@shipfox/api-auth 5.0.0 → 7.0.1

package/dist/index.js

@@ -1,4 +1,4 @@
-import { AUTH_EMAIL_VERIFICATION_SEND_REQUESTED, AUTH_PASSWORD_RESET_SEND_REQUESTED, authEventSchemas } from '@shipfox/api-auth-dto';
+import { AUTH_PASSWORD_RESET_SEND_REQUESTED, authEventSchemas } from '@shipfox/api-auth-dto';
 import { subscriberFactory } from '@shipfox/node-module';
 import { config } from '#config.js';
 import { db } from '#db/db.js';
@@ -7,11 +7,13 @@ import { authOutbox } from '#db/schema/outbox.js';
 import { createJwtAuthMethod } from '#presentation/auth/jwt-auth.js';
 import { createLeaseTokenAuthMethod } from '#presentation/auth/lease-token-auth.js';
 import { createRunnerSessionAuthMethod } from '#presentation/auth/runner-session-auth.js';
-import { authE2eRoutes } from '#presentation/e2eRoutes/index.js';
-import { authRoutes } from '#presentation/routes/index.js';
-import { onEmailVerificationSendRequested, onPasswordResetSendRequested } from '#presentation/subscribers/index.js';
+import { createAuthE2eRoutes } from '#presentation/e2eRoutes/index.js';
+import { createAuthInterModulePresentation } from '#presentation/inter-module.js';
+import { buildAuthRoutes } from '#presentation/routes/index.js';
+import { onPasswordResetSendRequested } from '#presentation/subscribers/index.js';
 import { passwordLoginMethods } from './login-methods.js';
 export { createSessionForUser, provisionUser } from '#core/auth.js';
+export { findUserByEmail } from '#core/email-owner.js';
 export { AuthDependencyUnavailableError, EmailNotVerifiedError, InvalidCredentialsError, UserNotFoundError } from '#core/errors.js';
 export { issueJobLeaseToken, jobLeaseParamsFrom, verifyJobLeaseToken } from '#core/job-lease-token.js';
 export { issueRunnerSessionToken, verifyRunnerSessionToken } from '#core/runner-session-token.js';
@@ -20,36 +22,40 @@ export { createLeaseTokenAuthMethod } from '#presentation/auth/lease-token-auth.
 export { authCookiePlugin, clearRefreshTokenCookie, getRefreshTokenCookie, setRefreshTokenCookie } from '#presentation/auth/refresh-cookie.js';
 export { createRunnerSessionAuthMethod } from '#presentation/auth/runner-session-auth.js';
 const subscriber = subscriberFactory();
-export const authModule = {
-    name: 'auth',
-    database: {
-        db,
-        migrationsPath
-    },
-    auth: [
-        createJwtAuthMethod(),
-        createLeaseTokenAuthMethod(),
-        createRunnerSessionAuthMethod()
-    ],
-    loginMethods: passwordLoginMethods(config.AUTH_PASSWORD_ENABLED),
-    routes: [
-        authRoutes
-    ],
-    e2eRoutes: [
-        authE2eRoutes
-    ],
-    publishers: [
-        {
-            name: 'auth',
-            table: authOutbox,
+export function createAuthModule({ workspaces }) {
+    return {
+        name: 'auth',
+        database: {
             db,
-            eventSchemas: authEventSchemas
-        }
-    ],
-    subscribers: [
-        subscriber(AUTH_EMAIL_VERIFICATION_SEND_REQUESTED, onEmailVerificationSendRequested),
-        subscriber(AUTH_PASSWORD_RESET_SEND_REQUESTED, onPasswordResetSendRequested)
-    ]
-};
+            migrationsPath
+        },
+        auth: [
+            createJwtAuthMethod(),
+            createLeaseTokenAuthMethod(),
+            createRunnerSessionAuthMethod()
+        ],
+        loginMethods: passwordLoginMethods(config.AUTH_PASSWORD_ENABLED),
+        routes: [
+            buildAuthRoutes(config.AUTH_PASSWORD_ENABLED, workspaces)
+        ],
+        e2eRoutes: [
+            createAuthE2eRoutes(workspaces)
+        ],
+        publishers: [
+            {
+                name: 'auth',
+                table: authOutbox,
+                db,
+                eventSchemas: authEventSchemas
+            }
+        ],
+        subscribers: [
+            subscriber(AUTH_PASSWORD_RESET_SEND_REQUESTED, onPasswordResetSendRequested)
+        ],
+        interModulePresentations: [
+            createAuthInterModulePresentation()
+        ]
+    };
+}
 
