@rpcbase/auth 0.44.0 → 0.46.0

package/dist/api/me/handler.d.ts

@@ -0,0 +1,5 @@
+import { Api } from '../../../../api/src';
+import { AuthSessionUser } from '../../types';
+declare const _default: (api: Api<AuthSessionUser>) => void;
+export default _default;
+//# sourceMappingURL=handler.d.ts.map

package/dist/api/me/handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../../../src/api/me/handler.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAA8B,MAAM,cAAc,CAAA;AAE9D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;yBAkDlC,KAAK,GAAG,CAAC,eAAe,CAAC;AAAzC,wBAGC"}

package/dist/api/me/index.d.ts

@@ -0,0 +1,16 @@
+import { z } from '../../../../vite/node_modules/zod';
+export declare const Route = "/api/rb/auth/me";
+export declare const requestSchema: z.ZodObject<{}, z.core.$strip>;
+export type RequestPayload = z.infer<typeof requestSchema>;
+export declare const responseSchema: z.ZodObject<{
+    id: z.ZodOptional<z.ZodString>;
+    email: z.ZodOptional<z.ZodString>;
+    phone: z.ZodOptional<z.ZodString>;
+    name: z.ZodOptional<z.ZodString>;
+    tenants: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    current_tenant_id: z.ZodOptional<z.ZodString>;
+    signed_in_tenants: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodString>>>;
+    error: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type ResponsePayload = z.infer<typeof responseSchema>;
+//# sourceMappingURL=index.d.ts.map

package/dist/api/me/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/api/me/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAGvB,eAAO,MAAM,KAAK,oBAAoB,CAAA;AAEtC,eAAO,MAAM,aAAa,gCAAe,CAAA;AACzC,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAA;AAE1D,eAAO,MAAM,cAAc;;;;;;;;;iBASzB,CAAA;AAEF,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAA"}

package/dist/api/sign-in/handler.d.ts

@@ -1,4 +1,5 @@
 import { Api } from '../../../../api/src';
-declare const _default: (api: Api) => void;
+import { AuthSessionUser } from '../../types';
+declare const _default: (api: Api<AuthSessionUser>) => void;
 export default _default;
 //# sourceMappingURL=handler.d.ts.map

package/dist/api/sign-in/handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../../../src/api/sign-in/handler.ts"],"names":[],"mappings":"AACA,OAAO,EAAC,GAAG,EAAiC,MAAM,cAAc,CAAA;yBA+ChD,KAAK,GAAG;AAAxB,wBAEC"}
+{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../../../src/api/sign-in/handler.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,GAAG,EAA8B,MAAM,cAAc,CAAA;AAG9D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;yBA4DlC,KAAK,GAAG,CAAC,eAAe,CAAC;AAAzC,wBAEC"}

package/dist/api/sign-in/index.d.ts

@@ -1,12 +1,16 @@
 import { z } from '../../../../vite/node_modules/zod';
 export declare const Route = "/api/rb/auth/sign-in";
 export declare const requestSchema: z.ZodObject<{
-    email_or_phone: z.ZodDefault<z.ZodString>;
+    email: z.ZodString;
+    password: z.ZodString;
     remember_me: z.ZodDefault<z.ZodBoolean>;
 }, z.core.$strip>;
 export type RequestPayload = z.infer<typeof requestSchema>;
 export declare const responseSchema: z.ZodObject<{
     success: z.ZodBoolean;
+    error: z.ZodOptional<z.ZodString>;
+    user_id: z.ZodOptional<z.ZodString>;
+    tenant_id: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
 export type ResponsePayload = z.infer<typeof responseSchema>;
 //# sourceMappingURL=index.d.ts.map

package/dist/api/sign-in/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/api/sign-in/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAIvB,eAAO,MAAM,KAAK,yBAAyB,CAAA;AAE3C,eAAO,MAAM,aAAa;;;iBAcxB,CAAA;AAEF,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAA;AAE1D,eAAO,MAAM,cAAc;;iBAEzB,CAAA;AAEF,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/api/sign-in/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAGvB,eAAO,MAAM,KAAK,yBAAyB,CAAA;AAE3C,eAAO,MAAM,aAAa;;;;iBAOxB,CAAA;AAEF,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAA;AAE1D,eAAO,MAAM,cAAc;;;;;iBAKzB,CAAA;AAEF,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAA"}

