@technomoron/api-server-base 2.0.0-beta.15 → 2.0.0-beta.17

package/dist/cjs/user/sequelize.js

@@ -5,13 +5,24 @@ exports.initAuthUserModel = initAuthUserModel;
 const sequelize_1 = require("sequelize");
 const base_js_1 = require("./base.js");
 const DIALECTS_SUPPORTING_UNSIGNED = new Set(['mysql', 'mariadb']);
+function normalizeTablePrefix(prefix) {
+    if (!prefix) {
+        return undefined;
+    }
+    const trimmed = prefix.trim();
+    return trimmed.length > 0 ? trimmed : undefined;
+}
+function applyTablePrefix(prefix, tableName) {
+    const normalized = normalizeTablePrefix(prefix);
+    return normalized ? `${normalized}${tableName}` : tableName;
+}
 function integerIdType(sequelize) {
     return DIALECTS_SUPPORTING_UNSIGNED.has(sequelize.getDialect()) ? sequelize_1.DataTypes.INTEGER.UNSIGNED : sequelize_1.DataTypes.INTEGER;
 }
-function userTableOptions(sequelize) {
+function userTableOptions(sequelize, tablePrefix) {
     const opts = {
         sequelize,
-        tableName: 'users',
+        tableName: applyTablePrefix(tablePrefix, 'users'),
         timestamps: false
     };
     if (DIALECTS_SUPPORTING_UNSIGNED.has(sequelize.getDialect())) {
@@ -23,7 +34,7 @@ function userTableOptions(sequelize) {
 class AuthUserModel extends sequelize_1.Model {
 }
 exports.AuthUserModel = AuthUserModel;
-function initAuthUserModel(sequelize) {
+function initAuthUserModel(sequelize, options = {}) {
     const idType = integerIdType(sequelize);
     AuthUserModel.init({
         user_id: {
@@ -47,7 +58,7 @@ function initAuthUserModel(sequelize) {
             allowNull: false
         }
     }, {
-        ...userTableOptions(sequelize)
+        ...userTableOptions(sequelize, options.tablePrefix)
     });
     return AuthUserModel;
 }
@@ -63,7 +74,9 @@ class SequelizeUserStore extends base_js_1.UserStore {
         }
         this.Users = options.userModel
             ? options.userModel
-            : (options.userModelFactory ?? initAuthUserModel)(options.sequelize);
+            : (options.userModelFactory ?? initAuthUserModel)(options.sequelize, {
+                tablePrefix: options.tablePrefix
+            });
         this.recordMapper =
             options.recordMapper ??
                 ((model) => SequelizeUserStore.mapModelToUser(model));

package/dist/esm/api-server-base.d.ts

@@ -92,6 +92,7 @@ export interface ApiServerConf {
     apiHost: string;
     uploadPath: string;
     uploadMax: number;
+    staticDirs?: Record<string, string>;
     origins: string[];
     debug: boolean;
     apiBasePath: string;
@@ -193,6 +194,7 @@ export declare class ApiServer {
     guessExceptionText(error: unknown, defMsg?: string): string;
     protected authorize(apiReq: ApiRequest, requiredClass: ApiAuthClass): Promise<void>;
     private middlewares;
+    private installStaticDirs;
     private installPingHandler;
     private loadSwaggerSpec;
     private installSwaggerHandler;

