nuxt-users 1.6.5 → 1.6.7

package/dist/runtime/components/ResetPasswordForm.vue

@@ -1,118 +1,98 @@
 <script setup>
-import { ref, reactive, onMounted, computed, watch } from "vue";
-import { useRoute, useRouter } from "#app";
+import { ref, watch } from "vue";
 import { usePasswordValidation } from "../composables/usePasswordValidation";
 import { useRuntimeConfig } from "#imports";
 import PasswordStrengthIndicator from "./PasswordStrengthIndicator.vue";
-const formData = reactive({
-  password: "",
-  password_confirm: ""
+const props = defineProps({
+  apiEndpoint: { type: String, required: false, default: "/api/user/profile" },
+  updatePasswordEndpoint: { type: String, required: false, default: "/api/auth/update-password" }
 });
-const message = ref("");
-const loading = ref(false);
-const isError = ref(false);
-const formInvalidDueToToken = ref(false);
-const route = useRoute();
-const router = useRouter();
-const tokenFromUrl = ref(null);
-const emailFromUrl = ref(null);
-onMounted(() => {
-  if (typeof route.query.token === "string") {
-    tokenFromUrl.value = route.query.token;
-  }
-  if (typeof route.query.email === "string") {
-    emailFromUrl.value = decodeURIComponent(route.query.email);
-  }
-  if (!tokenFromUrl.value || !emailFromUrl.value) {
-    message.value = "Invalid or missing password reset token or email in URL. Cannot reset password.";
-    isError.value = true;
-    formInvalidDueToToken.value = true;
-  }
+const emit = defineEmits(["success", "error", "password-error", "password-updated"]);
+const isPasswordLoading = ref(false);
+const passwordError = ref("");
+const passwordSuccess = ref("");
+const passwordForm = ref({
+  currentPassword: "",
+  newPassword: "",
+  newPasswordConfirmation: ""
 });
-const canSubmit = computed(() => !!tokenFromUrl.value && !!emailFromUrl.value && !formInvalidDueToToken.value);
 const { public: { nuxtUsers } } = useRuntimeConfig();
 const moduleOptions = nuxtUsers;
 const passwordValidation = usePasswordValidation(moduleOptions);
-watch(() => formData.password, (newPassword) => {
+watch(() => passwordForm.value.newPassword, (newPassword) => {
   if (newPassword) {
     passwordValidation.validate(newPassword);
   } else {
     passwordValidation.clearValidation();
   }
 });
-const handleResetPassword = async () => {
-  if (!canSubmit.value) {
-    message.value = "Token or email is missing or invalid. Cannot reset password.";
-    isError.value = true;
-    return;
-  }
-  if (formData.password !== formData.password_confirm) {
-    message.value = "Passwords do not match.";
-    isError.value = true;
-    return;
-  }
-  loading.value = true;
-  message.value = "";
-  isError.value = false;
+const updatePassword = async () => {
+  isPasswordLoading.value = true;
+  passwordError.value = "";
+  passwordSuccess.value = "";
   try {
-    const response = await fetch("/api/reset-password", {
+    await $fetch(props.updatePasswordEndpoint, {
       method: "POST",
-      headers: {
-        "Content-Type": "application/json",
-        "Accept": "application/json"
-      },
-      body: JSON.stringify({
-        token: tokenFromUrl.value,
-        email: emailFromUrl.value,
-        password: formData.password,
-        password_confirmation: formData.password_confirm
-      })
+      body: passwordForm.value
     });
-    const responseData = await response.json();
-    if (!response.ok) {
-      throw new Error(responseData.message || responseData.statusMessage || "An error occurred.");
-    }
-    message.value = responseData.message + " Redirecting to login...";
-    isError.value = false;
-    formData.password = "";
-    formData.password_confirm = "";
-    setTimeout(() => {
-      router.push("/login");
-    }, 3e3);
+    passwordSuccess.value = "Password updated successfully";
+    emit("password-updated");
+    passwordForm.value = {
+      currentPassword: "",
+      newPassword: "",
+      newPasswordConfirmation: ""
+    };
   } catch (err) {
-    if (err instanceof Error) {
-      message.value = err.message;
-    } else {
-      message.value = "Failed to reset password.";
-    }
-    console.error("[Nuxt Users] Reset Password Form Error:", err);
-    isError.value = true;
+    const errorMessage = err && typeof err === "object" && "data" in err && err.data && typeof err.data === "object" && "statusMessage" in err.data ? String(err.data.statusMessage) : err instanceof Error ? err.message : "Failed to update password";
+    passwordError.value = errorMessage;
+    emit("password-error", errorMessage);
   } finally {
-    loading.value = false;
+    isPasswordLoading.value = false;
   }
 };
 </script>
 
