mirror of
https://github.com/mauriceboe/TREK.git
synced 2026-06-20 13:51:45 +00:00
Maurice
4cb4454d9f
- Remove server exports orphaned by the Express removal: the immich album-link helpers, seven route-only service exports, getFileByIdFull; de-export internal-only helpers (utcSuffix). - De-duplicate verifyTripAccess (9 identical copies -> services/tripAccess.ts) and avatarUrl (3 -> services/avatarUrl.ts); name the bcrypt cost (BCRYPT_COST) and the email regex (EMAIL_REGEX). Public API unchanged. - resetPasswordRequestSchema declared `password`, but the client sends and the service reads `new_password` — rename it so the contract matches and the client types resolve. - Make ATLAS-013 deterministic: stub the admin-1 GeoJSON download instead of fetching ~4600 features from GitHub during the test (it hung the suite).
60 lines
2.0 KiB
TypeScript
60 lines
2.0 KiB
TypeScript
import { z } from 'zod';
|
|
|
|
/**
|
|
* Auth API contract for /api/auth.
|
|
*
|
|
* The auth service does the heavy credential/MFA validation internally (and
|
|
* returns its own {error,status}); these schemas pin the well-defined request
|
|
* bodies the public + account endpoints accept. Login/reset can branch to an
|
|
* MFA step, so password fields stay permissive where the service owns the rules.
|
|
*/
|
|
export const registerRequestSchema = z.object({
|
|
email: z.string(),
|
|
password: z.string(),
|
|
username: z.string().optional(),
|
|
invite_token: z.string().optional(),
|
|
});
|
|
export type RegisterRequest = z.infer<typeof registerRequestSchema>;
|
|
|
|
export const loginRequestSchema = z.object({
|
|
email: z.string(),
|
|
password: z.string(),
|
|
});
|
|
export type LoginRequest = z.infer<typeof loginRequestSchema>;
|
|
|
|
export const forgotPasswordRequestSchema = z.object({
|
|
email: z.string(),
|
|
});
|
|
export type ForgotPasswordRequest = z.infer<typeof forgotPasswordRequestSchema>;
|
|
|
|
export const resetPasswordRequestSchema = z.object({
|
|
token: z.string(),
|
|
// The client sends `new_password` and the service reads `body.new_password`;
|
|
// the field was misnamed `password` here, which broke the client's typing.
|
|
new_password: z.string(),
|
|
mfa_code: z.string().optional(),
|
|
});
|
|
export type ResetPasswordRequest = z.infer<typeof resetPasswordRequestSchema>;
|
|
|
|
export const changePasswordRequestSchema = z.object({
|
|
current_password: z.string(),
|
|
new_password: z.string(),
|
|
});
|
|
export type ChangePasswordRequest = z.infer<typeof changePasswordRequestSchema>;
|
|
|
|
export const mfaVerifyLoginRequestSchema = z.object({
|
|
mfa_token: z.string(),
|
|
code: z.string(),
|
|
});
|
|
export type MfaVerifyLoginRequest = z.infer<typeof mfaVerifyLoginRequestSchema>;
|
|
|
|
export const mfaEnableRequestSchema = z.object({
|
|
code: z.string(),
|
|
});
|
|
export type MfaEnableRequest = z.infer<typeof mfaEnableRequestSchema>;
|
|
|
|
export const mcpTokenCreateRequestSchema = z.object({
|
|
name: z.string().optional(),
|
|
});
|
|
export type McpTokenCreateRequest = z.infer<typeof mcpTokenCreateRequestSchema>;
|