@baasix/baasix 0.1.0

package/dist/auth/providers/credential.js

@@ -0,0 +1,162 @@
+/**
+ * Credential Provider
+ * Handles email/password authentication
+ */
+export function credential(options) {
+    const minLength = options.minPasswordLength ?? 8;
+    const maxLength = options.maxPasswordLength ?? 128;
+    return {
+        id: "credential",
+        name: "Credentials",
+        validatePassword(password) {
+            if (!password) {
+                return { valid: false, error: "Password is required" };
+            }
+            if (password.length < minLength) {
+                return { valid: false, error: `Password must be at least ${minLength} characters` };
+            }
+            if (password.length > maxLength) {
+                return { valid: false, error: `Password must be at most ${maxLength} characters` };
+            }
+            return { valid: true };
+        },
+        async hashPassword(password) {
+            return options.hashPassword(password);
+        },
+        async verifyPassword(password, hash) {
+            return options.verifyPassword({ password, hash });
+        },
+        async signUp({ adapter, email, password, firstName, lastName, phone }) {
+            // Validate password
+            const validation = this.validatePassword(password);
+            if (!validation.valid) {
+                throw new Error(validation.error);
+            }
+            // Check if user already exists
+            const existingUser = await adapter.findUserByEmail(email.toLowerCase());
+            if (existingUser) {
+                throw new Error("User already exists with this email");
+            }
+            // Hash password
+            const hashedPassword = await this.hashPassword(password);
+            // Create user
+            const user = await adapter.createUser({
+                email: email.toLowerCase(),
+                emailVerified: false,
+                firstName,
+                lastName: lastName || null,
+                phone: phone || null,
+                status: "active",
+            });
+            // Create credential account
+            const account = await adapter.createAccount({
+                user_Id: user.id,
+                accountId: user.id, // For credentials, accountId is same as user_Id
+                providerId: "credential",
+                password: hashedPassword,
+            });
+            return { user, account };
+        },
+        async signIn({ adapter, email, password }) {
+            // Find user
+            const user = await adapter.findUserByEmail(email.toLowerCase());
+            if (!user) {
+                return null;
+            }
+            // Check user status
+            if (user.status !== "active") {
+                throw new Error(`Account is ${user.status}`);
+            }
+            // Find credential account
+            const accounts = await adapter.findAccountsByUserId(user.id);
+            const credentialAccount = accounts.find((a) => a.providerId === "credential");
+            // Get password - try account first, then fallback to user.password for migration
+            let passwordHash = credentialAccount?.password;
+            // If no credential account or no password in account, check user table (migration support)
+            if (!passwordHash) {
+                // Need to get the full user with password
+                // This is a special case for migration from old password storage
+                const userWithPassword = user;
+                passwordHash = userWithPassword.password;
+            }
+            if (!passwordHash) {
+                throw new Error("No password set for this account. Please reset your password or use a different sign-in method.");
+            }
+            // Verify password
+            const isValid = await this.verifyPassword(password, passwordHash);
+            if (!isValid) {
+                return null;
+            }
+            // If password was in user table, migrate it to account table
+            if (!credentialAccount?.password && passwordHash) {
+                if (credentialAccount) {
+                    // Update existing account with password
+                    await adapter.updateAccount(credentialAccount.id, { password: passwordHash });
+                }
+                else {
+                    // Create new credential account
+                    await adapter.createAccount({
+                        user_Id: user.id,
+                        accountId: user.id,
+                        providerId: "credential",
+                        password: passwordHash,
+                    });
+                }
+                // Clear password from user table (optional - can be done later)
+                // await adapter.updateUser(user.id, { password: null });
+            }
+            // Update last access
+            await adapter.updateUser(user.id, { lastAccess: new Date() });
+            return user;
+        },
+        async changePassword({ adapter, userId, currentPassword, newPassword }) {
+            // Validate new password
+            const validation = this.validatePassword(newPassword);
+            if (!validation.valid) {
+                throw new Error(validation.error);
+            }
+            // Find credential account
+            const accounts = await adapter.findAccountsByUserId(userId);
+            const credentialAccount = accounts.find((a) => a.providerId === "credential");
+            if (!credentialAccount?.password) {
+                throw new Error("No credential account found");
+            }
+            // Verify current password
+            const isValid = await this.verifyPassword(currentPassword, credentialAccount.password);
+            if (!isValid) {
+                throw new Error("Current password is incorrect");
+            }
+            // Hash new password
+            const hashedPassword = await this.hashPassword(newPassword);
+            // Update account
+            await adapter.updateAccount(credentialAccount.id, { password: hashedPassword });
+            return true;
+        },
+        async resetPassword({ adapter, userId, newPassword }) {
+            // Validate new password
+            const validation = this.validatePassword(newPassword);
+            if (!validation.valid) {
+                throw new Error(validation.error);
+            }
+            // Hash new password
+            const hashedPassword = await this.hashPassword(newPassword);
+            // Find or create credential account
+            const accounts = await adapter.findAccountsByUserId(userId);
+            const credentialAccount = accounts.find((a) => a.providerId === "credential");
+            if (credentialAccount) {
+                await adapter.updateAccount(credentialAccount.id, { password: hashedPassword });
+            }
+            else {
+                await adapter.createAccount({
+                    user_Id: userId,
+                    accountId: userId,
+                    providerId: "credential",
+                    password: hashedPassword,
+                });
+            }
+            return true;
+        },
+    };
+}
+export default credential;
+//# sourceMappingURL=credential.js.map

