nuxt-users 1.45.0 → 1.47.0

package/dist/cli.mjs

@@ -1,16 +1,20 @@
 #!/usr/bin/env node
 import { defineCommand, runMain } from 'citty';
 import { readFileSync } from 'node:fs';
-import { defaultOptions } from './module.mjs';
-import { loadNuxt } from '@nuxt/kit';
+import { d as defaultOptions } from './shared/nuxt-users.BsNZbqYb.mjs';
 import { defu } from 'defu';
-import { runMigrations, createUser as createUser$1, createUsersTable as createUsersTable$1, createPersonalAccessTokensTable as createPersonalAccessTokensTable$1, createPasswordResetTokensTable as createPasswordResetTokensTable$1, createMigrationsTable as createMigrationsTable$1, useDb, checkTableExists, getAppliedMigrations } from '../dist/runtime/server/utils/index.js';
-import { g as getPasswordValidationOptions, v as validatePassword } from './shared/nuxt-users.Cvjgn5KJ.mjs';
+import { runMigrations, getAppliedMigrations } from '../dist/runtime/server/utils/migrate.js';
+import { createUser as createUser$1 } from '../dist/runtime/server/utils/user.js';
+import { b as getPasswordValidationOptions, v as validatePassword } from './shared/nuxt-users.9p2ye9P4.mjs';
 import '../dist/runtime/locales/index.js';
 import '../dist/runtime/utils/locale.js';
 import '../dist/runtime/utils/deep-merge.js';
+import { createUsersTable as createUsersTable$1 } from '../dist/runtime/server/utils/create-users-table.js';
+import { createPersonalAccessTokensTable as createPersonalAccessTokensTable$1 } from '../dist/runtime/server/utils/create-personal-access-tokens-table.js';
+import { createPasswordResetTokensTable as createPasswordResetTokensTable$1 } from '../dist/runtime/server/utils/create-password-reset-tokens-table.js';
+import { createMigrationsTable as createMigrationsTable$1 } from '../dist/runtime/server/utils/create-migrations-table.js';
 import { addActiveToUsers as addActiveToUsers$1 } from '../dist/runtime/server/utils/add-active-to-users.js';
-import '../dist/runtime/server/internal/index.js';
+import { useDb, checkTableExists } from '../dist/runtime/server/utils/db.js';
 
 const getOptionsFromEnv = () => {
   const connectorName = process.env.DB_CONNECTOR || "sqlite";
@@ -56,6 +60,7 @@ const loadOptions = async () => {
     console.log("[Nuxt Users] \u2139\uFE0F  Note: CLI commands read .env files. If you use .env.local in development, export variables first:");
     console.log("[Nuxt Users]    set -a; source .env.local; set +a; npx nuxt-users <command>");
     console.log("[Nuxt Users]    In production, environment variables are set directly in the deployment environment.");
+    const { loadNuxt } = await import('@nuxt/kit');
     const nuxt = await loadNuxt({ cwd: process.cwd(), ready: false });
     const topLevelConfig = nuxt.options.nuxtUsers;
     const processedRuntimeConfig = nuxt.options.runtimeConfig?.nuxtUsers;
@@ -352,6 +357,7 @@ const projectInfo = defineCommand({
   },
   async run() {
     try {
+      const { loadNuxt } = await import('@nuxt/kit');
       console.log("[Nuxt Users] Loading Nuxt project...");
       console.log("[Nuxt Users] \u2139\uFE0F  Note: CLI commands read .env files. If you use .env.local in development, export variables first:");
       console.log("[Nuxt Users]    set -a; source .env.local; set +a; npx nuxt-users <command>");

package/dist/module.d.mts

@@ -1,8 +1,9 @@
 import * as _nuxt_schema from '@nuxt/schema';
-import { M as ModuleOptions } from './shared/nuxt-users.DUmdxjpk.mjs';
+import { M as ModuleOptions } from './shared/nuxt-users.bLYb3Bz5.mjs';
 export * from '../dist/runtime/server/internal/index.js';
 
 declare const defaultOptions: ModuleOptions;
+
 declare const _default: _nuxt_schema.NuxtModule<ModuleOptions, ModuleOptions, false>;
 
 export { _default as default, defaultOptions };