package/dist/api/sign-out/handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../../../src/api/sign-out/handler.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAmB,MAAM,cAAc,CAAA;yBAcnC,KAAK,GAAG;AAAxB,wBAEC"}
+{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../../../src/api/sign-out/handler.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAO,MAAM,cAAc,CAAA;yBAkBvB,KAAK,GAAG;AAAxB,wBAEC"}

package/dist/api/sign-up/handler.d.ts

@@ -1,4 +1,5 @@
 import { Api } from '../../../../api/src';
-declare const _default: (api: Api) => void;
+import { AuthSessionUser } from '../../types';
+declare const _default: (api: Api<AuthSessionUser>) => void;
 export default _default;
 //# sourceMappingURL=handler.d.ts.map

package/dist/api/sign-up/handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../../../src/api/sign-up/handler.ts"],"names":[],"mappings":"AAGA,OAAO,EAAC,GAAG,EAA6B,MAAM,cAAc,CAAA;yBA0C5C,KAAK,GAAG;AAAxB,wBAEC"}
+{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../../../src/api/sign-up/handler.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,GAAG,EAA8B,MAAM,cAAc,CAAA;AAG9D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;yBAgFlC,KAAK,GAAG,CAAC,eAAe,CAAC;AAAzC,wBAEC"}

package/dist/api/sign-up/index.d.ts

@@ -1,13 +1,16 @@
 import { z } from '../../../../vite/node_modules/zod';
 export declare const Route = "/api/rb/auth/sign-up";
 export declare const requestSchema: z.ZodObject<{
-    email_or_phone: z.ZodString;
+    email: z.ZodString;
     password: z.ZodString;
-    password_confirmation: z.ZodString;
+    remember_me: z.ZodDefault<z.ZodBoolean>;
 }, z.core.$strip>;
 export type RequestPayload = z.infer<typeof requestSchema>;
 export declare const responseSchema: z.ZodObject<{
     success: z.ZodBoolean;
+    error: z.ZodOptional<z.ZodString>;
+    user_id: z.ZodOptional<z.ZodString>;
+    tenant_id: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
 export type ResponsePayload = z.infer<typeof responseSchema>;
 //# sourceMappingURL=index.d.ts.map

package/dist/api/sign-up/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/api/sign-up/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAIvB,eAAO,MAAM,KAAK,yBAAyB,CAAA;AAE3C,eAAO,MAAM,aAAa;;;;iBAmBtB,CAAA;AAEJ,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAA;AAE1D,eAAO,MAAM,cAAc;;iBAEzB,CAAA;AAEF,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/api/sign-up/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAGvB,eAAO,MAAM,KAAK,yBAAyB,CAAA;AAE3C,eAAO,MAAM,aAAa;;;;iBAQtB,CAAA;AAEJ,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAA;AAE1D,eAAO,MAAM,cAAc;;;;;iBAKzB,CAAA;AAEF,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAA"}

package/dist/api/verify-otp/handler.d.ts

@@ -0,0 +1,5 @@
+import { Api } from '../../../../api/src';
+import { AuthSessionUser } from '../../types';
+declare const _default: (api: Api<AuthSessionUser>) => void;
+export default _default;
+//# sourceMappingURL=handler.d.ts.map

package/dist/api/verify-otp/handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../../../src/api/verify-otp/handler.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAA8B,MAAM,cAAc,CAAA;AAE9D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;yBA0DlC,KAAK,GAAG,CAAC,eAAe,CAAC;AAAzC,wBAEC"}

