@seamless-auth/express 0.1.2 → 0.2.0

package/dist/index.js

@@ -216,9 +216,9 @@ async function register(req, res, opts) {
       setSessionCookie(
         res,
         {
-          name: opts.registrationCookieName || "seamless-auth-registraion",
+          name: c.name,
           payload: c.value,
-          domain: c.domain,
+          domain: c.domain ?? opts.cookieDomain,
           ttlSeconds: c.ttl
         },
         cookieSigner
@@ -233,6 +233,7 @@ async function register(req, res, opts) {
 
 // src/handlers/finishRegister.ts
 import { finishRegisterHandler } from "@seamless-auth/core/handlers/finishRegister";
+import { verifyCookieJwt } from "@seamless-auth/core";
 async function finishRegister(req, res, opts) {
   const cookieSigner = {
     secret: opts.cookieSecret,
@@ -240,8 +241,24 @@ async function finishRegister(req, res, opts) {
     sameSite: process.env.NODE_ENV === "production" ? "none" : "lax"
   };
   const authorization = buildServiceAuthorization(req, opts);
+  const bootstrapToken = req.cookies?.["seamless_bootstrap_token"];
+  const headers = {};
+  if (bootstrapToken) {
+    const payload = verifyCookieJwt(bootstrapToken, opts.cookieSecret);
+    if (!payload || !payload.sub) {
+      res.status(401).json({
+        error: "Invalid or expired session"
+      });
+      return;
+    }
+    headers["cookie"] = `seamless_bootstrap_token=${payload.sub}`;
+  }
   const result = await finishRegisterHandler(
-    { body: req.body, authorization },
+    {
+      body: req.body,
+      authorization,
+      headers
+    },
     {
       authServerUrl: opts.authServerUrl,
       cookieDomain: opts.cookieDomain,
@@ -346,10 +363,272 @@ async function pollMagicLinkConfirmation(req, res, opts) {
   res.status(result.status).json(result.body).end();
 }
 
+// src/handlers/admin.ts
+import {
+  getUsersHandler,
+  createUserHandler,
+  deleteUserHandler,
+  updateUserHandler,
+  getUserDetailHandler,
+  getUserAnomaliesHandler,
+  getAuthEventsHandler,
+  getCredentialCountHandler,
+  listAllSessionsHandler,
+  listUserSessionsHandler,
+  revokeAllUserSessionsHandler
+} from "@seamless-auth/core/handlers/admin";
+function handle(res, result) {
+  if (result.error) {
+    return res.status(result.status).json({ error: result.error });
+  }
+  return res.status(result.status).json(result.body);
+}
+var getUsers = async (req, res, opts) => handle(
+  res,
+  await getUsersHandler({
+    authServerUrl: opts.authServerUrl,
+    authorization: buildServiceAuthorization(req, opts)
+  })
+);
+var createUser = async (req, res, opts) => handle(
+  res,
+  await createUserHandler({
+    authServerUrl: opts.authServerUrl,
+    authorization: buildServiceAuthorization(req, opts),
+    body: req.body
+  })
+);
+var deleteUser = async (req, res, opts) => handle(
+  res,
+  await deleteUserHandler({
+    authServerUrl: opts.authServerUrl,
+    authorization: buildServiceAuthorization(req, opts)
+  })
+);
+var updateUser = async (req, res, opts) => handle(
+  res,
+  await updateUserHandler(req.params.userId, {
+    authServerUrl: opts.authServerUrl,
+    authorization: buildServiceAuthorization(req, opts),
+    body: req.body
+  })
+);
+var getUserDetail = async (req, res, opts) => handle(
+  res,
+  await getUserDetailHandler(req.params.userId, {
+    authServerUrl: opts.authServerUrl,
+    authorization: buildServiceAuthorization(req, opts)
+  })
+);
+var getUserAnomalies = async (req, res, opts) => handle(
+  res,
