@tinyrack/tinyauth-server 0.0.7

package/dist/repositories/user-totp.repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-totp.repository.d.ts","sourceRoot":"","sources":["../../src/repositories/user-totp.repository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAEvE,qBAAa,kBAAmB,SAAQ,gBAAgB,CAAC,eAAe,CAAC;IACvE;;;;;OAKG;IACG,aAAa,CAAC,OAAO,EAAE,MAAM;;;;uBAyDs2e,GAAG;;;;;;2BAAH,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;+BAAH,GAAG;;;+BAAH,GAAG;;;;;;;;;+BAAH,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;+BAAH,GAAG;;;+BAAH,GAAG;;;;;;;+BAAH,GAAG;;;+BAAH,GAAG;;;;;;;;;+BAAH,GAAG;;;;mCAAH,GAAG;;;mCAAH,GAAG;;;;;;;;;;;;;;;;+BAAH,GAAG;;;+BAAH,GAAG;;;;;;;2BAAH,GAAG;;;2BAAH,GAAG;;;;;;;;;;;;;;;;uBAAH,GAAG;;;uBAAH,GAAG;;;IArD54e;;;;;;OAMG;IACG,4BAA4B,CAAC,OAAO,EAAE,MAAM;;;;uBA8Cu1e,GAAG;;;;;;2BAAH,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;+BAAH,GAAG;;;+BAAH,GAAG;;;;;;;;;+BAAH,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;+BAAH,GAAG;;;+BAAH,GAAG;;;;;;;+BAAH,GAAG;;;+BAAH,GAAG;;;;;;;;;+BAAH,GAAG;;;;mCAAH,GAAG;;;mCAAH,GAAG;;;;;;;;;;;;;;;;+BAAH,GAAG;;;+BAAH,GAAG;;;;;;;2BAAH,GAAG;;;2BAAH,GAAG;;;;;;;;;;;;;;;;uBAAH,GAAG;;;uBAAH,GAAG;;;IAvC54e;;;;;;OAMG;IACG,qBAAqB,CAAC,OAAO,EAAE,MAAM;;;;uBAgC81e,GAAG;;;;;;2BAAH,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;+BAAH,GAAG;;;+BAAH,GAAG;;;;;;;;;+BAAH,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;+BAAH,GAAG;;;+BAAH,GAAG;;;;;;;+BAAH,GAAG;;;+BAAH,GAAG;;;;;;;;;+BAAH,GAAG;;;;mCAAH,GAAG;;;mCAAH,GAAG;;;;;;;;;;;;;;;;+BAAH,GAAG;;;+BAAH,GAAG;;;;;;;2BAAH,GAAG;;;2BAAH,GAAG;;;;;;;;;;;;;;;;uBAAH,GAAG;;;uBAAH,GAAG;;;IAzB54e;;;;;OAKG;IACG,YAAY,CAAC,OAAO,EAAE,MAAM;IASlC;;;;;OAKG;IACG,eAAe,CAAC,OAAO,EAAE,MAAM;CAGtC"}

package/dist/repositories/user-totp.repository.js

@@ -0,0 +1,56 @@
+import { EntityRepository } from '@mikro-orm/core';
+export class UserTotpRepository extends EntityRepository {
+    /**
+     * Find TOTP configuration by user sub
+     *
+     * @param userSub - User sub to lookup
+     * @returns TOTP entity or null if not found
+     */
+    async findByUserSub(userSub) {
+        return this.findOne({ user: { sub: userSub } }, { populate: ['secret'] });
+    }
+    /**
+     * Find fully registered TOTP configuration by user sub
+     * (verified AND recovery codes confirmed)
+     *
+     * @param userSub - User sub to lookup
+     * @returns Fully registered TOTP entity or null if not found
+     */
+    async findFullyRegisteredByUserSub(userSub) {
+        return this.findOne({ user: { sub: userSub }, verified: true, recovery_confirmed: true }, { populate: ['secret'] });
+    }
+    /**
+     * Find verified TOTP configuration by user sub
+     * (verified but may not have recovery codes confirmed)
+     *
+     * @param userSub - User sub to lookup
+     * @returns Verified TOTP entity or null if not found
+     */
+    async findVerifiedByUserSub(userSub) {
+        return this.findOne({ user: { sub: userSub }, verified: true }, { populate: ['secret'] });
+    }
+    /**
+     * Check if user has TOTP fully enabled (verified AND recovery confirmed)
+     *
+     * @param userSub - User sub to check
+     * @returns True if TOTP is fully enabled for user
+     */
+    async isRegistered(userSub) {
+        const count = await this.count({
+            user: { sub: userSub },
+            verified: true,
+            recovery_confirmed: true,
+        });
+        return count > 0;
+    }
+    /**
+     * Delete TOTP configuration for a user
+     *
+     * @param userSub - User sub to delete TOTP for
+     * @returns Number of deleted records
+     */
+    async deleteByUserSub(userSub) {
+        return this.nativeDelete({ user: { sub: userSub } });
+    }
+}
+//# sourceMappingURL=user-totp.repository.js.map

