@baseplate-dev/plugin-auth 0.1.1

package/dist/auth0/core/schema/plugin-definition.d.ts

@@ -0,0 +1,73 @@
+import { z } from 'zod';
+export declare const auth0PluginDefinitionSchema: z.ZodObject<{
+    modelRefs: z.ZodObject<{
+        user: import("@baseplate-dev/project-builder-lib").ZodRef<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        user: string;
+    }, {
+        user: string;
+    }>;
+    authFeatureRef: import("@baseplate-dev/project-builder-lib").ZodRef<z.ZodString>;
+    roles: z.ZodEffects<z.ZodEffects<z.ZodArray<import("@baseplate-dev/project-builder-lib").ZodRef<z.ZodObject<{
+        name: z.ZodString;
+        comment: z.ZodString;
+        builtIn: z.ZodDefault<z.ZodBoolean>;
+    } & {
+        id: z.ZodType<string, z.ZodAnyDef, string>;
+    }, "strip", z.ZodTypeAny, {
+        id: string;
+        name: string;
+        comment: string;
+        builtIn: boolean;
+    }, {
+        id: string;
+        name: string;
+        comment: string;
+        builtIn?: boolean | undefined;
+    }>>, "many">, {
+        id: string;
+        name: string;
+        comment: string;
+        builtIn: boolean;
+    }[], {
+        id: string;
+        name: string;
+        comment: string;
+        builtIn?: boolean | undefined;
+    }[]>, {
+        id: string;
+        name: string;
+        comment: string;
+        builtIn: boolean;
+    }[], {
+        id: string;
+        name: string;
+        comment: string;
+        builtIn?: boolean | undefined;
+    }[]>;
+}, "strip", z.ZodTypeAny, {
+    modelRefs: {
+        user: string;
+    };
+    authFeatureRef: string;
+    roles: {
+        id: string;
+        name: string;
+        comment: string;
+        builtIn: boolean;
+    }[];
+}, {
+    modelRefs: {
+        user: string;
+    };
+    authFeatureRef: string;
+    roles: {
+        id: string;
+        name: string;
+        comment: string;
+        builtIn?: boolean | undefined;
+    }[];
+}>;
+export type Auth0PluginDefinition = z.infer<typeof auth0PluginDefinitionSchema>;
+export type Auth0PluginDefinitionInput = z.input<typeof auth0PluginDefinitionSchema>;
+//# sourceMappingURL=plugin-definition.d.ts.map

package/dist/auth0/core/schema/plugin-definition.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-definition.d.ts","sourceRoot":"","sources":["../../../../src/auth0/core/schema/plugin-definition.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;YAmBspc,EAAG,OAAO,SAAQ,EAAG,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAP1tc,CAAC;AAEH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEhF,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAC9C,OAAO,2BAA2B,CACnC,CAAC"}

package/dist/auth0/core/schema/plugin-definition.js

@@ -0,0 +1,17 @@
+import { featureEntityType, modelEntityType, zRef, } from '@baseplate-dev/project-builder-lib';
+import { z } from 'zod';
+import { authRolesSchema } from '#src/roles/index.js';
+export const auth0PluginDefinitionSchema = z.object({
+    modelRefs: z.object({
+        user: zRef(z.string().min(1), {
+            type: modelEntityType,
+            onDelete: 'RESTRICT',
+        }),
+    }),
+    authFeatureRef: zRef(z.string().min(1), {
+        type: featureEntityType,
+        onDelete: 'RESTRICT',
+    }),
+    roles: authRolesSchema,
+});
+//# sourceMappingURL=plugin-definition.js.map

package/dist/auth0/core/schema/plugin-definition.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-definition.js","sourceRoot":"","sources":["../../../../src/auth0/core/schema/plugin-definition.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iBAAiB,EACjB,eAAe,EACf,IAAI,GACL,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAEtD,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC;QAClB,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;YAC5B,IAAI,EAAE,eAAe;YACrB,QAAQ,EAAE,UAAU;SACrB,CAAC;KACH,CAAC;IACF,cAAc,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;QACtC,IAAI,EAAE,iBAAiB;QACvB,QAAQ,EAAE,UAAU;KACrB,CAAC;IACF,KAAK,EAAE,eAAe;CACvB,CAAC,CAAC"}

package/dist/auth0/core/web.d.ts

@@ -0,0 +1,6 @@
+import '../../styles.css';
+declare const _default: import("@baseplate-dev/project-builder-lib").PluginPlatformModule<{
+    webConfig: import("@baseplate-dev/project-builder-lib").PluginSpecWithInitializer<import("@baseplate-dev/project-builder-lib").WebConfigSpec>;
+}, {}>;
+export default _default;
+//# sourceMappingURL=web.d.ts.map