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts"],"sourcesContent":["import {\n  AUTH_EMAIL_VERIFICATION_SEND_REQUESTED,\n  AUTH_PASSWORD_RESET_SEND_REQUESTED,\n  type AuthEventMap,\n  authEventSchemas,\n} from '@shipfox/api-auth-dto';\nimport type {ShipfoxModule} from '@shipfox/node-module';\nimport {subscriberFactory} from '@shipfox/node-module';\nimport {config} from '#config.js';\nimport {db} from '#db/db.js';\nimport {migrationsPath} from '#db/migrations.js';\nimport {authOutbox} from '#db/schema/outbox.js';\nimport {createJwtAuthMethod} from '#presentation/auth/jwt-auth.js';\nimport {createLeaseTokenAuthMethod} from '#presentation/auth/lease-token-auth.js';\nimport {createRunnerSessionAuthMethod} from '#presentation/auth/runner-session-auth.js';\nimport {authE2eRoutes} from '#presentation/e2eRoutes/index.js';\nimport {authRoutes} from '#presentation/routes/index.js';\nimport {\n  onEmailVerificationSendRequested,\n  onPasswordResetSendRequested,\n} from '#presentation/subscribers/index.js';\nimport {passwordLoginMethods} from './login-methods.js';\n\nexport type {JobLeaseTokenClaims, RunnerSessionTokenClaims} from '@shipfox/api-auth-dto';\nexport type {\n  CreateSessionForUserError,\n  CreateSessionForUserParams,\n  CreateSessionForUserResult,\n  ProvisionUserParams,\n} from '#core/auth.js';\nexport {createSessionForUser, provisionUser} from '#core/auth.js';\nexport type {User, UserStatus} from '#core/entities/user.js';\nexport {\n  AuthDependencyUnavailableError,\n  EmailNotVerifiedError,\n  InvalidCredentialsError,\n  UserNotFoundError,\n} from '#core/errors.js';\nexport {\n  issueJobLeaseToken,\n  jobLeaseParamsFrom,\n  verifyJobLeaseToken,\n} from '#core/job-lease-token.js';\nexport {\n  issueRunnerSessionToken,\n  verifyRunnerSessionToken,\n} from '#core/runner-session-token.js';\nexport {createJwtAuthMethod} from '#presentation/auth/jwt-auth.js';\nexport {createLeaseTokenAuthMethod} from '#presentation/auth/lease-token-auth.js';\nexport {\n  authCookiePlugin,\n  clearRefreshTokenCookie,\n  getRefreshTokenCookie,\n  setRefreshTokenCookie,\n} from '#presentation/auth/refresh-cookie.js';\nexport {createRunnerSessionAuthMethod} from '#presentation/auth/runner-session-auth.js';\n\nconst subscriber = subscriberFactory<AuthEventMap>();\n\nexport const authModule: ShipfoxModule = {\n  name: 'auth',\n  database: {db, migrationsPath},\n  auth: [createJwtAuthMethod(), createLeaseTokenAuthMethod(), createRunnerSessionAuthMethod()],\n  loginMethods: passwordLoginMethods(config.AUTH_PASSWORD_ENABLED),\n  routes: [authRoutes],\n  e2eRoutes: [authE2eRoutes],\n  publishers: [{name: 'auth', table: authOutbox, db, eventSchemas: authEventSchemas}],\n  subscribers: [\n    subscriber(AUTH_EMAIL_VERIFICATION_SEND_REQUESTED, onEmailVerificationSendRequested),\n    subscriber(AUTH_PASSWORD_RESET_SEND_REQUESTED, onPasswordResetSendRequested),\n  ],\n};\n"],"names":["AUTH_EMAIL_VERIFICATION_SEND_REQUESTED","AUTH_PASSWORD_RESET_SEND_REQUESTED","authEventSchemas","subscriberFactory","config","db","migrationsPath","authOutbox","createJwtAuthMethod","createLeaseTokenAuthMethod","createRunnerSessionAuthMethod","authE2eRoutes","authRoutes","onEmailVerificationSendRequested","onPasswordResetSendRequested","passwordLoginMethods","createSessionForUser","provisionUser","AuthDependencyUnavailableError","EmailNotVerifiedError","InvalidCredentialsError","UserNotFoundError","issueJobLeaseToken","jobLeaseParamsFrom","verifyJobLeaseToken","issueRunnerSessionToken","verifyRunnerSessionToken","authCookiePlugin","clearRefreshTokenCookie","getRefreshTokenCookie","setRefreshTokenCookie","subscriber","authModule","name","database","auth","loginMethods","AUTH_PASSWORD_ENABLED","routes","e2eRoutes","publishers","table","eventSchemas","subscribers"],"mappings":"AAAA,SACEA,sCAAsC,EACtCC,kCAAkC,EAElCC,gBAAgB,QACX,wBAAwB;AAE/B,SAAQC,iBAAiB,QAAO,uBAAuB;AACvD,SAAQC,MAAM,QAAO,aAAa;AAClC,SAAQC,EAAE,QAAO,YAAY;AAC7B,SAAQC,cAAc,QAAO,oBAAoB;AACjD,SAAQC,UAAU,QAAO,uBAAuB;AAChD,SAAQC,mBAAmB,QAAO,iCAAiC;AACnE,SAAQC,0BAA0B,QAAO,yCAAyC;AAClF,SAAQC,6BAA6B,QAAO,4CAA4C;AACxF,SAAQC,aAAa,QAAO,mCAAmC;AAC/D,SAAQC,UAAU,QAAO,gCAAgC;AACzD,SACEC,gCAAgC,EAChCC,4BAA4B,QACvB,qCAAqC;AAC5C,SAAQC,oBAAoB,QAAO,qBAAqB;AASxD,SAAQC,oBAAoB,EAAEC,aAAa,QAAO,gBAAgB;AAElE,SACEC,8BAA8B,EAC9BC,qBAAqB,EACrBC,uBAAuB,EACvBC,iBAAiB,QACZ,kBAAkB;AACzB,SACEC,kBAAkB,EAClBC,kBAAkB,EAClBC,mBAAmB,QACd,2BAA2B;AAClC,SACEC,uBAAuB,EACvBC,wBAAwB,QACnB,gCAAgC;AACvC,SAAQlB,mBAAmB,QAAO,iCAAiC;AACnE,SAAQC,0BAA0B,QAAO,yCAAyC;AAClF,SACEkB,gBAAgB,EAChBC,uBAAuB,EACvBC,qBAAqB,EACrBC,qBAAqB,QAChB,uCAAuC;AAC9C,SAAQpB,6BAA6B,QAAO,4CAA4C;AAExF,MAAMqB,aAAa5B;AAEnB,OAAO,MAAM6B,aAA4B;IACvCC,MAAM;IACNC,UAAU;QAAC7B;QAAIC;IAAc;IAC7B6B,MAAM;QAAC3B;QAAuBC;QAA8BC;KAAgC;IAC5F0B,cAAcrB,qBAAqBX,OAAOiC,qBAAqB;IAC/DC,QAAQ;QAAC1B;KAAW;IACpB2B,WAAW;QAAC5B;KAAc;IAC1B6B,YAAY;QAAC;YAACP,MAAM;YAAQQ,OAAOlC;YAAYF;YAAIqC,cAAcxC;QAAgB;KAAE;IACnFyC,aAAa;QACXZ,WAAW/B,wCAAwCa;QACnDkB,WAAW9B,oCAAoCa;KAChD;AACH,EAAE"}
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["import {\n  AUTH_PASSWORD_RESET_SEND_REQUESTED,\n  type AuthEventMap,\n  authEventSchemas,\n} from '@shipfox/api-auth-dto';\nimport type {ShipfoxModule} from '@shipfox/node-module';\nimport {subscriberFactory} from '@shipfox/node-module';\nimport {config} from '#config.js';\nimport {db} from '#db/db.js';\nimport {migrationsPath} from '#db/migrations.js';\nimport {authOutbox} from '#db/schema/outbox.js';\nimport {createJwtAuthMethod} from '#presentation/auth/jwt-auth.js';\nimport {createLeaseTokenAuthMethod} from '#presentation/auth/lease-token-auth.js';\nimport {createRunnerSessionAuthMethod} from '#presentation/auth/runner-session-auth.js';\nimport {createAuthE2eRoutes} from '#presentation/e2eRoutes/index.js';\nimport {createAuthInterModulePresentation} from '#presentation/inter-module.js';\nimport {buildAuthRoutes} from '#presentation/routes/index.js';\nimport {onPasswordResetSendRequested} from '#presentation/subscribers/index.js';\nimport {passwordLoginMethods} from './login-methods.js';\n\nexport type {JobLeaseTokenClaims, RunnerSessionTokenClaims} from '@shipfox/api-auth-dto';\nexport type {\n  CreateSessionForUserError,\n  CreateSessionForUserParams,\n  CreateSessionForUserResult,\n  ProvisionUserParams,\n} from '#core/auth.js';\nexport {createSessionForUser, provisionUser} from '#core/auth.js';\nexport type {EmailOwner, FindUserByEmailParams} from '#core/email-owner.js';\nexport {findUserByEmail} from '#core/email-owner.js';\nexport type {User, UserStatus} from '#core/entities/user.js';\nexport {\n  AuthDependencyUnavailableError,\n  EmailNotVerifiedError,\n  InvalidCredentialsError,\n  UserNotFoundError,\n} from '#core/errors.js';\nexport {\n  issueJobLeaseToken,\n  jobLeaseParamsFrom,\n  verifyJobLeaseToken,\n} from '#core/job-lease-token.js';\nexport {\n  issueRunnerSessionToken,\n  verifyRunnerSessionToken,\n} from '#core/runner-session-token.js';\nexport {createJwtAuthMethod} from '#presentation/auth/jwt-auth.js';\nexport {createLeaseTokenAuthMethod} from '#presentation/auth/lease-token-auth.js';\nexport {\n  authCookiePlugin,\n  clearRefreshTokenCookie,\n  getRefreshTokenCookie,\n  setRefreshTokenCookie,\n} from '#presentation/auth/refresh-cookie.js';\nexport {createRunnerSessionAuthMethod} from '#presentation/auth/runner-session-auth.js';\n\nconst subscriber = subscriberFactory<AuthEventMap>();\n\nexport function createAuthModule({\n  workspaces,\n}: {\n  workspaces: import('@shipfox/api-workspaces-dto/inter-module').WorkspacesInterModuleClient;\n}): ShipfoxModule {\n  return {\n    name: 'auth',\n    database: {db, migrationsPath},\n    auth: [createJwtAuthMethod(), createLeaseTokenAuthMethod(), createRunnerSessionAuthMethod()],\n    loginMethods: passwordLoginMethods(config.AUTH_PASSWORD_ENABLED),\n    routes: [buildAuthRoutes(config.AUTH_PASSWORD_ENABLED, workspaces)],\n    e2eRoutes: [createAuthE2eRoutes(workspaces)],\n    publishers: [{name: 'auth', table: authOutbox, db, eventSchemas: authEventSchemas}],\n    subscribers: [subscriber(AUTH_PASSWORD_RESET_SEND_REQUESTED, onPasswordResetSendRequested)],\n    interModulePresentations: [createAuthInterModulePresentation()],\n  };\n}\n"],"names":["AUTH_PASSWORD_RESET_SEND_REQUESTED","authEventSchemas","subscriberFactory","config","db","migrationsPath","authOutbox","createJwtAuthMethod","createLeaseTokenAuthMethod","createRunnerSessionAuthMethod","createAuthE2eRoutes","createAuthInterModulePresentation","buildAuthRoutes","onPasswordResetSendRequested","passwordLoginMethods","createSessionForUser","provisionUser","findUserByEmail","AuthDependencyUnavailableError","EmailNotVerifiedError","InvalidCredentialsError","UserNotFoundError","issueJobLeaseToken","jobLeaseParamsFrom","verifyJobLeaseToken","issueRunnerSessionToken","verifyRunnerSessionToken","authCookiePlugin","clearRefreshTokenCookie","getRefreshTokenCookie","setRefreshTokenCookie","subscriber","createAuthModule","workspaces","name","database","auth","loginMethods","AUTH_PASSWORD_ENABLED","routes","e2eRoutes","publishers","table","eventSchemas","subscribers","interModulePresentations"],"mappings":"AAAA,SACEA,kCAAkC,EAElCC,gBAAgB,QACX,wBAAwB;AAE/B,SAAQC,iBAAiB,QAAO,uBAAuB;AACvD,SAAQC,MAAM,QAAO,aAAa;AAClC,SAAQC,EAAE,QAAO,YAAY;AAC7B,SAAQC,cAAc,QAAO,oBAAoB;AACjD,SAAQC,UAAU,QAAO,uBAAuB;AAChD,SAAQC,mBAAmB,QAAO,iCAAiC;AACnE,SAAQC,0BAA0B,QAAO,yCAAyC;AAClF,SAAQC,6BAA6B,QAAO,4CAA4C;AACxF,SAAQC,mBAAmB,QAAO,mCAAmC;AACrE,SAAQC,iCAAiC,QAAO,gCAAgC;AAChF,SAAQC,eAAe,QAAO,gCAAgC;AAC9D,SAAQC,4BAA4B,QAAO,qCAAqC;AAChF,SAAQC,oBAAoB,QAAO,qBAAqB;AASxD,SAAQC,oBAAoB,EAAEC,aAAa,QAAO,gBAAgB;AAElE,SAAQC,eAAe,QAAO,uBAAuB;AAErD,SACEC,8BAA8B,EAC9BC,qBAAqB,EACrBC,uBAAuB,EACvBC,iBAAiB,QACZ,kBAAkB;AACzB,SACEC,kBAAkB,EAClBC,kBAAkB,EAClBC,mBAAmB,QACd,2BAA2B;AAClC,SACEC,uBAAuB,EACvBC,wBAAwB,QACnB,gCAAgC;AACvC,SAAQnB,mBAAmB,QAAO,iCAAiC;AACnE,SAAQC,0BAA0B,QAAO,yCAAyC;AAClF,SACEmB,gBAAgB,EAChBC,uBAAuB,EACvBC,qBAAqB,EACrBC,qBAAqB,QAChB,uCAAuC;AAC9C,SAAQrB,6BAA6B,QAAO,4CAA4C;AAExF,MAAMsB,aAAa7B;AAEnB,OAAO,SAAS8B,iBAAiB,EAC/BC,UAAU,EAGX;IACC,OAAO;QACLC,MAAM;QACNC,UAAU;YAAC/B;YAAIC;QAAc;QAC7B+B,MAAM;YAAC7B;YAAuBC;YAA8BC;SAAgC;QAC5F4B,cAAcvB,qBAAqBX,OAAOmC,qBAAqB;QAC/DC,QAAQ;YAAC3B,gBAAgBT,OAAOmC,qBAAqB,EAAEL;SAAY;QACnEO,WAAW;YAAC9B,oBAAoBuB;SAAY;QAC5CQ,YAAY;YAAC;gBAACP,MAAM;gBAAQQ,OAAOpC;gBAAYF;gBAAIuC,cAAc1C;YAAgB;SAAE;QACnF2C,aAAa;YAACb,WAAW/B,oCAAoCa;SAA8B;QAC3FgC,0BAA0B;YAAClC;SAAoC;IACjE;AACF"}