package/dist/repositories/user-totp.repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-totp.repository.js","sourceRoot":"","sources":["../../src/repositories/user-totp.repository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAGnD,MAAM,OAAO,kBAAmB,SAAQ,gBAAiC;IACvE;;;;;OAKG;IACH,KAAK,CAAC,aAAa,CAAC,OAAe;QACjC,OAAO,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC5E,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,4BAA4B,CAAC,OAAe;QAChD,OAAO,IAAI,CAAC,OAAO,CACjB,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,EACpE,EAAE,QAAQ,EAAE,CAAC,QAAQ,CAAC,EAAE,CACzB,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,qBAAqB,CAAC,OAAe;QACzC,OAAO,IAAI,CAAC,OAAO,CACjB,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,EAC1C,EAAE,QAAQ,EAAE,CAAC,QAAQ,CAAC,EAAE,CACzB,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,YAAY,CAAC,OAAe;QAChC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC;YAC7B,IAAI,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE;YACtB,QAAQ,EAAE,IAAI;YACd,kBAAkB,EAAE,IAAI;SACzB,CAAC,CAAC;QACH,OAAO,KAAK,GAAG,CAAC,CAAC;IACnB,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,eAAe,CAAC,OAAe;QACnC,OAAO,IAAI,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;IACvD,CAAC;CACF"}

package/dist/repositories/user.repository.d.ts

@@ -0,0 +1,32 @@
+import { EntityRepository, type Loaded } from '@mikro-orm/core';
+import type { UserEntity } from '../entities/user.entity.ts';
+export declare class UserRepository extends EntityRepository<UserEntity> {
+    /**
+     * Find user by sub with no relation populate.
+     * Use this for lightweight verification (e.g., middleware).
+     * If you need related data (totps, passkeys, password_hash),
+     * use verifyBySub() or populate the entity yourself.
+     */
+    findBySub(sub: string): Promise<UserEntity>;
+    verifyBySub(sub: string): Promise<Loaded<UserEntity, 'password_hash' | 'passkeys' | 'totps', '*', never>>;
+    findActiveByEmailForPasswordAuth(email: string): Promise<Loaded<UserEntity, 'password_hash' | 'passkeys' | 'totps', '*', never>>;
+    /**
+     * Check if email is already registered (excluding deleted users)
+     *
+     * @param email - Email address to check
+     * @returns True if email exists and is not deleted, false otherwise
+     */
+    exists(email: string): Promise<boolean>;
+    /**
+     * Register a new user
+     *
+     * @param params - Registration data
+     * @returns Newly created user entity
+     * @throws {EmailAlreadyExists} When email is already registered
+     */
+    register(params: {
+        email: string;
+        passwordHash: string;
+    }): Promise<UserEntity>;
+}
+//# sourceMappingURL=user.repository.d.ts.map

