@technomoron/api-server-base 2.0.0-beta.11 → 2.0.0-beta.14

package/dist/cjs/api-server-base.cjs

@@ -11,6 +11,9 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.ApiServer = exports.ApiError = exports.ApiModule = void 0;
 const node_crypto_1 = require("node:crypto");
+const node_fs_1 = __importDefault(require("node:fs"));
+const node_module_1 = require("node:module");
+const node_path_1 = __importDefault(require("node:path"));
 const cookie_parser_1 = __importDefault(require("cookie-parser"));
 const cors_1 = __importDefault(require("cors"));
 const express_1 = __importDefault(require("express"));
@@ -340,6 +343,8 @@ function fillConfig(config) {
         origins: config.origins ?? [],
         debug: config.debug ?? false,
         apiBasePath: config.apiBasePath ?? '/api',
+        swaggerEnabled: config.swaggerEnabled ?? false,
+        swaggerPath: config.swaggerPath ?? '',
         accessSecret: config.accessSecret ?? '',
         refreshSecret: config.refreshSecret ?? '',
         cookieDomain: config.cookieDomain ?? '.somewhere-over-the-rainbow.com',
@@ -391,6 +396,7 @@ class ApiServer {
         }
         this.middlewares();
         this.installPingHandler();
+        this.installSwaggerHandler();
         // addSwaggerUi(this.app);
         this.installApiNotFoundHandler();
     }
@@ -630,6 +636,58 @@ class ApiServer {
             res.status(200).json({ success: true, code: 200, message: 'Success', data: payload, errors: {} });
         });
     }
+    loadSwaggerSpec() {
+        const candidates = [node_path_1.default.resolve(process.cwd(), 'docs/swagger/openapi.json')];
+        if (typeof __dirname === 'string') {
+            candidates.push(node_path_1.default.resolve(__dirname, '../../docs/swagger/openapi.json'));
+        }
+        try {
+            const require = (0, node_module_1.createRequire)(node_path_1.default.join(process.cwd(), 'package.json'));
+            const entry = require.resolve('@technomoron/api-server-base');
+            const packageRoot = node_path_1.default.resolve(node_path_1.default.dirname(entry), '..', '..');
+            candidates.push(node_path_1.default.join(packageRoot, 'docs/swagger/openapi.json'));
+        }
+        catch {
+            // Ignore resolution failures; fall back to any existing candidate.
+        }
+        for (const candidate of candidates) {
+            if (!node_fs_1.default.existsSync(candidate)) {
+                continue;
+            }
+            try {
+                const raw = node_fs_1.default.readFileSync(candidate, 'utf8');
+                return JSON.parse(raw);
+            }
+            catch {
+                return null;
+            }
+        }
+        return null;
+    }
+    installSwaggerHandler() {
+        const rawPath = typeof this.config.swaggerPath === 'string' ? this.config.swaggerPath.trim() : '';
+        const enabled = Boolean(this.config.swaggerEnabled) || rawPath.length > 0;
+        if (!enabled) {
+            return;
+        }
+        const base = this.apiBasePath === '/' ? '' : this.apiBasePath;
+        const resolved = rawPath.length > 0 ? rawPath : `${base}/swagger`;
+        const path = resolved.startsWith('/') ? resolved : `/${resolved}`;
+        const spec = this.loadSwaggerSpec();
+        this.app.get(path, (_req, res) => {
+            if (!spec) {
+                res.status(500).json({
+                    success: false,
+                    code: 500,
+                    message: 'Swagger spec is unavailable',
+                    data: null,
+                    errors: {}
+                });
+                return;
+            }
+            res.status(200).json(spec);
+        });
+    }
     normalizeApiBasePath(path) {
         if (!path || typeof path !== 'string') {
             return '/api';

