@absolutejs/auth 0.3.2 → 0.5.0

package/eslint.config.mjs

@@ -0,0 +1,245 @@
+// eslint.config.mjs
+import { dirname } from 'path';
+import { fileURLToPath } from 'url';
+const __dirname = dirname(fileURLToPath(import.meta.url));
+
+import pluginJs from '@eslint/js';
+import stylisticTs from '@stylistic/eslint-plugin-ts';
+import tsParser from '@typescript-eslint/parser';
+import absolutePlugin from 'eslint-plugin-absolute';
+import importPlugin from 'eslint-plugin-import';
+import jsxA11yPlugin from 'eslint-plugin-jsx-a11y';
+import promisePlugin from 'eslint-plugin-promise';
+import reactPlugin from 'eslint-plugin-react';
+import reactCompilerPlugin from 'eslint-plugin-react-compiler';
+import reactHooksPlugin from 'eslint-plugin-react-hooks';
+import securityPlugin from 'eslint-plugin-security';
+import globals from 'globals';
+import tseslint from 'typescript-eslint';
+
+export default [
+	{
+		ignores: ['example/build/**']
+	},
+	pluginJs.configs.recommended,
+
+	...tseslint.configs.recommended,
+
+	{
+		files: ['**/*.{ts,tsx}'],
+		languageOptions: {
+			globals: globals.browser,
+			parser: tsParser,
+			parserOptions: {
+				createDefaultProgram: true,
+				project: './tsconfig.json',
+				tsconfigRootDir: __dirname
+			}
+		}
+	},
+
+	{
+		files: ['**/*.{ts,tsx}'],
+		plugins: { '@stylistic/ts': stylisticTs },
+		rules: {
+			'@stylistic/ts/padding-line-between-statements': [
+				'error',
+				{ blankLine: 'always', next: 'return', prev: '*' }
+			]
+		}
+	},
+
+	{
+		files: ['**/*.{js,mjs,cjs,ts,tsx,jsx}'],
+		ignores: ['example/build/**'],
+		plugins: {
+			absolute: absolutePlugin,
+			import: importPlugin,
+			promise: promisePlugin,
+			security: securityPlugin
+		},
+		rules: {
+			'absolute/explicit-object-types': 'error',
+			'absolute/localize-react-props': 'error',
+			'absolute/max-depth-extended': ['error', 1],
+			'absolute/max-jsxnesting': ['error', 5],
+			'absolute/min-var-length': [
+				'error',
+				{ allowedVars: ['_', 'id', 'db', 'OK'], minLength: 3 }
+			],
+			'absolute/no-button-navigation': 'error',
+			'absolute/no-explicit-return-type': 'error',
+			'absolute/no-inline-prop-types': 'error',
+			'absolute/no-multi-style-objects': 'error',
+			'absolute/no-nested-jsx-return': 'error',
+			'absolute/no-or-none-component': 'error',
+			'absolute/no-transition-cssproperties': 'error',
+			'absolute/no-type-cast': 'error',
+			'absolute/no-unnecessary-div': 'error',
+			'absolute/no-unnecessary-key': 'error',
+			'absolute/no-useless-function': 'error',
+			'absolute/seperate-style-files': 'error',
+			'absolute/sort-exports': [
+				'error',
+				{
+					caseSensitive: true,
+					natural: true,
+					order: 'asc',
+					variablesBeforeFunctions: true
+				}
+			],
+			'absolute/sort-keys-fixable': [
+				'error',
+				{
+					caseSensitive: true,
+					natural: true,
+					order: 'asc',
+					variablesBeforeFunctions: true
+				}
+			],
+			'arrow-body-style': ['error', 'as-needed'],
+			'consistent-return': 'error',
+			eqeqeq: 'error',
+			'func-style': [
+				'error',
+				'expression',
+				{ allowArrowFunctions: true }
+			],
+			'import/no-cycle': 'error',
+			'import/no-default-export': 'error',
+			'import/no-relative-packages': 'error',
+			'import/no-unused-modules': ['error', { missingExports: true }],
+			'import/order': ['error', { alphabetize: { order: 'asc' } }],
+			'no-await-in-loop': 'error',
+			'no-console': ['error', { allow: ['warn', 'error'] }],
+			'no-debugger': 'error',