package/dist/esm/api-server-base.js

@@ -335,6 +335,7 @@ function fillConfig(config) {
         apiHost: config.apiHost ?? 'localhost',
         uploadPath: config.uploadPath ?? '',
         uploadMax: config.uploadMax ?? 30 * 1024 * 1024,
+        staticDirs: config.staticDirs,
         origins: config.origins ?? [],
         debug: config.debug ?? false,
         apiBasePath: config.apiBasePath ?? '/api',
@@ -391,6 +392,7 @@ export class ApiServer {
             this.app.use(upload.any());
         }
         this.middlewares();
+        this.installStaticDirs();
         this.installPingHandler();
         this.installSwaggerHandler();
         // addSwaggerUi(this.app);
@@ -648,6 +650,21 @@ export class ApiServer {
         };
         this.app.use(cors(corsOptions));
     }
+    installStaticDirs() {
+        const staticDirs = this.config.staticDirs;
+        if (!staticDirs || !isPlainObject(staticDirs)) {
+            return;
+        }
+        for (const [mountRaw, dirRaw] of Object.entries(staticDirs)) {
+            const mount = typeof mountRaw === 'string' ? mountRaw.trim() : '';
+            const dir = typeof dirRaw === 'string' ? dirRaw.trim() : '';
+            if (!mount || !dir) {
+                continue;
+            }
+            const resolvedMount = mount.startsWith('/') ? mount : `/${mount}`;
+            this.app.use(resolvedMount, express.static(dir));
+        }
+    }
     installPingHandler() {
         const path = `${this.apiBasePath}/v1/ping`;
         this.app.get(path, (_req, res) => {

package/dist/esm/auth-api/sql-auth-store.d.ts

@@ -11,13 +11,23 @@ import type { Token } from '../token/types.js';
 interface PasskeyOptions extends Partial<PasskeyServiceConfig> {
     enabled?: boolean;
 }
+export interface SqlAuthStoreTablePrefixes {
+    user?: string;
+    token?: string;
+    passkey?: string;
+    oauth?: string;
+}
 export interface SqlAuthStoreParams<UserAttributes extends AuthUserAttributes = AuthUserAttributes, PublicUserShape extends Omit<UserAttributes, 'password'> = Omit<UserAttributes, 'password'>> {
     sequelize: Sequelize;
     syncOptions?: SyncOptions;
     bcryptRounds?: number;
     passwordPepper?: string;
+    tablePrefix?: string;
+    tablePrefixes?: SqlAuthStoreTablePrefixes;
     userModel?: GenericUserModelStatic;
-    userModelFactory?: (sequelize: Sequelize) => GenericUserModelStatic;
+    userModelFactory?: (sequelize: Sequelize, options?: {
+        tablePrefix?: string;
+    }) => GenericUserModelStatic;
     userRecordMapper?: (model: GenericUserModel) => UserAttributes;
     publicUserMapper?: (user: UserAttributes) => PublicUserShape;
     passkeyUserMapper?: (user: UserAttributes) => PasskeyUserDescriptor;

package/dist/esm/auth-api/sql-auth-store.js

@@ -10,6 +10,22 @@ const DEFAULT_PASSKEY_CONFIG = {
     timeoutMs: 5 * 60 * 1000,
     userVerification: 'preferred'
 };
+function normalizeTablePrefix(prefix) {
+    if (!prefix) {
+        return undefined;
+    }
+    const trimmed = prefix.trim();