+  await getUserAnomaliesHandler(req.params.userId, {
+    authServerUrl: opts.authServerUrl,
+    authorization: buildServiceAuthorization(req, opts)
+  })
+);
+var getAuthEvents = async (req, res, opts) => handle(
+  res,
+  await getAuthEventsHandler({
+    authServerUrl: opts.authServerUrl,
+    authorization: buildServiceAuthorization(req, opts),
+    query: req.query
+  })
+);
+var getCredentialCount = async (req, res, opts) => handle(
+  res,
+  await getCredentialCountHandler({
+    authServerUrl: opts.authServerUrl,
+    authorization: buildServiceAuthorization(req, opts)
+  })
+);
+var listAllSessions = async (req, res, opts) => handle(
+  res,
+  await listAllSessionsHandler({
+    authServerUrl: opts.authServerUrl,
+    authorization: buildServiceAuthorization(req, opts),
+    query: req.query
+  })
+);
+var listUserSessions = async (req, res, opts) => handle(
+  res,
+  await listUserSessionsHandler(req.params.userId, {
+    authServerUrl: opts.authServerUrl,
+    authorization: buildServiceAuthorization(req, opts)
+  })
+);
+var revokeAllUserSessions = async (req, res, opts) => handle(
+  res,
+  await revokeAllUserSessionsHandler(req.params.userId, {
+    authServerUrl: opts.authServerUrl,
+    authorization: buildServiceAuthorization(req, opts)
+  })
+);
+
 // src/createServer.ts
 import {
   authFetch
 } from "@seamless-auth/core";
+
+// src/handlers/bootstrapAdmininvite.ts
+import { bootstrapAdminInviteHandler } from "@seamless-auth/core/handlers/bootstrapAdminInvite";
+async function bootstrapAdminInvite(req, res, opts) {
+  const result = await bootstrapAdminInviteHandler({
+    authServerUrl: opts.authServerUrl,
+    email: req.body.email,
+    authorization: req.headers["authorization"]
+  });
+  if (result.error) {
+    return res.status(result.status).json({ error: result.error });
+  }
+  res.status(result.status).json(result.body);
+}
+
+// src/handlers/systemConfig.ts
+import {
+  getAvailableRolesHandler,
+  getSystemConfigAdminHandler,
+  updateSystemConfigHandler
+} from "@seamless-auth/core/handlers/systemConfig";
+async function getAvailableRoles(req, res, opts) {
+  const authorization = buildServiceAuthorization(req, opts);
+  const result = await getAvailableRolesHandler({
+    authServerUrl: opts.authServerUrl,
+    authorization
+  });
+  if (result.error) {
+    return res.status(result.status).json({ error: result.error });
+  }
+  res.status(result.status).json(result.body);
+}
+async function getSystemConfigAdmin(req, res, opts) {
+  const authorization = buildServiceAuthorization(req, opts);
+  const result = await getSystemConfigAdminHandler({
+    authServerUrl: opts.authServerUrl,
+    authorization
+  });
+  if (result.error) {
+    return res.status(result.status).json({ error: result.error });
+  }
+  res.status(result.status).json(result.body);
+}
+async function updateSystemConfig(req, res, opts) {
+  const authorization = buildServiceAuthorization(req, opts);
+  const result = await updateSystemConfigHandler({
+    authServerUrl: opts.authServerUrl,
+    authorization,
+    payload: req.body
+  });
+  if (result.error) {
+    return res.status(result.status).json({ error: result.error });
+  }
+  res.status(result.status).json(result.body);
+}
+
+// src/handlers/internalMetrics.ts
+import {
+  getAuthEventSummaryHandler,
+  getAuthEventTimeseriesHandler,
+  getLoginStatsHandler,
+  getSecurityAnomaliesHandler,
+  getDashboardMetricsHandler,
+  getGroupedEventSummaryHandler
