nuxt-users 1.12.0 → 1.13.0

package/CHANGELOG.md

@@ -1,6 +1,41 @@
 # Changelog
 
 
+## v1.13.0
+
+[compare changes](https://github.com/rrd108/nuxt-users/compare/v1.12.0...v1.13.0)
+
+### 🚀 Enhancements
+
+- Enhances user management and login flow ([894563a](https://github.com/rrd108/nuxt-users/commit/894563a))
+- Implement new components ([87689c9](https://github.com/rrd108/nuxt-users/commit/87689c9))
+- Define allowed HTTP methods for api endpoints permissions ([7feca0a](https://github.com/rrd108/nuxt-users/commit/7feca0a))
+- New api endpoint for user edit own data is added ([3bd13f9](https://github.com/rrd108/nuxt-users/commit/3bd13f9))
+
+### 🩹 Fixes
+
+- Authorization middleware for API routes closes #76 ([#76](https://github.com/rrd108/nuxt-users/issues/76))
+- (temporary) strange test failing ([ff8c376](https://github.com/rrd108/nuxt-users/commit/ff8c376))
+
+### 💅 Refactors
+
+- Component names ([159f334](https://github.com/rrd108/nuxt-users/commit/159f334))
+- Css classes renamed, removed or added ([c5c3334](https://github.com/rrd108/nuxt-users/commit/c5c3334))
+- Remove unused css ([7abc8a5](https://github.com/rrd108/nuxt-users/commit/7abc8a5))
+
+### 🏡 Chore
+
+- **release:** V1.12.0 ([0727c0f](https://github.com/rrd108/nuxt-users/commit/0727c0f))
+
+### ✅ Tests
+
+- Fix ([cbf300c](https://github.com/rrd108/nuxt-users/commit/cbf300c))
+- Fix failing test ([3973eec](https://github.com/rrd108/nuxt-users/commit/3973eec))
+
+### ❤️ Contributors
+
+- Rrd108 ([@rrd108](https://github.com/rrd108))
+
 ## v1.12.0
 
 [compare changes](https://github.com/rrd108/nuxt-users/compare/v1.11.0...v1.12.0)

package/README.md

@@ -4,68 +4,36 @@ A user authentication module for Nuxt 3 and Nuxt 4 with database support for SQL
 
 ## Features
 
-- 🔐 User authentication with bcrypt password hashing
-- 🗄️ Database support (SQLite, MySQL, PostgreSQL)
-- 🛠️ CLI commands for database management
-- 🔑 Password Reset Functionality
-- 📦 Zero-config setup with sensible defaults
-- 🔧 TypeScript support
-- 🚀 Nuxt 3 & 4 compatibility
-
-## Quick Start
-
-```bash
-# Install the module
-npm install nuxt-users
-
-# Add to your nuxt.config.ts
-export default defineNuxtConfig({
-  modules: ['nuxt-users'],
-  nuxtUsers: {
-    connector: {
-      name: 'sqlite',
-      options: {
-        path: './data/default.sqlite3'
-      }
-    }
-  }
-})
-
-# Run migrations
-npx nuxt-users migrate
-
-# Create your first user
-npx nuxt-users create-user user@example.com "John Doe" password123
-# Create an admin user
-npx nuxt-users create-user admin@example.com "Admin User" adminpass123 admin
-```
+- 🔐 **Authentication & Security**
+  - User registration, login, and logout
+  - Secure password hashing with bcrypt
+  - Password reset functionality
+  - Session management
+
+- 🗄️ **Database Support**
+  - SQLite, MySQL, and PostgreSQL
+  - Automatic migrations and schema management
+  - CLI tools for database operations
+
+- 🛡️ **Access Control**
+  - Role-Based Access Control (RBAC)
+  - Middleware for route protection
+  - Permission-based authorization
+
+- 🎨 **UI Components**
+  - Pre-built authentication forms
+  - User management interfaces
+  - Responsive and customizable components
+
+- ⚡ **Developer Experience**
+  - Zero-config setup with sensible defaults
+  - TypeScript support throughout
+  - Nuxt 3 & 4 compatibility
+  - Easy customization and extension
 
 ## Documentation
 
-📚 **Full documentation is available at: [docs/](/docs/)**
-
-- [Installation Guide](/docs/guide/installation)
-- [Configuration Options](/docs/guide/configuration)
-- [API Reference](/docs/api/)
-- [Component Documentation](/docs/components/)
-- [Database Schema](/docs/database/schema)
-- [Contributing Guidelines](/docs/contributing/)
-
-## Development
-
-```bash
-# Install dependencies
-yarn install
-
-# Start development server
-yarn dev
-
-# Run tests
-yarn test
-
-# Build documentation
-cd docs && yarn dev
-```
+📚 **Full documentation is available at: [https://nuxt-users.webmania.cc/](https://nuxt-users.webmania.cc/)**
 
