@authup/client-web-nuxt 1.0.0-beta.70 → 1.0.0-beta.71

package/README.md

@@ -56,7 +56,7 @@ export default defineNuxtConfig({
 });
 ```
 
-Every option except `serverApiURL` lands in the public `runtimeConfig.public.authup`, so `NUXT_PUBLIC_AUTHUP_API_URL` overrides `apiURL` at runtime. `serverApiURL` goes to the private `runtimeConfig.authup` and is overridden with `NUXT_AUTHUP_SERVER_API_URL`.
+Every option except `serverApiURL` lands in the public `runtimeConfig.public.authup`, so `NUXT_PUBLIC_AUTHUP_API_URL` overrides `apiURL` at runtime. `serverApiURL` goes to the private `runtimeConfig.authup` and is overridden with `NUXT_AUTHUP_SERVER_API_URL`. It only changes where the server render sends its requests: every URL the kit's client derives from the API URL (identity provider links, the OAuth2 endpoints) keeps the public one, since hydration does not correct a rendered `href`. A `buildAuthorizeURL` call takes its base from you, so pass it the public `apiURL`.
 
 ### Install vuecs after the kit
 
@@ -134,7 +134,7 @@ Set under the `authup` key of `nuxt.config`:
 | Option | Type | Default | Description |
 |---|---|---|---|
 | `apiURL` | `string` | `http://localhost:3001` | API URL for the browser, and for the server when nothing more specific is set. |
-| `serverApiURL` | `string` | `apiURL` | API URL for the server render. Private runtime config only. |
+| `serverApiURL` | `string` | `apiURL` | Address the server render dials. URLs the kit renders keep the public API URL. Private runtime config only. |
 | `apiURLRuntimeKey` | `string` | none | Path into the runtime config to read the API URL from: the whole runtime config on the server, the public one in the browser. `serverApiURL` still wins on the server. |
 | `cookieDomain` | `string` | host only | `Domain` attribute of the session cookies. `127.0.0.1` is written as `localhost`. |
 | `cookieDomainRuntimeKey` | `string` | none | Path into the public runtime config to read the cookie domain from. |

package/dist/module.json

@@ -1,7 +1,7 @@
 {
   "name": "@authup/client-web-nuxt",
   "configKey": "authup",
-  "version": "1.0.0-beta.70",
+  "version": "1.0.0-beta.71",
   "builder": {
     "@nuxt/module-builder": "1.0.3",
     "unbuild": "3.6.1"

package/dist/runtime/helpers/http-client.d.ts

@@ -0,0 +1,15 @@
+import type { HTTPClientInput } from '@authup/client-web-kit';
+import type { RuntimeConfig } from 'nuxt/schema';
+export type HTTPClientOptions = {
+    baseURL: string;
+    httpClient?: HTTPClientInput;
+};
+/**
+ * The kit's base url is the PUBLIC api url on both sides, because everything
+ * derived from it is user-facing: the identity provider buttons, the absolute
+ * OAuth2 endpoints and hapic's error messages. A server render only DIALS
+ * the server url, through a rebased transport, so a rendered href never
+ * names an address the browser cannot reach (hydration does not correct
+ * attributes). A function, so the kit gets a new client per consumer.
+ */
+export declare function buildHTTPClientOptions(runtimeConfig: RuntimeConfig, isServer: boolean): HTTPClientOptions;

package/dist/runtime/helpers/http-client.js

@@ -0,0 +1,46 @@
+import { API_URL_DEFAULT, Client, createRebasedTransport } from "@authup/core-http-kit";
+import { getPathValue } from "pathtrace";
+function readPublicApiURL(runtimeConfig) {
+  const options = runtimeConfig.public.authup;
+  let url;
+  if (options.apiURL) {
+    url = options.apiURL;
+  }
+  if (options.apiURLRuntimeKey) {
+    const pathValue = getPathValue(runtimeConfig.public, options.apiURLRuntimeKey);
+    if (typeof pathValue === "string") {
+      url = pathValue;
+    }
+  }
+  return url || API_URL_DEFAULT;
+}
+function readServerApiURL(runtimeConfig) {
+  const options = runtimeConfig.public.authup;
+  let url;
+  if (options.apiURLRuntimeKey) {
+    const pathValue = getPathValue(runtimeConfig, options.apiURLRuntimeKey);
+    if (typeof pathValue === "string") {
+      url = pathValue;
+    }
+  }
+  const serverOptions = runtimeConfig.authup;
+  if (serverOptions?.serverApiURL) {
