@xcelsior/auth 0.1.1

package/dist/index.mjs

@@ -0,0 +1,499 @@
+// src/services/auth.ts
+import bcrypt from "bcryptjs";
+import jwt from "jsonwebtoken";
+import { v4 as uuidv4 } from "uuid";
+
+// src/storage/dynamodb.ts
+import { DynamoDBClient } from "@aws-sdk/client-dynamodb";
+import {
+  DynamoDBDocumentClient,
+  PutCommand,
+  GetCommand,
+  UpdateCommand,
+  DeleteCommand,
+  QueryCommand
+} from "@aws-sdk/lib-dynamodb";
+var DynamoDBStorageProvider = class {
+  constructor(config) {
+    const dbClient = new DynamoDBClient({ region: config.region });
+    this.client = DynamoDBDocumentClient.from(dbClient, {});
+    this.tableName = config.tableName;
+  }
+  async createUser(user) {
+    await this.client.send(
+      new PutCommand({
+        TableName: this.tableName,
+        Item: user,
+        ConditionExpression: "attribute_not_exists(email)"
+      })
+    );
+  }
+  async getUserByResetPasswordToken(resetPasswordToken) {
+    const response = await this.client.send(
+      new QueryCommand({
+        TableName: this.tableName,
+        IndexName: "ResetPasswordTokenIndex",
+        KeyConditionExpression: "resetPasswordToken = :token",
+        ExpressionAttributeValues: {
+          ":token": resetPasswordToken
+        }
+      })
+    );
+    return response.Items?.[0];
+  }
+  async getUserByVerifyEmailToken(verifyEmailToken) {
+    const response = await this.client.send(
+      new QueryCommand({
+        TableName: this.tableName,
+        IndexName: "VerifyEmailTokenIndex",
+        KeyConditionExpression: "verificationToken = :token",
+        ExpressionAttributeValues: {
+          ":token": verifyEmailToken
+        }
+      })
+    );
+    return response.Items?.[0];
+  }
+  async getUserById(id) {
+    const response = await this.client.send(
+      new GetCommand({
+        TableName: this.tableName,
+        Key: { id }
+      })
+    );
+    return response.Item;
+  }
+  async getUserByEmail(email) {
+    const response = await this.client.send(
+      new QueryCommand({
+        TableName: this.tableName,
+        IndexName: "EmailIndex",
+        KeyConditionExpression: "email = :email",
+        ExpressionAttributeValues: {
+          ":email": email
+        }
+      })
+    );
+    return response.Items?.[0];
+  }
+  async updateUser(id, updates) {
+    const toSet = {};
+    const toRemove = [];
+    Object.entries(updates).forEach(([key, value]) => {
+      if (value === void 0) {
+        toRemove.push(key);
+      } else {
+        toSet[key] = value;
+      }
+    });
+    if (Object.keys(toSet).length === 0 && toRemove.length === 0) {
+      return;
+    }
+    const setPart = Object.keys(toSet).length > 0 ? `SET ${Object.keys(toSet).map((key) => `#${key} = :${key}`).join(", ")}` : "";
+    const removePart = toRemove.length > 0 ? `REMOVE ${toRemove.map((key) => `#${key}`).join(", ")}` : "";
+    const updateExpression = [setPart, removePart].filter(Boolean).join(" ");
+    const expressionAttributeNames = [...Object.keys(toSet), ...toRemove].reduce(
+      (acc, key) => ({ ...acc, [`#${key}`]: key }),
+      {}
+    );
+    const expressionAttributeValues = Object.entries(toSet).reduce(
+      (acc, [key, value]) => ({ ...acc, [`:${key}`]: value }),
+      {}
+    );
+    await this.client.send(
+      new UpdateCommand({
+        TableName: this.tableName,
+        Key: { id },
+        UpdateExpression: updateExpression,
+        ExpressionAttributeNames: expressionAttributeNames,
+        ...Object.keys(expressionAttributeValues).length > 0 && {
+          ExpressionAttributeValues: expressionAttributeValues
+        }
+      })
+    );
+  }
+  async deleteUser(id) {
+    await this.client.send(
+      new DeleteCommand({
+        TableName: this.tableName,
+        Key: { id }
+      })
+    );
+  }
+};
+
+// src/storage/index.ts
+function createStorageProvider(config) {
+  switch (config.type) {
+    case "dynamodb":
+      return new DynamoDBStorageProvider(config.options);
+    case "mongodb":
+      throw new Error("MongoDB storage provider not implemented yet");
+    case "postgres":
+      throw new Error("PostgreSQL storage provider not implemented yet");
+    default:
+      throw new Error(`Unsupported storage type: ${config.type}`);
+  }
+}
+
+// src/email/smtp.ts
+import nodemailer from "nodemailer";
+var SMTPEmailProvider = class {
+  constructor(from, config, templates) {
+    this.transporter = nodemailer.createTransport(config);
+    this.config = { from, templates };
+  }
+  async sendVerificationEmail(email, token) {
+    const { subject, html } = this.config.templates.verification;
+    await this.transporter.sendMail({
+      from: this.config.from,
+      to: email,
+      subject,
+      html: html(token)
+    });
+  }
+  async sendPasswordResetEmail(email, token) {
+    const { subject, html } = this.config.templates.resetPassword;
+    await this.transporter.sendMail({
+      from: this.config.from,
+      to: email,
+      subject,
+      html: html(token)
+    });
+  }
+  async verifyConnection() {
+    try {
+      await this.transporter.verify();
+      return true;
+    } catch (_error) {
+      return false;
+    }
+  }
+};
+
+// src/email/ses.ts
+import { SESv2Client, SendEmailCommand } from "@aws-sdk/client-sesv2";
+
+// src/email/defaultTemplates.ts
+var defaultTemplates = {
+  verification: {
+    subject: "Verify your email address",
+    html: (token) => `
+<!DOCTYPE html>
+<html>
+<head>
+  <meta charset="utf-8">
+  <title>Verify your email address</title>
+  <style>
+    body { font-family: Arial, sans-serif; line-height: 1.6; color: #333; max-width: 600px; margin: 0 auto; padding: 20px; }
+    .button { display: inline-block; padding: 12px 24px; background-color: #007bff; color: white; text-decoration: none; border-radius: 4px; margin: 20px 0; }
+    .footer { margin-top: 30px; font-size: 0.9em; color: #666; }
+  </style>
+</head>
+<body>
+  <h1>Verify your email address</h1>
+  <p>Thank you for signing up! Please click the button below to verify your email address:</p>
+  <a href="${token}" class="button">Verify Email Address</a>
+  <p>Or copy and paste this link in your browser:</p>
+  <p>${token}</p>
+  <div class="footer">