+    return trimmed.length > 0 ? trimmed : undefined;
+}
+function resolveTablePrefix(...prefixes) {
+    for (const prefix of prefixes) {
+        const normalized = normalizeTablePrefix(prefix);
+        if (normalized) {
+            return normalized;
+        }
+    }
+    return undefined;
+}
 function isOriginString(origin) {
     return typeof origin === 'string' && origin.trim().length > 0;
 }
@@ -33,6 +49,8 @@ export class SqlAuthStore {
         }
         this.sequelize = params.sequelize;
         this.syncOptions = params.syncOptions;
+        const moduleTablePrefixes = params.tablePrefixes ?? {};
+        const userTablePrefix = resolveTablePrefix(moduleTablePrefixes.user, params.tablePrefix);
         this.userStore = new SequelizeUserStore({
             sequelize: this.sequelize,
             userModel: params.userModel,
@@ -40,18 +58,28 @@ export class SqlAuthStore {
             recordMapper: params.userRecordMapper,
             toPublic: params.publicUserMapper,
             bcryptRounds: params.bcryptRounds,
-            bcryptPepper: params.passwordPepper
+            bcryptPepper: params.passwordPepper,
+            tablePrefix: userTablePrefix
         });
+        const tokenTablePrefix = resolveTablePrefix(params.tokenStoreOptions?.tablePrefix, moduleTablePrefixes.token, params.tablePrefix);
         this.tokenStore =
-            params.tokenStore ?? new SequelizeTokenStore({ sequelize: this.sequelize, ...params.tokenStoreOptions });
+            params.tokenStore ??
+                new SequelizeTokenStore({
+                    sequelize: this.sequelize,
+                    ...params.tokenStoreOptions,
+                    tablePrefix: tokenTablePrefix
+                });
+        const oauthTablePrefix = resolveTablePrefix(params.oauthStoreOptions?.tablePrefix, moduleTablePrefixes.oauth, params.tablePrefix);
         this.oauthStore = new SequelizeOAuthStore({
             sequelize: this.sequelize,
             ...params.oauthStoreOptions,
+            tablePrefix: oauthTablePrefix,
             bcryptRounds: params.bcryptRounds
         });
         let passkeyStore;
         let passkeyConfig;
         if (params.passkeys !== false) {
+            const passkeyTablePrefix = resolveTablePrefix(moduleTablePrefixes.passkey, params.tablePrefix);
             passkeyConfig = normalizePasskeyConfig(params.passkeys ?? {});
             const resolveUser = async (lookup) => {
                 const found = await this.userStore.findUser(lookup.userId ?? lookup.login ?? '');
@@ -66,7 +94,11 @@ export class SqlAuthStore {
                     }));
                 return mapper(found);
             };
-            passkeyStore = new SequelizePasskeyStore({ sequelize: this.sequelize, resolveUser });
+            passkeyStore = new SequelizePasskeyStore({
+                sequelize: this.sequelize,
+                resolveUser,
+                tablePrefix: passkeyTablePrefix
+            });
             this.passkeyStore = passkeyStore;
         }
         this.adapter = new CompositeAuthAdapter({

