nuxt-users 1.40.1 → 1.41.0

package/dist/cli.mjs

@@ -5,7 +5,7 @@ import { defaultOptions } from './module.mjs';
 import { loadNuxt } from '@nuxt/kit';
 import { defu } from 'defu';
 import { runMigrations, createUser as createUser$1, createUsersTable as createUsersTable$1, createPersonalAccessTokensTable as createPersonalAccessTokensTable$1, createPasswordResetTokensTable as createPasswordResetTokensTable$1, createMigrationsTable as createMigrationsTable$1, useDb, checkTableExists, getAppliedMigrations } from '../dist/runtime/server/utils/index.js';
-import { g as getPasswordValidationOptions, v as validatePassword } from './shared/nuxt-users.DfZ7bc_P.mjs';
+import { g as getPasswordValidationOptions, v as validatePassword } from './shared/nuxt-users.Cvjgn5KJ.mjs';
 import '../dist/runtime/locales/index.js';
 import '../dist/runtime/utils/locale.js';
 import '../dist/runtime/utils/deep-merge.js';

package/dist/module.json

@@ -4,7 +4,7 @@
   "compatibility": {
     "nuxt": ">=3.0.0"
   },
-  "version": "1.40.1",
+  "version": "1.41.0",
   "builder": {
     "@nuxt/module-builder": "1.0.2",
     "unbuild": "3.6.1"

package/dist/module.mjs

@@ -162,6 +162,10 @@ const module$1 = defineNuxtModule({
       src: resolver.resolve("./runtime/plugin.auth-init"),
       name: "0-auth-init-nuxt-users"
     });
+    addPlugin({
+      src: resolver.resolve("./runtime/plugin.theme"),
+      mode: "client"
+    });
     addPlugin({
       src: resolver.resolve("./runtime/plugin"),
       mode: "server"

