sentri 2.0.0 → 4.0.0

package/templates/prisma/auth.ts

@@ -1,128 +0,0 @@
-// sentri — auth config template (Prisma)
-// Generated by: npx sentri generate prisma
-//
-// Update validRoles to match the roles your application uses.
-// Add JWT_SECRET to your .env file.
-// If you already have a PrismaClient instance elsewhere, import it instead of
-// creating a new one here.
-
-import { PrismaClient } from '@prisma/client';
-import { createAuth } from 'sentri';
-import { createAdapter } from './adapter.js';
-
-const prisma = new PrismaClient();
-
-export const auth = createAuth({
-  secret: process.env.JWT_SECRET!,
-  validRoles: ['user', 'admin'] as const,
-  adapter: createAdapter(prisma),
-  accessExpiresIn: '5m',  // short-lived; silent refresh happens automatically in protect()
-  // refreshExpiresIn: '7d',
-  // algorithm: 'HS256',
-  // saltRounds: 12,
-  // apiKey: process.env.REGISTER_API_KEY, // when set, POST /register requires X-Api-Key header
-
-  // Access token stored in a non-httpOnly cookie — browser JS can read it via
-  // document.cookie or getCurrentAccessToken(req). protect() reads from this
-  // cookie automatically when no Authorization header is present.
-  accessCookie: {
-    secure: process.env.NODE_ENV === 'production',
-    // name: 'access_token',
-    // sameSite: 'strict',
-    // path: '/',
-  },
-
-  // Refresh token stored in an httpOnly cookie — not readable by JS.
-  cookie: {
-    secure: process.env.NODE_ENV === 'production',
-    // name: 'refresh_token',
-    // httpOnly: true,
-    // sameSite: 'strict',
-    // path: '/',
-  },
-
-  // hooks: {
-  //   // Fired after every successful login — good for audit logs, notifications.
-  //   onLogin: async (user) => {
-  //     await auditLog.record('login', user.id);
-  //   },
-  //   // Fired after every failed login — good for rate limiting, alerting.
-  //   onFailedLogin: (identifier, error) => {
-  //     rateLimiter.hit(`login:${identifier}`);
-  //   },
-  //   // Fired after logout (single session or all sessions).
-  //   onLogout: async (userId) => {
-  //     await cache.invalidate(userId);
-  //   },
-  // },
-
-  // isTokenRevoked: async (sessionId) => {
-  //   // Optional: immediate revocation via Redis (called on every protected request).
-  //   // Keep this fast — a slow check negates the performance benefit of stateless JWTs.
-  //   return await redis.sismember('revoked_sessions', sessionId);
-  // },
-
-  // router: {
-  //   register: async (input) => {
-  //     // custom register logic — must return RegisterResult
-  //   },
-  //   login: async (input) => {
-  //     // custom login logic — must return AuthResult
-  //   },
-  //   refresh: async (refreshToken) => {
-  //     // custom refresh logic — must return RefreshResult
-  //   },
-  //   logout: async (refreshToken) => {
-  //     // custom logout logic
-  //   },
-  //   logoutAll: async (userId) => {
-  //     // custom logout-all logic
-  //   },
-  //   assignRoles: async (userId, roles) => {
-  //     // custom assignRoles logic — must return AssignRolesResult
-  //   },
-  // },
-});
-
-// --- Express app setup ---
-//
-// import express from 'express';
-// import { SentriError, createIdempotencyMiddleware, getCurrentAccessToken } from 'sentri';
-//
-// const app = express();
-// app.use(express.json());
-//
-// // Optional: make create/update operations idempotent via X-Idempotency-Key header
-// app.use(createIdempotencyMiddleware());
-//
-// // Mount the auth router (POST /auth/register, /auth/login, etc.)
-// app.use('/auth', auth.router());
-//
-// // Your own routes — protect() reads token from Authorization header OR access_token cookie
-// app.get('/protected', auth.protect(), (req, res) => {
-//   res.json(req.user);
-// });
-//
-// // Read the raw access token if needed (header → cookie fallback)
-// app.get('/debug', (req, res) => {
-//   const token = auth.getCurrentAccessToken(req); // or: getCurrentAccessToken(req, config)
-//   res.json({ hasToken: !!token });
-// });
-//
-// // Domain-specific error by extending SentriError
-// class NotFoundError extends SentriError {
-//   constructor(resource: string) {
-//     super('NOT_FOUND', `${resource} not found`, 404);
-//   }
-// }
-//
-// app.get('/items/:id', auth.protect(), async (req, res) => {
-//   const item = await prisma.item.findUnique({ where: { id: req.params['id'] } });
-//   if (!item) throw new NotFoundError('Item');
-//   res.json(item);
-// });
-//
-// // Mount AFTER all routes — catches SentriError from sentri AND your subclasses
-// app.use(auth.errorHandler());
-//
-// app.listen(3000);

package/templates/prisma/schema.prisma

@@ -1,56 +0,0 @@
-// sentri — Prisma schema template (Prisma v7+)
-// Run `npx sentri init` to copy this file to your project.
-//
-// Field mapping: library uses `identifier` internally, but your DB column
-// can be named anything — adjust the @map(...) values below to match
-// your existing schema, or leave them as-is for a fresh project.
-//
-// Database and generator config lives in prisma.config.ts (Prisma v7+).
-
-model User {
-  id           String     @id @default(cuid()) @map("id")
-  // Change @map("email") to match your column name:
-  //   @map("email")    — login via email
-  //   @map("username") — login via username
-  //   @map("phone")    — login via phone number
-  identifier   String     @unique @map("email")
-  passwordHash String     @map("password_hash")
-  createdAt    DateTime   @default(now()) @map("created_at")
-  updatedAt    DateTime   @updatedAt @map("updated_at")
-
-  userRoles    UserRole[]
-  sessions     Session[]
-
-  @@map("users")
-}
-
-model Role {
-  id        String     @id @default(cuid()) @map("id")
-  name      String     @unique @map("name")
-
-  userRoles UserRole[]
-
-  @@map("roles")
-}
-
-model UserRole {
-  userId String @map("user_id")
-  roleId String @map("role_id")
-
-  user   User   @relation(fields: [userId], references: [id], onDelete: Cascade)
-  role   Role   @relation(fields: [roleId], references: [id], onDelete: Cascade)
-
-  @@id([userId, roleId])
-  @@map("user_roles")
-}
-
-model Session {
-  id        String   @id @default(cuid()) @map("id")
-  userId    String   @map("user_id")
-  expiresAt DateTime @map("expires_at")
-  createdAt DateTime @default(now()) @map("created_at")
-
-  user      User     @relation(fields: [userId], references: [id], onDelete: Cascade)
-
-  @@map("sessions")
-}