@vitnode/core 1.2.0-canary.51 → 1.2.0-canary.53

package/dist/src/api/middlewares/global.middleware.js

@@ -4,25 +4,26 @@ import { SessionModel } from "../models/session.js";
 import { SessionAdminModel } from "../models/session-admin.js";
 import { loggerMiddleware } from "../lib/logger-middleware.js";
 export const globalMiddleware = ({ authorization, metadata, email, dbProvider, captcha, plugins, pathToMessages })=>{
+    // biome-ignore lint/complexity/noExcessiveCognitiveComplexity: <needed>
     return async (c, next)=>{
         // Collect possible IP header keys in order of trust/preference
         const ipHeaderKeys = [
-            'x-forwarded-for',
-            'x-real-ip',
-            'cf-connecting-ip',
-            'x-client-ip',
-            'x-forwarded',
-            'x-cluster-client-ip',
-            'forwarded-for',
-            'forwarded',
-            'via',
-            'remote-addr',
-            'client-ip',
-            'ip',
-            'x-ip',
-            'true-client-ip',
-            'fastly-client-ip',
-            'x-fastly-client-ip'
+            "x-forwarded-for",
+            "x-real-ip",
+            "cf-connecting-ip",
+            "x-client-ip",
+            "x-forwarded",
+            "x-cluster-client-ip",
+            "forwarded-for",
+            "forwarded",
+            "via",
+            "remote-addr",
+            "client-ip",
+            "ip",
+            "x-ip",
+            "true-client-ip",
+            "fastly-client-ip",
+            "x-fastly-client-ip"
         ];
         let ipAddress;
         // Try to get IP from Hono's request header method first
@@ -44,20 +45,20 @@ export const globalMiddleware = ({ authorization, metadata, email, dbProvider, c
             }
         }
         // Fallback to localhost if nothing found
-        c.set('ipAddress', ipAddress ?? '127.0.0.1');
-        c.set('db', dbProvider);
-        c.set('email', new EmailModel(c));
-        c.set('core', {
+        c.set("ipAddress", ipAddress ?? "127.0.0.1");
+        c.set("db", dbProvider);
+        c.set("email", new EmailModel(c));
+        c.set("core", {
             pathToMessages,
             metadata,
             email,
             authorization: {
-                cookieName: authorization?.cookieName ?? 'vitnode_auth',
+                cookieName: authorization?.cookieName ?? "vitnode_auth",
                 cookie_expires: authorization?.cookieExpires ?? 1000 * 60 * 60 * 24 * 90,
                 ssoAdapters: authorization?.ssoAdapters ?? [],
-                deviceCookieName: authorization?.deviceCookieName ?? 'vitnode_device',
+                deviceCookieName: authorization?.deviceCookieName ?? "vitnode_device",
                 deviceCookieExpires: authorization?.deviceCookieExpires ?? 1000 * 60 * 60 * 24 * 365,
-                adminCookieName: authorization?.adminCookieName ?? 'vitnode_auth_admin',
+                adminCookieName: authorization?.adminCookieName ?? "vitnode_auth_admin",
                 adminCookieExpires: authorization?.adminCookieExpires ?? 1000 * 60 * 60 * 24 * 1,
                 cookieSecure: authorization?.cookieSecure ?? true
             },
@@ -67,15 +68,15 @@ export const globalMiddleware = ({ authorization, metadata, email, dbProvider, c
                 }))
         });
         const user = await new SessionModel(c).getUser();
-        c.set('user', user);
-        c.set('admin', null);
-        c.set('log', loggerMiddleware(c));
+        c.set("user", user);
+        c.set("admin", null);
+        c.set("log", loggerMiddleware(c));
         await next();
     };
 };
 export const pluginMiddleware = (pluginId)=>{
     return async (c, next)=>{
-        c.set('plugin', {
+        c.set("plugin", {
             id: pluginId
         });
         await next();
@@ -85,7 +86,7 @@ export const globalAdminMiddleware = ()=>{
     return async (c, next)=>{
         const user = await new SessionAdminModel(c).getUser();
         if (!user) throw new HTTPException(403);
-        c.set('admin', {
+        c.set("admin", {
             user
         });
         await next();

