@spfn/auth 0.2.0-beta.32 → 0.2.0-beta.33

package/dist/server.js

@@ -6822,7 +6822,7 @@ init_types();
 
 // src/server/services/auth.service.ts
 init_repositories();
-import { ValidationError } from "@spfn/core/errors";
+import { ValidationError as ValidationError2 } from "@spfn/core/errors";
 import {
   InvalidCredentialsError,
   AccountDisabledError,
@@ -7047,6 +7047,7 @@ async function revokeKeyService(params) {
 
 // src/server/services/user.service.ts
 init_repositories();
+import { ValidationError } from "@spfn/core/errors";
 import { ReservedUsernameError, UsernameAlreadyTakenError } from "@spfn/auth/errors";
 import { env as env4 } from "@spfn/auth/config";
 async function getUserByIdService(userId) {
@@ -7076,7 +7077,24 @@ function getReservedUsernames() {
 function isReservedUsername(username) {
   return getReservedUsernames().has(username.toLowerCase());
 }
+function validateUsernameLength(username) {
+  const min = env4.SPFN_AUTH_USERNAME_MIN_LENGTH ?? 3;
+  const max = env4.SPFN_AUTH_USERNAME_MAX_LENGTH ?? 30;
+  if (username.length < min) {
+    throw new ValidationError({
+      message: `Username must be at least ${min} characters`,
+      details: { minLength: min, actual: username.length }
+    });
+  }
+  if (username.length > max) {
+    throw new ValidationError({
+      message: `Username must be at most ${max} characters`,
+      details: { maxLength: max, actual: username.length }
+    });
+  }
+}
 async function checkUsernameAvailableService(username) {
+  validateUsernameLength(username);
   if (isReservedUsername(username)) {
     return false;
   }
@@ -7086,6 +7104,7 @@ async function checkUsernameAvailableService(username) {
 async function updateUsernameService(userId, username) {
   const userIdNum = typeof userId === "string" ? Number(userId) : Number(userId);
   if (username !== null) {
+    validateUsernameLength(username);
     if (isReservedUsername(username)) {
       throw new ReservedUsernameError({ username });
     }
@@ -7139,7 +7158,7 @@ async function checkAccountExistsService(params) {
     identifierType = "phone";
     user = await usersRepository.findByPhone(phone);
   } else {
-    throw new ValidationError({ message: "Either email or phone must be provided" });
+    throw new ValidationError2({ message: "Either email or phone must be provided" });
   }
   return {
     exists: !!user,
@@ -7207,7 +7226,7 @@ async function loginService(params) {
   const { email, phone, password, publicKey, keyId, fingerprint, oldKeyId, algorithm } = params;
   const user = await usersRepository.findByEmailOrPhone(email, phone);
   if (!email && !phone) {
-    throw new ValidationError({ message: "Either email or phone must be provided" });
+    throw new ValidationError2({ message: "Either email or phone must be provided" });
   }
   if (!user || !user.passwordHash) {
     throw new InvalidCredentialsError();
@@ -7264,12 +7283,12 @@ async function changePasswordService(params) {
   } else {
     const user = await usersRepository.findById(userId);
     if (!user) {
-      throw new ValidationError({ message: "User not found" });
+      throw new ValidationError2({ message: "User not found" });
     }
     passwordHash = user.passwordHash;
   }
   if (!passwordHash) {
-    throw new ValidationError({ message: "No password set for this account" });
+    throw new ValidationError2({ message: "No password set for this account" });
   }
   const isValid = await verifyPassword(currentPassword, passwordHash);
   if (!isValid) {
@@ -7780,7 +7799,7 @@ async function updateUserProfileService(userId, params) {
 // src/server/services/oauth.service.ts
 init_repositories();
 import { env as env8 } from "@spfn/auth/config";
-import { ValidationError as ValidationError2 } from "@spfn/core/errors";
+import { ValidationError as ValidationError3 } from "@spfn/core/errors";
 
 // src/server/lib/oauth/google.ts
 import { env as env6 } from "@spfn/auth/config";
@@ -7922,7 +7941,7 @@ async function oauthStartService(params) {
   const { provider, returnUrl, publicKey, keyId, fingerprint, algorithm } = params;
   if (provider === "google") {
     if (!isGoogleOAuthEnabled()) {
-      throw new ValidationError2({
+      throw new ValidationError3({
         message: "Google OAuth is not configured. Set SPFN_AUTH_GOOGLE_CLIENT_ID and SPFN_AUTH_GOOGLE_CLIENT_SECRET."
       });
     }
@@ -7937,7 +7956,7 @@ async function oauthStartService(params) {
     const authUrl = getGoogleAuthUrl(state);
     return { authUrl };
   }
-  throw new ValidationError2({
+  throw new ValidationError3({
     message: `Unsupported OAuth provider: ${provider}`
   });
 }
@@ -7945,14 +7964,14 @@ async function oauthCallbackService(params) {
   const { provider, code, state } = params;
   const stateData = await verifyOAuthState(state);
   if (stateData.provider !== provider) {
-    throw new ValidationError2({
+    throw new ValidationError3({
       message: "OAuth state provider mismatch"
     });
   }
   if (provider === "google") {
     return handleGoogleCallback(code, stateData);
   }
-  throw new ValidationError2({
+  throw new ValidationError3({
     message: `Unsupported OAuth provider: ${provider}`
   });
 }
@@ -8019,7 +8038,7 @@ async function createOrLinkUser(googleUser, tokens) {
   let isNewUser = false;
   if (existingUser) {
     if (!googleUser.verified_email) {
-      throw new ValidationError2({
+      throw new ValidationError3({
         message: "Cannot link to existing account with unverified email. Please verify your email with Google first."
       });
     }
@@ -8096,7 +8115,7 @@ var TOKEN_EXPIRY_BUFFER_MS = 5 * 60 * 1e3;
 async function getGoogleAccessToken(userId) {
   const account = await socialAccountsRepository.findByUserIdAndProvider(userId, "google");
   if (!account) {
-    throw new ValidationError2({
+    throw new ValidationError3({
       message: "No Google account linked. User must sign in with Google first."
     });
   }
@@ -8105,7 +8124,7 @@ async function getGoogleAccessToken(userId) {
     return account.accessToken;
   }
   if (!account.refreshToken) {
-    throw new ValidationError2({
+    throw new ValidationError3({
       message: "Google refresh token not available. User must re-authenticate with Google."
     });
   }