package/dist/api/verify-otp/index.d.ts

@@ -0,0 +1,16 @@
+import { z } from '../../../../vite/node_modules/zod';
+export declare const Route = "/api/rb/auth/verify-otp";
+export declare const requestSchema: z.ZodObject<{
+    email: z.ZodString;
+    code: z.ZodString;
+    remember_me: z.ZodDefault<z.ZodBoolean>;
+}, z.core.$strip>;
+export type RequestPayload = z.infer<typeof requestSchema>;
+export declare const responseSchema: z.ZodObject<{
+    success: z.ZodBoolean;
+    error: z.ZodOptional<z.ZodString>;
+    user_id: z.ZodOptional<z.ZodString>;
+    tenant_id: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type ResponsePayload = z.infer<typeof responseSchema>;
+//# sourceMappingURL=index.d.ts.map

package/dist/api/verify-otp/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/api/verify-otp/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAGvB,eAAO,MAAM,KAAK,4BAA4B,CAAA;AAE9C,eAAO,MAAM,aAAa;;;;iBAIxB,CAAA;AAEF,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAA;AAE1D,eAAO,MAAM,cAAc;;;;;iBAKzB,CAAA;AAEF,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAA"}

package/dist/components/{EmailOrPhoneInput → EmailInput}/index.d.ts

@@ -1,4 +1,4 @@
-export declare const EmailOrPhoneInput: ({ id, className, placeholder, }: {
+export declare const EmailInput: ({ id, className, placeholder, }: {
     id: string;
     className?: string;
     placeholder?: string;

package/dist/components/EmailInput/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/components/EmailInput/index.tsx"],"names":[],"mappings":"AAGA,eAAO,MAAM,UAAU,GAAI,iCAIxB;IACD,EAAE,EAAE,MAAM,CAAA;IACV,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB,4CA2BA,CAAA"}

package/dist/components/PasswordInput/index.d.ts

@@ -0,0 +1,10 @@
+type PasswordInputProps = {
+    id: string;
+    name?: string;
+    className?: string;
+    placeholder?: string;
+    autoComplete?: string;
+};
+export declare const PasswordInput: ({ id, name, className, placeholder, autoComplete, }: PasswordInputProps) => import("react/jsx-runtime").JSX.Element;
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/components/PasswordInput/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/components/PasswordInput/index.tsx"],"names":[],"mappings":"AAKA,KAAK,kBAAkB,GAAG;IACxB,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB,CAAA;AAED,eAAO,MAAM,aAAa,GAAI,qDAM3B,kBAAkB,4CA2CpB,CAAA"}

package/dist/components/SignInForm/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/components/SignInForm/index.tsx"],"names":[],"mappings":"AAAA,OAAO,EAAC,SAAS,EAAY,MAAM,OAAO,CAAA;AAW1C,eAAO,MAAM,UAAU,GAAI,yBAGxB;IACD,QAAQ,EAAE,SAAS,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB,4CAyBA,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/components/SignInForm/index.tsx"],"names":[],"mappings":"AAAA,OAAO,EAAC,SAAS,EAAY,MAAM,OAAO,CAAA;AAW1C,eAAO,MAAM,UAAU,GAAI,yBAGxB;IACD,QAAQ,EAAE,SAAS,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB,4CA6CA,CAAA"}

package/dist/components/SignUpForm/index.d.ts

@@ -1,6 +1,7 @@
 import { ReactNode } from 'react';
-export declare const SignUpForm: ({ children, className }: {
+export declare const SignUpForm: ({ children, className, otpNextPath }: {
     children: ReactNode;
     className?: string;
+    otpNextPath?: string;
 }) => import("react/jsx-runtime").JSX.Element;
 //# sourceMappingURL=index.d.ts.map

package/dist/components/SignUpForm/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/components/SignUpForm/index.tsx"],"names":[],"mappings":"AAAA,OAAO,EAAC,SAAS,EAAY,MAAM,OAAO,CAAA;AAW1C,eAAO,MAAM,UAAU,GAAI,yBAGxB;IACD,QAAQ,EAAE,SAAS,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB,4CA0BA,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/components/SignUpForm/index.tsx"],"names":[],"mappings":"AAAA,OAAO,EAAC,SAAS,EAAsB,MAAM,OAAO,CAAA;AAYpD,eAAO,MAAM,UAAU,GAAI,sCAIxB;IACD,QAAQ,EAAE,SAAS,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB,4CA8EA,CAAA"}