package/dist/auth/providers/credential.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential.js","sourceRoot":"","sources":["../../../baasix/auth/providers/credential.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAmFH,MAAM,UAAU,UAAU,CAAC,OAAkC;IAC3D,MAAM,SAAS,GAAG,OAAO,CAAC,iBAAiB,IAAI,CAAC,CAAC;IACjD,MAAM,SAAS,GAAG,OAAO,CAAC,iBAAiB,IAAI,GAAG,CAAC;IAEnD,OAAO;QACL,EAAE,EAAE,YAAY;QAChB,IAAI,EAAE,aAAa;QAEnB,gBAAgB,CAAC,QAAQ;YACvB,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC;YACzD,CAAC;YACD,IAAI,QAAQ,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;gBAChC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,6BAA6B,SAAS,aAAa,EAAE,CAAC;YACtF,CAAC;YACD,IAAI,QAAQ,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;gBAChC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,4BAA4B,SAAS,aAAa,EAAE,CAAC;YACrF,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACzB,CAAC;QAED,KAAK,CAAC,YAAY,CAAC,QAAQ;YACzB,OAAO,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QACxC,CAAC;QAED,KAAK,CAAC,cAAc,CAAC,QAAQ,EAAE,IAAI;YACjC,OAAO,OAAO,CAAC,cAAc,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACpD,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE;YACnE,oBAAoB;YACpB,MAAM,UAAU,GAAG,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YACnD,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;gBACtB,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YACpC,CAAC;YAED,+BAA+B;YAC/B,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,eAAe,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;YACxE,IAAI,YAAY,EAAE,CAAC;gBACjB,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;YACzD,CAAC;YAED,gBAAgB;YAChB,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;YAEzD,cAAc;YACd,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC;gBACpC,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE;gBAC1B,aAAa,EAAE,KAAK;gBACpB,SAAS;gBACT,QAAQ,EAAE,QAAQ,IAAI,IAAI;gBAC1B,KAAK,EAAE,KAAK,IAAI,IAAI;gBACpB,MAAM,EAAE,QAAQ;aACjB,CAAC,CAAC;YAEH,4BAA4B;YAC5B,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC;gBAC1C,OAAO,EAAE,IAAI,CAAC,EAAE;gBAChB,SAAS,EAAE,IAAI,CAAC,EAAE,EAAE,gDAAgD;gBACpE,UAAU,EAAE,YAAY;gBACxB,QAAQ,EAAE,cAAc;aACzB,CAAC,CAAC;YAEH,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QAC3B,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE;YACvC,YAAY;YACZ,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,eAAe,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;YAChE,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO,IAAI,CAAC;YACd,CAAC;YAED,oBAAoB;YACpB,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC7B,MAAM,IAAI,KAAK,CAAC,cAAc,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YAC/C,CAAC;YAED,0BAA0B;YAC1B,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,oBAAoB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC7D,MAAM,iBAAiB,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,YAAY,CAAC,CAAC;YAE9E,iFAAiF;YACjF,IAAI,YAAY,GAA8B,iBAAiB,EAAE,QAAQ,CAAC;YAE1E,2FAA2F;YAC3F,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,0CAA0C;gBAC1C,iEAAiE;gBACjE,MAAM,gBAAgB,GAAG,IAAoC,CAAC;gBAC9D,YAAY,GAAG,gBAAgB,CAAC,QAAQ,CAAC;YAC3C,CAAC;YAED,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,MAAM,IAAI,KAAK,CAAC,iGAAiG,CAAC,CAAC;YACrH,CAAC;YAED,kBAAkB;YAClB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;YAClE,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,IAAI,CAAC;YACd,CAAC;YAED,6DAA6D;YAC7D,IAAI,CAAC,iBAAiB,EAAE,QAAQ,IAAI,YAAY,EAAE,CAAC;gBACjD,IAAI,iBAAiB,EAAE,CAAC;oBACtB,wCAAwC;oBACxC,MAAM,OAAO,CAAC,aAAa,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC,CAAC;gBAChF,CAAC;qBAAM,CAAC;oBACN,gCAAgC;oBAChC,MAAM,OAAO,CAAC,aAAa,CAAC;wBAC1B,OAAO,EAAE,IAAI,CAAC,EAAE;wBAChB,SAAS,EAAE,IAAI,CAAC,EAAE;wBAClB,UAAU,EAAE,YAAY;wBACxB,QAAQ,EAAE,YAAY;qBACvB,CAAC,CAAC;gBACL,CAAC;gBAED,gEAAgE;gBAChE,yDAAyD;YAC3D,CAAC;YAED,qBAAqB;YACrB,MAAM,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;YAE9D,OAAO,IAAI,CAAC;QACd,CAAC;QAED,KAAK,CAAC,cAAc,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,WAAW,EAAE;YACpE,wBAAwB;YACxB,MAAM,UAAU,GAAG,IAAI,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC;YACtD,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;gBACtB,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YACpC,CAAC;YAED,0BAA0B;YAC1B,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC;YAC5D,MAAM,iBAAiB,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,YAAY,CAAC,CAAC;YAE9E,IAAI,CAAC,iBAAiB,EAAE,QAAQ,EAAE,CAAC;gBACjC,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;YACjD,CAAC;YAED,0BAA0B;YAC1B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,eAAe,EAAE,iBAAiB,CAAC,QAAQ,CAAC,CAAC;YACvF,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;YACnD,CAAC;YAED,oBAAoB;YACpB,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;YAE5D,iBAAiB;YACjB,MAAM,OAAO,CAAC,aAAa,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC,CAAC;YAEhF,OAAO,IAAI,CAAC;QACd,CAAC;QAED,KAAK,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE;YAClD,wBAAwB;YACxB,MAAM,UAAU,GAAG,IAAI,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC;YACtD,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;gBACtB,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YACpC,CAAC;YAED,oBAAoB;YACpB,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;YAE5D,oCAAoC;YACpC,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC;YAC5D,MAAM,iBAAiB,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,YAAY,CAAC,CAAC;YAE9E,IAAI,iBAAiB,EAAE,CAAC;gBACtB,MAAM,OAAO,CAAC,aAAa,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC,CAAC;YAClF,CAAC;iBAAM,CAAC;gBACN,MAAM,OAAO,CAAC,aAAa,CAAC;oBAC1B,OAAO,EAAE,MAAM;oBACf,SAAS,EAAE,MAAM;oBACjB,UAAU,EAAE,YAAY;oBACxB,QAAQ,EAAE,cAAc;iBACzB,CAAC,CAAC;YACL,CAAC;YAED,OAAO,IAAI,CAAC;QACd,CAAC;KACF,CAAC;AACJ,CAAC;AAED,eAAe,UAAU,CAAC"}

