nuxt-users 1.11.0 → 1.12.0

package/dist/runtime/server/api/nuxt-users/index.get.js

@@ -0,0 +1,58 @@
+import { createError, defineEventHandler, getQuery } from "h3";
+import { useRuntimeConfig } from "#imports";
+import { useDb } from "../../utils/db.js";
+import { getLastLoginTime } from "../../utils/user.js";
+export default defineEventHandler(async (event) => {
+  const { nuxtUsers } = useRuntimeConfig();
+  const options = nuxtUsers;
+  const db = await useDb(options);
+  const usersTable = options.tables.users;
+  const query = getQuery(event);
+  const page = Number(query.page) || 1;
+  const limit = Number(query.limit) || 10;
+  const offset = (page - 1) * limit;
+  if (page < 1 || limit < 1 || limit > 100) {
+    throw createError({
+      statusCode: 400,
+      statusMessage: "Invalid pagination parameters. Page must be >= 1, limit must be between 1 and 100."
+    });
+  }
+  try {
+    const countResult = await db.sql`SELECT COUNT(*) as total FROM {${usersTable}}`;
+    const total = countResult.rows[0].total;
+    const usersResult = await db.sql`
+      SELECT id, email, name, role, created_at, updated_at 
+      FROM {${usersTable}} 
+      ORDER BY name ASC 
+      LIMIT ${limit} OFFSET ${offset}
+    `;
+    const users = await Promise.all(usersResult.rows.map(async (user) => {
+      const lastLoginTime = await getLastLoginTime(user.id, options);
+      return {
+        id: user.id,
+        email: user.email,
+        name: user.name,
+        role: user.role,
+        created_at: user.created_at instanceof Date ? user.created_at.toISOString() : user.created_at,
+        updated_at: user.updated_at instanceof Date ? user.updated_at.toISOString() : user.updated_at,
+        last_login_at: lastLoginTime
+      };
+    }));
+    return {
+      users,
+      pagination: {
+        page,
+        limit,
+        total,
+        totalPages: Math.ceil(total / limit),
+        hasNext: page * limit < total,
+        hasPrev: page > 1
+      }
+    };
+  } catch (error) {
+    throw createError({
+      statusCode: 500,
+      statusMessage: `Error fetching users: ${error instanceof Error ? error.message : String(error)}`
+    });
+  }
+});

package/dist/runtime/server/api/nuxt-users/session/index.post.d.ts

@@ -6,6 +6,7 @@ declare const _default: import("h3").EventHandler<import("h3").EventHandlerReque
         role: string;
         created_at: string;
         updated_at: string;
+        last_login_at?: string;
     };
 }>>;
 export default _default;