package/dist/components/index.d.ts

@@ -1,7 +1,8 @@
 export * from './AuthLayout';
 export * from './AppleSignInButton';
-export * from './EmailOrPhoneInput';
+export * from './EmailInput';
 export * from './SignInForm';
 export * from './SignUpForm';
 export * from './RememberMeCheckbox';
+export * from './PasswordInput';
 //# sourceMappingURL=index.d.ts.map

package/dist/components/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/components/index.ts"],"names":[],"mappings":"AAAA,cAAc,cAAc,CAAA;AAC5B,cAAc,qBAAqB,CAAA;AACnC,cAAc,qBAAqB,CAAA;AACnC,cAAc,cAAc,CAAA;AAC5B,cAAc,cAAc,CAAA;AAC5B,cAAc,sBAAsB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/components/index.ts"],"names":[],"mappings":"AAAA,cAAc,cAAc,CAAA;AAC5B,cAAc,qBAAqB,CAAA;AACnC,cAAc,cAAc,CAAA;AAC5B,cAAc,cAAc,CAAA;AAC5B,cAAc,cAAc,CAAA;AAC5B,cAAc,sBAAsB,CAAA;AACpC,cAAc,iBAAiB,CAAA"}

package/dist/handler-Ba3pgtfZ.js

@@ -0,0 +1,57 @@
+import { loadModel } from "@rpcbase/api";
+import { r as restrictSessionMiddleware } from "./middleware-BiMXO6Dq.js";
+import { o as object, s as string, a as array } from "./schemas-KL7REOdt.js";
+const Route = "/api/rb/auth/me";
+object({});
+object({
+  id: string().optional(),
+  email: string().email().optional(),
+  phone: string().optional(),
+  name: string().optional(),
+  tenants: array(string()).default([]),
+  current_tenant_id: string().optional(),
+  signed_in_tenants: array(string()).default([]).optional(),
+  error: string().optional()
+});
+const me = async (_payload, ctx) => {
+  const sessionUser = ctx.req.session?.user;
+  if (!sessionUser?.id) {
+    ctx.res.status(401);
+    return {
+      id: "",
+      current_tenant_id: "",
+      signed_in_tenants: [],
+      tenants: [],
+      error: "not_authenticated"
+    };
+  }
+  const User = await loadModel("User", ctx);
+  const user = await User.findById(sessionUser.id);
+  if (!user) {
+    ctx.res.status(404);
+    return {
+      id: "",
+      current_tenant_id: "",
+      signed_in_tenants: [],
+      tenants: [],
+      error: "user_not_found"
+    };
+  }
+  const tenantId = sessionUser.current_tenant_id || user.tenants?.[0]?.toString?.() || "00000000";
+  return {
+    id: user._id.toString(),
+    email: user.email,
+    phone: user.phone,
+    name: user.name,
+    tenants: (user.tenants || []).map((t) => t.toString?.() || String(t)),
+    current_tenant_id: tenantId,
+    signed_in_tenants: sessionUser.signed_in_tenants || []
+  };
+};
+const handler = (api) => {
+  api.use(Route, restrictSessionMiddleware);
+  api.get(Route, me);
+};
+export {
+  handler as default
+};

