@airdraft/plugin-auth 0.1.0 → 0.1.1

package/CHANGELOG.md

@@ -1,5 +1,39 @@
 # Changelog
 
+All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
+
+### [0.1.1](https://github.com/aevrHQ/airdraft/compare/plugin-auth@v0.1.0...plugin-auth@v0.1.1) (2026-05-22)
+
+
+### Features
+
+* add Next.js app detection and prompt for app directory in init commands ([2ed1afd](https://github.com/aevrHQ/airdraft/commit/2ed1afdd1ba3142fd50a9bfd4133f01c2ad22ae9))
+* add schema editor plugin and GitHub schema adapter for managing airdraft.schema.json ([46fd7f2](https://github.com/aevrHQ/airdraft/commit/46fd7f271afe8bc562d5f2fe72b94390cb257161))
+* add versioning and changelog support for all packages ([d6c85df](https://github.com/aevrHQ/airdraft/commit/d6c85dfed37f11c42151c93b49a80ede90699616))
+* **cli,core,docs:** implement local filesystem mode with enhanced initialization and error handling ([1848408](https://github.com/aevrHQ/airdraft/commit/1848408738ee3d2bfa0ef532e6dec7a3beef0fb1))
+* **cli:** add CMS client template and optional blog scaffolding to initialization ([cf7bda8](https://github.com/aevrHQ/airdraft/commit/cf7bda8137777aa319acd8edf55fb2cd718a9cd1))
+* **cli:** enhance project initialization templates with schema path support ([a3b20c9](https://github.com/aevrHQ/airdraft/commit/a3b20c9d0dbf0e23594079f1685be8d688e7779b))
+* **client:** add convenience methods for listing and retrieving entries ([c48e3f6](https://github.com/aevrHQ/airdraft/commit/c48e3f6848772bf1ed860785e1e3f9eadffb5ddc))
+* **content:** update content package with new field components and type changes ([e1bd5fa](https://github.com/aevrHQ/airdraft/commit/e1bd5fa8af9b2903024c39a0fa945e49f87754d3))
+* enhance media input components and add scoped media adapter for project isolation ([e599cf2](https://github.com/aevrHQ/airdraft/commit/e599cf2c488cf73164d1cb7b1ce479d6005cf923))
+* implement terminal UI helpers for improved user interaction ([0e0dca4](https://github.com/aevrHQ/airdraft/commit/0e0dca4a4e06196abea22e99c9a350fdd202a948))
+* **react-ui:** add CMSAdmin component and update related files for new admin functionality ([50f1459](https://github.com/aevrHQ/airdraft/commit/50f14598c268823615f61428ee1e0e399c610630))
+
+
+### Bug Fixes
+
+* improve error handling for missing schema file in buildProjectHandler ([4c3d318](https://github.com/aevrHQ/airdraft/commit/4c3d3184c9c454062fd2d9b33fb0593d5e91b71c))
+* update cloud package version to 0.1.4 and enhance audit log persistence logic ([e1fb0e5](https://github.com/aevrHQ/airdraft/commit/e1fb0e5509c7f95c4e659495bcdbd1339da20cea))
+* update package versions and enhance schema cache handling ([7f4f395](https://github.com/aevrHQ/airdraft/commit/7f4f39572168b4e75dd6f1d756ebd5ef2d7ddbe1))
+* update schema URL from airdraft.dev to airdraft.space ([dbace6e](https://github.com/aevrHQ/airdraft/commit/dbace6e13334f915feace70661810d5dc919f69b))
+
+
+### Documentation
+
+* add Releasing & Publishing section to README ([132193b](https://github.com/aevrHQ/airdraft/commit/132193bebff585ad3223ccb82176c30615f21443))
+
+# Changelog
+
 All notable changes to `@airdraft/plugin-auth` will be documented here.
 