package/dist/runtime/server/middleware/authorization.server.js

@@ -1,4 +1,4 @@
-import { defineEventHandler, getCookie, sendRedirect } from "h3";
+import { defineEventHandler, getCookie, createError } from "h3";
 import { useRuntimeConfig } from "#imports";
 import { getCurrentUserFromToken } from "../utils/index.js";
 import { hasPermission, isWhitelisted } from "../../utils/permissions.js";
@@ -12,7 +12,7 @@ export default defineEventHandler(async (event) => {
     return;
   }
   if (NO_AUTH_PATHS.includes(event.path)) {
-    console.log("[Nuxt Users] server.middleware.auth.global: /login");
+    console.log(`[Nuxt Users] server.middleware.auth.global: NO_AUTH_PATH: ${event.path}`);
     return;
   }
   const openApiPaths = NO_AUTH_API_PATHS.map((path) => `${base}${path}`);
@@ -25,17 +25,32 @@ export default defineEventHandler(async (event) => {
   }
   const token = getCookie(event, "auth_token");
   if (!token) {
-    console.log(`[Nuxt Users] server.middleware.auth.global: ${event.path} No token found redirecting to login`);
-    return sendRedirect(event, "/login");
+    if (event.path.startsWith("/api/")) {
+      console.log(`[Nuxt Users] server.middleware.auth.global: ${event.path} No token found - API request rejected`);
+      throw createError({ statusCode: 401, statusMessage: "Unauthorized" });
+    } else {
+      console.log(`[Nuxt Users] server.middleware.auth.global: ${event.path} No token found - letting client handle page redirect`);
+      return;
+    }
   }
   const user = await getCurrentUserFromToken(token, options);
   if (!user) {
-    console.log(`[Nuxt Users] server.middleware.auth.global: ${event.path} No user found redirecting to login`);
-    return sendRedirect(event, "/login");
+    if (event.path.startsWith("/api/")) {
+      console.log(`[Nuxt Users] server.middleware.auth.global: ${event.path} Invalid token - API request rejected`);
+      throw createError({ statusCode: 401, statusMessage: "Unauthorized" });
+    } else {
+      console.log(`[Nuxt Users] server.middleware.auth.global: ${event.path} Invalid token - letting client handle page redirect`);
+      return;
+    }
   }
   if (!hasPermission(user.role, event.path, options.auth.permissions)) {
-    console.log(`[Nuxt Users] server.middleware.auth.global: ${event.path} User ${user.id} with role ${user.role} denied access`);
-    return sendRedirect(event, "/login");
+    if (event.path.startsWith("/api/")) {
+      console.log(`[Nuxt Users] server.middleware.auth.global: ${event.path} User ${user.id} with role ${user.role} denied access - API request rejected`);
+      throw createError({ statusCode: 403, statusMessage: "Forbidden" });
+    } else {
+      console.log(`[Nuxt Users] server.middleware.auth.global: ${event.path} User ${user.id} with role ${user.role} denied access - letting client handle page redirect`);
+      return;
+    }
   }
   console.log(`[Nuxt Users] server.middleware.auth.global: Authenticated request to ${event.path} for ${user.id} with role ${user.role}`);
   return;

package/dist/runtime/server/utils/user.js

@@ -69,21 +69,24 @@ export const findUserById = async (id, options, withPass = false) => {
 export const updateUser = async (id, userData, options) => {
   const db = await useDb(options);
   const usersTable = options.tables.users;
-  const currentUser = await findUserById(id, options, true);
+  const currentUser = await findUserById(id, options);
   if (!currentUser) {
     throw new Error("User not found.");
   }
   const fieldsToUpdate = { ...userData };
   delete fieldsToUpdate.id;
+  delete fieldsToUpdate.created_at;
+  delete fieldsToUpdate.updated_at;
+  delete fieldsToUpdate.last_login_at;
   delete fieldsToUpdate.password;
   if (Object.keys(fieldsToUpdate).length === 0) {
-    const { password, ...user } = currentUser;
-    return user;
+    return currentUser;
   }
-  for (const [key, value] of Object.entries(fieldsToUpdate)) {
+  const dirtyFields = Object.keys(fieldsToUpdate).filter((key) => currentUser[key] != fieldsToUpdate[key]);
+  for (const key of dirtyFields) {
     await db.sql`
       UPDATE {${usersTable}}
-      SET ${key} = ${value}, updated_at = CURRENT_TIMESTAMP
+      SET {${key}} = ${fieldsToUpdate[key]}, updated_at = CURRENT_TIMESTAMP
       WHERE id = ${id}
     `;
   }

package/dist/shared/{nuxt-users.C7T1DKBV.d.mts → nuxt-users.B5ttEpIO.d.mts}

@@ -144,6 +144,7 @@ interface User {
     role: string;
     created_at: string;
     updated_at: string;
+    last_login_at?: string;
 }
 type UserWithoutPassword = Omit<User, 'password'>;
 interface PersonalAccessToken {

package/dist/shared/{nuxt-users.C7T1DKBV.d.ts → nuxt-users.B5ttEpIO.d.ts}

@@ -144,6 +144,7 @@ interface User {
     role: string;
     created_at: string;
     updated_at: string;
+    last_login_at?: string;
 }
 type UserWithoutPassword = Omit<User, 'password'>;
 interface PersonalAccessToken {

