@absolutejs/auth 0.2.4 → 0.2.5

package/.prettierignore

@@ -0,0 +1,4 @@
+node_modules
+dist
+build
+*.min.js

package/.prettierrc.json

@@ -0,0 +1,9 @@
+{
+	"semi": true,
+	"trailingComma": "none",
+	"singleQuote": true,
+	"printWidth": 80,
+	"tabWidth": 4,
+	"endOfLine": "auto",
+	"useTabs": true
+}

package/dist/index.js

@@ -1,2 +1,2 @@
 // @bun
-import{OAuth2RequestError as cN,ArcticFetchError as oN}from"arctic";import{Elysia as tN}from"elysia";import{generateState as zN,generateCodeVerifier as PN}from"arctic";import{Elysia as RN}from"elysia";import{AmazonCognito as v,AniList as l,Apple as h,Atlassian as u,Auth0 as c,Authentik as o,Bitbucket as t,Box as s,Coinbase as d,Discord as a,Dribbble as i,Dropbox as e,Facebook as r,Figma as NN,Intuit as EN,GitHub as SN,GitLab as IN,Google as UN,Kakao as mN,KeyCloak as MN,Lichess as TN,Line as xN,Linear as ON,LinkedIn as wN,MicrosoftEntraId as DN,MyAnimeList as $N,Notion as AN,Okta as LN,Osu as HN,Patreon as CN,Reddit as fN,Roblox as nN,Salesforce as JN,Shikimori as QN,Slack as XN,Spotify as YN,Strava as jN,Tiltify as qN,Tumblr as FN,Twitch as WN,Twitter as ZN,VK as BN,WorkOS as gN,Yahoo as pN,Yandex as GN,Zoom as KN,FortyTwo as VN}from"arctic";var q={AmazonCognito:v,AniList:l,Apple:h,Atlassian:u,Auth0:c,Authentik:o,Bitbucket:t,Box:s,Coinbase:d,Discord:a,Dribbble:i,Dropbox:e,Facebook:r,Figma:NN,FortyTwo:VN,GitHub:SN,GitLab:IN,Google:UN,Intuit:EN,Kakao:mN,KeyCloak:MN,Lichess:TN,Line:xN,Linear:ON,LinkedIn:wN,MicrosoftEntraId:DN,MyAnimeList:$N,Notion:AN,Okta:LN,Osu:HN,Patreon:CN,Reddit:fN,Roblox:nN,Salesforce:JN,Shikimori:QN,Slack:XN,Spotify:YN,Strava:jN,Tiltify:qN,Tumblr:FN,Twitch:WN,Twitter:ZN,VK:BN,WorkOS:gN,Yahoo:pN,Yandex:GN,Zoom:KN},g=Object.keys(q).reduce((N,S)=>{return N[S.toLowerCase()]=S,N},{});var Z=(N)=>("refreshAccessToken"in N)&&typeof N.refreshAccessToken==="function",p=(N)=>("revokeAccessToken"in N)&&typeof N.revokeAccessToken==="function",J=(N)=>Object.keys(q).map((S)=>S.toLowerCase()).includes(N.toLowerCase()),G=(N)=>!0,K=(N)=>N!==null&&N!==void 0&&N.trim()!=="";var V=86400000;var F=1800;var z=({clientProviders:N,authorizeRoute:S="authorize",onAuthorize:M})=>new RN().get(`/${S}/:provider`,({error:E,redirect:I,cookie:{state:m,code_verifier:T,auth_provider:U,redirect_url:O},params:{provider:$},headers:A})=>{if($===void 0)return E("Bad Request","Provider is required");if(!J($))return E("Bad Request","Invalid provider");try{let w=$.toLowerCase(),{providerInstance:f,scopes:L,searchParams:D}=N[w],x=A.referer??"/";O.set({httpOnly:!0,maxAge:F,path:"/",sameSite:"lax",secure:!0,value:x}),U.set({httpOnly:!0,maxAge:F,path:"/",sameSite:"lax",secure:!0,value:$});let H=zN();m.set({httpOnly:!0,maxAge:F,path:"/",sameSite:"lax",secure:!0,value:H});let C=f.createAuthorizationURL.toString().includes("codeVerifier"),n=C?PN():void 0;C&&T.set({httpOnly:!0,maxAge:F,path:"/",sameSite:"lax",secure:!0,value:n??""});let Q=C?f.createAuthorizationURL(H,n,L):f.createAuthorizationURL(H,L);return D.forEach(([Y,j])=>{Q.searchParams.set(Y,j)}),M?.(),I(Q.toString())}catch(w){if(w instanceof Error)return E("Internal Server Error",`${w.message} - ${w.stack??""}`);return E("Internal Server Error",`Unknown error: ${w}`)}});import{decodeIdToken as kN}from"arctic";import{Elysia as yN}from"elysia";import{Elysia as bN}from"elysia";var X=()=>{let N={};return new bN({name:"sessionStore"}).state({session:N})};var P=({clientProviders:N,callbackRoute:S="authorize/callback",onCallback:M})=>new yN().use(X()).get(`/${S}`,async({error:E,redirect:I,store:{session:m},cookie:{state:T,code_verifier:U,redirect_url:O,user_session_id:$,auth_provider:A},query:{code:w,state:f}})=>{if(!K(w)||T.value===void 0)return E("Bad Request","Invalid callback request");if(f!