 <template>
   <div>
-    <h2>Reset Password</h2>
-    <form @submit.prevent="handleResetPassword">
+    <h2>Change Password</h2>
+
+    <form @submit.prevent="updatePassword">
+      <div class="form-group">
+        <label
+          for="currentPassword"
+          class="form-label"
+        >Current Password</label>
+        <input
+          id="currentPassword"
+          v-model="passwordForm.currentPassword"
+          type="password"
+          class="form-input"
+          required
+          :disabled="isPasswordLoading"
+        >
+      </div>
+
       <div class="form-group">
-        <label for="password">New Password</label>
+        <label
+          for="newPassword"
+          class="form-label"
+        >New Password</label>
         <input
-          id="password"
-          v-model="formData.password"
+          id="newPassword"
+          v-model="passwordForm.newPassword"
           type="password"
-          name="password"
-          placeholder="Enter new password"
+          class="form-input"
           required
           :minlength="moduleOptions.passwordValidation?.minLength || 8"
-          :class="{ error: passwordValidation.errors.value.length > 0 && formData.password }"
+          :class="{ error: passwordValidation.errors.value.length > 0 && passwordForm.newPassword }"
+          :disabled="isPasswordLoading"
         >
+
         <PasswordStrengthIndicator
-          :password="formData.password"
+          :password="passwordForm.newPassword"
           :validation-result="passwordValidation.validationResult.value"
         />
+
         <!-- Password requirements -->
         <small class="form-help">
           Password must contain at least {{ moduleOptions.passwordValidation?.minLength || 8 }} characters
@@ -122,35 +102,48 @@ const handleResetPassword = async () => {
           <span v-if="moduleOptions.passwordValidation?.requireSpecialChars">, and special characters</span>.
         </small>
       </div>
+
       <div class="form-group">
-        <label for="password_confirm">Confirm New Password</label>
+        <label
+          for="newPasswordConfirmation"
+          class="form-label"
+        >Confirm New Password</label>
         <input
-          id="password_confirm"
-          v-model="formData.password_confirm"
+          id="newPasswordConfirmation"
+          v-model="passwordForm.newPasswordConfirmation"
           type="password"
-          name="password_confirm"
-          placeholder="Confirm new password"
+          class="form-input"
           required
-          :minlength="moduleOptions.passwordValidation?.minLength || 8"
+          :disabled="isPasswordLoading"
         >
       </div>
+
+      <div
+        v-if="passwordError"
+        class="error-message"
+      >
+        {{ passwordError }}
+      </div>
+
+      <div
+        v-if="passwordSuccess"
+        class="success-message"
+      >
+        {{ passwordSuccess }}
+      </div>
+
       <button
         type="submit"
-        :disabled="loading || formInvalidDueToToken"
+        class="btn btn-primary"
+        :disabled="isPasswordLoading"
       >
-        {{ loading ? "Resetting..." : "Reset Password" }}
+        <span v-if="isPasswordLoading">Updating...</span>
+        <span v-else>Update Password</span>
       </button>
-      <p
-        v-if="message"
-        :class="{ error: isError, success: !isError }"
-        class="form-message"
-      >
-        {{ message }}
-      </p>
     </form>
   </div>
 </template>
 