package/dist/utils.d.mts

@@ -1,5 +1,4 @@
-export { L as LoginFormData, M as ModuleOptions, b as PasswordResetToken, P as PersonalAccessToken, U as User, a as UserWithoutPassword } from './shared/nuxt-users.C7T1DKBV.mjs';
-export { findUserByEmail, getCurrentUserFromToken, getLastLoginTime } from '../dist/runtime/server/utils/user.js';
+export { L as LoginFormData, M as ModuleOptions, b as PasswordResetToken, P as PersonalAccessToken, U as User, a as UserWithoutPassword } from './shared/nuxt-users.B5ttEpIO.mjs';
 
 interface PasswordValidationResult {
     isValid: boolean;

package/dist/utils.d.ts

@@ -1,5 +1,4 @@
-export { L as LoginFormData, M as ModuleOptions, b as PasswordResetToken, P as PersonalAccessToken, U as User, a as UserWithoutPassword } from './shared/nuxt-users.C7T1DKBV.js';
-export { findUserByEmail, getCurrentUserFromToken, getLastLoginTime } from '../dist/runtime/server/utils/user.js';
+export { L as LoginFormData, M as ModuleOptions, b as PasswordResetToken, P as PersonalAccessToken, U as User, a as UserWithoutPassword } from './shared/nuxt-users.B5ttEpIO.js';
 
 interface PasswordValidationResult {
     isValid: boolean;

