nextjs-hasura-auth 0.1.2 → 0.1.4

package/dist/lib/tokenUtils.js

@@ -0,0 +1,94 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.generateVerificationToken = generateVerificationToken;
+exports.verifyVerificationToken = verifyVerificationToken;
+const jose_1 = require("jose");
+const debug_1 = __importDefault(require("@/lib/debug"));
+const jwt_1 = require("./jwt"); // Reuse the hashed NEXTAUTH_SECRET for simplicity
+const debug = (0, debug_1.default)('tokenUtils');
+// Use the same secret as NextAuth JWE for simplicity, but hashed.
+// Alternatively, generate a separate secret for verification tokens.
+let verificationSecretPromise = null;
+const getVerificationSecret = () => {
+    if (!verificationSecretPromise) {
+        verificationSecretPromise = (0, jwt_1.getNextAuthSecret)();
+    }
+    return verificationSecretPromise;
+};
+const VERIFICATION_TOKEN_EXPIRY = '1h'; // Verification token valid for 1 hour
+const JWT_ALGORITHM = 'HS256'; // Algorithm for signing
+/**
+ * Generates a short-lived JWT for email verification.
+ * @param userId - The ID of the user to verify.
+ * @returns Promise<string> - The generated verification token.
+ */
+function generateVerificationToken(userId) {
+    return __awaiter(this, void 0, void 0, function* () {
+        debug('Generating verification token for user: %s', userId);
+        try {
+            const secret = yield getVerificationSecret();
+            const token = yield new jose_1.SignJWT({ scope: 'verify_email' }) // Add scope for clarity
+                .setProtectedHeader({ alg: JWT_ALGORITHM })
+                .setSubject(userId) // Embed userId in 'sub' claim
+                .setIssuedAt()
+                .setExpirationTime(VERIFICATION_TOKEN_EXPIRY)
+                .sign(secret);
+            debug('Verification token generated successfully.');
+            return token;
+        }
+        catch (error) {
+            debug('Error generating verification token:', error);
+            console.error('Failed to generate verification token:', error);
+            throw new Error('Could not generate verification token.');
+        }
+    });
+}
+/**
+ * Verifies an email verification token.
+ * @param token - The token string to verify.
+ * @returns Promise<{ userId: string } | null> - The user ID if the token is valid and has the correct scope, otherwise null.
+ */
+function verifyVerificationToken(token) {
+    return __awaiter(this, void 0, void 0, function* () {
+        debug('Verifying verification token...');
+        if (!token) {
+            debug('Verification token is missing.');
+            return null;
+        }
+        try {
+            const secret = yield getVerificationSecret();
+            const { payload } = yield (0, jose_1.jwtVerify)(token, secret, {
+                algorithms: [JWT_ALGORITHM],
+            });
+            // Check for specific scope if needed (good practice)
+            if (payload.scope !== 'verify_email') {
+                debug('Verification token has invalid scope: %s', payload.scope);
+                return null;
+            }
+            const userId = payload.sub;
+            if (!userId) {
+                debug('Verification token is missing user ID (sub claim).');
+                return null;
+            }
+            debug('Verification token verified successfully for user: %s', userId);
+            return { userId };
+        }
+        catch (error) {
+            // Errors like expired token, invalid signature, etc.
+            debug('Error verifying verification token:', error.code || error.message);
+            return null; // Return null for any verification error
+        }
+    });
+}

package/dist/package.json

@@ -1,7 +1,7 @@
 {
     "name": "nextjs-hasura-auth",
     "shortName": "nha",
-    "version": "0.1.1",
+    "version": "0.1.4",
     "engines": {
         "node": "22.14"
     },
@@ -20,10 +20,11 @@
         "test:build": "jest build.test.ts",
         "postinstall": "npm run ws -- -y",
         "ws": "npx --yes next-ws-cli@latest patch",
-        "nha:migrate": "tsx ./migrations/nha/up.ts",
+        "nha:migrate": "tsx ./migrations/nha/up.ts; npm run hasura:schema; npm run hasura:types",
         "nha:unmigrate": "tsx ./migrations/nha/down.ts",
         "hasura:schema": "tsx ./lib/hasura-schema.ts",
-        "codegen": "graphql-codegen --config codegen.ts"
+        "hasura:types": "graphql-codegen --config codegen.ts",
+        "publish": "npm run hasura:schema; npm run hasura:types; npm run build; npm publish"
     },
     "main": "dist/lib/index.js",
     "types": "dist/lib/index.d.ts",
@@ -64,7 +65,9 @@
         "@radix-ui/react-toggle": "^1.1.3",
         "@radix-ui/react-toggle-group": "^1.1.3",
         "@radix-ui/react-tooltip": "^1.2.0",
+        "@types/bcrypt": "^5.0.2",
         "@types/debug": "^4.1.12",
+        "bcrypt": "^5.1.1",
         "class-variance-authority": "^0.7.1",
         "clsx": "^2.1.1",
         "cmdk": "^1.1.1",
@@ -89,12 +92,13 @@
         "react-hook-form": "^7.55.0",
         "react-resizable-panels": "^2.1.7",
         "recharts": "^2.15.3",
+        "resend": "^4.3.0",
         "sonner": "^2.0.3",
         "tailwind-merge": "^3.2.0",
+        "ts-essentials": "^10.0.4",
         "tw-animate-css": "^1.2.5",
         "uuid": "^11.1.0",
         "vaul": "^1.1.2",
-        "zerobounce": "^0.3.0",
         "zod": "^3.24.3"
     },
     "devDependencies": {