nuxt-users 1.11.0 → 1.13.0

package/dist/runtime/server/api/nuxt-users/index.get.d.ts

@@ -0,0 +1,20 @@
+declare const _default: import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<{
+    users: {
+        id: number;
+        email: string;
+        name: string;
+        role: string;
+        created_at: string;
+        updated_at: string;
+        last_login_at: string | null;
+    }[];
+    pagination: {
+        page: number;
+        limit: number;
+        total: number;
+        totalPages: number;
+        hasNext: boolean;
+        hasPrev: boolean;
+    };
+}>>;
+export default _default;

package/dist/runtime/server/api/nuxt-users/index.get.js

@@ -0,0 +1,58 @@
+import { createError, defineEventHandler, getQuery } from "h3";
+import { useRuntimeConfig } from "#imports";
+import { useDb } from "../../utils/db.js";
+import { getLastLoginTime } from "../../utils/user.js";
+export default defineEventHandler(async (event) => {
+  const { nuxtUsers } = useRuntimeConfig();
+  const options = nuxtUsers;
+  const db = await useDb(options);
+  const usersTable = options.tables.users;
+  const query = getQuery(event);
+  const page = Number(query.page) || 1;
+  const limit = Number(query.limit) || 10;
+  const offset = (page - 1) * limit;
+  if (page < 1 || limit < 1 || limit > 100) {
+    throw createError({
+      statusCode: 400,
+      statusMessage: "Invalid pagination parameters. Page must be >= 1, limit must be between 1 and 100."
+    });
+  }
+  try {
+    const countResult = await db.sql`SELECT COUNT(*) as total FROM {${usersTable}}`;
+    const total = countResult.rows[0].total;
+    const usersResult = await db.sql`
+      SELECT id, email, name, role, created_at, updated_at 
+      FROM {${usersTable}} 
+      ORDER BY name ASC 
+      LIMIT ${limit} OFFSET ${offset}
+    `;
+    const users = await Promise.all(usersResult.rows.map(async (user) => {
+      const lastLoginTime = await getLastLoginTime(user.id, options);
+      return {
+        id: user.id,
+        email: user.email,
+        name: user.name,
+        role: user.role,
+        created_at: user.created_at instanceof Date ? user.created_at.toISOString() : user.created_at,
+        updated_at: user.updated_at instanceof Date ? user.updated_at.toISOString() : user.updated_at,
+        last_login_at: lastLoginTime
+      };
+    }));
+    return {
+      users,
+      pagination: {
+        page,
+        limit,
+        total,
+        totalPages: Math.ceil(total / limit),
+        hasNext: page * limit < total,
+        hasPrev: page > 1
+      }
+    };
+  } catch (error) {
+    throw createError({
+      statusCode: 500,
+      statusMessage: `Error fetching users: ${error instanceof Error ? error.message : String(error)}`
+    });
+  }
+});

package/dist/runtime/server/api/nuxt-users/me.patch.d.ts

@@ -0,0 +1,4 @@
+declare const _default: import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<{
+    user: import("../../../../types.js").UserWithoutPassword;
+}>>;
+export default _default;

package/dist/runtime/server/api/nuxt-users/me.patch.js

@@ -0,0 +1,33 @@
+import { createError, defineEventHandler, readBody } from "h3";
+import { useRuntimeConfig } from "#imports";
+import { updateUser } from "../../utils/user.js";
+export default defineEventHandler(async (event) => {
+  const { nuxtUsers } = useRuntimeConfig();
+  const options = nuxtUsers;
+  const user = event.context.user;
+  if (!user) {
+    throw createError({
+      statusCode: 401,
+      statusMessage: "Unauthorized"
+    });
+  }
+  const body = await readBody(event);
+  if (body.role) {
+    delete body.role;
+  }
+  try {
+    const updatedUser = await updateUser(user.id, body, options);
+    return { user: updatedUser };
+  } catch (error) {
+    if (error instanceof Error) {
+      throw createError({
+        statusCode: 400,
+        statusMessage: error.message
+      });
+    }
+    throw createError({
+      statusCode: 400,
+      statusMessage: "An unknown error occurred"
+    });
+  }
+});

