@webda/auth 0.0.0-stage → 4.0.0-beta.11

package/lib/throttle.d.ts

@@ -0,0 +1,41 @@
+import type { Ident, IdentThrottle } from "@webda/core";
+export { countAttempt, type ThrottleParameters } from "@webda/core";
+/** Login failure state of an ident: its top-level `_loginAttempts` / `_lastLoginAttemptAt` attributes */
+export type LoginAttempts = Pick<Ident, "_loginAttempts" | "_lastLoginAttemptAt">;
+/**
+ * Check if an ident is locked due to too many failed logins
+ * @param s - login failure state (an ident)
+ * @param failedBefore - failures before locking
+ * @param lockoutMs - lock duration after the last attempt
+ * @param now - clock
+ * @returns true while locked
+ */
+export declare function isLocked(s: LoginAttempts, failedBefore: number, lockoutMs: number, now?: number): boolean;
+/**
+ * Record a failure in the login failure state
+ * @param s - login failure state
+ * @param now - clock
+ * @returns state with one more failure
+ */
+export declare function recordFailure(s: LoginAttempts, now?: number): LoginAttempts;
+/**
+ * Clear all login failures
+ * @returns state with failures cleared
+ */
+export declare function resetFailures(): LoginAttempts;
+/**
+ * Check if a message can be sent based on throttle delay
+ * @param t - throttle state
+ * @param delayMs - minimal delay between two emails
+ * @param now - clock
+ * @returns true when an email may be sent
+ */
+export declare function canSend(t: IdentThrottle | undefined, delayMs: number, now?: number): boolean;
+/**
+ * Mark that a message was sent
+ * @param t - throttle state
+ * @param now - clock
+ * @returns state with the send timestamp set
+ */
+export declare function markSent(t: IdentThrottle | undefined, now?: number): IdentThrottle;
+//# sourceMappingURL=throttle.d.ts.map

package/lib/throttle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"throttle.d.ts","sourceRoot":"","sources":["../src/throttle.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAExD,OAAO,EAAE,YAAY,EAAE,KAAK,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEpE,yGAAyG;AACzG,MAAM,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,EAAE,gBAAgB,GAAG,qBAAqB,CAAC,CAAC;AAElF;;;;;;;GAOG;AACH,wBAAgB,QAAQ,CAAC,CAAC,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,GAAE,MAAmB,GAAG,OAAO,CAErH;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,CAAC,EAAE,aAAa,EAAE,GAAG,GAAE,MAAmB,GAAG,aAAa,CAEvF;AAED;;;GAGG;AACH,wBAAgB,aAAa,IAAI,aAAa,CAE7C;AAED;;;;;;GAMG;AACH,wBAAgB,OAAO,CAAC,CAAC,EAAE,aAAa,GAAG,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,GAAE,MAAmB,GAAG,OAAO,CAExG;AAED;;;;;GAKG;AACH,wBAAgB,QAAQ,CAAC,CAAC,EAAE,aAAa,GAAG,SAAS,EAAE,GAAG,GAAE,MAAmB,GAAG,aAAa,CAE9F"}

package/lib/throttle.js

@@ -0,0 +1,49 @@
+// Generic attempt counting lives in core, shared with the MFA behavior
+export { countAttempt } from "@webda/core";
+/**
+ * Check if an ident is locked due to too many failed logins
+ * @param s - login failure state (an ident)
+ * @param failedBefore - failures before locking
+ * @param lockoutMs - lock duration after the last attempt
+ * @param now - clock
+ * @returns true while locked
+ */
+export function isLocked(s, failedBefore, lockoutMs, now = Date.now()) {
+    return !!s && (s._loginAttempts ?? 0) >= failedBefore && (s._lastLoginAttemptAt ?? 0) + lockoutMs > now;
+}
+/**
+ * Record a failure in the login failure state
+ * @param s - login failure state
+ * @param now - clock
+ * @returns state with one more failure
+ */
+export function recordFailure(s, now = Date.now()) {
+    return { _loginAttempts: (s?._loginAttempts ?? 0) + 1, _lastLoginAttemptAt: now };
+}
+/**
+ * Clear all login failures
+ * @returns state with failures cleared
+ */
+export function resetFailures() {
+    return { _loginAttempts: 0, _lastLoginAttemptAt: undefined };
+}
+/**
+ * Check if a message can be sent based on throttle delay
+ * @param t - throttle state
+ * @param delayMs - minimal delay between two emails
+ * @param now - clock
+ * @returns true when an email may be sent
+ */
+export function canSend(t, delayMs, now = Date.now()) {
+    return !t?.lastSentAt || t.lastSentAt + delayMs < now;
+}
+/**
+ * Mark that a message was sent
+ * @param t - throttle state
+ * @param now - clock
+ * @returns state with the send timestamp set
+ */
+export function markSent(t, now = Date.now()) {
+    return { ...(t ?? {}), lastSentAt: now };
+}
+//# sourceMappingURL=throttle.js.map

