@atlasauth/nuxt 0.1.5 → 0.2.1

package/CHANGELOG.md

@@ -1,5 +1,16 @@
 # @atlasauth/nuxt changelog
 
+## 0.2.1 — 2026-11-06
+
+### Added
+- `previousIssuers` module option (server-only runtime config), so a sign-in host change does not sign users out: tokens from a listed former issuer are accepted. Absent means only `issuer` is accepted.
+
+## 0.2.0 — 2026-10-24
+Requires `@atlasauth/vue` with policy acceptance.
+- **Policy acceptance** (terms of service, privacy, any policy the app defines). `usePolicies` and `usePolicyState` are
+  auto-imported, and `PolicyConsent`, `PolicyClickwrap`, `PolicyAcceptStep` and `PolicyGate` are registered as components,
+  from `@atlasauth/vue` (`<SignIn>` / `<SignUp>` already show the policies).
+
 ## 0.1.5
 
 ### Changed

package/README.md

@@ -41,6 +41,7 @@ export default defineNuxtConfig({
     atlas: {
       jwksUrl: '',   // NUXT_ATLAS_JWKS_URL
       issuer: '',    // NUXT_ATLAS_ISSUER
+      // previousIssuers: ['https://old-host.example.com'], // optional: still accept a former issuer
       // authorizedParties: ['https://app.example.com'], // optional azp allowlist
     },
     public: {
@@ -108,6 +109,22 @@ async function callApi() {
 > **do** — seeing is not doing. The server checking the same condition is what
 > actually stops them. See the next section.
 
+## Policy acceptance (terms of service, privacy)
+
+`<SignIn>` and `<SignUp>` show the instance's policies themselves. For a custom form, `usePolicies()` is auto-imported and
+`<PolicyConsent>`, `<PolicyClickwrap>`, `<PolicyAcceptStep>` and `<PolicyGate>` are registered:
+
+```vue
+<script setup>
+const { controller, build } = usePolicies();
+</script>
+<template>
+  <PolicyConsent :controller="controller" />
+  <button @click="signUp({ policyAcceptances: build() })">Create account</button>
+  <PolicyGate /> <!-- signed-in banner when a policy needs re-accepting -->
+</template>
+```
+
 ## Read auth in a server route
 
 `getAtlasAuth(event)` is auto-imported into every Nitro handler. It returns the

package/dist/module.d.mts

@@ -40,6 +40,11 @@ interface ModuleOptions {
      * an unchecked issuer would accept a token from any Atlas instance.
      */
     issuer?: string;
+    /**
+     * Former issuers still accepted during a sign-in host change. SERVER-ONLY.
+     * Absent means only `issuer` is accepted.
+     */
+    previousIssuers?: string[];
     /**
      * Optional `azp` allowlist. When set, a token minted for another origin is
      * refused server-side (§7.3). SERVER-ONLY.

package/dist/module.d.ts

@@ -40,6 +40,11 @@ interface ModuleOptions {
      * an unchecked issuer would accept a token from any Atlas instance.
      */
     issuer?: string;
+    /**
+     * Former issuers still accepted during a sign-in host change. SERVER-ONLY.
+     * Absent means only `issuer` is accepted.
+     */
+    previousIssuers?: string[];
     /**
      * Optional `azp` allowlist. When set, a token minted for another origin is
      * refused server-side (§7.3). SERVER-ONLY.

package/dist/module.json

@@ -4,7 +4,7 @@
   "compatibility": {
     "nuxt": ">=3.0.0"
   },
-  "version": "0.1.5",
+  "version": "0.2.1",
   "builder": {
     "@nuxt/module-builder": "0.8.4",
     "unbuild": "unknown"

package/dist/module.mjs

@@ -1,5 +1,39 @@
 import { defineNuxtModule, createResolver, addPlugin, addImports, addComponent, addServerHandler, addServerImports } from '@nuxt/kit';
 