 ## License
 

package/dist/cli.mjs

@@ -247,7 +247,7 @@ const main = defineCommand({
   meta: {
     name: "nuxt-users",
     description: "CLI for Nuxt Users Module - Manage users, migrations, and database operations",
-    version: "1.11.0"
+    version: "1.12.0"
   },
   subCommands: {
     migrate,

package/dist/module.d.mts

@@ -1,5 +1,5 @@
 import * as _nuxt_schema from '@nuxt/schema';
-import { R as RuntimeModuleOptions, M as ModuleOptions } from './shared/nuxt-users.B5ttEpIO.mjs';
+import { R as RuntimeModuleOptions, M as ModuleOptions } from './shared/nuxt-users.u7N4meyI.mjs';
 export * from '../dist/runtime/server/utils/index.js';
 
 declare const defaultOptions: ModuleOptions;

package/dist/module.d.ts

@@ -1,5 +1,5 @@
 import * as _nuxt_schema from '@nuxt/schema';
-import { R as RuntimeModuleOptions, M as ModuleOptions } from './shared/nuxt-users.B5ttEpIO.js';
+import { R as RuntimeModuleOptions, M as ModuleOptions } from './shared/nuxt-users.u7N4meyI.js';
 export * from '../dist/runtime/server/utils/index.js';
 
 declare const defaultOptions: ModuleOptions;

package/dist/module.json

@@ -1,7 +1,7 @@
 {
   "name": "nuxt-users",
   "configKey": "nuxtUsers",
-  "version": "1.12.0",
+  "version": "1.13.0",
   "builder": {
     "@nuxt/module-builder": "1.0.2",
     "unbuild": "3.6.0"

package/dist/module.mjs

@@ -115,6 +115,11 @@ const module = defineNuxtModule({
       method: "get",
       handler: resolver.resolve("./runtime/server/api/nuxt-users/me.get")
     });
+    addServerHandler({
+      route: `${base}/me`,
+      method: "patch",
+      handler: resolver.resolve("./runtime/server/api/nuxt-users/me.patch")
+    });
     addServerHandler({
       route: `${base}/password`,
       method: "patch",

package/dist/runtime/middleware/authorization.client.js

@@ -23,7 +23,7 @@ export default defineNuxtRouteMiddleware((to) => {
     console.log(`[Nuxt Users] client.middleware.auth.global: Unauthenticated ${to.path}, redirecting to /login`);
     return navigateTo("/login");
   }
-  if (!user.value || !hasPermission(user.value.role, to.path, publicOptions.auth.permissions)) {
+  if (!user.value || !hasPermission(user.value.role, to.path, "GET", publicOptions.auth.permissions)) {
     console.log(`[Nuxt Users] client.middleware.auth.global: User with role ${user.value?.role} denied access to ${to.path}`);
     return navigateTo("/login");
   }

package/dist/runtime/server/api/nuxt-users/me.patch.d.ts

@@ -0,0 +1,4 @@
+declare const _default: import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<{
+    user: import("../../../../types.js").UserWithoutPassword;
+}>>;
+export default _default;

package/dist/runtime/server/api/nuxt-users/me.patch.js

@@ -0,0 +1,33 @@
+import { createError, defineEventHandler, readBody } from "h3";
+import { useRuntimeConfig } from "#imports";
+import { updateUser } from "../../utils/user.js";
+export default defineEventHandler(async (event) => {
+  const { nuxtUsers } = useRuntimeConfig();
+  const options = nuxtUsers;
+  const user = event.context.user;
+  if (!user) {
+    throw createError({
+      statusCode: 401,
+      statusMessage: "Unauthorized"
+    });
+  }
+  const body = await readBody(event);
+  if (body.role) {
+    delete body.role;
+  }
+  try {
+    const updatedUser = await updateUser(user.id, body, options);
+    return { user: updatedUser };
+  } catch (error) {
+    if (error instanceof Error) {
+      throw createError({
+        statusCode: 400,
+        statusMessage: error.message
+      });
+    }
+    throw createError({
+      statusCode: 400,
+      statusMessage: "An unknown error occurred"
+    });
+  }
+});