package/dist/auth/providers/facebook.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Facebook OAuth Provider
+ */
+import type { OAuthProvider, ProviderOptions } from "../types.js";
+export interface FacebookProfile {
+    id: string;
+    name: string;
+    first_name?: string;
+    last_name?: string;
+    email?: string;
+    picture?: {
+        data: {
+            url: string;
+            is_silhouette: boolean;
+        };
+    };
+}
+export interface FacebookOptions extends ProviderOptions<FacebookProfile> {
+    /**
+     * Fields to request from Facebook Graph API
+     */
+    fields?: string[];
+}
+export declare function facebook(options: FacebookOptions): OAuthProvider<FacebookProfile, FacebookOptions>;
+export default facebook;
+//# sourceMappingURL=facebook.d.ts.map

package/dist/auth/providers/facebook.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"facebook.d.ts","sourceRoot":"","sources":["../../../baasix/auth/providers/facebook.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAgB,eAAe,EAAE,MAAM,aAAa,CAAC;AAOhF,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE;QACR,IAAI,EAAE;YACJ,GAAG,EAAE,MAAM,CAAC;YACZ,aAAa,EAAE,OAAO,CAAC;SACxB,CAAC;KACH,CAAC;CACH;AAED,MAAM,WAAW,eAAgB,SAAQ,eAAe,CAAC,eAAe,CAAC;IACvE;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;CACnB;AAMD,wBAAgB,QAAQ,CAAC,OAAO,EAAE,eAAe,GAAG,aAAa,CAAC,eAAe,EAAE,eAAe,CAAC,CAwHlG;AAED,eAAe,QAAQ,CAAC"}