package/dist/cjs/api-server-base.d.ts

@@ -95,6 +95,8 @@ export interface ApiServerConf {
     origins: string[];
     debug: boolean;
     apiBasePath: string;
+    swaggerEnabled?: boolean;
+    swaggerPath?: string;
     accessSecret: string;
     refreshSecret: string;
     cookieDomain: string;
@@ -190,6 +192,8 @@ export declare class ApiServer {
     protected authorize(apiReq: ApiRequest, requiredClass: ApiAuthClass): Promise<void>;
     private middlewares;
     private installPingHandler;
+    private loadSwaggerSpec;
+    private installSwaggerHandler;
     private normalizeApiBasePath;
     private installApiNotFoundHandler;
     private ensureApiNotFoundOrdering;

package/dist/cjs/auth-api/auth-module.js

@@ -600,15 +600,7 @@ class AuthModule extends module_js_1.BaseAuthModule {
         const params = {
             action,
             login: toStringOrNull(body.login) ?? undefined,
-            userId: isAuthIdentifier(body.userId) ? body.userId : undefined,
-            userAgent: toStringOrNull(body.userAgent) ?? undefined,
-            domain: toStringOrNull(body.domain) ?? undefined,
-            fingerprint: toStringOrNull(body.fingerprint) ?? undefined,
-            label: toStringOrNull(body.label) ?? undefined,
-            browser: toStringOrNull(body.browser) ?? undefined,
-            device: toStringOrNull(body.device) ?? undefined,
-            ip: toStringOrNull(body.ip) ?? undefined,
-            os: toStringOrNull(body.os) ?? undefined
+            userId: isAuthIdentifier(body.userId) ? body.userId : undefined
         };
         const challenge = await this.storage.createPasskeyChallenge(params);
         return [200, challenge];
@@ -624,18 +616,25 @@ class AuthModule extends module_js_1.BaseAuthModule {
         if (!expectedChallenge || typeof response !== 'object' || response === null) {
             throw new api_server_base_js_1.ApiError({ code: 400, message: 'Malformed passkey verification payload' });
         }
-        const params = {
-            expectedChallenge,
-            response: response,
-            login: toStringOrNull(body.login) ?? undefined,
-            userId: isAuthIdentifier(body.userId) ? body.userId : undefined,
+        const rawMetadata = {
             domain: toStringOrNull(body.domain) ?? undefined,
             fingerprint: toStringOrNull(body.fingerprint) ?? undefined,
             label: toStringOrNull(body.label) ?? undefined,
             browser: toStringOrNull(body.browser) ?? undefined,
             device: toStringOrNull(body.device) ?? undefined,
             ip: toStringOrNull(body.ip) ?? undefined,
-            os: toStringOrNull(body.os) ?? undefined,
+            os: toStringOrNull(body.os) ?? undefined
+        };
+        const clientInfo = apiReq.getClientInfo();
+        const userAgent = toStringOrNull(body.userAgent) ?? (clientInfo.ua ? clientInfo.ua : null);
+        const requestMetadata = this.enrichTokenMetadata(apiReq, rawMetadata);
+        const params = {
+            expectedChallenge,
+            response: response,
+            login: toStringOrNull(body.login) ?? undefined,
+            userId: isAuthIdentifier(body.userId) ? body.userId : undefined,
+            userAgent: userAgent ?? undefined,
+            ...requestMetadata,
             ...sessionPrefs
         };
         const result = await this.storage.verifyPasskeyResponse(params);

