@spfn/auth 0.2.0-beta.52 → 0.2.0-beta.54

package/dist/{authenticate-eucncHxN.d.ts → authenticate-D11PAt8l.d.ts}

@@ -40,6 +40,7 @@ interface AuthSession {
     email: string | null;
     emailVerified: boolean;
     phoneVerified: boolean;
+    hasPassword: boolean;
     role: Role;
     permissions: Permission[];
 }
@@ -182,7 +183,7 @@ interface LogoutParams {
 }
 interface ChangePasswordParams {
     userId: number;
-    currentPassword: string;
+    currentPassword?: string;
     newPassword: string;
     passwordHash?: string;
 }
@@ -558,7 +559,7 @@ declare const mainAuthRouter: _spfn_core_route.Router<{
     }, RotateKeyResult>;
     changePassword: _spfn_core_route.RouteDef<{
         body: _sinclair_typebox.TObject<{
-            currentPassword: _sinclair_typebox.TString;
+            currentPassword: _sinclair_typebox.TOptional<_sinclair_typebox.TString>;
             newPassword: _sinclair_typebox.TString;
         }>;
     }, {}, void>;
@@ -580,6 +581,7 @@ declare const mainAuthRouter: _spfn_core_route.Router<{
         email: string | null;
         emailVerified: boolean;
         phoneVerified: boolean;
+        hasPassword: boolean;
     }>;
     issueOneTimeToken: _spfn_core_route.RouteDef<{}, {}, IssueOneTimeTokenResult>;
     oauthGoogleStart: _spfn_core_route.RouteDef<{

package/dist/index.d.ts

@@ -1,6 +1,6 @@
 import * as _spfn_core_nextjs from '@spfn/core/nextjs';
-import { R as RoleConfig, P as PermissionConfig, C as CheckAccountExistsResult, S as SendVerificationCodeResult, a as RegisterResult, L as LoginResult, b as RotateKeyResult, I as IssueOneTimeTokenResult, O as OAuthStartResult, U as UserProfile, c as ProfileInfo, m as mainAuthRouter } from './authenticate-eucncHxN.js';
-export { l as AuthInitOptions, A as AuthSession, d as INVITATION_STATUSES, o as InvitationStatus, K as KEY_ALGORITHM, n as KeyAlgorithmType, j as PERMISSION_CATEGORIES, k as PermissionCategory, f as SOCIAL_PROVIDERS, q as SocialProvider, e as USER_STATUSES, p as UserStatus, i as VERIFICATION_PURPOSES, h as VERIFICATION_TARGET_TYPES, g as VerificationPurpose, V as VerificationTargetType } from './authenticate-eucncHxN.js';
+import { R as RoleConfig, P as PermissionConfig, C as CheckAccountExistsResult, S as SendVerificationCodeResult, a as RegisterResult, L as LoginResult, b as RotateKeyResult, I as IssueOneTimeTokenResult, O as OAuthStartResult, U as UserProfile, c as ProfileInfo, m as mainAuthRouter } from './authenticate-D11PAt8l.js';
+export { l as AuthInitOptions, A as AuthSession, d as INVITATION_STATUSES, o as InvitationStatus, K as KEY_ALGORITHM, n as KeyAlgorithmType, j as PERMISSION_CATEGORIES, k as PermissionCategory, f as SOCIAL_PROVIDERS, q as SocialProvider, e as USER_STATUSES, p as UserStatus, i as VERIFICATION_PURPOSES, h as VERIFICATION_TARGET_TYPES, g as VerificationPurpose, V as VerificationTargetType } from './authenticate-D11PAt8l.js';
 import * as _spfn_core_route from '@spfn/core/route';
 import { HttpMethod } from '@spfn/core/route';
 import * as _sinclair_typebox from '@sinclair/typebox';
@@ -154,7 +154,7 @@ declare const authApi: _spfn_core_nextjs.Client<_spfn_core_route.Router<{
     }, RotateKeyResult>;
     changePassword: _spfn_core_route.RouteDef<{
         body: _sinclair_typebox.TObject<{
-            currentPassword: _sinclair_typebox.TString;
+            currentPassword: _sinclair_typebox.TOptional<_sinclair_typebox.TString>;
             newPassword: _sinclair_typebox.TString;
         }>;
     }, {}, void>;
@@ -176,6 +176,7 @@ declare const authApi: _spfn_core_nextjs.Client<_spfn_core_route.Router<{
         email: string | null;
         emailVerified: boolean;
         phoneVerified: boolean;
+        hasPassword: boolean;
     }>;
     issueOneTimeToken: _spfn_core_route.RouteDef<{}, {}, IssueOneTimeTokenResult>;
     oauthGoogleStart: _spfn_core_route.RouteDef<{