==T.value)return E("Bad Request","Invalid state mismatch");if(A.value===void 0)return E("Unauthorized","No auth provider found");if(!J(A.value))return E("Unauthorized","Invalid provider");let L=A.value.toLowerCase(),{providerInstance:D}=N[L];try{T.remove();let x=D.validateAuthorizationCode.toString().includes("codeVerifier"),H=U.value;if(x&&H===void 0)return E("Bad Request","Code verifier not found and is required");let C=H??"",n=await(x?D.validateAuthorizationCode(w,C):D.validateAuthorizationCode(w));if(x)U.remove();let Q=Object.fromEntries(Object.entries(kN(n.idToken())).map(([B,W])=>[B,typeof W==="string"?W:void 0])),Y=A.value;await M?.({authProvider:Y,decodedIdToken:Q,session:m,user_session_id:$});let j=O.value??"/";return I(j)}catch(x){if(x instanceof Error)return E("Internal Server Error",`${x.message} - ${x.stack??""}`);return E("Internal Server Error",`Failed to validate authorization code: Unknown error: ${x}`)}});import{Elysia as _N}from"elysia";var R=({logoutRoute:N="logout",onLogout:S})=>new _N().post(`/${N}`,async({error:M,cookie:{user_session_id:E,auth_provider:I}})=>{if(I.value===void 0)return M("Unauthorized","No auth provider found");try{return S?.(),E.remove(),I.remove(),new Response("Succesfuly Logged Out",{status:204})}catch(m){if(m instanceof Error)return M("Internal Server Error",`Failed to logout: ${m.message}`);return M("Internal Server Error",`Failed to logout: Unknown error: ${m}`)}});import{Elysia as vN}from"elysia";var b=()=>new vN().use(X()).derive(({store:{session:N},cookie:{user_session_id:S},error:M})=>({protectRoute:async(E,I)=>{if(S.value===void 0)return I?.()??M("Unauthorized","No session ID found");if(N[S.value]===void 0)return I?.()??M("Unauthorized","No session found");return E()}})).as("plugin");import{Elysia as lN}from"elysia";var k=({clientProviders:N,refreshRoute:S="refresh",onRefresh:M})=>new lN().post(`/${S}`,async({error:E,cookie:{user_refresh_token:I,auth_provider:m}})=>{if(I.value===void 0)return E("Unauthorized","No refresh token found");if(m.value===void 0)return E("Unauthorized","No auth provider found");let T=m.value.toLowerCase(),{providerInstance:U}=N[T];if(!Z(U))return E("Not Implemented","Provider is not refreshable");try{return await U.refreshAccessToken(I.value),M?.(),new Response("Token refreshed",{status:204})}catch(O){if(O instanceof Error)return E("Internal Server Error",`Failed to refresh token: ${O.message}`);return E("Internal Server Error",`Faile to refresh token: Unknown error: ${O}`)}});import{Elysia as hN}from"elysia";var y=({clientProviders:N,revokeRoute:S="revoke",onRevoke:M})=>new hN().post(`/${S}/access-token`,async({error:E,cookie:{user_refresh_token:I,auth_provider:m}})=>{if(I.value===void 0)return E("Unauthorized","No refresh token found");if(m.value===void 0)return E("Unauthorized","No auth provider found");let T=m.value.toLowerCase(),{providerInstance:U}=N[T];if(!p(U))return E("Not Implemented","Provider does not support revocation");try{return await U.revokeAccessToken(I.value),M?.(),new Response("Token revoked",{status:204})}catch(O){if(O instanceof Error)return E("Internal Server Error",`Failed to revoke token: ${O.message}`);return E("Internal Server Error",`Failed to revoke token: Unknown error: ${O}`)}});import{Elysia as uN}from"elysia";var _=({clientProviders:N,statusRoute:S="auth-status",onStatus:M})=>new uN().use(X()).get(`/${S}`,async({error:E,cookie:{user_session_id:I,auth_provider:m},store:{session:T}})=>{try{if(I.value===void 0)return new Response(JSON.stringify({isLoggedIn:!1,user:null}),{headers:{"Content-Type":"application/json"}});if(m.value===void 0)return new Response(JSON.stringify({isLoggedIn:!1,user:null}),{headers:{"Content-Type":"application/json"}});let U=m.value.toLowerCase(),{providerInstance:O}=N[U];if(!Z(O))return E("Not Implemented","Provider is not refreshable");let $=T[I.value];if($===void 0)return new Response(JSON.stringify({isLoggedIn:!1,user:null}),{headers:{"Content-Type":"application/json"}});let{user:A}=$;return M?.