package/dist/runtime/server/api/nuxt-users/session/index.post.d.ts

@@ -6,6 +6,7 @@ declare const _default: import("h3").EventHandler<import("h3").EventHandlerReque
         role: string;
         created_at: string;
         updated_at: string;
+        last_login_at?: string;
     };
 }>>;
 export default _default;

package/dist/runtime/server/middleware/authorization.server.js

@@ -1,4 +1,4 @@
-import { defineEventHandler, getCookie, sendRedirect } from "h3";
+import { defineEventHandler, getCookie, createError } from "h3";
 import { useRuntimeConfig } from "#imports";
 import { getCurrentUserFromToken } from "../utils/index.js";
 import { hasPermission, isWhitelisted } from "../../utils/permissions.js";
@@ -12,7 +12,7 @@ export default defineEventHandler(async (event) => {
     return;
   }
   if (NO_AUTH_PATHS.includes(event.path)) {
-    console.log("[Nuxt Users] server.middleware.auth.global: /login");
+    console.log(`[Nuxt Users] server.middleware.auth.global: NO_AUTH_PATH: ${event.path}`);
     return;
   }
   const openApiPaths = NO_AUTH_API_PATHS.map((path) => `${base}${path}`);
@@ -25,17 +25,32 @@ export default defineEventHandler(async (event) => {
   }
   const token = getCookie(event, "auth_token");
   if (!token) {
-    console.log(`[Nuxt Users] server.middleware.auth.global: ${event.path} No token found redirecting to login`);
-    return sendRedirect(event, "/login");
+    if (event.path.startsWith("/api/")) {
+      console.log(`[Nuxt Users] server.middleware.auth.global: ${event.path} No token found - API request rejected`);
+      throw createError({ statusCode: 401, statusMessage: "Unauthorized" });
+    } else {
+      console.log(`[Nuxt Users] server.middleware.auth.global: ${event.path} No token found - letting client handle page redirect`);
+      return;
+    }
   }
   const user = await getCurrentUserFromToken(token, options);
   if (!user) {
-    console.log(`[Nuxt Users] server.middleware.auth.global: ${event.path} No user found redirecting to login`);
-    return sendRedirect(event, "/login");
+    if (event.path.startsWith("/api/")) {
+      console.log(`[Nuxt Users] server.middleware.auth.global: ${event.path} Invalid token - API request rejected`);
+      throw createError({ statusCode: 401, statusMessage: "Unauthorized" });
+    } else {
+      console.log(`[Nuxt Users] server.middleware.auth.global: ${event.path} Invalid token - letting client handle page redirect`);
+      return;
+    }
   }
-  if (!hasPermission(user.role, event.path, options.auth.permissions)) {
-    console.log(`[Nuxt Users] server.middleware.auth.global: ${event.path} User ${user.id} with role ${user.role} denied access`);
-    return sendRedirect(event, "/login");
+  if (!hasPermission(user.role, event.path, event.method, options.auth.permissions)) {
+    if (event.path.startsWith("/api/")) {
+      console.log(`[Nuxt Users] server.middleware.auth.global: ${event.path} User ${user.id} with role ${user.role} denied access - API request rejected`);
+      throw createError({ statusCode: 403, statusMessage: "Forbidden" });
+    } else {
+      console.log(`[Nuxt Users] server.middleware.auth.global: ${event.path} User ${user.id} with role ${user.role} denied access - letting client handle page redirect`);
+      return;
+    }
   }
   console.log(`[Nuxt Users] server.middleware.auth.global: Authenticated request to ${event.path} for ${user.id} with role ${user.role}`);
   return;

