cauthy-auth 0.25.0 → 0.27.0

package/dist/index.js

@@ -1243,11 +1243,14 @@ function createCauthy(given = {}) {
       "/me/mfa/phone/remove",
       "/sign-in/mfa/methods",
       "/sign-in/mfa/send",
+      "/sign-in/mfa/email",
       "/sign-in/mfa/push",
       "/sign-in/mfa/push/events",
       "/sign-in/mfa/push/finish",
       "/me/sessions",
       "/me/sessions/end",
+      "/me/legal",
+      "/me/legal/accept",
       "/me/email",
       "/me/identities",
       "/me/identities/unlink",
@@ -1306,6 +1309,8 @@ function createCauthy(given = {}) {
         passkeyOnCauthy: place.error ? true : place.data?.on_cauthy === true,
         // A company's sign-in, found by the person's work address.
         sso: Array.isArray(sso.data) && sso.data.some((c) => c?.discoverable === true),
+        // The terms a sign-up accepts and the consents it answers, when the workspace asks any.
+        ...settings.data?.legal ? { legal: legalOf(settings.data.legal) } : {},
         ...settings.data?.captcha_enabled === true && settings.data?.captcha_site_key ? { captchaSiteKey: String(settings.data.captcha_site_key) } : {}
       });
     }
@@ -1466,11 +1471,15 @@ function createCauthy(given = {}) {
       if (res.error) return problem(res.status, res.error.code, res.error.message, void 0, mine.headers);
       return json(factorsOf(res.data), 200, mine.headers);
     }
-    if ((route === "/me" || route === "/me/sessions") && !post) {
+    if ((route === "/me" || route === "/me/sessions" || route === "/me/legal") && !post) {
       const mine = await signedInAs(request);
       if ("response" in mine) return mine.response;
-      const res = await ask(request, "GET", route === "/me" ? "/v1/auth/me" : "/v1/auth/me/sessions", void 0, void 0, mine.token);
+      const res = await ask(request, "GET", route === "/me" ? "/v1/auth/me" : route === "/me/legal" ? "/v1/auth/me/legal" : "/v1/auth/me/sessions", void 0, void 0, mine.token);
       if (res.error) return problem(res.status, res.error.code, res.error.message, void 0, mine.headers);
+      if (route === "/me/legal") {
+        const list = Array.isArray(res.data?.pending) ? res.data.pending : [];
+        return json({ pending: list.map((d) => ({ kind: String(d.kind ?? ""), version: String(d.version ?? ""), url: String(d.url ?? "") })) }, 200, mine.headers);
+      }
       if (route === "/me/sessions") {
         const list = Array.isArray(res.data) ? res.data : [];
         return json({ sessions: list.map((x) => ({ device: String(x.device ?? ""), ip: String(x.ip ?? ""), createdAt: String(x.created_at ?? ""), expiresAt: String(x.expires_at ?? "") })) }, 200, mine.headers);
@@ -1536,7 +1545,8 @@ function createCauthy(given = {}) {
       if (res.error) return problem(res.status, res.error.code, res.error.message);
       if (res.data?.mfa_required === true) {
         const step = { kind: "mfa", token: String(res.data.mfa_token ?? ""), returnTo: afterSignIn };
-        return json({ status: "mfa_required" }, 200, new Headers({ "set-cookie": writeCookie(stepCookie, await seal(step, await key), attrs(request, STEP_SECONDS)) }));
+        const how = res.data.mfa_method === "email" ? { method: "email" } : {};
+        return json({ status: "mfa_required", ...how }, 200, new Headers({ "set-cookie": writeCookie(stepCookie, await seal(step, await key), attrs(request, STEP_SECONDS)) }));
       }
       return signedIn(request, res.data);
     }
@@ -1563,7 +1573,7 @@ function createCauthy(given = {}) {
       if (res.error) return problem(res.status, res.error.code, res.error.message);
       return signedIn(request, res.data, [writeCookie(stepCookie, "", attrs(request, 0))]);
     }
-    if (route === "/sign-in/mfa/methods" || route === "/sign-in/mfa/send") {
+    if (route === "/sign-in/mfa/methods" || route === "/sign-in/mfa/send" || route === "/sign-in/mfa/email") {
       const sealed = readCookies(request.headers.get("cookie")).get(stepCookie);
       const step = sealed ? await unseal(sealed, await key) : null;