 <style scoped>
-.error{color:red}.success{color:green}.form-message{font-size:.9rem;margin-top:1em}.form-group{margin-bottom:1em}label{display:block;font-weight:700;margin-bottom:.25em}input[type=password]{border:1px solid var(--color-border-dark);border-radius:4px;box-sizing:border-box;padding:.75em;width:100%}input[type=password].error{border-color:#dc3545}.form-help{color:#6c757d;display:block;font-size:.875rem;margin-top:4px}button[type=submit]{background-color:var(--color-gray-800);border:none;border-radius:4px;color:#fff;cursor:pointer;padding:.75em 1.5em}button[type=submit]:disabled{background-color:var(--color-gray-500);cursor:not-allowed}
+div{background-color:var(--color-bg-primary);border-bottom-left-radius:.5em;border-bottom-right-radius:.5em;margin:0 auto;max-width:42em;padding:1em}h2{border-bottom:.1em solid var(--color-border)}form{gap:1em}.form-group,form{display:flex;flex-direction:column}.form-group{gap:.5em;width:90%}.form-label{color:var(--color-text-primary);font-size:1rem;font-weight:500}.form-input{border:1px solid var(--color-border);border-radius:.5em;font-size:1rem;padding:.5em 1em;transition:border-color .2s,box-shadow .2s}.form-input:focus{border-color:var(--color-primary);box-shadow:0 0 0 .1em rgba(var(--color-primary-rgb),.1);outline:none}.form-input:disabled{background-color:var(--color-bg-secondary);cursor:not-allowed}.form-help{color:var(--color-text-secondary);font-size:.75rem;margin-top:.25em}.btn{align-self:flex-start;border:none;border-radius:.5em;cursor:pointer;font-size:1rem;font-weight:500;padding:.5em 1em;transition:background-color .2s,transform .1s}.btn:disabled{cursor:not-allowed;opacity:.6;transform:none}.btn-primary{background-color:var(--color-primary);color:#fff}.btn-primary:hover:not(:disabled){background-color:var(--color-primary-dark);transform:translateY(-1px)}.error-message{background-color:var(--color-error-bg);border:1px solid var(--color-error-border);border-radius:.5em;color:var(--color-error);font-size:.875rem;padding:12px}.success-message{background-color:#f0fff4;border:1px solid #9ae6b4;border-radius:6px;color:#38a169;font-size:.875rem;padding:12px}
 </style>

package/dist/runtime/components/ResetPasswordForm.vue.d.ts

@@ -1,2 +1,16 @@
-declare const _default: import("vue").DefineComponent<{}, void, {}, {}, {}, import("vue").ComponentOptionsMixin, import("vue").ComponentOptionsMixin, {}, string, import("vue").PublicProps, Readonly<{}> & Readonly<{}>, {}, {}, {}, {}, string, import("vue").ComponentProvideOptions, true, {}, any>;
+import type { UserWithoutPassword, ResetPasswordFormProps } from '../../types.js';
+declare const _default: import("vue").DefineComponent<ResetPasswordFormProps, void, {}, {}, {}, import("vue").ComponentOptionsMixin, import("vue").ComponentOptionsMixin, {} & {
+    success: (user: UserWithoutPassword) => any;
+    error: (error: string) => any;
+    "password-error": (error: string) => any;
+    "password-updated": () => any;
+}, string, import("vue").PublicProps, Readonly<ResetPasswordFormProps> & Readonly<{
+    onSuccess?: ((user: UserWithoutPassword) => any) | undefined;
+    onError?: ((error: string) => any) | undefined;
+    "onPassword-error"?: ((error: string) => any) | undefined;
+    "onPassword-updated"?: (() => any) | undefined;
+}>, {
+    apiEndpoint: string;
+    updatePasswordEndpoint: string;
+}, {}, {}, {}, string, import("vue").ComponentProvideOptions, false, {}, any>;
 export default _default;

package/dist/runtime/composables/useAuth.d.ts

@@ -1,15 +1,15 @@
 import type { User, UserWithoutPassword } from '../../types.js';
 export declare const useAuth: () => {
     user: Readonly<import("vue").Ref<{
-        readonly email: string;
         readonly id: number;
+        readonly email: string;
         readonly name: string;
         readonly role: string;
         readonly created_at: string;
         readonly updated_at: string;
     } | null, {
-        readonly email: string;
         readonly id: number;
+        readonly email: string;
         readonly name: string;
         readonly role: string;
         readonly created_at: string;

package/dist/runtime/composables/useAuth.js

@@ -12,7 +12,7 @@ export const useAuth = () => {
   };
   const logout = async () => {
     try {
-      await $fetch("/api/logout", {
+      await $fetch("/api/auth/logout", {
         method: "GET"
       });
       user.value = null;
@@ -26,7 +26,7 @@ export const useAuth = () => {
   };
   const fetchUser = async () => {
     try {
-      const response = await $fetch("/api/profile", {
+      const response = await $fetch("/api/user/profile", {
         method: "GET"
       });
       user.value = response.user;