package/dist/runtime/server/utils/user.js

@@ -69,24 +69,26 @@ export const findUserById = async (id, options, withPass = false) => {
 export const updateUser = async (id, userData, options) => {
   const db = await useDb(options);
   const usersTable = options.tables.users;
-  const currentUser = await findUserById(id, options, true);
-  if (!currentUser) {
-    throw new Error("User not found.");
-  }
-  const fieldsToUpdate = { ...userData };
-  delete fieldsToUpdate.id;
-  delete fieldsToUpdate.password;
-  if (Object.keys(fieldsToUpdate).length === 0) {
-    const { password, ...user } = currentUser;
-    return user;
-  }
-  for (const [key, value] of Object.entries(fieldsToUpdate)) {
-    await db.sql`
-      UPDATE {${usersTable}}
-      SET ${key} = ${value}, updated_at = CURRENT_TIMESTAMP
-      WHERE id = ${id}
-    `;
-  }
+  const allowedFields = ["name", "email", "role"];
+  const updates = [];
+  const values = [];
+  for (const field of allowedFields) {
+    if (userData[field] !== void 0) {
+      updates.push(`${field} = ?`);
+      values.push(userData[field]);
+    }
+  }
+  if (updates.length === 0) {
+    const currentUser = await findUserById(id, options);
+    if (!currentUser) {
+      throw new Error("User not found.");
+    }
+    return currentUser;
+  }
+  updates.push("updated_at = CURRENT_TIMESTAMP");
+  values.push(id);
+  const setClause = updates.map((update) => update.replace(" = ?", "")).join(", ");
+  await db.sql`UPDATE {${usersTable}} SET {${setClause}} WHERE id = ${id}`;
   const updatedUser = await findUserById(id, options);
   if (!updatedUser) {
     throw new Error("Failed to retrieve updated user.");

package/dist/runtime/utils/permissions.d.ts

@@ -1,3 +1,4 @@
+import type { Permission } from '../../types.js';
 /**
  * Checks if a path matches a pattern (supports wildcards)
  * @param path - The path to check
@@ -6,13 +7,14 @@
  */
 export declare const pathMatchesPattern: (path: string, pattern: string) => boolean;
 /**
- * Checks if a user has permission to access a specific path
+ * Checks if a user has permission to access a specific path with a given method
  * @param userRole - The user's role
  * @param path - The path being accessed
+ * @param method - The HTTP method being used
  * @param permissions - The permissions configuration
- * @returns true if the user has permission to access the path
+ * @returns true if the user has permission
  */
-export declare const hasPermission: (userRole: string, path: string, permissions: Record<string, string[]>) => boolean;
+export declare const hasPermission: (userRole: string, path: string, method: string, permissions: Record<string, (string | Permission)[]>) => boolean;
 /**
  * Checks if a path is accessible without authentication
  * @param path - The path being accessed

package/dist/runtime/utils/permissions.js

@@ -7,7 +7,7 @@ export const pathMatchesPattern = (path, pattern) => {
   }
   if ((pattern.match(/\*/g) || []).length > 1) {
     const regexPattern = pattern.replace(/\*/g, "[^/]*");
-    const regex = new RegExp(`^${regexPattern}$`);
+    const regex = new RegExp(`^${regexPattern}`);
     return regex.test(path);
   }
   if (pattern.endsWith("/*")) {
@@ -16,12 +16,16 @@ export const pathMatchesPattern = (path, pattern) => {
   }
   if (pattern.includes("*")) {
     const regexPattern = pattern.replace(/\*/g, "[^/]*");
-    const regex = new RegExp(`^${regexPattern}$`);
+    const regex = new RegExp(`^${regexPattern}`);
     return regex.test(path);
   }
   return false;
 };
-export const hasPermission = (userRole, path, permissions) => {
+export const hasPermission = (userRole, path, method, permissions) => {
+  const safeMethods = ["OPTIONS", "HEAD", "TRACE"];
+  if (safeMethods.includes(method.toUpperCase())) {
+    return true;
+  }
   if (!permissions || Object.keys(permissions).length === 0) {
     return false;
   }
@@ -29,7 +33,19 @@ export const hasPermission = (userRole, path, permissions) => {
   if (!rolePermissions) {
     return false;
   }
-  return rolePermissions.some((pattern) => pathMatchesPattern(path, pattern));
+  return rolePermissions.some((permission) => {
+    if (typeof permission === "string") {
+      return pathMatchesPattern(path, permission);
+    }
+    if (typeof permission === "object" && permission.path && permission.methods) {
+      const pathMatches = pathMatchesPattern(path, permission.path);
+      if (!pathMatches) {
+        return false;
+      }
+      return permission.methods.some((allowedMethod) => allowedMethod.toUpperCase() === method.toUpperCase());
+    }
+    return false;
+  });
 };
 export const isWhitelisted = (path, whitelist) => {
   return whitelist.some((whitelistedPath) => pathMatchesPattern(path, whitelistedPath));

