolean(),\n  error: z.string().optional(),\n  userId: z.string().optional(),\n  tenantId: z.string().optional(),\n})\n\nexport type ResponsePayload = z.infer<typeof responseSchema>\n","import { Api, ApiHandler, Ctx } from \"@rpcbase/api\"\nimport { models } from \"@rpcbase/db\"\n\nimport { completeAuthSignIn } from \"../../session\"\nimport type { AuthSessionUser } from \"../../types\"\n\nimport * as VerifyOtp from \"./index\"\n\n\nconst verifyOtp: ApiHandler<VerifyOtp.RequestPayload, VerifyOtp.ResponsePayload, AuthSessionUser> = async (\n  payload,\n  ctx: Ctx<AuthSessionUser>\n): Promise<VerifyOtp.ResponsePayload> => {\n  const User = await models.getGlobal(\"RBUser\", ctx)\n\n  const parsed = VerifyOtp.requestSchema.safeParse(payload)\n\n  if (!parsed.success) {\n    ctx.res.status(400)\n    return { success: false, error: \"invalid_payload\" }\n  }\n\n  const { email, code } = parsed.data\n\n  const user = await User.findOne({ email }, { emailVerificationCode: 1, emailVerificationExpiresAt: 1, tenants: 1, tenantRoles: 1 })\n\n  if (!user) {\n    ctx.res.status(404)\n    return { success: false, error: \"user_not_found\" }\n  }\n\n  const storedCode = user.emailVerificationCode\n  const expiresAt = user.emailVerificationExpiresAt\n\n  const isExpired = expiresAt instanceof Date && expiresAt.getTime() < Date.now()\n  if (!storedCode || storedCode !== code || isExpired) {\n    ctx.res.status(400)\n    return { success: false, error: \"invalid_code\" }\n  }\n\n  user.emailVerificationCode = undefined\n  user.emailVerificationExpiresAt = undefined\n  await user.save()\n\n  const signedInTenants = (user.tenants || []).map(String)\n  const defaultTenantId = signedInTenants[0]\n  if (!defaultTenantId) {\n    ctx.res.status(500)\n    return { success: false, error: \"tenant_unavailable\" }\n  }\n  const tenantId = defaultTenantId\n  const tenantRolesMap = user.get(\"tenantRoles\") as Map<string, string[]> | undefined\n  const tenantRoles = tenantRolesMap ? Object.fromEntries(tenantRolesMap.entries()) : undefined\n\n  if (!completeAuthSignIn(ctx, {\n    userId: user._id.toString(),\n    currentTenantId: tenantId,\n    signedInTenants: signedInTenants.length ? signedInTenants : [tenantId],\n    tenantRoles,\n  })) {\n    ctx.res.status(500)\n    return { success: false, error: \"session_unavailable\" }\n  }\n\n  return { success: true, userId: user._id.toString(), tenantId }\n}\n\nexport default (api: Api<AuthSessionUser>) => {\n  