package/dist/presentation/auth/jwt-auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"jwt-auth.d.ts","sourceRoot":"","sources":["../../../src/presentation/auth/jwt-auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAKL,KAAK,WAAW,EACjB,MAAM,2BAA2B,CAAC;AACnC,OAAO,KAAK,EAAC,UAAU,EAAC,MAAM,uBAAuB,CAAC;AACtD,OAAO,KAAK,EAAC,cAAc,EAAC,MAAM,SAAS,CAAC;AAK5C,MAAM,MAAM,aAAa,GAAG,WAAW,CAAC;AAExC,MAAM,WAAW,0BAA0B;IACzC,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,cAAc,GAAG,aAAa,GAAG,IAAI,CAE9E;AAED,wBAAgB,mBAAmB,IAAI,UAAU,CAehD"}
+{"version":3,"file":"jwt-auth.d.ts","sourceRoot":"","sources":["../../../src/presentation/auth/jwt-auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAKL,KAAK,WAAW,EACjB,MAAM,2BAA2B,CAAC;AAEnC,OAAO,KAAK,EAAC,UAAU,EAAC,MAAM,uBAAuB,CAAC;AACtD,OAAO,KAAK,EAAC,cAAc,EAAC,MAAM,SAAS,CAAC;AAI5C,MAAM,MAAM,aAAa,GAAG,WAAW,CAAC;AAExC,MAAM,WAAW,0BAA0B;IACzC,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,cAAc,GAAG,aAAa,GAAG,IAAI,CAE9E;AAED,wBAAgB,mBAAmB,IAAI,UAAU,CAehD"}

package/dist/presentation/auth/jwt-auth.js

@@ -1,5 +1,5 @@
 import { AUTH_USER, buildUserContext, getUserContext, setUserContext } from '@shipfox/api-auth-context';
-import { config } from '#config.js';
+import { userAccessTokenKey } from '@shipfox/node-auth-root-key';
 import { verifyUserToken } from '#core/jwt.js';
 import { createBearerTokenAuthMethod } from './bearer-token-auth.js';
 export function getClientContext(request) {
@@ -10,7 +10,7 @@ export function createJwtAuthMethod() {
         name: AUTH_USER,
         verifyToken: (token)=>verifyUserToken({
                 token,
-                secret: config.AUTH_JWT_SECRET
+                secret: userAccessTokenKey()
             }),
         invalidTokenError: {
             message: 'Invalid or expired token',

package/dist/presentation/auth/jwt-auth.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/presentation/auth/jwt-auth.ts"],"sourcesContent":["import {\n  AUTH_USER,\n  buildUserContext,\n  getUserContext,\n  setUserContext,\n  type UserContext,\n} from '@shipfox/api-auth-context';\nimport type {AuthMethod} from '@shipfox/node-fastify';\nimport type {FastifyRequest} from 'fastify';\nimport {config} from '#config.js';\nimport {verifyUserToken} from '#core/jwt.js';\nimport {createBearerTokenAuthMethod} from './bearer-token-auth.js';\n\nexport type ClientContext = UserContext;\n\nexport interface CreateJwtAuthMethodOptions {\n  secret: string;\n}\n\nexport function getClientContext(request: FastifyRequest): ClientContext | null {\n  return getUserContext(request);\n}\n\nexport function createJwtAuthMethod(): AuthMethod {\n  return createBearerTokenAuthMethod({\n    name: AUTH_USER,\n    verifyToken: (token) => verifyUserToken({token, secret: config.AUTH_JWT_SECRET}),\n    invalidTokenError: {message: 'Invalid or expired token', code: 'unauthorized'},\n    setContext: (request, claims) => {\n      const clientContext: ClientContext = buildUserContext({\n        userId: claims.sub,\n        email: claims.email,\n        name: claims.name ?? null,\n        memberships: claims.memberships,\n      });\n      setUserContext(request, clientContext);\n    },\n  });\n}\n"],"names":["AUTH_USER","buildUserContext","getUserContext","setUserContext","config","verifyUserToken","createBearerTokenAuthMethod","getClientContext","request","createJwtAuthMethod","name","verifyToken","token","secret","AUTH_JWT_SECRET","invalidTokenError","message","code","setContext","claims","clientContext","userId","sub","email","memberships"],"mappings":"AAAA,SACEA,SAAS,EACTC,gBAAgB,EAChBC,cAAc,EACdC,cAAc,QAET,4BAA4B;AAGnC,SAAQC,MAAM,QAAO,aAAa;AAClC,SAAQC,eAAe,QAAO,eAAe;AAC7C,SAAQC,2BAA2B,QAAO,yBAAyB;AAQnE,OAAO,SAASC,iBAAiBC,OAAuB;IACtD,OAAON,eAAeM;AACxB;AAEA,OAAO,SAASC;IACd,OAAOH,4BAA4B;QACjCI,MAAMV;QACNW,aAAa,CAACC,QAAUP,gBAAgB;gBAACO;gBAAOC,QAAQT,OAAOU,eAAe;YAAA;QAC9EC,mBAAmB;YAACC,SAAS;YAA4BC,MAAM;QAAc;QAC7EC,YAAY,CAACV,SAASW;YACpB,MAAMC,gBAA+BnB,iBAAiB;gBACpDoB,QAAQF,OAAOG,GAAG;gBAClBC,OAAOJ,OAAOI,KAAK;gBACnBb,MAAMS,OAAOT,IAAI,IAAI;gBACrBc,aAAaL,OAAOK,WAAW;YACjC;YACArB,eAAeK,SAASY;QAC1B;IACF;AACF"}
+{"version":3,"sources":["../../../src/presentation/auth/jwt-auth.ts"],"sourcesContent":["import {\n  AUTH_USER,\n  buildUserContext,\n  getUserContext,\n  setUserContext,\n  type UserContext,\n} from '@shipfox/api-auth-context';\nimport {userAccessTokenKey} from '@shipfox/node-auth-root-key';\nimport type {AuthMethod} from '@shipfox/node-fastify';\nimport type {FastifyRequest} from 'fastify';\nimport {verifyUserToken} from '#core/jwt.js';\nimport {createBearerTokenAuthMethod} from './bearer-token-auth.js';\n\nexport type ClientContext = UserContext;\n\nexport interface CreateJwtAuthMethodOptions {\n  secret: string;\n}\n\nexport function getClientContext(request: FastifyRequest): ClientContext | null {\n  return getUserContext(request);\n}\n\nexport function createJwtAuthMethod(): AuthMethod {\n  return createBearerTokenAuthMethod({\n    name: AUTH_USER,\n    verifyToken: (token) => verifyUserToken({token, secret: userAccessTokenKey()}),\n    invalidTokenError: {message: 'Invalid or expired token', code: 'unauthorized'},\n    setContext: (request, claims) => {\n      const clientContext: ClientContext = buildUserContext({\n        userId: claims.sub,\n        email: claims.email,\n        name: claims.name ?? null,\n        memberships: claims.memberships,\n      });\n      setUserContext(request, clientContext);\n    },\n  });\n}\n"],"names":["AUTH_USER","buildUserContext","getUserContext","setUserContext","userAccessTokenKey","verifyUserToken","createBearerTokenAuthMethod","getClientContext","request","createJwtAuthMethod","name","verifyToken","token","secret","invalidTokenError","message","code","setContext","claims","clientContext","userId","sub","email","memberships"],"mappings":"AAAA,SACEA,SAAS,EACTC,gBAAgB,EAChBC,cAAc,EACdC,cAAc,QAET,4BAA4B;AACnC,SAAQC,kBAAkB,QAAO,8BAA8B;AAG/D,SAAQC,eAAe,QAAO,eAAe;AAC7C,SAAQC,2BAA2B,QAAO,yBAAyB;AAQnE,OAAO,SAASC,iBAAiBC,OAAuB;IACtD,OAAON,eAAeM;AACxB;AAEA,OAAO,SAASC;IACd,OAAOH,4BAA4B;QACjCI,MAAMV;QACNW,aAAa,CAACC,QAAUP,gBAAgB;gBAACO;gBAAOC,QAAQT;YAAoB;QAC5EU,mBAAmB;YAACC,SAAS;YAA4BC,MAAM;QAAc;QAC7EC,YAAY,CAACT,SAASU;YACpB,MAAMC,gBAA+BlB,iBAAiB;gBACpDmB,QAAQF,OAAOG,GAAG;gBAClBC,OAAOJ,OAAOI,KAAK;gBACnBZ,MAAMQ,OAAOR,IAAI,IAAI;gBACrBa,aAAaL,OAAOK,WAAW;YACjC;YACApB,eAAeK,SAASW;QAC1B;IACF;AACF"}

