@shipfox/api-auth 5.0.0 → 7.0.1

package/dist/presentation/routes/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/presentation/routes/index.ts"],"sourcesContent":["import type {RouteGroup} from '@shipfox/node-fastify';\nimport {config} from '#config.js';\nimport {authCookiePlugin} from '#presentation/auth/refresh-cookie.js';\nimport {verifyEmailConfirmRoute} from './email-verification/verify-email-confirm.js';\nimport {verifyEmailResendRoute} from './email-verification/verify-email-resend.js';\nimport {changePasswordRoute} from './password/change-password.js';\nimport {passwordResetConfirmRoute} from './password/password-reset-confirm.js';\nimport {passwordResetRequestRoute} from './password/password-reset-request.js';\nimport {signupRoute} from './registration/signup.js';\nimport {loginRoute} from './session/login.js';\nimport {logoutRoute} from './session/logout.js';\nimport {meRoute} from './session/me.js';\nimport {refreshRoute} from './session/refresh.js';\n\nexport function buildAuthRoutes(passwordEnabled: boolean): RouteGroup {\n  const passwordRoutes = passwordEnabled\n    ? [signupRoute, verifyEmailConfirmRoute, verifyEmailResendRoute, loginRoute]\n    : [];\n\n  return {\n    prefix: '/auth',\n    plugins: [authCookiePlugin],\n    routes: [\n      ...passwordRoutes,\n      refreshRoute,\n      logoutRoute,\n      meRoute,\n      ...(passwordEnabled\n        ? [changePasswordRoute, passwordResetRequestRoute, passwordResetConfirmRoute]\n        : []),\n    ],\n  };\n}\n\nexport const authRoutes = buildAuthRoutes(config.AUTH_PASSWORD_ENABLED);\n"],"names":["config","authCookiePlugin","verifyEmailConfirmRoute","verifyEmailResendRoute","changePasswordRoute","passwordResetConfirmRoute","passwordResetRequestRoute","signupRoute","loginRoute","logoutRoute","meRoute","refreshRoute","buildAuthRoutes","passwordEnabled","passwordRoutes","prefix","plugins","routes","authRoutes","AUTH_PASSWORD_ENABLED"],"mappings":"AACA,SAAQA,MAAM,QAAO,aAAa;AAClC,SAAQC,gBAAgB,QAAO,uCAAuC;AACtE,SAAQC,uBAAuB,QAAO,+CAA+C;AACrF,SAAQC,sBAAsB,QAAO,8CAA8C;AACnF,SAAQC,mBAAmB,QAAO,gCAAgC;AAClE,SAAQC,yBAAyB,QAAO,uCAAuC;AAC/E,SAAQC,yBAAyB,QAAO,uCAAuC;AAC/E,SAAQC,WAAW,QAAO,2BAA2B;AACrD,SAAQC,UAAU,QAAO,qBAAqB;AAC9C,SAAQC,WAAW,QAAO,sBAAsB;AAChD,SAAQC,OAAO,QAAO,kBAAkB;AACxC,SAAQC,YAAY,QAAO,uBAAuB;AAElD,OAAO,SAASC,gBAAgBC,eAAwB;IACtD,MAAMC,iBAAiBD,kBACnB;QAACN;QAAaL;QAAyBC;QAAwBK;KAAW,GAC1E,EAAE;IAEN,OAAO;QACLO,QAAQ;QACRC,SAAS;YAACf;SAAiB;QAC3BgB,QAAQ;eACHH;YACHH;YACAF;YACAC;eACIG,kBACA;gBAACT;gBAAqBE;gBAA2BD;aAA0B,GAC3E,EAAE;SACP;IACH;AACF;AAEA,OAAO,MAAMa,aAAaN,gBAAgBZ,OAAOmB,qBAAqB,EAAE"}
+{"version":3,"sources":["../../../src/presentation/routes/index.ts"],"sourcesContent":["import type {WorkspacesInterModuleClient} from '@shipfox/api-workspaces-dto/inter-module';\nimport type {RouteGroup} from '@shipfox/node-fastify';\nimport {authCookiePlugin} from '#presentation/auth/refresh-cookie.js';\nimport {createVerifyEmailConfirmRoute} from './email-verification/verify-email-confirm.js';\nimport {verifyEmailResendRoute} from './email-verification/verify-email-resend.js';\nimport {changePasswordRoute} from './password/change-password.js';\nimport {createPasswordResetConfirmRoute} from './password/password-reset-confirm.js';\nimport {passwordResetRequestRoute} from './password/password-reset-request.js';\nimport {createSignupRoute} from './registration/signup.js';\nimport {createLoginRoute} from './session/login.js';\nimport {logoutRoute} from './session/logout.js';\nimport {meRoute} from './session/me.js';\nimport {createRefreshRoute} from './session/refresh.js';\n\nexport function buildAuthRoutes(\n  passwordEnabled: boolean,\n  workspaces: WorkspacesInterModuleClient,\n): RouteGroup {\n  const passwordRoutes = passwordEnabled\n    ? [\n        createSignupRoute(workspaces),\n        createVerifyEmailConfirmRoute(workspaces),\n        verifyEmailResendRoute,\n        createLoginRoute(workspaces),\n      ]\n    : [];\n\n  return {\n    prefix: '/auth',\n    plugins: [authCookiePlugin],\n    routes: [\n      ...passwordRoutes,\n      createRefreshRoute(workspaces),\n      logoutRoute,\n      meRoute,\n      ...(passwordEnabled\n        ? [\n            changePasswordRoute,\n            passwordResetRequestRoute,\n            createPasswordResetConfirmRoute(workspaces),\n          ]\n        : []),\n    ],\n  };\n}\n"],"names":["authCookiePlugin","createVerifyEmailConfirmRoute","verifyEmailResendRoute","changePasswordRoute","createPasswordResetConfirmRoute","passwordResetRequestRoute","createSignupRoute","createLoginRoute","logoutRoute","meRoute","createRefreshRoute","buildAuthRoutes","passwordEnabled","workspaces","passwordRoutes","prefix","plugins","routes"],"mappings":"AAEA,SAAQA,gBAAgB,QAAO,uCAAuC;AACtE,SAAQC,6BAA6B,QAAO,+CAA+C;AAC3F,SAAQC,sBAAsB,QAAO,8CAA8C;AACnF,SAAQC,mBAAmB,QAAO,gCAAgC;AAClE,SAAQC,+BAA+B,QAAO,uCAAuC;AACrF,SAAQC,yBAAyB,QAAO,uCAAuC;AAC/E,SAAQC,iBAAiB,QAAO,2BAA2B;AAC3D,SAAQC,gBAAgB,QAAO,qBAAqB;AACpD,SAAQC,WAAW,QAAO,sBAAsB;AAChD,SAAQC,OAAO,QAAO,kBAAkB;AACxC,SAAQC,kBAAkB,QAAO,uBAAuB;AAExD,OAAO,SAASC,gBACdC,eAAwB,EACxBC,UAAuC;IAEvC,MAAMC,iBAAiBF,kBACnB;QACEN,kBAAkBO;QAClBZ,8BAA8BY;QAC9BX;QACAK,iBAAiBM;KAClB,GACD,EAAE;IAEN,OAAO;QACLE,QAAQ;QACRC,SAAS;YAAChB;SAAiB;QAC3BiB,QAAQ;eACHH;YACHJ,mBAAmBG;YACnBL;YACAC;eACIG,kBACA;gBACET;gBACAE;gBACAD,gCAAgCS;aACjC,GACD,EAAE;SACP;IACH;AACF"}

package/dist/presentation/routes/password/password-reset-confirm.d.ts

@@ -1,2 +1,3 @@
-export declare const passwordResetConfirmRoute: import("@shipfox/node-fastify").RouteDefinition;
+import type { WorkspacesInterModuleClient } from '@shipfox/api-workspaces-dto/inter-module';
+export declare function createPasswordResetConfirmRoute(workspaces: WorkspacesInterModuleClient): import("@shipfox/node-fastify").RouteDefinition;
 //# sourceMappingURL=password-reset-confirm.d.ts.map

package/dist/presentation/routes/password/password-reset-confirm.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"password-reset-confirm.d.ts","sourceRoot":"","sources":["../../../../src/presentation/routes/password/password-reset-confirm.ts"],"names":[],"mappings":"AAUA,eAAO,MAAM,yBAAyB,iDAwBpC,CAAC"}
+{"version":3,"file":"password-reset-confirm.d.ts","sourceRoot":"","sources":["../../../../src/presentation/routes/password/password-reset-confirm.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAC,2BAA2B,EAAC,MAAM,0CAA0C,CAAC;AAO1F,wBAAgB,+BAA+B,CAAC,UAAU,EAAE,2BAA2B,mDA0BtF"}