package/dist/cjs/index.cjs

@@ -3,7 +3,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.SequelizeOAuthStore = exports.MemoryOAuthStore = exports.OAuthStore = exports.SequelizePasskeyStore = exports.MemoryPasskeyStore = exports.PasskeyStore = exports.PasskeyService = exports.SequelizeTokenStore = exports.MemoryTokenStore = exports.TokenStore = exports.SequelizeUserStore = exports.MemoryUserStore = exports.UserStore = exports.AuthModule = exports.SqlAuthStore = exports.MemAuthStore = exports.CompositeAuthAdapter = exports.BaseAuthModule = exports.nullAuthModule = exports.BaseAuthAdapter = exports.nullAuthAdapter = exports.ApiModule = exports.ApiError = exports.ApiServer = void 0;
+exports.MemoryOAuthStore = exports.OAuthStore = exports.MemoryPasskeyStore = exports.PasskeyStore = exports.PasskeyService = exports.MemoryTokenStore = exports.TokenStore = exports.MemoryUserStore = exports.UserStore = exports.AuthModule = exports.MemAuthStore = exports.CompositeAuthAdapter = exports.BaseAuthModule = exports.nullAuthModule = exports.BaseAuthAdapter = exports.nullAuthAdapter = exports.ApiModule = exports.ApiError = exports.ApiServer = void 0;
 var api_server_base_js_1 = require("./api-server-base.cjs");
 Object.defineProperty(exports, "ApiServer", { enumerable: true, get: function () { return __importDefault(api_server_base_js_1).default; } });
 var api_server_base_js_2 = require("./api-server-base.cjs");
@@ -20,33 +20,23 @@ var compat_auth_storage_js_1 = require("./auth-api/compat-auth-storage.js");
 Object.defineProperty(exports, "CompositeAuthAdapter", { enumerable: true, get: function () { return compat_auth_storage_js_1.CompositeAuthAdapter; } });
 var mem_auth_store_js_1 = require("./auth-api/mem-auth-store.js");
 Object.defineProperty(exports, "MemAuthStore", { enumerable: true, get: function () { return mem_auth_store_js_1.MemAuthStore; } });
-var sql_auth_store_js_1 = require("./auth-api/sql-auth-store.js");
-Object.defineProperty(exports, "SqlAuthStore", { enumerable: true, get: function () { return sql_auth_store_js_1.SqlAuthStore; } });
 var auth_module_js_1 = require("./auth-api/auth-module.js");
 Object.defineProperty(exports, "AuthModule", { enumerable: true, get: function () { return __importDefault(auth_module_js_1).default; } });
 var base_js_1 = require("./user/base.js");
 Object.defineProperty(exports, "UserStore", { enumerable: true, get: function () { return base_js_1.UserStore; } });
 var memory_js_1 = require("./user/memory.js");
 Object.defineProperty(exports, "MemoryUserStore", { enumerable: true, get: function () { return memory_js_1.MemoryUserStore; } });
-var sequelize_js_1 = require("./user/sequelize.js");
-Object.defineProperty(exports, "SequelizeUserStore", { enumerable: true, get: function () { return sequelize_js_1.SequelizeUserStore; } });
 var base_js_2 = require("./token/base.js");
 Object.defineProperty(exports, "TokenStore", { enumerable: true, get: function () { return base_js_2.TokenStore; } });
 var memory_js_2 = require("./token/memory.js");
 Object.defineProperty(exports, "MemoryTokenStore", { enumerable: true, get: function () { return memory_js_2.MemoryTokenStore; } });
-var sequelize_js_2 = require("./token/sequelize.js");
-Object.defineProperty(exports, "SequelizeTokenStore", { enumerable: true, get: function () { return sequelize_js_2.SequelizeTokenStore; } });
 var service_js_1 = require("./passkey/service.js");
 Object.defineProperty(exports, "PasskeyService", { enumerable: true, get: function () { return service_js_1.PasskeyService; } });
 var base_js_3 = require("./passkey/base.js");
 Object.defineProperty(exports, "PasskeyStore", { enumerable: true, get: function () { return base_js_3.PasskeyStore; } });
 var memory_js_3 = require("./passkey/memory.js");
 Object.defineProperty(exports, "MemoryPasskeyStore", { enumerable: true, get: function () { return memory_js_3.MemoryPasskeyStore; } });
-var sequelize_js_3 = require("./passkey/sequelize.js");
-Object.defineProperty(exports, "SequelizePasskeyStore", { enumerable: true, get: function () { return sequelize_js_3.SequelizePasskeyStore; } });
 var base_js_4 = require("./oauth/base.js");
 Object.defineProperty(exports, "OAuthStore", { enumerable: true, get: function () { return base_js_4.OAuthStore; } });
 var memory_js_4 = require("./oauth/memory.js");
 Object.defineProperty(exports, "MemoryOAuthStore", { enumerable: true, get: function () { return memory_js_4.MemoryOAuthStore; } });
-var sequelize_js_4 = require("./oauth/sequelize.js");
-Object.defineProperty(exports, "SequelizeOAuthStore", { enumerable: true, get: function () { return sequelize_js_4.SequelizeOAuthStore; } });