package/dist/repositories/user.repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user.repository.d.ts","sourceRoot":"","sources":["../../src/repositories/user.repository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,KAAK,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAChE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAG7D,qBAAa,cAAe,SAAQ,gBAAgB,CAAC,UAAU,CAAC;IAC9D;;;;;OAKG;IACU,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAQ3C,WAAW,CACtB,GAAG,EAAE,MAAM,GACV,OAAO,CACR,MAAM,CAAC,UAAU,EAAE,eAAe,GAAG,UAAU,GAAG,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,CACvE;IAiBY,gCAAgC,CAC3C,KAAK,EAAE,MAAM,GACZ,OAAO,CACR,MAAM,CAAC,UAAU,EAAE,eAAe,GAAG,UAAU,GAAG,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,CACvE;IAiBD;;;;;OAKG;IACU,MAAM,CAAC,KAAK,EAAE,MAAM;IAKjC;;;;;;OAMG;IACU,QAAQ,CAAC,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE;CAYtE"}

package/dist/repositories/user.repository.js

@@ -0,0 +1,70 @@
+import { EntityRepository } from '@mikro-orm/core';
+import { e } from "../schemas/error.js";
+export class UserRepository extends EntityRepository {
+    /**
+     * Find user by sub with no relation populate.
+     * Use this for lightweight verification (e.g., middleware).
+     * If you need related data (totps, passkeys, password_hash),
+     * use verifyBySub() or populate the entity yourself.
+     */
+    async findBySub(sub) {
+        const user = await this.findOneOrFail({ sub }, { failHandler: () => new e.UserNotFound.Error() });
+        return user;
+    }
+    async verifyBySub(sub) {
+        const user = await this.findOneOrFail({
+            sub: sub,
+        }, {
+            populate: ['password_hash', 'totps', 'passkeys'],
+            populateWhere: {
+                totps: { verified: true },
+                passkeys: {},
+            },
+            failHandler: () => new e.UserNotFound.Error(),
+        });
+        return user;
+    }
+    async findActiveByEmailForPasswordAuth(email) {
+        return this.findOneOrFail({
+            email,
+            deleted_at: null,
+        }, {
+            populate: ['password_hash', 'totps', 'passkeys'],
+            populateWhere: {
+                totps: { verified: true },
+                passkeys: {},
+            },
+            failHandler: () => new e.InvalidEmailOrPassword.Error(),
+        });
+    }
+    /**
+     * Check if email is already registered (excluding deleted users)
+     *
+     * @param email - Email address to check
+     * @returns True if email exists and is not deleted, false otherwise
+     */
+    async exists(email) {
+        const count = await this.count({ email: email, deleted_at: null });
+        return count > 0;
+    }
+    /**
+     * Register a new user
+     *
+     * @param params - Registration data
+     * @returns Newly created user entity
+     * @throws {EmailAlreadyExists} When email is already registered
+     */
+    async register(params) {
+        const emailExists = await this.exists(params.email);
+        if (emailExists) {
+            throw new e.EmailAlreadyExists.Error();
+        }
+        const user = this.create({
+            email: params.email,
+            password_hash: params.passwordHash,
+        });
+        await this.getEntityManager().persist(user).flush();
+        return user;
+    }
+}
+//# sourceMappingURL=user.repository.js.map

package/dist/repositories/user.repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user.repository.js","sourceRoot":"","sources":["../../src/repositories/user.repository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAe,MAAM,iBAAiB,CAAC;AAEhE,OAAO,EAAE,CAAC,EAAE,MAAM,qBAAqB,CAAC;AAExC,MAAM,OAAO,cAAe,SAAQ,gBAA4B;IAC9D;;;;;OAKG;IACI,KAAK,CAAC,SAAS,CAAC,GAAW;QAChC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,aAAa,CACnC,EAAE,GAAG,EAAE,EACP,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,KAAK,EAAE,EAAE,CAClD,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAEM,KAAK,CAAC,WAAW,CACtB,GAAW;QAIX,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,aAAa,CACnC;YACE,GAAG,EAAE,GAAG;SACT,EACD;YACE,QAAQ,EAAE,CAAC,eAAe,EAAE,OAAO,EAAE,UAAU,CAAC;YAChD,aAAa,EAAE;gBACb,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;gBACzB,QAAQ,EAAE,EAAE;aACb;YACD,WAAW,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,KAAK,EAAE;SAC9C,CACF,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAEM,KAAK,CAAC,gCAAgC,CAC3C,KAAa;QAIb,OAAO,IAAI,CAAC,aAAa,CACvB;YACE,KAAK;YACL,UAAU,EAAE,IAAI;SACjB,EACD;YACE,QAAQ,EAAE,CAAC,eAAe,EAAE,OAAO,EAAE,UAAU,CAAC;YAChD,aAAa,EAAE;gBACb,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;gBACzB,QAAQ,EAAE,EAAE;aACb;YACD,WAAW,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,sBAAsB,CAAC,KAAK,EAAE;SACxD,CACF,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACI,KAAK,CAAC,MAAM,CAAC,KAAa;QAC/B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;QACnE,OAAO,KAAK,GAAG,CAAC,CAAC;IACnB,CAAC;IAED;;;;;;OAMG;IACI,KAAK,CAAC,QAAQ,CAAC,MAA+C;QACnE,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACpD,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,IAAI,CAAC,CAAC,kBAAkB,CAAC,KAAK,EAAE,CAAC;QACzC,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC;YACvB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,aAAa,EAAE,MAAM,CAAC,YAAY;SACnC,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;QACpD,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}