(),new Response(JSON.stringify({isLoggedIn:!0,user:A}),{headers:{"Content-Type":"application/json"}})}catch(U){if(U instanceof Error)return E("Internal Server Error",`Error: ${U.message} - ${U.stack??""}`);return E("Internal Server Error",`Unknown Error: ${U}`)}});var BE=async({authProvider:N,decodedIdToken:S,user_session_id:M,session:E,getUser:I,createUser:m})=>{let T=await I?.({authProvider:N,decodedIdToken:S});if(T=T??await m?.({authProvider:N,decodedIdToken:S}),!G(T))throw new Error("Internal Server Error - Invalid user schema");let U=crypto.randomUUID();E[U]={expiresAt:Date.now()+V,user:T},M.set({httpOnly:!0,sameSite:"lax",secure:!0,value:U})},gE=(N)=>N;var lE=({config:N,authorizeRoute:S,callbackRoute:M,logoutRoute:E,statusRoute:I,refreshRoute:m,revokeRoute:T,onAuthorize:U,onCallback:O,onStatus:$,onRefresh:A,onLogout:w,onRevoke:f})=>{let L=Object.keys(N).reduce((D,x)=>{if(!Object.prototype.hasOwnProperty.call(N,x))return D;if(!J(x))return console.error(`Provider ${x} is not supported`),D;let H=N[x];if(!H)return D;let C=x.toLowerCase(),n=g[C];if(!J(n))return console.error(`Provider ${x} is not supported`),D;let Q=q[n],{credentials:Y,scopes:j=[],searchParams:B=[]}=H,W=new Q(...Y);return D[C]={providerInstance:W,scopes:j,searchParams:B},D},{});return new tN().error("OAUTH2_REQUEST_ERROR",cN).error("ARCTIC_FETCH_ERROR",oN).use(R({logoutRoute:E,onLogout:w})).use(y({clientProviders:L,onRevoke:f,revokeRoute:T})).use(_({clientProviders:L,onStatus:$,statusRoute:I})).use(k({clientProviders:L,onRefresh:A,refreshRoute:m})).use(z({authorizeRoute:S,clientProviders:L,onAuthorize:U})).use(P({callbackRoute:M,clientProviders:L,onCallback:O})).use(b()).as("plugin")};export{BE as instantiateUserSession,gE as createAuthConfig,lE as absoluteAuth};
+import{OAuth2RequestError as cN,ArcticFetchError as tN}from"arctic";import{Elysia as oN}from"elysia";import{generateState as zN,generateCodeVerifier as PN}from"arctic";import{Elysia as RN}from"elysia";import{AmazonCognito as _,AniList as l,Apple as h,Atlassian as u,Auth0 as c,Authentik as t,Bitbucket as o,Box as d,Coinbase as s,Discord as a,Dribbble as i,Dropbox as e,Facebook as r,Figma as NN,Intuit as EN,GitHub as SN,GitLab as IN,Google as UN,Kakao as mN,KeyCloak as MN,Lichess as TN,Line as xN,Linear as ON,LinkedIn as wN,MicrosoftEntraId as DN,MyAnimeList as $N,Notion as AN,Okta as LN,Osu as HN,Patreon as CN,Reddit as fN,Roblox as JN,Salesforce as QN,Shikimori as XN,Slack as YN,Spotify as jN,Strava as qN,Tiltify as FN,Tumblr as WN,Twitch as ZN,Twitter as BN,VK as gN,WorkOS as pN,Yahoo as nN,Yandex as GN,Zoom as KN,FortyTwo as VN}from"arctic";var F={AmazonCognito:_,AniList:l,Apple:h,Atlassian:u,Auth0:c,Authentik:t,Bitbucket:o,Box:d,Coinbase:s,Discord:a,Dribbble:i,Dropbox:e,Facebook:r,Figma:NN,FortyTwo:VN,GitHub:SN,GitLab:IN,Google:UN,Intuit:EN,Kakao:mN,KeyCloak:MN,Lichess:TN,Line:xN,Linear:ON,LinkedIn:wN,MicrosoftEntraId:DN,MyAnimeList:$N,Notion:AN,Okta:LN,Osu:HN,Patreon:CN,Reddit:fN,Roblox:JN,Salesforce:QN,Shikimori:XN,Slack:YN,Spotify:jN,Strava:qN,Tiltify:FN,Tumblr:WN,Twitch:ZN,Twitter:BN,VK:gN,WorkOS:pN,Yahoo:nN,Yandex:GN,Zoom:KN},p=Object.keys(F).reduce((N,S)=>{return N[S.toLowerCase()]=S,N},{});var B=(N)=>("refreshAccessToken"in N)&&typeof N.refreshAccessToken==="function",n=(N)=>("revokeAccessToken"in N)&&typeof N.revokeAccessToken==="function",Q=(N)=>Object.keys(F).map((S)=>S.toLowerCase()).includes(N.toLowerCase()),G=(N)=>!0,K=(N)=>N!==null&&N!==void 0&&N.trim()!