package/dist/auth0/core/web.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"web.d.ts","sourceRoot":"","sources":["../../../src/auth0/core/web.ts"],"names":[],"mappings":"AAOA,OAAO,kBAAkB,CAAC;;;;AAE1B,wBASG"}

package/dist/auth0/core/web.js

@@ -0,0 +1,14 @@
+import { createPlatformPluginExport, webConfigSpec, } from '@baseplate-dev/project-builder-lib';
+import { AuthDefinitionEditor } from './components/auth-definition-editor.js';
+import '../../styles.css';
+export default createPlatformPluginExport({
+    dependencies: {
+        webConfig: webConfigSpec,
+    },
+    exports: {},
+    initialize: ({ webConfig }, { pluginId }) => {
+        webConfig.registerWebConfigComponent(pluginId, AuthDefinitionEditor);
+        return {};
+    },
+});
+//# sourceMappingURL=web.js.map

package/dist/auth0/core/web.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"web.js","sourceRoot":"","sources":["../../../src/auth0/core/web.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,0BAA0B,EAC1B,aAAa,GACd,MAAM,oCAAoC,CAAC;AAE5C,OAAO,EAAE,oBAAoB,EAAE,MAAM,wCAAwC,CAAC;AAE9E,OAAO,kBAAkB,CAAC;AAE1B,eAAe,0BAA0B,CAAC;IACxC,YAAY,EAAE;QACZ,SAAS,EAAE,aAAa;KACzB;IACD,OAAO,EAAE,EAAE;IACX,UAAU,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE;QAC1C,SAAS,CAAC,0BAA0B,CAAC,QAAQ,EAAE,oBAAoB,CAAC,CAAC;QACrE,OAAO,EAAE,CAAC;IACZ,CAAC;CACF,CAAC,CAAC"}

package/dist/auth0/generators/fastify/auth0-module/auth0-module.generator.d.ts

@@ -0,0 +1,67 @@
+export declare const auth0ModuleGenerator: import("@baseplate-dev/sync").GeneratorBundleCreator<{
+    userModelName: string;
+    includeManagement?: boolean | undefined;
+}, {
+    nodeManagementPackage: import("@baseplate-dev/sync").AnyGeneratorTask | undefined;
+    config: import("@baseplate-dev/sync").GeneratorTask<undefined, {
+        provider: import("@baseplate-dev/sync").ProviderType<Omit<import("@baseplate-dev/utils").FieldMap<{
+            configFields: import("@baseplate-dev/utils").MapContainer<string, import("@baseplate-dev/fastify-generators").ConfigServiceField>;
+        }>, "getValues">>;
+    }, undefined>;
+    main: import("@baseplate-dev/sync").GeneratorTask<{
+        userSessionServiceImports: import("@baseplate-dev/sync").ProviderExport<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
+            userSessionService: {};
+        }>>;
+    }, {
+        typescriptFile: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").TypescriptFileProvider>;
+        authRolesImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
+            AuthRole: {
+                isTypeOnly: true;
+            };
+            DEFAULT_PUBLIC_ROLES: {};
+            DEFAULT_USER_ROLES: {};
+            RoleConfig: {
+                isTypeOnly: true;
+            };
+        }>>;
+        appModule: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/fastify-generators").AppModuleProvider>;
+        configServiceImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
+            config: {};
+        }>>;
+        prismaOutput: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/fastify-generators").PrismaOutputProvider>;
+        userSessionTypesImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
+            UserSessionPayload: {
+                isTypeOnly: true;
+            };
+            UserSessionService: {
+                isTypeOnly: true;
+            };
+        }>>;
+        authContextImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
+            AuthContext: {
+                isTypeOnly: true;
+            };
+            AuthSessionInfo: {
+                isTypeOnly: true;
+            };
+            AuthUserSessionInfo: {
+                isTypeOnly: true;
+            };
+            createAuthContextFromSessionInfo: {};
+            InvalidSessionError: {};
+        }>>;
+    }, any>;
+    nodePackages: import("@baseplate-dev/sync").AnyGeneratorTask;
+    fastifyAuth0Plugin: import("@baseplate-dev/sync").GeneratorTask<any, {
+        fastifyServerConfig: import("@baseplate-dev/sync").ProviderType<Omit<import("@baseplate-dev/utils").FieldMap<{
+            errorHandlerFunction: import("@baseplate-dev/utils").ScalarContainer<import("@baseplate-dev/core-generators").TsCodeFragment | undefined>;
+            initializerFragments: import("@baseplate-dev/utils").MapContainer<string, import("@baseplate-dev/core-generators").TsCodeFragment>;
+            plugins: import("@baseplate-dev/utils").MapContainer<string, import("@baseplate-dev/fastify-generators").FastifyServerPlugin>;
+            prePluginFragments: import("@baseplate-dev/utils").MapContainer<string, import("@baseplate-dev/core-generators").TsCodeFragment>;
+        }>, "getValues">>;
+        configServiceImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
+            config: {};
+        }>>;
+    }, any>;
+}>;
+//# sourceMappingURL=auth0-module.generator.d.ts.map