package/dist/src/api/middlewares/rate-limiter.middleware.d.ts

@@ -1,4 +1,4 @@
-import type { Context, Next } from 'hono';
-import { type IRateLimiterOptions } from 'rate-limiter-flexible';
-export declare const rateLimiterMiddleware: (options?: Omit<IRateLimiterOptions, "keyPrefix">) => ((c: Context, next: Next) => Promise<void>) | ((c: Context, next: Next) => Promise<(Response & import("hono").TypedResponse<"Too Many Requests", 429, "text">) | undefined>);
+import type { Context, Next } from "hono";
+import { type IRateLimiterOptions } from "rate-limiter-flexible";
+export declare const rateLimiterMiddleware: (options?: Omit<IRateLimiterOptions, "keyPrefix">) => ((_c: Context, next: Next) => Promise<void>) | ((c: Context, next: Next) => Promise<(Response & import("hono").TypedResponse<"Too Many Requests", 429, "text">) | undefined>);
 //# sourceMappingURL=rate-limiter.middleware.d.ts.map

package/dist/src/api/middlewares/rate-limiter.middleware.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rate-limiter.middleware.d.ts","sourceRoot":"","sources":["../../../../src/api/middlewares/rate-limiter.middleware.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE1C,OAAO,EACL,KAAK,mBAAmB,EAGzB,MAAM,uBAAuB,CAAC;AAoB/B,eAAO,MAAM,qBAAqB,GAChC,UAAU,IAAI,CAAC,mBAAmB,EAAE,WAAW,CAAC,UAI7B,OAAO,QAAQ,IAAI,2BAUrB,OAAO,QAAQ,IAAI,sGAWrC,CAAC"}
+{"version":3,"file":"rate-limiter.middleware.d.ts","sourceRoot":"","sources":["../../../../src/api/middlewares/rate-limiter.middleware.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE1C,OAAO,EACL,KAAK,mBAAmB,EAGzB,MAAM,uBAAuB,CAAC;AAoB/B,eAAO,MAAM,qBAAqB,GAChC,UAAU,IAAI,CAAC,mBAAmB,EAAE,WAAW,CAAC,WAI5B,OAAO,QAAQ,IAAI,2BAUtB,OAAO,QAAQ,IAAI,sGAWrC,CAAC"}

package/dist/src/api/middlewares/rate-limiter.middleware.js

@@ -12,20 +12,20 @@ const createRateLimiter = ({ keyPrefix, ...options })=>{
 export const rateLimiterMiddleware = (options)=>{
     if (CONFIG.node_development) {
         // In development, we disable the rate limiter for easier testing
-        return async (c, next)=>{
+        return async (_c, next)=>{
             await next();
         };
     }
     const rateLimiter = createRateLimiter({
         ...options,
-        keyPrefix: 'vitnode-api-rate-limiter'
+        keyPrefix: "vitnode-api-rate-limiter"
     });
     return async (c, next)=>{
-        const key = c.get('ipAddress');
+        const key = c.get("ipAddress");
         try {
             await rateLimiter.consume(key);
         } catch  {
-            return c.text('Too Many Requests', 429);
+            return c.text("Too Many Requests", 429);
         }
         await next();
     };

package/dist/src/api/models/device.d.ts

@@ -1,4 +1,4 @@
-import type { Context } from 'hono';
+import type { Context } from "hono";
 export declare class DeviceModel {
     constructor(c: Context);
     protected readonly c: Context;

package/dist/src/api/models/device.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"device.d.ts","sourceRoot":"","sources":["../../../../src/api/models/device.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AASpC,qBAAa,WAAW;gBACV,CAAC,EAAE,OAAO;IAGtB,SAAS,CAAC,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC;YAEhB,YAAY;IAkB1B,OAAO,CAAC,YAAY;IAIpB,OAAO,CAAC,eAAe;IAiBjB,WAAW;;;;CAwClB"}
+{"version":3,"file":"device.d.ts","sourceRoot":"","sources":["../../../../src/api/models/device.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAMpC,qBAAa,WAAW;gBACV,CAAC,EAAE,OAAO;IAGtB,SAAS,CAAC,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC;YAEhB,YAAY;IAkB1B,OAAO,CAAC,YAAY;IAIpB,OAAO,CAAC,eAAe;IAiBjB,WAAW;;;;CAwClB"}