package/dist/runtime/assets/nuxt-users.css

@@ -1 +1 @@
-:root{--nu-color-primary:#3b82f6;--nu-color-primary-dark:#2563eb;--nu-color-primary-light:#60a5fa;--nu-color-white:#fff;--nu-color-gray-50:#f9fafb;--nu-color-gray-500:#6b7280;--nu-color-gray-600:#4b5563;--nu-color-gray-700:#374151;--nu-color-gray-900:#111827;--nu-color-success:#059669;--nu-color-success-light:#f0fdf4;--nu-color-success-border:#9ae6b4;--nu-color-success-text:#047857;--nu-color-error:#dc2626;--nu-color-error-light:#fef2f2;--nu-color-error-border:#fecaca;--nu-color-error-alt:#db5050;--nu-color-error-dark:#b91c1c;--nu-color-border:#e5e7eb;--nu-color-border-light:#d1d5db;--nu-color-border-dark:#ccc;--nu-color-bg-primary:#fff;--nu-color-bg-secondary:#f9fafb;--nu-color-bg-tertiary:#f3f4f6;--nu-color-text-primary:#000;--nu-color-text-secondary:#6b7280;--nu-color-strength-bg:#e9ecef;--nu-color-validation-passed:#15803d;--nu-color-validation-failed:#dc3545;--nu-color-validation-hint:#6c757d}.dark :root{--nu-color-primary:#60a5fa;--nu-color-primary-dark:#3b82f6;--nu-color-primary-light:#93c5fd;--nu-color-white:#000;--nu-color-gray-50:#111827;--nu-color-gray-500:#9ca3af;--nu-color-gray-600:#d1d5db;--nu-color-gray-700:#e5e7eb;--nu-color-gray-900:#f9fafb;--nu-color-success:#10b981;--nu-color-success-light:#064e3b;--nu-color-success-border:#065f46;--nu-color-success-text:#6ee7b7;--nu-color-error:#ef4444;--nu-color-error-light:#450a0a;--nu-color-error-border:#7f1d1d;--nu-color-error-alt:#f87171;--nu-color-error-dark:#dc2626;--nu-color-border:#374151;--nu-color-border-light:#4b5563;--nu-color-border-dark:#6b7280;--nu-color-bg-primary:#111827;--nu-color-bg-secondary:#1f2937;--nu-color-bg-tertiary:#374151;--nu-color-text-primary:#fff;--nu-color-text-secondary:#9ca3af;--nu-color-strength-bg:#374151;--nu-color-validation-passed:#22c55e;--nu-color-validation-failed:#ef4444;--nu-color-validation-hint:#9ca3af}.n-users-form-group{display:flex;flex-direction:column;gap:.5rem;margin-bottom:1rem;width:100%}.n-users-form-group.n-users-form-group-narrow{width:90%}.n-users-form-group label,.n-users-form-label{color:var(--nu-color-text-primary,#000);display:block;font-size:1rem;font-weight:500;margin-bottom:.5rem}.n-users-form-group input,.n-users-form-group select,.n-users-form-input{border:1px solid var(--nu-color-border,#ccc);border-radius:.25rem;font-size:1rem;padding:.5rem;transition:border-color .2s,box-shadow .2s;width:100%}.n-users-form-group input:focus,.n-users-form-group select:focus,.n-users-form-input:focus{border-color:var(--nu-color-primary);box-shadow:0 0 0 .1rem rgba(59,130,246,.1);outline:none}.n-users-form-group input:disabled,.n-users-form-input:disabled{background-color:var(--nu-color-bg-secondary,#f9fafb);cursor:not-allowed}.n-users-form-group input.error,.n-users-form-input.error{border-color:var(--nu-color-error,#dc3545)}.n-users-form-group input[type=email],.n-users-form-group input[type=password],.n-users-form-group input[type=text]{background-color:var(--nu-color-bg-secondary);border:1px solid var(--nu-color-border-light);border-radius:.5em;box-sizing:border-box;color:var(--nu-color-gray-700);font-size:.875rem;padding:.75em 1em;transition:all .2s ease-in-out;width:100%}.n-users-form-group input[type=email]:focus,.n-users-form-group input[type=password]:focus,.n-users-form-group input[type=text]:focus{background-color:var(--nu-color-bg-primary);border-color:var(--nu-color-primary);box-shadow:0 0 0 3px rgba(59,130,246,.1);outline:none}.n-users-form-group input[type=checkbox]{margin:0;width:auto}.n-users-google-btn{align-items:center;border:none;border-radius:.25rem;cursor:pointer;display:inline-flex;font-size:1rem;font-weight:500;gap:8px;justify-content:center;padding:.5rem 1rem;text-decoration:none;transition:background-color .2s,transform .1s}.n-users-google-logo{flex-shrink:0}.n-users-btn,.n-users-cancel-btn,.n-users-delete-btn,.n-users-edit-btn,.n-users-submit-btn{align-self:flex-start;border:none;border-radius:.25rem;cursor:pointer;display:inline-block;font-size:1rem;font-weight:500;padding:.5rem 1rem;text-decoration:none;transition:background-color .2s,transform .1s}.n-users-btn:hover,.n-users-edit-btn:hover,.n-users-submit-btn:hover{background-color:var(--nu-color-primary-dark,#2563eb);transform:translateY(-1px)}.n-users-btn:disabled,.n-users-submit-btn:disabled{cursor:not-allowed;opacity:.6;transform:none}.n-users-btn-primary,.n-users-edit-btn,.n-users-submit-btn{background-color:var(--nu-color-primary,#3b82f6);color:#fff}.n-users-btn-secondary,.n-users-cancel-btn{background-color:var(--nu-color-gray-600,#4b5563);color:#fff}.n-users-cancel-btn:hover{background-color:var(--nu-color-gray-700,#374151)}.n-users-delete-btn{background-color:var(--nu-color-error-dark,#b91c1c);color:#fff}.n-users-delete-btn:hover{background-color:#991b1b}.n-users-login-section button[type=submit],.n-users-register-section button[type=submit],.n-users-reset-password-container button[type=submit],.n-users-user-form button[type=submit],form.n-users-form button[type=submit]{align-items:center;background-color:var(--nu-color-primary);border:1px solid var(--nu-color-primary);border-radius:.5em;color:var(--nu-color-white);cursor:pointer;display:flex;font-size:.875rem;font-weight:500;gap:.5rem;justify-content:center;min-height:44px;padding:.75em 1em;transition:all .2s ease-in-out;width:100%}.n-users-login-section button[type=submit]:hover:not(:disabled),.n-users-register-section button[type=submit]:hover:not(:disabled),.n-users-reset-password-container button[type=submit]:hover:not(:disabled),.n-users-user-form button[type=submit]:hover:not(:disabled),form.n-users-form button[type=submit]:hover:not(:disabled){background-color:var(--nu-color-primary-dark);border-color:var(--nu-color-primary-dark)}.n-users-login-section button[type=submit]:disabled,.n-users-register-section button[type=submit]:disabled,.n-users-reset-password-container button[type=submit]:disabled,.n-users-user-form button[type=submit]:disabled,form.n-users-form button[type=submit]:disabled{cursor:not-allowed;opacity:.6}.n-users-error-message,.n-users-error-text{background-color:var(--nu-color-error-light,#fef2f2);border:1px solid var(--nu-color-error-border,#fecaca);border-radius:.5rem;color:var(--nu-color-error-dark,#b91c1c);font-size:.875rem;margin-top:.5rem;padding:.75rem 1rem}.n-users-success-message{background-color:var(--nu-color-success-light,#f0fdf4);border:1px solid var(--nu-color-success-border,#9ae6b4);border-radius:.5rem;color:var(--nu-color-success-text,#047857);font-size:.875rem;margin-top:.5rem;padding:.75rem 1rem}.n-users-grid{display:grid;gap:1rem}.n-users-grid-2{grid-template-columns:1fr 5fr}.n-users-grid-auto{grid-template-columns:repeat(auto-fill,minmax(12em,1fr))}.n-users-form-actions{align-items:center;display:flex;gap:1rem;margin-top:1.5rem}.n-users-loading-spinner{animation:n-users-spin 1s linear infinite;border:2px solid var(--nu-color-white,#fff);border-radius:50%;border-top:2px solid transparent;height:16px;width:16px}@keyframes n-users-spin{0%{transform:rotate(0deg)}to{transform:rotate(1turn)}}.n-users-card{background-color:var(--nu-color-bg-primary,#fff);border:1px solid var(--nu-color-border,#e5e7eb);border-radius:.5rem;padding:1rem}.n-users-section{margin:0 auto;max-width:42em;padding:1em}.n-users-section-header{border-bottom:.1em solid var(--nu-color-border,#e5e7eb);margin-bottom:1rem;padding-bottom:.5rem}.n-users-form-help{color:var(--nu-color-text-secondary,#6b7280);font-size:.75rem;margin-top:.25rem}.n-users-strength-bar{background-color:var(--nu-color-strength-bg,#e9ecef);border-radius:2px;height:4px;margin-bottom:4px;overflow:hidden;width:100%}.n-users-strength-fill{height:100%;transition:width .3s ease,background-color .3s ease}.n-users-strength-text{font-size:.75rem;font-weight:500}.n-users-validation-container{background-color:#f8f9fa;border:1px solid #e9ecef;border-radius:4px;margin-top:12px;padding:12px}.n-users-container-title{color:#495057;font-size:.875rem;font-weight:600;margin-bottom:8px}.n-users-list-unstyled{list-style:none;margin:0;padding-left:0}.n-users-list-item{align-items:center;display:flex;font-size:.875rem;margin-bottom:6px;transition:color .2s ease}.n-users-list-item:last-child{margin-bottom:0}.n-users-icon{font-weight:700;margin-right:8px;min-width:16px;text-align:center}.n-users-text{flex:1}.n-users-list ul{list-style:none}.n-users-login-section form,.n-users-register-section form,.n-users-reset-password-container form,.n-users-user-form form,form.n-users-form{display:flex;flex-direction:column;gap:1.5rem}.n-users-login-section{background:linear-gradient(135deg,var(--nu-color-bg-primary) 0,var(--nu-color-bg-secondary) 100%);border:1px solid var(--nu-color-border);border-radius:.75em;box-shadow:0 4px 6px -1px rgba(0,0,0,.1),0 2px 4px -1px rgba(0,0,0,.06);max-width:25rem}.n-users-login-header{margin-bottom:1em;text-align:center}.n-users-login-title{color:var(--nu-color-gray-700);font-size:1.875rem;font-weight:700;line-height:1.2;margin:0 0 .5em}.n-users-login-subtitle{color:var(--nu-color-gray-700);font-size:.875rem;line-height:1.5;margin:0}.n-users-remember-me{align-items:center;display:flex;gap:.5rem}.n-users-remember-me label{color:var(--nu-color-gray-700);font-size:.875rem;margin:0}.n-users-login-footer{margin-top:1em;text-align:center}.n-users-forgot-password{margin:0}.n-users-forgot-link{align-items:center;color:var(--nu-color-primary);display:inline-flex;font-size:.875rem;gap:.5rem;text-decoration:none;transition:color .2s ease-in-out}.n-users-forgot-link:hover:not(.loading){color:var(--nu-color-primary-dark);text-decoration:underline}.n-users-forgot-link.loading{cursor:not-allowed;opacity:.6;pointer-events:none}.n-users-password-strength{margin-top:8px}.n-users-validation-rules{margin-top:12px}.n-users-rules-title{margin-bottom:8px}.n-users-rules-list{padding-left:0}.n-users-rule-item{margin-bottom:6px}.n-users-rule-item:last-child{margin-bottom:0}.n-users-rule-passed{color:var(--nu-color-validation-passed,#15803d)}.n-users-rule-failed{color:var(--nu-color-validation-failed,#dc3545)}.n-users-rule-icon{margin-right:8px}.n-users-rule-text{flex:1}.n-users-validation-errors{margin-top:8px}.n-users-error-text:last-child{margin-bottom:0}.n-users-password-hints{margin-top:8px}.n-users-hint-title{margin-bottom:8px}.n-users-hint-list{padding-left:16px}.n-users-hint-item{color:var(--nu-color-validation-hint,#6c757d);margin-bottom:4px}.n-users-hint-item:last-child{margin-bottom:0}.n-users-logout-link{background:var(--nu-color-error-dark,#b91c1c);border:2px solid transparent;border-color:var(--nu-color-error-dark);border-radius:.5em;color:#fff;padding:.5em 1em;text-decoration:none}.n-users-logout-link:hover{border-color:var(--nu-color-primary)}.n-users-user-card dd{margin:0}.n-users-user-card-actions{display:flex;gap:.5rem;margin-top:1rem}.n-users-user-form{margin:0 auto;max-width:500px}.n-users-form-group input.error{border-color:#dc3545}.n-users-profile-info{background-color:var(--nu-color-bg-primary);border-top-left-radius:.5em;border-top-right-radius:.5em}.n-users-profile-details{font-size:1rem;list-style:none;margin:0;padding:0}.n-users-reset-password-container{background-color:var(--nu-color-bg-primary);border-bottom-left-radius:.5em;border-bottom-right-radius:.5em}@media (max-width:480px){.n-users-login-title{font-size:1.5rem}}.n-users-list-enter-active,.n-users-list-leave-active,.n-users-list-move{transition:all .3s ease}.n-users-list-enter-from,.n-users-list-leave-to{opacity:0;transform:translateX(2rem)}.n-users-list-leave-active{position:absolute}.n-users-list-move{transition-timing-function:ease}