package/dist/auth0/generators/fastify/auth0-module/auth0-module.generator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth0-module.generator.d.ts","sourceRoot":"","sources":["../../../../../src/auth0/generators/fastify/auth0-module/auth0-module.generator.ts"],"names":[],"mappings":"AAoCA,eAAO,MAAM,oBAAoB;;;;;;;iCAPM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yCAZ9C,sBACb;yCAMC,sBACH;4BAGgD,sBAAsB;uCAIhD,sBACd;;;;;;EAgJN,CAAC"}

package/dist/auth0/generators/fastify/auth0-module/auth0-module.generator.js

@@ -0,0 +1,125 @@
+import { createNodePackagesTask, extractPackageVersions, projectScope, tsCodeFragment, tsImportBuilder, typescriptFileProvider, } from '@baseplate-dev/core-generators';
+import { appModuleProvider, authContextImportsProvider, authRolesImportsProvider, configServiceImportsProvider, configServiceProvider, fastifyServerConfigProvider, prismaOutputProvider, userSessionServiceImportsProvider, userSessionTypesImportsProvider, } from '@baseplate-dev/fastify-generators';
+import { createGenerator, createGeneratorTask, createProviderTask, } from '@baseplate-dev/sync';
+import { z } from 'zod';
+import { AUTH0_PACKAGES } from '#src/auth0/constants/packages.js';
+import { createAuth0ModuleImports } from './generated/ts-import-maps.js';
+import { AUTH_0_AUTH_0_MODULE_TS_TEMPLATES } from './generated/ts-templates.js';
+const descriptorSchema = z.object({
+    userModelName: z.string().min(1),
+    includeManagement: z.boolean().optional(),
+});
+export const auth0ModuleGenerator = createGenerator({
+    name: 'auth0/auth0-module',
+    generatorFileUrl: import.meta.url,
+    descriptorSchema,
+    buildTasks: ({ includeManagement, userModelName }) => ({
+        nodeManagementPackage: includeManagement
+            ? createNodePackagesTask({
+                prod: extractPackageVersions(AUTH0_PACKAGES, ['auth0']),
+            })
+            : undefined,
+        config: createProviderTask(configServiceProvider, (configService) => {
+            configService.configFields.set('AUTH0_DOMAIN', {
+                validator: tsCodeFragment('z.string().min(1)'),
+                comment: 'Auth0 domain (can be custom domain)',
+                seedValue: 'subdomain.auth0.com',
+                exampleValue: '<AUTH0_DOMAIN>',
+            });
+            configService.configFields.set('AUTH0_AUDIENCE', {
+                validator: tsCodeFragment('z.string().min(1)'),
+                comment: 'Auth0 audience',
+                seedValue: 'https://api.example.com',
+                exampleValue: '<AUTH0_AUDIENCE>',
+            });
+            if (includeManagement) {
+                configService.configFields.set('AUTH0_TENANT_DOMAIN', {
+                    validator: tsCodeFragment('z.string().min(1)'),
+                    comment: 'Auth0 tenant domain (ends with auth0.com), e.g. domain.auth0.com',
+                    seedValue: 'domain.auth0.com',
+                    exampleValue: '<AUTH0_TENANT_DOMAIN>',
+                });
+                configService.configFields.set('AUTH0_CLIENT_ID', {
+                    validator: tsCodeFragment('z.string().min(1)'),
+                    comment: 'Auth0 management client ID (https://auth0.com/docs/get-started/auth0-overview/create-applications/machine-to-machine-apps)',
+                    seedValue: 'CLIENT_ID',
+                    exampleValue: '<AUTH0_CLIENT_ID>',
+                });
+                configService.configFields.set('AUTH0_CLIENT_SECRET', {
+                    validator: tsCodeFragment('z.string().min(1)'),
+                    comment: 'Auth0 management client secret',
+                    seedValue: 'CLIENT_SECRET',
+                    exampleValue: '<AUTH0_CLIENT_SECRET>',
+                });
+            }
+        }),
+        main: createGeneratorTask({
+            dependencies: {
+                typescriptFile: typescriptFileProvider,
+                authRolesImports: authRolesImportsProvider,
+                appModule: appModuleProvider,
+                configServiceImports: configServiceImportsProvider,
+                prismaOutput: prismaOutputProvider,
+                userSessionTypesImports: userSessionTypesImportsProvider,
+                authContextImports: authContextImportsProvider,
+            },
+            exports: {
+                userSessionServiceImports: userSessionServiceImportsProvider.export(projectScope),
+            },
+            run({ typescriptFile, authRolesImports, prismaOutput, configServiceImports, appModule, userSessionTypesImports, authContextImports, }) {
+                const userSessionServicePath = `${appModule.getModuleFolder()}/services/user-session.service.ts`;
+                const managementPath = `${appModule.getModuleFolder()}/services/management.ts`;
+                return {
+                    providers: {
+                        auth0Module: {},
+                        userSessionServiceImports: createAuth0ModuleImports(`${appModule.getModuleFolder()}/services`),
+                    },
+                    build: async (builder) => {
+                        await builder.apply(typescriptFile.renderTemplateFile({
+                            template: AUTH_0_AUTH_0_MODULE_TS_TEMPLATES.userSessionService,
+                            destination: userSessionServicePath,
+                            variables: {
+                                TPL_USER_MODEL: prismaOutput.getPrismaModelFragment(userModelName),
+                            },
+                            importMapProviders: {
+                                authContextImports,
+                                authRolesImports,
+                                userSessionTypesImports,
+                            },
+                        }));
+                        if (includeManagement) {
+                            await builder.apply(typescriptFile.renderTemplateFile({
+                                template: AUTH_0_AUTH_0_MODULE_TS_TEMPLATES.management,
+                                destination: managementPath,
+                                importMapProviders: {
+                                    configServiceImports,
+                                },
+                            }));
+                        }
+                    },
+                };
+            },
+        }),
+        nodePackages: createNodePackagesTask({
+            prod: extractPackageVersions(AUTH0_PACKAGES, ['fastify-auth0-verify']),
+        }),
+        fastifyAuth0Plugin: createGeneratorTask({
+            dependencies: {
+                fastifyServerConfig: fastifyServerConfigProvider,
+                configServiceImports: configServiceImportsProvider,
+            },
+            run({ fastifyServerConfig, configServiceImports }) {
+                fastifyServerConfig.plugins.set('fastifyAuth0Verify', {
+                    plugin: tsCodeFragment('fastifyAuth0Verify', tsImportBuilder()
+                        .default('fastifyAuth0Verify')
+                        .from('fastify-auth0-verify')),
+                    options: tsCodeFragment(`{
+    domain: config.AUTH0_DOMAIN,
+    audience: config.AUTH0_AUDIENCE,
+  }`, configServiceImports.config.declaration()),
+                });
+            },
+        }),
+    }),
+});
+//# sourceMappingURL=auth0-module.generator.js.map