+			'no-duplicate-case': 'error',
+			'no-duplicate-imports': 'error',
+			'no-else-return': 'error',
+			'no-empty-function': 'error',
+			'no-empty-pattern': 'error',
+			'no-empty-static-block': 'error',
+			'no-fallthrough': 'error',
+			'no-floating-decimal': 'error',
+			'no-global-assign': 'error',
+			'no-implicit-coercion': 'error',
+			'no-implicit-globals': 'error',
+			'no-loop-func': 'error',
+			'no-magic-numbers': [
+				'warn',
+				{ detectObjects: false, enforceConst: true, ignore: [0, 1] }
+			],
+			'no-misleading-character-class': 'error',
+			'no-nested-ternary': 'error',
+			'no-new-native-nonconstructor': 'error',
+			'no-new-wrappers': 'error',
+			'no-param-reassign': 'error',
+			'no-restricted-imports': [
+				'error',
+				{
+					paths: [
+						{
+							importNames: ['default'],
+							message:
+								'Import only named React exports for tree-shaking.',
+							name: 'react'
+						},
+						{
+							importNames: ['default'],
+							message: 'Import only the required Bun exports.',
+							name: 'bun'
+						}
+					]
+				}
+			],
+			'no-return-await': 'error',
+			'no-shadow': 'error',
+			'no-undef': 'error',
+			'no-unneeded-ternary': 'error',
+			'no-unreachable': 'error',
+			'no-useless-assignment': 'error',
+			'no-useless-concat': 'error',
+			'no-useless-return': 'error',
+			'no-var': 'error',
+			'prefer-arrow-callback': 'error',
+			'prefer-const': 'error',
+			'prefer-destructuring': [
+				'error',
+				{ array: true, object: true },
+				{ enforceForRenamedProperties: false }
+			],
+			'prefer-template': 'error',
+			'promise/always-return': 'warn',
+			'promise/avoid-new': 'warn',
+			'promise/catch-or-return': 'error',
+			'promise/no-callback-in-promise': 'warn',
+			'promise/no-nesting': 'warn',
+			'promise/no-promise-in-callback': 'warn',
+			'promise/no-return-wrap': 'error',
+			'promise/param-names': 'error'
+		}
+	},
+	{
+		files: ['example/**/*.{js,jsx,ts,tsx}'],
+		plugins: {
+			'jsx-a11y': jsxA11yPlugin,
+			react: reactPlugin,
+			'react-compiler': reactCompilerPlugin,
+			'react-hooks': reactHooksPlugin
+		},
+		rules: {
+			'jsx-a11y/prefer-tag-over-role': 'error',
+			'react-compiler/react-compiler': 'error',
+			'react-hooks/exhaustive-deps': 'warn',
+			'react-hooks/rules-of-hooks': 'error',
+			'react/checked-requires-onchange-or-readonly': 'error',
+			'react/destructuring-assignment': ['error', 'always'],
+			'react/jsx-filename-extension': ['error', { extensions: ['.tsx'] }],
+			'react/jsx-no-leaked-render': 'error',
+			'react/jsx-no-target-blank': 'error',
+			'react/jsx-no-useless-fragment': 'error',
+			'react/jsx-pascal-case': ['error', { allowAllCaps: true }],
+			'react/no-multi-comp': 'error',
+			'react/no-unknown-property': 'off',
+			'react/react-in-jsx-scope': 'off',
+			'react/self-closing-comp': 'error'
+		},
+		settings: {
+			react: { version: 'detect' }
+		}
+	},
+	{
+		files: [
+			'example/server.ts',
+			'example/indexes/*.tsx',
+			'example/db/migrate.ts'
+		],
+		rules: {
+			'import/no-unused-modules': 'off'
+		}
+	},
+	{
+		files: ['example/db/migrate.ts','example/server.ts'],
+		rules: {
+			'no-console': 'off'
+		}
+	},
+	{
+		files: ['eslint.config.mjs'],
+		rules: {
+			'no-magic-numbers': 'off'
+		}
+	},
+	{
+		files: ['eslint.config.mjs'],
+		rules: {
+			'import/no-default-export': 'off'
+		}
+	},
+	{
+		files: ['example/db/schema.ts'],
+		rules: {
+			'absolute/explicit-object-types': 'off'
+		}
+	}
+];