+:root{--nu-color-primary:#3b82f6;--nu-color-primary-dark:#2563eb;--nu-color-primary-light:#60a5fa;--nu-color-white:#fff;--nu-color-gray-50:#f9fafb;--nu-color-gray-500:#6b7280;--nu-color-gray-600:#4b5563;--nu-color-gray-700:#374151;--nu-color-gray-900:#111827;--nu-color-success:#059669;--nu-color-success-light:#f0fdf4;--nu-color-success-border:#9ae6b4;--nu-color-success-text:#047857;--nu-color-error:#dc2626;--nu-color-error-light:#fef2f2;--nu-color-error-border:#fecaca;--nu-color-error-alt:#db5050;--nu-color-error-dark:#b91c1c;--nu-color-border:#e5e7eb;--nu-color-border-light:#d1d5db;--nu-color-border-dark:#ccc;--nu-color-bg-primary:#fff;--nu-color-bg-secondary:#f9fafb;--nu-color-bg-tertiary:#f3f4f6;--nu-color-text-primary:#000;--nu-color-text-secondary:#6b7280;--nu-color-strength-bg:#e9ecef;--nu-color-validation-passed:#15803d;--nu-color-validation-failed:#dc3545;--nu-color-validation-hint:#6c757d}@media (prefers-color-scheme:dark){:root{--nu-color-primary:#60a5fa;--nu-color-primary-dark:#3b82f6;--nu-color-primary-light:#93c5fd;--nu-color-white:#000;--nu-color-gray-50:#111827;--nu-color-gray-500:#9ca3af;--nu-color-gray-600:#d1d5db;--nu-color-gray-700:#e5e7eb;--nu-color-gray-900:#f9fafb;--nu-color-success:#10b981;--nu-color-success-light:#064e3b;--nu-color-success-border:#065f46;--nu-color-success-text:#6ee7b7;--nu-color-error:#ef4444;--nu-color-error-light:#450a0a;--nu-color-error-border:#7f1d1d;--nu-color-error-alt:#f87171;--nu-color-error-dark:#dc2626;--nu-color-border:#374151;--nu-color-border-light:#4b5563;--nu-color-border-dark:#6b7280;--nu-color-bg-primary:#111827;--nu-color-bg-secondary:#1f2937;--nu-color-bg-tertiary:#374151;--nu-color-text-primary:#fff;--nu-color-text-secondary:#9ca3af;--nu-color-strength-bg:#374151;--nu-color-validation-passed:#22c55e;--nu-color-validation-failed:#ef4444;--nu-color-validation-hint:#9ca3af}}:root.dark{--nu-color-primary:#60a5fa;--nu-color-primary-dark:#3b82f6;--nu-color-primary-light:#93c5fd;--nu-color-white:#000;--nu-color-gray-50:#111827;--nu-color-gray-500:#9ca3af;--nu-color-gray-600:#d1d5db;--nu-color-gray-700:#e5e7eb;--nu-color-gray-900:#f9fafb;--nu-color-success:#10b981;--nu-color-success-light:#064e3b;--nu-color-success-border:#065f46;--nu-color-success-text:#6ee7b7;--nu-color-error:#ef4444;--nu-color-error-light:#450a0a;--nu-color-error-border:#7f1d1d;--nu-color-error-alt:#f87171;--nu-color-error-dark:#dc2626;--nu-color-border:#374151;--nu-color-border-light:#4b5563;--nu-color-border-dark:#6b7280;--nu-color-bg-primary:#111827;--nu-color-bg-secondary:#1f2937;--nu-color-bg-tertiary:#374151;--nu-color-text-primary:#fff;--nu-color-text-secondary:#9ca3af;--nu-color-strength-bg:#374151;--nu-color-validation-passed:#22c55e;--nu-color-validation-failed:#ef4444;--nu-color-validation-hint:#9ca3af}.n-users-form-group{display:flex;flex-direction:column;gap:.5rem;margin-bottom:1rem;width:100%}.n-users-form-group.n-users-form-group-narrow{width:90%}.n-users-form-group label,.n-users-form-label{color:var(--nu-color-text-primary,#000);display:block;font-size:1rem;font-weight:500;margin-bottom:.5rem}.n-users-form-group input,.n-users-form-group select,.n-users-form-input{border:1px solid var(--nu-color-border,#ccc);border-radius:.25rem;font-size:1rem;padding:.5rem;transition:border-color .2s,box-shadow .2s;width:100%}.n-users-form-group input:focus,.n-users-form-group select:focus,.n-users-form-input:focus{border-color:var(--nu-color-primary);box-shadow:0 0 0 .1rem rgba(59,130,246,.1);outline:none}.n-users-form-group input:disabled,.n-users-form-input:disabled{background-color:var(--nu-color-bg-secondary,#f9fafb);cursor:not-allowed}.n-users-form-group input.error,.n-users-form-input.error{border-color:var(--nu-color-error,#dc3545)}.n-users-form-group input[type=email],.n-users-form-group input[type=password],.n-users-form-group input[type=text]{background-color:var(--nu-color-bg-secondary);border:1px solid var(--nu-color-border-light);border-radius:.5em;box-sizing:border-box;color:var(--nu-color-gray-700);font-size:.875rem;padding:.75em 1em;transition:all .2s ease-in-out;width:100%}.n-users-form-group input[type=email]:focus,.n-users-form-group input[type=password]:focus,.n-users-form-group input[type=text]:focus{background-color:var(--nu-color-bg-primary);border-color:var(--nu-color-primary);box-shadow:0 0 0 3px rgba(59,130,246,.1);outline:none}.n-users-form-group input[type=checkbox]{margin:0;width:auto}.n-users-google-btn{align-items:center;border:none;border-radius:.25rem;cursor:pointer;display:inline-flex;font-size:1rem;font-weight:500;gap:8px;justify-content:center;padding:.5rem 1rem;text-decoration:none;transition:background-color .2s,transform .1s}.n-users-google-logo{flex-shrink:0}.n-users-btn,.n-users-cancel-btn,.n-users-delete-btn,.n-users-edit-btn,.n-users-submit-btn{align-self:flex-start;border:none;border-radius:.25rem;cursor:pointer;display:inline-block;font-size:1rem;font-weight:500;padding:.5rem 1rem;text-decoration:none;transition:background-color .2s,transform .1s}.n-users-btn:hover,.n-users-edit-btn:hover,.n-users-submit-btn:hover{background-color:var(--nu-color-primary-dark,#2563eb);transform:translateY(-1px)}.n-users-btn:disabled,.n-users-submit-btn:disabled{cursor:not-allowed;opacity:.6;transform:none}.n-users-btn-primary,.n-users-edit-btn,.n-users-submit-btn{background-color:var(--nu-color-primary,#3b82f6);color:#fff}.n-users-btn-secondary,.n-users-cancel-btn{background-color:var(--nu-color-gray-600,#4b5563);color:#fff}.n-users-cancel-btn:hover{background-color:var(--nu-color-gray-700,#374151)}.n-users-delete-btn{background-color:var(--nu-color-error-dark,#b91c1c);color:#fff}.n-users-delete-btn:hover{background-color:#991b1b}.n-users-login-section button[type=submit],.n-users-register-section button[type=submit],.n-users-reset-password-container button[type=submit],.n-users-user-form button[type=submit],form.n-users-form button[type=submit]{align-items:center;background-color:var(--nu-color-primary);border:1px solid var(--nu-color-primary);border-radius:.5em;color:var(--nu-color-white);cursor:pointer;display:flex;font-size:.875rem;font-weight:500;gap:.5rem;justify-content:center;min-height:44px;padding:.75em 1em;transition:all .2s ease-in-out;width:100%}.n-users-login-section button[type=submit]:hover:not(:disabled),.n-users-register-section button[type=submit]:hover:not(:disabled),.n-users-reset-password-container button[type=submit]:hover:not(:disabled),.n-users-user-form button[type=submit]:hover:not(:disabled),form.n-users-form button[type=submit]:hover:not(:disabled){background-color:var(--nu-color-primary-dark);border-color:var(--nu-color-primary-dark)}.n-users-login-section button[type=submit]:disabled,.n-users-register-section button[type=submit]:disabled,.n-users-reset-password-container button[type=submit]:disabled,.n-users-user-form button[type=submit]:disabled,form.n-users-form button[type=submit]:disabled{cursor:not-allowed;opacity:.6}.n-users-error-message,.n-users-error-text{background-color:var(--nu-color-error-light,#fef2f2);border:1px solid var(--nu-color-error-border,#fecaca);border-radius:.5rem;color:var(--nu-color-error-dark,#b91c1c);font-size:.875rem;margin-top:.5rem;padding:.75rem 1rem}.n-users-success-message{background-color:var(--nu-color-success-light,#f0fdf4);border:1px solid var(--nu-color-success-border,#9ae6b4);border-radius:.5rem;color:var(--nu-color-success-text,#047857);font-size:.875rem;margin-top:.5rem;padding:.75rem 1rem}.n-users-grid{display:grid;gap:1rem}.n-users-grid-2{grid-template-columns:1fr 5fr}.n-users-grid-auto{grid-template-columns:repeat(auto-fill,minmax(12em,1fr))}.n-users-form-actions{align-items:center;display:flex;gap:1rem;margin-top:1.5rem}.n-users-loading-spinner{animation:n-users-spin 1s linear infinite;border:2px solid var(--nu-color-white,#fff);border-radius:50%;border-top:2px solid transparent;height:16px;width:16px}@keyframes n-users-spin{0%{transform:rotate(0deg)}to{transform:rotate(1turn)}}.n-users-card{background-color:var(--nu-color-bg-primary,#fff);border:1px solid var(--nu-color-border,#e5e7eb);border-radius:.5rem;padding:1rem}.n-users-section{margin:0 auto;max-width:42em;padding:1em}.n-users-section-header{border-bottom:.1em solid var(--nu-color-border,#e5e7eb);margin-bottom:1rem;padding-bottom:.5rem}.n-users-form-help{color:var(--nu-color-text-secondary,#6b7280);font-size:.75rem;margin-top:.25rem}.n-users-strength-bar{background-color:var(--nu-color-strength-bg,#e9ecef);border-radius:2px;height:4px;margin-bottom:4px;overflow:hidden;width:100%}.n-users-strength-fill{height:100%;transition:width .3s ease,background-color .3s ease}.n-users-strength-text{font-size:.75rem;font-weight:500}.n-users-validation-container{background-color:#f8f9fa;border:1px solid #e9ecef;border-radius:4px;margin-top:12px;padding:12px}.n-users-container-title{color:#495057;font-size:.875rem;font-weight:600;margin-bottom:8px}.n-users-list-unstyled{list-style:none;margin:0;padding-left:0}.n-users-list-item{align-items:center;display:flex;font-size:.875rem;margin-bottom:6px;transition:color .2s ease}.n-users-list-item:last-child{margin-bottom:0}.n-users-icon{font-weight:700;margin-right:8px;min-width:16px;text-align:center}.n-users-text{flex:1}.n-users-list ul{list-style:none}.n-users-login-section form,.n-users-register-section form,.n-users-reset-password-container form,.n-users-user-form form,form.n-users-form{display:flex;flex-direction:column;gap:1.5rem}.n-users-login-section{background:linear-gradient(135deg,var(--nu-color-bg-primary) 0,var(--nu-color-bg-secondary) 100%);border:1px solid var(--nu-color-border);border-radius:.75em;box-shadow:0 4px 6px -1px rgba(0,0,0,.1),0 2px 4px -1px rgba(0,0,0,.06);max-width:25rem}.n-users-login-header{margin-bottom:1em;text-align:center}.n-users-login-title{color:var(--nu-color-gray-700);font-size:1.875rem;font-weight:700;line-height:1.2;margin:0 0 .5em}.n-users-login-subtitle{color:var(--nu-color-gray-700);font-size:.875rem;line-height:1.5;margin:0}.n-users-remember-me{align-items:center;display:flex;gap:.5rem}.n-users-remember-me label{color:var(--nu-color-gray-700);font-size:.875rem;margin:0}.n-users-login-footer{margin-top:1em;text-align:center}.n-users-forgot-password{margin:0}.n-users-forgot-link{align-items:center;color:var(--nu-color-primary);display:inline-flex;font-size:.875rem;gap:.5rem;text-decoration:none;transition:color .2s ease-in-out}.n-users-forgot-link:hover:not(.loading){color:var(--nu-color-primary-dark);text-decoration:underline}.n-users-forgot-link.loading{cursor:not-allowed;opacity:.6;pointer-events:none}.n-users-link{color:var(--nu-color-primary);font-size:.875rem;text-decoration:none;transition:color .2s ease-in-out}.n-users-link:hover{color:var(--nu-color-primary-dark);text-decoration:underline}.n-users-link:visited{color:var(--nu-color-primary)}.n-users-link:visited:hover{color:var(--nu-color-primary-dark)}.n-users-password-strength{margin-top:8px}.n-users-validation-rules{margin-top:12px}.n-users-rules-title{margin-bottom:8px}.n-users-rules-list{padding-left:0}.n-users-rule-item{margin-bottom:6px}.n-users-rule-item:last-child{margin-bottom:0}.n-users-rule-passed{color:var(--nu-color-validation-passed,#15803d)}.n-users-rule-failed{color:var(--nu-color-validation-failed,#dc3545)}.n-users-rule-icon{margin-right:8px}.n-users-rule-text{flex:1}.n-users-validation-errors{margin-top:8px}.n-users-error-text:last-child{margin-bottom:0}.n-users-password-hints{margin-top:8px}.n-users-hint-title{margin-bottom:8px}.n-users-hint-list{padding-left:16px}.n-users-hint-item{color:var(--nu-color-validation-hint,#6c757d);margin-bottom:4px}.n-users-hint-item:last-child{margin-bottom:0}.n-users-logout-link{background:var(--nu-color-error-dark,#b91c1c);border:2px solid transparent;border-color:var(--nu-color-error-dark);border-radius:.5em;color:#fff;padding:.5em 1em;text-decoration:none}.n-users-logout-link:hover{border-color:var(--nu-color-primary)}.n-users-user-card dd{margin:0}.n-users-user-card-actions{display:flex;gap:.5rem;margin-top:1rem}.n-users-user-form{margin:0 auto;max-width:500px}.n-users-form-group input.error{border-color:#dc3545}.n-users-profile-info{background-color:var(--nu-color-bg-primary);border-top-left-radius:.5em;border-top-right-radius:.5em}.n-users-profile-details{font-size:1rem;list-style:none;margin:0;padding:0}.n-users-reset-password-container{background-color:var(--nu-color-bg-primary);border-bottom-left-radius:.5em;border-bottom-right-radius:.5em}@media (max-width:480px){.n-users-login-title{font-size:1.5rem}}.n-users-list-enter-active,.n-users-list-leave-active,.n-users-list-move{transition:all .3s ease}.n-users-list-enter-from,.n-users-list-leave-to{opacity:0;transform:translateX(2rem)}.n-users-list-leave-active{position:absolute}.n-users-list-move{transition-timing-function:ease}

