better-auth 0.0.2-beta.7 → 0.0.2

package/dist/client/plugins.js

@@ -0,0 +1,411 @@
+// src/client/create-client-plugin.ts
+var createClientPlugin = () => {
+  return ($fn) => {
+    return ($fetch) => {
+      const data = $fn($fetch);
+      return {
+        ...data,
+        integrations: data.integrations,
+        plugin: {}
+      };
+    };
+  };
+};
+
+// src/plugins/two-factor/client.ts
+var twoFactorClient = (options = {
+  redirect: true,
+  twoFactorPage: "/"
+}) => {
+  return createClientPlugin()(($fetch) => {
+    return {
+      id: "two-factor",
+      authProxySignal: [
+        {
+          matcher: (path) => path === "/two-factor/enable" || path === "/two-factor/send-otp",
+          atom: "$sessionSignal"
+        }
+      ],
+      pathMethods: {
+        "enable/totp": "POST",
+        "/two-factor/disable": "POST",
+        "/two-factor/enable": "POST",
+        "/two-factor/send-otp": "POST"
+      },
+      fetchPlugins: [
+        {
+          id: "two-factor",
+          name: "two-factor",
+          hooks: {
+            async onSuccess(context) {
+              if (context.data?.twoFactorRedirect) {
+                if (options.redirect) {
+                  window.location.href = options.twoFactorPage;
+                }
+              }
+            }
+          }
+        }
+      ]
+    };
+  });
+};
+
+// src/plugins/organization/client.ts
+import { atom, computed, task } from "nanostores";
+
+// src/plugins/organization/access/src/access.ts
+var ParsingError = class extends Error {
+  path;
+  constructor(message, path) {
+    super(message);
+    this.path = path;
+  }
+};
+var AccessControl = class {
+  constructor(s) {
+    this.s = s;
+    this.statements = s;
+  }
+  statements;
+  newRole(statements) {
+    return new Role(statements);
+  }
+};
+var Role = class _Role {
+  statements;
+  constructor(statements) {
+    this.statements = statements;
+  }
+  authorize(request, connector) {
+    for (const [requestedResource, requestedActions] of Object.entries(
+      request
+    )) {
+      const allowedActions = this.statements[requestedResource];
+      if (!allowedActions) {
+        return {
+          success: false,
+          error: `You are not allowed to access resource: ${requestedResource}`
+        };
+      }
+      const success = connector === "OR" ? requestedActions.some(
+        (requestedAction) => allowedActions.includes(requestedAction)
+      ) : requestedActions.every(
+        (requestedAction) => allowedActions.includes(requestedAction)
+      );
+      if (success) {
+        return { success };
+      }
+      return {
+        success: false,
+        error: `unauthorized to access resource "${requestedResource}"`
+      };
+    }
+    return {
+      success: false,
+      error: "Not authorized"
+    };
+  }
+  static fromString(s) {
+    const statements = JSON.parse(s);
+    if (typeof statements !== "object") {
+      throw new ParsingError("statements is not an object", ".");
+    }
+    for (const [resource, actions] of Object.entries(statements)) {
+      if (typeof resource !== "string") {
+        throw new ParsingError("invalid resource identifier", resource);
+      }
+      if (!Array.isArray(actions)) {
+        throw new ParsingError("actions is not an array", resource);
+      }
+      for (let i = 0; i < actions.length; i++) {
+        if (typeof actions[i] !== "string") {
+          throw new ParsingError("action is not a string", `${resource}[${i}]`);
+        }
+      }
+    }
+    return new _Role(statements);
+  }
+  toString() {
+    return JSON.stringify(this.statements);
+  }
+};
+
+// src/plugins/organization/access/statement.ts
+var createAccessControl = (statements) => {
+  return new AccessControl(statements);
+};
+var defaultStatements = {
+  organization: ["update", "delete"],
+  member: ["create", "update", "delete"],
+  invitation: ["create", "cancel"]
+};
+var defaultAc = createAccessControl(defaultStatements);
+var adminAc = defaultAc.newRole({
+  organization: ["update"],
+  invitation: ["create", "cancel"],
+  member: ["create", "update", "delete"]
+});
+var ownerAc = defaultAc.newRole({