package/dist/nextjs/server.d.ts

@@ -160,6 +160,7 @@ declare function getAuthSessionData(): Promise<{
     email: string | null;
     emailVerified: boolean;
     phoneVerified: boolean;
+    hasPassword: boolean;
 } | null>;
 /**
  * Get user role

package/dist/server.d.ts

@@ -1,5 +1,5 @@
-import { l as AuthInitOptions, n as KeyAlgorithmType, o as InvitationStatus, g as VerificationPurpose, k as PermissionCategory, q as SocialProvider, r as AuthContext } from './authenticate-eucncHxN.js';
-export { D as ChangePasswordParams, x as CheckAccountExistsParams, C as CheckAccountExistsResult, a9 as EmailSchema, d as INVITATION_STATUSES, I as IssueOneTimeTokenResult, K as KEY_ALGORITHM, z as LoginParams, L as LoginResult, B as LogoutParams, a5 as OAuthCallbackParams, a6 as OAuthCallbackResult, a4 as OAuthStartParams, O as OAuthStartResult, ab as PasswordSchema, aa as PhoneSchema, y as RegisterParams, T as RegisterPublicKeyParams, a as RegisterResult, X as RevokeKeyParams, W as RotateKeyParams, b as RotateKeyResult, f as SOCIAL_PROVIDERS, G as SendVerificationCodeParams, S as SendVerificationCodeResult, ac as TargetTypeSchema, e as USER_STATUSES, p as UserStatus, i as VERIFICATION_PURPOSES, h as VERIFICATION_TARGET_TYPES, ad as VerificationPurposeSchema, V as VerificationTargetType, H as VerifyCodeParams, J as VerifyCodeResult, m as authRouter, a7 as authenticate, a0 as buildOAuthErrorUrl, w as changePasswordService, s as checkAccountExistsService, a2 as getEnabledOAuthProviders, a3 as getGoogleAccessToken, a1 as isOAuthProviderEnabled, Y as issueOneTimeTokenService, u as loginService, v as logoutService, $ as oauthCallbackService, _ as oauthStartService, a8 as optionalAuth, M as registerPublicKeyService, t as registerService, Q as revokeKeyService, N as rotateKeyService, E as sendVerificationCodeService, F as verifyCodeService, Z as verifyOneTimeTokenService } from './authenticate-eucncHxN.js';
+import { l as AuthInitOptions, n as KeyAlgorithmType, o as InvitationStatus, g as VerificationPurpose, k as PermissionCategory, q as SocialProvider, r as AuthContext } from './authenticate-D11PAt8l.js';
+export { D as ChangePasswordParams, x as CheckAccountExistsParams, C as CheckAccountExistsResult, a9 as EmailSchema, d as INVITATION_STATUSES, I as IssueOneTimeTokenResult, K as KEY_ALGORITHM, z as LoginParams, L as LoginResult, B as LogoutParams, a5 as OAuthCallbackParams, a6 as OAuthCallbackResult, a4 as OAuthStartParams, O as OAuthStartResult, ab as PasswordSchema, aa as PhoneSchema, y as RegisterParams, T as RegisterPublicKeyParams, a as RegisterResult, X as RevokeKeyParams, W as RotateKeyParams, b as RotateKeyResult, f as SOCIAL_PROVIDERS, G as SendVerificationCodeParams, S as SendVerificationCodeResult, ac as TargetTypeSchema, e as USER_STATUSES, p as UserStatus, i as VERIFICATION_PURPOSES, h as VERIFICATION_TARGET_TYPES, ad as VerificationPurposeSchema, V as VerificationTargetType, H as VerifyCodeParams, J as VerifyCodeResult, m as authRouter, a7 as authenticate, a0 as buildOAuthErrorUrl, w as changePasswordService, s as checkAccountExistsService, a2 as getEnabledOAuthProviders, a3 as getGoogleAccessToken, a1 as isOAuthProviderEnabled, Y as issueOneTimeTokenService, u as loginService, v as logoutService, $ as oauthCallbackService, _ as oauthStartService, a8 as optionalAuth, M as registerPublicKeyService, t as registerService, Q as revokeKeyService, N as rotateKeyService, E as sendVerificationCodeService, F as verifyCodeService, Z as verifyOneTimeTokenService } from './authenticate-D11PAt8l.js';
 import * as drizzle_orm_pg_core from 'drizzle-orm/pg-core';
 import { UserProfile as UserProfile$1, ProfileInfo } from '@spfn/auth';
 import { BaseRepository } from '@spfn/core/db';
@@ -1337,6 +1337,7 @@ declare function getAuthSessionService(userId: string | number | bigint): Promis
     email: string | null;
     emailVerified: boolean;
     phoneVerified: boolean;
+    hasPassword: boolean;
 }>;
 