       if (step === null || step.kind !== "mfa") return problem(400, "step_expired", "Sign in again: the code was asked for too long ago.");
@@ -1572,13 +1582,20 @@ function createCauthy(given = {}) {
         if (res2.error) return problem(res2.status, res2.error.code, res2.error.message);
         const p = res2.data?.phone;
         const push = res2.data?.push;
+        const mail = res2.data?.email;
         return json({
           status: "ok",
           totp: res2.data?.totp === true,
           phone: p ? { number: String(p.number ?? ""), channel: String(p.channel ?? "sms") } : null,
-          push: push ? { devices: Number(push.devices ?? 0) } : null
+          push: push ? { devices: Number(push.devices ?? 0) } : null,
+          email: mail ? { to: String(mail.to ?? "") } : null
         });
       }
+      if (route === "/sign-in/mfa/email") {
+        const res2 = await ask(request, "POST", "/v1/auth/mfa/email", { mfa_token: step.token });
+        if (res2.error) return problem(res2.status, res2.error.code, res2.error.message);
+        return json({ status: "sent", sentTo: String(res2.data?.sent_to ?? "") });
+      }
       const res = await ask(request, "POST", "/v1/auth/mfa/send", { mfa_token: step.token });
       if (res.error) return problem(res.status, res.error.code, res.error.message);
       return json({ status: "sent", sentTo: String(res.data?.sent_to ?? ""), channel: String(res.data?.channel ?? "sms") });
@@ -1588,7 +1605,8 @@ function createCauthy(given = {}) {
       if (bad) return invalid(bad);
       const email = String(b.email).trim();
       const organization = typeof b.organization === "string" && b.organization.trim() !== "" ? { organization: { name: b.organization.trim() } } : {};
-      const made = await ask(request, "POST", "/v1/auth/register", { email, password: b.password, display_name: typeof b.name === "string" ? b.name.trim() : "", ...organization }, pages.verifyEmail);
+      const legal = { ...b.acceptLegal === true ? { accept_legal: true } : {}, ...b.consents && typeof b.consents === "object" ? { consents: b.consents } : {} };
+      const made = await ask(request, "POST", "/v1/auth/register", { email, password: b.password, display_name: typeof b.name === "string" ? b.name.trim() : "", ...organization, ...legal }, pages.verifyEmail);
       if (made.error) return problem(made.status, made.error.code, made.error.message);
       if (made.data?.verification_required === true) return json({ status: "verification_required", email });
       const res = await ask(request, "POST", "/v1/auth/login", { email, password: b.password });
@@ -1619,6 +1637,12 @@ function createCauthy(given = {}) {
         }
         return json({ status: "saved", account: accountOf(res.data) }, 200, h);
       }
+      if (route === "/me/legal/accept") {
+        const kinds = Array.isArray(b.kinds) ? b.kinds.filter((k) => typeof k === "string") : [];
+        const res = await as("/v1/auth/me/legal/accept", { kinds });
+        if (res.error) return refused(res);
+        return json({ status: "accepted" }, 200, mine.headers);
+      }
       if (route === "/me/password") {
         const bad = checkNewPassword(b.newPassword);
         if (bad) return problem(400, bad.code, bad.message, "newPassword");
@@ -1918,6 +1942,14 @@ function createCauthy(given = {}) {
     options: { issuer, clientId, basePath, afterSignIn, afterSignOut, cookieName }
   };
 }
+function legalOf(raw) {
+  const documents = Array.isArray(raw?.documents) ? raw.documents : [];
+  const purposes = Array.isArray(raw?.consent_purposes) ? raw.consent_purposes : [];
+  return {
+    documents: documents.map((d) => ({ kind: String(d.kind ?? ""), version: String(d.version ?? ""), url: String(d.url ?? "") })),
+    consentPurposes: purposes.map((p) => ({ key: String(p.key ?? ""), label: String(p.label ?? ""), required: p.required === true }))
+  };
+}
 
 // src/permissions.ts
 function matches(entry, resource, action) {