@stacksjs/auth 0.70.261 → 0.70.263

package/dist/register.d.ts

@@ -1,3 +1,30 @@
 import type { AuthToken } from './token';
 import type { NewUser } from '@stacksjs/orm';
-export declare function register(credentials: NewUser): Promise<{ token: AuthToken }>;
+/**
+ * Register a user and open a full session for them.
+ *
+ * Returns the same triple `Auth.loginUsingId()` does. It used to return only
+ * the access token, because it called `Auth.createToken()` — a wrapper that
+ * mints a refresh token and an expiry and then throws both away. With
+ * `config.auth.tokenExpiry` defaulting to one hour, that made every freshly
+ * registered account unable to refresh: a client that correctly stores the pair
+ * and exchanges it at `/auth/refresh` worked for everyone except the user who
+ * had just signed up, who was logged out an hour into their first session
+ * (stacksjs/stacks#2212).
+ *
+ * Additive, so `const { token } = await register(...)` is unaffected.
+ */
+export declare function register(credentials: NewUser): Promise<RegistrationResult>;
+/**
+ * What a successful registration hands back: a complete session, matching
+ * `Auth.loginUsingId()`.
+ *
+ * Named rather than inlined on the signature so consumers can type the result,
+ * and because pickier's unused-parameter analysis mis-reads a multi-line return
+ * annotation and flags `credentials` as unused.
+ */
+export declare interface RegistrationResult {
+  token: AuthToken
+  refreshToken?: string
+  expiresIn?: number
+}

package/dist/register.js

@@ -1 +1 @@
-import{config}from"@stacksjs/config";import{db}from"@stacksjs/database";import{HttpError}from"@stacksjs/error-handling";import{User}from"@stacksjs/orm";import{makeHash}from"@stacksjs/security";import{Auth}from"./authentication";import{isUniqueViolation}from"./rbac-store-bqb";function duplicateEmailError(){if(config.auth?.registration?.preventEnumeration)return new HttpError(422,"Registration could not be completed. Please check your details and try again.");return new HttpError(409,"Email already exists")}const EMAIL_RE=/^[^\s@]+@[^\s@]+\.[^\s@]+$/;export async function register(credentials){const{email,password,name}=credentials;if(typeof email!=="string"||email.length>254||!EMAIL_RE.test(email))throw new HttpError(422,"Email address is invalid");if(typeof password!=="string"||password.length<8)throw new HttpError(422,"Password must be at least 8 characters");const hashedPassword=await makeHash(password,{algorithm:"bcrypt"}),userId=await db.transaction(async(rawTrx)=>{const trx=rawTrx;if(await trx.selectFrom("users").where("email","=",email).selectAll().executeTakeFirst())throw duplicateEmailError();try{await trx.insertInto("users").values({email,password:hashedPassword,name}).execute()}catch(err){if(isUniqueViolation(err))throw duplicateEmailError();throw err}const created=await trx.selectFrom("users").where("email","=",email).selectAll().executeTakeFirst();if(!created)throw Error("Failed to retrieve created user");return Number(created.id)}),user=await User.find(userId);if(!user)throw Error("Failed to retrieve created user");return{token:await Auth.createToken(user,"user-auth-token")}}
+import{config}from"@stacksjs/config";import{db}from"@stacksjs/database";import{HttpError}from"@stacksjs/error-handling";import{User}from"@stacksjs/orm";import{makeHash}from"@stacksjs/security";import{Auth}from"./authentication";import{isUniqueViolation}from"./rbac-store-bqb";function duplicateEmailError(){if(config.auth?.registration?.preventEnumeration)return new HttpError(422,"Registration could not be completed. Please check your details and try again.");return new HttpError(409,"Email already exists")}const EMAIL_RE=/^[^\s@]+@[^\s@]+\.[^\s@]+$/;export async function register(credentials){const{email,password,name}=credentials;if(typeof email!=="string"||email.length>254||!EMAIL_RE.test(email))throw new HttpError(422,"Email address is invalid");if(typeof password!=="string"||password.length<8)throw new HttpError(422,"Password must be at least 8 characters");const hashedPassword=await makeHash(password,{algorithm:"bcrypt"}),userId=await db.transaction(async(rawTrx)=>{const trx=rawTrx;if(await trx.selectFrom("users").where("email","=",email).selectAll().executeTakeFirst())throw duplicateEmailError();try{await trx.insertInto("users").values({email,password:hashedPassword,name}).execute()}catch(err){if(isUniqueViolation(err))throw duplicateEmailError();throw err}const created=await trx.selectFrom("users").where("email","=",email).selectAll().executeTakeFirst();if(!created)throw Error("Failed to retrieve created user");return Number(created.id)}),user=await User.find(userId);if(!user)throw Error("Failed to retrieve created user");const{plainTextToken,refreshToken,expiresIn}=await Auth.createTokenForUser(user,{name:"user-auth-token"});return{token:plainTextToken,refreshToken,expiresIn}}

package/package.json

@@ -2,7 +2,7 @@
   "name": "@stacksjs/auth",
   "type": "module",
   "sideEffects": false,
-  "version": "0.70.261",
+  "version": "0.70.263",
   "description": "A more simplistic way to authenticate.",
   "author": "Chris Breuer",
   "contributors": [
@@ -61,7 +61,7 @@
   },
   "devDependencies": {
     "better-dx": "^0.2.17",
-    "@stacksjs/error-handling": "0.70.261",
-    "@stacksjs/router": "0.70.261"
+    "@stacksjs/error-handling": "0.70.263",
+    "@stacksjs/router": "0.70.263"
   }
 }