package/dist/esm/oauth/models.d.ts

@@ -18,7 +18,9 @@ export declare class OAuthClientModel extends Model<OAuthClientAttributes, OAuth
     metadata: string | null;
     first_party: boolean;
 }
-export declare function initOAuthClientModel(sequelize: Sequelize): typeof OAuthClientModel;
+export declare function initOAuthClientModel(sequelize: Sequelize, options?: {
+    tablePrefix?: string;
+}): typeof OAuthClientModel;
 export interface OAuthCodeAttributes {
     code: string;
     client_id: string;
@@ -42,4 +44,6 @@ export declare class OAuthCodeModel extends Model<OAuthCodeAttributes, OAuthCode
     expires: Date;
     metadata: string | null;
 }
-export declare function initOAuthCodeModel(sequelize: Sequelize): typeof OAuthCodeModel;
+export declare function initOAuthCodeModel(sequelize: Sequelize, options?: {
+    tablePrefix?: string;
+}): typeof OAuthCodeModel;

package/dist/esm/oauth/models.js

@@ -1,10 +1,21 @@
 import { DataTypes, Model } from 'sequelize';
 const DIALECTS_SUPPORTING_UNSIGNED = new Set(['mysql', 'mariadb']);
+function normalizeTablePrefix(prefix) {
+    if (!prefix) {
+        return undefined;
+    }
+    const trimmed = prefix.trim();
+    return trimmed.length > 0 ? trimmed : undefined;
+}
+function applyTablePrefix(prefix, tableName) {
+    const normalized = normalizeTablePrefix(prefix);
+    return normalized ? `${normalized}${tableName}` : tableName;
+}
 function integerIdType(sequelize) {
     return DIALECTS_SUPPORTING_UNSIGNED.has(sequelize.getDialect()) ? DataTypes.INTEGER.UNSIGNED : DataTypes.INTEGER;
 }
-function tableOptions(sequelize, tableName, extra) {
-    const opts = { sequelize, tableName };
+function tableOptions(sequelize, tableName, tablePrefix, extra) {
+    const opts = { sequelize, tableName: applyTablePrefix(tablePrefix, tableName) };
     if (extra) {
         Object.assign(opts, extra);
     }
@@ -16,7 +27,7 @@ function tableOptions(sequelize, tableName, extra) {
 }
 export class OAuthClientModel extends Model {
 }
-export function initOAuthClientModel(sequelize) {
+export function initOAuthClientModel(sequelize, options = {}) {
     OAuthClientModel.init({
         client_id: { type: DataTypes.STRING(128), allowNull: false, primaryKey: true },
         client_secret: { type: DataTypes.STRING(255), allowNull: false, defaultValue: '' },
@@ -26,13 +37,13 @@ export function initOAuthClientModel(sequelize) {
         metadata: { type: DataTypes.TEXT, allowNull: true, defaultValue: null },
         first_party: { type: DataTypes.BOOLEAN, allowNull: false, defaultValue: false }
     }, {
-        ...tableOptions(sequelize, 'oauth_clients', { timestamps: false })
+        ...tableOptions(sequelize, 'oauth_clients', options.tablePrefix, { timestamps: false })
     });
     return OAuthClientModel;
 }
 export class OAuthCodeModel extends Model {
 }
-export function initOAuthCodeModel(sequelize) {
+export function initOAuthCodeModel(sequelize, options = {}) {
     const idType = integerIdType(sequelize);
     OAuthCodeModel.init({
         code: { type: DataTypes.STRING(128), allowNull: false, primaryKey: true },
@@ -45,7 +56,7 @@ export function initOAuthCodeModel(sequelize) {
         expires: { type: DataTypes.DATE, allowNull: false },
         metadata: { type: DataTypes.TEXT, allowNull: true, defaultValue: null }
     }, {
-        ...tableOptions(sequelize, 'oauth_codes', { timestamps: false })
+        ...tableOptions(sequelize, 'oauth_codes', options.tablePrefix, { timestamps: false })
     });
     return OAuthCodeModel;
 }

package/dist/esm/oauth/sequelize.d.ts

@@ -19,7 +19,9 @@ export declare class OAuthClientModel extends Model<OAuthClientAttributes, OAuth
     metadata: string | null;
     first_party: boolean;
 }
-export declare function initOAuthClientModel(sequelize: Sequelize): typeof OAuthClientModel;
+export declare function initOAuthClientModel(sequelize: Sequelize, options?: {
+    tablePrefix?: string;
+}): typeof OAuthClientModel;
 export interface OAuthCodeAttributes {
     code: string;
     client_id: string;
@@ -43,13 +45,20 @@ export declare class OAuthCodeModel extends Model<OAuthCodeAttributes, OAuthCode
     expires: Date;
     metadata: string | null;
 }
-export declare function initOAuthCodeModel(sequelize: Sequelize): typeof OAuthCodeModel;
+export declare function initOAuthCodeModel(sequelize: Sequelize, options?: {
+    tablePrefix?: string;
+}): typeof OAuthCodeModel;
 export interface SequelizeOAuthStoreOptions {
     sequelize: Sequelize;
+    tablePrefix?: string;
     clientModel?: typeof OAuthClientModel;
     codeModel?: typeof OAuthCodeModel;
-    clientModelFactory?: (sequelize: Sequelize) => typeof OAuthClientModel;
-    codeModelFactory?: (sequelize: Sequelize) => typeof OAuthCodeModel;
+    clientModelFactory?: (sequelize: Sequelize, options?: {
+        tablePrefix?: string;
+    }) => typeof OAuthClientModel;
+    codeModelFactory?: (sequelize: Sequelize, options?: {
+        tablePrefix?: string;
+    }) => typeof OAuthCodeModel;
     bcryptRounds?: number;
 }
 export declare class SequelizeOAuthStore extends OAuthStore {