+} from "@seamless-auth/core/handlers/internalMetrics";
+function handle2(res, result) {
+  if (result.error) {
+    return res.status(result.status).json({ error: result.error });
+  }
+  return res.status(result.status).json(result.body);
+}
+async function getAuthEventSummary(req, res, opts) {
+  const authorization = buildServiceAuthorization(req, opts);
+  const result = await getAuthEventSummaryHandler({
+    authServerUrl: opts.authServerUrl,
+    authorization,
+    query: req.query
+  });
+  return handle2(res, result);
+}
+async function getAuthEventTimeseries(req, res, opts) {
+  const authorization = buildServiceAuthorization(req, opts);
+  const result = await getAuthEventTimeseriesHandler({
+    authServerUrl: opts.authServerUrl,
+    authorization,
+    query: req.query
+  });
+  return handle2(res, result);
+}
+async function getLoginStats(req, res, opts) {
+  const authorization = buildServiceAuthorization(req, opts);
+  const result = await getLoginStatsHandler({
+    authServerUrl: opts.authServerUrl,
+    authorization
+  });
+  return handle2(res, result);
+}
+async function getSecurityAnomalies(req, res, opts) {
+  const authorization = buildServiceAuthorization(req, opts);
+  const result = await getSecurityAnomaliesHandler({
+    authServerUrl: opts.authServerUrl,
+    authorization
+  });
+  return handle2(res, result);
+}
+async function getDashboardMetrics(req, res, opts) {
+  const authorization = buildServiceAuthorization(req, opts);
+  const result = await getDashboardMetricsHandler({
+    authServerUrl: opts.authServerUrl,
+    authorization
+  });
+  return handle2(res, result);
+}
+async function getGroupedEventSummary(req, res, opts) {
+  const authorization = buildServiceAuthorization(req, opts);
+  const result = await getGroupedEventSummaryHandler({
+    authServerUrl: opts.authServerUrl,
+    authorization
+  });
+  return handle2(res, result);
+}
+
+// src/handlers/sessions.ts
+import {
+  listSessionsHandler,
+  revokeSessionHandler,
+  revokeAllSessionsHandler
+} from "@seamless-auth/core/handlers/sessions";
+function handle3(res, result) {
+  if (result.error) {
+    return res.status(result.status).json({ error: result.error });
+  }
+  return res.status(result.status).json(result.body);
+}
+async function listSessions(req, res, opts) {
+  const authorization = buildServiceAuthorization(req, opts);
+  const result = await listSessionsHandler({
+    authServerUrl: opts.authServerUrl,
+    authorization
+  });
+  return handle3(res, result);
+}
+async function revokeSession(req, res, opts) {
+  const authorization = buildServiceAuthorization(req, opts);
+  const result = await revokeSessionHandler(req.params.id, {
+    authServerUrl: opts.authServerUrl,
+    authorization
+  });
+  return handle3(res, result);
+}
+async function revokeAllSessions(req, res, opts) {
+  const authorization = buildServiceAuthorization(req, opts);
+  const result = await revokeAllSessionsHandler({
+    authServerUrl: opts.authServerUrl,
+    authorization
+  });
+  return handle3(res, result);
+}
+
+// src/createServer.ts
 function createSeamlessAuthServer(opts) {
   const r = express.Router();
   r.use(express.json());
@@ -473,11 +752,101 @@ function createSeamlessAuthServer(opts) {
     "/magic-link/check",
     (req, res) => pollMagicLinkConfirmation(req, res, resolvedOpts)
   );
+  r.post(
+    "/internal/bootstrap/admin-invite",
+    (req, res) => bootstrapAdminInvite(req, res, resolvedOpts)
+  );
+  r.get(