package/dist/auth/providers/facebook.js

@@ -0,0 +1,112 @@
+/**
+ * Facebook OAuth Provider
+ */
+import { createAuthorizationURL, validateAuthorizationCode, parseOAuth2Tokens, } from "../oauth2/utils.js";
+const FACEBOOK_AUTH_URL = "https://www.facebook.com/v18.0/dialog/oauth";
+const FACEBOOK_TOKEN_URL = "https://graph.facebook.com/v18.0/oauth/access_token";
+const FACEBOOK_USERINFO_URL = "https://graph.facebook.com/v18.0/me";
+export function facebook(options) {
+    const defaultScopes = ["email", "public_profile"];
+    const defaultFields = ["id", "name", "first_name", "last_name", "email", "picture.type(large)"];
+    return {
+        id: "facebook",
+        name: "Facebook",
+        options,
+        async createAuthorizationURL({ state, scopes, redirectURI }) {
+            const allScopes = options.disableDefaultScope
+                ? [...(options.scope || []), ...(scopes || [])]
+                : [...defaultScopes, ...(options.scope || []), ...(scopes || [])];
+            return createAuthorizationURL({
+                authorizationEndpoint: FACEBOOK_AUTH_URL,
+                clientId: options.clientId,
+                redirectURI: options.redirectURI || redirectURI,
+                state,
+                scopes: [...new Set(allScopes)],
+                prompt: options.prompt,
+            });
+        },
+        async validateAuthorizationCode({ code, redirectURI }) {
+            const result = await validateAuthorizationCode({
+                tokenEndpoint: FACEBOOK_TOKEN_URL,
+                code,
+                clientId: options.clientId,
+                clientSecret: options.clientSecret,
+                redirectURI: options.redirectURI || redirectURI,
+            });
+            const tokens = parseOAuth2Tokens(result.raw);
+            return {
+                ...tokens,
+                accessToken: result.accessToken,
+                tokenType: result.tokenType,
+                raw: result.raw,
+            };
+        },
+        async getUserInfo(tokens) {
+            if (!tokens.accessToken) {
+                return null;
+            }
+            const fields = options.fields || defaultFields;
+            const url = new URL(FACEBOOK_USERINFO_URL);
+            url.searchParams.set("fields", fields.join(","));
+            url.searchParams.set("access_token", tokens.accessToken);
+            const response = await fetch(url.toString());
+            if (!response.ok) {
+                console.error("Failed to fetch Facebook user info:", await response.text());
+                return null;
+            }
+            const profile = await response.json();
+            // Apply custom mapping if provided
+            if (options.mapProfileToUser) {
+                const mapped = await options.mapProfileToUser(profile);
+                return {
+                    user: {
+                        id: profile.id,
+                        email: mapped.email || profile.email || null,
+                        emailVerified: !!profile.email, // Facebook provides verified emails
+                        name: profile.name,
+                        image: profile.picture?.data?.url,
+                        firstName: mapped.firstName || profile.first_name,
+                        lastName: mapped.lastName || profile.last_name,
+                    },
+                    data: profile,
+                };
+            }
+            return {
+                user: {
+                    id: profile.id,
+                    email: profile.email || null,
+                    emailVerified: !!profile.email,
+                    name: profile.name,
+                    image: profile.picture?.data?.url,
+                    firstName: profile.first_name,
+                    lastName: profile.last_name,
+                },
+                data: profile,
+            };
+        },
+        async refreshAccessToken(refreshToken) {
+            // Facebook uses long-lived tokens and doesn't support traditional refresh
+            // You would exchange a short-lived token for a long-lived one
+            const url = new URL(FACEBOOK_TOKEN_URL);
+            url.searchParams.set("grant_type", "fb_exchange_token");
+            url.searchParams.set("client_id", options.clientId);
+            url.searchParams.set("client_secret", options.clientSecret);
+            url.searchParams.set("fb_exchange_token", refreshToken);
+            const response = await fetch(url.toString());
+            if (!response.ok) {
+                throw new Error("Failed to exchange Facebook token");
+            }
+            const data = await response.json();
+            return {
+                accessToken: data.access_token,
+                tokenType: "Bearer",
+                accessTokenExpiresAt: data.expires_in
+                    ? new Date(Date.now() + data.expires_in * 1000)
+                    : undefined,
+                raw: data,
+            };
+        },
+    };
+}
+export default facebook;
+//# sourceMappingURL=facebook.js.map

