@shipfox/api-auth 18.0.0 → 19.0.0

package/dist/presentation/routes/registration/signup.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../src/presentation/routes/registration/signup.ts"],"sourcesContent":["import {signupBodySchema, signupResponseSchema} from '@shipfox/api-auth-dto';\nimport {EmailChallengeError} from '@shipfox/api-email-challenges';\nimport type {WorkspacesInterModuleClient} from '@shipfox/api-workspaces-dto/inter-module';\nimport {ClientError, defineRoute} from '@shipfox/node-fastify';\nimport {signup, signupWithInvitation} from '#core/auth.js';\nimport {\n  EmailTakenError,\n  InvitationEmailMismatchError,\n  SignupNotAllowedError,\n  TokenAlreadyUsedError,\n  TokenExpiredError,\n  TokenInvalidError,\n} from '#core/errors.js';\nimport {SIGNUP_DENIAL_MESSAGE_MAX_LENGTH, type SignupPolicy} from '#core/ports.js';\nimport {setRefreshTokenCookie} from '#presentation/auth/refresh-cookie.js';\nimport {toUserDto} from '#presentation/dto/user.js';\n\nexport function createSignupRoute(\n  workspaces: WorkspacesInterModuleClient,\n  signupPolicy?: SignupPolicy,\n) {\n  return defineRoute({\n    method: 'POST',\n    path: '/signup',\n    description:\n      'Create a user account. Sends a verification email unless an invitation token is supplied.',\n    schema: {\n      body: signupBodySchema,\n      response: {\n        201: signupResponseSchema,\n      },\n    },\n    errorHandler: (error) => {\n      if (error instanceof EmailChallengeError) {\n        throw new ClientError(error.message, `email-challenge-${error.code}`, {\n          status: error.code === 'limited' ? 429 : 400,\n          ...(error.retryAt ? {details: {retry_at: error.retryAt.toISOString()}} : {}),\n        });\n      }\n      if (error instanceof EmailTakenError) {\n        throw new ClientError('Email already registered', 'email-taken', {status: 409});\n      }\n      if (error instanceof SignupNotAllowedError) {\n        const message = error.message.slice(0, SIGNUP_DENIAL_MESSAGE_MAX_LENGTH);\n        throw new ClientError(message, 'signup-not-allowed', {\n          status: 403,\n          details: {message, ...(error.format ? {format: error.format} : {})},\n        });\n      }\n      if (error instanceof TokenInvalidError) {\n        throw new ClientError('Invitation token is invalid', 'invitation-token-invalid', {\n          status: 410,\n        });\n      }\n      if (error instanceof TokenAlreadyUsedError) {\n        throw new ClientError('Invitation has already been accepted', 'invitation-token-used', {\n          status: 410,\n        });\n      }\n      if (error instanceof TokenExpiredError) {\n        throw new ClientError('Invitation has expired', 'invitation-token-expired', {\n          status: 410,\n        });\n      }\n      if (error instanceof InvitationEmailMismatchError) {\n        throw new ClientError(\n          'Signup email does not match the invitation',\n          'invitation-email-mismatch',\n          {status: 403},\n        );\n      }\n      throw error;\n    },\n    handler: async (request, reply) => {\n      const {email, password, name, invitation_token} = request.body;\n\n      if (invitation_token === undefined) {\n        const result = await signup({\n          email,\n          password,\n          name,\n          sourceIp: request.ip,\n          signupPolicy,\n        });\n        reply.code(201);\n        return {\n          user: toUserDto(result),\n          email_challenge: {\n            id: result.emailChallenge.id,\n            next_resend_available_at: result.emailChallenge.nextResendAvailableAt.toISOString(),\n          },\n        };\n      }\n\n      const result = await signupWithInvitation({\n        email,\n        password,\n        name,\n        invitationToken: invitation_token,\n        workspaces,\n      });\n      setRefreshTokenCookie(reply, result.refreshToken);\n      reply.code(201);\n      return {\n        user: toUserDto(result.user),\n        token: result.token,\n        membership: result.membership\n          ? {\n              id: result.membership.id,\n              user_id: result.membership.userId,\n              workspace_id: result.membership.workspaceId,\n            }\n          : null,\n        ...(result.acceptError ? {accept_error: result.acceptError} : {}),\n      };\n    },\n  });\n}\n"],"names":["signupBodySchema","signupResponseSchema","EmailChallengeError","ClientError","defineRoute","signup","signupWithInvitation","EmailTakenError","InvitationEmailMismatchError","SignupNotAllowedError","TokenAlreadyUsedError","TokenExpiredError","TokenInvalidError","SIGNUP_DENIAL_MESSAGE_MAX_LENGTH","setRefreshTokenCookie","toUserDto","createSignupRoute","workspaces","signupPolicy","method","path","description","schema","body","response","errorHandler","error","message","code","status","retryAt","details","retry_at","toISOString","slice","format","handler","request","reply","email","password","name","invitation_token","undefined","result","sourceIp","ip","user","email_challenge","id","emailChallenge","next_resend_available_at","nextResendAvailableAt","invitationToken","refreshToken","token","membership","user_id","userId","workspace_id","workspaceId","acceptError","accept_error"],"mappings":"AAAA,SAAQA,gBAAgB,EAAEC,oBAAoB,QAAO,wBAAwB;AAC7E,SAAQC,mBAAmB,QAAO,gCAAgC;AAElE,SAAQC,WAAW,EAAEC,WAAW,QAAO,wBAAwB;AAC/D,SAAQC,MAAM,EAAEC,oBAAoB,QAAO,gBAAgB;AAC3D,SACEC,eAAe,EACfC,4BAA4B,EAC5BC,qBAAqB,EACrBC,qBAAqB,EACrBC,iBAAiB,EACjBC,iBAAiB,QACZ,kBAAkB;AACzB,SAAQC,gCAAgC,QAA0B,iBAAiB;AACnF,SAAQC,qBAAqB,QAAO,uCAAuC;AAC3E,SAAQC,SAAS,QAAO,4BAA4B;AAEpD,OAAO,SAASC,kBACdC,UAAuC,EACvCC,YAA2B;IAE3B,OAAOd,YAAY;QACjBe,QAAQ;QACRC,MAAM;QACNC,aACE;QACFC,QAAQ;YACNC,MAAMvB;YACNwB,UAAU;gBACR,KAAKvB;YACP;QACF;QACAwB,cAAc,CAACC;YACb,IAAIA,iBAAiBxB,qBAAqB;gBACxC,MAAM,IAAIC,YAAYuB,MAAMC,OAAO,EAAE,CAAC,gBAAgB,EAAED,MAAME,IAAI,EAAE,EAAE;oBACpEC,QAAQH,MAAME,IAAI,KAAK,YAAY,MAAM;oBACzC,GAAIF,MAAMI,OAAO,GAAG;wBAACC,SAAS;4BAACC,UAAUN,MAAMI,OAAO,CAACG,WAAW;wBAAE;oBAAC,IAAI,CAAC,CAAC;gBAC7E;YACF;YACA,IAAIP,iBAAiBnB,iBAAiB;gBACpC,MAAM,IAAIJ,YAAY,4BAA4B,eAAe;oBAAC0B,QAAQ;gBAAG;YAC/E;YACA,IAAIH,iBAAiBjB,uBAAuB;gBAC1C,MAAMkB,UAAUD,MAAMC,OAAO,CAACO,KAAK,CAAC,GAAGrB;gBACvC,MAAM,IAAIV,YAAYwB,SAAS,sBAAsB;oBACnDE,QAAQ;oBACRE,SAAS;wBAACJ;wBAAS,GAAID,MAAMS,MAAM,GAAG;4BAACA,QAAQT,MAAMS,MAAM;wBAAA,IAAI,CAAC,CAAC;oBAAC;gBACpE;YACF;YACA,IAAIT,iBAAiBd,mBAAmB;gBACtC,MAAM,IAAIT,YAAY,+BAA+B,4BAA4B;oBAC/E0B,QAAQ;gBACV;YACF;YACA,IAAIH,iBAAiBhB,uBAAuB;gBAC1C,MAAM,IAAIP,YAAY,wCAAwC,yBAAyB;oBACrF0B,QAAQ;gBACV;YACF;YACA,IAAIH,iBAAiBf,mBAAmB;gBACtC,MAAM,IAAIR,YAAY,0BAA0B,4BAA4B;oBAC1E0B,QAAQ;gBACV;YACF;YACA,IAAIH,iBAAiBlB,8BAA8B;gBACjD,MAAM,IAAIL,YACR,8CACA,6BACA;oBAAC0B,QAAQ;gBAAG;YAEhB;YACA,MAAMH;QACR;QACAU,SAAS,OAAOC,SAASC;YACvB,MAAM,EAACC,KAAK,EAAEC,QAAQ,EAAEC,IAAI,EAAEC,gBAAgB,EAAC,GAAGL,QAAQd,IAAI;YAE9D,IAAImB,qBAAqBC,WAAW;gBAClC,MAAMC,SAAS,MAAMvC,OAAO;oBAC1BkC;oBACAC;oBACAC;oBACAI,UAAUR,QAAQS,EAAE;oBACpB5B;gBACF;gBACAoB,MAAMV,IAAI,CAAC;gBACX,OAAO;oBACLmB,MAAMhC,UAAU6B;oBAChBI,iBAAiB;wBACfC,IAAIL,OAAOM,cAAc,CAACD,EAAE;wBAC5BE,0BAA0BP,OAAOM,cAAc,CAACE,qBAAqB,CAACnB,WAAW;oBACnF;gBACF;YACF;YAEA,MAAMW,SAAS,MAAMtC,qBAAqB;gBACxCiC;gBACAC;gBACAC;gBACAY,iBAAiBX;gBACjBzB;YACF;YACAH,sBAAsBwB,OAAOM,OAAOU,YAAY;YAChDhB,MAAMV,IAAI,CAAC;YACX,OAAO;gBACLmB,MAAMhC,UAAU6B,OAAOG,IAAI;gBAC3BQ,OAAOX,OAAOW,KAAK;gBACnBC,YAAYZ,OAAOY,UAAU,GACzB;oBACEP,IAAIL,OAAOY,UAAU,CAACP,EAAE;oBACxBQ,SAASb,OAAOY,UAAU,CAACE,MAAM;oBACjCC,cAAcf,OAAOY,UAAU,CAACI,WAAW;gBAC7C,IACA;gBACJ,GAAIhB,OAAOiB,WAAW,GAAG;oBAACC,cAAclB,OAAOiB,WAAW;gBAAA,IAAI,CAAC,CAAC;YAClE;QACF;IACF;AACF"}
+{"version":3,"sources":["../../../../src/presentation/routes/registration/signup.ts"],"sourcesContent":["import {signupBodySchema, signupResponseSchema} from '@shipfox/api-auth-dto';\nimport {EmailChallengeError} from '@shipfox/api-email-challenges';\nimport type {WorkspacesInterModuleClient} from '@shipfox/api-workspaces-dto/inter-module';\nimport {ClientError, defineRoute} from '@shipfox/node-fastify';\nimport {signup, signupWithInvitation} from '#core/auth.js';\nimport {\n  EmailTakenError,\n  InvitationEmailMismatchError,\n  SignupNotAllowedError,\n  TokenAlreadyUsedError,\n  TokenExpiredError,\n  TokenInvalidError,\n} from '#core/errors.js';\nimport {SIGNUP_DENIAL_MESSAGE_MAX_LENGTH, type SignupPolicy} from '#core/ports.js';\nimport {setRefreshTokenCookie} from '#presentation/auth/refresh-cookie.js';\nimport {toUserDto} from '#presentation/dto/user.js';\n\nfunction handleEmailChallengeError(error: unknown): void {\n  if (!(error instanceof EmailChallengeError)) return;\n  throw new ClientError(error.message, `email-challenge-${error.code}`, {\n    status: error.code === 'limited' ? 429 : 400,\n    ...(error.retryAt ? {details: {retry_at: error.retryAt.toISOString()}} : {}),\n  });\n}\n\nfunction handleSignupPolicyError(error: unknown): void {\n  if (error instanceof EmailTakenError) {\n    throw new ClientError('Email already registered', 'email-taken', {status: 409});\n  }\n  if (error instanceof SignupNotAllowedError) {\n    const message = error.message.slice(0, SIGNUP_DENIAL_MESSAGE_MAX_LENGTH);\n    throw new ClientError(message, 'signup-not-allowed', {\n      status: 403,\n      details: {message, ...