@uln/auth 0.1.0

package/src/types.ts

@@ -0,0 +1,55 @@
+export interface User {
+	id: string;
+	email: string;
+	name: string;
+	passwordHash: string;
+	isAdmin: boolean;
+	emailVerified: boolean;
+	createdAt: string;
+	updatedAt: string;
+}
+
+export interface UserStore {
+	getUser(id: string): Promise<User | null>;
+	getUserByEmail(email: string): Promise<User | null>;
+	listUsers(): Promise<User[]>;
+	saveUser(user: User): Promise<void>;
+	deleteUser(id: string): Promise<void>;
+}
+
+export interface RateLimitEntry {
+	attempts: number;
+	firstAttempt: number;
+}
+
+export interface RateLimitStore {
+	get(key: string): Promise<RateLimitEntry | null>;
+	set(key: string, entry: RateLimitEntry, ttlSeconds: number): Promise<void>;
+	delete(key: string): Promise<void>;
+}
+
+export interface RateLimitConfig {
+	maxAttempts: number;
+	windowSeconds: number;
+}
+
+export interface TokenPayload {
+	sub: string;
+	email: string;
+	name: string;
+	admin: boolean;
+	scopes: string[];
+	iat: number;
+	exp: number;
+}
+
+export interface TokenConfig {
+	secret: string;
+	maxAgeSeconds: number;
+}
+
+export interface CookieConfig {
+	name: string;
+	maxAgeSeconds: number;
+	secure: boolean;
+}

package/src/users.ts

@@ -0,0 +1,46 @@
+import { hashPassword, verifyPassword } from "./password.ts";
+import type { User, UserStore } from "./types.ts";
+
+export async function createUser(
+	store: UserStore,
+	input: { email: string; name: string; password?: string; isAdmin?: boolean },
+): Promise<User> {
+	const existing = await store.getUserByEmail(input.email);
+	if (existing) throw new Error(`User with email ${input.email} already exists`);
+
+	const now = new Date().toISOString();
+	const passwordHash = input.password ? await hashPassword(input.password) : await hashPassword(crypto.randomUUID());
+	const user: User = {
+		id: crypto.randomUUID(),
+		email: input.email.toLowerCase(),
+		name: input.name,
+		passwordHash,
+		isAdmin: input.isAdmin ?? false,
+		emailVerified: input.isAdmin ?? false,
+		createdAt: now,
+		updatedAt: now,
+	};
+
+	await store.saveUser(user);
+	return user;
+}
+
+export async function verifyUserCredentials(store: UserStore, email: string, password: string): Promise<User | null> {
+	const user = await store.getUserByEmail(email.toLowerCase());
+	if (!user) return null;
+
+	const valid = await verifyPassword(password, user.passwordHash);
+	return valid ? user : null;
+}
+
+export async function changePassword(store: UserStore, userId: string, newPassword: string): Promise<void> {
+	const user = await store.getUser(userId);
+	if (!user) throw new Error(`User ${userId} not found`);
+
+	const updated: User = {
+		...user,
+		passwordHash: await hashPassword(newPassword),
+		updatedAt: new Date().toISOString(),
+	};
+	await store.saveUser(updated);
+}