+  organization: ["update", "delete"],
+  member: ["create", "update", "delete"],
+  invitation: ["create", "cancel"]
+});
+var memberAc = defaultAc.newRole({
+  organization: [],
+  member: [],
+  invitation: []
+});
+
+// src/plugins/organization/client.ts
+var organizationClient = (options) => createClientPlugin()(($fetch) => {
+  const activeOrgId = atom(null);
+  const $listOrg = atom(false);
+  const $activeOrgSignal = atom(false);
+  const $activeOrganization = computed(
+    [activeOrgId, $activeOrgSignal],
+    () => task(async () => {
+      if (!activeOrgId.get()) {
+        return null;
+      }
+      const organization = await $fetch("/organization/set-active", {
+        method: "POST",
+        credentials: "include",
+        body: {
+          orgId: activeOrgId.get()
+        }
+      });
+      return organization.data;
+    })
+  );
+  const $listOrganizations = computed(
+    $listOrg,
+    () => task(async () => {
+      const organizations = await $fetch(
+        "/organization/list",
+        {
+          method: "GET"
+        }
+      );
+      return organizations.data;
+    })
+  );
+  const $activeInvitationId = atom(null);
+  const $invitation = computed(
+    $activeInvitationId,
+    () => task(async () => {
+      if (!$activeInvitationId.get()) {
+        return {
+          error: {
+            message: "No invitation found",
+            status: 400,
+            data: null
+          },
+          data: null
+        };
+      }
+      const res = await $fetch("/organization/get-active-invitation", {
+        method: "GET",
+        query: {
+          id: $activeInvitationId.get()
+        },
+        credentials: "include"
+      });
+      return res;
+    })
+  );
+  return {
+    id: "organization",
+    actions: {
+      organization: {
+        setActive(orgId) {
+          activeOrgId.set(orgId);
+        },
+        setInvitationId: (id) => {
+          $activeInvitationId.set(id);
+        },
+        hasPermission: async (permission) => {
+          await $fetch("/organization/has-permission", {
+            method: "POST",
+            body: {
+              permission
+            }
+          });
+        }
+      }
+    },
+    integrations: {
+      react(useStore) {
+        return {
+          organization: {
+            useActiveOrganization() {
+              return useStore($activeOrganization);
+            },
+            useListOrganization() {
+              return useStore($listOrganizations);
+            },
+            useInvitation() {
+              return useStore($invitation);
+            }
+          }
+        };
+      },
+      vue(useStore) {
+        return {
+          useActiveOrganization() {
+            return useStore($activeOrganization);
+          },
+          useListOrganization() {
+            return useStore($listOrganizations);
+          },
+          useInvitation() {
+            return useStore($invitation);
+          }
+        };
+      },
+      preact(useStore) {
+        return {
+          useActiveOrganization() {
+            return useStore($activeOrganization);
+          },
+          useListOrganization() {
+            return useStore($listOrganizations);
+          },
+          useInvitation() {
+            return useStore($invitation);
+          }
+        };
+      },
+      svelte() {
+        return {
+          $activeOrganization,
+          $listOrganizations,
+          $invitation
+        };
+      }
+    },
+    signals: {
+      $listOrg,
+      $activeOrgSignal
+    },
+    authProxySignal: [
+      {
+        matcher(path) {
+          return path.startsWith("/organization");
+        },
+        atom: "$listOrg"
+      },
+      {
+        matcher(path) {
+          return path.startsWith("/organization");
+        },
+        atom: "$activeOrgSignal"
+      }
+    ]
+  };
+});
+
+// src/plugins/passkey/client.ts
+import {
+  WebAuthnError,
+  startAuthentication,
+  startRegistration
+} from "@simplewebauthn/browser";
+var getPasskeyActions = ($fetch) => {
+  const signInPasskey = async (opts) => {
+    const response = await $fetch(