package/dist/runtime/server/middleware/authorization.server.js

@@ -43,7 +43,7 @@ export default defineEventHandler(async (event) => {
       return;
     }
   }
-  if (!hasPermission(user.role, event.path, options.auth.permissions)) {
+  if (!hasPermission(user.role, event.path, event.method, options.auth.permissions)) {
     if (event.path.startsWith("/api/")) {
       console.log(`[Nuxt Users] server.middleware.auth.global: ${event.path} User ${user.id} with role ${user.role} denied access - API request rejected`);
       throw createError({ statusCode: 403, statusMessage: "Forbidden" });

package/dist/runtime/server/utils/user.js

@@ -69,27 +69,26 @@ export const findUserById = async (id, options, withPass = false) => {
 export const updateUser = async (id, userData, options) => {
   const db = await useDb(options);
   const usersTable = options.tables.users;
-  const currentUser = await findUserById(id, options);
-  if (!currentUser) {
-    throw new Error("User not found.");
-  }
-  const fieldsToUpdate = { ...userData };
-  delete fieldsToUpdate.id;
-  delete fieldsToUpdate.created_at;
-  delete fieldsToUpdate.updated_at;
-  delete fieldsToUpdate.last_login_at;
-  delete fieldsToUpdate.password;
-  if (Object.keys(fieldsToUpdate).length === 0) {
+  const allowedFields = ["name", "email", "role"];
+  const updates = [];
+  const values = [];
+  for (const field of allowedFields) {
+    if (userData[field] !== void 0) {
+      updates.push(`${field} = ?`);
+      values.push(userData[field]);
+    }
+  }
+  if (updates.length === 0) {
+    const currentUser = await findUserById(id, options);
+    if (!currentUser) {
+      throw new Error("User not found.");
+    }
     return currentUser;
   }
-  const dirtyFields = Object.keys(fieldsToUpdate).filter((key) => currentUser[key] != fieldsToUpdate[key]);
-  for (const key of dirtyFields) {
-    await db.sql`
-      UPDATE {${usersTable}}
-      SET {${key}} = ${fieldsToUpdate[key]}, updated_at = CURRENT_TIMESTAMP
-      WHERE id = ${id}
-    `;
-  }
+  updates.push("updated_at = CURRENT_TIMESTAMP");
+  values.push(id);
+  const setClause = updates.map((update) => update.replace(" = ?", "")).join(", ");
+  await db.sql`UPDATE {${usersTable}} SET {${setClause}} WHERE id = ${id}`;
   const updatedUser = await findUserById(id, options);
   if (!updatedUser) {
     throw new Error("Failed to retrieve updated user.");

package/dist/runtime/utils/permissions.d.ts

@@ -1,3 +1,4 @@
+import type { Permission } from '../../types.js';
 /**
  * Checks if a path matches a pattern (supports wildcards)
  * @param path - The path to check
@@ -6,13 +7,14 @@
  */
 export declare const pathMatchesPattern: (path: string, pattern: string) => boolean;
 /**
- * Checks if a user has permission to access a specific path
+ * Checks if a user has permission to access a specific path with a given method
  * @param userRole - The user's role
  * @param path - The path being accessed
+ * @param method - The HTTP method being used
  * @param permissions - The permissions configuration
- * @returns true if the user has permission to access the path
+ * @returns true if the user has permission
  */
-export declare const hasPermission: (userRole: string, path: string, permissions: Record<string, string[]>) => boolean;
+export declare const hasPermission: (userRole: string, path: string, method: string, permissions: Record<string, (string | Permission)[]>) => boolean;
 /**
  * Checks if a path is accessible without authentication
  * @param path - The path being accessed

package/dist/runtime/utils/permissions.js

@@ -7,7 +7,7 @@ export const pathMatchesPattern = (path, pattern) => {
   }
   if ((pattern.match(/\*/g) || []).length > 1) {
     const regexPattern = pattern.replace(/\*/g, "[^/]*");
-    const regex = new RegExp(`^${regexPattern}$`);
+    const regex = new RegExp(`^${regexPattern}`);
     return regex.test(path);
   }
   if (pattern.endsWith("/*")) {
@@ -16,12 +16,16 @@ export const pathMatchesPattern = (path, pattern) => {
   }
   if (pattern.includes("*")) {
     const regexPattern = pattern.replace(/\*/g, "[^/]*");
-    const regex = new RegExp(`^${regexPattern}$`);
+    const regex = new RegExp(`^${regexPattern}`);
     return regex.test(path);
   }
   return false;
 };
-export const hasPermission = (userRole, path, permissions) => {
+export const hasPermission = (userRole, path, method, permissions) => {
+  const safeMethods = ["OPTIONS", "HEAD", "TRACE"];
+  if (safeMethods.includes(method.toUpperCase())) {
+    return true;
+  }
   if (!permissions || Object.keys(permissions).length === 0) {
     return false;
   }
@@ -29,7 +33,19 @@ export const hasPermission = (userRole, path, permissions) => {
   if (!rolePermissions) {
     return false;
   }
-  return rolePermissions.some((pattern) => pathMatchesPattern(path, pattern));
+  return rolePermissions.some((permission) => {
+    if (typeof permission === "string") {
+      return pathMatchesPattern(path, permission);
+    }
+    if (typeof permission === "object" && permission.path && permission.methods) {
+      const pathMatches = pathMatchesPattern(path, permission.path);
+      if (!pathMatches) {
+        return false;
+      }
+      return permission.methods.some((allowedMethod) => allowedMethod.toUpperCase() === method.toUpperCase());
+    }
+    return false;
+  });
 };
 export const isWhitelisted = (path, whitelist) => {
   return whitelist.some((whitelistedPath) => pathMatchesPattern(path, whitelistedPath));

