@adonis-agora/authkit-server 0.38.0 → 0.39.0

package/build/services/main.d.ts

@@ -0,0 +1,17 @@
+import type { OidcService } from "../src/provider/oidc_service.js";
+/**
+ * Acessor singleton do {@link OidcService}, seguindo a convenção `services/main` do
+ * AdonisJS (igual `@adonisjs/lucid/services/db`, `@adonisjs/drive/services/main` e
+ * `@adonisjs/lock/services/main`). Permite que um app escreva
+ * `import authkit from "@adonis-agora/authkit-server/services/main"` e leia
+ * `authkit.config` / chame `authkit.provider` etc., em vez de resolver na mão a
+ * binding string-keyed `"authkit.server"` pelo container.
+ *
+ * Roda `await app.booted()` no top-level, então SÓ funciona dentro de um app
+ * booted — por isso `scripts/import-smoke.mjs` pula o diretório `services`.
+ *
+ * Dentro da própria lib continuamos resolvendo via `ctx.containerResolver.make("authkit.server")`,
+ * que é o idioma das libs first-party (ver `@adonisjs/auth`, `initialize_auth_middleware`).
+ */
+declare let service: OidcService;
+export { service as default };

package/build/services/main.js

@@ -0,0 +1,20 @@
+import app from "@adonisjs/core/services/app";
+/**
+ * Acessor singleton do {@link OidcService}, seguindo a convenção `services/main` do
+ * AdonisJS (igual `@adonisjs/lucid/services/db`, `@adonisjs/drive/services/main` e
+ * `@adonisjs/lock/services/main`). Permite que um app escreva
+ * `import authkit from "@adonis-agora/authkit-server/services/main"` e leia
+ * `authkit.config` / chame `authkit.provider` etc., em vez de resolver na mão a
+ * binding string-keyed `"authkit.server"` pelo container.
+ *
+ * Roda `await app.booted()` no top-level, então SÓ funciona dentro de um app
+ * booted — por isso `scripts/import-smoke.mjs` pula o diretório `services`.
+ *
+ * Dentro da própria lib continuamos resolvendo via `ctx.containerResolver.make("authkit.server")`,
+ * que é o idioma das libs first-party (ver `@adonisjs/auth`, `initialize_auth_middleware`).
+ */
+let service;
+await app.booted(async () => {
+    service = await app.container.make("authkit.server");
+});
+export { service as default };

package/build/src/host/controllers/interaction_controller.d.ts

@@ -1,6 +1,7 @@
 import '../augmentations.js';
 import type { HttpContext } from '@adonisjs/core/http';
 export default class AuthInteractionController {
+    #private;
     show(ctx: HttpContext): Promise<any>;
     /**
      * POST /auth/interaction/:uid/identifier

package/build/src/host/controllers/interaction_controller.js

@@ -29,6 +29,23 @@ const MFA_PENDING_KEY = 'authkit_mfa_pending';
 /** Desafio WebAuthn pendente (autenticação) guardado entre begin/finish no login. */
 const PASSKEY_AUTH_CHALLENGE_KEY = 'authkit_passkey_auth_challenge';
 export default class AuthInteractionController {
+    /**
+     * Métodos de login efetivos (com os pins do `cfg.authMethods`) para QUALQUER render do
+     * passo login. Sem isto, os re-renders (erro de senha, magic link enviado, lockout…) mandam
+     * `authMethods` undefined → a view volta ao default (senha ligada), ignorando a config.
+     * `passkeyFirst` depende da conta (resolvido no fluxo principal); aqui cobrimos senha + magic link.
+     */
+    async #loginMethods(ctx, cfg) {
+        const runtimeSettings = await getRuntimeSettings(ctx);
+        const magicLinkCapableConfig = cfg.passwordless.magicLink && supportsMagicLink(cfg.accountStore);
+        const authMethods = await resolveEffectiveAuthMethods(runtimeSettings, {
+            configuredSocialProviders: cfg.social?.providers ?? [],
+            magicLinkCapable: magicLinkCapableConfig,
+            passkeyCapable: false,
+            configOverrides: cfg.authMethods,
+        });
+        return { authMethods, magicLinkAvailable: authMethods.magicLink && magicLinkCapableConfig };
+    }
     async show(ctx) {
         const service = await ctx.containerResolver.make('authkit.server');
         const cfg = service.config;
@@ -177,6 +194,7 @@ export default class AuthInteractionController {
                 ? { fullName: found.name ?? null, globalRoles: found.globalRoles ?? [] }
                 : null;
             return render(ctx, 'login', {
+                ...(await this.#loginMethods(ctx, cfg)),
                 uid: ctx.request.param('uid'),
                 csrfToken: ctx.request.csrfToken,
                 step: 'password',
@@ -214,6 +232,7 @@ export default class AuthInteractionController {
                 ? { fullName: found.name ?? null, globalRoles: found.globalRoles ?? [] }
                 : null;
             return render(ctx, 'login', {
+                ...(await this.#loginMethods(ctx, cfg)),
                 uid: ctx.request.param('uid'),
                 csrfToken: ctx.request.csrfToken,
                 step: 'password',
@@ -596,6 +615,7 @@ export default class AuthInteractionController {
         }
         // Resposta uniforme (não vaza existência de conta).
         return render(ctx, 'login', {
+            ...(await this.#loginMethods(ctx, cfg)),
             uid,
             csrfToken: ctx.request.csrfToken,
             step: 'password',
@@ -639,6 +659,7 @@ export default class AuthInteractionController {
             });
             const render = cfg.render;
             return render(ctx, 'login', {
+                ...(await this.#loginMethods(ctx, cfg)),
                 uid,
                 csrfToken: ctx.request.csrfToken,
                 step: 'password',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@adonis-agora/authkit-server",
-  "version": "0.38.0",
+  "version": "0.39.0",
   "description": "AdonisJS OIDC/OAuth2 provider (Identity Provider) toolkit: ejectable auth server with sessions, rate-limiting, MFA/TOTP, audit log, federated logout and OpenTelemetry metrics.",
   "license": "MIT",
   "author": "dudousxd",
@@ -38,6 +38,7 @@
   "exports": {
     ".": "./build/index.js",
     "./types": "./build/index.js",
+    "./services/main": "./build/services/main.js",
     "./durable": "./build/src/host/durable/index.js",
     "./telescope": "./build/src/observability/telescope/index.js",
     "./authkit_server_provider": "./build/providers/authkit_server_provider.js",