package/dist/auth/providers/facebook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"facebook.js","sourceRoot":"","sources":["../../../baasix/auth/providers/facebook.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,EACL,sBAAsB,EACtB,yBAAyB,EACzB,iBAAiB,GAClB,MAAM,oBAAoB,CAAC;AAuB5B,MAAM,iBAAiB,GAAG,6CAA6C,CAAC;AACxE,MAAM,kBAAkB,GAAG,qDAAqD,CAAC;AACjF,MAAM,qBAAqB,GAAG,qCAAqC,CAAC;AAEpE,MAAM,UAAU,QAAQ,CAAC,OAAwB;IAC/C,MAAM,aAAa,GAAG,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;IAClD,MAAM,aAAa,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,OAAO,EAAE,qBAAqB,CAAC,CAAC;IAEhG,OAAO;QACL,EAAE,EAAE,UAAU;QACd,IAAI,EAAE,UAAU;QAChB,OAAO;QAEP,KAAK,CAAC,sBAAsB,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE;YACzD,MAAM,SAAS,GAAG,OAAO,CAAC,mBAAmB;gBAC3C,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;gBAC/C,CAAC,CAAC,CAAC,GAAG,aAAa,EAAE,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC;YAEpE,OAAO,sBAAsB,CAAC;gBAC5B,qBAAqB,EAAE,iBAAiB;gBACxC,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,WAAW;gBAC/C,KAAK;gBACL,MAAM,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;gBAC/B,MAAM,EAAE,OAAO,CAAC,MAAM;aACvB,CAAC,CAAC;QACL,CAAC;QAED,KAAK,CAAC,yBAAyB,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE;YACnD,MAAM,MAAM,GAAG,MAAM,yBAAyB,CAAC;gBAC7C,aAAa,EAAE,kBAAkB;gBACjC,IAAI;gBACJ,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,YAAY,EAAE,OAAO,CAAC,YAAY;gBAClC,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,WAAW;aAChD,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAE7C,OAAO;gBACL,GAAG,MAAM;gBACT,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,GAAG,EAAE,MAAM,CAAC,GAAG;aACA,CAAC;QACpB,CAAC;QAED,KAAK,CAAC,WAAW,CAAC,MAAM;YACtB,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;gBACxB,OAAO,IAAI,CAAC;YACd,CAAC;YAED,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,aAAa,CAAC;YAC/C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,qBAAqB,CAAC,CAAC;YAC3C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YACjD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;YAEzD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;YAE7C,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,OAAO,CAAC,KAAK,CAAC,qCAAqC,EAAE,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;gBAC5E,OAAO,IAAI,CAAC;YACd,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAqB,CAAC;YAEzD,mCAAmC;YACnC,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC;gBAC7B,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;gBACvD,OAAO;oBACL,IAAI,EAAE;wBACJ,EAAE,EAAE,OAAO,CAAC,EAAE;wBACd,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,IAAI,IAAI;wBAC5C,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,oCAAoC;wBACpE,IAAI,EAAE,OAAO,CAAC,IAAI;wBAClB,KAAK,EAAE,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG;wBACjC,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,OAAO,CAAC,UAAU;wBACjD,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,OAAO,CAAC,SAAS;qBAC/C;oBACD,IAAI,EAAE,OAAO;iBACd,CAAC;YACJ,CAAC;YAED,OAAO;gBACL,IAAI,EAAE;oBACJ,EAAE,EAAE,OAAO,CAAC,EAAE;oBACd,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,IAAI;oBAC5B,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK;oBAC9B,IAAI,EAAE,OAAO,CAAC,IAAI;oBAClB,KAAK,EAAE,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG;oBACjC,SAAS,EAAE,OAAO,CAAC,UAAU;oBAC7B,QAAQ,EAAE,OAAO,CAAC,SAAS;iBAC5B;gBACD,IAAI,EAAE,OAAO;aACd,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,kBAAkB,CAAC,YAAY;YACnC,0EAA0E;YAC1E,8DAA8D;YAC9D,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,kBAAkB,CAAC,CAAC;YACxC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,EAAE,mBAAmB,CAAC,CAAC;YACxD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;YACpD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;YAC5D,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,mBAAmB,EAAE,YAAY,CAAC,CAAC;YAExD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;YAE7C,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;YACvD,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAyB,CAAC;YAE1D,OAAO;gBACL,WAAW,EAAE,IAAI,CAAC,YAAY;gBAC9B,SAAS,EAAE,QAAQ;gBACnB,oBAAoB,EAAE,IAAI,CAAC,UAAU;oBACnC,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;oBAC/C,CAAC,CAAC,SAAS;gBACb,GAAG,EAAE,IAAI;aACV,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,eAAe,QAAQ,CAAC"}

package/dist/auth/providers/github.d.ts

@@ -0,0 +1,29 @@
+/**
+ * GitHub OAuth Provider
+ */
+import type { OAuthProvider, ProviderOptions } from "../types.js";
+export interface GitHubProfile {
+    id: number;
+    login: string;
+    name?: string;
+    email?: string;
+    avatar_url?: string;
+    bio?: string;
+    company?: string;
+    location?: string;
+}
+export interface GitHubEmail {
+    email: string;
+    primary: boolean;
+    verified: boolean;
+    visibility: string | null;
+}
+export interface GitHubOptions extends ProviderOptions<GitHubProfile> {
+    /**
+     * Allow signup during OAuth flow
+     */
+    allowSignup?: boolean;
+}
+export declare function github(options: GitHubOptions): OAuthProvider<GitHubProfile, GitHubOptions>;
+export default github;
+//# sourceMappingURL=github.d.ts.map