package/dist/presentation/e2eRoutes/create-session.d.ts

@@ -1,2 +1,3 @@
-export declare const createE2eSessionRoute: import("@shipfox/node-fastify").RouteDefinition;
+import type { WorkspacesInterModuleClient } from '@shipfox/api-workspaces-dto/inter-module';
+export declare function createE2eSessionRoute(workspaces: WorkspacesInterModuleClient): import("@shipfox/node-fastify").RouteDefinition;
 //# sourceMappingURL=create-session.d.ts.map

package/dist/presentation/e2eRoutes/create-session.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"create-session.d.ts","sourceRoot":"","sources":["../../../src/presentation/e2eRoutes/create-session.ts"],"names":[],"mappings":"AAOA,eAAO,MAAM,qBAAqB,iDA+BhC,CAAC"}
+{"version":3,"file":"create-session.d.ts","sourceRoot":"","sources":["../../../src/presentation/e2eRoutes/create-session.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAC,2BAA2B,EAAC,MAAM,0CAA0C,CAAC;AAO1F,wBAAgB,qBAAqB,CAAC,UAAU,EAAE,2BAA2B,mDAkC5E"}

package/dist/presentation/e2eRoutes/create-session.js

@@ -4,46 +4,49 @@ import { createSessionForUser } from '#core/auth.js';
 import { EmailNotVerifiedError, InvalidCredentialsError, UserNotFoundError } from '#core/errors.js';
 import { setRefreshTokenCookie } from '#presentation/auth/refresh-cookie.js';
 import { toAuthSessionDto } from '#presentation/dto/user.js';
-export const createE2eSessionRoute = defineRoute({
-    method: 'POST',
-    path: '/sessions',
-    description: 'Create an authenticated browser session for E2E tests.',
-    schema: {
-        body: e2eCreateSessionBodySchema,
-        response: {
-            200: e2eCreateSessionResponseSchema
-        }
-    },
-    errorHandler: (error)=>{
-        if (error instanceof UserNotFoundError) {
-            throw new ClientError('User not found', 'user-not-found', {
-                status: 404
-            });
-        }
-        if (error instanceof EmailNotVerifiedError) {
-            throw new ClientError('Email not verified', 'email-not-verified', {
-                status: 403
-            });
-        }
-        if (error instanceof InvalidCredentialsError) {
-            throw new ClientError('User is not active', 'user-inactive', {
-                status: 409
+export function createE2eSessionRoute(workspaces) {
+    return defineRoute({
+        method: 'POST',
+        path: '/sessions',
+        description: 'Create an authenticated browser session for E2E tests.',
+        schema: {
+            body: e2eCreateSessionBodySchema,
+            response: {
+                200: e2eCreateSessionResponseSchema
+            }
+        },
+        errorHandler: (error)=>{
+            if (error instanceof UserNotFoundError) {
+                throw new ClientError('User not found', 'user-not-found', {
+                    status: 404
+                });
+            }
+            if (error instanceof EmailNotVerifiedError) {
+                throw new ClientError('Email not verified', 'email-not-verified', {
+                    status: 403
+                });
+            }
+            if (error instanceof InvalidCredentialsError) {
+                throw new ClientError('User is not active', 'user-inactive', {
+                    status: 409
+                });
+            }
+            throw error;
+        },
+        handler: async (request, reply)=>{
+            const result = await createSessionForUser({
+                ...request.body.user_id ? {
+                    userId: request.body.user_id
+                } : {},
+                ...request.body.email ? {
+                    email: request.body.email
+                } : {},
+                workspaces
             });
+            setRefreshTokenCookie(reply, result.refreshToken);
+            return toAuthSessionDto(result);
         }
-        throw error;
-    },
-    handler: async (request, reply)=>{
-        const result = await createSessionForUser({
-            ...request.body.user_id ? {
-                userId: request.body.user_id
-            } : {},
-            ...request.body.email ? {
-                email: request.body.email
-            } : {}
-        });
-        setRefreshTokenCookie(reply, result.refreshToken);
-        return toAuthSessionDto(result);
-    }
-});
+    });
+}
 
 //# sourceMappingURL=create-session.js.map

package/dist/presentation/e2eRoutes/create-session.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/presentation/e2eRoutes/create-session.ts"],"sourcesContent":["import {e2eCreateSessionBodySchema, e2eCreateSessionResponseSchema} from '@shipfox/api-auth-dto';\nimport {ClientError, defineRoute} from '@shipfox/node-fastify';\nimport {createSessionForUser} from '#core/auth.js';\nimport {EmailNotVerifiedError, InvalidCredentialsError, UserNotFoundError} from '#core/errors.js';\nimport {setRefreshTokenCookie} from '#presentation/auth/refresh-cookie.js';\nimport {toAuthSessionDto} from '#presentation/dto/user.js';\n\nexport const createE2eSessionRoute = defineRoute({\n  method: 'POST',\n  path: '/sessions',\n  description: 'Create an authenticated browser session for E2E tests.',\n  schema: {\n    body: e2eCreateSessionBodySchema,\n    response: {\n      200: e2eCreateSessionResponseSchema,\n    },\n  },\n  errorHandler: (error) => {\n    if (error instanceof UserNotFoundError) {\n      throw new ClientError('User not found', 'user-not-found', {status: 404});\n    }\n    if (error instanceof EmailNotVerifiedError) {\n      throw new ClientError('Email not verified', 'email-not-verified', {status: 403});\n    }\n    if (error instanceof InvalidCredentialsError) {\n      throw new ClientError('User is not active', 'user-inactive', {status: 409});\n    }\n    throw error;\n  },\n  handler: async (request, reply) => {\n    const result = await createSessionForUser({\n      ...(request.body.user_id ? {userId: request.body.user_id} : {}),\n      ...(request.body.email ? {email: request.body.email} : {}),\n    });\n\n    setRefreshTokenCookie(reply, result.refreshToken);\n    return toAuthSessionDto(result);\n  },\n});\n"],"names":["e2eCreateSessionBodySchema","e2eCreateSessionResponseSchema","ClientError","defineRoute","createSessionForUser","EmailNotVerifiedError","InvalidCredentialsError","UserNotFoundError","setRefreshTokenCookie","toAuthSessionDto","createE2eSessionRoute","method","path","description","schema","body","response","errorHandler","error","status","handler","request","reply","result","user_id","userId","email","refreshToken"],"mappings":"AAAA,SAAQA,0BAA0B,EAAEC,8BAA8B,QAAO,wBAAwB;AACjG,SAAQC,WAAW,EAAEC,WAAW,QAAO,wBAAwB;AAC/D,SAAQC,oBAAoB,QAAO,gBAAgB;AACnD,SAAQC,qBAAqB,EAAEC,uBAAuB,EAAEC,iBAAiB,QAAO,kBAAkB;AAClG,SAAQC,qBAAqB,QAAO,uCAAuC;AAC3E,SAAQC,gBAAgB,QAAO,4BAA4B;AAE3D,OAAO,MAAMC,wBAAwBP,YAAY;IAC/CQ,QAAQ;IACRC,MAAM;IACNC,aAAa;IACbC,QAAQ;QACNC,MAAMf;QACNgB,UAAU;YACR,KAAKf;QACP;IACF;IACAgB,cAAc,CAACC;QACb,IAAIA,iBAAiBX,mBAAmB;YACtC,MAAM,IAAIL,YAAY,kBAAkB,kBAAkB;gBAACiB,QAAQ;YAAG;QACxE;QACA,IAAID,iBAAiBb,uBAAuB;YAC1C,MAAM,IAAIH,YAAY,sBAAsB,sBAAsB;gBAACiB,QAAQ;YAAG;QAChF;QACA,IAAID,iBAAiBZ,yBAAyB;YAC5C,MAAM,IAAIJ,YAAY,sBAAsB,iBAAiB;gBAACiB,QAAQ;YAAG;QAC3E;QACA,MAAMD;IACR;IACAE,SAAS,OAAOC,SAASC;QACvB,MAAMC,SAAS,MAAMnB,qBAAqB;YACxC,GAAIiB,QAAQN,IAAI,CAACS,OAAO,GAAG;gBAACC,QAAQJ,QAAQN,IAAI,CAACS,OAAO;YAAA,IAAI,CAAC,CAAC;YAC9D,GAAIH,QAAQN,IAAI,CAACW,KAAK,GAAG;gBAACA,OAAOL,QAAQN,IAAI,CAACW,KAAK;YAAA,IAAI,CAAC,CAAC;QAC3D;QAEAlB,sBAAsBc,OAAOC,OAAOI,YAAY;QAChD,OAAOlB,iBAAiBc;IAC1B;AACF,GAAG"}
+{"version":3,"sources":["../../../src/presentation/e2eRoutes/create-session.ts"],"sourcesContent":["import {e2eCreateSessionBodySchema, e2eCreateSessionResponseSchema} from '@shipfox/api-auth-dto';\nimport type {WorkspacesInterModuleClient} from '@shipfox/api-workspaces-dto/inter-module';\nimport {ClientError, defineRoute} from '@shipfox/node-fastify';\nimport {createSessionForUser} from '#core/auth.js';\nimport {EmailNotVerifiedError, InvalidCredentialsError, UserNotFoundError} from '#core/errors.js';\nimport {setRefreshTokenCookie} from '#presentation/auth/refresh-cookie.js';\nimport {toAuthSessionDto} from '#presentation/dto/user.js';\n\nexport function createE2eSessionRoute(workspaces: WorkspacesInterModuleClient) {\n  return defineRoute({\n    method: 'POST',\n    path: '/sessions',\n    description: 'Create an authenticated browser session for E2E tests.',\n    schema: {\n      body: e2eCreateSessionBodySchema,\n      response: {\n        200: e2eCreateSessionResponseSchema,\n      },\n    },\n    errorHandler: (error) => {\n      if (error instanceof UserNotFoundError) {\n        throw new ClientError('User not found', 'user-not-found', {status: 404});\n      }\n      if (error instanceof EmailNotVerifiedError) {\n        throw new ClientError('Email not verified', 'email-not-verified', {status: 403});\n      }\n      if (error instanceof InvalidCredentialsError) {\n        throw new ClientError('User is not active', 'user-inactive', {status: 409});\n      }\n      throw error;\n    },\n    handler: async (request, reply) => {\n      const result = await createSessionForUser({\n        ...(request.body.user_id ? {userId: request.body.user_id} : {}),\n        ...(request.body.email ? {email: request.body.email} : {}),\n        workspaces,\n      });\n\n      setRefreshTokenCookie(reply, result.refreshToken);\n      return toAuthSessionDto(result);\n    },\n  });\n}\n"],"names":["e2eCreateSessionBodySchema","e2eCreateSessionResponseSchema","ClientError","defineRoute","createSessionForUser","EmailNotVerifiedError","InvalidCredentialsError","UserNotFoundError","setRefreshTokenCookie","toAuthSessionDto","createE2eSessionRoute","workspaces","method","path","description","schema","body","response","errorHandler","error","status","handler","request","reply","result","user_id","userId","email","refreshToken"],"mappings":"AAAA,SAAQA,0BAA0B,EAAEC,8BAA8B,QAAO,wBAAwB;AAEjG,SAAQC,WAAW,EAAEC,WAAW,QAAO,wBAAwB;AAC/D,SAAQC,oBAAoB,QAAO,gBAAgB;AACnD,SAAQC,qBAAqB,EAAEC,uBAAuB,EAAEC,iBAAiB,QAAO,kBAAkB;AAClG,SAAQC,qBAAqB,QAAO,uCAAuC;AAC3E,SAAQC,gBAAgB,QAAO,4BAA4B;AAE3D,OAAO,SAASC,sBAAsBC,UAAuC;IAC3E,OAAOR,YAAY;QACjBS,QAAQ;QACRC,MAAM;QACNC,aAAa;QACbC,QAAQ;YACNC,MAAMhB;YACNiB,UAAU;gBACR,KAAKhB;YACP;QACF;QACAiB,cAAc,CAACC;YACb,IAAIA,iBAAiBZ,mBAAmB;gBACtC,MAAM,IAAIL,YAAY,kBAAkB,kBAAkB;oBAACkB,QAAQ;gBAAG;YACxE;YACA,IAAID,iBAAiBd,uBAAuB;gBAC1C,MAAM,IAAIH,YAAY,sBAAsB,sBAAsB;oBAACkB,QAAQ;gBAAG;YAChF;YACA,IAAID,iBAAiBb,yBAAyB;gBAC5C,MAAM,IAAIJ,YAAY,sBAAsB,iBAAiB;oBAACkB,QAAQ;gBAAG;YAC3E;YACA,MAAMD;QACR;QACAE,SAAS,OAAOC,SAASC;YACvB,MAAMC,SAAS,MAAMpB,qBAAqB;gBACxC,GAAIkB,QAAQN,IAAI,CAACS,OAAO,GAAG;oBAACC,QAAQJ,QAAQN,IAAI,CAACS,OAAO;gBAAA,IAAI,CAAC,CAAC;gBAC9D,GAAIH,QAAQN,IAAI,CAACW,KAAK,GAAG;oBAACA,OAAOL,QAAQN,IAAI,CAACW,KAAK;gBAAA,IAAI,CAAC,CAAC;gBACzDhB;YACF;YAEAH,sBAAsBe,OAAOC,OAAOI,YAAY;YAChD,OAAOnB,iBAAiBe;QAC1B;IACF;AACF"}