package/dist/cjs/index.d.ts

@@ -11,22 +11,17 @@ export { nullAuthAdapter, BaseAuthAdapter } from './auth-api/storage.js';
 export { nullAuthModule, BaseAuthModule } from './auth-api/module.js';
 export { CompositeAuthAdapter } from './auth-api/compat-auth-storage.js';
 export { MemAuthStore } from './auth-api/mem-auth-store.js';
-export { SqlAuthStore } from './auth-api/sql-auth-store.js';
 export { default as AuthModule } from './auth-api/auth-module.js';
 export type { OAuthStartParams, OAuthStartResult, OAuthCallbackParams, OAuthCallbackResult } from './oauth/types.js';
 export type { BcryptHasherOptions, CreateUserInput, UpdateUserInput, PublicUserMapper } from './user/types.js';
 export { UserStore } from './user/base.js';
 export { MemoryUserStore } from './user/memory.js';
-export { SequelizeUserStore } from './user/sequelize.js';
 export type { MemoryUserAttributes, MemoryUserStoreOptions } from './user/memory.js';
 export { TokenStore } from './token/base.js';
 export { MemoryTokenStore } from './token/memory.js';
-export { SequelizeTokenStore } from './token/sequelize.js';
 export { PasskeyService } from './passkey/service.js';
 export { PasskeyStore } from './passkey/base.js';
 export { MemoryPasskeyStore } from './passkey/memory.js';
-export { SequelizePasskeyStore } from './passkey/sequelize.js';
 export type { PasskeyServiceConfig, PasskeyChallengeRecord, PasskeyUserDescriptor, StoredPasskeyCredential, PasskeyChallenge, PasskeyChallengeParams, PasskeyVerificationParams, PasskeyVerificationResult } from './passkey/types.js';
 export { OAuthStore } from './oauth/base.js';
 export { MemoryOAuthStore } from './oauth/memory.js';
-export { SequelizeOAuthStore } from './oauth/sequelize.js';

package/dist/cjs/passkey/memory.js

@@ -62,9 +62,11 @@ class MemoryPasskeyStore extends base_js_1.PasskeyStore {
     }
     async saveChallenge(record) {
         this.challenges.set(record.challenge, {
-            ...record,
+            challenge: record.challenge,
+            action: record.action,
             userId: record.userId !== undefined ? normalizeUserId(record.userId) : undefined,
-            metadata: record.metadata ? { ...record.metadata } : {}
+            login: record.login ?? undefined,
+            expiresAt: record.expiresAt
         });
     }
     async consumeChallenge(challenge) {
@@ -73,7 +75,7 @@ class MemoryPasskeyStore extends base_js_1.PasskeyStore {
             return null;
         }
         this.challenges.delete(challenge);
-        return { ...record, metadata: record.metadata ? { ...record.metadata } : {} };
+        return { ...record };
     }
     async cleanupChallenges(now) {
         for (const [challenge, record] of this.challenges.entries()) {