package/dist/shared/{nuxt-users.B5ttEpIO.d.mts → nuxt-users.u7N4meyI.d.mts}

@@ -1,4 +1,9 @@
 type DatabaseType = 'sqlite' | 'mysql' | 'postgresql';
+type HttpMethod = 'GET' | 'HEAD' | 'POST' | 'PUT' | 'DELETE' | 'CONNECT' | 'OPTIONS' | 'TRACE' | 'PATCH';
+type Permission = string | {
+    path: string;
+    methods: HttpMethod[];
+};
 type DatabaseConfig = {
     path?: string;
     host?: string;
@@ -58,7 +63,7 @@ interface RuntimeModuleOptions {
          *   moderator: ['/admin/*', '/api/admin/*']
          * }
          */
-        permissions?: Record<string, string[]>;
+        permissions?: Record<string, (string | Permission)[]>;
     };
     /**
      * Password validation configuration
@@ -113,7 +118,7 @@ interface ModuleOptions {
     auth: {
         whitelist: string[];
         tokenExpiration: number;
-        permissions: Record<string, string[]>;
+        permissions: Record<string, (string | Permission)[]>;
     };
     passwordValidation: {
         minLength: number;

package/dist/shared/{nuxt-users.B5ttEpIO.d.ts → nuxt-users.u7N4meyI.d.ts}

@@ -1,4 +1,9 @@
 type DatabaseType = 'sqlite' | 'mysql' | 'postgresql';
+type HttpMethod = 'GET' | 'HEAD' | 'POST' | 'PUT' | 'DELETE' | 'CONNECT' | 'OPTIONS' | 'TRACE' | 'PATCH';
+type Permission = string | {
+    path: string;
+    methods: HttpMethod[];
+};
 type DatabaseConfig = {
     path?: string;
     host?: string;
@@ -58,7 +63,7 @@ interface RuntimeModuleOptions {
          *   moderator: ['/admin/*', '/api/admin/*']
          * }
          */
-        permissions?: Record<string, string[]>;
+        permissions?: Record<string, (string | Permission)[]>;
     };
     /**
      * Password validation configuration
@@ -113,7 +118,7 @@ interface ModuleOptions {
     auth: {
         whitelist: string[];
         tokenExpiration: number;
-        permissions: Record<string, string[]>;
+        permissions: Record<string, (string | Permission)[]>;
     };
     passwordValidation: {
         minLength: number;

package/dist/utils.d.mts

@@ -1,4 +1,4 @@
-export { L as LoginFormData, M as ModuleOptions, b as PasswordResetToken, P as PersonalAccessToken, U as User, a as UserWithoutPassword } from './shared/nuxt-users.B5ttEpIO.mjs';
+export { L as LoginFormData, M as ModuleOptions, b as PasswordResetToken, P as PersonalAccessToken, U as User, a as UserWithoutPassword } from './shared/nuxt-users.u7N4meyI.mjs';
 
 interface PasswordValidationResult {
     isValid: boolean;

package/dist/utils.d.ts

@@ -1,4 +1,4 @@
-export { L as LoginFormData, M as ModuleOptions, b as PasswordResetToken, P as PersonalAccessToken, U as User, a as UserWithoutPassword } from './shared/nuxt-users.B5ttEpIO.js';
+export { L as LoginFormData, M as ModuleOptions, b as PasswordResetToken, P as PersonalAccessToken, U as User, a as UserWithoutPassword } from './shared/nuxt-users.u7N4meyI.js';
 
 interface PasswordValidationResult {
     isValid: boolean;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nuxt-users",
-  "version": "1.12.0",
+  "version": "1.13.0",
   "description": "A comprehensive user management module for Nuxt 3 and Nuxt 4 applications with authentication, authorization, database support, and CLI tools",
   "keywords": [
     "nuxt",