package/dist/handler-CE4lXc0G.js

@@ -0,0 +1,64 @@
+import crypto from "crypto";
+import { loadModel } from "@rpcbase/api";
+import { hashPassword, sendEmail } from "@rpcbase/server";
+import { R as Route, r as requestSchema } from "./index-DwX0Y2YV.js";
+const signUp = async (payload, ctx) => {
+  const User = await loadModel("User", ctx);
+  const Tenant = await loadModel("Tenant", ctx);
+  const parsed = requestSchema.safeParse(payload);
+  if (!parsed.success) {
+    ctx.res.status(400);
+    return { success: false, error: "invalid_payload" };
+  }
+  const { email, password, remember_me: _remember_me } = parsed.data;
+  const existingUser = await User.findOne({ email });
+  if (existingUser) {
+    console.log("user with email already exists", email);
+    ctx.res.status(409);
+    return { success: false, error: "user_exists" };
+  }
+  const salt = crypto.randomBytes(16).toString("hex");
+  const derivedKey = await hashPassword(password, salt);
+  const hashedPassword = `${salt}:${derivedKey.toString("hex")}`;
+  const tenantId = crypto.randomUUID();
+  const emailVerificationCode = crypto.randomInt(0, 1e6).toString().padStart(6, "0");
+  const emailVerificationExpiresAt = new Date(Date.now() + 10 * 60 * 1e3);
+  const user = new User({
+    email,
+    password: hashedPassword,
+    tenants: [tenantId],
+    email_verification_code: emailVerificationCode,
+    email_verification_expires_at: emailVerificationExpiresAt
+  });
+  await user.save();
+  try {
+    await sendEmail({
+      to: email,
+      subject: `Verify your email: ${emailVerificationCode}`,
+      html: `
+        <p>Welcome to rpcbase!</p>
+        <p>Your verification code is <strong>${emailVerificationCode}</strong>. It expires in 10 minutes.</p>
+        <p>If you didn't request this, you can ignore this message.</p>
+      `,
+      text: `Welcome to rpcbase! Your verification code is ${emailVerificationCode}. It expires in 10 minutes. If you didn't request this, you can ignore this message.`
+    });
+  } catch (err) {
+    console.warn("failed to send sign-up email", err);
+  }
+  try {
+    await Tenant.create({
+      tenant_id: tenantId,
+      name: email
+    });
+  } catch (err) {
+    console.warn("failed to create tenant for user", err);
+  }
+  console.log("created new user", user._id.toString());
+  return { success: true, user_id: user._id.toString(), tenant_id: tenantId };
+};
+const handler = (api) => {
+  api.post(Route, signUp);
+};
+export {
+  handler as default
+};

package/dist/{handler-42q87FS8.js → handler-CNHucHrj.js}

@@ -1,10 +1,13 @@
-import { o as object, b as boolean } from "./schemas-7XFc7XYG.js";
+import { o as object, b as boolean } from "./schemas-KL7REOdt.js";
 const Route = "/api/rb/auth/sign-out";
 object({});
 object({
   success: boolean()
 });
 const handleSignOut = async (_, ctx) => {
+  if (!ctx.req.session) {
+    return { success: true };
+  }
   await new Promise((resolve) => ctx.req.session.destroy(() => resolve()));
   return {
     success: true

package/dist/handler-DOnLMd-9.js

@@ -0,0 +1,57 @@
+import { loadModel } from "@rpcbase/api";
+import { o as object, b as boolean, s as string } from "./schemas-KL7REOdt.js";
+const Route = "/api/rb/auth/verify-otp";
+const requestSchema = object({
+  email: string().email(),
+  code: string().length(6, "Code must be 6 digits"),
+  remember_me: boolean().default(true)
+});
+object({
+  success: boolean(),
+  error: string().optional(),
+  user_id: string().optional(),
+  tenant_id: string().optional()
+});
+const verifyOtp = async (payload, ctx) => {
+  const User = await loadModel("User", ctx);
+  const parsed = requestSchema.safeParse(payload);
+  if (!parsed.success) {
+    ctx.res.status(400);
+    return { success: false, error: "invalid_payload" };
+  }
+  const { email, code } = parsed.data;
+  const user = await User.findOne({ email }, { email_verification_code: 1, email_verification_expires_at: 1, tenants: 1 });
+  if (!user) {
+    ctx.res.status(404);
+    return { success: false, error: "user_not_found" };
+  }
+  const storedCode = user.email_verification_code;
+  const expiresAt = user.email_verification_expires_at;
+  const isExpired = expiresAt instanceof Date && expiresAt.getTime() < Date.now();
+  if (!storedCode || storedCode !== code || isExpired) {
+    ctx.res.status(400);
+    return { success: false, error: "invalid_code" };
+  }
+  user.email_verification_code = void 0;
+  user.email_verification_expires_at = void 0;
+  await user.save();
+  const tenantId = user.tenants?.[0]?.toString?.() || "00000000";
+  const signedInTenants = (user.tenants || []).map((t) => t.toString?.() || String(t)) || [tenantId];
+  if (!ctx.req.session) {
+    ctx.res.status(500);
+    return { success: false, error: "session_unavailable" };
+  }
+  ctx.req.session.user = {
+    id: user._id.toString(),
+    current_tenant_id: tenantId,
+    signed_in_tenants: signedInTenants.length ? signedInTenants : [tenantId],
+    is_entry_gate_authorized: true
+  };
+  return { success: true, user_id: user._id.toString(), tenant_id: tenantId };
+};
+const handler = (api) => {
+  api.post(Route, verifyOtp);
+};
+export {
+  handler as default
+};