package/package.json

@@ -1,5 +1,5 @@
 {
-	"version": "0.3.2",
+	"version": "0.5.0",
 	"name": "@absolutejs/auth",
 	"description": "An authorization library for absolutejs",
 	"repository": {
@@ -10,13 +10,15 @@
 	"license": "CC BY-NC 4.0",
 	"author": "Alex Kahn",
 	"scripts": {
-		"build": "rm -rf dist && bun build src/index.ts --outdir dist --minify --splitting --target=bun --external arctic --external elysia && tsc --emitDeclarationOnly --project tsconfig.json",
+		"build": "rm -rf dist && bun build src/index.ts --outdir dist --target=bun --external elysia && tsc --emitDeclarationOnly --project tsconfig.json",
 		"test": "echo \"Error: no test specified\" && exit 1",
 		"format": "prettier --write \"./**/*.{js,jsx,ts,tsx,css,json}\"",
 		"dev": "bun run --watch example/server.ts",
 		"db:generate": "drizzle-kit generate --schema ./example/db/schema.ts --dialect postgresql",
 		"db:migrate": "bun run ./example/db/migrate.ts",
 		"db:studio": "drizzle-kit studio",
+		"lint": "eslint ./src ./example ./eslint.config.mjs",
+		"typecheck": "bun run tsc --noEmit",
 		"release": "bun run format && bun run build && bun publish"
 	},
 	"keywords": [
@@ -28,23 +30,36 @@
 	],
 	"types": "dist/src/index.d.ts",
 	"peerDependencies": {
-		"arctic": ">= 3.6.0",
 		"elysia": ">= 1.2.0"
 	},
 	"devDependencies": {
-		"arctic": "3.6.0",
+		"@absolutejs/absolute": "0.4.0",
 		"@elysiajs/static": "1.2.0",
 		"@neondatabase/serverless": "1.0.0",
+		"@react-spring/web": "10.0.0-beta.0",
+		"@stylistic/eslint-plugin-ts": "4.2.0",
 		"@types/bun": "1.2.9",
 		"@types/react": "19.1.1",
 		"@types/react-dom": "19.1.2",
+		"citra": "0.15.1",
 		"drizzle-kit": "0.30.6",
 		"drizzle-orm": "0.41.0",
+		"elysia": "1.2.25",
+		"eslint": "9.26.0",
+		"eslint-plugin-absolute": "0.0.3",
+		"eslint-plugin-import": "2.31.0",
+		"eslint-plugin-jsx-a11y": "6.10.2",
+		"eslint-plugin-promise": "7.2.1",
+		"eslint-plugin-react": "7.37.5",
+		"eslint-plugin-react-compiler": "19.1.0-rc.1",
+		"eslint-plugin-react-hooks": "5.2.0",
+		"eslint-plugin-security": "3.0.1",
 		"prettier": "3.5.3",
 		"react": "19.1.0",
 		"react-dom": "19.1.0",
-		"elysia": "1.2.25",
-		"typescript": "5.8.3"
+		"react-icons": "5.5.0",
+		"typescript": "5.8.3",
+		"typescript-eslint": "8.32.0"
 	},
 	"module": "dist/index.js"
 }

