@atlasauth/nuxt 0.1.1 → 0.1.3

package/CHANGELOG.md

@@ -0,0 +1,21 @@
+# @atlasauth/nuxt changelog
+
+## 0.1.3
+- **`frontendApi` is validated at plugin start-up.** A missing (or non-string) or malformed value now throws an
+  `AtlasConfigError` (from `@atlasauth/js`; `code: 'FRONTEND_API_REQUIRED'` or `'FRONTEND_API_INVALID'`)
+  instead of silently sending requests to relative URLs on the app's own origin. Accepted: an absolute
+  `https:` URL (`http:` only for localhost / local development hosts), or `"same-origin"` / a root-relative path such as `"/atlas"` for a reverse proxy.
+  The error names the `atlas.frontendApi` option and `NUXT_PUBLIC_ATLAS_FRONTEND_API`.
+- **Deprecated:** `frontendApi: ""` (the original same-origin spelling) still works as same-origin, with a
+  one-time console warning; use `"same-origin"` instead. An unset `atlas.frontendApi` (runtimeConfig
+  placeholder `""`) behaves the same way.
+
+## 0.1.2
+- **Docs fix.** Frontend API host examples use a single-label host (`your-instance-fapi.atlasauth.net`); the previous two-level `*.fapi.atlasauth.net` form fails TLS behind Cloudflare.
+
+## 0.1.1
+- First published release.
+- **Nuxt 3 module.** Add `@atlasauth/nuxt` to `modules` and configure it under the `atlas` key (`publishableKey`, `frontendApi`, `jwksUrl`, `issuer`, `authorizedParties`). The publishable key and Frontend API URL go to public runtime config; `jwksUrl`, `issuer` and `authorizedParties` stay server-only. `NUXT_PUBLIC_ATLAS_*` / `NUXT_ATLAS_*` environment variables override them at runtime.
+- **Client.** Installs the `@atlasauth/vue` plugin app-wide (also during SSR) and auto-imports its composables (`useAtlas`, `useUser`, `useSession`, `useAuth`, `useOrganization`, `useSignIn`, `useSignUp`, `useFlow`) and components (`SignedIn`, `SignedOut`, `AtlasLoading`, `AtlasLoaded`, `Protect`, `SignIn`, `SignUp`, `UserButton`, `OrganizationSwitcher`, `UserProfile`, `OrganizationProfile`).
+- **Server.** A Nitro middleware verifies the session token (`Authorization` header, else the `__session` cookie) locally on every request and stores the result on `event.context.auth`. `getAtlasAuth(event)` is auto-imported into server routes and returns the verified auth state, including `protect()`.
+- **Cross-domain sign-in.** `atlasHandshake(event)` sends a visitor without a local session through the Atlas handshake once and, on return, redeems the PKCE-bound nonce for a first-party session on your domain.

package/README.md

@@ -1,10 +1,10 @@
-# @atlas/nuxt
+# @atlasauth/nuxt
 
 The official **Nuxt 3** module for [Atlas](https://atlasauth.net). A thin Nuxt
-binding: the client half is [`@atlas/vue`](../vue) (the `createAtlas()` plugin,
+binding: the client half is [`@atlasauth/vue`](../vue) (the `createAtlas()` plugin,
 its composables and components), the server half mirrors
-[`@atlas/nextjs`](../nextjs) — it verifies the `__session` JWT **locally** with
-`@atlas/backend` inside a Nitro middleware and exposes a `getAtlasAuth(event)`
+[`@atlasauth/nextjs`](../nextjs) — it verifies the `__session` JWT **locally** with
+`@atlasauth/backend` inside a Nitro middleware and exposes a `getAtlasAuth(event)`
 helper to your server routes.
 
 - **No secrets in the browser.** The client holds only the short-lived session
@@ -16,7 +16,7 @@ helper to your server routes.
 ## Install
 
 ```bash
-pnpm add @atlas/nuxt
+pnpm add @atlasauth/nuxt
 ```
 
 ## Configure
@@ -28,12 +28,12 @@ server-only `runtimeConfig.atlas`.
 ```ts
 // nuxt.config.ts
 export default defineNuxtConfig({
-  modules: ['@atlas/nuxt'],
+  modules: ['@atlasauth/nuxt'],
 
   atlas: {
     // Public — sent to the browser.
     publishableKey: 'pk_test_...',
-    frontendApi: 'https://your-instance.fapi.atlasauth.net',
+    frontendApi: 'https://your-instance-fapi.atlasauth.net',
   },
 
   runtimeConfig: {
@@ -57,14 +57,14 @@ In production, prefer environment variables (they override the config above):
 