api.post(VerifyOtp.Route, verifyOtp)\n}\n"],"names":["Route","requestSchema","z","email","string","code","length","rememberMe","default","success","boolean","error","optional","userId","tenantId","verifyOtp","payload","ctx","User","models","getGlobal","parsed","VerifyOtp","safeParse","res","status","data","user","findOne","emailVerificationCode","emailVerificationExpiresAt","tenants","tenantRoles","storedCode","expiresAt","isExpired","Date","getTime","now","undefined","save","signedInTenants","map","String","defaultTenantId","tenantRolesMap","get","Object","fromEntries","entries","completeAuthSignIn","_id","toString","currentTenantId","api","post"],"mappings":";;;AAGO,MAAMA,QAAQ;AAEd,MAAMC,gBAAgBC,OAAS;AAAA,EACpCC,OAAOD,OAAEE,EAASD,MAAAA;AAAAA,EAClBE,MAAMH,OAAEE,EAASE,OAAO,GAAG,uBAAuB;AAAA,EAClDC,YAAYL,UAAYM,QAAQ,IAAI;AACtC,CAAC;AAI6BN,OAAS;AAAA,EACrCO,SAASP,QAAEQ;AAAAA,EACXC,OAAOT,OAAEE,EAASQ,SAAAA;AAAAA,EAClBC,QAAQX,OAAEE,EAASQ,SAAAA;AAAAA,EACnBE,UAAUZ,OAAEE,EAASQ,SAAAA;AACvB,CAAC;ACTD,MAAMG,YAA8F,OAClGC,SACAC,QACuC;AACvC,QAAMC,OAAO,MAAMC,OAAOC,UAAU,UAAUH,GAAG;AAEjD,QAAMI,SAASC,cAAwBC,UAAUP,OAAO;AAExD,MAAI,CAACK,OAAOZ,SAAS;AACnBQ,QAAIO,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,MAAEhB,SAAS;AAAA,MAAOE,OAAO;AAAA,IAAA;AAAA,EAClC;AAEA,QAAM;AAAA,IAAER;AAAAA,IAAOE;AAAAA,EAAAA,IAASgB,OAAOK;AAE/B,QAAMC,OAAO,MAAMT,KAAKU,QAAQ;AAAA,IAAEzB;AAAAA,EAAAA,GAAS;AAAA,IAAE0B,uBAAuB;AAAA,IAAGC,4BAA4B;AAAA,IAAGC,SAAS;AAAA,IAAGC,aAAa;AAAA,EAAA,CAAG;AAElI,MAAI,CAACL,MAAM;AACTV,QAAIO,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,MAAEhB,SAAS;AAAA,MAAOE,OAAO;AAAA,IAAA;AAAA,EAClC;AAEA,QAAMsB,aAAaN,KAAKE;AACxB,QAAMK,YAAYP,KAAKG;AAEvB,QAAMK,YAAYD,qBAAqBE,QAAQF,UAAUG,QAAAA,IAAYD,KAAKE,IAAAA;AAC1E,MAAI,CAACL,cAAcA,eAAe5B,QAAQ8B,WAAW;AACnDlB,QAAIO,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,MAAEhB,SAAS;AAAA,MAAOE,OAAO;AAAA,IAAA;AAAA,EAClC;AAEAgB,OAAKE,wBAAwBU;AAC7BZ,OAAKG,6BAA6BS;AAClC,QAAMZ,KAAKa,KAAAA;AAEX,QAAMC,mBAAmBd,KAAKI,WAAW,CAAA,GAAIW,IAAIC,MAAM;AACvD,QAAMC,kBAAkBH,gBAAgB,CAAC;AACzC,MAAI,CAACG,iBAAiB;AACpB3B,QAAIO,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,MAAEhB,SAAS;AAAA,MAAOE,OAAO;AAAA,IAAA;AAAA,EAClC;AACA,QAAMG,WAAW8B;AACjB,QAAMC,iBAAiBlB,KAAKmB,IAAI,aAAa;AAC7C,QAAMd,cAAca,iBAAiBE,OAAOC,YAAYH,eAAeI,QAAAA,CAAS,IAAIV;AAEpF,MAAI,CAACW,mBAAmBjC,KAAK;AAAA,IAC3BJ,QAAQc,KAAKwB,IAAIC,SAAAA;AAAAA,IACjBC,iBAAiBvC;AAAAA,IACjB2B,iBAAiBA,gBAAgBnC,SAASmC,kBAAkB,CAAC3B,QAAQ;AAAA,IACrEkB;AAAAA,EAAAA,CACD,GAAG;AACFf,QAAIO,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,MAAEhB,SAAS;AAAA,MAAOE,OAAO;AAAA,IAAA;AAAA,EAClC;AAEA,SAAO;AAAA,IAAEF,SAAS;AAAA,IAAMI,QAAQc,KAAKwB,IAAIC,SAAAA;AAAAA,IAAYtC;AAAAA,EAAAA;AACvD;AAEA,MAAA,UAAe,CAACwC,QAA8B;AAC5CA,MAAIC,KAAKjC,OAAiBP,SAAS;AACrC;"}