package/dist/runtime/composables/usePasswordValidation.d.ts

@@ -25,7 +25,7 @@ export declare const usePasswordValidation: (moduleOptions?: ModuleOptions, opti
     isValid: import("vue").ComputedRef<boolean>;
     errors: import("vue").ComputedRef<string[]>;
     hints: import("vue").ComputedRef<string[]>;
-    strength: import("vue").ComputedRef<"strong" | "weak" | "medium">;
+    strength: import("vue").ComputedRef<"weak" | "medium" | "strong">;
     score: import("vue").ComputedRef<number>;
     strengthColor: import("vue").ComputedRef<string>;
     strengthText: import("vue").ComputedRef<string>;

package/dist/runtime/middleware/auth.client.js

@@ -11,10 +11,10 @@ export default defineNuxtRouteMiddleware((to) => {
     console.log(`[Nuxt Users] client.middleware.auth.global: Whitelisted: ${to.path}`);
     return;
   }
-  const { user } = useAuth();
-  if (!user.value?.id) {
-    console.log("[Nuxt Users] client.middleware.auth.global: Unauthenticated, redirecting to /login");
+  const { isAuthenticated } = useAuth();
+  if (!isAuthenticated.value) {
+    console.log(`[Nuxt Users] client.middleware.auth.global: Unauthenticated ${to.path}, redirecting to /login`);
     return navigateTo("/login");
   }
-  console.log("[Nuxt Users] client.middleware.auth.global", { user: user.value?.id, to: to.path });
+  console.log("[Nuxt Users] client.middleware.auth.global", { isAuthenticated: isAuthenticated.value, to: to.path });
 });

package/dist/runtime/server/api/{login.post.js → auth/login.post.js}

@@ -2,7 +2,7 @@ import { createError, defineEventHandler, readBody, setCookie } from "h3";
 import bcrypt from "bcrypt";
 import crypto from "node:crypto";
 import { useRuntimeConfig } from "#imports";
-import { useDb } from "../utils/index.js";
+import { useDb } from "../../utils/index.js";
 export default defineEventHandler(async (event) => {
   const body = await readBody(event);
   const { email, password } = body;
@@ -35,9 +35,11 @@ export default defineEventHandler(async (event) => {
   }
   const token = crypto.randomBytes(64).toString("hex");
   const tokenName = "auth_token";
+  const expiresAt = /* @__PURE__ */ new Date();
+  expiresAt.setMinutes(expiresAt.getMinutes() + options.auth.tokenExpiration);
   await db.sql`
-    INSERT INTO {${personalAccessTokensTable}} (tokenable_type, tokenable_id, name, token, created_at, updated_at)
-    VALUES ('user', ${user.id}, ${tokenName}, ${token}, CURRENT_TIMESTAMP, CURRENT_TIMESTAMP)
+    INSERT INTO {${personalAccessTokensTable}} (tokenable_type, tokenable_id, name, token, expires_at, created_at, updated_at)
+    VALUES ('user', ${user.id}, ${tokenName}, ${token}, ${expiresAt.toISOString().slice(0, 19).replace("T", " ")}, CURRENT_TIMESTAMP, CURRENT_TIMESTAMP)
   `;
   setCookie(event, "auth_token", token, {
     httpOnly: true,

package/dist/runtime/server/api/{logout.get.js → auth/logout.get.js}

@@ -1,6 +1,6 @@
 import { defineEventHandler, getCookie, setCookie } from "h3";
 import { useRuntimeConfig } from "#imports";
-import { useDb } from "../utils/index.js";
+import { useDb } from "../../utils/index.js";
 export default defineEventHandler(async (event) => {
   const { nuxtUsers } = useRuntimeConfig();
   const options = nuxtUsers;

package/dist/runtime/server/api/{update-password.post.js → auth/update-password.post.js}

