@warlock.js/auth 5.15.0 → 5.17.0

package/skills/run-auth-commands/SKILL.md

@@ -103,10 +103,24 @@ Unlike `auth.cleanup`, do **not** schedule it: it is a full table scan (it must
 
 If `auth.cleanup` doesn't cover everything your app needs (e.g. you also want to revoke tokens for inactive users), write your own command and combine the auth service helpers:
 
+```ts title="src/app/users/models/user/user.model.ts"
+import { Auth } from "@warlock.js/auth";
+import { RegisterModel } from "@warlock.js/cascade";
+
+@RegisterModel()
+export class User extends Auth {
+  public static table = "users";
+
+  public get userType(): string {
+    return "user";
+  }
+}
+```
+
 ```ts
 import { command } from "@warlock.js/core";
 import { authService } from "@warlock.js/auth";
-import { User } from "@/app/users/models/user.model";
+import { User } from "app/users/models/user/user.model";
 
 export function registerDeepCleanupCommand() {
   return command({
@@ -120,6 +134,7 @@ export function registerDeepCleanupCommand() {
     action: async () => {
       await authService.cleanupExpiredTokens();
 
+      const thirtyDaysAgo = new Date(Date.now() - 30 * 24 * 60 * 60 * 1000);
       const stale = await User.where("last_seen_at", "<", thirtyDaysAgo).get();
 
       for (const user of stale) {

package/skills/throttle-login-attempts/SKILL.md

@@ -74,7 +74,7 @@ On lockout the middleware sends:
 { "error": "...", "errorCode": "EC004" } // AuthErrorCodes.TooManyAttempts
 ```
 
-Define the `auth.errors.tooManyAttempts` translation key (or pass `errorMessage`) so clients see a real message instead of the raw key. Map `EC004` in your error transformer the same way you map the other `AuthErrorCodes`.
+`@warlock.js/auth` ships built-in `en` and `ar` text for `auth.errors.tooManyAttempts` (and every other `auth.errors.*` key it uses); define the key in your own locale files, or pass `errorMessage`, to override it. Map `EC004` in your error transformer the same way you map the other `AuthErrorCodes`.
 
 ## Beyond login