+    <p>If you didn't create an account, you can safely ignore this email.</p>
+  </div>
+</body>
+</html>`
+  },
+  resetPassword: {
+    subject: "Reset your password",
+    html: (token) => `
+<!DOCTYPE html>
+<html>
+<head>
+  <meta charset="utf-8">
+  <title>Reset your password</title>
+  <style>
+    body { font-family: Arial, sans-serif; line-height: 1.6; color: #333; max-width: 600px; margin: 0 auto; padding: 20px; }
+    .button { display: inline-block; padding: 12px 24px; background-color: #007bff; color: white; text-decoration: none; border-radius: 4px; margin: 20px 0; }
+    .footer { margin-top: 30px; font-size: 0.9em; color: #666; }
+  </style>
+</head>
+<body>
+  <h1>Reset your password</h1>
+  <p>We received a request to reset your password. Click the button below to create a new password:</p>
+  <a href="${token}" class="button">Reset Password</a>
+  <p>Or copy and paste this link in your browser:</p>
+  <p>${token}</p>
+  <div class="footer">
+    <p>If you didn't request a password reset, you can safely ignore this email.</p>
+    <p>This link will expire in 24 hours.</p>
+  </div>
+</body>
+</html>`
+  }
+};
+
+// src/email/ses.ts
+var SESEmailProvider = class {
+  constructor(from, config, templates) {
+    this.client = new SESv2Client({
+      region: config.region,
+      credentials: config.credentials
+    });
+    this.config = {
+      from,
+      templates: templates ?? defaultTemplates,
+      sourceArn: config.sourceArn
+    };
+  }
+  async sendEmail(to, subject, html) {
+    const command = new SendEmailCommand({
+      FromEmailAddress: this.config.from,
+      FromEmailAddressIdentityArn: this.config.sourceArn,
+      Destination: {
+        ToAddresses: [to]
+      },
+      Content: {
+        Simple: {
+          Subject: {
+            Data: subject,
+            Charset: "UTF-8"
+          },
+          Body: {
+            Html: {
+              Data: html,
+              Charset: "UTF-8"
+            }
+          }
+        }
+      }
+    });
+    await this.client.send(command);
+  }
+  async sendVerificationEmail(email, token) {
+    const { subject, html } = this.config.templates.verification;
+    await this.sendEmail(email, subject, html(token));
+  }
+  async sendPasswordResetEmail(email, token) {
+    const { subject, html } = this.config.templates.resetPassword;
+    await this.sendEmail(email, subject, html(token));
+  }
+  async verifyConnection() {
+    try {
+      await this.client.send(
+        new SendEmailCommand({
+          FromEmailAddress: this.config.from,
+          FromEmailAddressIdentityArn: this.config.sourceArn,
+          Destination: {
+            ToAddresses: [this.config.from]
+            // Send to ourselves as a test
+          },
+          Content: {
+            Simple: {
+              Subject: { Data: "Test Connection", Charset: "UTF-8" },
+              Body: { Text: { Data: "Test", Charset: "UTF-8" } }
+            }
+          }
+        })
+      );
+      return true;
+    } catch (_error) {
+      return false;
+    }
+  }
+};
+
+// src/email/index.ts
+function createEmailProvider(config) {
+  switch (config.type) {
+    case "smtp":
+      return new SMTPEmailProvider(
+        config.from,
+        config.options,
+        config.templates
+      );
+    case "ses":
+      return new SESEmailProvider(config.from, config.options, config.templates);
+    default:
+      throw new Error(`Unsupported email provider type: ${config.type}`);
+  }
+}
+
+// src/services/auth.ts
+var AuthService = class {
+  constructor(config) {
+    this.config = config;
+    this.storage = createStorageProvider(config.storage);
+    this.email = createEmailProvider(config.email);
+  }
+  generateToken(user) {
+    return jwt.sign(
+      {
+        id: user.id,
+        email: user.email,
+        roles: user.roles,
+        isEmailVerified: user.isEmailVerified
+      },
+      this.config.jwt.privateKey,
+      {
+        algorithm: "RS256",
+        expiresIn: this.config.jwt.expiresIn,
+        keyid: this.config.jwt.keyId
+      }
+    );
+  }
+  async hashPassword(password) {
+    return bcrypt.hash(password, 10);
+  }
+  async signup(email, password, roles = ["USER"]) {
+    const existingUser = await this.storage.getUserByEmail(email);
+    if (existingUser) {
+      throw new Error("User already exists");
+    }
+    const verificationToken = uuidv4();
+    const user = {
+      id: uuidv4(),
+      email,
+      passwordHash: await this.hashPassword(password),
+      roles,
+      isEmailVerified: false,
+      verificationToken,
+      createdAt: Date.now(),
+      updatedAt: Date.now()
+    };
+    await this.storage.createUser(user);
+    await this.email.sendVerificationEmail(email, verificationToken);
+    const token = this.generateToken(user);
+    return { user, token };
+  }
+  async signin(email, password) {
+    const user = await this.storage.getUserByEmail(email);
+    if (!user) {
+      throw new Error("Invalid credentials");
+    }
+    const isValidPassword = await bcrypt.compare(password, user.passwordHash);
+    if (!isValidPassword) {
+      throw new Error("Invalid credentials");
+    }
+    if (!user.isEmailVerified) {
+      throw new Error("Please verify your email before signing in");
+    }
+    const token = this.generateToken(user);
+    return { user, token };
+  }
+  async verifyEmail(token) {
+    const user = await this.storage.getUserByVerifyEmailToken(token);
+    if (!user || user.verificationToken !== token) {
+      throw new Error("Invalid verification token");
+    }
+    await this.storage.updateUser(user.id, {
+      isEmailVerified: true,
+      verificationToken: void 0,
+      updatedAt: Date.now()
+    });
+  }
+  async initiatePasswordReset(email) {
+    const user = await this.storage.getUserByEmail(email);
+    if (!user) {
+      throw new Error("User not found");
+    }
+    const resetToken = uuidv4();
+    const resetExpires = Date.now() + 36e5;
+    await this.storage.updateUser(user.id, {
+      resetPasswordToken: resetToken,
+      resetPasswordExpires: resetExpires,
+      updatedAt: Date.now()
+    });
+    await this.email.sendPasswordResetEmail(email, resetToken);
+  }
+  async resetPassword(token, newPassword) {