package/dist/handler-Eyjkxj9l.js

@@ -1,58 +0,0 @@
-import crypto from "crypto";
-import { models } from "@rpcbase/db";
-import { o as object, s as string, b as boolean } from "./schemas--f80aXK7.js";
-const Route = "/api/rb/auth/verify-password-reset-otp";
-const requestSchema = object({
-  email: string().email(),
-  code: string().length(6, "Code must be 6 digits")
-});
-object({
-  success: boolean(),
-  error: string().optional(),
-  resetToken: string().optional()
-});
-const verifyPasswordResetOtp = async (payload, ctx) => {
-  const User = await models.getGlobal("RBUser", ctx);
-  const parsed = requestSchema.safeParse(payload);
-  if (!parsed.success) {
-    ctx.res.status(400);
-    return {
-      success: false,
-      error: "invalid_payload"
-    };
-  }
-  const {
-    email,
-    code
-  } = parsed.data;
-  const user = await User.findOne({
-    email
-  });
-  const storedCode = user?.passwordResetCode;
-  const expiresAt = user?.passwordResetCodeExpiresAt;
-  const isExpired = expiresAt instanceof Date && expiresAt.getTime() < Date.now();
-  if (!user || !storedCode || storedCode !== code || isExpired) {
-    ctx.res.status(400);
-    return {
-      success: false,
-      error: "invalid_code"
-    };
-  }
-  const resetToken = crypto.randomBytes(24).toString("hex");
-  user.passwordResetCode = void 0;
-  user.passwordResetCodeExpiresAt = void 0;
-  user.passwordResetToken = resetToken;
-  user.passwordResetTokenExpiresAt = new Date(Date.now() + 15 * 60 * 1e3);
-  await user.save();
-  return {
-    success: true,
-    resetToken
-  };
-};
-const handler = (api) => {
-  api.post(Route, verifyPasswordResetOtp);
-};
-export {
-  handler as default
-};
-//# sourceMappingURL=handler-Eyjkxj9l.js.map