+const VUE_COMPOSABLES = [
+  "useAtlas",
+  "useUser",
+  "useSession",
+  "useAuth",
+  "useOrganization",
+  "useSignIn",
+  "useSignUp",
+  "useFlow",
+  // Policy acceptance (terms, privacy): load the instance's policies into a controller
+  // for a custom form, and subscribe a component to one.
+  "usePolicies",
+  "usePolicyState"
+];
+const VUE_COMPONENTS = [
+  "SignedIn",
+  "SignedOut",
+  "AtlasLoading",
+  "AtlasLoaded",
+  "Protect",
+  "SignIn",
+  "SignUp",
+  "UserButton",
+  "OrganizationSwitcher",
+  "UserProfile",
+  "OrganizationProfile",
+  // Policy acceptance (terms, privacy): the checkbox block with its document viewer, the
+  // clickwrap sentence, the held-sign-in step, and the signed-in re-acceptance banner.
+  "PolicyConsent",
+  "PolicyClickwrap",
+  "PolicyAcceptStep",
+  "PolicyGate"
+];
+
 const module = defineNuxtModule({
   meta: {
     name: "@atlasauth/nuxt",
@@ -13,6 +47,7 @@ const module = defineNuxtModule({
     frontendApi: "",
     jwksUrl: "",
     issuer: "",
+    previousIssuers: [],
     authorizedParties: []
   },
   setup(options, nuxt) {
@@ -26,36 +61,16 @@ const module = defineNuxtModule({
     nuxt.options.runtimeConfig.atlas = {
       jwksUrl: options.jwksUrl || privateConfig.jwksUrl || "",
       issuer: options.issuer || privateConfig.issuer || "",
+      previousIssuers: options.previousIssuers?.length ? options.previousIssuers : privateConfig.previousIssuers || [],
       authorizedParties: options.authorizedParties?.length ? options.authorizedParties : privateConfig.authorizedParties || []
     };
     nuxt.options.build.transpile.push("@atlasauth/vue", "@atlasauth/js", "@atlasauth/authz", resolver.resolve("./runtime"));
     addPlugin({ src: resolver.resolve("./runtime/plugin"), mode: "all" });
-    const composables = [
-      "useAtlas",
-      "useUser",
-      "useSession",
-      "useAuth",
-      "useOrganization",
-      "useSignIn",
-      "useSignUp",
-      "useFlow"
-    ];
+    const composables = VUE_COMPOSABLES;
     for (const name of composables) {
       addImports({ name, as: name, from: "@atlasauth/vue" });
     }
-    const components = [
-      "SignedIn",
-      "SignedOut",
-      "AtlasLoading",
-      "AtlasLoaded",
-      "Protect",
-      "SignIn",
-      "SignUp",
-      "UserButton",
-      "OrganizationSwitcher",
-      "UserProfile",
-      "OrganizationProfile"
-    ];
+    const components = VUE_COMPONENTS;
     for (const name of components) {
       addComponent({ name, export: name, filePath: "@atlasauth/vue" });
     }

package/dist/runtime/nuxt-shims.d.ts

@@ -34,6 +34,7 @@ declare module '#imports' {
     atlas: {
       jwksUrl: string;
       issuer: string;
+      previousIssuers?: string[];
       authorizedParties: string[];
     };
   };

package/dist/runtime/server/backend.js

@@ -12,6 +12,7 @@ export function atlasBackend() {
   cached = new AtlasBackend({
     jwksUrl: atlas.jwksUrl,
     issuer: atlas.issuer,
+    previousIssuers: atlas.previousIssuers?.length ? atlas.previousIssuers : void 0,
     authorizedParties: atlas.authorizedParties?.length ? atlas.authorizedParties : void 0
   });
   return cached;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@atlasauth/nuxt",
-  "version": "0.1.5",
+  "version": "0.2.1",
   "type": "module",
   "description": "Official Nuxt 3 module for Atlas — SSR session verification (Nitro) built on the @atlasauth/vue client.",
   "license": "MIT",
@@ -24,10 +24,10 @@
   ],
   "dependencies": {
     "@nuxt/kit": "^3.13.0",
-    "@atlasauth/vue": "0.8.0",
-    "@atlasauth/js": "0.15.0",
-    "@atlasauth/backend": "0.14.0",
-    "@atlasauth/authz": "0.1.1"
+    "@atlasauth/vue": "0.18.7",
+    "@atlasauth/js": "0.34.6",
+    "@atlasauth/backend": "0.39.0",
+    "@atlasauth/authz": "0.3.0"
   },
   "peerDependencies": {
     "nuxt": "^3"
@@ -47,7 +47,7 @@
   },
   "scripts": {
     "build": "nuxt-module-build build",
-    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "typecheck": "tsgo -p tsconfig.json --noEmit --incremental --tsBuildInfoFile node_modules/.cache/typecheck.tsbuildinfo",
     "test": "vitest run"
   }
 }