package/dist/runtime/components/NUsersLoginForm.vue

@@ -136,7 +136,7 @@ const handleForgotPassword = async () => {
             name="password"
             :placeholder="props.passwordPlaceholder || t('login.passwordPlaceholder')"
             required
-            :minlength="passwordValidation.minLength"
+            :minlength="passwordValidation?.minLength || 8"
           >
         </div>
       </slot>

package/dist/runtime/components/NUsersPasswordStrengthIndicator.vue

@@ -23,43 +23,52 @@ const hasPassword = computed(() => props.password?.length > 0);
 const validationRules = computed(() => {
   if (!props.password) return [];
   const rules = [];
-  if (moduleOptions.passwordValidation.minLength) {
+  if (moduleOptions.passwordValidation?.minLength) {
     const hasMinLength = props.password.length >= moduleOptions.passwordValidation.minLength;
     rules.push({
-      text: t("passwordStrength.minLength", [moduleOptions.passwordValidation.minLength]),
+      text: t("passwordStrength.requirements.minLength", [moduleOptions.passwordValidation.minLength]),
       passed: hasMinLength
     });
   }
-  if (moduleOptions.passwordValidation.requireUppercase) {
+  if (moduleOptions.passwordValidation?.requireUppercase) {
     const hasUppercase = /[A-Z]/.test(props.password);
     rules.push({
-      text: t("passwordStrength.uppercase"),
+      text: t("passwordStrength.requirements.uppercase"),
       passed: hasUppercase
     });
   }
-  if (moduleOptions.passwordValidation.requireLowercase) {
+  if (moduleOptions.passwordValidation?.requireLowercase) {
     const hasLowercase = /[a-z]/.test(props.password);
     rules.push({
-      text: t("passwordStrength.lowercase"),
+      text: t("passwordStrength.requirements.lowercase"),
       passed: hasLowercase
     });
   }
-  if (moduleOptions.passwordValidation.requireNumbers) {
+  if (moduleOptions.passwordValidation?.requireNumbers) {
     const hasNumbers = /\d/.test(props.password);
     rules.push({
-      text: t("passwordStrength.number"),
+      text: t("passwordStrength.requirements.numbers"),
       passed: hasNumbers
     });
   }
-  if (moduleOptions.passwordValidation.requireSpecialChars) {
+  if (moduleOptions.passwordValidation?.requireSpecialChars) {
     const hasSpecialChars = /[!@#$%^&*()_+\-=[\]{};':"\\|,.<>/?]/.test(props.password);
     rules.push({
-      text: t("passwordStrength.specialChar"),
+      text: t("passwordStrength.requirements.specialChars"),
       passed: hasSpecialChars
     });
   }
   return rules;
 });
+const resolveTranslation = (message) => {
+  if (!message) return "";
+  if (message.includes("|")) {
+    const [key = "", paramStr] = message.split("|");
+    const params = paramStr ? paramStr.split(",") : [];
+    return t(key, params);
+  }
+  return t(message);
+};
 </script>
 