package/dist/presentation/e2eRoutes/index.d.ts

@@ -1,3 +1,4 @@
+import type { WorkspacesInterModuleClient } from '@shipfox/api-workspaces-dto/inter-module';
 import type { RouteGroup } from '@shipfox/node-fastify';
-export declare const authE2eRoutes: RouteGroup;
+export declare function createAuthE2eRoutes(workspaces: WorkspacesInterModuleClient): RouteGroup;
 //# sourceMappingURL=index.d.ts.map

package/dist/presentation/e2eRoutes/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/presentation/e2eRoutes/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAC,UAAU,EAAC,MAAM,uBAAuB,CAAC;AAItD,eAAO,MAAM,aAAa,EAAE,UAI3B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/presentation/e2eRoutes/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAC,2BAA2B,EAAC,MAAM,0CAA0C,CAAC;AAC1F,OAAO,KAAK,EAAC,UAAU,EAAC,MAAM,uBAAuB,CAAC;AAItD,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,2BAA2B,GAAG,UAAU,CAMvF"}

package/dist/presentation/e2eRoutes/index.js

@@ -1,15 +1,17 @@
 import cookie from '@fastify/cookie';
 import { createE2eSessionRoute } from './create-session.js';
 import { createE2eUserRoute } from './create-user.js';
-export const authE2eRoutes = {
-    prefix: '/auth',
-    plugins: [
-        cookie
-    ],
-    routes: [
-        createE2eUserRoute,
-        createE2eSessionRoute
-    ]
-};
+export function createAuthE2eRoutes(workspaces) {
+    return {
+        prefix: '/auth',
+        plugins: [
+            cookie
+        ],
+        routes: [
+            createE2eUserRoute,
+            createE2eSessionRoute(workspaces)
+        ]
+    };
+}
 
 //# sourceMappingURL=index.js.map

package/dist/presentation/e2eRoutes/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/presentation/e2eRoutes/index.ts"],"sourcesContent":["import cookie from '@fastify/cookie';\nimport type {RouteGroup} from '@shipfox/node-fastify';\nimport {createE2eSessionRoute} from './create-session.js';\nimport {createE2eUserRoute} from './create-user.js';\n\nexport const authE2eRoutes: RouteGroup = {\n  prefix: '/auth',\n  plugins: [cookie],\n  routes: [createE2eUserRoute, createE2eSessionRoute],\n};\n"],"names":["cookie","createE2eSessionRoute","createE2eUserRoute","authE2eRoutes","prefix","plugins","routes"],"mappings":"AAAA,OAAOA,YAAY,kBAAkB;AAErC,SAAQC,qBAAqB,QAAO,sBAAsB;AAC1D,SAAQC,kBAAkB,QAAO,mBAAmB;AAEpD,OAAO,MAAMC,gBAA4B;IACvCC,QAAQ;IACRC,SAAS;QAACL;KAAO;IACjBM,QAAQ;QAACJ;QAAoBD;KAAsB;AACrD,EAAE"}
+{"version":3,"sources":["../../../src/presentation/e2eRoutes/index.ts"],"sourcesContent":["import cookie from '@fastify/cookie';\nimport type {WorkspacesInterModuleClient} from '@shipfox/api-workspaces-dto/inter-module';\nimport type {RouteGroup} from '@shipfox/node-fastify';\nimport {createE2eSessionRoute} from './create-session.js';\nimport {createE2eUserRoute} from './create-user.js';\n\nexport function createAuthE2eRoutes(workspaces: WorkspacesInterModuleClient): RouteGroup {\n  return {\n    prefix: '/auth',\n    plugins: [cookie],\n    routes: [createE2eUserRoute, createE2eSessionRoute(workspaces)],\n  };\n}\n"],"names":["cookie","createE2eSessionRoute","createE2eUserRoute","createAuthE2eRoutes","workspaces","prefix","plugins","routes"],"mappings":"AAAA,OAAOA,YAAY,kBAAkB;AAGrC,SAAQC,qBAAqB,QAAO,sBAAsB;AAC1D,SAAQC,kBAAkB,QAAO,mBAAmB;AAEpD,OAAO,SAASC,oBAAoBC,UAAuC;IACzE,OAAO;QACLC,QAAQ;QACRC,SAAS;YAACN;SAAO;QACjBO,QAAQ;YAACL;YAAoBD,sBAAsBG;SAAY;IACjE;AACF"}

package/dist/presentation/inter-module.d.ts

@@ -0,0 +1,4 @@
+import { authInterModuleContract } from '@shipfox/api-auth-dto/inter-module';
+import { type InterModulePresentation } from '@shipfox/inter-module';
+export declare function createAuthInterModulePresentation(): InterModulePresentation<typeof authInterModuleContract>;
+//# sourceMappingURL=inter-module.d.ts.map