package/dist/module.d.ts

@@ -1,8 +1,9 @@
 import * as _nuxt_schema from '@nuxt/schema';
-import { M as ModuleOptions } from './shared/nuxt-users.DUmdxjpk.js';
+import { M as ModuleOptions } from './shared/nuxt-users.bLYb3Bz5.js';
 export * from '../dist/runtime/server/internal/index.js';
 
 declare const defaultOptions: ModuleOptions;
+
 declare const _default: _nuxt_schema.NuxtModule<ModuleOptions, ModuleOptions, false>;
 
 export { _default as default, defaultOptions };

package/dist/module.json

@@ -4,7 +4,7 @@
   "compatibility": {
     "nuxt": ">=3.0.0"
   },
-  "version": "1.45.0",
+  "version": "1.47.0",
   "builder": {
     "@nuxt/module-builder": "1.0.2",
     "unbuild": "3.6.1"

package/dist/module.mjs

@@ -1,67 +1,8 @@
 import { defineNuxtModule, createResolver, addPlugin, addImportsDir, addServerImportsDir, addServerScanDir, addServerHandler, addServerPlugin, addRouteMiddleware, addComponentsDir } from '@nuxt/kit';
 import { defu } from 'defu';
+import { d as defaultOptions } from './shared/nuxt-users.BsNZbqYb.mjs';
 export * from '../dist/runtime/server/internal/index.js';
 
-const defaultOptions = {
-  connector: {
-    name: "sqlite",
-    options: {
-      path: "./data/users.sqlite3"
-    }
-  },
-  apiBasePath: "/api/nuxt-users",
-  tables: {
-    migrations: "migrations",
-    users: "users",
-    personalAccessTokens: "personal_access_tokens",
-    passwordResetTokens: "password_reset_tokens"
-  },
-  mailer: {
-    // Added default mailer (example using ethereal.email)
-    host: "smtp.ethereal.email",
-    port: 587,
-    secure: false,
-    auth: {
-      user: "user@ethereal.email",
-      // Replace with actual Ethereal user
-      pass: "password"
-      // Replace with actual Ethereal password
-    },
-    defaults: {
-      from: '"Nuxt Users Module" <noreply@example.com>'
-    }
-  },
-  passwordResetUrl: "/reset-password",
-  emailConfirmationUrl: "/email-confirmation",
-  auth: {
-    whitelist: [],
-    tokenExpiration: 24 * 60,
-    // 24 hours in minutes
-    rememberMeExpiration: 30,
-    // 30 days
-    permissions: {}
-    // Empty by default - whitelist approach
-  },
-  passwordValidation: {
-    minLength: 8,
-    requireUppercase: true,
-    requireLowercase: true,
-    requireNumbers: true,
-    requireSpecialChars: true,
-    preventCommonPasswords: true
-  },
-  hardDelete: false,
-  locale: {
-    default: "en",
-    fallbackLocale: "en",
-    texts: {}
-  },
-  tokenCleanupSchedule: "0 2 * * *",
-  // Daily at 2 AM
-  theme: {
-    enabled: true
-  }
-};
 const module$1 = defineNuxtModule({
   meta: {
     name: "nuxt-users",
@@ -182,6 +123,7 @@ const module$1 = defineNuxtModule({
       handler: resolver.resolve("./runtime/server/middleware/authorization.server")
     });
     addServerPlugin(resolver.resolve("./runtime/server/plugins/auto-migrate"));
+    addServerPlugin(resolver.resolve("./runtime/server/plugins/validate-mailer-config"));
     addRouteMiddleware({
       name: "authorization.client",
       path: resolver.resolve("./runtime/middleware/authorization.client"),