 <template>
@@ -82,7 +91,7 @@ const validationRules = computed(() => {
   color: validationResult?.strength === 'weak' ? '#dc3545' : validationResult?.strength === 'medium' ? '#ffc107' : validationResult?.strength === 'strong' ? '#28a745' : '#6c757d'
 }"
     >
-      {{ validationResult?.strength === "weak" ? props.weakLabel || t("passwordStrength.weak") : validationResult?.strength === "medium" ? props.mediumLabel || t("passwordStrength.medium") : validationResult?.strength === "strong" ? props.strongLabel || t("passwordStrength.strong") : props.unknownLabel || t("passwordStrength.unknown") }}
+      {{ validationResult?.strength === "weak" ? props.weakLabel || t("passwordStrength.strength.weak") : validationResult?.strength === "medium" ? props.mediumLabel || t("passwordStrength.strength.medium") : validationResult?.strength === "strong" ? props.strongLabel || t("passwordStrength.strength.strong") : props.unknownLabel || t("passwordStrength.strength.unknown") }}
       ({{ validationResult?.score || 0 }}%)
     </span>
   </div>
@@ -122,7 +131,7 @@ const validationRules = computed(() => {
       :key="String(error)"
       class="n-users-error-text"
     >
-      {{ error }}
+      {{ resolveTranslation(error) }}
     </small>
   </div>
 
@@ -140,7 +149,7 @@ const validationRules = computed(() => {
         :key="'hint-' + hint"
         class="n-users-hint-item n-users-list-item"
       >
-        {{ hint }}
+        {{ resolveTranslation(hint) }}
       </li>
     </ul>
   </div>

package/dist/runtime/components/NUsersRegisterForm.vue

@@ -150,7 +150,7 @@ const handleSubmit = async () => {
             name="password"
             :placeholder="props.passwordPlaceholder || t('register.passwordPlaceholder')"
             required
-            :minlength="passwordValidation.minLength"
+            :minlength="passwordValidation?.minLength || 8"
           >
         </div>
       </slot>

package/dist/runtime/components/NUsersUserCard.d.vue.ts

@@ -11,11 +11,11 @@ declare var __VLS_1: {
     user: any;
     index: number;
 }, __VLS_3: {
-    canEdit: any;
+    canEdit: boolean;
     editUser: () => Promise<void>;
     user: any;
 }, __VLS_5: {
-    canDelete: any;
+    canDelete: boolean;
     deleteUser: () => Promise<void>;
     user: any;
 };

package/dist/runtime/components/NUsersUserCard.vue

@@ -25,9 +25,16 @@ const canEdit = computed(() => {
   if (nuxtUsers.auth?.permissions) {
     const userPermissions = nuxtUsers.auth.permissions[currentUser.value.role] || [];
     const apiBasePath = nuxtUsers.apiBasePath;
-    return userPermissions.some(
-      (permission) => permission === "*" || permission === `${apiBasePath}/*` || permission === `${apiBasePath}/[id].put` || permission === `${apiBasePath}/[id].patch`
-    );
+    return userPermissions.some((permission) => {
+      if (typeof permission === "string") {
+        return permission === "*" || permission === `${apiBasePath}/*` || permission === `${apiBasePath}/[id].put` || permission === `${apiBasePath}/[id].patch`;
+      }
+      const pathMatches = permission.path === "*" || permission.path === `${apiBasePath}/*` || permission.path === `${apiBasePath}/[id].put` || permission.path === `${apiBasePath}/[id].patch`;
+      if (!pathMatches) {
+        return false;
+      }
+      return permission.methods.some((method) => method.toUpperCase() === "PUT" || method.toUpperCase() === "PATCH");
+    });
   }
   return false;
 });
@@ -36,9 +43,16 @@ const canDelete = computed(() => {
   if (nuxtUsers.auth?.permissions) {
     const userPermissions = nuxtUsers.auth.permissions[currentUser.value.role] || [];
     const apiBasePath = nuxtUsers.apiBasePath;
-    return userPermissions.some(
-      (permission) => permission === "*" || permission === `${apiBasePath}/*` || permission === `${apiBasePath}/[id].delete`
-    );
+    return userPermissions.some((permission) => {
+      if (typeof permission === "string") {
+        return permission === "*" || permission === `${apiBasePath}/*` || permission === `${apiBasePath}/[id].delete`;
+      }
+      const pathMatches = permission.path === "*" || permission.path === `${apiBasePath}/*` || permission.path === `${apiBasePath}/[id].delete`;
+      if (!pathMatches) {
+        return false;
+      }
+      return permission.methods.some((method) => method.toUpperCase() === "DELETE");
+    });
   }
   return false;
 });

package/dist/runtime/components/NUsersUserCard.vue.d.ts

@@ -11,11 +11,11 @@ declare var __VLS_1: {
     user: any;
     index: number;
 }, __VLS_3: {
-    canEdit: any;
+    canEdit: boolean;
     editUser: () => Promise<void>;
     user: any;
 }, __VLS_5: {
-    canDelete: any;
+    canDelete: boolean;
     deleteUser: () => Promise<void>;
     user: any;
 };

package/dist/runtime/composables/usePublicPaths.js

@@ -1,5 +1,5 @@
 import { useRuntimeConfig } from "#app";
-import { NO_AUTH_PATHS, NO_AUTH_API_PATHS } from "../constants.js";
+import { PUBLIC_PAGES, PUBLIC_API_ENDPOINTS, AUTHENTICATED_AUTO_ACCESS_ENDPOINTS } from "../constants.js";
 import { hasPermission, isWhitelisted } from "../utils/permissions.js";
 import { useAuthentication } from "./useAuthentication.js";
 export const usePublicPaths = () => {
@@ -8,13 +8,13 @@ export const usePublicPaths = () => {
   const apiBasePath = config.apiBasePath || "/api/nuxt-users";
   const { user } = useAuthentication();
   const getPublicPaths = () => {
-    const noAuthPaths = [...NO_AUTH_PATHS];
-    const noAuthApiPaths = NO_AUTH_API_PATHS.map((path) => `${apiBasePath}${path}`);
+    const publicPages = [...PUBLIC_PAGES];
+    const publicApiEndpoints = PUBLIC_API_ENDPOINTS.map((endpoint) => `${endpoint.methods.join(", ")}: ${apiBasePath}${endpoint.path}`);
     const whitelistedPaths = config.auth?.whitelist || [];
     const customPasswordResetPath = config.passwordResetUrl && config.passwordResetUrl !== "/reset-password" ? config.passwordResetUrl : null;
     const allPublicPaths = [
-      ...noAuthPaths,
-      ...noAuthApiPaths,
+      ...publicPages,
+      ...publicApiEndpoints,
       ...whitelistedPaths
     ];
     if (customPasswordResetPath) {
@@ -25,8 +25,8 @@ export const usePublicPaths = () => {
       all: allPublicPaths,
       // Categorized public paths
       builtIn: {
-        pages: noAuthPaths,
-        api: noAuthApiPaths
+        pages: publicPages,
+        api: publicApiEndpoints
       },
       whitelist: whitelistedPaths,
       customPasswordResetPath,
@@ -69,11 +69,11 @@ export const usePublicPaths = () => {
     if (path.startsWith("/_")) {
       return true;
     }
-    if (NO_AUTH_PATHS.includes(path)) {
+    if (PUBLIC_PAGES.includes(path)) {
       return true;
     }
-    const noAuthApiPaths = NO_AUTH_API_PATHS.map((p) => `${apiBasePath}${p}`);
-    if (noAuthApiPaths.includes(path)) {
+    const publicApiEndpoints = PUBLIC_API_ENDPOINTS.map((endpoint) => `${endpoint.methods.join(", ")}: ${apiBasePath}${endpoint.path}`);
+    if (publicApiEndpoints.includes(path)) {
       return true;
     }
     if (config.passwordResetUrl && config.passwordResetUrl !== "/reset-password" && path === config.passwordResetUrl) {
@@ -83,6 +83,10 @@ export const usePublicPaths = () => {
       return true;
     }
     if (user.value) {
+      const autoWhitelistedApiEndpoints = AUTHENTICATED_AUTO_ACCESS_ENDPOINTS.map((endpoint) => `${endpoint.methods.join(", ")}: ${apiBasePath}${endpoint.path}`);
+      if (autoWhitelistedApiEndpoints.includes(path)) {
+        return true;
+      }
       return hasPermission(user.value.role, path, method, config.auth?.permissions || {});
     }
     return false;
@@ -94,11 +98,11 @@ export const usePublicPaths = () => {
     if (path.startsWith("/_")) {
       return true;
     }
-    if (NO_AUTH_PATHS.includes(path)) {
+    if (PUBLIC_PAGES.includes(path)) {
       return true;
     }
-    const noAuthApiPaths = NO_AUTH_API_PATHS.map((p) => `${apiBasePath}${p}`);
-    if (noAuthApiPaths.includes(path)) {
+    const publicApiEndpoints = PUBLIC_API_ENDPOINTS.map((endpoint) => `${endpoint.methods.join(", ")}: ${apiBasePath}${endpoint.path}`);
+    if (publicApiEndpoints.includes(path)) {
       return true;
     }
     if (config.passwordResetUrl && config.passwordResetUrl !== "/reset-password" && path === config.passwordResetUrl) {