(error.format ? {format: error.format} : {})},\n    });\n  }\n}\n\nfunction handleInvitationError(error: unknown): void {\n  if (error instanceof TokenInvalidError) {\n    throw new ClientError('Invitation token is invalid', 'invitation-token-invalid', {status: 410});\n  }\n  if (error instanceof TokenAlreadyUsedError) {\n    throw new ClientError('Invitation has already been accepted', 'invitation-token-used', {\n      status: 410,\n    });\n  }\n  if (error instanceof TokenExpiredError) {\n    throw new ClientError('Invitation has expired', 'invitation-token-expired', {status: 410});\n  }\n  if (error instanceof InvitationEmailMismatchError) {\n    throw new ClientError(\n      'Signup email does not match the invitation',\n      'invitation-email-mismatch',\n      {\n        status: 403,\n      },\n    );\n  }\n}\n\nfunction handleSignupError(error: unknown): never {\n  handleEmailChallengeError(error);\n  handleSignupPolicyError(error);\n  handleInvitationError(error);\n  throw error;\n}\n\nexport function createSignupRoute(\n  workspaces: WorkspacesInterModuleClient,\n  signupPolicy?: SignupPolicy,\n) {\n  return defineRoute({\n    method: 'POST',\n    path: '/signup',\n    description:\n      'Create a user account. Sends a verification email unless an invitation token is supplied.',\n    schema: {\n      body: signupBodySchema,\n      response: {\n        201: signupResponseSchema,\n      },\n    },\n    errorHandler: handleSignupError,\n    handler: async (request, reply) => {\n      const {email, password, name, invitation_token} = request.body;\n\n      if (invitation_token === undefined) {\n        const result = await signup({\n          email,\n          password,\n          name,\n          sourceIp: request.ip,\n          signupPolicy,\n        });\n        reply.code(201);\n        return {\n          user: toUserDto(result),\n          email_challenge: {\n            id: result.emailChallenge.id,\n            next_resend_available_at: result.emailChallenge.nextResendAvailableAt.toISOString(),\n          },\n        };\n      }\n\n      const result = await signupWithInvitation({\n        email,\n        password,\n        name,\n        invitationToken: invitation_token,\n        workspaces,\n      });\n      setRefreshTokenCookie(reply, result.refreshToken);\n      reply.code(201);\n      return {\n        user: toUserDto(result.user),\n        token: result.token,\n        membership: result.membership\n          ? {\n              id: result.membership.id,\n              user_id: result.membership.userId,\n              workspace_id: result.membership.workspaceId,\n            }\n          : null,\n        ...(result.acceptError ? {accept_error: result.acceptError} : {}),\n      };\n    },\n  });\n}\n"],"names":["signupBodySchema","signupResponseSchema","EmailChallengeError","ClientError","defineRoute","signup","signupWithInvitation","EmailTakenError","InvitationEmailMismatchError","SignupNotAllowedError","TokenAlreadyUsedError","TokenExpiredError","TokenInvalidError","SIGNUP_DENIAL_MESSAGE_MAX_LENGTH","setRefreshTokenCookie","toUserDto","handleEmailChallengeError","error","message","code","status","retryAt","details","retry_at","toISOString","handleSignupPolicyError","slice","format","handleInvitationError","handleSignupError","createSignupRoute","workspaces","signupPolicy","method","path","description","schema","body","response","errorHandler","handler","request","reply","email","password","name","invitation_token","undefined","result","sourceIp","ip","user","email_challenge","id","emailChallenge","next_resend_available_at","nextResendAvailableAt","invitationToken","refreshToken","token","membership","user_id","userId","workspace_id","workspaceId","acceptError","accept_error"],"mappings":"AAAA,SAAQA,gBAAgB,EAAEC,oBAAoB,QAAO,wBAAwB;AAC7E,SAAQC,mBAAmB,QAAO,gCAAgC;AAElE,SAAQC,WAAW,EAAEC,WAAW,QAAO,wBAAwB;AAC/D,SAAQC,MAAM,EAAEC,oBAAoB,QAAO,gBAAgB;AAC3D,SACEC,eAAe,EACfC,4BAA4B,EAC5BC,qBAAqB,EACrBC,qBAAqB,EACrBC,iBAAiB,EACjBC,iBAAiB,QACZ,kBAAkB;AACzB,SAAQC,gCAAgC,QAA0B,iBAAiB;AACnF,SAAQC,qBAAqB,QAAO,uCAAuC;AAC3E,SAAQC,SAAS,QAAO,4BAA4B;AAEpD,SAASC,0BAA0BC,KAAc;IAC/C,IAAI,CAAEA,CAAAA,iBAAiBf,mBAAkB,GAAI;IAC7C,MAAM,IAAIC,YAAYc,MAAMC,OAAO,EAAE,CAAC,gBAAgB,EAAED,MAAME,IAAI,EAAE,EAAE;QACpEC,QAAQH,MAAME,IAAI,KAAK,YAAY,MAAM;QACzC,GAAIF,MAAMI,OAAO,GAAG;YAACC,SAAS;gBAACC,UAAUN,MAAMI,OAAO,CAACG,WAAW;YAAE;QAAC,IAAI,CAAC,CAAC;IAC7E;AACF;AAEA,SAASC,wBAAwBR,KAAc;IAC7C,IAAIA,iBAAiBV,iBAAiB;QACpC,MAAM,IAAIJ,YAAY,4BAA4B,eAAe;YAACiB,QAAQ;QAAG;IAC/E;IACA,IAAIH,iBAAiBR,uBAAuB;QAC1C,MAAMS,UAAUD,MAAMC,OAAO,CAACQ,KAAK,CAAC,GAAGb;QACvC,MAAM,IAAIV,YAAYe,SAAS,sBAAsB;YACnDE,QAAQ;YACRE,SAAS;gBAACJ;gBAAS,GAAID,MAAMU,MAAM,GAAG;oBAACA,QAAQV,MAAMU,MAAM;gBAAA,IAAI,CAAC,CAAC;YAAC;QACpE;IACF;AACF;AAEA,SAASC,sBAAsBX,KAAc;IAC3C,IAAIA,iBAAiBL,mBAAmB;QACtC,MAAM,IAAIT,YAAY,+BAA+B,4BAA4B;YAACiB,QAAQ;QAAG;IAC/F;IACA,IAAIH,iBAAiBP,uBAAuB;QAC1C,MAAM,IAAIP,YAAY,wCAAwC,yBAAyB;YACrFiB,QAAQ;QACV;IACF;IACA,IAAIH,iBAAiBN,mBAAmB;QACtC,MAAM,IAAIR,YAAY,0BAA0B,4BAA4B;YAACiB,QAAQ;QAAG;IAC1F;IACA,IAAIH,iBAAiBT,8BAA8B;QACjD,MAAM,IAAIL,YACR,8CACA,6BACA;YACEiB,QAAQ;QACV;IAEJ;AACF;AAEA,SAASS,kBAAkBZ,KAAc;IACvCD,0BAA0BC;IAC1BQ,wBAAwBR;IACxBW,sBAAsBX;IACtB,MAAMA;AACR;AAEA,OAAO,SAASa,kBACdC,UAAuC,EACvCC,YAA2B;IAE3B,OAAO5B,YAAY;QACjB6B,QAAQ;QACRC,MAAM;QACNC,aACE;QACFC,QAAQ;YACNC,MAAMrC;YACNsC,UAAU;gBACR,KAAKrC;YACP;QACF;QACAsC,cAAcV;QACdW,SAAS,OAAOC,SAASC;YACvB,MAAM,EAACC,KAAK,EAAEC,QAAQ,EAAEC,IAAI,EAAEC,gBAAgB,EAAC,GAAGL,QAAQJ,IAAI;YAE9D,IAAIS,qBAAqBC,WAAW;gBAClC,MAAMC,SAAS,MAAM3C,OAAO;oBAC1BsC;oBACAC;oBACAC;oBACAI,UAAUR,QAAQS,EAAE;oBACpBlB;gBACF;gBACAU,MAAMvB,IAAI,CAAC;gBACX,OAAO;oBACLgC,MAAMpC,UAAUiC;oBAChBI,iBAAiB;wBACfC,IAAIL,OAAOM,cAAc,CAACD,EAAE;wBAC5BE,0BAA0BP,OAAOM,cAAc,CAACE,qBAAqB,CAAChC,WAAW;oBACnF;gBACF;YACF;YAEA,MAAMwB,SAAS,MAAM1C,qBAAqB;gBACxCqC;gBACAC;gBACAC;gBACAY,iBAAiBX;gBACjBf;YACF;YACAjB,sBAAsB4B,OAAOM,OAAOU,YAAY;YAChDhB,MAAMvB,IAAI,CAAC;YACX,OAAO;gBACLgC,MAAMpC,UAAUiC,OAAOG,IAAI;gBAC3BQ,OAAOX,OAAOW,KAAK;gBACnBC,YAAYZ,OAAOY,UAAU,GACzB;oBACEP,IAAIL,OAAOY,UAAU,CAACP,EAAE;oBACxBQ,SAASb,OAAOY,UAAU,CAACE,MAAM;oBACjCC,cAAcf,OAAOY,UAAU,CAACI,WAAW;gBAC7C,IACA;gBACJ,GAAIhB,OAAOiB,WAAW,GAAG;oBAACC,cAAclB,OAAOiB,WAAW;gBAAA,IAAI,CAAC,CAAC;YAClE;QACF;IACF;AACF"}