=="";var V=86400000;var W=1800;var z=({clientProviders:N,authorizeRoute:S="authorize",onAuthorize:I})=>new RN().get(`/${S}/:provider`,({error:E,redirect:U,cookie:{state:M,code_verifier:T,auth_provider:m,redirect_url:O},params:{provider:w},headers:A})=>{if(w===void 0)return E("Bad Request","Provider is required");if(!Q(w))return E("Bad Request","Invalid provider");try{let D=w.toLowerCase(),{providerInstance:f,scopes:L,searchParams:$}=N[D],x=A.referer??"/";O.set({httpOnly:!0,maxAge:W,path:"/",sameSite:"lax",secure:!0,value:x}),m.set({httpOnly:!0,maxAge:W,path:"/",sameSite:"lax",secure:!0,value:w});let H=zN();M.set({httpOnly:!0,maxAge:W,path:"/",sameSite:"lax",secure:!0,value:H});let C=f.createAuthorizationURL.toString().includes("codeVerifier"),J=C?PN():void 0;C&&T.set({httpOnly:!0,maxAge:W,path:"/",sameSite:"lax",secure:!0,value:J??""});let X=C?f.createAuthorizationURL(H,J,L):f.createAuthorizationURL(H,L);return $.forEach(([j,q])=>{X.searchParams.set(j,q)}),I?.(),U(X.toString())}catch(D){if(D instanceof Error)return E("Internal Server Error",`${D.message} - ${D.stack??""}`);return E("Internal Server Error",`Unknown error: ${D}`)}});import{decodeIdToken as kN}from"arctic";import{Elysia as yN}from"elysia";import{Elysia as bN}from"elysia";var Y=()=>{let N={};return new bN({name:"sessionStore"}).state({session:N})};var P=({clientProviders:N,callbackRoute:S="authorize/callback",onCallback:I})=>new yN().use(Y()).get(`/${S}`,async({error:E,redirect:U,store:{session:M},cookie:{state:T,code_verifier:m,redirect_url:O,user_session_id:w,auth_provider:A},query:{code:D,state:f}})=>{if(!K(D)||T.value===void 0)return E("Bad Request","Invalid callback request");if(f!==T.value)return E("Bad Request","Invalid state mismatch");if(A.value===void 0)return E("Unauthorized","No auth provider found");if(!Q(A.value))return E("Unauthorized","Invalid provider");let L=A.value.toLowerCase(),{providerInstance:$}=N[L];try{T.remove();let x=$.validateAuthorizationCode.toString().includes("codeVerifier"),H=m.value;if(x&&H===void 0)return E("Bad Request","Code verifier not found and is required");let C=H??"",J=await(x?$.validateAuthorizationCode(D,C):$.validateAuthorizationCode(D));if(x)m.remove();let X=Object.fromEntries(Object.entries(kN(J.idToken())).map(([g,Z])=>[g,typeof Z==="string"?Z:void 0])),j=A.value;console.log("in route user_session_id before",w.value),await I?.({authProvider:j,decodedIdToken:X,session:M,user_session_id:w}),console.log("in route user_session_id after",w.value);let q=O.value??"/";return U(q)}catch(x){if(x instanceof Error)return E("Internal Server Error",`${x.message} - ${x.stack??""}`);return E("Internal Server Error",`Failed to validate authorization code: Unknown error: ${x}`)}});import{Elysia as vN}from"elysia";var R=({logoutRoute:N="logout",onLogout:S})=>new vN().post(`/${N}`,async({error:I,cookie:{user_session_id:E,auth_provider:U}})=>{if(U.value===void 0)return I("Unauthorized","No auth provider found");try{return S?.(),E.remove(),U.remove(),new Response("Succesfuly Logged Out",{status:204})}catch(M){if(M instanceof Error)return I("Internal Server Error",`Failed to logout: ${M.message}`);return I("Internal Server Error",`Failed to logout: Unknown error: ${M}`)}});import{Elysia as _N}from"elysia";var b=()=>new _N().use(Y()).derive(({store:{session:N},cookie:{user_session_id:S},error:I})=>({protectRoute:async(E,U)=>{if(S.value===void 0)return U?.()??I("Unauthorized","No session ID found");if(N[S.value]===void 0)return U?.()??I("Unauthorized","No session found");return E()}})).as("plugin");import{Elysia as lN}from"elysia";var k=({clientProviders:N,refreshRoute:S="refresh",onRefresh:I})=>new lN().post(`/${S}`,async({error:E,cookie:{user_refresh_token:U,auth_provider:M}})=>{if(U.value===void 0)return E("Unauthorized","No refresh token found");if(M.value===void 0)return E("Unauthorized","No auth provider found");let T=M.value.toLowerCase(),{providerInstance:m}=N[T];if(!B(m))return E("Not Implemented","Provider is not refreshable");try{return await m.refreshAccessToken(U.value),I?.