@@ -1,8 +1,8 @@
 import { createError, defineEventHandler, getCookie, readBody } from "h3";
 import bcrypt from "bcrypt";
 import { useRuntimeConfig } from "#imports";
-import { getCurrentUserFromToken, updateUserPassword } from "../utils/index.js";
-import { validatePassword, getPasswordValidationOptions } from "../../../utils";
+import { getCurrentUserFromToken, updateUserPassword } from "../../utils/index.js";
+import { validatePassword, getPasswordValidationOptions } from "../../../../utils";
 export default defineEventHandler(async (event) => {
   const { nuxtUsers } = useRuntimeConfig();
   const options = nuxtUsers;

package/dist/runtime/server/api/user/profile.get.d.ts

@@ -0,0 +1,4 @@
+declare const _default: import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<{
+    user: import("../../../../types.js").UserWithoutPassword;
+}>>;
+export default _default;

package/dist/runtime/server/api/{profile.get.js → user/profile.get.js}

@@ -1,6 +1,6 @@
 import { createError, defineEventHandler, getCookie } from "h3";
 import { useRuntimeConfig } from "#imports";
-import { getCurrentUserFromToken } from "../utils/index.js";
+import { getCurrentUserFromToken } from "../../utils/index.js";
 export default defineEventHandler(async (event) => {
   const { nuxtUsers } = useRuntimeConfig();
   const options = nuxtUsers;
@@ -18,5 +18,5 @@ export default defineEventHandler(async (event) => {
       statusMessage: "Unauthorized - Invalid authentication token"
     });
   }
-  return user;
+  return { user };
 });

package/dist/runtime/server/middleware/auth.server.js

@@ -1,6 +1,7 @@
 import { defineEventHandler, getCookie, sendRedirect } from "h3";
 import { useRuntimeConfig } from "#imports";
 import { getCurrentUserFromToken } from "../utils/index.js";
+const noAuthPaths = ["/login", "/api/auth/login", "/api/auth/forgot-password"];
 export default defineEventHandler(async (event) => {
   const { nuxtUsers } = useRuntimeConfig();
   const options = nuxtUsers;
@@ -8,7 +9,7 @@ export default defineEventHandler(async (event) => {
   if (!isPageOrApiRoute) {
     return;
   }
-  if (event.path === "/login" || event.path === "/api/login") {
+  if (noAuthPaths.includes(event.path)) {
     console.log("[Nuxt Users] server.middleware.auth.global: /login");
     return;
   }
@@ -26,6 +27,6 @@ export default defineEventHandler(async (event) => {
     console.log(`[Nuxt Users] server.middleware.auth.global: ${event.path} No user found redirecting to login`);
     return sendRedirect(event, "/login");
   }
-  console.log(`[Nuxt Users] server.middleware.auth.global: Authenticated request for ${user.id}`);
+  console.log(`[Nuxt Users] server.middleware.auth.global: Authenticated request to ${event.path} for ${user.id}`);
   return;
 });

package/dist/runtime/server/tasks/cleanup-tokens.d.ts

@@ -0,0 +1,2 @@
+declare const _default: import("nitropack").Task<"success">;
+export default _default;

package/dist/runtime/server/tasks/cleanup-tokens.js

@@ -0,0 +1,30 @@
+import { defineTask } from "nitropack/runtime/task";
+export default defineTask({
+  meta: {
+    name: "nuxt-users:cleanup-tokens",
+    description: "Clean up expired personal access tokens and tokens without expiration"
+  },
+  async run({ payload }) {
+    const { useRuntimeConfig } = await import("#imports");
+    const { cleanupPersonalAccessTokens } = await import("../utils/index.js");
+    const { nuxtUsers } = useRuntimeConfig();
+    const options = nuxtUsers;
+    if (!options) {
+      throw new Error("Nuxt Users module not configured");
+    }
+    const includeNoExpiration = payload?.includeNoExpiration ?? true;
+    try {
+      const result = await cleanupPersonalAccessTokens(options, includeNoExpiration);
+      return {
+        result: "success",
+        expiredTokensRemoved: result.expiredCount,
+        noExpirationTokensRemoved: result.noExpirationCount,
+        totalTokensCleaned: result.totalCount,
+        includeNoExpiration
+      };
+    } catch (error) {
+      console.error("[Nuxt Users] Token cleanup failed:", error);
+      throw error;
+    }
+  }
+});