package/dist/src/providers.d.ts

@@ -1,51 +0,0 @@
-import { AmazonCognito, AniList, Apple, Atlassian, Auth0, Authentik, Bitbucket, Box, Coinbase, Discord, Dribbble, Dropbox, Facebook, Figma, Intuit, GitHub, GitLab, Google, Kakao, KeyCloak, Lichess, Line, Linear, LinkedIn, MicrosoftEntraId, MyAnimeList, Notion, Okta, Osu, Patreon, Reddit, Roblox, Salesforce, Shikimori, Slack, Spotify, Strava, Tiltify, Tumblr, Twitch, Twitter, VK, WorkOS, Yahoo, Yandex, Zoom, FortyTwo } from 'arctic';
-export declare const providers: {
-    AmazonCognito: typeof AmazonCognito;
-    AniList: typeof AniList;
-    Apple: typeof Apple;
-    Atlassian: typeof Atlassian;
-    Auth0: typeof Auth0;
-    Authentik: typeof Authentik;
-    Bitbucket: typeof Bitbucket;
-    Box: typeof Box;
-    Coinbase: typeof Coinbase;
-    Discord: typeof Discord;
-    Dribbble: typeof Dribbble;
-    Dropbox: typeof Dropbox;
-    Facebook: typeof Facebook;
-    Figma: typeof Figma;
-    FortyTwo: typeof FortyTwo;
-    GitHub: typeof GitHub;
-    GitLab: typeof GitLab;
-    Google: typeof Google;
-    Intuit: typeof Intuit;
-    Kakao: typeof Kakao;
-    KeyCloak: typeof KeyCloak;
-    Lichess: typeof Lichess;
-    Line: typeof Line;
-    Linear: typeof Linear;
-    LinkedIn: typeof LinkedIn;
-    MicrosoftEntraId: typeof MicrosoftEntraId;
-    MyAnimeList: typeof MyAnimeList;
-    Notion: typeof Notion;
-    Okta: typeof Okta;
-    Osu: typeof Osu;
-    Patreon: typeof Patreon;
-    Reddit: typeof Reddit;
-    Roblox: typeof Roblox;
-    Salesforce: typeof Salesforce;
-    Shikimori: typeof Shikimori;
-    Slack: typeof Slack;
-    Spotify: typeof Spotify;
-    Strava: typeof Strava;
-    Tiltify: typeof Tiltify;
-    Tumblr: typeof Tumblr;
-    Twitch: typeof Twitch;
-    Twitter: typeof Twitter;
-    VK: typeof VK;
-    WorkOS: typeof WorkOS;
-    Yahoo: typeof Yahoo;
-    Yandex: typeof Yandex;
-    Zoom: typeof Zoom;
-};
-export declare const normalizedProviderKeys: Record<string, string>;

package/src/authorize.ts

@@ -1,119 +0,0 @@
-import { generateState, generateCodeVerifier } from 'arctic';
-import { Elysia } from 'elysia';
-import { isValidProviderKey } from './typeGuards';
-import { ClientProviders } from './types';
-import { COOKIE_DURATION } from './constants';
-
-type AuthorizeProps = {
-	clientProviders: ClientProviders;
-	authorizeRoute?: string;
-	onAuthorize?: () => void;
-};
-
-export const authorize = ({
-	clientProviders,
-	authorizeRoute = 'authorize',
-	onAuthorize
-}: AuthorizeProps) =>
-	new Elysia().get(
-		`/${authorizeRoute}/:provider`,
-		({
-			error,
-			redirect,
-			cookie: { state, code_verifier, auth_provider, redirect_url },
-			params: { provider },
-			headers
-		}) => {
-			if (provider === undefined)
-				return error('Bad Request', 'Provider is required');
-
-			if (!isValidProviderKey(provider)) {
-				return error('Bad Request', 'Invalid provider');
-			}
-
-			try {
-				const normalizedProvider = provider.toLowerCase();
-				const { providerInstance, scopes, searchParams } =
-					clientProviders[normalizedProvider];
-
-				const redirectUrl = headers['referer'] ?? '/';
-
-				redirect_url.set({
-					httpOnly: true,
-					maxAge: COOKIE_DURATION,
-					path: '/',
-					sameSite: 'lax',
-					secure: true,
-					value: redirectUrl
-				});
-
-				auth_provider.set({
-					httpOnly: true,
-					maxAge: COOKIE_DURATION,
-					path: '/',
-					sameSite: 'lax',
-					secure: true,
-					value: provider
-				});
-
-				const currentState = generateState();
-
-				state.set({
-					httpOnly: true,
-					maxAge: COOKIE_DURATION,
-					path: '/',
-					sameSite: 'lax',
-					secure: true,
-					value: currentState
-				});
-
-				const usesCodeVerifier = providerInstance.createAuthorizationURL
-					.toString()
-					.includes('codeVerifier');
-				const verifier = usesCodeVerifier
-					? generateCodeVerifier()
-					: undefined;
-				void (
-					usesCodeVerifier &&
-					code_verifier.set({
-						httpOnly: true,
-						maxAge: COOKIE_DURATION,
-						path: '/',
-						sameSite: 'lax',
-						secure: true,
-						value: verifier ?? ''
-					})
-				);
-
-				const authorizationURL = usesCodeVerifier
-					? providerInstance.createAuthorizationURL(
-							currentState,
-							// @ts-expect-error - This is a dynamic check
-							verifier,
-							scopes
-						)
-					: // @ts-expect-error - This is a dynamic check
-						providerInstance.createAuthorizationURL(
-							currentState,
-							scopes
-						);
-
-				searchParams.forEach(([key, value]) => {
-					authorizationURL.searchParams.set(key, value);
-				});
-
-				onAuthorize?.();
-
-				return redirect(authorizationURL.toString());
-			} catch (err) {
-				if (err instanceof Error) {
-					return error(
-						'Internal Server Error',
-						`${err.message} - ${err.stack ?? ''}`
-					);
-				}
-
-				return error('Internal Server Error', `Unknown error: ${err}`);
-			}
-		}
-	);

