naystack 1.1.11 → 1.1.12-beta.1

package/dist/auth/email/token.esm.js

@@ -0,0 +1,56 @@
+// src/auth/email/token.ts
+import { compare } from "bcryptjs";
+import { JsonWebTokenError, sign, verify } from "jsonwebtoken";
+import { NextResponse } from "next/server";
+function generateAccessToken(id, signingKey) {
+  return sign({ id }, signingKey, {
+    expiresIn: "2h"
+  });
+}
+function generateRefreshToken(id, refreshKey) {
+  return sign({ id }, refreshKey);
+}
+function getTokenizedResponse(accessToken, refreshToken) {
+  const body = { accessToken, refreshToken };
+  const response = NextResponse.json(body, {
+    status: 200
+  });
+  if (!accessToken) {
+    response.cookies.set("refresh", "", {
+      secure: false,
+      httpOnly: true,
+      expires: 0
+    });
+  }
+  if (refreshToken !== void 0) {
+    response.cookies.set("refresh", refreshToken, {
+      secure: false,
+      httpOnly: true,
+      expires: refreshToken === "" ? 0 : new Date(Date.now() + 60 * 60 * 24 * 365 * 1e3)
+    });
+  }
+  return response;
+}
+function getUserIdFromRefreshToken(refreshKey, refreshToken) {
+  if (refreshToken)
+    try {
+      const decoded = verify(refreshToken, refreshKey);
+      if (typeof decoded !== "string" && typeof decoded.id === "number")
+        return decoded.id;
+    } catch (e) {
+      if (!(e instanceof JsonWebTokenError)) console.error(e, "errors");
+      return null;
+    }
+  return null;
+}
+function verifyUser(user, password) {
+  if (!user.password) return false;
+  return compare(password, user.password);
+}
+export {
+  generateAccessToken,
+  generateRefreshToken,
+  getTokenizedResponse,
+  getUserIdFromRefreshToken,
+  verifyUser
+};

package/dist/auth/email/types.cjs.js

@@ -0,0 +1,18 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/auth/email/types.ts
+var types_exports = {};
+module.exports = __toCommonJS(types_exports);

package/dist/auth/email/types.d.mts

@@ -0,0 +1,14 @@
+import { UserOutput, UserInput, ErrorHandler } from '../types.mjs';
+import 'next/server';
+
+type InitRoutesOptions = {
+    getUser: (email: string) => Promise<UserOutput | undefined>;
+    createUser: (user: UserInput) => Promise<UserOutput | undefined>;
+    onError?: ErrorHandler;
+    signingKey: string;
+    refreshKey: string;
+    turnstileKey?: string;
+    onSignUp: (user: UserOutput) => void;
+};
+
+export type { InitRoutesOptions };

package/dist/auth/email/types.d.ts

@@ -0,0 +1,14 @@
+import { UserOutput, UserInput, ErrorHandler } from '../types.js';
+import 'next/server';
+
+type InitRoutesOptions = {
+    getUser: (email: string) => Promise<UserOutput | undefined>;
+    createUser: (user: UserInput) => Promise<UserOutput | undefined>;
+    onError?: ErrorHandler;
+    signingKey: string;
+    refreshKey: string;
+    turnstileKey?: string;
+    onSignUp: (user: UserOutput) => void;
+};
+
+export type { InitRoutesOptions };

package/dist/auth/email/utils.cjs.js

@@ -0,0 +1,83 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/auth/email/utils.ts
+var utils_exports = {};
+__export(utils_exports, {
+  massageRequest: () => massageRequest,
+  verifyCaptcha: () => verifyCaptcha
+});
+module.exports = __toCommonJS(utils_exports);
+
+// src/auth/utils/errors.ts
+var import_server = require("next/server");
+function handleError(status, message, onError) {
+  const res = onError?.({ status, message });
+  if (res) return res;
+  return new import_server.NextResponse(message, { status });
+}
+
+// src/auth/email/utils.ts
+async function massageRequest(req, options) {
+  const data = await req.json();
+  if (!data.email || !data.password)
+    return {
+      error: handleError(400, "Missing email or password", options.onError)
+    };
+  if (options.turnstileKey) {
+    if (!data.captchaToken)
+      return { error: handleError(400, "Missing captcha", options.onError) };
+    if (!await verifyCaptcha(data.captchaToken, options.turnstileKey))
+      return {
+        error: handleError(400, "Invalid captcha", options.onError)
+      };
+  }
+  return {
+    data: {
+      email: data.email,
+      password: data.password,
+      ...data
+    }
+  };
+}
+async function verifyCaptcha(token, secret) {
+  const res = await fetch(
+    "https://challenges.cloudflare.com/turnstile/v0/siteverify",
+    {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json"
+      },
+      body: JSON.stringify({
+        secret,
+        response: token
+      })
+    }
+  );
+  if (res.ok) {
+    const data = await res.json();
+    return data.success;
+  }
+  return false;
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  massageRequest,
+  verifyCaptcha
+});

