prostgles-server 4.2.156 → 4.2.158

package/lib/Auth/setEmailProvider.ts

@@ -0,0 +1,85 @@
+import e from "express";
+import { AUTH_ROUTES_AND_PARAMS, AuthHandler } from "./AuthHandler";
+import { Email, SMTPConfig } from "./AuthTypes";
+import { sendEmail } from "./sendEmail";
+import { promises } from "node:dns";
+
+export async function setEmailProvider(this: AuthHandler, app: e.Express) {
+  
+  const { email, websiteUrl } = this.opts?.expressConfig?.registrations ?? {};
+  if(!email) return;
+  if(websiteUrl){
+    await checkDmarc(websiteUrl);
+  }
+
+  app.post(AUTH_ROUTES_AND_PARAMS.emailSignup, async (req, res) => {
+    const { username, password } = req.body;
+    let validationError = "";
+    if(typeof username !== "string"){
+      validationError = "Invalid username";
+    }
+    if(email.signupType === "withPassword"){
+      const { minPasswordLength = 8 } = email;
+      if(typeof password !== "string"){
+        validationError = "Invalid password";
+      } else if(password.length < minPasswordLength){
+        validationError = `Password must be at least ${minPasswordLength} characters long`;
+      }
+    }
+    if(validationError){
+      res.status(400).json({ error: validationError });
+      return;
+    }
+    try {
+      let emailMessage: undefined | { message: Email; smtp: SMTPConfig };
+      if(email.signupType === "withPassword"){
+        if(email.emailConfirmation){
+          const { onSend, smtp } = email.emailConfirmation;
+          const message = await onSend({ email: username, confirmationUrlPath: `${websiteUrl}${AUTH_ROUTES_AND_PARAMS.confirmEmail}` });
+          emailMessage = { message: { ...message, to: username }, smtp };
+        }
+      } else {
+        const { emailMagicLink } = email;
+        const message = await emailMagicLink.onSend({ email: username, magicLinkPath: `${websiteUrl}${AUTH_ROUTES_AND_PARAMS.magicLinksRoute}` });
+        emailMessage = { message: { ...message, to: username }, smtp: emailMagicLink.smtp };
+      }
+
+      if(emailMessage){
+        await sendEmail(emailMessage.smtp, emailMessage.message);
+        res.json({ msg: "Email sent" });
+      }
+    } catch {
+      res.status(500).json({ error: "Failed to send email" });
+    }
+  });
+
+  if(email.signupType === "withPassword" && email.emailConfirmation){
+    app.get(AUTH_ROUTES_AND_PARAMS.confirmEmailExpressRoute, async (req, res) => {
+      const { id } = req.params ?? {};
+      try {
+        await email.emailConfirmation?.onConfirmed({ confirmationUrlPath: id });
+        res.json({ msg: "Email confirmed" });
+      } catch (_e) {
+        res.status(500).json({ error: "Failed to confirm email" });
+      }
+    });
+  }
+}
+
+const checkDmarc = async (websiteUrl: string) => {
+  const { host } = new URL(websiteUrl);
+  const ignoredHosts = ["localhost", "127.0.0.1"]
+  if(!host || ignoredHosts.includes(host)){
+    return;
+  }
+  const dmarc = await promises.resolveTxt(`_dmarc.${host}`);
+  const dmarkTxt = dmarc[0]?.[0];
+  if(
+    !dmarkTxt?.includes("v=DMARC1") ||
+    (!dmarkTxt?.includes("p=reject") && !dmarkTxt?.includes("p=quarantine"))
+  ){
+    throw new Error("DMARC not set to reject/quarantine");
+  } else {
+    console.log("DMARC set to reject")
+  }
+}

package/lib/Auth/setupAuthRoutes.ts

@@ -27,7 +27,7 @@ export async function setupAuthRoutes(this: AuthHandler) {
     throw "Invalid or empty string provided within publicRoutes "
   }
 
-  setAuthProviders.bind(this)(expressConfig);
+  await setAuthProviders.bind(this)(expressConfig);
 
   if(use){
     const prostglesUseMiddleware: RequestHandler = (req, res, next) => {

package/lib/Prostgles.ts

@@ -226,6 +226,12 @@ export class Prostgles {
     }
   }
 
+  initAuthHandler = async () => {
+    this.authHandler?.destroy();
+    this.authHandler = new AuthHandler(this as any);
+    await this.authHandler.init();
+  }
+
   initTableConfig = async (reason: OnInitReason) => {
     const res = await tryCatch(async () => {
 

package/lib/initProstgles.ts

@@ -130,8 +130,7 @@ export const initProstgles = async function(this: Prostgles, onReady: OnReadyCal
       }
 
       /* 3.9 Check auth config */
-      this.authHandler = new AuthHandler(this as any);
-      await this.authHandler.init();
+      await this.initAuthHandler();
 
       this.publishParser = new PublishParser(this.opts.publish, this.opts.publishMethods as any, this.opts.publishRawSQL, this.dbo!, this.db, this as any);
       this.dboBuilder.publishParser = this.publishParser;
@@ -194,9 +193,7 @@ export const initProstgles = async function(this: Prostgles, onReady: OnReadyCal
           await this.refreshDBO();
         }
         if("auth" in newOpts){
-          this.authHandler?.destroy();
-          this.authHandler = new AuthHandler(this as any);
-          await this.authHandler.init();
+          await this.initAuthHandler();
         }
 
         if(isEmpty(newOpts)) return;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "prostgles-server",
-  "version": "4.2.156",
+  "version": "4.2.158",
   "description": "",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -35,28 +35,32 @@
   ],
   "homepage": "https://prostgles.com",
   "dependencies": {
+    "@aws-sdk/client-ses": "^3.699.0",
+    "@aws-sdk/credential-provider-node": "^3.699.0",
+    "@types/passport": "^1.0.17",
+    "@types/passport-facebook": "^3.0.3",
+    "@types/passport-github2": "^1.2.9",
+    "@types/passport-google-oauth20": "^2.0.16",
+    "@types/passport-microsoft": "^1.0.3",
     "body-parser": "^1.20.3",
     "check-disk-space": "^3.4.0",
     "file-type": "^18.5.0",
+    "nodemailer": "^6.9.16",
     "passport": "^0.7.0",
     "passport-facebook": "^3.0.0",
     "passport-github2": "^0.1.12",
     "passport-google-oauth20": "^2.0.0",
     "passport-microsoft": "^2.1.0",
-    "@types/passport": "^1.0.17",
-    "@types/passport-facebook": "^3.0.3",
-    "@types/passport-github2": "^1.2.9",
-    "@types/passport-google-oauth20": "^2.0.16",
-    "@types/passport-microsoft": "^1.0.3",
     "pg": "^8.11.5",
     "pg-cursor": "^2.11.0",
     "pg-promise": "^11.9.1",
-    "prostgles-types": "^4.0.105"
+    "prostgles-types": "^4.0.107"
   },
   "devDependencies": {
     "@types/express": "^4.17.21",
     "@types/json-schema": "^7.0.15",
     "@types/node": "^22.8.1",
+    "@types/nodemailer": "^6.4.17",
     "@types/pg": "^8.11.5",
     "@types/pg-cursor": "^2.7.2",
     "@types/sharp": "^0.30.4",