package/dist/routes/.well-known/index.d.ts

@@ -0,0 +1,12 @@
+import type { AppEnv } from '#server/lib/app-env.js';
+export declare const wellKnownRoutes: import("hono/hono-base").HonoBase<AppEnv, import("hono/types").BlankSchema | import("hono/types").MergeSchemaPath<{
+    "/openid-configuration": {
+        $get: {
+            input: {};
+            output: undefined;
+            outputFormat: "redirect";
+            status: 302;
+        };
+    };
+}, "/">, "/", "/">;
+//# sourceMappingURL=index.d.ts.map

package/dist/routes/.well-known/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/routes/.well-known/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAGrD,eAAO,MAAM,eAAe;;;;;;;;;kBAAiD,CAAC"}

package/dist/routes/.well-known/index.js

@@ -0,0 +1,4 @@
+import { Hono } from 'hono';
+import { openidConfigGet } from './openid-configuration/get.js';
+export const wellKnownRoutes = new Hono().route('/', openidConfigGet);
+//# sourceMappingURL=index.js.map

package/dist/routes/.well-known/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/routes/.well-known/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAEhE,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,IAAI,EAAU,CAAC,KAAK,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC"}

package/dist/routes/.well-known/openid-configuration/get.d.ts

@@ -0,0 +1,19 @@
+import type { AppEnv } from '#server/lib/app-env.js';
+/**
+ * Standard OIDC Discovery endpoint at /.well-known/openid-configuration
+ * Redirects to /oauth/.well-known/openid-configuration
+ *
+ * This provides compatibility with clients that expect the standard
+ * OIDC Discovery URL at the root level.
+ */
+export declare const openidConfigGet: import("hono/hono-base").HonoBase<AppEnv, {
+    "/openid-configuration": {
+        $get: {
+            input: {};
+            output: undefined;
+            outputFormat: "redirect";
+            status: 302;
+        };
+    };
+}, "/", "/openid-configuration">;
+//# sourceMappingURL=get.d.ts.map

package/dist/routes/.well-known/openid-configuration/get.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"get.d.ts","sourceRoot":"","sources":["../../../../src/routes/.well-known/openid-configuration/get.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAErD;;;;;;GAMG;AACH,eAAO,MAAM,eAAe;;;;;;;;;gCAK3B,CAAC"}

package/dist/routes/.well-known/openid-configuration/get.js

@@ -0,0 +1,12 @@
+import { Hono } from 'hono';
+/**
+ * Standard OIDC Discovery endpoint at /.well-known/openid-configuration
+ * Redirects to /oauth/.well-known/openid-configuration
+ *
+ * This provides compatibility with clients that expect the standard
+ * OIDC Discovery URL at the root level.
+ */
+export const openidConfigGet = new Hono().get('/openid-configuration', async (c) => {
+    return c.redirect('/oauth/.well-known/openid-configuration');
+});
+//# sourceMappingURL=get.js.map

package/dist/routes/.well-known/openid-configuration/get.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get.js","sourceRoot":"","sources":["../../../../src/routes/.well-known/openid-configuration/get.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAG5B;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,IAAI,EAAU,CAAC,GAAG,CACnD,uBAAuB,EACvB,KAAK,EAAE,CAAC,EAAE,EAAE;IACV,OAAO,CAAC,CAAC,QAAQ,CAAC,yCAAyC,CAAC,CAAC;AAC/D,CAAC,CACF,CAAC"}