(),new Response("Token refreshed",{status:204})}catch(O){if(O instanceof Error)return E("Internal Server Error",`Failed to refresh token: ${O.message}`);return E("Internal Server Error",`Faile to refresh token: Unknown error: ${O}`)}});import{Elysia as hN}from"elysia";var y=({clientProviders:N,revokeRoute:S="revoke",onRevoke:I})=>new hN().post(`/${S}/access-token`,async({error:E,cookie:{user_refresh_token:U,auth_provider:M}})=>{if(U.value===void 0)return E("Unauthorized","No refresh token found");if(M.value===void 0)return E("Unauthorized","No auth provider found");let T=M.value.toLowerCase(),{providerInstance:m}=N[T];if(!n(m))return E("Not Implemented","Provider does not support revocation");try{return await m.revokeAccessToken(U.value),I?.(),new Response("Token revoked",{status:204})}catch(O){if(O instanceof Error)return E("Internal Server Error",`Failed to revoke token: ${O.message}`);return E("Internal Server Error",`Failed to revoke token: Unknown error: ${O}`)}});import{Elysia as uN}from"elysia";var v=({clientProviders:N,statusRoute:S="auth-status",onStatus:I})=>new uN().use(Y()).get(`/${S}`,async({error:E,cookie:{user_session_id:U,auth_provider:M},store:{session:T}})=>{try{if(U.value===void 0)return new Response(JSON.stringify({isLoggedIn:!1,user:null}),{headers:{"Content-Type":"application/json"}});if(M.value===void 0)return new Response(JSON.stringify({isLoggedIn:!1,user:null}),{headers:{"Content-Type":"application/json"}});let m=M.value.toLowerCase(),{providerInstance:O}=N[m];if(!B(O))return E("Not Implemented","Provider is not refreshable");let w=T[U.value];if(w===void 0)return new Response(JSON.stringify({isLoggedIn:!1,user:null}),{headers:{"Content-Type":"application/json"}});let{user:A}=w;return I?.(),new Response(JSON.stringify({isLoggedIn:!0,user:A}),{headers:{"Content-Type":"application/json"}})}catch(m){if(m instanceof Error)return E("Internal Server Error",`Error: ${m.message} - ${m.stack??""}`);return E("Internal Server Error",`Unknown Error: ${m}`)}});var gE=async({authProvider:N,decodedIdToken:S,user_session_id:I,session:E,getUser:U,createUser:M})=>{let T=await U?.({authProvider:N,decodedIdToken:S});if(T=T??await M?.({authProvider:N,decodedIdToken:S}),!G(T))throw new Error("Internal Server Error - Invalid user schema");let m=crypto.randomUUID();E[m]={expiresAt:Date.now()+V,user:T},console.log("in func user_session_id before set",I.value),I.set({httpOnly:!0,sameSite:"lax",secure:!0,value:m}),console.log("in func user_session_id after set",I.value)},pE=(N)=>N;var lE=({config:N,authorizeRoute:S,callbackRoute:I,logoutRoute:E,statusRoute:U,refreshRoute:M,revokeRoute:T,onAuthorize:m,onCallback:O,onStatus:w,onRefresh:A,onLogout:D,onRevoke:f})=>{let L=Object.keys(N).reduce(($,x)=>{if(!Object.prototype.hasOwnProperty.call(N,x))return $;if(!Q(x))return console.error(`Provider ${x} is not supported`),$;let H=N[x];if(!H)return $;let C=x.toLowerCase(),J=p[C];if(!Q(J))return console.error(`Provider ${x} is not supported`),$;let X=F[J],{credentials:j,scopes:q=[],searchParams:g=[]}=H,Z=new X(...j);return $[C]={providerInstance:Z,scopes:q,searchParams:g},$},{});return new oN().error("OAUTH2_REQUEST_ERROR",cN).error("ARCTIC_FETCH_ERROR",tN).use(R({logoutRoute:E,onLogout:D})).use(y({clientProviders:L,onRevoke:f,revokeRoute:T})).use(v({clientProviders:L,onStatus:w,statusRoute:U})).use(k({clientProviders:L,onRefresh:A,refreshRoute:M})).use(z({authorizeRoute:S,clientProviders:L,onAuthorize:m})).use(P({callbackRoute:I,clientProviders:L,onCallback:O})).use(b()).as("plugin")};export{gE as instantiateUserSession,pE as createAuthConfig,lE as absoluteAuth};