package/dist/presentation/routes/password/password-reset-confirm.js

@@ -4,33 +4,36 @@ import { confirmPasswordReset } from '#core/auth.js';
 import { TokenInvalidError } from '#core/errors.js';
 import { setRefreshTokenCookie } from '#presentation/auth/refresh-cookie.js';
 import { toAuthSessionDto } from '#presentation/dto/user.js';
-export const passwordResetConfirmRoute = defineRoute({
-    method: 'POST',
-    path: '/password-reset/confirm',
-    description: 'Set a new password using the link sent by email.',
-    schema: {
-        body: passwordResetConfirmBodySchema,
-        response: {
-            200: passwordResetConfirmResponseSchema
-        }
-    },
-    errorHandler: (error)=>{
-        if (error instanceof TokenInvalidError) {
-            throw new ClientError('Reset token is invalid or expired', 'token-invalid', {
-                status: 410
+export function createPasswordResetConfirmRoute(workspaces) {
+    return defineRoute({
+        method: 'POST',
+        path: '/password-reset/confirm',
+        description: 'Set a new password using the link sent by email.',
+        schema: {
+            body: passwordResetConfirmBodySchema,
+            response: {
+                200: passwordResetConfirmResponseSchema
+            }
+        },
+        errorHandler: (error)=>{
+            if (error instanceof TokenInvalidError) {
+                throw new ClientError('Reset token is invalid or expired', 'token-invalid', {
+                    status: 410
+                });
+            }
+            throw error;
+        },
+        handler: async (request, reply)=>{
+            const { token, new_password } = request.body;
+            const result = await confirmPasswordReset({
+                token,
+                newPassword: new_password,
+                workspaces
             });
+            setRefreshTokenCookie(reply, result.refreshToken);
+            return toAuthSessionDto(result);
         }
-        throw error;
-    },
-    handler: async (request, reply)=>{
-        const { token, new_password } = request.body;
-        const result = await confirmPasswordReset({
-            token,
-            newPassword: new_password
-        });
-        setRefreshTokenCookie(reply, result.refreshToken);
-        return toAuthSessionDto(result);
-    }
-});
+    });
+}
 
 //# sourceMappingURL=password-reset-confirm.js.map

package/dist/presentation/routes/password/password-reset-confirm.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../src/presentation/routes/password/password-reset-confirm.ts"],"sourcesContent":["import {\n  passwordResetConfirmBodySchema,\n  passwordResetConfirmResponseSchema,\n} from '@shipfox/api-auth-dto';\nimport {ClientError, defineRoute} from '@shipfox/node-fastify';\nimport {confirmPasswordReset} from '#core/auth.js';\nimport {TokenInvalidError} from '#core/errors.js';\nimport {setRefreshTokenCookie} from '#presentation/auth/refresh-cookie.js';\nimport {toAuthSessionDto} from '#presentation/dto/user.js';\n\nexport const passwordResetConfirmRoute = defineRoute({\n  method: 'POST',\n  path: '/password-reset/confirm',\n  description: 'Set a new password using the link sent by email.',\n  schema: {\n    body: passwordResetConfirmBodySchema,\n    response: {\n      200: passwordResetConfirmResponseSchema,\n    },\n  },\n  errorHandler: (error) => {\n    if (error instanceof TokenInvalidError) {\n      throw new ClientError('Reset token is invalid or expired', 'token-invalid', {status: 410});\n    }\n    throw error;\n  },\n  handler: async (request, reply) => {\n    const {token, new_password} = request.body;\n\n    const result = await confirmPasswordReset({token, newPassword: new_password});\n    setRefreshTokenCookie(reply, result.refreshToken);\n\n    return toAuthSessionDto(result);\n  },\n});\n"],"names":["passwordResetConfirmBodySchema","passwordResetConfirmResponseSchema","ClientError","defineRoute","confirmPasswordReset","TokenInvalidError","setRefreshTokenCookie","toAuthSessionDto","passwordResetConfirmRoute","method","path","description","schema","body","response","errorHandler","error","status","handler","request","reply","token","new_password","result","newPassword","refreshToken"],"mappings":"AAAA,SACEA,8BAA8B,EAC9BC,kCAAkC,QAC7B,wBAAwB;AAC/B,SAAQC,WAAW,EAAEC,WAAW,QAAO,wBAAwB;AAC/D,SAAQC,oBAAoB,QAAO,gBAAgB;AACnD,SAAQC,iBAAiB,QAAO,kBAAkB;AAClD,SAAQC,qBAAqB,QAAO,uCAAuC;AAC3E,SAAQC,gBAAgB,QAAO,4BAA4B;AAE3D,OAAO,MAAMC,4BAA4BL,YAAY;IACnDM,QAAQ;IACRC,MAAM;IACNC,aAAa;IACbC,QAAQ;QACNC,MAAMb;QACNc,UAAU;YACR,KAAKb;QACP;IACF;IACAc,cAAc,CAACC;QACb,IAAIA,iBAAiBX,mBAAmB;YACtC,MAAM,IAAIH,YAAY,qCAAqC,iBAAiB;gBAACe,QAAQ;YAAG;QAC1F;QACA,MAAMD;IACR;IACAE,SAAS,OAAOC,SAASC;QACvB,MAAM,EAACC,KAAK,EAAEC,YAAY,EAAC,GAAGH,QAAQN,IAAI;QAE1C,MAAMU,SAAS,MAAMnB,qBAAqB;YAACiB;YAAOG,aAAaF;QAAY;QAC3EhB,sBAAsBc,OAAOG,OAAOE,YAAY;QAEhD,OAAOlB,iBAAiBgB;IAC1B;AACF,GAAG"}
+{"version":3,"sources":["../../../../src/presentation/routes/password/password-reset-confirm.ts"],"sourcesContent":["import {\n  passwordResetConfirmBodySchema,\n  passwordResetConfirmResponseSchema,\n} from '@shipfox/api-auth-dto';\nimport type {WorkspacesInterModuleClient} from '@shipfox/api-workspaces-dto/inter-module';\nimport {ClientError, defineRoute} from '@shipfox/node-fastify';\nimport {confirmPasswordReset} from '#core/auth.js';\nimport {TokenInvalidError} from '#core/errors.js';\nimport {setRefreshTokenCookie} from '#presentation/auth/refresh-cookie.js';\nimport {toAuthSessionDto} from '#presentation/dto/user.js';\n\nexport function createPasswordResetConfirmRoute(workspaces: WorkspacesInterModuleClient) {\n  return defineRoute({\n    method: 'POST',\n    path: '/password-reset/confirm',\n    description: 'Set a new password using the link sent by email.',\n    schema: {\n      body: passwordResetConfirmBodySchema,\n      response: {\n        200: passwordResetConfirmResponseSchema,\n      },\n    },\n    errorHandler: (error) => {\n      if (error instanceof TokenInvalidError) {\n        throw new ClientError('Reset token is invalid or expired', 'token-invalid', {status: 410});\n      }\n      throw error;\n    },\n    handler: async (request, reply) => {\n      const {token, new_password} = request.body;\n\n      const result = await confirmPasswordReset({token, newPassword: new_password, workspaces});\n      setRefreshTokenCookie(reply, result.refreshToken);\n\n      return toAuthSessionDto(result);\n    },\n  });\n}\n"],"names":["passwordResetConfirmBodySchema","passwordResetConfirmResponseSchema","ClientError","defineRoute","confirmPasswordReset","TokenInvalidError","setRefreshTokenCookie","toAuthSessionDto","createPasswordResetConfirmRoute","workspaces","method","path","description","schema","body","response","errorHandler","error","status","handler","request","reply","token","new_password","result","newPassword","refreshToken"],"mappings":"AAAA,SACEA,8BAA8B,EAC9BC,kCAAkC,QAC7B,wBAAwB;AAE/B,SAAQC,WAAW,EAAEC,WAAW,QAAO,wBAAwB;AAC/D,SAAQC,oBAAoB,QAAO,gBAAgB;AACnD,SAAQC,iBAAiB,QAAO,kBAAkB;AAClD,SAAQC,qBAAqB,QAAO,uCAAuC;AAC3E,SAAQC,gBAAgB,QAAO,4BAA4B;AAE3D,OAAO,SAASC,gCAAgCC,UAAuC;IACrF,OAAON,YAAY;QACjBO,QAAQ;QACRC,MAAM;QACNC,aAAa;QACbC,QAAQ;YACNC,MAAMd;YACNe,UAAU;gBACR,KAAKd;YACP;QACF;QACAe,cAAc,CAACC;YACb,IAAIA,iBAAiBZ,mBAAmB;gBACtC,MAAM,IAAIH,YAAY,qCAAqC,iBAAiB;oBAACgB,QAAQ;gBAAG;YAC1F;YACA,MAAMD;QACR;QACAE,SAAS,OAAOC,SAASC;YACvB,MAAM,EAACC,KAAK,EAAEC,YAAY,EAAC,GAAGH,QAAQN,IAAI;YAE1C,MAAMU,SAAS,MAAMpB,qBAAqB;gBAACkB;gBAAOG,aAAaF;gBAAcd;YAAU;YACvFH,sBAAsBe,OAAOG,OAAOE,YAAY;YAEhD,OAAOnB,iBAAiBiB;QAC1B;IACF;AACF"}