package/dist/auth/email/utils.d.mts

@@ -0,0 +1,16 @@
+import { NextRequest, NextResponse } from 'next/server';
+import { InitRoutesOptions } from './types.mjs';
+import '../types.mjs';
+
+declare function massageRequest(req: NextRequest, options: InitRoutesOptions): Promise<{
+    error?: NextResponse;
+    data?: {
+        email: string;
+        password: string;
+    } & {
+        [key: string]: unknown;
+    };
+}>;
+declare function verifyCaptcha(token: string, secret?: string): Promise<boolean>;
+
+export { massageRequest, verifyCaptcha };

package/dist/auth/email/utils.d.ts

@@ -0,0 +1,16 @@
+import { NextRequest, NextResponse } from 'next/server';
+import { InitRoutesOptions } from './types.js';
+import '../types.js';
+
+declare function massageRequest(req: NextRequest, options: InitRoutesOptions): Promise<{
+    error?: NextResponse;
+    data?: {
+        email: string;
+        password: string;
+    } & {
+        [key: string]: unknown;
+    };
+}>;
+declare function verifyCaptcha(token: string, secret?: string): Promise<boolean>;
+
+export { massageRequest, verifyCaptcha };

package/dist/auth/email/utils.esm.js

@@ -0,0 +1,55 @@
+// src/auth/utils/errors.ts
+import { NextResponse } from "next/server";
+function handleError(status, message, onError) {
+  const res = onError?.({ status, message });
+  if (res) return res;
+  return new NextResponse(message, { status });
+}
+
+// src/auth/email/utils.ts
+async function massageRequest(req, options) {
+  const data = await req.json();
+  if (!data.email || !data.password)
+    return {
+      error: handleError(400, "Missing email or password", options.onError)
+    };
+  if (options.turnstileKey) {
+    if (!data.captchaToken)
+      return { error: handleError(400, "Missing captcha", options.onError) };
+    if (!await verifyCaptcha(data.captchaToken, options.turnstileKey))
+      return {
+        error: handleError(400, "Invalid captcha", options.onError)
+      };
+  }
+  return {
+    data: {
+      email: data.email,
+      password: data.password,
+      ...data
+    }
+  };
+}
+async function verifyCaptcha(token, secret) {
+  const res = await fetch(
+    "https://challenges.cloudflare.com/turnstile/v0/siteverify",
+    {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json"
+      },
+      body: JSON.stringify({
+        secret,
+        response: token
+      })
+    }
+  );
+  if (res.ok) {
+    const data = await res.json();
+    return data.success;
+  }
+  return false;
+}
+export {
+  massageRequest,
+  verifyCaptcha
+};

package/dist/auth/index.d.mts

@@ -1,45 +1,4 @@
-import * as next_server from 'next/server';
-import { NextResponse } from 'next/server';
-
-type ErrorHandler = (error: {
-    status: number;
-    message: string;
-}) => NextResponse;
-type UserInput = {
-    email: string;
-    password: string;
-} & {
-    [key: string]: unknown;
-};
-type UserOutput = {
-    id: number;
-    email: string;
-    password: string | null;
-} & {
-    [key: string]: unknown;
-};
-
-type InitRoutesOptions = {
-    getUser: (email: string) => Promise<UserOutput | undefined>;
-    createUser: (user: UserInput) => Promise<UserOutput | undefined>;
-    onError?: ErrorHandler;
-    signingKey: string;
-    refreshKey: string;
-    turnstileKey?: string;
-    onSignUp: (user: UserOutput) => void;
-};
-
-declare function getEmailAuthRoutes(options: InitRoutesOptions): {
-    GET: (req: next_server.NextRequest) => next_server.NextResponse<{
-        accessToken: string | undefined;
-        refreshToken: string | undefined;
-    }>;
-    POST: (req: next_server.NextRequest) => Promise<next_server.NextResponse<unknown> | undefined>;
-    PUT: (req: next_server.NextRequest) => Promise<next_server.NextResponse<unknown> | undefined>;
-    DELETE: () => next_server.NextResponse<{
-        accessToken: string | undefined;
-        refreshToken: string | undefined;
-    }>;
-};
-
-export { getEmailAuthRoutes };
+export { getEmailAuthRoutes } from './email/index.mjs';
+import 'next/server';
+import './email/types.mjs';
+import './types.mjs';