package/dist/auth/providers/github.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"github.d.ts","sourceRoot":"","sources":["../../../baasix/auth/providers/github.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAgB,eAAe,EAAE,MAAM,aAAa,CAAC;AAMhF,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,OAAO,CAAC;IAClB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,aAAc,SAAQ,eAAe,CAAC,aAAa,CAAC;IACnE;;OAEG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAOD,wBAAgB,MAAM,CAAC,OAAO,EAAE,aAAa,GAAG,aAAa,CAAC,aAAa,EAAE,aAAa,CAAC,CAuJ1F;AAED,eAAe,MAAM,CAAC"}

package/dist/auth/providers/github.js

@@ -0,0 +1,144 @@
+/**
+ * GitHub OAuth Provider
+ */
+import { createAuthorizationURL, parseOAuth2Tokens, } from "../oauth2/utils.js";
+const GITHUB_AUTH_URL = "https://github.com/login/oauth/authorize";
+const GITHUB_TOKEN_URL = "https://github.com/login/oauth/access_token";
+const GITHUB_USER_URL = "https://api.github.com/user";
+const GITHUB_EMAILS_URL = "https://api.github.com/user/emails";
+export function github(options) {
+    const defaultScopes = ["read:user", "user:email"];
+    return {
+        id: "github",
+        name: "GitHub",
+        options,
+        async createAuthorizationURL({ state, scopes, redirectURI }) {
+            const allScopes = options.disableDefaultScope
+                ? [...(options.scope || []), ...(scopes || [])]
+                : [...defaultScopes, ...(options.scope || []), ...(scopes || [])];
+            return createAuthorizationURL({
+                authorizationEndpoint: GITHUB_AUTH_URL,
+                clientId: options.clientId,
+                redirectURI: options.redirectURI || redirectURI,
+                state,
+                scopes: [...new Set(allScopes)],
+                additionalParams: {
+                    ...(options.allowSignup !== undefined && { allow_signup: String(options.allowSignup) }),
+                },
+            });
+        },
+        async validateAuthorizationCode({ code, redirectURI }) {
+            const body = new URLSearchParams({
+                grant_type: "authorization_code",
+                code,
+                client_id: options.clientId,
+                client_secret: options.clientSecret,
+                redirect_uri: options.redirectURI || redirectURI,
+            });
+            const response = await fetch(GITHUB_TOKEN_URL, {
+                method: "POST",
+                headers: {
+                    "Content-Type": "application/x-www-form-urlencoded",
+                    Accept: "application/json",
+                },
+                body: body.toString(),
+            });
+            if (!response.ok) {
+                const error = await response.text();
+                throw new Error(`GitHub token exchange failed: ${response.status} ${error}`);
+            }
+            const data = await response.json();
+            if (data.error) {
+                throw new Error(`GitHub OAuth error: ${data.error_description || data.error}`);
+            }
+            const tokens = parseOAuth2Tokens(data);
+            return {
+                ...tokens,
+                accessToken: data.access_token,
+                tokenType: data.token_type || "Bearer",
+                scopes: data.scope?.split(","),
+                raw: data,
+            };
+        },
+        async getUserInfo(tokens) {
+            if (!tokens.accessToken) {
+                return null;
+            }
+            const [userResponse, emailsResponse] = await Promise.all([
+                fetch(GITHUB_USER_URL, {
+                    headers: {
+                        Authorization: `Bearer ${tokens.accessToken}`,
+                        Accept: "application/vnd.github.v3+json",
+                    },
+                }),
+                fetch(GITHUB_EMAILS_URL, {
+                    headers: {
+                        Authorization: `Bearer ${tokens.accessToken}`,
+                        Accept: "application/vnd.github.v3+json",
+                    },
+                }),
+            ]);
+            if (!userResponse.ok) {
+                console.error("Failed to fetch GitHub user info:", await userResponse.text());
+                return null;
+            }
+            const profile = await userResponse.json();
+            // Get verified primary email
+            let email = profile.email;
+            let emailVerified = false;
+            if (emailsResponse.ok) {
+                const emails = await emailsResponse.json();
+                const primaryEmail = emails.find((e) => e.primary && e.verified);
+                if (primaryEmail) {
+                    email = primaryEmail.email;
+                    emailVerified = primaryEmail.verified;
+                }
+                else {
+                    const verifiedEmail = emails.find((e) => e.verified);
+                    if (verifiedEmail) {
+                        email = verifiedEmail.email;
+                        emailVerified = verifiedEmail.verified;
+                    }
+                }
+            }
+            // Parse name into first/last name
+            let firstName;
+            let lastName;
+            if (profile.name) {
+                const nameParts = profile.name.split(" ");
+                firstName = nameParts[0];
+                lastName = nameParts.length > 1 ? nameParts.slice(1).join(" ") : undefined;
+            }
+            // Apply custom mapping if provided
+            if (options.mapProfileToUser) {
+                const mapped = await options.mapProfileToUser(profile);
+                return {
+                    user: {
+                        id: profile.id.toString(),
+                        email: mapped.email || email || null,
+                        emailVerified: emailVerified,
+                        name: profile.name || profile.login,
+                        image: profile.avatar_url,
+                        firstName: mapped.firstName || firstName,
+                        lastName: mapped.lastName || lastName,
+                    },
+                    data: profile,
+                };
+            }
+            return {
+                user: {
+                    id: profile.id.toString(),
+                    email: email || null,
+                    emailVerified: emailVerified,
+                    name: profile.name || profile.login,
+                    image: profile.avatar_url,
+                    firstName,
+                    lastName,
+                },
+                data: profile,
+            };
+        },
+    };
+}
+export default github;
+//# sourceMappingURL=github.js.map