package/package.json

@@ -1,5 +1,5 @@
 {
-	"version": "0.2.4",
+	"version": "0.2.5",
 	"name": "@absolutejs/auth",
 	"description": "An authorization library for absolutejs",
 	"repository": {
@@ -27,7 +27,6 @@
 		"oauth"
 	],
 	"types": "dist/src/index.d.ts",
-	"dependencies": {},
 	"peerDependencies": {
 		"arctic": ">= 3.6.0",
 		"elysia": ">= 1.2.0"
@@ -47,10 +46,5 @@
 		"elysia": "1.2.25",
 		"typescript": "5.8.3"
 	},
-	"module": "dist/index.js",
-	"files": [
-		"dist/",
-		"README.md",
-		"LICENSE"
-	]
+	"module": "dist/index.js"
 }

package/src/authorize.ts

@@ -0,0 +1,119 @@
+import { generateState, generateCodeVerifier } from 'arctic';
+import { Elysia } from 'elysia';
+import { isValidProviderKey } from './typeGuards';
+import { ClientProviders } from './types';
+import { COOKIE_DURATION } from './constants';
+
+type AuthorizeProps = {
+	clientProviders: ClientProviders;
+	authorizeRoute?: string;
+	onAuthorize?: () => void;
+};
+
+export const authorize = ({
+	clientProviders,
+	authorizeRoute = 'authorize',
+	onAuthorize
+}: AuthorizeProps) =>
+	new Elysia().get(
+		`/${authorizeRoute}/:provider`,
+		({
+			error,
+			redirect,
+			cookie: { state, code_verifier, auth_provider, redirect_url },
+			params: { provider },
+			headers
+		}) => {
+			if (provider === undefined)
+				return error('Bad Request', 'Provider is required');
+
+			if (!isValidProviderKey(provider)) {
+				return error('Bad Request', 'Invalid provider');
+			}
+
+			try {
+				const normalizedProvider = provider.toLowerCase();
+				const { providerInstance, scopes, searchParams } =
+					clientProviders[normalizedProvider];
+
+				const redirectUrl = headers['referer'] ?? '/';
+
+				redirect_url.set({
+					httpOnly: true,
+					maxAge: COOKIE_DURATION,
+					path: '/',
+					sameSite: 'lax',
+					secure: true,
+					value: redirectUrl
+				});
+
+				auth_provider.set({
+					httpOnly: true,
+					maxAge: COOKIE_DURATION,
+					path: '/',
+					sameSite: 'lax',
+					secure: true,
+					value: provider
+				});
+
+				const currentState = generateState();
+
+				state.set({
+					httpOnly: true,
+					maxAge: COOKIE_DURATION,
+					path: '/',
+					sameSite: 'lax',
+					secure: true,
+					value: currentState
+				});
+
+				const usesCodeVerifier = providerInstance.createAuthorizationURL
+					.toString()
+					.includes('codeVerifier');
+				const verifier = usesCodeVerifier
+					? generateCodeVerifier()
+					: undefined;
+				void (
+					usesCodeVerifier &&
+					code_verifier.set({
+						httpOnly: true,
+						maxAge: COOKIE_DURATION,
+						path: '/',
+						sameSite: 'lax',
+						secure: true,
+						value: verifier ?? ''
+					})
+				);
+
+				const authorizationURL = usesCodeVerifier
+					? providerInstance.createAuthorizationURL(
+							currentState,
+							// @ts-expect-error - This is a dynamic check
+							verifier,
+							scopes
+						)
+					: // @ts-expect-error - This is a dynamic check
+						providerInstance.createAuthorizationURL(
+							currentState,
+							scopes
+						);
+
+				searchParams.forEach(([key, value]) => {
+					authorizationURL.searchParams.set(key, value);
+				});
+
+				onAuthorize?.();
+
+				return redirect(authorizationURL.toString());
+			} catch (err) {
+				if (err instanceof Error) {
+					return error(
+						'Internal Server Error',
+						`${err.message} - ${err.stack ?? ''}`
+					);
+				}
+
+				return error('Internal Server Error', `Unknown error: ${err}`);
+			}
+		}
+	);