package/dist/shared/{nuxt-users.C7T1DKBV.d.ts → nuxt-users.u7N4meyI.d.mts}

@@ -1,4 +1,9 @@
 type DatabaseType = 'sqlite' | 'mysql' | 'postgresql';
+type HttpMethod = 'GET' | 'HEAD' | 'POST' | 'PUT' | 'DELETE' | 'CONNECT' | 'OPTIONS' | 'TRACE' | 'PATCH';
+type Permission = string | {
+    path: string;
+    methods: HttpMethod[];
+};
 type DatabaseConfig = {
     path?: string;
     host?: string;
@@ -58,7 +63,7 @@ interface RuntimeModuleOptions {
          *   moderator: ['/admin/*', '/api/admin/*']
          * }
          */
-        permissions?: Record<string, string[]>;
+        permissions?: Record<string, (string | Permission)[]>;
     };
     /**
      * Password validation configuration
@@ -113,7 +118,7 @@ interface ModuleOptions {
     auth: {
         whitelist: string[];
         tokenExpiration: number;
-        permissions: Record<string, string[]>;
+        permissions: Record<string, (string | Permission)[]>;
     };
     passwordValidation: {
         minLength: number;
@@ -144,6 +149,7 @@ interface User {
     role: string;
     created_at: string;
     updated_at: string;
+    last_login_at?: string;
 }
 type UserWithoutPassword = Omit<User, 'password'>;
 interface PersonalAccessToken {

package/dist/shared/{nuxt-users.C7T1DKBV.d.mts → nuxt-users.u7N4meyI.d.ts}

@@ -1,4 +1,9 @@
 type DatabaseType = 'sqlite' | 'mysql' | 'postgresql';
+type HttpMethod = 'GET' | 'HEAD' | 'POST' | 'PUT' | 'DELETE' | 'CONNECT' | 'OPTIONS' | 'TRACE' | 'PATCH';
+type Permission = string | {
+    path: string;
+    methods: HttpMethod[];
+};
 type DatabaseConfig = {
     path?: string;
     host?: string;
@@ -58,7 +63,7 @@ interface RuntimeModuleOptions {
          *   moderator: ['/admin/*', '/api/admin/*']
          * }
          */
-        permissions?: Record<string, string[]>;
+        permissions?: Record<string, (string | Permission)[]>;
     };
     /**
      * Password validation configuration
@@ -113,7 +118,7 @@ interface ModuleOptions {
     auth: {
         whitelist: string[];
         tokenExpiration: number;
-        permissions: Record<string, string[]>;
+        permissions: Record<string, (string | Permission)[]>;
     };
     passwordValidation: {
         minLength: number;
@@ -144,6 +149,7 @@ interface User {
     role: string;
     created_at: string;
     updated_at: string;
+    last_login_at?: string;
 }
 type UserWithoutPassword = Omit<User, 'password'>;
 interface PersonalAccessToken {

package/dist/utils.d.mts

@@ -1,5 +1,4 @@
-export { L as LoginFormData, M as ModuleOptions, b as PasswordResetToken, P as PersonalAccessToken, U as User, a as UserWithoutPassword } from './shared/nuxt-users.C7T1DKBV.mjs';
-export { findUserByEmail, getCurrentUserFromToken, getLastLoginTime } from '../dist/runtime/server/utils/user.js';
+export { L as LoginFormData, M as ModuleOptions, b as PasswordResetToken, P as PersonalAccessToken, U as User, a as UserWithoutPassword } from './shared/nuxt-users.u7N4meyI.mjs';
 
 interface PasswordValidationResult {
     isValid: boolean;

package/dist/utils.d.ts

@@ -1,5 +1,4 @@
-export { L as LoginFormData, M as ModuleOptions, b as PasswordResetToken, P as PersonalAccessToken, U as User, a as UserWithoutPassword } from './shared/nuxt-users.C7T1DKBV.js';
-export { findUserByEmail, getCurrentUserFromToken, getLastLoginTime } from '../dist/runtime/server/utils/user.js';
+export { L as LoginFormData, M as ModuleOptions, b as PasswordResetToken, P as PersonalAccessToken, U as User, a as UserWithoutPassword } from './shared/nuxt-users.u7N4meyI.js';
 
