@yimingliao/cms 0.0.25 → 0.0.27

package/dist/server/index.d.ts

@@ -27,7 +27,7 @@ declare function createJwtService({ defaultSecret, ...options }: CreateJwtServic
 
 declare function createArgon2Service(): {
     hash: (password: string) => Promise<string>;
-    verify: (hash: string, plain: string) => Promise<boolean>;
+    verify: (digest: string, password: string) => Promise<boolean>;
 };
 
 interface CreateCryptoServiceOptions {
@@ -622,6 +622,66 @@ interface CreateExecuteApiOptions {
 }
 declare function createExecuteApi({ initI18n, logger, }: CreateExecuteApiOptions): (fn: Api) => Promise<NextResponse<unknown>>;
 
+interface CreateAuthUseCases {
+    prisma: any;
+    adminQueryRepository: ReturnType<typeof createAdminQueryRepository>;
+    adminRefreshTokenCommandRepository: ReturnType<typeof createAdminRefreshTokenCommandRepository>;
+    jwtService: ReturnType<typeof createJwtService>;
+    argon2Service: ReturnType<typeof createArgon2Service>;
+    cryptoService: ReturnType<typeof createCryptoService>;
+    cookieService: ReturnType<typeof createCookieService>;
+    config: {
+        refreshTokenName: string;
+        refreshTokenTtl: number;
+        accessTokenName: string;
+        accessTokenSecret: string;
+        accessTokenTtl: number;
+        resetPasswordSecret: string;
+        resetPasswordTtl: number;
+        verifyEmailSecret: string;
+        verifyEmailTtl: number;
+    };
+}
+declare function createAuthUseCases({ prisma, adminQueryRepository, adminRefreshTokenCommandRepository, jwtService, argon2Service, cryptoService, cookieService, config, }: CreateAuthUseCases): {
+    verifyCredentials: ({ email, password, }: {
+        email: string;
+        password: string;
+    }) => Promise<Admin>;
+    updatePassword: ({ email, password, }: {
+        email: string;
+        password: string;
+    }) => Promise<Admin>;
+    createRefreshToken: ({ admin, deviceInfo, ip, }: {
+        admin: {
+            id: string;
+            email: string;
+        };
+        deviceInfo: DeviceInfo;
+        ip: string;
+    }) => Promise<string>;
+    refreshTokens: ({ admin, deviceInfo, ip, }: {
+        admin: {
+            id: string;
+            email: string;
+        };
+        deviceInfo: DeviceInfo;
+        ip: string;
+    }) => Promise<void>;
+    signPasswordResetToken: ({ admin }: {
+        admin: AdminSafe;
+    }) => string;
+    verifyPasswordResetToken: ({ token }: {
+        token: string;
+    }) => {
+        email: string;
+    };
+    signEmailVerificationToken: () => string;
+    verifyEmailAndUpdate: ({ token, admin, }: {
+        token: string;
+        admin: AdminSafe;
+    }) => Promise<AdminSafe>;
+};
+
 declare class ServerError extends Error {
     readonly i18nKey?: string;
     readonly statusCode?: number;
@@ -640,4 +700,4 @@ declare class ServerError extends Error {
     static internalServerError(): ServerError;
 }
 
-export { ADMIN_ORDER_BY, ORDER_BY, POST_ORDER_BY, type RawCacheKey, ServerError, createAdminCommandRepository, createAdminQueryRepository, createAdminRefreshTokenCommandRepository, createAdminRefreshTokenQueryRepository, createArgon2Service, createCache, createCacheResult, createCookieService, createCryptoService, createExecuteAction, createExecuteApi, createFileCommandRepository, createFileQueryRepository, createFolderCommandRepository, createFolderQueryRepository, createIpRateLimiter, createJwtService, createPostCommandRepository, createPostQueryRepository, createSeoMetadataCommandRepository, normalizeCacheKey };
+export { ADMIN_ORDER_BY, ORDER_BY, POST_ORDER_BY, type RawCacheKey, ServerError, createAdminCommandRepository, createAdminQueryRepository, createAdminRefreshTokenCommandRepository, createAdminRefreshTokenQueryRepository, createArgon2Service, createAuthUseCases, createCache, createCacheResult, createCookieService, createCryptoService, createExecuteAction, createExecuteApi, createFileCommandRepository, createFileQueryRepository, createFolderCommandRepository, createFolderQueryRepository, createIpRateLimiter, createJwtService, createPostCommandRepository, createPostQueryRepository, createSeoMetadataCommandRepository, normalizeCacheKey };

package/dist/server/index.js

@@ -54,8 +54,8 @@ function createArgon2Service() {
   async function hash(password) {
     return await argon2.hash(password, DEFAULT_OPTIONS);
   }
-  async function verify(hash2, plain) {
-    return await argon2.verify(hash2, plain);
+  async function verify(digest, password) {
+    return await argon2.verify(digest, password);
   }
   return {
     hash,
@@ -1497,7 +1497,7 @@ function createExecuteAction({
 }) {
   return async function executeAction(fn, options = {}) {
     const translator = await initI18n();
-    const withCache = options.key && options.type === "query";
+    const withCache = options.type === "query" && options.key;
     try {
       const { data, i18nKey, message, meta } = withCache ? await cacheResult({
         key: options.key,
@@ -1508,7 +1508,7 @@ function createExecuteAction({
       const finalMessage = i18nKey ? translator.t(i18nKey) : message;
       return result.success({
         ...finalMessage ? { message: finalMessage } : {},
-        ...data ? { data: data ?? {} } : {},
+        ...data !== void 0 ? { data } : {},
         ...meta ? { meta } : {}
       });
     } catch (error) {
@@ -1546,4 +1546,128 @@ function createExecuteApi({
   };
 }
 