package/src/callback.ts

@@ -0,0 +1,127 @@
+import { decodeIdToken } from 'arctic';
+import { Elysia } from 'elysia';
+import { sessionStore } from './sessionStore';
+import { isNonEmptyString, isValidProviderKey } from './typeGuards';
+import { ClientProviders, OnCallback } from './types';
+
+type CallbackProps<UserType> = {
+	clientProviders: ClientProviders;
+	callbackRoute?: string;
+	onCallback?: OnCallback<UserType>;
+};
+
+export const callback = <UserType>({
+	clientProviders,
+	callbackRoute = 'authorize/callback',
+	onCallback
+}: CallbackProps<UserType>) =>
+	new Elysia()
+		.use(sessionStore<UserType>())
+		.get(
+			`/${callbackRoute}`,
+			async ({
+				error,
+				redirect,
+				store: { session },
+				cookie: {
+					state: stored_state,
+					code_verifier,
+					redirect_url,
+					user_session_id,
+					auth_provider
+				},
+				query: { code, state: callback_state }
+			}) => {
+				if (
+					!isNonEmptyString(code) ||
+					stored_state.value === undefined
+				) {
+					return error('Bad Request', 'Invalid callback request');
+				}
+
+				if (callback_state !== stored_state.value) {
+					return error('Bad Request', 'Invalid state mismatch');
+				}
+
+				if (auth_provider.value === undefined) {
+					return error('Unauthorized', 'No auth provider found');
+				}
+
+				if (!isValidProviderKey(auth_provider.value)) {
+					return error('Unauthorized', 'Invalid provider');
+				}
+
+				const normalizedProvider = auth_provider.value.toLowerCase();
+				const { providerInstance } =
+					clientProviders[normalizedProvider];
+
+				try {
+					// Clear the stored state so the next request doesn't use it
+					stored_state.remove();
+
+					const hasCodeVerifier =
+						providerInstance.validateAuthorizationCode
+							.toString()
+							.includes('codeVerifier');
+					const verifier = code_verifier.value;
+					if (hasCodeVerifier && verifier === undefined)
+						return error(
+							'Bad Request',
+							'Code verifier not found and is required'
+						);
+
+					const safeVerifier = verifier ?? '';
+					const tokens = await (hasCodeVerifier
+						? providerInstance.validateAuthorizationCode(
+								code,
+								safeVerifier
+							)
+						: // @ts-expect-error - This is a dynamic check
+							providerInstance.validateAuthorizationCode(code));
+					if (hasCodeVerifier) code_verifier.remove();
+
+					const decodedIdToken = Object.fromEntries(
+						Object.entries(decodeIdToken(tokens.idToken())).map(
+							([key, value]) => [
+								key,
+								typeof value === 'string' ? value : undefined
+							]
+						)
+					);
+
+					const authProvider = auth_provider.value;
+
+					console.log(
+						'in route user_session_id before',
+						user_session_id.value
+					);
+
+					await onCallback?.({
+						authProvider,
+						decodedIdToken,
+						session,
+						user_session_id
+					});
+
+					console.log(
+						'in route user_session_id after',
+						user_session_id.value
+					);
+
+					const redirectUrl = redirect_url.value ?? '/';
+
+					return redirect(redirectUrl);
+				} catch (err) {
+					if (err instanceof Error)
+						return error(
+							'Internal Server Error',
+							`${err.message} - ${err.stack ?? ''}`
+						);
+
+					return error(
+						'Internal Server Error',
+						`Failed to validate authorization code: Unknown error: ${err}`
+					);
+				}
+			}
+		);

package/src/constants.ts

@@ -0,0 +1,13 @@
+export const SECONDS_IN_A_MINUTE = 60;
+export const MILLISECONDS_IN_A_SECOND = 1000;
+export const MILLISECONDS_IN_A_MINUTE =
+	MILLISECONDS_IN_A_SECOND * SECONDS_IN_A_MINUTE;
+export const MINUTES_IN_AN_HOUR = 60;
+export const HOURS_IN_A_DAY = 24;
+export const MILLISECONDS_IN_A_DAY =
+	MILLISECONDS_IN_A_SECOND *
+	SECONDS_IN_A_MINUTE *
+	MINUTES_IN_AN_HOUR *
+	HOURS_IN_A_DAY;
+export const COOKIE_MINUTES = 30; // TODO : See if i can remove
+export const COOKIE_DURATION = SECONDS_IN_A_MINUTE * COOKIE_MINUTES;

package/src/index.ts

@@ -0,0 +1,88 @@
+import { OAuth2RequestError, ArcticFetchError } from 'arctic';
+import { Elysia } from 'elysia';
+import { authorize } from './authorize';
+import { callback } from './callback';
+import { logout } from './logout';
+import { protectRoute } from './protectRoute';
+import { normalizedProviderKeys, providers } from './providers';
+import { refresh } from './refresh';
+import { revoke } from './revoke';
+import { status } from './status';
+import { isValidProviderKey } from './typeGuards';
+import { AbsoluteAuthProps, ClientProviders } from './types';
+
+export const absoluteAuth = <UserType>({
+	config,
+	authorizeRoute,
+	callbackRoute,
+	logoutRoute,
+	statusRoute,
+	refreshRoute,
+	revokeRoute,
+	onAuthorize,
+	onCallback,
+	onStatus,
+	onRefresh,
+	onLogout,
+	onRevoke
+}: AbsoluteAuthProps<UserType>) => {
+	const clientProviders = Object.keys(config).reduce<ClientProviders>(
+		(acc, key) => {
+			if (!Object.prototype.hasOwnProperty.call(config, key)) return acc;
+
+			if (!isValidProviderKey(key)) {
+				console.error(`Provider ${key} is not supported`);
+
+				return acc;
+			}
+
+			const options = config[key];
+			if (!options) return acc;
+
+			const normalizedProvider = key.toLowerCase();
+			const originalProviderKey =
+				normalizedProviderKeys[normalizedProvider];
+
+			if (!isValidProviderKey(originalProviderKey)) {
+				console.error(`Provider ${key} is not supported`);
+
+				return acc;
+			}
+
+			const Provider = providers[originalProviderKey];
+			const { credentials, scopes = [], searchParams = [] } = options;
+
+			// @ts-expect-error: dynamic constructor parameters
+			const providerInstance = new Provider(...credentials);
+
+			acc[normalizedProvider] = {
+				providerInstance,
+				scopes,
+				searchParams
+			};
+
+			return acc;
+		},
+		{}
+	);
+
+	return new Elysia()
+		.error('OAUTH2_REQUEST_ERROR', OAuth2RequestError)
+		.error('ARCTIC_FETCH_ERROR', ArcticFetchError)
+		.use(logout({ logoutRoute, onLogout }))
+		.use(revoke({ clientProviders, onRevoke, revokeRoute }))
+		.use(status<UserType>({ clientProviders, onStatus, statusRoute }))
+		.use(refresh({ clientProviders, onRefresh, refreshRoute }))
+		.use(authorize({ authorizeRoute, clientProviders, onAuthorize }))
+		.use(
+			callback<UserType>({
+				callbackRoute,
+				clientProviders,
+				onCallback
+			})
+		)
+		.use(protectRoute())
+		.as('plugin');
+};
+
+export * from './utils';