package/dist/cjs/passkey/models.d.ts

@@ -1,5 +1,4 @@
 import { Model, type InferAttributes, type InferCreationAttributes, type ModelStatic, type Sequelize } from 'sequelize';
-import type { PasskeyChallengeMetadata } from './service.js';
 export declare class PasskeyCredentialModel extends Model<InferAttributes<PasskeyCredentialModel>, InferCreationAttributes<PasskeyCredentialModel>> {
     credentialId: Buffer;
     userId: number;
@@ -8,6 +7,13 @@ export declare class PasskeyCredentialModel extends Model<InferAttributes<Passke
     transports: string[] | null;
     backedUp: boolean;
     deviceType: string;
+    label: string | null;
+    createdDomain: string | null;
+    createdUserAgent: string | null;
+    createdBrowser: string | null;
+    createdOs: string | null;
+    createdDevice: string | null;
+    createdIp: string | null;
     createdAt?: Date;
     updatedAt?: Date;
 }
@@ -16,7 +22,6 @@ export declare class PasskeyChallengeModel extends Model<InferAttributes<Passkey
     action: 'register' | 'authenticate';
     userId: number | null;
     login: string | null;
-    metadata: PasskeyChallengeMetadata | null;
     expiresAt: Date;
     createdAt?: Date;
     updatedAt?: Date;

package/dist/cjs/passkey/models.js

@@ -67,6 +67,40 @@ function initPasskeyCredentialModel(sequelize) {
             type: sequelize_1.DataTypes.STRING(32),
             allowNull: false,
             defaultValue: 'multiDevice'
+        },
+        label: {
+            type: sequelize_1.DataTypes.STRING(120),
+            allowNull: true
+        },
+        createdDomain: {
+            field: 'created_domain',
+            type: sequelize_1.DataTypes.STRING(255),
+            allowNull: true
+        },
+        createdUserAgent: {
+            field: 'created_user_agent',
+            type: sequelize_1.DataTypes.TEXT,
+            allowNull: true
+        },
+        createdBrowser: {
+            field: 'created_browser',
+            type: sequelize_1.DataTypes.STRING(120),
+            allowNull: true
+        },
+        createdOs: {
+            field: 'created_os',
+            type: sequelize_1.DataTypes.STRING(120),
+            allowNull: true
+        },
+        createdDevice: {
+            field: 'created_device',
+            type: sequelize_1.DataTypes.STRING(120),
+            allowNull: true
+        },
+        createdIp: {
+            field: 'created_ip',
+            type: sequelize_1.DataTypes.STRING(45),
+            allowNull: true
         }
     }, {
         sequelize,
@@ -96,10 +130,6 @@ function initPasskeyChallengeModel(sequelize) {
             type: sequelize_1.DataTypes.STRING(128),
             allowNull: true
         },
-        metadata: {
-            type: sequelize_1.DataTypes.JSON,
-            allowNull: true
-        },
         expiresAt: {
             field: 'expires_at',
             type: sequelize_1.DataTypes.DATE,

package/dist/cjs/passkey/sequelize.d.ts

@@ -10,6 +10,13 @@ declare class PasskeyCredentialModel extends Model<InferAttributes<PasskeyCreden
     transports: string[] | null;
     backedUp: boolean;
     deviceType: string;
+    label: string | null;
+    createdDomain: string | null;
+    createdUserAgent: string | null;
+    createdBrowser: string | null;
+    createdOs: string | null;
+    createdDevice: string | null;
+    createdIp: string | null;
     createdAt?: Date;
     updatedAt?: Date;
 }
@@ -18,7 +25,6 @@ declare class PasskeyChallengeModel extends Model<InferAttributes<PasskeyChallen
     action: 'register' | 'authenticate';
     userId: number | null;
     login: string | null;
-    metadata: Record<string, unknown> | null;
     expiresAt: Date;
     createdAt?: Date;
     updatedAt?: Date;