+    const user = await this.storage.getUserByResetPasswordToken(token);
+    if (!user || !user.resetPasswordToken || user.resetPasswordToken !== token || !user.resetPasswordExpires || user.resetPasswordExpires < Date.now()) {
+      throw new Error("Invalid or expired reset token");
+    }
+    await this.storage.updateUser(user.id, {
+      passwordHash: await this.hashPassword(newPassword),
+      resetPasswordToken: void 0,
+      resetPasswordExpires: void 0,
+      updatedAt: Date.now()
+    });
+  }
+  async verifyToken(token) {
+    try {
+      return jwt.verify(token, this.config.jwt.publicKey, { algorithms: ["RS256"] });
+    } catch (_error) {
+      throw new Error("Invalid token");
+    }
+  }
+  async hasRole(userId, requiredRoles) {
+    const user = await this.storage.getUserById(userId);
+    if (!user) {
+      return false;
+    }
+    return requiredRoles.some((role) => user.roles.includes(role));
+  }
+};
+
+// src/middleware/auth.ts
+var AuthMiddleware = class {
+  constructor(authService) {
+    this.authService = authService;
+  }
+  verifyToken() {
+    return async (req, res, next) => {
+      try {
+        const token = req.headers.authorization?.split(" ")[1];
+        if (!token) {
+          throw new Error("No token provided");
+        }
+        const decoded = await this.authService.verifyToken(token);
+        req.user = decoded;
+        next();
+      } catch (_error) {
+        res.status(401).json({ error: "Unauthorized" });
+      }
+    };
+  }
+  requireRoles(roles) {
+    return async (req, res, next) => {
+      try {
+        const hasRole = await this.authService.hasRole(req.user.id, roles);
+        if (!hasRole) {
+          throw new Error("Insufficient permissions");
+        }
+        next();
+      } catch (_error) {
+        res.status(403).json({ error: "Forbidden" });
+      }
+    };
+  }
+  requireEmailVerified() {
+    return (req, res, next) => {
+      if (!req.user.isEmailVerified) {
+        return res.status(403).json({ error: "Email not verified" });
+      }
+      next();
+    };
+  }
+};
+
+// src/types/index.ts
+import { z } from "zod";
+var UserRoleSchema = z.enum(["ADMIN", "USER", "GUEST"]);
+var UserSchema = z.object({
+  id: z.string(),
+  email: z.string().email(),
+  passwordHash: z.string(),
+  roles: z.array(UserRoleSchema),
+  isEmailVerified: z.boolean(),
+  verificationToken: z.string().optional(),
+  resetPasswordToken: z.string().optional(),
+  resetPasswordExpires: z.number().optional(),
+  createdAt: z.number(),
+  updatedAt: z.number()
+});
+export {
+  AuthMiddleware,
+  AuthService,
+  UserRoleSchema,
+  UserSchema
+};
+//# sourceMappingURL=index.mjs.map

package/dist/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/services/auth.ts","../src/storage/dynamodb.ts","../src/storage/index.ts","../src/email/smtp.ts","../src/email/ses.ts","../src/email/defaultTemplates.ts","../src/email/index.ts","../src/middleware/auth.ts","../src/types/index.ts"],"sourcesContent":["import bcrypt from 'bcryptjs';\nimport jwt from 'jsonwebtoken';\nimport { v4 as uuidv4 } from 'uuid';\nimport type { AuthConfig, User, UserRole } from '../types';\nimport type { IStorageProvider } from '../storage/types';\nimport type { IEmailProvider } from '../email/types';\nimport { createStorageProvider } from '../storage';\nimport { createEmailProvider } from '../email';\n\nexport class AuthService {\n    private storage: IStorageProvider;\n    private email: IEmailProvider;\n    private config: AuthConfig;\n\n    constructor(config: AuthConfig) {\n        this.config = config;\n        this.storage = createStorageProvider(config.storage);\n        this.email = createEmailProvider(config.email);\n    }\n\n    private generateToken(user: User): string {\n        // @ts-ignore\n        return jwt.sign(\n            {\n                id: user.id,\n                email: user.email,\n                roles: user.roles,\n                isEmailVerified: user.isEmailVerified,\n            },\n            this.config.jwt.privateKey,\n            {\n                algorithm: 'RS256',\n                expiresIn: this.config.jwt.expiresIn,\n                keyid: this.config.jwt.keyId,\n            }\n        );\n    }\n\n    private async hashPassword(password: string): Promise<string> {\n        return bcrypt.hash(password, 10);\n    }\n\n    async signup(\n        email: string,\n        password: string,\n        roles: UserRole[] = ['USER']\n    ): Promise<{ user: User; token: string }> {\n        const existingUser = await this.storage.getUserByEmail(email);\n        if (existingUser) {\n            throw new Error('User already exists');\n        }\n\n        const verificationToken = uuidv4();\n        const user: User = {\n            id: uuidv4(),\n            email,\n            passwordHash: await this.hashPassword(password),\n            roles,\n            isEmailVerified: false,\n            verificationToken,\n            createdAt: Date.now(),\n            updatedAt: Date.now(),\n        };\n\n        await this.storage.createUser(user);\n        await this.email.sendVerificationEmail(email, verificationToken);\n\n        const token = this.generateToken(user);\n        return { user, token };\n    }\n\n    async signin(email: string, password: string): Promise<{ user: User; token: string }> {\n        const user = await this.storage.getUserByEmail(email);\n        if (!user) {\n            throw new Error('Invalid credentials');\n        }\n\n        const isValidPassword = await bcrypt.compare(password, user.passwordHash);\n        if (!isValidPassword) {\n            throw new Error('Invalid credentials');\n        }\n\n        if (!user.isEmailVerified) {\n            throw new Error('Please verify your email before signing in');\n        }\n\n        const token = this.generateToken(user);\n        return { user, token };\n    }\n\n    async verifyEmail(token: string): Promise<void> {\n        const user = await this.storage.getUserByVerifyEmailToken(token);\n        if (!user || user.verificationToken !