package/dist/runtime/constants.d.ts

@@ -1,2 +1,9 @@
-export declare const NO_AUTH_PATHS: string[];
-export declare const NO_AUTH_API_PATHS: string[];
+export declare const PUBLIC_PAGES: string[];
+export declare const PUBLIC_API_ENDPOINTS: {
+    path: string;
+    methods: string[];
+}[];
+export declare const AUTHENTICATED_AUTO_ACCESS_ENDPOINTS: {
+    path: string;
+    methods: string[];
+}[];

package/dist/runtime/constants.js

@@ -1,2 +1,11 @@
-export const NO_AUTH_PATHS = ["/login", "/reset-password"];
-export const NO_AUTH_API_PATHS = ["/session", "/password/forgot", "/password/reset"];
+export const PUBLIC_PAGES = ["/login", "/reset-password"];
+export const PUBLIC_API_ENDPOINTS = [
+  { path: "/password/forgot", methods: ["POST"] },
+  { path: "/password/reset", methods: ["POST"] },
+  { path: "/session", methods: ["POST", "DELETE"] }
+  // Login and logout endpoints
+];
+export const AUTHENTICATED_AUTO_ACCESS_ENDPOINTS = [
+  { path: "/me", methods: ["GET", "PATCH"] },
+  { path: "/password", methods: ["PATCH"] }
+];

package/dist/runtime/locales/en.js

@@ -79,6 +79,24 @@ export const en = {
       numbers: "Contains number",
       specialChars: "Contains special character"
     },
+    errors: {
+      minLength: "Password must be at least {0} characters long",
+      uppercase: "Password must contain at least one uppercase letter",
+      lowercase: "Password must contain at least one lowercase letter",
+      numbers: "Password must contain at least one number",
+      specialChars: "Password must contain at least one special character",
+      common: "Password is too common. Please choose a more unique password"
+    },
+    hints: {
+      minLength: "Use at least {0} characters",
+      length12: "Use 12 or more characters for extra security",
+      uppercase: "Add an uppercase letter (A-Z)",
+      lowercase: "Add a lowercase letter (a-z)",
+      numbers: "Add a number (0-9)",
+      specialChars: "Add a special character (e.g. !@#$%)",
+      common: "Avoid common passwords or names",
+      mix: "Use a mix of uppercase, lowercase, numbers, and special characters"
+    },
     hintsTitle: "How to make your password stronger?"
   },
   profile: {

package/dist/runtime/locales/hu.js

@@ -65,6 +65,24 @@ const huBase = {
       lowercase: "Tartalmaz kisbet\u0171t",
       numbers: "Tartalmaz sz\xE1mot",
       specialChars: "Tartalmaz speci\xE1lis karaktert"
+    },
+    errors: {
+      minLength: "A jelsz\xF3nak legal\xE1bb {0} karakter hossz\xFAnak kell lennie",
+      uppercase: "A jelsz\xF3nak tartalmaznia kell legal\xE1bb egy nagybet\u0171t",
+      lowercase: "A jelsz\xF3nak tartalmaznia kell legal\xE1bb egy kisbet\u0171t",
+      numbers: "A jelsz\xF3nak tartalmaznia kell legal\xE1bb egy sz\xE1mot",
+      specialChars: "A jelsz\xF3nak tartalmaznia kell legal\xE1bb egy speci\xE1lis karaktert",
+      common: "Ez a jelsz\xF3 t\xFAl gyakori. K\xE9rj\xFCk, v\xE1lassz egyedibbet"
+    },
+    hints: {
+      minLength: "Haszn\xE1lj legal\xE1bb {0} karaktert",
+      length12: "Haszn\xE1lj 12 vagy t\xF6bb karaktert a nagyobb biztons\xE1g \xE9rdek\xE9ben",
+      uppercase: "Adj hozz\xE1 egy nagybet\u0171t (A-Z)",
+      lowercase: "Adj hozz\xE1 egy kisbet\u0171t (a-z)",
+      numbers: "Adj hozz\xE1 egy sz\xE1mot (0-9)",
+      specialChars: "Adj hozz\xE1 egy speci\xE1lis karaktert (pl. !@#$%)",
+      common: "Ker\xFCld a gyakori jelszavakat \xE9s neveket",
+      mix: "Haszn\xE1lj vegyesen nagybet\u0171ket, kisbet\u0171ket, sz\xE1mokat \xE9s speci\xE1lis karaktereket"
     }
   },
   profile: {

package/dist/runtime/middleware/authorization.client.js

@@ -1,20 +1,20 @@
 import { defineNuxtRouteMiddleware, navigateTo, useRuntimeConfig } from "#app";
 import { useAuthentication } from "../composables/useAuthentication.js";
 import { hasPermission, isWhitelisted } from "../utils/permissions.js";
-import { NO_AUTH_PATHS, NO_AUTH_API_PATHS } from "../constants.js";
+import { PUBLIC_PAGES, AUTHENTICATED_AUTO_ACCESS_ENDPOINTS } from "../constants.js";
 export default defineNuxtRouteMiddleware(async (to) => {
   const { public: { nuxtUsers: publicNuxtUsers } } = useRuntimeConfig();
   const publicOptions = publicNuxtUsers;
   const base = publicOptions.apiBasePath || "/api/nuxt-users";
-  if (NO_AUTH_PATHS.includes(to.path)) {
+  if (PUBLIC_PAGES.includes(to.path)) {
     console.log(`[Nuxt Users] client.middleware.auth.global: ${to.path}`);
     return;
   }
-  const openApiPaths = NO_AUTH_API_PATHS.map((path) => `${base}${path}`);
+  const openApiPaths = AUTHENTICATED_AUTO_ACCESS_ENDPOINTS.map((endpoint) => `${endpoint.methods.join(", ")}: ${base}${endpoint.path}`);
   if (openApiPaths.includes(to.path)) {
     return;
   }
-  if (isWhitelisted(to.path, publicOptions.auth.whitelist)) {
+  if (isWhitelisted(to.path, publicOptions.auth?.whitelist || [])) {
     console.log(`[Nuxt Users] client.middleware.auth.global: Whitelisted: ${to.path}`);
     return;
   }
@@ -33,7 +33,7 @@ export default defineNuxtRouteMiddleware(async (to) => {
     console.log(`[Nuxt Users] client.middleware.auth.global: Unauthenticated ${to.path}, redirecting to /login`);
     return navigateTo("/login");
   }
-  if (!user.value || !hasPermission(user.value.role, to.path, "GET", publicOptions.auth.permissions)) {
+  if (!user.value || !hasPermission(user.value.role, to.path, "GET", publicOptions.auth?.permissions || {})) {
     console.log(`[Nuxt Users] client.middleware.auth.global: User with role ${user.value?.role} denied access to ${to.path}`);
     return navigateTo("/login");
   }

package/dist/runtime/plugin.theme.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Theme detection plugin
+ *
+ * Automatically applies dark theme class based on system preferences.
+ * Listens for changes to system theme and updates accordingly.
+ */
+declare const _default: import("#app").Plugin<Record<string, unknown>> & import("#app").ObjectPlugin<Record<string, unknown>>;
+export default _default;

