cauthy-auth 0.24.2 → 0.25.0

package/dist/index.mjs

@@ -633,6 +633,13 @@ function checkName(value) {
   if (typeof value !== "string" || value.trim().length > MAX_NAME) return { field: "name", code: "too_long", message: `Use at most ${MAX_NAME} characters.` };
   return null;
 }
+var MAX_ORGANIZATION = 120;
+function checkOrganization(value, required = false) {
+  const v = typeof value === "string" ? value.trim() : "";
+  if (v === "") return required ? { field: "organization", code: "required", message: "Enter your company's name." } : null;
+  if (v.length > MAX_ORGANIZATION) return { field: "organization", code: "too_long", message: `Use at most ${MAX_ORGANIZATION} characters.` };
+  return null;
+}
 function checkCode(value) {
   const v = typeof value === "string" ? value.trim() : "";
   if (v === "") return { field: "code", code: "required", message: "Enter the code." };
@@ -1097,10 +1104,11 @@ function createCauthy(given = {}) {
   const clientIp = given.clientIp ?? ((request) => request.headers.get("x-forwarded-for")?.split(",").pop()?.trim() || void 0);
   let noProofUntil = 0;
   async function passedOn(request) {
+    if (Date.now() < noProofUntil) return {};
     const ip = clientIp(request);
-    if (!ip || Date.now() < noProofUntil) return {};
     try {
-      return { "x-cauthy-client-ip": ip, "x-cauthy-system-token": await ownSystem.token() };
+      const proof = { "x-cauthy-system-token": await ownSystem.token() };
+      return ip ? { ...proof, "x-cauthy-client-ip": ip } : proof;
     } catch {
       noProofUntil = Date.now() + 5 * 6e4;
       return {};
@@ -1241,6 +1249,8 @@ function createCauthy(given = {}) {
       return json({
         providers: list.map((p) => ({ id: String(p.provider ?? p.id ?? ""), name: String(p.label ?? p.name ?? p.provider ?? "") })).filter((p) => p.id !== ""),
         signUp: settings.data?.allow_signup !== false,
+        // The application's system makes an organization per sign-up: the form asks the company's name.
+        ...settings.data?.signup?.organization?.ask === true ? { organization: { ask: true, required: settings.data.signup.organization.required === true } } : {},
         // A sign-in link needs a page of the application to open.
         magicLink: settings.data?.allow_magic_link === true && pages.signIn !== void 0,
         passkey: place.error ? true : here || place.data?.on_cauthy === true,
@@ -1526,10 +1536,11 @@ function createCauthy(given = {}) {
       return json({ status: "sent", sentTo: String(res.data?.sent_to ?? ""), channel: String(res.data?.channel ?? "sms") });
     }
     if (route === "/sign-up/email") {
-      const bad = firstProblem(checkName(b.name), checkEmail(b.email), checkNewPassword(b.password));
+      const bad = firstProblem(checkName(b.name), checkEmail(b.email), checkNewPassword(b.password), checkOrganization(b.organization));
       if (bad) return invalid(bad);
       const email = String(b.email).trim();
-      const made = await ask(request, "POST", "/v1/auth/register", { email, password: b.password, display_name: typeof b.name === "string" ? b.name.trim() : "" }, pages.verifyEmail);
+      const organization = typeof b.organization === "string" && b.organization.trim() !== "" ? { organization: { name: b.organization.trim() } } : {};
+      const made = await ask(request, "POST", "/v1/auth/register", { email, password: b.password, display_name: typeof b.name === "string" ? b.name.trim() : "", ...organization }, pages.verifyEmail);
       if (made.error) return problem(made.status, made.error.code, made.error.message);
       if (made.data?.verification_required === true) return json({ status: "verification_required", email });
       const res = await ask(request, "POST", "/v1/auth/login", { email, password: b.password });
@@ -1731,6 +1742,7 @@ function createCauthy(given = {}) {
       if (!isToken(b.token)) return badLink();
       const res = await ask(request, "POST", "/v1/auth/email/verify", { token: String(b.token) });
       if (res.error) return problem(res.status, res.error.code, res.error.message);
+      if (res.data?.access_token) return signedIn(request, res.data);
       return json({ status: "verified" });
     }
     if (route === "/sign-in/passkey/begin") {