package/dist/auth/providers/github.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"github.js","sourceRoot":"","sources":["../../../baasix/auth/providers/github.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,EACL,sBAAsB,EACtB,iBAAiB,GAClB,MAAM,oBAAoB,CAAC;AA2B5B,MAAM,eAAe,GAAG,0CAA0C,CAAC;AACnE,MAAM,gBAAgB,GAAG,6CAA6C,CAAC;AACvE,MAAM,eAAe,GAAG,6BAA6B,CAAC;AACtD,MAAM,iBAAiB,GAAG,oCAAoC,CAAC;AAE/D,MAAM,UAAU,MAAM,CAAC,OAAsB;IAC3C,MAAM,aAAa,GAAG,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;IAElD,OAAO;QACL,EAAE,EAAE,QAAQ;QACZ,IAAI,EAAE,QAAQ;QACd,OAAO;QAEP,KAAK,CAAC,sBAAsB,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE;YACzD,MAAM,SAAS,GAAG,OAAO,CAAC,mBAAmB;gBAC3C,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;gBAC/C,CAAC,CAAC,CAAC,GAAG,aAAa,EAAE,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC;YAEpE,OAAO,sBAAsB,CAAC;gBAC5B,qBAAqB,EAAE,eAAe;gBACtC,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,WAAW;gBAC/C,KAAK;gBACL,MAAM,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;gBAC/B,gBAAgB,EAAE;oBAChB,GAAG,CAAC,OAAO,CAAC,WAAW,KAAK,SAAS,IAAI,EAAE,YAAY,EAAE,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;iBACxF;aACF,CAAC,CAAC;QACL,CAAC;QAED,KAAK,CAAC,yBAAyB,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE;YACnD,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;gBAC/B,UAAU,EAAE,oBAAoB;gBAChC,IAAI;gBACJ,SAAS,EAAE,OAAO,CAAC,QAAQ;gBAC3B,aAAa,EAAE,OAAO,CAAC,YAAY;gBACnC,YAAY,EAAE,OAAO,CAAC,WAAW,IAAI,WAAW;aACjD,CAAC,CAAC;YAEH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,gBAAgB,EAAE;gBAC7C,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,mCAAmC;oBACnD,MAAM,EAAE,kBAAkB;iBAC3B;gBACD,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;aACtB,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACpC,MAAM,IAAI,KAAK,CAAC,iCAAiC,QAAQ,CAAC,MAAM,IAAI,KAAK,EAAE,CAAC,CAAC;YAC/E,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAyB,CAAC;YAE1D,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,KAAK,CAAC,uBAAuB,IAAI,CAAC,iBAAiB,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;YACjF,CAAC;YAED,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;YAEvC,OAAO;gBACL,GAAG,MAAM;gBACT,WAAW,EAAE,IAAI,CAAC,YAAY;gBAC9B,SAAS,EAAE,IAAI,CAAC,UAAU,IAAI,QAAQ;gBACtC,MAAM,EAAE,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC;gBAC9B,GAAG,EAAE,IAAI;aACM,CAAC;QACpB,CAAC;QAED,KAAK,CAAC,WAAW,CAAC,MAAM;YACtB,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;gBACxB,OAAO,IAAI,CAAC;YACd,CAAC;YAED,MAAM,CAAC,YAAY,EAAE,cAAc,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;gBACvD,KAAK,CAAC,eAAe,EAAE;oBACrB,OAAO,EAAE;wBACP,aAAa,EAAE,UAAU,MAAM,CAAC,WAAW,EAAE;wBAC7C,MAAM,EAAE,gCAAgC;qBACzC;iBACF,CAAC;gBACF,KAAK,CAAC,iBAAiB,EAAE;oBACvB,OAAO,EAAE;wBACP,aAAa,EAAE,UAAU,MAAM,CAAC,WAAW,EAAE;wBAC7C,MAAM,EAAE,gCAAgC;qBACzC;iBACF,CAAC;aACH,CAAC,CAAC;YAEH,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC;gBACrB,OAAO,CAAC,KAAK,CAAC,mCAAmC,EAAE,MAAM,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC;gBAC9E,OAAO,IAAI,CAAC;YACd,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,IAAI,EAAmB,CAAC;YAE3D,6BAA6B;YAC7B,IAAI,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;YAC1B,IAAI,aAAa,GAAG,KAAK,CAAC;YAE1B,IAAI,cAAc,CAAC,EAAE,EAAE,CAAC;gBACtB,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,IAAI,EAAmB,CAAC;gBAC5D,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC;gBACjE,IAAI,YAAY,EAAE,CAAC;oBACjB,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC;oBAC3B,aAAa,GAAG,YAAY,CAAC,QAAQ,CAAC;gBACxC,CAAC;qBAAM,CAAC;oBACN,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;oBACrD,IAAI,aAAa,EAAE,CAAC;wBAClB,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC;wBAC5B,aAAa,GAAG,aAAa,CAAC,QAAQ,CAAC;oBACzC,CAAC;gBACH,CAAC;YACH,CAAC;YAED,kCAAkC;YAClC,IAAI,SAA6B,CAAC;YAClC,IAAI,QAA4B,CAAC;YACjC,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;gBACjB,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBAC1C,SAAS,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;gBACzB,QAAQ,GAAG,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC7E,CAAC;YAED,mCAAmC;YACnC,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC;gBAC7B,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;gBACvD,OAAO;oBACL,IAAI,EAAE;wBACJ,EAAE,EAAE,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE;wBACzB,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,KAAK,IAAI,IAAI;wBACpC,aAAa,EAAE,aAAa;wBAC5B,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,KAAK;wBACnC,KAAK,EAAE,OAAO,CAAC,UAAU;wBACzB,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,SAAS;wBACxC,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,QAAQ;qBACtC;oBACD,IAAI,EAAE,OAAO;iBACd,CAAC;YACJ,CAAC;YAED,OAAO;gBACL,IAAI,EAAE;oBACJ,EAAE,EAAE,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE;oBACzB,KAAK,EAAE,KAAK,IAAI,IAAI;oBACpB,aAAa,EAAE,aAAa;oBAC5B,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,KAAK;oBACnC,KAAK,EAAE,OAAO,CAAC,UAAU;oBACzB,SAAS;oBACT,QAAQ;iBACT;gBACD,IAAI,EAAE,OAAO;aACd,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,eAAe,MAAM,CAAC"}