package/src/callback.ts

@@ -1,117 +0,0 @@
-import { decodeIdToken } from 'arctic';
-import { Elysia } from 'elysia';
-import { sessionStore } from './sessionStore';
-import { isNonEmptyString, isValidProviderKey } from './typeGuards';
-import { ClientProviders, OnCallback } from './types';
-
-type CallbackProps<UserType> = {
-	clientProviders: ClientProviders;
-	callbackRoute?: string;
-	onCallback?: OnCallback<UserType>;
-};
-
-export const callback = <UserType>({
-	clientProviders,
-	callbackRoute = 'authorize/callback',
-	onCallback
-}: CallbackProps<UserType>) =>
-	new Elysia()
-		.use(sessionStore<UserType>())
-		.get(
-			`/${callbackRoute}`,
-			async ({
-				error,
-				redirect,
-				store: { session },
-				cookie: {
-					state: stored_state,
-					code_verifier,
-					redirect_url,
-					user_session_id,
-					auth_provider
-				},
-				query: { code, state: callback_state }
-			}) => {
-				if (
-					!isNonEmptyString(code) ||
-					stored_state.value === undefined
-				) {
-					return error('Bad Request', 'Invalid callback request');
-				}
-
-				if (callback_state !== stored_state.value) {
-					return error('Bad Request', 'Invalid state mismatch');
-				}
-
-				if (auth_provider.value === undefined) {
-					return error('Unauthorized', 'No auth provider found');
-				}
-
-				if (!isValidProviderKey(auth_provider.value)) {
-					return error('Unauthorized', 'Invalid provider');
-				}
-
-				const normalizedProvider = auth_provider.value.toLowerCase();
-				const { providerInstance } =
-					clientProviders[normalizedProvider];
-
-				try {
-					// Clear the stored state so the next request doesn't use it
-					stored_state.remove();
-
-					const hasCodeVerifier =
-						providerInstance.validateAuthorizationCode
-							.toString()
-							.includes('codeVerifier');
-					const verifier = code_verifier.value;
-					if (hasCodeVerifier && verifier === undefined)
-						return error(
-							'Bad Request',
-							'Code verifier not found and is required'
-						);
-
-					const safeVerifier = verifier ?? '';
-					const tokens = await (hasCodeVerifier
-						? providerInstance.validateAuthorizationCode(
-								code,
-								safeVerifier
-							)
-						: // @ts-expect-error - This is a dynamic check
-							providerInstance.validateAuthorizationCode(code));
-					if (hasCodeVerifier) code_verifier.remove();
-
-					const decodedIdToken = Object.fromEntries(
-						Object.entries(decodeIdToken(tokens.idToken())).map(
-							([key, value]) => [
-								key,
-								typeof value === 'string' ? value : undefined
-							]
-						)
-					);
-
-					const authProvider = auth_provider.value;
-
-					await onCallback?.({
-						authProvider,
-						decodedIdToken,
-						session,
-						user_session_id
-					});
-
-					const redirectUrl = redirect_url.value ?? '/';
-
-					return redirect(redirectUrl);
-				} catch (err) {
-					if (err instanceof Error)
-						return error(
-							'Internal Server Error',
-							`${err.message} - ${err.stack ?? ''}`
-						);
-
-					return error(
-						'Internal Server Error',
-						`Failed to validate authorization code: Unknown error: ${err}`
-					);
-				}
-			}
-		);