package/dist/auth0/generators/fastify/auth0-module/auth0-module.generator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth0-module.generator.js","sourceRoot":"","sources":["../../../../../src/auth0/generators/fastify/auth0-module/auth0-module.generator.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,sBAAsB,EACtB,sBAAsB,EACtB,YAAY,EACZ,cAAc,EACd,eAAe,EACf,sBAAsB,GACvB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,iBAAiB,EACjB,0BAA0B,EAC1B,wBAAwB,EACxB,4BAA4B,EAC5B,qBAAqB,EACrB,2BAA2B,EAC3B,oBAAoB,EACpB,iCAAiC,EACjC,+BAA+B,GAChC,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,kBAAkB,GACnB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAElE,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AACzE,OAAO,EAAE,iCAAiC,EAAE,MAAM,6BAA6B,CAAC;AAEhF,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAChC,iBAAiB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAC1C,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,oBAAoB,GAAG,eAAe,CAAC;IAClD,IAAI,EAAE,oBAAoB;IAC1B,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG;IACjC,gBAAgB;IAChB,UAAU,EAAE,CAAC,EAAE,iBAAiB,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC,CAAC;QACrD,qBAAqB,EAAE,iBAAiB;YACtC,CAAC,CAAC,sBAAsB,CAAC;gBACrB,IAAI,EAAE,sBAAsB,CAAC,cAAc,EAAE,CAAC,OAAO,CAAC,CAAC;aACxD,CAAC;YACJ,CAAC,CAAC,SAAS;QACb,MAAM,EAAE,kBAAkB,CAAC,qBAAqB,EAAE,CAAC,aAAa,EAAE,EAAE;YAClE,aAAa,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE;gBAC7C,SAAS,EAAE,cAAc,CAAC,mBAAmB,CAAC;gBAC9C,OAAO,EAAE,qCAAqC;gBAC9C,SAAS,EAAE,qBAAqB;gBAChC,YAAY,EAAE,gBAAgB;aAC/B,CAAC,CAAC;YAEH,aAAa,CAAC,YAAY,CAAC,GAAG,CAAC,gBAAgB,EAAE;gBAC/C,SAAS,EAAE,cAAc,CAAC,mBAAmB,CAAC;gBAC9C,OAAO,EAAE,gBAAgB;gBACzB,SAAS,EAAE,yBAAyB;gBACpC,YAAY,EAAE,kBAAkB;aACjC,CAAC,CAAC;YAEH,IAAI,iBAAiB,EAAE,CAAC;gBACtB,aAAa,CAAC,YAAY,CAAC,GAAG,CAAC,qBAAqB,EAAE;oBACpD,SAAS,EAAE,cAAc,CAAC,mBAAmB,CAAC;oBAC9C,OAAO,EACL,kEAAkE;oBACpE,SAAS,EAAE,kBAAkB;oBAC7B,YAAY,EAAE,uBAAuB;iBACtC,CAAC,CAAC;gBAEH,aAAa,CAAC,YAAY,CAAC,GAAG,CAAC,iBAAiB,EAAE;oBAChD,SAAS,EAAE,cAAc,CAAC,mBAAmB,CAAC;oBAC9C,OAAO,EACL,4HAA4H;oBAC9H,SAAS,