package/dist/runtime/server/utils/index.d.ts

@@ -1,5 +1,5 @@
 export { useDb, checkTableExists } from './db.js';
-export { createUser, findUserByEmail, updateUserPassword, getCurrentUserFromToken, hasAnyUsers } from './user.js';
+export { createUser, findUserByEmail, updateUserPassword, getCurrentUserFromToken, hasAnyUsers, deleteExpiredPersonalAccessTokens, deleteTokensWithoutExpiration, cleanupPersonalAccessTokens, revokeUserTokens } from './user.js';
 export { createUsersTable } from './create-users-table.js';
 export { createPersonalAccessTokensTable } from './create-personal-access-tokens-table.js';
 export { createPasswordResetTokensTable } from './create-password-reset-tokens-table.js';

package/dist/runtime/server/utils/index.js

@@ -1,5 +1,5 @@
 export { useDb, checkTableExists } from "./db.js";
-export { createUser, findUserByEmail, updateUserPassword, getCurrentUserFromToken, hasAnyUsers } from "./user.js";
+export { createUser, findUserByEmail, updateUserPassword, getCurrentUserFromToken, hasAnyUsers, deleteExpiredPersonalAccessTokens, deleteTokensWithoutExpiration, cleanupPersonalAccessTokens, revokeUserTokens } from "./user.js";
 export { createUsersTable } from "./create-users-table.js";
 export { createPersonalAccessTokensTable } from "./create-personal-access-tokens-table.js";
 export { createPasswordResetTokensTable } from "./create-password-reset-tokens-table.js";

package/dist/runtime/server/utils/user.d.ts

@@ -24,4 +24,24 @@ export declare const hasAnyUsers: (options: ModuleOptions) => Promise<boolean>;
  * Gets the current user from an authentication token.
  */
 export declare const getCurrentUserFromToken: <T extends boolean = false>(token: string, options: ModuleOptions, withPass?: T) => Promise<T extends true ? User | null : UserWithoutPassword | null>;
+/**
+ * Deletes expired personal access tokens from the database.
+ */
+export declare const deleteExpiredPersonalAccessTokens: (options: ModuleOptions) => Promise<number>;
+/**
+ * Deletes tokens without expiration dates (legacy tokens or security cleanup).
+ */
+export declare const deleteTokensWithoutExpiration: (options: ModuleOptions) => Promise<number>;
+/**
+ * Comprehensive token cleanup: removes expired tokens and optionally tokens without expiration.
+ */
+export declare const cleanupPersonalAccessTokens: (options: ModuleOptions, includeNoExpiration?: boolean) => Promise<{
+    expiredCount: number;
+    noExpirationCount: number;
+    totalCount: number;
+}>;
+/**
+ * Revokes all tokens for a specific user.
+ */
+export declare const revokeUserTokens: (userId: number, options: ModuleOptions) => Promise<void>;
 export {};