package/dist/handler-Eyjkxj9l.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"handler-Eyjkxj9l.js","sources":["../src/api/verify-password-reset-otp/index.ts","../src/api/verify-password-reset-otp/handler.ts"],"sourcesContent":["import { z } from \"zod\"\n\n\nexport const Route = \"/api/rb/auth/verify-password-reset-otp\"\n\nexport const requestSchema = z.object({\n  email: z.string().email(),\n  code: z.string().length(6, \"Code must be 6 digits\"),\n})\n\nexport type RequestPayload = z.infer<typeof requestSchema>\n\nexport const responseSchema = z.object({\n  success: z.boolean(),\n  error: z.string().optional(),\n  resetToken: z.string().optional(),\n})\n\nexport type ResponsePayload = z.infer<typeof responseSchema>\n","import crypto from \"crypto\"\n\nimport { Api, ApiHandler, Ctx } from \"@rpcbase/api\"\nimport { models } from \"@rpcbase/db\"\n\nimport type { AuthSessionUser } from \"../../types\"\n\nimport * as VerifyPasswordResetOtp from \"./index\"\n\n\nconst verifyPasswordResetOtp: ApiHandler<\n  VerifyPasswordResetOtp.RequestPayload,\n  VerifyPasswordResetOtp.ResponsePayload,\n  AuthSessionUser\n> = async(\n  payload,\n  ctx: Ctx<AuthSessionUser>\n): Promise<VerifyPasswordResetOtp.ResponsePayload> => {\n  const User = await models.getGlobal(\"RBUser\", ctx)\n\n  const parsed = VerifyPasswordResetOtp.requestSchema.safeParse(payload)\n\n  if (!parsed.success) {\n    ctx.res.status(400)\n    return { success: false, error: \"invalid_payload\" }\n  }\n\n  const { email, code } = parsed.data\n  const user = await User.findOne({ email })\n\n  const storedCode = user?.passwordResetCode\n  const expiresAt = user?.passwordResetCodeExpiresAt\n  const isExpired = expiresAt instanceof Date && expiresAt.getTime() < Date.now()\n\n  if (!user || !storedCode || storedCode !== code || isExpired) {\n    ctx.res.status(400)\n    return { success: false, error: \"invalid_code\" }\n  }\n\n  const resetToken = crypto.randomBytes(24).toString(\"hex\")\n\n  user.passwordResetCode = undefined\n  user.passwordResetCodeExpiresAt = undefined\n  user.passwordResetToken = resetToken\n  user.passwordResetTokenExpiresAt = new Date(Date.now() + 15 * 60 * 1000)\n  await user.save()\n\n  return { success: true, resetToken }\n}\n\nexport default (api: Api<AuthSessionUser>) => {\n  api.post(VerifyPasswordResetOtp.Route, verifyPasswordResetOtp)\n}\n"],"names":["Route","requestSchema","z","email","string","code","length","success","boolean","error","optional","resetToken","verifyPasswordResetOtp","payload","ctx","User","models","getGlobal","parsed","VerifyPasswordResetOtp","safeParse","res","status","data","user","findOne","storedCode","passwordResetCode","expiresAt","passwordResetCodeExpiresAt","isExpired","Date","getTime","now","crypto","randomBytes","toString","undefined","passwordResetToken","passwordResetTokenExpiresAt","save","api","post"],"mappings":";;;AAGO,MAAMA,QAAQ;AAEd,MAAMC,gBAAgBC,OAAS;AAAA,EACpCC,OAAOD,OAAEE,EAASD,MAAAA;AAAAA,EAClBE,MAAMH,OAAEE,EAASE,OAAO,GAAG,uBAAuB;AACpD,CAAC;AAI6BJ,OAAS;AAAA,EACrCK,SAASL,QAAEM;AAAAA,EACXC,OAAOP,OAAEE,EAASM,SAAAA;AAAAA,EAClBC,YAAYT,OAAEE,EAASM,SAAAA;AACzB,CAAC;ACND,MAAME,yBAIF,OACFC,SACAC,QACoD;AACpD,QAAMC,OAAO,MAAMC,OAAOC,UAAU,UAAUH,GAAG;AAEjD,QAAMI,SAASC,cAAqCC,UAAUP,OAAO;AAErE,MAAI,CAACK,OAAOX,SAAS;AACnBO,QAAIO,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,MAAEf,SAAS;AAAA,MAAOE,OAAO;AAAA,IAAA;AAAA,EAClC;AAEA,QAAM;AAAA,IAAEN;AAAAA,IAAOE;AAAAA,EAAAA,IAASa,OAAOK;AAC/B,QAAMC,OAAO,MAAMT,KAAKU,QAAQ;AAAA,IAAEtB;AAAAA,EAAAA,CAAO;AAEzC,QAAMuB,aAAaF,MAAMG;AACzB,QAAMC,YAAYJ,MAAMK;AACxB,QAAMC,YAAYF,qBAAqBG,QAAQH,UAAUI,QAAAA,IAAYD,KAAKE,IAAAA;AAE1E,MAAI,CAACT,QAAQ,CAACE,cAAcA,eAAerB,QAAQyB,WAAW;AAC5DhB,QAAIO,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,MAAEf,SAAS;AAAA,MAAOE,OAAO;AAAA,IAAA;AAAA,EAClC;AAEA,QAAME,aAAauB,OAAOC,YAAY,EAAE,EAAEC,SAAS,KAAK;AAExDZ,OAAKG,oBAAoBU;AACzBb,OAAKK,6BAA6BQ;AAClCb,OAAKc,qBAAqB3B;AAC1Ba,OAAKe,8BAA8B,IAAIR,KAAKA,KAAKE,QAAQ,KAAK,KAAK,GAAI;AACvE,QAAMT,KAAKgB,KAAAA;AAEX,SAAO;AAAA,IAAEjC,SAAS;AAAA,IAAMI;AAAAA,EAAAA;AAC1B;AAEA,MAAA,UAAe,CAAC8B,QAA8B;AAC5CA,MAAIC,KAAKvB,OAA8BP,sBAAsB;AAC/D;"}