package/dist/runtime/components/NUsersLoginForm.vue

@@ -148,13 +148,44 @@ const handleForgotPassword = async () => {
               :title="showPassword ? props.hidePasswordLabel || t('login.hidePassword') : props.showPasswordLabel || t('login.showPassword')"
               @click="showPassword = !showPassword"
             >
-              <svg v-if="!showPassword" xmlns="http://www.w3.org/2000/svg" width="20" height="20" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
-                <path d="M17.94 17.94A10.07 10.07 0 0 1 12 20c-7 0-11-8-11-8a18.45 18.45 0 0 1 5.06-5.94M9.9 4.24A9.12 9.12 0 0 1 12 4c7 0 11 8 11 8a18.5 18.5 0 0 1-2.16 3.19m-6.72-1.07a3 3 0 1 1-4.24-4.24"/>
-                <line x1="1" y1="1" x2="23" y2="23"/>
+              <svg
+                v-if="!showPassword"
+                xmlns="http://www.w3.org/2000/svg"
+                width="20"
+                height="20"
+                viewBox="0 0 24 24"
+                fill="none"
+                stroke="currentColor"
+                stroke-width="2"
+                stroke-linecap="round"
+                stroke-linejoin="round"
+              >
+                <path d="M17.94 17.94A10.07 10.07 0 0 1 12 20c-7 0-11-8-11-8a18.45 18.45 0 0 1 5.06-5.94M9.9 4.24A9.12 9.12 0 0 1 12 4c7 0 11 8 11 8a18.5 18.5 0 0 1-2.16 3.19m-6.72-1.07a3 3 0 1 1-4.24-4.24" />
+                <line
+                  x1="1"
+                  y1="1"
+                  x2="23"
+                  y2="23"
+                />
               </svg>
-              <svg v-if="showPassword" xmlns="http://www.w3.org/2000/svg" width="20" height="20" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
-                <path d="M1 12s4-8 11-8 11 8 11 8-4 8-11 8-11-8-11-8z"/>
-                <circle cx="12" cy="12" r="3"/>
+              <svg
+                v-if="showPassword"
+                xmlns="http://www.w3.org/2000/svg"
+                width="20"
+                height="20"
+                viewBox="0 0 24 24"
+                fill="none"
+                stroke="currentColor"
+                stroke-width="2"
+                stroke-linecap="round"
+                stroke-linejoin="round"
+              >
+                <path d="M1 12s4-8 11-8 11 8 11 8-4 8-11 8-11-8-11-8z" />
+                <circle
+                  cx="12"
+                  cy="12"
+                  r="3"
+                />
               </svg>
             </button>
           </div>

package/dist/runtime/server/plugins/validate-mailer-config.d.ts

@@ -0,0 +1,3 @@
+import type { NitroAppPlugin } from 'nitropack';
+declare const plugin: NitroAppPlugin;
+export default plugin;

package/dist/runtime/server/plugins/validate-mailer-config.js

@@ -0,0 +1,33 @@
+import { useRuntimeConfig } from "#imports";
+const INSECURE_DEFAULT_FROM = /@example\.com>/i;
+const DEFAULT_ETHEREAL_HOST = "smtp.ethereal.email";
+const isTestEnvironment = () => process.env.NODE_ENV === "test" || !!process.env.VITEST;
+const validateMailerConfig = (options) => {
+  if (isTestEnvironment()) {
+    return;
+  }
+  const mailer = options.mailer;
+  if (!mailer?.host || !mailer?.auth?.user || !mailer?.auth?.pass) {
+    return;
+  }
+  const from = mailer.defaults?.from || '"Nuxt Users" <noreply@example.com>';
+  if (!INSECURE_DEFAULT_FROM.test(from)) {
+    return;
+  }
+  const isCustomMailer = mailer.host !== DEFAULT_ETHEREAL_HOST;
+  if (!isCustomMailer) {
+    return;
+  }
+  throw new Error(
+    '[Nuxt Users] Invalid mailer config: mailer.defaults.from must be set to a valid sender address when using a custom SMTP host. Using noreply@example.com causes password reset emails to bounce (DMARC rejection). Set nuxtUsers.mailer.defaults.from in nuxt.config.ts or NUXT_NUXT_USERS_MAILER_DEFAULTS_FROM env var, e.g. "App" <noreply@yourdomain.com>'
+  );
+};
+const plugin = () => {
+  const config = useRuntimeConfig();
+  const options = config.nuxtUsers;
+  if (!options) {
+    return;
+  }
+  validateMailerConfig(options);
+};
+export default plugin;

package/dist/shared/{nuxt-users.Cvjgn5KJ.mjs → nuxt-users.9p2ye9P4.mjs}

@@ -167,4 +167,4 @@ const getPasswordStrengthText = (strength) => {
   }
 };
 