package/dist/routes/api/auth/email/resend/post.d.ts

@@ -0,0 +1,22 @@
+import type { AppEnv } from '../../../../../lib/app-env.ts';
+export declare const authEmailResendPost: import("hono/hono-base").HonoBase<AppEnv, {
+    "/auth/email/resend": {
+        $post: {
+            input: {
+                header: {
+                    'accept-language'?: string;
+                };
+            } & {
+                json: {
+                    email: string;
+                };
+            };
+            output: {
+                message: string;
+            };
+            outputFormat: "json";
+            status: 200;
+        };
+    };
+}, "/", "/auth/email/resend">;
+//# sourceMappingURL=post.d.ts.map

package/dist/routes/api/auth/email/resend/post.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"post.d.ts","sourceRoot":"","sources":["../../../../../../src/routes/api/auth/email/resend/post.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,+BAA+B,CAAC;AAM5D,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;6BA2E/B,CAAC"}

package/dist/routes/api/auth/email/resend/post.js

@@ -0,0 +1,64 @@
+import { Hono } from 'hono';
+import { describeRoute, resolver, validator } from 'hono-openapi';
+import { z } from 'zod';
+import { TAGS } from "../../../../../lib/swagger-tags.js";
+import { e } from "../../../../../schemas/error.js";
+import { f } from "../../../../../schemas/field.js";
+import { r } from "../../../../../schemas/response.js";
+export const authEmailResendPost = new Hono().post('/auth/email/resend', describeRoute({
+    tags: [TAGS.AUTH],
+    summary: 'Resend Verification Email',
+    description: 'Resend email verification link to user',
+    responses: {
+        200: {
+            content: {
+                'application/json': {
+                    schema: resolver(r.MessageResponse),
+                },
+            },
+            description: 'Success',
+        },
+        400: {
+            content: {
+                'application/json': {
+                    schema: resolver(e.EmailAlreadyVerified.Schema),
+                },
+            },
+            description: 'Email already verified',
+        },
+        404: {
+            content: {
+                'application/json': {
+                    schema: resolver(e.UserNotFound.Schema),
+                },
+            },
+            description: 'User not found',
+        },
+        403: {
+            content: {
+                'application/json': {
+                    schema: resolver(e.EmailNotActivated.Schema),
+                },
+            },
+            description: 'Email service not activated',
+        },
+    },
+}), validator('header', z.object({
+    'accept-language': f.acceptLanguage,
+})), validator('json', z.object({
+    email: f.userEmail,
+})), async (c) => {
+    const services = c.var.services;
+    const body = c.req.valid('json');
+    const headers = c.req.valid('header');
+    const verification = await services.emailService.resendVerification(body.email);
+    services.emailService.sendVerificationEmailAsync({
+        email: body.email,
+        token: verification.token,
+        locale: headers['accept-language'],
+    });
+    return c.json({
+        message: 'Verification email has been resent. Please check your inbox.',
+    }, 200);
+});
+//# sourceMappingURL=post.js.map