package/dist/handler-U3df_2Al.js

@@ -1,59 +0,0 @@
-import { models } from "@rpcbase/db";
-import { hashPasswordForStorage } from "@rpcbase/server";
-import { o as object, s as string, b as boolean } from "./schemas--f80aXK7.js";
-const Route = "/api/rb/auth/set-new-password";
-const requestSchema = object({
-  email: string().email(),
-  resetToken: string().min(1),
-  password: string().min(8, {
-    message: "Password must be at least 8 characters long."
-  })
-});
-object({
-  success: boolean(),
-  error: string().optional()
-});
-const setNewPassword = async (payload, ctx) => {
-  const User = await models.getGlobal("RBUser", ctx);
-  const parsed = requestSchema.safeParse(payload);
-  if (!parsed.success) {
-    ctx.res.status(400);
-    return {
-      success: false,
-      error: "invalid_payload"
-    };
-  }
-  const {
-    email,
-    resetToken,
-    password
-  } = parsed.data;
-  const user = await User.findOne({
-    email
-  });
-  const storedToken = user?.passwordResetToken;
-  const tokenExpiresAt = user?.passwordResetTokenExpiresAt;
-  const isExpired = tokenExpiresAt instanceof Date && tokenExpiresAt.getTime() < Date.now();
-  if (!user || !storedToken || storedToken !== resetToken || isExpired) {
-    ctx.res.status(400);
-    return {
-      success: false,
-      error: "invalid_token"
-    };
-  }
-  const hashedPassword = await hashPasswordForStorage(password);
-  user.password = hashedPassword;
-  user.passwordResetToken = void 0;
-  user.passwordResetTokenExpiresAt = void 0;
-  await user.save();
-  return {
-    success: true
-  };
-};
-const handler = (api) => {
-  api.post(Route, setNewPassword);
-};
-export {
-  handler as default
-};
-//# sourceMappingURL=handler-U3df_2Al.js.map