-export { getPasswordStrengthColor as a, getPasswordStrengthText as b, getPasswordValidationOptions as g, validatePassword as v };
+export { getPasswordStrengthText as a, getPasswordValidationOptions as b, getPasswordStrengthColor as g, validatePassword as v };

package/dist/shared/nuxt-users.BsNZbqYb.mjs

@@ -0,0 +1,55 @@
+const defaultOptions = {
+  connector: {
+    name: "sqlite",
+    options: {
+      path: "./data/users.sqlite3"
+    }
+  },
+  apiBasePath: "/api/nuxt-users",
+  tables: {
+    migrations: "migrations",
+    users: "users",
+    personalAccessTokens: "personal_access_tokens",
+    passwordResetTokens: "password_reset_tokens"
+  },
+  mailer: {
+    host: "smtp.ethereal.email",
+    port: 587,
+    secure: false,
+    auth: {
+      user: "user@ethereal.email",
+      pass: "password"
+    },
+    defaults: {
+      from: '"Nuxt Users Module" <noreply@example.com>'
+    }
+  },
+  passwordResetUrl: "/reset-password",
+  emailConfirmationUrl: "/email-confirmation",
+  auth: {
+    whitelist: [],
+    tokenExpiration: 24 * 60,
+    rememberMeExpiration: 30,
+    permissions: {}
+  },
+  passwordValidation: {
+    minLength: 8,
+    requireUppercase: true,
+    requireLowercase: true,
+    requireNumbers: true,
+    requireSpecialChars: true,
+    preventCommonPasswords: true
+  },
+  hardDelete: false,
+  locale: {
+    default: "en",
+    fallbackLocale: "en",
+    texts: {}
+  },
+  tokenCleanupSchedule: "0 2 * * *",
+  theme: {
+    enabled: true
+  }
+};
+
+export { defaultOptions as d };

package/dist/shared/{nuxt-users.DUmdxjpk.d.mts → nuxt-users.bLYb3Bz5.d.mts}

@@ -337,4 +337,4 @@ declare const defaultFieldLabels: {
 };
 
 export { defaultDisplayFields as j, defaultFieldLabels as k };
-export type { DisplayFieldsProps as D, GoogleOAuthOptions as G, LoginFormData as L, ModuleOptions as M, PersonalAccessToken as P, RuntimeModuleOptions as R, User as U, UserWithoutPassword as a, PasswordResetToken as b, LoginFormProps as c, ResetPasswordFormProps as d, Permission as e, DatabaseType as f, DatabaseConfig as g, LocaleOptions as h, LocaleMessages as i };
+export type { DatabaseConfig as D, GoogleOAuthOptions as G, LocaleMessages as L, ModuleOptions as M, PasswordResetToken as P, ResetPasswordFormProps as R, User as U, DatabaseType as a, DisplayFieldsProps as b, LocaleOptions as c, LoginFormData as d, LoginFormProps as e, Permission as f, PersonalAccessToken as g, RuntimeModuleOptions as h, UserWithoutPassword as i };

package/dist/shared/{nuxt-users.DUmdxjpk.d.ts → nuxt-users.bLYb3Bz5.d.ts}

@@ -337,4 +337,4 @@ declare const defaultFieldLabels: {
 };
 
 export { defaultDisplayFields as j, defaultFieldLabels as k };
-export type { DisplayFieldsProps as D, GoogleOAuthOptions as G, LoginFormData as L, ModuleOptions as M, PersonalAccessToken as P, RuntimeModuleOptions as R, User as U, UserWithoutPassword as a, PasswordResetToken as b, LoginFormProps as c, ResetPasswordFormProps as d, Permission as e, DatabaseType as f, DatabaseConfig as g, LocaleOptions as h, LocaleMessages as i };
+export type { DatabaseConfig as D, GoogleOAuthOptions as G, LocaleMessages as L, ModuleOptions as M, PasswordResetToken as P, ResetPasswordFormProps as R, User as U, DatabaseType as a, DisplayFieldsProps as b, LocaleOptions as c, LoginFormData as d, LoginFormProps as e, Permission as f, PersonalAccessToken as g, RuntimeModuleOptions as h, UserWithoutPassword as i };