package/dist/cjs/passkey/sequelize.js

@@ -76,6 +76,40 @@ function initPasskeyCredentialModel(sequelize) {
             type: sequelize_1.DataTypes.STRING(32),
             allowNull: false,
             defaultValue: 'multiDevice'
+        },
+        label: {
+            type: sequelize_1.DataTypes.STRING(120),
+            allowNull: true
+        },
+        createdDomain: {
+            field: 'created_domain',
+            type: sequelize_1.DataTypes.STRING(255),
+            allowNull: true
+        },
+        createdUserAgent: {
+            field: 'created_user_agent',
+            type: sequelize_1.DataTypes.TEXT,
+            allowNull: true
+        },
+        createdBrowser: {
+            field: 'created_browser',
+            type: sequelize_1.DataTypes.STRING(120),
+            allowNull: true
+        },
+        createdOs: {
+            field: 'created_os',
+            type: sequelize_1.DataTypes.STRING(120),
+            allowNull: true
+        },
+        createdDevice: {
+            field: 'created_device',
+            type: sequelize_1.DataTypes.STRING(120),
+            allowNull: true
+        },
+        createdIp: {
+            field: 'created_ip',
+            type: sequelize_1.DataTypes.STRING(45),
+            allowNull: true
         }
     }, {
         sequelize,
@@ -105,10 +139,6 @@ function initPasskeyChallengeModel(sequelize) {
             type: sequelize_1.DataTypes.STRING(128),
             allowNull: true
         },
-        metadata: {
-            type: sequelize_1.DataTypes.JSON,
-            allowNull: true
-        },
         expiresAt: {
             field: 'expires_at',
             type: sequelize_1.DataTypes.DATE,
@@ -148,6 +178,13 @@ class SequelizePasskeyStore extends base_js_1.PasskeyStore {
             transports: (model.transports ?? undefined),
             backedUp: model.backedUp,
             deviceType: model.deviceType,
+            label: model.label ?? undefined,
+            createdDomain: model.createdDomain ?? undefined,
+            createdUserAgent: model.createdUserAgent ?? undefined,
+            createdBrowser: model.createdBrowser ?? undefined,
+            createdOs: model.createdOs ?? undefined,
+            createdDevice: model.createdDevice ?? undefined,
+            createdIp: model.createdIp ?? undefined,
             createdAt: model.createdAt ?? undefined,
             updatedAt: model.updatedAt ?? undefined
         }));
@@ -170,6 +207,13 @@ class SequelizePasskeyStore extends base_js_1.PasskeyStore {
             transports: (model.transports ?? undefined),
             backedUp: model.backedUp,
             deviceType: model.deviceType,
+            label: model.label ?? undefined,
+            createdDomain: model.createdDomain ?? undefined,
+            createdUserAgent: model.createdUserAgent ?? undefined,
+            createdBrowser: model.createdBrowser ?? undefined,
+            createdOs: model.createdOs ?? undefined,
+            createdDevice: model.createdDevice ?? undefined,
+            createdIp: model.createdIp ?? undefined,
             createdAt: model.createdAt ?? undefined,
             updatedAt: model.updatedAt ?? undefined
         };
@@ -182,7 +226,14 @@ class SequelizePasskeyStore extends base_js_1.PasskeyStore {
             counter: record.counter,
             transports: record.transports ?? null,
             backedUp: record.backedUp,
-            deviceType: record.deviceType
+            deviceType: record.deviceType,
+            label: record.label ?? null,
+            createdDomain: record.createdDomain ?? null,
+            createdUserAgent: record.createdUserAgent ?? null,
+            createdBrowser: record.createdBrowser ?? null,
+            createdOs: record.createdOs ?? null,
+            createdDevice: record.createdDevice ?? null,
+            createdIp: record.createdIp ?? null
         });
     }
     async updateCredentialCounter(credentialId, counter) {
@@ -194,7 +245,6 @@ class SequelizePasskeyStore extends base_js_1.PasskeyStore {
             action: record.action,
             userId: record.userId !== undefined ? normalizeUserId(record.userId) : null,
             login: record.login ?? null,
-            metadata: (record.metadata ?? {}),
             expiresAt: record.expiresAt
         });
     }
@@ -209,8 +259,7 @@ class SequelizePasskeyStore extends base_js_1.PasskeyStore {
             action: model.action,
             userId: model.userId ?? undefined,
             login: model.login ?? undefined,
-            expiresAt: model.expiresAt,
-            metadata: model.metadata ?? {}
+            expiresAt: model.expiresAt
         };
     }
     async cleanupChallenges(now) {