package/dist/utils.mjs

@@ -1,2 +1,162 @@
-export { a as getPasswordStrengthColor, b as getPasswordStrengthText, g as getPasswordValidationOptions, v as validatePassword } from './shared/nuxt-users.BnOQs2LI.mjs';
-export { findUserByEmail, getCurrentUserFromToken, getLastLoginTime } from '../dist/runtime/server/utils/user.js';
+const DEFAULT_OPTIONS = {
+  minLength: 8,
+  requireUppercase: true,
+  requireLowercase: true,
+  requireNumbers: true,
+  requireSpecialChars: true,
+  preventCommonPasswords: true
+};
+const getPasswordValidationOptions = (moduleOptions) => {
+  if (!moduleOptions?.passwordValidation) {
+    return DEFAULT_OPTIONS;
+  }
+  return {
+    ...DEFAULT_OPTIONS,
+    ...moduleOptions.passwordValidation
+  };
+};
+const COMMON_PASSWORDS = [
+  "password",
+  "123456",
+  "123456789",
+  "qwerty",
+  "abc123",
+  "password123",
+  "admin",
+  "letmein",
+  "welcome",
+  "monkey",
+  "dragon",
+  "master",
+  "hello",
+  "freedom",
+  "whatever",
+  "qazwsx",
+  "trustno1",
+  "jordan",
+  "harley",
+  "ranger",
+  "buster",
+  "thomas",
+  "tigger",
+  "robert",
+  "soccer",
+  "batman",
+  "test",
+  "pass",
+  "user",
+  "guest",
+  "login",
+  "secret",
+  "god",
+  "love",
+  "sex",
+  "money",
+  "password1",
+  "12345678",
+  "qwerty123",
+  "admin123",
+  "password!",
+  "password1!",
+  "password123",
+  "password123!"
+];
+const validatePassword = (password, options = {}) => {
+  const config = { ...DEFAULT_OPTIONS, ...options };
+  const errors = [];
+  const hints = [];
+  let score = 0;
+  if (password.length < config.minLength) {
+    errors.push(`Password must be at least ${config.minLength} characters long`);
+    hints.push(`Use at least ${config.minLength} characters`);
+  } else {
+    score += 20;
+    if (password.length < 12) {
+      hints.push("Use 12 or more characters for extra security");
+    }
+  }
+  if (config.requireUppercase && !/[A-Z]/.test(password)) {
+    errors.push("Password must contain at least one uppercase letter");
+    hints.push("Add an uppercase letter (A-Z)");
+  } else if (/[A-Z]/.test(password)) {
+    score += 15;
+  }
+  if (config.requireLowercase && !/[a-z]/.test(password)) {
+    errors.push("Password must contain at least one lowercase letter");
+    hints.push("Add a lowercase letter (a-z)");
+  } else if (/[a-z]/.test(password)) {
+    score += 15;
+  }
+  if (config.requireNumbers && !/\d/.test(password)) {
+    errors.push("Password must contain at least one number");
+    hints.push("Add a number (0-9)");
+  } else if (/\d/.test(password)) {
+    score += 15;
+  }
+  if (config.requireSpecialChars && !/[!@#$%^&*()_+\-=[\]{};':"\\|,.<>/?]/.test(password)) {
+    errors.push("Password must contain at least one special character");
+    hints.push("Add a special character (e.g. !@#$%)");
+  } else if (/[!@#$%^&*()_+\-=[\]{};':"\\|,.<>/?]/.test(password)) {
+    score += 15;
+  }
+  if (config.preventCommonPasswords && COMMON_PASSWORDS.includes(password.toLowerCase())) {
+    errors.push("Password is too common. Please choose a more unique password");
+    hints.push("Avoid common passwords or names");
+  }
+  if (password.length >= 12) {
+    score += 10;
+  } else if (password.length >= 10) {
+    score += 5;
+  }
+  const hasUppercase = /[A-Z]/.test(password);
+  const hasLowercase = /[a-z]/.test(password);
+  const hasNumbers = /\d/.test(password);
+  const hasSpecial = /[!@#$%^&*()_+\-=[\]{};':"\\|,.<>/?]/.test(password);
+  const complexityTypes = [hasUppercase, hasLowercase, hasNumbers, hasSpecial].filter(Boolean).length;
+  if (complexityTypes >= 4) {
+    score += 10;
+  } else if (complexityTypes >= 3) {
+    score += 5;
+    hints.push("Use a mix of uppercase, lowercase, numbers, and special characters");
+  }
+  let strength = "weak";
+  if (score >= 80) {
+    strength = "strong";
+  } else if (score >= 60) {
+    strength = "medium";
+  }
+  return {
+    isValid: errors.length === 0,
+    errors,
+    strength,
+    score: Math.min(score, 100),
+    hints: Array.from(new Set(hints))
+    // deduplicate
+  };
+};
+const getPasswordStrengthColor = (strength) => {
+  switch (strength) {
+    case "weak":
+      return "#dc3545";
+    case "medium":
+      return "#ffc107";
+    case "strong":
+      return "#28a745";
+    default:
+      return "#6c757d";
+  }
+};
+const getPasswordStrengthText = (strength) => {
+  switch (strength) {
+    case "weak":
+      return "Weak";
+    case "medium":
+      return "Medium";
+    case "strong":
+      return "Strong";
+    default:
+      return "Unknown";
+  }
+};
+
+export { getPasswordStrengthColor, getPasswordStrengthText, getPasswordValidationOptions, validatePassword };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nuxt-users",
-  "version": "1.11.0",
+  "version": "1.12.0",
   "description": "A comprehensive user management module for Nuxt 3 and Nuxt 4 applications with authentication, authorization, database support, and CLI tools",
   "keywords": [
     "nuxt",