package/dist/esm/oauth/sequelize.js

@@ -2,11 +2,22 @@ import bcrypt from 'bcryptjs';
 import { DataTypes, Model } from 'sequelize';
 import { OAuthStore } from './base.js';
 const DIALECTS_SUPPORTING_UNSIGNED = new Set(['mysql', 'mariadb']);
+function normalizeTablePrefix(prefix) {
+    if (!prefix) {
+        return undefined;
+    }
+    const trimmed = prefix.trim();
+    return trimmed.length > 0 ? trimmed : undefined;
+}
+function applyTablePrefix(prefix, tableName) {
+    const normalized = normalizeTablePrefix(prefix);
+    return normalized ? `${normalized}${tableName}` : tableName;
+}
 function integerIdType(sequelize) {
     return DIALECTS_SUPPORTING_UNSIGNED.has(sequelize.getDialect()) ? DataTypes.INTEGER.UNSIGNED : DataTypes.INTEGER;
 }
-function tableOptions(sequelize, tableName, extra) {
-    const opts = { sequelize, tableName };
+function tableOptions(sequelize, tableName, tablePrefix, extra) {
+    const opts = { sequelize, tableName: applyTablePrefix(tablePrefix, tableName) };
     if (extra) {
         Object.assign(opts, extra);
     }
@@ -18,7 +29,7 @@ function tableOptions(sequelize, tableName, extra) {
 }
 export class OAuthClientModel extends Model {
 }
-export function initOAuthClientModel(sequelize) {
+export function initOAuthClientModel(sequelize, options = {}) {
     OAuthClientModel.init({
         client_id: { type: DataTypes.STRING(128), allowNull: false, primaryKey: true },
         client_secret: { type: DataTypes.STRING(255), allowNull: false, defaultValue: '' },
@@ -27,12 +38,12 @@ export function initOAuthClientModel(sequelize) {
         scope: { type: DataTypes.TEXT, allowNull: false, defaultValue: '[]' },
         metadata: { type: DataTypes.TEXT, allowNull: true, defaultValue: null },
         first_party: { type: DataTypes.BOOLEAN, allowNull: false, defaultValue: false }
-    }, tableOptions(sequelize, 'oauth_clients', { timestamps: false }));
+    }, tableOptions(sequelize, 'oauth_clients', options.tablePrefix, { timestamps: false }));
     return OAuthClientModel;
 }
 export class OAuthCodeModel extends Model {
 }
-export function initOAuthCodeModel(sequelize) {
+export function initOAuthCodeModel(sequelize, options = {}) {
     const idType = integerIdType(sequelize);
     OAuthCodeModel.init({
         code: { type: DataTypes.STRING(128), allowNull: false, primaryKey: true },
@@ -44,7 +55,7 @@ export function initOAuthCodeModel(sequelize) {
         code_challenge_method: { type: DataTypes.STRING(10), allowNull: true, defaultValue: null },
         expires: { type: DataTypes.DATE, allowNull: false },
         metadata: { type: DataTypes.TEXT, allowNull: true, defaultValue: null }
-    }, tableOptions(sequelize, 'oauth_codes', { timestamps: false }));
+    }, tableOptions(sequelize, 'oauth_codes', options.tablePrefix, { timestamps: false }));
     return OAuthCodeModel;
 }
 function encodeStringArray(values) {
@@ -104,8 +115,16 @@ export class SequelizeOAuthStore extends OAuthStore {
         if (!options?.sequelize) {
             throw new Error('SequelizeOAuthStore requires an initialised Sequelize instance');
         }
-        this.clients = options.clientModel ?? (options.clientModelFactory ?? initOAuthClientModel)(options.sequelize);
-        this.codes = options.codeModel ?? (options.codeModelFactory ?? initOAuthCodeModel)(options.sequelize);
+        this.clients =
+            options.clientModel ??
+                (options.clientModelFactory ?? initOAuthClientModel)(options.sequelize, {
+                    tablePrefix: options.tablePrefix
+                });
+        this.codes =
+            options.codeModel ??
+                (options.codeModelFactory ?? initOAuthCodeModel)(options.sequelize, {
+                    tablePrefix: options.tablePrefix
+                });
         this.bcryptRounds = options.bcryptRounds ?? 12;
     }
     async getClient(clientId) {

package/dist/esm/passkey/models.d.ts

@@ -26,5 +26,9 @@ export declare class PasskeyChallengeModel extends Model<InferAttributes<Passkey
     createdAt?: Date;
     updatedAt?: Date;
 }
-export declare function initPasskeyCredentialModel(sequelize: Sequelize): ModelStatic<PasskeyCredentialModel>;
-export declare function initPasskeyChallengeModel(sequelize: Sequelize): ModelStatic<PasskeyChallengeModel>;
+export declare function initPasskeyCredentialModel(sequelize: Sequelize, options?: {
+    tablePrefix?: string;
+}): ModelStatic<PasskeyCredentialModel>;
+export declare function initPasskeyChallengeModel(sequelize: Sequelize, options?: {
+    tablePrefix?: string;
+}): ModelStatic<PasskeyChallengeModel>;