package/dist/src/api/models/device.js

@@ -1,4 +1,4 @@
-import { randomBytes } from "crypto";
+import { randomBytes } from "node:crypto";
 import { eq } from "drizzle-orm";
 import { getCookie, setCookie } from "hono/cookie";
 import { core_sessions_known_devices } from "../../database/sessions.js";
@@ -9,10 +9,10 @@ export class DeviceModel {
     }
     c;
     async createDevice() {
-        const publicId = randomBytes(16).toString('hex');
-        const [device] = await this.c.get('db').insert(core_sessions_known_devices).values({
+        const publicId = randomBytes(16).toString("hex");
+        const [device] = await this.c.get("db").insert(core_sessions_known_devices).values({
             publicId,
-            ipAddress: this.c.get('ipAddress'),
+            ipAddress: this.c.get("ipAddress"),
             userAgent: this.getUserAgent()
         }).returning({
             id: core_sessions_known_devices.id
@@ -24,29 +24,29 @@ export class DeviceModel {
         };
     }
     getUserAgent() {
-        return this.c.req.header('User-Agent') ?? 'node';
+        return this.c.req.header("User-Agent") ?? "node";
     }
     setCookieDevice(publicDeviceId) {
-        setCookie(this.c, this.c.get('core').authorization.deviceCookieName, publicDeviceId, {
+        setCookie(this.c, this.c.get("core").authorization.deviceCookieName, publicDeviceId, {
             httpOnly: true,
-            secure: this.c.get('core').authorization.cookieSecure,
-            path: '/',
+            secure: this.c.get("core").authorization.cookieSecure,
+            path: "/",
             domain: CONFIG.web.hostname,
-            expires: new Date(Date.now() + this.c.get('core').authorization.deviceCookieExpires)
+            expires: new Date(Date.now() + this.c.get("core").authorization.deviceCookieExpires)
         });
     }
     async getDeviceId() {
-        const deviceIdFromCookie = getCookie(this.c, this.c.get('core').authorization.deviceCookieName);
+        const deviceIdFromCookie = getCookie(this.c, this.c.get("core").authorization.deviceCookieName);
         try {
             if (deviceIdFromCookie) {
-                const [device] = await this.c.get('db').select({
+                const [device] = await this.c.get("db").select({
                     id: core_sessions_known_devices.id
                 }).from(core_sessions_known_devices).where(eq(core_sessions_known_devices.publicId, deviceIdFromCookie));
                 if (!device) {
                     return await this.createDevice();
                 }
-                await this.c.get('db').update(core_sessions_known_devices).set({
-                    ipAddress: this.c.get('ipAddress'),
+                await this.c.get("db").update(core_sessions_known_devices).set({
+                    ipAddress: this.c.get("ipAddress"),
                     userAgent: this.getUserAgent()
                 }).where(eq(core_sessions_known_devices.publicId, deviceIdFromCookie));
                 return {

package/dist/src/api/models/email.d.ts

@@ -1,27 +1,43 @@
-import type { Context, ContextVariableMap } from 'hono';
-import type React from 'react';
+import type { Context, ContextVariableMap } from "hono";
+import type React from "react";
+import type { DefaultTemplateEmailProps } from "../../emails/default-template";
+interface EmailModelSendArgsWithUser {
+    locale?: never;
+    to?: never;
+    user: {
+        email: string;
+        id: number;
+        language: string;
+        name?: string;
+        nameCode?: string;
+    };
+}
+interface EmailModelSendArgsWithEmail {
+    locale: string;
+    to: string;
+    user?: never;
+}
 export interface EmailApiPlugin {
     sendEmail: (args: {
         html: string;
-        metadata: ContextVariableMap['core']['metadata'];
+        metadata: ContextVariableMap["core"]["metadata"];
         replyTo?: string;
         subject: string;
         text: string;
         to: string;
     }) => Promise<void>;
 }
-export interface EmailModelSendArgs {
-    content: (props: {
-        locale: string;
-    }) => React.ReactNode;
+export type EmailModelSendArgs = {
+    content: (props: Omit<DefaultTemplateEmailProps, "children"> & Pick<EmailModelSendArgs, "user">) => React.ReactNode;
     html?: string;
+    locale?: string;
     replyTo?: string;
-    subject: string;
-    to: string;
-}
+    subject: ((props: Pick<DefaultTemplateEmailProps, "i18n">) => string) | string;
+} & (EmailModelSendArgsWithEmail | EmailModelSendArgsWithUser);
 export declare class EmailModel {
     constructor(c: Context);
     protected readonly c: Context;
-    send({ html, replyTo, subject, to, content }: EmailModelSendArgs): Promise<void>;
+    send({ html, replyTo, subject, to, user, content, locale: localeFromArgs, }: EmailModelSendArgs): Promise<void>;
 }
+export {};
 //# sourceMappingURL=email.d.ts.map