package/dist/runtime/plugin.theme.js

@@ -0,0 +1,27 @@
+import { defineNuxtPlugin } from "#app";
+export default defineNuxtPlugin(() => {
+  if (import.meta.server) {
+    return;
+  }
+  const applyTheme = () => {
+    if (typeof window === "undefined" || typeof document === "undefined") {
+      return;
+    }
+    const prefersDark = window.matchMedia("(prefers-color-scheme: dark)").matches;
+    if (prefersDark) {
+      document.documentElement.classList.add("dark");
+    }
+    if (!prefersDark) {
+      document.documentElement.classList.remove("dark");
+    }
+  };
+  applyTheme();
+  if (typeof window !== "undefined" && window.matchMedia) {
+    const mediaQuery = window.matchMedia("(prefers-color-scheme: dark)");
+    if (mediaQuery.addEventListener) {
+      mediaQuery.addEventListener("change", applyTheme);
+    } else if (mediaQuery.addListener) {
+      mediaQuery.addListener(applyTheme);
+    }
+  }
+});

package/dist/runtime/server/middleware/authorization.server.js

@@ -1,82 +1,58 @@
-import { defineEventHandler, getCookie, createError } from "h3";
+import { defineEventHandler, getCookie } from "h3";
 import { useRuntimeConfig } from "#imports";
-import { getCurrentUserFromToken } from "../utils/index.js";
+import { getCurrentUserFromToken, handleUnauthenticatedRequest, handleInvalidToken, handleUnauthorizedRequest } from "../utils/index.js";
 import { hasPermission, isWhitelisted } from "../../utils/permissions.js";
-import { NO_AUTH_PATHS, NO_AUTH_API_PATHS } from "../../constants.js";
+import { PUBLIC_PAGES, PUBLIC_API_ENDPOINTS, AUTHENTICATED_AUTO_ACCESS_ENDPOINTS } from "../../constants.js";
 export default defineEventHandler(async (event) => {
   const { nuxtUsers } = useRuntimeConfig();
   const options = nuxtUsers;
   const base = options.apiBasePath || "/api/nuxt-users";
-  const isPageOrApiRoute = !event.path.includes(".") && (event.path === "/" || event.path.startsWith("/api/") || !event.path.startsWith("/_"));
+  const isApiRoute = event.path.startsWith("/api/");
+  const isMeEndpoint = event.path === `${base}/me`;
+  const isPageOrApiRoute = !event.path.includes(".") && (event.path === "/" || isApiRoute || !event.path.startsWith("/_"));
   if (!isPageOrApiRoute) {
     return;
   }
-  const noAuthPaths = [...NO_AUTH_PATHS];
+  const publicAuthPaths = [...PUBLIC_PAGES];
   if (options.passwordResetUrl && options.passwordResetUrl !== "/reset-password") {
-    noAuthPaths.push(options.passwordResetUrl);
+    publicAuthPaths.push(options.passwordResetUrl);
   }
-  if (noAuthPaths.includes(event.path)) {
+  if (publicAuthPaths.includes(event.path)) {
     console.debug(`[Nuxt Users] authorization: NO_AUTH_PATH: ${event.path}`);
     return;
   }
-  const openApiPaths = NO_AUTH_API_PATHS.map((path) => `${base}${path}`);
-  if (openApiPaths.includes(event.path)) {
-    return;
+  for (const endpoint of PUBLIC_API_ENDPOINTS) {
+    if (event.path === `${base}${endpoint.path}` && endpoint.methods.includes(event.method)) {
+      console.debug(`[Nuxt Users] authorization: Public API endpoint ${event.path} (${event.method})`);
+      return;
+    }
   }
   if (isWhitelisted(event.path, options.auth.whitelist)) {
     console.debug(`[Nuxt Users] authorization: whitelisted: ${event.path}`);
     return;
   }
   const token = getCookie(event, "auth_token");
-  const isMeEndpoint = event.path === `${base}/me`;
   if (!token) {
-    if (event.path.startsWith("/api/")) {
-      if (isMeEndpoint) {
-        console.debug(`[Nuxt Users] authorization: ${event.path} No token found - expected for auth check`);
-      } else {
-        console.warn(`[Nuxt Users] authorization: ${event.path} No token found - API request rejected`);
-      }
-      throw createError({ statusCode: 401, statusMessage: "Unauthorized" });
-    }
-    if (!event.path.startsWith("/api/")) {
-      console.debug(`[Nuxt Users] authorization: ${event.path} No token found - letting client handle page redirect`);
-      return;
-    }
+    return handleUnauthenticatedRequest(event, isApiRoute, isMeEndpoint);
   }
   const user = await getCurrentUserFromToken(token, options);
   if (!user) {
-    if (event.path.startsWith("/api/")) {
-      if (isMeEndpoint) {
-        console.debug(`[Nuxt Users] authorization: ${event.path} Invalid token - expected for auth check`);
-      } else {
-        console.warn(`[Nuxt Users] authorization: ${event.path} Invalid token - API request rejected`);
-      }
-      throw createError({ statusCode: 401, statusMessage: "Unauthorized" });
-    }
-    if (!event.path.startsWith("/api/")) {
-      console.debug(`[Nuxt Users] authorization: ${event.path} Invalid token - letting client handle page redirect`);
-      return;
-    }
+    return handleInvalidToken(event, isApiRoute, isMeEndpoint);
   }
   if (!event.context) {
     event.context = {};
   }
   event.context.nuxtUsers = event.context.nuxtUsers || {};
   event.context.nuxtUsers.user = user;
-  if (event.path === `${base}/me`) {
-    console.debug(`[Nuxt Users] authorization: Auto-whitelisted /me endpoint for authenticated user ${user.id}`);
-    return;
-  }
-  if (!hasPermission(user.role, event.path, event.method, options.auth.permissions)) {
-    if (event.path.startsWith("/api/")) {
-      console.warn(`[Nuxt Users] authorization: ${event.path} User ${user.id} with role ${user.role} denied access - API request rejected`);
-      throw createError({ statusCode: 403, statusMessage: "Forbidden" });
-    }
-    if (!event.path.startsWith("/api/")) {
-      console.debug(`[Nuxt Users] authorization: ${event.path} User ${user.id} with role ${user.role} denied access - letting client handle page redirect`);
+  for (const endpoint of AUTHENTICATED_AUTO_ACCESS_ENDPOINTS) {
+    if (event.path === `${base}${endpoint.path}` && endpoint.methods.includes(event.method)) {
+      console.debug(`[Nuxt Users] authorization: Auto-whitelisted endpoint ${event.path} for authenticated user ${user.id}`);
       return;
     }
   }
+  if (!hasPermission(user.role, event.path, event.method, options.auth.permissions)) {
+    return handleUnauthorizedRequest(event, user, isApiRoute);
+  }
   console.debug(`[Nuxt Users] authorization: Authenticated request to ${event.path} for ${user.id} with role ${user.role}`);
   return;
 });

package/dist/runtime/server/utils/authorization.d.ts

@@ -0,0 +1,23 @@
+import { type H3Event } from 'h3';
+import type { UserWithoutPassword } from 'nuxt-users/utils';
+/**
+ * Handles unauthenticated requests (no token found)
+ * @param event - H3 event object
+ * @param isApiRoute - Whether this is an API route
+ * @param isMeEndpoint - Whether this is the /me endpoint (used for auth status checks)
+ */
+export declare const handleUnauthenticatedRequest: (event: H3Event, isApiRoute: boolean, isMeEndpoint: boolean) => void;
+/**
+ * Handles invalid token requests
+ * @param event - H3 event object
+ * @param isApiRoute - Whether this is an API route
+ * @param isMeEndpoint - Whether this is the /me endpoint (used for auth status checks)
+ */
+export declare const handleInvalidToken: (event: H3Event, isApiRoute: boolean, isMeEndpoint: boolean) => void;
+/**
+ * Handles unauthorized requests (user lacks required permissions)
+ * @param event - H3 event object
+ * @param user - Authenticated user object
+ * @param isApiRoute - Whether this is an API route
+ */
+export declare const handleUnauthorizedRequest: (event: H3Event, user: UserWithoutPassword, isApiRoute: boolean) => void;