EAAE,WAAW;oBACtB,YAAY,EAAE,mBAAmB;iBAClC,CAAC,CAAC;gBAEH,aAAa,CAAC,YAAY,CAAC,GAAG,CAAC,qBAAqB,EAAE;oBACpD,SAAS,EAAE,cAAc,CAAC,mBAAmB,CAAC;oBAC9C,OAAO,EAAE,gCAAgC;oBACzC,SAAS,EAAE,eAAe;oBAC1B,YAAY,EAAE,uBAAuB;iBACtC,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC;QACF,IAAI,EAAE,mBAAmB,CAAC;YACxB,YAAY,EAAE;gBACZ,cAAc,EAAE,sBAAsB;gBACtC,gBAAgB,EAAE,wBAAwB;gBAC1C,SAAS,EAAE,iBAAiB;gBAC5B,oBAAoB,EAAE,4BAA4B;gBAClD,YAAY,EAAE,oBAAoB;gBAClC,uBAAuB,EAAE,+BAA+B;gBACxD,kBAAkB,EAAE,0BAA0B;aAC/C;YACD,OAAO,EAAE;gBACP,yBAAyB,EACvB,iCAAiC,CAAC,MAAM,CAAC,YAAY,CAAC;aACzD;YACD,GAAG,CAAC,EACF,cAAc,EACd,gBAAgB,EAChB,YAAY,EACZ,oBAAoB,EACpB,SAAS,EACT,uBAAuB,EACvB,kBAAkB,GACnB;gBACC,MAAM,sBAAsB,GAAG,GAAG,SAAS,CAAC,eAAe,EAAE,mCAAmC,CAAC;gBACjG,MAAM,cAAc,GAAG,GAAG,SAAS,CAAC,eAAe,EAAE,yBAAyB,CAAC;gBAC/E,OAAO;oBACL,SAAS,EAAE;wBACT,WAAW,EAAE,EAAE;wBACf,yBAAyB,EAAE,wBAAwB,CACjD,GAAG,SAAS,CAAC,eAAe,EAAE,WAAW,CAC1C;qBACF;oBACD,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;wBACvB,MAAM,OAAO,CAAC,KAAK,CACjB,cAAc,CAAC,kBAAkB,CAAC;4BAChC,QAAQ,EAAE,iCAAiC,CAAC,kBAAkB;4BAC9D,WAAW,EAAE,sBAAsB;4BACnC,SAAS,EAAE;gCACT,cAAc,EACZ,YAAY,CAAC,sBAAsB,CAAC,aAAa,CAAC;6BACrD;4BACD,kBAAkB,EAAE;gCAClB,kBAAkB;gCAClB,gBAAgB;gCAChB,uBAAuB;6BACxB;yBACF,CAAC,CACH,CAAC;wBAEF,IAAI,iBAAiB,EAAE,CAAC;4BACtB,MAAM,OAAO,CAAC,KAAK,CACjB,cAAc,CAAC,kBAAkB,CAAC;gCAChC,QAAQ,EAAE,iCAAiC,CAAC,UAAU;gCACtD,WAAW,EAAE,cAAc;gCAC3B,kBAAkB,EAAE;oCAClB,oBAAoB;iCACrB;6BACF,CAAC,CACH,CAAC;wBACJ,CAAC;oBACH,CAAC;iBACF,CAAC;YACJ,CAAC;SACF,CAAC;QACF,YAAY,EAAE,sBAAsB,CAAC;YACnC,IAAI,EAAE,sBAAsB,CAAC,cAAc,EAAE,CAAC,sBAAsB,CAAC,CAAC;SACvE,CAAC;QACF,kBAAkB,EAAE,mBAAmB,CAAC;YACtC,YAAY,EAAE;gBACZ,mBAAmB,EAAE,2BAA2B;gBAChD,oBAAoB,EAAE,4BAA4B;aACnD;YACD,GAAG,CAAC,EAAE,mBAAmB,EAAE,oBAAoB,EAAE;gBAC/C,mBAAmB,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE;oBACpD,MAAM,EAAE,cAAc,CACpB,oBAAoB,EACpB,eAAe,EAAE;yBACd,OAAO,CAAC,oBAAoB,CAAC;yBAC7B,IAAI,CAAC,sBAAsB,CAAC,CAChC;oBACD,OAAO,EAAE,cAAc,CACrB;;;IAGR,EACQ,oBAAoB,CAAC,MAAM,CAAC,WAAW,EAAE,CAC1C;iBACF,CAAC,CAAC;YACL,CAAC;SACF,CAAC;KACH,CAAC;CACH,CAAC,CAAC"}