package/dist/presentation/routes/registration/signup.d.ts

@@ -1,2 +1,3 @@
-export declare const signupRoute: import("@shipfox/node-fastify").RouteDefinition;
+import type { WorkspacesInterModuleClient } from '@shipfox/api-workspaces-dto/inter-module';
+export declare function createSignupRoute(workspaces: WorkspacesInterModuleClient): import("@shipfox/node-fastify").RouteDefinition;
 //# sourceMappingURL=signup.d.ts.map

package/dist/presentation/routes/registration/signup.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"signup.d.ts","sourceRoot":"","sources":["../../../../src/presentation/routes/registration/signup.ts"],"names":[],"mappings":"AAaA,eAAO,MAAM,WAAW,iDAmEtB,CAAC"}
+{"version":3,"file":"signup.d.ts","sourceRoot":"","sources":["../../../../src/presentation/routes/registration/signup.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAC,2BAA2B,EAAC,MAAM,0CAA0C,CAAC;AAa1F,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,2BAA2B,mDAoFxE"}

package/dist/presentation/routes/registration/signup.js

@@ -1,82 +1,100 @@
 import { signupBodySchema, signupResponseSchema } from '@shipfox/api-auth-dto';
-import { InvitationEmailMismatchError, TokenAlreadyUsedError, TokenExpiredError, TokenInvalidError as WorkspacesTokenInvalidError } from '@shipfox/api-workspaces';
+import { EmailChallengeError } from '@shipfox/api-email-challenges';
 import { ClientError, defineRoute } from '@shipfox/node-fastify';
 import { signup, signupWithInvitation } from '#core/auth.js';
-import { EmailTakenError } from '#core/errors.js';
+import { EmailTakenError, InvitationEmailMismatchError, TokenAlreadyUsedError, TokenExpiredError, TokenInvalidError } from '#core/errors.js';
 import { setRefreshTokenCookie } from '#presentation/auth/refresh-cookie.js';
 import { toUserDto } from '#presentation/dto/user.js';
-export const signupRoute = defineRoute({
-    method: 'POST',
-    path: '/signup',
-    description: 'Create a user account. Sends a verification email unless an invitation token is supplied.',
-    schema: {
-        body: signupBodySchema,
-        response: {
-            201: signupResponseSchema
-        }
-    },
-    errorHandler: (error)=>{
-        if (error instanceof EmailTakenError) {
-            throw new ClientError('Email already registered', 'email-taken', {
-                status: 409
-            });
-        }
-        if (error instanceof WorkspacesTokenInvalidError) {
-            throw new ClientError('Invitation token is invalid', 'invitation-token-invalid', {
-                status: 410
-            });
-        }
-        if (error instanceof TokenAlreadyUsedError) {
-            throw new ClientError('Invitation has already been accepted', 'invitation-token-used', {
-                status: 410
-            });
-        }
-        if (error instanceof TokenExpiredError) {
-            throw new ClientError('Invitation has expired', 'invitation-token-expired', {
-                status: 410
-            });
-        }
-        if (error instanceof InvitationEmailMismatchError) {
-            throw new ClientError('Signup email does not match the invitation', 'invitation-email-mismatch', {
-                status: 403
-            });
-        }
-        throw error;
-    },
-    handler: async (request, reply)=>{
-        const { email, password, name, invitation_token } = request.body;
-        if (invitation_token === undefined) {
-            const user = await signup({
+export function createSignupRoute(workspaces) {
+    return defineRoute({
+        method: 'POST',
+        path: '/signup',
+        description: 'Create a user account. Sends a verification email unless an invitation token is supplied.',
+        schema: {
+            body: signupBodySchema,
+            response: {
+                201: signupResponseSchema
+            }
+        },
+        errorHandler: (error)=>{
+            if (error instanceof EmailChallengeError) {
+                throw new ClientError(error.message, `email-challenge-${error.code}`, {
+                    status: error.code === 'limited' ? 429 : 400,
+                    ...error.retryAt ? {
+                        details: {
+                            retry_at: error.retryAt.toISOString()
+                        }
+                    } : {}
+                });
+            }
+            if (error instanceof EmailTakenError) {
+                throw new ClientError('Email already registered', 'email-taken', {
+                    status: 409
+                });
+            }
+            if (error instanceof TokenInvalidError) {
+                throw new ClientError('Invitation token is invalid', 'invitation-token-invalid', {
+                    status: 410
+                });
+            }
+            if (error instanceof TokenAlreadyUsedError) {
+                throw new ClientError('Invitation has already been accepted', 'invitation-token-used', {
+                    status: 410
+                });
+            }
+            if (error instanceof TokenExpiredError) {
+                throw new ClientError('Invitation has expired', 'invitation-token-expired', {
+                    status: 410
+                });
+            }
+            if (error instanceof InvitationEmailMismatchError) {
+                throw new ClientError('Signup email does not match the invitation', 'invitation-email-mismatch', {
+                    status: 403
+                });
+            }
+            throw error;
+        },
+        handler: async (request, reply)=>{
+            const { email, password, name, invitation_token } = request.body;
+            if (invitation_token === undefined) {
+                const result = await signup({
+                    email,
+                    password,
+                    name,
+                    sourceIp: request.ip
+                });
+                reply.code(201);
+                return {
+                    user: toUserDto(result),
+                    email_challenge: {
+                        id: result.emailChallenge.id,
+                        next_resend_available_at: result.emailChallenge.nextResendAvailableAt.toISOString()
+                    }
+                };
+            }
+            const result = await signupWithInvitation({
                 email,
                 password,
-                name
+                name,
+                invitationToken: invitation_token,
+                workspaces
             });
+            setRefreshTokenCookie(reply, result.refreshToken);
             reply.code(201);
             return {
-                user: toUserDto(user)
+                user: toUserDto(result.user),
+                token: result.token,
+                membership: result.membership ? {
+                    id: result.membership.id,
+                    user_id: result.membership.userId,
+                    workspace_id: result.membership.workspaceId
+                } : null,
+                ...result.acceptError ? {
+                    accept_error: result.acceptError
+                } : {}
             };
         }
-        const result = await signupWithInvitation({
-            email,
-            password,
-            name,
-            invitationToken: invitation_token
-        });
-        setRefreshTokenCookie(reply, result.refreshToken);
-        reply.code(201);
-        return {
-            user: toUserDto(result.user),
-            token: result.token,
-            membership: result.membership ? {
-                id: result.membership.id,
-                user_id: result.membership.userId,
-                workspace_id: result.membership.workspaceId
-            } : null,
-            ...result.acceptError ? {
-                accept_error: result.acceptError
-            } : {}
-        };
-    }
-});
+    });
+}
 