package/dist/runtime/server/utils/authorization.js

@@ -0,0 +1,33 @@
+import { createError } from "h3";
+export const handleUnauthenticatedRequest = (event, isApiRoute, isMeEndpoint) => {
+  if (isApiRoute) {
+    if (isMeEndpoint) {
+      console.debug(`[Nuxt Users] authorization: ${event.path} No token found - expected for auth check`);
+    } else {
+      console.warn(`[Nuxt Users] authorization: ${event.path} No token found - API request rejected`);
+    }
+    throw createError({ statusCode: 401, statusMessage: "Unauthorized" });
+  }
+  console.debug(`[Nuxt Users] authorization: ${event.path} No token found - letting client handle page redirect`);
+  return;
+};
+export const handleInvalidToken = (event, isApiRoute, isMeEndpoint) => {
+  if (isApiRoute) {
+    if (isMeEndpoint) {
+      console.debug(`[Nuxt Users] authorization: ${event.path} Invalid token - expected for auth check`);
+    } else {
+      console.warn(`[Nuxt Users] authorization: ${event.path} Invalid token - API request rejected`);
+    }
+    throw createError({ statusCode: 401, statusMessage: "Unauthorized" });
+  }
+  console.debug(`[Nuxt Users] authorization: ${event.path} Invalid token - letting client handle page redirect`);
+  return;
+};
+export const handleUnauthorizedRequest = (event, user, isApiRoute) => {
+  if (isApiRoute) {
+    console.warn(`[Nuxt Users] authorization: ${event.method}: ${event.path} User ${user.id} with role ${user.role} denied access - API request rejected`);
+    throw createError({ statusCode: 403, statusMessage: "Forbidden" });
+  }
+  console.debug(`[Nuxt Users] authorization: ${event.path} User ${user.id} with role ${user.role} denied access - letting client handle page redirect`);
+  return;
+};

package/dist/runtime/server/utils/index.d.ts

@@ -7,3 +7,4 @@ export { createPasswordResetTokensTable } from './create-password-reset-tokens-t
 export { createMigrationsTable } from './create-migrations-table.js';
 export { runMigrations, getAppliedMigrations } from './migrate.js';
 export { createGoogleOAuth2Client, getGoogleAuthUrl, getGoogleUserFromCode, findOrCreateGoogleUser, createAuthTokenForUser, generateSecurePassword } from './google-oauth.js';
+export { handleUnauthenticatedRequest, handleInvalidToken, handleUnauthorizedRequest } from './authorization.js';

package/dist/runtime/server/utils/index.js

@@ -7,3 +7,4 @@ export { createPasswordResetTokensTable } from "./create-password-reset-tokens-t
 export { createMigrationsTable } from "./create-migrations-table.js";
 export { runMigrations, getAppliedMigrations } from "./migrate.js";
 export { createGoogleOAuth2Client, getGoogleAuthUrl, getGoogleUserFromCode, findOrCreateGoogleUser, createAuthTokenForUser, generateSecurePassword } from "./google-oauth.js";
+export { handleUnauthenticatedRequest, handleInvalidToken, handleUnauthorizedRequest } from "./authorization.js";

package/dist/shared/{nuxt-users.DfZ7bc_P.mjs → nuxt-users.Cvjgn5KJ.mjs}

@@ -67,46 +67,46 @@ const validatePassword = (password, options = {}) => {
   const hints = [];
   let score = 0;
   if (password.length < config.minLength) {
-    errors.push(`Password must be at least ${config.minLength} characters long`);
-    hints.push(`Use at least ${config.minLength} characters`);
+    errors.push(`passwordStrength.errors.minLength|${config.minLength}`);
+    hints.push(`passwordStrength.hints.minLength|${config.minLength}`);
   }
   if (password.length >= config.minLength) {
     score += 20;
     if (password.length < 12) {
-      hints.push("Use 12 or more characters for extra security");
+      hints.push("passwordStrength.hints.length12");
     }
   }
   if (config.requireUppercase && !/[A-Z]/.test(password)) {
-    errors.push("Password must contain at least one uppercase letter");
-    hints.push("Add an uppercase letter (A-Z)");
+    errors.push("passwordStrength.errors.uppercase");
+    hints.push("passwordStrength.hints.uppercase");
   }
   if (/[A-Z]/.test(password)) {
     score += 15;
   }
   if (config.requireLowercase && !/[a-z]/.test(password)) {
-    errors.push("Password must contain at least one lowercase letter");
-    hints.push("Add a lowercase letter (a-z)");
+    errors.push("passwordStrength.errors.lowercase");
+    hints.push("passwordStrength.hints.lowercase");
   }
   if (/[a-z]/.test(password)) {
     score += 15;
   }
   if (config.requireNumbers && !/\d/.test(password)) {
-    errors.push("Password must contain at least one number");
-    hints.push("Add a number (0-9)");
+    errors.push("passwordStrength.errors.numbers");
+    hints.push("passwordStrength.hints.numbers");
   }
   if (/\d/.test(password)) {
     score += 15;
   }
   if (config.requireSpecialChars && !/[!@#$%^&*()_+\-=[\]{};':"\\|,.<>/?]/.test(password)) {
-    errors.push("Password must contain at least one special character");
-    hints.push("Add a special character (e.g. !@#$%)");
+    errors.push("passwordStrength.errors.specialChars");
+    hints.push("passwordStrength.hints.specialChars");
   }
   if (/[!@#$%^&*()_+\-=[\]{};':"\\|,.<>/?]/.test(password)) {
     score += 15;
   }
   if (config.preventCommonPasswords && COMMON_PASSWORDS.includes(password.toLowerCase())) {
-    errors.push("Password is too common. Please choose a more unique password");
-    hints.push("Avoid common passwords or names");
+    errors.push("passwordStrength.errors.common");
+    hints.push("passwordStrength.hints.common");
   }
   if (password.length >= 12) {
     score += 10;
@@ -124,7 +124,7 @@ const validatePassword = (password, options = {}) => {
   }
   if (complexityTypes >= 3 && complexityTypes < 4) {
     score += 5;
-    hints.push("Use a mix of uppercase, lowercase, numbers, and special characters");
+    hints.push("passwordStrength.hints.mix");
   }
   let strength = "weak";
   if (score >= 80) {

package/dist/utils.mjs

@@ -1,4 +1,4 @@
-export { a as getPasswordStrengthColor, b as getPasswordStrengthText, g as getPasswordValidationOptions, v as validatePassword } from './shared/nuxt-users.DfZ7bc_P.mjs';
+export { a as getPasswordStrengthColor, b as getPasswordStrengthText, g as getPasswordValidationOptions, v as validatePassword } from './shared/nuxt-users.Cvjgn5KJ.mjs';
 export { defaultLocaleMessages, en, hu, huFormal } from '../dist/runtime/locales/index.js';
 export { getNestedValue, getTranslation } from '../dist/runtime/utils/locale.js';
 export { deepMerge } from '../dist/runtime/utils/deep-merge.js';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nuxt-users",
-  "version": "1.40.1",
+  "version": "1.41.0",
   "description": "A comprehensive user management module for Nuxt 3 and Nuxt 4 applications with authentication, authorization, database support, and CLI tools",
   "keywords": [
     "nuxt",
@@ -64,9 +64,9 @@
     "postbuild": "node scripts/post-build.js",
     "check:translations": "tsx scripts/check-translations.ts",
     "check:locale-consistency": "tsx scripts/check-locale-consistency.ts",
-    "check:auth": "npm whoami --registry=https://registry.npmjs.org/ || (echo '❌ Not authenticated with npm. Please run: npm login' && exit 1)",
+    "check:npm_token": "dotenv -- sh -c 'if [ -z \"$NPM_TOKEN\" ]; then echo \"❌ NPM_TOKEN environment variable is not set in .env file. Please set it to your npm token.\"; exit 1; fi'",
     "prerelease": "node -v | grep -q 'v22' || (echo 'Please use Node.js v22 for deployment' && exit 1)",
-    "release": "yarn check:auth && yarn lint && yarn check:translations && yarn check:locale-consistency && yarn test && yarn prepack && changelogen --release && npm publish && git push --follow-tags",
+    "release": "yarn check:npm_token && yarn lint && yarn check:translations && yarn check:locale-consistency && yarn test && yarn prepack && dotenv -- changelogen --release && dotenv -- npm publish --registry https://registry.npmjs.org/ && git push --follow-tags",
     "lint": "eslint .",
     "lint:fix": "eslint . --fix",
     "pretest": "node -v | grep -q 'v22' || (echo 'Please use Node.js v22 for testing' && exit 1)",
@@ -130,6 +130,7 @@
     "@types/nodemailer": "^6.4.17",
     "@types/pg": "^8.15.4",
     "changelogen": "^0.6.2",
+    "dotenv-cli": "^11.0.0",
     "eslint": "^9.30.1",
     "nuxt": "^4.0.0",
     "tsx": "^4.20.3",