package/dist/auth0/generators/fastify/auth0-module/generated/ts-import-maps.d.ts

@@ -0,0 +1,3 @@
+import type { UserSessionServiceImportsProvider } from '@baseplate-dev/fastify-generators';
+export declare function createAuth0ModuleImports(importBase: string): UserSessionServiceImportsProvider;
+//# sourceMappingURL=ts-import-maps.d.ts.map

package/dist/auth0/generators/fastify/auth0-module/generated/ts-import-maps.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ts-import-maps.d.ts","sourceRoot":"","sources":["../../../../../../src/auth0/generators/fastify/auth0-module/generated/ts-import-maps.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iCAAiC,EAAE,MAAM,mCAAmC,CAAC;AAM3F,wBAAgB,wBAAwB,CACtC,UAAU,EAAE,MAAM,GACjB,iCAAiC,CAQnC"}

package/dist/auth0/generators/fastify/auth0-module/generated/ts-import-maps.js

@@ -0,0 +1,12 @@
+import { createTsImportMap } from '@baseplate-dev/core-generators';
+import { userSessionServiceImportsSchema } from '@baseplate-dev/fastify-generators';
+import path from 'node:path/posix';
+export function createAuth0ModuleImports(importBase) {
+    if (!importBase.startsWith('@/')) {
+        throw new Error('importBase must start with @/');
+    }
+    return createTsImportMap(userSessionServiceImportsSchema, {
+        userSessionService: path.join(importBase, 'user-session.service.js'),
+    });
+}
+//# sourceMappingURL=ts-import-maps.js.map

package/dist/auth0/generators/fastify/auth0-module/generated/ts-import-maps.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ts-import-maps.js","sourceRoot":"","sources":["../../../../../../src/auth0/generators/fastify/auth0-module/generated/ts-import-maps.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AACnE,OAAO,EAAE,+BAA+B,EAAE,MAAM,mCAAmC,CAAC;AACpF,OAAO,IAAI,MAAM,iBAAiB,CAAC;AAEnC,MAAM,UAAU,wBAAwB,CACtC,UAAkB;IAElB,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnD,CAAC;IAED,OAAO,iBAAiB,CAAC,+BAA+B,EAAE;QACxD,kBAAkB,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,yBAAyB,CAAC;KACrE,CAAC,CAAC;AACL,CAAC"}

package/dist/auth0/generators/fastify/auth0-module/generated/ts-templates.d.ts

@@ -0,0 +1,43 @@
+export declare const AUTH_0_AUTH_0_MODULE_TS_TEMPLATES: {
+    management: import("@baseplate-dev/core-generators").TsTemplateFile<{}, {
+        configServiceImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
+            config: {};
+        }>>;
+    }>;
+    userSessionService: import("@baseplate-dev/core-generators").TsTemplateFile<{
+        TPL_USER_MODEL: {};
+    }, {
+        authContextImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
+            AuthContext: {
+                isTypeOnly: true;
+            };
+            AuthSessionInfo: {
+                isTypeOnly: true;
+            };
+            AuthUserSessionInfo: {
+                isTypeOnly: true;
+            };
+            createAuthContextFromSessionInfo: {};
+            InvalidSessionError: {};
+        }>>;
+        authRolesImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
+            AuthRole: {
+                isTypeOnly: true;
+            };
+            DEFAULT_PUBLIC_ROLES: {};
+            DEFAULT_USER_ROLES: {};
+            RoleConfig: {
+                isTypeOnly: true;
+            };
+        }>>;
+        userSessionTypesImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
+            UserSessionPayload: {
+                isTypeOnly: true;
+            };
+            UserSessionService: {
+                isTypeOnly: true;
+            };
+        }>>;
+    }>;
+};
+//# sourceMappingURL=ts-templates.d.ts.map

package/dist/auth0/generators/fastify/auth0-module/generated/ts-templates.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ts-templates.d.ts","sourceRoot":"","sources":["../../../../../../src/auth0/generators/fastify/auth0-module/generated/ts-templates.ts"],"names":[],"mappings":"AA4BA,eAAO,MAAM,iCAAiC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAG7C,CAAC"}