package/dist/auth/index.d.ts

@@ -1,45 +1,4 @@
-import * as next_server from 'next/server';
-import { NextResponse } from 'next/server';
-
-type ErrorHandler = (error: {
-    status: number;
-    message: string;
-}) => NextResponse;
-type UserInput = {
-    email: string;
-    password: string;
-} & {
-    [key: string]: unknown;
-};
-type UserOutput = {
-    id: number;
-    email: string;
-    password: string | null;
-} & {
-    [key: string]: unknown;
-};
-
-type InitRoutesOptions = {
-    getUser: (email: string) => Promise<UserOutput | undefined>;
-    createUser: (user: UserInput) => Promise<UserOutput | undefined>;
-    onError?: ErrorHandler;
-    signingKey: string;
-    refreshKey: string;
-    turnstileKey?: string;
-    onSignUp: (user: UserOutput) => void;
-};
-
-declare function getEmailAuthRoutes(options: InitRoutesOptions): {
-    GET: (req: next_server.NextRequest) => next_server.NextResponse<{
-        accessToken: string | undefined;
-        refreshToken: string | undefined;
-    }>;
-    POST: (req: next_server.NextRequest) => Promise<next_server.NextResponse<unknown> | undefined>;
-    PUT: (req: next_server.NextRequest) => Promise<next_server.NextResponse<unknown> | undefined>;
-    DELETE: () => next_server.NextResponse<{
-        accessToken: string | undefined;
-        refreshToken: string | undefined;
-    }>;
-};
-
-export { getEmailAuthRoutes };
+export { getEmailAuthRoutes } from './email/index.js';
+import 'next/server';
+import './email/types.js';
+import './types.js';

package/dist/auth/types.cjs.js

@@ -0,0 +1,18 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/auth/types.ts
+var types_exports = {};
+module.exports = __toCommonJS(types_exports);

package/dist/auth/types.d.mts

@@ -0,0 +1,21 @@
+import { NextResponse } from 'next/server';
+
+type ErrorHandler = (error: {
+    status: number;
+    message: string;
+}) => NextResponse;
+type UserInput = {
+    email: string;
+    password: string;
+} & {
+    [key: string]: unknown;
+};
+type UserOutput = {
+    id: number;
+    email: string;
+    password: string | null;
+} & {
+    [key: string]: unknown;
+};
+
+export type { ErrorHandler, UserInput, UserOutput };

package/dist/auth/types.d.ts

@@ -0,0 +1,21 @@
+import { NextResponse } from 'next/server';
+
+type ErrorHandler = (error: {
+    status: number;
+    message: string;
+}) => NextResponse;
+type UserInput = {
+    email: string;
+    password: string;
+} & {
+    [key: string]: unknown;
+};
+type UserOutput = {
+    id: number;
+    email: string;
+    password: string | null;
+} & {
+    [key: string]: unknown;
+};
+
+export type { ErrorHandler, UserInput, UserOutput };

package/dist/auth/utils/errors.cjs.js

@@ -0,0 +1,35 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/auth/utils/errors.ts
+var errors_exports = {};
+__export(errors_exports, {
+  handleError: () => handleError
+});
+module.exports = __toCommonJS(errors_exports);
+var import_server = require("next/server");
+function handleError(status, message, onError) {
+  const res = onError?.({ status, message });
+  if (res) return res;
+  return new import_server.NextResponse(message, { status });
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  handleError
+});

package/dist/auth/utils/errors.d.mts

@@ -0,0 +1,6 @@
+import { NextResponse } from 'next/server';
+import { ErrorHandler } from '../types.mjs';
+
+declare function handleError(status: number, message: string, onError?: ErrorHandler): NextResponse<unknown>;
+
+export { handleError };

package/dist/auth/utils/errors.d.ts

@@ -0,0 +1,6 @@
+import { NextResponse } from 'next/server';
+import { ErrorHandler } from '../types.js';
+
+declare function handleError(status: number, message: string, onError?: ErrorHandler): NextResponse<unknown>;
+
+export { handleError };

package/dist/auth/utils/errors.esm.js

@@ -0,0 +1,10 @@
+// src/auth/utils/errors.ts
+import { NextResponse } from "next/server";
+function handleError(status, message, onError) {
+  const res = onError?.({ status, message });
+  if (res) return res;
+  return new NextResponse(message, { status });
+}
+export {
+  handleError
+};