package/dist/cjs/passkey/service.d.ts

@@ -1,6 +1,6 @@
 import type { PasskeyChallenge, PasskeyChallengeParams, PasskeyStorageAdapter, PasskeyVerificationParams, PasskeyVerificationResult, PasskeyServiceConfig, StoredPasskeyCredential } from './types.js';
 import type { AuthIdentifier } from '../auth-api/types.js';
-export type { CredentialDeviceType, PasskeyChallenge, PasskeyChallengeParams, PasskeyChallengeRecord, PasskeyChallengeMetadata, PasskeyUserDescriptor, PasskeyVerificationParams, PasskeyVerificationResult, PasskeyServiceConfig, PasskeyStorageAdapter, StoredPasskeyCredential } from './types.js';
+export type { CredentialDeviceType, PasskeyChallenge, PasskeyChallengeParams, PasskeyChallengeRecord, PasskeyUserDescriptor, PasskeyVerificationParams, PasskeyVerificationResult, PasskeyServiceConfig, PasskeyStorageAdapter, StoredPasskeyCredential } from './types.js';
 type Logger = Pick<typeof console, 'error' | 'warn'>;
 export declare class PasskeyService {
     private readonly config;

package/dist/cjs/passkey/service.js

@@ -54,6 +54,13 @@ function sanitizeTransports(input) {
         .filter((value) => ALLOWED_TRANSPORTS.includes(value));
     return filtered.length > 0 ? filtered : undefined;
 }
+function toOptionalString(value) {
+    if (typeof value !== 'string') {
+        return undefined;
+    }
+    const trimmed = value.trim();
+    return trimmed.length > 0 ? trimmed : undefined;
+}
 function toBase64Url(buffer) {
     return helpers_1.isoBase64URL.fromBuffer(new Uint8Array(buffer));
 }
@@ -127,17 +134,11 @@ class PasskeyService {
     }
     async createChallenge(params) {
         await this.adapter.cleanupChallenges?.(new Date());
-        const metadata = {
-            domain: typeof params.domain === 'string' ? params.domain : undefined,
-            fingerprint: typeof params.fingerprint === 'string' ? params.fingerprint : undefined,
-            label: typeof params.label === 'string' ? params.label : undefined,
-            userAgent: typeof params.userAgent === 'string' ? params.userAgent : undefined
-        };
         if (params.action === 'register') {
-            return this.createRegistrationChallenge(params, metadata);
+            return this.createRegistrationChallenge(params);
         }
         if (params.action === 'authenticate') {
-            return this.createAuthenticationChallenge(params, metadata);
+            return this.createAuthenticationChallenge(params);
         }
         throw new Error(`Unsupported passkey action: ${String(params.action)}`);
     }
@@ -163,7 +164,7 @@ class PasskeyService {
         }
         return { verified: false };
     }
-    async createRegistrationChallenge(params, metadata) {
+    async createRegistrationChallenge(params) {
         const user = await this.requireUser({ userId: params.userId, login: params.login });
         const existing = await this.adapter.listUserCredentials(user.id);
         const excludeCredentials = existing.map((credential) => {
@@ -186,8 +187,7 @@ class PasskeyService {
             action: 'register',
             userId: user.id,
             login: user.login,
-            expiresAt,
-            metadata
+            expiresAt
         });
         return {
             challenge: options.challenge,
@@ -196,7 +196,7 @@ class PasskeyService {
             publicKey: options
         };
     }
-    async createAuthenticationChallenge(params, metadata) {
+    async createAuthenticationChallenge(params) {
         const user = await this.requireUser({ userId: params.userId, login: params.login });
         const credentials = await this.adapter.listUserCredentials(user.id);
         const allowCredentials = credentials.map((credential) => {
@@ -216,8 +216,7 @@ class PasskeyService {
             action: 'authenticate',
             userId: user.id,
             login: user.login,
-            expiresAt,
-            metadata
+            expiresAt
         });
         return {
             challenge: options.challenge,
@@ -295,7 +294,14 @@ class PasskeyService {
             counter: registrationInfo.counter ?? 0,
             transports: sanitizeTransports(params.response.transports),
             backedUp: registrationInfo.credentialDeviceType === 'multiDevice',
-            deviceType: registrationInfo.credentialDeviceType
+            deviceType: registrationInfo.credentialDeviceType,
+            label: toOptionalString(params.label),
+            createdDomain: toOptionalString(params.domain),
+            createdUserAgent: toOptionalString(params.userAgent),
+            createdBrowser: toOptionalString(params.browser),
+            createdOs: toOptionalString(params.os),
+            createdDevice: toOptionalString(params.device),
+            createdIp: toOptionalString(params.ip)
         });
         return { verified: true, userId: user.id, login: user.login };
     }