package/dist/presentation/inter-module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inter-module.d.ts","sourceRoot":"","sources":["../../src/presentation/inter-module.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,uBAAuB,EAAC,MAAM,oCAAoC,CAAC;AAC3E,OAAO,EAAgC,KAAK,uBAAuB,EAAC,MAAM,uBAAuB,CAAC;AAIlG,wBAAgB,iCAAiC,IAAI,uBAAuB,CAC1E,OAAO,uBAAuB,CAC/B,CAKA"}

package/dist/presentation/inter-module.js

@@ -0,0 +1,16 @@
+import { authInterModuleContract } from '@shipfox/api-auth-dto/inter-module';
+import { defineInterModulePresentation } from '@shipfox/inter-module';
+import { issueJobLeaseToken } from '#core/job-lease-token.js';
+import { issueRunnerSessionToken } from '#core/runner-session-token.js';
+export function createAuthInterModulePresentation() {
+    return defineInterModulePresentation(authInterModuleContract, {
+        mintRunnerSessionToken: async (claims)=>({
+                token: await issueRunnerSessionToken(claims)
+            }),
+        mintJobLeaseToken: async (claims)=>({
+                token: await issueJobLeaseToken(claims)
+            })
+    });
+}
+
+//# sourceMappingURL=inter-module.js.map

package/dist/presentation/inter-module.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/presentation/inter-module.ts"],"sourcesContent":["import {authInterModuleContract} from '@shipfox/api-auth-dto/inter-module';\nimport {defineInterModulePresentation, type InterModulePresentation} from '@shipfox/inter-module';\nimport {issueJobLeaseToken} from '#core/job-lease-token.js';\nimport {issueRunnerSessionToken} from '#core/runner-session-token.js';\n\nexport function createAuthInterModulePresentation(): InterModulePresentation<\n  typeof authInterModuleContract\n> {\n  return defineInterModulePresentation(authInterModuleContract, {\n    mintRunnerSessionToken: async (claims) => ({token: await issueRunnerSessionToken(claims)}),\n    mintJobLeaseToken: async (claims) => ({token: await issueJobLeaseToken(claims)}),\n  });\n}\n"],"names":["authInterModuleContract","defineInterModulePresentation","issueJobLeaseToken","issueRunnerSessionToken","createAuthInterModulePresentation","mintRunnerSessionToken","claims","token","mintJobLeaseToken"],"mappings":"AAAA,SAAQA,uBAAuB,QAAO,qCAAqC;AAC3E,SAAQC,6BAA6B,QAAqC,wBAAwB;AAClG,SAAQC,kBAAkB,QAAO,2BAA2B;AAC5D,SAAQC,uBAAuB,QAAO,gCAAgC;AAEtE,OAAO,SAASC;IAGd,OAAOH,8BAA8BD,yBAAyB;QAC5DK,wBAAwB,OAAOC,SAAY,CAAA;gBAACC,OAAO,MAAMJ,wBAAwBG;YAAO,CAAA;QACxFE,mBAAmB,OAAOF,SAAY,CAAA;gBAACC,OAAO,MAAML,mBAAmBI;YAAO,CAAA;IAChF;AACF"}

package/dist/presentation/routes/email-verification/verify-email-confirm.d.ts

@@ -1,2 +1,3 @@
-export declare const verifyEmailConfirmRoute: import("@shipfox/node-fastify").RouteDefinition;
+import type { WorkspacesInterModuleClient } from '@shipfox/api-workspaces-dto/inter-module';
+export declare function createVerifyEmailConfirmRoute(workspaces: WorkspacesInterModuleClient): import("@shipfox/node-fastify").RouteDefinition;
 //# sourceMappingURL=verify-email-confirm.d.ts.map

package/dist/presentation/routes/email-verification/verify-email-confirm.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"verify-email-confirm.d.ts","sourceRoot":"","sources":["../../../../src/presentation/routes/email-verification/verify-email-confirm.ts"],"names":[],"mappings":"AAUA,eAAO,MAAM,uBAAuB,iDA0BlC,CAAC"}
+{"version":3,"file":"verify-email-confirm.d.ts","sourceRoot":"","sources":["../../../../src/presentation/routes/email-verification/verify-email-confirm.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAC,2BAA2B,EAAC,MAAM,0CAA0C,CAAC;AAO1F,wBAAgB,6BAA6B,CAAC,UAAU,EAAE,2BAA2B,mDA0CpF"}

package/dist/presentation/routes/email-verification/verify-email-confirm.js

@@ -1,35 +1,46 @@
 import { verifyEmailConfirmBodySchema, verifyEmailConfirmResponseSchema } from '@shipfox/api-auth-dto';
+import { EmailChallengeError } from '@shipfox/api-email-challenges';
 import { ClientError, defineRoute } from '@shipfox/node-fastify';
 import { confirmEmailVerification } from '#core/auth.js';
 import { TokenInvalidError } from '#core/errors.js';
 import { setRefreshTokenCookie } from '#presentation/auth/refresh-cookie.js';
 import { toAuthSessionDto } from '#presentation/dto/user.js';
-export const verifyEmailConfirmRoute = defineRoute({
-    method: 'POST',
-    path: '/verify-email/confirm',
-    description: 'Verify a user email address with the link sent by email.',
-    schema: {
-        body: verifyEmailConfirmBodySchema,
-        response: {
-            200: verifyEmailConfirmResponseSchema
-        }
-    },
-    errorHandler: (error)=>{
-        if (error instanceof TokenInvalidError) {
-            throw new ClientError('Verification token is invalid or expired', 'token-invalid', {
-                status: 410
+export function createVerifyEmailConfirmRoute(workspaces) {
+    return defineRoute({
+        method: 'POST',
+        path: '/verify-email/confirm',
+        description: 'Verify a user email address with the code sent by email.',
+        schema: {
+            body: verifyEmailConfirmBodySchema,
+            response: {
+                200: verifyEmailConfirmResponseSchema
+            }
+        },
+        errorHandler: (error)=>{
+            if (error instanceof TokenInvalidError) {
+                throw new ClientError('Verification code is invalid or expired', 'email-challenge-invalid', {
+                    status: 410
+                });
+            }
+            if (error instanceof EmailChallengeError) {
+                throw new ClientError(error.message, `email-challenge-${error.code}`, {
+                    status: error.code === 'expired' || error.code === 'exhausted' ? 410 : 400
+                });
+            }
+            throw error;
+        },
+        handler: async (request, reply)=>{
+            const { email, challenge_id, code } = request.body;
+            const result = await confirmEmailVerification({
+                email,
+                challengeId: challenge_id,
+                code,
+                workspaces
             });
+            setRefreshTokenCookie(reply, result.refreshToken);
+            return toAuthSessionDto(result);
         }
-        throw error;
-    },
-    handler: async (request, reply)=>{
-        const { token } = request.body;
-        const result = await confirmEmailVerification({
-            token
-        });
-        setRefreshTokenCookie(reply, result.refreshToken);
-        return toAuthSessionDto(result);
-    }
-});
+    });
+}
 