package/dist/src/api/models/email.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"email.d.ts","sourceRoot":"","sources":["../../../../src/api/models/email.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,kBAAkB,EAAE,MAAM,MAAM,CAAC;AACxD,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAQ/B,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,CAAC,IAAI,EAAE;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,EAAE,kBAAkB,CAAC,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC;QACjD,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,EAAE,EAAE,MAAM,CAAC;KACZ,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACrB;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,CAAC,KAAK,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,KAAK,KAAK,CAAC,SAAS,CAAC;IACxD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,qBAAa,UAAU;gBACT,CAAC,EAAE,OAAO;IAItB,SAAS,CAAC,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC;IAExB,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,kBAAkB;CAiEvE"}
+{"version":3,"file":"email.d.ts","sourceRoot":"","sources":["../../../../src/api/models/email.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,kBAAkB,EAAE,MAAM,MAAM,CAAC;AAExD,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAE/B,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AAG/E,UAAU,0BAA0B;IAClC,MAAM,CAAC,EAAE,KAAK,CAAC;IACf,EAAE,CAAC,EAAE,KAAK,CAAC;IACX,IAAI,EAAE;QACJ,KAAK,EAAE,MAAM,CAAC;QACd,EAAE,EAAE,MAAM,CAAC;QACX,QAAQ,EAAE,MAAM,CAAC;QACjB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;CACH;AAED,UAAU,2BAA2B;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,EAAE,KAAK,CAAC;CACd;AAED,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,CAAC,IAAI,EAAE;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,EAAE,kBAAkB,CAAC,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC;QACjD,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,EAAE,EAAE,MAAM,CAAC;KACZ,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACrB;AAED,MAAM,MAAM,kBAAkB,GAAG;IAC/B,OAAO,EAAE,CACP,KAAK,EAAE,IAAI,CAAC,yBAAyB,EAAE,UAAU,CAAC,GAChD,IAAI,CAAC,kBAAkB,EAAE,MAAM,CAAC,KAC/B,KAAK,CAAC,SAAS,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,EACH,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,yBAAyB,EAAE,MAAM,CAAC,KAAK,MAAM,CAAC,GAC5D,MAAM,CAAC;CACZ,GAAG,CAAC,2BAA2B,GAAG,0BAA0B,CAAC,CAAC;AAE/D,qBAAa,UAAU;gBACT,CAAC,EAAE,OAAO;IAItB,SAAS,CAAC,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC;IAExB,IAAI,CAAC,EACT,IAAI,EACJ,OAAO,EACP,OAAO,EACP,EAAE,EACF,IAAI,EACJ,OAAO,EACP,MAAM,EAAE,cAAc,GACvB,EAAE,kBAAkB;CAgFtB"}