package/dist/runtime/server/utils/user.js

@@ -76,13 +76,19 @@ export const getCurrentUserFromToken = async (token, options, withPass = false)
   const personalAccessTokensTable = options.tables.personalAccessTokens;
   const usersTable = options.tables.users;
   const tokenResult = await db.sql`
-    SELECT tokenable_id FROM {${personalAccessTokensTable}}
+    SELECT tokenable_id, expires_at FROM {${personalAccessTokensTable}}
     WHERE token = ${token}
+    AND (expires_at IS NULL OR expires_at > CURRENT_TIMESTAMP)
   `;
   if (tokenResult.rows.length === 0) {
     return null;
   }
   const userId = tokenResult.rows[0].tokenable_id;
+  await db.sql`
+    UPDATE {${personalAccessTokensTable}}
+    SET last_used_at = CURRENT_TIMESTAMP
+    WHERE token = ${token}
+  `;
   const userResult = await db.sql`
     SELECT * FROM {${usersTable}}
     WHERE id = ${userId}
@@ -97,3 +103,41 @@ export const getCurrentUserFromToken = async (token, options, withPass = false)
   const { password: _, ...userWithoutPassword } = user;
   return userWithoutPassword;
 };
+export const deleteExpiredPersonalAccessTokens = async (options) => {
+  const db = await useDb(options);
+  const personalAccessTokensTable = options.tables.personalAccessTokens;
+  const result = await db.sql`
+    DELETE FROM {${personalAccessTokensTable}}
+    WHERE expires_at IS NOT NULL AND expires_at <= CURRENT_TIMESTAMP
+  `;
+  const deletedCount = result.rows?.length || 0;
+  console.log(`[Nuxt Users] ${deletedCount} expired personal access tokens deleted.`);
+  return deletedCount;
+};
+export const deleteTokensWithoutExpiration = async (options) => {
+  const db = await useDb(options);
+  const personalAccessTokensTable = options.tables.personalAccessTokens;
+  const result = await db.sql`
+    DELETE FROM {${personalAccessTokensTable}}
+    WHERE expires_at IS NULL
+  `;
+  const deletedCount = result.rows?.length || 0;
+  console.log(`[Nuxt Users] ${deletedCount} tokens without expiration deleted.`);
+  return deletedCount;
+};
+export const cleanupPersonalAccessTokens = async (options, includeNoExpiration = true) => {
+  const expiredCount = await deleteExpiredPersonalAccessTokens(options);
+  const noExpirationCount = includeNoExpiration ? await deleteTokensWithoutExpiration(options) : 0;
+  const totalCount = expiredCount + noExpirationCount;
+  console.log(`[Nuxt Users] Token cleanup completed: ${expiredCount} expired + ${noExpirationCount} without expiration = ${totalCount} total tokens removed.`);
+  return { expiredCount, noExpirationCount, totalCount };
+};
+export const revokeUserTokens = async (userId, options) => {
+  const db = await useDb(options);
+  const personalAccessTokensTable = options.tables.personalAccessTokens;
+  await db.sql`
+    DELETE FROM {${personalAccessTokensTable}}
+    WHERE tokenable_type = 'user' AND tokenable_id = ${userId}
+  `;
+  console.log(`[Nuxt Users] All tokens revoked for user ID: ${userId}`);
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nuxt-users",
-  "version": "1.6.5",
+  "version": "1.6.7",
   "description": "A comprehensive user management module for Nuxt 3 applications with authentication, database support, and CLI tools",
   "keywords": [
     "nuxt",

package/dist/runtime/components/ForgotPasswordForm.vue

@@ -1,77 +0,0 @@
-<script setup>
-import { ref, reactive } from "vue";
-const formData = reactive({
-  email: ""
-});
-const message = ref("");
-const loading = ref(false);
-const isError = ref(false);
-const handleForgotPassword = async () => {
-  loading.value = true;
-  message.value = "";
-  isError.value = false;
-  try {
-    const response = await fetch("/api/forgot-password", {
-      method: "POST",
-      headers: {
-        "Content-Type": "application/json",
-        "Accept": "application/json"
-      },
-      body: JSON.stringify({ email: formData.email })
-    });
-    const responseData = await response.json();
-    if (!response.ok) {
-      throw new Error(responseData.message || responseData.statusMessage || "An error occurred.");
-    }
-    message.value = responseData.message;
-    isError.value = false;
-    formData.email = "";
-  } catch (err) {
-    if (err instanceof Error) {
-      message.value = err.message;
-    } else {
-      message.value = "Failed to send password reset link.";
-    }
-    console.error("[Nuxt Users] Forgot Password Form Error:", err);
-    isError.value = true;
-  } finally {
-    loading.value = false;
-  }
-};
-</script>
-
-<template>
-  <div>
-    <h2>Forgot Password</h2>
-    <form @submit.prevent="handleForgotPassword">
-      <div class="form-group">
-        <label for="email">Email</label>
-        <input
-          id="email"
-          v-model="formData.email"
-          type="email"
-          name="email"
-          placeholder="your@email.com"
-          required
-        >
-      </div>
-      <button
-        type="submit"
-        :disabled="loading"
-      >
-        {{ loading ? "Sending..." : "Send Password Reset Link" }}
-      </button>
-      <p
-        v-if="message"
-        :class="{ error: isError, success: !isError }"
-        class="form-message"
-      >
-        {{ message }}
-      </p>
-    </form>
-  </div>
-</template>
-
-<style scoped>
-.error{color:red}.success{color:green}.form-message{font-size:.9rem;margin-top:1em}.form-group{margin-bottom:1em}label{display:block;font-weight:700;margin-bottom:.25em}input[type=email]{border:1px solid var(--color-border-dark);border-radius:4px;box-sizing:border-box;padding:.75em;width:100%}button[type=submit]{background-color:var(--color-gray-800);border:none;border-radius:4px;color:#fff;cursor:pointer;padding:.75em 1.5em}button[type=submit]:disabled{background-color:var(--color-gray-500);cursor:not-allowed}
-</style>