 //# sourceMappingURL=verify-email-confirm.js.map

package/dist/presentation/routes/email-verification/verify-email-confirm.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../src/presentation/routes/email-verification/verify-email-confirm.ts"],"sourcesContent":["import {\n  verifyEmailConfirmBodySchema,\n  verifyEmailConfirmResponseSchema,\n} from '@shipfox/api-auth-dto';\nimport {ClientError, defineRoute} from '@shipfox/node-fastify';\nimport {confirmEmailVerification} from '#core/auth.js';\nimport {TokenInvalidError} from '#core/errors.js';\nimport {setRefreshTokenCookie} from '#presentation/auth/refresh-cookie.js';\nimport {toAuthSessionDto} from '#presentation/dto/user.js';\n\nexport const verifyEmailConfirmRoute = defineRoute({\n  method: 'POST',\n  path: '/verify-email/confirm',\n  description: 'Verify a user email address with the link sent by email.',\n  schema: {\n    body: verifyEmailConfirmBodySchema,\n    response: {\n      200: verifyEmailConfirmResponseSchema,\n    },\n  },\n  errorHandler: (error) => {\n    if (error instanceof TokenInvalidError) {\n      throw new ClientError('Verification token is invalid or expired', 'token-invalid', {\n        status: 410,\n      });\n    }\n    throw error;\n  },\n  handler: async (request, reply) => {\n    const {token} = request.body;\n\n    const result = await confirmEmailVerification({token});\n    setRefreshTokenCookie(reply, result.refreshToken);\n\n    return toAuthSessionDto(result);\n  },\n});\n"],"names":["verifyEmailConfirmBodySchema","verifyEmailConfirmResponseSchema","ClientError","defineRoute","confirmEmailVerification","TokenInvalidError","setRefreshTokenCookie","toAuthSessionDto","verifyEmailConfirmRoute","method","path","description","schema","body","response","errorHandler","error","status","handler","request","reply","token","result","refreshToken"],"mappings":"AAAA,SACEA,4BAA4B,EAC5BC,gCAAgC,QAC3B,wBAAwB;AAC/B,SAAQC,WAAW,EAAEC,WAAW,QAAO,wBAAwB;AAC/D,SAAQC,wBAAwB,QAAO,gBAAgB;AACvD,SAAQC,iBAAiB,QAAO,kBAAkB;AAClD,SAAQC,qBAAqB,QAAO,uCAAuC;AAC3E,SAAQC,gBAAgB,QAAO,4BAA4B;AAE3D,OAAO,MAAMC,0BAA0BL,YAAY;IACjDM,QAAQ;IACRC,MAAM;IACNC,aAAa;IACbC,QAAQ;QACNC,MAAMb;QACNc,UAAU;YACR,KAAKb;QACP;IACF;IACAc,cAAc,CAACC;QACb,IAAIA,iBAAiBX,mBAAmB;YACtC,MAAM,IAAIH,YAAY,4CAA4C,iBAAiB;gBACjFe,QAAQ;YACV;QACF;QACA,MAAMD;IACR;IACAE,SAAS,OAAOC,SAASC;QACvB,MAAM,EAACC,KAAK,EAAC,GAAGF,QAAQN,IAAI;QAE5B,MAAMS,SAAS,MAAMlB,yBAAyB;YAACiB;QAAK;QACpDf,sBAAsBc,OAAOE,OAAOC,YAAY;QAEhD,OAAOhB,iBAAiBe;IAC1B;AACF,GAAG"}
+{"version":3,"sources":["../../../../src/presentation/routes/email-verification/verify-email-confirm.ts"],"sourcesContent":["import {\n  verifyEmailConfirmBodySchema,\n  verifyEmailConfirmResponseSchema,\n} from '@shipfox/api-auth-dto';\nimport {EmailChallengeError} from '@shipfox/api-email-challenges';\nimport type {WorkspacesInterModuleClient} from '@shipfox/api-workspaces-dto/inter-module';\nimport {ClientError, defineRoute} from '@shipfox/node-fastify';\nimport {confirmEmailVerification} from '#core/auth.js';\nimport {TokenInvalidError} from '#core/errors.js';\nimport {setRefreshTokenCookie} from '#presentation/auth/refresh-cookie.js';\nimport {toAuthSessionDto} from '#presentation/dto/user.js';\n\nexport function createVerifyEmailConfirmRoute(workspaces: WorkspacesInterModuleClient) {\n  return defineRoute({\n    method: 'POST',\n    path: '/verify-email/confirm',\n    description: 'Verify a user email address with the code sent by email.',\n    schema: {\n      body: verifyEmailConfirmBodySchema,\n      response: {\n        200: verifyEmailConfirmResponseSchema,\n      },\n    },\n    errorHandler: (error) => {\n      if (error instanceof TokenInvalidError) {\n        throw new ClientError(\n          'Verification code is invalid or expired',\n          'email-challenge-invalid',\n          {\n            status: 410,\n          },\n        );\n      }\n      if (error instanceof EmailChallengeError) {\n        throw new ClientError(error.message, `email-challenge-${error.code}`, {\n          status: error.code === 'expired' || error.code === 'exhausted' ? 410 : 400,\n        });\n      }\n      throw error;\n    },\n    handler: async (request, reply) => {\n      const {email, challenge_id, code} = request.body;\n\n      const result = await confirmEmailVerification({\n        email,\n        challengeId: challenge_id,\n        code,\n        workspaces,\n      });\n      setRefreshTokenCookie(reply, result.refreshToken);\n\n      return toAuthSessionDto(result);\n    },\n  });\n}\n"],"names":["verifyEmailConfirmBodySchema","verifyEmailConfirmResponseSchema","EmailChallengeError","ClientError","defineRoute","confirmEmailVerification","TokenInvalidError","setRefreshTokenCookie","toAuthSessionDto","createVerifyEmailConfirmRoute","workspaces","method","path","description","schema","body","response","errorHandler","error","status","message","code","handler","request","reply","email","challenge_id","result","challengeId","refreshToken"],"mappings":"AAAA,SACEA,4BAA4B,EAC5BC,gCAAgC,QAC3B,wBAAwB;AAC/B,SAAQC,mBAAmB,QAAO,gCAAgC;AAElE,SAAQC,WAAW,EAAEC,WAAW,QAAO,wBAAwB;AAC/D,SAAQC,wBAAwB,QAAO,gBAAgB;AACvD,SAAQC,iBAAiB,QAAO,kBAAkB;AAClD,SAAQC,qBAAqB,QAAO,uCAAuC;AAC3E,SAAQC,gBAAgB,QAAO,4BAA4B;AAE3D,OAAO,SAASC,8BAA8BC,UAAuC;IACnF,OAAON,YAAY;QACjBO,QAAQ;QACRC,MAAM;QACNC,aAAa;QACbC,QAAQ;YACNC,MAAMf;YACNgB,UAAU;gBACR,KAAKf;YACP;QACF;QACAgB,cAAc,CAACC;YACb,IAAIA,iBAAiBZ,mBAAmB;gBACtC,MAAM,IAAIH,YACR,2CACA,2BACA;oBACEgB,QAAQ;gBACV;YAEJ;YACA,IAAID,iBAAiBhB,qBAAqB;gBACxC,MAAM,IAAIC,YAAYe,MAAME,OAAO,EAAE,CAAC,gBAAgB,EAAEF,MAAMG,IAAI,EAAE,EAAE;oBACpEF,QAAQD,MAAMG,IAAI,KAAK,aAAaH,MAAMG,IAAI,KAAK,cAAc,MAAM;gBACzE;YACF;YACA,MAAMH;QACR;QACAI,SAAS,OAAOC,SAASC;YACvB,MAAM,EAACC,KAAK,EAAEC,YAAY,EAAEL,IAAI,EAAC,GAAGE,QAAQR,IAAI;YAEhD,MAAMY,SAAS,MAAMtB,yBAAyB;gBAC5CoB;gBACAG,aAAaF;gBACbL;gBACAX;YACF;YACAH,sBAAsBiB,OAAOG,OAAOE,YAAY;YAEhD,OAAOrB,iBAAiBmB;QAC1B;IACF;AACF"}

package/dist/presentation/routes/email-verification/verify-email-resend.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"verify-email-resend.d.ts","sourceRoot":"","sources":["../../../../src/presentation/routes/email-verification/verify-email-resend.ts"],"names":[],"mappings":"AAKA,eAAO,MAAM,sBAAsB,iDAoBjC,CAAC"}
+{"version":3,"file":"verify-email-resend.d.ts","sourceRoot":"","sources":["../../../../src/presentation/routes/email-verification/verify-email-resend.ts"],"names":[],"mappings":"AAMA,eAAO,MAAM,sBAAsB,iDAiCjC,CAAC"}

package/dist/presentation/routes/email-verification/verify-email-resend.js

@@ -1,11 +1,12 @@
 import { verifyEmailResendBodySchema, verifyEmailResendResponseSchema } from '@shipfox/api-auth-dto';
-import { defineRoute } from '@shipfox/node-fastify';
+import { EmailChallengeError } from '@shipfox/api-email-challenges';
+import { ClientError, defineRoute } from '@shipfox/node-fastify';
 import { resendEmailVerification } from '#core/auth.js';
 import { createAuthRateLimitPreHandler } from '#presentation/routes/rate-limit.js';
 export const verifyEmailResendRoute = defineRoute({
     method: 'POST',
     path: '/verify-email/resend',
-    description: 'Send a new email verification link if the account can be verified.',
+    description: 'Send a new email verification code if the account can be verified.',
     schema: {
         body: verifyEmailResendBodySchema,
         response: {
@@ -13,10 +14,25 @@ export const verifyEmailResendRoute = defineRoute({
         }
     },
     preHandler: createAuthRateLimitPreHandler('email-send'),
+    errorHandler: (error)=>{
+        if (error instanceof EmailChallengeError) {
+            throw new ClientError(error.message, `email-challenge-${error.code}`, {
+                status: error.code === 'limited' ? 429 : error.code === 'expired' ? 410 : 400,
+                ...error.retryAt ? {
+                    details: {
+                        retry_at: error.retryAt.toISOString()
+                    }
+                } : {}
+            });
+        }
+        throw error;
+    },
     handler: async (request, reply)=>{
-        const { email } = request.body;
+        const { email, challenge_id } = request.body;
         const result = await resendEmailVerification({
-            email
+            email,
+            challengeId: challenge_id,
+            sourceIp: request.ip
         });
         reply.code(200).send({
             next_resend_available_at: result.nextResendAvailableAt.toISOString()