 //# sourceMappingURL=signup.js.map

package/dist/presentation/routes/registration/signup.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../src/presentation/routes/registration/signup.ts"],"sourcesContent":["import {signupBodySchema, signupResponseSchema} from '@shipfox/api-auth-dto';\nimport {\n  InvitationEmailMismatchError,\n  TokenAlreadyUsedError,\n  TokenExpiredError,\n  TokenInvalidError as WorkspacesTokenInvalidError,\n} from '@shipfox/api-workspaces';\nimport {ClientError, defineRoute} from '@shipfox/node-fastify';\nimport {signup, signupWithInvitation} from '#core/auth.js';\nimport {EmailTakenError} from '#core/errors.js';\nimport {setRefreshTokenCookie} from '#presentation/auth/refresh-cookie.js';\nimport {toUserDto} from '#presentation/dto/user.js';\n\nexport const signupRoute = defineRoute({\n  method: 'POST',\n  path: '/signup',\n  description:\n    'Create a user account. Sends a verification email unless an invitation token is supplied.',\n  schema: {\n    body: signupBodySchema,\n    response: {\n      201: signupResponseSchema,\n    },\n  },\n  errorHandler: (error) => {\n    if (error instanceof EmailTakenError) {\n      throw new ClientError('Email already registered', 'email-taken', {status: 409});\n    }\n    if (error instanceof WorkspacesTokenInvalidError) {\n      throw new ClientError('Invitation token is invalid', 'invitation-token-invalid', {\n        status: 410,\n      });\n    }\n    if (error instanceof TokenAlreadyUsedError) {\n      throw new ClientError('Invitation has already been accepted', 'invitation-token-used', {\n        status: 410,\n      });\n    }\n    if (error instanceof TokenExpiredError) {\n      throw new ClientError('Invitation has expired', 'invitation-token-expired', {status: 410});\n    }\n    if (error instanceof InvitationEmailMismatchError) {\n      throw new ClientError(\n        'Signup email does not match the invitation',\n        'invitation-email-mismatch',\n        {status: 403},\n      );\n    }\n    throw error;\n  },\n  handler: async (request, reply) => {\n    const {email, password, name, invitation_token} = request.body;\n\n    if (invitation_token === undefined) {\n      const user = await signup({email, password, name});\n      reply.code(201);\n      return {user: toUserDto(user)};\n    }\n\n    const result = await signupWithInvitation({\n      email,\n      password,\n      name,\n      invitationToken: invitation_token,\n    });\n    setRefreshTokenCookie(reply, result.refreshToken);\n    reply.code(201);\n    return {\n      user: toUserDto(result.user),\n      token: result.token,\n      membership: result.membership\n        ? {\n            id: result.membership.id,\n            user_id: result.membership.userId,\n            workspace_id: result.membership.workspaceId,\n          }\n        : null,\n      ...(result.acceptError ? {accept_error: result.acceptError} : {}),\n    };\n  },\n});\n"],"names":["signupBodySchema","signupResponseSchema","InvitationEmailMismatchError","TokenAlreadyUsedError","TokenExpiredError","TokenInvalidError","WorkspacesTokenInvalidError","ClientError","defineRoute","signup","signupWithInvitation","EmailTakenError","setRefreshTokenCookie","toUserDto","signupRoute","method","path","description","schema","body","response","errorHandler","error","status","handler","request","reply","email","password","name","invitation_token","undefined","user","code","result","invitationToken","refreshToken","token","membership","id","user_id","userId","workspace_id","workspaceId","acceptError","accept_error"],"mappings":"AAAA,SAAQA,gBAAgB,EAAEC,oBAAoB,QAAO,wBAAwB;AAC7E,SACEC,4BAA4B,EAC5BC,qBAAqB,EACrBC,iBAAiB,EACjBC,qBAAqBC,2BAA2B,QAC3C,0BAA0B;AACjC,SAAQC,WAAW,EAAEC,WAAW,QAAO,wBAAwB;AAC/D,SAAQC,MAAM,EAAEC,oBAAoB,QAAO,gBAAgB;AAC3D,SAAQC,eAAe,QAAO,kBAAkB;AAChD,SAAQC,qBAAqB,QAAO,uCAAuC;AAC3E,SAAQC,SAAS,QAAO,4BAA4B;AAEpD,OAAO,MAAMC,cAAcN,YAAY;IACrCO,QAAQ;IACRC,MAAM;IACNC,aACE;IACFC,QAAQ;QACNC,MAAMnB;QACNoB,UAAU;YACR,KAAKnB;QACP;IACF;IACAoB,cAAc,CAACC;QACb,IAAIA,iBAAiBX,iBAAiB;YACpC,MAAM,IAAIJ,YAAY,4BAA4B,eAAe;gBAACgB,QAAQ;YAAG;QAC/E;QACA,IAAID,iBAAiBhB,6BAA6B;YAChD,MAAM,IAAIC,YAAY,+BAA+B,4BAA4B;gBAC/EgB,QAAQ;YACV;QACF;QACA,IAAID,iBAAiBnB,uBAAuB;YAC1C,MAAM,IAAII,YAAY,wCAAwC,yBAAyB;gBACrFgB,QAAQ;YACV;QACF;QACA,IAAID,iBAAiBlB,mBAAmB;YACtC,MAAM,IAAIG,YAAY,0BAA0B,4BAA4B;gBAACgB,QAAQ;YAAG;QAC1F;QACA,IAAID,iBAAiBpB,8BAA8B;YACjD,MAAM,IAAIK,YACR,8CACA,6BACA;gBAACgB,QAAQ;YAAG;QAEhB;QACA,MAAMD;IACR;IACAE,SAAS,OAAOC,SAASC;QACvB,MAAM,EAACC,KAAK,EAAEC,QAAQ,EAAEC,IAAI,EAAEC,gBAAgB,EAAC,GAAGL,QAAQN,IAAI;QAE9D,IAAIW,qBAAqBC,WAAW;YAClC,MAAMC,OAAO,MAAMvB,OAAO;gBAACkB;gBAAOC;gBAAUC;YAAI;YAChDH,MAAMO,IAAI,CAAC;YACX,OAAO;gBAACD,MAAMnB,UAAUmB;YAAK;QAC/B;QAEA,MAAME,SAAS,MAAMxB,qBAAqB;YACxCiB;YACAC;YACAC;YACAM,iBAAiBL;QACnB;QACAlB,sBAAsBc,OAAOQ,OAAOE,YAAY;QAChDV,MAAMO,IAAI,CAAC;QACX,OAAO;YACLD,MAAMnB,UAAUqB,OAAOF,IAAI;YAC3BK,OAAOH,OAAOG,KAAK;YACnBC,YAAYJ,OAAOI,UAAU,GACzB;gBACEC,IAAIL,OAAOI,UAAU,CAACC,EAAE;gBACxBC,SAASN,OAAOI,UAAU,CAACG,MAAM;gBACjCC,cAAcR,OAAOI,UAAU,CAACK,WAAW;YAC7C,IACA;YACJ,GAAIT,OAAOU,WAAW,GAAG;gBAACC,cAAcX,OAAOU,WAAW;YAAA,IAAI,CAAC,CAAC;QAClE;IACF;AACF,GAAG"}