package/dist/handler-U3df_2Al.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"handler-U3df_2Al.js","sources":["../src/api/set-new-password/index.ts","../src/api/set-new-password/handler.ts"],"sourcesContent":["import { z } from \"zod\"\n\n\nexport const Route = \"/api/rb/auth/set-new-password\"\n\nexport const requestSchema = z.object({\n  email: z.string().email(),\n  resetToken: z.string().min(1),\n  password: z.string().min(8, { message: \"Password must be at least 8 characters long.\" }),\n})\n\nexport type RequestPayload = z.infer<typeof requestSchema>\n\nexport const responseSchema = z.object({\n  success: z.boolean(),\n  error: z.string().optional(),\n})\n\nexport type ResponsePayload = z.infer<typeof responseSchema>\n","import { Api, ApiHandler, Ctx } from \"@rpcbase/api\"\nimport { models } from \"@rpcbase/db\"\nimport { hashPasswordForStorage } from \"@rpcbase/server\"\n\nimport type { AuthSessionUser } from \"../../types\"\n\nimport * as SetNewPassword from \"./index\"\n\n\nconst setNewPassword: ApiHandler<\n  SetNewPassword.RequestPayload,\n  SetNewPassword.ResponsePayload,\n  AuthSessionUser\n> = async(\n  payload,\n  ctx: Ctx<AuthSessionUser>\n): Promise<SetNewPassword.ResponsePayload> => {\n  const User = await models.getGlobal(\"RBUser\", ctx)\n\n  const parsed = SetNewPassword.requestSchema.safeParse(payload)\n\n  if (!parsed.success) {\n    ctx.res.status(400)\n    return { success: false, error: \"invalid_payload\" }\n  }\n\n  const { email, resetToken, password } = parsed.data\n\n  const user = await User.findOne({ email })\n  const storedToken = user?.passwordResetToken\n  const tokenExpiresAt = user?.passwordResetTokenExpiresAt\n  const isExpired = tokenExpiresAt instanceof Date && tokenExpiresAt.getTime() < Date.now()\n\n  if (!user || !storedToken || storedToken !== resetToken || isExpired) {\n    ctx.res.status(400)\n    return { success: false, error: \"invalid_token\" }\n  }\n\n  const hashedPassword = await hashPasswordForStorage(password)\n  user.password = hashedPassword\n  user.passwordResetToken = undefined\n  user.passwordResetTokenExpiresAt = undefined\n  await user.save()\n\n  return { success: true }\n}\n\nexport default (api: Api<AuthSessionUser>) => {\n  api.post(SetNewPassword.Route, setNewPassword)\n}\n"],"names":["Route","requestSchema","z","email","string","resetToken","min","password","message","success","boolean","error","optional","setNewPassword","payload","ctx","User","models","getGlobal","parsed","SetNewPassword","safeParse","res","status","data","user","findOne","storedToken","passwordResetToken","tokenExpiresAt","passwordResetTokenExpiresAt","isExpired","Date","getTime","now","hashedPassword","hashPasswordForStorage","undefined","save","api","post"],"mappings":";;;AAGO,MAAMA,QAAQ;AAEd,MAAMC,gBAAgBC,OAAS;AAAA,EACpCC,OAAOD,OAAEE,EAASD,MAAAA;AAAAA,EAClBE,YAAYH,OAAEE,EAASE,IAAI,CAAC;AAAA,EAC5BC,UAAUL,OAAEE,EAASE,IAAI,GAAG;AAAA,IAAEE,SAAS;AAAA,EAAA,CAAgD;AACzF,CAAC;AAI6BN,OAAS;AAAA,EACrCO,SAASP,QAAEQ;AAAAA,EACXC,OAAOT,OAAEE,EAASQ,SAAAA;AACpB,CAAC;ACPD,MAAMC,iBAIF,OACFC,SACAC,QAC4C;AAC5C,QAAMC,OAAO,MAAMC,OAAOC,UAAU,UAAUH,GAAG;AAEjD,QAAMI,SAASC,cAA6BC,UAAUP,OAAO;AAE7D,MAAI,CAACK,OAAOV,SAAS;AACnBM,QAAIO,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,MAAEd,SAAS;AAAA,MAAOE,OAAO;AAAA,IAAA;AAAA,EAClC;AAEA,QAAM;AAAA,IAAER;AAAAA,IAAOE;AAAAA,IAAYE;AAAAA,EAAAA,IAAaY,OAAOK;AAE/C,QAAMC,OAAO,MAAMT,KAAKU,QAAQ;AAAA,IAAEvB;AAAAA,EAAAA,CAAO;AACzC,QAAMwB,cAAcF,MAAMG;AAC1B,QAAMC,iBAAiBJ,MAAMK;AAC7B,QAAMC,YAAYF,0BAA0BG,QAAQH,eAAeI,QAAAA,IAAYD,KAAKE,IAAAA;AAEpF,MAAI,CAACT,QAAQ,CAACE,eAAeA,gBAAgBtB,cAAc0B,WAAW;AACpEhB,QAAIO,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,MAAEd,SAAS;AAAA,MAAOE,OAAO;AAAA,IAAA;AAAA,EAClC;AAEA,QAAMwB,iBAAiB,MAAMC,uBAAuB7B,QAAQ;AAC5DkB,OAAKlB,WAAW4B;AAChBV,OAAKG,qBAAqBS;AAC1BZ,OAAKK,8BAA8BO;AACnC,QAAMZ,KAAKa,KAAAA;AAEX,SAAO;AAAA,IAAE7B,SAAS;AAAA,EAAA;AACpB;AAEA,MAAA,UAAe,CAAC8B,QAA8B;AAC5CA,MAAIC,KAAKpB,OAAsBP,cAAc;AAC/C;"}

package/dist/index-1_ZKABa_.js

@@ -1,20 +0,0 @@
-import { o as object, b as boolean, s as string } from "./schemas--f80aXK7.js";
-const Route = "/api/rb/auth/sign-up";
-const requestSchema = object({
-  email: string().nonempty("Email is required").email("Please enter a valid email address"),
-  password: string().min(8, {
-    message: "Password must be at least 8 characters long."
-  }),
-  rememberMe: boolean().default(true)
-});
-object({
-  success: boolean(),
-  error: string().optional(),
-  userId: string().optional(),
-  tenantId: string().optional()
-});
-export {
-  Route as R,
-  requestSchema as r
-};
-//# sourceMappingURL=index-1_ZKABa_.js.map