package/dist/graphql/context.cjs.js

@@ -0,0 +1,76 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/graphql/context.ts
+var context_exports = {};
+__export(context_exports, {
+  getContext: () => getContext
+});
+module.exports = __toCommonJS(context_exports);
+var import_jsonwebtoken2 = require("jsonwebtoken");
+
+// src/auth/email/token.ts
+var import_bcryptjs = require("bcryptjs");
+var import_jsonwebtoken = require("jsonwebtoken");
+var import_server = require("next/server");
+function getUserIdFromRefreshToken(refreshKey, refreshToken) {
+  if (refreshToken)
+    try {
+      const decoded = (0, import_jsonwebtoken.verify)(refreshToken, refreshKey);
+      if (typeof decoded !== "string" && typeof decoded.id === "number")
+        return decoded.id;
+    } catch (e) {
+      if (!(e instanceof import_jsonwebtoken.JsonWebTokenError)) console.error(e, "errors");
+      return null;
+    }
+  return null;
+}
+
+// src/auth/utils/errors.ts
+var import_server2 = require("next/server");
+function handleError(status, message, onError) {
+  const res = onError?.({ status, message });
+  if (res) return res;
+  return new import_server2.NextResponse(message, { status });
+}
+
+// src/graphql/context.ts
+var getContext = (refreshKey, signingKey) => async (req) => {
+  const bearer = req.headers.get("authorization");
+  const isMobile = req.headers.get("x-platform-is-mobile");
+  if (!bearer) {
+    if (isMobile) return { userId: null };
+    const refresh = req.cookies.get("refresh")?.value;
+    const userId = getUserIdFromRefreshToken(refreshKey, refresh);
+    if (userId) return { userId, onlyQuery: true };
+    return { userId: null };
+  }
+  const token = bearer.slice(7);
+  try {
+    const res = (0, import_jsonwebtoken2.verify)(token, signingKey);
+    return { userId: typeof res !== "string" ? res.id : null };
+  } catch {
+    if (isMobile) return handleError(401, "Refresh token is invalid.");
+  }
+  return { userId: null };
+};
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  getContext
+});

package/dist/graphql/context.d.mts

@@ -0,0 +1,6 @@
+import { Context } from 'node:vm';
+import { NextRequest } from 'next/server';
+
+declare const getContext: (refreshKey: string, signingKey: string) => (req: NextRequest) => Promise<Context>;
+
+export { getContext };

package/dist/graphql/context.d.ts

@@ -0,0 +1,6 @@
+import { Context } from 'node:vm';
+import { NextRequest } from 'next/server';
+
+declare const getContext: (refreshKey: string, signingKey: string) => (req: NextRequest) => Promise<Context>;
+
+export { getContext };

package/dist/graphql/context.esm.js

@@ -0,0 +1,51 @@
+// src/graphql/context.ts
+import { verify as verify2 } from "jsonwebtoken";
+
+// src/auth/email/token.ts
+import { compare } from "bcryptjs";
+import { JsonWebTokenError, sign, verify } from "jsonwebtoken";
+import { NextResponse } from "next/server";
+function getUserIdFromRefreshToken(refreshKey, refreshToken) {
+  if (refreshToken)
+    try {
+      const decoded = verify(refreshToken, refreshKey);
+      if (typeof decoded !== "string" && typeof decoded.id === "number")
+        return decoded.id;
+    } catch (e) {
+      if (!(e instanceof JsonWebTokenError)) console.error(e, "errors");
+      return null;
+    }
+  return null;
+}
+
+// src/auth/utils/errors.ts
+import { NextResponse as NextResponse2 } from "next/server";
+function handleError(status, message, onError) {
+  const res = onError?.({ status, message });
+  if (res) return res;
+  return new NextResponse2(message, { status });
+}
+
+// src/graphql/context.ts
+var getContext = (refreshKey, signingKey) => async (req) => {
+  const bearer = req.headers.get("authorization");
+  const isMobile = req.headers.get("x-platform-is-mobile");
+  if (!bearer) {
+    if (isMobile) return { userId: null };
+    const refresh = req.cookies.get("refresh")?.value;
+    const userId = getUserIdFromRefreshToken(refreshKey, refresh);
+    if (userId) return { userId, onlyQuery: true };
+    return { userId: null };
+  }
+  const token = bearer.slice(7);
+  try {
+    const res = verify2(token, signingKey);
+    return { userId: typeof res !== "string" ? res.id : null };
+  } catch {
+    if (isMobile) return handleError(401, "Refresh token is invalid.");
+  }
+  return { userId: null };
+};
+export {
+  getContext
+};