nuxt-users 1.22.0 → 1.23.1

package/CHANGELOG.md

@@ -1,6 +1,59 @@
 # Changelog
 
 
+## v1.23.1
+
+[compare changes](https://github.com/rrd108/nuxt-users/compare/v1.23.0...v1.23.1)
+
+### 🩹 Fixes
+
+- User patch sql error ([aa506dd](https://github.com/rrd108/nuxt-users/commit/aa506dd))
+
+### 💅 Refactors
+
+- Change css class name ([1bc28ba](https://github.com/rrd108/nuxt-users/commit/1bc28ba))
+
+### ✅ Tests
+
+- New test script added ([618b8dc](https://github.com/rrd108/nuxt-users/commit/618b8dc))
+
+### ❤️ Contributors
+
+- Rrd108 ([@rrd108](https://github.com/rrd108))
+
+## v1.23.0
+
+[compare changes](https://github.com/rrd108/nuxt-users/compare/v1.22.0...v1.23.0)
+
+### 🚀 Enhancements
+
+- Password reset url is configurable ([0a3d443](https://github.com/rrd108/nuxt-users/commit/0a3d443))
+- Adds programmatic access control ([8bb517a](https://github.com/rrd108/nuxt-users/commit/8bb517a))
+
+### 💅 Refactors
+
+- Vue SFC type resolution during module build ([533fa36](https://github.com/rrd108/nuxt-users/commit/533fa36))
+
+### 📖 Documentation
+
+- Reset-password page info added ([9b4e6c2](https://github.com/rrd108/nuxt-users/commit/9b4e6c2))
+
+### 🏡 Chore
+
+- Update ip ([3139eab](https://github.com/rrd108/nuxt-users/commit/3139eab))
+- Removes unused import ([61089b4](https://github.com/rrd108/nuxt-users/commit/61089b4))
+- Unused imort removed ([3f3012f](https://github.com/rrd108/nuxt-users/commit/3f3012f))
+- Remove unsued import ([ae1f4e3](https://github.com/rrd108/nuxt-users/commit/ae1f4e3))
+- **release:** V1.22.0 ([914844f](https://github.com/rrd108/nuxt-users/commit/914844f))
+
+### ✅ Tests
+
+- Fix test cases ([844c3a7](https://github.com/rrd108/nuxt-users/commit/844c3a7))
+
+### ❤️ Contributors
+
+- Rrd108 ([@rrd108](https://github.com/rrd108))
+
 ## v1.22.0
 
 [compare changes](https://github.com/rrd108/nuxt-users/compare/v1.21.0...v1.22.0)

package/dist/module.json

@@ -1,7 +1,7 @@
 {
   "name": "nuxt-users",
   "configKey": "nuxtUsers",
-  "version": "1.22.0",
+  "version": "1.23.1",
   "builder": {
     "@nuxt/module-builder": "1.0.2",
     "unbuild": "3.6.0"

package/dist/runtime/components/NUsersLoginForm.vue

@@ -172,7 +172,7 @@ const handleForgotPassword = async () => {
       >
         <div
           v-if="forgotPasswordMessage"
-          class="success-message"
+          class="n-users-success-message"
         >
           {{ forgotPasswordMessage }}
         </div>
@@ -185,7 +185,7 @@ const handleForgotPassword = async () => {
       >
         <div
           v-if="error"
-          class="error-message"
+          class="n-users-error-message"
         >
           {{ error }}
         </div>

package/dist/runtime/components/NUsersLogoutLink.vue

@@ -45,7 +45,7 @@ const handleLogout = async (event) => {
 
 <template>
   <div
-    :class="['logout-container', props.containerClass]"
+    :class="['n-users-logout-container', props.containerClass]"
     :style="props.containerStyle"
   >
     <div

package/dist/runtime/composables/usePublicPaths.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Composable to get public paths and accessible paths for current user
+ * @returns Object containing different categories of accessible paths
+ */
+export declare const usePublicPaths: () => {
+    getPublicPaths: () => {
+        all: any[];
+        builtIn: {
+            pages: string[];
+            api: string[];
+        };
+        whitelist: any;
+        customPasswordResetPath: any;
+        apiBasePath: any;
+    };
+    getAccessiblePaths: () => {
+        all: any[];
+        public: any[];
+        roleBasedPaths: string[];
+        userRole: any;
+    };
+    isPublicPath: (path: string) => boolean;
+    isAccessiblePath: (path: string, method?: string) => boolean;
+};