package/dist/src/api/models/email.js

@@ -1,24 +1,23 @@
 import { render } from "@react-email/components";
 import { HTTPException } from "hono/http-exception";
-import DefaultTemplateEmail from "../../emails/default-template.js";
 import { CONFIG } from "../../lib/config.js";
 export class EmailModel {
     constructor(c){
         this.c = c;
     }
     c;
-    async send({ html, replyTo, subject, to, content }) {
-        const core = this.c.get('core');
+    async send({ html, replyTo, subject, to, user, content, locale: localeFromArgs }) {
+        const core = this.c.get("core");
         const provider = core.email?.adapter;
         if (!provider) {
             throw new HTTPException(500, {
-                message: 'Email provider not found'
+                message: "Email provider not found"
             });
         }
-        const locale = 'en';
+        const locale = localeFromArgs ?? user?.language ?? "en";
         const pluginIds = [
-            '@vitnode/core',
-            ...this.c.get('core').plugins.map((plugin)=>plugin.id)
+            "@vitnode/core",
+            ...this.c.get("core").plugins.map((plugin)=>plugin.id)
         ];
         const messagesPromises = pluginIds.map(async (pluginId)=>{
             try {
@@ -30,27 +29,41 @@ export class EmailModel {
             }
         });
         const allMessages = await Promise.all(messagesPromises);
-        const messages = allMessages.reduce((acc, curr)=>({
+        const messages = allMessages.reduce(// biome-ignore lint/performance/noAccumulatingSpread: <needed>
+        (acc, curr)=>({
                 ...acc,
                 ...curr
             }), {});
-        const htmlContent = html ?? DefaultTemplateEmail({
-            children: content({
-                locale
-            }),
-            metadata: {
-                ...core.metadata,
-                url: CONFIG.web.href
+        const htmlContent = html ?? content({
+            i18n: {
+                locale,
+                messages
             },
-            logo: core.email?.options?.logo,
-            locale,
-            messages
+            templateProps: {
+                metadata: {
+                    ...core.metadata,
+                    url: CONFIG.web.href
+                },
+                logo: core.email?.logo
+            },
+            user
         });
+        const emailTo = user?.email ?? to;
+        if (!emailTo) {
+            throw new HTTPException(400, {
+                message: "Email address is required"
+            });
+        }
         try {
             await provider.sendEmail({
                 html: await render(htmlContent),
-                to,
-                subject,
+                to: emailTo,
+                subject: typeof subject === "function" ? subject({
+                    i18n: {
+                        locale,
+                        messages
+                    }
+                }) : subject,
                 replyTo,
                 metadata: core.metadata,
                 text: await render(htmlContent, {
@@ -58,8 +71,8 @@ export class EmailModel {
                 })
             });
         } catch (err) {
-            const error = err instanceof Error ? err : new Error('Unknown error from email provider');
-            await this.c.get('log').error(`Failed to send email: ${error.message}`);
+            const error = err instanceof Error ? err : new Error("Unknown error from email provider");
+            await this.c.get("log").error(`Failed to send email: ${error.message}`);
         }
     }
 }

package/dist/src/api/models/password.d.ts

@@ -2,4 +2,8 @@ export declare class PasswordModel {
     encryptPassword(password: string): Promise<string>;
     verifyPassword(password: string, hash: string): Promise<boolean>;
 }
+export declare class ForgotPasswordTokenModel {
+    generateResetToken(): string;
+    hashResetToken(token: string): string;
+}
 //# sourceMappingURL=password.d.ts.map

package/dist/src/api/models/password.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"password.d.ts","sourceRoot":"","sources":["../../../../src/api/models/password.ts"],"names":[],"mappings":"AAEA,qBAAa,aAAa;IAClB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAYlD,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;CAkBvE"}
+{"version":3,"file":"password.d.ts","sourceRoot":"","sources":["../../../../src/api/models/password.ts"],"names":[],"mappings":"AAEA,qBAAa,aAAa;IAClB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAYlD,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;CAkBvE;AAED,qBAAa,wBAAwB;IACnC,kBAAkB;IAIlB,cAAc,CAAC,KAAK,EAAE,MAAM;CAG7B"}

package/dist/src/api/models/password.js

@@ -1,18 +1,18 @@
-import crypto from "crypto";
+import crypto from "node:crypto";
 export class PasswordModel {
     async encryptPassword(password) {
-        return new Promise((resolve, reject)=>{
-            const salt = crypto.randomBytes(8).toString('hex');
+        return await new Promise((resolve, reject)=>{
+            const salt = crypto.randomBytes(8).toString("hex");
             crypto.scrypt(password, salt, 64, (err, derivedKey)=>{
                 if (err) reject(err);
-                resolve(salt + ':' + derivedKey.toString('hex'));
+                resolve(`${salt}:${derivedKey.toString("hex")}`);
             });
         });
     }
     async verifyPassword(password, hash) {
-        return new Promise((resolve, reject)=>{
-            const [salt, key] = hash.split(':');
-            const keyBuffer = Buffer.from(key, 'hex');
+        return await new Promise((resolve, reject)=>{
+            const [salt, key] = hash.split(":");
+            const keyBuffer = Buffer.from(key, "hex");
             crypto.scrypt(password, salt, 64, (err, derivedKey)=>{
                 if (err) reject(err);
                 if (keyBuffer.length !== derivedKey.length) {
@@ -26,3 +26,11 @@ export class PasswordModel {
         });
     }
 }
+export class ForgotPasswordTokenModel {
+    generateResetToken() {
+        return crypto.randomBytes(32).toString("base64url");
+    }
+    hashResetToken(token) {
+        return crypto.createHash("sha256").update(token).digest("hex");
+    }
+}

