alepha 0.19.4 → 0.19.5

package/dist/api/users/index.js

@@ -7,11 +7,12 @@ import { $entity, $repository, db, pageQuerySchema, parseQueryString, sql } from
 import { $logger } from "alepha/logger";
 import { $client } from "alepha/server/links";
 import { $notification } from "alepha/api/notifications";
-import { $authCredentials, $authGithub, $authGoogle, ServerAuthProvider, authenticationProviderSchema } from "alepha/server/auth";
+import { $authApple, $authCredentials, $authFacebook, $authFranceConnect, $authGithub, $authGoogle, $authMicrosoft, ServerAuthProvider, authenticationProviderSchema } from "alepha/server/auth";
 import { $etag } from "alepha/server/etag";
 import { randomInt, randomUUID } from "node:crypto";
 import { $cache, CacheProvider } from "alepha/cache";
 import { DateTimeProvider } from "alepha/datetime";
+import { CaptchaProvider } from "alepha/captcha";
 import { $job } from "alepha/api/jobs";
 import { FileSystemProvider } from "alepha/system";
 import { AlephaApiKeys, ApiKeyService } from "alepha/api/keys";
@@ -1446,10 +1447,10 @@ var CredentialService = class {
 			});
 			throw new BadRequestError("Verification code has already been used");
 		}
-		await this.intentCache.invalidate(body.intentId);
 		const hashedPassword = await this.cryptoProvider.hashPassword(body.newPassword);
 		await this.identities(intent.realmName).updateById(intent.identityId, { password: hashedPassword });
 		await this.sessions(intent.realmName).deleteMany({ userId: { eq: intent.userId } });
+		await this.intentCache.invalidate(body.intentId);
 		this.log.info("Password reset completed", {
 			userId: intent.userId,
 			email: intent.email
@@ -1544,6 +1545,7 @@ var RegistrationService = class {
 	verificationController = $client();
 	realmProvider = $inject(RealmProvider);
 	credentialService = $inject(CredentialService);
+	captchaProvider = $inject(CaptchaProvider);
 	intentCache = $cache({
 		name: "api:users:registrations",
 		ttl: [INTENT_TTL_MINUTES, "minutes"]
@@ -1689,6 +1691,7 @@ var RegistrationService = class {
 		}
 		if (intent.requirements.captcha) {
 			if (!body.captchaToken) throw new BadRequestError("Captcha verification is required");
+			if (!await this.captchaProvider.verify(body.captchaToken)) throw new BadRequestError("Captcha verification failed");
 		}
 		await this.checkUserAvailability({
 			username: intent.data.username,
@@ -1709,12 +1712,12 @@ var RegistrationService = class {
 			enabled: true,
 			emailVerified: intent.requirements.email
 		});
-		await this.intentCache.invalidate(body.intentId);
 		await identityRepository.create({
 			userId: user.id,
 			provider: "credentials",
 			password: intent.data.passwordHash
 		});
+		await this.intentCache.invalidate(body.intentId);
 		this.log.info("User registered successfully", {
 			userId: user.id,
 			email: user.email,
@@ -2754,6 +2757,10 @@ const $realm = (options = {}) => {
 		else realmRegistration.settings.registrationAllowed = false;
 		if (identities.google) auth.google = $authGoogle(realm);
 		if (identities.github) auth.github = $authGithub(realm);
+		if (identities.apple) auth.apple = $authApple(realm);
+		if (identities.facebook) auth.facebook = $authFacebook(realm);
+		if (identities.microsoft) auth.microsoft = $authMicrosoft(realm);
+		if (identities.franceconnect) auth.franceconnect = $authFranceConnect(realm);
 		alepha.with(() => auth);
 	}
 	if (features.parameters) {