package/dist/auth0/generators/fastify/auth0-module/generated/ts-templates.js

@@ -0,0 +1,25 @@
+import { createTsTemplateFile } from '@baseplate-dev/core-generators';
+import { authContextImportsProvider, authRolesImportsProvider, configServiceImportsProvider, userSessionTypesImportsProvider, } from '@baseplate-dev/fastify-generators';
+const management = createTsTemplateFile({
+    importMapProviders: { configServiceImports: configServiceImportsProvider },
+    name: 'management',
+    projectExports: {},
+    source: { path: 'management.ts' },
+    variables: {},
+});
+const userSessionService = createTsTemplateFile({
+    importMapProviders: {
+        authContextImports: authContextImportsProvider,
+        authRolesImports: authRolesImportsProvider,
+        userSessionTypesImports: userSessionTypesImportsProvider,
+    },
+    name: 'user-session-service',
+    projectExports: { userSessionService: {} },
+    source: { path: 'user-session.service.ts' },
+    variables: { TPL_USER_MODEL: {} },
+});
+export const AUTH_0_AUTH_0_MODULE_TS_TEMPLATES = {
+    management,
+    userSessionService,
+};
+//# sourceMappingURL=ts-templates.js.map

package/dist/auth0/generators/fastify/auth0-module/generated/ts-templates.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ts-templates.js","sourceRoot":"","sources":["../../../../../../src/auth0/generators/fastify/auth0-module/generated/ts-templates.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AACtE,OAAO,EACL,0BAA0B,EAC1B,wBAAwB,EACxB,4BAA4B,EAC5B,+BAA+B,GAChC,MAAM,mCAAmC,CAAC;AAE3C,MAAM,UAAU,GAAG,oBAAoB,CAAC;IACtC,kBAAkB,EAAE,EAAE,oBAAoB,EAAE,4BAA4B,EAAE;IAC1E,IAAI,EAAE,YAAY;IAClB,cAAc,EAAE,EAAE;IAClB,MAAM,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE;IACjC,SAAS,EAAE,EAAE;CACd,CAAC,CAAC;AAEH,MAAM,kBAAkB,GAAG,oBAAoB,CAAC;IAC9C,kBAAkB,EAAE;QAClB,kBAAkB,EAAE,0BAA0B;QAC9C,gBAAgB,EAAE,wBAAwB;QAC1C,uBAAuB,EAAE,+BAA+B;KACzD;IACD,IAAI,EAAE,sBAAsB;IAC5B,cAAc,EAAE,EAAE,kBAAkB,EAAE,EAAE,EAAE;IAC1C,MAAM,EAAE,EAAE,IAAI,EAAE,yBAAyB,EAAE;IAC3C,SAAS,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE;CAClC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,iCAAiC,GAAG;IAC/C,UAAU;IACV,kBAAkB;CACnB,CAAC"}

package/dist/auth0/generators/fastify/auth0-module/templates/management.ts

@@ -0,0 +1,22 @@
+// @ts-nocheck
+
+import { config } from '%configServiceImports';
+import { ManagementClient } from 'auth0';
+
+let cachedClient: ManagementClient | null = null;
+
+export function getAuth0ManagementClient(): ManagementClient {
+  if (cachedClient) {
+    return cachedClient;
+  }
+
+  const client = new ManagementClient({
+    domain: config.AUTH0_TENANT_DOMAIN,
+    clientId: config.AUTH0_CLIENT_ID,
+    clientSecret: config.AUTH0_CLIENT_SECRET,
+  });
+
+  cachedClient = client;
+
+  return client;
+}

package/dist/auth0/generators/fastify/auth0-module/templates/user-session.service.ts

