@stacksjs/auth 0.70.23 → 0.70.26

package/dist/authentication.d.ts

@@ -1,150 +0,0 @@
-import type { UserModel, UsersTable } from '../../../orm/src/models/User';
-
-declare interface Credentials {
-  password: string | undefined
-  email: string | undefined
-  [key: string]: string | undefined
-}
-declare type AuthToken = `${number}:${number}:${string}`
-
-const authConfig = { username: 'email', password: 'password' }
-
-let authUser: UserModel | null = null
-
-export async function attempt(credentials: Credentials): Promise<boolean> {
-  let hashCheck = false
-
-  const user = await User.where(authConfig.username as keyof UsersTable, credentials[authConfig.username]).first()
-  const authPass = credentials[authConfig.password]
-
-  if (typeof authPass === 'string' && user?.password)
-    hashCheck = await verifyHash(authPass, user.password, 'bcrypt')
-
-  if (hashCheck && user) {
-    authUser = user
-    return true
-  }
-
-  return false
-}
-
-export async function createAccessToken(user: UserModel, teamId?: number): Promise<AuthToken> {
-  const token = randomBytes(40).toString('hex')
-
-  const accessToken = await AccessToken.create({
-    team_id: teamId,
-    token,
-    name: 'auth-token',
-    expires_at: new Date(Date.now() + 1000 * 60 * 60 * 24 * 30), 
-  })
-
-  if (!accessToken?.id)
-    throw new HttpError(500, 'Failed to create access token')
-
-  return `${accessToken.id}:${teamId || 0}:${token}`
-}
-
-export async function login(credentials: Credentials): Promise<{ token: AuthToken } | null> {
-  const isValid = await attempt(credentials)
-
-  if (!isValid || !authUser)
-    return null
-
-  const teams = await authUser.userTeams()
-  const primaryTeam = teams[0]
-
-  const token = await createAccessToken(authUser, primaryTeam?.id)
-  return { token }
-}
-
-export async function validateToken(token: string): Promise<boolean> {
-  const parts = token.split(':')
-
-  if (parts.length !== 3)
-    return false
-
-  const [tokenId, teamId, plainToken] = parts
-
-  const accessToken = await AccessToken.where('id', Number(tokenId))
-    .where('token', plainToken)
-    .where('team_id', Number(teamId))
-    .first()
-
-  if (!accessToken)
-    return false
-
-  if (accessToken.expires_at && new Date(accessToken.expires_at) < new Date())
-    return false
-
-  await AccessToken.where('id', accessToken.id).update({
-    last_used_at: new Date(),
-  })
-
-  return true
-}
-
-export async function getUserFromToken(token: string): Promise<UserModel | undefined> {
-  const parts = token.split(':')
-
-  if (parts.length !== 3)
-    return undefined
-
-  const [tokenId] = parts
-
-  const accessToken = await AccessToken.where('id', Number(tokenId)).first()
-
-  if (!accessToken?.user_id)
-    return undefined
-
-  return await User.find(accessToken.user_id)
-}
-
-export async function team(): Promise<TeamModel | undefined> {
-  if (authUser) {
-    const teams = await authUser.userTeams()
-    return teams[0]
-  }
-
-  const bearerToken = request.bearerToken()
-
-  if (!bearerToken)
-    return undefined
-
-  const parts = bearerToken.split(':')
-
-  if (parts.length !== 3)
-    throw new HttpError(401, 'Invalid bearer token format')
-
-  const tokenId = Number(parts[0])
-  const teamId = parts[1]
-  const plainString = parts[2]
-
-  const accessToken = await AccessToken.where('id', Number(tokenId))
-    .where('token', plainString)
-    .first()
-
-  if (Number(teamId) !== Number(accessToken?.team_id))
-    return undefined
-
-  return await Team.find(Number(accessToken?.team_id))
-}
-
-export async function revokeToken(token: string): Promise<void> {
-  const parts = token.split(':')
-
-  if (parts.length !== 3)
-    return
-
-  const [tokenId] = parts
-
-  await AccessToken.where('id', Number(tokenId)).delete()
-}
-
-export async function logout(): Promise<void> {
-  const bearerToken = request.bearerToken()
-
-  if (bearerToken)
-    await revokeToken(bearerToken)
-
-  authUser = null
-}

package/dist/authenticator.d.ts

@@ -1,6 +0,0 @@
-export declare function generateTwoFactorSecret(): string;
-export declare type Token = string
-export type Secret = string
-export declare function generateTwoFactorToken(): Token;
-export declare function verifyTwoFactorCode(token: Token, secret: Secret): boolean;
-export declare function generateQrCode(): void;

package/dist/index.d.ts

@@ -1,3 +0,0 @@
-export * from './authentication'
-export * from './authenticator'
-export * from './passkey'

package/dist/passkey.d.ts

@@ -1,64 +0,0 @@
-import type { Insertable } from '@stacksjs/database';
-import type { UserModel } from '../../../orm/src/models/User';
-import type { VerifiedRegistrationResponse } from '@simplewebauthn/server';
-
-export declare type * from '@simplewebauthn/types'
-
-type PasskeyInsertable = Insertable<PasskeyAttribute>
-
-export interface PasskeyAttribute {
-  id: string
-  cred_public_key: string
-  user_id: number
-  webauthn_user_id: string
-  counter: number
-  credential_type: string
-  device_type: string
-  backup_eligible: boolean
-  backup_status: boolean
-  transports?: string
-  created_at?: Date
-  last_used_at: string
-}
-
-export async function getUserPasskeys(userId: number): Promise<PasskeyAttribute[]> {
-  return await db.selectFrom('passkeys').selectAll().where('user_id', '=', userId).execute()
-}
-
-export async function getUserPasskey(userId: number, passkeyId: string): Promise<PasskeyAttribute | undefined> {
-  return await db
-    .selectFrom('passkeys')
-    .selectAll()
-    .where('id', '=', passkeyId)
-    .where('user_id', '=', userId)
-    .executeTakeFirst()
-}
-
-export async function setCurrentRegistrationOptions(
-  user: UserModel,
-  verified: VerifiedRegistrationResponse,
-): Promise<void> {
-  const passkeyData: PasskeyInsertable = {
-    id: verified.registrationInfo?.credential.id || '',
-    cred_public_key: JSON.stringify(verified.registrationInfo?.credential.publicKey), 
-    user_id: user.id as number,
-    webauthn_user_id: user.email || '',
-    counter: verified.registrationInfo?.credential.counter || 0,
-    credential_type: verified.registrationInfo?.credentialType || '',
-    device_type: verified.registrationInfo?.credentialDeviceType || '',
-    backup_eligible: false,
-    backup_status: verified.registrationInfo?.credentialBackedUp || false,
-    transports: JSON.stringify(['internal']),
-    last_used_at: formatDateTime(),
-  }
-
-  await db.insertInto('passkeys').values(passkeyData).executeTakeFirstOrThrow()
-}
-declare function formatDateTime(): string;
-
-export {
-  generateAuthenticationOptions,
-  generateRegistrationOptions,
-  verifyAuthenticationResponse,
-  verifyRegistrationResponse,
-} from '@simplewebauthn/server'