== token) {\n            throw new Error('Invalid verification token');\n        }\n\n        await this.storage.updateUser(user.id, {\n            isEmailVerified: true,\n            verificationToken: undefined,\n            updatedAt: Date.now(),\n        });\n    }\n\n    async initiatePasswordReset(email: string): Promise<void> {\n        const user = await this.storage.getUserByEmail(email);\n        if (!user) {\n            throw new Error('User not found');\n        }\n\n        const resetToken = uuidv4();\n        const resetExpires = Date.now() + 3600000; // 1 hour\n\n        await this.storage.updateUser(user.id, {\n            resetPasswordToken: resetToken,\n            resetPasswordExpires: resetExpires,\n            updatedAt: Date.now(),\n        });\n\n        await this.email.sendPasswordResetEmail(email, resetToken);\n    }\n\n    async resetPassword(token: string, newPassword: string): Promise<void> {\n        const user = await this.storage.getUserByResetPasswordToken(token);\n        if (\n            !user ||\n            !user.resetPasswordToken ||\n            user.resetPasswordToken !== token ||\n            !user.resetPasswordExpires ||\n            user.resetPasswordExpires < Date.now()\n        ) {\n            throw new Error('Invalid or expired reset token');\n        }\n\n        await this.storage.updateUser(user.id, {\n            passwordHash: await this.hashPassword(newPassword),\n            resetPasswordToken: undefined,\n            resetPasswordExpires: undefined,\n            updatedAt: Date.now(),\n        });\n    }\n\n    async verifyToken(\n        token: string\n    ): Promise<{ id: string; email: string; roles: UserRole[]; isEmailVerified: boolean }> {\n        try {\n            return jwt.verify(token, this.config.jwt.publicKey, { algorithms: ['RS256'] }) as {\n                id: string;\n                email: string;\n                roles: UserRole[];\n                isEmailVerified: boolean;\n            };\n        } catch (_error) {\n            throw new Error('Invalid token');\n        }\n    }\n\n    async hasRole(userId: string, requiredRoles: UserRole[]): Promise<boolean> {\n        const user = await this.storage.getUserById(userId);\n        if (!user) {\n            return false;\n        }\n\n        return requiredRoles.some((role) => user.roles.includes(role));\n    }\n}\n","import { DynamoDBClient } from '@aws-sdk/client-dynamodb';\nimport {\n    DynamoDBDocumentClient,\n    PutCommand,\n    GetCommand,\n    UpdateCommand,\n    DeleteCommand,\n    QueryCommand,\n} from '@aws-sdk/lib-dynamodb';\nimport type { User } from '../types';\nimport type { IStorageProvider, DynamoDBConfig } from './types';\n\nexport class DynamoDBStorageProvider implements IStorageProvider {\n    private client: DynamoDBDocumentClient;\n    private tableName: string;\n\n    constructor(config: DynamoDBConfig) {\n        const dbClient = new DynamoDBClient({ region: config.region });\n        this.client = DynamoDBDocumentClient.from(dbClient, {});\n        this.tableName = config.tableName;\n    }\n\n    async createUser(user: User): Promise<void> {\n        await this.client.send(\n            new PutCommand({\n                TableName: this.tableName,\n                Item: user,\n                ConditionExpression: 'attribute_not_exists(email)',\n            })\n        );\n    }\n\n    async getUserByResetPasswordToken(resetPasswordToken: string): Promise<User | null> {\n        const response = await this.client.send(\n            new QueryCommand({\n                TableName: this.tableName,\n                IndexName: 'ResetPasswordTokenIndex',\n                KeyConditionExpression: 'resetPasswordToken = :token',\n                ExpressionAttributeValues: {\n                    ':token': resetPasswordToken,\n                },\n            })\n        );\n\n        return response.Items?.[0] as User | null;\n    }\n\n    async getUserByVerifyEmailToken(verifyEmailToken: string): Promise<User | null> {\n        const response = await this.client.send(\n            new QueryCommand({\n                TableName: this.tableName,\n                IndexName: 'VerifyEmailTokenIndex',\n                KeyConditionExpression: 'verificationToken = :token',\n                ExpressionAttributeValues: {\n                    ':token': verifyEmailToken,\n                },\n            })\n        );\n\n        return response.Items?.[0] as User | null;\n    }\n\n    async getUserById(id: string): Promise<User | null> {\n        const response = await this.client.send(\n            new GetCommand({\n                TableName: this.tableName,\n                Key: { id },\n            })\n        );\n\n        return response.Item as User | null;\n    }\n\n    async getUserByEmail(email: string): Promise<User | null> {\n        const response = await this.client.send(\n            new QueryCommand({\n                TableName: this.tableName,\n                IndexName: 'EmailIndex',\n                KeyConditionExpression: 'email = :email',\n                ExpressionAttributeValues: {\n                    ':email': email,\n                },\n            })\n        );\n\n        return response.Items?.[0] as User | null;\n    }\n\n    async updateUser(id: string, updates: Partial<User>): Promise<void> {\n        const toSet: Record<string, any> = {};\n        const toRemove: string[] = [];\n\n        // Separate attributes to set and remove\n        Object.entries(updates).forEach(([key, value]) => {\n            if (value === undefined) {\n                toRemove.push(key);\n            } else {\n                toSet[key] = value;\n            }\n        });\n\n        // If no updates at all, return early\n        if (Object.keys(toSet).length === 0 && toRemove.length === 0) {\n            return;\n        }\n\n        // Build the update expression\n        const setPart =\n            Object.keys(toSet).length > 0\n                ? `SET ${Object.keys(toSet)\n                      .map((key) => `#${key} = :${key}`)\n                      .join(', ')}`\n                : '';\n\n        const removePart =\n            toRemove.length > 0 ? `REMOVE ${toRemove.map((key) => `#${key}`).join(', ')}` : '';\n\n        const updateExpression = [setPart, removePart].filter(Boolean).join(' ');\n\n        // Build expression attribute names (needed for both SET and REMOVE)\n        const expressionAttributeNames = [...Object.keys(toSet), ...toRemove].reduce(\n            (acc, key) => ({ ...acc, [`#${key}`]: key }),\n            {}\n        );\n\n        // Build expression attribute values (only needed for SET)\n        const expressionAttributeValues = Object.entries(toSet).reduce(\n            (acc, [key, value]) => ({ ...acc, [`:${key}`]: value }),\n            {}\n        );\n\n        await this.client.send(\n            new UpdateCommand({\n                TableName: this.tableName,\n                Key: { id },\n                UpdateExpression: updateExpression,\n                ExpressionAttributeNames: expressionAttributeNames,\n                ...