+{"version":3,"sources":["../../../../src/presentation/routes/registration/signup.ts"],"sourcesContent":["import {signupBodySchema, signupResponseSchema} from '@shipfox/api-auth-dto';\nimport {EmailChallengeError} from '@shipfox/api-email-challenges';\nimport type {WorkspacesInterModuleClient} from '@shipfox/api-workspaces-dto/inter-module';\nimport {ClientError, defineRoute} from '@shipfox/node-fastify';\nimport {signup, signupWithInvitation} from '#core/auth.js';\nimport {\n  EmailTakenError,\n  InvitationEmailMismatchError,\n  TokenAlreadyUsedError,\n  TokenExpiredError,\n  TokenInvalidError,\n} from '#core/errors.js';\nimport {setRefreshTokenCookie} from '#presentation/auth/refresh-cookie.js';\nimport {toUserDto} from '#presentation/dto/user.js';\n\nexport function createSignupRoute(workspaces: WorkspacesInterModuleClient) {\n  return defineRoute({\n    method: 'POST',\n    path: '/signup',\n    description:\n      'Create a user account. Sends a verification email unless an invitation token is supplied.',\n    schema: {\n      body: signupBodySchema,\n      response: {\n        201: signupResponseSchema,\n      },\n    },\n    errorHandler: (error) => {\n      if (error instanceof EmailChallengeError) {\n        throw new ClientError(error.message, `email-challenge-${error.code}`, {\n          status: error.code === 'limited' ? 429 : 400,\n          ...(error.retryAt ? {details: {retry_at: error.retryAt.toISOString()}} : {}),\n        });\n      }\n      if (error instanceof EmailTakenError) {\n        throw new ClientError('Email already registered', 'email-taken', {status: 409});\n      }\n      if (error instanceof TokenInvalidError) {\n        throw new ClientError('Invitation token is invalid', 'invitation-token-invalid', {\n          status: 410,\n        });\n      }\n      if (error instanceof TokenAlreadyUsedError) {\n        throw new ClientError('Invitation has already been accepted', 'invitation-token-used', {\n          status: 410,\n        });\n      }\n      if (error instanceof TokenExpiredError) {\n        throw new ClientError('Invitation has expired', 'invitation-token-expired', {\n          status: 410,\n        });\n      }\n      if (error instanceof InvitationEmailMismatchError) {\n        throw new ClientError(\n          'Signup email does not match the invitation',\n          'invitation-email-mismatch',\n          {status: 403},\n        );\n      }\n      throw error;\n    },\n    handler: async (request, reply) => {\n      const {email, password, name, invitation_token} = request.body;\n\n      if (invitation_token === undefined) {\n        const result = await signup({email, password, name, sourceIp: request.ip});\n        reply.code(201);\n        return {\n          user: toUserDto(result),\n          email_challenge: {\n            id: result.emailChallenge.id,\n            next_resend_available_at: result.emailChallenge.nextResendAvailableAt.toISOString(),\n          },\n        };\n      }\n\n      const result = await signupWithInvitation({\n        email,\n        password,\n        name,\n        invitationToken: invitation_token,\n        workspaces,\n      });\n      setRefreshTokenCookie(reply, result.refreshToken);\n      reply.code(201);\n      return {\n        user: toUserDto(result.user),\n        token: result.token,\n        membership: result.membership\n          ? {\n              id: result.membership.id,\n              user_id: result.membership.userId,\n              workspace_id: result.membership.workspaceId,\n            }\n          : null,\n        ...(result.acceptError ? {accept_error: result.acceptError} : {}),\n      };\n    },\n  });\n}\n"],"names":["signupBodySchema","signupResponseSchema","EmailChallengeError","ClientError","defineRoute","signup","signupWithInvitation","EmailTakenError","InvitationEmailMismatchError","TokenAlreadyUsedError","TokenExpiredError","TokenInvalidError","setRefreshTokenCookie","toUserDto","createSignupRoute","workspaces","method","path","description","schema","body","response","errorHandler","error","message","code","status","retryAt","details","retry_at","toISOString","handler","request","reply","email","password","name","invitation_token","undefined","result","sourceIp","ip","user","email_challenge","id","emailChallenge","next_resend_available_at","nextResendAvailableAt","invitationToken","refreshToken","token","membership","user_id","userId","workspace_id","workspaceId","acceptError","accept_error"],"mappings":"AAAA,SAAQA,gBAAgB,EAAEC,oBAAoB,QAAO,wBAAwB;AAC7E,SAAQC,mBAAmB,QAAO,gCAAgC;AAElE,SAAQC,WAAW,EAAEC,WAAW,QAAO,wBAAwB;AAC/D,SAAQC,MAAM,EAAEC,oBAAoB,QAAO,gBAAgB;AAC3D,SACEC,eAAe,EACfC,4BAA4B,EAC5BC,qBAAqB,EACrBC,iBAAiB,EACjBC,iBAAiB,QACZ,kBAAkB;AACzB,SAAQC,qBAAqB,QAAO,uCAAuC;AAC3E,SAAQC,SAAS,QAAO,4BAA4B;AAEpD,OAAO,SAASC,kBAAkBC,UAAuC;IACvE,OAAOX,YAAY;QACjBY,QAAQ;QACRC,MAAM;QACNC,aACE;QACFC,QAAQ;YACNC,MAAMpB;YACNqB,UAAU;gBACR,KAAKpB;YACP;QACF;QACAqB,cAAc,CAACC;YACb,IAAIA,iBAAiBrB,qBAAqB;gBACxC,MAAM,IAAIC,YAAYoB,MAAMC,OAAO,EAAE,CAAC,gBAAgB,EAAED,MAAME,IAAI,EAAE,EAAE;oBACpEC,QAAQH,MAAME,IAAI,KAAK,YAAY,MAAM;oBACzC,GAAIF,MAAMI,OAAO,GAAG;wBAACC,SAAS;4BAACC,UAAUN,MAAMI,OAAO,CAACG,WAAW;wBAAE;oBAAC,IAAI,CAAC,CAAC;gBAC7E;YACF;YACA,IAAIP,iBAAiBhB,iBAAiB;gBACpC,MAAM,IAAIJ,YAAY,4BAA4B,eAAe;oBAACuB,QAAQ;gBAAG;YAC/E;YACA,IAAIH,iBAAiBZ,mBAAmB;gBACtC,MAAM,IAAIR,YAAY,+BAA+B,4BAA4B;oBAC/EuB,QAAQ;gBACV;YACF;YACA,IAAIH,iBAAiBd,uBAAuB;gBAC1C,MAAM,IAAIN,YAAY,wCAAwC,yBAAyB;oBACrFuB,QAAQ;gBACV;YACF;YACA,IAAIH,iBAAiBb,mBAAmB;gBACtC,MAAM,IAAIP,YAAY,0BAA0B,4BAA4B;oBAC1EuB,QAAQ;gBACV;YACF;YACA,IAAIH,iBAAiBf,8BAA8B;gBACjD,MAAM,IAAIL,YACR,8CACA,6BACA;oBAACuB,QAAQ;gBAAG;YAEhB;YACA,MAAMH;QACR;QACAQ,SAAS,OAAOC,SAASC;YACvB,MAAM,EAACC,KAAK,EAAEC,QAAQ,EAAEC,IAAI,EAAEC,gBAAgB,EAAC,GAAGL,QAAQZ,IAAI;YAE9D,IAAIiB,qBAAqBC,WAAW;gBAClC,MAAMC,SAAS,MAAMlC,OAAO;oBAAC6B;oBAAOC;oBAAUC;oBAAMI,UAAUR,QAAQS,EAAE;gBAAA;gBACxER,MAAMR,IAAI,CAAC;gBACX,OAAO;oBACLiB,MAAM7B,UAAU0B;oBAChBI,iBAAiB;wBACfC,IAAIL,OAAOM,cAAc,CAACD,EAAE;wBAC5BE,0BAA0BP,OAAOM,cAAc,CAACE,qBAAqB,CAACjB,WAAW;oBACnF;gBACF;YACF;YAEA,MAAMS,SAAS,MAAMjC,qBAAqB;gBACxC4B;gBACAC;gBACAC;gBACAY,iBAAiBX;gBACjBtB;YACF;YACAH,sBAAsBqB,OAAOM,OAAOU,YAAY;YAChDhB,MAAMR,IAAI,CAAC;YACX,OAAO;gBACLiB,MAAM7B,UAAU0B,OAAOG,IAAI;gBAC3BQ,OAAOX,OAAOW,KAAK;gBACnBC,YAAYZ,OAAOY,UAAU,GACzB;oBACEP,IAAIL,OAAOY,UAAU,CAACP,EAAE;oBACxBQ,SAASb,OAAOY,UAAU,CAACE,MAAM;oBACjCC,cAAcf,OAAOY,UAAU,CAACI,WAAW;gBAC7C,IACA;gBACJ,GAAIhB,OAAOiB,WAAW,GAAG;oBAACC,cAAclB,OAAOiB,WAAW;gBAAA,IAAI,CAAC,CAAC;YAClE;QACF;IACF;AACF"}

