alepha 0.18.2 → 0.18.3

package/dist/api/users/index.js

@@ -127,6 +127,11 @@ var UserAudits = class {
 
 //#endregion
 //#region ../../src/api/users/atoms/realmAuthSettingsAtom.ts
+const fieldRequirement = (description) => t.union([
+	t.const("none"),
+	t.const("optional"),
+	t.const("required")
+], { description });
 const realmAuthSettingsAtom = $atom({
 	name: "alepha.api.users.realmAuthSettings",
 	schema: t.object({
@@ -134,17 +139,13 @@ const realmAuthSettingsAtom = $atom({
 		description: t.optional(t.string({ description: "Description shown on auth pages" })),
 		logoUrl: t.optional(t.string({ description: "Logo URL for auth pages" })),
 		registrationAllowed: t.boolean({ description: "Enable user self-registration" }),
-		emailEnabled: t.boolean({ description: "Enable email address as a login/registration credential" }),
-		emailRequired: t.boolean({ description: "Require email address for user accounts" }),
-		usernameEnabled: t.boolean({ description: "Enable username as a login/registration credential" }),
-		usernameRequired: t.boolean({ description: "Require username for user accounts" }),
+		email: fieldRequirement("Email address field requirement for user accounts"),
+		username: fieldRequirement("Username field requirement for user accounts"),
 		usernameRegExp: t.string({ description: "Regular expression that usernames must match (if username is enabled)" }),
-		phoneEnabled: t.boolean({ description: "Enable phone number as a login/registration credential" }),
-		phoneRequired: t.boolean({ description: "Require phone number for user accounts" }),
+		phoneNumber: fieldRequirement("Phone number field requirement for user accounts"),
 		verifyEmailRequired: t.boolean({ description: "Require email verification for user accounts" }),
 		verifyPhoneRequired: t.boolean({ description: "Require phone verification for user accounts" }),
-		firstNameLastNameEnabled: t.boolean({ description: "Enable first and last name for user accounts" }),
-		firstNameLastNameRequired: t.boolean({ description: "Require first and last name for user accounts" }),
+		firstNameLastName: fieldRequirement("First and last name field requirement for user accounts"),
 		resetPasswordAllowed: t.boolean({ description: "Enable forgot password functionality" }),
 		adminEmails: t.array(t.email(), { description: "List of email addresses that are automatically promoted to admin role on login" }),
 		adminUsernames: t.array(t.text(), { description: "List of usernames that are automatically promoted to admin role on login" }),
@@ -162,18 +163,14 @@ const realmAuthSettingsAtom = $atom({
 	}),
 	default: {
 		registrationAllowed: true,
-		emailEnabled: true,
-		emailRequired: true,
-		usernameEnabled: false,
-		usernameRequired: false,
+		email: "required",
+		username: "none",
 		usernameRegExp: "^[a-zA-Z0-9_]{3,30}$",
-		phoneEnabled: false,
-		phoneRequired: false,
+		phoneNumber: "none",
 		verifyEmailRequired: false,
 		verifyPhoneRequired: false,
 		resetPasswordAllowed: false,
-		firstNameLastNameEnabled: false,
-		firstNameLastNameRequired: false,
+		firstNameLastName: "none",
 		adminEmails: [],
 		adminUsernames: [],
 		passwordPolicy: {
@@ -229,13 +226,12 @@ var RealmProvider = class {
 	realms = /* @__PURE__ */ new Map();
 	register(realmName, realmOptions = {}) {
 		const features = {
-			jobs: false,
+			sessionPurge: false,
 			notifications: false,
 			apiKeys: false,
 			parameters: false,
-			files: false,
+			avatars: false,
 			audits: false,
-			organizations: false,
 			...realmOptions.features
 		};
 		this.realms.set(realmName, {
@@ -1488,7 +1484,7 @@ var RegistrationService = class {
 			this.log.warn("Registration not allowed for realm", { userRealmName });
