Abstract Class: BaseAuthDiscoverRouteSQL

Defined in: src/routes/sql/BaseAuthDiscoverRouteSQL.ts:8

Lets an anonymous caller discover which sign-in methods (password, authenticator app, passkey, security key, one-time code) are configured for a claimed account identifier, so a sign-in UI can present only the methods that will actually work instead of a fixed list of every method the server supports.

Anti-enumeration discipline (mirrors PasskeyStrategy.challenge()'s ?uid= hint handling): a claimed identifier that doesn't resolve to any account returns the exact same EMPTY_RESULT shape as an account that resolves but has nothing configured — never a different shape, never a 404. This is a partial mitigation only (an account with methods configured is still distinguishable from one with none, same caveat PasskeyStrategy documents) — rate limiting by the claimed identifier is the other half of the mitigation.

Extends

• BaseAuthDiscoverRoute<UserSQL, AliasSQL, SecretSQL>

Constructors

Constructor

new BaseAuthDiscoverRouteSQL(): BaseAuthDiscoverRouteSQL

Returns

BaseAuthDiscoverRouteSQL

Inherited from

BaseAuthDiscoverRoute.constructor

Properties

aliasClass

protected aliasClass: any = AliasSQL

Defined in: src/routes/sql/BaseAuthDiscoverRouteSQL.ts:9

Overrides

BaseAuthDiscoverRoute.aliasClass

---

aliasRepo?

protected optional aliasRepo?: RepoUtils<AliasSQL>

Defined in: src/routes/BaseAuthDiscoverRoute.ts:58

Inherited from

BaseAuthDiscoverRoute.aliasRepo

---

rateLimiter?

protected optional rateLimiter?: RateLimiter

Defined in: src/routes/BaseAuthDiscoverRoute.ts:62

Inherited from

BaseAuthDiscoverRoute.rateLimiter

---

secretClass

protected secretClass: any = SecretSQL

Defined in: src/routes/sql/BaseAuthDiscoverRouteSQL.ts:10

Overrides

BaseAuthDiscoverRoute.secretClass

---

secretRepo?

protected optional secretRepo?: RepoUtils<SecretSQL>

Defined in: src/routes/BaseAuthDiscoverRoute.ts:59

Inherited from

BaseAuthDiscoverRoute.secretRepo

---

userClass

protected userClass: any = UserSQL

Defined in: src/routes/sql/BaseAuthDiscoverRouteSQL.ts:11

Overrides

BaseAuthDiscoverRoute.userClass

---

userUtils?

protected optional userUtils?: UserUtils<UserSQL, AliasSQL>

Defined in: src/routes/BaseAuthDiscoverRoute.ts:64

Inherited from

BaseAuthDiscoverRoute.userUtils

Methods

convertAliasType()

protected convertAliasType(type): OTPContactType

Defined in: src/routes/BaseAuthDiscoverRoute.ts:94

Parameters

type

AliasType

Returns

OTPContactType

Inherited from

BaseAuthDiscoverRoute.convertAliasType

---

discover()

discover(id, req): Promise<DiscoverResult>

Defined in: src/routes/BaseAuthDiscoverRoute.ts:117

Returns which sign-in methods are available for the given claimed identifier (a User uid or any Alias value). Always 200, always the same response shape, regardless of whether the identifier resolves to a real account.

Parameters

id

string | undefined

req

HttpRequest

Returns

Promise<DiscoverResult>

Inherited from

BaseAuthDiscoverRoute.discover

---

initialize()

protected initialize(): Promise<void>

Defined in: src/routes/BaseAuthDiscoverRoute.ts:67

Returns

Promise<void>

Inherited from

BaseAuthDiscoverRoute.initialize