package/dist/auth/providers/google.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Google OAuth Provider
+ */
+import type { OAuthProvider, ProviderOptions } from "../types.js";
+export interface GoogleProfile {
+    sub: string;
+    name: string;
+    given_name: string;
+    family_name?: string;
+    picture?: string;
+    email: string;
+    email_verified: boolean;
+    locale?: string;
+    hd?: string;
+}
+export interface GoogleOptions extends ProviderOptions<GoogleProfile> {
+    /**
+     * Access type for offline access
+     */
+    accessType?: "offline" | "online";
+    /**
+     * Display mode for the consent screen
+     */
+    display?: "page" | "popup" | "touch" | "wap";
+    /**
+     * Hosted domain restriction
+     */
+    hd?: string;
+}
+export declare function google(options: GoogleOptions): OAuthProvider<GoogleProfile, GoogleOptions>;
+export default google;
+//# sourceMappingURL=google.d.ts.map

package/dist/auth/providers/google.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"google.d.ts","sourceRoot":"","sources":["../../../baasix/auth/providers/google.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAgB,eAAe,EAAE,MAAM,aAAa,CAAC;AAQhF,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,OAAO,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,EAAE,CAAC,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,aAAc,SAAQ,eAAe,CAAC,aAAa,CAAC;IACnE;;OAEG;IACH,UAAU,CAAC,EAAE,SAAS,GAAG,QAAQ,CAAC;IAClC;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,OAAO,GAAG,KAAK,CAAC;IAC7C;;OAEG;IACH,EAAE,CAAC,EAAE,MAAM,CAAC;CACb;AAMD,wBAAgB,MAAM,CAAC,OAAO,EAAE,aAAa,GAAG,aAAa,CAAC,aAAa,EAAE,aAAa,CAAC,CA2J1F;AAED,eAAe,MAAM,CAAC"}