+      "/passkey/generate-authenticate-options",
+      {
+        method: "POST",
+        body: {
+          email: opts?.email
+        }
+      }
+    );
+    if (!response.data) {
+      return response;
+    }
+    try {
+      const res = await startAuthentication(
+        response.data,
+        opts?.autoFill || false
+      );
+      const verified = await $fetch("/passkey/verify-authentication", {
+        body: {
+          response: res,
+          type: "authenticate"
+        }
+      });
+      if (!verified.data) {
+        return verified;
+      }
+    } catch (e) {
+      console.log(e);
+    }
+  };
+  const registerPasskey = async () => {
+    const options = await $fetch(
+      "/passkey/generate-register-options",
+      {
+        method: "GET"
+      }
+    );
+    if (!options.data) {
+      return options;
+    }
+    try {
+      const res = await startRegistration(options.data);
+      const verified = await $fetch("/passkey/verify-registration", {
+        body: {
+          response: res,
+          type: "register"
+        }
+      });
+      if (!verified.data) {
+        return verified;
+      }
+    } catch (e) {
+      if (e instanceof WebAuthnError) {
+        if (e.code === "ERROR_AUTHENTICATOR_PREVIOUSLY_REGISTERED") {
+          return {
+            data: null,
+            error: {
+              message: "previously registered",
+              status: 400,
+              statusText: "BAD_REQUEST"
+            }
+          };
+        }
+      }
+    }
+  };
+  return {
+    signInPasskey,
+    registerPasskey
+  };
+};
+var passkeyClient = createClientPlugin()(
+  ($fetch) => {
+    return {
+      id: "passkey",
+      actions: getPasskeyActions($fetch)
+    };
+  }
+);
+
+// src/plugins/username/client.ts
+var usernameClient = createClientPlugin()(
+  ($fetch) => {
+    return {
+      id: "username"
+    };
+  }
+);
+export {
+  getPasskeyActions,
+  organizationClient,
+  passkeyClient,
+  twoFactorClient,
+  usernameClient
+};
+//# sourceMappingURL=plugins.js.map

package/dist/client/plugins.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/client/create-client-plugin.ts","../../src/plugins/two-factor/client.ts","../../src/plugins/organization/client.ts","../../src/plugins/organization/access/src/access.ts","../../src/plugins/organization/access/statement.ts","../../src/plugins/passkey/client.ts","../../src/plugins/username/client.ts"],"sourcesContent":["import type { BetterFetch, BetterFetchPlugin } from \"@better-fetch/fetch\";\nimport type { Endpoint } from \"better-call\";\nimport type { AuthProxySignal } from \"./proxy\";\nimport type { Atom, PreinitializedWritableAtom } from \"nanostores\";\nimport type { BetterAuthPlugin } from \"../types/plugins\";\nimport type { AuthPlugin } from \"./type\";\nimport type { useAuthStore as reactStore } from \"./react\";\nimport type { useAuthStore as vueStore } from \"./vue\";\nimport type { useAuthStore as preactStore } from \"./preact\";\n\nexport const createClientPlugin = <E extends BetterAuthPlugin = never>() => {\n\treturn <\n\t\tActions extends Record<string, any>,\n\t\tIntegrations extends {\n\t\t\treact?: (useStore: typeof reactStore) => Record<string, any>;\n\t\t\tvue?: (useStore: typeof vueStore) => Record<string, any>;\n\t\t\tpreact?: (useStore: typeof preactStore) => Record<string, any>;\n\t\t\tsvelte?: () => Record<string, any>;\n\t\t},\n\t>(\n\t\t$fn: ($fetch: BetterFetch) => {\n\t\t\tid: string;\n\t\t\tactions?: Actions;\n\t\t\tauthProxySignal?: AuthProxySignal[];\n\t\t\tsignals?: Record<string, PreinitializedWritableAtom<boolean>>;\n\t\t\tatoms?: Record<string, Atom<any>>;\n\t\t\tintegrations?: Integrations;\n\t\t\tpathMethods?: Record<string, \"POST\" | \"GET\">;\n\t\t\tfetchPlugins?: BetterFetchPlugin[];\n\t\t},\n\t) => {\n\t\treturn ($fetch: BetterFetch) => {\n\t\t\tconst data = $fn($fetch);\n\t\t\treturn {\n\t\t\t\t...data,\n\t\t\t\tintegrations: data.integrations as Integrations,\n\t\t\t\tplugin: {} as E,\n\t\t\t};\n\t\t};\n\t};\n};\n\nexport interface AuthClientPlugin {\n\tid: string;\n\tendpoint: Record<string, Endpoint>;\n}\n","import { createClientPlugin } from \"../../client/create-client-plugin\";\nimport type { twoFactor as twoFa } from \"../../plugins/two-factor\";\n\nexport const twoFactorClient = (\n\toptions: {\n\t\ttwoFactorPage: string;\n\t\t/**\n\t\t * Redirect to the two factor page. If twoFactorPage\n\t\t * is not set this will redirect to the root path.