package/dist/esm/passkey/models.js

@@ -1,5 +1,16 @@
 import { DataTypes, Model } from 'sequelize';
 const DIALECTS_SUPPORTING_UNSIGNED = new Set(['mysql', 'mariadb']);
+function normalizeTablePrefix(prefix) {
+    if (!prefix) {
+        return undefined;
+    }
+    const trimmed = prefix.trim();
+    return trimmed.length > 0 ? trimmed : undefined;
+}
+function applyTablePrefix(prefix, tableName) {
+    const normalized = normalizeTablePrefix(prefix);
+    return normalized ? `${normalized}${tableName}` : tableName;
+}
 function integerIdType(sequelize) {
     return DIALECTS_SUPPORTING_UNSIGNED.has(sequelize.getDialect()) ? DataTypes.INTEGER.UNSIGNED : DataTypes.INTEGER;
 }
@@ -7,7 +18,7 @@ export class PasskeyCredentialModel extends Model {
 }
 export class PasskeyChallengeModel extends Model {
 }
-export function initPasskeyCredentialModel(sequelize) {
+export function initPasskeyCredentialModel(sequelize, options = {}) {
     const idType = integerIdType(sequelize);
     return PasskeyCredentialModel.init({
         credentialId: {
@@ -97,12 +108,12 @@ export function initPasskeyCredentialModel(sequelize) {
         }
     }, {
         sequelize,
-        tableName: 'passkey_credentials',
+        tableName: applyTablePrefix(options.tablePrefix, 'passkey_credentials'),
         timestamps: true,
         underscored: true
     });
 }
-export function initPasskeyChallengeModel(sequelize) {
+export function initPasskeyChallengeModel(sequelize, options = {}) {
     const idType = integerIdType(sequelize);
     return PasskeyChallengeModel.init({
         challenge: {
@@ -130,7 +141,7 @@ export function initPasskeyChallengeModel(sequelize) {
         }
     }, {
         sequelize,
-        tableName: 'passkey_challenges',
+        tableName: applyTablePrefix(options.tablePrefix, 'passkey_challenges'),
         timestamps: true,
         underscored: true,
         indexes: [{ fields: ['expires_at'] }, { fields: ['user_id'] }]

package/dist/esm/passkey/sequelize.d.ts

@@ -31,10 +31,15 @@ declare class PasskeyChallengeModel extends Model<InferAttributes<PasskeyChallen
 }
 export interface SequelizePasskeyStoreOptions {
     sequelize: Sequelize;
+    tablePrefix?: string;
     credentialModel?: ModelStatic<PasskeyCredentialModel>;
     challengeModel?: ModelStatic<PasskeyChallengeModel>;
-    credentialModelFactory?: (sequelize: Sequelize) => ModelStatic<PasskeyCredentialModel>;
-    challengeModelFactory?: (sequelize: Sequelize) => ModelStatic<PasskeyChallengeModel>;
+    credentialModelFactory?: (sequelize: Sequelize, options?: {
+        tablePrefix?: string;
+    }) => ModelStatic<PasskeyCredentialModel>;
+    challengeModelFactory?: (sequelize: Sequelize, options?: {
+        tablePrefix?: string;
+    }) => ModelStatic<PasskeyChallengeModel>;
     resolveUser: (params: {
         userId?: AuthIdentifier;
         login?: string;