package/dist/routes/api/auth/email/resend/post.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"post.js","sourceRoot":"","sources":["../../../../../../src/routes/api/auth/email/resend/post.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAClE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,IAAI,EAAE,MAAM,oCAAoC,CAAC;AAC1D,OAAO,EAAE,CAAC,EAAE,MAAM,iCAAiC,CAAC;AACpD,OAAO,EAAE,CAAC,EAAE,MAAM,iCAAiC,CAAC;AACpD,OAAO,EAAE,CAAC,EAAE,MAAM,oCAAoC,CAAC;AAEvD,MAAM,CAAC,MAAM,mBAAmB,GAAG,IAAI,IAAI,EAAU,CAAC,IAAI,CACxD,oBAAoB,EACpB,aAAa,CAAC;IACZ,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;IACjB,OAAO,EAAE,2BAA2B;IACpC,WAAW,EAAE,wCAAwC;IACrD,SAAS,EAAE;QACT,GAAG,EAAE;YACH,OAAO,EAAE;gBACP,kBAAkB,EAAE;oBAClB,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC;iBACpC;aACF;YACD,WAAW,EAAE,SAAS;SACvB;QACD,GAAG,EAAE;YACH,OAAO,EAAE;gBACP,kBAAkB,EAAE;oBAClB,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC;iBAChD;aACF;YACD,WAAW,EAAE,wBAAwB;SACtC;QACD,GAAG,EAAE;YACH,OAAO,EAAE;gBACP,kBAAkB,EAAE;oBAClB,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC;iBACxC;aACF;YACD,WAAW,EAAE,gBAAgB;SAC9B;QACD,GAAG,EAAE;YACH,OAAO,EAAE;gBACP,kBAAkB,EAAE;oBAClB,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,iBAAiB,CAAC,MAAM,CAAC;iBAC7C;aACF;YACD,WAAW,EAAE,6BAA6B;SAC3C;KACF;CACF,CAAC,EACF,SAAS,CACP,QAAQ,EACR,CAAC,CAAC,MAAM,CAAC;IACP,iBAAiB,EAAE,CAAC,CAAC,cAAc;CACpC,CAAC,CACH,EACD,SAAS,CACP,MAAM,EACN,CAAC,CAAC,MAAM,CAAC;IACP,KAAK,EAAE,CAAC,CAAC,SAAS;CACnB,CAAC,CACH,EACD,KAAK,EAAE,CAAC,EAAE,EAAE;IACV,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC;IAChC,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACjC,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAEtC,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,kBAAkB,CACjE,IAAI,CAAC,KAAK,CACX,CAAC;IAEF,QAAQ,CAAC,YAAY,CAAC,0BAA0B,CAAC;QAC/C,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,KAAK,EAAE,YAAY,CAAC,KAAK;QACzB,MAAM,EAAE,OAAO,CAAC,iBAAiB,CAAC;KACnC,CAAC,CAAC;IAEH,OAAO,CAAC,CAAC,IAAI,CACX;QACE,OAAO,EAAE,8DAA8D;KACxE,EACD,GAAG,CACJ,CAAC;AACJ,CAAC,CACF,CAAC"}

package/dist/routes/api/auth/email/verify/post.d.ts

@@ -0,0 +1,29 @@
+import type { AppEnv } from '../../../../../lib/app-env.ts';
+export declare const authEmailVerifyPost: import("hono/hono-base").HonoBase<AppEnv, {
+    "/auth/email/verify": {
+        $post: {
+            input: {
+                json: {
+                    token: string;
+                };
+            };
+            output: {
+                user: {
+                    managed_by: "database" | "config";
+                    sub: string;
+                    email: string;
+                    email_verified: boolean;
+                    email_verification_required: boolean;
+                    has_password: boolean;
+                    totp_registered: boolean;
+                    totp_recovery_codes_missing: boolean;
+                    second_factor_required: boolean;
+                    passkey_count: number;
+                };
+            };
+            outputFormat: "json";
+            status: 200;
+        };
+    };
+}, "/", "/auth/email/verify">;
+//# sourceMappingURL=post.d.ts.map

package/dist/routes/api/auth/email/verify/post.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"post.d.ts","sourceRoot":"","sources":["../../../../../../src/routes/api/auth/email/verify/post.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,+BAA+B,CAAC;AAM5D,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;6BA8D/B,CAAC"}

