cauthy-auth 0.24.3 → 0.26.0

package/dist/index.mjs

@@ -633,6 +633,13 @@ function checkName(value) {
   if (typeof value !== "string" || value.trim().length > MAX_NAME) return { field: "name", code: "too_long", message: `Use at most ${MAX_NAME} characters.` };
   return null;
 }
+var MAX_ORGANIZATION = 120;
+function checkOrganization(value, required = false) {
+  const v = typeof value === "string" ? value.trim() : "";
+  if (v === "") return required ? { field: "organization", code: "required", message: "Enter your company's name." } : null;
+  if (v.length > MAX_ORGANIZATION) return { field: "organization", code: "too_long", message: `Use at most ${MAX_ORGANIZATION} characters.` };
+  return null;
+}
 function checkCode(value) {
   const v = typeof value === "string" ? value.trim() : "";
   if (v === "") return { field: "code", code: "required", message: "Enter the code." };
@@ -1188,6 +1195,7 @@ function createCauthy(given = {}) {
       "/me/mfa/phone/remove",
       "/sign-in/mfa/methods",
       "/sign-in/mfa/send",
+      "/sign-in/mfa/email",
       "/sign-in/mfa/push",
       "/sign-in/mfa/push/events",
       "/sign-in/mfa/push/finish",
@@ -1242,6 +1250,8 @@ function createCauthy(given = {}) {
       return json({
         providers: list.map((p) => ({ id: String(p.provider ?? p.id ?? ""), name: String(p.label ?? p.name ?? p.provider ?? "") })).filter((p) => p.id !== ""),
         signUp: settings.data?.allow_signup !== false,
+        // The application's system makes an organization per sign-up: the form asks the company's name.
+        ...settings.data?.signup?.organization?.ask === true ? { organization: { ask: true, required: settings.data.signup.organization.required === true } } : {},
         // A sign-in link needs a page of the application to open.
         magicLink: settings.data?.allow_magic_link === true && pages.signIn !== void 0,
         passkey: place.error ? true : here || place.data?.on_cauthy === true,
@@ -1479,7 +1489,8 @@ function createCauthy(given = {}) {
       if (res.error) return problem(res.status, res.error.code, res.error.message);
       if (res.data?.mfa_required === true) {
         const step = { kind: "mfa", token: String(res.data.mfa_token ?? ""), returnTo: afterSignIn };
-        return json({ status: "mfa_required" }, 200, new Headers({ "set-cookie": writeCookie(stepCookie, await seal(step, await key), attrs(request, STEP_SECONDS)) }));
+        const how = res.data.mfa_method === "email" ? { method: "email" } : {};
+        return json({ status: "mfa_required", ...how }, 200, new Headers({ "set-cookie": writeCookie(stepCookie, await seal(step, await key), attrs(request, STEP_SECONDS)) }));
       }
       return signedIn(request, res.data);
     }
@@ -1506,7 +1517,7 @@ function createCauthy(given = {}) {
       if (res.error) return problem(res.status, res.error.code, res.error.message);
       return signedIn(request, res.data, [writeCookie(stepCookie, "", attrs(request, 0))]);
     }
-    if (route === "/sign-in/mfa/methods" || route === "/sign-in/mfa/send") {
+    if (route === "/sign-in/mfa/methods" || route === "/sign-in/mfa/send" || route === "/sign-in/mfa/email") {
       const sealed = readCookies(request.headers.get("cookie")).get(stepCookie);
       const step = sealed ? await unseal(sealed, await key) : null;
       if (step === null || step.kind !== "mfa") return problem(400, "step_expired", "Sign in again: the code was asked for too long ago.");
@@ -1515,22 +1526,30 @@ function createCauthy(given = {}) {
         if (res2.error) return problem(res2.status, res2.error.code, res2.error.message);
         const p = res2.data?.phone;
         const push = res2.data?.push;
+        const mail = res2.data?.email;
         return json({
           status: "ok",
           totp: res2.data?.totp === true,
           phone: p ? { number: String(p.number ?? ""), channel: String(p.channel ?? "sms") } : null,
-          push: push ? { devices: Number(push.devices ?? 0) } : null
+          push: push ? { devices: Number(push.devices ?? 0) } : null,
+          email: mail ? { to: String(mail.to ?? "") } : null
         });
       }
+      if (route === "/sign-in/mfa/email") {
+        const res2 = await ask(request, "POST", "/v1/auth/mfa/email", { mfa_token: step.token });
+        if (res2.error) return problem(res2.status, res2.error.code, res2.error.message);
+        return json({ status: "sent", sentTo: String(res2.data?.sent_to ?? "") });
+      }
       const res = await ask(request, "POST", "/v1/auth/mfa/send", { mfa_token: step.token });
       if (res.error) return problem(res.status, res.error.code, res.error.message);
       return json({ status: "sent", sentTo: String(res.data?.sent_to ?? ""), channel: String(res.data?.channel ?? "sms") });
     }
     if (route === "/sign-up/email") {
-      const bad = firstProblem(checkName(b.name), checkEmail(b.email), checkNewPassword(b.password));
+      const bad = firstProblem(checkName(b.name), checkEmail(b.email), checkNewPassword(b.password), checkOrganization(b.organization));
       if (bad) return invalid(bad);
       const email = String(b.email).trim();
-      const made = await ask(request, "POST", "/v1/auth/register", { email, password: b.password, display_name: typeof b.name === "string" ? b.name.trim() : "" }, pages.verifyEmail);
+      const organization = typeof b.organization === "string" && b.organization.trim() !== "" ? { organization: { name: b.organization.trim() } } : {};
+      const made = await ask(request, "POST", "/v1/auth/register", { email, password: b.password, display_name: typeof b.name === "string" ? b.name.trim() : "", ...organization }, pages.verifyEmail);
       if (made.error) return problem(made.status, made.error.code, made.error.message);
       if (made.data?.verification_required === true) return json({ status: "verification_required", email });
       const res = await ask(request, "POST", "/v1/auth/login", { email, password: b.password });
@@ -1732,6 +1751,7 @@ function createCauthy(given = {}) {
       if (!isToken(b.token)) return badLink();
       const res = await ask(request, "POST", "/v1/auth/email/verify", { token: String(b.token) });
       if (res.error) return problem(res.status, res.error.code, res.error.message);
+      if (res.data?.access_token) return signedIn(request, res.data);
       return json({ status: "verified" });
     }
     if (route === "/sign-in/passkey/begin") {