package/dist/presentation/routes/session/login.d.ts

@@ -1,2 +1,3 @@
-export declare const loginRoute: import("@shipfox/node-fastify").RouteDefinition;
+import type { WorkspacesInterModuleClient } from '@shipfox/api-workspaces-dto/inter-module';
+export declare function createLoginRoute(workspaces: WorkspacesInterModuleClient): import("@shipfox/node-fastify").RouteDefinition;
 //# sourceMappingURL=login.d.ts.map

package/dist/presentation/routes/session/login.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"login.d.ts","sourceRoot":"","sources":["../../../../src/presentation/routes/session/login.ts"],"names":[],"mappings":"AAYA,eAAO,MAAM,UAAU,iDAqCrB,CAAC"}
+{"version":3,"file":"login.d.ts","sourceRoot":"","sources":["../../../../src/presentation/routes/session/login.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAC,2BAA2B,EAAC,MAAM,0CAA0C,CAAC;AAY1F,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,2BAA2B,mDAuCvE"}

package/dist/presentation/routes/session/login.js

@@ -5,44 +5,47 @@ import { AuthDependencyUnavailableError, EmailNotVerifiedError, InvalidCredentia
 import { setRefreshTokenCookie } from '#presentation/auth/refresh-cookie.js';
 import { toAuthSessionDto } from '#presentation/dto/user.js';
 import { createAuthRateLimitPreHandler } from '#presentation/routes/rate-limit.js';
-export const loginRoute = defineRoute({
-    method: 'POST',
-    path: '/login',
-    description: 'Sign in with an email address and password.',
-    schema: {
-        body: loginBodySchema,
-        response: {
-            200: loginResponseSchema
-        }
-    },
-    preHandler: createAuthRateLimitPreHandler('login'),
-    errorHandler: (error)=>{
-        if (error instanceof InvalidCredentialsError) {
-            throw new ClientError('Invalid credentials', 'invalid-credentials', {
-                status: 401
-            });
-        }
-        if (error instanceof EmailNotVerifiedError) {
-            throw new ClientError('Email not verified', 'email-not-verified', {
-                status: 403
-            });
-        }
-        if (error instanceof AuthDependencyUnavailableError) {
-            throw new ClientError('Authentication dependency unavailable', 'auth-dependency-unavailable', {
-                status: 503
+export function createLoginRoute(workspaces) {
+    return defineRoute({
+        method: 'POST',
+        path: '/login',
+        description: 'Sign in with an email address and password.',
+        schema: {
+            body: loginBodySchema,
+            response: {
+                200: loginResponseSchema
+            }
+        },
+        preHandler: createAuthRateLimitPreHandler('login'),
+        errorHandler: (error)=>{
+            if (error instanceof InvalidCredentialsError) {
+                throw new ClientError('Invalid credentials', 'invalid-credentials', {
+                    status: 401
+                });
+            }
+            if (error instanceof EmailNotVerifiedError) {
+                throw new ClientError('Email not verified', 'email-not-verified', {
+                    status: 403
+                });
+            }
+            if (error instanceof AuthDependencyUnavailableError) {
+                throw new ClientError('Authentication dependency unavailable', 'auth-dependency-unavailable', {
+                    status: 503
+                });
+            }
+            throw error;
+        },
+        handler: async (request, reply)=>{
+            const { email, password } = request.body;
+            const result = await login({
+                email,
+                password,
+                workspaces
             });
+            setRefreshTokenCookie(reply, result.refreshToken);
+            return toAuthSessionDto(result);
         }
-        throw error;
-    },
-    handler: async (request, reply)=>{
-        const { email, password } = request.body;
-        const result = await login({
-            email,
-            password
-        });
-        setRefreshTokenCookie(reply, result.refreshToken);
-        return toAuthSessionDto(result);
-    }
-});
+    });
+}
 
 //# sourceMappingURL=login.js.map

package/dist/presentation/routes/session/login.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../src/presentation/routes/session/login.ts"],"sourcesContent":["import {loginBodySchema, loginResponseSchema} from '@shipfox/api-auth-dto';\nimport {ClientError, defineRoute} from '@shipfox/node-fastify';\nimport {login} from '#core/auth.js';\nimport {\n  AuthDependencyUnavailableError,\n  EmailNotVerifiedError,\n  InvalidCredentialsError,\n} from '#core/errors.js';\nimport {setRefreshTokenCookie} from '#presentation/auth/refresh-cookie.js';\nimport {toAuthSessionDto} from '#presentation/dto/user.js';\nimport {createAuthRateLimitPreHandler} from '#presentation/routes/rate-limit.js';\n\nexport const loginRoute = defineRoute({\n  method: 'POST',\n  path: '/login',\n  description: 'Sign in with an email address and password.',\n  schema: {\n    body: loginBodySchema,\n    response: {\n      200: loginResponseSchema,\n    },\n  },\n  preHandler: createAuthRateLimitPreHandler('login'),\n  errorHandler: (error) => {\n    if (error instanceof InvalidCredentialsError) {\n      throw new ClientError('Invalid credentials', 'invalid-credentials', {status: 401});\n    }\n    if (error instanceof EmailNotVerifiedError) {\n      throw new ClientError('Email not verified', 'email-not-verified', {status: 403});\n    }\n    if (error instanceof AuthDependencyUnavailableError) {\n      throw new ClientError(\n        'Authentication dependency unavailable',\n        'auth-dependency-unavailable',\n        {\n          status: 503,\n        },\n      );\n    }\n    throw error;\n  },\n  handler: async (request, reply) => {\n    const {email, password} = request.body;\n\n    const result = await login({email, password});\n    setRefreshTokenCookie(reply, result.refreshToken);\n\n    return toAuthSessionDto(result);\n  },\n});\n"],"names":["loginBodySchema","loginResponseSchema","ClientError","defineRoute","login","AuthDependencyUnavailableError","EmailNotVerifiedError","InvalidCredentialsError","setRefreshTokenCookie","toAuthSessionDto","createAuthRateLimitPreHandler","loginRoute","method","path","description","schema","body","response","preHandler","errorHandler","error","status","handler","request","reply","email","password","result","refreshToken"],"mappings":"AAAA,SAAQA,eAAe,EAAEC,mBAAmB,QAAO,wBAAwB;AAC3E,SAAQC,WAAW,EAAEC,WAAW,QAAO,wBAAwB;AAC/D,SAAQC,KAAK,QAAO,gBAAgB;AACpC,SACEC,8BAA8B,EAC9BC,qBAAqB,EACrBC,uBAAuB,QAClB,kBAAkB;AACzB,SAAQC,qBAAqB,QAAO,uCAAuC;AAC3E,SAAQC,gBAAgB,QAAO,4BAA4B;AAC3D,SAAQC,6BAA6B,QAAO,qCAAqC;AAEjF,OAAO,MAAMC,aAAaR,YAAY;IACpCS,QAAQ;IACRC,MAAM;IACNC,aAAa;IACbC,QAAQ;QACNC,MAAMhB;QACNiB,UAAU;YACR,KAAKhB;QACP;IACF;IACAiB,YAAYR,8BAA8B;IAC1CS,cAAc,CAACC;QACb,IAAIA,iBAAiBb,yBAAyB;YAC5C,MAAM,IAAIL,YAAY,uBAAuB,uBAAuB;gBAACmB,QAAQ;YAAG;QAClF;QACA,IAAID,iBAAiBd,uBAAuB;YAC1C,MAAM,IAAIJ,YAAY,sBAAsB,sBAAsB;gBAACmB,QAAQ;YAAG;QAChF;QACA,IAAID,iBAAiBf,gCAAgC;YACnD,MAAM,IAAIH,YACR,yCACA,+BACA;gBACEmB,QAAQ;YACV;QAEJ;QACA,MAAMD;IACR;IACAE,SAAS,OAAOC,SAASC;QACvB,MAAM,EAACC,KAAK,EAAEC,QAAQ,EAAC,GAAGH,QAAQP,IAAI;QAEtC,MAAMW,SAAS,MAAMvB,MAAM;YAACqB;YAAOC;QAAQ;QAC3ClB,sBAAsBgB,OAAOG,OAAOC,YAAY;QAEhD,OAAOnB,iBAAiBkB;IAC1B;AACF,GAAG"}
+{"version":3,"sources":["../../../../src/presentation/routes/session/login.ts"],"sourcesContent":["import {loginBodySchema, loginResponseSchema} from '@shipfox/api-auth-dto';\nimport type {WorkspacesInterModuleClient} from '@shipfox/api-workspaces-dto/inter-module';\nimport {ClientError, defineRoute} from '@shipfox/node-fastify';\nimport {login} from '#core/auth.js';\nimport {\n  AuthDependencyUnavailableError,\n  EmailNotVerifiedError,\n  InvalidCredentialsError,\n} from '#core/errors.js';\nimport {setRefreshTokenCookie} from '#presentation/auth/refresh-cookie.js';\nimport {toAuthSessionDto} from '#presentation/dto/user.js';\nimport {createAuthRateLimitPreHandler} from '#presentation/routes/rate-limit.js';\n\nexport function createLoginRoute(workspaces: WorkspacesInterModuleClient) {\n  return defineRoute({\n    method: 'POST',\n    path: '/login',\n    description: 'Sign in with an email address and password.',\n    schema: {\n      body: loginBodySchema,\n      response: {\n        200: loginResponseSchema,\n      },\n    },\n    preHandler: createAuthRateLimitPreHandler('login'),\n    errorHandler: (error) => {\n      if (error instanceof InvalidCredentialsError) {\n        throw new ClientError('Invalid credentials', 'invalid-credentials', {status: 401});\n      }\n      if (error instanceof EmailNotVerifiedError) {\n        throw new ClientError('Email not verified', 'email-not-verified', {status: 403});\n      }\n      if (error instanceof AuthDependencyUnavailableError) {\n        throw new ClientError(\n          'Authentication dependency unavailable',\n          'auth-dependency-unavailable',\n          {\n            status: 503,\n          },\n        );\n      }\n      throw error;\n    },\n    handler: async (request, reply) => {\n      const {email, password} = request.body;\n\n      const result = await login({email, password, workspaces});\n      setRefreshTokenCookie(reply, result.refreshToken);\n\n      return toAuthSessionDto(result);\n    },\n  });\n}\n"],"names":["loginBodySchema","loginResponseSchema","ClientError","defineRoute","login","AuthDependencyUnavailableError","EmailNotVerifiedError","InvalidCredentialsError","setRefreshTokenCookie","toAuthSessionDto","createAuthRateLimitPreHandler","createLoginRoute","workspaces","method","path","description","schema","body","response","preHandler","errorHandler","error","status","handler","request","reply","email","password","result","refreshToken"],"mappings":"AAAA,SAAQA,eAAe,EAAEC,mBAAmB,QAAO,wBAAwB;AAE3E,SAAQC,WAAW,EAAEC,WAAW,QAAO,wBAAwB;AAC/D,SAAQC,KAAK,QAAO,gBAAgB;AACpC,SACEC,8BAA8B,EAC9BC,qBAAqB,EACrBC,uBAAuB,QAClB,kBAAkB;AACzB,SAAQC,qBAAqB,QAAO,uCAAuC;AAC3E,SAAQC,gBAAgB,QAAO,4BAA4B;AAC3D,SAAQC,6BAA6B,QAAO,qCAAqC;AAEjF,OAAO,SAASC,iBAAiBC,UAAuC;IACtE,OAAOT,YAAY;QACjBU,QAAQ;QACRC,MAAM;QACNC,aAAa;QACbC,QAAQ;YACNC,MAAMjB;YACNkB,UAAU;gBACR,KAAKjB;YACP;QACF;QACAkB,YAAYT,8BAA8B;QAC1CU,cAAc,CAACC;YACb,IAAIA,iBAAiBd,yBAAyB;gBAC5C,MAAM,IAAIL,YAAY,uBAAuB,uBAAuB;oBAACoB,QAAQ;gBAAG;YAClF;YACA,IAAID,iBAAiBf,uBAAuB;gBAC1C,MAAM,IAAIJ,YAAY,sBAAsB,sBAAsB;oBAACoB,QAAQ;gBAAG;YAChF;YACA,IAAID,iBAAiBhB,gCAAgC;gBACnD,MAAM,IAAIH,YACR,yCACA,+BACA;oBACEoB,QAAQ;gBACV;YAEJ;YACA,MAAMD;QACR;QACAE,SAAS,OAAOC,SAASC;YACvB,MAAM,EAACC,KAAK,EAAEC,QAAQ,EAAC,GAAGH,QAAQP,IAAI;YAEtC,MAAMW,SAAS,MAAMxB,MAAM;gBAACsB;gBAAOC;gBAAUf;YAAU;YACvDJ,sBAAsBiB,OAAOG,OAAOC,YAAY;YAEhD,OAAOpB,iBAAiBmB;QAC1B;IACF;AACF"}

