cauthy-auth 0.26.0 → 0.27.1

package/dist/index.mjs

@@ -495,7 +495,9 @@ function createSystem(given = {}) {
   async function fail(res, what) {
     const body = await res.json().catch(() => null);
     const first = body?.errors?.[0];
-    throw new CauthyApiError(res.status, first?.code ?? "error", `Cauthy refused ${what} (${res.status}): ${first?.message ?? res.statusText}`);
+    const code = typeof body?.error === "string" ? body.error : first?.code;
+    const message = typeof body?.error === "string" ? body.error_description : first?.message;
+    throw new CauthyApiError(res.status, code ?? "error", `Cauthy refused ${what} (${res.status}): ${message ?? res.statusText}`);
   }
   let held;
   let asking;
@@ -605,8 +607,8 @@ function createSystem(given = {}) {
 }
 
 // src/validate.ts
-var MIN_PASSWORD = 8;
-var MAX_PASSWORD = 256;
+var MIN_PASSWORD = 12;
+var MAX_PASSWORD = 128;
 var MAX_NAME = 120;
 var EMAIL = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
 function checkEmail(value) {
@@ -1201,6 +1203,8 @@ function createCauthy(given = {}) {
       "/sign-in/mfa/push/finish",
       "/me/sessions",
       "/me/sessions/end",
+      "/me/legal",
+      "/me/legal/accept",
       "/me/email",
       "/me/identities",
       "/me/identities/unlink",
@@ -1259,6 +1263,8 @@ function createCauthy(given = {}) {
         passkeyOnCauthy: place.error ? true : place.data?.on_cauthy === true,
         // A company's sign-in, found by the person's work address.
         sso: Array.isArray(sso.data) && sso.data.some((c) => c?.discoverable === true),
+        // The terms a sign-up accepts and the consents it answers, when the workspace asks any.
+        ...settings.data?.legal ? { legal: legalOf(settings.data.legal) } : {},
         ...settings.data?.captcha_enabled === true && settings.data?.captcha_site_key ? { captchaSiteKey: String(settings.data.captcha_site_key) } : {}
       });
     }
@@ -1419,11 +1425,15 @@ function createCauthy(given = {}) {
       if (res.error) return problem(res.status, res.error.code, res.error.message, void 0, mine.headers);
       return json(factorsOf(res.data), 200, mine.headers);
     }
-    if ((route === "/me" || route === "/me/sessions") && !post) {
+    if ((route === "/me" || route === "/me/sessions" || route === "/me/legal") && !post) {
       const mine = await signedInAs(request);
       if ("response" in mine) return mine.response;
-      const res = await ask(request, "GET", route === "/me" ? "/v1/auth/me" : "/v1/auth/me/sessions", void 0, void 0, mine.token);
+      const res = await ask(request, "GET", route === "/me" ? "/v1/auth/me" : route === "/me/legal" ? "/v1/auth/me/legal" : "/v1/auth/me/sessions", void 0, void 0, mine.token);
       if (res.error) return problem(res.status, res.error.code, res.error.message, void 0, mine.headers);
+      if (route === "/me/legal") {
+        const list = Array.isArray(res.data?.pending) ? res.data.pending : [];
+        return json({ pending: list.map((d) => ({ kind: String(d.kind ?? ""), version: String(d.version ?? ""), url: String(d.url ?? "") })) }, 200, mine.headers);
+      }
       if (route === "/me/sessions") {
         const list = Array.isArray(res.data) ? res.data : [];
         return json({ sessions: list.map((x) => ({ device: String(x.device ?? ""), ip: String(x.ip ?? ""), createdAt: String(x.created_at ?? ""), expiresAt: String(x.expires_at ?? "") })) }, 200, mine.headers);
@@ -1549,7 +1559,8 @@ function createCauthy(given = {}) {
       if (bad) return invalid(bad);
       const email = String(b.email).trim();
       const organization = typeof b.organization === "string" && b.organization.trim() !== "" ? { organization: { name: b.organization.trim() } } : {};
-      const made = await ask(request, "POST", "/v1/auth/register", { email, password: b.password, display_name: typeof b.name === "string" ? b.name.trim() : "", ...organization }, pages.verifyEmail);
+      const legal = { ...b.acceptLegal === true ? { accept_legal: true } : {}, ...b.consents && typeof b.consents === "object" ? { consents: b.consents } : {} };
+      const made = await ask(request, "POST", "/v1/auth/register", { email, password: b.password, display_name: typeof b.name === "string" ? b.name.trim() : "", ...organization, ...legal }, pages.verifyEmail);
       if (made.error) return problem(made.status, made.error.code, made.error.message);
       if (made.data?.verification_required === true) return json({ status: "verification_required", email });
       const res = await ask(request, "POST", "/v1/auth/login", { email, password: b.password });
@@ -1580,6 +1591,12 @@ function createCauthy(given = {}) {
         }
         return json({ status: "saved", account: accountOf(res.data) }, 200, h);
       }
+      if (route === "/me/legal/accept") {
+        const kinds = Array.isArray(b.kinds) ? b.kinds.filter((k) => typeof k === "string") : [];
+        const res = await as("/v1/auth/me/legal/accept", { kinds });
+        if (res.error) return refused(res);
+        return json({ status: "accepted" }, 200, mine.headers);
+      }
       if (route === "/me/password") {
         const bad = checkNewPassword(b.newPassword);
         if (bad) return problem(400, bad.code, bad.message, "newPassword");
@@ -1879,6 +1896,14 @@ function createCauthy(given = {}) {
     options: { issuer, clientId, basePath, afterSignIn, afterSignOut, cookieName }
   };
 }
+function legalOf(raw) {
+  const documents = Array.isArray(raw?.documents) ? raw.documents : [];
+  const purposes = Array.isArray(raw?.consent_purposes) ? raw.consent_purposes : [];
+  return {
+    documents: documents.map((d) => ({ kind: String(d.kind ?? ""), version: String(d.version ?? ""), url: String(d.url ?? "") })),
+    consentPurposes: purposes.map((p) => ({ key: String(p.key ?? ""), label: String(p.label ?? ""), required: p.required === true }))
+  };
+}
 
 // src/permissions.ts
 function matches(entry, resource, action) {