@authhero/multi-tenancy 1.0.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2024 authhero
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,87 @@
+# @authhero/multi-tenancy
+
+Multi-tenancy support for AuthHero with organization-based access control, per-tenant database isolation, and subdomain routing.
+
+## Features
+
+- 🔐 **Organization-based Access Control** - Control tenant access via JWT tokens with `org_id` claims
+- 💾 **Database Isolation** - Per-tenant databases with D1, Turso, or custom providers
+- ⚙️ **Settings Inheritance** - Inherit configuration from main tenant to child tenants
+- 🌐 **Subdomain Routing** - Automatic subdomain-to-tenant resolution
+- 🔄 **Tenant Lifecycle** - Automated provisioning and deprovisioning
+- 🪝 **Hooks Integration** - Seamless integration with AuthHero hooks system
+
+## Installation
+
+```bash
+pnpm add @authhero/multi-tenancy
+```
+
+## Documentation
+
+📚 **Full documentation**: [https://authhero.net/packages/multi-tenancy/](https://authhero.net/packages/multi-tenancy/)
+
+- [Architecture](https://authhero.net/packages/multi-tenancy/architecture) - Organization-tenant model and token-based access
+- [Database Isolation](https://authhero.net/packages/multi-tenancy/database-isolation) - Per-tenant databases
+- [API Reference](https://authhero.net/packages/multi-tenancy/api-reference) - Complete API documentation
+
+## Quick Start
+
+```typescript
+import { Hono } from "hono";
+import { createAuthhero } from "authhero";
+import { setupMultiTenancy } from "@authhero/multi-tenancy";
+
+const multiTenancy = setupMultiTenancy({
+  accessControl: {
+    mainTenantId: "main",
+    defaultPermissions: ["tenant:admin"],
+  },
+});
+
+const app = new Hono();
+
+// Apply middleware
+app.use("*", multiTenancy.middleware);
+
+// Mount management routes
+app.route("/management", multiTenancy.app);
+
+// Mount AuthHero with hooks
+app.route(
+  "/",
+  createAuthhero({
+    dataAdapter: env.data,
+    hooks: multiTenancy.hooks,
+  }),
+);
+```
+
+## Key Concepts
+
+### Organization-Tenant Model
+
+Organizations on a "main" tenant represent and control access to child tenants. Each organization maps to one child tenant.
+
+### Token-Based Access
+
+Access is controlled via the `org_id` claim in JWT tokens:
+
+- **No `org_id`**: Main tenant only
+- **With `org_id`**: Access to matching tenant
+
+### Silent Authentication
+
+Switch tenants by requesting a new token with a different organization:
+
+```typescript
+const token = await getAccessTokenSilently({
+  authorizationParams: {
+    organization: "tenant-id",
+  },
+});
+```
+
+## License
+
+MIT

package/package.json

@@ -0,0 +1,55 @@
+{
+  "name": "@authhero/multi-tenancy",
+  "private": false,
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org/",
+    "tag": "latest"
+  },
+  "homepage": "https://authhero.net",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/markusahlstrand/authhero"
+  },
+  "version": "1.0.0",
+  "description": "Multi-tenancy support for AuthHero with organization-based access control and per-tenant database isolation",
+  "files": [
+    "dist"
+  ],
+  "main": "dist/multi-tenancy.cjs",
+  "module": "dist/multi-tenancy.mjs",
+  "types": "dist/multi-tenancy.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/multi-tenancy.d.ts",
+      "require": "./dist/multi-tenancy.cjs",
+      "import": "./dist/multi-tenancy.mjs"
+    }
+  },
+  "devDependencies": {
+    "@hono/zod-openapi": "^0.19.10",
+    "@types/better-sqlite3": "^7.6.12",
+    "@types/node": "^22.0.0",
+    "better-sqlite3": "^11.7.0",
+    "dts-bundle-generator": "^9.5.1",
+    "hono": "^4.7.0",
+    "kysely": "^0.27.4",
+    "typescript": "^5.6.0",
+    "vite": "^6.0.0",
+    "vitest": "^2.1.0",
+    "@authhero/kysely-adapter": "10.59.0"
+  },
+  "dependencies": {
+    "zod": "^3.24.0",
+    "@authhero/adapter-interfaces": "0.101.0"
+  },
+  "peerDependencies": {
+    "@hono/zod-openapi": "^0.19.10",
+    "hono": "^4.7.0",
+    "authhero": "1.0.0"
+  },
+  "scripts": {
+    "build": "tsc && vite build && dts-bundle-generator --config ./dts-bundle-generator.config.ts",
+    "test": "vitest run"
+  }
+}