-export { ADMIN_ORDER_BY, ORDER_BY, POST_ORDER_BY, ServerError, createAdminCommandRepository, createAdminQueryRepository, createAdminRefreshTokenCommandRepository, createAdminRefreshTokenQueryRepository, createArgon2Service, createCache, createCacheResult, createCookieService, createCryptoService, createExecuteAction, createExecuteApi, createFileCommandRepository, createFileQueryRepository, createFolderCommandRepository, createFolderQueryRepository, createIpRateLimiter, createJwtService, createPostCommandRepository, createPostQueryRepository, createSeoMetadataCommandRepository, normalizeCacheKey };
+// src/server/applications/auth/create-auth-use-cases.ts
+function createAuthUseCases({
+  prisma,
+  adminQueryRepository,
+  adminRefreshTokenCommandRepository,
+  jwtService,
+  argon2Service,
+  cryptoService,
+  cookieService,
+  config
+}) {
+  async function verifyCredentials({
+    email,
+    password
+  }) {
+    const found = await adminQueryRepository.findWithPasswordHash({ email });
+    if (found) {
+      const isValid = await argon2Service.verify(found.passwordHash, password);
+      if (isValid) return found;
+    }
+    throw new ServerError({ i18nKey: "error.credentials-incorrect" });
+  }
+  async function updatePassword({
+    email,
+    password
+  }) {
+    const updatedAdmin = await prisma.admin.update({
+      where: { email },
+      data: { passwordHash: await argon2Service.hash(password) }
+    });
+    return updatedAdmin;
+  }
+  async function createRefreshToken({
+    admin,
+    deviceInfo,
+    ip
+  }) {
+    const token = cryptoService.generateToken();
+    const tokenHash = cryptoService.hash(token);
+    await adminRefreshTokenCommandRepository.create({
+      tokenHash,
+      ip,
+      deviceInfo,
+      expiresAt: new Date(Date.now() + config.refreshTokenTtl * 1e3),
+      adminId: admin.id,
+      email: admin.email
+    });
+    return token;
+  }
+  async function refreshTokens({
+    admin,
+    deviceInfo,
+    ip
+  }) {
+    const token = await createRefreshToken({ admin, deviceInfo, ip });
+    await cookieService.setSignedCookie({
+      name: config.refreshTokenName,
+      value: token,
+      expireSeconds: config.refreshTokenTtl
+    });
+    const accessToken = jwtService.sign({
+      payload: { id: admin.id },
+      secret: cryptoService.hash(config.accessTokenSecret),
+      expiresIn: config.accessTokenTtl
+    });
+    await cookieService.setSignedCookie({
+      name: config.accessTokenName,
+      value: accessToken,
+      expireSeconds: config.accessTokenTtl
+    });
+  }
+  function signPasswordResetToken({ admin }) {
+    const payload = { email: admin.email };
+    const passwordResetToken = jwtService.sign({
+      payload,
+      secret: config.resetPasswordSecret,
+      expiresIn: config.resetPasswordTtl
+    });
+    return passwordResetToken;
+  }
+  function verifyPasswordResetToken({ token }) {
+    const payload = jwtService.verify({
+      token,
+      secret: config.resetPasswordSecret
+    });
+    return payload;
+  }
+  function signEmailVerificationToken() {
+    const emailVerificationToken = jwtService.sign({
+      payload: {},
+      secret: config.verifyEmailSecret,
+      expiresIn: config.verifyEmailTtl
+    });
+    return emailVerificationToken;
+  }
+  async function verifyEmailAndUpdate({
+    token,
+    admin
+  }) {
+    let updatedAdmin = admin;
+    jwtService.verify({
+      token,
+      secret: config.verifyEmailSecret
+    });
+    updatedAdmin = await prisma.admin.update({
+      where: { email: admin.email },
+      data: { emailVerifiedAt: /* @__PURE__ */ new Date() }
+    });
+    return updatedAdmin;
+  }
+  return {
+    verifyCredentials,
+    updatePassword,
+    createRefreshToken,
+    refreshTokens,
+    // reset password
+    signPasswordResetToken,
+    verifyPasswordResetToken,
+    // verify email
+    signEmailVerificationToken,
+    verifyEmailAndUpdate
+  };
+}
+
+export { ADMIN_ORDER_BY, ORDER_BY, POST_ORDER_BY, ServerError, createAdminCommandRepository, createAdminQueryRepository, createAdminRefreshTokenCommandRepository, createAdminRefreshTokenQueryRepository, createArgon2Service, createAuthUseCases, createCache, createCacheResult, createCookieService, createCryptoService, createExecuteAction, createExecuteApi, createFileCommandRepository, createFileQueryRepository, createFolderCommandRepository, createFolderQueryRepository, createIpRateLimiter, createJwtService, createPostCommandRepository, createPostQueryRepository, createSeoMetadataCommandRepository, normalizeCacheKey };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yimingliao/cms",
-  "version": "0.0.25",
+  "version": "0.0.27",
   "author": "Yiming Liao",
   "license": "MIT",
   "type": "module",