(Object.keys(expressionAttributeValues).length > 0 && {\n                    ExpressionAttributeValues: expressionAttributeValues,\n                }),\n            })\n        );\n    }\n\n    async deleteUser(id: string): Promise<void> {\n        await this.client.send(\n            new DeleteCommand({\n                TableName: this.tableName,\n                Key: { id },\n            })\n        );\n    }\n}\n","import type { DynamoDBConfig, IStorageProvider, StorageConfig } from './types';\nimport { DynamoDBStorageProvider } from './dynamodb';\n\nexport function createStorageProvider(config: StorageConfig): IStorageProvider {\n    switch (config.type) {\n        case 'dynamodb':\n            return new DynamoDBStorageProvider(config.options as DynamoDBConfig);\n        case 'mongodb':\n            throw new Error('MongoDB storage provider not implemented yet');\n        case 'postgres':\n            throw new Error('PostgreSQL storage provider not implemented yet');\n        default:\n            throw new Error(`Unsupported storage type: ${config.type}`);\n    }\n}\n\nexport * from './types';\nexport * from './dynamodb';\n","import nodemailer from 'nodemailer';\nimport type { IEmailProvider, SMTPConfig, EmailTemplates } from './types';\n\nexport class SMTPEmailProvider implements IEmailProvider {\n    private transporter: nodemailer.Transporter;\n    private config: { from: string; templates: EmailTemplates };\n\n    constructor(from: string, config: SMTPConfig, templates: EmailTemplates) {\n        this.transporter = nodemailer.createTransport(config);\n        this.config = { from, templates };\n    }\n\n    async sendVerificationEmail(email: string, token: string): Promise<void> {\n        const { subject, html } = this.config.templates.verification;\n\n        await this.transporter.sendMail({\n            from: this.config.from,\n            to: email,\n            subject,\n            html: html(token),\n        });\n    }\n\n    async sendPasswordResetEmail(email: string, token: string): Promise<void> {\n        const { subject, html } = this.config.templates.resetPassword;\n\n        await this.transporter.sendMail({\n            from: this.config.from,\n            to: email,\n            subject,\n            html: html(token),\n        });\n    }\n\n    async verifyConnection(): Promise<boolean> {\n        try {\n            await this.transporter.verify();\n            return true;\n        } catch (_error) {\n            return false;\n        }\n    }\n}\n","import { SESv2Client, SendEmailCommand } from '@aws-sdk/client-sesv2';\nimport type { IEmailProvider, SESConfig, EmailTemplates } from './types';\nimport { defaultTemplates } from './defaultTemplates';\n\nexport class SESEmailProvider implements IEmailProvider {\n    private client: SESv2Client;\n    private config: { from: string; templates: EmailTemplates; sourceArn?: string };\n\n    constructor(from: string, config: SESConfig, templates?: EmailTemplates) {\n        this.client = new SESv2Client({\n            region: config.region,\n            credentials: config.credentials,\n        });\n        this.config = {\n            from,\n            templates: templates ?? defaultTemplates,\n            sourceArn: config.sourceArn,\n        };\n    }\n\n    private async sendEmail(to: string, subject: string, html: string): Promise<void> {\n        const command = new SendEmailCommand({\n            FromEmailAddress: this.config.from,\n            FromEmailAddressIdentityArn: this.config.sourceArn,\n            Destination: {\n                ToAddresses: [to],\n            },\n            Content: {\n                Simple: {\n                    Subject: {\n                        Data: subject,\n                        Charset: 'UTF-8',\n                    },\n                    Body: {\n                        Html: {\n                            Data: html,\n                            Charset: 'UTF-8',\n                        },\n                    },\n                },\n            },\n        });\n\n        await this.client.send(command);\n    }\n\n    async sendVerificationEmail(email: string, token: string): Promise<void> {\n        const { subject, html } = this.config.templates.verification;\n        await this.sendEmail(email, subject, html(token));\n    }\n\n    async sendPasswordResetEmail(email: string, token: string): Promise<void> {\n        const { subject, html } = this.config.templates.resetPassword;\n        await this.sendEmail(email, subject, html(token));\n    }\n\n    async verifyConnection(): Promise<boolean> {\n        try {\n            // SES doesn't have a direct verify method, so we'll check if we can describe our sending status\n            await this.client.send(\n                new SendEmailCommand({\n                    FromEmailAddress: this.config.from,\n                    FromEmailAddressIdentityArn: this.config.sourceArn,\n                    Destination: {\n                        ToAddresses: [this.config.from], // Send to ourselves as a test\n                    },\n                    Content: {\n                        Simple: {\n                            Subject: { Data: 'Test Connection', Charset: 'UTF-8' },\n                            Body: { Text: { Data: 'Test', Charset: 'UTF-8' } },\n                        },\n                    },\n                })\n            );\n            return true;\n        } catch (_error) {\n            return false;\n        }\n    }\n}\n","import type { EmailTemplates } from './types';\n\nexport const defaultTemplates: EmailTemplates = {\n    verification: {\n        subject: 'Verify your email address',\n        html: (token: string) => `\n<!DOCTYPE html>\n<html>\n<head>\n  <meta charset=\"utf-8\">\n  <title>Verify your email address</title>\n  <style>\n    body { font-family: Arial, sans-serif; line-height: 1.6; color: #333; max-width: 600px; margin: 0 auto; padding: 20px; }\n    .button { display: inline-block; padding: 12px 24px; background-color: #007bff; color: white; text-decoration: none; border-radius: 4px; margin: 20px 0; }\n    .footer { margin-top: 30px; font-size: 0.9em; color: #666; }\n  </style>\n</head>\n<body>\n  <h1>Verify your email address</h1>\n  <p>Thank you for signing up! Please click the button below to verify your email address:</p>\n  <a href=\"${token}\" class=\"button\">Verify Email Address</a>\n  <p>Or copy and paste this link in your browser:</p>\n  <p>${token}</p>\n  <div class=\"footer\">\n    <p>If you didn't create an account, you can safely ignore this email.</p>\n  </div>\n</body>\n</html>`,\n    },\n    resetPassword: {\n        subject: 'Reset your password',\n        html: (token: string) => `\n<!DOCTYPE html>\n<html>\n<head>\n  <meta charset=\"utf-8\">\n  <title>Reset your password</title>\n  <style>\n    body { font-family: Arial, sans-serif; line-height: 1.6; color: #333; max-width: 600px; margin: 0 auto; padding: 20px; }\n    .button { display: inline-block; padding: 12px 24px; background-color: #007bff; color: white; text-decoration: none; border-radius: 4px; margin: 20px 0; }\n    .footer { margin-top: 30px; font-size: 0.9em; color: #666; }\n  </style>\n</head>\n<body>\n  <h1>Reset your password</h1>\n  <p>We received a request to reset your password. Click the button below to create a new password:</p>\n  <a href=\"${token}\" class=\"button\">Reset Password</a>\n  <p>Or copy and paste this link in your browser:</p>\n  <p>${token}</p>\n  <div class=\"footer\">\n    <p>If you didn't request a password reset, you can safely ignore this email.</p>\n    <p>This link will expire in 24 hours.</p>\n  </div>\n</body>\n</html>`,\n    },\n};\n","import type { IEmailProvider, EmailConfig, SMTPConfig, SESConfig } from './types';\nimport { SMTPEmailProvider } from './smtp';\nimport { SESEmailProvider } from './ses';\n\nexport function createEmailProvider(config: EmailConfig): IEmailProvider {\n    switch (config.type) {\n        case 'smtp':\n            return new SMTPEmailProvider(\n                config.from,\n                config.options as SMTPConfig,\n                config.templates\n            );\n        case 'ses':\n            return new SESEmailProvider(config.from, config.options as SESConfig, config.templates);\n        default:\n            throw new Error(`Unsupported email provider type: ${config.type}`);\n    }\n}\n\nexport * from './types';\nexport * from './smtp';\nexport * from './ses';\n","import type { AuthService } from '../services/auth';\nimport type { UserRole } from '../types';\n\nexport class AuthMiddleware {\n    private authService: AuthService;\n\n    constructor(authService: AuthService) {\n        this.authService = authService;\n    }\n\n    verifyToken() {\n        return async (req: any, res: any, next: any) => {\n            try {\n                const token = req.headers.authorization?.split(' ')[1];\n                if (!token) {\n                    throw new Error('No token provided');\n                }\n\n                const decoded = await this.authService.verifyToken(token);\n                req.user = decoded;\n                next();\n            } catch (_error) {\n                res.status(401).json({ error: 'Unauthorized' });\n            }\n        };\n    }\n\n    requireRoles(roles: UserRole[]) {\n        return async (req: any, res: any, next: any) => {\n            try {\n                const hasRole = await this.authService.hasRole(req.user.id, roles);\n                if (!hasRole) {\n                    throw new Error('Insufficient permissions');\n                }\n                next();\n            } catch (_error) {\n                res.status(403).json({ error: 'Forbidden' });\n            }\n        };\n    }\n\n    requireEmailVerified() {\n        return (req: any, res: any, next: any) => {\n            if (!req.user.isEmailVerified) {\n                return res.status(403).json({ error: 'Email not verified' });\n            }\n            next();\n        };\n    }\n}\n","import { z } from 'zod';\nimport type { StorageConfig } from '../storage/types';\nimport type { EmailConfig } from '../email/types';\n\nexport const UserRoleSchema = z.enum(['ADMIN', 'USER', 'GUEST']);\nexport type UserRole = z.infer<typeof UserRoleSchema>;\n\nexport const UserSchema = z.object({\n    id: z.string(),\n    email: z.string().email(),\n    passwordHash: z.string(),\n    roles: z.array(UserRoleSchema),\n    isEmailVerified: z.boolean(),\n    verificationToken: z.string().optional(),\n    resetPasswordToken: z.string().optional(),\n    resetPasswordExpires: z.number().optional(),\n    createdAt: z.number(),\n    updatedAt: z.number(),\n});\n\nexport type User = z.infer<typeof UserSchema>;\n\nexport interface AuthConfig {\n    jwt: {\n        privateKey: string;\n        publicKey: string;\n        keyId: string;\n        expiresIn: string;\n    };\n    storage: StorageConfig;\n    email: EmailConfig;\n}\n"],"mappings":";AAAA,OAAO,YAAY;AACnB,OAAO,SAAS;AAChB,SAAS,MAAM,cAAc;;;ACF7B,SAAS,sBAAsB;AAC/B;AAAA,EACI;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACG;AAIA,IAAM,0BAAN,MAA0D;AAAA,EAI7D,YAAY,QAAwB;AAChC,UAAM,WAAW,IAAI,eAAe,EAAE,QAAQ,OAAO,OAAO,CAAC;AAC7D,SAAK,SAAS,uBAAuB,KAAK,UAAU,CAAC,CAAC;AACtD,SAAK,YAAY,OAAO;AAAA,EAC5B;AAAA,EAEA,MAAM,WAAW,MAA2B;AACxC,UAAM,KAAK,OAAO;AAAA,MACd,IAAI,WAAW;AAAA,QACX,WAAW,KAAK;AAAA,QAChB,MAAM;AAAA,QACN,qBAAqB;AAAA,MACzB,CAAC;AAAA,IACL;AAAA,EACJ;AAAA,EAEA,MAAM,4BAA4B,oBAAkD;AAChF,UAAM,WAAW,MAAM,KAAK,OAAO;AAAA,MAC/B,IAAI,aAAa;AAAA,QACb,WAAW,KAAK;AAAA,QAChB,WAAW;AAAA,QACX,wBAAwB;AAAA,QACxB,2BAA2B;AAAA,UACvB,UAAU;AAAA,QACd;AAAA,MACJ,CAAC;AAAA,IACL;AAEA,WAAO,SAAS,QAAQ,CAAC;AAAA,EAC7B;AAAA,EAEA,MAAM,0BAA0B,kBAAgD;AAC5E,UAAM,WAAW,MAAM,KAAK,OAAO;AAAA,MAC/B,IAAI,aAAa;AAAA,QACb,WAAW,KAAK;AAAA,QAChB,WAAW;AAAA,QACX,wBAAwB;AAAA,QACxB,2BAA2B;AAAA,UACvB,UAAU;AAAA,QACd;AAAA,MACJ,CAAC;AAAA,IACL;AAEA,WAAO,SAAS,QAAQ,CAAC;AAAA,EAC7B;AAAA,EAEA,MAAM,YAAY,IAAkC;AAChD,UAAM,WAAW,MAAM,KAAK,OAAO;AAAA,MAC/B,IAAI,WAAW;AAAA,QACX,WAAW,KAAK;AAAA,QAChB,KAAK,EAAE,GAAG;AAAA,MACd,CAAC;AAAA,IACL;AAEA,WAAO,SAAS;AAAA,EACpB;AAAA,EAEA,MAAM,eAAe,OAAqC;AACtD,UAAM,WAAW,MAAM,KAAK,OAAO;AAAA,MAC/B,IAAI,aAAa;AAAA,QACb,WAAW,KAAK;AAAA,QAChB,WAAW;AAAA,QACX,wBAAwB;AAAA,QACxB,2BAA2B;AAAA,UACvB,UAAU;AAAA,QACd;AAAA,MACJ,CAAC;AAAA,IACL;AAEA,WAAO,SAAS,QAAQ,CAAC;AAAA,EAC7B;AAAA,EAEA,MAAM,WAAW,IAAY,SAAuC;AAChE,UAAM,QAA6B,CAAC;AACpC,UAAM,WAAqB,CAAC;AAG5B,WAAO,QAAQ,OAAO,EAAE,QAAQ,CAAC,CAAC,KAAK,KAAK,MAAM;AAC9C,UAAI,UAAU,QAAW;AACrB,iBAAS,KAAK,GAAG;AAAA,MACrB,OAAO;AACH,cAAM,GAAG,IAAI;AAAA,MACjB;AAAA,IACJ,CAAC;AAGD,QAAI,OAAO,KAAK,KAAK,EAAE,WAAW,KAAK,SAAS,WAAW,GAAG;AAC1D;AAAA,IACJ;AAGA,UAAM,UACF,OAAO,KAAK,KAAK,EAAE,SAAS,IACtB,OAAO,OAAO,KAAK,KAAK,EACnB,IAAI,CAAC,QAAQ,IAAI,GAAG,OAAO,GAAG,EAAE,EAChC,KAAK,IAAI,CAAC,KACf;AAEV,UAAM,aACF,SAAS,SAAS,IAAI,UAAU,SAAS,IAAI,CAAC,QAAQ,IAAI,GAAG,EAAE,EAAE,KAAK,IAAI,CAAC,KAAK;AAEpF,UAAM,mBAAmB,CAAC,SAAS,UAAU,EAAE,OAAO,OAAO,EAAE,KAAK,GAAG;AAGvE,UAAM,2BAA2B,CAAC,GAAG,OAAO,KAAK,KAAK,GAAG,GAAG,QAAQ,EAAE;AAAA,MAClE,CAAC,KAAK,SAAS,EAAE,GAAG,KAAK,CAAC,IAAI,GAAG,EAAE,GAAG,IAAI;AAAA,MAC1C,CAAC;AAAA,IACL;AAGA,UAAM,4BAA4B,OAAO,QAAQ,KAAK,EAAE;AAAA,MACpD,CAAC,KAAK,CAAC,KAAK,KAAK,OAAO,EAAE,GAAG,KAAK,CAAC,IAAI,GAAG,EAAE,GAAG,MAAM;AAAA,MACrD,CAAC;AAAA,IACL;AAEA,UAAM,KAAK,OAAO;AAAA,MACd,IAAI,cAAc;AAAA,QACd,WAAW,KAAK;AAAA,QAChB,KAAK,EAAE,GAAG;AAAA,QACV,kBAAkB;AAAA,QAClB,0BAA0B;AAAA,QAC1B,GAAI,OAAO,KAAK,yBAAyB,EAAE,SAAS,KAAK;AAAA,UACrD,2BAA2B;AAAA,QAC/B;AAAA,MACJ,CAAC;AAAA,IACL;AAAA,EACJ;AAAA,EAEA,MAAM,WAAW,IAA2B;AACxC,UAAM,KAAK,OAAO;AAAA,MACd,IAAI,cAAc;AAAA,QACd,WAAW,KAAK;AAAA,QAChB,KAAK,EAAE,GAAG;AAAA,MACd,CAAC;AAAA,IACL;AAAA,EACJ;AACJ;;;ACrJO,SAAS,sBAAsB,QAAyC;AAC3E,UAAQ,OAAO,MAAM;AAAA,IACjB,KAAK;AACD,aAAO,IAAI,wBAAwB,OAAO,OAAyB;AAAA,IACvE,KAAK;AACD,YAAM,IAAI,MAAM,8CAA8C;AAAA,IAClE,KAAK;AACD,YAAM,IAAI,MAAM,iDAAiD;AAAA,IACrE;AACI,YAAM,IAAI,MAAM,6BAA6B,OAAO,IAAI,EAAE;AAAA,EAClE;AACJ;;;ACdA,OAAO,gBAAgB;AAGhB,IAAM,oBAAN,MAAkD;AAAA,EAIrD,YAAY,MAAc,QAAoB,WAA2B;AACrE,SAAK,cAAc,WAAW,gBAAgB,MAAM;AACpD,SAAK,SAAS,EAAE,MAAM,UAAU;AAAA,EACpC;AAAA,EAEA,MAAM,sBAAsB,OAAe,OAA8B;AACrE,UAAM,EAAE,SAAS,KAAK,IAAI,KAAK,OAAO,UAAU;AAEhD,UAAM,KAAK,YAAY,SAAS;AAAA,MAC5B,MAAM,KAAK,OAAO;AAAA,MAClB,IAAI;AAAA,MACJ;AAAA,MACA,MAAM,KAAK,KAAK;AAAA,IACpB,CAAC;AAAA,EACL;AAAA,EAEA,MAAM,uBAAuB,OAAe,OAA8B;AACtE,UAAM,EAAE,SAAS,KAAK,IAAI,KAAK,OAAO,UAAU;AAEhD,UAAM,KAAK,YAAY,SAAS;AAAA,MAC5B,MAAM,KAAK,OAAO;AAAA,MAClB,IAAI;AAAA,MACJ;AAAA,MACA,MAAM,KAAK,KAAK;AAAA,IACpB,CAAC;AAAA,EACL;AAAA,EAEA,MAAM,mBAAqC;AACvC,QAAI;AACA,YAAM,KAAK,YAAY,OAAO;AAC9B,aAAO;AAAA,IACX,SAAS,QAAQ;AACb,aAAO;AAAA,IACX;AAAA,EACJ;AACJ;;;AC1CA,SAAS,aAAa,wBAAwB;;;ACEvC,IAAM,mBAAmC;AAAA,EAC5C,cAAc;AAAA,IACV,SAAS;AAAA,IACT,MAAM,CAAC,UAAkB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,aAepB,KAAK;AAAA;AAAA,OAEX,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMR;AAAA,EACA,eAAe;AAAA,IACX,SAAS;AAAA,IACT,MAAM,CAAC,UAAkB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,aAepB,KAAK;AAAA;AAAA,OAEX,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOR;AACJ;;;ADpDO,IAAM,mBAAN,MAAiD;AAAA,EAIpD,YAAY,MAAc,QAAmB,WAA4B;AACrE,SAAK,SAAS,IAAI,YAAY;AAAA,MAC1B,QAAQ,OAAO;AAAA,MACf,aAAa,OAAO;AAAA,IACxB,CAAC;AACD,SAAK,SAAS;AAAA,MACV;AAAA,MACA,WAAW,aAAa;AAAA,MACxB,WAAW,OAAO;AAAA,IACtB;AAAA,EACJ;AAAA,EAEA,MAAc,UAAU,IAAY,SAAiB,MAA6B;AAC9E,UAAM,UAAU,IAAI,iBAAiB;AAAA,MACjC,kBAAkB,KAAK,OAAO;AAAA,MAC9B,6BAA6B,KAAK,OAAO;AAAA,MACzC,aAAa;AAAA,QACT,aAAa,CAAC,EAAE;AAAA,MACpB;AAAA,MACA,SAAS;AAAA,QACL,QAAQ;AAAA,UACJ,SAAS;AAAA,YACL,MAAM;AAAA,YACN,SAAS;AAAA,UACb;AAAA,UACA,MAAM;AAAA,YACF,MAAM;AAAA,cACF,MAAM;AAAA,cACN,SAAS;AAAA,YACb;AAAA,UACJ;AAAA,QACJ;AAAA,MACJ;AAAA,IACJ,CAAC;AAED,UAAM,KAAK,OAAO,KAAK,OAAO;AAAA,EAClC;AAAA,EAEA,MAAM,sBAAsB,OAAe,OAA8B;AACrE,UAAM,EAAE,SAAS,KAAK,IAAI,KAAK,OAAO,UAAU;AAChD,UAAM,KAAK,UAAU,OAAO,SAAS,KAAK,KAAK,CAAC;AAAA,EACpD;AAAA,EAEA,MAAM,uBAAuB,OAAe,OAA8B;AACtE,UAAM,EAAE,SAAS,KAAK,IAAI,KAAK,OAAO,UAAU;AAChD,UAAM,KAAK,UAAU,OAAO,SAAS,KAAK,KAAK,CAAC;AAAA,EACpD;AAAA,EAEA,MAAM,mBAAqC;AACvC,QAAI;AAEA,YAAM,KAAK,OAAO;AAAA,QACd,IAAI,iBAAiB;AAAA,UACjB,kBAAkB,KAAK,OAAO;AAAA,UAC9B,6BAA6B,KAAK,OAAO;AAAA,UACzC,aAAa;AAAA,YACT,aAAa,CAAC,KAAK,OAAO,IAAI;AAAA;AAAA,UAClC;AAAA,UACA,SAAS;AAAA,YACL,QAAQ;AAAA,cACJ,SAAS,EAAE,MAAM,mBAAmB,SAAS,QAAQ;AAAA,cACrD,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,SAAS,QAAQ,EAAE;AAAA,YACrD;AAAA,UACJ;AAAA,QACJ,CAAC;AAAA,MACL;AACA,aAAO;AAAA,IACX,SAAS,QAAQ;AACb,aAAO;AAAA,IACX;AAAA,EACJ;AACJ;;;AE3EO,SAAS,oBAAoB,QAAqC;AACrE,UAAQ,OAAO,MAAM;AAAA,IACjB,KAAK;AACD,aAAO,IAAI;AAAA,QACP,OAAO;AAAA,QACP,OAAO;AAAA,QACP,OAAO;AAAA,MACX;AAAA,IACJ,KAAK;AACD,aAAO,IAAI,iBAAiB,OAAO,MAAM,OAAO,SAAsB,OAAO,SAAS;AAAA,IAC1F;AACI,YAAM,IAAI,MAAM,oCAAoC,OAAO,IAAI,EAAE;AAAA,EACzE;AACJ;;;ANRO,IAAM,cAAN,MAAkB;AAAA,EAKrB,YAAY,QAAoB;AAC5B,SAAK,SAAS;AACd,SAAK,UAAU,sBAAsB,OAAO,OAAO;AACnD,SAAK,QAAQ,oBAAoB,OAAO,KAAK;AAAA,EACjD;AAAA,EAEQ,cAAc,MAAoB;AAEtC,WAAO,IAAI;AAAA,MACP;AAAA,QACI,IAAI,KAAK;AAAA,QACT,OAAO,KAAK;AAAA,QACZ,OAAO,KAAK;AAAA,QACZ,iBAAiB,KAAK;AAAA,MAC1B;AAAA,MACA,KAAK,OAAO,IAAI;AAAA,MAChB;AAAA,QACI,WAAW;AAAA,QACX,WAAW,KAAK,OAAO,IAAI;AAAA,QAC3B,OAAO,KAAK,OAAO,IAAI;AAAA,MAC3B;AAAA,IACJ;AAAA,EACJ;AAAA,EAEA,MAAc,aAAa,UAAmC;AAC1D,WAAO,OAAO,KAAK,UAAU,EAAE;AAAA,EACnC;AAAA,EAEA,MAAM,OACF,OACA,UACA,QAAoB,CAAC,MAAM,GACW;AACtC,UAAM,eAAe,MAAM,KAAK,QAAQ,eAAe,KAAK;AAC5D,QAAI,cAAc;AACd,YAAM,IAAI,MAAM,qBAAqB;AAAA,IACzC;AAEA,UAAM,oBAAoB,OAAO;AACjC,UAAM,OAAa;AAAA,MACf,IAAI,OAAO;AAAA,MACX;AAAA,MACA,cAAc,MAAM,KAAK,aAAa,QAAQ;AAAA,MAC9C;AAAA,MACA,iBAAiB;AAAA,MACjB;AAAA,MACA,WAAW,KAAK,IAAI;AAAA,MACpB,WAAW,KAAK,IAAI;AAAA,IACxB;AAEA,UAAM,KAAK,QAAQ,WAAW,IAAI;AAClC,UAAM,KAAK,MAAM,sBAAsB,OAAO,iBAAiB;AAE/D,UAAM,QAAQ,KAAK,cAAc,IAAI;AACrC,WAAO,EAAE,MAAM,MAAM;AAAA,EACzB;AAAA,EAEA,MAAM,OAAO,OAAe,UAA0D;AAClF,UAAM,OAAO,MAAM,KAAK,QAAQ,eAAe,KAAK;AACpD,QAAI,CAAC,MAAM;AACP,YAAM,IAAI,MAAM,qBAAqB;AAAA,IACzC;AAEA,UAAM,kBAAkB,MAAM,OAAO,QAAQ,UAAU,KAAK,YAAY;AACxE,QAAI,CAAC,iBAAiB;AAClB,YAAM,IAAI,MAAM,qBAAqB;AAAA,IACzC;AAEA,QAAI,CAAC,KAAK,iBAAiB;AACvB,YAAM,IAAI,MAAM,4CAA4C;AAAA,IAChE;AAEA,UAAM,QAAQ,KAAK,cAAc,IAAI;AACrC,WAAO,EAAE,MAAM,MAAM;AAAA,EACzB;AAAA,EAEA,MAAM,YAAY,OAA8B;AAC5C,UAAM,OAAO,MAAM,KAAK,QAAQ,0BAA0B,KAAK;AAC/D,QAAI,CAAC,QAAQ,KAAK,sBAAsB,OAAO;AAC3C,YAAM,IAAI,MAAM,4BAA4B;AAAA,IAChD;AAEA,UAAM,KAAK,QAAQ,WAAW,KAAK,IAAI;AAAA,MACnC,iBAAiB;AAAA,MACjB,mBAAmB;AAAA,MACnB,WAAW,KAAK,IAAI;AAAA,IACxB,CAAC;AAAA,EACL;AAAA,EAEA,MAAM,sBAAsB,OAA8B;AACtD,UAAM,OAAO,MAAM,KAAK,QAAQ,eAAe,KAAK;AACpD,QAAI,CAAC,MAAM;AACP,YAAM,IAAI,MAAM,gBAAgB;AAAA,IACpC;AAEA,UAAM,aAAa,OAAO;AAC1B,UAAM,eAAe,KAAK,IAAI,IAAI;AAElC,UAAM,KAAK,QAAQ,WAAW,KAAK,IAAI;AAAA,MACnC,oBAAoB;AAAA,MACpB,sBAAsB;AAAA,MACtB,WAAW,KAAK,IAAI;AAAA,IACxB,CAAC;AAED,UAAM,KAAK,MAAM,uBAAuB,OAAO,UAAU;AAAA,EAC7D;AAAA,EAEA,MAAM,cAAc,OAAe,aAAoC;AACnE,UAAM,OAAO,MAAM,KAAK,QAAQ,4BAA4B,KAAK;AACjE,QACI,CAAC,QACD,CAAC,KAAK,sBACN,KAAK,uBAAuB,SAC5B,CAAC,KAAK,wBACN,KAAK,uBAAuB,KAAK,IAAI,GACvC;AACE,YAAM,IAAI,MAAM,gCAAgC;AAAA,IACpD;AAEA,UAAM,KAAK,QAAQ,WAAW,KAAK,IAAI;AAAA,MACnC,cAAc,MAAM,KAAK,aAAa,WAAW;AAAA,MACjD,oBAAoB;AAAA,MACpB,sBAAsB;AAAA,MACtB,WAAW,KAAK,IAAI;AAAA,IACxB,CAAC;AAAA,EACL;AAAA,EAEA,MAAM,YACF,OACmF;AACnF,QAAI;AACA,aAAO,IAAI,OAAO,OAAO,KAAK,OAAO,IAAI,WAAW,EAAE,YAAY,CAAC,OAAO,EAAE,CAAC;AAAA,IAMjF,SAAS,QAAQ;AACb,YAAM,IAAI,MAAM,eAAe;AAAA,IACnC;AAAA,EACJ;AAAA,EAEA,MAAM,QAAQ,QAAgB,eAA6C;AACvE,UAAM,OAAO,MAAM,KAAK,QAAQ,YAAY,MAAM;AAClD,QAAI,CAAC,MAAM;AACP,aAAO;AAAA,IACX;AAEA,WAAO,cAAc,KAAK,CAAC,SAAS,KAAK,MAAM,SAAS,IAAI,CAAC;AAAA,EACjE;AACJ;;;AOjKO,IAAM,iBAAN,MAAqB;AAAA,EAGxB,YAAY,aAA0B;AAClC,SAAK,cAAc;AAAA,EACvB;AAAA,EAEA,cAAc;AACV,WAAO,OAAO,KAAU,KAAU,SAAc;AAC5C,UAAI;AACA,cAAM,QAAQ,IAAI,QAAQ,eAAe,MAAM,GAAG,EAAE,CAAC;AACrD,YAAI,CAAC,OAAO;AACR,gBAAM,IAAI,MAAM,mBAAmB;AAAA,QACvC;AAEA,cAAM,UAAU,MAAM,KAAK,YAAY,YAAY,KAAK;AACxD,YAAI,OAAO;AACX,aAAK;AAAA,MACT,SAAS,QAAQ;AACb,YAAI,OAAO,GAAG,EAAE,KAAK,EAAE,OAAO,eAAe,CAAC;AAAA,MAClD;AAAA,IACJ;AAAA,EACJ;AAAA,EAEA,aAAa,OAAmB;AAC5B,WAAO,OAAO,KAAU,KAAU,SAAc;AAC5C,UAAI;AACA,cAAM,UAAU,MAAM,KAAK,YAAY,QAAQ,IAAI,KAAK,IAAI,KAAK;AACjE,YAAI,CAAC,SAAS;AACV,gBAAM,IAAI,MAAM,0BAA0B;AAAA,QAC9C;AACA,aAAK;AAAA,MACT,SAAS,QAAQ;AACb,YAAI,OAAO,GAAG,EAAE,KAAK,EAAE,OAAO,YAAY,CAAC;AAAA,MAC/C;AAAA,IACJ;AAAA,EACJ;AAAA,EAEA,uBAAuB;AACnB,WAAO,CAAC,KAAU,KAAU,SAAc;AACtC,UAAI,CAAC,IAAI,KAAK,iBAAiB;AAC3B,eAAO,IAAI,OAAO,GAAG,EAAE,KAAK,EAAE,OAAO,qBAAqB,CAAC;AAAA,MAC/D;AACA,WAAK;AAAA,IACT;AAAA,EACJ;AACJ;;;ACjDA,SAAS,SAAS;AAIX,IAAM,iBAAiB,EAAE,KAAK,CAAC,SAAS,QAAQ,OAAO,CAAC;AAGxD,IAAM,aAAa,EAAE,OAAO;AAAA,EAC/B,IAAI,EAAE,OAAO;AAAA,EACb,OAAO,EAAE,OAAO,EAAE,MAAM;AAAA,EACxB,cAAc,EAAE,OAAO;AAAA,EACvB,OAAO,EAAE,MAAM,cAAc;AAAA,EAC7B,iBAAiB,EAAE,QAAQ;AAAA,EAC3B,mBAAmB,EAAE,OAAO,EAAE,SAAS;AAAA,EACvC,oBAAoB,EAAE,OAAO,EAAE,SAAS;AAAA,EACxC,sBAAsB,EAAE,OAAO,EAAE,SAAS;AAAA,EAC1C,WAAW,EAAE,OAAO;AAAA,EACpB,WAAW,EAAE,OAAO;AACxB,CAAC;","names":[]}

package/jest.config.js

@@ -0,0 +1,10 @@
+const baseConfig = require('../../../jest.config.base');
+
+/** @type {import('jest').Config} */
+const config = {
+    ...baseConfig,
+    displayName: '@xcelsior/auth',
+    rootDir: '.',
+};
+
+module.exports = config;

package/package.json

@@ -0,0 +1,40 @@
+{
+  "name": "@xcelsior/auth",
+  "version": "0.1.1",
+  "description": "Reusable serverless authentication system with RBAC and configurable email notifications",
+  "exports": {
+    ".": {
+      "import": "./src/index.ts",
+      "require": "./dist/index.js"
+    }
+  },
+  "main": "src/index.ts",
+  "dependencies": {
+    "@aws-sdk/client-dynamodb": "^3.0.0",
+    "@aws-sdk/client-sesv2": "^3.0.0",
+    "@aws-sdk/lib-dynamodb": "^3.0.0",
+    "@aws-sdk/util-dynamodb": "^3.0.0",
+    "bcryptjs": "^2.4.3",
+    "jsonwebtoken": "^9.0.0",
+    "nodemailer": "^6.9.0",
+    "uuid": "^9.0.0",
+    "zod": "^3.22.0"
+  },
+  "devDependencies": {
+    "@types/bcryptjs": "^2.4.0",
+    "@types/jsonwebtoken": "^9.0.10",
+    "@types/node": "^20.0.0",
+    "@types/nodemailer": "^6.4.17",
+    "@types/uuid": "^9.0.0"
+  },
+  "peerDependencies": {
+    "@aws-sdk/client-dynamodb": "^3.0.0",
+    "@aws-sdk/lib-dynamodb": "^3.0.0"
+  },
+  "scripts": {
+    "build": "tsup",
+    "dev": "tsup --watch",
+    "test": "jest --passWithNoTests",
+    "lint": "biome check ."
+  }
+}

package/src/email/defaultTemplates.ts

@@ -0,0 +1,57 @@
+import type { EmailTemplates } from './types';
+
+export const defaultTemplates: EmailTemplates = {
+    verification: {
+        subject: 'Verify your email address',
+        html: (token: string) => `
+<!DOCTYPE html>
+<html>
+<head>
+  <meta charset="utf-8">
+  <title>Verify your email address</title>
+  <style>
+    body { font-family: Arial, sans-serif; line-height: 1.6; color: #333; max-width: 600px; margin: 0 auto; padding: 20px; }
+    .button { display: inline-block; padding: 12px 24px; background-color: #007bff; color: white; text-decoration: none; border-radius: 4px; margin: 20px 0; }
+    .footer { margin-top: 30px; font-size: 0.9em; color: #666; }
+  </style>
+</head>
+<body>
+  <h1>Verify your email address</h1>
+  <p>Thank you for signing up! Please click the button below to verify your email address:</p>
+  <a href="${token}" class="button">Verify Email Address</a>
+  <p>Or copy and paste this link in your browser:</p>
+  <p>${token}</p>
+  <div class="footer">
+    <p>If you didn't create an account, you can safely ignore this email.</p>
+  </div>
+</body>
+</html>`,
+    },
+    resetPassword: {
+        subject: 'Reset your password',
+        html: (token: string) => `
+<!DOCTYPE html>
+<html>
+<head>
+  <meta charset="utf-8">
+  <title>Reset your password</title>
+  <style>
+    body { font-family: Arial, sans-serif; line-height: 1.6; color: #333; max-width: 600px; margin: 0 auto; padding: 20px; }
+    .button { display: inline-block; padding: 12px 24px; background-color: #007bff; color: white; text-decoration: none; border-radius: 4px; margin: 20px 0; }
+    .footer { margin-top: 30px; font-size: 0.9em; color: #666; }
+  </style>
+</head>
+<body>
+  <h1>Reset your password</h1>
+  <p>We received a request to reset your password. Click the button below to create a new password:</p>
+  <a href="${token}" class="button">Reset Password</a>
+  <p>Or copy and paste this link in your browser:</p>
+  <p>${token}</p>
+  <div class="footer">
+    <p>If you didn't request a password reset, you can safely ignore this email.</p>
+    <p>This link will expire in 24 hours.</p>
+  </div>
+</body>
+</html>`,
+    },
+};