package/dist/presentation/routes/email-verification/verify-email-resend.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../src/presentation/routes/email-verification/verify-email-resend.ts"],"sourcesContent":["import {verifyEmailResendBodySchema, verifyEmailResendResponseSchema} from '@shipfox/api-auth-dto';\nimport {defineRoute} from '@shipfox/node-fastify';\nimport {resendEmailVerification} from '#core/auth.js';\nimport {createAuthRateLimitPreHandler} from '#presentation/routes/rate-limit.js';\n\nexport const verifyEmailResendRoute = defineRoute({\n  method: 'POST',\n  path: '/verify-email/resend',\n  description: 'Send a new email verification link if the account can be verified.',\n  schema: {\n    body: verifyEmailResendBodySchema,\n    response: {\n      200: verifyEmailResendResponseSchema,\n    },\n  },\n  preHandler: createAuthRateLimitPreHandler('email-send'),\n  handler: async (request, reply) => {\n    const {email} = request.body;\n\n    const result = await resendEmailVerification({email});\n\n    reply.code(200).send({\n      next_resend_available_at: result.nextResendAvailableAt.toISOString(),\n    });\n  },\n});\n"],"names":["verifyEmailResendBodySchema","verifyEmailResendResponseSchema","defineRoute","resendEmailVerification","createAuthRateLimitPreHandler","verifyEmailResendRoute","method","path","description","schema","body","response","preHandler","handler","request","reply","email","result","code","send","next_resend_available_at","nextResendAvailableAt","toISOString"],"mappings":"AAAA,SAAQA,2BAA2B,EAAEC,+BAA+B,QAAO,wBAAwB;AACnG,SAAQC,WAAW,QAAO,wBAAwB;AAClD,SAAQC,uBAAuB,QAAO,gBAAgB;AACtD,SAAQC,6BAA6B,QAAO,qCAAqC;AAEjF,OAAO,MAAMC,yBAAyBH,YAAY;IAChDI,QAAQ;IACRC,MAAM;IACNC,aAAa;IACbC,QAAQ;QACNC,MAAMV;QACNW,UAAU;YACR,KAAKV;QACP;IACF;IACAW,YAAYR,8BAA8B;IAC1CS,SAAS,OAAOC,SAASC;QACvB,MAAM,EAACC,KAAK,EAAC,GAAGF,QAAQJ,IAAI;QAE5B,MAAMO,SAAS,MAAMd,wBAAwB;YAACa;QAAK;QAEnDD,MAAMG,IAAI,CAAC,KAAKC,IAAI,CAAC;YACnBC,0BAA0BH,OAAOI,qBAAqB,CAACC,WAAW;QACpE;IACF;AACF,GAAG"}
+{"version":3,"sources":["../../../../src/presentation/routes/email-verification/verify-email-resend.ts"],"sourcesContent":["import {verifyEmailResendBodySchema, verifyEmailResendResponseSchema} from '@shipfox/api-auth-dto';\nimport {EmailChallengeError} from '@shipfox/api-email-challenges';\nimport {ClientError, defineRoute} from '@shipfox/node-fastify';\nimport {resendEmailVerification} from '#core/auth.js';\nimport {createAuthRateLimitPreHandler} from '#presentation/routes/rate-limit.js';\n\nexport const verifyEmailResendRoute = defineRoute({\n  method: 'POST',\n  path: '/verify-email/resend',\n  description: 'Send a new email verification code if the account can be verified.',\n  schema: {\n    body: verifyEmailResendBodySchema,\n    response: {\n      200: verifyEmailResendResponseSchema,\n    },\n  },\n  preHandler: createAuthRateLimitPreHandler('email-send'),\n  errorHandler: (error) => {\n    if (error instanceof EmailChallengeError) {\n      throw new ClientError(error.message, `email-challenge-${error.code}`, {\n        status: error.code === 'limited' ? 429 : error.code === 'expired' ? 410 : 400,\n        ...(error.retryAt ? {details: {retry_at: error.retryAt.toISOString()}} : {}),\n      });\n    }\n    throw error;\n  },\n  handler: async (request, reply) => {\n    const {email, challenge_id} = request.body;\n\n    const result = await resendEmailVerification({\n      email,\n      challengeId: challenge_id,\n      sourceIp: request.ip,\n    });\n\n    reply.code(200).send({\n      next_resend_available_at: result.nextResendAvailableAt.toISOString(),\n    });\n  },\n});\n"],"names":["verifyEmailResendBodySchema","verifyEmailResendResponseSchema","EmailChallengeError","ClientError","defineRoute","resendEmailVerification","createAuthRateLimitPreHandler","verifyEmailResendRoute","method","path","description","schema","body","response","preHandler","errorHandler","error","message","code","status","retryAt","details","retry_at","toISOString","handler","request","reply","email","challenge_id","result","challengeId","sourceIp","ip","send","next_resend_available_at","nextResendAvailableAt"],"mappings":"AAAA,SAAQA,2BAA2B,EAAEC,+BAA+B,QAAO,wBAAwB;AACnG,SAAQC,mBAAmB,QAAO,gCAAgC;AAClE,SAAQC,WAAW,EAAEC,WAAW,QAAO,wBAAwB;AAC/D,SAAQC,uBAAuB,QAAO,gBAAgB;AACtD,SAAQC,6BAA6B,QAAO,qCAAqC;AAEjF,OAAO,MAAMC,yBAAyBH,YAAY;IAChDI,QAAQ;IACRC,MAAM;IACNC,aAAa;IACbC,QAAQ;QACNC,MAAMZ;QACNa,UAAU;YACR,KAAKZ;QACP;IACF;IACAa,YAAYR,8BAA8B;IAC1CS,cAAc,CAACC;QACb,IAAIA,iBAAiBd,qBAAqB;YACxC,MAAM,IAAIC,YAAYa,MAAMC,OAAO,EAAE,CAAC,gBAAgB,EAAED,MAAME,IAAI,EAAE,EAAE;gBACpEC,QAAQH,MAAME,IAAI,KAAK,YAAY,MAAMF,MAAME,IAAI,KAAK,YAAY,MAAM;gBAC1E,GAAIF,MAAMI,OAAO,GAAG;oBAACC,SAAS;wBAACC,UAAUN,MAAMI,OAAO,CAACG,WAAW;oBAAE;gBAAC,IAAI,CAAC,CAAC;YAC7E;QACF;QACA,MAAMP;IACR;IACAQ,SAAS,OAAOC,SAASC;QACvB,MAAM,EAACC,KAAK,EAAEC,YAAY,EAAC,GAAGH,QAAQb,IAAI;QAE1C,MAAMiB,SAAS,MAAMxB,wBAAwB;YAC3CsB;YACAG,aAAaF;YACbG,UAAUN,QAAQO,EAAE;QACtB;QAEAN,MAAMR,IAAI,CAAC,KAAKe,IAAI,CAAC;YACnBC,0BAA0BL,OAAOM,qBAAqB,CAACZ,WAAW;QACpE;IACF;AACF,GAAG"}

package/dist/presentation/routes/index.d.ts

@@ -1,4 +1,4 @@
+import type { WorkspacesInterModuleClient } from '@shipfox/api-workspaces-dto/inter-module';
 import type { RouteGroup } from '@shipfox/node-fastify';
-export declare function buildAuthRoutes(passwordEnabled: boolean): RouteGroup;
-export declare const authRoutes: RouteGroup;
+export declare function buildAuthRoutes(passwordEnabled: boolean, workspaces: WorkspacesInterModuleClient): RouteGroup;
 //# sourceMappingURL=index.d.ts.map

package/dist/presentation/routes/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/presentation/routes/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAC,UAAU,EAAC,MAAM,uBAAuB,CAAC;AActD,wBAAgB,eAAe,CAAC,eAAe,EAAE,OAAO,GAAG,UAAU,CAkBpE;AAED,eAAO,MAAM,UAAU,YAAgD,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/presentation/routes/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAC,2BAA2B,EAAC,MAAM,0CAA0C,CAAC;AAC1F,OAAO,KAAK,EAAC,UAAU,EAAC,MAAM,uBAAuB,CAAC;AAatD,wBAAgB,eAAe,CAC7B,eAAe,EAAE,OAAO,EACxB,UAAU,EAAE,2BAA2B,GACtC,UAAU,CA2BZ"}

package/dist/presentation/routes/index.js

@@ -1,21 +1,20 @@
-import { config } from '#config.js';
 import { authCookiePlugin } from '#presentation/auth/refresh-cookie.js';
-import { verifyEmailConfirmRoute } from './email-verification/verify-email-confirm.js';
+import { createVerifyEmailConfirmRoute } from './email-verification/verify-email-confirm.js';
 import { verifyEmailResendRoute } from './email-verification/verify-email-resend.js';
 import { changePasswordRoute } from './password/change-password.js';
-import { passwordResetConfirmRoute } from './password/password-reset-confirm.js';
+import { createPasswordResetConfirmRoute } from './password/password-reset-confirm.js';
 import { passwordResetRequestRoute } from './password/password-reset-request.js';
-import { signupRoute } from './registration/signup.js';
-import { loginRoute } from './session/login.js';
+import { createSignupRoute } from './registration/signup.js';
+import { createLoginRoute } from './session/login.js';
 import { logoutRoute } from './session/logout.js';
 import { meRoute } from './session/me.js';
-import { refreshRoute } from './session/refresh.js';
-export function buildAuthRoutes(passwordEnabled) {
+import { createRefreshRoute } from './session/refresh.js';
+export function buildAuthRoutes(passwordEnabled, workspaces) {
     const passwordRoutes = passwordEnabled ? [
-        signupRoute,
-        verifyEmailConfirmRoute,
+        createSignupRoute(workspaces),
+        createVerifyEmailConfirmRoute(workspaces),
         verifyEmailResendRoute,
-        loginRoute
+        createLoginRoute(workspaces)
     ] : [];
     return {
         prefix: '/auth',
@@ -24,17 +23,16 @@ export function buildAuthRoutes(passwordEnabled) {
         ],
         routes: [
             ...passwordRoutes,
-            refreshRoute,
+            createRefreshRoute(workspaces),
             logoutRoute,
             meRoute,
             ...passwordEnabled ? [
                 changePasswordRoute,
                 passwordResetRequestRoute,
-                passwordResetConfirmRoute
+                createPasswordResetConfirmRoute(workspaces)
             ] : []
         ]
     };
 }
-export const authRoutes = buildAuthRoutes(config.AUTH_PASSWORD_ENABLED);
 
 //# sourceMappingURL=index.js.map