 ```bash
 NUXT_PUBLIC_ATLAS_PUBLISHABLE_KEY=pk_live_...
-NUXT_PUBLIC_ATLAS_FRONTEND_API=https://your-instance.fapi.atlasauth.net
-NUXT_ATLAS_JWKS_URL=https://your-instance.fapi.atlasauth.net/.well-known/jwks.json
-NUXT_ATLAS_ISSUER=https://your-instance.fapi.atlasauth.net
+NUXT_PUBLIC_ATLAS_FRONTEND_API=https://your-instance-fapi.atlasauth.net
+NUXT_ATLAS_JWKS_URL=https://your-instance-fapi.atlasauth.net/.well-known/jwks.json
+NUXT_ATLAS_ISSUER=https://your-instance-fapi.atlasauth.net
 ```
 
 ## Use in pages and components
 
-Every `@atlas/vue` composable and component is **auto-imported** — no `import`
+Every `@atlasauth/vue` composable and component is **auto-imported** — no `import`
 line needed.
 
 **Components** (`SignedIn`, `SignedOut`, `Protect`, `SignIn`, `SignUp`,
@@ -161,17 +161,17 @@ prefers reading it directly.
 | `has(condition?)`                  | boolean check — `permission` / `role` / `anyPermission` / `allPermissions` |
 | `protect(condition?)`              | assert; throws 401 (signed out) / 403 (insufficient)               |
 
-You can also `import { getAtlasAuth, verifyCarriers, atlasBackend } from '@atlas/nuxt/server'`
+You can also `import { getAtlasAuth, verifyCarriers, atlasBackend } from '@atlasauth/nuxt/server'`
 if you prefer explicit imports.
 
 ## How it fits together
 
 | layer                | package        | what it does                                                             |
 | -------------------- | -------------- | ----------------------------------------------------------------------- |
-| client plugin        | `@atlas/vue`   | `createAtlas()` installed on the Nuxt Vue app (per request during SSR)   |
-| composables / comps  | `@atlas/vue`   | auto-imported into pages/components                                      |
-| Nitro middleware     | `@atlas/backend` | verifies `__session` once per request → `event.context.auth`          |
-| `getAtlasAuth`       | `@atlas/backend` | the server-route auth helper (local verify, cached JWKS)              |
+| client plugin        | `@atlasauth/vue`   | `createAtlas()` installed on the Nuxt Vue app (per request during SSR)   |
+| composables / comps  | `@atlasauth/vue`   | auto-imported into pages/components                                      |
+| Nitro middleware     | `@atlasauth/backend` | verifies `__session` once per request → `event.context.auth`          |
+| `getAtlasAuth`       | `@atlasauth/backend` | the server-route auth helper (local verify, cached JWKS)              |
 
 ## Build & test
 

package/dist/module.d.mts

@@ -23,7 +23,12 @@ interface ModuleOptions {
      * `NUXT_PUBLIC_ATLAS_PUBLISHABLE_KEY` env var in production.
      */
     publishableKey?: string;
-    /** The instance's FAPI origin (e.g. `https://fox.fapi.atlas.dev`). Public. */
+    /**
+     * The instance's FAPI origin (e.g. `https://fox-fapi.atlasauth.net`), or
+     * `"same-origin"` behind a reverse proxy on the app's own origin. Public.
+     * Required — set here or via `NUXT_PUBLIC_ATLAS_FRONTEND_API`; the runtime
+     * plugin throws an `AtlasConfigError` when neither provides it.
+     */
     frontendApi?: string;
     /**
      * The instance's JWKS URL, used by the Nitro side to verify session JWTs.

package/dist/module.d.ts

@@ -23,7 +23,12 @@ interface ModuleOptions {
      * `NUXT_PUBLIC_ATLAS_PUBLISHABLE_KEY` env var in production.
      */
     publishableKey?: string;
-    /** The instance's FAPI origin (e.g. `https://fox.fapi.atlas.dev`). Public. */
+    /**
+     * The instance's FAPI origin (e.g. `https://fox-fapi.atlasauth.net`), or
+     * `"same-origin"` behind a reverse proxy on the app's own origin. Public.
+     * Required — set here or via `NUXT_PUBLIC_ATLAS_FRONTEND_API`; the runtime
+     * plugin throws an `AtlasConfigError` when neither provides it.
+     */
     frontendApi?: string;
     /**
      * The instance's JWKS URL, used by the Nitro side to verify session JWTs.

package/dist/module.json

@@ -4,7 +4,7 @@
   "compatibility": {
     "nuxt": ">=3.0.0"
   },
-  "version": "0.1.1",
+  "version": "0.1.3",
   "builder": {
     "@nuxt/module-builder": "0.8.4",
     "unbuild": "unknown"

package/dist/runtime/plugin.js

@@ -1,12 +1,15 @@
+import { resolveFrontendApi } from "@atlasauth/js";
 import { createAtlas } from "@atlasauth/vue";
 import { defineNuxtPlugin, useRuntimeConfig } from "#imports";
 export default defineNuxtPlugin((nuxtApp) => {
   const { atlas } = useRuntimeConfig().public;
+  resolveFrontendApi(atlas.frontendApi, {
+    component: "@atlasauth/nuxt (`atlas.frontendApi` in nuxt.config, or NUXT_PUBLIC_ATLAS_FRONTEND_API)"
+  });
   nuxtApp.vueApp.use(
     createAtlas({
       publishableKey: atlas.publishableKey,
-      // Empty string → let @atlasauth/vue fall back to its default (same-origin FAPI).
-      frontendApi: atlas.frontendApi || void 0
+      frontendApi: atlas.frontendApi
     })
   );
 });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@atlasauth/nuxt",
-  "version": "0.1.1",
+  "version": "0.1.3",
   "type": "module",
   "description": "Official Nuxt 3 module for Atlas — SSR session verification (Nitro) built on the @atlasauth/vue client.",
   "license": "MIT",
@@ -19,14 +19,15 @@
   },
   "files": [
     "dist",
-    "README.md"
+    "README.md",
+    "CHANGELOG.md"
   ],
   "dependencies": {
     "@nuxt/kit": "^3.13.0",
-    "@atlasauth/vue": "0.1.1",
-    "@atlasauth/js": "0.1.1",
-    "@atlasauth/backend": "0.1.1",
-    "@atlasauth/authz": "0.1.1"
+    "@atlasauth/vue": "0.3.0",
+    "@atlasauth/js": "0.6.0",
+    "@atlasauth/authz": "0.1.1",
+    "@atlasauth/backend": "0.7.0"
   },
   "peerDependencies": {
     "nuxt": "^3"