+    "/system-config/roles",
+    (req, res) => getAvailableRoles(req, res, resolvedOpts)
+  );
+  r.get(
+    "/system-config/admin",
+    (req, res) => getSystemConfigAdmin(req, res, resolvedOpts)
+  );
+  r.patch(
+    "/system-config/admin",
+    (req, res) => updateSystemConfig(req, res, resolvedOpts)
+  );
+  r.get(
+    "/internal/auth-events/summary",
+    (req, res) => getAuthEventSummary(req, res, resolvedOpts)
+  );
+  r.get(
+    "/internal/auth-events/timeseries",
+    (req, res) => getAuthEventTimeseries(req, res, resolvedOpts)
+  );
+  r.get(
+    "/internal/auth-events/login-stats",
+    (req, res) => getLoginStats(req, res, resolvedOpts)
+  );
+  r.get(
+    "/internal/security/anomalies",
+    (req, res) => getSecurityAnomalies(req, res, resolvedOpts)
+  );
+  r.get(
+    "/internal/metrics/dashboard",
+    (req, res) => getDashboardMetrics(req, res, resolvedOpts)
+  );
+  r.get(
+    "/internal/auth-events/grouped",
+    (req, res) => getGroupedEventSummary(req, res, resolvedOpts)
+  );
+  r.get("/admin/users", (req, res) => getUsers(req, res, resolvedOpts));
+  r.post(
+    "/admin/users",
+    (req, res) => createUser(req, res, resolvedOpts)
+  );
+  r.delete(
+    "/admin/users",
+    (req, res) => deleteUser(req, res, resolvedOpts)
+  );
+  r.patch(
+    "/admin/users/:userId",
+    (req, res) => updateUser(req, res, resolvedOpts)
+  );
+  r.get(
+    "/admin/users/:userId",
+    (req, res) => getUserDetail(req, res, resolvedOpts)
+  );
+  r.get(
+    "/admin/users/:userId/anomalies",
+    (req, res) => getUserAnomalies(req, res, resolvedOpts)
+  );
+  r.get(
+    "/admin/auth-events",
+    (req, res) => getAuthEvents(req, res, resolvedOpts)
+  );
+  r.get(
+    "/admin/credential-count",
+    (req, res) => getCredentialCount(req, res, resolvedOpts)
+  );
+  r.get(
+    "/admin/sessions",
+    (req, res) => listAllSessions(req, res, resolvedOpts)
+  );
+  r.get(
+    "/admin/sessions/:userId",
+    (req, res) => listUserSessions(req, res, resolvedOpts)
+  );
+  r.delete(
+    "/admin/sessions/:userId/revoke-all",
+    (req, res) => revokeAllUserSessions(req, res, resolvedOpts)
+  );
+  r.get("/sessions", (req, res) => listSessions(req, res, resolvedOpts));
+  r.delete(
+    "/sessions/:id",
+    (req, res) => revokeSession(req, res, resolvedOpts)
+  );
+  r.delete(
+    "/sessions",
+    (req, res) => revokeAllSessions(req, res, resolvedOpts)
+  );
   return r;
 }
 
 // src/middleware/requireAuth.ts
-import { verifyCookieJwt } from "@seamless-auth/core";
+import { verifyCookieJwt as verifyCookieJwt2 } from "@seamless-auth/core";
 function requireAuth(opts) {
   const { cookieName = "seamless-access", cookieSecret } = opts;
   if (!cookieSecret) {
@@ -495,7 +864,7 @@ function requireAuth(opts) {
       });
       return;
     }
-    const payload = verifyCookieJwt(token, cookieSecret);
+    const payload = verifyCookieJwt2(token, cookieSecret);
     if (!payload || !payload.sub) {
       res.status(401).json({
         error: "Invalid or expired session"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@seamless-auth/express",
-  "version": "0.1.2",
+  "version": "0.2.0",
   "description": "Express adapter for Seamless Auth passwordless authentication",
   "license": "AGPL-3.0-only",
   "type": "module",
@@ -37,7 +37,7 @@
     "express": ">=4.18.0"
   },
   "dependencies": {
-    "@seamless-auth/core": "^0.2.1",
+    "@seamless-auth/core": "^0.3.0",
     "cookie-parser": "^1.4.6",
     "jsonwebtoken": "^9.0.3"
   },