Claude Fable 5
9674c0bae2
Some checks failed
CI / Lint, typecheck, test (push) Successful in 3m41s
CD / Build and push images (push) Successful in 3m44s
CI / Build container images (push) Has been skipped
CD / Deploy to Test (push) Successful in 9s
CD / Smoke tests against Test (push) Successful in 1m18s
CD / Promote to Int (push) Successful in 11s
CI / Auth e2e pack (push) Failing after 2m53s
CI / Import/export fidelity gate (push) Has been skipped
New per-user digestFrequency (hourly default | daily | off) on the profile and in the settings UI. A scheduler job (15 min cadence) mails a user once their oldest unread, unmailed notification exceeds the cadence window: one localized mail per batch, grouped per pond then per page with actor names and change/comment counts, enqueued through the mail outbox. Sending marks the batch mailed — never read — and re-checks page read permission per entry at send time; entries the user can no longer read are dropped from the mail but still marked handled, so revoked content cannot queue forever. Every mail carries a signed, single-purpose unsubscribe link: it only flips the setting to off, renders a session-free confirmation page, and sets no cookie. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01EwZ4jR4KFAPvpjWevfUGX1
97 lines
3.3 KiB
TypeScript
97 lines
3.3 KiB
TypeScript
import { z } from 'zod';
|
|
|
|
/**
|
|
* Auth-related schemas shared between api (runtime validation) and web
|
|
* (form validation). Field error messages are i18n keys resolved by the
|
|
* client; the api returns them inside ApiErrorBody.details.
|
|
*/
|
|
|
|
export const usernameSchema = z
|
|
.string()
|
|
.min(3, 'validation.username.tooShort')
|
|
.max(32, 'validation.username.tooLong')
|
|
.regex(/^[a-z0-9](?:[a-z0-9-]*[a-z0-9])?$/i, 'validation.username.charset');
|
|
|
|
/**
|
|
* Password policy per issue #13: length over composition rules, plus a
|
|
* small blocklist of the most common passwords (full breach-list checks
|
|
* are deliberately out of scope for v1).
|
|
*/
|
|
const COMMON_PASSWORDS = new Set([
|
|
'1234567890',
|
|
'qwertyuiop',
|
|
'password12',
|
|
'password123',
|
|
'passwort123',
|
|
'1q2w3e4r5t',
|
|
'iloveyou12',
|
|
'sonnenschein',
|
|
'schalke04!',
|
|
'aaaaaaaaaa',
|
|
'1234567890a',
|
|
'qwertz1234',
|
|
]);
|
|
|
|
export const passwordSchema = z
|
|
.string()
|
|
.min(10, 'validation.password.tooShort')
|
|
.max(128, 'validation.password.tooLong')
|
|
.refine((value) => !COMMON_PASSWORDS.has(value.toLowerCase()), 'validation.password.tooCommon');
|
|
|
|
export const signupInputSchema = z.object({
|
|
username: usernameSchema,
|
|
email: z.string().email('validation.email.invalid').max(254),
|
|
displayName: z.string().trim().min(1, 'validation.displayName.required').max(80),
|
|
password: passwordSchema,
|
|
locale: z.enum(['de', 'en']).default('en'),
|
|
});
|
|
export type SignupInput = z.infer<typeof signupInputSchema>;
|
|
/** Form-side type: locale is optional before Zod applies its default. */
|
|
export type SignupFormInput = z.input<typeof signupInputSchema>;
|
|
|
|
export const loginInputSchema = z.object({
|
|
usernameOrEmail: z.string().min(1, 'validation.required'),
|
|
password: z.string().min(1, 'validation.required'),
|
|
});
|
|
export type LoginInput = z.infer<typeof loginInputSchema>;
|
|
|
|
export const verifyEmailInputSchema = z.object({ token: z.string().min(16).max(256) });
|
|
export const resendVerificationInputSchema = z.object({
|
|
email: z.string().email('validation.email.invalid'),
|
|
});
|
|
export const forgotPasswordInputSchema = z.object({
|
|
email: z.string().email('validation.email.invalid'),
|
|
});
|
|
export const resetPasswordInputSchema = z.object({
|
|
token: z.string().min(16).max(256),
|
|
password: passwordSchema,
|
|
});
|
|
/** Form-side schema for the reset page (token travels via URL, not form). */
|
|
export const resetPasswordFormSchema = z.object({ password: passwordSchema });
|
|
export const updateProfileInputSchema = z.object({
|
|
displayName: z.string().trim().min(1, 'validation.displayName.required').max(80).optional(),
|
|
locale: z.enum(['de', 'en']).optional(),
|
|
/** Auto-watch preferences (issue #93). */
|
|
autoWatchOwnPages: z.boolean().optional(),
|
|
autoWatchOnComment: z.boolean().optional(),
|
|
/** E-mail digest cadence (issue #95). */
|
|
digestFrequency: z.enum(['hourly', 'daily', 'off']).optional(),
|
|
});
|
|
export const changePasswordInputSchema = z.object({
|
|
currentPassword: z.string().min(1, 'validation.required'),
|
|
newPassword: passwordSchema,
|
|
});
|
|
|
|
/** Public shape of the signed-in user, returned by /auth/me. */
|
|
export interface CurrentUser {
|
|
id: string;
|
|
username: string;
|
|
email: string;
|
|
displayName: string;
|
|
locale: 'de' | 'en';
|
|
isSiteAdmin: boolean;
|
|
autoWatchOwnPages: boolean;
|
|
autoWatchOnComment: boolean;
|
|
digestFrequency: 'hourly' | 'daily' | 'off';
|
|
}
|