+    url = serverOptions.serverApiURL;
+  }
+  return url;
+}
+export function buildHTTPClientOptions(runtimeConfig, isServer) {
+  const baseURL = readPublicApiURL(runtimeConfig);
+  if (!isServer) {
+    return { baseURL };
+  }
+  const serverURL = readServerApiURL(runtimeConfig);
+  if (!serverURL || serverURL === baseURL) {
+    return { baseURL };
+  }
+  const transport = createRebasedTransport(baseURL, serverURL);
+  return {
+    baseURL,
+    httpClient: () => new Client({ baseURL, transport })
+  };
+}

package/dist/runtime/plugins/kit.js

@@ -5,7 +5,6 @@ import {
   LOCALE_UNSET,
   install
 } from "@authup/client-web-kit";
-import { API_URL_DEFAULT } from "@authup/core-http-kit";
 import { getPathValue } from "pathtrace";
 import { computed } from "vue";
 import {
@@ -15,6 +14,7 @@ import {
   useRequestURL,
   useRuntimeConfig
 } from "#imports";
+import { buildHTTPClientOptions } from "../helpers/http-client.js";
 function buildPreferenceRef(name, unset, options) {
   const cookie = useCookie(name, {
     path: "/",
@@ -64,45 +64,18 @@ function buildCookieName(runtimeConfig) {
   }
   return (key) => `${options.cookiePrefix}${key}`;
 }
-function buildApiUrl(runtimeConfig) {
-  const options = runtimeConfig.public.authup;
-  let url;
-  if (import.meta.server) {
-    if (options.apiURLRuntimeKey) {
-      const pathValue = getPathValue(runtimeConfig, options.apiURLRuntimeKey);
-      if (typeof pathValue === "string") {
-        url = pathValue;
-      }
-    }
-    const serverOptions = runtimeConfig.authup;
-    if (serverOptions?.serverApiURL) {
-      url = serverOptions.serverApiURL;
-    }
-  }
-  if (!url) {
-    if (options.apiURL) {
-      url = options.apiURL;
-    }
-    if (options.apiURLRuntimeKey) {
-      const pathValue = getPathValue(runtimeConfig.public, options.apiURLRuntimeKey);
-      if (typeof pathValue === "string") {
-        url = pathValue;
-      }
-    }
-  }
-  return url || API_URL_DEFAULT;
-}
 export default defineNuxtPlugin({
   name: "authup:kit",
   dependsOn: ["pinia"],
   setup(ctx) {
     const runtimeConfig = useRuntimeConfig();
-    const baseURL = buildApiUrl(runtimeConfig);
+    const { baseURL, httpClient } = buildHTTPClientOptions(runtimeConfig, import.meta.server);
     const cookieOptions = buildCookieOptions(runtimeConfig);
     const cookieName = buildCookieName(runtimeConfig);
     install(ctx.vueApp, {
       pinia: ctx.$pinia,
       baseURL,
+      httpClient,
       // A refresh during the server render rotates the token cookies
       // too, and the kit cannot see the scheme without a window.
       cookieSecure: useRequestURL().protocol === "https:",

package/package.json

@@ -1,7 +1,7 @@
 {
     "name": "@authup/client-web-nuxt",
     "type": "module",
-    "version": "1.0.0-beta.70",
+    "version": "1.0.0-beta.71",
     "description": "Nuxt module that signs your app in with Authup and guards its routes by login state and permission.",
     "license": "Apache-2.0",
     "repository": {
@@ -32,22 +32,22 @@
         "node": "^22.13.0 || ^23.5.0 || >=24.0.0"
     },
     "dependencies": {
-        "@authup/access": "^1.0.0-beta.70",
-        "@authup/client-web-kit": "^1.0.0-beta.70",
-        "@authup/core-http-kit": "^1.0.0-beta.70",
-        "@authup/kit": "^1.0.0-beta.70",
+        "@authup/access": "^1.0.0-beta.71",
+        "@authup/client-web-kit": "^1.0.0-beta.71",
+        "@authup/core-http-kit": "^1.0.0-beta.71",
+        "@authup/kit": "^1.0.0-beta.71",
         "@nuxt/kit": "^4.6.1",
         "pathtrace": "^2.2.0",
         "smob": "^1.6.1"
     },
     "devDependencies": {
         "@nuxt/module-builder": "^1.0.3",
-        "@nuxt/schema": "^4.6.1",
+        "@nuxt/schema": "^4.6.2",
         "@pinia/nuxt": "^1.0.3",
         "cross-env": "^10.1.0",
         "fix-dts-default-cjs-exports": "^1.0.1",
         "mkdist": "^2.3.0",
-        "nuxt": "^4.6.1",
+        "nuxt": "^4.6.2",
         "pinia": "^4.1.0",
         "rollup-plugin-dts": "^6.5.1",
         "strip-literal": "^4.0.0",