package/dist/src/api/models/session-admin.d.ts

@@ -1,4 +1,4 @@
-import type { Context } from 'hono';
+import type { Context } from "hono";
 export declare class SessionAdminModel {
     constructor(c: Context);
     protected readonly c: Context;
@@ -19,6 +19,7 @@ export declare class SessionAdminModel {
         emailVerified: boolean;
         roleId: number;
         birthday: Date | null;
+        language: string;
     } | null>;
 }
 //# sourceMappingURL=session-admin.d.ts.map

package/dist/src/api/models/session-admin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session-admin.d.ts","sourceRoot":"","sources":["../../../../src/api/models/session-admin.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAYpC,qBAAa,iBAAiB;gBAChB,CAAC,EAAE,OAAO;IAGtB,SAAS,CAAC,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC;YAEhB,SAAS;IASjB,kBAAkB,CAAC,MAAM,EAAE,MAAM;IAmBjC,qBAAqB,CAAC,MAAM,EAAE,MAAM;;;IAwCpC,aAAa;IAoBb,OAAO;;;;;;;;;;;;CAiDd"}
+{"version":3,"file":"session-admin.d.ts","sourceRoot":"","sources":["../../../../src/api/models/session-admin.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAUpC,qBAAa,iBAAiB;gBAChB,CAAC,EAAE,OAAO;IAGtB,SAAS,CAAC,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC;YAEhB,SAAS;IASjB,kBAAkB,CAAC,MAAM,EAAE,MAAM;IAmBjC,qBAAqB,CAAC,MAAM,EAAE,MAAM;;;IAwCpC,aAAa;IAoBb,OAAO;;;;;;;;;;;;;CAiDd"}

