@spfn/auth 0.2.0-beta.87 → 0.2.0-beta.89

package/dist/index.js

@@ -116,12 +116,54 @@ var InvalidVerificationTokenError = class extends ValidationError {
     this.name = "InvalidVerificationTokenError";
   }
 };
+var KeyIdAlreadyRegisteredError = class extends ConflictError {
+  constructor(data = {}) {
+    super({
+      message: data.message || "This keyId is already registered. Generate a new keyId and retry.",
+      details: data.details
+    });
+    this.name = "KeyIdAlreadyRegisteredError";
+  }
+};
 var InvalidKeyFingerprintError = class extends ValidationError {
   constructor(data = {}) {
     super({ message: data.message || "Invalid key fingerprint", details: data.details });
     this.name = "InvalidKeyFingerprintError";
   }
 };
+var KeyNotFoundError = class extends NotFoundError {
+  constructor(data = {}) {
+    super({ message: data.message || "Key not found", details: data.details });
+    this.name = "KeyNotFoundError";
+  }
+};
+var NonceKeyBindingError = class extends ValidationError {
+  constructor(data = {}) {
+    super({
+      message: data.message || "nonce must be the fingerprint of the submitted public key",
+      details: data.details
+    });
+    this.name = "NonceKeyBindingError";
+  }
+};
+var NativeSignInUnsupportedError = class extends ValidationError {
+  constructor(data = {}) {
+    super({
+      message: data.message || "This provider does not support native id_token sign-in.",
+      details: data.details
+    });
+    this.name = "NativeSignInUnsupportedError";
+  }
+};
+var UnverifiedEmailLinkError = class extends ValidationError {
+  constructor(data = {}) {
+    super({
+      message: data.message || "Cannot link to existing account with unverified email. Please verify your email with the provider first.",
+      details: data.details
+    });
+    this.name = "UnverifiedEmailLinkError";
+  }
+};
 var VerificationTokenPurposeMismatchError = class extends ValidationError {
   constructor(data = {}) {
     const expected = data.expected || "unknown";
@@ -201,6 +243,11 @@ authErrorRegistry.append([
   InvalidVerificationCodeError,
   InvalidVerificationTokenError,
   InvalidKeyFingerprintError,
+  NonceKeyBindingError,
+  NativeSignInUnsupportedError,
+  UnverifiedEmailLinkError,
+  KeyNotFoundError,
+  KeyIdAlreadyRegisteredError,
   VerificationTokenPurposeMismatchError,
   VerificationTokenTargetMismatchError,
   InsufficientPermissionsError,
@@ -215,6 +262,9 @@ var routeMap = {
   login: { method: "POST", path: "/_auth/login" },
   logout: { method: "POST", path: "/_auth/logout" },
   rotateKey: { method: "POST", path: "/_auth/keys/rotate" },
+  listKeys: { method: "POST", path: "/_auth/keys/list" },
+  revokeKey: { method: "POST", path: "/_auth/keys/revoke" },
+  revokeAllKeys: { method: "POST", path: "/_auth/keys/revoke-all" },
   changePassword: { method: "PUT", path: "/_auth/password" },
   getAuthSession: { method: "GET", path: "/_auth/session" },
   issueOneTimeToken: { method: "POST", path: "/_auth/tokens" },
@@ -384,6 +434,8 @@ var BUILTIN_ROLE_PERMISSIONS = {
 
 // src/server/types.ts
 var KEY_ALGORITHM = ["ES256", "RS256"];
+var KEY_PLATFORM = ["ios", "android", "web", "desktop"];
+var KEY_DEVICE_NAME_MAX_LENGTH = 64;
 var INVITATION_STATUSES = ["pending", "accepted", "expired", "cancelled"];
 var USER_STATUSES = ["active", "inactive", "suspended", "pending_deletion", "deleted"];
 var SOCIAL_PROVIDERS = ["google", "apple", "github", "kakao", "naver", "superself"];
@@ -3012,6 +3064,14 @@ var PhoneSchema = Type.String({
   pattern: PHONE_PATTERN2,
   description: "Phone number in E.164 format (e.g., +821012345678)"
 });
+var DeviceNameSchema = Type.String({
+  maxLength: KEY_DEVICE_NAME_MAX_LENGTH,
+  description: `Device label shown in the key list (max ${KEY_DEVICE_NAME_MAX_LENGTH} chars)`
+});
+var PlatformSchema = Type.Union(
+  KEY_PLATFORM.map((platform) => Type.Literal(platform)),
+  { description: "Platform the key lives on" }
+);
 var PasswordSchema = Type.String({
   minLength: 8,
   maxLength: 72,