\n\t\t * @default true\n\t\t */\n\t\tredirect?: boolean;\n\t} = {\n\t\tredirect: true,\n\t\ttwoFactorPage: \"/\",\n\t},\n) => {\n\treturn createClientPlugin<ReturnType<typeof twoFa>>()(($fetch) => {\n\t\treturn {\n\t\t\tid: \"two-factor\",\n\t\t\tauthProxySignal: [\n\t\t\t\t{\n\t\t\t\t\tmatcher: (path) =>\n\t\t\t\t\t\tpath === \"/two-factor/enable\" || path === \"/two-factor/send-otp\",\n\t\t\t\t\tatom: \"$sessionSignal\",\n\t\t\t\t},\n\t\t\t],\n\t\t\tpathMethods: {\n\t\t\t\t\"enable/totp\": \"POST\",\n\t\t\t\t\"/two-factor/disable\": \"POST\",\n\t\t\t\t\"/two-factor/enable\": \"POST\",\n\t\t\t\t\"/two-factor/send-otp\": \"POST\",\n\t\t\t},\n\t\t\tfetchPlugins: [\n\t\t\t\t{\n\t\t\t\t\tid: \"two-factor\",\n\t\t\t\t\tname: \"two-factor\",\n\t\t\t\t\thooks: {\n\t\t\t\t\t\tasync onSuccess(context) {\n\t\t\t\t\t\t\tif (context.data?.twoFactorRedirect) {\n\t\t\t\t\t\t\t\tif (options.redirect) {\n\t\t\t\t\t\t\t\t\twindow.location.href = options.twoFactorPage;\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t},\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t],\n\t\t};\n\t});\n};\n","import { atom, computed, task } from \"nanostores\";\nimport type {\n\tInvitation,\n\tMember,\n\tOrganization,\n} from \"../../plugins/organization/schema\";\nimport type { Prettify } from \"../../types/helper\";\nimport type { organization as org } from \"../../plugins\";\nimport { createClientPlugin } from \"../../client/create-client-plugin\";\nimport {\n\tcreateAccessControl,\n\tdefaultStatements,\n\ttype AccessControl,\n\ttype Role,\n} from \"./access\";\n\ninterface OrganizationClientOptions {\n\tac: AccessControl;\n\troles?: {\n\t\t[key in \"admin\" | \"member\" | \"owner\"]?: Role<any>;\n\t};\n}\n\nexport const organizationClient = <O extends OrganizationClientOptions>(\n\toptions?: O,\n) =>\n\tcreateClientPlugin<ReturnType<typeof org>>()(($fetch) => {\n\t\tconst activeOrgId = atom<string | null>(null);\n\t\tconst $listOrg = atom<boolean>(false);\n\t\tconst $activeOrgSignal = atom<boolean>(false);\n\t\tconst $activeOrganization = computed([activeOrgId, $activeOrgSignal], () =>\n\t\t\ttask(async () => {\n\t\t\t\tif (!activeOrgId.get()) {\n\t\t\t\t\treturn null;\n\t\t\t\t}\n\t\t\t\tconst organization = await $fetch<\n\t\t\t\t\tPrettify<\n\t\t\t\t\t\tOrganization & {\n\t\t\t\t\t\t\tmembers: Member[];\n\t\t\t\t\t\t\tinvitations: Invitation[];\n\t\t\t\t\t\t}\n\t\t\t\t\t>\n\t\t\t\t>(\"/organization/set-active\", {\n\t\t\t\t\tmethod: \"POST\",\n\t\t\t\t\tcredentials: \"include\",\n\t\t\t\t\tbody: {\n\t\t\t\t\t\torgId: activeOrgId.get(),\n\t\t\t\t\t},\n\t\t\t\t});\n\t\t\t\treturn organization.data;\n\t\t\t}),\n\t\t);\n\n\t\tconst $listOrganizations = computed($listOrg, () =>\n\t\t\ttask(async () => {\n\t\t\t\tconst organizations = await $fetch<Organization[]>(\n\t\t\t\t\t\"/organization/list\",\n\t\t\t\t\t{\n\t\t\t\t\t\tmethod: \"GET\",\n\t\t\t\t\t},\n\t\t\t\t);\n\t\t\t\treturn organizations.data;\n\t\t\t}),\n\t\t);\n\n\t\tconst $activeInvitationId = atom<string | null>(null);\n\t\tconst $invitation = computed($activeInvitationId, () =>\n\t\t\ttask(async () => {\n\t\t\t\tif (!$activeInvitationId.get()) {\n\t\t\t\t\treturn {\n\t\t\t\t\t\terror: {\n\t\t\t\t\t\t\tmessage: \"No invitation found\",\n\t\t\t\t\t\t\tstatus: 400,\n\t\t\t\t\t\t\tdata: null,\n\t\t\t\t\t\t},\n\t\t\t\t\t\tdata: null,\n\t\t\t\t\t};\n\t\t\t\t}\n\t\t\t\tconst res = await $fetch<\n\t\t\t\t\tPrettify<\n\t\t\t\t\t\tInvitation & {\n\t\t\t\t\t\t\torganizationName: string;\n\t\t\t\t\t\t\torganizationSlug: string;\n\t\t\t\t\t\t\tinviterEmail: string;\n\t\t\t\t\t\t\tinviterName: string;\n\t\t\t\t\t\t}\n\t\t\t\t\t>\n\t\t\t\t>(\"/organization/get-active-invitation\", {\n\t\t\t\t\tmethod: \"GET\",\n\t\t\t\t\tquery: {\n\t\t\t\t\t\tid: $activeInvitationId.get(),\n\t\t\t\t\t},\n\t\t\t\t\tcredentials: \"include\",\n\t\t\t\t});\n\t\t\t\treturn res;\n\t\t\t}),\n\t\t);\n\t\ttype