@@ -0,0 +1,101 @@
+// @ts-nocheck
+
+import type { AuthUserSessionInfo } from '%authContextImports';
+import type { AuthRole } from '%authRolesImports';
+import type { UserSessionService } from '%userSessionTypesImports';
+import type { FastifyRequest } from 'fastify';
+
+import { DEFAULT_USER_ROLES } from '%authRolesImports';
+
+const USER_ID_CLAIM = 'https://app.com/user_id';
+const EMAIL_CLAIM = 'https://app.com/email';
+const EMAIL_VERIFIED_CLAIM = 'https://app.com/email_verified';
+const ROLES_CLAIM = 'https://app.com/roles';
+
+interface Auth0Jwt {
+  [USER_ID_CLAIM]?: string;
+  [EMAIL_CLAIM]?: string;
+  [EMAIL_VERIFIED_CLAIM]?: boolean;
+  [ROLES_CLAIM]?: string[];
+  sub: string;
+  email: string;
+  exp: number;
+}
+
+export class Auth0UserSessionService implements UserSessionService {
+  /**
+   * Retrieves the user session information from the request.
+   *
+   * @param req - The Fastify request object containing the cookies.
+   * @param reply - The Fastify reply object used to set or clear cookies.
+   * @param currentDate - The current date used for session validation. Defaults to the current date and time.
+   * @returns A promise that resolves to the authenticated user session information or null if the session is invalid.
+   * @throws {InvalidSessionError} If the session is invalid or expired.
+   */
+  async getSessionInfoFromRequest(
+    req: FastifyRequest,
+  ): Promise<AuthUserSessionInfo | undefined> {
+    if (!req.headers.authorization) {
+      return undefined;
+    }
+
+    const verifiedJwt = await req.jwtVerify<Auth0Jwt>();
+    const userId = verifiedJwt[USER_ID_CLAIM];
+    const roles = verifiedJwt[ROLES_CLAIM] ?? [];
+    const email = verifiedJwt[EMAIL_CLAIM];
+
+    if (!userId) {
+      throw new Error(`Missing user id in JWT`);
+    }
+
+    const user = await TPL_USER_MODEL.findUnique({ where: { id: userId } });
+
+    // create user if one does not exist already
+    if (!user) {
+      if (!email) {
+        throw new Error(`Missing email claim in JWT`);
+      }
+      // Use createMany to avoid race-conditions with creating the user
+      await TPL_USER_MODEL.createMany({
+        data: [
+          {
+            id: userId,
+            auth0Id: verifiedJwt.sub,
+            email,
+          },
+        ],
+        skipDuplicates: true,
+      });
+    }
+
+    return {
+      id: verifiedJwt.sub,
+      type: 'user',
+      userId,
+      roles: [...DEFAULT_USER_ROLES, ...roles] as AuthRole[],
+      expiresAt:
+        typeof verifiedJwt.exp === 'number'
+          ? new Date(verifiedJwt.exp * 1000)
+          : undefined,
+    };
+  }
+
+  /**
+   * Retrieves the user session information from the authentication token
+   *
+   * @param req The request object
+   * @returns The session info or undefined if no session is found
+   */
+  async getSessionInfoFromToken(
+    req: FastifyRequest,
+    token?: string | null,
+  ): Promise<AuthUserSessionInfo | undefined> {
+    // We have to manually add the header to the request since we can't
+    // use server.jwt.verify due to an error
+    req.headers.authorization = token ?? undefined;
+
+    return this.getSessionInfoFromRequest(req);
+  }
+}
+
+export const userSessionService = new Auth0UserSessionService();

package/dist/auth0/generators/fastify/index.d.ts

@@ -0,0 +1,2 @@
+export * from './auth0-module/auth0-module.generator.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/auth0/generators/fastify/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/auth0/generators/fastify/index.ts"],"names":[],"mappings":"AAAA,cAAc,0CAA0C,CAAC"}

package/dist/auth0/generators/fastify/index.js

@@ -0,0 +1,2 @@
+export * from './auth0-module/auth0-module.generator.js';
+//# sourceMappingURL=index.js.map

package/dist/auth0/generators/fastify/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/auth0/generators/fastify/index.ts"],"names":[],"mappings":"AAAA,cAAc,0CAA0C,CAAC"}

package/dist/auth0/generators/index.d.ts

@@ -0,0 +1,3 @@
+export * from './fastify/index.js';
+export * from './react/index.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/auth0/generators/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/auth0/generators/index.ts"],"names":[],"mappings":"AAAA,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC"}

package/dist/auth0/generators/index.js

@@ -0,0 +1,3 @@
+export * from './fastify/index.js';
+export * from './react/index.js';
+//# sourceMappingURL=index.js.map

package/dist/auth0/generators/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/auth0/generators/index.ts"],"names":[],"mappings":"AAAA,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC"}

package/dist/auth0/generators/react/auth0-apollo/auth0-apollo.generator.d.ts

@@ -0,0 +1,10 @@
+export declare const auth0ApolloGenerator: import("@baseplate-dev/sync").GeneratorBundleCreator<{}, {
+    main: import("@baseplate-dev/sync").GeneratorTask<any, {
+        reactApolloConfig: import("@baseplate-dev/sync").ProviderType<Omit<import("@baseplate-dev/utils").FieldMap<{
+            createApolloClientArguments: import("@baseplate-dev/utils").NamedArrayFieldContainer<import("@baseplate-dev/react-generators").ApolloCreateArgument>;
+            apolloLinks: import("@baseplate-dev/utils").NamedArrayFieldContainer<import("@baseplate-dev/react-generators").ApolloLink>;
+            websocketOptions: import("@baseplate-dev/utils").MapContainer<string, string | import("@baseplate-dev/core-generators").TsCodeFragment>;
+        }>, "getValues">>;
+    }, any>;
+}>;
+//# sourceMappingURL=auth0-apollo.generator.d.ts.map

package/dist/auth0/generators/react/auth0-apollo/auth0-apollo.generator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth0-apollo.generator.d.ts","sourceRoot":"","sources":["../../../../../src/auth0/generators/react/auth0-apollo/auth0-apollo.generator.ts"],"names":[],"mappings":"AAWA,eAAO,MAAM,oBAAoB;;;gDA6CsT,sBAAsB;gCAA0E,sBAAsB;qCAAqE,sBAAsB;;;EADtiB,CAAC"}