package/dist/utils.d.mts

@@ -1,7 +1,7 @@
 export { defaultLocaleMessages, en, hu, huFormal } from '../dist/runtime/locales/index.js';
 export { getNestedValue, getTranslation } from '../dist/runtime/utils/locale.js';
 export { deepMerge } from '../dist/runtime/utils/deep-merge.js';
-export { g as DatabaseConfig, f as DatabaseType, D as DisplayFieldsProps, G as GoogleOAuthOptions, i as LocaleMessages, h as LocaleOptions, L as LoginFormData, c as LoginFormProps, M as ModuleOptions, b as PasswordResetToken, e as Permission, P as PersonalAccessToken, d as ResetPasswordFormProps, R as RuntimeModuleOptions, U as User, a as UserWithoutPassword, j as defaultDisplayFields, k as defaultFieldLabels } from './shared/nuxt-users.DUmdxjpk.mjs';
+export { D as DatabaseConfig, a as DatabaseType, b as DisplayFieldsProps, G as GoogleOAuthOptions, L as LocaleMessages, c as LocaleOptions, d as LoginFormData, e as LoginFormProps, M as ModuleOptions, P as PasswordResetToken, f as Permission, g as PersonalAccessToken, R as ResetPasswordFormProps, h as RuntimeModuleOptions, U as User, i as UserWithoutPassword, j as defaultDisplayFields, k as defaultFieldLabels } from './shared/nuxt-users.bLYb3Bz5.mjs';
 
 interface PasswordValidationResult {
     isValid: boolean;

package/dist/utils.d.ts

@@ -1,7 +1,7 @@
 export { defaultLocaleMessages, en, hu, huFormal } from '../dist/runtime/locales/index.js';
 export { getNestedValue, getTranslation } from '../dist/runtime/utils/locale.js';
 export { deepMerge } from '../dist/runtime/utils/deep-merge.js';
-export { g as DatabaseConfig, f as DatabaseType, D as DisplayFieldsProps, G as GoogleOAuthOptions, i as LocaleMessages, h as LocaleOptions, L as LoginFormData, c as LoginFormProps, M as ModuleOptions, b as PasswordResetToken, e as Permission, P as PersonalAccessToken, d as ResetPasswordFormProps, R as RuntimeModuleOptions, U as User, a as UserWithoutPassword, j as defaultDisplayFields, k as defaultFieldLabels } from './shared/nuxt-users.DUmdxjpk.js';
+export { D as DatabaseConfig, a as DatabaseType, b as DisplayFieldsProps, G as GoogleOAuthOptions, L as LocaleMessages, c as LocaleOptions, d as LoginFormData, e as LoginFormProps, M as ModuleOptions, P as PasswordResetToken, f as Permission, g as PersonalAccessToken, R as ResetPasswordFormProps, h as RuntimeModuleOptions, U as User, i as UserWithoutPassword, j as defaultDisplayFields, k as defaultFieldLabels } from './shared/nuxt-users.bLYb3Bz5.js';
 
 interface PasswordValidationResult {
     isValid: boolean;

package/dist/utils.mjs

@@ -1,4 +1,4 @@
-export { a as getPasswordStrengthColor, b as getPasswordStrengthText, g as getPasswordValidationOptions, v as validatePassword } from './shared/nuxt-users.Cvjgn5KJ.mjs';
+export { g as getPasswordStrengthColor, a as getPasswordStrengthText, b as getPasswordValidationOptions, v as validatePassword } from './shared/nuxt-users.9p2ye9P4.mjs';
 export { defaultLocaleMessages, en, hu, huFormal } from '../dist/runtime/locales/index.js';
 export { getNestedValue, getTranslation } from '../dist/runtime/utils/locale.js';
 export { deepMerge } from '../dist/runtime/utils/deep-merge.js';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nuxt-users",
-  "version": "1.45.0",
+  "version": "1.47.0",
   "description": "A comprehensive user management module for Nuxt 3 and Nuxt 4 applications with authentication, authorization, database support, and CLI tools",
   "keywords": [
     "nuxt",
@@ -100,6 +100,7 @@
   "dependencies": {
     "bcrypt": "^6.0.0",
     "citty": "^0.2.0",
+    "db0": "^0.3.4",
     "defu": "^6.1.4",
     "google-auth-library": "^10.4.0",
     "nodemailer": "^7.0.5"