package/dist/presentation/routes/session/refresh.d.ts

@@ -1,2 +1,3 @@
-export declare const refreshRoute: import("@shipfox/node-fastify").RouteDefinition;
+import type { WorkspacesInterModuleClient } from '@shipfox/api-workspaces-dto/inter-module';
+export declare function createRefreshRoute(workspaces: WorkspacesInterModuleClient): import("@shipfox/node-fastify").RouteDefinition;
 //# sourceMappingURL=refresh.d.ts.map

package/dist/presentation/routes/session/refresh.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"refresh.d.ts","sourceRoot":"","sources":["../../../../src/presentation/routes/session/refresh.ts"],"names":[],"mappings":"AAWA,eAAO,MAAM,YAAY,iDA0CvB,CAAC"}
+{"version":3,"file":"refresh.d.ts","sourceRoot":"","sources":["../../../../src/presentation/routes/session/refresh.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAC,2BAA2B,EAAC,MAAM,0CAA0C,CAAC;AAW1F,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,2BAA2B,mDA4CzE"}

package/dist/presentation/routes/session/refresh.js

@@ -4,46 +4,49 @@ import { refreshAccessToken } from '#core/auth.js';
 import { AuthDependencyUnavailableError, TokenInvalidError } from '#core/errors.js';
 import { clearRefreshTokenCookie, getRefreshTokenCookie, setRefreshTokenCookie } from '#presentation/auth/refresh-cookie.js';
 import { toAuthSessionDto } from '#presentation/dto/user.js';
-export const refreshRoute = defineRoute({
-    method: 'POST',
-    path: '/refresh',
-    description: 'Refresh the current browser session access token.',
-    schema: {
-        response: {
-            200: refreshResponseSchema
-        }
-    },
-    errorHandler: (error, _request, reply)=>{
-        if (error instanceof TokenInvalidError) {
-            clearRefreshTokenCookie(reply);
-            throw new ClientError('Refresh token is invalid or expired', 'unauthorized', {
-                status: 401
-            });
-        }
-        if (error instanceof AuthDependencyUnavailableError) {
-            throw new ClientError('Authentication dependency unavailable', 'auth-dependency-unavailable', {
-                status: 503
+export function createRefreshRoute(workspaces) {
+    return defineRoute({
+        method: 'POST',
+        path: '/refresh',
+        description: 'Refresh the current browser session access token.',
+        schema: {
+            response: {
+                200: refreshResponseSchema
+            }
+        },
+        errorHandler: (error, _request, reply)=>{
+            if (error instanceof TokenInvalidError) {
+                clearRefreshTokenCookie(reply);
+                throw new ClientError('Refresh token is invalid or expired', 'unauthorized', {
+                    status: 401
+                });
+            }
+            if (error instanceof AuthDependencyUnavailableError) {
+                throw new ClientError('Authentication dependency unavailable', 'auth-dependency-unavailable', {
+                    status: 503
+                });
+            }
+            throw error;
+        },
+        handler: async (request, reply)=>{
+            const refreshToken = getRefreshTokenCookie(request);
+            if (!refreshToken) {
+                clearRefreshTokenCookie(reply);
+                throw new ClientError('Refresh token is invalid or expired', 'unauthorized', {
+                    status: 401
+                });
+            }
+            const result = await refreshAccessToken({
+                refreshToken,
+                workspaces
             });
+            // Absent on a grace-window hit: keep the existing cookie rather than overwrite it.
+            if (result.refreshToken) {
+                setRefreshTokenCookie(reply, result.refreshToken);
+            }
+            return toAuthSessionDto(result);
         }
-        throw error;
-    },
-    handler: async (request, reply)=>{
-        const refreshToken = getRefreshTokenCookie(request);
-        if (!refreshToken) {
-            clearRefreshTokenCookie(reply);
-            throw new ClientError('Refresh token is invalid or expired', 'unauthorized', {
-                status: 401
-            });
-        }
-        const result = await refreshAccessToken({
-            refreshToken
-        });
-        // Absent on a grace-window hit: keep the existing cookie rather than overwrite it.
-        if (result.refreshToken) {
-            setRefreshTokenCookie(reply, result.refreshToken);
-        }
-        return toAuthSessionDto(result);
-    }
-});
+    });
+}
 