 /**
@@ -3191,6 +3192,7 @@ declare class UsersRepository extends BaseRepository {
         username: string | null;
         isEmailVerified: boolean;
         isPhoneVerified: boolean;
+        hasPassword: boolean;
     }>;
     /**
      * Full user data 조회 (user profile용)

package/dist/server.js

@@ -5533,7 +5533,8 @@ var init_users_repository = __esm({
           email: users.email,
           username: users.username,
           emailVerifiedAt: users.emailVerifiedAt,
-          phoneVerifiedAt: users.phoneVerifiedAt
+          phoneVerifiedAt: users.phoneVerifiedAt,
+          passwordHash: users.passwordHash
         }).from(users).where(eq(users.id, userId)).limit(1).then((rows) => rows[0] ?? null);
         if (!user) {
           throw new NotFoundError({ message: "[@spfn/auth] User not found" });
@@ -5544,7 +5545,8 @@ var init_users_repository = __esm({
           email: user.email,
           username: user.username,
           isEmailVerified: !!user.emailVerifiedAt,
-          isPhoneVerified: !!user.phoneVerifiedAt
+          isPhoneVerified: !!user.phoneVerifiedAt,
+          hasPassword: !!user.passwordHash
         };
       }
       /**
@@ -7406,12 +7408,14 @@ async function changePasswordService(params) {
     }
     passwordHash = user.passwordHash;
   }
-  if (!passwordHash) {
-    throw new ValidationError2({ message: "No password set for this account" });
-  }
-  const isValid = await verifyPassword(currentPassword, passwordHash);
-  if (!isValid) {
-    throw new InvalidCredentialsError({ message: "Current password is incorrect" });
+  if (passwordHash) {
+    if (!currentPassword) {
+      throw new ValidationError2({ message: "Current password is required" });
+    }
+    const isValid = await verifyPassword(currentPassword, passwordHash);
+    if (!isValid) {
+      throw new InvalidCredentialsError({ message: "Current password is incorrect" });
+    }
   }
   const newPasswordHash = await hashPassword(newPassword);
   await usersRepository.updatePassword(userId, newPasswordHash, true);
@@ -7895,6 +7899,7 @@ async function getAuthSessionService(userId) {
     email: user.email,
     emailVerified: user.isEmailVerified,
     phoneVerified: user.isPhoneVerified,
+    hasPassword: user.hasPassword,
     ...roleAndPerms
   };
 }
@@ -8483,10 +8488,10 @@ var rotateKey = route.post("/_auth/keys/rotate").interceptor({
 });
 var changePassword = route.put("/_auth/password").input({
   body: Type.Object({
-    currentPassword: Type.String({
+    currentPassword: Type.Optional(Type.String({
       minLength: 1,
-      description: "Current password for verification"
-    }),
+      description: "Current password for verification (required when changing existing password)"
+    })),
     newPassword: PasswordSchema
   })
 }).handler(async (c) => {