package/dist/runtime/composables/usePublicPaths.js

@@ -0,0 +1,114 @@
+import { useRuntimeConfig } from "#app";
+import { NO_AUTH_PATHS, NO_AUTH_API_PATHS } from "../constants.js";
+import { hasPermission, isWhitelisted } from "../utils/permissions.js";
+import { useAuthentication } from "./useAuthentication.js";
+export const usePublicPaths = () => {
+  const { public: { nuxtUsers } } = useRuntimeConfig();
+  const config = nuxtUsers;
+  const apiBasePath = config.apiBasePath || "/api/nuxt-users";
+  const { user } = useAuthentication();
+  const getPublicPaths = () => {
+    const noAuthPaths = [...NO_AUTH_PATHS];
+    const noAuthApiPaths = NO_AUTH_API_PATHS.map((path) => `${apiBasePath}${path}`);
+    const whitelistedPaths = config.auth?.whitelist || [];
+    const customPasswordResetPath = config.passwordResetUrl && config.passwordResetUrl !== "/reset-password" ? config.passwordResetUrl : null;
+    const allPublicPaths = [
+      ...noAuthPaths,
+      ...noAuthApiPaths,
+      ...whitelistedPaths
+    ];
+    if (customPasswordResetPath) {
+      allPublicPaths.push(customPasswordResetPath);
+    }
+    return {
+      // All truly public paths (no auth required)
+      all: allPublicPaths,
+      // Categorized public paths
+      builtIn: {
+        pages: noAuthPaths,
+        api: noAuthApiPaths
+      },
+      whitelist: whitelistedPaths,
+      customPasswordResetPath,
+      apiBasePath
+    };
+  };
+  const getAccessiblePaths = () => {
+    const publicPaths = getPublicPaths();
+    if (!user.value) {
+      return {
+        all: publicPaths.all,
+        public: publicPaths.all,
+        roleBasedPaths: [],
+        userRole: null
+      };
+    }
+    const userRole = user.value.role;
+    const permissions = config.auth?.permissions || {};
+    const rolePermissions = permissions[userRole] || [];
+    const roleBasedPaths = [];
+    rolePermissions.forEach((permission) => {
+      if (typeof permission === "string") {
+        roleBasedPaths.push(permission);
+      } else if (typeof permission === "object" && permission.path) {
+        roleBasedPaths.push(permission.path);
+      }
+    });
+    return {
+      all: [...publicPaths.all, ...roleBasedPaths],
+      public: publicPaths.all,
+      roleBasedPaths,
+      userRole
+    };
+  };
+  const isAccessiblePath = (path, method = "GET") => {
+    if (path.includes(".")) {
+      return true;
+    }
+    if (path.startsWith("/_")) {
+      return true;
+    }
+    if (NO_AUTH_PATHS.includes(path)) {
+      return true;
+    }
+    const noAuthApiPaths = NO_AUTH_API_PATHS.map((p) => `${apiBasePath}${p}`);
+    if (noAuthApiPaths.includes(path)) {
+      return true;
+    }
+    if (config.passwordResetUrl && config.passwordResetUrl !== "/reset-password" && path === config.passwordResetUrl) {
+      return true;
+    }
+    if (isWhitelisted(path, config.auth?.whitelist || [])) {
+      return true;
+    }
+    if (user.value) {
+      return hasPermission(user.value.role, path, method, config.auth?.permissions || {});
+    }
+    return false;
+  };
+  const isPublicPath = (path) => {
+    if (path.includes(".")) {
+      return true;
+    }
+    if (path.startsWith("/_")) {
+      return true;
+    }
+    if (NO_AUTH_PATHS.includes(path)) {
+      return true;
+    }
+    const noAuthApiPaths = NO_AUTH_API_PATHS.map((p) => `${apiBasePath}${p}`);
+    if (noAuthApiPaths.includes(path)) {
+      return true;
+    }
+    if (config.passwordResetUrl && config.passwordResetUrl !== "/reset-password" && path === config.passwordResetUrl) {
+      return true;
+    }
+    return isWhitelisted(path, config.auth?.whitelist || []);
+  };
+  return {
+    getPublicPaths,
+    getAccessiblePaths,
+    isPublicPath,
+    isAccessiblePath
+  };
+};

package/dist/runtime/server/utils/user.js

@@ -72,28 +72,21 @@ export const updateUser = async (id, userData, options) => {
   const db = await useDb(options);
   const usersTable = options.tables.users;
   const allowedFields = ["name", "email", "role", "active"];
-  const updates = [];
-  const values = [];
-  for (const field of allowedFields) {
-    if (userData[field] !== void 0) {
-      updates.push(`${field} = ?`);
-      values.push(userData[field]);
-    }
-  }
-  if (userData.active === false) {
-    await revokeUserTokens(id, options);
-  }
-  if (updates.length === 0) {
+  const fieldsToUpdate = allowedFields.filter((field) => userData[field] !== void 0);
+  if (fieldsToUpdate.length === 0) {
     const currentUser = await findUserById(id, options);
     if (!currentUser) {
       throw new Error("User not found.");
     }
     return currentUser;
   }
-  updates.push("updated_at = CURRENT_TIMESTAMP");
-  values.push(id);
-  const setClause = updates.map((update) => update.replace(" = ?", "")).join(", ");
-  await db.sql`UPDATE {${usersTable}} SET {${setClause}} WHERE id = ${id}`;
+  if (userData.active === false) {
+    await revokeUserTokens(id, options);
+  }
+  for (const field of fieldsToUpdate) {
+    await db.sql`UPDATE {${usersTable}} SET {${field}} = ${userData[field]} WHERE id = ${id}`;
+  }
+  await db.sql`UPDATE {${usersTable}} SET updated_at = CURRENT_TIMESTAMP WHERE id = ${id}`;
   const updatedUser = await findUserById(id, options);
   if (!updatedUser) {
     throw new Error("Failed to retrieve updated user.");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nuxt-users",
-  "version": "1.22.0",
+  "version": "1.23.1",
   "description": "A comprehensive user management module for Nuxt 3 and Nuxt 4 applications with authentication, authorization, database support, and CLI tools",
   "keywords": [
     "nuxt",
@@ -66,6 +66,7 @@
     "lint": "eslint .",
     "lint:fix": "eslint . --fix",
     "pretest": "node -v | grep -q 'v22' || (echo 'Please use Node.js v22 for testing' && exit 1)",
+    "test:release": "yarn test:types && yarn test:unit && yarn test:sqlite && yarn build && yarn lint:fix",
     "test:types": "yarn dev:prepare && vue-tsc --noEmit && cd playground && vue-tsc --noEmit",
     "test:unit": "./scripts/test-unit.sh",
     "test:sqlite": "./scripts/test-sqlite.sh",