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.

package/dist/index.d.ts

@@ -1,4 +1,6 @@
 export { withAuth, getRequestUser } from './withAuth.js';
+export { withAutoAuth } from './withAutoAuth.js';
+export type { WithAutoAuthOptions } from './withAutoAuth.js';
 export type { WithAuthOptions, AuthProvider, AuthUser, Role, RolePermissions, RouteHandlerDef } from './types.js';
 export { ROLE_PERMISSIONS, can } from './types.js';
 export { UserStore } from './UserStore.js';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AACxD,YAAY,EAAE,eAAe,EAAE,YAAY,EAAE,QAAQ,EAAE,IAAI,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AACjH,OAAO,EAAE,gBAAgB,EAAE,GAAG,EAAE,MAAM,YAAY,CAAA;AAClD,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAC1C,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAA;AAC9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAC9D,YAAY,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAA;AAC1E,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAC9D,YAAY,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAA;AAC1E,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAC9D,YAAY,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAA;AAC1E,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AACxD,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAChD,YAAY,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAA;AAC5D,YAAY,EAAE,eAAe,EAAE,YAAY,EAAE,QAAQ,EAAE,IAAI,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AACjH,OAAO,EAAE,gBAAgB,EAAE,GAAG,EAAE,MAAM,YAAY,CAAA;AAClD,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAC1C,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAA;AAC9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAC9D,YAAY,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAA;AAC1E,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAC9D,YAAY,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAA;AAC1E,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAC9D,YAAY,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAA;AAC1E,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAA"}

package/dist/index.js

@@ -1,4 +1,5 @@
 export { withAuth, getRequestUser } from './withAuth.js';
+export { withAutoAuth } from './withAutoAuth.js';
 export { ROLE_PERMISSIONS, can } from './types.js';
 export { UserStore } from './UserStore.js';
 export { CredentialsProvider } from './CredentialsProvider.js';

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AAExD,OAAO,EAAE,gBAAgB,EAAE,GAAG,EAAE,MAAM,YAAY,CAAA;AAClD,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAE1C,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAE9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAE9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAE9D,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AACxD,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAGhD,OAAO,EAAE,gBAAgB,EAAE,GAAG,EAAE,MAAM,YAAY,CAAA;AAClD,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAE1C,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAE9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAE9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAE9D,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAA"}

package/dist/withAutoAuth.d.ts

@@ -0,0 +1,28 @@
+import type { Plugin } from '@airdraft/core';
+export interface WithAutoAuthOptions {
+    /**
+     * URL path suffixes that bypass auth entirely.
+     * Default: ['/schema', '/openapi.json']
+     */
+    publicPaths?: string[];
+}
+/**
+ * Builds an auth plugin automatically from environment variables — no
+ * boilerplate required in `airdraft.config.ts`.
+ *
+ * Resolution order:
+ * - `AIRDRAFT_JWT_SECRET` + `CMS_API_KEY` → CredentialsProvider accepting
+ *   both cookie sessions and the API key as a Bearer / x-api-key header.
+ * - `AIRDRAFT_JWT_SECRET` only → CredentialsProvider (email/password).
+ * - `CMS_API_KEY` only → simple single-key inline provider.
+ * - Neither set → returns `null` (CMS API is unprotected — local dev only).
+ *
+ * @example
+ * ```ts
+ * import { withAutoAuth } from '@airdraft/plugin-auth'
+ *
+ * plugins: [withAutoAuth() ?? []]  // spread-safe null
+ * ```
+ */
+export declare function withAutoAuth(options?: WithAutoAuthOptions): Plugin | null;
+//# sourceMappingURL=withAutoAuth.d.ts.map

package/dist/withAutoAuth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"withAutoAuth.d.ts","sourceRoot":"","sources":["../src/withAutoAuth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAA;AAM5C,MAAM,WAAW,mBAAmB;IAClC;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;CACvB;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,YAAY,CAAC,OAAO,GAAE,mBAAwB,GAAG,MAAM,GAAG,IAAI,CAyC7E"}