DefaultStatements = typeof defaultStatements;\n\t\ttype Statements = O[\"ac\"] extends AccessControl<infer S>\n\t\t\t? S extends Record<string, Array<any>>\n\t\t\t\t? S & DefaultStatements\n\t\t\t\t: DefaultStatements\n\t\t\t: DefaultStatements;\n\t\treturn {\n\t\t\tid: \"organization\",\n\t\t\tactions: {\n\t\t\t\torganization: {\n\t\t\t\t\tsetActive(orgId: string | null) {\n\t\t\t\t\t\tactiveOrgId.set(orgId);\n\t\t\t\t\t},\n\t\t\t\t\tsetInvitationId: (id: string | null) => {\n\t\t\t\t\t\t$activeInvitationId.set(id);\n\t\t\t\t\t},\n\t\t\t\t\thasPermission: async (\n\t\t\t\t\t\tpermission: Partial<{\n\t\t\t\t\t\t\t//@ts-expect-error fix this later\n\t\t\t\t\t\t\t[key in keyof Statements]: Statements[key][number][];\n\t\t\t\t\t\t}>,\n\t\t\t\t\t) => {\n\t\t\t\t\t\tawait $fetch<boolean>(\"/organization/has-permission\", {\n\t\t\t\t\t\t\tmethod: \"POST\",\n\t\t\t\t\t\t\tbody: {\n\t\t\t\t\t\t\t\tpermission,\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t});\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t\tintegrations: {\n\t\t\t\treact(useStore) {\n\t\t\t\t\treturn {\n\t\t\t\t\t\torganization: {\n\t\t\t\t\t\t\tuseActiveOrganization() {\n\t\t\t\t\t\t\t\treturn useStore($activeOrganization);\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\tuseListOrganization() {\n\t\t\t\t\t\t\t\treturn useStore($listOrganizations);\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\tuseInvitation() {\n\t\t\t\t\t\t\t\treturn useStore($invitation);\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t},\n\t\t\t\t\t};\n\t\t\t\t},\n\t\t\t\tvue(useStore) {\n\t\t\t\t\treturn {\n\t\t\t\t\t\tuseActiveOrganization() {\n\t\t\t\t\t\t\treturn useStore($activeOrganization);\n\t\t\t\t\t\t},\n\t\t\t\t\t\tuseListOrganization() {\n\t\t\t\t\t\t\treturn useStore($listOrganizations);\n\t\t\t\t\t\t},\n\t\t\t\t\t\tuseInvitation() {\n\t\t\t\t\t\t\treturn useStore($invitation);\n\t\t\t\t\t\t},\n\t\t\t\t\t};\n\t\t\t\t},\n\t\t\t\tpreact(useStore) {\n\t\t\t\t\treturn {\n\t\t\t\t\t\tuseActiveOrganization() {\n\t\t\t\t\t\t\treturn useStore($activeOrganization);\n\t\t\t\t\t\t},\n\t\t\t\t\t\tuseListOrganization() {\n\t\t\t\t\t\t\treturn useStore($listOrganizations);\n\t\t\t\t\t\t},\n\t\t\t\t\t\tuseInvitation() {\n\t\t\t\t\t\t\treturn useStore($invitation);\n\t\t\t\t\t\t},\n\t\t\t\t\t};\n\t\t\t\t},\n\t\t\t\tsvelte() {\n\t\t\t\t\treturn {\n\t\t\t\t\t\t$activeOrganization,\n\t\t\t\t\t\t$listOrganizations,\n\t\t\t\t\t\t$invitation,\n\t\t\t\t\t};\n\t\t\t\t},\n\t\t\t},\n\t\t\tsignals: {\n\t\t\t\t$listOrg,\n\t\t\t\t$activeOrgSignal,\n\t\t\t},\n\t\t\tauthProxySignal: [\n\t\t\t\t{\n\t\t\t\t\tmatcher(path) {\n\t\t\t\t\t\treturn path.startsWith(\"/organization\");\n\t\t\t\t\t},\n\t\t\t\t\tatom: \"$listOrg\",\n\t\t\t\t},\n\t\t\t\t{\n\t\t\t\t\tmatcher(path) {\n\t\t\t\t\t\treturn path.startsWith(\"/organization\");\n\t\t\t\t\t},\n\t\t\t\t\tatom: \"$activeOrgSignal\",\n\t\t\t\t},\n\t\t\t],\n\t\t};\n\t});\n","import type { StatementsPrimitive as Statements, Subset } from \"./types\";\n\nexport class ParsingError extends Error {\n\tpublic readonly path: string;\n\tconstructor(message: string, path: string) {\n\t\tsuper(message);\n\t\tthis.path = path;\n\t}\n}\n\ntype Connector = \"OR\" | \"AND\";\n\nexport class AccessControl<TStatements extends Statements = Statements> {\n\tprivate readonly statements: TStatements;\n\tconstructor(private readonly s: TStatements) {\n\t\tthis.statements = s;\n\t}\n\tpublic newRole<K extends keyof TStatements>(\n\t\tstatements: Subset<K, TStatements>,\n\t) {\n\t\treturn new Role<Subset<K, TStatements>>(statements);\n\t}\n}\n\nexport type AuthortizeResponse =\n\t| { success: false; error: string }\n\t| { success: true; error?: never };\n\nexport class Role<TStatements extends Statements> {\n\tpublic readonly statements: TStatements;\n\n\tconstructor(statements: TStatements) {\n\t\tthis.statements = statements;\n\t}\n\n\tpublic authorize<K extends keyof TStatements>(\n\t\trequest: Subset<K, TStatements>,\n\t\tconnector?: Connector,\n\t): AuthortizeResponse {\n\t\tfor (const [requestedResource, requestedActions] of Object.entries(\n\t\t\trequest,\n\t\t)) {\n\t\t\tconst allowedActions = this.statements[requestedResource];\n\t\t\tif (!allowedActions) {\n\t\t\t\treturn {\n\t\t\t\t\tsuccess: false,\n\t\t\t\t\terror: `You are not allowed to access resource: ${requestedResource}`,\n\t\t\t\t};\n\t\t\t}\n\t\t\tconst success =\n\t\t\t\tconnector === \"OR\"\n\t\t\t\t\t? (requestedActions as string[]).some((requestedAction) =>\n\t\t\t\t\t\t\tallowedActions.includes(requestedAction),\n\t\t\t\t\t\t)\n\t\t\t\t\t: (requestedActions as string[]).every((requestedAction) =>\n\t\t\t\t\t\t\tallowedActions.includes(requestedAction),\n\t\t\t\t\t\t);\n\t\t\tif (success) {\n\t\t\t\treturn { success };\n\t\t\t}\n\t\t\treturn {\n\t\t\t\tsuccess: false,\n\t\t\t\terror: `unauthorized to access resource \"${requestedResource}\"`,\n\t\t\t};\n\t\t}\n\t\treturn {\n\t\t\tsuccess: false,\n\t\t\terror: \"Not authorized\",\n\t\t};\n\t}\n\n\tstatic fromString<TStatements extends Statements>(s: string) {\n\t\tconst statements = JSON.parse(s) as TStatements;\n\n\t\tif (typeof statements !== \"object\") {\n\t\t\tthrow new ParsingError(\"statements is not an object\", \".\");\n\t\t}\n\t\tfor (const [resource, actions] of Object.entries(statements)) {\n\t\t\tif (typeof resource !== \"string\") {\n\t\t\t\tthrow new ParsingError(\"invalid resource identifier\", resource);\n\t\t\t}\n\t\t\tif (!Array.isArray(actions)) {\n\t\t\t\tthrow new ParsingError(\"actions is not an array\", resource);\n\t\t\t}\n\t\t\tfor (let i = 0; i < actions.length; i++) {\n\t\t\t\tif (typeof actions[i] !== \"string\") {\n\t\t\t\t\tthrow new ParsingError(\"action is not a string\", `${resource}[${i}]`);\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t\treturn new Role<TStatements>(statements);\n\t}\n\n\tpublic toString(): string {\n\t\treturn JSON.stringify(this.statements);\n\t}\n}\n","import { AccessControl } from \"./src/access\";\nimport type { StatementsPrimitive } from \"./src/types\";\n\nexport const createAccessControl = <S extends StatementsPrimitive>(\n\tstatements: S,\n) => {\n\treturn new AccessControl<S>(statements);\n};\n\nexport const defaultStatements = {\n\torganization: [\"update\", \"delete\"],\n\tmember: [\"create\", \"update\", \"delete\"],\n\tinvitation: [\"create\", \"cancel\"],\n} as const;\n\nexport const defaultAc = createAccessControl(defaultStatements);\n\nexport const adminAc = defaultAc.newRole({\n\torganization: [\"update\"],\n\tinvitation: [\"create\", \"cancel\"],\n\tmember: [\"create\", \"update\", \"delete\"],\n});\n\nexport const ownerAc = defaultAc.newRole({\n\torganization: [\"update\", \"delete\"],\n\tmember: [\"create\", \"update\", \"delete\"],\n\tinvitation: [\"create\", \"cancel\"],\n});\n\nexport const memberAc = defaultAc.newRole({\n\torganization: [],\n\tmember: [],\n\tinvitation: [],\n});\n\nexport const defaultRoles = {\n\tadmin: adminAc,\n\towner: ownerAc,\n\tmember: memberAc,\n};\n","import type { BetterFetch } from \"@better-fetch/fetch\";\nimport {\n\tWebAuthnError,\n\tstartAuthentication,\n\tstartRegistration,\n} from \"@simplewebauthn/browser\";\nimport type {\n\tPublicKeyCredentialCreationOptionsJSON,\n\tPublicKeyCredentialRequestOptionsJSON,\n} from \"@simplewebauthn/types\";\nimport type { Session } from \"inspector\";\nimport type { User } from \"../../adapters/schema\";\nimport type { passkey as passkeyPl, Passkey } from \"../../plugins\";\nimport { createClientPlugin } from \"../../client/create-client-plugin\";\n\nexport const getPasskeyActions = ($fetch: BetterFetch) => {\n\tconst signInPasskey = async (opts?: {\n\t\tautoFill?: boolean;\n\t\temail?: string;\n\t\tcallbackURL?: string;\n\t}) => {\n\t\tconst response = await $fetch<PublicKeyCredentialRequestOptionsJSON>(\n\t\t\t\"/passkey/generate-authenticate-options\",\n\t\t\t{\n\t\t\t\tmethod: \"POST\",\n\t\t\t\tbody: {\n\t\t\t\t\temail: opts?.email,\n\t\t\t\t},\n\t\t\t},\n\t\t);\n\t\tif (!response.data) {\n\t\t\treturn response;\n\t\t}\n\t\ttry {\n\t\t\tconst res = await startAuthentication(\n\t\t\t\tresponse.data,\n\t\t\t\topts?.autoFill || false,\n\t\t\t);\n\t\t\tconst verified = await $fetch<{\n\t\t\t\tsession: Session;\n\t\t\t\tuser: User;\n\t\t\t}>(\"/passkey/verify-authentication\", {\n\t\t\t\tbody: {\n\t\t\t\t\tresponse: res,\n\t\t\t\t\ttype: \"authenticate\",\n\t\t\t\t},\n\t\t\t});\n\t\t\tif (!verified.data) {\n\t\t\t\treturn verified;\n\t\t\t}\n\t\t} catch (e) {\n\t\t\tconsole.log(e);\n\t\t}\n\t};\n\n\tconst registerPasskey = async () => {\n\t\tconst options = await $fetch<PublicKeyCredentialCreationOptionsJSON>(\n\t\t\t\"/passkey/generate-register-options\",\n\t\t\t{\n\t\t\t\tmethod: \"GET\",\n\t\t\t},\n\t\t);\n\t\tif (!options.data) {\n\t\t\treturn options;\n\t\t}\n\t\ttry {\n\t\t\tconst res = await startRegistration(options.data);\n\t\t\tconst verified = await $fetch<{\n\t\t\t\tpasskey: Passkey;\n\t\t\t}>(\"/passkey/verify-registration\", {\n\t\t\t\tbody: {\n\t\t\t\t\tresponse: res,\n\t\t\t\t\ttype: \"register\",\n\t\t\t\t},\n\t\t\t});\n\t\t\tif (!verified.data) {\n\t\t\t\treturn verified;\n\t\t\t}\n\t\t} catch (e) {\n\t\t\tif (e instanceof WebAuthnError) {\n\t\t\t\tif (e.code === \"ERROR_AUTHENTICATOR_PREVIOUSLY_REGISTERED\") {\n\t\t\t\t\treturn {\n\t\t\t\t\t\tdata: null,\n\t\t\t\t\t\terror: {\n\t\t\t\t\t\t\tmessage: \"previously registered\",\n\t\t\t\t\t\t\tstatus: 400,\n\t\t\t\t\t\t\tstatusText: \"BAD_REQUEST\",\n\t\t\t\t\t\t},\n\t\t\t\t\t};\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t};\n\treturn {\n\t\tsignInPasskey,\n\t\tregisterPasskey,\n\t};\n};\n\nexport const passkeyClient = createClientPlugin<ReturnType<typeof passkeyPl>>()(\n\t($fetch) => {\n\t\treturn {\n\t\t\tid: \"passkey\",\n\t\t\tactions: getPasskeyActions($fetch),\n\t\t};\n\t},\n);\n","import type { username } from \".\";\nimport { createClientPlugin } from \"../../client/create-client-plugin\";\n\nexport const usernameClient = createClientPlugin<ReturnType<typeof username>>()(\n\t($fetch) => {\n\t\treturn {\n\t\t\tid: \"username\",\n\t\t};\n\t},\n);\n"],"mappings":";AAUO,IAAM,qBAAqB,MAA0C;AAC3E,SAAO,CASN,QAUI;AACJ,WAAO,CAAC,WAAwB;AAC/B,YAAM,OAAO,IAAI,MAAM;AACvB,aAAO;AAAA,QACN,GAAG;AAAA,QACH,cAAc,KAAK;AAAA,QACnB,QAAQ,CAAC;AAAA,MACV;AAAA,IACD;AAAA,EACD;AACD;;;ACrCO,IAAM,kBAAkB,CAC9B,UAQI;AAAA,EACH,UAAU;AAAA,EACV,eAAe;AAChB,MACI;AACJ,SAAO,mBAA6C,EAAE,CAAC,WAAW;AACjE,WAAO;AAAA,MACN,IAAI;AAAA,MACJ,iBAAiB;AAAA,QAChB;AAAA,UACC,SAAS,CAAC,SACT,SAAS,wBAAwB,SAAS;AAAA,UAC3C,MAAM;AAAA,QACP;AAAA,MACD;AAAA,MACA,aAAa;AAAA,QACZ,eAAe;AAAA,QACf,uBAAuB;AAAA,QACvB,sBAAsB;AAAA,QACtB,wBAAwB;AAAA,MACzB;AAAA,MACA,cAAc;AAAA,QACb;AAAA,UACC,IAAI;AAAA,UACJ,MAAM;AAAA,UACN,OAAO;AAAA,YACN,MAAM,UAAU,SAAS;AACxB,kBAAI,QAAQ,MAAM,mBAAmB;AACpC,oBAAI,QAAQ,UAAU;AACrB,yBAAO,SAAS,OAAO,QAAQ;AAAA,gBAChC;AAAA,cACD;AAAA,YACD;AAAA,UACD;AAAA,QACD;AAAA,MACD;AAAA,IACD;AAAA,EACD,CAAC;AACF;;;AClDA,SAAS,MAAM,UAAU,YAAY;;;ACE9B,IAAM,eAAN,cAA2B,MAAM;AAAA,EACvB;AAAA,EAChB,YAAY,SAAiB,MAAc;AAC1C,UAAM,OAAO;AACb,SAAK,OAAO;AAAA,EACb;AACD;AAIO,IAAM,gBAAN,MAAiE;AAAA,EAEvE,YAA6B,GAAgB;AAAhB;AAC5B,SAAK,aAAa;AAAA,EACnB;AAAA,EAHiB;AAAA,EAIV,QACN,YACC;AACD,WAAO,IAAI,KAA6B,UAAU;AAAA,EACnD;AACD;AAMO,IAAM,OAAN,MAAM,MAAqC;AAAA,EACjC;AAAA,EAEhB,YAAY,YAAyB;AACpC,SAAK,aAAa;AAAA,EACnB;AAAA,EAEO,UACN,SACA,WACqB;AACrB,eAAW,CAAC,mBAAmB,gBAAgB,KAAK,OAAO;AAAA,MAC1D;AAAA,IACD,GAAG;AACF,YAAM,iBAAiB,KAAK,WAAW,iBAAiB;AACxD,UAAI,CAAC,gBAAgB;AACpB,eAAO;AAAA,UACN,SAAS;AAAA,UACT,OAAO,2CAA2C,iBAAiB;AAAA,QACpE;AAAA,MACD;AACA,YAAM,UACL,cAAc,OACV,iBAA8B;AAAA,QAAK,CAAC,oBACrC,eAAe,SAAS,eAAe;AAAA,MACxC,IACE,iBAA8B;AAAA,QAAM,CAAC,oBACtC,eAAe,SAAS,eAAe;AAAA,MACxC;AACH,UAAI,SAAS;AACZ,eAAO,EAAE,QAAQ;AAAA,MAClB;AACA,aAAO;AAAA,QACN,SAAS;AAAA,QACT,OAAO,oCAAoC,iBAAiB;AAAA,MAC7D;AAAA,IACD;AACA,WAAO;AAAA,MACN,SAAS;AAAA,MACT,OAAO;AAAA,IACR;AAAA,EACD;AAAA,EAEA,OAAO,WAA2C,GAAW;AAC5D,UAAM,aAAa,KAAK,MAAM,CAAC;AAE/B,QAAI,OAAO,eAAe,UAAU;AACnC,YAAM,IAAI,aAAa,+BAA+B,GAAG;AAAA,IAC1D;AACA,eAAW,CAAC,UAAU,OAAO,KAAK,OAAO,QAAQ,UAAU,GAAG;AAC7D,UAAI,OAAO,aAAa,UAAU;AACjC,cAAM,IAAI,aAAa,+BAA+B,QAAQ;AAAA,MAC/D;AACA,UAAI,CAAC,MAAM,QAAQ,OAAO,GAAG;AAC5B,cAAM,IAAI,aAAa,2BAA2B,QAAQ;AAAA,MAC3D;AACA,eAAS,IAAI,GAAG,IAAI,QAAQ,QAAQ,KAAK;AACxC,YAAI,OAAO,QAAQ,CAAC,MAAM,UAAU;AACnC,gBAAM,IAAI,aAAa,0BAA0B,GAAG,QAAQ,IAAI,CAAC,GAAG;AAAA,QACrE;AAAA,MACD;AAAA,IACD;AACA,WAAO,IAAI,MAAkB,UAAU;AAAA,EACxC;AAAA,EAEO,WAAmB;AACzB,WAAO,KAAK,UAAU,KAAK,UAAU;AAAA,EACtC;AACD;;;AC7FO,IAAM,sBAAsB,CAClC,eACI;AACJ,SAAO,IAAI,cAAiB,UAAU;AACvC;AAEO,IAAM,oBAAoB;AAAA,EAChC,cAAc,CAAC,UAAU,QAAQ;AAAA,EACjC,QAAQ,