 //# sourceMappingURL=refresh.js.map

package/dist/presentation/routes/session/refresh.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../src/presentation/routes/session/refresh.ts"],"sourcesContent":["import {refreshResponseSchema} from '@shipfox/api-auth-dto';\nimport {ClientError, defineRoute} from '@shipfox/node-fastify';\nimport {refreshAccessToken} from '#core/auth.js';\nimport {AuthDependencyUnavailableError, TokenInvalidError} from '#core/errors.js';\nimport {\n  clearRefreshTokenCookie,\n  getRefreshTokenCookie,\n  setRefreshTokenCookie,\n} from '#presentation/auth/refresh-cookie.js';\nimport {toAuthSessionDto} from '#presentation/dto/user.js';\n\nexport const refreshRoute = defineRoute({\n  method: 'POST',\n  path: '/refresh',\n  description: 'Refresh the current browser session access token.',\n  schema: {\n    response: {\n      200: refreshResponseSchema,\n    },\n  },\n  errorHandler: (error, _request, reply) => {\n    if (error instanceof TokenInvalidError) {\n      clearRefreshTokenCookie(reply);\n      throw new ClientError('Refresh token is invalid or expired', 'unauthorized', {\n        status: 401,\n      });\n    }\n    if (error instanceof AuthDependencyUnavailableError) {\n      throw new ClientError(\n        'Authentication dependency unavailable',\n        'auth-dependency-unavailable',\n        {\n          status: 503,\n        },\n      );\n    }\n    throw error;\n  },\n  handler: async (request, reply) => {\n    const refreshToken = getRefreshTokenCookie(request);\n    if (!refreshToken) {\n      clearRefreshTokenCookie(reply);\n      throw new ClientError('Refresh token is invalid or expired', 'unauthorized', {status: 401});\n    }\n\n    const result = await refreshAccessToken({refreshToken});\n\n    // Absent on a grace-window hit: keep the existing cookie rather than overwrite it.\n    if (result.refreshToken) {\n      setRefreshTokenCookie(reply, result.refreshToken);\n    }\n    return toAuthSessionDto(result);\n  },\n});\n"],"names":["refreshResponseSchema","ClientError","defineRoute","refreshAccessToken","AuthDependencyUnavailableError","TokenInvalidError","clearRefreshTokenCookie","getRefreshTokenCookie","setRefreshTokenCookie","toAuthSessionDto","refreshRoute","method","path","description","schema","response","errorHandler","error","_request","reply","status","handler","request","refreshToken","result"],"mappings":"AAAA,SAAQA,qBAAqB,QAAO,wBAAwB;AAC5D,SAAQC,WAAW,EAAEC,WAAW,QAAO,wBAAwB;AAC/D,SAAQC,kBAAkB,QAAO,gBAAgB;AACjD,SAAQC,8BAA8B,EAAEC,iBAAiB,QAAO,kBAAkB;AAClF,SACEC,uBAAuB,EACvBC,qBAAqB,EACrBC,qBAAqB,QAChB,uCAAuC;AAC9C,SAAQC,gBAAgB,QAAO,4BAA4B;AAE3D,OAAO,MAAMC,eAAeR,YAAY;IACtCS,QAAQ;IACRC,MAAM;IACNC,aAAa;IACbC,QAAQ;QACNC,UAAU;YACR,KAAKf;QACP;IACF;IACAgB,cAAc,CAACC,OAAOC,UAAUC;QAC9B,IAAIF,iBAAiBZ,mBAAmB;YACtCC,wBAAwBa;YACxB,MAAM,IAAIlB,YAAY,uCAAuC,gBAAgB;gBAC3EmB,QAAQ;YACV;QACF;QACA,IAAIH,iBAAiBb,gCAAgC;YACnD,MAAM,IAAIH,YACR,yCACA,+BACA;gBACEmB,QAAQ;YACV;QAEJ;QACA,MAAMH;IACR;IACAI,SAAS,OAAOC,SAASH;QACvB,MAAMI,eAAehB,sBAAsBe;QAC3C,IAAI,CAACC,cAAc;YACjBjB,wBAAwBa;YACxB,MAAM,IAAIlB,YAAY,uCAAuC,gBAAgB;gBAACmB,QAAQ;YAAG;QAC3F;QAEA,MAAMI,SAAS,MAAMrB,mBAAmB;YAACoB;QAAY;QAErD,mFAAmF;QACnF,IAAIC,OAAOD,YAAY,EAAE;YACvBf,sBAAsBW,OAAOK,OAAOD,YAAY;QAClD;QACA,OAAOd,iBAAiBe;IAC1B;AACF,GAAG"}
+{"version":3,"sources":["../../../../src/presentation/routes/session/refresh.ts"],"sourcesContent":["import {refreshResponseSchema} from '@shipfox/api-auth-dto';\nimport type {WorkspacesInterModuleClient} from '@shipfox/api-workspaces-dto/inter-module';\nimport {ClientError, defineRoute} from '@shipfox/node-fastify';\nimport {refreshAccessToken} from '#core/auth.js';\nimport {AuthDependencyUnavailableError, TokenInvalidError} from '#core/errors.js';\nimport {\n  clearRefreshTokenCookie,\n  getRefreshTokenCookie,\n  setRefreshTokenCookie,\n} from '#presentation/auth/refresh-cookie.js';\nimport {toAuthSessionDto} from '#presentation/dto/user.js';\n\nexport function createRefreshRoute(workspaces: WorkspacesInterModuleClient) {\n  return defineRoute({\n    method: 'POST',\n    path: '/refresh',\n    description: 'Refresh the current browser session access token.',\n    schema: {\n      response: {\n        200: refreshResponseSchema,\n      },\n    },\n    errorHandler: (error, _request, reply) => {\n      if (error instanceof TokenInvalidError) {\n        clearRefreshTokenCookie(reply);\n        throw new ClientError('Refresh token is invalid or expired', 'unauthorized', {\n          status: 401,\n        });\n      }\n      if (error instanceof AuthDependencyUnavailableError) {\n        throw new ClientError(\n          'Authentication dependency unavailable',\n          'auth-dependency-unavailable',\n          {\n            status: 503,\n          },\n        );\n      }\n      throw error;\n    },\n    handler: async (request, reply) => {\n      const refreshToken = getRefreshTokenCookie(request);\n      if (!refreshToken) {\n        clearRefreshTokenCookie(reply);\n        throw new ClientError('Refresh token is invalid or expired', 'unauthorized', {status: 401});\n      }\n\n      const result = await refreshAccessToken({refreshToken, workspaces});\n\n      // Absent on a grace-window hit: keep the existing cookie rather than overwrite it.\n      if (result.refreshToken) {\n        setRefreshTokenCookie(reply, result.refreshToken);\n      }\n      return toAuthSessionDto(result);\n    },\n  });\n}\n"],"names":["refreshResponseSchema","ClientError","defineRoute","refreshAccessToken","AuthDependencyUnavailableError","TokenInvalidError","clearRefreshTokenCookie","getRefreshTokenCookie","setRefreshTokenCookie","toAuthSessionDto","createRefreshRoute","workspaces","method","path","description","schema","response","errorHandler","error","_request","reply","status","handler","request","refreshToken","result"],"mappings":"AAAA,SAAQA,qBAAqB,QAAO,wBAAwB;AAE5D,SAAQC,WAAW,EAAEC,WAAW,QAAO,wBAAwB;AAC/D,SAAQC,kBAAkB,QAAO,gBAAgB;AACjD,SAAQC,8BAA8B,EAAEC,iBAAiB,QAAO,kBAAkB;AAClF,SACEC,uBAAuB,EACvBC,qBAAqB,EACrBC,qBAAqB,QAChB,uCAAuC;AAC9C,SAAQC,gBAAgB,QAAO,4BAA4B;AAE3D,OAAO,SAASC,mBAAmBC,UAAuC;IACxE,OAAOT,YAAY;QACjBU,QAAQ;QACRC,MAAM;QACNC,aAAa;QACbC,QAAQ;YACNC,UAAU;gBACR,KAAKhB;YACP;QACF;QACAiB,cAAc,CAACC,OAAOC,UAAUC;YAC9B,IAAIF,iBAAiBb,mBAAmB;gBACtCC,wBAAwBc;gBACxB,MAAM,IAAInB,YAAY,uCAAuC,gBAAgB;oBAC3EoB,QAAQ;gBACV;YACF;YACA,IAAIH,iBAAiBd,gCAAgC;gBACnD,MAAM,IAAIH,YACR,yCACA,+BACA;oBACEoB,QAAQ;gBACV;YAEJ;YACA,MAAMH;QACR;QACAI,SAAS,OAAOC,SAASH;YACvB,MAAMI,eAAejB,sBAAsBgB;YAC3C,IAAI,CAACC,cAAc;gBACjBlB,wBAAwBc;gBACxB,MAAM,IAAInB,YAAY,uCAAuC,gBAAgB;oBAACoB,QAAQ;gBAAG;YAC3F;YAEA,MAAMI,SAAS,MAAMtB,mBAAmB;gBAACqB;gBAAcb;YAAU;YAEjE,mFAAmF;YACnF,IAAIc,OAAOD,YAAY,EAAE;gBACvBhB,sBAAsBY,OAAOK,OAAOD,YAAY;YAClD;YACA,OAAOf,iBAAiBgB;QAC1B;IACF;AACF"}

package/dist/presentation/subscribers/index.d.ts

@@ -1,3 +1,2 @@
-export { onEmailVerificationSendRequested } from './on-email-verification-send-requested.js';
 export { onPasswordResetSendRequested } from './on-password-reset-send-requested.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/presentation/subscribers/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/presentation/subscribers/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,gCAAgC,EAAC,MAAM,2CAA2C,CAAC;AAC3F,OAAO,EAAC,4BAA4B,EAAC,MAAM,uCAAuC,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/presentation/subscribers/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,4BAA4B,EAAC,MAAM,uCAAuC,CAAC"}

package/dist/presentation/subscribers/index.js

@@ -1,4 +1,3 @@
-export { onEmailVerificationSendRequested } from './on-email-verification-send-requested.js';
 export { onPasswordResetSendRequested } from './on-password-reset-send-requested.js';
 
 //# sourceMappingURL=index.js.map

package/dist/presentation/subscribers/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/presentation/subscribers/index.ts"],"sourcesContent":["export {onEmailVerificationSendRequested} from './on-email-verification-send-requested.js';\nexport {onPasswordResetSendRequested} from './on-password-reset-send-requested.js';\n"],"names":["onEmailVerificationSendRequested","onPasswordResetSendRequested"],"mappings":"AAAA,SAAQA,gCAAgC,QAAO,4CAA4C;AAC3F,SAAQC,4BAA4B,QAAO,wCAAwC"}
+{"version":3,"sources":["../../../src/presentation/subscribers/index.ts"],"sourcesContent":["export {onPasswordResetSendRequested} from './on-password-reset-send-requested.js';\n"],"names":["onPasswordResetSendRequested"],"mappings":"AAAA,SAAQA,4BAA4B,QAAO,wCAAwC"}