package/dist/esm/passkey/sequelize.js

@@ -1,6 +1,17 @@
 import { DataTypes, Model, Op } from 'sequelize';
 import { PasskeyStore } from './base.js';
 const DIALECTS_SUPPORTING_UNSIGNED = new Set(['mysql', 'mariadb']);
+function normalizeTablePrefix(prefix) {
+    if (!prefix) {
+        return undefined;
+    }
+    const trimmed = prefix.trim();
+    return trimmed.length > 0 ? trimmed : undefined;
+}
+function applyTablePrefix(prefix, tableName) {
+    const normalized = normalizeTablePrefix(prefix);
+    return normalized ? `${normalized}${tableName}` : tableName;
+}
 function integerIdType(sequelize) {
     return DIALECTS_SUPPORTING_UNSIGNED.has(sequelize.getDialect()) ? DataTypes.INTEGER.UNSIGNED : DataTypes.INTEGER;
 }
@@ -20,7 +31,7 @@ class PasskeyCredentialModel extends Model {
 }
 class PasskeyChallengeModel extends Model {
 }
-function initPasskeyCredentialModel(sequelize) {
+function initPasskeyCredentialModel(sequelize, options = {}) {
     const idType = integerIdType(sequelize);
     return PasskeyCredentialModel.init({
         credentialId: {
@@ -110,12 +121,12 @@ function initPasskeyCredentialModel(sequelize) {
         }
     }, {
         sequelize,
-        tableName: 'passkey_credentials',
+        tableName: applyTablePrefix(options.tablePrefix, 'passkey_credentials'),
         timestamps: true,
         underscored: true
     });
 }
-function initPasskeyChallengeModel(sequelize) {
+function initPasskeyChallengeModel(sequelize, options = {}) {
     const idType = integerIdType(sequelize);
     return PasskeyChallengeModel.init({
         challenge: {
@@ -143,7 +154,7 @@ function initPasskeyChallengeModel(sequelize) {
         }
     }, {
         sequelize,
-        tableName: 'passkey_challenges',
+        tableName: applyTablePrefix(options.tablePrefix, 'passkey_challenges'),
         timestamps: true,
         underscored: true,
         indexes: [{ fields: ['expires_at'] }, { fields: ['user_id'] }]
@@ -158,9 +169,14 @@ export class SequelizePasskeyStore extends PasskeyStore {
         this.resolveUserFn = options.resolveUser;
         this.credentials =
             options.credentialModel ??
-                (options.credentialModelFactory ?? initPasskeyCredentialModel)(options.sequelize);
+                (options.credentialModelFactory ?? initPasskeyCredentialModel)(options.sequelize, {
+                    tablePrefix: options.tablePrefix
+                });
         this.challenges =
-            options.challengeModel ?? (options.challengeModelFactory ?? initPasskeyChallengeModel)(options.sequelize);
+            options.challengeModel ??
+                (options.challengeModelFactory ?? initPasskeyChallengeModel)(options.sequelize, {
+                    tablePrefix: options.tablePrefix
+                });
     }
     async resolveUser(params) {
         return this.resolveUserFn(params);

package/dist/esm/token/sequelize.d.ts

@@ -27,8 +27,11 @@ export type TokenAttributes = InferAttributes<TokenModel>;
 export type TokenCreationAttributes = InferCreationAttributes<TokenModel>;
 export interface SequelizeTokenStoreOptions {
     sequelize: Sequelize;
+    tablePrefix?: string;
     tokenModel?: ModelStatic<TokenModel>;
-    tokenModelFactory?: (sequelize: Sequelize) => ModelStatic<TokenModel>;
+    tokenModelFactory?: (sequelize: Sequelize, options?: {
+        tablePrefix?: string;
+    }) => ModelStatic<TokenModel>;
 }
 export declare class SequelizeTokenStore extends TokenStore {
     readonly Tokens: ModelStatic<TokenModel>;