package/dist/routes/api/auth/email/verify/post.js

@@ -0,0 +1,55 @@
+import { Hono } from 'hono';
+import { describeRoute, resolver, validator } from 'hono-openapi';
+import { z } from 'zod';
+import { TAGS } from "../../../../../lib/swagger-tags.js";
+import { e } from "../../../../../schemas/error.js";
+import { f } from "../../../../../schemas/field.js";
+import { r } from "../../../../../schemas/response.js";
+export const authEmailVerifyPost = new Hono().post('/auth/email/verify', describeRoute({
+    tags: [TAGS.AUTH],
+    summary: 'Verify Email',
+    description: 'Verify user email with verification token',
+    responses: {
+        200: {
+            content: {
+                'application/json': { schema: resolver(r.AuthResponse) },
+            },
+            description: 'Success',
+        },
+        400: {
+            content: {
+                'application/json': {
+                    schema: resolver(e.InvalidVerificationToken.Schema),
+                },
+            },
+            description: 'Invalid verification token',
+        },
+        403: {
+            content: {
+                'application/json': {
+                    schema: resolver(e.EmailNotActivated.Schema),
+                },
+            },
+            description: 'Email service not activated',
+        },
+    },
+}), validator('json', z.object({
+    token: f.token,
+})), async (c) => {
+    const services = c.var.services;
+    const session = c.var.session;
+    const body = c.req.valid('json');
+    const user = await services.emailService.verifyEmail(body.token);
+    const userSession = await services.userService.getSessionUserBySub(user.sub);
+    const available2FAMethods = services.userService.getAvailable2FASetupMethods();
+    if (userSession.second_factor_required &&
+        !userSession.totp_registered &&
+        userSession.passkey_count === 0 &&
+        available2FAMethods.length > 0) {
+        session.setPending2FASetupSession(user.sub);
+        return c.json({ user: userSession }, 200);
+    }
+    session.setUserSession(user.sub);
+    return c.json({ user: userSession }, 200);
+});
+//# sourceMappingURL=post.js.map

package/dist/routes/api/auth/email/verify/post.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"post.js","sourceRoot":"","sources":["../../../../../../src/routes/api/auth/email/verify/post.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAClE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,IAAI,EAAE,MAAM,oCAAoC,CAAC;AAC1D,OAAO,EAAE,CAAC,EAAE,MAAM,iCAAiC,CAAC;AACpD,OAAO,EAAE,CAAC,EAAE,MAAM,iCAAiC,CAAC;AACpD,OAAO,EAAE,CAAC,EAAE,MAAM,oCAAoC,CAAC;AAEvD,MAAM,CAAC,MAAM,mBAAmB,GAAG,IAAI,IAAI,EAAU,CAAC,IAAI,CACxD,oBAAoB,EACpB,aAAa,CAAC;IACZ,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;IACjB,OAAO,EAAE,cAAc;IACvB,WAAW,EAAE,2CAA2C;IACxD,SAAS,EAAE;QACT,GAAG,EAAE;YACH,OAAO,EAAE;gBACP,kBAAkB,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE;aACzD;YACD,WAAW,EAAE,SAAS;SACvB;QACD,GAAG,EAAE;YACH,OAAO,EAAE;gBACP,kBAAkB,EAAE;oBAClB,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,wBAAwB,CAAC,MAAM,CAAC;iBACpD;aACF;YACD,WAAW,EAAE,4BAA4B;SAC1C;QACD,GAAG,EAAE;YACH,OAAO,EAAE;gBACP,kBAAkB,EAAE;oBAClB,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,iBAAiB,CAAC,MAAM,CAAC;iBAC7C;aACF;YACD,WAAW,EAAE,6BAA6B;SAC3C;KACF;CACF,CAAC,EACF,SAAS,CACP,MAAM,EACN,CAAC,CAAC,MAAM,CAAC;IACP,KAAK,EAAE,CAAC,CAAC,KAAK;CACf,CAAC,CACH,EACD,KAAK,EAAE,CAAC,EAAE,EAAE;IACV,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC;IAChC,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC;IAC9B,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAEjC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACjE,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,WAAW,CAAC,mBAAmB,CAChE,IAAI,CAAC,GAAG,CACT,CAAC;IACF,MAAM,mBAAmB,GACvB,QAAQ,CAAC,WAAW,CAAC,2BAA2B,EAAE,CAAC;IAErD,IACE,WAAW,CAAC,sBAAsB;QAClC,CAAC,WAAW,CAAC,eAAe;QAC5B,WAAW,CAAC,aAAa,KAAK,CAAC;QAC/B,mBAAmB,CAAC,MAAM,GAAG,CAAC,EAC9B,CAAC;QACD,OAAO,CAAC,yBAAyB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC5C,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,GAAG,CAAC,CAAC;IAC5C,CAAC;IAED,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,GAAG,CAAC,CAAC;AAC5C,CAAC,CACF,CAAC"}