package/dist/src/api/models/session-admin.js

@@ -13,9 +13,9 @@ export class SessionAdminModel {
     async hashToken(token) {
         const encoder = new TextEncoder();
         const data = encoder.encode(token);
-        const hashBuffer = await crypto.subtle.digest('SHA-256', data);
+        const hashBuffer = await crypto.subtle.digest("SHA-256", data);
         const hashArray = Array.from(new Uint8Array(hashBuffer));
-        return hashArray.map((b)=>b.toString(16).padStart(2, '0')).join('');
+        return hashArray.map((b)=>b.toString(16).padStart(2, "0")).join("");
     }
     async checkIfUserIsAdmin(userId) {
         const user = await new UserModel().getUserById({
@@ -23,32 +23,32 @@ export class SessionAdminModel {
             c: this.c
         });
         if (!user) return false;
-        const [permission] = await this.c.get('db').select().from(core_admin_permissions).where(or(eq(core_admin_permissions.userId, user.id), eq(core_admin_permissions.roleId, user.roleId))).limit(1);
+        const [permission] = await this.c.get("db").select().from(core_admin_permissions).where(or(eq(core_admin_permissions.userId, user.id), eq(core_admin_permissions.roleId, user.roleId))).limit(1);
         return !!permission;
     }
     async createSessionByUserId(userId) {
         const isAdmin = await this.checkIfUserIsAdmin(userId);
         if (!isAdmin) {
             throw new HTTPException(403, {
-                message: 'Forbidden'
+                message: "Forbidden"
             });
         }
         const randomBytes = new Uint8Array(64);
         crypto.getRandomValues(randomBytes);
-        const token = Array.from(randomBytes).map((b)=>b.toString(16).padStart(2, '0')).join('');
+        const token = Array.from(randomBytes).map((b)=>b.toString(16).padStart(2, "0")).join("");
         const hashedToken = await this.hashToken(token);
         const device = await new DeviceModel(this.c).getDeviceId();
-        await this.c.get('db').insert(core_admin_sessions).values({
+        await this.c.get("db").insert(core_admin_sessions).values({
             token: hashedToken,
             userId,
-            expiresAt: new Date(Date.now() + this.c.get('core').authorization.adminCookieExpires),
+            expiresAt: new Date(Date.now() + this.c.get("core").authorization.adminCookieExpires),
             deviceId: device.id
         });
-        setCookie(this.c, this.c.get('core').authorization.adminCookieName, token, {
+        setCookie(this.c, this.c.get("core").authorization.adminCookieName, token, {
             httpOnly: true,
-            secure: this.c.get('core').authorization.cookieSecure,
-            path: '/',
-            expires: new Date(Date.now() + this.c.get('core').authorization.adminCookieExpires),
+            secure: this.c.get("core").authorization.cookieSecure,
+            path: "/",
+            expires: new Date(Date.now() + this.c.get("core").authorization.adminCookieExpires),
             domain: CONFIG.web.hostname
         });
         return {
@@ -56,28 +56,28 @@ export class SessionAdminModel {
         };
     }
     async deleteSession() {
-        const token = getCookie(this.c, this.c.get('core').authorization.adminCookieName);
+        const token = getCookie(this.c, this.c.get("core").authorization.adminCookieName);
         if (!token) return;
         const hashedToken = await this.hashToken(token);
-        await this.c.get('db').delete(core_admin_sessions).where(eq(core_admin_sessions.token, hashedToken));
-        deleteCookie(this.c, this.c.get('core').authorization.adminCookieName, {
-            path: '/',
+        await this.c.get("db").delete(core_admin_sessions).where(eq(core_admin_sessions.token, hashedToken));
+        deleteCookie(this.c, this.c.get("core").authorization.adminCookieName, {
+            path: "/",
             domain: CONFIG.web.hostname
         });
     }
     async getUser() {
-        const { authorization } = this.c.get('core');
+        const { authorization } = this.c.get("core");
         const token = getCookie(this.c, authorization.adminCookieName);
         if (!token) return null;
         const device = await new DeviceModel(this.c).getDeviceId();
         if (!device) return null;
         const hashedToken = await this.hashToken(token);
-        const [session] = await this.c.get('db').select({
+        const [session] = await this.c.get("db").select({
             userId: core_admin_sessions.userId
         }).from(core_admin_sessions).where(and(eq(core_admin_sessions.token, hashedToken), eq(core_admin_sessions.deviceId, device.id), gt(core_admin_sessions.expiresAt, new Date()))).limit(1);
         if (!session) {
-            deleteCookie(this.c, this.c.get('core').authorization.adminCookieName, {
-                path: '/',
+            deleteCookie(this.c, this.c.get("core").authorization.adminCookieName, {
+                path: "/",
                 domain: CONFIG.web.hostname
             });
             return null;

package/dist/src/api/models/session.d.ts

@@ -1,4 +1,4 @@
-import type { Context } from 'hono';
+import type { Context } from "hono";
 export declare class SessionModel {
     constructor(c: Context);
     protected readonly c: Context;
@@ -18,6 +18,7 @@ export declare class SessionModel {
         emailVerified: boolean;
         roleId: number;
         birthday: Date | null;
+        language: string;
     } | null>;
 }
 //# sourceMappingURL=session.d.ts.map

package/dist/src/api/models/session.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../../../../src/api/models/session.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAWpC,qBAAa,YAAY;gBACX,CAAC,EAAE,OAAO;IAGtB,SAAS,CAAC,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC;YAEhB,SAAS;IASjB,qBAAqB,CAAC,MAAM,EAAE,MAAM;;;IAsCpC,aAAa;IA8Bb,OAAO;;;;;;;;;;;;CA0Cd"}
+{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../../../../src/api/models/session.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AASpC,qBAAa,YAAY;gBACX,CAAC,EAAE,OAAO;IAGtB,SAAS,CAAC,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC;YAEhB,SAAS;IASjB,qBAAqB,CAAC,MAAM,EAAE,MAAM;;;IAsCpC,aAAa;IA8Bb,OAAO;;;;;;;;;;;;;CA0Cd"}