package/src/logout.ts

@@ -0,0 +1,39 @@
+import { Elysia } from 'elysia';
+
+type LogoutProps = {
+	logoutRoute?: string;
+	onLogout?: () => void;
+};
+
+export const logout = ({ logoutRoute = 'logout', onLogout }: LogoutProps) =>
+	new Elysia().post(
+		`/${logoutRoute}`,
+		async ({ error, cookie: { user_session_id, auth_provider } }) => {
+			if (auth_provider.value === undefined) {
+				return error('Unauthorized', 'No auth provider found');
+			}
+
+			try {
+				onLogout?.();
+
+				user_session_id.remove();
+				auth_provider.remove();
+
+				return new Response('Succesfuly Logged Out', {
+					status: 204
+				});
+			} catch (err) {
+				if (err instanceof Error) {
+					return error(
+						'Internal Server Error',
+						`Failed to logout: ${err.message}`
+					);
+				}
+
+				return error(
+					'Internal Server Error',
+					`Failed to logout: Unknown error: ${err}`
+				);
+			}
+		}
+	);

package/src/protectRoute.ts

@@ -0,0 +1,33 @@
+import { Elysia } from 'elysia';
+import { sessionStore } from './sessionStore';
+
+export const protectRoute = <UserType>() =>
+	new Elysia()
+		.use(sessionStore<UserType>())
+		.derive(
+			({ store: { session }, cookie: { user_session_id }, error }) => ({
+				protectRoute: async (
+					handleAuth: () => Promise<Response>,
+					handleAuthFail?: () => Promise<Response>
+				) => {
+					if (user_session_id.value === undefined) {
+						return (
+							handleAuthFail?.() ??
+							error('Unauthorized', 'No session ID found')
+						);
+					}
+
+					const userSession = session[user_session_id.value];
+
+					if (userSession === undefined) {
+						return (
+							handleAuthFail?.() ??
+							error('Unauthorized', 'No session found')
+						);
+					}
+
+					return handleAuth();
+				}
+			})
+		)
+		.as('plugin');

package/src/providers.ts

@@ -0,0 +1,109 @@
+import {
+	AmazonCognito,
+	AniList,
+	Apple,
+	Atlassian,
+	Auth0,
+	Authentik,
+	Bitbucket,
+	Box,
+	Coinbase,
+	Discord,
+	Dribbble,
+	Dropbox,
+	Facebook,
+	Figma,
+	Intuit,
+	GitHub,
+	GitLab,
+	Google,
+	Kakao,
+	KeyCloak,
+	Lichess,
+	Line,
+	Linear,
+	LinkedIn,
+	MicrosoftEntraId,
+	MyAnimeList,
+	Notion,
+	Okta,
+	Osu,
+	Patreon,
+	Reddit,
+	Roblox,
+	Salesforce,
+	Shikimori,
+	Slack,
+	Spotify,
+	Strava,
+	Tiltify,
+	Tumblr,
+	Twitch,
+	Twitter,
+	VK,
+	WorkOS,
+	Yahoo,
+	Yandex,
+	Zoom,
+	FortyTwo
+} from 'arctic';
+
+// TODO: When arctic adds better way to get the providers give a type to the object
+// eslint-disable-next-line custom/explicit-object-types
+export const providers = {
+	AmazonCognito,
+	AniList,
+	Apple,
+	Atlassian,
+	Auth0,
+	Authentik,
+	Bitbucket,
+	Box,
+	Coinbase,
+	Discord,
+	Dribbble,
+	Dropbox,
+	Facebook,
+	Figma,
+	FortyTwo,
+	GitHub,
+	GitLab,
+	Google,
+	Intuit,
+	Kakao,
+	KeyCloak,
+	Lichess,
+	Line,
+	Linear,
+	LinkedIn,
+	MicrosoftEntraId,
+	MyAnimeList,
+	Notion,
+	Okta,
+	Osu,
+	Patreon,
+	Reddit,
+	Roblox,
+	Salesforce,
+	Shikimori,
+	Slack,
+	Spotify,
+	Strava,
+	Tiltify,
+	Tumblr,
+	Twitch,
+	Twitter,
+	VK,
+	WorkOS,
+	Yahoo,
+	Yandex,
+	Zoom
+};
+
+export const normalizedProviderKeys = Object.keys(providers).reduce<
+	Record<string, string>
+>((map, key) => {
+	map[key.toLowerCase()] = key;
+
+	return map;
+}, {});