package/src/constants.ts

@@ -1,13 +0,0 @@
-export const SECONDS_IN_A_MINUTE = 60;
-export const MILLISECONDS_IN_A_SECOND = 1000;
-export const MILLISECONDS_IN_A_MINUTE =
-	MILLISECONDS_IN_A_SECOND * SECONDS_IN_A_MINUTE;
-export const MINUTES_IN_AN_HOUR = 60;
-export const HOURS_IN_A_DAY = 24;
-export const MILLISECONDS_IN_A_DAY =
-	MILLISECONDS_IN_A_SECOND *
-	SECONDS_IN_A_MINUTE *
-	MINUTES_IN_AN_HOUR *
-	HOURS_IN_A_DAY;
-export const COOKIE_MINUTES = 30; // TODO : See if i can remove
-export const COOKIE_DURATION = SECONDS_IN_A_MINUTE * COOKIE_MINUTES;

package/src/index.ts

@@ -1,88 +0,0 @@
-import { OAuth2RequestError, ArcticFetchError } from 'arctic';
-import { Elysia } from 'elysia';
-import { authorize } from './authorize';
-import { callback } from './callback';
-import { logout } from './logout';
-import { protectRoute } from './protectRoute';
-import { normalizedProviderKeys, providers } from './providers';
-import { refresh } from './refresh';
-import { revoke } from './revoke';
-import { status } from './status';
-import { isValidProviderKey } from './typeGuards';
-import { AbsoluteAuthProps, ClientProviders } from './types';
-
-export const absoluteAuth = <UserType>({
-	config,
-	authorizeRoute,
-	callbackRoute,
-	logoutRoute,
-	statusRoute,
-	refreshRoute,
-	revokeRoute,
-	onAuthorize,
-	onCallback,
-	onStatus,
-	onRefresh,
-	onLogout,
-	onRevoke
-}: AbsoluteAuthProps<UserType>) => {
-	const clientProviders = Object.keys(config).reduce<ClientProviders>(
-		(acc, key) => {
-			if (!Object.prototype.hasOwnProperty.call(config, key)) return acc;
-
-			if (!isValidProviderKey(key)) {
-				console.error(`Provider ${key} is not supported`);
-
-				return acc;
-			}
-
-			const options = config[key];
-			if (!options) return acc;
-
-			const normalizedProvider = key.toLowerCase();
-			const originalProviderKey =
-				normalizedProviderKeys[normalizedProvider];
-
-			if (!isValidProviderKey(originalProviderKey)) {
-				console.error(`Provider ${key} is not supported`);
-
-				return acc;
-			}
-
-			const Provider = providers[originalProviderKey];
-			const { credentials, scopes = [], searchParams = [] } = options;
-
-			// @ts-expect-error: dynamic constructor parameters
-			const providerInstance = new Provider(...credentials);
-
-			acc[normalizedProvider] = {
-				providerInstance,
-				scopes,
-				searchParams
-			};
-
-			return acc;
-		},
-		{}
-	);
-
-	return new Elysia()
-		.error('OAUTH2_REQUEST_ERROR', OAuth2RequestError)
-		.error('ARCTIC_FETCH_ERROR', ArcticFetchError)
-		.use(logout({ logoutRoute, onLogout }))
-		.use(revoke({ clientProviders, onRevoke, revokeRoute }))
-		.use(status<UserType>({ clientProviders, onStatus, statusRoute }))
-		.use(refresh({ clientProviders, onRefresh, refreshRoute }))
-		.use(authorize({ authorizeRoute, clientProviders, onAuthorize }))
-		.use(
-			callback<UserType>({
-				callbackRoute,
-				clientProviders,
-				onCallback
-			})
-		)
-		.use(protectRoute())
-		.as('plugin');
-};
-
-export * from './utils';