package/dist/runtime/assets/colors.css

@@ -1 +0,0 @@
-:root{--color-primary:#60a5fa;--color-primary-dark:#3b82f6;--color-primary-light:#93c5fd;--color-secondary:#10b981;--color-secondary-dark:#059669;--color-secondary-light:#34d399;--color-white:#000;--color-black:#fff;--color-gray-50:#111827;--color-gray-100:#1f2937;--color-gray-200:#374151;--color-gray-300:#4b5563;--color-gray-400:#6b7280;--color-gray-500:#9ca3af;--color-gray-600:#d1d5db;--color-gray-700:#e5e7eb;--color-gray-800:#f3f4f6;--color-gray-900:#f9fafb;--color-success:#10b981;--color-success-light:#064e3b;--color-warning:#fbbf24;--color-warning-light:#451a03;--color-warning-text:#fef3c7;--color-error:#ef4444;--color-error-light:#450a0a;--color-error-border:#7f1d1d;--color-error-alt:#f87171;--color-border:#374151;--color-border-light:#4b5563;--color-border-dark:#6b7280;--color-bg-primary:#111827;--color-bg-secondary:#1f2937;--color-bg-tertiary:#374151}@media (prefers-color-scheme:light){.light,:root{--color-primary:#3b82f6;--color-primary-dark:#2563eb;--color-primary-light:#60a5fa;--color-secondary:#059669;--color-secondary-dark:#047857;--color-secondary-light:#10b981;--color-white:#fff;--color-black:#000;--color-gray-50:#f9fafb;--color-gray-100:#f3f4f6;--color-gray-200:#e5e7eb;--color-gray-300:#d1d5db;--color-gray-400:#9ca3af;--color-gray-500:#6b7280;--color-gray-600:#4b5563;--color-gray-700:#374151;--color-gray-800:#1f2937;--color-gray-900:#111827;--color-success:#059669;--color-success-light:#f0fdf4;--color-warning:#f59e0b;--color-warning-light:#fef3c7;--color-warning-text:#92400e;--color-error:#dc2626;--color-error-light:#fef2f2;--color-error-border:#fecaca;--color-error-alt:#db5050;--color-border:#e5e7eb;--color-border-light:#d1d5db;--color-border-dark:#ccc;--color-bg-primary:#fff;--color-bg-secondary:#f9fafb;--color-bg-tertiary:#f3f4f6}}