package/lib/throttle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"throttle.js","sourceRoot":"","sources":["../src/throttle.ts"],"names":[],"mappings":"AACA,uEAAuE;AACvE,OAAO,EAAE,YAAY,EAA2B,MAAM,aAAa,CAAC;AAKpE;;;;;;;GAOG;AACH,MAAM,UAAU,QAAQ,CAAC,CAAgB,EAAE,YAAoB,EAAE,SAAiB,EAAE,GAAG,GAAW,IAAI,CAAC,GAAG,EAAE;IAC1G,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,IAAI,CAAC,CAAC,IAAI,YAAY,IAAI,CAAC,CAAC,CAAC,mBAAmB,IAAI,CAAC,CAAC,GAAG,SAAS,GAAG,GAAG,CAAC;AAC1G,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,CAAgB,EAAE,GAAG,GAAW,IAAI,CAAC,GAAG,EAAE;IACtE,OAAO,EAAE,cAAc,EAAE,CAAC,CAAC,EAAE,cAAc,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,mBAAmB,EAAE,GAAG,EAAE,CAAC;AACpF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa;IAC3B,OAAO,EAAE,cAAc,EAAE,CAAC,EAAE,mBAAmB,EAAE,SAAS,EAAE,CAAC;AAC/D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,OAAO,CAAC,CAA4B,EAAE,OAAe,EAAE,GAAG,GAAW,IAAI,CAAC,GAAG,EAAE;IAC7F,OAAO,CAAC,CAAC,EAAE,UAAU,IAAI,CAAC,CAAC,UAAU,GAAG,OAAO,GAAG,GAAG,CAAC;AACxD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,QAAQ,CAAC,CAA4B,EAAE,GAAG,GAAW,IAAI,CAAC,GAAG,EAAE;IAC7E,OAAO,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;AAC3C,CAAC"}

package/package.json

@@ -1,6 +1,72 @@
 {
   "name": "@webda/auth",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
+  "version": "4.0.0-beta.11",
+  "description": "Authentication service and providers for Webda",
+  "keywords": [
+    "authentication",
+    "auth",
+    "webda"
+  ],
+  "author": "Remi Cattiau <remi@cattiau.com>",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/loopingz/webda.io.git",
+    "directory": "packages/auth"
+  },
+  "main": "lib/index.js",
+  "typings": "lib/index.d.ts",
+  "dependencies": {
+    "@webda/core": "4.0.0-beta.11",
+    "@webda/utils": "4.0.0-beta.10",
+    "@webda/workout": "4.0.0-beta.5",
+    "@webda/models": "4.0.0-beta.11"
+  },
+  "files": [
+    "lib",
+    "test",
+    "webda.module.json"
+  ],
+  "homepage": "https://webda.io",
+  "publishConfig": {
+    "access": "public"
+  },
+  "webda": {
+    "namespace": "Webda"
+  },
+  "devDependencies": {
+    "@types/node": "25.5.0",
+    "@vitest/coverage-v8": "^4.1.2",
+    "jscodeshift": "^17.3.0",
+    "skott": "^0.35.8",
+    "tsx": "^4.21.0",
+    "typescript": "7.1.0-dev.20260929.1",
+    "vite": "^6.0.0",
+    "vitest": "^4.1.2",
+    "@webda/content-mapper": "^4.0.0-beta.9",
+    "@webda/fs": "4.0.0-beta.11",
+    "@webda/test": "4.0.0-beta.7",
+    "@webda/compiler": "^4.0.0-beta.11"
+  },
+  "type": "module",
+  "engines": {
+    "node": ">=22.0.0"
+  },
+  "nx": {
+    "implicitDependencies": [
+      "@webda/core"
+    ]
+  },
+  "license": "LGPL-3.0-only",
+  "scripts": {
+    "build": "webdac build",
+    "build:watch": "webdac build --watch",
+    "pretest": "npm run build",
+    "lint": "eslint",
+    "lint:fix": "eslint --fix",
+    "test": "vitest run",
+    "format": "prettier --check src/**/*",
+    "format:fix": "prettier --write src/**/*",
+    "deps:graph": "skott --showCircularDependencies --no-trackTypeOnlyDependencies --displayMode=raw -e .ts",
+    "codemod": "jscodeshift --parser=ts --extensions=tsx,ts -t ../codemod/current.mjs src"
+  }
 }

package/test/config.json

@@ -0,0 +1,23 @@
+{
+  "version": 3,
+  "parameters": { "ignoreBeans": true },
+  "services": {
+    "AuthStore": {
+      "type": "Webda/MemoryStore",
+      "models": ["Webda/User", "Webda/Ident", "Webda/RefreshToken", "Webda/RevokedAccess"]
+    },
+    "DefinedMailer": { "type": "WebdaTest/Mailer" },
+    "Authentication": { "type": "Webda/Authentication" },
+    "googleStub": { "type": "WebdaTest/Stub_google" },
+    "emailAuth": {
+      "type": "Webda/EmailPasswordProvider",
+      "mailer": "DefinedMailer",
+      "redirects": {
+        "verified": "https://app/verified",
+        "failure": "https://app/failure",
+        "register": "https://app/register",
+        "recover": "https://app/recover"
+      }
+    }
+  }
+}