 interface PasswordValidationResult {
     isValid: boolean;

package/dist/utils.mjs

@@ -1,2 +1,162 @@
-export { a as getPasswordStrengthColor, b as getPasswordStrengthText, g as getPasswordValidationOptions, v as validatePassword } from './shared/nuxt-users.BnOQs2LI.mjs';
-export { findUserByEmail, getCurrentUserFromToken, getLastLoginTime } from '../dist/runtime/server/utils/user.js';
+const DEFAULT_OPTIONS = {
+  minLength: 8,
+  requireUppercase: true,
+  requireLowercase: true,
+  requireNumbers: true,
+  requireSpecialChars: true,
+  preventCommonPasswords: true
+};
+const getPasswordValidationOptions = (moduleOptions) => {
+  if (!moduleOptions?.passwordValidation) {
+    return DEFAULT_OPTIONS;
+  }
+  return {
+    ...DEFAULT_OPTIONS,
+    ...moduleOptions.passwordValidation
+  };
+};
+const COMMON_PASSWORDS = [
+  "password",
+  "123456",
+  "123456789",
+  "qwerty",
+  "abc123",
+  "password123",
+  "admin",
+  "letmein",
+  "welcome",
+  "monkey",
+  "dragon",
+  "master",
+  "hello",
+  "freedom",
+  "whatever",
+  "qazwsx",
+  "trustno1",
+  "jordan",
+  "harley",
+  "ranger",
+  "buster",
+  "thomas",
+  "tigger",
+  "robert",
+  "soccer",
+  "batman",
+  "test",
+  "pass",
+  "user",
+  "guest",
+  "login",
+  "secret",
+  "god",
+  "love",
+  "sex",
+  "money",
+  "password1",
+  "12345678",
+  "qwerty123",
+  "admin123",
+  "password!",
+  "password1!",
+  "password123",
+  "password123!"
+];
+const validatePassword = (password, options = {}) => {
+  const config = { ...DEFAULT_OPTIONS, ...options };
+  const errors = [];
+  const hints = [];
+  let score = 0;
+  if (password.length < config.minLength) {
+    errors.push(`Password must be at least ${config.minLength} characters long`);
+    hints.push(`Use at least ${config.minLength} characters`);
+  } else {
+    score += 20;
+    if (password.length < 12) {
+      hints.push("Use 12 or more characters for extra security");
+    }
+  }
+  if (config.requireUppercase && !/[A-Z]/.test(password)) {
+    errors.push("Password must contain at least one uppercase letter");
+    hints.push("Add an uppercase letter (A-Z)");
+  } else if (/[A-Z]/.test(password)) {
+    score += 15;
+  }
+  if (config.requireLowercase && !/[a-z]/.test(password)) {
+    errors.push("Password must contain at least one lowercase letter");
+    hints.push("Add a lowercase letter (a-z)");
+  } else if (/[a-z]/.test(password)) {
+    score += 15;
+  }
+  if (config.requireNumbers && !/\d/.test(password)) {
+    errors.push("Password must contain at least one number");
+    hints.push("Add a number (0-9)");
+  } else if (/\d/.test(password)) {
+    score += 15;
+  }
+  if (config.requireSpecialChars && !/[!@#$%^&*()_+\-=[\]{};':"\\|,.<>/?]/.test(password)) {
+    errors.push("Password must contain at least one special character");
+    hints.push("Add a special character (e.g. !@#$%)");
+  } else if (/[!@#$%^&*()_+\-=[\]{};':"\\|,.<>/?]/.test(password)) {
+    score += 15;
+  }
+  if (config.preventCommonPasswords && COMMON_PASSWORDS.includes(password.toLowerCase())) {
+    errors.push("Password is too common. Please choose a more unique password");
+    hints.push("Avoid common passwords or names");
+  }
+  if (password.length >= 12) {
+    score += 10;
+  } else if (password.length >= 10) {
+    score += 5;
+  }
+  const hasUppercase = /[A-Z]/.test(password);
+  const hasLowercase = /[a-z]/.test(password);
+  const hasNumbers = /\d/.test(password);
+  const hasSpecial = /[!@#$%^&*()_+\-=[\]{};':"\\|,.<>/?]/.test(password);
+  const complexityTypes = [hasUppercase, hasLowercase, hasNumbers, hasSpecial].filter(Boolean).length;
+  if (complexityTypes >= 4) {
+    score += 10;
+  } else if (complexityTypes >= 3) {
+    score += 5;
+    hints.push("Use a mix of uppercase, lowercase, numbers, and special characters");
+  }
+  let strength = "weak";
+  if (score >= 80) {
+    strength = "strong";
+  } else if (score >= 60) {
+    strength = "medium";
+  }
+  return {
+    isValid: errors.length === 0,
+    errors,
+    strength,
+    score: Math.min(score, 100),
+    hints: Array.from(new Set(hints))
+    // deduplicate
+  };
+};
+const getPasswordStrengthColor = (strength) => {
+  switch (strength) {
+    case "weak":
+      return "#dc3545";
+    case "medium":
+      return "#ffc107";
+    case "strong":
+      return "#28a745";
+    default:
+      return "#6c757d";
+  }
+};
+const getPasswordStrengthText = (strength) => {
+  switch (strength) {
+    case "weak":
+      return "Weak";
+    case "medium":
+      return "Medium";
+    case "strong":
+      return "Strong";
+    default:
+      return "Unknown";
+  }
+};
+
+export { getPasswordStrengthColor, getPasswordStrengthText, getPasswordValidationOptions, validatePassword };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nuxt-users",
-  "version": "1.11.0",
+  "version": "1.13.0",
   "description": "A comprehensive user management module for Nuxt 3 and Nuxt 4 applications with authentication, authorization, database support, and CLI tools",
   "keywords": [
     "nuxt",