 			throw new BadRequestError("Registration is not allowed");
 		}
-		if (realmSettings?.usernameRequired && !body.username) {
+		if (realmSettings?.username === "required" && !body.username) {
 			this.log.debug("Registration rejected: username required", { userRealmName });
 			throw new BadRequestError("Username is required");
 		}
@@ -1504,11 +1500,11 @@ var RegistrationService = class {
 				}
 			}
 		}
-		if (realmSettings?.emailRequired !== false && !body.email) {
+		if (realmSettings?.email === "required" && !body.email) {
 			this.log.debug("Registration rejected: email required", { userRealmName });
 			throw new BadRequestError("Email is required");
 		}
-		if (realmSettings?.phoneRequired && !body.phoneNumber) {
+		if (realmSettings?.phoneNumber === "required" && !body.phoneNumber) {
 			this.log.debug("Registration rejected: phone required", { userRealmName });
 			throw new BadRequestError("Phone number is required");
 		}
@@ -2042,7 +2038,7 @@ var SessionService = class {
 		try {
 			const where = users.createQueryWhere();
 			where.realm = name;
-			if (settings.usernameEnabled !== false && isUsername) {
+			if (settings.username !== "none" && isUsername) {
 				if (settings.usernameRegExp) {
 					if (!new RegExp(settings.usernameRegExp).test(username)) {
 						this.log.warn("Username does not match required format", {
@@ -2062,8 +2058,8 @@ var SessionService = class {
 					}
 				}
 				where.username = username;
-			} else if (settings.emailEnabled !== false && isEmail) where.email = username;
-			else if (settings.phoneEnabled === true && isPhone) where.phoneNumber = username;
+			} else if (settings.email !== "none" && isEmail) where.email = username;
+			else if (settings.phoneNumber !== "none" && isPhone) where.phoneNumber = username;
 			else {
 				this.log.warn("Invalid login identifier format", {
 					provider,
@@ -2356,7 +2352,7 @@ var SessionService = class {
 * This service provides file storage for user-related files such as:
 * - User avatars/profile pictures
 *
-* It is lazy-loaded when the `files` feature is enabled in the realm.
+* It is lazy-loaded when the `avatars` feature is enabled in the realm.
 */
 var UserBuckets = class {
 	/**
@@ -2383,7 +2379,7 @@ var UserBuckets = class {
 * - Verification code cleanup
 * - Inactive user notifications
 *
-* It is lazy-loaded when the `jobs` feature is enabled in the realm.
+* It is lazy-loaded when the `sessionPurge` feature is enabled in the realm.
 */
 var UserJobs = class {
 	log = $logger();
@@ -2457,18 +2453,13 @@ const $realm = (options = {}) => {
 	const realmProvider = alepha.inject(RealmProvider);
 	const name = options.issuer?.name ?? DEFAULT_USER_REALM_NAME;
 	options.settings ??= {};
-	if (options.settings.emailRequired) options.settings.emailEnabled = true;
-	if (options.settings.usernameRequired) options.settings.usernameEnabled = true;
-	if (options.settings.phoneRequired) options.settings.phoneEnabled = true;
 	const features = {
-		jobs: false,
+		sessionPurge: false,
 		notifications: false,
 		apiKeys: false,
-		clients: false,
 		parameters: false,
-		files: false,
+		avatars: false,
 		audits: false,
-		organizations: false,
 		...options.features
 	};
 	if (!features.notifications) {
@@ -2477,9 +2468,9 @@ const $realm = (options = {}) => {
 		options.settings.resetPasswordAllowed = false;
 	}
 	const realmRegistration = realmProvider.register(name, options);
-	if (features.files) alepha.with(UserBuckets);
+	if (features.avatars) alepha.with(UserBuckets);
 	if (features.audits) alepha.with(UserAudits);
-	if (features.jobs) alepha.with(UserJobs);
+	if (features.sessionPurge) alepha.with(UserJobs);
 	if (features.notifications) {
 		alepha.with(UserNotifications);
 		alepha.with(AlephaApiVerification);