package/dist/esm/token/sequelize.js

@@ -1,12 +1,23 @@
 import { DataTypes, Model, Op } from 'sequelize';
 import { TokenStore } from './base.js';
 const DIALECTS_SUPPORTING_UNSIGNED = new Set(['mysql', 'mariadb']);
+function normalizeTablePrefix(prefix) {
+    if (!prefix) {
+        return undefined;
+    }
+    const trimmed = prefix.trim();
+    return trimmed.length > 0 ? trimmed : undefined;
+}
+function applyTablePrefix(prefix, tableName) {
+    const normalized = normalizeTablePrefix(prefix);
+    return normalized ? `${normalized}${tableName}` : tableName;
+}
 class TokenModel extends Model {
 }
-function tokenTableOptions(sequelize) {
+function tokenTableOptions(sequelize, tablePrefix) {
     const opts = {
         sequelize,
-        tableName: 'jwttokens',
+        tableName: applyTablePrefix(tablePrefix, 'jwttokens'),
         timestamps: false
     };
     if (DIALECTS_SUPPORTING_UNSIGNED.has(sequelize.getDialect())) {
@@ -15,7 +26,11 @@ function tokenTableOptions(sequelize) {
     }
     return opts;
 }
-function initTokenModel(sequelize) {
+function initTokenModel(sequelize, options = {}) {
+    const tableName = applyTablePrefix(options.tablePrefix, 'jwttokens');
+    const usePrefixedIndexNames = tableName !== 'jwttokens';
+    const accessIndexName = usePrefixedIndexNames ? `${tableName}_access_unique` : 'jwt_access_unique';
+    const refreshIndexName = usePrefixedIndexNames ? `${tableName}_refresh_unique` : 'jwt_refresh_unique';
     TokenModel.init({
         token_id: {
             type: DIALECTS_SUPPORTING_UNSIGNED.has(sequelize.getDialect())
@@ -117,10 +132,10 @@ function initTokenModel(sequelize) {
             defaultValue: '[]'
         }
     }, {
-        ...tokenTableOptions(sequelize),
+        ...tokenTableOptions(sequelize, options.tablePrefix),
         indexes: [
-            { name: 'jwt_access_unique', unique: true, fields: ['access'] },
-            { name: 'jwt_refresh_unique', unique: true, fields: ['refresh'] }
+            { name: accessIndexName, unique: true, fields: ['access'] },
+            { name: refreshIndexName, unique: true, fields: ['refresh'] }
         ]
     });
     return TokenModel;
@@ -131,7 +146,11 @@ export class SequelizeTokenStore extends TokenStore {
         if (!options?.sequelize) {
             throw new Error('SequelizeTokenStore requires an initialised Sequelize instance');
         }
-        this.Tokens = options.tokenModel ?? (options.tokenModelFactory ?? initTokenModel)(options.sequelize);
+        this.Tokens =
+            options.tokenModel ??
+                (options.tokenModelFactory ?? initTokenModel)(options.sequelize, {
+                    tablePrefix: options.tablePrefix
+                });
     }
     async save(record) {
         const normalized = this.normalizeToken(record);

package/dist/esm/user/sequelize.d.ts

@@ -10,15 +10,20 @@ export declare class AuthUserModel extends Model<InferAttributes<AuthUserModel>,
 }
 export type AuthUserAttributes = InferAttributes<AuthUserModel>;
 export type AuthUserCreationAttributes = InferCreationAttributes<AuthUserModel>;
-export declare function initAuthUserModel(sequelize: Sequelize): typeof AuthUserModel;
+export declare function initAuthUserModel(sequelize: Sequelize, options?: {
+    tablePrefix?: string;
+}): typeof AuthUserModel;
 export type GenericUserModel = Model<Record<string, unknown>, Record<string, unknown>>;
 export type GenericUserModelStatic = ModelStatic<GenericUserModel>;
 export interface SequelizeUserStoreOptions<UserAttributes extends AuthUserAttributes = AuthUserAttributes, PublicUserShape extends Omit<UserAttributes, 'password'> = Omit<UserAttributes, 'password'>> {
     bcryptRounds?: number;
     bcryptPepper?: string;
     sequelize: Sequelize;
+    tablePrefix?: string;
     userModel?: GenericUserModelStatic;
-    userModelFactory?: (sequelize: Sequelize) => GenericUserModelStatic;
+    userModelFactory?: (sequelize: Sequelize, options?: {
+        tablePrefix?: string;
+    }) => GenericUserModelStatic;
     recordMapper?: (model: GenericUserModel) => UserAttributes;
     toPublic?: PublicUserMapper<UserAttributes, PublicUserShape>;
 }