package/dist/runtime/assets/colors.css

@@ -1 +0,0 @@
-:root{--color-primary:#60a5fa;--color-primary-dark:#3b82f6;--color-primary-light:#93c5fd;--color-secondary:#10b981;--color-secondary-dark:#059669;--color-secondary-light:#34d399;--color-white:#000;--color-black:#fff;--color-gray-50:#111827;--color-gray-100:#1f2937;--color-gray-200:#374151;--color-gray-300:#4b5563;--color-gray-400:#6b7280;--color-gray-500:#9ca3af;--color-gray-600:#d1d5db;--color-gray-700:#e5e7eb;--color-gray-800:#f3f4f6;--color-gray-900:#f9fafb;--color-success:#10b981;--color-success-light:#064e3b;--color-warning:#fbbf24;--color-warning-light:#451a03;--color-warning-text:#fef3c7;--color-error:#ef4444;--color-error-light:#450a0a;--color-error-border:#7f1d1d;--color-error-alt:#f87171;--color-border:#374151;--color-border-light:#4b5563;--color-border-dark:#6b7280;--color-bg-primary:#111827;--color-bg-secondary:#1f2937;--color-bg-tertiary:#374151}@media (prefers-color-scheme:light){.light,:root{--color-primary:#3b82f6;--color-primary-dark:#2563eb;--color-primary-light:#60a5fa;--color-secondary:#059669;--color-secondary-dark:#047857;--color-secondary-light:#10b981;--color-white:#fff;--color-black:#000;--color-gray-50:#f9fafb;--color-gray-100:#f3f4f6;--color-gray-200:#e5e7eb;--color-gray-300:#d1d5db;--color-gray-400:#9ca3af;--color-gray-500:#6b7280;--color-gray-600:#4b5563;--color-gray-700:#374151;--color-gray-800:#1f2937;--color-gray-900:#111827;--color-success:#059669;--color-success-light:#f0fdf4;--color-warning:#f59e0b;--color-warning-light:#fef3c7;--color-warning-text:#92400e;--color-error:#dc2626;--color-error-light:#fef2f2;--color-error-border:#fecaca;--color-error-alt:#db5050;--color-border:#e5e7eb;--color-border-light:#d1d5db;--color-border-dark:#ccc;--color-bg-primary:#fff;--color-bg-secondary:#f9fafb;--color-bg-tertiary:#f3f4f6}}