CAAC,UAAU,UAAU,QAAQ;AAAA,EACrC,YAAY,CAAC,UAAU,QAAQ;AAChC;AAEO,IAAM,YAAY,oBAAoB,iBAAiB;AAEvD,IAAM,UAAU,UAAU,QAAQ;AAAA,EACxC,cAAc,CAAC,QAAQ;AAAA,EACvB,YAAY,CAAC,UAAU,QAAQ;AAAA,EAC/B,QAAQ,CAAC,UAAU,UAAU,QAAQ;AACtC,CAAC;AAEM,IAAM,UAAU,UAAU,QAAQ;AAAA,EACxC,cAAc,CAAC,UAAU,QAAQ;AAAA,EACjC,QAAQ,CAAC,UAAU,UAAU,QAAQ;AAAA,EACrC,YAAY,CAAC,UAAU,QAAQ;AAChC,CAAC;AAEM,IAAM,WAAW,UAAU,QAAQ;AAAA,EACzC,cAAc,CAAC;AAAA,EACf,QAAQ,CAAC;AAAA,EACT,YAAY,CAAC;AACd,CAAC;;;AFVM,IAAM,qBAAqB,CACjC,YAEA,mBAA2C,EAAE,CAAC,WAAW;AACxD,QAAM,cAAc,KAAoB,IAAI;AAC5C,QAAM,WAAW,KAAc,KAAK;AACpC,QAAM,mBAAmB,KAAc,KAAK;AAC5C,QAAM,sBAAsB;AAAA,IAAS,CAAC,aAAa,gBAAgB;AAAA,IAAG,MACrE,KAAK,YAAY;AAChB,UAAI,CAAC,YAAY,IAAI,GAAG;AACvB,eAAO;AAAA,MACR;AACA,YAAM,eAAe,MAAM,OAOzB,4BAA4B;AAAA,QAC7B,QAAQ;AAAA,QACR,aAAa;AAAA,QACb,MAAM;AAAA,UACL,OAAO,YAAY,IAAI;AAAA,QACxB;AAAA,MACD,CAAC;AACD,aAAO,aAAa;AAAA,IACrB,CAAC;AAAA,EACF;AAEA,QAAM,qBAAqB;AAAA,IAAS;AAAA,IAAU,MAC7C,KAAK,YAAY;AAChB,YAAM,gBAAgB,MAAM;AAAA,QAC3B;AAAA,QACA;AAAA,UACC,QAAQ;AAAA,QACT;AAAA,MACD;AACA,aAAO,cAAc;AAAA,IACtB,CAAC;AAAA,EACF;AAEA,QAAM,sBAAsB,KAAoB,IAAI;AACpD,QAAM,cAAc;AAAA,IAAS;AAAA,IAAqB,MACjD,KAAK,YAAY;AAChB,UAAI,CAAC,oBAAoB,IAAI,GAAG;AAC/B,eAAO;AAAA,UACN,OAAO;AAAA,YACN,SAAS;AAAA,YACT,QAAQ;AAAA,YACR,MAAM;AAAA,UACP;AAAA,UACA,MAAM;AAAA,QACP;AAAA,MACD;AACA,YAAM,MAAM,MAAM,OAShB,uCAAuC;AAAA,QACxC,QAAQ;AAAA,QACR,OAAO;AAAA,UACN,IAAI,oBAAoB,IAAI;AAAA,QAC7B;AAAA,QACA,aAAa;AAAA,MACd,CAAC;AACD,aAAO;AAAA,IACR,CAAC;AAAA,EACF;AAOA,SAAO;AAAA,IACN,IAAI;AAAA,IACJ,SAAS;AAAA,MACR,cAAc;AAAA,QACb,UAAU,OAAsB;AAC/B,sBAAY,IAAI,KAAK;AAAA,QACtB;AAAA,QACA,iBAAiB,CAAC,OAAsB;AACvC,8BAAoB,IAAI,EAAE;AAAA,QAC3B;AAAA,QACA,eAAe,OACd,eAII;AACJ,gBAAM,OAAgB,gCAAgC;AAAA,YACrD,QAAQ;AAAA,YACR,MAAM;AAAA,cACL;AAAA,YACD;AAAA,UACD,CAAC;AAAA,QACF;AAAA,MACD;AAAA,IACD;AAAA,IACA,cAAc;AAAA,MACb,MAAM,UAAU;AACf,eAAO;AAAA,UACN,cAAc;AAAA,YACb,wBAAwB;AACvB,qBAAO,SAAS,mBAAmB;AAAA,YACpC;AAAA,YACA,sBAAsB;AACrB,qBAAO,SAAS,kBAAkB;AAAA,YACnC;AAAA,YACA,gBAAgB;AACf,qBAAO,SAAS,WAAW;AAAA,YAC5B;AAAA,UACD;AAAA,QACD;AAAA,MACD;AAAA,MACA,IAAI,UAAU;AACb,eAAO;AAAA,UACN,wBAAwB;AACvB,mBAAO,SAAS,mBAAmB;AAAA,UACpC;AAAA,UACA,sBAAsB;AACrB,mBAAO,SAAS,kBAAkB;AAAA,UACnC;AAAA,UACA,gBAAgB;AACf,mBAAO,SAAS,WAAW;AAAA,UAC5B;AAAA,QACD;AAAA,MACD;AAAA,MACA,OAAO,UAAU;AAChB,eAAO;AAAA,UACN,wBAAwB;AACvB,mBAAO,SAAS,mBAAmB;AAAA,UACpC;AAAA,UACA,sBAAsB;AACrB,mBAAO,SAAS,kBAAkB;AAAA,UACnC;AAAA,UACA,gBAAgB;AACf,mBAAO,SAAS,WAAW;AAAA,UAC5B;AAAA,QACD;AAAA,MACD;AAAA,MACA,SAAS;AACR,eAAO;AAAA,UACN;AAAA,UACA;AAAA,UACA;AAAA,QACD;AAAA,MACD;AAAA,IACD;AAAA,IACA,SAAS;AAAA,MACR;AAAA,MACA;AAAA,IACD;AAAA,IACA,iBAAiB;AAAA,MAChB;AAAA,QACC,QAAQ,MAAM;AACb,iBAAO,KAAK,WAAW,eAAe;AAAA,QACvC;AAAA,QACA,MAAM;AAAA,MACP;AAAA,MACA;AAAA,QACC,QAAQ,MAAM;AACb,iBAAO,KAAK,WAAW,eAAe;AAAA,QACvC;AAAA,QACA,MAAM;AAAA,MACP;AAAA,IACD;AAAA,EACD;AACD,CAAC;;;AGpMF;AAAA,EACC;AAAA,EACA;AAAA,EACA;AAAA,OACM;AAUA,IAAM,oBAAoB,CAAC,WAAwB;AACzD,QAAM,gBAAgB,OAAO,SAIvB;AACL,UAAM,WAAW,MAAM;AAAA,MACtB;AAAA,MACA;AAAA,QACC,QAAQ;AAAA,QACR,MAAM;AAAA,UACL,OAAO,MAAM;AAAA,QACd;AAAA,MACD;AAAA,IACD;AACA,QAAI,CAAC,SAAS,MAAM;AACnB,aAAO;AAAA,IACR;AACA,QAAI;AACH,YAAM,MAAM,MAAM;AAAA,QACjB,SAAS;AAAA,QACT,MAAM,YAAY;AAAA,MACnB;AACA,YAAM,WAAW,MAAM,OAGpB,kCAAkC;AAAA,QACpC,MAAM;AAAA,UACL,UAAU;AAAA,UACV,MAAM;AAAA,QACP;AAAA,MACD,CAAC;AACD,UAAI,CAAC,SAAS,MAAM;AACnB,eAAO;AAAA,MACR;AAAA,IACD,SAAS,GAAG;AACX,cAAQ,IAAI,CAAC;AAAA,IACd;AAAA,EACD;AAEA,QAAM,kBAAkB,YAAY;AACnC,UAAM,UAAU,MAAM;AAAA,MACrB;AAAA,MACA;AAAA,QACC,QAAQ;AAAA,MACT;AAAA,IACD;AACA,QAAI,CAAC,QAAQ,MAAM;AAClB,aAAO;AAAA,IACR;AACA,QAAI;AACH,YAAM,MAAM,MAAM,kBAAkB,QAAQ,IAAI;AAChD,YAAM,WAAW,MAAM,OAEpB,gCAAgC;AAAA,QAClC,MAAM;AAAA,UACL,UAAU;AAAA,UACV,MAAM;AAAA,QACP;AAAA,MACD,CAAC;AACD,UAAI,CAAC,SAAS,MAAM;AACnB,eAAO;AAAA,MACR;AAAA,IACD,SAAS,GAAG;AACX,UAAI,aAAa,eAAe;AAC/B,YAAI,EAAE,SAAS,6CAA6C;AAC3D,iBAAO;AAAA,YACN,MAAM;AAAA,YACN,OAAO;AAAA,cACN,SAAS;AAAA,cACT,QAAQ;AAAA,cACR,YAAY;AAAA,YACb;AAAA,UACD;AAAA,QACD;AAAA,MACD;AAAA,IACD;AAAA,EACD;AACA,SAAO;AAAA,IACN;AAAA,IACA;AAAA,EACD;AACD;AAEO,IAAM,gBAAgB,mBAAiD;AAAA,EAC7E,CAAC,WAAW;AACX,WAAO;AAAA,MACN,IAAI;AAAA,MACJ,SAAS,kBAAkB,MAAM;AAAA,IAClC;AAAA,EACD;AACD;;;ACvGO,IAAM,iBAAiB,mBAAgD;AAAA,EAC7E,CAAC,WAAW;AACX,WAAO;AAAA,MACN,IAAI;AAAA,IACL;AAAA,EACD;AACD;","names":[]}