package/dist/index-1_ZKABa_.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index-1_ZKABa_.js","sources":["../src/api/sign-up/index.ts"],"sourcesContent":["import { z } from \"zod\"\n\n\nexport const Route = \"/api/rb/auth/sign-up\"\n\nexport const requestSchema = z\n  .object({\n    email: z\n      .string()\n      .nonempty(\"Email is required\")\n      .email(\"Please enter a valid email address\"),\n    password: z.string().min(8, { message: \"Password must be at least 8 characters long.\" }),\n    rememberMe: z.boolean().default(true),\n  })\n\nexport type RequestPayload = z.infer<typeof requestSchema>\n\nexport const responseSchema = z.object({\n  success: z.boolean(),\n  error: z.string().optional(),\n  userId: z.string().optional(),\n  tenantId: z.string().optional(),\n})\n\nexport type ResponsePayload = z.infer<typeof responseSchema>\n"],"names":["Route","requestSchema","z","email","string","nonempty","password","min","message","rememberMe","default","success","boolean","error","optional","userId","tenantId"],"mappings":";AAGO,MAAMA,QAAQ;AAEd,MAAMC,gBAAgBC,OACnB;AAAA,EACNC,OAAOD,OACJE,EACAC,SAAS,mBAAmB,EAC5BF,MAAM,oCAAoC;AAAA,EAC7CG,UAAUJ,OAAEE,EAASG,IAAI,GAAG;AAAA,IAAEC,SAAS;AAAA,EAAA,CAAgD;AAAA,EACvFC,YAAYP,UAAYQ,QAAQ,IAAI;AACtC,CAAC;AAI2BR,OAAS;AAAA,EACrCS,SAAST,QAAEU;AAAAA,EACXC,OAAOX,OAAEE,EAASU,SAAAA;AAAAA,EAClBC,QAAQb,OAAEE,EAASU,SAAAA;AAAAA,EACnBE,UAAUd,OAAEE,EAASU,SAAAA;AACvB,CAAC;"}

package/dist/index-D94-1Zwh.js

@@ -1,20 +0,0 @@
-import { o as object, b as boolean, s as string } from "./schemas--f80aXK7.js";
-const Route = "/api/rb/auth/sign-in";
-const requestSchema = object({
-  email: string().nonempty("Email is required").email("Please enter a valid email address"),
-  password: string().min(1, {
-    message: "Password is required"
-  }),
-  rememberMe: boolean().default(true)
-});
-object({
-  success: boolean(),
-  error: string().optional(),
-  userId: string().optional(),
-  tenantId: string().optional()
-});
-export {
-  Route as R,
-  requestSchema as r
-};
-//# sourceMappingURL=index-D94-1Zwh.js.map

package/dist/index-D94-1Zwh.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index-D94-1Zwh.js","sources":["../src/api/sign-in/index.ts"],"sourcesContent":["import { z } from \"zod\"\n\n\nexport const Route = \"/api/rb/auth/sign-in\"\n\nexport const requestSchema = z.object({\n  email: z\n    .string()\n    .nonempty(\"Email is required\")\n    .email(\"Please enter a valid email address\"),\n  password: z.string().min(1, { message: \"Password is required\" }),\n  rememberMe: z.boolean().default(true),\n})\n\nexport type RequestPayload = z.infer<typeof requestSchema>\n\nexport const responseSchema = z.object({\n  success: z.boolean(),\n  error: z.string().optional(),\n  userId: z.string().optional(),\n  tenantId: z.string().optional(),\n})\n\nexport type ResponsePayload = z.infer<typeof responseSchema>\n"],"names":["Route","requestSchema","z","email","string","nonempty","password","min","message","rememberMe","default","success","boolean","error","optional","userId","tenantId"],"mappings":";AAGO,MAAMA,QAAQ;AAEd,MAAMC,gBAAgBC,OAAS;AAAA,EACpCC,OAAOD,OACJE,EACAC,SAAS,mBAAmB,EAC5BF,MAAM,oCAAoC;AAAA,EAC7CG,UAAUJ,OAAEE,EAASG,IAAI,GAAG;AAAA,IAAEC,SAAS;AAAA,EAAA,CAAwB;AAAA,EAC/DC,YAAYP,UAAYQ,QAAQ,IAAI;AACtC,CAAC;AAI6BR,OAAS;AAAA,EACrCS,SAAST,QAAEU;AAAAA,EACXC,OAAOX,OAAEE,EAASU,SAAAA;AAAAA,EAClBC,QAAQb,OAAEE,EAASU,SAAAA;AAAAA,EACnBE,UAAUd,OAAEE,EAASU,SAAAA;AACvB,CAAC;"}

