authhero 0.2.0 → 0.2.2

package/src/utils/users.ts

@@ -0,0 +1,130 @@
+import { User, UserDataAdapter } from "@authhero/adapter-interfaces";
+
+export async function getUsersByEmail(
+  userAdapter: UserDataAdapter,
+  tenantId: string,
+  email: string,
+): Promise<User[]> {
+  const response = await userAdapter.list(tenantId, {
+    page: 0,
+    per_page: 10,
+    include_totals: false,
+    q: `email:${email}`,
+  });
+
+  return response.users;
+}
+
+interface GetUserByEmailAndProviderParams {
+  userAdapter: UserDataAdapter;
+  tenant_id: string;
+  email: string;
+  provider: string;
+}
+
+export async function getUserByEmailAndProvider({
+  userAdapter,
+  tenant_id,
+  email,
+  provider,
+}: GetUserByEmailAndProviderParams): Promise<User | null> {
+  const { users } = await userAdapter.list(tenant_id, {
+    page: 0,
+    per_page: 10,
+    include_totals: false,
+    q: `email:${email} provider:${provider}`,
+  });
+
+  if (users.length > 1) {
+    console.error("More than one user found for same email and provider");
+  }
+
+  return users[0] || null;
+}
+
+interface GetPrimaryUserByEmailParams {
+  userAdapter: UserDataAdapter;
+  tenant_id: string;
+  email: string;
+}
+
+export async function getPrimaryUserByEmail({
+  userAdapter,
+  tenant_id,
+  email,
+}: GetPrimaryUserByEmailParams): Promise<User | undefined> {
+  const { users: usersWithUnverifiedPasswordAccounts } = await userAdapter.list(
+    tenant_id,
+    {
+      page: 0,
+      per_page: 10,
+      include_totals: false,
+      q: `email:${email}`,
+    },
+  );
+
+  // filter out unverified accounts
+  const users = usersWithUnverifiedPasswordAccounts.filter(
+    // maybe we should do this for all providers
+    (user) => !(user.provider === "auth2" && !user.email_verified),
+  );
+
+  if (users.length === 0) {
+    return;
+  }
+
+  const primaryUsers = users.filter((user) => !user.linked_to);
+
+  if (primaryUsers.length > 0) {
+    if (primaryUsers.length > 1) {
+      console.error("More than one primary user found for same email");
+    }
+
+    return primaryUsers[0];
+  }
+
+  // so now we have only linked users for this email address
+
+  // I am going to assume that all the linked users with the same email address
+  // are linked to the same primary account
+
+  const primaryAccount = await userAdapter.get(tenant_id, users[0]?.linked_to!);
+
+  if (!primaryAccount) {
+    // this is a real error where we should interrupt the flow
+    throw new Error("Primary account not found");
+  }
+
+  return primaryAccount;
+}
+
+interface GetPrimaryUserByEmailAndProviderParams {
+  userAdapter: UserDataAdapter;
+  tenant_id: string;
+  email: string;
+  provider: string;
+}
+
+export async function getPrimaryUserByEmailAndProvider({
+  userAdapter,
+  tenant_id,
+  email,
+  provider,
+}: GetPrimaryUserByEmailAndProviderParams): Promise<User | null> {
+  const user = await getUserByEmailAndProvider({
+    userAdapter,
+    tenant_id,
+    email,
+    provider,
+  });
+
+  if (!user) {
+    return null;
+  }
+
+  if (!user.linked_to) {
+    return user;
+  }
+
+  return userAdapter.get(tenant_id, user.linked_to);
+}

package/vite.config.ts

@@ -24,7 +24,7 @@ const formats = Object.keys(fileName) as Array<keyof typeof fileName>;
 module.exports = defineConfig({
   base: "./",
   build: {
-    outDir: "./build/dist",
+    outDir: "./dist",
     lib: {
       entry: path.resolve(__dirname, "src/index.ts"),
       name: getPackageNameCamelCase(),

package/src/bun.ts

@@ -1,16 +0,0 @@
-import { OpenAPIHono } from "@hono/zod-openapi";
-import { Bindings } from "./types/Bindings";
-import { Context } from "hono";
-import { init } from "./";
-
-const app = new OpenAPIHono<{ Bindings: Bindings }>();
-
-const authhero = init();
-
-app.get("/test", (ctx: Context) => {
-  return ctx.text("Hello, world!");
-});
-
-app.route("/", authhero);
-
-export default app;

package/src/types/JWKS.ts

@@ -1,37 +0,0 @@
-import { z } from "@hono/zod-openapi";
-
-export const jwksSchema = z.object({
-  alg: z.string(),
-  e: z.string(),
-  kid: z.string(),
-  kty: z.string(),
-  n: z.string(),
-  use: z.string().optional(),
-});
-
-export const jwksKeySchema = z.object({
-  keys: z.array(jwksSchema),
-});
-
-export const openIDConfigurationSchema = z.object({
-  issuer: z.string(),
-  authorization_endpoint: z.string(),
-  token_endpoint: z.string(),
-  device_authorization_endpoint: z.string(),
-  userinfo_endpoint: z.string(),
-  mfa_challenge_endpoint: z.string(),
-  jwks_uri: z.string(),
-  registration_endpoint: z.string(),
-  revocation_endpoint: z.string(),
-  scopes_supported: z.array(z.string()),
-  response_types_supported: z.array(z.string()),
-  code_challenge_methods_supported: z.array(z.string()),
-  response_modes_supported: z.array(z.string()),
-  subject_types_supported: z.array(z.string()),
-  id_token_signing_alg_values_supported: z.array(z.string()),
-  token_endpoint_auth_methods_supported: z.array(z.string()),
-  claims_supported: z.array(z.string()),
-  request_uri_parameter_supported: z.boolean(),
-  request_parameter_supported: z.boolean(),
-  token_endpoint_auth_signing_alg_values_supported: z.array(z.string()),
-});