package/dist/shared/nuxt-users.BnOQs2LI.mjs

@@ -1,162 +0,0 @@
-const DEFAULT_OPTIONS = {
-  minLength: 8,
-  requireUppercase: true,
-  requireLowercase: true,
-  requireNumbers: true,
-  requireSpecialChars: true,
-  preventCommonPasswords: true
-};
-const getPasswordValidationOptions = (moduleOptions) => {
-  if (!moduleOptions?.passwordValidation) {
-    return DEFAULT_OPTIONS;
-  }
-  return {
-    ...DEFAULT_OPTIONS,
-    ...moduleOptions.passwordValidation
-  };
-};
-const COMMON_PASSWORDS = [
-  "password",
-  "123456",
-  "123456789",
-  "qwerty",
-  "abc123",
-  "password123",
-  "admin",
-  "letmein",
-  "welcome",
-  "monkey",
-  "dragon",
-  "master",
-  "hello",
-  "freedom",
-  "whatever",
-  "qazwsx",
-  "trustno1",
-  "jordan",
-  "harley",
-  "ranger",
-  "buster",
-  "thomas",
-  "tigger",
-  "robert",
-  "soccer",
-  "batman",
-  "test",
-  "pass",
-  "user",
-  "guest",
-  "login",
-  "secret",
-  "god",
-  "love",
-  "sex",
-  "money",
-  "password1",
-  "12345678",
-  "qwerty123",
-  "admin123",
-  "password!",
-  "password1!",
-  "password123",
-  "password123!"
-];
-const validatePassword = (password, options = {}) => {
-  const config = { ...DEFAULT_OPTIONS, ...options };
-  const errors = [];
-  const hints = [];
-  let score = 0;
-  if (password.length < config.minLength) {
-    errors.push(`Password must be at least ${config.minLength} characters long`);
-    hints.push(`Use at least ${config.minLength} characters`);
-  } else {
-    score += 20;
-    if (password.length < 12) {
-      hints.push("Use 12 or more characters for extra security");
-    }
-  }
-  if (config.requireUppercase && !/[A-Z]/.test(password)) {
-    errors.push("Password must contain at least one uppercase letter");
-    hints.push("Add an uppercase letter (A-Z)");
-  } else if (/[A-Z]/.test(password)) {
-    score += 15;
-  }
-  if (config.requireLowercase && !/[a-z]/.test(password)) {
-    errors.push("Password must contain at least one lowercase letter");
-    hints.push("Add a lowercase letter (a-z)");
-  } else if (/[a-z]/.test(password)) {
-    score += 15;
-  }
-  if (config.requireNumbers && !/\d/.test(password)) {
-    errors.push("Password must contain at least one number");
-    hints.push("Add a number (0-9)");
-  } else if (/\d/.test(password)) {
-    score += 15;
-  }
-  if (config.requireSpecialChars && !/[!@#$%^&*()_+\-=[\]{};':"\\|,.<>/?]/.test(password)) {
-    errors.push("Password must contain at least one special character");
-    hints.push("Add a special character (e.g. !@#$%)");
-  } else if (/[!@#$%^&*()_+\-=[\]{};':"\\|,.<>/?]/.test(password)) {
-    score += 15;
-  }
-  if (config.preventCommonPasswords && COMMON_PASSWORDS.includes(password.toLowerCase())) {
-    errors.push("Password is too common. Please choose a more unique password");
-    hints.push("Avoid common passwords or names");
-  }
-  if (password.length >= 12) {
-    score += 10;
-  } else if (password.length >= 10) {
-    score += 5;
-  }
-  const hasUppercase = /[A-Z]/.test(password);
-  const hasLowercase = /[a-z]/.test(password);
-  const hasNumbers = /\d/.test(password);
-  const hasSpecial = /[!@#$%^&*()_+\-=[\]{};':"\\|,.<>/?]/.test(password);
-  const complexityTypes = [hasUppercase, hasLowercase, hasNumbers, hasSpecial].filter(Boolean).length;
-  if (complexityTypes >= 4) {
-    score += 10;
-  } else if (complexityTypes >= 3) {
-    score += 5;
-    hints.push("Use a mix of uppercase, lowercase, numbers, and special characters");
-  }
-  let strength = "weak";
-  if (score >= 80) {
-    strength = "strong";
-  } else if (score >= 60) {
-    strength = "medium";
-  }
-  return {
-    isValid: errors.length === 0,
-    errors,
-    strength,
-    score: Math.min(score, 100),
-    hints: Array.from(new Set(hints))
-    // deduplicate
-  };
-};
-const getPasswordStrengthColor = (strength) => {
-  switch (strength) {
-    case "weak":
-      return "#dc3545";
-    case "medium":
-      return "#ffc107";
-    case "strong":
-      return "#28a745";
-    default:
-      return "#6c757d";
-  }
-};
-const getPasswordStrengthText = (strength) => {
-  switch (strength) {
-    case "weak":
-      return "Weak";
-    case "medium":
-      return "Medium";
-    case "strong":
-      return "Strong";
-    default:
-      return "Unknown";
-  }
-};
-
-export { getPasswordStrengthColor as a, getPasswordStrengthText as b, getPasswordValidationOptions as g, validatePassword as v };

package/dist/runtime/components/{LogoutLink.vue.d.ts → NUsersLogoutLink.vue.d.ts}

@@ -16,13 +16,13 @@ type __VLS_Slots = {} & {
     default?: (props: typeof __VLS_1) => any;
 };
 declare const __VLS_component: import("vue").DefineComponent<LogoutLinkProps, void, {}, {}, {}, import("vue").ComponentOptionsMixin, import("vue").ComponentOptionsMixin, {} & {
-    success: () => any;
-    error: (error: string) => any;
     click: () => any;
+    error: (error: string) => any;
+    success: () => any;
 }, string, import("vue").PublicProps, Readonly<LogoutLinkProps> & Readonly<{
-    onSuccess?: (() => any) | undefined;
-    onError?: ((error: string) => any) | undefined;
     onClick?: (() => any) | undefined;
+    onError?: ((error: string) => any) | undefined;
+    onSuccess?: (() => any) | undefined;
 }>, {
     redirectTo: string;
     linkText: string;