package/dist/middleware-8IfSkEEy.js

@@ -1,25 +0,0 @@
-const isAuthenticated = (req) => {
-  const sessionUser = req.session?.user;
-  return Boolean(sessionUser?.id);
-};
-const restrictSessionMiddleware = (req, res, next) => {
-  if (isAuthenticated(req)) {
-    return next();
-  }
-  res.status(401).json({
-    error: "unauthorized"
-  });
-};
-const requireSession = restrictSessionMiddleware;
-const redirectAuthMiddleware = (req, res, next) => {
-  if (req.path.startsWith("/app") && !isAuthenticated(req)) {
-    return res.redirect("/auth/sign-in");
-  }
-  next();
-};
-export {
-  requireSession as a,
-  restrictSessionMiddleware as b,
-  redirectAuthMiddleware as r
-};
-//# sourceMappingURL=middleware-8IfSkEEy.js.map

package/dist/middleware-8IfSkEEy.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"middleware-8IfSkEEy.js","sources":["../src/middleware.ts"],"sourcesContent":["import type { Middleware } from \"@rpcbase/api\"\n\nimport type { AuthSessionUser } from \"./types\"\n\n\nconst isAuthenticated = (req: Parameters<Middleware>[0]): req is Parameters<Middleware<AuthSessionUser>>[0] => {\n  const sessionUser = req.session?.user as { id?: unknown } | undefined\n  return Boolean(sessionUser?.id)\n}\n\nexport const restrictSessionMiddleware: Middleware<AuthSessionUser> = (req, res, next) => {\n  if (isAuthenticated(req)) {\n    return next()\n  }\n\n  res.status(401).json({ error: \"unauthorized\" })\n}\n\nexport const requireSession = restrictSessionMiddleware\n\nexport const redirectAuthMiddleware: Middleware<AuthSessionUser> = (req, res, next) => {\n  if (req.path.startsWith(\"/app\") && !isAuthenticated(req)) {\n    return res.redirect(\"/auth/sign-in\")\n  }\n\n  next()\n}\n"],"names":["isAuthenticated","req","sessionUser","session","user","Boolean","id","restrictSessionMiddleware","res","next","status","json","error","requireSession","redirectAuthMiddleware","path","startsWith","redirect"],"mappings":"AAKA,MAAMA,kBAAkBA,CAACC,QAAsF;AAC7G,QAAMC,cAAcD,IAAIE,SAASC;AACjC,SAAOC,QAAQH,aAAaI,EAAE;AAChC;AAEO,MAAMC,4BAAyDA,CAACN,KAAKO,KAAKC,SAAS;AACxF,MAAIT,gBAAgBC,GAAG,GAAG;AACxB,WAAOQ,KAAAA;AAAAA,EACT;AAEAD,MAAIE,OAAO,GAAG,EAAEC,KAAK;AAAA,IAAEC,OAAO;AAAA,EAAA,CAAgB;AAChD;AAEO,MAAMC,iBAAiBN;AAEvB,MAAMO,yBAAsDA,CAACb,KAAKO,KAAKC,SAAS;AACrF,MAAIR,IAAIc,KAAKC,WAAW,MAAM,KAAK,CAAChB,gBAAgBC,GAAG,GAAG;AACxD,WAAOO,IAAIS,SAAS,eAAe;AAAA,EACrC;AAEAR,OAAAA;AACF;"}