package/dist/cjs/passkey/types.d.ts

@@ -9,19 +9,12 @@ export interface PasskeyServiceConfig {
     timeoutMs: number;
     userVerification?: 'preferred' | 'required' | 'discouraged';
 }
-export interface PasskeyChallengeMetadata {
-    domain?: string;
-    fingerprint?: string;
-    label?: string;
-    userAgent?: string;
-}
 export interface PasskeyChallengeRecord {
     challenge: string;
     action: 'register' | 'authenticate';
     userId?: AuthIdentifier;
     login?: string;
     expiresAt: Date;
-    metadata: PasskeyChallengeMetadata;
 }
 export interface PasskeyUserDescriptor {
     id: AuthIdentifier;
@@ -36,6 +29,13 @@ export interface StoredPasskeyCredential {
     transports?: AuthenticatorTransportFuture[];
     backedUp: boolean;
     deviceType: CredentialDeviceType;
+    label?: string;
+    createdDomain?: string;
+    createdUserAgent?: string;
+    createdBrowser?: string;
+    createdOs?: string;
+    createdDevice?: string;
+    createdIp?: string;
     createdAt?: Date;
     updatedAt?: Date;
 }
@@ -53,10 +53,9 @@ export interface PasskeyStorageAdapter {
     consumeChallenge(challenge: string): Promise<PasskeyChallengeRecord | null>;
     cleanupChallenges?(now: Date): Promise<void>;
 }
-export interface PasskeyChallengeParams extends Partial<Omit<Token, 'userId'>> {
+export interface PasskeyChallengeParams {
     action: 'register' | 'authenticate';
     login?: string;
-    userAgent?: string;
     userId?: AuthIdentifier;
 }
 export interface PasskeyChallenge extends Record<string, unknown> {
@@ -69,6 +68,7 @@ export interface PasskeyVerificationParams extends Partial<Omit<Token, 'userId'>
     login?: string;
     response: Record<string, unknown>;
     userId?: AuthIdentifier;
+    userAgent?: string;
 }
 export interface PasskeyVerificationResult extends Record<string, unknown> {
     login?: string;

package/dist/esm/api-server-base.d.ts

@@ -95,6 +95,8 @@ export interface ApiServerConf {
     origins: string[];
     debug: boolean;
     apiBasePath: string;
+    swaggerEnabled?: boolean;
+    swaggerPath?: string;
     accessSecret: string;
     refreshSecret: string;
     cookieDomain: string;
@@ -190,6 +192,8 @@ export declare class ApiServer {
     protected authorize(apiReq: ApiRequest, requiredClass: ApiAuthClass): Promise<void>;
     private middlewares;
     private installPingHandler;
+    private loadSwaggerSpec;
+    private installSwaggerHandler;
     private normalizeApiBasePath;
     private installApiNotFoundHandler;
     private ensureApiNotFoundOrdering;