package/dist/handler-r4ZECW_z.js

@@ -0,0 +1,48 @@
+import crypto from "crypto";
+import { loadModel } from "@rpcbase/api";
+import { hashPassword } from "@rpcbase/server";
+import { R as Route, r as requestSchema } from "./index-Bdcryyvv.js";
+const signIn = async (payload, ctx) => {
+  const User = await loadModel("User", ctx);
+  const parsed = requestSchema.safeParse(payload);
+  if (!parsed.success) {
+    ctx.res.status(400);
+    return { success: false, error: "invalid_payload" };
+  }
+  const { email, password } = parsed.data;
+  const user = await User.findOne({ email }, { password: 1, tenants: 1 });
+  if (!user?.password) {
+    ctx.res.status(401);
+    return { success: false, error: "invalid_credentials" };
+  }
+  const [salt, hashedPassword] = String(user.password).split(":");
+  if (!salt || !hashedPassword) {
+    ctx.res.status(500);
+    return { success: false, error: "invalid_password_format" };
+  }
+  const derivedKey = await hashPassword(password, salt);
+  const passwordMatches = crypto.timingSafeEqual(Buffer.from(hashedPassword, "hex"), derivedKey);
+  if (!passwordMatches) {
+    ctx.res.status(401);
+    return { success: false, error: "invalid_credentials" };
+  }
+  const tenantId = user.tenants?.[0]?.toString?.() || "00000000";
+  const signedInTenants = (user.tenants || []).map((t) => t.toString?.() || String(t)) || [tenantId];
+  if (!ctx.req.session) {
+    ctx.res.status(500);
+    return { success: false, error: "session_unavailable" };
+  }
+  ctx.req.session.user = {
+    id: user._id.toString(),
+    current_tenant_id: tenantId,
+    signed_in_tenants: signedInTenants.length ? signedInTenants : [tenantId],
+    is_entry_gate_authorized: true
+  };
+  return { success: true, user_id: user._id.toString(), tenant_id: tenantId };
+};
+const handler = (api) => {
+  api.post(Route, signIn);
+};
+export {
+  handler as default
+};

package/dist/index-Bdcryyvv.js

@@ -0,0 +1,17 @@
+import { o as object, b as boolean, s as string } from "./schemas-KL7REOdt.js";
+const Route = "/api/rb/auth/sign-in";
+const requestSchema = object({
+  email: string().nonempty("Email is required").email("Please enter a valid email address"),
+  password: string().min(1, { message: "Password is required" }),
+  remember_me: boolean().default(true)
+});
+object({
+  success: boolean(),
+  error: string().optional(),
+  user_id: string().optional(),
+  tenant_id: string().optional()
+});
+export {
+  Route as R,
+  requestSchema as r
+};

package/dist/index-DwX0Y2YV.js

@@ -0,0 +1,17 @@
+import { o as object, b as boolean, s as string } from "./schemas-KL7REOdt.js";
+const Route = "/api/rb/auth/sign-up";
+const requestSchema = object({
+  email: string().nonempty("Email is required").email("Please enter a valid email address"),
+  password: string().min(8, { message: "Password must be at least 8 characters long." }),
+  remember_me: boolean().default(true)
+});
+object({
+  success: boolean(),
+  error: string().optional(),
+  user_id: string().optional(),
+  tenant_id: string().optional()
+});
+export {
+  Route as R,
+  requestSchema as r
+};

package/dist/index.d.ts

@@ -1,2 +1,4 @@
 export * from './components';
+export * from './middleware';
+export * from './types';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,cAAc,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,cAAc,CAAA;AAC5B,cAAc,cAAc,CAAA;AAC5B,cAAc,SAAS,CAAA"}