package/dist/withAutoAuth.js

@@ -0,0 +1,61 @@
+import { CredentialsProvider } from './CredentialsProvider.js';
+import { UserStore } from './UserStore.js';
+import { withAuth } from './withAuth.js';
+/**
+ * Builds an auth plugin automatically from environment variables — no
+ * boilerplate required in `airdraft.config.ts`.
+ *
+ * Resolution order:
+ * - `AIRDRAFT_JWT_SECRET` + `CMS_API_KEY` → CredentialsProvider accepting
+ *   both cookie sessions and the API key as a Bearer / x-api-key header.
+ * - `AIRDRAFT_JWT_SECRET` only → CredentialsProvider (email/password).
+ * - `CMS_API_KEY` only → simple single-key inline provider.
+ * - Neither set → returns `null` (CMS API is unprotected — local dev only).
+ *
+ * @example
+ * ```ts
+ * import { withAutoAuth } from '@airdraft/plugin-auth'
+ *
+ * plugins: [withAutoAuth() ?? []]  // spread-safe null
+ * ```
+ */
+export function withAutoAuth(options = {}) {
+    const jwtSecret = process.env.AIRDRAFT_JWT_SECRET;
+    const apiKey = process.env.CMS_API_KEY;
+    const publicPaths = options.publicPaths ?? ['/schema', '/openapi.json'];
+    if (!jwtSecret && !apiKey)
+        return null;
+    if (jwtSecret) {
+        const credProvider = CredentialsProvider({ userStore: UserStore.json(), secret: jwtSecret });
+        const provider = apiKey
+            ? {
+                verify: async (req) => {
+                    const bearer = req.headers.get('authorization') ?? '';
+                    const token = bearer.startsWith('Bearer ')
+                        ? bearer.slice(7)
+                        : (req.headers.get('x-api-key') ?? null);
+                    if (token === apiKey)
+                        return { id: 'api-key', email: 'api@local', role: 'admin' };
+                    return credProvider.verify(req);
+                },
+                handlers: credProvider.handlers,
+                refresh: credProvider.refresh,
+            }
+            : credProvider;
+        return withAuth({ provider, publicPaths });
+    }
+    // API key only
+    return withAuth({
+        provider: {
+            async verify(req) {
+                const bearer = req.headers.get('authorization') ?? '';
+                const token = bearer.startsWith('Bearer ')
+                    ? bearer.slice(7)
+                    : (req.headers.get('x-api-key') ?? null);
+                return token === apiKey ? { id: 'api-key', email: 'api@local', role: 'admin' } : null;
+            },
+        },
+        publicPaths,
+    });
+}
+//# sourceMappingURL=withAutoAuth.js.map

package/dist/withAutoAuth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"withAutoAuth.js","sourceRoot":"","sources":["../src/withAutoAuth.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAC9D,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAC1C,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AAUxC;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,YAAY,CAAC,UAA+B,EAAE;IAC5D,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAA;IACjD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,CAAA;IACtC,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,CAAA;IAEvE,IAAI,CAAC,SAAS,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAA;IAEtC,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,YAAY,GAAG,mBAAmB,CAAC,EAAE,SAAS,EAAE,SAAS,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAA;QAE5F,MAAM,QAAQ,GAAiB,MAAM;YACnC,CAAC,CAAC;gBACE,MAAM,EAAE,KAAK,EAAE,GAAY,EAA4B,EAAE;oBACvD,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,EAAE,CAAA;oBACrD,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC;wBACxC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;wBACjB,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,CAAA;oBAC1C,IAAI,KAAK,KAAK,MAAM;wBAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,CAAA;oBACjF,OAAO,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;gBACjC,CAAC;gBACD,QAAQ,EAAE,YAAY,CAAC,QAAQ;gBAC/B,OAAO,EAAE,YAAY,CAAC,OAAO;aAC9B;YACH,CAAC,CAAC,YAAY,CAAA;QAEhB,OAAO,QAAQ,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAA;IAC5C,CAAC;IAED,eAAe;IACf,OAAO,QAAQ,CAAC;QACd,QAAQ,EAAE;YACR,KAAK,CAAC,MAAM,CAAC,GAAY;gBACvB,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,EAAE,CAAA;gBACrD,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC;oBACxC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;oBACjB,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,CAAA;gBAC1C,OAAO,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;YACvF,CAAC;SACqB;QACxB,WAAW;KACZ,CAAC,CAAA;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@airdraft/plugin-auth",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "Airdraft auth plugin — GitHub OAuth, email/password providers",
   "type": "module",
   "main": "./dist/index.js",
@@ -11,7 +11,11 @@
       "types": "./dist/index.d.ts"
     }
   },
-  "files": ["dist", "README.md", "CHANGELOG.md"],
+  "files": [
+    "dist",
+    "README.md",
+    "CHANGELOG.md"
+  ],
   "scripts": {
     "build": "tsc",
     "dev": "tsc --watch",
@@ -25,7 +29,9 @@
     "release:minor": "standard-version --release-as minor",
     "release:major": "standard-version --release-as major"
   },
-  "publishConfig": { "access": "public" },
+  "publishConfig": {
+    "access": "public"
+  },
   "license": "MIT",
   "devDependencies": {
     "@types/node": "^20.0.0",
@@ -38,5 +44,7 @@
     "@airdraft/core": "*",
     "@airdraft/auth": "*"
   },
-  "engines": { "node": ">=18.0.0" }
+  "engines": {
+    "node": ">=18.0.0"
+  }
 }